documentation-specialist
8e20336e67
Review fixes for PR #57, all verified against the #2056 OpenAPI SSOT (molecule-core workspace-server/docs/openapi/management.yaml on feat/openapi-management-spec) and the authoritative handler/client source. 1. [HIGH] Billing-mode is a TENANT route, not CP. Rewrote tasks.mdx, reference.mdx, auth-model.mdx (+index.mdx note): it is PUT/GET /admin/workspaces/:id/llm-billing-mode on the tenant host, auth = Org API Key + X-Molecule-Org-Id, keyed by workspace id, body {"mode": platform_managed|byok|disabled} ({"mode":null} clears, {} -> 400). Removed the "not reachable with an Org API Key" callout and the CP llm-billing-mode reference row. 2. [HIGH] Provision/deprovision moved to the stable /api/v1/workspaces/* surface (tasks.mdx, reference.mdx, auth-model.mdx, index.mdx). Deprovision security = provisionSecret (Authorization: Bearer) + the per-tenant admin token in X-Molecule-Admin-Token (verified in cp_provisioner.go), not Authorization / X-Molecule-Org-Id. 3. [MED] Pinned budget route (GET/PATCH /workspaces/:id/budget, tenant, Org API Key, canonical multi-period budget_limits map per budget.go) and the billing-mode mode enum; dropped the "verify against handler" hedges on both. 4. [LOW] Added the `disabled` enum value wherever billing-mode was described. 5. [LOW] Fixed the broken anchor: scoped-roles--coming-soon (em-dash slugifies to a double hyphen; verified against built HTML). Fumadocs build (next build) green; all internal links + heading anchors resolve, including the corrected scoped-roles anchor. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>