name: multitenant-development description: Specialized skill for working with the multitenant system including tenant detection, data isolation, tenant-specific configuration, and RLS policies. Use when implementing multitenant features, creating APIs that handle multiple tenants, configuring tenant assets, or debugging data isolation issues.

Multitenant Development

Quick Start

When working with multitenant features:

1. Always verify tenant with getTenantFromRequest() in APIs and middleware
2. Never make queries without filtering by tenant_id
3. Ensure RLS policies include tenant verification
4. Configure tenant-specific assets in public/tenants/{tenant_slug}/
5. Usar getTenantAssetPath(tenant, assetPath, fallback) para URLs de assets (incluye cache busting ?v= por deploy)

Key Files

• src/lib/tenant/tenant-service.ts - Main tenant service
• src/lib/tenant/tenant-assets.ts - URLs de assets con cache busting (Supabase o local)
• src/middleware.ts - Tenant detection
• src/components/TenantThemeStyles.tsx - Tenant styles
• supabase/migrations/* - RLS migrations
• optimize-pintemas-assets-upload.js - Subir assets de tenants al bucket tenant-assets

Common Patterns

API with Tenant Isolation

import { getTenantFromRequest } from '@/lib/tenant/tenant-service';
import { createClient } from '@/lib/supabase/server';

export async function GET(request: NextRequest) {
  const tenant = await getTenantFromRequest(request);
  if (!tenant) {
    return NextResponse.json({ error: 'Tenant not found' }, { status: 404 });
  }
  
  const supabase = createClient();
  const { data, error } = await supabase
    .from('products')
    .select('*')
    .eq('tenant_id', tenant.id);
  
  if (error) {
    return NextResponse.json({ error: error.message }, { status: 500 });
  }
  
  return NextResponse.json(data);
}

RLS Policy

CREATE POLICY "tenant_isolation_products" ON products
  FOR ALL
  USING (
    tenant_id = (
      SELECT id FROM tenants 
      WHERE slug = current_setting('app.tenant_slug', true)
    )
  );

Tenant Assets

Usar getTenantAssetPath() para que las URLs lleven cache busting y se actualicen tras cada deploy:

import { getTenantAssetPath } from '@/lib/tenant/tenant-assets';

const tenant = useTenant();
const logoPath = getTenantAssetPath(tenant, 'logo.svg', '/images/logo/logo.svg');
const primaryColor = tenant.primary_color || '#ea5a17';

• Assets en Supabase: bucket tenant-assets, ruta tenants/{slug}/.... Subir con node optimize-pintemas-assets-upload.js.
• Tras cambiar assets: hacer deploy y purgar caché CDN (npm run cache:purge o Vercel → Settings → Caches) para que se vean pronto en todos los dispositivos. Ver docs/CACHE_PURGE_ANTES_DEPLOY.md.

Checklist

• Verify tenant in each request
• Include tenant_id in all queries
• Verify RLS policies are active
• Test with multiple tenants
• Verify data isolation
• Configure tenant assets if needed