@thinkai/tai-api-contract 1.0.3 → 1.1.0

package/openapi/openapi.yaml

@@ -1,19 +1,19 @@
 openapi: 3.0.3
 info:
   title: ThinkAI API
-  version: 0.16.1
+  version: 1.1.0
   description: >
     Contract surface for the Performance Intelligence Platform backend used by ThinkAI.
     Workspace-scoped routes use `/workspaces/{workspaceId}/...`.
-    Legacy tenant-scoped routes (`/tenants/{tenantId}/...`, `/me/tenants`) are deprecated in runtime and return `410 Gone`.
+    Legacy tenant-scoped routes (`/tenants/{tenantId}/...`, `/me/tenants`) were removed from runtime.
     Admin routes use `/admin/...` and require role `admin`.
     Legacy HTTP routes that exist on the server but are not listed here (for example
-    `PUT /tenants/{tenantId}/dashboard-settings`) remain supported for existing PIP clients;
+    `PUT /workspaces/{workspaceId}/dashboard-settings`) remain supported for existing PIP clients;
     prefer OpenAPI-documented equivalents where available. Removal will be coordinated with ThinkAI releases.
 security:
   - bearerAuth: []
 tags:
-  - name: Tenant
+  - name: Workspace
     description: Workspace bootstrap (§13)
   - name: CompanyProfile
     description: Company profile (§1)
@@ -38,32 +38,11 @@ tags:
   - name: Me
     description: Authenticated user profile (§11)
   - name: Preferences
-    description: Per-user per-tenant preferences (§12)
+    description: Per-user per-workspace preferences (§12)
   - name: OrgChartImport
     description: Org chart import via storage path (§14)
 
 paths:
-  /tenants:
-    post:
-      tags: [Tenant]
-      summary: Create tenant
-      operationId: createTenant
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              $ref: "#/components/schemas/CreateTenantBodyDto"
-      responses:
-        "201":
-          description: Tenant created or acknowledged (idempotent; same body if already existed)
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/CreateTenantResponseDto"
-        "401":
-          $ref: "#/components/responses/Unauthorized"
-
   /me:
     get:
       tags: [Me]
@@ -111,7 +90,7 @@ paths:
 
   /workspaces:
     post:
-      tags: [Tenant]
+      tags: [Workspace]
       summary: Create workspace
       operationId: createWorkspace
       requestBody:
@@ -130,56 +109,16 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /workspaces/{workspaceId}/organization:
-    get:
-      tags: [CompanyProfile]
-      summary: Get workspace organization profile
-      operationId: getWorkspaceOrganization
-      parameters:
-        - name: workspaceId
-          in: path
-          required: true
-          schema: { type: string }
-      responses:
-        "200":
-          description: Organization profile or null if unset
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/OrganizationDto"
-        "401":
-          $ref: "#/components/responses/Unauthorized"
-    put:
-      tags: [CompanyProfile]
-      summary: Upsert workspace organization profile
-      operationId: putWorkspaceOrganization
-      parameters:
-        - name: workspaceId
-          in: path
-          required: true
-          schema: { type: string }
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              $ref: "#/components/schemas/OrganizationDto"
-      responses:
-        "204":
-          description: Updated
-        "401":
-          $ref: "#/components/responses/Unauthorized"
-
-  /tenants/{tenantId}/members:
+  /workspaces/{workspaceId}/members:
     get:
-      tags: [Tenant]
-      summary: List tenant team members
+      tags: [Workspace]
+      summary: List workspace team members
       operationId: listTenantMembers
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "200":
-          description: Team members for tenant
+          description: Team members for workspace
           content:
             application/json:
               schema:
@@ -189,13 +128,13 @@ paths:
         "403":
           $ref: "#/components/responses/Forbidden"
 
-  /tenants/{tenantId}/members/invite:
+  /workspaces/{workspaceId}/members/invite:
     post:
-      tags: [Tenant]
-      summary: Invite member to tenant
+      tags: [Workspace]
+      summary: Invite member to workspace
       operationId: inviteTenantMember
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -214,13 +153,13 @@ paths:
         "403":
           $ref: "#/components/responses/Forbidden"
 
-  /tenants/{tenantId}/members/{memberId}:
+  /workspaces/{workspaceId}/members/{memberId}:
     patch:
-      tags: [Tenant]
-      summary: Update tenant member role
+      tags: [Workspace]
+      summary: Update workspace member role
       operationId: updateTenantMemberRole
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
         - name: memberId
           in: path
           required: true
@@ -245,11 +184,11 @@ paths:
         "404":
           description: Member not found
     delete:
-      tags: [Tenant]
-      summary: Remove member from tenant
+      tags: [Workspace]
+      summary: Remove member from workspace
       operationId: removeTenantMember
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
         - name: memberId
           in: path
           required: true
@@ -264,13 +203,13 @@ paths:
         "404":
           description: Member not found
 
-  /tenants/{tenantId}/org-chart:
+  /workspaces/{workspaceId}/org-chart:
     get:
-      tags: [Tenant]
+      tags: [Workspace]
       summary: Get org chart tree
       operationId: getTenantOrgChart
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
         - name: withScores
           in: query
           schema: { type: boolean }
@@ -284,13 +223,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
         "404":
-          description: Tenant not found
+          description: Workspace not found
     post:
-      tags: [Tenant]
+      tags: [Workspace]
       summary: Save org chart tree
       operationId: postTenantOrgChart
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -304,20 +243,20 @@ paths:
             application/json:
               schema:
                 type: object
-                required: [ok, tenantId]
+                required: [ok, workspaceId]
                 properties:
                   ok: { type: boolean }
-                  tenantId: { type: string }
+                  workspaceId: { type: string }
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/sources:
+  /workspaces/{workspaceId}/sources:
     put:
-      tags: [Tenant]
-      summary: Replace tenant data sources
+      tags: [Workspace]
+      summary: Replace workspace data sources
       operationId: putTenantSources
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -337,20 +276,20 @@ paths:
             application/json:
               schema:
                 type: object
-                required: [ok, tenantId]
+                required: [ok, workspaceId]
                 properties:
                   ok: { type: boolean }
-                  tenantId: { type: string }
+                  workspaceId: { type: string }
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/sources/test:
+  /workspaces/{workspaceId}/sources/test:
     post:
-      tags: [Tenant]
+      tags: [Workspace]
       summary: Test one source connection (does not persist)
       operationId: postTenantSourceTest
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -369,13 +308,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/dashboard/productivity:
+  /workspaces/{workspaceId}/dashboard/productivity:
     get:
-      tags: [Tenant]
+      tags: [Workspace]
       summary: CTO dashboard productivity snapshot
       operationId: getDashboardProductivity
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
         - name: scope
           in: query
           schema:
@@ -400,13 +339,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/dashboard/productivity/history:
+  /workspaces/{workspaceId}/dashboard/productivity/history:
     get:
-      tags: [Tenant]
+      tags: [Workspace]
       summary: CTO dashboard productivity time series
       operationId: getDashboardProductivityHistory
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
         - name: bucket
           in: query
           schema: { type: string, enum: [day, week, month] }
@@ -596,36 +535,60 @@ paths:
         "403":
           $ref: "#/components/responses/Forbidden"
 
-  /tenants/{tenantId}/company-profile:
+  /workspaces/{workspaceId}/company-profile:
     get:
       tags: [CompanyProfile]
       summary: Get company profile
       operationId: getCompanyProfile
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "200":
-          description: Profile or JSON null if unset
+          description: >
+            Company profile DTO, or JSON `null` when the workspace exists but no profile
+            has been saved yet. Clients should treat `null` as the empty initial state
+            (the wizard renders blank inputs); they MUST NOT treat the absence of a
+            saved profile as a 404.
           content:
             application/json:
               schema:
                 $ref: "#/components/schemas/CompanyProfileDto"
               examples:
                 sample:
+                  summary: Saved profile
                   value:
                     companyName: Acme
                     industry: software
                     companySize: "51-200"
                     engineeringHC: "42"
                     headquarters: "Austin, TX"
+        "400":
+          description: Malformed workspaceId
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+        "404":
+          description: Workspace does not exist
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
     put:
       tags: [CompanyProfile]
       summary: Upsert company profile
       operationId: putCompanyProfile
+      description: >
+        Idempotent upsert of the workspace's company profile. On success, also
+        synchronizes `tai_workspaces.name` to the new `companyName` so subsequent
+        calls to `GET /me/workspaces` reflect the updated display name. Repeated
+        PUTs replace the stored payload entirely.
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -635,16 +598,30 @@ paths:
       responses:
         "204":
           description: Saved
+        "400":
+          description: Body fails validation (missing/invalid required field, bad enum, conditional rule)
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+        "404":
+          description: Workspace does not exist
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
 
-  /tenants/{tenantId}/ai-readiness:
+  /workspaces/{workspaceId}/ai-readiness:
     get:
       tags: [AIReadiness]
       summary: Get AI readiness
       operationId: getAiReadiness
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "200":
           description: State or JSON null
@@ -659,7 +636,7 @@ paths:
       summary: Upsert AI readiness
       operationId: putAiReadiness
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -672,13 +649,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/ai-readiness/maturity:
+  /workspaces/{workspaceId}/ai-readiness/maturity:
     post:
       tags: [AIReadiness]
       summary: Compute maturity level
       operationId: postAiReadinessMaturity
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -695,13 +672,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/tech-stack:
+  /workspaces/{workspaceId}/tech-stack:
     get:
       tags: [TechStack]
       summary: Get tech stack
       operationId: getTechStack
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "200":
           description: Stack or JSON null
@@ -716,7 +693,7 @@ paths:
       summary: Upsert tech stack
       operationId: putTechStack
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -729,13 +706,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/nda:
+  /workspaces/{workspaceId}/nda:
     get:
       tags: [NDA]
       summary: Get NDA completion state
       operationId: getNda
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "200":
           description: Completion or JSON null
@@ -746,13 +723,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/nda/template:
+  /workspaces/{workspaceId}/nda/template:
     get:
       tags: [NDA]
       summary: NDA template for display
       operationId: getNdaTemplate
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "200":
           description: Template
@@ -763,13 +740,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/nda/sign:
+  /workspaces/{workspaceId}/nda/sign:
     post:
       tags: [NDA]
       summary: Electronic NDA signature
       operationId: postNdaSign
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -786,7 +763,7 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/nda/external:
+  /workspaces/{workspaceId}/nda/external:
     post:
       tags: [NDA]
       summary: External NDA path (after Supabase upload)
@@ -795,7 +772,7 @@ paths:
         Multipart variant may be supported by the server as an alternative.
       operationId: postNdaExternal
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -812,13 +789,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/readiness/repos:
+  /workspaces/{workspaceId}/readiness/repos:
     get:
       tags: [RepositoryReadiness]
       summary: List repo readiness scores
       operationId: listReadinessRepos
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "200":
           description: Repositories analyzed
@@ -831,13 +808,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/readiness/repos/{repoId}:
+  /workspaces/{workspaceId}/readiness/repos/{repoId}:
     get:
       tags: [RepositoryReadiness]
       summary: Single repo readiness
       operationId: getReadinessRepo
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
         - $ref: "#/components/parameters/RepoId"
       responses:
         "200":
@@ -849,13 +826,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/readiness/dimensions:
+  /workspaces/{workspaceId}/readiness/dimensions:
     get:
       tags: [RepositoryReadiness]
       summary: Readiness dimensions catalog
       operationId: listReadinessDimensions
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "200":
           description: Dimensions
@@ -868,13 +845,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/readiness/fixes:
+  /workspaces/{workspaceId}/readiness/fixes:
     get:
       tags: [RepositoryReadiness]
       summary: List fix requests
       operationId: listReadinessFixes
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "200":
           description: Fix queue
@@ -891,7 +868,7 @@ paths:
       summary: Enqueue fix for an issue
       operationId: postReadinessFix
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -908,13 +885,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/squad:
+  /workspaces/{workspaceId}/squad:
     get:
       tags: [SquadProjects]
       summary: Get squad configuration
       operationId: getSquad
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "200":
           description: Squad
@@ -929,7 +906,7 @@ paths:
       summary: Upsert squad
       operationId: putSquad
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -942,13 +919,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/projects:
+  /workspaces/{workspaceId}/projects:
     get:
       tags: [SquadProjects]
       summary: List projects
       operationId: listProjects
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "200":
           description: Projects
@@ -965,7 +942,7 @@ paths:
       summary: Create project
       operationId: createProject
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -982,13 +959,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/projects/{projectId}:
+  /workspaces/{workspaceId}/projects/{projectId}:
     patch:
       tags: [SquadProjects]
       summary: Update project
       operationId: patchProject
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
         - $ref: "#/components/parameters/ProjectId"
       requestBody:
         required: true
@@ -1006,13 +983,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/notifications:
+  /workspaces/{workspaceId}/notifications:
     get:
       tags: [Notifications]
       summary: Paginated notifications
       operationId: listNotifications
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
         - name: limit
           in: query
           schema: { type: integer, minimum: 1 }
@@ -1029,13 +1006,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/notifications/{id}/read:
+  /workspaces/{workspaceId}/notifications/{id}/read:
     post:
       tags: [Notifications]
       summary: Mark notification read
       operationId: postNotificationRead
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
         - $ref: "#/components/parameters/NotificationId"
       responses:
         "204":
@@ -1043,26 +1020,26 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/notifications/read-all:
+  /workspaces/{workspaceId}/notifications/read-all:
     post:
       tags: [Notifications]
       summary: Mark all notifications read
       operationId: postNotificationsReadAll
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "204":
           description: Updated
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/ai-strategy/recommend:
+  /workspaces/{workspaceId}/ai-strategy/recommend:
     post:
       tags: [AIStrategy]
       summary: Generate AI strategy recommendations
       operationId: postAiStrategyRecommend
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -1079,28 +1056,45 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/journey/progress:
+  /workspaces/{workspaceId}/journey/progress:
     get:
       tags: [Journey]
       summary: Journey step completion
       operationId: getJourneyProgress
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       responses:
         "200":
-          description: Progress
+          description: Progress (empty completedSteps when no row exists yet; updatedAt is synthetic in that case)
           content:
             application/json:
               schema:
                 $ref: "#/components/schemas/JourneyProgressDto"
+        "400":
+          description: Malformed workspaceId
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+        "404":
+          description: Workspace does not exist
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
     put:
       tags: [Journey]
       summary: Replace completed steps
       operationId: putJourneyProgress
+      description: >
+        Idempotent replace-all of completed route strings. Returns the persisted
+        JourneyProgressDto including updatedAt.
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -1108,18 +1102,34 @@ paths:
             schema:
               $ref: "#/components/schemas/JourneyProgressUpdateDto"
       responses:
-        "204":
-          description: Saved
+        "200":
+          description: Saved progress
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/JourneyProgressDto"
+        "400":
+          description: Body fails validation (non-array, invalid entries, too many steps)
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
         "401":
           $ref: "#/components/responses/Unauthorized"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+        "404":
+          description: Workspace does not exist
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorMessageDto"
 
-  /tenants/{tenantId}/me/preferences:
+  /me/preferences:
     get:
       tags: [Preferences]
-      summary: Get preferences for current user in tenant
+      summary: Get preferences for current user
       operationId: getMyPreferences
-      parameters:
-        - $ref: "#/components/parameters/TenantId"
       responses:
         "200":
           description: Preferences
@@ -1133,8 +1143,6 @@ paths:
       tags: [Preferences]
       summary: Upsert preferences
       operationId: putMyPreferences
-      parameters:
-        - $ref: "#/components/parameters/TenantId"
       requestBody:
         required: true
         content:
@@ -1147,13 +1155,13 @@ paths:
         "401":
           $ref: "#/components/responses/Unauthorized"
 
-  /tenants/{tenantId}/org-chart/import:
+  /workspaces/{workspaceId}/org-chart/import:
     post:
       tags: [OrgChartImport]
       summary: Import org chart from Supabase storage path
       operationId: postOrgChartImport
       parameters:
-        - $ref: "#/components/parameters/TenantId"
+        - $ref: "#/components/parameters/WorkspaceId"
       requestBody:
         required: true
         content:
@@ -1180,8 +1188,8 @@ components:
       description: Supabase access token (`Authorization` header).
 
   parameters:
-    TenantId:
-      name: tenantId
+    WorkspaceId:
+      name: workspaceId
       in: path
       required: true
       schema:
@@ -1241,16 +1249,16 @@ components:
 
     CreateTenantBodyDto:
       type: object
-      required: [tenantId]
+      required: [workspaceId]
       properties:
-        tenantId:
+        workspaceId:
           type: string
 
     CreateTenantResponseDto:
       type: object
-      required: [tenantId, ok]
+      required: [workspaceId, ok]
       properties:
-        tenantId:
+        workspaceId:
           type: string
         ok:
           type: boolean
@@ -1354,9 +1362,9 @@ components:
 
     DashboardProductivityDto:
       type: object
-      required: [tenantId, windowStart, windowEnd, scope, metrics]
+      required: [workspaceId, windowStart, windowEnd, scope, metrics]
       properties:
-        tenantId:
+        workspaceId:
           type: string
         windowStart:
           type: string
@@ -1452,27 +1460,6 @@ components:
         name:
           type: string
 
-    OrganizationDto:
-      type: object
-      required: [workspaceId, legalName]
-      properties:
-        workspaceId:
-          type: string
-        legalName:
-          type: string
-        industry:
-          type: string
-        companySize:
-          type: string
-        engineeringHeadcount:
-          type: integer
-          nullable: true
-        headquarters:
-          type: string
-        metadata:
-          type: object
-          additionalProperties: true
-
     CompanyProfileDto:
       type: object
       required: [companyName, industry, companySize, engineeringHC, headquarters]
@@ -2244,30 +2231,42 @@ components:
           items:
             type: string
 
+    ThemePreference:
+      type: string
+      enum: [light, dark, system]
+
+    NotificationPreferencesDto:
+      type: object
+      additionalProperties: false
+      required: [status, comment, activity, system]
+      properties:
+        status:
+          type: boolean
+          description: Sync/health status notifications.
+        comment:
+          type: boolean
+          description: Comments and mentions.
+        activity:
+          type: boolean
+          description: General activity feed.
+        system:
+          type: boolean
+          description: System / platform announcements.
+
     PreferencesDto:
       type: object
+      additionalProperties: false
       required: [theme, sidebarCollapsed, timezone, notifications]
       properties:
         theme:
-          type: string
-          enum: [light, dark, system]
+          $ref: "#/components/schemas/ThemePreference"
         sidebarCollapsed:
           type: boolean
         timezone:
           type: string
           description: IANA timezone name
         notifications:
-          type: object
-          required: [status, comment, activity, system]
-          properties:
-            status:
-              type: boolean
-            comment:
-              type: boolean
-            activity:
-              type: boolean
-            system:
-              type: boolean
+          $ref: "#/components/schemas/NotificationPreferencesDto"
 
     OrgChartImportBodyDto:
       type: object