Response Schemas

Single Resource

Returns the resource directly with no wrapper:

{
  "id": "...",
  "email": "...",
  "username": "..."
}

Collection

{
  "data": [],
  "pagination": {
    "nextCursor": "eyJpZCI6MTAwfQ==",
    "hasMore": true
  }
}

Auth Response

Access token in JSON body, refresh token as HTTP-only cookie:

{
  "accessToken": "eyJ...",
  "user": { "id": "...", "email": "...", "username": "...", "..." }
}

Set-Cookie header: refreshToken=<jwt>; HttpOnly; Secure; SameSite=Strict; Path=/auth; Max-Age=604800

Async Job Accepted

{
  "jobId": "uuid"
}

Used by: run, AI message, AI hint, AI review, static analysis.

Submission variant: { "submissionId": "uuid" }. Poll GET /submissions/:submissionId for aggregated results.

Error

{
  "statusCode": 400,
  "code": "VALIDATION_FAILED",
  "message": "Invalid email format",
  "timestamp": "2026-03-10T12:00:00Z",
  "details": {
    "fields": [
      { "field": "email", "constraint": "isEmail", "value": "not-an-email" }
    ]
  }
}

The code field is a machine-readable UPPER_SNAKE_CASE identifier (see Error Taxonomy).

Response Schemas

Single Resource#

Collection#

Auth Response#

Async Job Accepted#

Error#

Single Resource

Collection

Auth Response

Async Job Accepted

Error