Clock In

Start your own shift. Never anybody else's -- the principal comes from the session, and there is no parameter to name a different person.

A THIN CALLER of service.clock_in, the one clock-in. Frederick, 2026-10-04: "Why isn't it only one flow for her floor, floor block and clocking out? It doesn't make sense for it to be two paths." This door and POST /api/floor/clock-in differ only in what they say to the person: the device gate and the words of a refusal, and how an error is spelled on the wire. Whether the person holds a floor block, whether a tub count is owed, what the early/late window is measured against -- none of that is decided here.

⛔WORKSTATION-ONLY ROLES CLOCK IN AT A WORKSTATION, THROUGH THE CONTRACTOR'S OWN GATE. Frederick, 2026-09-22: "the people in Vegas can only clock in from the workstations in Vegas." floor_blocks.clock. check_device_gate holds a floor person to the office network or a registered workstation; floor_clock.workstation_surface_for is the ONE question of who that covers -- an on-site ROLE (shifts.domain. ON_SITE_ROLES) and, since 2026-10-04, a floor CONTRACTOR, who this door never asked (they hold no on-site role; the Today bar sent them to /floor/clock, which hid the hole). Customer service is not on site and is not asked: "customer service people can clock in from home." Every refusal is recorded (enforce_device_gate) so William sees who tried.