# VerdantStack

> Production-grade developer starters for the parts of software products nobody demos: multi-tenancy, seat billing, role-based access, audit logging.

## Products

- [VerdantStack](https://verdantstack-site.pages.dev/) — Home: production-grade developer starters for the parts of software products nobody demos — multi-tenancy, seat billing, role-based access, audit logging
- [All products](https://verdantstack-site.pages.dev/products/) — index of every VerdantStack starter
- [Multi-tenant SvelteKit Starter](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/) — A production-shaped B2B SaaS foundation with multi-tenancy wired end-to-end. Organizations, invitations, role-based access, seat-based billing via a merchant of record, and an append-only audit log. SQLite + Drizzle ORM.
- [SvelteKit + Supabase Starter](https://verdantstack-site.pages.dev/products/sveltekit-supabase-starter/) — Same multi-tenancy, RBAC, billing, and audit log — running on Supabase for auth, database, and realtime. PostgreSQL via Supabase with RLS defense-in-depth.

## Live Demos

Both products have a free, clickable, live demo (demo credentials are shown on the landing page):

- [Multi-tenant SvelteKit Starter — live demo](https://verdantstack-demo-a.pages.dev/) — the real kit running on Cloudflare Pages + D1, seeded with Northwind Labs (owner dana@northwind.example / Dana-demo-2026, member riley@northwind.example / Riley-demo-2026), reset daily
- [SvelteKit + Supabase Starter — live demo](https://verdantstack-demo-b.pages.dev/) — the real kit running on Cloudflare Pages + Supabase Postgres with RLS, seeded the same way, reset daily

## Comparisons & Guides

- [Documentation index](https://verdantstack-site.pages.dev/docs/) — all guides, comparisons, and resources
- [SvelteKit vs Next.js for SaaS](https://verdantstack-site.pages.dev/comparison/sveltekit-vs-nextjs-saas/) — Honest comparison of features, pricing, performance, and developer experience
- [Multi-Tenant Starter Checklist](https://verdantstack-site.pages.dev/comparison/multi-tenant-starter-checklist/) — The 5 essential features every multi-tenant starter kit must have
- [VerdantStack vs CMSaasStarter](https://verdantstack-site.pages.dev/comparison/sveltekit-starter-vs-cmsaasstarter/) — Feature-by-feature comparison with the 2,357★ Supabase starter
- [Best SvelteKit SaaS Starters 2026](https://verdantstack-site.pages.dev/bestof/sveltekit-saas-starters-2026/) — Compare the top SvelteKit starter kits for multi-tenant B2B SaaS
- [How to Build Multi-Tenant SaaS](https://verdantstack-site.pages.dev/docs/how-to-build-multi-tenant-saas-sveltekit/) — Step-by-step guide to building a production-ready multi-tenant SaaS with SvelteKit
- [SvelteKit SaaS Boilerplate](https://verdantstack-site.pages.dev/docs/sveltekit-saas-boilerplate/) — What you actually need in a SaaS boilerplate (and what free starters skip)
- [Multi-Tenant SvelteKit Template](https://verdantstack-site.pages.dev/docs/multi-tenant-sveltekit-template/) — How to implement organizations, RBAC, seat billing, and audit logging

## Documentation

- [Multi-tenancy in SvelteKit](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/sveltekit-multi-tenant-auth/) — Multi-tenant auth, session management, and database design decisions for SvelteKit
- [RBAC model](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/sveltekit-rbac-role-hierarchy/) — Role-based access control: three roles with strict hierarchy enforced server-side
- [Invite link flow](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/sveltekit-invite-link-flow/) — Single-use hashed invite tokens with expiry and atomic claim
- [Seat billing adapter pattern](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/seat-billing-adapter-pattern/) — Pluggable BillingAdapter interface for merchant-of-record checkout
- [Append-only audit log](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/append-only-audit-log-design/) — Audit trail design: append-only by construction, no update/delete path
- [Hashed session auth](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/sveltekit-hashed-session-auth/) — Database-backed sessions with hashed tokens for revocation
- [Rate limiting login](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/sveltekit-rate-limiting-login/) — Sliding-window failed-attempt rate limiter with pre-hash blocking
- [SaaS starter evaluation checklist](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/saas-starter-evaluation-checklist/) — Six-dimension evaluation framework for choosing a SaaS starter
- [Sell software without Stripe](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/sell-software-without-stripe-access/) — Merchant-of-record options for developers in countries where Stripe isn't available
- [Starter checklist](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/multi-tenant-starter-checklist/) — Production readiness checklist for multi-tenant SaaS starters
- [Drizzle ORM migrations](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/drizzle-orm-migrations-sveltekit/) — Schema-first database management with Drizzle Kit in SvelteKit
- [Multi-tenant database design](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/multi-tenant-database-design/) — Shared-database tenant isolation patterns with org-scoped queries
- [Session management](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/sveltekit-session-management/) — Server-side sessions with hashed tokens, httpOnly cookies, and DB-backed revocation
- [Hooks & middleware](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/sveltekit-hooks-middleware/) — Server-side request handling with hooks.server.ts
- [Testing with Vitest](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/sveltekit-testing-vitest/) — Unit tests, integration tests, and HTTP-level patterns from a 77-test suite
- [SQLite for production SaaS](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/sqlite-production-saas/) — WAL mode, tenant isolation, connection handling, and ceiling awareness
- [Environment variables](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/sveltekit-environment-variables/) — Public vs private, static vs dynamic, .env files, Cloudflare Workers secrets
- [Error handling](https://verdantstack-site.pages.dev/products/multi-tenant-sveltekit-starter/docs/sveltekit-error-handling/) — fail(), error(), redirect(), and typed error patterns for form actions

## SvelteKit + Supabase Starter — Documentation

- [Architecture](https://verdantstack-site.pages.dev/products/sveltekit-supabase-starter/docs/architecture/) — thin routes → framework-free services → rbac/billing seams → supabase/client.ts; RLS defense-in-depth (service-only foundation — you wire the route layer)
- [RBAC & RLS](https://verdantstack-site.pages.dev/products/sveltekit-supabase-starter/docs/rbac/) — three roles enforced server-side at the app layer and again via Supabase Row Level Security
- [Seat billing](https://verdantstack-site.pages.dev/products/sveltekit-supabase-starter/docs/billing/) — pluggable BillingAdapter for merchant-of-record checkout, enforced at invite acceptance
- [Testing](https://verdantstack-site.pages.dev/products/sveltekit-supabase-starter/docs/testing/) — six Vitest suites (75 tests) against an in-memory fake Supabase client; RLS checks via supabase start
- [Versioning](https://verdantstack-site.pages.dev/products/sveltekit-supabase-starter/docs/versioning/) — semantic versioning, Keep a Changelog, and the release process

## Source Code

The kit source is the **paid product** and ships **privately to buyers** — the
public GitHub repos are proof-only (docs, features, screenshots). See the
product pages to buy.

- [Multi-tenant SvelteKit Starter (proof repo)](https://github.com/verdantstack/multi-tenant-sveltekit-starter) — docs & features, plus the generated API reference at `docs/api`; **buy the kit →** on the product page
- [SvelteKit + Supabase Starter (proof repo)](https://github.com/verdantstack/sveltekit-supabase-starter) — docs & features, plus the generated API reference at `docs/api`; **buy the kit →** on the product page
- [License Agreement](https://verdantstack-site.pages.dev/docs/license/) — single-seat license, unlimited projects, lifetime updates + lifetime standard support, 30-day refund
- License: source-available to buyers (EULA); not open source

## Contact

- Async support only: docs first, then verdantstack@proton.me
- Response target: 48 hours