@fayz-ai/saas 0.6.0 → 0.7.0

package/src/app/{createFayzApp.tsx → admin-app.tsx}

@@ -1,5 +1,5 @@
 import * as React from 'react'
-import type { AuthAdapter, OrgAdapter } from '@fayz-ai/core'
+import type { OrgAdapter, AuthAdapter } from '@fayz-ai/core'
 import {
   PluginRuntimeProvider,
   resolvePluginRuntime,
@@ -8,7 +8,13 @@ import {
   mergeTranslations,
   setCurrentLocale,
 } from '@fayz-ai/core'
-import { AuthProvider, createSupabaseAuthAdapter, createMockAuthAdapter } from '@fayz-ai/auth'
+import {
+  AuthProvider,
+  createAuthRuntime,
+  type AuthLayout,
+  type AuthPluginOptions,
+  type ResolvedAuthPlugin,
+} from '@fayz-ai/plugin-auth'
 import { NavTransitionProvider } from '@fayz-ai/ui'
 import { createFayzSupabaseClient, getFayzSupabaseClientOptional } from '../supabase/client'
 import { OrgProvider } from '../org/context'
@@ -22,8 +28,7 @@ import { useBillingStore } from '../billing/store'
 import type { Plan } from '@fayz-ai/core'
 import type { PlanConfig } from '../shell/types/billing'
 import { useThemeStore } from '../shell/stores/theme.store'
-import { resolveTheme, type CreateThemeOptions } from '../shell/config/theme/utils'
-import type { SaasTheme } from '../shell/config/theme/tokens'
+import { resolveTheme, isSaasTheme } from '../shell/config/theme/utils'
 import { AdminShell } from './AdminShell'
 import { useAdminPath } from './routing'
 import type { FayzAppConfig } from './config'
@@ -32,32 +37,87 @@ import type { FayzAppConfig } from './config'
 // Adapter resolution
 // ---------------------------------------------------------------------------
 
-function resolveAuthAdapter(config: FayzAppConfig): AuthAdapter {
+function isResolvedAuthPlugin(value: FayzAppConfig['auth']): value is ResolvedAuthPlugin {
+  return Boolean(value && 'kind' in value && value.kind === 'auth')
+}
+
+function resolveAuthRuntime(config: FayzAppConfig): ResolvedAuthPlugin {
   const auth = config.auth
-  if (auth?.adapter && typeof auth.adapter === 'object') return auth.adapter as AuthAdapter
-
-  const strategy = auth?.adapter ?? (config.supabaseUrl ? 'supabase' : 'mock')
-  if (strategy === 'supabase') {
-    if (!config.supabaseUrl || !config.supabaseAnonKey) {
-      throw new Error(
-        "[@fayz-ai/saas] auth.adapter='supabase' requires supabaseUrl and supabaseAnonKey in FayzAppConfig.",
-      )
+  if (isResolvedAuthPlugin(auth)) return auth
+
+  const provider = auth?.provider ?? auth?.adapter ?? (config.supabaseUrl ? 'supabase' : 'mock')
+  const oauth = auth?.oauth ?? {
+    enabled: auth?.showOAuth ?? false,
+    providers: auth?.oauthProviders ?? ['google'],
+  }
+
+  return createAuthRuntime({
+    provider,
+    requireAuth: auth?.requireAuth ?? true,
+    layout: auth?.layout ?? auth?.loginLayout,
+    logo: auth?.logo ?? auth?.loginLogo,
+    tagline: auth?.tagline ?? auth?.loginTagline,
+    description: auth?.description ?? auth?.loginDescription,
+    oauth,
+    routes: auth?.routes,
+    supabase: {
+      url: auth?.supabase?.url ?? config.supabaseUrl,
+      anonKey: auth?.supabase?.anonKey ?? config.supabaseAnonKey,
+      client: auth?.supabase?.client ?? getFayzSupabaseClientOptional() ?? undefined,
+      callbackUrl: auth?.supabase?.callbackUrl,
+      resetPasswordUrl: auth?.supabase?.resetPasswordUrl,
+    },
+  } satisfies AuthPluginOptions)
+}
+
+export function getAuthShellProps(auth: FayzAppConfig['auth']): {
+  requireAuth?: boolean
+  loginTagline?: string
+  loginDescription?: string
+  loginLogo?: React.ReactNode
+  loginLayout?: AuthLayout
+  showOAuth?: boolean
+  oauthProviders?: Exclude<import('@fayz-ai/core').AuthProvider, 'email'>[]
+} {
+  if (!auth) return {}
+  if (isResolvedAuthPlugin(auth)) {
+    return {
+      requireAuth: auth.requireAuth,
+      loginTagline: auth.tagline,
+      loginDescription: auth.description,
+      loginLogo: auth.logo,
+      loginLayout: auth.layout,
+      showOAuth: auth.oauth.enabled,
+      oauthProviders: auth.oauth.providers,
     }
-    return createSupabaseAuthAdapter({
-      supabaseUrl: config.supabaseUrl,
-      supabaseAnonKey: config.supabaseAnonKey,
-      supabaseClient: getFayzSupabaseClientOptional() ?? undefined,
-    })
   }
-  return createMockAuthAdapter()
+  return {
+    requireAuth: auth.requireAuth,
+    loginTagline: auth.tagline ?? auth.loginTagline,
+    loginDescription: auth.description ?? auth.loginDescription,
+    loginLogo: auth.logo ?? auth.loginLogo,
+    loginLayout: auth.layout ?? auth.loginLayout,
+    showOAuth: auth.oauth?.enabled ?? auth.showOAuth,
+    oauthProviders: auth.oauth?.providers ?? auth.oauthProviders,
+  }
 }
 
-function resolveOrgAdapter(config: FayzAppConfig): OrgAdapter {
+function resolveOrgAdapter(config: FayzAppConfig, authAdapter?: AuthAdapter): OrgAdapter {
   const org = config.org
   if (org?.adapter && typeof org.adapter === 'object') return org.adapter as OrgAdapter
 
   const strategy = org?.adapter ?? (config.supabaseUrl ? 'supabase' : 'mock')
-  if (strategy === 'supabase') return createSupabaseOrgAdapter()
+  // The app declares its own business roles via permissions.defaultProfiles; pass
+  // their identity (id/name/description) to both adapters so the role SET is
+  // app-owned, not baked into the SDK.
+  const declaredRoles = config.permissions?.defaultProfiles?.map((p) => ({
+    id: p.id,
+    name: p.name,
+    description: p.description,
+  }))
+  // Inject the resolved auth adapter so the org adapter can DELIVER invites (send
+  // the e-mail + create the auth user) — org owns the audit row + role, auth owns delivery.
+  if (strategy === 'supabase') return createSupabaseOrgAdapter({ roles: declaredRoles, authAdapter })
   return createMockOrgAdapter(config.permissions?.defaultProfiles)
 }
 
@@ -116,12 +176,9 @@ function ThemeInitializer({ config }: { config: FayzAppConfig }) {
 
   React.useEffect(() => {
     if (config.theme) {
-      const isSaasTheme = 'brand' in config.theme && (
-        'radius' in config.theme || 'sidebar' in config.theme || 'font' in config.theme
-      )
-      const resolved = isSaasTheme
-        ? resolveTheme(config.theme as SaasTheme)
-        : config.theme as CreateThemeOptions
+      const resolved = isSaasTheme(config.theme)
+        ? resolveTheme(config.theme)
+        : config.theme
       setOverrides(resolved)
     }
     if (config.defaultThemeMode && typeof window !== 'undefined' && !localStorage.getItem('saas-core:theme-mode')) {
@@ -134,7 +191,7 @@ function ThemeInitializer({ config }: { config: FayzAppConfig }) {
 }
 
 // ---------------------------------------------------------------------------
-// AdminProviders — the provider stack shared by the createFayzApp/createSaasApp
+// AdminProviders — the provider stack shared by the admin factory/createSaasApp
 // sugar path AND the manifest-driven AdminScaffold. Resolves adapters + i18n
 // once (stable refs) and recomputes the plugin runtime reactively as the path
 // changes, so route-scoped widget visibility stays correct.
@@ -152,16 +209,20 @@ export function AdminProviders({ config, children }: { config: FayzAppConfig; ch
       createFayzSupabaseClient(config.supabaseUrl, config.supabaseAnonKey)
     }
     const i18n = buildI18nConfig(config)
-    setCurrentLocale(i18n.defaultLocale)
+    const authRuntime = resolveAuthRuntime(config)
     return {
-      authAdapter: resolveAuthAdapter(config),
-      orgAdapter: resolveOrgAdapter(config),
+      authRuntime,
+      orgAdapter: resolveOrgAdapter(config, authRuntime.adapter),
       i18n,
       plugins: config.plugins ?? [],
     }
     // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [config])
 
+  React.useEffect(() => {
+    setCurrentLocale(resolved.i18n.defaultLocale)
+  }, [resolved.i18n.defaultLocale])
+
   // Recompute the plugin runtime when the hash path or tenant changes
   // (route-scoped visibility + tenant-scoped plugin data providers).
   const path = useAdminPath()
@@ -188,7 +249,7 @@ export function AdminProviders({ config, children }: { config: FayzAppConfig; ch
   )
 
   return (
-    <AuthProvider adapter={resolved.authAdapter}>
+    <AuthProvider adapter={resolved.authRuntime.adapter}>
       <OrgProvider adapter={resolved.orgAdapter} autoCreate={config.org?.autoCreate ?? true}>
         <PluginRuntimeProvider value={runtime}>
           <PermissionsProvider config={config.permissions}>
@@ -224,6 +285,7 @@ AdminProviders.displayName = 'AdminProviders'
 // ---------------------------------------------------------------------------
 
 export function createFayzApp(config: FayzAppConfig): React.ComponentType {
+  const authShellProps = getAuthShellProps(config.auth)
   function FayzApp({ children }: { children?: React.ReactNode }) {
     return (
       <AdminProviders config={config}>
@@ -234,16 +296,12 @@ export function createFayzApp(config: FayzAppConfig): React.ComponentType {
             layout={config.layout}
             contentFrame={config.contentFrame}
             moduleNav={config.moduleNav}
+            bottomNav={config.bottomNav}
             pages={config.pages}
-            requireAuth={config.auth?.requireAuth}
-            loginTagline={config.auth?.loginTagline}
-            loginDescription={config.auth?.loginDescription}
-            loginLogo={config.auth?.loginLogo}
-            loginLayout={config.auth?.loginLayout}
-            showOAuth={config.auth?.showOAuth}
-            oauthProviders={config.auth?.oauthProviders}
+            {...authShellProps}
             showSettings
-            showOrgSettings={Boolean(config.org)}
+            showOrgSettings={config.orgSettings ?? Boolean(config.org)}
+            showBranding={config.branding ?? true}
           />
         )}
       </AdminProviders>

package/src/app/config.ts

@@ -8,6 +8,8 @@ import type {
   LocaleConfig,
   PermissionsConfig,
 } from '@fayz-ai/core'
+import type { AuthPluginOptions, ResolvedAuthPlugin } from '@fayz-ai/plugin-auth'
+import type { BottomNavItem, MobileHeaderVariant } from '@fayz-ai/ui'
 import type { SaasTheme } from '../shell/config/theme/tokens'
 import type { CreateThemeOptions } from '../shell/config/theme/utils'
 import type { PlanConfig } from '../shell/types/billing'
@@ -30,6 +32,11 @@ export interface CustomPage {
   position?: number
   badge?: string | number
   permission?: { feature: string; action: 'read' | 'create' | 'edit' | 'delete' }
+  /** Show this page in the sidebar/topbar navigation. Default: true. Set `false`
+   *  for mobile-only pages reachable via bottomNav/avatar (e.g. a "Mais" overflow
+   *  hub or a "Perfil" avatar target): the route still works, but the entry is
+   *  hidden from desktop navigation where those mobile constructs are meaningless. */
+  nav?: boolean
   children?: CustomPage[]
 }
 
@@ -39,9 +46,19 @@ export interface CustomPage {
 
 export interface AuthConfig {
   /** 'supabase' | 'mock' or bring your own AuthAdapter */
-  adapter?: 'supabase' | 'mock' | AuthAdapter
+  adapter?: AuthPluginOptions['adapter']
+  /** New plugin-auth provider selector. Existing apps may keep using adapter. */
+  provider?: AuthPluginOptions['provider']
   /** Redirect to login when no session is found (default: true) */
   requireAuth?: boolean
+  /** New plugin-auth route and provider options. */
+  routes?: AuthPluginOptions['routes']
+  supabase?: AuthPluginOptions['supabase']
+  oauth?: AuthPluginOptions['oauth']
+  layout?: AuthPluginOptions['layout']
+  logo?: ReactNode
+  tagline?: string
+  description?: string
   loginLogo?: ReactNode
   loginLayout?: 'split' | 'centered'
   loginTagline?: string
@@ -50,6 +67,8 @@ export interface AuthConfig {
   oauthProviders?: Exclude<AuthProvider, 'email'>[]
 }
 
+export type AppAuthConfig = AuthConfig | ResolvedAuthPlugin
+
 export interface OrgConfig {
   /** 'supabase' | 'mock' or bring your own OrgAdapter */
   adapter?: 'supabase' | 'mock' | OrgAdapter
@@ -90,7 +109,7 @@ export interface FayzAppConfig {
   // -------------------------------------------------------------------------
   // Auth
   // -------------------------------------------------------------------------
-  auth?: AuthConfig
+  auth?: AppAuthConfig
 
   // -------------------------------------------------------------------------
   // Organization / multi-tenancy
@@ -114,6 +133,17 @@ export interface FayzAppConfig {
   defaultThemeMode?: ThemeMode
   /** Shell layout variant (default: 'sidebar') */
   layout?: 'sidebar' | 'topbar' | 'minimal'
+  /** Mobile bottom tab bar. Rendered by AppShell on small screens (md:hidden)
+   *  for every layout variant. Route items map a lucide icon name to a route; an
+   *  `{ kind: 'action', id, icon }` item renders as a raised center button
+   *  (Mobills style) that fires `onBottomNavAction(id)` instead of navigating. */
+  bottomNav?: BottomNavItem[]
+  /** Fired when a bottom-nav `action` item (e.g. the center "+") is tapped. */
+  onBottomNavAction?: (id: string) => void
+  /** Mobile header treatment (<md), default 'minimal'. 'transparent' renders no
+   *  header bar (edge-to-edge content) with a floating profile avatar top-right;
+   *  'hidden' renders neither. Desktop keeps its sidebar + user menu. */
+  mobileHeader?: MobileHeaderVariant
   /** Wrap the main content in an inset "framed" card (default: true). The
    *  sidebar itself is always flush/full-height. */
   contentFrame?: boolean
@@ -129,6 +159,18 @@ export interface FayzAppConfig {
   // -------------------------------------------------------------------------
   locale?: LocaleConfig
 
+  // -------------------------------------------------------------------------
+  // Settings surface
+  // -------------------------------------------------------------------------
+  /** Show org-level settings tabs (Equipe/Permissões/Localizações/Regras).
+   *  Defaults to `Boolean(org)` for back-compat. B2C/personal apps that still
+   *  need an org for the workspace can set `false` to hide these ERP tabs. */
+  orgSettings?: boolean
+  /** Show the branding ("Identidade Visual") + company "Geral" settings tabs.
+   *  Default: `true`. B2C apps set `false` to drop org-identity settings, leaving
+   *  Perfil + Segurança + plugin settings only. */
+  branding?: boolean
+
   // -------------------------------------------------------------------------
   // Permissions
   // -------------------------------------------------------------------------

package/src/app/scaffold.tsx

@@ -12,10 +12,9 @@ import type {
   PermissionsConfig,
   BillingConfig as ManifestBillingConfig,
 } from '@fayz-ai/core'
-import { AdminProviders } from './createFayzApp'
+import { AdminProviders, getAuthShellProps } from './admin-app'
 import { AdminShell } from './AdminShell'
 import type { FayzAppConfig, CustomPage } from './config'
-import { createSaasApp, type SaasAppConfig } from '../shell/createSaasApp'
 
 // ---------------------------------------------------------------------------
 // Admin scaffold — renders an admin app from a pure-data AppManifest. Mirrors
@@ -32,13 +31,9 @@ function slug(name: string): string {
 }
 
 const liveConfigOption = '__fayzLiveConfigRef'
-const liveSaasConfigs = new Map<string, FayzAppConfig | SaasAppConfig>()
+const liveSaasConfigs = new Map<string, FayzAppConfig>()
 
-function hasLegacyShellConfig(config: FayzAppConfig | SaasAppConfig): config is SaasAppConfig {
-  return 'organization' in config || 'settingsTabs' in config || 'bottomNav' in config || 'pluginRuntime' in config
-}
-
-function getAuthRequireAuth(config: FayzAppConfig | SaasAppConfig): boolean {
+function getAuthRequireAuth(config: FayzAppConfig): boolean {
   return config.auth?.requireAuth ?? true
 }
 
@@ -50,7 +45,7 @@ function getLiveConfigRef(id: string): string {
  * migration, config-authored apps keep a live config ref so renderApp can
  * preserve code-backed plugins and custom pages while the JSON manifest path
  * matures. Serialized manifests still resolve through plugin/page registries. */
-export function defineSaas(config: FayzAppConfig | SaasAppConfig): AppManifest {
+export function defineSaas(config: FayzAppConfig): AppManifest {
   const id = slug(config.name)
   const configRef = getLiveConfigRef(id)
   liveSaasConfigs.set(configRef, config)
@@ -121,7 +116,7 @@ function manifestToFayzConfig(manifest: AppManifest, surfaceName: string): FayzA
   const options = (manifest.surfaces[surfaceName]?.options ?? {}) as Record<string, unknown>
   const liveConfigRef = options[liveConfigOption]
   const liveConfig = typeof liveConfigRef === 'string' ? liveSaasConfigs.get(liveConfigRef) : undefined
-  if (liveConfig && !hasLegacyShellConfig(liveConfig)) return liveConfig
+  if (liveConfig) return liveConfig
 
   return {
     name: manifest.name,
@@ -138,15 +133,8 @@ function manifestToFayzConfig(manifest: AppManifest, surfaceName: string): FayzA
 }
 
 export function AdminScaffold({ manifest, surface }: { manifest: AppManifest; surface: string }) {
-  const liveConfigRef = manifest.surfaces[surface]?.options?.[liveConfigOption]
-  const liveConfig = typeof liveConfigRef === 'string' ? liveSaasConfigs.get(liveConfigRef) : undefined
-  const LegacyApp = React.useMemo(() => {
-    if (!liveConfig || !hasLegacyShellConfig(liveConfig)) return null
-    return createSaasApp(liveConfig)
-  }, [liveConfig])
   const config = React.useMemo(() => manifestToFayzConfig(manifest, surface), [manifest, surface])
-
-  if (LegacyApp) return <LegacyApp />
+  const authShellProps = React.useMemo(() => getAuthShellProps(config.auth), [config.auth])
 
   return (
     <AdminProviders config={config}>
@@ -154,16 +142,15 @@ export function AdminScaffold({ manifest, surface }: { manifest: AppManifest; su
         appName={config.name}
         logo={config.logo}
         layout={config.layout}
+        bottomNav={config.bottomNav}
+        onBottomNavAction={config.onBottomNavAction}
+        mobileHeader={config.mobileHeader}
         pages={config.pages}
-        requireAuth={config.auth?.requireAuth}
-        loginTagline={config.auth?.loginTagline}
-        loginDescription={config.auth?.loginDescription}
-        loginLogo={config.auth?.loginLogo}
-        loginLayout={config.auth?.loginLayout}
-        showOAuth={config.auth?.showOAuth}
-        oauthProviders={config.auth?.oauthProviders}
+        {...authShellProps}
         showSettings
-        showOrgSettings={Boolean(config.org)}
+        showOrgSettings={config.orgSettings ?? Boolean(config.org)}
+        showOrgSwitcher={config.org?.multiOrg !== false}
+        showBranding={config.branding ?? true}
       />
     </AdminProviders>
   )

package/src/crud/CrudDetailPage.tsx

@@ -1,5 +1,5 @@
-import React, { useCallback } from 'react'
-import { Edit, Trash2, Eye, Shield, CalendarDays, FileText, Clock, Package, Users, DollarSign, MapPin, BarChart3, Briefcase, ShoppingBag } from 'lucide-react'
+import React, { useCallback, useEffect, useState } from 'react'
+import { Edit, Trash2, Eye, Shield, CalendarDays, FileText, Clock, Package, Users, DollarSign, MapPin, BarChart3, Briefcase, ShoppingBag, FolderOpen, MessageSquare, Route } from 'lucide-react'
 import type { LucideIcon } from 'lucide-react'
 import { Card, CardContent } from '@fayz-ai/ui'
 import { Button } from '@fayz-ai/ui'
@@ -223,8 +223,35 @@ function getArchetypeTabs(layout?: FormLayout, archetypeKind?: string): DetailTa
   return tabs
 }
 
+function mergeDetailTabs(archetypeTabs: DetailTab[], entityTabs: DetailTab[]): DetailTab[] {
+  const merged = new Map<string, DetailTab>()
+
+  for (const tab of entityTabs) merged.set(tab.id, tab)
+  for (const tab of archetypeTabs) {
+    if (!merged.has(tab.id)) merged.set(tab.id, tab)
+  }
+
+  return Array.from(merged.values())
+}
+
+function normalizeTabId(value?: string): string | undefined {
+  return value?.split('?')[0]
+}
+
+function resolveActiveTab(initialTab: string | undefined, tabs: DetailTab[]): string {
+  const normalized = normalizeTabId(initialTab)
+  if (!normalized) return 'overview'
+  if (normalized === 'overview') return 'overview'
+
+  const direct = tabs.find((tab) => tab.id === normalized)
+  if (direct) return direct.id
+
+  const alias = tabs.find((tab) => (tab as DetailTab & { aliases?: string[] }).aliases?.includes(normalized))
+  return alias?.id ?? 'overview'
+}
+
 const TAB_ICONS: Record<string, LucideIcon> = {
-  Shield, CalendarDays, FileText, Clock, Package, Users, DollarSign, MapPin, BarChart3, Briefcase, ShoppingBag,
+  Shield, CalendarDays, FileText, Clock, Package, Users, DollarSign, MapPin, BarChart3, Briefcase, ShoppingBag, FolderOpen, MessageSquare, Route,
 }
 
 export function CrudDetailPage({
@@ -246,21 +273,28 @@ export function CrudDetailPage({
   const imageValue = entityDef.imageField ? item[entityDef.imageField] : null
   const initial = typeof displayValue === 'string' ? displayValue.charAt(0).toUpperCase() : '?'
 
-  // Merge archetype tabs + custom entity tabs
+  // Merge archetype tabs + custom entity tabs. Entity-specific tabs win by id
+  // so vertical apps can replace generic person/product tabs without duplicates.
   const runtime = usePluginRuntimeOptional()
   const archetypeTabs = getArchetypeTabs(entityDef.layout, entityDef.data?.archetypeKind)
-  const customTabs = [...archetypeTabs, ...(entityDef.detailTabs ?? [])]
+  const customTabs = mergeDetailTabs(archetypeTabs, entityDef.detailTabs ?? [])
     // Drop tabs that require a plugin-contributed widget when none is registered
     // (e.g. the financial statement tab only appears when the financial plugin is active).
     .filter((tab) => !tab.requiresWidgetZone || (runtime ? getWidgetsForZone(runtime, tab.requiresWidgetZone).length > 0 : false))
+    .filter((tab) => !(tab as DetailTab & { hidden?: boolean }).hidden)
   const entityId = entityDef.name.toLowerCase().replace(/\s+/g, '-')
   const widgetZone = `${entityId}.detail.tabs`
 
-  // Resolve initial tab — validate it exists, fallback to "overview"
-  const validTabs = ['overview', ...customTabs.map((t) => t.id)]
-  const activeTab = initialTab && validTabs.includes(initialTab) ? initialTab : 'overview'
+  // Resolve initial tab — allow compatibility aliases, fallback to "overview".
+  const activeTab = resolveActiveTab(initialTab, customTabs)
+  const [selectedTab, setSelectedTab] = useState(activeTab)
+
+  useEffect(() => {
+    setSelectedTab(activeTab)
+  }, [activeTab])
 
   const handleTabChange = useCallback((value: string) => {
+    setSelectedTab(value)
     if (embedded) return
     const detailPath = `${basePath}/${item.id}`
     const newHash = value === 'overview' ? detailPath : `${detailPath}/${value}`
@@ -326,7 +360,7 @@ export function CrudDetailPage({
       {!embedded && <Separator />}
 
       {/* Tabs */}
-      <Tabs defaultValue={activeTab} onValueChange={handleTabChange}>
+      <Tabs value={selectedTab} onValueChange={handleTabChange}>
         <TabsList className={`max-w-full justify-start overflow-x-auto scrollbar-none${embedded ? ' h-8' : ''}`}>
           <TabsTrigger value="overview" className={`gap-1.5 ${embedded ? 'text-xs px-2 py-1' : ''}`}>
             <Eye className={embedded ? 'h-3 w-3' : 'h-3.5 w-3.5'} />

package/src/crud/CrudPage.tsx

@@ -349,7 +349,7 @@ export function CrudPage<T extends { id: string }>({ entityDef: rawEntityDef, us
     // Parse /uuid or /uuid/tab-name
     const subParts = sub.slice(1).split('/')
     const id = subParts[0]
-    const initialTab = subParts[1] || undefined
+    const initialTab = subParts[1]?.split('?')[0] || undefined
     const item = store.getById(id)
     viewKey = `detail-${id}`
 

package/src/hooks/useModuleNavigation.ts

@@ -44,13 +44,19 @@ export function useModuleNavigation(hashBase: string, depthMap?: DepthMap, homeV
       // '/inventory/dashboard' → treat as home view
       if (segments.length === 1 && segments[0] === homeView) return homeView
       // Detect action + ID patterns: '/products/edit/uuid' or '/stock/detail/uuid'
-      const ACTION_KEYWORDS = ['edit', 'detail', 'view']
+      const ACTION_KEYWORDS = ['edit', 'detail', 'view', 'post']
       if (segments.length >= 3) {
         const maybeAction = segments[segments.length - 2]
         if (ACTION_KEYWORDS.includes(maybeAction)) {
           return segments.slice(0, -2).join('-') + '-' + maybeAction + ':' + segments[segments.length - 1]
         }
       }
+      // Generic fallback: a trailing UUID is always an ID for the view formed
+      // by the preceding segments ('/content/post/<uuid>' → 'content-post:<uuid>')
+      const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i
+      if (segments.length >= 2 && UUID_RE.test(segments[segments.length - 1])) {
+        return segments.slice(0, -1).join('-') + ':' + segments[segments.length - 1]
+      }
       return segments.join('-')
     }
     return homeView

package/src/index.ts

@@ -1,7 +1,7 @@
 // ---------------------------------------------------------------------------
 // App factory (main entry point)
 // ---------------------------------------------------------------------------
-export { createFayzApp, AdminProviders } from './app/createFayzApp'
+export { createFayzApp, AdminProviders } from './app/admin-app'
 export type { FayzAppConfig, AuthConfig, OrgConfig, ChatConfig, CustomPage, PageSection } from './app/config'
 
 // Native admin scaffold — manifest-first entry. Importing this registers the
@@ -11,6 +11,11 @@ export { AdminShell } from './app/AdminShell'
 export { LoginPage } from './app/LoginPage'
 export { navigateTo as adminNavigateTo, useAdminPath } from './app/routing'
 
+// Auth hook re-exported through the saas front-door so app screens (e.g. a
+// Profile page) can read the current user + signOut without depending on
+// @fayz-ai/auth directly.
+export { useAuth } from '@fayz-ai/auth'
+
 // ---------------------------------------------------------------------------
 // CRUD engine — NATIVE code is now in ./crud (de-bridged from saas-core: the
 // full list/form/detail engine, archetype layouts, providers and store).
@@ -34,10 +39,6 @@ export { PermissionGate } from './permissions/PermissionGate'
 export { WidgetSlot } from './plugins/WidgetSlot'
 export { useFieldRules } from './hooks/useFieldRules'
 
-// Native admin shell — createSaasApp orchestrator (de-bridged from saas-core
-// into ./shell). The default createCrudPage is the native one.
-export { createSaasApp } from './shell/createSaasApp'
-export type { SaasAppConfig, PageConfig } from './shell/createSaasApp'
 export { createCrudPage } from './crud/createCrudPage'
 // Client-orders archetype (used by beauty-saas client detail tab)
 export { ClientOrdersTab } from './shell/components/crud/archetypes/ClientOrdersTab'
@@ -173,6 +174,12 @@ export { resolveEntityHref } from './lib/entity-routes'
 export { usePluginPrefs } from './hooks/usePluginPrefs'
 export { setScheduleBlockConfig, getScheduleBlockConfig, subscribeScheduleBlockConfig } from './lib/schedule-config'
 
+// Assistant chat store — lets apps drive the shell's chat panel imperatively
+// (e.g. an "Ask the assistant" CTA calling useChatStore().setOpen(true)). The
+// store is a shared zustand singleton, so app + shell read the same instance.
+export { useChatStore } from './shell/stores/chat.store'
+export type { ChatMessage } from './shell/stores/chat.store'
+
 // Shell plugin-settings panel + dedup util (used by vertical plugins)
 export { PluginSettingsPanel } from './shell/components/plugins/PluginSettingsPanel'
 export { ConnectorsHub } from './shell/components/plugins/ConnectorsHub'