@seedgrid/fe-subdomain-tenancy 2026.7.0

package/README.md

@@ -0,0 +1,75 @@
+# @seedgrid/fe-subdomain-tenancy
+
+[![npm version](https://img.shields.io/npm/v/%40seedgrid%2Ffe-subdomain-tenancy)](https://www.npmjs.com/package/@seedgrid/fe-subdomain-tenancy)
+[![npm downloads](https://img.shields.io/npm/dm/%40seedgrid%2Ffe-subdomain-tenancy)](https://www.npmjs.com/package/@seedgrid/fe-subdomain-tenancy)
+[![TypeScript](https://img.shields.io/badge/types-TypeScript-blue)](https://www.typescriptlang.org/)
+
+Módulo front de **multitenancy por subdomínio** do SeedGrid: cada tenant vive no seu subdomínio (`empresa.seudominio.com`), com signup público que cria o tenant + usuário root. É a variante de tenancy por subdomínio — a variante por seleção de empresa no login fica no [`@seedgrid/fe-login-tenancy`](https://www.npmjs.com/package/@seedgrid/fe-login-tenancy) (`variantGroup: "tenancy"`, use uma ou outra). Compõe sobre o motor de sessão do [`@seedgrid/fe-security`](https://www.npmjs.com/package/@seedgrid/fe-security).
+
+## Sumário
+
+- [Funcionalidades](#funcionalidades)
+- [Telas entregues pelo scaffold](#telas-entregues-pelo-scaffold)
+- [Instalação](#instalação)
+- [Uso rápido](#uso-rápido)
+- [Backend correspondente](#backend-correspondente)
+- [Suporte](#suporte)
+
+## Funcionalidades
+
+- **Signup de tenant** — cria o tenant + usuário root num só fluxo, com validação de e-mail por código e reenvio.
+- **Regras de subdomínio** — helpers puros: `normalizeSubdomain`, `validateSubdomain`, `isReservedSubdomain`, `getSubdomainValidationKey` e a lista `RESERVED_SUBDOMAINS` — a mesma validação do backend, disponível pro feedback em tempo real no formulário.
+- **Contexto de tenant no client** — `TenantProvider` / `useTenantContext` (em `@seedgrid/fe-subdomain-tenancy/client`), registrado automaticamente como provider do app pelo CLI.
+
+O pacote exporta:
+
+- `SubdomainTenancyPaths` — contrato dos endpoints públicos (`/public/tenants`, `validate-email`, `resend-email`).
+- DTOs client-safe do signup de tenant (`tenant-signup`) — conferidos contra o `TenantSignupRequest.java` real.
+- `subdomain-rules` (validação), `TenantProvider` (client) e `createSubdomainTenancyServer` (em `/server`, SERVER-ONLY, pra chamadas autenticadas pós-login).
+
+## Telas entregues pelo scaffold
+
+| Tela | Rota | O que faz |
+| --- | --- | --- |
+| Signup de tenant | `/signup` (público) | Wizard completo de cadastro BR (CNPJ, endereço via ViaCEP, UF/cidade), escolha de subdomínio com validação em tempo real e confirmação de e-mail |
+
+O scaffold também traz as rotas de apoio de localização (`/api/locations/states`, `/api/locations/cities`) e as server actions públicas do fluxo de signup (criação do tenant, validação de e-mail, reenvio de ativação) — tudo copiado pelo SeedGrid CLI via `module.json` (`id: "subdomain-tenancy"`, `requires: ["security"]`, `variantGroup: "tenancy"`, provider `TenantProvider` registrado automaticamente).
+
+## Instalação
+
+```bash
+pnpm add @seedgrid/fe-subdomain-tenancy @seedgrid/fe-security @seedgrid/fe-core
+```
+
+## Uso rápido
+
+```tsx
+// Client: validação de subdomínio em tempo real
+import { normalizeSubdomain, validateSubdomain } from "@seedgrid/fe-subdomain-tenancy";
+
+const sub = normalizeSubdomain(input);           // "Minha Empresa!" -> "minha-empresa"
+const erro = validateSubdomain(sub);             // null se ok; chave de erro se inválido/reservado
+```
+
+```tsx
+// Client: contexto do tenant corrente
+import { TenantProvider, useTenantContext } from "@seedgrid/fe-subdomain-tenancy/client";
+
+function Header() {
+  const { tenant } = useTenantContext();
+  return <span>{tenant?.name}</span>;
+}
+```
+
+## Backend correspondente
+
+Extensão Quarkus `seedgrid-quarkus-ext-subdomain-tenancy`. `SubdomainTenancyPaths` é espelho do `RestControllerPath.java` da extensão; os DTOs de signup foram conferidos contra o `TenantSignupRequest.java` real.
+
+## Suporte
+
+- Issues: https://github.com/SeedGrid/seedgrid-fe-components/issues
+- Repositório: https://github.com/SeedGrid/seedgrid-fe-components
+
+## Licença
+
+MIT

package/dist/client/index.d.ts

@@ -0,0 +1,2 @@
+export { TenantProvider, useTenantContext } from "./tenant-provider";
+//# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/client/index.js

@@ -0,0 +1,3 @@
+// Barrel CLIENT (@seedgrid/fe-subdomain-tenancy/client). React (hooks client).
+// Não importe daqui em código server-only.
+export { TenantProvider, useTenantContext } from "./tenant-provider";

package/dist/client/tenant-provider.d.ts

@@ -0,0 +1,11 @@
+import { type ReactNode } from "react";
+type TenantContextValue = {
+    currentTenant: string;
+    setTenant: (tenant: string) => void;
+};
+export declare function TenantProvider({ children }: {
+    children: ReactNode;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function useTenantContext(): TenantContextValue;
+export {};
+//# sourceMappingURL=tenant-provider.d.ts.map

package/dist/client/tenant-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-provider.d.ts","sourceRoot":"","sources":["../../src/client/tenant-provider.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAuC,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAE5E,KAAK,kBAAkB,GAAG;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC,CAAC;AAIF,wBAAgB,cAAc,CAAC,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,SAAS,CAAA;CAAE,2CAWnE;AAED,wBAAgB,gBAAgB,uBAQ/B"}

package/dist/client/tenant-provider.js

@@ -0,0 +1,19 @@
+"use client";
+import { jsx as _jsx } from "react/jsx-runtime";
+import { createContext, useContext, useState } from "react";
+const TenantContext = createContext(null);
+export function TenantProvider({ children }) {
+    const [currentTenant, setCurrentTenant] = useState("default");
+    const value = {
+        currentTenant,
+        setTenant: setCurrentTenant,
+    };
+    return (_jsx(TenantContext.Provider, { value: value, children: children }));
+}
+export function useTenantContext() {
+    const context = useContext(TenantContext);
+    if (!context) {
+        throw new Error("useTenantContext must be used inside TenantProvider");
+    }
+    return context;
+}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./tenant-signup";
+export * from "./paths";
+export * from "./subdomain-rules";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,cAAc,iBAAiB,CAAC;AAChC,cAAc,SAAS,CAAC;AACxB,cAAc,mBAAmB,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+// Barrel client-safe (@seedgrid/fe-subdomain-tenancy). Tipos + paths. Server em /server.
+// A tela de signup do tenant é BR-coupled (CNPJ/ViaCEP/UF) → SCAFFOLD (app owns).
+export * from "./tenant-signup";
+export * from "./paths";
+export * from "./subdomain-rules";

package/dist/module.d.ts

@@ -0,0 +1,3 @@
+import type { SeedGridCliModuleManifest } from "@seedgrid/fe-core";
+export declare const module: SeedGridCliModuleManifest;
+//# sourceMappingURL=module.d.ts.map

package/dist/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../src/module.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAWnE,eAAO,MAAM,MAAM,EAAE,yBAMpB,CAAC"}

package/dist/module.js

@@ -0,0 +1,16 @@
+// Reference-adjacent implementation of the manifest read by the SeedGrid CLI
+// (Rust). See seedgrid-cli/docs/adr/0004-module-manifest-contract.md.
+//
+// `variantGroup: "tenancy"` — mutually exclusive with `login-tenancy`
+// (chosen once at `seedgrid init`).
+//
+// `TenantProvider` has zero app coupling (pure React context, no `@/...`
+// imports) so it was promoted to lib — unlike fe-security's `AuthProvider`,
+// which hardcodes scaffold routes and had to stay in scaffold.
+export const module = {
+    id: "subdomain-tenancy",
+    requires: ["security"],
+    variantGroup: "tenancy",
+    configKey: "subdomain-tenancy",
+    provider: [{ import: "TenantProvider", from: "@seedgrid/fe-subdomain-tenancy/client" }],
+};

package/dist/module.json

@@ -0,0 +1,14 @@
+{
+  "id": "subdomain-tenancy",
+  "requires": [
+    "security"
+  ],
+  "variantGroup": "tenancy",
+  "configKey": "subdomain-tenancy",
+  "provider": [
+    {
+      "import": "TenantProvider",
+      "from": "@seedgrid/fe-subdomain-tenancy/client"
+    }
+  ]
+}

package/dist/paths.d.ts

@@ -0,0 +1,9 @@
+export declare const SubdomainTenancyPaths: {
+    /** POST — cria tenant + usuário root. */
+    readonly tenants: "/public/tenants";
+    /** POST — valida o e-mail do signup com o código. */
+    readonly validateEmail: "/public/tenants/validate-email";
+    /** POST — reenvia o e-mail de confirmação (query ?subdomain=). */
+    readonly resendEmail: (subdomain: string) => string;
+};
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,qBAAqB;IAChC,yCAAyC;;IAEzC,qDAAqD;;IAErD,kEAAkE;sCACzC,MAAM;CAEvB,CAAC"}

package/dist/paths.js

@@ -0,0 +1,10 @@
+// Paths de subdomain-tenancy (espelho de RestControllerPath.java em
+// seedgrid-quarkus-ext-subdomain-tenancy). Endpoints /public/* (pré-auth).
+export const SubdomainTenancyPaths = {
+    /** POST — cria tenant + usuário root. */
+    tenants: "/public/tenants",
+    /** POST — valida o e-mail do signup com o código. */
+    validateEmail: "/public/tenants/validate-email",
+    /** POST — reenvia o e-mail de confirmação (query ?subdomain=). */
+    resendEmail: (subdomain) => `/public/tenants/resend-email?subdomain=${encodeURIComponent(subdomain)}`,
+};

package/dist/server/create-subdomain-tenancy-server.d.ts

@@ -0,0 +1,12 @@
+import type { SecurityServer } from "@seedgrid/fe-security";
+import type { TenantSignupRequest, TenantSignupResult, TenantValidateEmailRequest } from "../tenant-signup";
+export interface SubdomainTenancyServer {
+    /** Cria o tenant + usuário root (dispara confirmação de e-mail). */
+    signupTenant(req: TenantSignupRequest): Promise<TenantSignupResult>;
+    /** Confirma o e-mail do signup com o código. */
+    validateEmail(req: TenantValidateEmailRequest): Promise<void>;
+    /** Reenvia o e-mail de confirmação. */
+    resendEmail(subdomain: string): Promise<void>;
+}
+export declare function createSubdomainTenancyServer(session: SecurityServer): SubdomainTenancyServer;
+//# sourceMappingURL=create-subdomain-tenancy-server.d.ts.map

package/dist/server/create-subdomain-tenancy-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-subdomain-tenancy-server.d.ts","sourceRoot":"","sources":["../../src/server/create-subdomain-tenancy-server.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAClB,0BAA0B,EAC3B,MAAM,kBAAkB,CAAC;AAO1B,MAAM,WAAW,sBAAsB;IACrC,oEAAoE;IACpE,YAAY,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpE,gDAAgD;IAChD,aAAa,CAAC,GAAG,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,uCAAuC;IACvC,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,cAAc,GACtB,sBAAsB,CAUxB"}

package/dist/server/create-subdomain-tenancy-server.js

@@ -0,0 +1,18 @@
+// Helpers server-side do signup de tenant (subdomain-tenancy). SERVER-ONLY.
+// Endpoints públicos (pré-auth) — o session server manda sem Bearer (ou serviceToken).
+//
+//   const session = createSecurityServer({ ... });
+//   export const tenants = createSubdomainTenancyServer(session);
+import { SubdomainTenancyPaths } from "../paths";
+const post = (body) => ({
+    method: "POST",
+    ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+});
+export function createSubdomainTenancyServer(session) {
+    const P = SubdomainTenancyPaths;
+    return {
+        signupTenant: (req) => session.apiFetchSecurity(P.tenants, post(req)),
+        validateEmail: (req) => session.apiFetchSecurity(P.validateEmail, post(req)),
+        resendEmail: (subdomain) => session.apiFetchSecurity(P.resendEmail(subdomain), post()),
+    };
+}

package/dist/server/index.d.ts

@@ -0,0 +1,2 @@
+export { createSubdomainTenancyServer, type SubdomainTenancyServer, } from "./create-subdomain-tenancy-server";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,4BAA4B,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,mCAAmC,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,2 @@
+// Barrel SERVER (@seedgrid/fe-subdomain-tenancy/server). Roda em action/route.
+export { createSubdomainTenancyServer, } from "./create-subdomain-tenancy-server";

package/dist/subdomain-rules.d.ts

@@ -0,0 +1,13 @@
+export declare const RESERVED_SUBDOMAINS: readonly ["panel", "admin", "adm", "api", "app", "auth", "backoffice", "billing", "dashboard", "dev", "docs", "email", "ftp", "help", "homolog", "internal", "mail", "manager", "monitor", "portal", "root", "seedgrid", "signin", "signup", "site", "smtp", "staging", "status", "suporte", "support", "system", "tenant", "test", "web", "www"];
+export type SubdomainValidationKey = "multitenancy.signup.fields.subdomain.validation.required" | "multitenancy.signup.fields.subdomain.validation.too_short" | "multitenancy.signup.fields.subdomain.validation.too_long" | "multitenancy.signup.fields.subdomain.validation.invalid_pattern" | "multitenancy.signup.fields.subdomain.validation.reserved";
+export declare function normalizeSubdomain(value: string): string;
+export declare function isReservedSubdomain(value: string): boolean;
+export declare function getSubdomainValidationKey(value: string): SubdomainValidationKey | null;
+/**
+ * `translate` is any function that resolves an i18n key to a display string
+ * (e.g. the app's own `t` from `@/i18n`). Kept as a plain function type
+ * instead of importing the app's `Translator` type, so this stays lib-safe
+ * (no `@/...` import).
+ */
+export declare function validateSubdomain(value: string, translate?: (key: SubdomainValidationKey) => string): string | null;
+//# sourceMappingURL=subdomain-rules.d.ts.map

package/dist/subdomain-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subdomain-rules.d.ts","sourceRoot":"","sources":["../src/subdomain-rules.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,mVAoCtB,CAAC;AAKX,MAAM,MAAM,sBAAsB,GAC9B,0DAA0D,GAC1D,2DAA2D,GAC3D,0DAA0D,GAC1D,iEAAiE,GACjE,0DAA0D,CAAC;AAE/D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,UAO/C;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,WAEhD;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GACZ,sBAAsB,GAAG,IAAI,CAwB/B;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,sBAAsB,KAAK,MAAM,iBASpD"}

package/dist/subdomain-rules.js

@@ -0,0 +1,82 @@
+export const RESERVED_SUBDOMAINS = [
+    "panel",
+    "admin",
+    "adm",
+    "api",
+    "app",
+    "auth",
+    "backoffice",
+    "billing",
+    "dashboard",
+    "dev",
+    "docs",
+    "email",
+    "ftp",
+    "help",
+    "homolog",
+    "internal",
+    "mail",
+    "manager",
+    "monitor",
+    "portal",
+    "root",
+    "seedgrid",
+    "signin",
+    "signup",
+    "site",
+    "smtp",
+    "staging",
+    "status",
+    "suporte",
+    "support",
+    "system",
+    "tenant",
+    "test",
+    "web",
+    "www",
+];
+const RESERVED_SUBDOMAIN_SET = new Set(RESERVED_SUBDOMAINS);
+const SUBDOMAIN_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+export function normalizeSubdomain(value) {
+    return value
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9-]/g, "-")
+        .replace(/-{2,}/g, "-")
+        .replace(/^-+|-+$/g, "");
+}
+export function isReservedSubdomain(value) {
+    return RESERVED_SUBDOMAIN_SET.has(normalizeSubdomain(value));
+}
+export function getSubdomainValidationKey(value) {
+    const normalized = normalizeSubdomain(value);
+    if (!normalized) {
+        return "multitenancy.signup.fields.subdomain.validation.required";
+    }
+    if (normalized.length < 3) {
+        return "multitenancy.signup.fields.subdomain.validation.too_short";
+    }
+    if (normalized.length > 32) {
+        return "multitenancy.signup.fields.subdomain.validation.too_long";
+    }
+    if (!SUBDOMAIN_PATTERN.test(normalized)) {
+        return "multitenancy.signup.fields.subdomain.validation.invalid_pattern";
+    }
+    if (isReservedSubdomain(normalized)) {
+        return "multitenancy.signup.fields.subdomain.validation.reserved";
+    }
+    return null;
+}
+/**
+ * `translate` is any function that resolves an i18n key to a display string
+ * (e.g. the app's own `t` from `@/i18n`). Kept as a plain function type
+ * instead of importing the app's `Translator` type, so this stays lib-safe
+ * (no `@/...` import).
+ */
+export function validateSubdomain(value, translate) {
+    const key = getSubdomainValidationKey(value);
+    if (!key) {
+        return null;
+    }
+    return translate ? translate(key) : key;
+}

package/dist/tenant-signup.d.ts

@@ -0,0 +1,59 @@
+/** UF brasileira (StateEnum) — ex.: "SP", "RJ". */
+export type BrazilianState = string;
+/** Endereço (AddressDTO aninhado). */
+export interface TenantAddress {
+    street: string;
+    number: string;
+    complement?: string | null;
+    postalCode: string;
+    city: string;
+    state: BrazilianState;
+    /** Bairro. */
+    district: string;
+    phone?: string | null;
+}
+/**
+ * Representante legal (LegalRepresentativeDTO aninhado). Espelha
+ * TenantSignupRequest.LegalRepresentativeDTO (seedgrid-quarkus-ext-subdomain-tenancy):
+ * firstName/lastName/phone são `@NotBlank` no backend (obrigatórios); cpf e
+ * birthDate são validados por formato mas não por `@NotBlank` explícito;
+ * whatsapp não tem nenhuma validação (opcional de verdade).
+ */
+export interface TenantLegalRepresentative {
+    firstName: string;
+    lastName: string;
+    cpf: string;
+    /** LocalDate "yyyy-MM-dd". */
+    birthDate: string;
+    phone: string;
+    whatsapp?: string | null;
+}
+/** POST /public/tenants — cria o tenant + usuário root. */
+export interface TenantSignupRequest {
+    subdomain: string;
+    cnpj: string;
+    /** Razão Social. */
+    corporateName: string;
+    /** Nome Fantasia. */
+    tradeName: string;
+    address: TenantAddress;
+    legalRepresentative: TenantLegalRepresentative;
+    rootEmail: string;
+    plainRootPassword: string;
+}
+/** POST /public/tenants/validate-email — confirma o e-mail com o código. */
+export interface TenantValidateEmailRequest {
+    subdomain: string;
+    code: string;
+}
+/**
+ * Resultado do signup (shape do backend não confirmado — flexível). O fluxo tem
+ * confirmação de e-mail (validate/resend), então normalmente volta um status pendente.
+ */
+export interface TenantSignupResult {
+    subdomain?: string;
+    status?: string;
+    message?: string;
+    [key: string]: unknown;
+}
+//# sourceMappingURL=tenant-signup.d.ts.map

package/dist/tenant-signup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-signup.d.ts","sourceRoot":"","sources":["../src/tenant-signup.ts"],"names":[],"mappings":"AAKA,mDAAmD;AACnD,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC,sCAAsC;AACtC,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,CAAC;IACtB,cAAc;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,2DAA2D;AAC3D,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,aAAa,CAAC;IACvB,mBAAmB,EAAE,yBAAyB,CAAC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,4EAA4E;AAC5E,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB"}

package/dist/tenant-signup.js

@@ -0,0 +1,5 @@
+// DTOs de cadastro de TENANT (subdomain-tenancy: cada tenant tem seu subdomínio/DB).
+// Espelham TenantSignupRequest (ext-subdomain-tenancy). Público (pré-auth). BR-coupled.
+// Distinto do login-tenancy (lá é 1 backend, N empresas, escolhe no login) e do
+// self-enter (lá é usuário name/email/password). Aqui cria um TENANT novo.
+export {};

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@seedgrid/fe-subdomain-tenancy",
+  "version": "2026.7.0",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SeedGrid/seedgrid-fe-components.git"
+  },
+  "homepage": "https://github.com/SeedGrid/seedgrid-fe-components",
+  "bugs": {
+    "url": "https://github.com/SeedGrid/seedgrid-fe-components/issues"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./server": {
+      "types": "./dist/server/index.d.ts",
+      "default": "./dist/server/index.js"
+    },
+    "./client": {
+      "types": "./dist/client/index.d.ts",
+      "default": "./dist/client/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "scaffold"
+  ],
+  "peerDependencies": {
+    "@seedgrid/fe-core": "*",
+    "@seedgrid/fe-security": "*",
+    "react": "^18.2.0 || ^19.0.0"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "react": "19.0.0",
+    "@types/react": "^19.0.0",
+    "@seedgrid/fe-core": "2026.7.1",
+    "@seedgrid/fe-security": "2026.7.2"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "postbuild": "node scripts/emit-module-manifest.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "pnpm run build && node --test tests/module-manifest.test.mjs tests/subdomain-rules.test.mjs"
+  }
+}

package/scaffold/README.md

@@ -0,0 +1,70 @@
+# `fe-subdomain-tenancy` scaffold
+
+Conteúdo copiado para dentro do app gerado pelo CLI (git do app, editável à
+vontade — ver `seedgrid-cli/docs/adr/0004-module-manifest-contract.md`).
+Extraído de `seedgrid-cli/templates/modules/multitenancy/` (nome pré-rename
+— ver `[[seedgrid-tenancy-rename]]`; a pasta local aqui já nasce renomeada
+pra `@/modules/subdomain-tenancy`, mas as CHAVES de i18n (`t("multitenancy.signup...")`)
+não foram renomeadas: elas são dado compartilhado com os arquivos de locale
+do base-app, que ficam fora do escopo desta extração).
+
+Mesmo critério lib vs scaffold do `fe-security` (ver o README dele): import
+`@/...` real = scaffold; puro ou so-um-default-trivial = lib.
+
+## Promovido pra `@seedgrid/fe-subdomain-tenancy` (lib)
+
+- `TenantProvider`/`useTenantContext` (`client/tenant-provider.tsx`, export em
+  `/client`) — contexto React puro, zero import `@/...`.
+- `subdomain-rules.ts` (`normalizeSubdomain`, `isReservedSubdomain`,
+  `getSubdomainValidationKey`, `validateSubdomain`, `RESERVED_SUBDOMAINS`) —
+  so tinha 1 import `@/...` (`type Translator` do `@/i18n`), e so como tipo
+  do parametro OPCIONAL de traducao. Trocado por um tipo de funcao generico
+  (`(key) => string`) — decopla sem mudar comportamento.
+
+## Ficou scaffold
+
+- `app/(public)/signup/page.tsx` — 21 marcadores handlebars reais (mantido
+  `.hbs`); tela inteira de cadastro de tenant (CNPJ/ViaCEP/UF), BR-coupled.
+- `app/api/locations/{cities,states}/route.ts` — route handlers: por
+  natureza SEMPRE scaffold (Next.js exige o arquivo num path fisico
+  especifico; nao e algo que se "importa" de um pacote).
+- `modules/subdomain-tenancy/server/{create-public-tenant-action,
+  resend-public-tenant-activation-email-action,
+  validate-public-tenant-email-action,public-api-base-url}.ts` — usam
+  `@/i18n` (mensagem de erro) e `@/config/environment`
+  (`resolveApiBaseUrlForHostname`, host-coupled).
+- `modules/subdomain-tenancy/signup/types.ts` — shapes de FORM (`PublicTenantSignupFormValues`,
+  `CreatePublicTenantPayload`) especificos da tela; mantidos scaffold-local
+  pra nao colidir com os tipos de contrato de backend que ja existem em
+  `tenant-signup.ts` (lib) — ver "Achado" abaixo.
+
+## Achado: `createSubdomainTenancyServer` nao serve pras 3 actions de signup
+
+O pacote ja tem um engine mais novo (`src/server/create-subdomain-tenancy-server.ts`,
+`createSubdomainTenancyServer(session: SecurityServer)`) que compoe sobre o
+`createSecurityServer` do `fe-security`. Mas as 3 actions de signup
+(`create-public-tenant-action` etc.) sao **pre-auth** — chamam
+`/public/tenants/**` com `requireAuth: false`, sem sessao nenhuma — enquanto
+`createSubdomainTenancyServer` usa `session.apiFetchSecurity`, que so faz
+sentido com uma sessao JA autenticada. Os dois nao se encaixam hoje: o
+engine novo foi desenhado pra chamadas autenticadas pos-login, nao pro
+fluxo de signup em si. Por isso as actions foram portadas verbatim (com
+`@/i18n`/`@/config/environment`/`@/modules/core`, comportamento preservado),
+em vez de reescritas em cima do engine novo — mesma decisao tomada no
+`fe-security` pros arquivos de `server/session-routes.ts` etc. Registrado
+como achado, nao corrigido aqui.
+
+## Corrigido: `TenantLegalRepresentative` (lib) estava incompleto
+
+Conferido contra o DTO real do backend
+(`seedgrid-quarkus-ext-subdomain-tenancy/.../dtos/TenantSignupRequest.java`,
+`LegalRepresentativeDTO`): `firstName`/`lastName`/`phone` sao `@NotBlank`
+(obrigatorios) e existe um campo `whatsapp` sem nenhuma validacao (opcional
+de verdade). `TenantLegalRepresentative` em `tenant-signup.ts` tinha `phone`
+como opcional (errado) e nao tinha `whatsapp` (faltando) — corrigido pra
+`phone: string` (obrigatorio) + `whatsapp?: string | null`. `name` (nome
+completo) NAO faz parte do DTO — e um getter computado
+(`getName() = firstName + " " + lastName`) so no lado Java, entao
+`CreatePublicTenantPayload.legalRepresentative.name` (scaffold,
+`signup/types.ts`) e so um extra enviado e ignorado pelo backend; nao e
+bug, so nao precisa existir no tipo da lib.