API

HR API

JWT + permission guard.

GET/POST /api/v1/hr/employees
GET      /api/v1/hr/employees/:id
GET/POST /api/v1/hr/leave-requests
GET/POST /api/v1/hr/expense-claims
GET/POST /api/v1/hr/onboarding/intakes
GET/POST /api/v1/hr/assets/assignments

External HR access should be purpose-specific, minimized and auditable.