trueppm-api 0.4.0b2__py3-none-any.whl

trueppm_api/apps/projects/urls.py

@@ -0,0 +1,1011 @@
+"""URL routing for the projects app."""
+
+from __future__ import annotations
+
+from django.urls import path
+from rest_framework.routers import DefaultRouter
+
+from trueppm_api.apps.integrations.views import TaskLinkViewSet
+from trueppm_api.apps.projects.asset_views import (
+    ProgramAssetsView,
+    ProjectAssetsView,
+    WorkspaceAssetsView,
+)
+from trueppm_api.apps.projects.backlog_views import BacklogItemViewSet
+from trueppm_api.apps.projects.batch_operation_views import (
+    CascadeClassificationOperationViewSet,
+    PasteManyOperationViewSet,
+)
+from trueppm_api.apps.projects.board_activity_views import BoardActivityView
+from trueppm_api.apps.projects.ceremony_views import (
+    CeremonyTemplateViewSet,
+    PhaseGateConfigView,
+    ProjectGuardrailPolicyView,
+)
+from trueppm_api.apps.projects.decisions_views import ProjectDecisionsPolicyView
+from trueppm_api.apps.projects.poker_views import (
+    PokerCancelView,
+    PokerCommitView,
+    PokerReopenView,
+    PokerRevealView,
+    PokerVoteView,
+    SprintPokerView,
+)
+from trueppm_api.apps.projects.program_label_views import (
+    ProgramLabelCatalogView,
+    ProgramLabelTaskViewSet,
+)
+from trueppm_api.apps.projects.program_views import ProgramViewSet
+from trueppm_api.apps.projects.share_views import (
+    ProjectShareLinkListCreateView,
+    ProjectShareLinkRevokeView,
+    PublicBoardShareView,
+    PublicScheduleShareView,
+)
+from trueppm_api.apps.projects.signal_privacy_views import (
+    SignalCeilingProposalListView,
+    SignalCeilingProposalVoteView,
+    SignalCeilingProposalWithdrawView,
+    SignalPrivacyPolicyView,
+    SignalPrivacyRaiseCeilingView,
+    SignalPrivacyRatchetDownView,
+)
+from trueppm_api.apps.projects.standup_views import StandupView
+from trueppm_api.apps.projects.structural_operation_views import StructuralOperationViewSet
+from trueppm_api.apps.projects.template_views import (
+    ProjectTemplateViewSet,
+    TemplateApplicationViewSet,
+)
+from trueppm_api.apps.projects.views import (
+    AcceptanceCriterionViewSet,
+    AcceptanceResultIngestView,
+    ApiTokenAuditView,
+    BaselineActivateView,
+    BaselineViewSet,
+    BoardColumnConfigView,
+    BoardSavedViewDetailView,
+    BoardSavedViewListView,
+    CalendarExceptionViewSet,
+    CalendarViewSet,
+    CommentReactionViewSet,
+    CrossProjectSlipConflictViewSet,
+    DependencyViewSet,
+    FlowMetricsView,
+    LabelViewSet,
+    MeActiveSprintsView,
+    MeRecentProjectsView,
+    MeSearchView,
+    MeWorkView,
+    MyApiTokenAuditView,
+    MyApiTokenViewSet,
+    PhaseReorderView,
+    PhaseViewSet,
+    ProgramApiTokenAuditView,
+    ProgramApiTokenViewSet,
+    ProjectApiTokenViewSet,
+    ProjectAttentionView,
+    ProjectBurnView,
+    ProjectCommitView,
+    ProjectCustomFieldViewSet,
+    ProjectForecastView,
+    ProjectMilestonesView,
+    ProjectMyTasksView,
+    ProjectOverviewView,
+    ProjectPresenceView,
+    ProjectSprintForecastView,
+    ProjectSprintHealthView,
+    ProjectVelocityView,
+    ProjectViewSet,
+    RetroBoardItemViewSet,
+    RiskCommentViewSet,
+    RiskViewSet,
+    SprintScopeChangeViewSet,
+    SprintTaskOutcomeViewSet,
+    SprintViewSet,
+    TaskAttachmentViewSet,
+    TaskBaselineDetailView,
+    TaskBulkView,
+    TaskClassificationView,
+    TaskCommentViewSet,
+    TaskCustomFieldValueView,
+    TaskGroupView,
+    TaskHistoryView,
+    TaskIndentView,
+    TaskLabelView,
+    TaskNoteViewSet,
+    TaskOutdentView,
+    TaskRecurrenceRuleViewSet,
+    TaskRelationViewSet,
+    TaskReorderView,
+    TaskReparentView,
+    TaskSyncView,
+    TaskUngroupView,
+    TaskViewSet,
+)
+
+router = DefaultRouter()
+router.register(r"calendars", CalendarViewSet, basename="calendar")
+router.register(r"projects", ProjectViewSet, basename="project")
+router.register(r"programs", ProgramViewSet, basename="program")
+router.register(r"tasks", TaskViewSet, basename="task")
+router.register(r"dependencies", DependencyViewSet, basename="dependency")
+# Project templates (ADR-0789, #2729). A flat collection rather than nested under
+# a project: a template is not owned by the project it was published from — that
+# project can be archived or deleted without taking the template with it.
+router.register(r"project-templates", ProjectTemplateViewSet, basename="project-template")
+router.register(
+    r"template-applications", TemplateApplicationViewSet, basename="template-application"
+)
+# ⌘Z undo ledgers (ADR-0810, #2756) — same flat-collection shape as
+# template-applications, for the same reason: not owned by the project route.
+router.register(
+    r"paste-many-operations", PasteManyOperationViewSet, basename="paste-many-operation"
+)
+router.register(
+    r"cascade-classification-operations",
+    CascadeClassificationOperationViewSet,
+    basename="cascade-classification-operation",
+)
+# Structural (WBS restructure) undo ledger — ADR-0880, #2974/#3006. Same flat
+# collection as its ADR-0810 siblings, but one table for all six gestures: the
+# undo is kind-agnostic, so siblings would differ in name only.
+router.register(
+    r"structural-operations", StructuralOperationViewSet, basename="structural-operation"
+)
+router.register(r"task-relations", TaskRelationViewSet, basename="task-relation")
+router.register(r"slip-conflicts", CrossProjectSlipConflictViewSet, basename="slip-conflict")
+router.register(r"recurrence-rules", TaskRecurrenceRuleViewSet, basename="recurrence-rule")
+router.register(r"acceptance-criteria", AcceptanceCriterionViewSet, basename="acceptance-criterion")
+
+urlpatterns = [
+    *router.urls,
+    # Calendar exceptions — nested CRUD under /calendars/<calendar_pk>/exceptions/
+    # (ADR-0193). Explicit paths, not a router/@action, to avoid the ghost-route +
+    # OpenAPI-pollution problem (#846).
+    path(
+        "calendars/<calendar_pk>/exceptions/",
+        CalendarExceptionViewSet.as_view({"get": "list", "post": "create"}),
+        name="calendar-exceptions-list",
+    ),
+    path(
+        "calendars/<calendar_pk>/exceptions/<pk>/",
+        CalendarExceptionViewSet.as_view(
+            {"get": "retrieve", "put": "update", "patch": "partial_update", "delete": "destroy"}
+        ),
+        name="calendar-exceptions-detail",
+    ),
+    # Nested project actions — not routable via DefaultRouter.
+    path(
+        "projects/<pk>/tasks/reorder/",
+        TaskReorderView.as_view(),
+        name="project-tasks-reorder",
+    ),
+    path(
+        "projects/<pk>/tasks/bulk/",
+        TaskBulkView.as_view(),
+        name="project-tasks-bulk",
+    ),
+    path(
+        "projects/<pk>/tasks/classification/",
+        TaskClassificationView.as_view(),
+        name="project-tasks-classification",
+    ),
+    # Group / ungroup (#2955). Project-scoped rather than task-scoped: group has no
+    # single subject task, and ungroup is its mirror, so both take their subject in
+    # the body and sit alongside bulk/ and reorder/.
+    path(
+        "projects/<pk>/tasks/group/",
+        TaskGroupView.as_view(),
+        name="project-tasks-group",
+    ),
+    path(
+        "projects/<pk>/tasks/ungroup/",
+        TaskUngroupView.as_view(),
+        name="project-tasks-ungroup",
+    ),
+    path(
+        "projects/<pk>/tasks/<task_id>/indent/",
+        TaskIndentView.as_view(),
+        name="project-task-indent",
+    ),
+    path(
+        "projects/<pk>/tasks/<task_id>/outdent/",
+        TaskOutdentView.as_view(),
+        name="project-task-outdent",
+    ),
+    path(
+        "projects/<pk>/tasks/<task_id>/reparent/",
+        TaskReparentView.as_view(),
+        name="project-task-reparent",
+    ),
+    # Baseline endpoints — nested under /projects/<project_pk>/baselines/
+    path(
+        "projects/<project_pk>/baselines/",
+        BaselineViewSet.as_view({"get": "list", "post": "create"}),
+        name="project-baselines-list",
+    ),
+    path(
+        "projects/<project_pk>/baselines/<pk>/",
+        BaselineViewSet.as_view({"get": "retrieve", "delete": "destroy"}),
+        name="project-baselines-detail",
+    ),
+    path(
+        "projects/<project_pk>/baselines/<baseline_pk>/activate/",
+        BaselineActivateView.as_view(),
+        name="project-baselines-activate",
+    ),
+    path(
+        "projects/<pk>/commit/",
+        ProjectCommitView.as_view(),
+        name="project-commit",
+    ),
+    path(
+        "projects/<pk>/board-config/",
+        BoardColumnConfigView.as_view(),
+        name="project-board-config",
+    ),
+    path(
+        "projects/<pk>/board-views/",
+        BoardSavedViewListView.as_view(),
+        name="project-board-views",
+    ),
+    path(
+        "projects/<pk>/board-views/<view_pk>/",
+        BoardSavedViewDetailView.as_view(),
+        name="project-board-views-detail",
+    ),
+    # Board-level activity feed (ADR-0160 / #325) — filterable, board-scoped.
+    path(
+        "projects/<project_pk>/board/activity/",
+        BoardActivityView.as_view(),
+        name="project-board-activity",
+    ),
+    # Daily standup walk-the-board (ADR-0166 / #1278) — active sprint, per-assignee.
+    path(
+        "projects/<project_pk>/standup/",
+        StandupView.as_view(),
+        name="project-standup",
+    ),
+    # Presence endpoint — who is connected to this project's WebSocket
+    path(
+        "projects/<pk>/presence/",
+        ProjectPresenceView.as_view(),
+        name="project-presence",
+    ),
+    # Overview dashboard endpoints (ADR-0030)
+    path(
+        "projects/<pk>/overview/",
+        ProjectOverviewView.as_view(),
+        name="project-overview",
+    ),
+    path(
+        "projects/<pk>/attention/",
+        ProjectAttentionView.as_view(),
+        name="project-attention",
+    ),
+    path(
+        "projects/<pk>/my-tasks/",
+        ProjectMyTasksView.as_view(),
+        name="project-my-tasks",
+    ),
+    # Task drawer — history and baseline (ADR-0032)
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/history/",
+        TaskHistoryView.as_view(),
+        name="project-task-history",
+    ),
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/baseline/",
+        TaskBaselineDetailView.as_view(),
+        name="project-task-baseline",
+    ),
+    # Risk endpoints — nested under /projects/<project_pk>/risks/
+    path(
+        "projects/<project_pk>/risks/",
+        RiskViewSet.as_view({"get": "list", "post": "create"}),
+        name="project-risks-list",
+    ),
+    # CSV import — must precede the <pk> detail route so "import" is not
+    # captured as a risk id (ADR-0043 addendum, #223).
+    path(
+        "projects/<project_pk>/risks/import/",
+        RiskViewSet.as_view({"post": "import_csv"}),
+        name="project-risks-import",
+    ),
+    path(
+        "projects/<project_pk>/risks/<pk>/",
+        RiskViewSet.as_view(
+            {
+                "get": "retrieve",
+                "put": "update",
+                "patch": "partial_update",
+                "delete": "destroy",
+            }
+        ),
+        name="project-risks-detail",
+    ),
+    # Risk comments — append-only thread per risk (ADR-0044)
+    path(
+        "projects/<project_pk>/risks/<risk_pk>/comments/",
+        RiskCommentViewSet.as_view({"get": "list", "post": "create"}),
+        name="project-risk-comments-list",
+    ),
+    # Task labels (ADR-0400, #1089) — project-scoped catalog CRUD ...
+    path(
+        "projects/<project_pk>/labels/",
+        LabelViewSet.as_view({"get": "list", "post": "create"}),
+        name="project-labels-list",
+    ),
+    path(
+        "projects/<project_pk>/labels/<pk>/",
+        LabelViewSet.as_view(
+            {
+                "get": "retrieve",
+                "put": "update",
+                "patch": "partial_update",
+                "delete": "destroy",
+            }
+        ),
+        name="project-labels-detail",
+    ),
+    # ... and idempotent attach/detach of a label to a task (never a replace-set PATCH).
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/labels/",
+        TaskLabelView.as_view(),
+        name="project-task-labels-attach",
+    ),
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/labels/<label_id>/",
+        TaskLabelView.as_view(),
+        name="project-task-labels-detach",
+    ),
+    # Idempotent set/clear of a typed custom-field value on a task (#2143, ADR-0528).
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/field-values/<field_id>/",
+        TaskCustomFieldValueView.as_view(),
+        name="project-task-custom-field-value",
+    ),
+    # Phase reorder — drag-to-reorder on the Workflow settings page (#521)
+    path(
+        "projects/<pk>/phases/reorder/",
+        PhaseReorderView.as_view(),
+        name="project-phases-reorder",
+    ),
+    # Phase CRUD — Workflow settings page (#521). Reorder lives at /phases/reorder/.
+    path(
+        "projects/<project_pk>/phases/",
+        PhaseViewSet.as_view({"get": "list", "post": "create"}),
+        name="project-phases-list",
+    ),
+    path(
+        "projects/<project_pk>/phases/<pk>/",
+        PhaseViewSet.as_view(
+            {
+                "get": "retrieve",
+                "put": "update",
+                "patch": "partial_update",
+                "delete": "destroy",
+            }
+        ),
+        name="project-phases-detail",
+    ),
+    # Project custom field definitions — Workflow settings page (#521).
+    path(
+        "projects/<project_pk>/fields/",
+        ProjectCustomFieldViewSet.as_view({"get": "list", "post": "create"}),
+        name="project-fields-list",
+    ),
+    path(
+        "projects/<project_pk>/fields/<pk>/",
+        ProjectCustomFieldViewSet.as_view(
+            {
+                "get": "retrieve",
+                "put": "update",
+                "patch": "partial_update",
+                "delete": "destroy",
+            }
+        ),
+        name="project-fields-detail",
+    ),
+    # Sprint/Phase/WBS guardrail policy — singleton per project (ADR-0101).
+    path(
+        "projects/<project_pk>/guardrail-policy/",
+        ProjectGuardrailPolicyView.as_view(),
+        name="project-guardrail-policy",
+    ),
+    # Team-signal privacy policy — singleton per project (ADR-0104).
+    path(
+        "projects/<project_pk>/signal-privacy/",
+        SignalPrivacyPolicyView.as_view(),
+        name="project-signal-privacy",
+    ),
+    path(
+        "projects/<project_pk>/signal-privacy/raise-ceiling/",
+        SignalPrivacyRaiseCeilingView.as_view(),
+        name="project-signal-privacy-raise-ceiling",
+    ),
+    path(
+        "projects/<project_pk>/signal-privacy/ratchet-down/",
+        SignalPrivacyRatchetDownView.as_view(),
+        name="project-signal-privacy-ratchet-down",
+    ),
+    # Ceiling-raise team ratification (ADR-0104 Amendment A / #930).
+    path(
+        "projects/<project_pk>/signal-privacy/ceiling-proposals/",
+        SignalCeilingProposalListView.as_view(),
+        name="project-signal-ceiling-proposals",
+    ),
+    path(
+        "projects/<project_pk>/signal-privacy/ceiling-proposals/<proposal_pk>/vote/",
+        SignalCeilingProposalVoteView.as_view(),
+        name="project-signal-ceiling-proposal-vote",
+    ),
+    path(
+        "projects/<project_pk>/signal-privacy/ceiling-proposals/<proposal_pk>/withdraw/",
+        SignalCeilingProposalWithdrawView.as_view(),
+        name="project-signal-ceiling-proposal-withdraw",
+    ),
+    # Decisions-view visibility policy — singleton per project (ADR-0167, #748).
+    path(
+        "projects/<project_pk>/decisions-policy/",
+        ProjectDecisionsPolicyView.as_view(),
+        name="project-decisions-policy",
+    ),
+    # Sprint endpoints (ADR-0037)
+    path(
+        "projects/<project_pk>/sprints/",
+        SprintViewSet.as_view({"get": "list", "post": "create"}),
+        name="project-sprints-list",
+    ),
+    # Cadence generator (#2968). Declared BEFORE the detail route below for
+    # readability only — `path()` matches exact segments, so `sprints/generate/`
+    # under `projects/<project_pk>/` can never be swallowed by `sprints/<pk>/`.
+    # `project_pk`, not `pk`: `_project_pk_from_view` reads only `project_pk`, so
+    # a `<pk>`-named route would silently no-op the class-level RBAC gate.
+    path(
+        "projects/<project_pk>/sprints/generate/",
+        SprintViewSet.as_view({"post": "generate"}),
+        name="project-sprints-generate",
+    ),
+    path(
+        "sprints/<pk>/",
+        SprintViewSet.as_view(
+            {
+                "get": "retrieve",
+                "put": "update",
+                "patch": "partial_update",
+                "delete": "destroy",
+            }
+        ),
+        name="sprints-detail",
+    ),
+    path(
+        "sprints/<pk>/activate/",
+        SprintViewSet.as_view({"post": "activate"}),
+        name="sprints-activate",
+    ),
+    path(
+        "sprints/<pk>/close/",
+        SprintViewSet.as_view({"post": "close"}),
+        name="sprints-close",
+    ),
+    # #2894: the read side of the 202 above — `close` hands back a request_id and
+    # tells the client to poll, which addressed nothing until this route existed.
+    path(
+        "sprints/<pk>/close-request/",
+        SprintViewSet.as_view({"get": "close_request"}),
+        name="sprints-close-request",
+    ),
+    path(
+        "sprints/<pk>/cancel/",
+        SprintViewSet.as_view({"post": "cancel"}),
+        name="sprints-cancel",
+    ),
+    path(
+        "sprints/<pk>/burndown/",
+        SprintViewSet.as_view({"get": "burndown"}),
+        name="sprints-burndown",
+    ),
+    path(
+        "sprints/<pk>/outcome/",
+        SprintViewSet.as_view({"get": "outcome"}),
+        name="sprints-outcome",
+    ),
+    # Estimation poker (ADR-0179, #863) — sprint-planning Fibonacci voting.
+    path(
+        "sprints/<sprint_pk>/poker/",
+        SprintPokerView.as_view(),
+        name="sprint-poker",
+    ),
+    path("poker/<pk>/vote/", PokerVoteView.as_view(), name="poker-vote"),
+    path("poker/<pk>/reveal/", PokerRevealView.as_view(), name="poker-reveal"),
+    path("poker/<pk>/reopen/", PokerReopenView.as_view(), name="poker-reopen"),
+    path("poker/<pk>/commit/", PokerCommitView.as_view(), name="poker-commit"),
+    path("poker/<pk>/cancel/", PokerCancelView.as_view(), name="poker-cancel"),
+    # Sprint Review demo-list curation (ADR-0118, #924)
+    path(
+        "sprint-task-outcomes/<pk>/toggle-demo/",
+        SprintTaskOutcomeViewSet.as_view({"post": "toggle_demo"}),
+        name="sprint-task-outcome-toggle-demo",
+    ),
+    # Sprint Review polish (Wave D, #1130/#1131/#1132)
+    path(
+        "sprints/<pk>/demo-list/reorder/",
+        SprintViewSet.as_view({"post": "demo_list_reorder"}),
+        name="sprints-demo-list-reorder",
+    ),
+    # In-sprint execution-order reorder — writes sprint_rank only (#365, ADR-0105 §5)
+    path(
+        "sprints/<pk>/reorder/",
+        SprintViewSet.as_view({"post": "reorder"}),
+        name="sprints-reorder",
+    ),
+    path(
+        "sprint-task-outcomes/<pk>/set-presenter/",
+        SprintTaskOutcomeViewSet.as_view({"post": "set_presenter"}),
+        name="sprint-task-outcome-set-presenter",
+    ),
+    path(
+        "sprint-task-outcomes/<pk>/set-note/",
+        SprintTaskOutcomeViewSet.as_view({"post": "set_note"}),
+        name="sprint-task-outcome-set-note",
+    ),
+    path(
+        "sprint-task-outcomes/<pk>/flag-for-backlog/",
+        SprintTaskOutcomeViewSet.as_view({"post": "flag_for_backlog"}),
+        name="sprint-task-outcome-flag-for-backlog",
+    ),
+    # Team daily-standup "what changed since yesterday" delta (ADR-0121, #925)
+    path(
+        "sprints/<pk>/daily-delta/",
+        SprintViewSet.as_view({"get": "daily_delta"}),
+        name="sprints-daily-delta",
+    ),
+    # Blocked-tasks roll-up for the sprint (ADR-0124, #1134). SprintViewSet uses
+    # manual path() registration (no router), so the @action needs its own entry.
+    path(
+        "sprints/<pk>/blocked/",
+        SprintViewSet.as_view({"get": "blocked"}),
+        name="sprints-blocked",
+    ),
+    # Sprint↔milestone binding — the agile/waterfall bridge (ADR-0106 §2)
+    path(
+        "sprints/<pk>/promote-to-milestone/",
+        SprintViewSet.as_view({"post": "promote_to_milestone"}),
+        name="sprints-promote-to-milestone",
+    ),
+    path(
+        "sprints/<pk>/unbind-milestone/",
+        SprintViewSet.as_view({"post": "unbind_milestone"}),
+        name="sprints-unbind-milestone",
+    ),
+    # Dry-run reforecast preview for the promote dialog (ADR-0106 §E1.1, #928)
+    path(
+        "sprints/<pk>/reforecast-preview/",
+        SprintViewSet.as_view({"get": "reforecast_preview"}),
+        name="sprints-reforecast-preview",
+    ),
+    # Mid-sprint scope-injection approve-gate (ADR-0102 §5)
+    # GET list (audit + delta, #543/#550) is registered before the /accept|/reject
+    # POSTs; all three share the scope-changes/ prefix but resolve distinctly.
+    path(
+        "sprints/<pk>/scope-changes/",
+        SprintViewSet.as_view({"get": "scope_changes"}),
+        name="sprints-scope-changes",
+    ),
+    path(
+        "sprints/<pk>/scope-changes/accept/",
+        SprintViewSet.as_view({"post": "scope_changes_accept"}),
+        name="sprints-scope-changes-accept",
+    ),
+    path(
+        "sprints/<pk>/scope-changes/reject/",
+        SprintViewSet.as_view({"post": "scope_changes_reject"}),
+        name="sprints-scope-changes-reject",
+    ),
+    # Mid-sprint duration-change feed for the changes-log (ADR-0151, issue 1254).
+    path(
+        "sprints/<pk>/duration-events/",
+        SprintViewSet.as_view({"get": "duration_events"}),
+        name="sprints-duration-events",
+    ),
+    path(
+        "scope-changes/<pk>/accept/",
+        SprintScopeChangeViewSet.as_view({"post": "accept"}),
+        name="scope-changes-accept",
+    ),
+    path(
+        "scope-changes/<pk>/reject/",
+        SprintScopeChangeViewSet.as_view({"post": "reject"}),
+        name="scope-changes-reject",
+    ),
+    path(
+        "sprints/<pk>/capacity/",
+        SprintViewSet.as_view({"get": "capacity"}),
+        name="sprints-capacity",
+    ),
+    path(
+        "sprints/<pk>/incoming_carryover/",
+        SprintViewSet.as_view({"get": "incoming_carryover"}),
+        name="sprints-incoming-carryover",
+    ),
+    path(
+        "sprints/<pk>/retro/",
+        SprintViewSet.as_view({"get": "retro", "post": "retro", "patch": "retro"}),
+        name="sprints-retro",
+    ),
+    # Live multi-writer retro board + team-health pulse (ADR-0117, #851 / #923)
+    path(
+        "sprints/<pk>/retro-board/",
+        SprintViewSet.as_view({"get": "retro_board", "post": "retro_board"}),
+        name="sprints-retro-board",
+    ),
+    path(
+        "sprints/<pk>/pulse/",
+        SprintViewSet.as_view({"get": "pulse", "put": "pulse"}),
+        name="sprints-pulse",
+    ),
+    path(
+        "sprints/<pk>/pulse-trend/",
+        SprintViewSet.as_view({"get": "pulse_trend"}),
+        name="sprints-pulse-trend",
+    ),
+    path(
+        "retro-items/<pk>/",
+        RetroBoardItemViewSet.as_view({"patch": "partial_update", "delete": "destroy"}),
+        name="retro-item-detail",
+    ),
+    path(
+        "retro-items/<pk>/convert-to-action/",
+        RetroBoardItemViewSet.as_view({"post": "convert_to_action"}),
+        name="retro-item-convert-to-action",
+    ),
+    # Retrospective sub-resource endpoints (ADR-0071)
+    path(
+        "sprints/<pk>/retrospective/prior/",
+        SprintViewSet.as_view({"get": "retro_prior"}),
+        name="sprints-retro-prior",
+    ),
+    path(
+        "sprints/<pk>/retrospective/action-items/<uuid:item_pk>/promote/",
+        SprintViewSet.as_view({"post": "promote_action_item"}),
+        name="sprints-retro-promote",
+    ),
+    path(
+        "sprints/<pk>/retrospective/action-items/<uuid:item_pk>/pull-to-sprint/",
+        SprintViewSet.as_view({"post": "pull_action_item_to_sprint"}),
+        name="sprints-retro-pull-to-sprint",
+    ),
+    path(
+        "projects/<pk>/retrospective/carryover/",
+        ProjectViewSet.as_view({"get": "retro_carryover"}),
+        name="project-retro-carryover",
+    ),
+    # TaskSuggestedAssignee endpoints (ADR-0071 §5)
+    path(
+        "tasks/<pk>/suggestions/<uuid:suggestion_pk>/accept/",
+        TaskViewSet.as_view({"post": "accept_suggestion"}),
+        name="task-suggestion-accept",
+    ),
+    path(
+        "tasks/<pk>/suggestions/<uuid:suggestion_pk>/decline/",
+        TaskViewSet.as_view({"post": "decline_suggestion"}),
+        name="task-suggestion-decline",
+    ),
+    path(
+        "tasks/<pk>/suggestions/<uuid:suggestion_pk>/revoke/",
+        TaskViewSet.as_view({"post": "revoke_suggestion"}),
+        name="task-suggestion-revoke",
+    ),
+    path(
+        "projects/<pk>/velocity/",
+        ProjectVelocityView.as_view(),
+        name="project-velocity",
+    ),
+    path(
+        "projects/<pk>/sprint-health/",
+        ProjectSprintHealthView.as_view(),
+        name="project-sprint-health",
+    ),
+    # Bridge forecast read: velocity range + sprints-to-complete + per-milestone
+    # latest ForecastSnapshot (ADR-0106 §5, #487/#860).
+    path(
+        "projects/<pk>/forecast/",
+        ProjectForecastView.as_view(),
+        name="project-forecast",
+    ),
+    # Backlog delivery forecast: velocity Monte Carlo → P50/P80 sprint counts +
+    # dates to clear the remaining committed backlog (#487).
+    path(
+        "projects/<pk>/sprint-forecast/",
+        ProjectSprintForecastView.as_view(),
+        name="project-sprint-forecast",
+    ),
+    # Methodology-neutral flow analytics: cycle/lead time, CFD, weekly throughput
+    # (ADR-0130 D1, #1072). Historical distributions gated under the flow_metrics signal.
+    path(
+        "projects/<pk>/flow-metrics/",
+        FlowMetricsView.as_view(),
+        name="project-flow-metrics",
+    ),
+    # Slim milestone list for the bind-existing picker (ADR-0106 §E1.3, #928)
+    path(
+        "projects/<pk>/milestones/",
+        ProjectMilestonesView.as_view(),
+        name="project-milestones",
+    ),
+    path(
+        "projects/<pk>/burn/",
+        ProjectBurnView.as_view(),
+        name="project-burn",
+    ),
+    path(
+        "me/active-sprints/",
+        MeActiveSprintsView.as_view(),
+        name="me-active-sprints",
+    ),
+    # Recently-visited projects — ⌘K "Recent" group (ADR-0508, issue #1557)
+    path(
+        "me/recent-projects/",
+        MeRecentProjectsView.as_view(),
+        name="me-recent-projects",
+    ),
+    # Global cross-program Epic/Story omni-search — ⌘K palette (ADR-0508 D4, #2103)
+    path(
+        "me/search/",
+        MeSearchView.as_view(),
+        name="me-search",
+    ),
+    # My Work — contributor surface (ADR-0065 Gap 2, issue #499)
+    path(
+        "me/work/",
+        MeWorkView.as_view(),
+        name="me-work",
+    ),
+    # Personal Access Tokens — user-scoped API credentials (ADR-0214, issue #648)
+    path(
+        "me/api-tokens/",
+        MyApiTokenViewSet.as_view({"get": "list", "post": "create"}),
+        name="me-api-tokens-list",
+    ),
+    path(
+        "me/api-tokens/<pk>/",
+        MyApiTokenViewSet.as_view({"get": "retrieve", "delete": "destroy"}),
+        name="me-api-tokens-detail",
+    ),
+    # Reader for the owner-scoped audit rows the viewset above has always written
+    # (#2878) — they matched no queryset and no route before this.
+    path(
+        "me/api-token-audit/",
+        MyApiTokenAuditView.as_view(),
+        name="me-api-token-audit",
+    ),
+    # Inbound task-sync — ADR-0068 (ADR-0065 Gap 3, issue #500)
+    path(
+        "projects/<pk>/task-sync/",
+        TaskSyncView.as_view(),
+        name="project-task-sync",
+    ),
+    # Inbound CI acceptance-result ingestion — ADR-0148 (issue #1075)
+    path(
+        "projects/<pk>/acceptance-results/",
+        AcceptanceResultIngestView.as_view(),
+        name="project-acceptance-results",
+    ),
+    path(
+        "projects/<project_pk>/api-tokens/",
+        ProjectApiTokenViewSet.as_view({"get": "list", "post": "create"}),
+        name="project-api-tokens-list",
+    ),
+    path(
+        "projects/<project_pk>/api-tokens/<pk>/",
+        ProjectApiTokenViewSet.as_view({"get": "retrieve", "delete": "destroy"}),
+        name="project-api-tokens-detail",
+    ),
+    path(
+        "projects/<project_pk>/api-token-audit/",
+        ApiTokenAuditView.as_view(),
+        name="project-api-token-audit",
+    ),
+    # Public read-only board share links (#283, ADR-0245). The management routes
+    # are Admin+; the public board endpoint is unauthenticated + read-only.
+    path(
+        "projects/<project_pk>/share-links/",
+        ProjectShareLinkListCreateView.as_view(),
+        name="project-share-links",
+    ),
+    path(
+        "projects/<project_pk>/share-links/<link_id>/revoke/",
+        ProjectShareLinkRevokeView.as_view(),
+        name="project-share-link-revoke",
+    ),
+    path(
+        "share/board/<token>/",
+        PublicBoardShareView.as_view(),
+        name="public-board-share",
+    ),
+    path(
+        "share/schedule/<token>/",
+        PublicScheduleShareView.as_view(),
+        name="public-schedule-share",
+    ),
+    # Program-scoped API tokens (ADR-0076 program extension, #600)
+    path(
+        "programs/<program_pk>/api-tokens/",
+        ProgramApiTokenViewSet.as_view({"get": "list", "post": "create"}),
+        name="program-api-tokens-list",
+    ),
+    path(
+        "programs/<program_pk>/api-tokens/<pk>/",
+        ProgramApiTokenViewSet.as_view({"get": "retrieve", "delete": "destroy"}),
+        name="program-api-tokens-detail",
+    ),
+    path(
+        "programs/<program_pk>/api-token-audit/",
+        ProgramApiTokenAuditView.as_view(),
+        name="program-api-token-audit",
+    ),
+    # Unified Assets feed (ADR-0215, #971) — read-only aggregation of every task's
+    # files + external links, per project and per program. The workspace tier
+    # (ADR-0428, #1979) aggregates across every project the caller can read.
+    path(
+        "assets/",
+        WorkspaceAssetsView.as_view(),
+        name="workspace-assets",
+    ),
+    path(
+        "projects/<project_pk>/assets/",
+        ProjectAssetsView.as_view(),
+        name="project-assets",
+    ),
+    path(
+        "programs/<program_pk>/assets/",
+        ProgramAssetsView.as_view(),
+        name="program-assets",
+    ),
+    # Task collaboration endpoints (ADR-0075, #310 #311)
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/attachments/",
+        TaskAttachmentViewSet.as_view({"get": "list", "post": "create"}),
+        name="project-task-attachments-list",
+    ),
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/attachments/<pk>/",
+        TaskAttachmentViewSet.as_view({"get": "retrieve", "delete": "destroy"}),
+        name="project-task-attachments-detail",
+    ),
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/attachments/<pk>/signed-url/",
+        TaskAttachmentViewSet.as_view({"get": "signed_url"}),
+        name="project-task-attachments-signed-url",
+    ),
+    # Git-aware task links (ADR-0049 §3, #637)
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/links/",
+        TaskLinkViewSet.as_view({"get": "list", "post": "create"}),
+        name="project-task-links-list",
+    ),
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/links/<pk>/",
+        TaskLinkViewSet.as_view(
+            {"get": "retrieve", "patch": "partial_update", "delete": "destroy"}
+        ),
+        name="project-task-links-detail",
+    ),
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/links/<pk>/refresh/",
+        TaskLinkViewSet.as_view({"post": "refresh"}),
+        name="project-task-links-refresh",
+    ),
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/comments/",
+        TaskCommentViewSet.as_view({"get": "list", "post": "create"}),
+        name="project-task-comments-list",
+    ),
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/comments/<pk>/",
+        TaskCommentViewSet.as_view(
+            {"get": "retrieve", "patch": "partial_update", "delete": "destroy"}
+        ),
+        name="project-task-comments-detail",
+    ),
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/comments/<pk>/acknowledge/",
+        TaskCommentViewSet.as_view({"post": "acknowledge", "delete": "acknowledge"}),
+        name="project-task-comments-acknowledge",
+    ),
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/comments/<comment_pk>/reactions/",
+        CommentReactionViewSet.as_view({"post": "create"}),
+        name="project-task-comment-reactions-list",
+    ),
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/comments/<comment_pk>/reactions/<pk>/",
+        CommentReactionViewSet.as_view({"delete": "destroy"}),
+        name="project-task-comment-reactions-detail",
+    ),
+    # Task notes — per-author why/decision log (ADR-0143, #740)
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/notes/",
+        TaskNoteViewSet.as_view({"get": "list", "post": "create"}),
+        name="project-task-notes-list",
+    ),
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/notes/<pk>/",
+        TaskNoteViewSet.as_view(
+            {"get": "retrieve", "patch": "partial_update", "delete": "destroy"}
+        ),
+        name="project-task-notes-detail",
+    ),
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/notes/<pk>/pin/",
+        TaskNoteViewSet.as_view({"post": "pin"}),
+        name="project-task-notes-pin",
+    ),
+    # Decision flag — promotes a note into the project/sprint Decisions log (ADR-0167, #748)
+    path(
+        "projects/<project_pk>/tasks/<task_pk>/notes/<pk>/decision/",
+        TaskNoteViewSet.as_view({"post": "decision"}),
+        name="project-task-notes-decision",
+    ),
+    # Program ceremony templates + phase-gate config (ADR-0079, #528)
+    path(
+        "programs/<program_pk>/ceremonies/",
+        CeremonyTemplateViewSet.as_view({"get": "list", "post": "create"}),
+        name="program-ceremonies-list",
+    ),
+    path(
+        "programs/<program_pk>/ceremonies/<pk>/",
+        CeremonyTemplateViewSet.as_view(
+            {
+                "get": "retrieve",
+                "patch": "partial_update",
+                "put": "update",
+                "delete": "destroy",
+            }
+        ),
+        name="program-ceremonies-detail",
+    ),
+    path(
+        "programs/<program_pk>/phase-gate-config/",
+        PhaseGateConfigView.as_view(),
+        name="program-phase-gate-config",
+    ),
+    # Program backlog (ADR-0069, #737 / #739)
+    path(
+        "programs/<program_pk>/backlog-items/",
+        BacklogItemViewSet.as_view({"get": "list", "post": "create"}),
+        name="program-backlog-items-list",
+    ),
+    path(
+        "programs/<program_pk>/backlog-items/<pk>/",
+        BacklogItemViewSet.as_view(
+            {
+                "get": "retrieve",
+                "patch": "partial_update",
+                "put": "update",
+                "delete": "destroy",
+            }
+        ),
+        name="program-backlog-items-detail",
+    ),
+    path(
+        "programs/<program_pk>/backlog-items/<pk>/pull/",
+        BacklogItemViewSet.as_view({"post": "pull"}),
+        name="program-backlog-items-pull",
+    ),
+    # Program-scoped cross-project label view (ADR-0638, #2333). The program is a
+    # PATH segment on purpose: an omittable ?program= filter would let the same
+    # read fan out across every program the caller belongs to, which is the
+    # Enterprise portfolio shape.
+    path(
+        "programs/<program_pk>/label-tasks/",
+        ProgramLabelTaskViewSet.as_view({"get": "list"}),
+        name="program-label-tasks",
+    ),
+    path(
+        "programs/<program_pk>/label-catalog/",
+        ProgramLabelCatalogView.as_view(),
+        name="program-label-catalog",
+    ),
+]