Add project command API

docs/project-history-and-external-model-architecture.md

@@ -167,7 +167,12 @@ Completed foundation:
 - domain writes, audit revisions and stack transitions share one transaction;
   a forced stack failure rolls all of them back
 - `GET /api/projects/:projectId/history` exposes current revision, stack depths
-  and top change-set ids without enabling mutation endpoints
+  and top change-set ids
+- a central application dispatcher executes the supported `circuit.update`
+  and `circuit-device-row.update` envelopes without coupling the domain service
+  to SQLite
+- public command, undo and redo endpoints require an expected revision; undo
+  and redo reconstruct the eligible persisted inverse or forward command
 
 Remaining constraints before completing persistent history:
 
@@ -176,10 +181,9 @@ Remaining constraints before completing persistent history:
   command envelope is complete
 - route the remaining structural, synchronization and destructive domain
   writes through the shared command, revision and stack transaction boundary
-- add public command execution plus undo/redo endpoints; read-only revision and
-  stack eligibility state is already exposed
 - replace the session-local frontend command stack only after server-side
-  command execution and inverse application are complete
+  command coverage is complete for structural, destructive and synchronization
+  operations
 - do not model IFCGUID as an overloaded circuit equipment identifier
 - keep database backup/restore checks separate from project history tests