Add application API and OpenAPI docs

app/Http/Controllers/Api/ProjectController.php

@@ -0,0 +1,68 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Actions\Permissions\PermissionService;
+use App\Actions\Projects\CreateProject;
+use App\Actions\Projects\DeleteProject;
+use App\Actions\Projects\ListVisibleProjects;
+use App\Enums\Permission;
+use App\Http\Requests\DeleteProjectRequest;
+use App\Http\Requests\StoreProjectRequest;
+use App\Http\Resources\ProjectResource;
+use App\Models\Project;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
+
+class ProjectController extends ApiController
+{
+    public function __construct(
+        private readonly CreateProject $createProject,
+        private readonly DeleteProject $deleteProject,
+        private readonly ListVisibleProjects $listVisibleProjects,
+        private readonly PermissionService $permissionService,
+    ) {}
+
+    public function index(Request $request): AnonymousResourceCollection
+    {
+        return ProjectResource::collection(
+            $this->listVisibleProjects->handle($this->authenticatedUser($request)),
+        );
+    }
+
+    public function store(StoreProjectRequest $request): JsonResponse
+    {
+        $project = $this->createProject->handle($request->validated(), $this->authenticatedUser($request));
+
+        return ProjectResource::make($project)
+            ->additional([
+                'meta' => [
+                    'message' => "{$project->name} was created.",
+                ],
+            ])
+            ->response()
+            ->setStatusCode(201);
+    }
+
+    public function show(Request $request, Project $project): ProjectResource
+    {
+        $user = $this->authenticatedUser($request);
+
+        abort_unless(
+            $this->permissionService->allows($user, Permission::ProjectRead, $project),
+            403,
+        );
+
+        return ProjectResource::make($project);
+    }
+
+    public function destroy(DeleteProjectRequest $request, Project $project): JsonResponse
+    {
+        $request->validated();
+
+        $this->deleteProject->handle($project);
+
+        return response()->json(null, 204);
+    }
+}