openapi: 3.0.3
info:
  title: TenantPilot Admin Operations Contracts (Feature 054)
  version: 0.1.0
  description: |
    Minimal page-render contracts for the Monitoring/Operations hub.

    These pages must render from the database only (no external tenant calls)
    and display only sanitized failure detail (no secrets/tokens/raw payload dumps).

servers:
  - url: /

paths:
  /admin/t/{tenantExternalId}/bulk-operation-runs:
    get:
      operationId: monitoringOperationsIndex
      summary: Monitoring → Operations (tenant-scoped)
      parameters:
        - name: tenantExternalId
          in: path
          required: true
          schema:
            type: string
      responses:
        '200':
          description: Page renders successfully.
        '302':
          description: Redirect to login when unauthenticated.

  /admin/t/{tenantExternalId}/bulk-operation-runs/{bulkOperationRunId}:
    get:
      operationId: monitoringOperationsView
      summary: Operation run detail (tenant-scoped)
      parameters:
        - name: tenantExternalId
          in: path
          required: true
          schema:
            type: string
        - name: bulkOperationRunId
          in: path
          required: true
          schema:
            type: integer
      responses:
        '200':
          description: Page renders successfully.
        '302':
          description: Redirect to login when unauthenticated.
        '403':
          description: Forbidden when attempting cross-tenant access.

components: {}