fix(email): set INVITE_FROM_ADDRESS to verified o-x-o.ai domain (#164)

* fix(email): set INVITE_FROM_ADDRESS to verified o-x-o.ai domain

Cloudflare Email Routing has been enabled for o-x-o.ai with MX, SPF,
and DKIM records auto-configured. Update the from address from the
placeholder invites@example.com to invites@o-x-o.ai so the send_email
binding can actually deliver invitation, verification, and alert emails
in production.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(members): resend invitation + project-scope invitation list

- Add `teamId` field to `OrgInvitationRow` (Better Auth returns it, we just
  weren't surfacing it)
- Add `useResendInvitation` hook: cancel + re-invite with the same
  email/role/teamId (Better Auth has no native resend endpoint)
- `InvitationsTable` project scope: replace the placeholder stub with real
  data — filter `listInvitations` results by `session.activeTeamId`; no new
  server endpoint needed since Better Auth's invitation table already carries
  `teamId` and the existing `listInvitations` API returns it
- Add "重新发送" dropdown item alongside "撤销邀请" (pending-only, shared
  busy-state guard across both actions)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: dengzhaofun

apps/admin/src/components/members/InvitationsTable.tsx

@@ -1,4 +1,4 @@
-import { MailQuestionIcon, MoreHorizontalIcon } from "lucide-react"
+import { MoreHorizontalIcon, RefreshCwIcon } from "lucide-react"
 import { toast } from "sonner"
 import * as m from "#/paraglide/messages.js"
 
@@ -24,6 +24,7 @@ import { cn } from "#/lib/utils"
 import {
   useCancelInvitation,
   useOrgInvitations,
+  useResendInvitation,
 } from "#/hooks/use-members"
 
 interface Props {
@@ -46,28 +47,22 @@ const STATUS_LABEL: Record<string, string> = {
   canceled: "已撤销",
 }
 
-/**
- * 邀请列表 — 当前只接 org-level Better Auth invitation。
- * 项目级邀请(scope="project")依赖自家 server endpoint,PR 4 接入。
- */
 export function InvitationsTable({ scope }: Props) {
   const { data: session } = authClient.useSession()
   const orgId = session?.session.activeOrganizationId ?? null
-  const orgInvitations = useOrgInvitations(scope === "org" ? orgId : null)
+  const activeTeamId = (session?.session as { activeTeamId?: string | null })?.activeTeamId ?? null
+
+  // Always fetch all org invitations; filter client-side for project scope.
+  const orgInvitations = useOrgInvitations(orgId)
   const cancel = useCancelInvitation()
+  const resend = useResendInvitation()
 
-  if (scope === "project") {
-    return (
-      <div className="rounded-md border p-12 text-center">
-        <MailQuestionIcon className="mx-auto size-8 text-muted-foreground/60" />
-        <p className="mt-2 text-sm text-muted-foreground">
-          项目级邀请后端正在接入中。当前可在 组织 → 邀请 中向项目邀请成员。
-        </p>
-      </div>
-    )
-  }
+  const allRows = orgInvitations.data ?? []
+  const rows =
+    scope === "project"
+      ? allRows.filter((r) => r.teamId === activeTeamId)
+      : allRows
 
-  const rows = orgInvitations.data ?? []
   const isLoading = orgInvitations.isLoading
 
   return (
@@ -113,6 +108,7 @@ export function InvitationsTable({ scope }: Props) {
                 ? new Date(row.expiresAt).toLocaleDateString()
                 : "—"
               const isPending = row.status === "pending"
+              const isBusy = cancel.isPending || resend.isPending
               return (
                 <TableRow key={row.id}>
                   <TableCell className="font-medium">{row.email}</TableCell>
@@ -144,9 +140,24 @@ export function InvitationsTable({ scope }: Props) {
                         }
                       />
                       <DropdownMenuContent align="end">
+                        <DropdownMenuItem
+                          disabled={isBusy}
+                          onClick={() =>
+                            resend.mutate(
+                              { invitation: row, organizationId: orgId! },
+                              {
+                                onSuccess: () => toast.success("已重新发送邀请"),
+                                onError: (err) => toast.error(err.message),
+                              },
+                            )
+                          }
+                        >
+                          <RefreshCwIcon className="size-4" />
+                          重新发送
+                        </DropdownMenuItem>
                         <DropdownMenuItem
                           variant="destructive"
-                          disabled={cancel.isPending}
+                          disabled={isBusy}
                           onClick={() =>
                             cancel.mutate(
                               { invitationId: row.id },

apps/admin/src/hooks/use-members.ts

@@ -30,6 +30,7 @@ export type OrgInvitationRow = {
   organizationId: string
   email: string
   role: string | null
+  teamId: string | null
   status: string
   expiresAt: string | null
   inviterId: string | null
@@ -180,6 +181,47 @@ export function useCancelInvitation() {
   })
 }
 
+export function useResendInvitation() {
+  const qc = useQueryClient()
+  return useMutation({
+    mutationFn: async (args: {
+      invitation: OrgInvitationRow
+      organizationId: string
+    }) => {
+      const { invitation, organizationId } = args
+      // Better Auth has no native resend — cancel then re-invite with the same params.
+      const { error: cancelErr } = await (
+        authClient.organization as unknown as {
+          cancelInvitation: (a: {
+            invitationId: string
+          }) => Promise<{ error?: { message?: string } | null }>
+        }
+      ).cancelInvitation({ invitationId: invitation.id })
+      if (cancelErr) throw new Error(cancelErr.message ?? "撤销失败")
+
+      const { error: inviteErr } = await (
+        authClient.organization as unknown as {
+          inviteMember: (a: {
+            email: string
+            role: string
+            organizationId: string
+            teamId?: string
+          }) => Promise<{ error?: { message?: string } | null }>
+        }
+      ).inviteMember({
+        email: invitation.email,
+        role: invitation.role ?? "member",
+        organizationId,
+        ...(invitation.teamId ? { teamId: invitation.teamId } : {}),
+      })
+      if (inviteErr) throw new Error(inviteErr.message ?? "重发失败")
+    },
+    onSuccess: () => {
+      qc.invalidateQueries({ queryKey: ["org-invitations"] })
+    },
+  })
+}
+
 /**
  * 项目成员(teamMember 表)hooks —— 当前 Better Auth client 没有
  * 现成的 listTeamMembers,我们通过自家 server endpoint

apps/server/wrangler.jsonc

@@ -128,7 +128,7 @@
   "vars": {
     "APP_VERSION": "0.1.13",
     "ADMIN_URL": "https://apollokit-admin.limitless-ai.workers.dev",
-    "INVITE_FROM_ADDRESS": "invites@example.com",
+    "INVITE_FROM_ADDRESS": "invites@o-x-o.ai",
     "SENTRY_ENVIRONMENT": "production",
     // Cookie domain shared between server end-user auth and the pages
     // worker. Empty in dev (chrome accepts cookies on bare `localhost`