feat(attendance): add single-record edit and delete APIs

- Add PUT /attendance-records/:id to update status and remark
- Add DELETE /attendance-records/:id to remove a record
- Enforce campus scope on both operations
- Log edit/delete actions via OperationLogsService

apps/server/src/attendance/attendance.controller.ts

@@ -2,6 +2,8 @@ import {
   Controller,
   Get,
   Post,
+  Put,
+  Delete,
   Body,
   Param,
   Query,
@@ -19,6 +21,7 @@ import {
   QueryDingRawDto,
   MatchDingRecordDto,
   AttendanceReportQueryDto,
+  UpdateAttendanceRecordDto,
 } from './dto/attendance.dto';
 import { JwtAuthGuard } from '../auth/guards/jwt-auth.guard';
 import { OperationLogsService } from '../operation-logs/operation-logs.service';
@@ -117,6 +120,53 @@ export class AttendanceController {
     return this.service.findAll(query);
   }
 
+  // ── Update a single attendance record ──
+  @Put('attendance-records/:id')
+  @RequirePermission('attendance:edit')
+  async update(
+    @Param('id') id: string,
+    @Body() dto: UpdateAttendanceRecordDto,
+    @Request() req: any,
+  ) {
+    const { ipAddress, userAgent } = extractRequestInfo(req);
+    const result = await this.service.update(+id, dto);
+    await this.logService.log({
+      userId: req.user?.id,
+      username: req.user?.username,
+      module: '考勤管理',
+      action: '编辑考勤记录',
+      targetId: +id,
+      targetType: 'attendanceRecord',
+      detail: `状态=${result.status}, 备注=${result.remark || ''}`,
+      ipAddress,
+      userAgent,
+    });
+    return result;
+  }
+
+  // ── Delete a single attendance record ──
+  @Delete('attendance-records/:id')
+  @RequirePermission('attendance:edit')
+  async remove(
+    @Param('id') id: string,
+    @Request() req: any,
+  ) {
+    const { ipAddress, userAgent } = extractRequestInfo(req);
+    const result = await this.service.remove(+id);
+    await this.logService.log({
+      userId: req.user?.id,
+      username: req.user?.username,
+      module: '考勤管理',
+      action: '删除考勤记录',
+      targetId: +id,
+      targetType: 'attendanceRecord',
+      detail: `删除考勤记录 ${id}`,
+      ipAddress,
+      userAgent,
+    });
+    return result;
+  }
+
   // ── Get distinct classes with attendance records ──
   @Get('attendance-records/classes')
   @RequirePermission('attendance:view')