@emdash-cms/admin 0.0.2 → 0.1.1

package/dist/index.js

@@ -5,9 +5,12 @@ import { Link, Link as Link$1, Outlet, RouterProvider, createRootRouteWithContex
 import * as React from "react";
 import { createContext, useCallback, useContext, useEffect, useState } from "react";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
-import { ArrowCounterClockwise, ArrowLeft, ArrowRight, ArrowSquareOut, ArrowUUpLeft, ArrowUUpRight, ArrowsClockwise, ArrowsInSimple, ArrowsLeftRight, ArrowsOutSimple, BracketsCurly, Calendar, CalendarBlank, CaretDown, CaretLeft, CaretRight, CaretUp, ChatCircle, Check, CheckCircle, CircleDashed, CircleNotch, ClockCounterClockwise, Cloud, Code, CodeBlock, Copy, Cube, Database, DeviceMobile, DotsSixVertical, DownloadSimple, Envelope, EnvelopeSimple, Eye, EyeSlash, File, FileArrowDown, FileText, FloppyDisk, FolderOpen, Gear, GithubLogo, Globe, GlobeSimple, GridFour, HardDrive, Hash, Image as Image$1, ImageSquare, Info, Key, Link as Link$2, LinkBreak, LinkSimple, List, ListBullets, ListChecks, ListNumbers, MagnifyingGlass, Minus, Monitor, Moon, Palette, PaperPlaneTilt, Paragraph, Pencil, PencilSimple, PlugsConnected, Plus, Prohibit, PuzzlePiece, Quotes, Ruler, ShareNetwork, Shield, ShieldCheck, ShieldWarning, SignOut, SlidersHorizontal, Sparkle, SquaresFour, Stack, Storefront, Sun, TextAlignCenter, TextAlignLeft, TextAlignRight, TextB, TextHOne, TextHThree, TextHTwo, TextItalic, TextStrikethrough, TextT, TextUnderline, ToggleLeft, Trash, Upload, User, UserCircle, UserPlus, Users, Warning, WarningCircle, WebhooksLogo, X, YoutubeLogo } from "@phosphor-icons/react";
+import { ArrowCounterClockwise, ArrowLeft, ArrowRight, ArrowSquareOut, ArrowUUpLeft, ArrowUUpRight, ArrowsClockwise, ArrowsInSimple, ArrowsLeftRight, ArrowsOutSimple, BracketsCurly, Calendar, CalendarBlank, CaretDown, CaretLeft, CaretRight, CaretUp, ChatCircle, Check, CheckCircle, CircleDashed, CircleNotch, ClockCounterClockwise, Cloud, Code, CodeBlock, Copy, Cube, Database, DeviceMobile, DotsSixVertical, DownloadSimple, Envelope, EnvelopeSimple, Eye, EyeSlash, File, FileArrowDown, FileText, FloppyDisk, FolderOpen, Gear, GithubLogo, Globe, GlobeSimple, GridFour, HardDrive, Hash, Image as Image$1, ImageSquare, Info, Key, Link as Link$2, LinkBreak, LinkSimple, List, ListBullets, ListChecks, ListNumbers, MagnifyingGlass, Minus, Monitor, Moon, Palette, PaperPlaneTilt, Paragraph, Pencil, PencilSimple, PlugsConnected, Plus, Prohibit, PuzzlePiece, Quotes, Rows, Ruler, ShareNetwork, Shield, ShieldCheck, ShieldWarning, SignOut, SlidersHorizontal, Sparkle, SquaresFour, Stack, Storefront, Sun, TextAlignCenter, TextAlignLeft, TextAlignRight, TextB, TextHOne, TextHThree, TextHTwo, TextItalic, TextStrikethrough, TextT, TextUnderline, ToggleLeft, Trash, Upload, User, UserCircle, UserPlus, Users, Warning, WarningCircle, WebhooksLogo, X, YoutubeLogo } from "@phosphor-icons/react";
 import { clsx } from "clsx";
 import { twMerge } from "tailwind-merge";
+import { DndContext, DragOverlay, KeyboardSensor, PointerSensor, closestCenter, rectIntersection, useDraggable, useDroppable, useSensor, useSensors } from "@dnd-kit/core";
+import { SortableContext, arrayMove, sortableKeyboardCoordinates, useSortable, verticalListSortingStrategy } from "@dnd-kit/sortable";
+import { CSS } from "@dnd-kit/utilities";
 import { autoUpdate, flip, offset, shift, useFloating } from "@floating-ui/react";
 import { Extension, InputRule, Node as Node$1, PasteRule, escapeForRegEx, mergeAttributes } from "@tiptap/core";
 import CharacterCount from "@tiptap/extension-character-count";
@@ -27,9 +30,6 @@ import { BlockRenderer } from "@emdash-cms/blocks";
 import DOMPurify from "dompurify";
 import { Marked, Renderer } from "marked";
 import { useHotkeys } from "react-hotkeys-hook";
-import { DndContext, DragOverlay, KeyboardSensor, PointerSensor, closestCenter, rectIntersection, useDraggable, useDroppable, useSensor, useSensors } from "@dnd-kit/core";
-import { SortableContext, sortableKeyboardCoordinates, useSortable, verticalListSortingStrategy } from "@dnd-kit/sortable";
-import { CSS } from "@dnd-kit/utilities";
 
 //#region src/components/ThemeProvider.tsx
 const ThemeContext = React.createContext(void 0);
@@ -54,15 +54,8 @@ function ThemeProvider({ children, defaultTheme = "system" }) {
 		return theme;
 	});
 	React.useEffect(() => {
-		const root = document.documentElement;
-		root.setAttribute("data-theme", "classic");
-		if (theme === "system") {
-			root.removeAttribute("data-mode");
-			setResolvedTheme(getSystemTheme());
-		} else {
-			root.setAttribute("data-mode", theme);
-			setResolvedTheme(theme);
-		}
+		if (theme === "system") setResolvedTheme(getSystemTheme());
+		else setResolvedTheme(theme);
 	}, [theme]);
 	React.useEffect(() => {
 		if (theme !== "system") return;
@@ -73,6 +66,11 @@ function ThemeProvider({ children, defaultTheme = "system" }) {
 		mediaQuery.addEventListener("change", handler);
 		return () => mediaQuery.removeEventListener("change", handler);
 	}, [theme]);
+	React.useEffect(() => {
+		const root = document.documentElement;
+		root.setAttribute("data-theme", "classic");
+		root.setAttribute("data-mode", resolvedTheme);
+	}, [resolvedTheme]);
 	const setTheme = React.useCallback((newTheme) => {
 		setThemeState(newTheme);
 		localStorage.setItem(STORAGE_KEY, newTheme);
@@ -2416,6 +2414,58 @@ function useCurrentUser() {
 	});
 }
 
+//#endregion
+//#region src/lib/url.ts
+/**
+* Shared URL validation and transformation utilities
+*/
+const DEFAULT_REDIRECT = "/_emdash/admin";
+const LEADING_SLASHES = /^\/+/;
+/**
+* Sanitize a redirect URL to prevent open-redirect and javascript: XSS attacks.
+*
+* Only allows relative paths starting with `/`. Rejects protocol-relative
+* URLs (`//evil.com`), backslash tricks (`/\evil.com`), and non-path schemes
+* like `javascript:`.
+*
+* Returns the default admin URL when the input is unsafe.
+*/
+function sanitizeRedirectUrl(raw) {
+	if (raw.startsWith("/") && !raw.startsWith("//") && !raw.includes("\\")) return raw;
+	return DEFAULT_REDIRECT;
+}
+/**
+* Build a public content URL from collection metadata and slug.
+*
+* Uses the collection's `urlPattern` when available (e.g. `/blog/{slug}`),
+* otherwise falls back to `/{collection}/{slug}`. Leading slashes are
+* stripped from the slug to prevent protocol-relative URLs.
+*/
+function contentUrl(collection, slug, urlPattern) {
+	const safe = slug.replace(LEADING_SLASHES, "");
+	return urlPattern ? urlPattern.replace("{slug}", safe) : `/${collection}/${safe}`;
+}
+/** Matches http:// or https:// URLs */
+const SAFE_URL_RE = /^https?:\/\//i;
+/** Returns true if the URL uses a safe scheme (http/https) */
+function isSafeUrl$1(url) {
+	return SAFE_URL_RE.test(url);
+}
+/**
+* Build an icon URL with a width query param, or return null for unsafe URLs.
+* Validates the URL scheme and appends `?w=<width>` for image resizing.
+*/
+function safeIconUrl(url, width) {
+	if (!SAFE_URL_RE.test(url)) return null;
+	try {
+		const u = new URL(url);
+		u.searchParams.set("w", String(width));
+		return u.href;
+	} catch {
+		return null;
+	}
+}
+
 //#endregion
 //#region src/components/BlockKitFieldWidget.tsx
 /**
@@ -2664,6 +2714,242 @@ var PluginFieldErrorBoundary = class extends React.Component {
 	}
 };
 
+//#endregion
+//#region src/components/RepeaterField.tsx
+/**
+* RepeaterField — renders a list of repeating sub-field groups in the content editor.
+*
+* Each item is a collapsible card containing the defined sub-fields.
+* Items can be added, removed, and reordered via drag-and-drop.
+*/
+function ensureKeys(items) {
+	return items.map((item, i) => {
+		const obj = typeof item === "object" && item !== null ? item : {};
+		return {
+			...obj,
+			_key: obj._key || `item-${i}-${Date.now()}`
+		};
+	});
+}
+function stripKeys(items) {
+	return items.map(({ _key, ...rest }) => rest);
+}
+function RepeaterField({ label, id, value, onChange, subFields, minItems = 0, maxItems }) {
+	const rawItems = Array.isArray(value) ? value : [];
+	const [items, setItems] = React.useState(() => ensureKeys(rawItems));
+	const [collapsedItems, setCollapsedItems] = React.useState(/* @__PURE__ */ new Set());
+	React.useEffect(() => {
+		setItems(ensureKeys(Array.isArray(value) ? value : []));
+	}, [value]);
+	const emitChange = (updated) => {
+		setItems(updated);
+		onChange(stripKeys(updated));
+	};
+	const handleAdd = () => {
+		if (maxItems && items.length >= maxItems) return;
+		const newItem = { _key: `item-${Date.now()}` };
+		for (const sf of subFields) newItem[sf.slug] = sf.type === "boolean" ? false : sf.type === "number" || sf.type === "integer" ? null : "";
+		emitChange([...items, newItem]);
+	};
+	const handleRemove = (key) => {
+		if (items.length <= minItems) return;
+		emitChange(items.filter((item) => item._key !== key));
+	};
+	const handleItemChange = (key, fieldSlug, fieldValue) => {
+		emitChange(items.map((item) => item._key === key ? {
+			...item,
+			[fieldSlug]: fieldValue
+		} : item));
+	};
+	const handleDragEnd = (event) => {
+		const { active, over } = event;
+		if (!over || active.id === over.id) return;
+		const oldIndex = items.findIndex((item) => item._key === active.id);
+		const newIndex = items.findIndex((item) => item._key === over.id);
+		if (oldIndex === -1 || newIndex === -1) return;
+		emitChange(arrayMove(items, oldIndex, newIndex));
+	};
+	const toggleCollapse = (key) => {
+		setCollapsedItems((prev) => {
+			const next = new Set(prev);
+			if (next.has(key)) next.delete(key);
+			else next.add(key);
+			return next;
+		});
+	};
+	const canAdd = !maxItems || items.length < maxItems;
+	const canRemove = items.length > minItems;
+	return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-2",
+		children: [/* @__PURE__ */ jsxs("div", {
+			className: "flex items-center justify-between",
+			children: [/* @__PURE__ */ jsxs("label", {
+				htmlFor: id,
+				className: "text-sm font-medium",
+				children: [label, items.length > 0 && /* @__PURE__ */ jsxs("span", {
+					className: "ml-2 text-kumo-subtle font-normal",
+					children: [
+						"(",
+						items.length,
+						" items)"
+					]
+				})]
+			}), canAdd && /* @__PURE__ */ jsx(Button, {
+				variant: "outline",
+				size: "sm",
+				icon: /* @__PURE__ */ jsx(Plus, {}),
+				onClick: handleAdd,
+				children: "Add Item"
+			})]
+		}), items.length === 0 ? /* @__PURE__ */ jsxs("div", {
+			className: "border-2 border-dashed rounded-lg p-6 text-center text-kumo-subtle",
+			children: [/* @__PURE__ */ jsx("p", {
+				className: "text-sm",
+				children: "No items yet"
+			}), canAdd && /* @__PURE__ */ jsx(Button, {
+				variant: "outline",
+				size: "sm",
+				className: "mt-2",
+				icon: /* @__PURE__ */ jsx(Plus, {}),
+				onClick: handleAdd,
+				children: "Add First Item"
+			})]
+		}) : /* @__PURE__ */ jsx(DndContext, {
+			collisionDetection: closestCenter,
+			onDragEnd: handleDragEnd,
+			children: /* @__PURE__ */ jsx(SortableContext, {
+				items: items.map((item) => item._key),
+				strategy: verticalListSortingStrategy,
+				children: /* @__PURE__ */ jsx("div", {
+					className: "space-y-2",
+					children: items.map((item, index) => /* @__PURE__ */ jsx(SortableRepeaterItem, {
+						item,
+						index,
+						subFields,
+						isCollapsed: collapsedItems.has(item._key),
+						onToggleCollapse: () => toggleCollapse(item._key),
+						onRemove: canRemove ? () => handleRemove(item._key) : void 0,
+						onChange: (fieldSlug, fieldValue) => handleItemChange(item._key, fieldSlug, fieldValue)
+					}, item._key))
+				})
+			})
+		})]
+	});
+}
+function SortableRepeaterItem({ item, index, subFields, isCollapsed, onToggleCollapse, onRemove, onChange }) {
+	const { attributes, listeners, setNodeRef, transform, transition, isDragging } = useSortable({ id: item._key });
+	const style = {
+		transform: CSS.Transform.toString(transform),
+		transition
+	};
+	const summaryField = subFields.find((sf) => sf.type === "string" || sf.type === "text");
+	const summaryLabel = (summaryField ? item[summaryField.slug] || "" : "") || `Item ${index + 1}`;
+	return /* @__PURE__ */ jsxs("div", {
+		ref: setNodeRef,
+		style,
+		className: cn("border rounded-lg bg-kumo-base", isDragging && "opacity-50 ring-2 ring-kumo-brand"),
+		children: [/* @__PURE__ */ jsxs("div", {
+			className: "flex items-center gap-2 px-3 py-2 border-b cursor-pointer",
+			onClick: onToggleCollapse,
+			children: [
+				/* @__PURE__ */ jsx(DotsSixVertical, {
+					className: "h-4 w-4 text-kumo-subtle cursor-grab shrink-0",
+					...attributes,
+					...listeners,
+					onClick: (e) => e.stopPropagation()
+				}),
+				isCollapsed ? /* @__PURE__ */ jsx(CaretRight, { className: "h-4 w-4 text-kumo-subtle shrink-0" }) : /* @__PURE__ */ jsx(CaretDown, { className: "h-4 w-4 text-kumo-subtle shrink-0" }),
+				/* @__PURE__ */ jsx("span", {
+					className: "text-sm font-medium flex-1 truncate",
+					children: summaryLabel
+				}),
+				onRemove && /* @__PURE__ */ jsx(Button, {
+					variant: "ghost",
+					shape: "square",
+					onClick: (e) => {
+						e.stopPropagation();
+						onRemove();
+					},
+					"aria-label": `Remove item ${index + 1}`,
+					children: /* @__PURE__ */ jsx(Trash, { className: "h-3.5 w-3.5 text-kumo-danger" })
+				})
+			]
+		}), !isCollapsed && /* @__PURE__ */ jsx("div", {
+			className: "p-3 space-y-3",
+			children: subFields.map((sf) => /* @__PURE__ */ jsx(SubFieldInput, {
+				subField: sf,
+				value: item[sf.slug],
+				onChange: (v) => onChange(sf.slug, v)
+			}, sf.slug))
+		})]
+	});
+}
+function SubFieldInput({ subField, value, onChange }) {
+	switch (subField.type) {
+		case "string": return /* @__PURE__ */ jsx(Input, {
+			label: subField.label,
+			value: typeof value === "string" ? value : "",
+			onChange: (e) => onChange(e.target.value),
+			required: subField.required
+		});
+		case "text": return /* @__PURE__ */ jsx(InputArea, {
+			label: subField.label,
+			value: typeof value === "string" ? value : "",
+			onChange: (e) => onChange(e.target.value),
+			required: subField.required,
+			rows: 3
+		});
+		case "number":
+		case "integer": return /* @__PURE__ */ jsx(Input, {
+			label: subField.label,
+			type: "number",
+			value: typeof value === "number" ? String(value) : "",
+			onChange: (e) => onChange(e.target.value ? Number(e.target.value) : null),
+			required: subField.required,
+			step: subField.type === "integer" ? "1" : "any"
+		});
+		case "boolean": return /* @__PURE__ */ jsxs("label", {
+			className: "flex items-center gap-2",
+			children: [/* @__PURE__ */ jsx("input", {
+				type: "checkbox",
+				checked: Boolean(value),
+				onChange: (e) => onChange(e.target.checked)
+			}), /* @__PURE__ */ jsx("span", {
+				className: "text-sm",
+				children: subField.label
+			})]
+		});
+		case "datetime": return /* @__PURE__ */ jsx(Input, {
+			label: subField.label,
+			type: "datetime-local",
+			value: typeof value === "string" ? value : "",
+			onChange: (e) => onChange(e.target.value),
+			required: subField.required
+		});
+		case "select": return /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("label", {
+			className: "text-sm font-medium",
+			children: subField.label
+		}), /* @__PURE__ */ jsxs("select", {
+			className: "w-full mt-1 rounded-md border px-3 py-2 text-sm",
+			value: typeof value === "string" ? value : "",
+			onChange: (e) => onChange(e.target.value),
+			required: subField.required,
+			children: [/* @__PURE__ */ jsx("option", {
+				value: "",
+				children: "Select..."
+			}), subField.options?.map((opt) => /* @__PURE__ */ jsx("option", {
+				value: opt,
+				children: opt
+			}, opt))]
+		})] });
+		default: return /* @__PURE__ */ jsx(Input, {
+			label: subField.label,
+			value: typeof value === "string" ? value : "",
+			onChange: (e) => onChange(e.target.value)
+		});
+	}
+}
+
 //#endregion
 //#region src/lib/hooks.ts
 /**
@@ -7185,6 +7471,74 @@ function SaveButton({ isDirty, isSaving, className, disabled, ...props }) {
 	});
 }
 
+//#endregion
+//#region src/components/SeoImageField.tsx
+/**
+* SEO OG Image field for the content editor.
+*
+* Renders an image picker (reusing MediaPickerModal) that stores the
+* selected image URL in `seo.image`. Designed to sit next to the
+* Featured Image field in a two-column grid.
+*/
+function SeoImageField({ seo, onChange }) {
+	const [pickerOpen, setPickerOpen] = React.useState(false);
+	const imageUrl = seo?.image || null;
+	const handleSelect = (item) => {
+		onChange({ image: !item.provider || item.provider === "local" ? `/_emdash/api/media/file/${item.storageKey || item.id}` : item.url });
+	};
+	const handleRemove = () => {
+		onChange({ image: null });
+	};
+	return /* @__PURE__ */ jsxs("div", { children: [
+		/* @__PURE__ */ jsx(Label, { children: "OG Image" }),
+		imageUrl ? /* @__PURE__ */ jsxs("div", {
+			className: "mt-2 relative group",
+			children: [/* @__PURE__ */ jsx("img", {
+				src: imageUrl,
+				alt: "",
+				className: "max-h-48 rounded-lg border object-cover"
+			}), /* @__PURE__ */ jsxs("div", {
+				className: "absolute top-2 right-2 opacity-0 group-hover:opacity-100 transition-opacity flex gap-1",
+				children: [/* @__PURE__ */ jsx(Button, {
+					type: "button",
+					size: "sm",
+					variant: "secondary",
+					onClick: () => setPickerOpen(true),
+					children: "Change"
+				}), /* @__PURE__ */ jsx(Button, {
+					type: "button",
+					shape: "square",
+					variant: "destructive",
+					className: "h-8 w-8",
+					onClick: handleRemove,
+					"aria-label": "Remove image",
+					children: /* @__PURE__ */ jsx(X, { className: "h-4 w-4" })
+				})]
+			})]
+		}) : /* @__PURE__ */ jsx(Button, {
+			type: "button",
+			variant: "outline",
+			className: "mt-2 w-full h-32 border-dashed",
+			onClick: () => setPickerOpen(true),
+			children: /* @__PURE__ */ jsxs("div", {
+				className: "flex flex-col items-center gap-2 text-kumo-subtle",
+				children: [/* @__PURE__ */ jsx(Image$1, { className: "h-8 w-8" }), /* @__PURE__ */ jsx("span", { children: "Select OG image" })]
+			})
+		}),
+		/* @__PURE__ */ jsx("p", {
+			className: "text-xs text-kumo-subtle mt-1",
+			children: "Image shown when this page is shared on social media"
+		}),
+		/* @__PURE__ */ jsx(MediaPickerModal, {
+			open: pickerOpen,
+			onOpenChange: setPickerOpen,
+			onSelect: handleSelect,
+			mimeTypeFilter: "image/",
+			title: "Select OG Image"
+		})
+	] });
+}
+
 //#endregion
 //#region src/components/SeoPanel.tsx
 /**
@@ -7509,7 +7863,7 @@ function formatScheduledDate(dateStr) {
 /**
 * Content editor with dynamic field rendering
 */
-function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSaving, onSave, onAutosave, isAutosaving, lastAutosaveAt, onPublish, onUnpublish, onDiscardDraft, onSchedule, onUnschedule, isScheduling, supportsDrafts = false, supportsRevisions = false, currentUser, users, onAuthorChange, availableBylines, selectedBylines, onBylinesChange, onQuickCreateByline, onQuickEditByline, onDelete, isDeleting, i18n, translations, onTranslate, pluginBlocks, hasSeo = false, onSeoChange, manifest }) {
+function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSaving, onSave, onAutosave, isAutosaving, lastAutosaveAt, onPublish, onUnpublish, onDiscardDraft, onSchedule, onUnschedule, isScheduling, supportsDrafts = false, supportsRevisions = false, supportsPreview = false, currentUser, users, onAuthorChange, availableBylines, selectedBylines, onBylinesChange, onQuickCreateByline, onQuickEditByline, onDelete, isDeleting, i18n, translations, onTranslate, pluginBlocks, hasSeo = false, onSeoChange, manifest }) {
 	const [formData, setFormData] = React.useState(item?.data || {});
 	const [slug, setSlug] = React.useState(item?.slug || "");
 	const [slugTouched, setSlugTouched] = React.useState(!!item?.slug);
@@ -7624,15 +7978,16 @@ function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSav
 		});
 	};
 	const [isLoadingPreview, setIsLoadingPreview] = React.useState(false);
+	const urlPattern = manifest?.collections[collection]?.urlPattern;
 	const handlePreview = async () => {
 		if (!item?.id) return;
 		setIsLoadingPreview(true);
 		try {
 			const result = await getPreviewUrl(collection, item.id);
 			if (result?.url) window.open(result.url, "_blank", "noopener,noreferrer");
-			else window.open(`/${collection}/${slug || item.id}`, "_blank", "noopener,noreferrer");
+			else window.open(contentUrl(collection, slug || item.id, urlPattern), "_blank", "noopener,noreferrer");
 		} catch {
-			window.open(`/${collection}/${slug || item?.id}`, "_blank", "noopener,noreferrer");
+			window.open(contentUrl(collection, slug || item?.id || "", urlPattern), "_blank", "noopener,noreferrer");
 		} finally {
 			setIsLoadingPreview(false);
 		}
@@ -7743,7 +8098,7 @@ function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSav
 							"aria-hidden": "true"
 						})
 					}),
-					!isNew && /* @__PURE__ */ jsx(Button, {
+					!isNew && supportsPreview && /* @__PURE__ */ jsx(Button, {
 						variant: "outline",
 						type: "button",
 						onClick: handlePreview,
@@ -7756,58 +8111,71 @@ function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSav
 						isDirty,
 						isSaving: isSaving || false
 					}),
-					!isNew && /* @__PURE__ */ jsxs(Fragment, { children: [supportsDrafts && hasPendingChanges && onDiscardDraft && /* @__PURE__ */ jsxs(Dialog.Root, {
-						disablePointerDismissal: true,
-						children: [/* @__PURE__ */ jsx(Dialog.Trigger, { render: (p) => /* @__PURE__ */ jsx(Button, {
-							...p,
+					!isNew && /* @__PURE__ */ jsxs(Fragment, { children: [
+						supportsDrafts && hasPendingChanges && onDiscardDraft && /* @__PURE__ */ jsxs(Dialog.Root, {
+							disablePointerDismissal: true,
+							children: [/* @__PURE__ */ jsx(Dialog.Trigger, { render: (p) => /* @__PURE__ */ jsx(Button, {
+								...p,
+								type: "button",
+								variant: "outline",
+								size: "sm",
+								icon: /* @__PURE__ */ jsx(X, {}),
+								children: "Discard changes"
+							}) }), /* @__PURE__ */ jsxs(Dialog, {
+								className: "p-6",
+								size: "sm",
+								children: [
+									/* @__PURE__ */ jsx(Dialog.Title, {
+										className: "text-lg font-semibold",
+										children: "Discard draft changes?"
+									}),
+									/* @__PURE__ */ jsx(Dialog.Description, {
+										className: "text-kumo-subtle",
+										children: "This will revert to the published version. Your draft changes will be lost."
+									}),
+									/* @__PURE__ */ jsxs("div", {
+										className: "mt-6 flex justify-end gap-2",
+										children: [/* @__PURE__ */ jsx(Dialog.Close, { render: (p) => /* @__PURE__ */ jsx(Button, {
+											...p,
+											variant: "secondary",
+											children: "Cancel"
+										}) }), /* @__PURE__ */ jsx(Dialog.Close, { render: (p) => /* @__PURE__ */ jsx(Button, {
+											...p,
+											variant: "destructive",
+											onClick: onDiscardDraft,
+											children: "Discard changes"
+										}) })]
+									})
+								]
+							})]
+						}),
+						isLive ? /* @__PURE__ */ jsx(Fragment, { children: hasPendingChanges ? /* @__PURE__ */ jsx(Button, {
+							type: "button",
+							variant: "primary",
+							onClick: onPublish,
+							children: "Publish changes"
+						}) : /* @__PURE__ */ jsx(Button, {
 							type: "button",
 							variant: "outline",
-							size: "sm",
-							icon: /* @__PURE__ */ jsx(X, {}),
-							children: "Discard changes"
-						}) }), /* @__PURE__ */ jsxs(Dialog, {
-							className: "p-6",
-							size: "sm",
-							children: [
-								/* @__PURE__ */ jsx(Dialog.Title, {
-									className: "text-lg font-semibold",
-									children: "Discard draft changes?"
-								}),
-								/* @__PURE__ */ jsx(Dialog.Description, {
-									className: "text-kumo-subtle",
-									children: "This will revert to the published version. Your draft changes will be lost."
-								}),
-								/* @__PURE__ */ jsxs("div", {
-									className: "mt-6 flex justify-end gap-2",
-									children: [/* @__PURE__ */ jsx(Dialog.Close, { render: (p) => /* @__PURE__ */ jsx(Button, {
-										...p,
-										variant: "secondary",
-										children: "Cancel"
-									}) }), /* @__PURE__ */ jsx(Dialog.Close, { render: (p) => /* @__PURE__ */ jsx(Button, {
-										...p,
-										variant: "destructive",
-										onClick: onDiscardDraft,
-										children: "Discard changes"
-									}) })]
-								})
-							]
-						})]
-					}), isLive ? /* @__PURE__ */ jsx(Fragment, { children: hasPendingChanges ? /* @__PURE__ */ jsx(Button, {
-						type: "button",
-						variant: "primary",
-						onClick: onPublish,
-						children: "Publish changes"
-					}) : /* @__PURE__ */ jsx(Button, {
-						type: "button",
-						variant: "outline",
-						onClick: onUnpublish,
-						children: "Unpublish"
-					}) }) : /* @__PURE__ */ jsx(Button, {
-						type: "button",
-						variant: "secondary",
-						onClick: onPublish,
-						children: "Publish"
-					})] })
+							onClick: onUnpublish,
+							children: "Unpublish"
+						}) }) : /* @__PURE__ */ jsx(Button, {
+							type: "button",
+							variant: "secondary",
+							onClick: onPublish,
+							children: "Publish"
+						}),
+						isLive && item?.slug && /* @__PURE__ */ jsxs("a", {
+							href: contentUrl(collection, item.slug, urlPattern),
+							target: "_blank",
+							rel: "noopener noreferrer",
+							className: buttonVariants({ variant: "outline" }),
+							children: [/* @__PURE__ */ jsx(ArrowSquareOut, {
+								className: "mr-2 h-4 w-4",
+								"aria-hidden": "true"
+							}), "Live View"]
+						})
+					] })
 				]
 			})]
 		}), /* @__PURE__ */ jsxs("div", {
@@ -7818,18 +8186,28 @@ function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSav
 					className: cn("rounded-lg border bg-kumo-base p-6", isDistractionFree && "border-0 bg-transparent p-0"),
 					children: /* @__PURE__ */ jsx("div", {
 						className: "space-y-4",
-						children: Object.entries(fields).map(([name, field]) => /* @__PURE__ */ jsx(FieldRenderer, {
-							name,
-							field,
-							value: formData[name],
-							onChange: handleFieldChange,
-							onEditorReady: field.kind === "portableText" ? setPortableTextEditor : void 0,
-							minimal: isDistractionFree,
-							pluginBlocks,
-							onBlockSidebarOpen: field.kind === "portableText" ? handleBlockSidebarOpen : void 0,
-							onBlockSidebarClose: field.kind === "portableText" ? handleBlockSidebarClose : void 0,
-							manifest
-						}, name))
+						children: Object.entries(fields).map(([name, field]) => {
+							const fieldEl = /* @__PURE__ */ jsx(FieldRenderer, {
+								name,
+								field,
+								value: formData[name],
+								onChange: handleFieldChange,
+								onEditorReady: field.kind === "portableText" ? setPortableTextEditor : void 0,
+								minimal: isDistractionFree,
+								pluginBlocks,
+								onBlockSidebarOpen: field.kind === "portableText" ? handleBlockSidebarOpen : void 0,
+								onBlockSidebarClose: field.kind === "portableText" ? handleBlockSidebarClose : void 0,
+								manifest
+							}, name);
+							if (name === "featured_image" && field.kind === "image" && hasSeo && !isNew && onSeoChange) return /* @__PURE__ */ jsxs("div", {
+								className: "grid grid-cols-1 gap-6 md:grid-cols-2",
+								children: [/* @__PURE__ */ jsx("div", { children: fieldEl }), /* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx(SeoImageField, {
+									seo: item?.seo,
+									onChange: onSeoChange
+								}) })]
+							}, `${name}-with-seo`);
+							return fieldEl;
+						})
 					})
 				})
 			}), /* @__PURE__ */ jsx("div", {
@@ -8204,6 +8582,25 @@ function FieldRenderer({ name, field, value, onChange, onEditorReady, minimal, p
 				}, opt.value))
 			});
 		}
+		case "multiSelect": {
+			const selected = Array.isArray(value) ? value : [];
+			return /* @__PURE__ */ jsxs("fieldset", { children: [/* @__PURE__ */ jsx(Label, {
+				className: labelClass,
+				children: label
+			}), /* @__PURE__ */ jsx("div", {
+				className: "mt-2 flex flex-wrap gap-x-4 gap-y-2",
+				children: field.options?.map((opt) => {
+					const isChecked = selected.includes(opt.value);
+					return /* @__PURE__ */ jsx(Checkbox, {
+						label: opt.label,
+						checked: isChecked,
+						onCheckedChange: (checked) => {
+							handleChange(checked ? [...selected, opt.value] : selected.filter((v) => v !== opt.value));
+						}
+					}, opt.value);
+				})
+			})] });
+		}
 		case "datetime": return /* @__PURE__ */ jsx(Input, {
 			label,
 			id,
@@ -8214,10 +8611,25 @@ function FieldRenderer({ name, field, value, onChange, onEditorReady, minimal, p
 		});
 		case "image": return /* @__PURE__ */ jsx(ImageFieldRenderer, {
 			label,
+			description: name === "featured_image" ? "Used as the main visual for this post on listing pages and at the top of the post" : void 0,
 			value: value != null && typeof value === "object" ? value : void 0,
 			onChange: handleChange,
 			required: field.required
 		});
+		case "repeater": {
+			const validation = field.validation;
+			const subFields = validation?.subFields ?? [];
+			return /* @__PURE__ */ jsx(RepeaterField, {
+				label,
+				id,
+				value,
+				onChange: handleChange,
+				required: field.required,
+				subFields,
+				minItems: typeof validation?.minItems === "number" ? validation.minItems : void 0,
+				maxItems: typeof validation?.maxItems === "number" ? validation.maxItems : void 0
+			});
+		}
 		default: return /* @__PURE__ */ jsx(Input, {
 			label,
 			id,
@@ -8227,7 +8639,7 @@ function FieldRenderer({ name, field, value, onChange, onEditorReady, minimal, p
 		});
 	}
 }
-function ImageFieldRenderer({ label, value, onChange, required }) {
+function ImageFieldRenderer({ label, description, value, onChange, required }) {
 	const [pickerOpen, setPickerOpen] = React.useState(false);
 	const displayUrl = typeof value === "string" ? value : value?.previewUrl || value?.src || (value && (!value.provider || value.provider === "local") ? `/_emdash/api/media/file/${typeof value.meta?.storageKey === "string" ? value.meta.storageKey : value.id}` : void 0);
 	const handleSelect = (item) => {
@@ -8291,6 +8703,10 @@ function ImageFieldRenderer({ label, value, onChange, required }) {
 			mimeTypeFilter: "image/",
 			title: `Select ${label}`
 		}),
+		description && /* @__PURE__ */ jsx("p", {
+			className: "text-xs text-kumo-subtle mt-1",
+			children: description
+		}),
 		required && !displayUrl && /* @__PURE__ */ jsx("p", {
 			className: "text-sm text-kumo-danger mt-1",
 			children: "This field is required"
@@ -8651,7 +9067,7 @@ function getItemTitle$1(item) {
 /**
 * Content list view with table display and trash tab
 */
-function ContentList({ collection, collectionLabel, items, trashedItems = [], isLoading, isTrashedLoading, onDelete, onDuplicate, onRestore, onPermanentDelete, onLoadMore, onLoadMoreTrashed, hasMore, hasMoreTrashed, trashedCount = 0, i18n, activeLocale, onLocaleChange }) {
+function ContentList({ collection, collectionLabel, items, trashedItems = [], isLoading, isTrashedLoading, onDelete, onDuplicate, onRestore, onPermanentDelete, onLoadMore, onLoadMoreTrashed, hasMore, hasMoreTrashed, trashedCount = 0, i18n, activeLocale, onLocaleChange, urlPattern }) {
 	const [activeTab, setActiveTab] = React.useState("all");
 	const [searchQuery, setSearchQuery] = React.useState("");
 	const [page, setPage] = React.useState(0);
@@ -8793,7 +9209,8 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 							collection,
 							onDelete,
 							onDuplicate,
-							showLocale: !!i18n
+							showLocale: !!i18n,
+							urlPattern
 						}, item.id)) })]
 					})
 				}),
@@ -8897,7 +9314,7 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 		]
 	});
 }
-function ContentListItem({ item, collection, onDelete, onDuplicate, showLocale }) {
+function ContentListItem({ item, collection, onDelete, onDuplicate, showLocale, urlPattern }) {
 	const title = getItemTitle$1(item);
 	const date = new Date(item.updatedAt || item.createdAt);
 	return /* @__PURE__ */ jsxs("tr", {
@@ -8938,6 +9355,20 @@ function ContentListItem({ item, collection, onDelete, onDuplicate, showLocale }
 				children: /* @__PURE__ */ jsxs("div", {
 					className: "flex items-center justify-end space-x-1",
 					children: [
+						item.status === "published" && item.slug && /* @__PURE__ */ jsx("a", {
+							href: contentUrl(collection, item.slug, urlPattern),
+							target: "_blank",
+							rel: "noopener noreferrer",
+							"aria-label": `View published ${title}`,
+							className: buttonVariants({
+								variant: "ghost",
+								shape: "square"
+							}),
+							children: /* @__PURE__ */ jsx(ArrowSquareOut, {
+								className: "h-4 w-4",
+								"aria-hidden": "true"
+							})
+						}),
 						/* @__PURE__ */ jsx(Link$1, {
 							to: "/content/$collection/$id",
 							params: {
@@ -9192,6 +9623,12 @@ const FIELD_TYPES = [
 		label: "Slug",
 		description: "URL-friendly identifier",
 		icon: Link$2
+	},
+	{
+		type: "repeater",
+		label: "Repeater",
+		description: "Repeating group of fields",
+		icon: Rows
 	}
 ];
 function getInitialFormState(field) {
@@ -9208,7 +9645,10 @@ function getInitialFormState(field) {
 		min: field.validation?.min?.toString() ?? "",
 		max: field.validation?.max?.toString() ?? "",
 		pattern: field.validation?.pattern ?? "",
-		options: field.validation?.options?.join("\n") ?? ""
+		options: field.validation?.options?.join("\n") ?? "",
+		subFields: field.validation?.subFields ? field.validation.subFields : [],
+		minItems: field.validation?.minItems?.toString() ?? "",
+		maxItems: field.validation?.maxItems?.toString() ?? ""
 	};
 	return {
 		step: "type",
@@ -9223,7 +9663,10 @@ function getInitialFormState(field) {
 		min: "",
 		max: "",
 		pattern: "",
-		options: ""
+		options: "",
+		subFields: [],
+		minItems: "",
+		maxItems: ""
 	};
 }
 /**
@@ -9267,6 +9710,16 @@ function FieldEditor({ open, onOpenChange, field, onSave, isSaving }) {
 			const optionList = options.split("\n").map((o) => o.trim()).filter(Boolean);
 			if (optionList.length > 0) validation.options = optionList;
 		}
+		if (selectedType === "repeater") {
+			if (formState.subFields.length > 0) validation.subFields = formState.subFields.map((sf) => ({
+				slug: sf.slug,
+				type: sf.type,
+				label: sf.label,
+				required: sf.required || void 0
+			}));
+			if (formState.minItems) validation.minItems = parseInt(formState.minItems, 10);
+			if (formState.maxItems) validation.maxItems = parseInt(formState.maxItems, 10);
+		}
 		onSave({
 			slug,
 			label,
@@ -9466,11 +9919,156 @@ function FieldEditor({ open, onOpenChange, field, onSave, isSaving }) {
 							onChange: (e) => setField("options", e.target.value),
 							placeholder: "Option 1\nOption 2\nOption 3",
 							rows: 5
+						}),
+						selectedType === "repeater" && /* @__PURE__ */ jsxs("div", {
+							className: "space-y-4",
+							children: [
+								/* @__PURE__ */ jsxs("div", {
+									className: "flex items-center justify-between",
+									children: [/* @__PURE__ */ jsx("h4", {
+										className: "font-medium text-sm",
+										children: "Sub-Fields"
+									}), /* @__PURE__ */ jsx(Button, {
+										variant: "outline",
+										size: "sm",
+										icon: /* @__PURE__ */ jsx(Plus, {}),
+										onClick: () => setFormState((prev) => ({
+											...prev,
+											subFields: [...prev.subFields, {
+												slug: "",
+												type: "string",
+												label: "",
+												required: false
+											}]
+										})),
+										children: "Add Sub-Field"
+									})]
+								}),
+								formState.subFields.length === 0 && /* @__PURE__ */ jsx("p", {
+									className: "text-sm text-kumo-subtle text-center py-4",
+									children: "Add at least one sub-field to define the repeater structure."
+								}),
+								formState.subFields.map((sf, i) => /* @__PURE__ */ jsxs("div", {
+									className: "flex gap-2 items-start border rounded-lg p-3",
+									children: [/* @__PURE__ */ jsxs("div", {
+										className: "flex-1 space-y-2",
+										children: [/* @__PURE__ */ jsxs("div", {
+											className: "grid grid-cols-2 gap-2",
+											children: [/* @__PURE__ */ jsx(Input, {
+												label: "Label",
+												value: sf.label,
+												onChange: (e) => {
+													const updated = [...formState.subFields];
+													updated[i] = {
+														...sf,
+														label: e.target.value,
+														slug: e.target.value.toLowerCase().replace(SLUG_INVALID_CHARS_REGEX, "_").replace(SLUG_LEADING_TRAILING_REGEX, "")
+													};
+													setFormState((prev) => ({
+														...prev,
+														subFields: updated
+													}));
+												},
+												placeholder: "Field label"
+											}), /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("label", {
+												className: "text-sm font-medium",
+												children: "Type"
+											}), /* @__PURE__ */ jsxs("select", {
+												className: "w-full mt-1 rounded-md border px-3 py-2 text-sm",
+												value: sf.type,
+												onChange: (e) => {
+													const updated = [...formState.subFields];
+													updated[i] = {
+														...sf,
+														type: e.target.value
+													};
+													setFormState((prev) => ({
+														...prev,
+														subFields: updated
+													}));
+												},
+												children: [
+													/* @__PURE__ */ jsx("option", {
+														value: "string",
+														children: "Short Text"
+													}),
+													/* @__PURE__ */ jsx("option", {
+														value: "text",
+														children: "Long Text"
+													}),
+													/* @__PURE__ */ jsx("option", {
+														value: "number",
+														children: "Number"
+													}),
+													/* @__PURE__ */ jsx("option", {
+														value: "integer",
+														children: "Integer"
+													}),
+													/* @__PURE__ */ jsx("option", {
+														value: "boolean",
+														children: "Boolean"
+													}),
+													/* @__PURE__ */ jsx("option", {
+														value: "datetime",
+														children: "Date & Time"
+													}),
+													/* @__PURE__ */ jsx("option", {
+														value: "select",
+														children: "Select"
+													})
+												]
+											})] })]
+										}), /* @__PURE__ */ jsxs("label", {
+											className: "flex items-center gap-2 text-sm",
+											children: [/* @__PURE__ */ jsx("input", {
+												type: "checkbox",
+												checked: sf.required,
+												onChange: (e) => {
+													const updated = [...formState.subFields];
+													updated[i] = {
+														...sf,
+														required: e.target.checked
+													};
+													setFormState((prev) => ({
+														...prev,
+														subFields: updated
+													}));
+												}
+											}), "Required"]
+										})]
+									}), /* @__PURE__ */ jsx(Button, {
+										variant: "ghost",
+										shape: "square",
+										onClick: () => setFormState((prev) => ({
+											...prev,
+											subFields: prev.subFields.filter((_, j) => j !== i)
+										})),
+										"aria-label": "Remove sub-field",
+										children: /* @__PURE__ */ jsx(Trash, { className: "h-4 w-4 text-kumo-danger" })
+									})]
+								}, i)),
+								/* @__PURE__ */ jsxs("div", {
+									className: "grid grid-cols-2 gap-4",
+									children: [/* @__PURE__ */ jsx(Input, {
+										label: "Min Items",
+										type: "number",
+										value: formState.minItems,
+										onChange: (e) => setField("minItems", e.target.value),
+										placeholder: "0"
+									}), /* @__PURE__ */ jsx(Input, {
+										label: "Max Items",
+										type: "number",
+										value: formState.maxItems,
+										onChange: (e) => setField("maxItems", e.target.value),
+										placeholder: "No limit"
+									})]
+								})
+							]
 						})
 					]
 				}),
 				step === "config" && /* @__PURE__ */ jsxs("div", {
-					className: "flex flex-col-reverse sm:flex-row sm:justify-end sm:space-x-2",
+					className: "flex flex-col-reverse gap-2 py-2 sm:flex-row sm:justify-end sm:space-x-2",
 					children: [/* @__PURE__ */ jsx(Button, {
 						variant: "outline",
 						onClick: () => onOpenChange(false),
@@ -9478,7 +10076,7 @@ function FieldEditor({ open, onOpenChange, field, onSave, isSaving }) {
 						children: "Cancel"
 					}), /* @__PURE__ */ jsx(Button, {
 						onClick: handleSave,
-						disabled: !slug || !label || isSaving,
+						disabled: !slug || !label || isSaving || selectedType === "repeater" && formState.subFields.length === 0,
 						children: isSaving ? "Saving..." : field ? "Update Field" : "Add Field"
 					})]
 				})
@@ -9558,7 +10156,7 @@ const SYSTEM_FIELDS = [
 /**
 * Content Type editor for creating/editing collections
 */
-function ContentTypeEditor({ collection, isNew, isSaving, onSave, onAddField, onUpdateField, onDeleteField, onReorderFields: _onReorderFields }) {
+function ContentTypeEditor({ collection, isNew, isSaving, onSave, onAddField, onUpdateField, onDeleteField, onReorderFields }) {
 	useNavigate$1();
 	const [slug, setSlug] = React.useState(collection?.slug ?? "");
 	const [label, setLabel] = React.useState(collection?.label ?? "");
@@ -9651,6 +10249,16 @@ function ContentTypeEditor({ collection, isNew, isSaving, onSave, onAddField, on
 	};
 	const isFromCode = collection?.source === "code";
 	const fields = collection?.fields ?? [];
+	const sensors = useSensors(useSensor(PointerSensor, { activationConstraint: { distance: 8 } }), useSensor(KeyboardSensor, { coordinateGetter: sortableKeyboardCoordinates }));
+	const handleDragEnd = (event) => {
+		const { active, over } = event;
+		if (!over || active.id === over.id) return;
+		const oldIndex = fields.findIndex((f) => f.id === active.id);
+		const newIndex = fields.findIndex((f) => f.id === over.id);
+		if (oldIndex === -1 || newIndex === -1) return;
+		const reordered = arrayMove(fields, oldIndex, newIndex);
+		onReorderFields?.(reordered.map((f) => f.slug));
+	};
 	return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
 		children: [
@@ -9933,14 +10541,23 @@ function ContentTypeEditor({ collection, isNew, isSaving, onSave, onAddField, on
 							}) : /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx("div", {
 								className: "px-4 py-2 text-xs font-medium text-kumo-subtle uppercase tracking-wider border-b",
 								children: "Custom Fields"
-							}), /* @__PURE__ */ jsx("div", {
-								className: "divide-y",
-								children: fields.map((field) => /* @__PURE__ */ jsx(FieldRow, {
-									field,
-									isFromCode,
-									onEdit: () => handleEditField(field),
-									onDelete: () => setDeleteFieldTarget(field)
-								}, field.id))
+							}), /* @__PURE__ */ jsx(DndContext, {
+								sensors,
+								collisionDetection: closestCenter,
+								onDragEnd: handleDragEnd,
+								children: /* @__PURE__ */ jsx(SortableContext, {
+									items: fields.map((f) => f.id),
+									strategy: verticalListSortingStrategy,
+									children: /* @__PURE__ */ jsx("div", {
+										className: "divide-y",
+										children: fields.map((field) => /* @__PURE__ */ jsx(FieldRow, {
+											field,
+											isFromCode,
+											onEdit: () => handleEditField(field),
+											onDelete: () => setDeleteFieldTarget(field)
+										}, field.id))
+									})
+								})
 							})] })
 						]
 					})
@@ -9973,10 +10590,25 @@ function ContentTypeEditor({ collection, isNew, isSaving, onSave, onAddField, on
 	});
 }
 function FieldRow({ field, isFromCode, onEdit, onDelete }) {
+	const { attributes, listeners, setNodeRef, transform, transition, isDragging } = useSortable({
+		id: field.id,
+		disabled: isFromCode
+	});
 	return /* @__PURE__ */ jsxs("div", {
-		className: "flex items-center px-4 py-3 hover:bg-kumo-tint/25",
+		ref: setNodeRef,
+		style: {
+			transform: CSS.Transform.toString(transform),
+			transition
+		},
+		className: cn("flex items-center px-4 py-3 hover:bg-kumo-tint/25", isDragging && "opacity-50"),
 		children: [
-			!isFromCode && /* @__PURE__ */ jsx(DotsSixVertical, { className: "h-5 w-5 mr-3 text-kumo-subtle cursor-grab" }),
+			!isFromCode && /* @__PURE__ */ jsx("button", {
+				...attributes,
+				...listeners,
+				className: "cursor-grab active:cursor-grabbing mr-3",
+				"aria-label": `Drag to reorder ${field.label}`,
+				children: /* @__PURE__ */ jsx(DotsSixVertical, { className: "h-5 w-5 text-kumo-subtle" })
+			}),
 			/* @__PURE__ */ jsxs("div", {
 				className: "flex-1 min-w-0",
 				children: [/* @__PURE__ */ jsxs("div", {
@@ -10875,43 +11507,24 @@ function CheckIcon({ className }) {
 }
 
 //#endregion
-//#region src/lib/url.ts
+//#region src/lib/webauthn-environment.ts
 /**
-* Shared URL validation and transformation utilities
-*/
-const DEFAULT_REDIRECT = "/_emdash/admin";
-/**
-* Sanitize a redirect URL to prevent open-redirect and javascript: XSS attacks.
-*
-* Only allows relative paths starting with `/`. Rejects protocol-relative
-* URLs (`//evil.com`), backslash tricks (`/\evil.com`), and non-path schemes
-* like `javascript:`.
+* WebAuthn is only available in a browser "secure context": HTTPS, or special-cased
+* loopback hosts such as `http://localhost` / `http://127.0.0.1`.
 *
-* Returns the default admin URL when the input is unsafe.
+* An origin like `http://emdash.local:8081` resolves to 127.0.0.1 but is still
+* **not** a secure context, so `PublicKeyCredential` is hidden — the same symptom
+* as an unsupported browser.
 */
-function sanitizeRedirectUrl(raw) {
-	if (raw.startsWith("/") && !raw.startsWith("//") && !raw.includes("\\")) return raw;
-	return DEFAULT_REDIRECT;
+function isWebAuthnSecureContext() {
+	return typeof window !== "undefined" && window.isSecureContext;
 }
-/** Matches http:// or https:// URLs */
-const SAFE_URL_RE = /^https?:\/\//i;
-/** Returns true if the URL uses a safe scheme (http/https) */
-function isSafeUrl$1(url) {
-	return SAFE_URL_RE.test(url);
+function isPublicKeyCredentialConstructorAvailable() {
+	return typeof window !== "undefined" && window.PublicKeyCredential !== void 0 && typeof window.PublicKeyCredential === "function";
 }
-/**
-* Build an icon URL with a width query param, or return null for unsafe URLs.
-* Validates the URL scheme and appends `?w=<width>` for image resizing.
-*/
-function safeIconUrl(url, width) {
-	if (!SAFE_URL_RE.test(url)) return null;
-	try {
-		const u = new URL(url);
-		u.searchParams.set("w", String(width));
-		return u.href;
-	} catch {
-		return null;
-	}
+/** True when the page can use `navigator.credentials` for passkeys. */
+function isPasskeyEnvironmentUsable() {
+	return isWebAuthnSecureContext() && isPublicKeyCredentialConstructorAvailable();
 }
 
 //#endregion
@@ -10933,16 +11546,10 @@ const BASE64URL_UNDERSCORE_REGEX$1 = /_/g;
 const BASE64_PLUS_REGEX$1 = /\+/g;
 const BASE64_SLASH_REGEX$1 = /\//g;
 /**
-* Check if WebAuthn is supported in the current browser
-*/
-function isWebAuthnSupported$1() {
-	return typeof window !== "undefined" && window.PublicKeyCredential !== void 0 && typeof window.PublicKeyCredential === "function";
-}
-/**
 * Check if conditional mediation (autofill) is supported
 */
 async function isConditionalMediationSupported() {
-	if (!isWebAuthnSupported$1()) return false;
+	if (!isPasskeyEnvironmentUsable()) return false;
 	try {
 		return await PublicKeyCredential.isConditionalMediationAvailable?.() ?? false;
 	} catch {
@@ -10976,7 +11583,8 @@ function PasskeyLogin({ optionsEndpoint, verifyEndpoint, onSuccess, onError, sho
 	const [state, setState] = React.useState({ status: "idle" });
 	const [email, setEmail] = React.useState("");
 	const [supportsConditional, setSupportsConditional] = React.useState(false);
-	const isSupported = React.useMemo(() => isWebAuthnSupported$1(), []);
+	const isSupported = React.useMemo(() => isPasskeyEnvironmentUsable(), []);
+	const insecureContext = React.useMemo(() => typeof window !== "undefined" && !isWebAuthnSecureContext(), []);
 	React.useEffect(() => {
 		isConditionalMediationSupported().then(setSupportsConditional);
 	}, []);
@@ -10984,7 +11592,7 @@ function PasskeyLogin({ optionsEndpoint, verifyEndpoint, onSuccess, onError, sho
 		if (!isSupported) {
 			setState({
 				status: "error",
-				message: "WebAuthn is not supported in this browser"
+				message: insecureContext ? "Passkeys require HTTPS or http://localhost (with your port); this hostname is not a secure browser context." : "WebAuthn is not supported in this browser"
 			});
 			return;
 		}
@@ -11017,7 +11625,15 @@ function PasskeyLogin({ optionsEndpoint, verifyEndpoint, onSuccess, onError, sho
 				...useConditional && supportsConditional ? { mediation: "conditional" } : {}
 			};
 			const rawCredential = await navigator.credentials.get(credentialOptions);
-			if (!rawCredential) throw new Error("No credential returned from authenticator");
+			if (!rawCredential) {
+				const message = "No credential returned from authenticator";
+				setState({
+					status: "error",
+					message
+				});
+				onError?.(new Error(message));
+				return;
+			}
 			setState({
 				status: "loading",
 				message: "Verifying..."
@@ -11073,6 +11689,7 @@ function PasskeyLogin({ optionsEndpoint, verifyEndpoint, onSuccess, onError, sho
 		}
 	}, [
 		isSupported,
+		insecureContext,
 		optionsEndpoint,
 		verifyEndpoint,
 		email,
@@ -11084,10 +11701,34 @@ function PasskeyLogin({ optionsEndpoint, verifyEndpoint, onSuccess, onError, sho
 		className: "rounded-lg border border-kumo-danger/50 bg-kumo-danger/10 p-4",
 		children: [/* @__PURE__ */ jsx("h3", {
 			className: "font-medium text-kumo-danger",
-			children: "Passkeys Not Supported"
+			children: "Passkeys Not Available Here"
 		}), /* @__PURE__ */ jsx("p", {
 			className: "mt-1 text-sm text-kumo-subtle",
-			children: "Your browser doesn't support passkeys. Please use a modern browser like Chrome, Safari, Firefox, or Edge."
+			children: insecureContext ? /* @__PURE__ */ jsxs(Fragment, { children: [
+				"Passkeys require a ",
+				/* @__PURE__ */ jsx("strong", {
+					className: "text-kumo-default",
+					children: "secure context"
+				}),
+				": use",
+				" ",
+				/* @__PURE__ */ jsx("strong", {
+					className: "text-kumo-default",
+					children: "HTTPS"
+				}),
+				", or open the admin at",
+				" ",
+				/* @__PURE__ */ jsx("strong", {
+					className: "text-kumo-default",
+					children: "http://localhost"
+				}),
+				" (with your dev port). Plain ",
+				/* @__PURE__ */ jsx("code", {
+					className: "text-xs",
+					children: "http://"
+				}),
+				" on a custom hostname is not treated as secure, even on loopback."
+			] }) : /* @__PURE__ */ jsx(Fragment, { children: "Your browser doesn't support passkeys. Please use a modern browser like Chrome, Safari, Firefox, or Edge." })
 		})]
 	});
 	return /* @__PURE__ */ jsxs("div", {
@@ -11125,6 +11766,258 @@ function PasskeyLogin({ optionsEndpoint, verifyEndpoint, onSuccess, onError, sho
 	});
 }
 
+//#endregion
+//#region src/components/Logo.tsx
+/**
+* EmDash icon mark — the rounded-rect em dash symbol.
+* Used in the sidebar brand and as favicon.
+*/
+function LogoIcon(props) {
+	return /* @__PURE__ */ jsxs("svg", {
+		viewBox: "0 0 75 75",
+		fill: "none",
+		xmlns: "http://www.w3.org/2000/svg",
+		...props,
+		children: [
+			/* @__PURE__ */ jsx("rect", {
+				x: "3",
+				y: "3",
+				width: "69",
+				height: "69",
+				rx: "10.518",
+				stroke: "url(#emdash-icon-border)",
+				strokeWidth: "6"
+			}),
+			/* @__PURE__ */ jsx("rect", {
+				x: "18",
+				y: "34",
+				width: "39.3661",
+				height: "6.56101",
+				fill: "url(#emdash-icon-dash)"
+			}),
+			/* @__PURE__ */ jsxs("defs", { children: [/* @__PURE__ */ jsxs("linearGradient", {
+				id: "emdash-icon-border",
+				x1: "-42.9996",
+				y1: "124",
+				x2: "92.4233",
+				y2: "-41.7456",
+				gradientUnits: "userSpaceOnUse",
+				children: [
+					/* @__PURE__ */ jsx("stop", { stopColor: "#0F006B" }),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.0833",
+						stopColor: "#281A81"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.1667",
+						stopColor: "#5D0C83"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.25",
+						stopColor: "#911475"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.3333",
+						stopColor: "#CE2F55"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.4167",
+						stopColor: "#FF6633"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.5",
+						stopColor: "#F6821F"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.5833",
+						stopColor: "#FBAD41"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.6667",
+						stopColor: "#FFCD89"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.75",
+						stopColor: "#FFE9CB"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.8333",
+						stopColor: "#FFF7EC"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.9167",
+						stopColor: "#FFF8EE"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "1",
+						stopColor: "white"
+					})
+				]
+			}), /* @__PURE__ */ jsxs("linearGradient", {
+				id: "emdash-icon-dash",
+				x1: "91.4992",
+				y1: "27.4982",
+				x2: "28.1217",
+				y2: "54.1775",
+				gradientUnits: "userSpaceOnUse",
+				children: [
+					/* @__PURE__ */ jsx("stop", { stopColor: "white" }),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.1293",
+						stopColor: "#FFF8EE"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.6171",
+						stopColor: "#FBAD41"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.848",
+						stopColor: "#F6821F"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "1",
+						stopColor: "#FF6633"
+					})
+				]
+			})] })
+		]
+	});
+}
+/**
+* Full logo lockup — icon + "EmDash" wordmark.
+* Renders both dark-text and light-text variants, switching via CSS `light-dark()`.
+*/
+function LogoLockup({ className, ...props }) {
+	return /* @__PURE__ */ jsxs("svg", {
+		viewBox: "0 0 471 118",
+		fill: "none",
+		xmlns: "http://www.w3.org/2000/svg",
+		className,
+		role: "img",
+		"aria-label": "EmDash",
+		...props,
+		children: [
+			/* @__PURE__ */ jsx("path", {
+				d: "M0.410156 96.5125V21.2097C0.410156 9.48841 9.91245 -0.013916 21.6338 -0.013916V9.40601L21.3291 9.40991C14.9509 9.57133 9.83008 14.7927 9.83008 21.2097V96.5125C9.83008 102.93 14.9509 108.151 21.3291 108.312L21.6338 108.316H96.9365L97.2412 108.312C103.518 108.153 108.577 103.094 108.736 96.8171L108.74 96.5125V21.2097C108.74 14.6909 103.455 9.40601 96.9365 9.40601V-0.013916C108.658 -0.013916 118.16 9.48838 118.16 21.2097V96.5125C118.16 108.234 108.658 117.736 96.9365 117.736H21.6338C9.91248 117.736 0.410156 108.234 0.410156 96.5125ZM96.9365 -0.013916V9.40601H21.6338V-0.013916H96.9365Z",
+				fill: "url(#emdash-lockup-icon)"
+			}),
+			/* @__PURE__ */ jsx("path", {
+				d: "M28.6699 53.366H90.4746V63.6668H28.6699V53.366Z",
+				fill: "url(#emdash-lockup-dash)"
+			}),
+			/* @__PURE__ */ jsx("path", {
+				d: "M154.762 90V27.4834H194.447V35.8449H164.467V54.0844H192.844V62.2293H164.467V81.6385H194.447V90H154.762Z",
+				fill: "currentColor"
+			}),
+			/* @__PURE__ */ jsx("path", {
+				d: "M204.172 90V44.4231H213.53V51.4849H213.747C215.697 46.7193 220.332 43.5566 226.311 43.5566C232.593 43.5566 237.185 46.8059 239.005 52.5247H239.222C241.561 46.9792 246.933 43.5566 253.432 43.5566C262.443 43.5566 268.335 49.5353 268.335 58.6767V90H258.934V60.9296C258.934 54.9942 255.771 51.5716 250.226 51.5716C244.68 51.5716 240.825 55.7307 240.825 61.4928V90H231.64V60.2364C231.64 54.9508 228.304 51.5716 223.018 51.5716C217.473 51.5716 213.53 55.9473 213.53 61.8394V90H204.172Z",
+				fill: "currentColor"
+			}),
+			/* @__PURE__ */ jsx("path", {
+				d: "M279.404 90V27.4834H301.456C319.998 27.4834 331.046 38.8776 331.046 58.5467V58.6334C331.046 78.3892 320.085 90 301.456 90H279.404ZM289.108 81.5951H300.546C313.803 81.5951 321.125 73.4935 321.125 58.72V58.6334C321.125 43.9465 313.716 35.8449 300.546 35.8449H289.108V81.5951Z",
+				fill: "currentColor"
+			}),
+			/* @__PURE__ */ jsx("path", {
+				d: "M353.379 90.8232C344.281 90.8232 338.172 85.2344 338.172 77.0461V76.9595C338.172 69.0312 344.324 64.1789 355.112 63.529L367.502 62.7925V59.3699C367.502 54.3443 364.253 51.3116 358.448 51.3116C353.032 51.3116 349.696 53.8677 348.916 57.507L348.83 57.8969H339.992L340.035 57.4203C340.685 49.5787 347.487 43.5566 358.708 43.5566C369.842 43.5566 376.904 49.4487 376.904 58.5901V90H367.502V82.8082H367.329C364.686 87.7038 359.401 90.8232 353.379 90.8232ZM347.617 76.8295C347.617 80.8153 350.909 83.3281 355.935 83.3281C362.52 83.3281 367.502 78.8657 367.502 72.9303V69.3778L356.368 70.0709C350.736 70.4175 347.617 72.887 347.617 76.7428V76.8295Z",
+				fill: "currentColor"
+			}),
+			/* @__PURE__ */ jsx("path", {
+				d: "M403.959 90.9098C392.564 90.9098 385.893 85.2777 384.939 76.9595L384.896 76.5695H394.167L394.254 77.0028C395.121 81.2052 398.24 83.6747 404.002 83.6747C409.634 83.6747 413.013 81.3352 413.013 77.6527V77.6093C413.013 74.6633 411.367 72.9737 406.471 71.8039L399.02 70.1143C390.355 68.1214 386.066 63.9623 386.066 57.3337V57.2903C386.066 49.1454 393.171 43.5566 403.655 43.5566C414.443 43.5566 420.942 49.5787 421.418 57.3337L421.462 57.8536H412.667L412.624 57.5503C412.06 53.5645 408.941 50.7917 403.655 50.7917C398.63 50.7917 395.467 53.1746 395.467 56.8138V56.8571C395.467 59.6732 397.33 61.5794 402.226 62.7492L409.634 64.4388C418.949 66.605 422.501 70.2876 422.501 76.8295V76.8728C422.501 85.191 414.703 90.9098 403.959 90.9098Z",
+				fill: "currentColor"
+			}),
+			/* @__PURE__ */ jsx("path", {
+				d: "M431.014 90V27.4834H440.372V51.9182H440.588C443.014 46.6326 447.91 43.5566 454.712 43.5566C464.46 43.5566 470.872 50.8351 470.872 61.8394V90H461.514V63.6157C461.514 56.0773 457.701 51.5716 451.116 51.5716C444.661 51.5716 440.372 56.5105 440.372 63.6157V90H431.014Z",
+				fill: "currentColor"
+			}),
+			/* @__PURE__ */ jsxs("defs", { children: [/* @__PURE__ */ jsxs("linearGradient", {
+				id: "emdash-lockup-icon",
+				x1: "-67.1002",
+				y1: "194.666",
+				x2: "145.514",
+				y2: "-65.5554",
+				gradientUnits: "userSpaceOnUse",
+				children: [
+					/* @__PURE__ */ jsx("stop", { stopColor: "#0F006B" }),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.0833",
+						stopColor: "#281A81"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.1667",
+						stopColor: "#5D0C83"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.25",
+						stopColor: "#911475"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.3333",
+						stopColor: "#CE2F55"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.4167",
+						stopColor: "#FF6633"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.5",
+						stopColor: "#F6821F"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.5833",
+						stopColor: "#FBAD41"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.6667",
+						stopColor: "#FFCD89"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.75",
+						stopColor: "#FFE9CB"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.8333",
+						stopColor: "#FFF7EC"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.9167",
+						stopColor: "#FFF8EE"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "1",
+						stopColor: "white"
+					})
+				]
+			}), /* @__PURE__ */ jsxs("linearGradient", {
+				id: "emdash-lockup-dash",
+				x1: "144.064",
+				y1: "43.1581",
+				x2: "44.5609",
+				y2: "85.0447",
+				gradientUnits: "userSpaceOnUse",
+				children: [
+					/* @__PURE__ */ jsx("stop", { stopColor: "white" }),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.1293",
+						stopColor: "#FFF8EE"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.6171",
+						stopColor: "#FBAD41"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "0.848",
+						stopColor: "#F6821F"
+					}),
+					/* @__PURE__ */ jsx("stop", {
+						offset: "1",
+						stopColor: "#FF6633"
+					})
+				]
+			})] })
+		]
+	});
+}
+
 //#endregion
 //#region src/components/LoginPage.tsx
 /**
@@ -11323,10 +12216,7 @@ function LoginPage({ redirectUrl = "/_emdash/admin" }) {
 		className: "min-h-screen flex items-center justify-center bg-kumo-base p-4",
 		children: /* @__PURE__ */ jsxs("div", {
 			className: "text-center",
-			children: [/* @__PURE__ */ jsx("div", {
-				className: "text-4xl font-bold mb-4",
-				children: "— EmDash"
-			}), /* @__PURE__ */ jsx(Loader, {})]
+			children: [/* @__PURE__ */ jsx(LogoLockup, { className: "h-10 mx-auto mb-4" }), /* @__PURE__ */ jsx(Loader, {})]
 		})
 	});
 	return /* @__PURE__ */ jsx("div", {
@@ -11336,10 +12226,7 @@ function LoginPage({ redirectUrl = "/_emdash/admin" }) {
 			children: [
 				/* @__PURE__ */ jsxs("div", {
 					className: "text-center mb-8",
-					children: [/* @__PURE__ */ jsx("div", {
-						className: "text-4xl font-bold mb-2",
-						children: "— EmDash"
-					}), /* @__PURE__ */ jsxs("h1", {
+					children: [/* @__PURE__ */ jsx(LogoLockup, { className: "h-10 mx-auto mb-2" }), /* @__PURE__ */ jsxs("h1", {
 						className: "text-2xl font-semibold text-kumo-default",
 						children: [method === "passkey" && "Sign in to your site", method === "magic-link" && "Sign in with email"]
 					})]
@@ -15768,12 +16655,24 @@ function AllowedDomainsSettings() {
 	const handleDelete = () => {
 		if (deletingDomain) deleteMutation.mutate(deletingDomain);
 	};
-	if (manifestLoading || isLoading) return /* @__PURE__ */ jsxs("div", {
-		className: "space-y-6",
-		children: [/* @__PURE__ */ jsx("h1", {
+	const settingsHeader = /* @__PURE__ */ jsxs("div", {
+		className: "flex items-center gap-3",
+		children: [/* @__PURE__ */ jsx(Link$1, {
+			to: "/settings",
+			children: /* @__PURE__ */ jsx(Button, {
+				variant: "ghost",
+				shape: "square",
+				"aria-label": "Back to settings",
+				children: /* @__PURE__ */ jsx(ArrowLeft, { className: "h-4 w-4" })
+			})
+		}), /* @__PURE__ */ jsx("h1", {
 			className: "text-2xl font-bold",
 			children: "Self-Signup Domains"
-		}), /* @__PURE__ */ jsx("div", {
+		})]
+	});
+	if (manifestLoading || isLoading) return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-6",
+		children: [settingsHeader, /* @__PURE__ */ jsx("div", {
 			className: "rounded-lg border bg-kumo-base p-6",
 			children: /* @__PURE__ */ jsx("p", {
 				className: "text-kumo-subtle",
@@ -15783,42 +16682,28 @@ function AllowedDomainsSettings() {
 	});
 	if (isExternalAuth) return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
-		children: [/* @__PURE__ */ jsx("h1", {
-			className: "text-2xl font-bold",
-			children: "Self-Signup Domains"
-		}), /* @__PURE__ */ jsx("div", {
+		children: [settingsHeader, /* @__PURE__ */ jsx("div", {
 			className: "rounded-lg border bg-kumo-base p-6",
 			children: /* @__PURE__ */ jsxs("div", {
 				className: "flex items-start gap-3",
-				children: [/* @__PURE__ */ jsx(Info, { className: "h-5 w-5 text-kumo-subtle mt-0.5 flex-shrink-0" }), /* @__PURE__ */ jsxs("div", {
+				children: [/* @__PURE__ */ jsx(Info, { className: "h-5 w-5 text-kumo-subtle mt-0.5 flex-shrink-0" }), /* @__PURE__ */ jsx("div", {
 					className: "space-y-2",
-					children: [/* @__PURE__ */ jsxs("p", {
+					children: /* @__PURE__ */ jsxs("p", {
 						className: "text-kumo-subtle",
 						children: [
 							"User access is managed by an external provider (",
 							manifest?.authMode,
 							"). Self-signup domain settings are not available when using external authentication."
 						]
-					}), /* @__PURE__ */ jsx(Link$1, {
-						to: "/settings",
-						children: /* @__PURE__ */ jsx(Button, {
-							variant: "outline",
-							size: "sm",
-							icon: /* @__PURE__ */ jsx(ArrowLeft, {}),
-							children: "Back to Settings"
-						})
-					})]
+					})
 				})]
 			})
 		})]
 	});
 	if (error) return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
-		children: [/* @__PURE__ */ jsx("h1", {
-			className: "text-2xl font-bold",
-			children: "Self-Signup Domains"
-		}), /* @__PURE__ */ jsx("div", {
-			className: "rounded-lg border border-kumo-danger/50 bg-kumo-danger/10 p-6",
+		children: [settingsHeader, /* @__PURE__ */ jsx("div", {
+			className: "rounded-lg border bg-kumo-base p-6",
 			children: /* @__PURE__ */ jsx("p", {
 				className: "text-kumo-danger",
 				children: error instanceof Error ? error.message : "Failed to load allowed domains"
@@ -15828,13 +16713,10 @@ function AllowedDomainsSettings() {
 	return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
 		children: [
-			/* @__PURE__ */ jsx("h1", {
-				className: "text-2xl font-bold",
-				children: "Self-Signup Domains"
-			}),
+			settingsHeader,
 			saveStatus && /* @__PURE__ */ jsxs("div", {
-				className: `rounded-lg border p-4 flex items-center gap-2 ${saveStatus.type === "success" ? "bg-green-50 border-green-200 text-green-800 dark:bg-green-900/20 dark:border-green-800 dark:text-green-400" : "bg-red-50 border-red-200 text-red-800 dark:bg-red-900/20 dark:border-red-800 dark:text-red-400"}`,
-				children: [saveStatus.type === "success" ? /* @__PURE__ */ jsx(CheckCircle, { className: "h-5 w-5" }) : /* @__PURE__ */ jsx(WarningCircle, { className: "h-5 w-5" }), /* @__PURE__ */ jsx("span", { children: saveStatus.message })]
+				className: `flex items-center gap-2 rounded-lg border p-3 text-sm ${saveStatus.type === "success" ? "border-green-200 bg-green-50 text-green-800 dark:border-green-800 dark:bg-green-950/30 dark:text-green-200" : "border-red-200 bg-red-50 text-red-800 dark:border-red-800 dark:bg-red-950/30 dark:text-red-200"}`,
+				children: [saveStatus.type === "success" ? /* @__PURE__ */ jsx(CheckCircle, { className: "h-4 w-4 flex-shrink-0" }) : /* @__PURE__ */ jsx(WarningCircle, { className: "h-4 w-4 flex-shrink-0" }), saveStatus.message]
 			}),
 			/* @__PURE__ */ jsxs("div", {
 				className: "rounded-lg border bg-kumo-base p-6",
@@ -16123,8 +17005,12 @@ function ApiTokenSettings() {
 				className: "flex items-center gap-3",
 				children: [/* @__PURE__ */ jsx(Link$1, {
 					to: "/settings",
-					className: "text-kumo-subtle hover:text-kumo-default transition-colors",
-					children: /* @__PURE__ */ jsx(ArrowLeft, { className: "h-5 w-5" })
+					children: /* @__PURE__ */ jsx(Button, {
+						variant: "ghost",
+						shape: "square",
+						"aria-label": "Back to settings",
+						children: /* @__PURE__ */ jsx(ArrowLeft, { className: "h-4 w-4" })
+					})
 				}), /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("h1", {
 					className: "text-2xl font-bold",
 					children: "API Tokens"
@@ -16877,12 +17763,6 @@ const BASE64_PLUS_REGEX = /\+/g;
 const BASE64_SLASH_REGEX = /\//g;
 const EMPTY_DATA = {};
 /**
-* Check if WebAuthn is supported in the current browser
-*/
-function isWebAuthnSupported() {
-	return typeof window !== "undefined" && window.PublicKeyCredential !== void 0 && typeof window.PublicKeyCredential === "function";
-}
-/**
 * Convert base64url to ArrayBuffer
 */
 function base64urlToBuffer(base64url) {
@@ -16908,7 +17788,8 @@ function bufferToBase64url(buffer) {
 function PasskeyRegistration({ optionsEndpoint, verifyEndpoint, onSuccess, onError, buttonText = "Register Passkey", showNameInput = false, additionalData = EMPTY_DATA }) {
 	const [state, setState] = React.useState({ status: "idle" });
 	const [passkeyName, setPasskeyName] = React.useState("");
-	const isSupported = React.useMemo(() => isWebAuthnSupported(), []);
+	const isSupported = React.useMemo(() => isPasskeyEnvironmentUsable(), []);
+	const insecureContext = React.useMemo(() => typeof window !== "undefined" && !isWebAuthnSecureContext(), []);
 	const handleRegister = React.useCallback(async () => {
 		if (!isSupported) {
 			setState({
@@ -17017,10 +17898,34 @@ function PasskeyRegistration({ optionsEndpoint, verifyEndpoint, onSuccess, onErr
 		className: "rounded-lg border border-kumo-danger/50 bg-kumo-danger/10 p-4",
 		children: [/* @__PURE__ */ jsx("h3", {
 			className: "font-medium text-kumo-danger",
-			children: "Passkeys Not Supported"
+			children: "Passkeys Not Available Here"
 		}), /* @__PURE__ */ jsx("p", {
 			className: "mt-1 text-sm text-kumo-subtle",
-			children: "Your browser doesn't support passkeys. Please use a modern browser like Chrome, Safari, Firefox, or Edge."
+			children: insecureContext ? /* @__PURE__ */ jsxs(Fragment, { children: [
+				"Passkeys require a ",
+				/* @__PURE__ */ jsx("strong", {
+					className: "text-kumo-default",
+					children: "secure context"
+				}),
+				": use",
+				" ",
+				/* @__PURE__ */ jsx("strong", {
+					className: "text-kumo-default",
+					children: "HTTPS"
+				}),
+				", or open the admin at",
+				" ",
+				/* @__PURE__ */ jsx("strong", {
+					className: "text-kumo-default",
+					children: "http://localhost"
+				}),
+				" (with your dev port). Plain ",
+				/* @__PURE__ */ jsx("code", {
+					className: "text-xs",
+					children: "http://"
+				}),
+				" on a custom hostname is not treated as secure, even on loopback."
+			] }) : /* @__PURE__ */ jsx(Fragment, { children: "Your browser doesn't support passkeys. Please use a modern browser like Chrome, Safari, Firefox, or Edge." })
 		})]
 	});
 	return /* @__PURE__ */ jsxs("div", {
@@ -17311,12 +18216,24 @@ function SecuritySettings() {
 			message: "Passkey added successfully"
 		});
 	};
-	if (manifestLoading || isLoading) return /* @__PURE__ */ jsxs("div", {
-		className: "space-y-6",
-		children: [/* @__PURE__ */ jsx("h1", {
+	const settingsHeader = /* @__PURE__ */ jsxs("div", {
+		className: "flex items-center gap-3",
+		children: [/* @__PURE__ */ jsx(Link$1, {
+			to: "/settings",
+			children: /* @__PURE__ */ jsx(Button, {
+				variant: "ghost",
+				shape: "square",
+				"aria-label": "Back to settings",
+				children: /* @__PURE__ */ jsx(ArrowLeft, { className: "h-4 w-4" })
+			})
+		}), /* @__PURE__ */ jsx("h1", {
 			className: "text-2xl font-bold",
 			children: "Security Settings"
-		}), /* @__PURE__ */ jsx("div", {
+		})]
+	});
+	if (manifestLoading || isLoading) return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-6",
+		children: [settingsHeader, /* @__PURE__ */ jsx("div", {
 			className: "rounded-lg border bg-kumo-base p-6",
 			children: /* @__PURE__ */ jsx("p", {
 				className: "text-kumo-subtle",
@@ -17326,42 +18243,28 @@ function SecuritySettings() {
 	});
 	if (isExternalAuth) return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
-		children: [/* @__PURE__ */ jsx("h1", {
-			className: "text-2xl font-bold",
-			children: "Security Settings"
-		}), /* @__PURE__ */ jsx("div", {
+		children: [settingsHeader, /* @__PURE__ */ jsx("div", {
 			className: "rounded-lg border bg-kumo-base p-6",
 			children: /* @__PURE__ */ jsxs("div", {
 				className: "flex items-start gap-3",
-				children: [/* @__PURE__ */ jsx(Info, { className: "h-5 w-5 text-kumo-subtle mt-0.5 flex-shrink-0" }), /* @__PURE__ */ jsxs("div", {
+				children: [/* @__PURE__ */ jsx(Info, { className: "h-5 w-5 text-kumo-subtle mt-0.5 flex-shrink-0" }), /* @__PURE__ */ jsx("div", {
 					className: "space-y-2",
-					children: [/* @__PURE__ */ jsxs("p", {
+					children: /* @__PURE__ */ jsxs("p", {
 						className: "text-kumo-subtle",
 						children: [
 							"Authentication is managed by an external provider (",
 							manifest?.authMode,
 							"). Passkey settings are not available when using external authentication."
 						]
-					}), /* @__PURE__ */ jsx(Link$1, {
-						to: "/settings",
-						children: /* @__PURE__ */ jsx(Button, {
-							variant: "outline",
-							size: "sm",
-							icon: /* @__PURE__ */ jsx(ArrowLeft, {}),
-							children: "Back to Settings"
-						})
-					})]
+					})
 				})]
 			})
 		})]
 	});
 	if (error) return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
-		children: [/* @__PURE__ */ jsx("h1", {
-			className: "text-2xl font-bold",
-			children: "Security Settings"
-		}), /* @__PURE__ */ jsx("div", {
-			className: "rounded-lg border border-kumo-danger/50 bg-kumo-danger/10 p-6",
+		children: [settingsHeader, /* @__PURE__ */ jsx("div", {
+			className: "rounded-lg border bg-kumo-base p-6",
 			children: /* @__PURE__ */ jsx("p", {
 				className: "text-kumo-danger",
 				children: error instanceof Error ? error.message : "Failed to load passkeys"
@@ -17371,13 +18274,10 @@ function SecuritySettings() {
 	return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
 		children: [
-			/* @__PURE__ */ jsx("h1", {
-				className: "text-2xl font-bold",
-				children: "Security Settings"
-			}),
+			settingsHeader,
 			saveStatus && /* @__PURE__ */ jsxs("div", {
-				className: `rounded-lg border p-4 flex items-center gap-2 ${saveStatus.type === "success" ? "bg-green-50 border-green-200 text-green-800 dark:bg-green-900/20 dark:border-green-800 dark:text-green-400" : "bg-red-50 border-red-200 text-red-800 dark:bg-red-900/20 dark:border-red-800 dark:text-red-400"}`,
-				children: [saveStatus.type === "success" ? /* @__PURE__ */ jsx(CheckCircle, { className: "h-5 w-5" }) : /* @__PURE__ */ jsx(WarningCircle, { className: "h-5 w-5" }), /* @__PURE__ */ jsx("span", { children: saveStatus.message })]
+				className: `flex items-center gap-2 rounded-lg border p-3 text-sm ${saveStatus.type === "success" ? "border-green-200 bg-green-50 text-green-800 dark:border-green-800 dark:bg-green-950/30 dark:text-green-200" : "border-red-200 bg-red-50 text-red-800 dark:border-red-800 dark:bg-red-950/30 dark:text-red-200"}`,
+				children: [saveStatus.type === "success" ? /* @__PURE__ */ jsx(CheckCircle, { className: "h-4 w-4 flex-shrink-0" }) : /* @__PURE__ */ jsx(WarningCircle, { className: "h-4 w-4 flex-shrink-0" }), saveStatus.message]
 			}),
 			/* @__PURE__ */ jsxs("div", {
 				className: "rounded-lg border bg-kumo-base p-6",
@@ -18129,10 +19029,7 @@ function SetupWizard() {
 				/* @__PURE__ */ jsxs("div", {
 					className: "text-center mb-6",
 					children: [
-						/* @__PURE__ */ jsx("div", {
-							className: "text-4xl font-bold mb-2",
-							children: "— EmDash"
-						}),
+						/* @__PURE__ */ jsx(LogoLockup, { className: "h-10 mx-auto mb-2" }),
 						/* @__PURE__ */ jsxs("h1", {
 							className: "text-2xl font-semibold text-kumo-default",
 							children: [
@@ -18770,10 +19667,9 @@ function SidebarNav({ manifest }) {
 			/* @__PURE__ */ jsx(KumoSidebar.Header, { children: /* @__PURE__ */ jsxs(Link$1, {
 				to: "/",
 				className: "emdash-brand-link flex w-full min-w-0 items-center gap-2 px-3 py-1",
-				children: [/* @__PURE__ */ jsx("span", {
-					className: "text-base shrink-0",
-					"aria-hidden": "true",
-					children: "—"
+				children: [/* @__PURE__ */ jsx(LogoIcon, {
+					className: "size-5 shrink-0",
+					"aria-hidden": "true"
 				}), /* @__PURE__ */ jsx("span", {
 					className: "emdash-brand-text font-semibold truncate",
 					children: "EmDash"
@@ -18874,8 +19770,8 @@ function Header() {
 	const initials = ((user?.name || user?.email || "U")[0] ?? "U").toUpperCase();
 	return /* @__PURE__ */ jsxs("header", {
 		className: "sticky top-0 z-10 flex h-16 items-center justify-between border-b bg-kumo-base px-4",
-		children: [/* @__PURE__ */ jsx(KumoSidebar.Trigger, {}), /* @__PURE__ */ jsxs("div", {
-			className: "flex items-center space-x-2",
+		children: [/* @__PURE__ */ jsx(KumoSidebar.Trigger, { className: "cursor-pointer" }), /* @__PURE__ */ jsxs("div", {
+			className: "flex items-center gap-2",
 			children: [
 				/* @__PURE__ */ jsxs(LinkButton, {
 					variant: "ghost",
@@ -18893,7 +19789,7 @@ function Header() {
 						children: /* @__PURE__ */ jsxs(Button, {
 							variant: "ghost",
 							size: "sm",
-							className: "gap-2",
+							className: "gap-2 py-1 h-auto",
 							children: [user?.avatarUrl ? /* @__PURE__ */ jsx("img", {
 								src: user.avatarUrl,
 								alt: "",
@@ -19021,8 +19917,8 @@ function WelcomeModal({ open, onClose, userName, userRole }) {
 					className: "flex flex-col space-y-1.5 text-center sm:text-center",
 					children: [
 						/* @__PURE__ */ jsx("div", {
-							className: "mx-auto mb-4 flex h-16 w-16 items-center justify-center rounded-full bg-kumo-brand/10",
-							children: /* @__PURE__ */ jsx(Sparkle, { className: "h-8 w-8 text-kumo-brand" })
+							className: "mx-auto mb-4",
+							children: /* @__PURE__ */ jsx(LogoIcon, { className: "h-16 w-16" })
 						}),
 						/* @__PURE__ */ jsxs(Dialog.Title, {
 							className: "text-2xl font-semibold leading-none tracking-tight",
@@ -19467,10 +20363,7 @@ function SignupPage() {
 			children: [
 				/* @__PURE__ */ jsxs("div", {
 					className: "text-center mb-8",
-					children: [/* @__PURE__ */ jsx("div", {
-						className: "text-4xl font-bold mb-2",
-						children: "— EmDash"
-					}), /* @__PURE__ */ jsxs("h1", {
+					children: [/* @__PURE__ */ jsx(LogoLockup, { className: "h-10 mx-auto mb-2" }), /* @__PURE__ */ jsxs("h1", {
 						className: "text-2xl font-semibold text-kumo-default",
 						children: [
 							step === "email" && "Create an account",
@@ -19601,6 +20494,14 @@ function TermFormDialog({ open, onClose, taxonomyName, taxonomyDef, term, allTer
 	const [description, setDescription] = React.useState(term?.description || "");
 	const [autoSlug, setAutoSlug] = React.useState(!term);
 	const [error, setError] = React.useState(null);
+	React.useEffect(() => {
+		setLabel(term?.label || "");
+		setSlug(term?.slug || "");
+		setParentId(term?.parentId || "");
+		setDescription(term?.description || "");
+		setAutoSlug(!term);
+		setError(null);
+	}, [term]);
 	React.useEffect(() => {
 		if (autoSlug && label) setSlug(slugify(label));
 	}, [label, autoSlug]);
@@ -24693,13 +25594,20 @@ function ContentListPage() {
 	});
 	const i18n = manifest?.i18n;
 	const activeLocale = i18n ? localeParam ?? i18n.defaultLocale : void 0;
-	const { data, isLoading, error } = useQuery({
+	const { data, fetchNextPage, hasNextPage, isFetchingNextPage, isLoading, error } = useInfiniteQuery({
 		queryKey: [
 			"content",
 			collection,
 			{ locale: activeLocale }
 		],
-		queryFn: () => fetchContentList(collection, { locale: activeLocale })
+		queryFn: ({ pageParam }) => fetchContentList(collection, {
+			locale: activeLocale,
+			cursor: pageParam,
+			limit: 100
+		}),
+		initialPageParam: void 0,
+		getNextPageParam: (lastPage) => lastPage.nextCursor,
+		enabled: !!manifest
 	});
 	const { data: trashedData, isLoading: isTrashedLoading } = useQuery({
 		queryKey: [
@@ -24786,13 +25694,18 @@ function ContentListPage() {
 			search: { locale: locale || void 0 }
 		});
 	};
+	const items = React.useMemo(() => {
+		return data?.pages.flatMap((page) => page.items) || [];
+	}, [data]);
 	return /* @__PURE__ */ jsx(ContentList, {
 		collection,
 		collectionLabel: collectionConfig.label,
-		items: data?.items || [],
+		items,
 		trashedItems: trashedData?.items || [],
-		isLoading,
+		isLoading: isLoading || isFetchingNextPage,
 		isTrashedLoading,
+		hasMore: !!hasNextPage,
+		onLoadMore: () => void fetchNextPage(),
 		trashedCount: trashedData?.items?.length || 0,
 		onDelete: (id) => deleteMutation.mutate(id),
 		onRestore: (id) => restoreMutation.mutate(id),
@@ -24800,7 +25713,8 @@ function ContentListPage() {
 		onDuplicate: (id) => duplicateMutation.mutate(id),
 		i18n,
 		activeLocale,
-		onLocaleChange: handleLocaleChange
+		onLocaleChange: handleLocaleChange,
+		urlPattern: collectionConfig.urlPattern
 	});
 }
 /** Extract plugin block definitions from the manifest for Portable Text editor */
@@ -24992,6 +25906,7 @@ function ContentEditPage() {
 				collection,
 				id
 			] });
+			if (rawItem?.draftRevisionId) queryClient.invalidateQueries({ queryKey: ["revision", rawItem.draftRevisionId] });
 		},
 		onError: (error) => {
 			toastManager.add({
@@ -25014,6 +25929,7 @@ function ContentEditPage() {
 				collection,
 				id
 			] });
+			if (rawItem?.draftRevisionId) queryClient.invalidateQueries({ queryKey: ["revision", rawItem.draftRevisionId] });
 		},
 		onError: (err) => {
 			toastManager.add({
@@ -25237,6 +26153,7 @@ function ContentEditPage() {
 		isDeleting: deleteMutation.isPending,
 		supportsDrafts: collectionConfig.supports.includes("drafts"),
 		supportsRevisions: collectionConfig.supports.includes("revisions"),
+		supportsPreview: collectionConfig.supports.includes("preview"),
 		currentUser,
 		users: usersData?.items,
 		onAuthorChange: handleAuthorChange,
@@ -25732,6 +26649,17 @@ function ContentTypesEditPage() {
 			queryClient.invalidateQueries({ queryKey: ["manifest"] });
 		}
 	});
+	const reorderFieldsMutation = useMutation({
+		mutationFn: (fieldSlugs) => reorderFields(slug, fieldSlugs),
+		onSuccess: () => {
+			queryClient.invalidateQueries({ queryKey: [
+				"schema",
+				"collections",
+				slug
+			] });
+			queryClient.invalidateQueries({ queryKey: ["manifest"] });
+		}
+	});
 	if (error) return /* @__PURE__ */ jsx(ErrorScreen, { error: error.message });
 	if (isLoading) return /* @__PURE__ */ jsx(LoadingScreen, {});
 	return /* @__PURE__ */ jsx(ContentTypeEditor, {
@@ -25743,7 +26671,8 @@ function ContentTypesEditPage() {
 			fieldSlug,
 			input
 		}),
-		onDeleteField: (fieldSlug) => deleteFieldMutation.mutate(fieldSlug)
+		onDeleteField: (fieldSlug) => deleteFieldMutation.mutate(fieldSlug),
+		onReorderFields: (fieldSlugs) => reorderFieldsMutation.mutate(fieldSlugs)
 	});
 }
 const pluginRoute = createRoute({