create-fullstack-scaffold 0.5.7 → 0.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-fullstack-scaffold",
-  "version": "0.5.7",
+  "version": "0.6.0",
   "type": "module",
   "bin": {
     "create-fullstack-scaffold": "dist/cli/index.js"
@@ -108,7 +108,7 @@
   "dependencies": {
     "@hono/node-server": "^1.19.15",
     "@hono/zod-openapi": "1.2.2",
-    "@hono/zod-validator": "0.7.6",
+    "@hono/zod-validator": "0.8.0",
     "@inquirer/prompts": "^8.4.2",
     "@libsql/client": "^0.17.0",
     "chalk": "^5.6.2",
@@ -118,7 +118,7 @@
     "fs-extra": "^11.3.5",
     "hono": "4.12.34",
     "jsonwebtoken": "^9.0.3",
-    "lucide-react": "^0.576.0",
+    "lucide-react": "^1.16.0",
     "ora": "^9.4.0",
     "pino": "^9.7.0",
     "pino-pretty": "^13.0.0",
@@ -131,12 +131,12 @@
     "zustand": "^5.0.2"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^4.20260503.1",
-    "@commitlint/cli": "^20.4.3",
-    "@commitlint/config-conventional": "^20.4.3",
+    "@cloudflare/workers-types": "^5.20260910.1",
+    "@commitlint/cli": "^21.0.0",
+    "@commitlint/config-conventional": "^21.0.0",
     "@eslint/js": "^9.39.4",
     "@hono/vite-dev-server": "^0.23.0",
-    "@playwright/test": "^1.50.0",
+    "@playwright/test": "^1.60.0",
     "@tailwindcss/postcss": "^4.2.1",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.8.0",
@@ -161,20 +161,20 @@
     "globals": "^16.0.0",
     "husky": "^9.1.7",
     "jsdom": "^26.0.3",
-    "lint-staged": "^15.5.0",
+    "lint-staged": "^17.0.5",
     "minimatch": "^10.2.4",
     "patch-package": "^8.0.1",
-    "playwright": "^1.50.0",
+    "playwright": "^1.60.0",
     "postcss": "^8.5.6",
     "prettier": "^3.5.3",
     "tailwindcss": "^4.2.1",
     "ts-import": "^5.0.0-beta.1",
     "tsup": "^8.5.0",
     "typescript": "^5.8.3",
-    "typescript-eslint": "^8.25.0",
+    "typescript-eslint": "^8.59.4",
     "vite": "^6.2.3",
     "vitest": "^4.0.16",
-    "wrangler": "^4.75.0"
+    "wrangler": "^4.131.0"
   },
   "lint-staged": {
     "*.{ts,tsx,js,jsx}": [
@@ -185,7 +185,7 @@
     "*.{json,md,css}": "prettier --write"
   },
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=22.0.0"
   },
   "overrides": {
     "esbuild": "^0.25.0"

package/template/package.json

@@ -1,7 +1,7 @@
 {
   "name": "biomimic-todo-app",
   "private": true,
-  "version": "0.5.7",
+  "version": "0.6.0",
   "type": "module",
   "bin": {
     "biomimic": "./dist/cli/index.js"
@@ -75,7 +75,7 @@
     "@dyyz1993/xcli-core": "^0.7.4",
     "@hono/node-server": "^1.19.15",
     "@hono/zod-openapi": "1.2.2",
-    "@hono/zod-validator": "0.7.6",
+    "@hono/zod-validator": "0.8.0",
     "@ant-design/icons": "^5.6.1",
     "@libsql/client": "^0.17.0",
     "antd": "^5.24.0",
@@ -85,7 +85,7 @@
     "drizzle-orm": "^0.45.1",
     "hono": "4.12.34",
     "jsonwebtoken": "^9.0.3",
-    "lucide-react": "^0.576.0",
+    "lucide-react": "^1.16.0",
     "pino": "^9.7.0",
     "pino-pretty": "^13.0.0",
     "react": "^18.3.1",
@@ -99,9 +99,9 @@
     "zustand": "^5.0.2"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^4.20260503.1",
-    "@commitlint/cli": "^20.4.3",
-    "@commitlint/config-conventional": "^20.4.3",
+    "@cloudflare/workers-types": "^5.20260910.1",
+    "@commitlint/cli": "^21.0.0",
+    "@commitlint/config-conventional": "^21.0.0",
     "@eslint/js": "^9.39.4",
     "@hono/vite-dev-server": "^0.23.0",
     "@playwright/test": "^1.60.0",
@@ -129,7 +129,7 @@
     "globals": "^16.0.0",
     "husky": "^9.1.7",
     "jsdom": "^26.0.3",
-    "lint-staged": "^15.5.0",
+    "lint-staged": "^17.0.5",
     "minimatch": "^10.2.4",
     "patch-package": "^8.0.0",
     "playwright": "^1.60.0",
@@ -139,10 +139,10 @@
     "tsup": "^8.5.0",
     "tsx": "^4.21.0",
     "typescript": "^5.8.3",
-    "typescript-eslint": "^8.25.0",
+    "typescript-eslint": "^8.59.4",
     "vite": "^6.2.3",
     "vitest": "^4.0.16",
-    "wrangler": "^4.75.0"
+    "wrangler": "^4.131.0"
   },
   "lint-staged": {
     "*.{ts,tsx,js,jsx}": [
@@ -155,7 +155,7 @@
     ]
   },
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=22.0.0"
   },
   "overrides": {
     "esbuild": "^0.25.0"

package/template/src/cli/modules/tenant/index.ts

@@ -139,4 +139,93 @@ export function registerTenantCommands(site: SiteInstance) {
       }
     },
   })
+
+  site.command('members', {
+    description: 'List members of a tenant',
+    parameters: z.object({
+      id: z.string().describe('Tenant ID'),
+    }),
+    handler: async (params: unknown) => {
+      const p = params as { id: string }
+      try {
+        const client = getClient()
+        const res = await client.api.tenants[':tenantId'].members.$get({
+          param: { tenantId: p.id },
+        })
+        const data = await res.json()
+        return ok(data)
+      } catch (err) {
+        return fail(err instanceof Error ? err.message : 'Failed to list members')
+      }
+    },
+  })
+
+  site.command('roles', {
+    description: 'List roles of a tenant',
+    parameters: z.object({
+      id: z.string().describe('Tenant ID'),
+    }),
+    handler: async (params: unknown) => {
+      const p = params as { id: string }
+      try {
+        const client = getClient()
+        const res = await client.api.tenants[':tenantId'].roles.$get({
+          param: { tenantId: p.id },
+        })
+        const data = await res.json()
+        return ok(data)
+      } catch (err) {
+        return fail(err instanceof Error ? err.message : 'Failed to list roles')
+      }
+    },
+  })
+
+  site.command('invite', {
+    description: 'Invite a member to a tenant (returns a 7-day invitation link)',
+    parameters: z.object({
+      id: z.string().describe('Tenant ID'),
+      email: z.string().describe('Invitee email'),
+      'role-id': z.string().describe('Role ID (see tenant roles command)'),
+    }),
+    handler: async (params: unknown) => {
+      const p = params as { id: string; email: string; 'role-id': string }
+      try {
+        const client = getClient()
+        const res = await client.api.tenants[':tenantId'].members.invite.$post({
+          param: { tenantId: p.id },
+          json: { email: p.email, roleId: p['role-id'] },
+        })
+        const data = await res.json()
+        if (data.success && data.data?.token) {
+          return ok({
+            ...data,
+            data: { ...data.data, inviteLink: `/tenant/invite/${data.data.token}` },
+          })
+        }
+        return ok(data)
+      } catch (err) {
+        return fail(err instanceof Error ? err.message : 'Failed to invite member')
+      }
+    },
+  })
+
+  site.command('invitation', {
+    description: 'Show invitation detail by token (public)',
+    parameters: z.object({
+      token: z.string().describe('Invitation token'),
+    }),
+    handler: async (params: unknown) => {
+      const p = params as { token: string }
+      try {
+        const client = getClient()
+        const res = await client.api.tenants.invitations[':token'].$get({
+          param: { token: p.token },
+        })
+        const data = await res.json()
+        return ok(data)
+      } catch (err) {
+        return fail(err instanceof Error ? err.message : 'Failed to get invitation')
+      }
+    },
+  })
 }

package/template/src/server/db/init.ts

@@ -1,9 +1,6 @@
 import { getDb } from './driver'
 import { permissions, roles, rolePermissions } from './schema'
-import { developers } from './schema/developers'
 import { logger } from '../utils/logger'
-import { generateUUID } from '../utils/uuid'
-import { hash } from 'bcryptjs'
 
 const log = logger.db()
 
@@ -354,53 +351,6 @@ const initialRolePermissions = [
   { roleId: 'role_user', permissionId: 'perm_order_view' },
 ]
 
-async function seedDevelopersIfEmpty() {
-  try {
-    const db = await getDb()
-
-    const existing = await db.select().from(developers)
-    if (existing.length > 0) return
-
-    log.info({}, 'Seeding developers...')
-
-    const demoPasswordHash = await hash('demo123', 10)
-    const adminPasswordHash = await hash('admin123', 10)
-
-    const sampleDevelopers = [
-      {
-        id: generateUUID(),
-        username: 'demo',
-        email: 'demo@biomimic.app',
-        passwordHash: demoPasswordHash,
-        role: 'developer' as const,
-        apiKey: generateUUID(),
-      },
-      {
-        id: generateUUID(),
-        username: 'superadmin',
-        email: 'admin@biomimic.app',
-        passwordHash: adminPasswordHash,
-        role: 'admin' as const,
-        apiKey: generateUUID(),
-      },
-    ]
-
-    await db.insert(developers).values(sampleDevelopers)
-
-    log.info({}, 'Developers seeding complete!')
-  } catch (error) {
-    // 如果表不存在，忽略错误（可能在某些模板中不需要 developers 表）
-    if (
-      error instanceof Error &&
-      (error.message.includes('no such table') || error.message.includes('does not exist'))
-    ) {
-      log.debug({}, 'Developers table not found, skipping seed')
-      return
-    }
-    throw error
-  }
-}
-
 export async function initializeDatabase() {
   const db = await getDb()
 
@@ -445,8 +395,6 @@ export async function initializeDatabase() {
     )
   }
 
-  await seedDevelopersIfEmpty()
-
   log.info({}, 'Database initialization complete!')
 
   log.info({}, 'Seeding module data...')

package/template/src/server/db/schema/index.ts

@@ -15,5 +15,8 @@ export * from './contents'
 export * from './developers'
 export * from './plugins'
 export * from './tenants'
+export * from './tenant-roles'
+export * from './tenant-members'
+export * from './tenant-invitations'
 export * from './merchants'
 export * from './products'

package/template/src/server/db/schema/tenant-invitations.ts

@@ -0,0 +1,33 @@
+import { sqliteTable, text, integer } from 'drizzle-orm/sqlite-core'
+import { tenants } from './tenants'
+import { tenantRoles } from './tenant-roles'
+
+/**
+ * 租户邀请（email + 一次性 token，默认 7 天过期）。
+ * token 随邀请链接分发：/invite/:token 前端页凭 token 查详情并接受。
+ */
+export const tenantInvitations = sqliteTable('tenant_invitations', {
+  id: text('id').primaryKey(),
+  tenantId: integer('tenant_id')
+    .notNull()
+    .references(() => tenants.id, { onDelete: 'cascade' }),
+  email: text('email').notNull(),
+  roleId: text('role_id')
+    .notNull()
+    .references(() => tenantRoles.id, { onDelete: 'cascade' }),
+  inviterId: text('inviter_id').notNull(),
+  token: text('token').notNull().unique(),
+  status: text('status', {
+    enum: ['pending', 'accepted', 'declined', 'expired', 'cancelled'],
+  })
+    .notNull()
+    .default('pending'),
+  expiresAt: text('expires_at').notNull(),
+  acceptedAt: text('accepted_at'),
+  createdAt: text('created_at').notNull(),
+})
+
+export type TenantInvitationTable = typeof tenantInvitations.$inferSelect
+export type NewTenantInvitation = typeof tenantInvitations.$inferInsert
+
+export type InvitationStatus = 'pending' | 'accepted' | 'declined' | 'expired' | 'cancelled'

package/template/src/server/db/schema/tenant-members.ts

@@ -0,0 +1,38 @@
+import { sqliteTable, text, integer, unique } from 'drizzle-orm/sqlite-core'
+import { tenants } from './tenants'
+import { tenantRoles } from './tenant-roles'
+
+/**
+ * 租户成员（用户与租户的归属关系）。userId 指向认证体系（developers.id /
+ * dev token 用户 id），删除为软删（status='left'）保留审计轨迹。
+ */
+export const tenantMembers = sqliteTable(
+  'tenant_members',
+  {
+    id: text('id').primaryKey(),
+    tenantId: integer('tenant_id')
+      .notNull()
+      .references(() => tenants.id, { onDelete: 'cascade' }),
+    userId: text('user_id').notNull(),
+    roleId: text('role_id')
+      .notNull()
+      .references(() => tenantRoles.id, { onDelete: 'cascade' }),
+    status: text('status', {
+      enum: ['active', 'pending', 'suspended', 'left'],
+    })
+      .notNull()
+      .default('active'),
+    invitedBy: text('invited_by'),
+    invitedAt: text('invited_at'),
+    joinedAt: text('joined_at').notNull(),
+    lastActiveAt: text('last_active_at'),
+  },
+  table => ({
+    userTenantUnique: unique().on(table.userId, table.tenantId),
+  })
+)
+
+export type TenantMemberTable = typeof tenantMembers.$inferSelect
+export type NewTenantMember = typeof tenantMembers.$inferInsert
+
+export type TenantMemberStatus = 'active' | 'pending' | 'suspended' | 'left'

package/template/src/server/db/schema/tenant-roles.ts

@@ -0,0 +1,32 @@
+import { sqliteTable, text, integer, unique } from 'drizzle-orm/sqlite-core'
+import { tenants } from './tenants'
+
+/**
+ * 租户内自定义角色（每租户独立，与平台级 roles 表区分）。
+ * permissions 存 TenantPermission 枚举数组的 JSON 序列化。
+ */
+export const tenantRoles = sqliteTable(
+  'tenant_roles',
+  {
+    id: text('id').primaryKey(),
+    tenantId: integer('tenant_id')
+      .notNull()
+      .references(() => tenants.id, { onDelete: 'cascade' }),
+    code: text('code').notNull(),
+    name: text('name').notNull(),
+    label: text('label').notNull(),
+    description: text('description'),
+    permissions: text('permissions').notNull(),
+    isSystem: integer('is_system', { mode: 'boolean' }).notNull().default(false),
+    isActive: integer('is_active', { mode: 'boolean' }).notNull().default(true),
+    sortOrder: integer('sort_order').notNull().default(0),
+    createdAt: text('created_at').notNull(),
+    updatedAt: text('updated_at').notNull(),
+  },
+  table => ({
+    tenantCodeUnique: unique().on(table.tenantId, table.code),
+  })
+)
+
+export type TenantRoleTable = typeof tenantRoles.$inferSelect
+export type NewTenantRole = typeof tenantRoles.$inferInsert

package/template/src/server/db/schema/todos.ts

@@ -8,6 +8,9 @@ export const todos = sqliteTable(
   'todos',
   {
     id: integer('id').primaryKey({ autoIncrement: true }),
+    // 租户归属（saas 等含 tenant 模块的 preset 由隔离中间件填充；其他
+    // preset 恒为 null，列对它们无害）
+    tenantId: integer('tenant_id'),
     title: text('title').notNull(),
     description: text('description'),
     status: text('status', { enum: todoStatus }).notNull().default('pending'),
@@ -20,6 +23,7 @@ export const todos = sqliteTable(
   },
   table => ({
     statusIdx: index('todos_status_idx').on(table.status),
+    tenantIdx: index('todos_tenant_idx').on(table.tenantId),
     createdAtIdx: index('todos_created_at_idx').on(table.createdAt),
     updatedAtIdx: index('todos_updated_at_idx').on(table.updatedAt),
   })

package/template/src/server/db/test-setup.ts

@@ -11,6 +11,7 @@ export async function setupTestDatabase(): Promise<void> {
   const migrationSQL = `
     CREATE TABLE IF NOT EXISTS todos (
       id INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL,
+      tenant_id INTEGER,
       title TEXT NOT NULL,
       description TEXT,
       status TEXT DEFAULT 'pending' NOT NULL,
@@ -298,6 +299,43 @@ export async function setupTestDatabase(): Promise<void> {
       updated_at INTEGER DEFAULT (unixepoch() * 1000) NOT NULL
     );
 
+    CREATE TABLE IF NOT EXISTS tenant_roles (
+      id TEXT PRIMARY KEY NOT NULL,
+      tenant_id INTEGER NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
+      code TEXT NOT NULL,
+      name TEXT NOT NULL,
+      label TEXT NOT NULL,
+      description TEXT,
+      permissions TEXT NOT NULL,
+      is_system INTEGER NOT NULL DEFAULT 0,
+      is_active INTEGER NOT NULL DEFAULT 1,
+      sort_order INTEGER NOT NULL DEFAULT 0,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    );
+    CREATE TABLE IF NOT EXISTS tenant_members (
+      id TEXT PRIMARY KEY NOT NULL,
+      tenant_id INTEGER NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
+      user_id TEXT NOT NULL,
+      role_id TEXT NOT NULL REFERENCES tenant_roles(id) ON DELETE CASCADE,
+      status TEXT NOT NULL DEFAULT 'active',
+      invited_by TEXT,
+      invited_at TEXT,
+      joined_at TEXT NOT NULL,
+      last_active_at TEXT
+    );
+    CREATE TABLE IF NOT EXISTS tenant_invitations (
+      id TEXT PRIMARY KEY NOT NULL,
+      tenant_id INTEGER NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
+      email TEXT NOT NULL,
+      role_id TEXT NOT NULL REFERENCES tenant_roles(id) ON DELETE CASCADE,
+      inviter_id TEXT NOT NULL,
+      token TEXT NOT NULL UNIQUE,
+      status TEXT NOT NULL DEFAULT 'pending',
+      expires_at TEXT NOT NULL,
+      accepted_at TEXT,
+      created_at TEXT NOT NULL
+    );
     CREATE TABLE IF NOT EXISTS merchants (
       id INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL,
       user_id TEXT NOT NULL,
@@ -799,6 +837,93 @@ async function seedTestData(client: Client): Promise<void> {
     }
   }
 
+  // Seed tenant roles + owner member（与 app 启动种子 seedTenantsIfEmpty 对齐，demo 租户 id=1）
+  const tenantNowIso = new Date().toISOString()
+  const tenantRoleSeed = [
+    {
+      id: 'tr_seed_admin',
+      code: 'tenant_admin',
+      label: '租户管理员',
+      perms: JSON.stringify([
+        'tenant:member:view',
+        'tenant:member:invite',
+        'tenant:member:remove',
+        'tenant:member:role:assign',
+        'tenant:role:view',
+        'tenant:role:create',
+        'tenant:role:edit',
+        'tenant:role:delete',
+        'tenant:settings:view',
+        'tenant:settings:edit',
+        'tenant:data:view',
+        'tenant:data:create',
+        'tenant:data:edit',
+        'tenant:data:delete',
+        'tenant:data:export',
+        'tenant:data:import',
+        'tenant:billing:view',
+        'tenant:billing:manage',
+        'tenant:audit:view',
+      ]),
+      sortOrder: 0,
+    },
+    {
+      id: 'tr_seed_member',
+      code: 'tenant_member',
+      label: '普通成员',
+      perms: JSON.stringify([
+        'tenant:member:view',
+        'tenant:role:view',
+        'tenant:settings:view',
+        'tenant:data:view',
+        'tenant:data:create',
+        'tenant:data:edit',
+        'tenant:data:delete',
+        'tenant:data:export',
+      ]),
+      sortOrder: 1,
+    },
+    {
+      id: 'tr_seed_guest',
+      code: 'tenant_guest',
+      label: '访客',
+      perms: JSON.stringify([
+        'tenant:member:view',
+        'tenant:role:view',
+        'tenant:settings:view',
+        'tenant:data:view',
+      ]),
+      sortOrder: 2,
+    },
+  ]
+  for (const role of tenantRoleSeed) {
+    try {
+      await client.execute({
+        sql: `INSERT OR IGNORE INTO tenant_roles (id, tenant_id, code, name, label, description, permissions, is_system, is_active, sort_order, created_at, updated_at) VALUES (?, 1, ?, ?, ?, NULL, ?, 1, 1, ?, ?, ?)`,
+        args: [
+          role.id,
+          role.code,
+          role.code,
+          role.label,
+          role.perms,
+          role.sortOrder,
+          tenantNowIso,
+          tenantNowIso,
+        ],
+      })
+    } catch {
+      // Ignore duplicate errors
+    }
+  }
+  try {
+    await client.execute({
+      sql: `INSERT OR IGNORE INTO tenant_members (id, tenant_id, user_id, role_id, status, invited_by, invited_at, joined_at, last_active_at) VALUES ('tm_seed_owner', 1, 'test-super-admin-1', 'tr_seed_admin', 'active', NULL, NULL, ?, ?)`,
+      args: [tenantNowIso, tenantNowIso],
+    })
+  } catch {
+    // Ignore duplicate errors
+  }
+
   // Seed products for testing
   const products = [
     {
@@ -968,6 +1093,9 @@ export async function cleanupTestDatabase(): Promise<void> {
     } catch {
       // Plugin tables may not exist in all test environments
     }
+    await client.execute('DELETE FROM tenant_invitations')
+    await client.execute('DELETE FROM tenant_members')
+    await client.execute('DELETE FROM tenant_roles')
     await client.execute('DELETE FROM tenants')
     await client.execute('DELETE FROM merchants')
     await client.execute('DELETE FROM products')

package/template/src/server/entries/node.ts

@@ -38,6 +38,9 @@ const indexHtmlPath = hasDist
 const adminHtmlPath = hasDist
   ? resolve(distPath, 'admin.html')
   : resolve(process.cwd(), 'admin.html')
+const tenantHtmlPath = hasDist
+  ? resolve(distPath, 'tenant.html')
+  : resolve(process.cwd(), 'tenant.html')
 
 const indexHtml = existsSync(indexHtmlPath)
   ? readFileSync(indexHtmlPath, 'utf-8')
@@ -45,6 +48,8 @@ const indexHtml = existsSync(indexHtmlPath)
 const adminHtml = existsSync(adminHtmlPath)
   ? readFileSync(adminHtmlPath, 'utf-8')
   : '<html><body>admin.html not found</body></html>'
+// saas 等含 tenant 模块的 preset 才有 tenant.html；缺失回落 index
+const tenantHtml = existsSync(tenantHtmlPath) ? readFileSync(tenantHtmlPath, 'utf-8') : indexHtml
 
 const log = logger.api()
 
@@ -118,6 +123,14 @@ app.get('/admin/*', c => {
   return c.html(adminHtml)
 })
 
+// 租户控制台独立 SPA（basename=/tenant）
+app.get('/tenant', c => {
+  return c.html(tenantHtml)
+})
+app.get('/tenant/*', c => {
+  return c.html(tenantHtml)
+})
+
 // 其他非 API 路由返回 index.html（ISR 路由尝试缓存）
 app.get('*', async c => {
   if (c.req.path.startsWith('/api/') || c.req.path.startsWith('/files/')) {

package/template/src/server/index.ts

@@ -24,6 +24,7 @@ setRuntimeAdapter(runtimeAdapter)
 // HTML 文件路径（开发环境直接读取根目录）
 const indexHtmlPath = resolve(process.cwd(), 'index.html')
 const adminHtmlPath = resolve(process.cwd(), 'admin.html')
+const tenantHtmlPath = resolve(process.cwd(), 'tenant.html')
 
 const indexHtml = existsSync(indexHtmlPath)
   ? readFileSync(indexHtmlPath, 'utf-8')
@@ -31,6 +32,8 @@ const indexHtml = existsSync(indexHtmlPath)
 const adminHtml = existsSync(adminHtmlPath)
   ? readFileSync(adminHtmlPath, 'utf-8')
   : '<html><body>admin.html not found</body></html>'
+// saas 等含 tenant 模块的 preset 才有 tenant.html；缺失时回落 index
+const tenantHtml = existsSync(tenantHtmlPath) ? readFileSync(tenantHtmlPath, 'utf-8') : indexHtml
 
 // 创建 Hono 应用
 const app = createApp()
@@ -40,6 +43,15 @@ app.get('/admin/*', c => {
   return c.html(adminHtml)
 })
 
+// 租户控制台（basename=/tenant 的独立 SPA）——无此入口时 /tenant/* 会
+// 落进客户端 SPA fallback 渲染成 404
+app.get('/tenant/*', c => {
+  return c.html(tenantHtml)
+})
+app.get('/tenant', c => {
+  return c.html(tenantHtml)
+})
+
 // SPA fallback - 使用中间件方式，确保 API 路由已经注册后才添加
 app.use('*', async (c, next) => {
   await next()