Skip to content
algos crm.

algos crm.

CRM Documentation

The same product docs available in the dashboard—guides for setup, architecture, modules, and day-to-day use.

Architecture
docs/architecture/overview.md PDF Download all

Architecture overview

High-level design of the multi-tenant CRM.

Stack

Layer Choice
Framework Laravel 12 / PHP 8.2+
Auth UI Laravel Breeze (session auth)
Tenant UI jeroennoten/laravel-AdminLTE 3
Super Admin UI Custom sa-app layout
RBAC Custom (config/permissions.php + PermissionRegistry) — not Spatie
Queues Database driver (default)
PDF barryvdh/laravel-dompdf (Super Admin exports)
Frontend build Vite

Logical layers

flowchart TB
  subgraph Clients
    M[Marketing site]
    T[Tenant CRM]
    S[Super Admin]
    W[External webhooks]
  end

  subgraph App
    R[Routes / Middleware]
    C[Controllers]
    P[Policies]
    SV[Services]
    J[Jobs]
    MD[Models + CompanyScope]
  end

  DB[(Database)]

  M --> R
  T --> R
  S --> R
  W --> R
  R --> C
  C --> P
  C --> SV
  SV --> MD
  J --> SV
  MD --> DB
  J --> DB

Route groups

Surface Entry Middleware highlights
Marketing routes/marketing.php Public
Tenant CRM routes/web.php auth, verified.when_required, active, company
Super Admin routes/superadmin.php auth, active, superadmin
Webhooks top of routes/web.php Throttle; CSRF exempt; no tenant session

There is no routes/api.php today. Integrations use webhooks. See API.

Request lifecycle (tenant)

sequenceDiagram
  participant U as User
  participant MW as Middleware
  participant CC as CurrentCompany
  participant Ctrl as Controller
  participant Pol as Policy
  participant M as Eloquent + CompanyScope

  U->>MW: Authenticated request
  MW->>CC: set(company_id)
  MW->>Ctrl: dispatch
  Ctrl->>Pol: authorize
  Ctrl->>M: query / mutate
  M-->>Ctrl: tenant-scoped rows
  Ctrl-->>U: AdminLTE view / redirect
  MW->>CC: clear() on terminate

Key directories

Path Responsibility
app/Support/CurrentCompany.php Request-scoped tenant id
app/Models/Concerns/BelongsToCompany.php Global scope + auto company_id
app/Services/PermissionRegistry.php Sync permissions from config
app/Services/Channels/* Omnichannel engine
app/Providers/ChannelServiceProvider.php Register channel adapters
app/Http/Middleware/EnsureCompanyContext.php Set/clear tenant; block suspended companies

Domains

Tenant CRM

Customers, leads (kanban), tasks, inbox, channels, reports, users/roles, company profile/settings, notifications, activity logs, CSV import/export.

Platform (Super Admin)

Companies, plans/limits, analytics, email templates, contact inquiries, platform settings/announcements, impersonation, Super Admin users.

Channels engine

channel_connections → signed/verified webhooks → channel_webhook_events → queued processing → leads / conversations / lead_channel_meta.

Design principles

  1. Tenant isolation by default — company scope on models; fail-closed in production without context.
  2. Authorize in policies — permission slugs {action}.{module}.
  3. Services over fat controllers — channel processing, plan limits, notifications.
  4. Queue inbound channel work — keep webhook HTTP fast (202 Accepted).
  5. Config-driven permissions & channel catalog — sync with Artisan; adapters register explicitly.

Related docs