Quickstart

> list my boards

[
  {
    "id": "a1b2c3d4-...",
    "name": "My Project",
    "created_at": "2026-05-07T10:00:00Z"
  }
]

# From Claude Code:
> create a board called "Auth Project"

# From UI:
# Settings → Boards → New Board

> create an ideation: "I want to add user authentication to my app"

{
  "id": "9c64cdac-...",
  "title": "Add user authentication",
  "raw_request": "I want to add user authentication to my app",
  "status": "draft",
  "scope_assessment": null
}

> evaluate ideation 9c64cdac

{
  "domains": 3,
  "ambiguity": 4,
  "dependencies": 2,
  "ambiguity_notes": "Auth strategy unspecified (OAuth, password, passkey); session management approach unclear; email verification scope undefined"
}

> ask ideation questions

Q1 (choice): Which authentication strategy should we use?
  A. Email + password with bcrypt hashing
  B. OAuth only (Google, GitHub)
  C. Both: password-based with optional OAuth link
  D. Passkeys / WebAuthn (passwordless)

> answer: A — email + password with bcrypt

{
  "question_id": "q-001",
  "answer": "Email + password with bcrypt hashing",
  "answered_by": "agent:claude-code",
  "timestamp": "2026-05-07T10:03:41Z"
}

> derive spec from ideation 9c64cdac

{
  "id": "spec-8a3f...",
  "title": "User Authentication — Email + Password",
  "problem_statement": "The application has no authentication layer. Users cannot register, log in, or maintain sessions.",
  "acceptance_criteria": [
    "User can register with email and password",
    "Password is stored as bcrypt hash (cost factor ≥ 12)",
    "User can log in and receive a session token",
    "Invalid credentials return 401 with no information leakage",
    "Session expires after 30 days of inactivity"
  ],
  "functional_requirements": ["..."],
  "test_scenarios": [],
  "business_rules": [],
  "status": "draft"
}

> add acceptance criterion: "Password reset via email link with 1-hour expiry"

> submit spec evaluation

> suggest sprints for spec spec-8a3f

> create sprint "Auth Sprint 1" with objective "Ship registration and login endpoints"

> create card: "Implement POST /auth/register endpoint"
  type: task
  description: "Register endpoint: accept email + password, validate format, hash with bcrypt (cost 12), store user, return 201 + user ID. Return 409 on duplicate email."
  sprint: Auth Sprint 1

> move card to in_progress