@ampless/admin 1.0.0-beta.90 → 1.0.0-beta.92

package/dist/api/index.d.ts

@@ -2,7 +2,7 @@ import { NextRequest } from 'next/server';
 import { Admin } from '../index.js';
 import 'ampless';
 import '@ampless/runtime';
-import '../i18n-BA6o0jvS.js';
+import '../i18n-CecqYBeP.js';
 import '@aws-amplify/adapter-nextjs';
 
 /**

package/dist/{chunk-F4BDO5XD.js → chunk-2Y5SRSCZ.js}

@@ -1,11 +1,17 @@
 'use client';
+import {
+  classifyPasskeyError,
+  isWebAuthnSupported,
+  signInWithPasskey
+} from "./chunk-ZDIDJCSU.js";
 import {
   useT
-} from "./chunk-VX5FWOOG.js";
+} from "./chunk-IBFNFTJ6.js";
 
 // src/components/login-view.tsx
-import { useState } from "react";
+import { useEffect, useRef, useState } from "react";
 import { useRouter } from "next/navigation";
+import { Fingerprint } from "lucide-react";
 import {
   signIn,
   signUp,
@@ -24,7 +30,8 @@ import {
   CardDescription
 } from "@ampless/runtime/ui";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
-function LoginPage() {
+var LAST_EMAIL_KEY = "ampless.lastSignInEmail";
+function LoginPage({ passkeysEnabled = true }) {
   const router = useRouter();
   const t = useT();
   const [mode, setMode] = useState("signIn");
@@ -34,6 +41,49 @@ function LoginPage() {
   const [error, setError] = useState(null);
   const [info, setInfo] = useState(null);
   const [loading, setLoading] = useState(false);
+  const [passkeySupported, setPasskeySupported] = useState(false);
+  const emailRef = useRef(null);
+  useEffect(() => {
+    setPasskeySupported(isWebAuthnSupported());
+    try {
+      const last = window.localStorage.getItem(LAST_EMAIL_KEY);
+      if (last) setEmail(last);
+    } catch {
+    }
+  }, []);
+  function rememberEmail(value) {
+    try {
+      window.localStorage.setItem(LAST_EMAIL_KEY, value);
+    } catch {
+    }
+  }
+  async function handlePasskeySignIn() {
+    setError(null);
+    setInfo(null);
+    if (!email) {
+      setError(t("auth.passkey.emailRequired"));
+      emailRef.current?.focus();
+      return;
+    }
+    setLoading(true);
+    try {
+      const outcome = await signInWithPasskey(email);
+      if (outcome.status === "signedIn") {
+        rememberEmail(email);
+        router.push("/admin");
+        router.refresh();
+      } else if (outcome.status === "noPasskey") {
+        setInfo(t("auth.passkey.noneRegistered"));
+      } else {
+        setError(t("auth.additionalStep", { step: outcome.step }));
+      }
+    } catch (err) {
+      console.error("[login-view] passkey sign-in failed", err);
+      setError(t(`auth.passkey.${classifyPasskeyError(err)}`));
+    } finally {
+      setLoading(false);
+    }
+  }
   function go(next) {
     setMode(next);
     setError(null);
@@ -50,6 +100,7 @@ function LoginPage() {
       if (mode === "signIn") {
         const result = await signIn({ username: email, password });
         if (result.isSignedIn) {
+          rememberEmail(email);
           router.push("/admin");
           router.refresh();
         } else {
@@ -109,6 +160,7 @@ function LoginPage() {
           Input,
           {
             id: "email",
+            ref: emailRef,
             type: "email",
             required: true,
             value: email,
@@ -149,6 +201,20 @@ function LoginPage() {
       info && /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: info }),
       error && /* @__PURE__ */ jsx("p", { className: "text-sm text-destructive", children: error }),
       /* @__PURE__ */ jsx(Button, { type: "submit", className: "w-full", disabled: loading, children: loading ? t("auth.common.working") : t(`auth.${mode}.submit`) }),
+      mode === "signIn" && passkeysEnabled && passkeySupported && /* @__PURE__ */ jsxs(
+        Button,
+        {
+          type: "button",
+          variant: "outline",
+          className: "w-full gap-2",
+          disabled: loading,
+          onClick: () => void handlePasskeySignIn(),
+          children: [
+            /* @__PURE__ */ jsx(Fingerprint, { className: "h-4 w-4" }),
+            t("auth.signIn.passkeyButton")
+          ]
+        }
+      ),
       /* @__PURE__ */ jsxs("div", { className: "space-y-1 text-center text-sm", children: [
         mode === "signIn" && /* @__PURE__ */ jsxs(Fragment, { children: [
           /* @__PURE__ */ jsx("p", { children: /* @__PURE__ */ jsx(

package/dist/{chunk-OS6QI7VW.js → chunk-3AQGYUVP.js}

@@ -1,7 +1,7 @@
 'use client';
 import {
   useT
-} from "./chunk-VX5FWOOG.js";
+} from "./chunk-IBFNFTJ6.js";
 
 // src/components/admin-dashboard.tsx
 import { useEffect, useState } from "react";

package/dist/{chunk-OLI5JPHI.js → chunk-6275N7HG.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-2ITWLRYF.js";
 import {
   useT
-} from "./chunk-VX5FWOOG.js";
+} from "./chunk-IBFNFTJ6.js";
 
 // src/lib/upload.ts
 import { uploadData } from "aws-amplify/storage";

package/dist/{chunk-OVUT27GX.js → chunk-FVGWVH6Q.js}

@@ -1,23 +1,23 @@
 'use client';
+import {
+  setMcpTokenStore
+} from "./chunk-C7G5AQ3L.js";
 import {
   invalidateSiteSettingsCache
 } from "./chunk-D72XF3Q3.js";
 import {
   clearAllDrafts
-} from "./chunk-X4V3LAP5.js";
+} from "./chunk-UUZAKCZZ.js";
 import {
   setAdminCmsConfigClient
-} from "./chunk-OLI5JPHI.js";
+} from "./chunk-6275N7HG.js";
 import {
   setAdminMediaContext
 } from "./chunk-2ITWLRYF.js";
-import {
-  setMcpTokenStore
-} from "./chunk-C7G5AQ3L.js";
 import {
   useLocale,
   useT
-} from "./chunk-VX5FWOOG.js";
+} from "./chunk-IBFNFTJ6.js";
 
 // src/lib/amplify-client.ts
 import { Amplify } from "aws-amplify";
@@ -342,6 +342,7 @@ import {
   Puzzle,
   LogOut,
   ExternalLink,
+  UserCircle,
   Menu,
   X
 } from "lucide-react";
@@ -466,7 +467,18 @@ function Sidebar({
                 ]
               }
             ),
-            /* @__PURE__ */ jsx2("div", { className: "px-3 py-2 text-xs text-muted-foreground truncate", children: email }),
+            /* @__PURE__ */ jsxs(
+              Link,
+              {
+                href: "/admin/account",
+                className: "flex items-center gap-3 rounded-md px-3 py-2 text-xs text-muted-foreground hover:bg-accent hover:text-accent-foreground",
+                title: t("sidebar.account"),
+                children: [
+                  /* @__PURE__ */ jsx2(UserCircle, { className: "h-4 w-4 shrink-0" }),
+                  /* @__PURE__ */ jsx2("span", { className: "truncate", children: email })
+                ]
+              }
+            ),
             /* @__PURE__ */ jsxs(
               Button,
               {

package/dist/{chunk-LUONBBOA.js → chunk-FVHQJCH4.js}

@@ -1,10 +1,10 @@
 'use client';
 import {
   MediaUploader
-} from "./chunk-DLIP4JOY.js";
+} from "./chunk-TEMSFG34.js";
 import {
   useT
-} from "./chunk-VX5FWOOG.js";
+} from "./chunk-IBFNFTJ6.js";
 
 // src/components/media-view.tsx
 import { jsx, jsxs } from "react/jsx-runtime";

package/dist/{chunk-VDNJ5KXR.js → chunk-HKMHNEFV.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-C7G5AQ3L.js";
 import {
   useT
-} from "./chunk-VX5FWOOG.js";
+} from "./chunk-IBFNFTJ6.js";
 
 // src/components/mcp-tokens-view.tsx
 import { useEffect, useState } from "react";

package/dist/{chunk-TSHYVPGI.js → chunk-HRCUFIGW.js}

@@ -1,10 +1,10 @@
 'use client';
 import {
   PostForm
-} from "./chunk-X4V3LAP5.js";
+} from "./chunk-UUZAKCZZ.js";
 import {
   useT
-} from "./chunk-VX5FWOOG.js";
+} from "./chunk-IBFNFTJ6.js";
 
 // src/components/edit-post-view.tsx
 import { useEffect, useState, use } from "react";

package/dist/{chunk-VX5FWOOG.js → chunk-IBFNFTJ6.js}

@@ -1,7 +1,7 @@
 'use client';
 import {
   translate
-} from "./chunk-DIIJWZPF.js";
+} from "./chunk-M5QQJHM7.js";
 
 // src/components/i18n-provider.tsx
 import { createContext, useContext, useMemo } from "react";

package/dist/{chunk-DIIJWZPF.js → chunk-M5QQJHM7.js}

@@ -41,7 +41,8 @@ var en_default = {
     signOut: "Sign out",
     site: "Site",
     openMenu: "Open menu",
-    closeMenu: "Close menu"
+    closeMenu: "Close menu",
+    account: "Account"
   },
   dashboard: {
     title: "Dashboard",
@@ -293,7 +294,8 @@ var en_default = {
       description: "Sign in to manage your site.",
       submit: "Sign in",
       forgotPassword: "Forgot password?",
-      createAccount: "Create admin account"
+      createAccount: "Create admin account",
+      passkeyButton: "Sign in with passkey"
     },
     signUp: {
       title: "Create admin account",
@@ -324,6 +326,14 @@ var en_default = {
       invalidCredentials: "Invalid email or password.",
       passwordTooShort: "Password must be at least 8 characters.",
       userExists: "An account with this email already exists."
+    },
+    passkey: {
+      emailRequired: "Enter your email first, then sign in with your passkey.",
+      noneRegistered: "No passkey is registered for this account yet. Sign in with your password, then add one from the account page.",
+      cancelled: "Passkey sign-in was cancelled.",
+      unsupported: "This browser does not support passkeys.",
+      rpMismatch: "This site isn't configured for passkeys on this domain. Ask the site engineer to set the relyingPartyId in amplify/auth/resource.custom.ts.",
+      failed: "Passkey sign-in failed. Try again, or sign in with your password."
     }
   },
   plugins: {
@@ -385,6 +395,24 @@ var en_default = {
     tagLabel: "Tag",
     permalink: "Permalink",
     shareOnX: "Share on X"
+  },
+  account: {
+    title: "Account",
+    passkeys: {
+      title: "Passkeys",
+      add: "Add passkey",
+      adding: "Adding...",
+      added: "Passkey added.",
+      loading: "Loading passkeys...",
+      empty: "No passkeys yet. Add one to sign in with Face ID, Touch ID, or your security key.",
+      columnName: "Name",
+      columnCreated: "Created",
+      delete: "Delete",
+      deleteConfirm: "Delete this passkey? You will no longer be able to sign in with it.",
+      loadError: "Failed to load passkeys",
+      unsupported: "This browser does not support passkeys.",
+      disabled: "Passkeys are disabled for this site."
+    }
   }
 };
 
@@ -431,7 +459,8 @@ var ja_default = {
     signOut: "\u30B5\u30A4\u30F3\u30A2\u30A6\u30C8",
     site: "\u30B5\u30A4\u30C8",
     openMenu: "\u30E1\u30CB\u30E5\u30FC\u3092\u958B\u304F",
-    closeMenu: "\u30E1\u30CB\u30E5\u30FC\u3092\u9589\u3058\u308B"
+    closeMenu: "\u30E1\u30CB\u30E5\u30FC\u3092\u9589\u3058\u308B",
+    account: "\u30A2\u30AB\u30A6\u30F3\u30C8"
   },
   dashboard: {
     title: "\u30C0\u30C3\u30B7\u30E5\u30DC\u30FC\u30C9",
@@ -683,7 +712,8 @@ var ja_default = {
       description: "\u30B5\u30A4\u30F3\u30A4\u30F3\u3057\u3066\u30B5\u30A4\u30C8\u3092\u7BA1\u7406\u3057\u307E\u3059\u3002",
       submit: "\u30B5\u30A4\u30F3\u30A4\u30F3",
       forgotPassword: "\u30D1\u30B9\u30EF\u30FC\u30C9\u3092\u304A\u5FD8\u308C\u3067\u3059\u304B?",
-      createAccount: "\u7BA1\u7406\u8005\u30A2\u30AB\u30A6\u30F3\u30C8\u3092\u4F5C\u6210"
+      createAccount: "\u7BA1\u7406\u8005\u30A2\u30AB\u30A6\u30F3\u30C8\u3092\u4F5C\u6210",
+      passkeyButton: "\u30D1\u30B9\u30AD\u30FC\u3067\u30B5\u30A4\u30F3\u30A4\u30F3"
     },
     signUp: {
       title: "\u7BA1\u7406\u8005\u30A2\u30AB\u30A6\u30F3\u30C8\u306E\u4F5C\u6210",
@@ -714,6 +744,14 @@ var ja_default = {
       invalidCredentials: "\u30E1\u30FC\u30EB\u30A2\u30C9\u30EC\u30B9\u307E\u305F\u306F\u30D1\u30B9\u30EF\u30FC\u30C9\u304C\u6B63\u3057\u304F\u3042\u308A\u307E\u305B\u3093\u3002",
       passwordTooShort: "\u30D1\u30B9\u30EF\u30FC\u30C9\u306F8\u6587\u5B57\u4EE5\u4E0A\u5FC5\u8981\u3067\u3059\u3002",
       userExists: "\u3053\u306E\u30E1\u30FC\u30EB\u30A2\u30C9\u30EC\u30B9\u306E\u30A2\u30AB\u30A6\u30F3\u30C8\u306F\u65E2\u306B\u5B58\u5728\u3057\u307E\u3059\u3002"
+    },
+    passkey: {
+      emailRequired: "\u30E1\u30FC\u30EB\u30A2\u30C9\u30EC\u30B9\u3092\u5165\u529B\u3057\u3066\u304B\u3089\u3001\u30D1\u30B9\u30AD\u30FC\u3067\u30B5\u30A4\u30F3\u30A4\u30F3\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
+      noneRegistered: "\u3053\u306E\u30A2\u30AB\u30A6\u30F3\u30C8\u306B\u306F\u307E\u3060\u30D1\u30B9\u30AD\u30FC\u304C\u767B\u9332\u3055\u308C\u3066\u3044\u307E\u305B\u3093\u3002\u30D1\u30B9\u30EF\u30FC\u30C9\u3067\u30B5\u30A4\u30F3\u30A4\u30F3\u3057\u3001\u30A2\u30AB\u30A6\u30F3\u30C8\u30DA\u30FC\u30B8\u304B\u3089\u767B\u9332\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
+      cancelled: "\u30D1\u30B9\u30AD\u30FC\u306E\u30B5\u30A4\u30F3\u30A4\u30F3\u304C\u30AD\u30E3\u30F3\u30BB\u30EB\u3055\u308C\u307E\u3057\u305F\u3002",
+      unsupported: "\u3053\u306E\u30D6\u30E9\u30A6\u30B6\u306F\u30D1\u30B9\u30AD\u30FC\u306B\u5BFE\u5FDC\u3057\u3066\u3044\u307E\u305B\u3093\u3002",
+      rpMismatch: "\u3053\u306E\u30C9\u30E1\u30A4\u30F3\u3067\u306F\u30D1\u30B9\u30AD\u30FC\u304C\u8A2D\u5B9A\u3055\u308C\u3066\u3044\u307E\u305B\u3093\u3002\u30B5\u30A4\u30C8\u30A8\u30F3\u30B8\u30CB\u30A2\u306B amplify/auth/resource.custom.ts \u306E relyingPartyId \u8A2D\u5B9A\u3092\u4F9D\u983C\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
+      failed: "\u30D1\u30B9\u30AD\u30FC\u306E\u30B5\u30A4\u30F3\u30A4\u30F3\u306B\u5931\u6557\u3057\u307E\u3057\u305F\u3002\u3082\u3046\u4E00\u5EA6\u8A66\u3059\u304B\u3001\u30D1\u30B9\u30EF\u30FC\u30C9\u3067\u30B5\u30A4\u30F3\u30A4\u30F3\u3057\u3066\u304F\u3060\u3055\u3044\u3002"
     }
   },
   plugins: {
@@ -775,6 +813,24 @@ var ja_default = {
     tagLabel: "\u30BF\u30B0",
     permalink: "\u30D1\u30FC\u30DE\u30EA\u30F3\u30AF",
     shareOnX: "X\u3067\u5171\u6709"
+  },
+  account: {
+    title: "\u30A2\u30AB\u30A6\u30F3\u30C8",
+    passkeys: {
+      title: "\u30D1\u30B9\u30AD\u30FC",
+      add: "\u30D1\u30B9\u30AD\u30FC\u3092\u8FFD\u52A0",
+      adding: "\u8FFD\u52A0\u4E2D...",
+      added: "\u30D1\u30B9\u30AD\u30FC\u3092\u8FFD\u52A0\u3057\u307E\u3057\u305F\u3002",
+      loading: "\u30D1\u30B9\u30AD\u30FC\u3092\u8AAD\u307F\u8FBC\u307F\u4E2D...",
+      empty: "\u30D1\u30B9\u30AD\u30FC\u306F\u307E\u3060\u3042\u308A\u307E\u305B\u3093\u3002\u8FFD\u52A0\u3059\u308B\u3068 Face ID\u30FBTouch ID\u30FB\u30BB\u30AD\u30E5\u30EA\u30C6\u30A3\u30AD\u30FC\u3067\u30B5\u30A4\u30F3\u30A4\u30F3\u3067\u304D\u307E\u3059\u3002",
+      columnName: "\u540D\u524D",
+      columnCreated: "\u4F5C\u6210\u65E5",
+      delete: "\u524A\u9664",
+      deleteConfirm: "\u3053\u306E\u30D1\u30B9\u30AD\u30FC\u3092\u524A\u9664\u3057\u307E\u3059\u304B? \u3053\u306E\u30D1\u30B9\u30AD\u30FC\u3067\u306F\u30B5\u30A4\u30F3\u30A4\u30F3\u3067\u304D\u306A\u304F\u306A\u308A\u307E\u3059\u3002",
+      loadError: "\u30D1\u30B9\u30AD\u30FC\u306E\u8AAD\u307F\u8FBC\u307F\u306B\u5931\u6557\u3057\u307E\u3057\u305F",
+      unsupported: "\u3053\u306E\u30D6\u30E9\u30A6\u30B6\u306F\u30D1\u30B9\u30AD\u30FC\u306B\u5BFE\u5FDC\u3057\u3066\u3044\u307E\u305B\u3093\u3002",
+      disabled: "\u3053\u306E\u30B5\u30A4\u30C8\u3067\u306F\u30D1\u30B9\u30AD\u30FC\u306F\u7121\u52B9\u3067\u3059\u3002"
+    }
   }
 };
 

package/dist/{chunk-K67HINPW.js → chunk-OAG4NI7Q.js}

@@ -1,7 +1,7 @@
 'use client';
 import {
   useT
-} from "./chunk-VX5FWOOG.js";
+} from "./chunk-IBFNFTJ6.js";
 
 // src/components/users-list-view.tsx
 import { useEffect, useState } from "react";

package/dist/{chunk-STD3UYXK.js → chunk-OPHSYQQV.js}

@@ -1,10 +1,10 @@
 'use client';
 import {
   PostForm
-} from "./chunk-X4V3LAP5.js";
+} from "./chunk-UUZAKCZZ.js";
 import {
   useT
-} from "./chunk-VX5FWOOG.js";
+} from "./chunk-IBFNFTJ6.js";
 
 // src/components/new-post-view.tsx
 import { jsx, jsxs } from "react/jsx-runtime";

package/dist/{chunk-T3R5QD5K.js → chunk-QO73C7VC.js}

@@ -5,7 +5,7 @@ import {
 import {
   useLocale,
   useT
-} from "./chunk-VX5FWOOG.js";
+} from "./chunk-IBFNFTJ6.js";
 
 // src/components/plugin-settings-form.tsx
 import { useState as useState2, useEffect as useEffect2 } from "react";

package/dist/{chunk-DLIP4JOY.js → chunk-TEMSFG34.js}

@@ -3,13 +3,13 @@ import {
   ImageUploadDialog,
   createMediaRow,
   getMediaProcessingDefaults
-} from "./chunk-OLI5JPHI.js";
+} from "./chunk-6275N7HG.js";
 import {
   publicMediaUrl
 } from "./chunk-2ITWLRYF.js";
 import {
   useT
-} from "./chunk-VX5FWOOG.js";
+} from "./chunk-IBFNFTJ6.js";
 
 // src/components/media-uploader.tsx
 import { useState, useEffect, useCallback, useRef } from "react";

package/dist/{chunk-25CIZ4R4.js → chunk-TMOFUAU7.js}

@@ -1,7 +1,7 @@
 'use client';
 import {
   useT
-} from "./chunk-VX5FWOOG.js";
+} from "./chunk-IBFNFTJ6.js";
 
 // src/components/posts-list-view.tsx
 import { useEffect, useMemo, useState } from "react";

package/dist/{chunk-X4V3LAP5.js → chunk-UUZAKCZZ.js}

@@ -4,7 +4,7 @@ import {
   getAdminCmsConfig,
   getMediaProcessingDefaults,
   uploadProcessedImage
-} from "./chunk-OLI5JPHI.js";
+} from "./chunk-6275N7HG.js";
 import {
   getAdminEditorExtensions,
   getAdminTiptapNodeHtml,
@@ -15,7 +15,7 @@ import {
 } from "./chunk-2ITWLRYF.js";
 import {
   useT
-} from "./chunk-VX5FWOOG.js";
+} from "./chunk-IBFNFTJ6.js";
 
 // src/components/media-picker.tsx
 import { useEffect, useRef, useState } from "react";

package/dist/chunk-VJ5SDYVW.js

@@ -0,0 +1,172 @@
+'use client';
+import {
+  isWebAuthnSupported
+} from "./chunk-ZDIDJCSU.js";
+import {
+  useT
+} from "./chunk-IBFNFTJ6.js";
+
+// src/components/account-view.tsx
+import { useEffect, useState } from "react";
+import {
+  Button,
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow
+} from "@ampless/runtime/ui";
+
+// src/lib/passkey-store.ts
+import {
+  associateWebAuthnCredential,
+  listWebAuthnCredentials,
+  deleteWebAuthnCredential
+} from "aws-amplify/auth";
+var defaultPasskeyApi = {
+  async register() {
+    await associateWebAuthnCredential();
+  },
+  async list() {
+    const credentials = [];
+    let nextToken;
+    do {
+      const page = await listWebAuthnCredentials(nextToken ? { nextToken } : void 0);
+      for (const cred of page.credentials) {
+        if (!cred.credentialId) continue;
+        credentials.push({
+          credentialId: cred.credentialId,
+          friendlyName: cred.friendlyCredentialName,
+          createdAt: cred.createdAt ? cred.createdAt.toISOString() : null
+        });
+      }
+      nextToken = page.nextToken;
+    } while (nextToken);
+    credentials.sort((a, b) => {
+      if (!a.createdAt) return 1;
+      if (!b.createdAt) return -1;
+      return b.createdAt.localeCompare(a.createdAt);
+    });
+    return credentials;
+  },
+  async remove(credentialId) {
+    await deleteWebAuthnCredential({ credentialId });
+  }
+};
+var api = defaultPasskeyApi;
+function getPasskeyApi() {
+  return api;
+}
+
+// src/components/account-view.tsx
+import { jsx, jsxs } from "react/jsx-runtime";
+function formatDate(iso) {
+  if (!iso) return "";
+  const d = new Date(iso);
+  if (Number.isNaN(d.getTime())) return "";
+  return d.toLocaleString();
+}
+function AccountView({ currentUserEmail, passkeysEnabled }) {
+  const t = useT();
+  const [supported, setSupported] = useState(false);
+  const [supportResolved, setSupportResolved] = useState(false);
+  const [passkeys, setPasskeys] = useState(null);
+  const [loading, setLoading] = useState(true);
+  const [loadError, setLoadError] = useState(null);
+  const [adding, setAdding] = useState(false);
+  const [addError, setAddError] = useState(null);
+  async function loadPasskeys() {
+    setLoading(true);
+    setLoadError(null);
+    try {
+      const list = await getPasskeyApi().list();
+      setPasskeys(list);
+    } catch (err) {
+      console.error("[account-view] list passkeys failed", err);
+      setLoadError(err instanceof Error ? err.message : String(err));
+    } finally {
+      setLoading(false);
+    }
+  }
+  useEffect(() => {
+    if (!passkeysEnabled) {
+      setSupportResolved(true);
+      setLoading(false);
+      return;
+    }
+    const ok = isWebAuthnSupported();
+    setSupported(ok);
+    setSupportResolved(true);
+    if (ok) void loadPasskeys();
+    else setLoading(false);
+  }, [passkeysEnabled]);
+  async function handleAdd() {
+    setAdding(true);
+    setAddError(null);
+    try {
+      await getPasskeyApi().register();
+      await loadPasskeys();
+    } catch (err) {
+      console.error("[account-view] register passkey failed", err);
+      setAddError(err instanceof Error ? err.message : String(err));
+    } finally {
+      setAdding(false);
+    }
+  }
+  async function handleRemove(credentialId) {
+    if (!confirm(t("account.passkeys.deleteConfirm"))) return;
+    try {
+      await getPasskeyApi().remove(credentialId);
+      await loadPasskeys();
+    } catch (err) {
+      console.error("[account-view] remove passkey failed", err);
+      alert(err instanceof Error ? err.message : String(err));
+    }
+  }
+  return /* @__PURE__ */ jsxs("div", { className: "mx-auto max-w-4xl space-y-8 p-4 md:p-8", children: [
+    /* @__PURE__ */ jsxs("div", { children: [
+      /* @__PURE__ */ jsx("h1", { className: "text-2xl font-bold md:text-3xl", children: t("account.title") }),
+      /* @__PURE__ */ jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: currentUserEmail })
+    ] }),
+    /* @__PURE__ */ jsxs("section", { className: "space-y-4 rounded-md border bg-card p-4 md:p-6", children: [
+      /* @__PURE__ */ jsxs("div", { className: "flex items-start justify-between gap-4", children: [
+        /* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx("h2", { className: "text-lg font-semibold", children: t("account.passkeys.title") }) }),
+        passkeysEnabled && supportResolved && supported && /* @__PURE__ */ jsx(Button, { type: "button", disabled: adding, onClick: () => void handleAdd(), children: adding ? t("account.passkeys.adding") : t("account.passkeys.add") })
+      ] }),
+      addError && /* @__PURE__ */ jsx("p", { className: "text-sm text-destructive", children: addError }),
+      !passkeysEnabled ? /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t("account.passkeys.disabled") }) : supportResolved && !supported ? /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t("account.passkeys.unsupported") }) : loading ? /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t("account.passkeys.loading") }) : loadError ? /* @__PURE__ */ jsxs("p", { className: "text-sm text-destructive", children: [
+        t("account.passkeys.loadError"),
+        ": ",
+        loadError
+      ] }) : !passkeys || passkeys.length === 0 ? /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t("account.passkeys.empty") }) : /* @__PURE__ */ jsx("div", { className: "overflow-x-auto rounded-md border", children: /* @__PURE__ */ jsxs(Table, { children: [
+        /* @__PURE__ */ jsx(TableHeader, { children: /* @__PURE__ */ jsxs(TableRow, { children: [
+          /* @__PURE__ */ jsx(TableHead, { children: t("account.passkeys.columnName") }),
+          /* @__PURE__ */ jsx(TableHead, { children: t("account.passkeys.columnCreated") }),
+          /* @__PURE__ */ jsx(TableHead, { className: "w-[1%] whitespace-nowrap", children: t("common.actions") })
+        ] }) }),
+        /* @__PURE__ */ jsx(TableBody, { children: passkeys.map((pk) => /* @__PURE__ */ jsxs(TableRow, { children: [
+          /* @__PURE__ */ jsx(TableCell, { className: "font-medium", children: pk.friendlyName || /* @__PURE__ */ jsxs("span", { className: "font-mono text-xs text-muted-foreground", children: [
+            pk.credentialId.slice(0, 12),
+            "\u2026"
+          ] }) }),
+          /* @__PURE__ */ jsx(TableCell, { className: "text-xs text-muted-foreground", children: pk.createdAt ? /* @__PURE__ */ jsx("span", { title: pk.createdAt, children: formatDate(pk.createdAt) }) : "" }),
+          /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsx(
+            Button,
+            {
+              type: "button",
+              variant: "outline",
+              size: "sm",
+              onClick: () => void handleRemove(pk.credentialId),
+              children: t("account.passkeys.delete")
+            }
+          ) })
+        ] }, pk.credentialId)) })
+      ] }) })
+    ] })
+  ] });
+}
+
+export {
+  AccountView
+};

package/dist/chunk-ZDIDJCSU.js

@@ -0,0 +1,40 @@
+// src/lib/passkey.ts
+import { signIn } from "aws-amplify/auth";
+var FIRST_FACTOR_SELECTION = "CONTINUE_SIGN_IN_WITH_FIRST_FACTOR_SELECTION";
+function isWebAuthnSupported() {
+  return typeof window !== "undefined" && typeof window.PublicKeyCredential !== "undefined" && typeof navigator !== "undefined" && typeof navigator.credentials !== "undefined" && typeof navigator.credentials.get === "function";
+}
+function classifyPasskeyError(err) {
+  const name = typeof err === "object" && err !== null && "name" in err ? String(err.name) : "";
+  if (name === "NotAllowedError") return "cancelled";
+  if (name === "SecurityError") return "rpMismatch";
+  return "failed";
+}
+function interpretPasskeySignInResult(result) {
+  if (result.isSignedIn) return { status: "signedIn" };
+  if (result.nextStep.signInStep === FIRST_FACTOR_SELECTION) {
+    return { status: "noPasskey" };
+  }
+  return { status: "otherStep", step: result.nextStep.signInStep };
+}
+async function signInWithPasskey(username) {
+  const result = await signIn({
+    username,
+    options: {
+      authFlowType: "USER_AUTH",
+      preferredChallenge: "WEB_AUTHN"
+    }
+  });
+  return interpretPasskeySignInResult(result);
+}
+function isWebAuthnEnabled(outputs) {
+  const narrowed = outputs;
+  return narrowed.auth?.passwordless?.web_authn != null;
+}
+
+export {
+  isWebAuthnSupported,
+  classifyPasskeyError,
+  signInWithPasskey,
+  isWebAuthnEnabled
+};

package/dist/components/account-view.d.ts

@@ -0,0 +1,8 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+
+declare function AccountView({ currentUserEmail, passkeysEnabled }: {
+    currentUserEmail: string;
+    passkeysEnabled: boolean;
+}): react_jsx_runtime.JSX.Element;
+
+export { AccountView };