@ampless/admin 1.0.0-alpha.85 → 1.0.0-beta.100

package/dist/chunk-7HSWOQWV.js

@@ -0,0 +1,172 @@
+'use client';
+import {
+  isWebAuthnSupported
+} from "./chunk-ZDIDJCSU.js";
+import {
+  useT
+} from "./chunk-4OFRX6QX.js";
+
+// src/components/account-view.tsx
+import { useEffect, useState } from "react";
+import {
+  Button,
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow
+} from "@ampless/runtime/ui";
+
+// src/lib/passkey-store.ts
+import {
+  associateWebAuthnCredential,
+  listWebAuthnCredentials,
+  deleteWebAuthnCredential
+} from "aws-amplify/auth";
+var defaultPasskeyApi = {
+  async register() {
+    await associateWebAuthnCredential();
+  },
+  async list() {
+    const credentials = [];
+    let nextToken;
+    do {
+      const page = await listWebAuthnCredentials(nextToken ? { nextToken } : void 0);
+      for (const cred of page.credentials) {
+        if (!cred.credentialId) continue;
+        credentials.push({
+          credentialId: cred.credentialId,
+          friendlyName: cred.friendlyCredentialName,
+          createdAt: cred.createdAt ? cred.createdAt.toISOString() : null
+        });
+      }
+      nextToken = page.nextToken;
+    } while (nextToken);
+    credentials.sort((a, b) => {
+      if (!a.createdAt) return 1;
+      if (!b.createdAt) return -1;
+      return b.createdAt.localeCompare(a.createdAt);
+    });
+    return credentials;
+  },
+  async remove(credentialId) {
+    await deleteWebAuthnCredential({ credentialId });
+  }
+};
+var api = defaultPasskeyApi;
+function getPasskeyApi() {
+  return api;
+}
+
+// src/components/account-view.tsx
+import { jsx, jsxs } from "react/jsx-runtime";
+function formatDate(iso) {
+  if (!iso) return "";
+  const d = new Date(iso);
+  if (Number.isNaN(d.getTime())) return "";
+  return d.toLocaleString();
+}
+function AccountView({ currentUserEmail, passkeysEnabled }) {
+  const t = useT();
+  const [supported, setSupported] = useState(false);
+  const [supportResolved, setSupportResolved] = useState(false);
+  const [passkeys, setPasskeys] = useState(null);
+  const [loading, setLoading] = useState(true);
+  const [loadError, setLoadError] = useState(null);
+  const [adding, setAdding] = useState(false);
+  const [addError, setAddError] = useState(null);
+  async function loadPasskeys() {
+    setLoading(true);
+    setLoadError(null);
+    try {
+      const list = await getPasskeyApi().list();
+      setPasskeys(list);
+    } catch (err) {
+      console.error("[account-view] list passkeys failed", err);
+      setLoadError(err instanceof Error ? err.message : String(err));
+    } finally {
+      setLoading(false);
+    }
+  }
+  useEffect(() => {
+    if (!passkeysEnabled) {
+      setSupportResolved(true);
+      setLoading(false);
+      return;
+    }
+    const ok = isWebAuthnSupported();
+    setSupported(ok);
+    setSupportResolved(true);
+    if (ok) void loadPasskeys();
+    else setLoading(false);
+  }, [passkeysEnabled]);
+  async function handleAdd() {
+    setAdding(true);
+    setAddError(null);
+    try {
+      await getPasskeyApi().register();
+      await loadPasskeys();
+    } catch (err) {
+      console.error("[account-view] register passkey failed", err);
+      setAddError(err instanceof Error ? err.message : String(err));
+    } finally {
+      setAdding(false);
+    }
+  }
+  async function handleRemove(credentialId) {
+    if (!confirm(t("account.passkeys.deleteConfirm"))) return;
+    try {
+      await getPasskeyApi().remove(credentialId);
+      await loadPasskeys();
+    } catch (err) {
+      console.error("[account-view] remove passkey failed", err);
+      alert(err instanceof Error ? err.message : String(err));
+    }
+  }
+  return /* @__PURE__ */ jsxs("div", { className: "mx-auto max-w-4xl space-y-8 p-4 md:p-8", children: [
+    /* @__PURE__ */ jsxs("div", { children: [
+      /* @__PURE__ */ jsx("h1", { className: "text-2xl font-bold md:text-3xl", children: t("account.title") }),
+      /* @__PURE__ */ jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: currentUserEmail })
+    ] }),
+    /* @__PURE__ */ jsxs("section", { className: "space-y-4 rounded-md border bg-card p-4 md:p-6", children: [
+      /* @__PURE__ */ jsxs("div", { className: "flex items-start justify-between gap-4", children: [
+        /* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx("h2", { className: "text-lg font-semibold", children: t("account.passkeys.title") }) }),
+        passkeysEnabled && supportResolved && supported && /* @__PURE__ */ jsx(Button, { type: "button", disabled: adding, onClick: () => void handleAdd(), children: adding ? t("account.passkeys.adding") : t("account.passkeys.add") })
+      ] }),
+      addError && /* @__PURE__ */ jsx("p", { className: "text-sm text-destructive", children: addError }),
+      !passkeysEnabled ? /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t("account.passkeys.disabled") }) : supportResolved && !supported ? /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t("account.passkeys.unsupported") }) : loading ? /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t("account.passkeys.loading") }) : loadError ? /* @__PURE__ */ jsxs("p", { className: "text-sm text-destructive", children: [
+        t("account.passkeys.loadError"),
+        ": ",
+        loadError
+      ] }) : !passkeys || passkeys.length === 0 ? /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t("account.passkeys.empty") }) : /* @__PURE__ */ jsx("div", { className: "overflow-x-auto rounded-md border", children: /* @__PURE__ */ jsxs(Table, { children: [
+        /* @__PURE__ */ jsx(TableHeader, { children: /* @__PURE__ */ jsxs(TableRow, { children: [
+          /* @__PURE__ */ jsx(TableHead, { children: t("account.passkeys.columnName") }),
+          /* @__PURE__ */ jsx(TableHead, { children: t("account.passkeys.columnCreated") }),
+          /* @__PURE__ */ jsx(TableHead, { className: "w-[1%] whitespace-nowrap", children: t("common.actions") })
+        ] }) }),
+        /* @__PURE__ */ jsx(TableBody, { children: passkeys.map((pk) => /* @__PURE__ */ jsxs(TableRow, { children: [
+          /* @__PURE__ */ jsx(TableCell, { className: "font-medium", children: pk.friendlyName || /* @__PURE__ */ jsxs("span", { className: "font-mono text-xs text-muted-foreground", children: [
+            pk.credentialId.slice(0, 12),
+            "\u2026"
+          ] }) }),
+          /* @__PURE__ */ jsx(TableCell, { className: "text-xs text-muted-foreground", children: pk.createdAt ? /* @__PURE__ */ jsx("span", { title: pk.createdAt, children: formatDate(pk.createdAt) }) : "" }),
+          /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsx(
+            Button,
+            {
+              type: "button",
+              variant: "outline",
+              size: "sm",
+              onClick: () => void handleRemove(pk.credentialId),
+              children: t("account.passkeys.delete")
+            }
+          ) })
+        ] }, pk.credentialId)) })
+      ] }) })
+    ] })
+  ] });
+}
+
+export {
+  AccountView
+};

package/dist/{chunk-J6R356H3.js → chunk-7OZ23MLD.js}

@@ -1,7 +1,7 @@
 'use client';
 import {
   useT
-} from "./chunk-K44QF3MV.js";
+} from "./chunk-4OFRX6QX.js";
 
 // src/components/posts-list-view.tsx
 import { useEffect, useMemo, useState } from "react";

package/dist/{chunk-OFPNBZKP.js → chunk-7W7LAQXY.js}

@@ -8,6 +8,7 @@ var en_default = {
     edit: "Edit",
     back: "Back",
     loading: "Loading...",
+    loadError: "Failed to load.",
     default: "Default",
     remove: "Remove",
     create: "Create",
@@ -41,7 +42,8 @@ var en_default = {
     signOut: "Sign out",
     site: "Site",
     openMenu: "Open menu",
-    closeMenu: "Close menu"
+    closeMenu: "Close menu",
+    account: "Account"
   },
   dashboard: {
     title: "Dashboard",
@@ -88,7 +90,7 @@ var en_default = {
       excerpt: "Excerpt",
       body: "Body",
       format: "Format",
-      formatHint: "Tiptap is the rich editor. Markdown / HTML use a plain textarea. Tip: a slug ending in .html (e.g. promo.html) serves the post as a bare HTML response with no theme chrome.",
+      formatHint: "Tiptap is the rich editor. Markdown / HTML use a plain textarea.",
       insertMedia: "Insert media",
       tabEdit: "Edit",
       tabPreview: "Preview",
@@ -277,6 +279,10 @@ var en_default = {
       deleteColumn: "Delete column",
       toggleHeaderRow: "Toggle header row",
       deleteTable: "Delete table"
+    },
+    codeBlock: {
+      languageLabel: "Language",
+      languagePlaceholder: "e.g. mermaid, ts"
     }
   },
   auth: {
@@ -293,7 +299,8 @@ var en_default = {
       description: "Sign in to manage your site.",
       submit: "Sign in",
       forgotPassword: "Forgot password?",
-      createAccount: "Create admin account"
+      createAccount: "Create admin account",
+      passkeyButton: "Sign in with passkey"
     },
     signUp: {
       title: "Create admin account",
@@ -324,6 +331,14 @@ var en_default = {
       invalidCredentials: "Invalid email or password.",
       passwordTooShort: "Password must be at least 8 characters.",
       userExists: "An account with this email already exists."
+    },
+    passkey: {
+      emailRequired: "Enter your email first, then sign in with your passkey.",
+      noneRegistered: "No passkey is registered for this account yet. Sign in with your password, then add one from the account page.",
+      cancelled: "Passkey sign-in was cancelled.",
+      unsupported: "This browser does not support passkeys.",
+      rpMismatch: "This site isn't configured for passkeys on this domain. Ask the site engineer to set the relyingPartyId in amplify/auth/resource.custom.ts.",
+      failed: "Passkey sign-in failed. Try again, or sign in with your password."
     }
   },
   plugins: {
@@ -337,7 +352,8 @@ var en_default = {
     saveError: "Save failed",
     invalidValue: "One or more values are invalid \u2014 fix highlighted fields and try again.",
     resetToDefault: "Reset to default",
-    resetDone: "Stored value cleared. Falling back to the manifest default."
+    resetDone: "Stored value cleared. Falling back to the manifest default.",
+    noChanges: "No changes to save."
   },
   mcpTokens: {
     title: "MCP tokens",
@@ -384,6 +400,24 @@ var en_default = {
     tagLabel: "Tag",
     permalink: "Permalink",
     shareOnX: "Share on X"
+  },
+  account: {
+    title: "Account",
+    passkeys: {
+      title: "Passkeys",
+      add: "Add passkey",
+      adding: "Adding...",
+      added: "Passkey added.",
+      loading: "Loading passkeys...",
+      empty: "No passkeys yet. Add one to sign in with Face ID, Touch ID, or your security key.",
+      columnName: "Name",
+      columnCreated: "Created",
+      delete: "Delete",
+      deleteConfirm: "Delete this passkey? You will no longer be able to sign in with it.",
+      loadError: "Failed to load passkeys",
+      unsupported: "This browser does not support passkeys.",
+      disabled: "Passkeys are disabled for this site."
+    }
   }
 };
 
@@ -397,6 +431,7 @@ var ja_default = {
     edit: "\u7DE8\u96C6",
     back: "\u623B\u308B",
     loading: "\u8AAD\u307F\u8FBC\u307F\u4E2D...",
+    loadError: "\u8AAD\u307F\u8FBC\u307F\u306B\u5931\u6557\u3057\u307E\u3057\u305F\u3002",
     default: "\u30C7\u30D5\u30A9\u30EB\u30C8",
     remove: "\u524A\u9664",
     create: "\u4F5C\u6210",
@@ -430,7 +465,8 @@ var ja_default = {
     signOut: "\u30B5\u30A4\u30F3\u30A2\u30A6\u30C8",
     site: "\u30B5\u30A4\u30C8",
     openMenu: "\u30E1\u30CB\u30E5\u30FC\u3092\u958B\u304F",
-    closeMenu: "\u30E1\u30CB\u30E5\u30FC\u3092\u9589\u3058\u308B"
+    closeMenu: "\u30E1\u30CB\u30E5\u30FC\u3092\u9589\u3058\u308B",
+    account: "\u30A2\u30AB\u30A6\u30F3\u30C8"
   },
   dashboard: {
     title: "\u30C0\u30C3\u30B7\u30E5\u30DC\u30FC\u30C9",
@@ -477,7 +513,7 @@ var ja_default = {
       excerpt: "\u629C\u7C8B",
       body: "\u672C\u6587",
       format: "\u30D5\u30A9\u30FC\u30DE\u30C3\u30C8",
-      formatHint: "Tiptap \u306F\u30EA\u30C3\u30C1\u30A8\u30C7\u30A3\u30BF\u3002Markdown / HTML \u306F\u30D7\u30EC\u30FC\u30F3\u30C6\u30AD\u30B9\u30C8\u30A8\u30EA\u30A2\u3002\u30D2\u30F3\u30C8: \u30B9\u30E9\u30C3\u30B0\u306E\u672B\u5C3E\u304C .html (\u4F8B: promo.html) \u306E\u5834\u5408\u3001\u30C6\u30FC\u30DEchrome\u7121\u3057\u3067\u672C\u6587 HTML \u3092\u76F4\u63A5\u8FD4\u3057\u307E\u3059\u3002",
+      formatHint: "Tiptap \u306F\u30EA\u30C3\u30C1\u30A8\u30C7\u30A3\u30BF\u3002Markdown / HTML \u306F\u30D7\u30EC\u30FC\u30F3\u30C6\u30AD\u30B9\u30C8\u30A8\u30EA\u30A2\u3002",
       insertMedia: "\u30E1\u30C7\u30A3\u30A2\u3092\u633F\u5165",
       tabEdit: "\u7DE8\u96C6",
       tabPreview: "\u30D7\u30EC\u30D3\u30E5\u30FC",
@@ -666,6 +702,10 @@ var ja_default = {
       deleteColumn: "\u5217\u3092\u524A\u9664",
       toggleHeaderRow: "\u30D8\u30C3\u30C0\u30FC\u884C\u3092\u5207\u66FF",
       deleteTable: "\u30C6\u30FC\u30D6\u30EB\u3092\u524A\u9664"
+    },
+    codeBlock: {
+      languageLabel: "\u8A00\u8A9E",
+      languagePlaceholder: "\u4F8B: mermaid, ts"
     }
   },
   auth: {
@@ -682,7 +722,8 @@ var ja_default = {
       description: "\u30B5\u30A4\u30F3\u30A4\u30F3\u3057\u3066\u30B5\u30A4\u30C8\u3092\u7BA1\u7406\u3057\u307E\u3059\u3002",
       submit: "\u30B5\u30A4\u30F3\u30A4\u30F3",
       forgotPassword: "\u30D1\u30B9\u30EF\u30FC\u30C9\u3092\u304A\u5FD8\u308C\u3067\u3059\u304B?",
-      createAccount: "\u7BA1\u7406\u8005\u30A2\u30AB\u30A6\u30F3\u30C8\u3092\u4F5C\u6210"
+      createAccount: "\u7BA1\u7406\u8005\u30A2\u30AB\u30A6\u30F3\u30C8\u3092\u4F5C\u6210",
+      passkeyButton: "\u30D1\u30B9\u30AD\u30FC\u3067\u30B5\u30A4\u30F3\u30A4\u30F3"
     },
     signUp: {
       title: "\u7BA1\u7406\u8005\u30A2\u30AB\u30A6\u30F3\u30C8\u306E\u4F5C\u6210",
@@ -713,6 +754,14 @@ var ja_default = {
       invalidCredentials: "\u30E1\u30FC\u30EB\u30A2\u30C9\u30EC\u30B9\u307E\u305F\u306F\u30D1\u30B9\u30EF\u30FC\u30C9\u304C\u6B63\u3057\u304F\u3042\u308A\u307E\u305B\u3093\u3002",
       passwordTooShort: "\u30D1\u30B9\u30EF\u30FC\u30C9\u306F8\u6587\u5B57\u4EE5\u4E0A\u5FC5\u8981\u3067\u3059\u3002",
       userExists: "\u3053\u306E\u30E1\u30FC\u30EB\u30A2\u30C9\u30EC\u30B9\u306E\u30A2\u30AB\u30A6\u30F3\u30C8\u306F\u65E2\u306B\u5B58\u5728\u3057\u307E\u3059\u3002"
+    },
+    passkey: {
+      emailRequired: "\u30E1\u30FC\u30EB\u30A2\u30C9\u30EC\u30B9\u3092\u5165\u529B\u3057\u3066\u304B\u3089\u3001\u30D1\u30B9\u30AD\u30FC\u3067\u30B5\u30A4\u30F3\u30A4\u30F3\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
+      noneRegistered: "\u3053\u306E\u30A2\u30AB\u30A6\u30F3\u30C8\u306B\u306F\u307E\u3060\u30D1\u30B9\u30AD\u30FC\u304C\u767B\u9332\u3055\u308C\u3066\u3044\u307E\u305B\u3093\u3002\u30D1\u30B9\u30EF\u30FC\u30C9\u3067\u30B5\u30A4\u30F3\u30A4\u30F3\u3057\u3001\u30A2\u30AB\u30A6\u30F3\u30C8\u30DA\u30FC\u30B8\u304B\u3089\u767B\u9332\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
+      cancelled: "\u30D1\u30B9\u30AD\u30FC\u306E\u30B5\u30A4\u30F3\u30A4\u30F3\u304C\u30AD\u30E3\u30F3\u30BB\u30EB\u3055\u308C\u307E\u3057\u305F\u3002",
+      unsupported: "\u3053\u306E\u30D6\u30E9\u30A6\u30B6\u306F\u30D1\u30B9\u30AD\u30FC\u306B\u5BFE\u5FDC\u3057\u3066\u3044\u307E\u305B\u3093\u3002",
+      rpMismatch: "\u3053\u306E\u30C9\u30E1\u30A4\u30F3\u3067\u306F\u30D1\u30B9\u30AD\u30FC\u304C\u8A2D\u5B9A\u3055\u308C\u3066\u3044\u307E\u305B\u3093\u3002\u30B5\u30A4\u30C8\u30A8\u30F3\u30B8\u30CB\u30A2\u306B amplify/auth/resource.custom.ts \u306E relyingPartyId \u8A2D\u5B9A\u3092\u4F9D\u983C\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
+      failed: "\u30D1\u30B9\u30AD\u30FC\u306E\u30B5\u30A4\u30F3\u30A4\u30F3\u306B\u5931\u6557\u3057\u307E\u3057\u305F\u3002\u3082\u3046\u4E00\u5EA6\u8A66\u3059\u304B\u3001\u30D1\u30B9\u30EF\u30FC\u30C9\u3067\u30B5\u30A4\u30F3\u30A4\u30F3\u3057\u3066\u304F\u3060\u3055\u3044\u3002"
     }
   },
   plugins: {
@@ -726,7 +775,8 @@ var ja_default = {
     saveError: "\u4FDD\u5B58\u306B\u5931\u6557\u3057\u307E\u3057\u305F",
     invalidValue: "\u4E0D\u6B63\u306A\u5024\u304C\u542B\u307E\u308C\u3066\u3044\u307E\u3059 \u2014 \u30CF\u30A4\u30E9\u30A4\u30C8\u3055\u308C\u305F\u9805\u76EE\u3092\u4FEE\u6B63\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
     resetToDefault: "\u30C7\u30D5\u30A9\u30EB\u30C8\u306B\u623B\u3059",
-    resetDone: "\u4FDD\u5B58\u5024\u3092\u30AF\u30EA\u30A2\u3057\u307E\u3057\u305F\u3002\u30DE\u30CB\u30D5\u30A7\u30B9\u30C8\u306E\u30C7\u30D5\u30A9\u30EB\u30C8\u5024\u304C\u4F7F\u7528\u3055\u308C\u307E\u3059\u3002"
+    resetDone: "\u4FDD\u5B58\u5024\u3092\u30AF\u30EA\u30A2\u3057\u307E\u3057\u305F\u3002\u30DE\u30CB\u30D5\u30A7\u30B9\u30C8\u306E\u30C7\u30D5\u30A9\u30EB\u30C8\u5024\u304C\u4F7F\u7528\u3055\u308C\u307E\u3059\u3002",
+    noChanges: "\u5909\u66F4\u306F\u3042\u308A\u307E\u305B\u3093\u3002"
   },
   mcpTokens: {
     title: "MCP \u30C8\u30FC\u30AF\u30F3",
@@ -773,6 +823,24 @@ var ja_default = {
     tagLabel: "\u30BF\u30B0",
     permalink: "\u30D1\u30FC\u30DE\u30EA\u30F3\u30AF",
     shareOnX: "X\u3067\u5171\u6709"
+  },
+  account: {
+    title: "\u30A2\u30AB\u30A6\u30F3\u30C8",
+    passkeys: {
+      title: "\u30D1\u30B9\u30AD\u30FC",
+      add: "\u30D1\u30B9\u30AD\u30FC\u3092\u8FFD\u52A0",
+      adding: "\u8FFD\u52A0\u4E2D...",
+      added: "\u30D1\u30B9\u30AD\u30FC\u3092\u8FFD\u52A0\u3057\u307E\u3057\u305F\u3002",
+      loading: "\u30D1\u30B9\u30AD\u30FC\u3092\u8AAD\u307F\u8FBC\u307F\u4E2D...",
+      empty: "\u30D1\u30B9\u30AD\u30FC\u306F\u307E\u3060\u3042\u308A\u307E\u305B\u3093\u3002\u8FFD\u52A0\u3059\u308B\u3068 Face ID\u30FBTouch ID\u30FB\u30BB\u30AD\u30E5\u30EA\u30C6\u30A3\u30AD\u30FC\u3067\u30B5\u30A4\u30F3\u30A4\u30F3\u3067\u304D\u307E\u3059\u3002",
+      columnName: "\u540D\u524D",
+      columnCreated: "\u4F5C\u6210\u65E5",
+      delete: "\u524A\u9664",
+      deleteConfirm: "\u3053\u306E\u30D1\u30B9\u30AD\u30FC\u3092\u524A\u9664\u3057\u307E\u3059\u304B? \u3053\u306E\u30D1\u30B9\u30AD\u30FC\u3067\u306F\u30B5\u30A4\u30F3\u30A4\u30F3\u3067\u304D\u306A\u304F\u306A\u308A\u307E\u3059\u3002",
+      loadError: "\u30D1\u30B9\u30AD\u30FC\u306E\u8AAD\u307F\u8FBC\u307F\u306B\u5931\u6557\u3057\u307E\u3057\u305F",
+      unsupported: "\u3053\u306E\u30D6\u30E9\u30A6\u30B6\u306F\u30D1\u30B9\u30AD\u30FC\u306B\u5BFE\u5FDC\u3057\u3066\u3044\u307E\u305B\u3093\u3002",
+      disabled: "\u3053\u306E\u30B5\u30A4\u30C8\u3067\u306F\u30D1\u30B9\u30AD\u30FC\u306F\u7121\u52B9\u3067\u3059\u3002"
+    }
   }
 };
 

package/dist/{chunk-HN3UFHP7.js → chunk-ANME5KDN.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-2ITWLRYF.js";
 import {
   useT
-} from "./chunk-K44QF3MV.js";
+} from "./chunk-4OFRX6QX.js";
 
 // src/lib/upload.ts
 import { uploadData } from "aws-amplify/storage";

package/dist/{chunk-GGHN2RKQ.js → chunk-E5VF3Y65.js}

@@ -1,11 +1,17 @@
 'use client';
+import {
+  classifyPasskeyError,
+  isWebAuthnSupported,
+  signInWithPasskey
+} from "./chunk-ZDIDJCSU.js";
 import {
   useT
-} from "./chunk-K44QF3MV.js";
+} from "./chunk-4OFRX6QX.js";
 
 // src/components/login-view.tsx
-import { useState } from "react";
+import { useEffect, useRef, useState } from "react";
 import { useRouter } from "next/navigation";
+import { Fingerprint } from "lucide-react";
 import {
   signIn,
   signUp,
@@ -24,7 +30,8 @@ import {
   CardDescription
 } from "@ampless/runtime/ui";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
-function LoginPage() {
+var LAST_EMAIL_KEY = "ampless.lastSignInEmail";
+function LoginPage({ passkeysEnabled = true }) {
   const router = useRouter();
   const t = useT();
   const [mode, setMode] = useState("signIn");
@@ -34,6 +41,49 @@ function LoginPage() {
   const [error, setError] = useState(null);
   const [info, setInfo] = useState(null);
   const [loading, setLoading] = useState(false);
+  const [passkeySupported, setPasskeySupported] = useState(false);
+  const emailRef = useRef(null);
+  useEffect(() => {
+    setPasskeySupported(isWebAuthnSupported());
+    try {
+      const last = window.localStorage.getItem(LAST_EMAIL_KEY);
+      if (last) setEmail(last);
+    } catch {
+    }
+  }, []);
+  function rememberEmail(value) {
+    try {
+      window.localStorage.setItem(LAST_EMAIL_KEY, value);
+    } catch {
+    }
+  }
+  async function handlePasskeySignIn() {
+    setError(null);
+    setInfo(null);
+    if (!email) {
+      setError(t("auth.passkey.emailRequired"));
+      emailRef.current?.focus();
+      return;
+    }
+    setLoading(true);
+    try {
+      const outcome = await signInWithPasskey(email);
+      if (outcome.status === "signedIn") {
+        rememberEmail(email);
+        router.push("/admin");
+        router.refresh();
+      } else if (outcome.status === "noPasskey") {
+        setInfo(t("auth.passkey.noneRegistered"));
+      } else {
+        setError(t("auth.additionalStep", { step: outcome.step }));
+      }
+    } catch (err) {
+      console.error("[login-view] passkey sign-in failed", err);
+      setError(t(`auth.passkey.${classifyPasskeyError(err)}`));
+    } finally {
+      setLoading(false);
+    }
+  }
   function go(next) {
     setMode(next);
     setError(null);
@@ -50,6 +100,7 @@ function LoginPage() {
       if (mode === "signIn") {
         const result = await signIn({ username: email, password });
         if (result.isSignedIn) {
+          rememberEmail(email);
           router.push("/admin");
           router.refresh();
         } else {
@@ -109,6 +160,7 @@ function LoginPage() {
           Input,
           {
             id: "email",
+            ref: emailRef,
             type: "email",
             required: true,
             value: email,
@@ -149,6 +201,20 @@ function LoginPage() {
       info && /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: info }),
       error && /* @__PURE__ */ jsx("p", { className: "text-sm text-destructive", children: error }),
       /* @__PURE__ */ jsx(Button, { type: "submit", className: "w-full", disabled: loading, children: loading ? t("auth.common.working") : t(`auth.${mode}.submit`) }),
+      mode === "signIn" && passkeysEnabled && passkeySupported && /* @__PURE__ */ jsxs(
+        Button,
+        {
+          type: "button",
+          variant: "outline",
+          className: "w-full gap-2",
+          disabled: loading,
+          onClick: () => void handlePasskeySignIn(),
+          children: [
+            /* @__PURE__ */ jsx(Fingerprint, { className: "h-4 w-4" }),
+            t("auth.signIn.passkeyButton")
+          ]
+        }
+      ),
       /* @__PURE__ */ jsxs("div", { className: "space-y-1 text-center text-sm", children: [
         mode === "signIn" && /* @__PURE__ */ jsxs(Fragment, { children: [
           /* @__PURE__ */ jsx("p", { children: /* @__PURE__ */ jsx(

package/dist/{chunk-7LT6YPIT.js → chunk-JLCTF5HY.js}

@@ -1,10 +1,10 @@
 'use client';
 import {
   PostForm
-} from "./chunk-HANIMWMN.js";
+} from "./chunk-4WYMEUYU.js";
 import {
   useT
-} from "./chunk-K44QF3MV.js";
+} from "./chunk-4OFRX6QX.js";
 
 // src/components/edit-post-view.tsx
 import { useEffect, useState, use } from "react";
@@ -17,14 +17,20 @@ function EditPostPage({ params, previewEndpoint }) {
   const [post, setPost] = useState(null);
   const [loading, setLoading] = useState(true);
   const [missing, setMissing] = useState(false);
+  const [error, setError] = useState(false);
   useEffect(() => {
     getPostById(postId).then((p) => {
       if (!p) setMissing(true);
       else setPost(p);
+    }).catch((err) => {
+      console.error("[ampless admin] failed to load post for editing:", err);
+      setError(true);
     }).finally(() => setLoading(false));
   }, [postId]);
   if (loading)
     return /* @__PURE__ */ jsx("div", { className: "mx-auto max-w-7xl p-4 md:p-8", children: t("common.loading") });
+  if (error)
+    return /* @__PURE__ */ jsx("div", { className: "mx-auto max-w-7xl p-4 md:p-8", children: t("common.loadError") });
   if (missing) notFound();
   return /* @__PURE__ */ jsxs("div", { className: "mx-auto max-w-7xl p-4 md:p-8", children: [
     /* @__PURE__ */ jsx("h1", { className: "mb-6 text-2xl font-bold md:mb-8 md:text-3xl", children: t("posts.form.editTitle") }),

package/dist/{chunk-R3TEJ32M.js → chunk-LXY3BRKQ.js}

@@ -1,10 +1,10 @@
 'use client';
 import {
   PostForm
-} from "./chunk-HANIMWMN.js";
+} from "./chunk-4WYMEUYU.js";
 import {
   useT
-} from "./chunk-K44QF3MV.js";
+} from "./chunk-4OFRX6QX.js";
 
 // src/components/new-post-view.tsx
 import { jsx, jsxs } from "react/jsx-runtime";

package/dist/{chunk-MKWYNK4J.js → chunk-NHMG2MRJ.js}

@@ -1,10 +1,10 @@
 'use client';
 import {
   MediaUploader
-} from "./chunk-SQ6LFPXH.js";
+} from "./chunk-2TBGPB5H.js";
 import {
   useT
-} from "./chunk-K44QF3MV.js";
+} from "./chunk-4OFRX6QX.js";
 
 // src/components/media-view.tsx
 import { jsx, jsxs } from "react/jsx-runtime";