SIMPLEBACK-34: Add sync API for patient scores (read-only)

- Add migration to create patient_scores table (with existence check)
- Add PatientScore model with Mergeable concern
- Add Api::V4::PatientScoresController with sync_to_user only
- Add PatientScoreTransformer for response transformation
- Add patient_score schema to Api::V4::Models
- Add GET route for /patient_scores/sync
- Add factory and controller spec for patient_scores (sync_to_user only)

Author: sshinde-rtsl

app/controllers/api/v4/patient_scores_controller.rb

@@ -0,0 +1,11 @@
+class Api::V4::PatientScoresController < Api::V4::SyncController
+  def sync_to_user
+    __sync_to_user__("patient_scores")
+  end
+
+  private
+
+  def transform_to_response(patient_score)
+    Api::V4::PatientScoreTransformer.to_response(patient_score)
+  end
+end

app/models/patient_score.rb

@@ -0,0 +1,13 @@
+class PatientScore < ApplicationRecord
+  include Mergeable
+  include Discard::Model
+
+  belongs_to :patient, optional: true
+
+  validates :device_created_at, presence: true
+  validates :device_updated_at, presence: true
+  validates :score_type, presence: true
+  validates :score_value, presence: true, numericality: true
+
+  scope :for_sync, -> { with_discarded }
+end

app/schema/api/v4/models.rb

@@ -117,6 +117,20 @@ def patient_attribute
        required: %w[id patient_id height weight created_at updated_at]}
     end
 
+    def patient_score
+      {type: :object,
+       properties: {
+         id: {"$ref" => "#/definitions/uuid"},
+         patient_id: {"$ref" => "#/definitions/uuid"},
+         score_type: {"$ref" => "#/definitions/non_empty_string"},
+         score_value: {type: :number},
+         deleted_at: {"$ref" => "#/definitions/nullable_timestamp"},
+         created_at: {"$ref" => "#/definitions/timestamp"},
+         updated_at: {"$ref" => "#/definitions/timestamp"}
+       },
+       required: %w[id patient_id score_type score_value created_at updated_at]}
+    end
+
     def patient_phone_number
       {
         type: :object,
@@ -458,6 +472,8 @@ def definitions
         patient: patient,
         patient_attribute: patient_attribute,
         patient_attributes: Api::CommonDefinitions.array_of("patient_attribute"),
+        patient_score: patient_score,
+        patient_scores: Api::CommonDefinitions.array_of("patient_score"),
         patient_business_identifier: Api::V3::Models.patient_business_identifier,
         patient_business_identifiers: Api::CommonDefinitions.array_of("patient_business_identifier"),
         phone_number: Api::V3::Models.phone_number,

app/transformers/api/v4/patient_score_transformer.rb

@@ -0,0 +1,19 @@
+class Api::V4::PatientScoreTransformer < Api::V4::Transformer
+  class << self
+    def to_response(payload)
+      super(payload)
+        .merge({
+          "score_type" => payload["score_type"],
+          "score_value" => payload["score_value"].to_f
+        })
+    end
+
+    def from_request(payload)
+      super(payload)
+        .merge({
+          "score_type" => payload["score_type"],
+          "score_value" => payload["score_value"].to_f
+        })
+    end
+  end
+end

config/routes.rb

@@ -71,6 +71,10 @@
       get "sync", to: "cvd_risks#sync_to_user"
       post "sync", to: "cvd_risks#sync_from_user"
     end
+
+    scope :patient_scores do
+      get "sync", to: "patient_scores#sync_to_user"
+    end
   end
 
   namespace :webview do

db/migrate/20260209112204_create_patient_scores.rb

@@ -0,0 +1,24 @@
+class CreatePatientScores < ActiveRecord::Migration[6.1]
+  def change
+    unless table_exists?(:patient_scores)
+      create_table :patient_scores, id: :uuid do |t|
+        t.references :patient, null: false, foreign_key: true, type: :uuid
+        t.string :score_type, null: false, limit: 100
+        t.decimal :score_value, precision: 5, scale: 2, null: false
+        t.datetime :device_created_at, null: false
+        t.datetime :device_updated_at, null: false
+        t.datetime :deleted_at
+
+        t.timestamps
+      end
+    end
+
+    unless index_exists?(:patient_scores, [:patient_id, :score_type])
+      add_index :patient_scores, [:patient_id, :score_type]
+    end
+
+    unless index_exists?(:patient_scores, :updated_at)
+      add_index :patient_scores, :updated_at
+    end
+  end
+end

db/structure.sql

@@ -1959,6 +1959,23 @@ CREATE TABLE public.patient_phone_numbers (
 );
 
 
+--
+-- Name: patient_scores; Type: TABLE; Schema: public; Owner: -
+--
+
+CREATE TABLE public.patient_scores (
+    id uuid NOT NULL,
+    patient_id uuid NOT NULL,
+    score_type character varying(100) NOT NULL,
+    score_value numeric(5,2) NOT NULL,
+    device_created_at timestamp without time zone NOT NULL,
+    device_updated_at timestamp without time zone NOT NULL,
+    deleted_at timestamp without time zone,
+    created_at timestamp(6) without time zone NOT NULL,
+    updated_at timestamp(6) without time zone NOT NULL
+);
+
+
 --
 -- Name: prescription_drugs; Type: TABLE; Schema: public; Owner: -
 --
@@ -6596,6 +6613,14 @@ ALTER TABLE ONLY public.patient_phone_numbers
     ADD CONSTRAINT patient_phone_numbers_pkey PRIMARY KEY (id);
 
 
+--
+-- Name: patient_scores patient_scores_pkey; Type: CONSTRAINT; Schema: public; Owner: -
+--
+
+ALTER TABLE ONLY public.patient_scores
+    ADD CONSTRAINT patient_scores_pkey PRIMARY KEY (id);
+
+
 --
 -- Name: patients patients_pkey; Type: CONSTRAINT; Schema: public; Owner: -
 --
@@ -7699,6 +7724,20 @@ CREATE INDEX index_patient_phone_numbers_on_dnd_status ON public.patient_phone_n
 CREATE INDEX index_patient_phone_numbers_on_patient_id ON public.patient_phone_numbers USING btree (patient_id);
 
 
+--
+-- Name: index_patient_scores_on_patient_id_and_score_type; Type: INDEX; Schema: public; Owner: -
+--
+
+CREATE INDEX index_patient_scores_on_patient_id_and_score_type ON public.patient_scores USING btree (patient_id, score_type);
+
+
+--
+-- Name: index_patient_scores_on_updated_at; Type: INDEX; Schema: public; Owner: -
+--
+
+CREATE INDEX index_patient_scores_on_updated_at ON public.patient_scores USING btree (updated_at);
+
+
 --
 -- Name: index_patient_registrations_per_day_per_facilities; Type: INDEX; Schema: public; Owner: -
 --
@@ -8242,6 +8281,14 @@ ALTER TABLE ONLY public.patient_phone_numbers
     ADD CONSTRAINT fk_rails_0145dd0b05 FOREIGN KEY (patient_id) REFERENCES public.patients(id);
 
 
+--
+-- Name: patient_scores fk_rails_0209112204; Type: FK CONSTRAINT; Schema: public; Owner: -
+--
+
+ALTER TABLE ONLY public.patient_scores
+    ADD CONSTRAINT fk_rails_0209112204 FOREIGN KEY (patient_id) REFERENCES public.patients(id);
+
+
 --
 -- Name: facility_groups fk_rails_0ba9e6af98; Type: FK CONSTRAINT; Schema: public; Owner: -
 --
@@ -8802,5 +8849,6 @@ INSERT INTO "schema_migrations" (version) VALUES
 ('20251211154907'),
 ('20251215113615'),
 ('20251219061210'),
-('20260128094448');
+('20260128094448'),
+('20260209112204');
 

spec/controllers/api/v4/patient_scores_controller_spec.rb

@@ -0,0 +1,27 @@
+require "rails_helper"
+
+describe Api::V4::PatientScoresController, type: :controller do
+  let(:request_user) { create(:user) }
+  let(:request_facility_group) { request_user.facility.facility_group }
+  let(:request_facility) { create(:facility, facility_group: request_facility_group) }
+  let(:model) { PatientScore }
+
+  def create_record(options = {})
+    facility = create(:facility, facility_group: request_facility_group)
+    patient = create(:patient, registration_facility: facility)
+    create(:patient_score, options.merge(patient: patient))
+  end
+
+  def create_record_list(n, options = {})
+    facility = create(:facility, facility_group_id: request_facility_group.id)
+    patient = create(:patient, registration_facility_id: facility.id)
+    create_list(:patient_score, n, options.merge(patient: patient))
+  end
+
+  it_behaves_like "a sync controller that authenticates user requests: sync_to_user"
+  it_behaves_like "a sync controller that audits the data access: sync_to_user"
+
+  describe "GET sync: send data from server to device;" do
+    it_behaves_like "a working V3 sync controller sending records"
+  end
+end

spec/factories/patient_scores.rb

@@ -0,0 +1,10 @@
+FactoryBot.define do
+  factory :patient_score do
+    id { SecureRandom.uuid }
+    patient
+    score_type { "risk_score" }
+    score_value { 75.50 }
+    device_created_at { Time.current }
+    device_updated_at { Time.current }
+  end
+end