GET /api/board-groups — the org's groups in nav order (any member may read; rendering input for the tree).

Responses

Security: bearer

POST /api/board-groups — creates a nav group (ManageBoards gated); emits `board.group_created`.

Request body

CreateGroupRequest

Responses

Security: bearer

PATCH /api/board-groups/{id} — renames/reorders a group. ManageBoards OR the group's owner may do this; emits `board.group_updated`.

Parameters

Request body

UpdateGroupRequest

Responses

Security: bearer

DELETE /api/board-groups/{id} — removes a group; member boards become ungrouped, never deleted. ManageBoards OR the group's owner; emits `board.group_removed`.

Parameters

Responses

Security: bearer

GET /api/boards

Responses

Security: bearer

POST /api/boards — creates a board seeded with the four default statuses.

Request body

CreateBoardRequest

Responses

Security: bearer

POST /api/boards/favorite — toggles a board favorite for the current user (user-scoped; any authenticated member may star boards they can see). Emits `board.favorite_toggled` in-tx.

Request body

FavoriteRequest

Responses

Security: bearer

GET /api/boards/nav — every org board annotated with the current user's favorite mark, board role, and group assignment.

Responses

Security: bearer

GET /api/boards/{id}/checklist-template

Parameters

Responses

Security: bearer

PUT /api/boards/{id}/checklist-template — creates or replaces the board's template wholesale and sets the enforcement toggle; emits `board.checklist_template_updated` and audits the change.

Parameters

Request body

PutChecklistTemplateRequest

Responses

Security: bearer

DELETE /api/boards/{id}/checklist-template — removes the template. Ticket instances demote to ad-hoc items; with no template left, close-time enforcement is off by construction regardless of the toggle.

Parameters

Responses

Security: bearer

PUT /api/boards/{id}/group — assigns/unassigns the board's nav group. Board-admin gated (ConfigureBoard); emits `board.group_updated`.

Parameters

Request body

AssignGroupRequest

Responses

Security: bearer

GET /api/boards/{id}/members — the roster (ConfigureBoard gated).

Parameters

Responses

Security: bearer

PUT /api/boards/{id}/members — adds or re-roles one membership. ManageMembers gated (board admin); emits `board.membership_updated`.

Parameters

Request body

UpsertMemberRequest

Responses

Security: bearer

DELETE /api/boards/{id}/members/{user_id} — removes one membership; the user falls back to org-governed access. Emits `board.membership_removed`.

Parameters

Responses

Security: bearer

GET /api/boards/{id}/statuses

Parameters

Responses

Security: bearer

POST /api/boards/{id}/statuses — adds a custom status bound to a semantic category; emits `board.status_added`.

Parameters

Request body

CreateStatusRequest

Responses

Security: bearer

boards_status_usage

Parameters

Responses

Security: bearer

PATCH /api/boards/{id}/statuses/{status_id} — rebinds/reorders/renames a status; emits `board.status_updated`.

Parameters

Request body

UpdateStatusRequest

Responses

Security: bearer

DELETE /api/boards/{id}/statuses/{status_id} — removes a custom status.

Without `reassign_to` a status holding tickets is refused (409), as before. With it, every ticket moves first — set-based, mirroring the per-ticket status-change invariants exactly (denormalised category, one-shot `resolved_at`, SLA pause bookkeeping) — and each moved ticket gets its own `ticket.status_changed` outbox row, so a bulk move is as auditable as a single one. Automations naming the status are paused, never repointed. Emits `board.status_removed`.

Parameters

Responses

Security: bearer

GET /api/boards/{id}/transitions — the board's effective workflow.

Parameters

Responses

Security: bearer

PUT /api/boards/{id}/transitions — atomically replaces the explicit transition matrix; emits `board.transitions_updated`. Endpoints must be statuses of THIS board and self-transitions are rejected.

Parameters

Request body

SetTransitionsRequest

Responses

Security: bearer