/**
 * Onboarding Routes — REST API for Cloud Portal onboarding sessions.
 *
 * Provides session lifecycle management for KR3 sub-5-minute onboarding:
 *   POST   /api/onboarding/sessions         — Create a new session
 *   GET    /api/onboarding/sessions          — List the caller's sessions
 *   GET    /api/onboarding/sessions/:id      — Get session by ID (owner-scoped)
 *   PUT    /api/onboarding/sessions/:id      — Update session (owner-scoped)
 *   POST   /api/onboarding/sessions/:id/prefill   — Store prefill data (owner-scoped)
 *   POST   /api/onboarding/sessions/:id/approve   — Approve profile (owner-scoped)
 *   POST   /api/onboarding/sessions/:id/complete  — Mark session terminal (owner-scoped, KR3 magic-moment timestamp)
 *   POST   /api/onboarding/provision         — Provision final team (owner-scoped)
 *
 * Every endpoint runs behind `requireAuth` so each request carries
 * `req.user.userId` (the authenticated principal). The principal is
 * forwarded to {@link OnboardingService} as the owner scope for every
 * read and mutation, which closes the cross-tenant leak originally
 * introduced in `b29de620` and surfaced by Arch's review of PR #347
 * (item N1, Phase E pre-beta).
 *
 * @module controllers/onboarding/onboarding.routes
 */
import { Router } from 'express';
export declare function createOnboardingRouter(): Router;
//# sourceMappingURL=onboarding.routes.d.ts.map