API Gateway — All services accessible from one place
access_token from the responseLogin, logout, refresh, user management. 8 roles: director, accountant, design, office, supervisor, projectmanager, consultant, client.
Immutable event log. POST via X-Service-Key (internal only). GET requires director JWT. No update or delete — ever.
Projects, milestones, activities, weighted progress, site reports, consultant instructions, procurement, stores, drawings, RFIs, safety, quality.
Staff profiles, project assignments, attendance (Saturday blocked), 9-metric KPI scores, wages, leave requests, welfare issuances.
Email notifications — 11 templates: report alerts, instruction overdue, stock low, milestone late, wage due, payment overdue, safety incidents.
Transactions, budgets, invoices. Director + accountant access only. Dashboard: contract value, collections, costs, margins.
CEO dashboard, board analysis, announcements (public), client portal, background jobs: instruction overdue, milestone late, stock low, wages due.