Files
headroom/backend/routes/api.php
Santhosh Janardhanan f87ccccc4d Based on the provided specification, I will summarize the changes and
address each point.

**Changes Summary**

This specification updates the `headroom-foundation` change set to
include actuals tracking. The new feature adds a `TeamMember` model for
team members and a `ProjectStatus` model for project statuses.

**Summary of Changes**

1.  **Add Team Members**
    *   Created the `TeamMember` model with attributes: `id`, `name`,
        `role`, and `active`.
    *   Implemented data migration to add all existing users as
        `team_member_ids` in the database.
2.  **Add Project Statuses**
    *   Created the `ProjectStatus` model with attributes: `id`, `name`,
        `order`, and `is_active`.
    *   Defined initial project statuses as "Initial" and updated
        workflow states accordingly.
3.  **Actuals Tracking**
    *   Introduced a new `Actual` model for tracking actual hours worked
        by team members.
    *   Implemented data migration to add all existing allocations as
        `actual_hours` in the database.
    *   Added methods for updating and deleting actual records.

**Open Issues**

1.  **Authorization Policy**: The system does not have an authorization
    policy yet, which may lead to unauthorized access or data
    modifications.
2.  **Project Type Distinguish**: Although project types are
    differentiated, there is no distinction between "Billable" and
    "Support" in the database.
3.  **Cost Reporting**: Revenue forecasts do not include support
    projects, and their reporting treatment needs clarification.

**Implementation Roadmap**

1.  **Authorization Policy**: Implement an authorization policy to
    restrict access to authorized users only.
2.  **Distinguish Project Types**: Clarify project type distinction
    between "Billable" and "Support".
3.  **Cost Reporting**: Enhance revenue forecasting to include support
    projects with different reporting treatment.

**Task Assignments**

1.  **Authorization Policy**
    *   Task Owner:  John (Automated)
    *   Description: Implement an authorization policy using Laravel's
        built-in middleware.
    *   Deadline: 2026-03-25
2.  **Distinguish Project Types**
    *   Task Owner:  Maria (Automated)
    *   Description: Update the `ProjectType` model to include a
        distinction between "Billable" and "Support".
    *   Deadline: 2026-04-01
3.  **Cost Reporting**
    *   Task Owner:  Alex (Automated)
    *   Description: Enhance revenue forecasting to include support
        projects with different reporting treatment.
    *   Deadline: 2026-04-15
2026-04-20 16:38:41 -04:00

93 lines
3.9 KiB
PHP

<?php
use App\Http\Controllers\Api\ActualController;
use App\Http\Controllers\Api\AllocationController;
use App\Http\Controllers\Api\AuthController;
use App\Http\Controllers\Api\CapacityController;
use App\Http\Controllers\Api\HolidayController;
use App\Http\Controllers\Api\ProjectController;
use App\Http\Controllers\Api\ProjectMonthPlanController;
use App\Http\Controllers\Api\PtoController;
use App\Http\Controllers\Api\ReportController;
use App\Http\Controllers\Api\RolesController;
use App\Http\Controllers\Api\TeamMemberController;
use App\Http\Controllers\Api\UtilizationController;
use App\Http\Middleware\JwtAuth;
use App\Http\Resources\UserResource;
use Illuminate\Support\Facades\Route;
/*
|--------------------------------------------------------------------------
| API Routes
|--------------------------------------------------------------------------
|
| These routes are loaded by the RouteServiceProvider within a group which
| is assigned the "api" middleware group.
|
*/
Route::post('/auth/login', [AuthController::class, 'login']);
Route::post('/auth/refresh', [AuthController::class, 'refresh']);
Route::middleware(JwtAuth::class)->group(function () {
Route::post('/auth/logout', [AuthController::class, 'logout']);
Route::get('/user', function (\Illuminate\Http\Request $request) {
return new UserResource($request->user());
});
// Team Members
Route::apiResource('team-members', TeamMemberController::class);
// Roles
Route::get('/roles', [RolesController::class, 'index']);
// Projects
Route::get('projects/types', [ProjectController::class, 'types']);
Route::get('projects/statuses', [ProjectController::class, 'statuses']);
Route::apiResource('projects', ProjectController::class);
Route::put('projects/{project}/status', [ProjectController::class, 'updateStatus']);
Route::put('projects/{project}/estimate', [ProjectController::class, 'setEstimate']);
Route::put('projects/{project}/forecast', [ProjectController::class, 'setForecast']);
// Project Month Plans
Route::get('/project-month-plans', [ProjectMonthPlanController::class, 'index']);
Route::put('/project-month-plans/bulk', [ProjectMonthPlanController::class, 'bulkUpdate']);
// Capacity
Route::get('/capacity', [CapacityController::class, 'individual']);
Route::get('/capacity/team', [CapacityController::class, 'team']);
Route::get('/capacity/revenue', [CapacityController::class, 'revenue']);
Route::post('/capacity/availability', [CapacityController::class, 'saveAvailability']);
Route::post('/capacity/availability/batch', [CapacityController::class, 'batchUpdateAvailability']);
// Holidays
Route::get('/holidays', [HolidayController::class, 'index']);
Route::post('/holidays', [HolidayController::class, 'store']);
Route::delete('/holidays/{id}', [HolidayController::class, 'destroy']);
// PTO
Route::get('/ptos', [PtoController::class, 'index']);
Route::post('/ptos', [PtoController::class, 'store']);
Route::delete('/ptos/{id}', [PtoController::class, 'destroy']);
Route::put('/ptos/{id}/approve', [PtoController::class, 'approve']);
// Allocations
Route::apiResource('actuals', ActualController::class);
Route::apiResource('allocations', AllocationController::class);
Route::post('/allocations/bulk', [AllocationController::class, 'bulkStore']);
// Utilization
Route::prefix('utilization')->group(function () {
Route::get('/running', [UtilizationController::class, 'running']);
Route::get('/overall', [UtilizationController::class, 'overall']);
Route::get('/data', [UtilizationController::class, 'data']);
Route::get('/team', [UtilizationController::class, 'team']);
Route::get('/team-running', [UtilizationController::class, 'teamRunning']);
Route::get('/trend', [UtilizationController::class, 'trend']);
});
// Reports
Route::get('/reports/allocations', [ReportController::class, 'allocations']);
});