REST API reference

Returns the authenticated DigitalStack user, current account, active membership, and authentication context.

Lists visible canonical projects/engagements for the resolved workspace. Archived projects are excluded unless requested.

Creates one canonical DigitalStack project/engagement identity. GUI quick-start scaffolding and schedule mutation are intentionally not part of this command.

Returns one visible canonical project/engagement identity record without raw GUI JSON fields.

Updates bounded project identity and relationship fields. Raw project JSON and schedule coordinates are not accepted.

Runs one explicit project lifecycle status command. Status changes do not implicitly reschedule delivery work.

Archives one project/engagement through the same explicit status command path.

Returns governed project membership rows for one visible project.

Adds or upserts one project member with a project-local role.

Updates one project member role.

Removes one project member.

Returns bounded public project settings. Raw GUI module JSON is not included.

Updates bounded project settings such as workflow mode, portal config, AI config, and ticket prefix.

Returns a one-call advisory health snapshot for a project: delivery status, alerts, phase/workstream progress, execution metrics, and directional financial/staffing signals when the credential is authorized for those sensitive sections.

Records a confirmed acknowledgement for one advisory Project Health alert and emits project_health.alert_acknowledged. This does not mutate project schedules, milestones, staffing plans, or financial records.

Returns an aggregated operational summary for a project: budget, margin, burn rate, delivery risk signals, and active alerts. Not a raw data endpoint — designed for dashboards, BI tools, and agents.

Returns aggregated staffing coverage for a project: planned vs. allocated hours by discipline, open role gaps, timeline signals, and delivery risk. Not a raw staffing CRUD endpoint — designed for dashboards, BI tools, and capacity alerts.

Returns forward-looking burn projection for a project: contract-by-contract consumed vs. remaining value, a 12-week weekly series, burn status signals, and alerts. Burn is revenue-side (bill rate × hours) to compare against the client-facing contract ceiling. Not a raw data endpoint — designed for dashboards, BI tools, and delivery-risk agents.

Returns aggregated delivery execution health for a project: phase progress, milestone status (ticket-derived), execution metrics (blocked, overdue, high-risk work items), workstream rollups, computed delivery risk signals, and active alerts. No individual attribution, ticket titles, descriptions, or financial data are included.

Returns all phases for a project in order. Each phase includes its H2.0 delivery classification tag and an is_standard_phase flag that distinguishes canonical lifecycle phases from custom-named phases.

Returns all active execution milestones for a project, ordered by delivery phase, critical path status, and creation date. Each milestone embeds lightweight phase context to avoid a second round-trip. Supports filtering by milestone_type (lane or program).

Returns all non-deleted contracts for a project. Includes draft, active, completed, and terminated contracts. Line items are not modeled at the contract level — use the burn projection endpoint for consumption breakdown.

Returns a scoped delivery forecast derived from the opportunity's attached scope document: staffing demand by phase and role, timeline projection by month, confidence scoring, and pressure warnings. Requires an attached scope with at least one role demand. Margin projection is included only when the caller holds the financials:read scope (API key) or revops:view_margin permission (session).

Returns a single contract by ID, including project name. Workspace-isolated: returns 404 for contracts in other workspaces. Soft-deleted contracts are not visible.

Returns all documents in the workspace, newest first. Paginated at 50 items per page by default.

Creates a new document in the workspace. Returns the new document with workflow state "draft".

Fetches a single document by its ID.

Updates one or more fields on a document. Frozen documents return 409.

Downloads the .dstack binary package for a document. Response is a ZIP archive with Content-Type application/vnd.digitalstack.dstack+zip.

Returns the current workflow state and the transitions available from it.

Moves a document to a new workflow state. Policy gates are enforced automatically.

Lists canonical time entries owned by the authenticated principal. The user identity is credential-derived and cannot be overridden.

Creates one explicit canonical time entry for the authenticated principal. Requires an Idempotency-Key header; inferred time is not accepted by this operation.

Retrieves one canonical entry only when it belongs to both the resolved workspace and authenticated principal.

Updates an editable self-owned entry using required optimistic versioning. Submitted, approved, voided, and period-locked entries are rejected.

Governed soft-void of an editable self-owned entry. Send the current version in the If-Match header; financial history is never physically deleted.

Returns the authenticated principal’s active canonical timer and net elapsed state, or null.

Starts, pauses, resumes, stops, or discards the caller’s one canonical timer. Stop atomically creates one entry and removes the timer.

Returns the caller's account-timezone day with canonical entries, privacy-safe attributed sessions, conflicts, gaps, timer, draft, totals, and submission state. Use `today` to resolve the account-local date.

Persists a versioned proposal from fully attributed, conflict-free DigitalStack work sessions. Unresolved evidence stays unresolved and this operation never creates actual time.

Submits a validated day into the canonical approval lifecycle or recalls it while policy permits. Submit requires an Idempotency-Key header; both commands require confirmation.

Atomically applies a reviewed proposal to canonical draft entries. Requires optimistic versioning, an Idempotency-Key header, and explicit confirmation.

Lists only approval records in the resolved workspace for which the authenticated principal is an eligible reviewer. Notes, rates, and raw evidence are excluded.

Approves or rejects one submission only when the caller is an eligible approver in the resolved workspace. Rejections require a reason.

Lists safe Timely import summaries for administrators in the resolved workspace. Provider credentials, raw payloads, and provider error bodies are never returned.

Starts an idempotent Timely-to-DigitalStack import for an exact date range of at most 90 days. Timely must already be connected; DigitalStack remains the canonical owner after import.

Lists provider reconciliation findings for workspace administrators without exposing raw provider payloads or financial rates.

Runs a bounded comparison between canonical DigitalStack entries and imported provider records. It creates findings, not silent corrections.

Resolves one finding through the existing Work-domain reconciliation policy. Approved entries remain protected from mutation.