@fayz-ai/saas 0.5.0 → 0.6.6

package/dist/app/AdminShell.d.ts

@@ -1,5 +1,5 @@
 import * as React from 'react';
-import { type ModuleNavVariant } from '@fayz-ai/ui';
+import { type BottomNavItem, type MobileHeaderVariant, type ModuleNavVariant } from '@fayz-ai/ui';
 import type { CustomPage } from './config';
 import type { AuthProvider } from '@fayz-ai/core';
 export interface AdminShellProps {
@@ -16,12 +16,25 @@ export interface AdminShellProps {
     oauthProviders?: Exclude<AuthProvider, 'email'>[];
     showSettings?: boolean;
     showOrgSettings?: boolean;
+    /** Show the workspace/org switcher at the sidebar top. Default: true.
+     *  Single-org apps (config.org.multiOrg === false) get false from the
+     *  scaffold so B2C users never see an organization concept. */
+    showOrgSwitcher?: boolean;
+    /** Show the branding ("Identidade Visual") + company "Geral" settings tabs.
+     *  Default: true. B2C apps pass false to hide org-identity settings. */
+    showBranding?: boolean;
     /** Wrap the main content in an inset "framed" card (default: true). The
      *  sidebar is always flush/full-height. */
     contentFrame?: boolean;
     /** How module-internal navigation renders. Defaults to 'tabs' for the
      *  'sidebar' layout and 'rail' for 'topbar'. */
     moduleNav?: ModuleNavVariant;
+    /** Mobile bottom tab bar, passed straight through to AppShell. */
+    bottomNav?: BottomNavItem[];
+    /** Fired when a bottom-nav `action` item (e.g. the center "+") is tapped. */
+    onBottomNavAction?: (id: string) => void;
+    /** Mobile header treatment (<md), passed straight through to AppShell. */
+    mobileHeader?: MobileHeaderVariant;
 }
 /** The shell + an auth gate in front of it. */
 export declare function AdminShell(props: AdminShellProps): React.JSX.Element;

package/dist/app/AdminShell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AdminShell.d.ts","sourceRoot":"","sources":["../../src/app/AdminShell.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,EAKL,KAAK,gBAAgB,EAUtB,MAAM,aAAa,CAAA;AAOpB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAmBjD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAA;IACzC,IAAI,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IACtB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAA;IACpB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC3B,WAAW,CAAC,EAAE,OAAO,GAAG,UAAU,CAAA;IAClC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAA;IACjD,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;+CAC2C;IAC3C,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;oDACgD;IAChD,SAAS,CAAC,EAAE,gBAAgB,CAAA;CAC7B;AAoWD,+CAA+C;AAC/C,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,qBA2BhD;yBA3Be,UAAU"}
+{"version":3,"file":"AdminShell.d.ts","sourceRoot":"","sources":["../../src/app/AdminShell.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,mBAAmB,EAGxB,KAAK,gBAAgB,EAWtB,MAAM,aAAa,CAAA;AAQpB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAmBjD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAA;IACzC,IAAI,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IACtB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAA;IACpB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC3B,WAAW,CAAC,EAAE,OAAO,GAAG,UAAU,CAAA;IAClC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAA;IACjD,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;mEAE+D;IAC/D,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;4EACwE;IACxE,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;+CAC2C;IAC3C,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;oDACgD;IAChD,SAAS,CAAC,EAAE,gBAAgB,CAAA;IAC5B,kEAAkE;IAClE,SAAS,CAAC,EAAE,aAAa,EAAE,CAAA;IAC3B,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC,0EAA0E;IAC1E,YAAY,CAAC,EAAE,mBAAmB,CAAA;CACnC;AAkaD,+CAA+C;AAC/C,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,qBAgBhD;yBAhBe,UAAU"}

package/dist/app/LoginPage.d.ts

@@ -1,17 +1,3 @@
-import * as React from 'react';
-import type { AuthProvider } from '@fayz-ai/core';
-export interface LoginPageProps {
-    appName?: string;
-    logo?: React.ReactNode;
-    loginLogo?: React.ReactNode;
-    layout?: 'split' | 'centered';
-    tagline?: string;
-    description?: string;
-    showOAuth?: boolean;
-    oauthProviders?: Exclude<AuthProvider, 'email'>[];
-}
-export declare function LoginPage({ appName, logo, loginLogo, layout, tagline, description, showOAuth, oauthProviders, }: LoginPageProps): React.JSX.Element;
-export declare namespace LoginPage {
-    var displayName: string;
-}
+export { LoginPage } from '@fayz-ai/plugin-auth';
+export type { LoginPageProps } from '@fayz-ai/plugin-auth';
 //# sourceMappingURL=LoginPage.d.ts.map

package/dist/app/LoginPage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LoginPage.d.ts","sourceRoot":"","sources":["../../src/app/LoginPage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAI9B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAEjD,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IACtB,SAAS,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC3B,MAAM,CAAC,EAAE,OAAO,GAAG,UAAU,CAAA;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAA;CAClD;AAQD,wBAAgB,SAAS,CAAC,EACxB,OAAgB,EAChB,IAAI,EACJ,SAAS,EACT,MAAgB,EAChB,OAAO,EACP,WAAW,EACX,SAAiB,EACjB,cAA2B,GAC5B,EAAE,cAAc,qBAsOhB;yBA/Oe,SAAS"}
+{"version":3,"file":"LoginPage.d.ts","sourceRoot":"","sources":["../../src/app/LoginPage.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAChD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA"}

package/dist/app/admin-app.d.ts

@@ -0,0 +1,21 @@
+import * as React from 'react';
+import { type AuthLayout } from '@fayz-ai/plugin-auth';
+import type { FayzAppConfig } from './config';
+export declare function getAuthShellProps(auth: FayzAppConfig['auth']): {
+    requireAuth?: boolean;
+    loginTagline?: string;
+    loginDescription?: string;
+    loginLogo?: React.ReactNode;
+    loginLayout?: AuthLayout;
+    showOAuth?: boolean;
+    oauthProviders?: Exclude<import('@fayz-ai/core').AuthProvider, 'email'>[];
+};
+export declare function AdminProviders({ config, children }: {
+    config: FayzAppConfig;
+    children: React.ReactNode;
+}): React.JSX.Element;
+export declare namespace AdminProviders {
+    var displayName: string;
+}
+export declare function createFayzApp(config: FayzAppConfig): React.ComponentType;
+//# sourceMappingURL=admin-app.d.ts.map

package/dist/app/admin-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-app.d.ts","sourceRoot":"","sources":["../../src/app/admin-app.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAU9B,OAAO,EAGL,KAAK,UAAU,EAGhB,MAAM,sBAAsB,CAAA;AAiB7B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAuC7C,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG;IAC9D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC3B,WAAW,CAAC,EAAE,UAAU,CAAA;IACxB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC,OAAO,eAAe,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,CAAA;CAC1E,CAsBA;AAoGD,wBAAgB,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAAE,qBAwExG;yBAxEe,cAAc;;;AAoF9B,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,KAAK,CAAC,aAAa,CAyBxE"}

package/dist/app/config.d.ts

@@ -1,5 +1,7 @@
 import type { ComponentType, ReactNode } from 'react';
-import type { AuthAdapter, AuthProvider, OrgAdapter, PluginManifest, ThemeMode, LocaleConfig, PermissionsConfig } from '@fayz-ai/core';
+import type { AuthProvider, OrgAdapter, PluginManifest, ThemeMode, LocaleConfig, PermissionsConfig } from '@fayz-ai/core';
+import type { AuthPluginOptions, ResolvedAuthPlugin } from '@fayz-ai/plugin-auth';
+import type { BottomNavItem, MobileHeaderVariant } from '@fayz-ai/ui';
 import type { SaasTheme } from '../shell/config/theme/tokens';
 import type { CreateThemeOptions } from '../shell/config/theme/utils';
 import type { PlanConfig } from '../shell/types/billing';
@@ -19,13 +21,28 @@ export interface CustomPage {
         feature: string;
         action: 'read' | 'create' | 'edit' | 'delete';
     };
+    /** Show this page in the sidebar/topbar navigation. Default: true. Set `false`
+     *  for mobile-only pages reachable via bottomNav/avatar (e.g. a "Mais" overflow
+     *  hub or a "Perfil" avatar target): the route still works, but the entry is
+     *  hidden from desktop navigation where those mobile constructs are meaningless. */
+    nav?: boolean;
     children?: CustomPage[];
 }
 export interface AuthConfig {
     /** 'supabase' | 'mock' or bring your own AuthAdapter */
-    adapter?: 'supabase' | 'mock' | AuthAdapter;
+    adapter?: AuthPluginOptions['adapter'];
+    /** New plugin-auth provider selector. Existing apps may keep using adapter. */
+    provider?: AuthPluginOptions['provider'];
     /** Redirect to login when no session is found (default: true) */
     requireAuth?: boolean;
+    /** New plugin-auth route and provider options. */
+    routes?: AuthPluginOptions['routes'];
+    supabase?: AuthPluginOptions['supabase'];
+    oauth?: AuthPluginOptions['oauth'];
+    layout?: AuthPluginOptions['layout'];
+    logo?: ReactNode;
+    tagline?: string;
+    description?: string;
     loginLogo?: ReactNode;
     loginLayout?: 'split' | 'centered';
     loginTagline?: string;
@@ -33,6 +50,7 @@ export interface AuthConfig {
     showOAuth?: boolean;
     oauthProviders?: Exclude<AuthProvider, 'email'>[];
 }
+export type AppAuthConfig = AuthConfig | ResolvedAuthPlugin;
 export interface OrgConfig {
     /** 'supabase' | 'mock' or bring your own OrgAdapter */
     adapter?: 'supabase' | 'mock' | OrgAdapter;
@@ -58,7 +76,7 @@ export interface FayzAppConfig {
     logo?: string | ReactNode;
     supabaseUrl?: string;
     supabaseAnonKey?: string;
-    auth?: AuthConfig;
+    auth?: AppAuthConfig;
     org?: OrgConfig;
     plugins?: PluginManifest[];
     pages?: CustomPage[];
@@ -66,6 +84,17 @@ export interface FayzAppConfig {
     defaultThemeMode?: ThemeMode;
     /** Shell layout variant (default: 'sidebar') */
     layout?: 'sidebar' | 'topbar' | 'minimal';
+    /** Mobile bottom tab bar. Rendered by AppShell on small screens (md:hidden)
+     *  for every layout variant. Route items map a lucide icon name to a route; an
+     *  `{ kind: 'action', id, icon }` item renders as a raised center button
+     *  (Mobills style) that fires `onBottomNavAction(id)` instead of navigating. */
+    bottomNav?: BottomNavItem[];
+    /** Fired when a bottom-nav `action` item (e.g. the center "+") is tapped. */
+    onBottomNavAction?: (id: string) => void;
+    /** Mobile header treatment (<md), default 'minimal'. 'transparent' renders no
+     *  header bar (edge-to-edge content) with a floating profile avatar top-right;
+     *  'hidden' renders neither. Desktop keeps its sidebar + user menu. */
+    mobileHeader?: MobileHeaderVariant;
     /** Wrap the main content in an inset "framed" card (default: true). The
      *  sidebar itself is always flush/full-height. */
     contentFrame?: boolean;
@@ -76,6 +105,14 @@ export interface FayzAppConfig {
      *  view changes). Default: 'slide'. Set per repo/app for a different feel. */
     navTransition?: 'slide' | 'fade' | 'none';
     locale?: LocaleConfig;
+    /** Show org-level settings tabs (Equipe/Permissões/Localizações/Regras).
+     *  Defaults to `Boolean(org)` for back-compat. B2C/personal apps that still
+     *  need an org for the workspace can set `false` to hide these ERP tabs. */
+    orgSettings?: boolean;
+    /** Show the branding ("Identidade Visual") + company "Geral" settings tabs.
+     *  Default: `true`. B2C apps set `false` to drop org-identity settings, leaving
+     *  Perfil + Segurança + plugin settings only. */
+    branding?: boolean;
     permissions?: PermissionsConfig;
     billing?: FayzBillingConfig;
     chat?: ChatConfig;

package/dist/app/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/app/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACrD,OAAO,KAAK,EACV,WAAW,EACX,YAAY,EACZ,UAAU,EACV,cAAc,EACd,SAAS,EACT,YAAY,EACZ,iBAAiB,EAClB,MAAM,eAAe,CAAA;AACtB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AACrE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAMxD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,CAAA;AAE3D,MAAM,WAAW,UAAU;IACzB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAA;KAAE,CAAA;IAC/E,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAA;CACxB;AAMD,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,OAAO,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,WAAW,CAAA;IAC3C,iEAAiE;IACjE,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,WAAW,CAAC,EAAE,OAAO,GAAG,UAAU,CAAA;IAClC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAA;CAClD;AAED,MAAM,WAAW,SAAS;IACxB,uDAAuD;IACvD,OAAO,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CAAA;IAC1C,qDAAqD;IACrD,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,gEAAgE;IAChE,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAMD,MAAM,WAAW,aAAa;IAC5B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAKzB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;IAKxB,IAAI,CAAC,EAAE,UAAU,CAAA;IAKjB,GAAG,CAAC,EAAE,SAAS,CAAA;IAKf,OAAO,CAAC,EAAE,cAAc,EAAE,CAAA;IAK1B,KAAK,CAAC,EAAE,UAAU,EAAE,CAAA;IAKpB,KAAK,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IACtC,gBAAgB,CAAC,EAAE,SAAS,CAAA;IAC5B,gDAAgD;IAChD,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAA;IACzC;sDACkD;IAClD,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;oDACgD;IAChD,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC3B;kFAC8E;IAC9E,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAA;IAKzC,MAAM,CAAC,EAAE,YAAY,CAAA;IAKrB,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAK/B,OAAO,CAAC,EAAE,iBAAiB,CAAA;IAK3B,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/app/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACrD,OAAO,KAAK,EAEV,YAAY,EACZ,UAAU,EACV,cAAc,EACd,SAAS,EACT,YAAY,EACZ,iBAAiB,EAClB,MAAM,eAAe,CAAA;AACtB,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACjF,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACrE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AACrE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAMxD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,CAAA;AAE3D,MAAM,WAAW,UAAU;IACzB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAA;KAAE,CAAA;IAC/E;;;wFAGoF;IACpF,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAA;CACxB;AAMD,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,OAAO,CAAC,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAA;IACtC,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAA;IACxC,iEAAiE;IACjE,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,kDAAkD;IAClD,MAAM,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IACpC,QAAQ,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAA;IACxC,KAAK,CAAC,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAClC,MAAM,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IACpC,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,WAAW,CAAC,EAAE,OAAO,GAAG,UAAU,CAAA;IAClC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAA;CAClD;AAED,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,kBAAkB,CAAA;AAE3D,MAAM,WAAW,SAAS;IACxB,uDAAuD;IACvD,OAAO,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CAAA;IAC1C,qDAAqD;IACrD,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,gEAAgE;IAChE,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAMD,MAAM,WAAW,aAAa;IAC5B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAKzB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;IAKxB,IAAI,CAAC,EAAE,aAAa,CAAA;IAKpB,GAAG,CAAC,EAAE,SAAS,CAAA;IAKf,OAAO,CAAC,EAAE,cAAc,EAAE,CAAA;IAK1B,KAAK,CAAC,EAAE,UAAU,EAAE,CAAA;IAKpB,KAAK,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IACtC,gBAAgB,CAAC,EAAE,SAAS,CAAA;IAC5B,gDAAgD;IAChD,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAA;IACzC;;;oFAGgF;IAChF,SAAS,CAAC,EAAE,aAAa,EAAE,CAAA;IAC3B,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC;;2EAEuE;IACvE,YAAY,CAAC,EAAE,mBAAmB,CAAA;IAClC;sDACkD;IAClD,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;oDACgD;IAChD,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC3B;kFAC8E;IAC9E,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAA;IAKzC,MAAM,CAAC,EAAE,YAAY,CAAA;IAKrB;;gFAE4E;IAC5E,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB;;qDAEiD;IACjD,QAAQ,CAAC,EAAE,OAAO,CAAA;IAKlB,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAK/B,OAAO,CAAC,EAAE,iBAAiB,CAAA;IAK3B,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB"}

package/dist/app/scaffold.d.ts

@@ -1,12 +1,11 @@
 import * as React from 'react';
 import type { AppManifest } from '@fayz-ai/core';
 import type { FayzAppConfig } from './config';
-import { type SaasAppConfig } from '../shell/createSaasApp';
 /** Fayz/Saas config → AppManifest (sugar → data). During the Beauty/Resto
  * migration, config-authored apps keep a live config ref so renderApp can
  * preserve code-backed plugins and custom pages while the JSON manifest path
  * matures. Serialized manifests still resolve through plugin/page registries. */
-export declare function defineSaas(config: FayzAppConfig | SaasAppConfig): AppManifest;
+export declare function defineSaas(config: FayzAppConfig): AppManifest;
 export declare function AdminScaffold({ manifest, surface }: {
     manifest: AppManifest;
     surface: string;

package/dist/app/scaffold.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold.d.ts","sourceRoot":"","sources":["../../src/app/scaffold.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAO9B,OAAO,KAAK,EACV,WAAW,EAKZ,MAAM,eAAe,CAAA;AAGtB,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,UAAU,CAAA;AACzD,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAA;AA+B1E;;;iFAGiF;AACjF,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,GAAG,WAAW,CA0B7E;AA6DD,wBAAgB,aAAa,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;IAAE,QAAQ,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,qBA8B9F;yBA9Be,aAAa"}
+{"version":3,"file":"scaffold.d.ts","sourceRoot":"","sources":["../../src/app/scaffold.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAO9B,OAAO,KAAK,EACV,WAAW,EAKZ,MAAM,eAAe,CAAA;AAGtB,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,UAAU,CAAA;AA2BzD;;;iFAGiF;AACjF,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,WAAW,CA0B7D;AA6DD,wBAAgB,aAAa,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;IAAE,QAAQ,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,qBAsB9F;yBAtBe,aAAa"}

package/dist/{chunk-DJW67TCY.js → chunk-DCRT47W4.js}

@@ -1,3 +1,4 @@
+import { usePermissionsStore } from './chunk-XNWCGJYH.js';
 import { createClient } from '@supabase/supabase-js';
 import { setActiveTenantId, setGlobalSupabaseClient } from '@fayz-ai/core';
 import { create } from 'zustand';
@@ -5,7 +6,6 @@ import * as React from 'react';
 import { useAuthStore } from '@fayz-ai/auth';
 import { jsx } from 'react/jsx-runtime';
 
-// src/supabase/client.ts
 var CORE_SCHEMA = "saas_core";
 var _client = null;
 function createFayzSupabaseClient(url, anonKey) {
@@ -80,7 +80,8 @@ function mapMemberRow(row) {
       fullName: profile["full_name"] ?? "",
       avatarUrl: profile["avatar_url"] ?? void 0
     },
-    joinedAt: row["joined_at"]
+    // tenant_members has no `joined_at` column — it's `created_at`.
+    joinedAt: row["joined_at"] ?? row["created_at"]
   };
 }
 function mapLocationRow(row) {
@@ -113,18 +114,46 @@ function mapInviteRow(row) {
     expiresAt: row["expires_at"]
   };
 }
-var SYSTEM_ROLES = ["owner", "admin", "manager", "staff", "viewer"];
-function buildPermissionProfiles(permissions, rolePerms, overrides) {
+var DB_ACTION = {
+  read: "read",
+  create: "create",
+  edit: "update",
+  write: "create",
+  manage: "manage",
+  delete: "delete"
+};
+function slugifyRole(name) {
+  return name.toLowerCase().normalize("NFD").replace(/[\u0300-\u036f]/g, "").replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "role";
+}
+var DEFAULT_ROLES = [
+  { id: "owner", name: "Owner" },
+  { id: "admin", name: "Admin" },
+  { id: "manager", name: "Manager" },
+  { id: "staff", name: "Staff" },
+  { id: "viewer", name: "Viewer" }
+];
+var SYSTEM_PERMISSION_MAP = {
+  "team.read": "manage_team",
+  "team.invite": "manage_team",
+  "team.manage": "manage_team",
+  "team.manage_roles": "manage_permissions",
+  "billing.read": "manage_billing",
+  "billing.manage": "manage_billing",
+  "settings.read": "manage_settings",
+  "settings.update": "manage_settings"
+};
+var ALL_SYSTEM_PERMISSIONS = ["manage_team", "manage_billing", "manage_settings", "manage_permissions"];
+function buildPermissionProfiles(roles, permissions, rolePerms, overrides) {
   const overrideMap = /* @__PURE__ */ new Map();
   for (const o of overrides) {
     overrideMap.set(`${o.role}:${o.permission_id}`, o.granted);
   }
   const rolePermMap = /* @__PURE__ */ new Map();
-  for (const role of SYSTEM_ROLES) {
-    rolePermMap.set(role, /* @__PURE__ */ new Set());
+  for (const r of roles) {
+    rolePermMap.set(r.id, /* @__PURE__ */ new Set());
   }
-  for (const p of permissions) {
-    rolePermMap.get("owner").add(p.id);
+  if (rolePermMap.has("owner")) {
+    for (const p of permissions) rolePermMap.get("owner").add(p.id);
   }
   for (const rp of rolePerms) {
     rolePermMap.get(rp.role)?.add(rp.permission_id);
@@ -143,14 +172,14 @@ function buildPermissionProfiles(permissions, rolePerms, overrides) {
   }
   const actionMap = {
     read: "read",
-    create: "write",
-    update: "write",
-    manage: "manage",
+    create: "create",
+    update: "edit",
+    manage: "edit",
     delete: "delete",
-    configure: "manage",
-    invite: "write"
+    configure: "edit",
+    invite: "create"
   };
-  return SYSTEM_ROLES.map((role) => {
+  return roles.map(({ id: role, name, description, isSystem }) => {
     const permIds = rolePermMap.get(role);
     const features = {};
     for (const permId of permIds) {
@@ -165,16 +194,26 @@ function buildPermissionProfiles(permissions, rolePerms, overrides) {
         features[category].push(mappedAction);
       }
     }
+    const systemPermissions = [];
+    const source = role === "owner" ? ALL_SYSTEM_PERMISSIONS : [...permIds].map((id) => SYSTEM_PERMISSION_MAP[id]);
+    for (const sp of source) {
+      if (sp && !systemPermissions.includes(sp)) systemPermissions.push(sp);
+    }
     return {
       id: role,
-      name: capitalize(role),
-      isSystem: true,
+      name: name || capitalize(role),
+      description,
+      isSystem: isSystem ?? true,
+      systemPermissions,
       grants: features
     };
   });
 }
 function createSupabaseOrgAdapter(config) {
   const schema = config?.coreSchema ?? CORE_SCHEMA;
+  const roles = config?.roles && config.roles.length > 0 ? config.roles : DEFAULT_ROLES;
+  const authAdapter = config?.authAdapter;
+  const inviteRedirectTo = typeof window !== "undefined" ? `${window.location.origin}/` : void 0;
   function supabase() {
     return getFayzSupabaseClient();
   }
@@ -253,24 +292,64 @@ function createSupabaseOrgAdapter(config) {
       if (error) throw error;
     },
     async listProfiles(orgId) {
-      const [permsResult, rolePermsResult, overridesResult] = await Promise.all([
+      const [permsResult, rolePermsResult, overridesResult, customResult] = await Promise.all([
         core().from("permissions").select("id, category"),
         core().from("role_permissions").select("role, permission_id"),
-        core().from("tenant_role_overrides").select("role, permission_id, granted").eq("tenant_id", orgId)
+        core().from("tenant_role_overrides").select("role, permission_id, granted").eq("tenant_id", orgId),
+        // Custom roles the tenant created by duplicating a system role. Tolerate a
+        // missing table (pre-seed) — just show the system roles in that case.
+        core().from("tenant_roles").select("key, name, description").eq("tenant_id", orgId)
       ]);
       if (permsResult.error) throw permsResult.error;
       if (rolePermsResult.error) throw rolePermsResult.error;
       if (overridesResult.error) throw overridesResult.error;
+      const systemRoles = roles.map((r) => ({ ...r, isSystem: true }));
+      const customRoles = customResult.error ? [] : (customResult.data ?? []).map((r) => ({
+        id: r.key,
+        name: r.name,
+        description: r.description ?? void 0,
+        isSystem: false
+      }));
       return buildPermissionProfiles(
+        [...systemRoles, ...customRoles],
         permsResult.data ?? [],
         rolePermsResult.data ?? [],
         overridesResult.data ?? []
       );
     },
-    async createProfile(_orgId, _profile) {
-      throw new Error(
-        "Custom roles are not supported. Roles are system-defined (owner, admin, manager, staff, viewer)."
+    async createProfile(orgId, profile) {
+      const existing = new Set(
+        ((await core().from("tenant_roles").select("key").eq("tenant_id", orgId)).data ?? []).map((r) => r.key)
       );
+      let key = slugifyRole(profile.name);
+      if (existing.has(key) || roles.some((r) => r.id === key)) {
+        let n = 2;
+        while (existing.has(`${key}-${n}`) || roles.some((r) => r.id === `${key}-${n}`)) n++;
+        key = `${key}-${n}`;
+      }
+      const insertRole = await core().from("tenant_roles").insert({ tenant_id: orgId, key, name: profile.name, description: profile.description ?? null });
+      if (insertRole.error) throw insertRole.error;
+      const overrides = Object.entries(profile.grants ?? {}).flatMap(
+        ([category, actions]) => actions.map((action) => ({
+          tenant_id: orgId,
+          role: key,
+          permission_id: `${category}.${DB_ACTION[action] ?? action}`,
+          granted: true
+        }))
+      );
+      if (overrides.length > 0) {
+        const { error } = await core().from("tenant_role_overrides").insert(overrides);
+        if (error) throw error;
+      }
+      const profiles = await this.listProfiles(orgId);
+      return profiles.find((p) => p.id === key) ?? {
+        id: key,
+        name: profile.name,
+        description: profile.description,
+        isSystem: false,
+        systemPermissions: profile.systemPermissions ?? [],
+        grants: profile.grants ?? {}
+      };
     },
     async updateProfile(orgId, profileId, data) {
       if (data.grants) {
@@ -280,6 +359,8 @@ function createSupabaseOrgAdapter(config) {
           for (const action of actions) {
             const dbActionMap = {
               read: "read",
+              create: "create",
+              edit: "update",
               write: "create",
               manage: "manage",
               delete: "delete"
@@ -303,8 +384,13 @@ function createSupabaseOrgAdapter(config) {
       if (!updated) throw new Error(`Profile not found: ${profileId}`);
       return updated;
     },
-    async deleteProfile(_orgId, _profileId) {
-      throw new Error("System roles cannot be deleted.");
+    async deleteProfile(orgId, profileId) {
+      const found = await core().from("tenant_roles").select("key").eq("tenant_id", orgId).eq("key", profileId).maybeSingle();
+      if (found.error) throw found.error;
+      if (!found.data) throw new Error("System roles cannot be deleted.");
+      await core().from("tenant_role_overrides").delete().eq("tenant_id", orgId).eq("role", profileId);
+      const { error } = await core().from("tenant_roles").delete().eq("tenant_id", orgId).eq("key", profileId);
+      if (error) throw error;
     },
     async listInvites(orgId) {
       const { data, error } = await core().from("invitations").select("*").eq("tenant_id", orgId).order("created_at", { ascending: false });
@@ -319,6 +405,10 @@ function createSupabaseOrgAdapter(config) {
         invited_by: invitedBy
       }).select().single();
       if (error) throw error;
+      await authAdapter?.inviteUser?.(email, {
+        redirectTo: inviteRedirectTo,
+        data: { tenant_id: orgId, role: profileId, invited_by: invitedBy }
+      });
       return mapInviteRow(data);
     },
     async bulkInvite(orgId, emails, profileId, invitedBy) {
@@ -330,6 +420,14 @@ function createSupabaseOrgAdapter(config) {
       }));
       const { data, error } = await core().from("invitations").insert(rows).select();
       if (error) throw error;
+      await Promise.all(
+        emails.map(
+          (email) => authAdapter?.inviteUser?.(email, {
+            redirectTo: inviteRedirectTo,
+            data: { tenant_id: orgId, role: profileId, invited_by: invitedBy }
+          })
+        )
+      );
       return (data ?? []).map(mapInviteRow);
     },
     async revokeInvite(orgId, inviteId) {
@@ -342,7 +440,12 @@ function createSupabaseOrgAdapter(config) {
         expires_at: new Date(Date.now() + 7 * 24 * 60 * 60 * 1e3).toISOString()
       }).eq("id", inviteId).eq("tenant_id", orgId).select().single();
       if (error) throw error;
-      return mapInviteRow(data);
+      const row = data;
+      await authAdapter?.inviteUser?.(row.email, {
+        redirectTo: inviteRedirectTo,
+        data: { tenant_id: orgId, role: row.role, invited_by: row.invited_by }
+      });
+      return mapInviteRow(row);
     },
     async listLocations(orgId) {
       const { data, error } = await core().from("locations").select("*").eq("tenant_id", orgId).order("is_headquarters", { ascending: false }).order("name");
@@ -698,9 +801,27 @@ function useTenantOptional() {
 }
 function OrgProvider({ adapter, autoCreate = false, children }) {
   const { user } = useAuthStore();
-  const { currentOrg, userOrgs, loading, setCurrentOrg, setUserOrgs, setLoading, reset } = useOrganizationStore();
+  const { currentOrg, userOrgs, loading, setCurrentOrg, setUserOrgs, setMembers, setLoading, reset } = useOrganizationStore();
+  const setProfiles = usePermissionsStore((s) => s.setProfiles);
+  const setCurrentProfile = usePermissionsStore((s) => s.setCurrentProfile);
   const adapterRef = React.useRef(adapter);
   adapterRef.current = adapter;
+  const hydrateOrg = React.useCallback(
+    async (orgId, uid) => {
+      try {
+        const [members, profiles] = await Promise.all([
+          adapterRef.current.listMembers(orgId),
+          adapterRef.current.listProfiles(orgId)
+        ]);
+        setMembers(members);
+        setProfiles(profiles);
+        const myMembership = uid ? members.find((m) => m.userId === uid) : void 0;
+        setCurrentProfile(profiles.find((p) => p.id === myMembership?.profileId) ?? null);
+      } catch {
+      }
+    },
+    [setMembers, setProfiles, setCurrentProfile]
+  );
   React.useEffect(() => {
     if (!user) {
       reset();
@@ -729,6 +850,7 @@ function OrgProvider({ adapter, autoCreate = false, children }) {
               }
             ]);
             setCurrentOrg(newOrg);
+            await hydrateOrg(newOrg.id, user.id);
           }
           return;
         }
@@ -736,7 +858,10 @@ function OrgProvider({ adapter, autoCreate = false, children }) {
         const target = memberships.find((m) => m.orgId === persistedId) ?? memberships[0];
         if (target && !cancelled) {
           const org = await adapterRef.current.getOrg(target.orgId);
-          if (!cancelled) setCurrentOrg(org);
+          if (!cancelled) {
+            setCurrentOrg(org);
+            await hydrateOrg(org.id, user.id);
+          }
         }
       } finally {
         if (!cancelled) setLoading(false);
@@ -752,6 +877,7 @@ function OrgProvider({ adapter, autoCreate = false, children }) {
     try {
       const org = await adapterRef.current.getOrg(orgId);
       setCurrentOrg(org);
+      await hydrateOrg(org.id, user?.id);
     } finally {
       setLoading(false);
     }
@@ -762,6 +888,7 @@ function OrgProvider({ adapter, autoCreate = false, children }) {
     try {
       const org = await adapterRef.current.getOrg(currentOrg.id);
       setCurrentOrg(org);
+      await hydrateOrg(org.id, user?.id);
     } finally {
       setLoading(false);
     }
@@ -777,5 +904,5 @@ function OrgProvider({ adapter, autoCreate = false, children }) {
 }
 
 export { CORE_SCHEMA, OrgProvider, createFayzSupabaseClient, createMockOrgAdapter, createSupabaseOrgAdapter, getCoreSchemaClient, getFayzSupabaseClient, getFayzSupabaseClientOptional, getPersistedOrgId, useOrgAdapter, useOrgAdapterOptional, useOrganizationStore, useTenant, useTenantOptional };
-//# sourceMappingURL=chunk-DJW67TCY.js.map
-//# sourceMappingURL=chunk-DJW67TCY.js.map
+//# sourceMappingURL=chunk-DCRT47W4.js.map
+//# sourceMappingURL=chunk-DCRT47W4.js.map