GET /api/project-templates

Responses

Security: bearer

POST /api/project-templates — stores a blueprint (spec validated); emits `project.template_updated`.

Request body

CreateTemplateRequest

Responses

Security: bearer

PATCH /api/project-templates/{id} — emits `project.template_updated`.

Parameters

Request body

PatchTemplateRequest

Responses

Security: bearer

DELETE /api/project-templates/{id} — blueprints are data, not live references: projects already instantiated are untouched; emits `project.template_removed`.

Parameters

Responses

Security: bearer

POST /api/project-templates/{id}/instantiate — expands the template into a REAL project: phases, tasks, dependencies, and every lifecycle event, all in ONE transaction (claim → expand → insert → events → record). Rollback on any failure leaves zero partial rows.

Parameters

Request body

InstantiateTemplateRequest

Responses

Security: bearer

GET /api/project-views — one project's views, or all org views when `project_id` is omitted.

Parameters

Responses

Security: bearer

POST /api/project-views — saves a view; emits `project.view_updated`.

Request body

CreateViewRequest

Responses

Security: bearer

PATCH /api/project-views/{id} — renames / respecs a view; emits `project.view_updated`.

Parameters

Request body

PatchViewRequest

Responses

Security: bearer

DELETE /api/project-views/{id} — emits `project.view_removed`.

Parameters

Responses

Security: bearer

GET /api/projects — filtered, newest-first list.

Parameters

Responses

Security: bearer

POST /api/projects — creates the project and emits `project.created` in one transaction. Instant-first (IF1/IF2): idempotency-keyed, version-gated, read-your-write response.

Request body

CreateProjectRequest

Responses

Security: bearer

GET /api/projects/{id}

Parameters

Responses

Security: bearer

PATCH /api/projects/{id} — tri-state partial update. Instant-first (IF1/IF2): idempotency-keyed, version-gated, returns prior + new values.

Parameters

Request body

PatchProjectRequest

Responses

Security: bearer

GET /api/projects/{id}/billing-releases — the release ledger: every staged milestone/fee for this project with its status (`pending` bills on the next run reaching its window; `billed` carries the consuming invoice; `cancelled` terminal).

Parameters

Responses

Security: bearer

POST /api/projects/{id}/billing-releases/{release_id}/cancel — cancel a PENDING release (admin correction; terminal). Billed releases are immutable — they ride an invoice, and invoices correct through credit notes.

Parameters

Responses

Security: bearer

GET /api/projects/{id}/gantt — the dated timeline plus its undated remainder, each phase carrying its budget burn.

Parameters

Responses

Security: bearer

GET /api/projects/{id}/phase-burn — the burn read model (report P3): consumed approved billable minutes and card-priced value per phase against the phase's budget, with the typed `none | warn | over` alert state (`warn` at ≥80%, `over` at ≥100%).

Parameters

Responses

Security: bearer

GET /api/projects/{id}/phases — ordered by sort_order.

Parameters

Responses

Security: bearer

POST /api/projects/{id}/phases — adds a phase; emits `project.phase_created`.

Parameters

Request body

CreatePhaseRequest

Responses

Security: bearer

PATCH /api/projects/{id}/phases/{phase_id} — tri-state partial update.

Parameters

Request body

PatchPhaseRequest

Responses

Security: bearer

POST /api/projects/{id}/phases/{phase_id}/complete — stamps the phase completed and, when it is a billing milestone, emits `project.milestone_completed` in the same transaction (the core-billing seam). Instant-first: the idempotency key guarantees a retried completion can never double-emit the billing event.

Parameters

Request body

MutationParams

Responses

Security: bearer

GET /api/projects/{id}/tasks — filtered by phase/status/assignee and the milestone flag, sort_order-ordered.

Parameters

Responses

Security: bearer

POST /api/projects/{id}/tasks — creates the task (optionally with its dependency set) and emits `project.task_created` in one transaction.

Parameters

Request body

CreateTaskRequest

Responses

Security: bearer

PATCH /api/projects/{id}/tasks/{task_id} — tri-state partial update. `status: "completed"` is rejected: completion runs through the complete endpoint (dependency gating + the billing seam).

Parameters

Request body

PatchTaskRequest

Responses

Security: bearer

POST /api/projects/{id}/tasks/{task_id}/complete — the guarded completion: every finish-to-start dependency must already be completed (typed 409 `task_dependencies_unsatisfied` naming the blockers), then `project.task_completed` fires — plus `project.milestone_completed` when the task is a billing milestone. Instant-first: the idempotency key makes retried completions replay instead of double-billing.

Parameters

Request body

MutationParams

Responses

Security: bearer

GET /api/projects/{id}/tasks/{task_id}/dependencies

Parameters

Responses

Security: bearer

PUT /api/projects/{id}/tasks/{task_id}/dependencies — replaces the whole dependency set, cycle-checked over the project graph BEFORE any write; emits `project.task_updated`.

Parameters

Request body

SetDependenciesRequest

Responses

Security: bearer