Sigma HRM
Attendance & HR backend · production
Database
connected mysql · hrm · v10.11.18-MariaDB-cll-lve
Build roadmap
| P0 | Tenancy foundation + auth core | done |
| P1 | Queue tenancy (TenantJob) | done |
| P2 | RBAC + AccessScope + audit | done |
| P3 | Org + Employee master | done |
| P4 | Approval engine | done |
| P5 | Shift/roster + attendance policy | done |
| P6 | Leave management | done |
| P7 | Payroll | done |
| P8a | Delivery API + notifications + docs | done |
| P8b | Filament admin panel | done |
| P9 | Tenant provisioning | done |
Schema · 71 domain tables
| approval_action | 0 |
| approval_assignment | 0 |
| approval_request | 0 |
| approval_step | 0 |
| approval_workflow | 0 |
| attendance_day | 0 |
| attendance_photo_upload | 0 |
| attendance_policy | 0 |
| attendance_punch | 0 |
| attendance_regularization | 0 |
| audit_log | 0 |
| branches | 0 |
| companies | 0 |
| cost_centers | 0 |
| departments | 0 |
| designations | 0 |
| device_enrollment | 0 |
| employees | 0 |
| employee_assignment | 0 |
| employee_bank_account | 0 |
| employee_document | 0 |
| employee_loan | 0 |
| employee_loan_txn | 0 |
| employee_salary | 0 |
| employee_salary_component | 0 |
| employee_skill | 0 |
| employee_statutory_profile | 0 |
| fbp_entitlement | 0 |
| gate_device | 0 |
| gate_device_nonce | 0 |
| gate_identification | 0 |
| grade_bands | 0 |
| holiday_master | 0 |
| hrm_tenants | 1 |
| idempotency_key | 0 |
| job_opening | 0 |
| leave_ledger | 0 |
| leave_period | 0 |
| leave_policy | 0 |
| leave_request | 0 |
| leave_request_day | 0 |
| leave_type | 0 |
| notification_outbox | 0 |
| notification_preference | 0 |
| overtime_request | 0 |
| payroll_ledger | 0 |
| payroll_policy | 0 |
| payroll_remittance | 0 |
| payroll_run | 0 |
| payslip | 0 |
| payslip_line | 0 |
| platform_admins | 0 |
| reimbursement_claim | 0 |
| reporting_line | 0 |
| roles | 0 |
| role_capabilities | 0 |
| shift_exception | 0 |
| shift_master | 0 |
| shift_pattern | 0 |
| shift_pattern_day | 0 |
| skill | 0 |
| statutory_rate | 0 |
| tax_declaration | 0 |
| tax_declaration_item | 0 |
| tax_declaration_proof | 0 |
| tenant_identity | 0 |
| tenant_provision_run | 6 |
| weekly_off_pattern | 0 |
| workers | 0 |
| worker_shift_assignment | 0 |
| worker_shift_pattern | 0 |
API endpoints · require Authorization: Bearer <SSO JWT>
| POST | /api/attendance/gate-punch | Gate-device punch (HMAC-signed terminal) |
| POST | /api/hrm/v1/attendance/operator/punch | Operator-attended punch (operate_gate) |
| GET | /api/attendance/today | Today's session + rollup |
| GET | /api/attendance/history | Date-range day rollups |
| POST | /api/devices/enroll | Enroll a device |
JSON API backend — no web login yet (the Filament admin + /api/hrm land in Phase 8). Phases 0–2 added tenant isolation, queue safety, RBAC, and audit as service-layer + schema; hitting an API endpoint in a browser returns 401 missing_token.