B2C.tel · network governance

Tenants & domains

network-widerelease 9288ebbPublic site ↗Tenant admin ↗Studio ↗

Runtime-only enterprise onboarding

Import, register, and seed real tenant websites

This workflow runs only through authenticated superadmin runtime APIs. It fetches Shopify once into a central Sanity snapshot, registers public/admin hosts with Vercel, records DNS and nameserver problems, adds Sanity CORS origins when a management token exists, and seeds editable Sanity pages/posts/product enrichments for each domain.

Sign in as superadmin

DNS policy shown to operators

Accepted nameservers: ns1.vercel-dns.com, ns2.vercel-dns.com. Domains with other nameservers remain visible in the registry as needs_dns with remediation messages.

Live domain registry status
DomainStatusContentVercel / DNSWarnings
No matching domain records are visible yet. Run onboarding from this panel after signing in as superadmin.

Dashboard-only tenant creation test

Create or verify rug.news

This panel exercises the authenticated superadmin workflow from the dashboard. It creates a Sanity site record, default route/shop policy, feature gates, theme/SEO defaults, and an audit event. The canonical network-wide superadmin host is superadmin.b2c.tel; tenant aliases should stay tenant-scoped unless explicitly approved.

Sign in if required

rug.news registry state

Checking the authenticated registry…

Live network-wide functionality

Network tenant registry

All registered websites across the ecosystem, regardless of which superadmin host opened this dashboard.

ok

Visible records

28

Live Sanity records returned for this workstream.

site

28

Records with type site.

Diagnostics

  • Superadmin data is network-wide and intentionally independent of the current domain shortcut.
Open canonical Studio ↗Manage network records in Sanity Studio.Configured Studio host ↗External Studio host. Check the functional action center status before relying on it for editor work.Open tenant registry →Create, search, and verify tenant records.Open operations →Review credential and deployment status.

Live records

28 returned · values are scoped and secret-safe

Functional action center

Tenant and domain registry

This module uses authenticated dashboard workflows and diagnostic envelopes instead of placeholder copy. It can read, create, moderate, or launch the correct provider surface depending on this workstream's guardrails.

ok

Superadmin search/read path

Tenant registry live browser

Loading live provider state…
← Back to superadmin dashboard

Network tenant governance

Tenant and domain registry

Create, import, search, suspend, archive, and launch tenants with domains, origins, feature gates, and integration states.

needs configuration

Purpose

This surface is the network registry for sites, canonical domains, admin/public hosts, launch checklists, route presets, feature gates, and audit metadata.

Capabilities

  • Tenant list/search/create dashboard panel
  • Domain/admin/public host model
  • Feature gate and integration status model
  • Launch checklist governance
  • Suspend/archive/delete policy readiness

Operational workflows

  • Create tenant site config records from the superadmin dashboard.
  • Assign canonical/admin/public domains.
  • Track launch readiness and provider status.
  • Suspend/archive tenants with audit/rollback guidance.

Guardrails

  • Dangerous tenant lifecycle actions require confirmation and audit.
  • Tenant boundaries must not blur in superadmin views.
  • Domain changes need deployment/DNS verification.

API/schema contracts

These are technical contract references, not dashboard navigation. Protected APIs require authentication and may return JSON envelopes such as unauthenticated when opened directly.

/api/admin/tenantssite schemaadminAuditEvent schema

Use the dashboard workstream pages for human workflows. Use these contracts only from authenticated clients, tests, cron jobs, or approved agent integrations.

Next implementation actions

  • Sign in as an allowlisted superadmin.
  • Create/verify the rug.news tenant through the dashboard panel.
  • Add domain verification integration with Vercel.