Sigma HRM

Attendance & HR backend · production

Database

connected mysql · hrm · v10.11.18-MariaDB-cll-lve

Build roadmap

P0Tenancy foundation + auth coredone
P1Queue tenancy (TenantJob)done
P2RBAC + AccessScope + auditdone
P3Org + Employee masterdone
P4Approval enginedone
P5Shift/roster + attendance policydone
P6Leave managementdone
P7Payrolldone
P8aDelivery API + notifications + docsdone
P8bFilament admin paneldone
P9Tenant provisioningdone

Schema · 71 domain tables

approval_action0
approval_assignment0
approval_request0
approval_step0
approval_workflow0
attendance_day0
attendance_photo_upload0
attendance_policy0
attendance_punch0
attendance_regularization0
audit_log0
branches0
companies0
cost_centers0
departments0
designations0
device_enrollment0
employees0
employee_assignment0
employee_bank_account0
employee_document0
employee_loan0
employee_loan_txn0
employee_salary0
employee_salary_component0
employee_skill0
employee_statutory_profile0
fbp_entitlement0
gate_device0
gate_device_nonce0
gate_identification0
grade_bands0
holiday_master0
hrm_tenants1
idempotency_key0
job_opening0
leave_ledger0
leave_period0
leave_policy0
leave_request0
leave_request_day0
leave_type0
notification_outbox0
notification_preference0
overtime_request0
payroll_ledger0
payroll_policy0
payroll_remittance0
payroll_run0
payslip0
payslip_line0
platform_admins0
reimbursement_claim0
reporting_line0
roles0
role_capabilities0
shift_exception0
shift_master0
shift_pattern0
shift_pattern_day0
skill0
statutory_rate0
tax_declaration0
tax_declaration_item0
tax_declaration_proof0
tenant_identity0
tenant_provision_run6
weekly_off_pattern0
workers0
worker_shift_assignment0
worker_shift_pattern0

API endpoints · require Authorization: Bearer <SSO JWT>

POST/api/attendance/gate-punchGate-device punch (HMAC-signed terminal)
POST/api/hrm/v1/attendance/operator/punchOperator-attended punch (operate_gate)
GET/api/attendance/todayToday's session + rollup
GET/api/attendance/historyDate-range day rollups
POST/api/devices/enrollEnroll a device

JSON API backend — no web login yet (the Filament admin + /api/hrm land in Phase 8). Phases 0–2 added tenant isolation, queue safety, RBAC, and audit as service-layer + schema; hitting an API endpoint in a browser returns 401 missing_token.