@seedgrid/fe-subdomain-tenancy 2026.7.0

package/scaffold/src/app/api/locations/cities/route.ts

@@ -0,0 +1,125 @@
+import { type NextRequest, NextResponse } from "next/server";
+
+const CITIES_API_BASE_URL = "https://cities.seedgrid.com.br";
+
+type CityOption = {
+  id: string;
+  label: string;
+  value: string;
+  data: {
+    cityId: string;
+    stateId: string;
+  };
+};
+
+export async function GET(request: NextRequest) {
+  const query = request.nextUrl.searchParams.get("query")?.trim().toLowerCase() ?? "";
+  const stateId = request.nextUrl.searchParams.get("stateId")?.trim() ?? "";
+  const apiUsername = process.env.SEEDGRID_CITIES_API_USERNAME?.trim();
+  const apiKey = process.env.SEEDGRID_CITIES_API_KEY?.trim();
+  const authorizationHeader = apiUsername && apiKey
+    ? `Basic ${Buffer.from(`${apiUsername}:${apiKey}`).toString("base64")}`
+    : "";
+
+  if (!authorizationHeader || !stateId) {
+    return NextResponse.json([], { status: 200 });
+  }
+
+  try {
+    const upstream = await fetch(
+      `${CITIES_API_BASE_URL}/cities?stateId=${encodeURIComponent(stateId)}`,
+      {
+        method: "GET",
+        headers: {
+          accept: "application/json",
+          Authorization: authorizationHeader,
+        },
+        cache: "no-store",
+      }
+    );
+
+    if (!upstream.ok) {
+      return NextResponse.json([], { status: upstream.status });
+    }
+
+    const payload = await upstream.json();
+    const options = normalizeCityOptions(payload).filter((item) => {
+      if (!query) {
+        return true;
+      }
+
+      return item.label.toLowerCase().includes(query);
+    });
+
+    return NextResponse.json(options, { status: 200 });
+  } catch {
+    return NextResponse.json([], { status: 200 });
+  }
+}
+
+function normalizeCityOptions(payload: unknown): CityOption[] {
+  const records = Array.isArray(payload)
+    ? payload
+    : Array.isArray(readProperty(payload, "data"))
+      ? (readProperty(payload, "data") as unknown[])
+      : [];
+
+  return records
+    .map((record) => {
+      const cityId = readNumber(record, "id");
+      const stateId =
+        readNumber(record, "stateId") ??
+        readNumber(record, "estadoId") ??
+        readNumber(record, "state_id");
+      const cityName =
+        readString(record, "name") ??
+        readString(record, "nome") ??
+        readString(record, "label") ??
+        readString(record, "descricao");
+
+      if (!cityId || !stateId || !cityName) {
+        return null;
+      }
+
+      return {
+        id: cityId,
+        label: cityName,
+        value: cityName,
+        data: {
+          cityId,
+          stateId,
+        },
+      } satisfies CityOption;
+    })
+    .filter((item): item is CityOption => item !== null);
+}
+
+function readProperty(value: unknown, key: string) {
+  if (!value || typeof value !== "object") {
+    return null;
+  }
+
+  return Reflect.get(value, key);
+}
+
+function readString(value: unknown, key: string) {
+  const candidate = readProperty(value, key);
+
+  return typeof candidate === "string" && candidate.trim()
+    ? candidate.trim()
+    : null;
+}
+
+function readNumber(value: unknown, key: string) {
+  const candidate = readProperty(value, key);
+
+  if (typeof candidate === "number" && Number.isFinite(candidate)) {
+    return String(candidate);
+  }
+
+  if (typeof candidate === "string" && candidate.trim()) {
+    return candidate.trim();
+  }
+
+  return null;
+}

package/scaffold/src/app/api/locations/states/route.ts

@@ -0,0 +1,120 @@
+import { type NextRequest, NextResponse } from "next/server";
+
+const CITIES_API_BASE_URL = "https://cities.seedgrid.com.br";
+
+type StateOption = {
+  id: string;
+  label: string;
+  value: string;
+  data: {
+    stateId: string;
+  };
+};
+
+export async function GET(request: NextRequest) {
+  const query = request.nextUrl.searchParams.get("query")?.trim().toLowerCase() ?? "";
+  const apiUsername = process.env.SEEDGRID_CITIES_API_USERNAME?.trim();
+  const apiKey = process.env.SEEDGRID_CITIES_API_KEY?.trim();
+  const authorizationHeader = apiUsername && apiKey
+    ? `Basic ${Buffer.from(`${apiUsername}:${apiKey}`).toString("base64")}`
+    : "";
+
+  if (!authorizationHeader) {
+    return NextResponse.json([], { status: 200 });
+  }
+
+  try {
+    const upstream = await fetch(`${CITIES_API_BASE_URL}/states?countryId=1`, {
+      method: "GET",
+      headers: {
+        accept: "application/json",
+        Authorization: authorizationHeader,
+      },
+      cache: "no-store",
+    });
+
+    if (!upstream.ok) {
+      return NextResponse.json([], { status: upstream.status });
+    }
+
+    const payload = await upstream.json();
+    const options = normalizeStateOptions(payload).filter((item) => {
+      if (!query) {
+        return true;
+      }
+
+      return `${item.value} ${item.label}`.toLowerCase().includes(query);
+    });
+
+    return NextResponse.json(options, { status: 200 });
+  } catch {
+    return NextResponse.json([], { status: 200 });
+  }
+}
+
+function normalizeStateOptions(payload: unknown): StateOption[] {
+  const records = Array.isArray(payload)
+    ? payload
+    : Array.isArray(readProperty(payload, "data"))
+      ? (readProperty(payload, "data") as unknown[])
+      : [];
+
+  return records
+    .map((record) => {
+      const stateId = readNumber(record, "id");
+      const stateCode =
+        readString(record, "uf") ??
+        readString(record, "code") ??
+        readString(record, "abbreviation") ??
+        readString(record, "sigla");
+      const stateName =
+        readString(record, "name") ??
+        readString(record, "nome") ??
+        readString(record, "label") ??
+        readString(record, "descricao");
+
+      if (!stateId || !stateCode || !stateName) {
+        return null;
+      }
+
+      return {
+        id: stateId,
+        label: `${stateCode} - ${stateName}`,
+        value: stateCode,
+        data: {
+          stateId,
+        },
+      } satisfies StateOption;
+    })
+    .filter((item): item is StateOption => item !== null);
+}
+
+function readProperty(value: unknown, key: string) {
+  if (!value || typeof value !== "object") {
+    return null;
+  }
+
+  return Reflect.get(value, key);
+}
+
+function readString(value: unknown, key: string) {
+  const candidate = readProperty(value, key);
+
+  return typeof candidate === "string" && candidate.trim()
+    ? candidate.trim()
+    : null;
+}
+
+function readNumber(value: unknown, key: string) {
+  const candidate = readProperty(value, key);
+
+  if (typeof candidate === "number" && Number.isFinite(candidate)) {
+    return String(candidate);
+  }
+
+  if (typeof candidate === "string" && candidate.trim()) {
+    return candidate.trim();
+  }
+
+  return null;
+}

package/scaffold/src/modules/subdomain-tenancy/index.ts

@@ -0,0 +1,20 @@
+// seedgrid:managed
+
+export {
+  buildCreatePublicTenantPayload,
+  createEmptyPublicTenantSignupForm,
+  type CreatePublicTenantActionResult,
+  type CreatePublicTenantPayload,
+  type PublicTenantSignupFormValues,
+} from "./signup/types";
+
+// Promovidos pra lib versionada (@seedgrid/fe-subdomain-tenancy) — ver ADR
+// 0004/0005 e o scaffold README do fe-security pro criterio lib vs scaffold
+// usado nesta extracao (mesma regra: import `@/...` real = scaffold).
+export {
+  RESERVED_SUBDOMAINS,
+  isReservedSubdomain,
+  normalizeSubdomain,
+  validateSubdomain,
+} from "@seedgrid/fe-subdomain-tenancy";
+export { TenantProvider, useTenantContext } from "@seedgrid/fe-subdomain-tenancy/client";

package/scaffold/src/modules/subdomain-tenancy/server/create-public-tenant-action.ts

@@ -0,0 +1,113 @@
+"use server";
+
+// seedgrid:managed
+
+import { getTranslator } from "@/i18n";
+import { ApiClientError, createApiClient } from "@seedgrid/fe-core";
+import { captureException, runGuarded } from "@/modules/core";
+
+import {
+  type CreatePublicTenantActionResult,
+  type CreatePublicTenantPayload,
+} from "../signup/types";
+import { resolvePublicApiBaseUrl } from "./public-api-base-url";
+import { normalizeSubdomain, validateSubdomain } from "@seedgrid/fe-subdomain-tenancy";
+
+export async function createPublicTenantAction(
+  payload: CreatePublicTenantPayload
+): Promise<CreatePublicTenantActionResult> {
+  return runGuarded(async () => {
+    const t = getTranslator();
+    const normalizedSubdomain = normalizeSubdomain(payload.subdomain);
+    const subdomainValidation = validateSubdomain(normalizedSubdomain, t);
+
+    if (subdomainValidation) {
+      return {
+        ok: false,
+        message: subdomainValidation,
+        status: 400,
+      };
+    }
+
+    const client = createApiClient({
+      baseUrl: await resolvePublicApiBaseUrl(),
+      defaultCache: "no-store",
+    });
+
+    try {
+      await client.post("/public/tenants", {
+        body: {
+          ...payload,
+          subdomain: normalizedSubdomain,
+        },
+        requireAuth: false,
+        retry: {
+          attempts: 2,
+          baseDelayMs: 350,
+          retryOn: [429, 502, 503, 504],
+        },
+        cache: "no-store",
+      });
+
+      return {
+        ok: true,
+        tenantSubdomain: normalizedSubdomain,
+        rootEmail: payload.rootEmail,
+        message: t("multitenancy.signup.actions.create.success"),
+      };
+    } catch (error) {
+      if (error instanceof ApiClientError) {
+        return {
+          ok: false,
+          message: extractApiErrorMessage(error, t),
+          status: error.status,
+        };
+      }
+
+      await captureException(error, {
+        area: "server",
+        source: "multitenancy.createPublicTenantAction",
+      });
+
+      return {
+        ok: false,
+        message: t("multitenancy.signup.actions.create.unavailable"),
+      };
+    }
+  });
+}
+
+function extractApiErrorMessage(error: ApiClientError, t: ReturnType<typeof getTranslator>) {
+  const body = error.responseBody;
+
+  if (typeof body === "string" && body.trim()) {
+    return body;
+  }
+
+  if (body && typeof body === "object") {
+    const message =
+      pickObjectString(body, "userMessage") ??
+      pickObjectString(body, "message") ??
+      pickObjectString(body, "error") ??
+      pickObjectString(body, "detail");
+
+    if (message) {
+      return message;
+    }
+  }
+
+  if (error.status === 409) {
+    return t("multitenancy.signup.actions.create.conflict");
+  }
+
+  if (error.status === 400) {
+    return t("multitenancy.signup.actions.create.invalid_payload");
+  }
+
+  return t("multitenancy.signup.actions.create.generic");
+}
+
+function pickObjectString(value: object, key: string) {
+  const candidate = Reflect.get(value, key);
+  return typeof candidate === "string" && candidate.trim() ? candidate : null;
+}

package/scaffold/src/modules/subdomain-tenancy/server/public-api-base-url.ts

@@ -0,0 +1,28 @@
+"use server";
+
+// seedgrid:managed
+
+import { headers } from "next/headers";
+
+import { resolveApiBaseUrlForHostname } from "@/config/environment";
+
+export async function resolvePublicApiBaseUrl() {
+  const requestHeaders = await headers();
+  const hostname = resolveRequestHostname(requestHeaders);
+
+  if (!hostname) {
+    throw new Error(
+      "Could not resolve the public API base URL. Access the app through a configured domain hostname and provide the corresponding host header."
+    );
+  }
+
+  return resolveApiBaseUrlForHostname(hostname);
+}
+
+function resolveRequestHostname(requestHeaders: Headers) {
+  const forwardedHost = requestHeaders.get("x-forwarded-host")?.trim();
+  const hostHeader = requestHeaders.get("host")?.trim();
+  const candidate = forwardedHost || hostHeader || "";
+
+  return candidate.replace(/:\d+$/, "");
+}

package/scaffold/src/modules/subdomain-tenancy/server/resend-public-tenant-activation-email-action.ts

@@ -0,0 +1,118 @@
+"use server";
+
+// seedgrid:managed
+
+import { getTranslator } from "@/i18n";
+import { ApiClientError, createApiClient } from "@seedgrid/fe-core";
+import { captureException, runGuarded } from "@/modules/core";
+
+import { normalizeSubdomain, validateSubdomain } from "@seedgrid/fe-subdomain-tenancy";
+import { resolvePublicApiBaseUrl } from "./public-api-base-url";
+
+type ResendPublicTenantActivationEmailActionResult =
+  | {
+      ok: true;
+      message: string;
+    }
+  | {
+      ok: false;
+      message: string;
+      status?: number;
+    };
+
+export async function resendPublicTenantActivationEmailAction(
+  subdomain: string
+): Promise<ResendPublicTenantActivationEmailActionResult> {
+  return runGuarded(async () => {
+    const t = getTranslator();
+    const normalizedSubdomain = normalizeSubdomain(subdomain);
+    const subdomainValidation = validateSubdomain(normalizedSubdomain, t);
+
+    if (subdomainValidation) {
+      return {
+        ok: false,
+        message: subdomainValidation,
+        status: 400,
+      };
+    }
+
+    const client = createApiClient({
+      baseUrl: await resolvePublicApiBaseUrl(),
+      defaultCache: "no-store",
+    });
+
+    try {
+      const response = await client.post<{ message?: string }>(
+        "/public/tenants/resend-email",
+        {
+          query: {
+            subdomain: normalizedSubdomain,
+          },
+          requireAuth: false,
+          retry: {
+            attempts: 2,
+            baseDelayMs: 350,
+            retryOn: [429, 502, 503, 504],
+          },
+          cache: "no-store",
+        }
+      );
+
+      return {
+        ok: true,
+        message:
+          response.message?.trim() ||
+          t("multitenancy.signup.actions.resend.success"),
+      };
+    } catch (error) {
+      if (error instanceof ApiClientError) {
+        return {
+          ok: false,
+          message: extractApiErrorMessage(error, t),
+          status: error.status,
+        };
+      }
+
+      await captureException(error, {
+        area: "server",
+        source: "multitenancy.resendPublicTenantActivationEmailAction",
+      });
+
+      return {
+        ok: false,
+        message: t("multitenancy.signup.actions.resend.unavailable"),
+      };
+    }
+  });
+}
+
+function extractApiErrorMessage(error: ApiClientError, t: ReturnType<typeof getTranslator>) {
+  const body = error.responseBody;
+
+  if (typeof body === "string" && body.trim()) {
+    return body;
+  }
+
+  if (body && typeof body === "object") {
+    const message =
+      pickObjectString(body, "userMessage") ??
+      pickObjectString(body, "message") ??
+      pickObjectString(body, "error") ??
+      pickObjectString(body, "detail");
+
+    if (message) {
+      return message;
+    }
+  }
+
+  if (error.status === 404) {
+    return t("multitenancy.signup.actions.resend.not_found");
+  }
+
+  return t("multitenancy.signup.actions.resend.generic");
+}
+
+function pickObjectString(value: object, key: string) {
+  const candidate = Reflect.get(value, key);
+  return typeof candidate === "string" && candidate.trim() ? candidate : null;
+}

package/scaffold/src/modules/subdomain-tenancy/server/validate-public-tenant-email-action.ts

@@ -0,0 +1,138 @@
+"use server";
+
+// seedgrid:managed
+
+import { getTranslator } from "@/i18n";
+import { ApiClientError, createApiClient } from "@seedgrid/fe-core";
+import { captureException, runGuarded } from "@/modules/core";
+
+import { normalizeSubdomain, validateSubdomain } from "@seedgrid/fe-subdomain-tenancy";
+import { resolvePublicApiBaseUrl } from "./public-api-base-url";
+
+type ValidatePublicTenantEmailActionPayload = {
+  subdomain: string;
+  code: string;
+};
+
+type ValidatePublicTenantEmailActionResult =
+  | {
+      ok: true;
+      message: string;
+    }
+  | {
+      ok: false;
+      message: string;
+      status?: number;
+    };
+
+export async function validatePublicTenantEmailAction(
+  payload: ValidatePublicTenantEmailActionPayload
+): Promise<ValidatePublicTenantEmailActionResult> {
+  return runGuarded(async () => {
+    const t = getTranslator();
+    const normalizedSubdomain = normalizeSubdomain(payload.subdomain);
+    const subdomainValidation = validateSubdomain(normalizedSubdomain, t);
+
+    if (subdomainValidation) {
+      return {
+        ok: false,
+        message: subdomainValidation,
+        status: 400,
+      };
+    }
+
+    const normalizedCode = payload.code.replace(/\D/g, "").slice(0, 6);
+
+    if (normalizedCode.length !== 6) {
+      return {
+        ok: false,
+        message: t("multitenancy.signup.actions.validate.code_required"),
+        status: 400,
+      };
+    }
+
+    const client = createApiClient({
+      baseUrl: await resolvePublicApiBaseUrl(),
+      defaultCache: "no-store",
+    });
+
+    try {
+      const response = await client.post<{ message?: string }>(
+        "/public/tenants/validate-email",
+        {
+          body: {
+            subdomain: normalizedSubdomain,
+            code: normalizedCode,
+          },
+          requireAuth: false,
+          retry: {
+            attempts: 2,
+            baseDelayMs: 350,
+            retryOn: [429, 502, 503, 504],
+          },
+          cache: "no-store",
+        }
+      );
+
+      return {
+        ok: true,
+        message:
+          response.message?.trim() ||
+          t("multitenancy.signup.actions.validate.success"),
+      };
+    } catch (error) {
+      if (error instanceof ApiClientError) {
+        return {
+          ok: false,
+          message: extractApiErrorMessage(error, t),
+          status: error.status,
+        };
+      }
+
+      await captureException(error, {
+        area: "server",
+        source: "multitenancy.validatePublicTenantEmailAction",
+      });
+
+      return {
+        ok: false,
+        message: t("multitenancy.signup.actions.validate.unavailable"),
+      };
+    }
+  });
+}
+
+function extractApiErrorMessage(error: ApiClientError, t: ReturnType<typeof getTranslator>) {
+  const body = error.responseBody;
+
+  if (typeof body === "string" && body.trim()) {
+    return body;
+  }
+
+  if (body && typeof body === "object") {
+    const message =
+      pickObjectString(body, "userMessage") ??
+      pickObjectString(body, "message") ??
+      pickObjectString(body, "error") ??
+      pickObjectString(body, "detail");
+
+    if (message) {
+      return message;
+    }
+  }
+
+  if (error.status === 404) {
+    return t("multitenancy.signup.actions.validate.not_found");
+  }
+
+  if (error.status === 400) {
+    return t("multitenancy.signup.actions.validate.invalid_code");
+  }
+
+  return t("multitenancy.signup.actions.validate.generic");
+}
+
+function pickObjectString(value: object, key: string) {
+  const candidate = Reflect.get(value, key);
+  return typeof candidate === "string" && candidate.trim() ? candidate : null;
+}