openapi: 3.0.3
info:
  title: Quanon Tenant Provisioning
  version: 1.0.0
  description: Admin-only tenant provision jobs (requires admin session + MFA).
servers:
  - url: http://localhost:4040
paths:
  /api/provision/tenant:
    post:
      summary: Create a tenant provision job
      parameters:
        - $ref: "#/components/parameters/SessionHeader"
      responses:
        "201":
          description: Job created
        "403":
          description: Admin required
  /api/admin/modules:
    get:
      summary: Admin module data (includes provisioning / support / audit-log)
      parameters:
        - $ref: "#/components/parameters/SessionHeader"
        - name: slug
          in: query
          required: true
          schema:
            type: string
            enum: [provisioning, support, audit-log, subscriptions, billing-and-payments]
      responses:
        "200":
          description: Module payload
components:
  parameters:
    SessionHeader:
      name: x-auth-session-id
      in: header
      required: true
      schema:
        type: string