Live tenant-scoped functionality

Tenant customer intake

Subscribers and lead submissions scoped to this tenant only.

Admin tenant context: Arta · arta.auction · active

empty

Visible records

Live Sanity records returned for this workstream.

Tenant

Arta

Resolved from current admin host and Sanity site registry.

Open canonical Studio ↗Edit the tenant records in Sanity Studio.Configured Studio host ↗External Studio host. Check the functional action center status before relying on it for editor work.Open public site ↗View the public tenant website.Open superadmin registry ↗Review cross-network tenant configuration on the canonical command center.

Live records

0 returned · values are scoped and secret-safe

No live records returned for this workstream. This is a true empty state only when the status is empty; otherwise follow the diagnostics above.

Functional action center

Customers, leads, subscribers

This module uses authenticated dashboard workflows and diagnostic envelopes instead of placeholder copy. It can read, create, moderate, or launch the correct provider surface depending on this workstream's guardrails.

empty

Privacy-safe read-only summaries

Customer/account sync status

Loading live provider state…

Admin read-only

not configured

Latest snapshot

0 customers

Snapshot captured: not captured

Email domains: not available

Tags: not available

Sync all or condition-based per site

Customer sync rule builder

Preview: disabled · disabled · domain only · tag equals …

Customer sync rule result will appear here.

Live scoped records

Customer intake browser

No records match this filter. Empty means empty, not magic. Very enterprise.

← Back to admin dashboard

Tenant customer operations

Customers, leads, subscribers

Manage customer-intake records with consent/source metadata and export readiness.

operator workspace

Purpose

This surface is for newsletter subscribers, contact submissions, lead status, service inquiries, segmentation readiness, privacy-safe export controls, and audit-friendly intake history.

Capabilities

Newsletter subscriber intake
Lead submission schema
Consent text/timestamp/source metadata
Shopify customer/account sync rule controls
Lead status and follow-up workflow model
Customer pipeline counts and degraded states

Operational workflows

Review subscriber and lead counts.
Inspect consent/source metadata before export.
Configure disabled/all/condition-based Shopify customer sync when superadmin permits it.
Move leads through tenant-defined statuses once write UI exists.
Connect forms to Sanity write credentials for production persistence.

Guardrails

No customer data should leak across tenants.
Consent/source metadata must remain attached to each record.
Secrets and raw sensitive values must not be printed in dashboards.

API/schema contracts

These are technical contract references, not dashboard navigation. Protected APIs require authentication and may return JSON envelopes such as unauthenticated when opened directly.

/api/newsletter/api/admin/shopify/customer-syncnewsletterSubscriber schemaleadSubmission schemacustomerSyncRule schema

Use the dashboard workstream pages for human workflows. Use these contracts only from authenticated clients, tests, cron jobs, or approved agent integrations.

Next implementation actions

Configure SANITY_API_WRITE_TOKEN for production intake.
Configure Shopify Admin read-only token only if customer/account sync is approved.
Add authenticated lead list/update screens.
Add CSV/export controls behind tenant role checks.