Session 6.3

src/app/api/onboarding/route.ts

@@ -0,0 +1,145 @@
+import { NextResponse } from "next/server";
+import { getSessionUser } from "@/lib/session";
+import {
+  createTenantRequest,
+  getTenantRequestByOrgId,
+} from "@/lib/db";
+import { getTenant, listTenants } from "@/lib/k8s";
+import type { OnboardingInput } from "@/types";
+import { z } from "zod";
+
+const onboardingSchema = z.object({
+  agentName: z.string().min(1).max(50),
+  soulMd: z.string().max(10_000).optional(),
+  packages: z.array(z.string()).optional(),
+  billingAddress: z.object({
+    company: z.string().optional(),
+    street: z.string().optional(),
+    city: z.string().optional(),
+    postalCode: z.string().optional(),
+    country: z.string().optional(),
+  }),
+  billingNotes: z.string().max(2000).optional(),
+});
+
+/**
+ * GET /api/onboarding
+ * Returns the current onboarding status for the logged-in user's org.
+ * Used by the wizard/provisioning UI to poll state.
+ */
+export async function GET() {
+  const user = await getSessionUser();
+  if (!user)
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+
+  // Check if tenant already exists
+  const allTenants = await listTenants();
+  const myTenant = allTenants.find(
+    (t) => t.metadata.labels?.["pieced.ch/zitadel-org-id"] === user.orgId
+  );
+
+  if (myTenant) {
+    return NextResponse.json({
+      state: "provisioned",
+      tenant: {
+        name: myTenant.metadata.name,
+        phase: myTenant.status?.phase ?? "Pending",
+        message: myTenant.status?.message,
+        conditions: myTenant.status?.conditions,
+      },
+    });
+  }
+
+  // Check if there's a pending request
+  const request = await getTenantRequestByOrgId(user.orgId);
+
+  if (!request) {
+    return NextResponse.json({ state: "no_request" });
+  }
+
+  // If approved and tenant_name set, check provisioning status
+  if (
+    request.status === "provisioning" &&
+    request.tenantName
+  ) {
+    const tenant = await getTenant(request.tenantName);
+    if (tenant) {
+      return NextResponse.json({
+        state: "provisioning",
+        request,
+        tenant: {
+          name: tenant.metadata.name,
+          phase: tenant.status?.phase ?? "Pending",
+          message: tenant.status?.message,
+          conditions: tenant.status?.conditions,
+        },
+      });
+    }
+  }
+
+  return NextResponse.json({
+    state: request.status,
+    request,
+  });
+}
+
+/**
+ * POST /api/onboarding
+ * Submit the onboarding wizard. Creates a tenant_request with status "pending".
+ * The actual PiecedTenant CR is NOT created yet — admin approval required.
+ */
+export async function POST(request: Request) {
+  const user = await getSessionUser();
+  if (!user)
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+
+  // Check for existing request
+  const existing = await getTenantRequestByOrgId(user.orgId);
+  if (existing) {
+    return NextResponse.json(
+      { error: "Onboarding request already submitted.", request: existing },
+      { status: 409 }
+    );
+  }
+
+  // Check for existing tenant
+  const allTenants = await listTenants();
+  const myTenant = allTenants.find(
+    (t) => t.metadata.labels?.["pieced.ch/zitadel-org-id"] === user.orgId
+  );
+  if (myTenant) {
+    return NextResponse.json(
+      { error: "Tenant already exists." },
+      { status: 409 }
+    );
+  }
+
+  const body = await request.json();
+  const parsed = onboardingSchema.safeParse(body);
+  if (!parsed.success) {
+    return NextResponse.json(
+      { error: "Validation failed", details: parsed.error.flatten() },
+      { status: 400 }
+    );
+  }
+
+  const input: OnboardingInput = parsed.data;
+
+  const tenantRequest = await createTenantRequest({
+    zitadelOrgId: user.orgId,
+    zitadelUserId: user.id,
+    companyName: user.orgName,
+    contactName: user.name || user.email,
+    contactEmail: user.email,
+    agentName: input.agentName,
+    soulMd: input.soulMd,
+    packages: input.packages ?? [],
+    billingAddress: input.billingAddress,
+    billingNotes: input.billingNotes,
+  });
+
+  return NextResponse.json(
+    { message: "Onboarding request submitted.", request: tenantRequest },
+    { status: 201 }
+  );
+}