@fayz-ai/saas 0.5.0 → 0.6.6

package/src/org/adapters/supabase.ts

@@ -7,7 +7,7 @@ import type {
   Location,
   Invite,
 } from '@fayz-ai/core'
-import type { PermissionProfile } from '@fayz-ai/core'
+import type { PermissionProfile, SystemPermission, AuthAdapter } from '@fayz-ai/core'
 import { getFayzSupabaseClient, CORE_SCHEMA } from '../../supabase/client'
 
 // ---------------------------------------------------------------------------
@@ -67,7 +67,8 @@ function mapMemberRow(row: Record<string, unknown>): OrgMember {
       fullName: (profile['full_name'] as string) ?? '',
       avatarUrl: (profile['avatar_url'] as string | null) ?? undefined,
     },
-    joinedAt: row['joined_at'] as string,
+    // tenant_members has no `joined_at` column — it's `created_at`.
+    joinedAt: (row['joined_at'] ?? row['created_at']) as string,
   }
 }
 
@@ -103,12 +104,54 @@ function mapInviteRow(row: Record<string, unknown>): Invite {
   }
 }
 
-const SYSTEM_ROLES = ['owner', 'admin', 'manager', 'staff', 'viewer'] as const
+/** Minimal role identity the adapter needs to build profiles. Grants come from
+ *  the DB catalog; id/name/order/description come from what the app declares. */
+export interface RoleIdentity {
+  id: string
+  name: string
+  description?: string
+  /** System roles are app-defined and static (not user-editable). Custom roles
+   *  (duplicated by users, stored in tenant_roles) are false. Defaults true. */
+  isSystem?: boolean
+}
+
+// Matrix emits read/create/edit/delete; map back to DB action verbs.
+const DB_ACTION: Record<string, string> = {
+  read: 'read', create: 'create', edit: 'update', write: 'create', manage: 'manage', delete: 'delete',
+}
 
-type SystemRole = (typeof SYSTEM_ROLES)[number]
+function slugifyRole(name: string): string {
+  return name.toLowerCase().normalize('NFD').replace(/[\u0300-\u036f]/g, '')
+    .replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '') || 'role'
+}
+
+// Fallback role set when the host app declares none. The SDK is domain-agnostic:
+// each app defines its OWN business roles (a salon's roles ≠ an agency's) via
+// config.permissions.defaultProfiles. These five are only a back-compat default.
+const DEFAULT_ROLES: RoleIdentity[] = [
+  { id: 'owner', name: 'Owner' },
+  { id: 'admin', name: 'Admin' },
+  { id: 'manager', name: 'Manager' },
+  { id: 'staff', name: 'Staff' },
+  { id: 'viewer', name: 'Viewer' },
+]
+
+// DB permission ids that confer an org-management system permission.
+const SYSTEM_PERMISSION_MAP: Record<string, SystemPermission> = {
+  'team.read': 'manage_team',
+  'team.invite': 'manage_team',
+  'team.manage': 'manage_team',
+  'team.manage_roles': 'manage_permissions',
+  'billing.read': 'manage_billing',
+  'billing.manage': 'manage_billing',
+  'settings.read': 'manage_settings',
+  'settings.update': 'manage_settings',
+}
+const ALL_SYSTEM_PERMISSIONS: SystemPermission[] = ['manage_team', 'manage_billing', 'manage_settings', 'manage_permissions']
 
 // Map DB permission ids to feature action grants
 function buildPermissionProfiles(
+  roles: RoleIdentity[],
   permissions: Array<{ id: string; category: string }>,
   rolePerms: Array<{ role: string; permission_id: string }>,
   overrides: Array<{ role: string; permission_id: string; granted: boolean }>,
@@ -118,22 +161,23 @@ function buildPermissionProfiles(
     overrideMap.set(`${o.role}:${o.permission_id}`, o.granted)
   }
 
-  const rolePermMap = new Map<SystemRole, Set<string>>()
-  for (const role of SYSTEM_ROLES) {
-    rolePermMap.set(role, new Set())
+  // The role SET comes from what the app declares — the SDK no longer bakes it in.
+  const rolePermMap = new Map<string, Set<string>>()
+  for (const r of roles) {
+    rolePermMap.set(r.id, new Set())
   }
-  // Owner gets all permissions by default
-  for (const p of permissions) {
-    rolePermMap.get('owner')!.add(p.id)
+  // Convention: an 'owner' role (if declared) gets every permission implicitly.
+  if (rolePermMap.has('owner')) {
+    for (const p of permissions) rolePermMap.get('owner')!.add(p.id)
   }
   for (const rp of rolePerms) {
-    rolePermMap.get(rp.role as SystemRole)?.add(rp.permission_id)
+    rolePermMap.get(rp.role)?.add(rp.permission_id)
   }
 
   // Apply overrides
   for (const [key, granted] of overrideMap) {
     const colonIdx = key.indexOf(':')
-    const role = key.slice(0, colonIdx) as SystemRole
+    const role = key.slice(0, colonIdx)
     const permId = key.slice(colonIdx + 1)
     const perms = rolePermMap.get(role)
     if (!perms) continue
@@ -144,17 +188,18 @@ function buildPermissionProfiles(
     }
   }
 
+  // Align DB actions with the matrix's action vocabulary (read/create/edit/delete).
   const actionMap: Record<string, string> = {
     read: 'read',
-    create: 'write',
-    update: 'write',
-    manage: 'manage',
+    create: 'create',
+    update: 'edit',
+    manage: 'edit',
     delete: 'delete',
-    configure: 'manage',
-    invite: 'write',
+    configure: 'edit',
+    invite: 'create',
   }
 
-  return SYSTEM_ROLES.map((role) => {
+  return roles.map(({ id: role, name, description, isSystem }) => {
     const permIds = rolePermMap.get(role)!
     const features: Record<string, string[]> = {}
 
@@ -172,10 +217,20 @@ function buildPermissionProfiles(
       }
     }
 
+    // Org-management system permissions, derived from team/billing/settings
+    // grants (owner gets all four). These gate the Equipe/Permissões tabs.
+    const systemPermissions: SystemPermission[] = []
+    const source = role === 'owner' ? ALL_SYSTEM_PERMISSIONS : [...permIds].map((id) => SYSTEM_PERMISSION_MAP[id])
+    for (const sp of source) {
+      if (sp && !systemPermissions.includes(sp)) systemPermissions.push(sp)
+    }
+
     return {
       id: role,
-      name: capitalize(role),
-      isSystem: true,
+      name: name || capitalize(role),
+      description,
+      isSystem: isSystem ?? true,
+      systemPermissions,
       grants: features,
     }
   })
@@ -188,10 +243,20 @@ function buildPermissionProfiles(
 export interface SupabaseOrgAdapterConfig {
   /** Override the core schema name (default: 'saas_core') */
   coreSchema?: string
+  /** Business roles the host app declares (config.permissions.defaultProfiles).
+   *  Falls back to the generic five when omitted. */
+  roles?: RoleIdentity[]
+  /** Auth adapter used to actually DELIVER invites (send the e-mail + create the
+   *  auth user) — the org adapter only records the audit row. Injected by the app;
+   *  when omitted, invites are recorded but not delivered. */
+  authAdapter?: AuthAdapter
 }
 
 export function createSupabaseOrgAdapter(config?: SupabaseOrgAdapterConfig): OrgAdapter {
   const schema = config?.coreSchema ?? CORE_SCHEMA
+  const roles: RoleIdentity[] = config?.roles && config.roles.length > 0 ? config.roles : DEFAULT_ROLES
+  const authAdapter = config?.authAdapter
+  const inviteRedirectTo = typeof window !== 'undefined' ? `${window.location.origin}/` : undefined
 
   function supabase() {
     return getFayzSupabaseClient()
@@ -318,17 +383,31 @@ export function createSupabaseOrgAdapter(config?: SupabaseOrgAdapterConfig): Org
     },
 
     async listProfiles(orgId: string): Promise<PermissionProfile[]> {
-      const [permsResult, rolePermsResult, overridesResult] = await Promise.all([
+      const [permsResult, rolePermsResult, overridesResult, customResult] = await Promise.all([
         core().from('permissions').select('id, category'),
         core().from('role_permissions').select('role, permission_id'),
         core().from('tenant_role_overrides').select('role, permission_id, granted').eq('tenant_id', orgId),
+        // Custom roles the tenant created by duplicating a system role. Tolerate a
+        // missing table (pre-seed) — just show the system roles in that case.
+        core().from('tenant_roles').select('key, name, description').eq('tenant_id', orgId),
       ])
 
       if (permsResult.error) throw permsResult.error
       if (rolePermsResult.error) throw rolePermsResult.error
       if (overridesResult.error) throw overridesResult.error
 
+      const systemRoles: RoleIdentity[] = roles.map((r) => ({ ...r, isSystem: true }))
+      const customRoles: RoleIdentity[] = customResult.error
+        ? []
+        : ((customResult.data ?? []) as Array<{ key: string; name: string; description: string | null }>).map((r) => ({
+            id: r.key,
+            name: r.name,
+            description: r.description ?? undefined,
+            isSystem: false,
+          }))
+
       return buildPermissionProfiles(
+        [...systemRoles, ...customRoles],
         (permsResult.data ?? []) as Array<{ id: string; category: string }>,
         (rolePermsResult.data ?? []) as Array<{ role: string; permission_id: string }>,
         (overridesResult.data ?? []) as Array<{ role: string; permission_id: string; granted: boolean }>,
@@ -336,12 +415,45 @@ export function createSupabaseOrgAdapter(config?: SupabaseOrgAdapterConfig): Org
     },
 
     async createProfile(
-      _orgId: string,
-      _profile: Omit<PermissionProfile, 'id' | 'isSystem'>,
+      orgId: string,
+      profile: Omit<PermissionProfile, 'id' | 'isSystem'>,
     ): Promise<PermissionProfile> {
-      throw new Error(
-        'Custom roles are not supported. Roles are system-defined (owner, admin, manager, staff, viewer).',
+      // Custom roles live in tenant_roles (identity/name) + tenant_role_overrides
+      // (their grants). System roles stay app-defined and untouched.
+      const existing = new Set(
+        ((await core().from('tenant_roles').select('key').eq('tenant_id', orgId)).data ?? [])
+          .map((r: { key: string }) => r.key),
       )
+      let key = slugifyRole(profile.name)
+      if (existing.has(key) || roles.some((r) => r.id === key)) {
+        let n = 2
+        while (existing.has(`${key}-${n}`) || roles.some((r) => r.id === `${key}-${n}`)) n++
+        key = `${key}-${n}`
+      }
+
+      const insertRole = await core()
+        .from('tenant_roles')
+        .insert({ tenant_id: orgId, key, name: profile.name, description: profile.description ?? null })
+      if (insertRole.error) throw insertRole.error
+
+      const overrides = Object.entries(profile.grants ?? {}).flatMap(([category, actions]) =>
+        actions.map((action) => ({
+          tenant_id: orgId,
+          role: key,
+          permission_id: `${category}.${DB_ACTION[action] ?? action}`,
+          granted: true,
+        })),
+      )
+      if (overrides.length > 0) {
+        const { error } = await core().from('tenant_role_overrides').insert(overrides)
+        if (error) throw error
+      }
+
+      const profiles = await this.listProfiles(orgId)
+      return profiles.find((p) => p.id === key) ?? {
+        id: key, name: profile.name, description: profile.description, isSystem: false,
+        systemPermissions: profile.systemPermissions ?? [], grants: profile.grants ?? {},
+      }
     },
 
     async updateProfile(
@@ -365,8 +477,11 @@ export function createSupabaseOrgAdapter(config?: SupabaseOrgAdapterConfig): Org
 
         for (const [category, actions] of Object.entries(data.grants)) {
           for (const action of actions) {
+            // Matrix emits read/create/edit/delete; map back to DB action verbs.
             const dbActionMap: Record<string, string> = {
               read: 'read',
+              create: 'create',
+              edit: 'update',
               write: 'create',
               manage: 'manage',
               delete: 'delete',
@@ -393,8 +508,21 @@ export function createSupabaseOrgAdapter(config?: SupabaseOrgAdapterConfig): Org
       return updated
     },
 
-    async deleteProfile(_orgId: string, _profileId: string): Promise<void> {
-      throw new Error('System roles cannot be deleted.')
+    async deleteProfile(orgId: string, profileId: string): Promise<void> {
+      // Only custom roles (present in tenant_roles) can be deleted; system roles
+      // are app-defined and static.
+      const found = await core()
+        .from('tenant_roles')
+        .select('key')
+        .eq('tenant_id', orgId)
+        .eq('key', profileId)
+        .maybeSingle()
+      if (found.error) throw found.error
+      if (!found.data) throw new Error('System roles cannot be deleted.')
+
+      await core().from('tenant_role_overrides').delete().eq('tenant_id', orgId).eq('role', profileId)
+      const { error } = await core().from('tenant_roles').delete().eq('tenant_id', orgId).eq('key', profileId)
+      if (error) throw error
     },
 
     async listInvites(orgId: string): Promise<Invite[]> {
@@ -421,6 +549,12 @@ export function createSupabaseOrgAdapter(config?: SupabaseOrgAdapterConfig): Org
         .single()
 
       if (error) throw error
+      // Deliver via the auth abstraction (sends the e-mail + creates the auth user,
+      // stamping tenant_id/role on its metadata for the accept-time membership trigger).
+      await authAdapter?.inviteUser?.(email, {
+        redirectTo: inviteRedirectTo,
+        data: { tenant_id: orgId, role: profileId, invited_by: invitedBy },
+      })
       return mapInviteRow(data as Record<string, unknown>)
     },
 
@@ -434,6 +568,14 @@ export function createSupabaseOrgAdapter(config?: SupabaseOrgAdapterConfig): Org
 
       const { data, error } = await core().from('invitations').insert(rows).select()
       if (error) throw error
+      await Promise.all(
+        emails.map((email) =>
+          authAdapter?.inviteUser?.(email, {
+            redirectTo: inviteRedirectTo,
+            data: { tenant_id: orgId, role: profileId, invited_by: invitedBy },
+          }),
+        ),
+      )
       return ((data ?? []) as Array<Record<string, unknown>>).map(mapInviteRow)
     },
 
@@ -460,7 +602,13 @@ export function createSupabaseOrgAdapter(config?: SupabaseOrgAdapterConfig): Org
         .single()
 
       if (error) throw error
-      return mapInviteRow(data as Record<string, unknown>)
+      const row = data as Record<string, unknown>
+      // Re-send the invite e-mail through the auth abstraction.
+      await authAdapter?.inviteUser?.(row.email as string, {
+        redirectTo: inviteRedirectTo,
+        data: { tenant_id: orgId, role: row.role as string, invited_by: row.invited_by as string },
+      })
+      return mapInviteRow(row)
     },
 
     async listLocations(orgId: string): Promise<Location[]> {

package/src/org/context.tsx

@@ -2,6 +2,7 @@ import * as React from 'react'
 import type { OrgAdapter, Organization, OrgMembership } from '@fayz-ai/core'
 import { useAuthStore } from '@fayz-ai/auth'
 import { useOrganizationStore, getPersistedOrgId } from './store'
+import { usePermissionsStore } from '../permissions'
 
 // ---------------------------------------------------------------------------
 // Adapter context
@@ -68,12 +69,36 @@ export interface OrgProviderProps {
 
 export function OrgProvider({ adapter, autoCreate = false, children }: OrgProviderProps) {
   const { user } = useAuthStore()
-  const { currentOrg, userOrgs, loading, setCurrentOrg, setUserOrgs, setLoading, reset } =
+  const { currentOrg, userOrgs, loading, setCurrentOrg, setUserOrgs, setMembers, setLoading, reset } =
     useOrganizationStore()
+  const setProfiles = usePermissionsStore((s) => s.setProfiles)
+  const setCurrentProfile = usePermissionsStore((s) => s.setCurrentProfile)
 
   const adapterRef = React.useRef(adapter)
   adapterRef.current = adapter
 
+  // Load the org's members + permission profiles into the shared stores whenever
+  // an org resolves. This is what makes the role list, the invite dialog's role
+  // dropdown, and permission checks work — previously nothing loaded them here,
+  // so those surfaces came up empty. Also resolves the signed-in user's own role.
+  const hydrateOrg = React.useCallback(
+    async (orgId: string, uid: string | undefined) => {
+      try {
+        const [members, profiles] = await Promise.all([
+          adapterRef.current.listMembers(orgId),
+          adapterRef.current.listProfiles(orgId),
+        ])
+        setMembers(members)
+        setProfiles(profiles)
+        const myMembership = uid ? members.find((m) => m.userId === uid) : undefined
+        setCurrentProfile(profiles.find((p) => p.id === myMembership?.profileId) ?? null)
+      } catch {
+        // Non-fatal — leave stores as-is if the load fails.
+      }
+    },
+    [setMembers, setProfiles, setCurrentProfile],
+  )
+
   // Load orgs when user is authenticated
   React.useEffect(() => {
     if (!user) {
@@ -109,6 +134,7 @@ export function OrgProvider({ adapter, autoCreate = false, children }: OrgProvid
               },
             ])
             setCurrentOrg(newOrg)
+            await hydrateOrg(newOrg.id, user!.id)
           }
           return
         }
@@ -120,7 +146,10 @@ export function OrgProvider({ adapter, autoCreate = false, children }: OrgProvid
 
         if (target && !cancelled) {
           const org = await adapterRef.current.getOrg(target.orgId)
-          if (!cancelled) setCurrentOrg(org)
+          if (!cancelled) {
+            setCurrentOrg(org)
+            await hydrateOrg(org.id, user!.id)
+          }
         }
       } finally {
         if (!cancelled) setLoading(false)
@@ -140,6 +169,7 @@ export function OrgProvider({ adapter, autoCreate = false, children }: OrgProvid
     try {
       const org = await adapterRef.current.getOrg(orgId)
       setCurrentOrg(org)
+      await hydrateOrg(org.id, user?.id)
     } finally {
       setLoading(false)
     }
@@ -151,6 +181,7 @@ export function OrgProvider({ adapter, autoCreate = false, children }: OrgProvid
     try {
       const org = await adapterRef.current.getOrg(currentOrg.id)
       setCurrentOrg(org)
+      await hydrateOrg(org.id, user?.id)
     } finally {
       setLoading(false)
     }

package/src/shell/components/crud/archetypes/ClientOrdersTab.tsx

@@ -7,7 +7,7 @@ import type { ColumnDef } from '@tanstack/react-table'
 import { ListView } from '@fayz-ai/ui'
 import { useTranslation } from '../../../hooks/useTranslation'
 import type { EntityDef } from '../../../types/crud'
-import type { ClientDocument, ClientDocumentStage, ClientOrdersProvider, ClientOrdersNavigator } from '../../../types/client-orders'
+import type { ClientDocument, ClientDocumentStage, ClientOrdersProvider, ClientOrdersNavigator, ClientOrdersStageFilter } from '../../../types/client-orders'
 
 // ---------------------------------------------------------------------------
 // Stage badge config
@@ -146,6 +146,8 @@ export function ClientOrdersTab({
   entityDef,
   provider,
   navigator,
+  initialStage,
+  stageFilters,
   onBookingClick,
   onInvoiceClick,
   currency = { code: 'BRL', locale: 'pt-BR' },
@@ -154,6 +156,8 @@ export function ClientOrdersTab({
   entityDef: EntityDef
   provider: ClientOrdersProvider
   navigator?: ClientOrdersNavigator
+  initialStage?: string
+  stageFilters?: ClientOrdersStageFilter[]
   onBookingClick?: (orderId: string) => void
   onInvoiceClick?: (orderId: string) => void
   currency?: { code: string; locale: string }
@@ -162,7 +166,7 @@ export function ClientOrdersTab({
   const [docs, setDocs] = useState<ClientDocument[]>([])
   const [total, setTotal] = useState(0)
   const [loading, setLoading] = useState(true)
-  const [stageFilter, setStageFilter] = useState<string | undefined>()
+  const [stageFilter, setStageFilter] = useState<string | undefined>(initialStage)
 
   const clientId = item.id as string
 
@@ -185,14 +189,18 @@ export function ClientOrdersTab({
 
   useEffect(() => { fetchDocs() }, [fetchDocs])
 
+  useEffect(() => {
+    setStageFilter(initialStage)
+  }, [initialStage])
+
   const columns = useColumns(currency, t, onBookingClick, onInvoiceClick)
 
-  const tags = useMemo(() => [
+  const tags = useMemo(() => stageFilters ?? [
     { value: 'booked', label: t('crud.orders.stage.booked') },
     { value: 'invoiced', label: t('crud.orders.stage.invoiced') },
     { value: 'paid', label: t('crud.orders.stage.paid') },
     { value: 'quoted', label: t('crud.orders.stage.quoted') },
-  ], [t])
+  ], [stageFilters, t])
 
   return (
     <ListView<ClientDocument>

package/src/shell/components/layout/BottomNav.tsx

@@ -6,26 +6,53 @@ import {
   CreditCard,
   Bell,
   Calendar,
+  CalendarClock,
+  CalendarCheck2,
+  CalendarX,
   Package,
+  Activity,
   BarChart3,
   FileText,
+  FileCheck2,
   Mail,
   MessageCircle,
   DollarSign,
+  BadgeDollarSign,
+  CircleDollarSign,
   Megaphone,
   ShoppingCart,
+  ShoppingBag,
   Target,
   Wrench,
   ClipboardList,
   Briefcase,
   UserCog,
   BookOpen,
+  BookOpenCheck,
   Globe,
   Percent,
   Tag,
+  Tags,
   Camera,
   UtensilsCrossed,
+  MapPin,
+  Handshake,
+  Contact,
+  Building2,
   Search,
+  Shield,
+  Plus,
+  List,
+  ListPlus,
+  ListChecks,
+  FolderOpen,
+  Boxes,
+  Landmark,
+  Receipt,
+  Map,
+  Ban,
+  Clock,
+  Clock3,
   PartyPopper,
   Radio,
   CalendarDays,
@@ -37,6 +64,13 @@ import {
   Disc3,
   UsersRound,
   Mic,
+  Inbox,
+  Star,
+  TrendingUp,
+  UserCheck,
+  UserPlus,
+  UserX,
+  Zap,
   type LucideIcon,
 } from 'lucide-react'
 import { cn } from '../../lib/cn'
@@ -62,11 +96,12 @@ interface BottomNavProps {
 }
 
 const ICON_MAP: Record<string, LucideIcon> = {
-  Home, Users, Settings, CreditCard, Bell, Calendar, Package, BarChart3,
-  FileText, Mail, MessageCircle, DollarSign, Megaphone, ShoppingCart,
+  Home, Users, Settings, CreditCard, Bell, Calendar, CalendarClock, Package, Activity, BarChart3,
+  CalendarCheck2, CalendarX, FileText, FileCheck2, Mail, MessageCircle, DollarSign, BadgeDollarSign, CircleDollarSign, Megaphone, ShoppingCart, ShoppingBag,
   Target, Wrench, ClipboardList, Briefcase, UserCog, BookOpen, Globe,
-  Percent, Tag, Camera, UtensilsCrossed, Search,
-  PartyPopper, Radio, CalendarDays, Banknote, Layers, Music, Eye, ListMusic, Disc3, UsersRound, Mic,
+  BookOpenCheck, Percent, Tag, Tags, Camera, UtensilsCrossed, MapPin, Handshake, Contact, Building2, Search,
+  Shield, Plus, List, ListPlus, ListChecks, FolderOpen, Boxes, Landmark, Receipt, Map, Ban, Clock, Clock3, Inbox, PartyPopper, Radio, CalendarDays, Banknote, Layers, Music, Eye, ListMusic, Disc3, UsersRound, Mic,
+  Star, TrendingUp, UserCheck, UserPlus, UserX, Zap,
 }
 
 export function BottomNav({ navigation, activeRoute, onNavigate, showChat = true, customItems }: BottomNavProps) {

package/src/shell/components/layout/CommandPalette.tsx

@@ -3,11 +3,14 @@ import { useEffect, useRef, useState, useCallback } from 'react'
 import { Command } from 'cmdk'
 import * as Dialog from '@radix-ui/react-dialog'
 import {
-  Home, Users, Settings, CreditCard, Bell, Calendar, Package, BarChart3,
-  FileText, Mail, Search, DollarSign, Megaphone, ShoppingCart, Target,
-  Wrench, ClipboardList, Briefcase, UserCog, BookOpen, MessageCircle,
-  Globe, Percent, Tag, Camera, UtensilsCrossed, MapPin, Handshake,
-  Contact, Building2, Filter, Plus, List, User, Box, Sparkles, Loader2,
+  Home, Users, Settings, CreditCard, Bell, Calendar, CalendarCheck2,
+  CalendarClock, CalendarX, Package, Activity, BarChart3, FileText, FileCheck2, Mail, Search,
+  DollarSign, BadgeDollarSign, CircleDollarSign, Megaphone, ShoppingCart, ShoppingBag, Target,
+  Wrench, ClipboardList, ListChecks, Briefcase, UserCog, BookOpen, BookOpenCheck, MessageCircle,
+  Globe, Percent, Tag, Tags, Camera, UtensilsCrossed, MapPin, Map, Handshake,
+  Contact, Building2, Filter, Plus, List, Shield, User, Box, Sparkles, Loader2,
+  ListPlus, FolderOpen, Boxes, Landmark, Receipt, Ban, Clock, Clock3, Inbox,
+  Star, TrendingUp, UserCheck, UserPlus, UserX, Zap,
   type LucideIcon,
 } from 'lucide-react'
 import { useTranslation } from '../../hooks/useTranslation'
@@ -42,11 +45,12 @@ interface CommandPaletteProps {
 }
 
 const ICON_MAP: Record<string, LucideIcon> = {
-  Home, Users, Settings, CreditCard, Bell, Calendar, Package, BarChart3,
-  FileText, Mail, Search, DollarSign, Megaphone, ShoppingCart, Target,
-  Wrench, ClipboardList, Briefcase, UserCog, BookOpen, MessageCircle,
-  Globe, Percent, Tag, Camera, UtensilsCrossed, MapPin, Handshake,
-  Contact, Building2, Filter, Plus, List, User, Box, Sparkles,
+  Home, Users, Settings, CreditCard, Bell, Calendar, CalendarClock, Package, Activity, BarChart3,
+  CalendarCheck2, CalendarX, FileText, FileCheck2, Mail, Search, DollarSign, BadgeDollarSign, CircleDollarSign, Megaphone, ShoppingCart, ShoppingBag, Target,
+  Wrench, ClipboardList, ListChecks, Briefcase, UserCog, BookOpen, BookOpenCheck, MessageCircle,
+  Globe, Percent, Tag, Tags, Camera, UtensilsCrossed, MapPin, Map, Handshake,
+  Contact, Building2, Filter, Plus, List, Shield, ListPlus, FolderOpen, User, Box, Boxes, Sparkles, Landmark, Receipt, Ban, Clock, Clock3, Inbox,
+  Star, TrendingUp, UserCheck, UserPlus, UserX, Zap,
 }
 
 const ENTITY_ICON: Record<string, LucideIcon> = {

package/src/shell/components/organization/InviteMemberDialog.tsx

@@ -16,8 +16,19 @@ import { Badge } from '@fayz-ai/ui'
 import { usePermissionsStore } from '../../stores/permissions.store'
 import { useOrganizationStore } from '../../stores/organization.store'
 import { useInviteStore } from '../../stores/invite.store'
-import { useOrgAdapterOptional } from '../../lib/org-context'
-import { useAuthStore } from '../../stores/auth.store'
+// Native org adapter (the one the app actually provides). The shell lib/org-context
+// is a separate, un-provided context that returns null here — which made the submit
+// button a no-op (handleSend bailed on `!adapter`).
+import { useOrgAdapterOptional as useNativeOrgAdapter } from '../../../org'
+import type { OrgAdapter } from '../../types/org-adapter'
+
+// The native adapter is the same runtime object; its Invite/Location types differ
+// from the shell's only in fields these components don't read, so a cast is safe.
+const useOrgAdapterOptional = () => useNativeOrgAdapter() as unknown as OrgAdapter | null
+// The signed-in user lives in @fayz-ai/auth's store (what OrgProvider reads). The
+// shell stores/auth.store is a separate, unpopulated store — reading `user` from
+// it left `user` null, so handleSend bailed on `!user` (silent no-op).
+import { useAuthStore } from '@fayz-ai/auth'
 import { useTranslation } from '../../hooks/useTranslation'
 
 interface InviteMemberDialogProps {
@@ -33,7 +44,7 @@ export function InviteMemberDialog({ open, onOpenChange, defaultEmail }: InviteM
   const currentOrg = useOrganizationStore((s) => s.currentOrg)
   const profiles = usePermissionsStore((s) => s.profiles)
   const setInvites = useInviteStore((s) => s.setInvites)
-  const user = useAuthStore((s) => s.user)
+  const { user } = useAuthStore()
 
   const [emails, setEmails] = React.useState<string[]>([defaultEmail ?? ''])
   const [profileId, setProfileId] = React.useState(profiles[1]?.id ?? profiles[0]?.id ?? '')