Organizations, invites, role-based access, seat-based billing, and an append-only audit log — typed end to end, tested where it hurts.
This is a live demo of the shipped kit, running on Cloudflare Pages + D1 (reset daily). Sign in to explore: open Northwind Labs, invite a member, change roles, and watch the audit log. This is open demo data — no real email is used.
dana@northwind.example / Dana-demo-2026 · member: riley@northwind.example / Riley-demo-2026| Organizations & membership | create · invite links with expiry · transfer ownership |
| RBAC | owner / admin / member — enforced server-side, not just hidden UI |
| Seat-based billing | adapter interface + mock; merchant-of-record wiring documented |
| Audit log | append-only by construction, no delete path exists |
| Tests + CI | auth, RBAC hierarchy, invite lifecycle, seat limits covered |