feat: initial public release

ConsentOS — a privacy-first cookie consent management platform.

Self-hosted, source-available alternative to OneTrust, Cookiebot, and
CookieYes. Full standards coverage (IAB TCF v2.2, GPP v1, Google
Consent Mode v2, GPC, Shopify Customer Privacy API), multi-tenant
architecture with role-based access, configuration cascade
(system → org → group → site → region), dark-pattern detection in
the scanner, and a tamper-evident consent record audit trail.

This is the initial public release. Prior development history is
retained internally.

See README.md for the feature list, architecture overview, and
quick-start instructions. Licensed under the Elastic Licence 2.0 —
self-host freely; do not resell as a managed service.

apps/admin-ui/src/api/compliance-scores.ts

@@ -0,0 +1,37 @@
+import type {
+  ComplianceScoreSummary,
+  ComplianceScoreTrendResponse,
+  ValidationResultResponse,
+} from '../types/api';
+import apiClient from './client';
+
+export async function getComplianceScoreSummary(
+  siteId: string,
+): Promise<ComplianceScoreSummary> {
+  const { data } = await apiClient.get<ComplianceScoreSummary>(
+    `/sites/${siteId}/compliance-scores`,
+  );
+  return data;
+}
+
+export async function getComplianceScoreTrend(
+  siteId: string,
+  params?: { framework?: string; days?: number },
+): Promise<ComplianceScoreTrendResponse> {
+  const { data } = await apiClient.get<ComplianceScoreTrendResponse>(
+    `/sites/${siteId}/compliance-scores/trend`,
+    { params },
+  );
+  return data;
+}
+
+export async function triggerConsentValidation(
+  siteId: string,
+  url?: string,
+): Promise<ValidationResultResponse> {
+  const { data } = await apiClient.post<ValidationResultResponse>(
+    `/sites/${siteId}/validate-consent`,
+    url ? { url } : null,
+  );
+  return data;
+}