test: School Creation, Onboarding Wizard & Multi-Tenant Isolation

[guillermoscript]

Scope

The school creation funnel, first-time admin onboarding, and multi-tenant data isolation (each school sees only its own data).

Personas

Persona	Email	Role
New creator	fresh account	creates school
Admin/Owner	owner@e2etest.com	Default School admin
Creator Admin	creator@codeacademy.com	Code Academy Pro admin
Student	student@e2etest.com	Default School
Alice	alice@student.com	Code Academy Pro

Local Dev Setup

Two tenants accessible locally:

• school.lvh.me:3000 → Default School (owner@e2etest.com)
• codeacademy.lvh.me:3000 → Code Academy Pro (creator@codeacademy.com)

Ensure NEXT_PUBLIC_PLATFORM_DOMAIN=lvh.me:3000 in .env.local.

Test Cases

School Creation Flow

• /create-school on main domain: unauthenticated → shows sign-up step first
• /create-school: authenticated → skips auth, shows school naming step
• Slug auto-generated from name, editable, live preview shown
• Duplicate slug → rejected with clear error
• Successful creation: tenants row + tenant_users (admin role) created
• After creation: cross-subdomain auth redirect to new school subdomain
• New admin on new subdomain sees onboarding wizard (first visit only)

Onboarding Wizard

• Steps shown: school branding, connect Stripe, create first course, invite team
• Each step completable independently
• Completed steps marked as done in wizard
• "Skip" works for optional steps (Stripe)
• Wizard dismisses after all steps done or explicit dismiss
• Wizard does NOT show again after completion (localStorage/DB flag)

Join School Flow

• Student visits school subdomain without being a member → redirected to /join-school
• /join-school: Join button → creates tenant_users row with student role
• After joining: redirected to /dashboard/student
• Already-joined user visiting /join-school → redirected to dashboard without duplicate row

Multi-Tenant Data Isolation

• owner@e2etest.com at Default School: sees only Default School courses/students
• creator@codeacademy.com at Code Academy Pro: sees only Code Academy Pro data
• Student on Default School (school.lvh.me:3000) cannot see Code Academy Pro courses
• Student on Code Academy Pro (codeacademy.lvh.me:3000) cannot see Default School courses
• Manually crafting URL with another school's course_id → returns 404 or access denied
• Admin cannot see another tenant's transactions/enrollments/users

Role-Based Route Guards (middleware)

• Student visiting /dashboard/admin → redirected to /dashboard/student
• Student visiting /dashboard/teacher → redirected to /dashboard/student
• Teacher visiting /dashboard/admin → redirected to /dashboard/teacher
• Unauthenticated user visiting any /dashboard/* → redirected to /auth/login

Cross-Tenant Access (negative test)

• owner@e2etest.com logged in at Default School subdomain — visiting codeacademy.lvh.me:3000 → redirected to /join-school for Code Academy Pro (not auto-joined)

Definition of Done

• New school creation fully functional end-to-end
• RLS confirmed: zero data leakage between tenants on all tested routes
• Middleware role guards work for all three role types
• Onboarding wizard only shows once per admin

[guillermoscript]

QA — school-creation form + multi-tenant isolation (read-path, no tenants created)

Scoped to read-path only — no new tenants created (no final submit, no Join clicked). Tested as owner@e2etest.com.

School Creation form (/create-school) ✅

Check	Result
Authenticated → skips signup, shows naming step	✅ "Signed in as owner@e2etest.com" banner
Slug auto-generated from name	✅ "QA Test Academy 2026" → qa-test-academy-2026 (lowercase, spaces→hyphens, numbers kept)
Live subdomain preview	✅ qa-test-academy-2026.lvh.me:3000
Validation hint	✅ "Only lowercase letters, numbers, and hyphens"

Cross-Tenant Isolation ✅ (negative test)

• owner@e2etest.com (Default School member) visiting Code Academy Pro /dashboard/admin → redirected to /join-school — not auto-joined, no access granted. Page correctly shows "You're already a member of: • Default School". ✅

Role-based route guards ✅ (code-verified in proxy.ts)

• /dashboard/student & role≠student → redirect to /dashboard/{role} (L405)
• /dashboard/teacher & role∉{teacher,admin} → redirect (admin allowed into teacher, L408)
• /dashboard/admin & role≠admin → redirect (L411)
• Unauthenticated /dashboard/* → /auth/login?redirectTo=… (L294)
• Non-member of tenant → /join-school (L335) — matches the live redirect above.

Deferred (per scope — would mutate global state)

Actual school-creation submit (creates tenants + tenant_users), duplicate-slug rejection, post-create cross-subdomain redirect, onboarding wizard, and /join-school Join submit. Form + isolation + guard logic all verified clean — no bugs.