feat: add multi-tenant institution workspaces with role hierarchy (#399)

backend/src/docs/openapi.ts

@@ -645,8 +645,7 @@ const options: swaggerJsdoc.Options = {
       { name: 'Quantum', description: 'Quantum computing integrations' },
       { name: 'QuantumEncryption', description: 'Quantum-resistant encryption primitives' },
       { name: 'FraudDetection', description: 'Submission fraud and plagiarism detection' },
-      { name: 'Tenants', description: 'Multi-tenant management' },
-      { name: 'TenantAnalytics', description: 'Cross-tenant analytics' },
+      { name: 'Tenants', description: 'Multi-tenant institution workspaces' },
       { name: 'AutonomousAgents', description: 'Autonomous AI agent management' },
       { name: 'Jobs', description: 'Background job processing with retry and dead-letter queues' },
       { name: 'Pagination', description: 'Cursor-based pagination, filtering, and sorting standards' },

backend/src/index.ts

@@ -301,6 +301,11 @@ app.use('/api/translate', translationRoutes);
 const localizationRoutes = loadRoute('./routes/localization');
 app.use('/api/localization', localizationRoutes);
 
+// Multi-tenant institution workspaces — Issue #399
+// @ts-ignore
+const tenantsRoutes = loadRoute('./routes/tenants');
+app.use('/api/tenants', tenantsRoutes);
+
 // Bulk operations routes (Admin) – Issue #262
 // @ts-ignore
 const bulkOperationsRoutes = loadRoute('./routes/bulkOperations');
@@ -377,6 +382,7 @@ app.use('/api/v1/time-lock', timeLockCredentialsRoutes);
 app.use('/api/v1/vrf', vrfRoutes);
 app.use('/api/v1/translate', translationRoutes);
 app.use('/api/v1/localization', localizationRoutes);
+app.use('/api/v1/tenants', tenantsRoutes);
 app.use('/api/v1/cross-protocol-bridge', crossProtocolBridgeRoutes);
 app.use('/api/v1/audit', auditRoutes);
 app.get('/api/v1/health', (req, res) => {