Public surface

Tenant-aware public entrypoints

This surface is for unauthenticated entrypoints such as embedded chat, hosted intake, and other public-facing endpoints that resolve tenant context before a client or operator signs in.

Embedded chat surfaces

Customer-facing chat widgets and iframe mounts should resolve tenant scope here first, backed by app-owned public bootstrap APIs rather than provider-specific embeds.

Hosted intake links

Shareable tenant routes like /acme/chat can start or resume a conversation thread before any operator or workspace login exists.

Public endpoint contract

Unauthenticated callbacks, bootstrap handlers, and future webhook-style entrypoints stay isolated from /platform and /workspace.

Entrypoint routes

Public intake stays separate from platform and workspace auth.

Hosted tenant intake

/[tenantSlug]/chat

Bootstrap API

/api/public/tenants/[tenantSlug]/sessions/bootstrap

Operator access

/platform/sign-in

Client workspace access

/workspace/sign-in · /workspace/sign-up

Auth handler

/api/auth/[...all]

Platform sign in Workspace sign in Create workspace login