openapi: 3.1.0
info:
  title: TenantPilot — Managed Tenant Onboarding (073)
  version: 0.1.0
  description: |
    Workspace-scoped onboarding wizard routes. These are UI endpoints (Filament/Livewire),
    but documented here for contract clarity.
servers:
  - url: https://example.invalid
paths:
  /admin/w/{workspace}/managed-tenants:
    get:
      summary: Managed tenants landing (workspace-scoped)
      parameters:
        - name: workspace
          in: path
          required: true
          schema:
            type: string
      responses:
        '200':
          description: Renders managed tenants landing page.
        '403':
          description: Workspace member missing required capability (where applicable).
        '404':
          description: Workspace not found or user not a member (deny-as-not-found).
  /admin/w/{workspace}/managed-tenants/onboarding:
    get:
      summary: Managed tenant onboarding wizard (workspace-scoped)
      parameters:
        - name: workspace
          in: path
          required: true
          schema:
            type: string
      responses:
        '200':
          description: Renders onboarding wizard page.
        '403':
          description: Workspace member missing onboarding capability.
        '404':
          description: Workspace not found or user not a member (deny-as-not-found).

  /admin/register-tenant:
    get:
      summary: Legacy tenant registration entry point
      deprecated: true
      responses:
        '404':
          description: Must be removed / behave as not found (FR-001).