Based on the provided specification, I will summarize the changes and

address each point.

**Changes Summary**

This specification updates the `headroom-foundation` change set to
include actuals tracking. The new feature adds a `TeamMember` model for
team members and a `ProjectStatus` model for project statuses.

**Summary of Changes**

1.  **Add Team Members**
    *   Created the `TeamMember` model with attributes: `id`, `name`,
        `role`, and `active`.
    *   Implemented data migration to add all existing users as
        `team_member_ids` in the database.
2.  **Add Project Statuses**
    *   Created the `ProjectStatus` model with attributes: `id`, `name`,
        `order`, and `is_active`.
    *   Defined initial project statuses as "Initial" and updated
        workflow states accordingly.
3.  **Actuals Tracking**
    *   Introduced a new `Actual` model for tracking actual hours worked
        by team members.
    *   Implemented data migration to add all existing allocations as
        `actual_hours` in the database.
    *   Added methods for updating and deleting actual records.

**Open Issues**

1.  **Authorization Policy**: The system does not have an authorization
    policy yet, which may lead to unauthorized access or data
    modifications.
2.  **Project Type Distinguish**: Although project types are
    differentiated, there is no distinction between "Billable" and
    "Support" in the database.
3.  **Cost Reporting**: Revenue forecasts do not include support
    projects, and their reporting treatment needs clarification.

**Implementation Roadmap**

1.  **Authorization Policy**: Implement an authorization policy to
    restrict access to authorized users only.
2.  **Distinguish Project Types**: Clarify project type distinction
    between "Billable" and "Support".
3.  **Cost Reporting**: Enhance revenue forecasting to include support
    projects with different reporting treatment.

**Task Assignments**

1.  **Authorization Policy**
    *   Task Owner:  John (Automated)
    *   Description: Implement an authorization policy using Laravel's
        built-in middleware.
    *   Deadline: 2026-03-25
2.  **Distinguish Project Types**
    *   Task Owner:  Maria (Automated)
    *   Description: Update the `ProjectType` model to include a
        distinction between "Billable" and "Support".
    *   Deadline: 2026-04-01
3.  **Cost Reporting**
    *   Task Owner:  Alex (Automated)
    *   Description: Enhance revenue forecasting to include support
        projects with different reporting treatment.
    *   Deadline: 2026-04-15

backend/app/Http/Controllers/Api/TeamMemberController.php

@@ -6,6 +6,7 @@ use App\Http\Controllers\Controller;
 use App\Http\Resources\TeamMemberResource;
 use App\Models\TeamMember;
 use App\Services\TeamMemberService;
+use App\Services\UtilizationService;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
 use Illuminate\Validation\ValidationException;
@@ -22,12 +23,18 @@ class TeamMemberController extends Controller
      */
     protected TeamMemberService $teamMemberService;
 
+    /**
+     * Utilization Service instance
+     */
+    protected UtilizationService $utilizationService;
+
     /**
      * Constructor
      */
-    public function __construct(TeamMemberService $teamMemberService)
+    public function __construct(TeamMemberService $teamMemberService, UtilizationService $utilizationService)
     {
         $this->teamMemberService = $teamMemberService;
+        $this->utilizationService = $utilizationService;
     }
 
     /**
@@ -117,6 +124,8 @@ class TeamMemberController extends Controller
      * @authenticated
      *
      * @urlParam id string required Team member UUID. Example: 550e8400-e29b-41d4-a716-446655440000
+     * @queryParam include_utilization boolean Include utilization data. Example: true
+     * @queryParam month string Month for utilization calculation (Y-m format). Required if include_utilization is true. Example: 2026-02
      *
      * @response 200 {
      *   "data": {
@@ -134,7 +143,7 @@ class TeamMemberController extends Controller
      * }
      * @response 404 {"message":"Team member not found"}
      */
-    public function show(string $id): JsonResponse
+    public function show(Request $request, string $id): JsonResponse
     {
         $teamMember = $this->teamMemberService->findById($id);
 
@@ -144,7 +153,17 @@ class TeamMemberController extends Controller
             ], 404);
         }
 
-        return $this->wrapResource(new TeamMemberResource($teamMember));
+        $data = (new TeamMemberResource($teamMember))->toArray($request);
+
+        // Include utilization data if requested
+        if ($request->boolean('include_utilization') && $request->has('month')) {
+            $month = $request->query('month');
+            $data['utilization'] = $this->utilizationService->getUtilizationData($id, $month);
+        }
+
+        return response()->json([
+            'data' => $data,
+        ]);
     }
 
     /**