create-fullstack-scaffold 0.5.6 → 0.6.0

package/template/src/server/module-tenant/__tests__/tenant-service.test.ts

@@ -7,7 +7,19 @@ import {
   createTenant,
   updateTenant,
   deleteTenant,
+  getTenantRoles,
+  createTenantRole,
+  getTenantMembers,
+  getUserTenants,
+  getUserTenantPermissions,
+  hasTenantPermission,
+  requireTenantMembership,
+  inviteMember,
+  getInvitationByToken,
+  acceptInvitation,
+  removeMember,
 } from '../services/tenant-service'
+import { TenantPermission } from '@shared/schemas'
 import type { CreateTenantInput } from '@shared/schemas'
 
 describe('Tenant Service', () => {
@@ -84,7 +96,7 @@ describe('Tenant Service', () => {
         maxUsers: 5,
         settings: null,
       }
-      const result = await createTenant(input)
+      const result = await createTenant(input, 'test-super-admin-1')
       expect(result.name).toBe('New Corp')
       expect(result.slug).toBe('new-corp')
       expect(result.status).toBe('trial')
@@ -93,13 +105,16 @@ describe('Tenant Service', () => {
 
     it('should reject duplicate slug', async () => {
       await expect(
-        createTenant({
-          name: 'Duplicate',
-          slug: 'demo',
-          plan: 'free',
-          maxUsers: 5,
-          settings: null,
-        })
+        createTenant(
+          {
+            name: 'Duplicate',
+            slug: 'demo',
+            plan: 'free',
+            maxUsers: 5,
+            settings: null,
+          },
+          'test-super-admin-1'
+        )
       ).rejects.toThrow(/already exists/)
     })
   })
@@ -112,13 +127,16 @@ describe('Tenant Service', () => {
 
     it('should update tenant fields', async () => {
       // Create a tenant to update
-      const created = await createTenant({
-        name: 'Update Test',
-        slug: 'update-test',
-        plan: 'free',
-        maxUsers: 5,
-        settings: null,
-      })
+      const created = await createTenant(
+        {
+          name: 'Update Test',
+          slug: 'update-test',
+          plan: 'free',
+          maxUsers: 5,
+          settings: null,
+        },
+        'test-super-admin-1'
+      )
 
       const result = await updateTenant(created.id, { name: 'Updated Name' })
       expect(result).not.toBeNull()
@@ -133,13 +151,16 @@ describe('Tenant Service', () => {
     })
 
     it('should delete and return true', async () => {
-      const created = await createTenant({
-        name: 'Delete Test',
-        slug: 'delete-test',
-        plan: 'free',
-        maxUsers: 5,
-        settings: null,
-      })
+      const created = await createTenant(
+        {
+          name: 'Delete Test',
+          slug: 'delete-test',
+          plan: 'free',
+          maxUsers: 5,
+          settings: null,
+        },
+        'test-super-admin-1'
+      )
 
       const result = await deleteTenant(created.id)
       expect(result).toBe(true)
@@ -150,3 +171,161 @@ describe('Tenant Service', () => {
     })
   })
 })
+
+describe('provisioning & membership (P1)', () => {
+  beforeAll(async () => {
+    await setupTestDatabase()
+  })
+
+  afterAll(async () => {
+    await cleanupTestDatabase()
+  })
+
+  it('createTenant 事务播种 3 个系统角色 + owner 为租户管理员', async () => {
+    const tenant = await createTenant(
+      { name: '开通验证', slug: 'prov-check', plan: 'pro', maxUsers: 20, settings: {} },
+      'test-super-admin-1'
+    )
+    const roles = await getTenantRoles(tenant.id)
+    expect(roles.length).toBe(3)
+    expect(roles.map(r => r.code).sort()).toEqual(['tenant_admin', 'tenant_guest', 'tenant_member'])
+    expect(roles.every(r => r.isSystem)).toBe(true)
+
+    const members = await getTenantMembers(tenant.id)
+    expect(members.length).toBe(1)
+    expect(members[0].userId).toBe('test-super-admin-1')
+    expect(members[0].role?.code).toBe('tenant_admin')
+    expect(members[0].status).toBe('active')
+  })
+
+  it('owner 拥有全部租户权限，陌生人无任何权限', async () => {
+    const tenant = await createTenant(
+      { name: '权限验证', slug: 'perm-check', plan: 'free', maxUsers: 5, settings: {} },
+      'test-super-admin-1'
+    )
+    const ownerPerms = await getUserTenantPermissions('test-super-admin-1', tenant.id)
+    expect(ownerPerms.length).toBeGreaterThan(10)
+    expect(
+      await hasTenantPermission('test-super-admin-1', tenant.id, TenantPermission.MEMBER_INVITE)
+    ).toBe(true)
+    expect(await hasTenantPermission('test-user-2', tenant.id, TenantPermission.DATA_VIEW)).toBe(
+      false
+    )
+    await expect(requireTenantMembership('test-user-2', tenant.id)).rejects.toThrow()
+  })
+
+  it('邀请→接受→成员可见→移除后失权 全链路', async () => {
+    const tenant = await createTenant(
+      { name: '邀请验证', slug: 'invite-check', plan: 'free', maxUsers: 5, settings: {} },
+      'test-super-admin-1'
+    )
+    const guestRole = (await getTenantRoles(tenant.id)).find(r => r.code === 'tenant_guest')!
+
+    const invitation = await inviteMember(
+      tenant.id,
+      'newbie@example.com',
+      guestRole.id,
+      'test-super-admin-1'
+    )
+    expect(invitation.status).toBe('pending')
+    expect(invitation.token.length).toBeGreaterThanOrEqual(32)
+
+    // 公开详情可查（带租户名/角色名）
+    const detail = await getInvitationByToken(invitation.token)
+    expect(detail?.tenantName).toBe('邀请验证')
+    expect(detail?.roleLabel).toBe('访客')
+
+    // 陌生用户接受邀请后成为 guest
+    const member = await acceptInvitation(invitation.token, 'test-user-2')
+    expect(member?.status).toBe('active')
+    expect(await hasTenantPermission('test-user-2', tenant.id, TenantPermission.DATA_VIEW)).toBe(
+      true
+    )
+    expect(
+      await hasTenantPermission('test-user-2', tenant.id, TenantPermission.MEMBER_INVITE)
+    ).toBe(false)
+
+    // 二次接受同一 token 失效
+    const again = await acceptInvitation(invitation.token, 'test-user-3')
+    expect(again).toBeNull()
+
+    // 移除后立即失权
+    await removeMember(tenant.id, member!.id)
+    expect(await hasTenantPermission('test-user-2', tenant.id, TenantPermission.DATA_VIEW)).toBe(
+      false
+    )
+    await expect(requireTenantMembership('test-user-2', tenant.id)).rejects.toThrow()
+  })
+
+  it('套餐角色数配额：free 上限 3，创建第 4 个被拦截', async () => {
+    const tenant = await createTenant(
+      { name: '配额验证', slug: 'quota-check', plan: 'free', maxUsers: 5, settings: {} },
+      'test-super-admin-1'
+    )
+    // 3 个系统角色已占满 free 上限
+    await expect(
+      createTenantRole(tenant.id, {
+        code: 'custom-a',
+        name: 'custom-a',
+        label: '自定义A',
+        description: null,
+        permissions: [TenantPermission.DATA_VIEW],
+      })
+    ).rejects.toThrow(/上限/)
+
+    // 升级 pro 后可继续创建
+    await updateTenant(tenant.id, { plan: 'pro' })
+    const role = await createTenantRole(tenant.id, {
+      code: 'custom-a',
+      name: 'custom-a',
+      label: '自定义A',
+      description: null,
+      permissions: [TenantPermission.DATA_VIEW],
+    })
+    expect(role.isSystem).toBe(false)
+  })
+
+  it('P4：套餐成员配额——满员后邀请被拦截，升级后放行', async () => {
+    // maxUsers=1 的租户：owner 已占 1 席
+    const tiny = await createTenant(
+      { name: '配额租户', slug: 'quota-member', plan: 'free', maxUsers: 1, settings: {} },
+      'test-super-admin-1'
+    )
+    const guestRole = (await getTenantRoles(tiny.id)).find(r => r.code === 'tenant_guest')!
+
+    await expect(
+      inviteMember(tiny.id, 'full@quota.io', guestRole.id, 'test-super-admin-1')
+    ).rejects.toThrow(/上限/)
+
+    // 升级 maxUsers=2 后放行；接受时也过配额
+    await updateTenant(tiny.id, { maxUsers: 2 })
+    const inv = await inviteMember(tiny.id, 'full@quota.io', guestRole.id, 'test-super-admin-1')
+    const member = await acceptInvitation(inv.token, 'test-user-4')
+    expect(member?.status).toBe('active')
+
+    // 满员（2/2）后再邀新邮箱 → 拦截
+    await expect(
+      inviteMember(tiny.id, 'overflow@quota.io', guestRole.id, 'test-super-admin-1')
+    ).rejects.toThrow(/上限/)
+  })
+
+  it('P4：接受时二次校验——邀请有效期内满员则接受被拦截', async () => {
+    const t = await createTenant(
+      { name: '二次校验', slug: 'quota-accept', plan: 'free', maxUsers: 2, settings: {} },
+      'test-super-admin-1'
+    )
+    const guestRole = (await getTenantRoles(t.id)).find(r => r.code === 'tenant_guest')!
+    const inv = await inviteMember(t.id, 'late@quota.io', guestRole.id, 'test-super-admin-1')
+
+    // 邀请发出后把 maxUsers 降到 1（owner 已满员）
+    await updateTenant(t.id, { maxUsers: 1 })
+    await expect(acceptInvitation(inv.token, 'test-user-5')).rejects.toThrow(/上限/)
+  })
+
+  it('getUserTenants 只返回本人 active 成员的租户', async () => {
+    const mine = await getUserTenants('test-super-admin-1')
+    expect(mine.length).toBeGreaterThanOrEqual(2) // demo 种子 + 本组新建
+    expect(mine.every(t => t.slug)).toBe(true)
+    expect((await getUserTenants('test-user-2')).length).toBe(0)
+  })
+})

package/template/src/server/module-tenant/module.ts

@@ -22,7 +22,7 @@ const tenantManifest: ModuleManifest = {
   clientPages: [],
 
   dbSchemas: {
-    files: ['tenants'],
+    files: ['tenants', 'tenant-roles', 'tenant-members', 'tenant-invitations'],
     hasSeed: true,
     seed: { serviceFile: 'tenant-service', functionName: 'seedTenantsIfEmpty' },
   },

package/template/src/server/module-tenant/routes/tenant-routes.ts

@@ -9,9 +9,39 @@ import {
   TenantQuerySchema,
   TenantIdResponseSchema,
 } from '@shared/schemas'
+import {
+  TenantRoleSchema,
+  TenantMemberSchema,
+  TenantInvitationSchema,
+  PublicInvitationSchema,
+  StringIdResponseSchema,
+  TenantArrayResponseSchema,
+  TenantRoleArrayResponseSchema,
+  TenantMemberArrayResponseSchema,
+  CreateTenantRoleSchema,
+  UpdateTenantRoleSchema,
+  InviteMemberSchema,
+  UpdateMemberRoleSchema,
+  TenantPermission,
+  type PublicInvitation,
+} from '@shared/schemas'
 import { successResponse, errorResponse, success } from '@server/utils/route-helpers'
-import { NotFoundError } from '@server/utils/app-error'
+import { NotFoundError, AuthorizationError } from '@server/utils/app-error'
 import { authMiddleware, requireSuperAdminMiddleware } from '@server/middleware/auth'
+import { Role } from '@shared/modules/permission'
+import type { Context } from 'hono'
+
+/**
+ * 租户内权限门禁：超管 bypass；成员须持有对应 TenantPermission
+ * （非成员直接 403——这就是"租户隔离"的路由层执行点）
+ */
+async function requireTenantPerm(c: Context, tenantId: number, perm: TenantPermission) {
+  const user = c.get('authUser')
+  if (user.role === Role.SUPER_ADMIN) return
+  await tenantService.requireTenantMembership(user.id, tenantId)
+  const ok = await tenantService.hasTenantPermission(user.id, tenantId, perm)
+  if (!ok) throw AuthorizationError.permissionDenied(perm)
+}
 
 const listRoute = createRoute({
   method: 'get',
@@ -107,6 +137,207 @@ const deleteRoute = createRoute({
   },
 })
 
+const myTenantsRoute = createRoute({
+  method: 'get',
+  path: '/tenants/mine',
+  tags: ['tenants'],
+  security: [{ Bearer: [] }],
+  middleware: [authMiddleware()],
+  responses: {
+    200: successResponse(TenantArrayResponseSchema, 'List tenants the current user belongs to'),
+  },
+})
+
+const tenantRolesListRoute = createRoute({
+  method: 'get',
+  path: '/tenants/{tenantId}/roles',
+  tags: ['tenants'],
+  security: [{ Bearer: [] }],
+  middleware: [authMiddleware()],
+  request: {
+    params: z.object({ tenantId: z.coerce.number().int().positive() }),
+  },
+  responses: {
+    200: successResponse(TenantRoleArrayResponseSchema, 'List tenant roles'),
+    403: errorResponse('Not a member of this tenant'),
+  },
+})
+
+const tenantRoleCreateRoute = createRoute({
+  method: 'post',
+  path: '/tenants/{tenantId}/roles',
+  tags: ['tenants'],
+  security: [{ Bearer: [] }],
+  middleware: [authMiddleware()],
+  request: {
+    params: z.object({ tenantId: z.coerce.number().int().positive() }),
+    body: { content: { 'application/json': { schema: CreateTenantRoleSchema } } },
+  },
+  responses: {
+    201: successResponse(TenantRoleSchema, 'Create a custom tenant role'),
+    400: errorResponse('Invalid input or plan role limit reached'),
+    403: errorResponse('No permission'),
+  },
+})
+
+const tenantRoleUpdateRoute = createRoute({
+  method: 'put',
+  path: '/tenants/{tenantId}/roles/{roleId}',
+  tags: ['tenants'],
+  security: [{ Bearer: [] }],
+  middleware: [authMiddleware()],
+  request: {
+    params: z.object({
+      tenantId: z.coerce.number().int().positive(),
+      roleId: z.string(),
+    }),
+    body: { content: { 'application/json': { schema: UpdateTenantRoleSchema } } },
+  },
+  responses: {
+    200: successResponse(TenantRoleSchema, 'Update a tenant role'),
+    403: errorResponse('No permission'),
+    404: errorResponse('Role not found'),
+  },
+})
+
+const tenantRoleDeleteRoute = createRoute({
+  method: 'delete',
+  path: '/tenants/{tenantId}/roles/{roleId}',
+  tags: ['tenants'],
+  security: [{ Bearer: [] }],
+  middleware: [authMiddleware()],
+  request: {
+    params: z.object({
+      tenantId: z.coerce.number().int().positive(),
+      roleId: z.string(),
+    }),
+  },
+  responses: {
+    200: successResponse(StringIdResponseSchema, 'Soft-delete a tenant role'),
+    400: errorResponse('System role cannot be deleted'),
+    403: errorResponse('No permission'),
+  },
+})
+
+const tenantMembersListRoute = createRoute({
+  method: 'get',
+  path: '/tenants/{tenantId}/members',
+  tags: ['tenants'],
+  security: [{ Bearer: [] }],
+  middleware: [authMiddleware()],
+  request: {
+    params: z.object({ tenantId: z.coerce.number().int().positive() }),
+  },
+  responses: {
+    200: successResponse(TenantMemberArrayResponseSchema, 'List tenant members with roles'),
+    403: errorResponse('Not a member of this tenant'),
+  },
+})
+
+const memberInviteRoute = createRoute({
+  method: 'post',
+  path: '/tenants/{tenantId}/members/invite',
+  tags: ['tenants'],
+  security: [{ Bearer: [] }],
+  middleware: [authMiddleware()],
+  request: {
+    params: z.object({ tenantId: z.coerce.number().int().positive() }),
+    body: { content: { 'application/json': { schema: InviteMemberSchema } } },
+  },
+  responses: {
+    201: successResponse(TenantInvitationSchema, 'Create an invitation (7-day token)'),
+    400: errorResponse('Invalid input or role not in tenant'),
+    403: errorResponse('No permission'),
+  },
+})
+
+const memberUpdateRoute = createRoute({
+  method: 'put',
+  path: '/tenants/{tenantId}/members/{memberId}',
+  tags: ['tenants'],
+  security: [{ Bearer: [] }],
+  middleware: [authMiddleware()],
+  request: {
+    params: z.object({
+      tenantId: z.coerce.number().int().positive(),
+      memberId: z.string(),
+    }),
+    body: { content: { 'application/json': { schema: UpdateMemberRoleSchema } } },
+  },
+  responses: {
+    200: successResponse(TenantMemberSchema, 'Change member role'),
+    403: errorResponse('No permission'),
+    404: errorResponse('Member not found'),
+  },
+})
+
+const memberRemoveRoute = createRoute({
+  method: 'delete',
+  path: '/tenants/{tenantId}/members/{memberId}',
+  tags: ['tenants'],
+  security: [{ Bearer: [] }],
+  middleware: [authMiddleware()],
+  request: {
+    params: z.object({
+      tenantId: z.coerce.number().int().positive(),
+      memberId: z.string(),
+    }),
+  },
+  responses: {
+    200: successResponse(StringIdResponseSchema, 'Remove member (soft, status=left)'),
+    403: errorResponse('No permission'),
+    404: errorResponse('Member not found'),
+  },
+})
+
+const invitationCancelRoute = createRoute({
+  method: 'delete',
+  path: '/tenants/{tenantId}/invitations/{invitationId}',
+  tags: ['tenants'],
+  security: [{ Bearer: [] }],
+  middleware: [authMiddleware()],
+  request: {
+    params: z.object({
+      tenantId: z.coerce.number().int().positive(),
+      invitationId: z.string(),
+    }),
+  },
+  responses: {
+    200: successResponse(StringIdResponseSchema, 'Cancel invitation'),
+    403: errorResponse('No permission'),
+    404: errorResponse('Invitation not found'),
+  },
+})
+
+const invitationDetailRoute = createRoute({
+  method: 'get',
+  path: '/tenants/invitations/{token}',
+  tags: ['tenants'],
+  summary: 'Get invitation detail (public, for the invite landing page)',
+  request: {
+    params: z.object({ token: z.string() }),
+  },
+  responses: {
+    200: successResponse(PublicInvitationSchema, 'Invitation detail (sanitized)'),
+    404: errorResponse('Invitation not found'),
+  },
+})
+
+const invitationAcceptRoute = createRoute({
+  method: 'post',
+  path: '/tenants/invitations/{token}/accept',
+  tags: ['tenants'],
+  security: [{ Bearer: [] }],
+  middleware: [authMiddleware()],
+  request: {
+    params: z.object({ token: z.string() }),
+  },
+  responses: {
+    200: successResponse(TenantMemberSchema, 'Accept invitation and join tenant'),
+    404: errorResponse('Invitation not found or expired'),
+  },
+})
+
 const getCurrentTenantRoute = createRoute({
   method: 'get',
   path: '/tenant/current',
@@ -130,6 +361,11 @@ export const apiRoutes = new OpenAPIHono()
 
     return c.json(success(result), 200)
   })
+  .openapi(myTenantsRoute, async c => {
+    const user = c.get('authUser')
+    const tenantsForUser = await tenantService.getUserTenants(user.id)
+    return c.json(success(tenantsForUser), 200)
+  })
   .openapi(getRoute, async c => {
     const { id } = c.req.valid('param')
     const tenant = await tenantService.getTenantById(id)
@@ -144,7 +380,8 @@ export const apiRoutes = new OpenAPIHono()
   })
   .openapi(createRouteDef, async c => {
     const data = c.req.valid('json')
-    const tenant = await tenantService.createTenant(data)
+    const user = c.get('authUser')
+    const tenant = await tenantService.createTenant(data, user.id)
     return c.json(success(tenant), 201)
   })
   .openapi(updateRoute, async c => {
@@ -166,6 +403,106 @@ export const apiRoutes = new OpenAPIHono()
     return c.json(success(tenant), 200)
   })
   // todos 模块已占用 /docs；tenant 的 OpenAPI 文档挂独立路径避免 shadow
+  .openapi(tenantRolesListRoute, async c => {
+    const { tenantId } = c.req.valid('param')
+    await requireTenantPerm(c, tenantId, TenantPermission.ROLE_VIEW)
+    const roles = await tenantService.getTenantRoles(tenantId)
+    return c.json(success(roles), 200)
+  })
+  .openapi(tenantRoleCreateRoute, async c => {
+    const { tenantId } = c.req.valid('param')
+    await requireTenantPerm(c, tenantId, TenantPermission.ROLE_CREATE)
+    const data = c.req.valid('json')
+    const role = await tenantService.createTenantRole(tenantId, {
+      code: data.code,
+      name: data.code,
+      label: data.label,
+      description: data.description ?? null,
+      permissions: data.permissions,
+    })
+    return c.json(success(role), 201)
+  })
+  .openapi(tenantRoleUpdateRoute, async c => {
+    const { tenantId, roleId } = c.req.valid('param')
+    await requireTenantPerm(c, tenantId, TenantPermission.ROLE_EDIT)
+    // 目标角色必须属于本租户
+    const roles = await tenantService.getTenantRoles(tenantId)
+    if (!roles.some(r => r.id === roleId)) throw new NotFoundError('Role', roleId)
+    const data = c.req.valid('json')
+    const role = await tenantService.updateTenantRole(roleId, {
+      label: data.label ?? undefined,
+      description: data.description ?? undefined,
+      permissions: data.permissions ?? undefined,
+    })
+    if (!role) throw new NotFoundError('Role', roleId)
+    return c.json(success(role), 200)
+  })
+  .openapi(tenantRoleDeleteRoute, async c => {
+    const { tenantId, roleId } = c.req.valid('param')
+    await requireTenantPerm(c, tenantId, TenantPermission.ROLE_DELETE)
+    const roles = await tenantService.getTenantRoles(tenantId)
+    if (!roles.some(r => r.id === roleId)) throw new NotFoundError('Role', roleId)
+    const result = await tenantService.deleteTenantRole(roleId)
+    if (!result) throw new NotFoundError('Role', roleId)
+    return c.json(success({ id: roleId }), 200)
+  })
+  .openapi(tenantMembersListRoute, async c => {
+    const { tenantId } = c.req.valid('param')
+    await requireTenantPerm(c, tenantId, TenantPermission.MEMBER_VIEW)
+    const members = await tenantService.getTenantMembers(tenantId)
+    return c.json(success(members), 200)
+  })
+  .openapi(memberInviteRoute, async c => {
+    const { tenantId } = c.req.valid('param')
+    await requireTenantPerm(c, tenantId, TenantPermission.MEMBER_INVITE)
+    const user = c.get('authUser')
+    const data = c.req.valid('json')
+    const invitation = await tenantService.inviteMember(tenantId, data.email, data.roleId, user.id)
+    return c.json(success(invitation), 201)
+  })
+  .openapi(memberUpdateRoute, async c => {
+    const { tenantId, memberId } = c.req.valid('param')
+    await requireTenantPerm(c, tenantId, TenantPermission.MEMBER_ROLE_ASSIGN)
+    const data = c.req.valid('json')
+    const member = await tenantService.updateMemberRole(tenantId, memberId, data.roleId)
+    if (!member) throw new NotFoundError('Member', memberId)
+    return c.json(success(member), 200)
+  })
+  .openapi(memberRemoveRoute, async c => {
+    const { tenantId, memberId } = c.req.valid('param')
+    await requireTenantPerm(c, tenantId, TenantPermission.MEMBER_REMOVE)
+    const result = await tenantService.removeMember(tenantId, memberId)
+    if (!result) throw new NotFoundError('Member', memberId)
+    return c.json(success({ id: memberId }), 200)
+  })
+  .openapi(invitationCancelRoute, async c => {
+    const { tenantId, invitationId } = c.req.valid('param')
+    await requireTenantPerm(c, tenantId, TenantPermission.MEMBER_INVITE)
+    const result = await tenantService.cancelInvitation(tenantId, invitationId)
+    if (!result) throw new NotFoundError('Invitation', invitationId)
+    return c.json(success({ id: invitationId }), 200)
+  })
+  .openapi(invitationDetailRoute, async c => {
+    const { token } = c.req.valid('param')
+    const detail = await tenantService.getInvitationByToken(token)
+    if (!detail) throw new NotFoundError('Invitation', token)
+    const payload: PublicInvitation = {
+      tenantName: detail.tenantName,
+      tenantSlug: detail.tenantSlug,
+      email: detail.invitation.email,
+      roleLabel: detail.roleLabel,
+      status: detail.invitation.status,
+      expiresAt: detail.invitation.expiresAt,
+    }
+    return c.json(success(payload), 200)
+  })
+  .openapi(invitationAcceptRoute, async c => {
+    const { token } = c.req.valid('param')
+    const user = c.get('authUser')
+    const member = await tenantService.acceptInvitation(token, user.id)
+    if (!member) throw new NotFoundError('Invitation (invalid, used or expired)', token)
+    return c.json(success(member), 200)
+  })
   .doc('/tenant/docs', {
     openapi: '3.0.0',
     info: {