@emdash-cms/admin 0.6.0 → 1.0.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { c as fetchManifest, i as fetchPlugins, l as parseApiResponse, n as enablePlugin, o as API_BASE, r as fetchPlugin, s as apiFetch, t as disablePlugin, u as throwResponseError } from "./plugins-XhZqfegd.js";
-import { a as SUPPORTED_LOCALES, i as DEFAULT_LOCALE, l as resolveLocale, n as useLocale, o as SUPPORTED_LOCALE_CODES, t as LocaleDirectionProvider } from "./LocaleDirectionProvider-BS3RseHk.js";
+import { c as fetchAuthMode, d as throwResponseError, i as fetchPlugins, l as fetchManifest, n as enablePlugin, o as API_BASE, r as fetchPlugin, s as apiFetch, t as disablePlugin, u as parseApiResponse } from "./plugins-DUJY_8HN.js";
+import { a as SUPPORTED_LOCALES, i as DEFAULT_LOCALE, l as resolveLocale, n as useLocale, o as SUPPORTED_LOCALE_CODES, t as LocaleDirectionProvider } from "./LocaleDirectionProvider-B43-InGI.js";
 import "./locales/index.js";
 import { Badge, Button, Checkbox, CommandPalette, Dialog, Input, InputArea, Label, LinkButton, Loader, Popover, Select, Sidebar as KumoSidebar, Switch, Tabs, Toast, Toasty, Tooltip, buttonVariants, useSidebar } from "@cloudflare/kumo";
 import { i18n } from "@lingui/core";
@@ -10,7 +10,7 @@ import * as React from "react";
 import { createContext, useCallback, useContext, useEffect, useState } from "react";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { Dialog as Dialog$1 } from "@cloudflare/kumo/primitives";
-import { ArrowCounterClockwise, ArrowLeft, ArrowRight, ArrowSquareOut, ArrowUUpLeft, ArrowUUpRight, ArrowsClockwise, ArrowsInSimple, ArrowsLeftRight, ArrowsOutSimple, BracketsCurly, Calendar, CalendarBlank, CaretDown, CaretLeft, CaretRight, CaretUp, ChatCircle, Check, CheckCircle, CircleDashed, CircleNotch, ClockCounterClockwise, Cloud, Code, CodeBlock, Copy, Cube, Database, DeviceMobile, DotsSixVertical, DownloadSimple, Envelope, EnvelopeSimple, Eye, EyeSlash, File, FileArrowDown, FileText, FloppyDisk, FolderOpen, Gear, GithubLogo, Globe, GlobeSimple, GridFour, HardDrive, Hash, Image as Image$1, ImageSquare, Info, Key, Link as Link$2, LinkBreak, LinkSimple, List, ListBullets, ListChecks, ListNumbers, MagnifyingGlass, Minus, Monitor, Moon, Palette, PaperPlaneTilt, Paragraph, Pencil, PencilSimple, PlugsConnected, Plus, Prohibit, PuzzlePiece, Quotes, Rows, Ruler, ShareNetwork, Shield, ShieldCheck, ShieldWarning, SignOut, SlidersHorizontal, Sparkle, SquaresFour, Stack, Storefront, Sun, TextAlignCenter, TextAlignLeft, TextAlignRight, TextB, TextHOne, TextHThree, TextHTwo, TextItalic, TextStrikethrough, TextT, TextUnderline, ToggleLeft, Trash, Upload, User, UserCircle, UserPlus, Users, Warning, WarningCircle, WebhooksLogo, X, YoutubeLogo } from "@phosphor-icons/react";
+import { ArrowCounterClockwise, ArrowLeft, ArrowRight, ArrowSquareOut, ArrowUUpLeft, ArrowUUpRight, ArrowsClockwise, ArrowsInSimple, ArrowsLeftRight, ArrowsOutSimple, BracketsCurly, Calendar, CalendarBlank, CaretDown, CaretLeft, CaretRight, CaretUp, CaretUpDown, ChatCircle, Check, CheckCircle, CircleDashed, CircleNotch, ClockCounterClockwise, Cloud, Code, CodeBlock, Copy, Cube, Database, DeviceMobile, DotsSixVertical, DownloadSimple, Envelope, EnvelopeSimple, Eye, EyeSlash, File, FileArrowDown, FileText, FloppyDisk, FolderOpen, Gear, GithubLogo, Globe, GlobeSimple, GridFour, HardDrive, Hash, Image as Image$1, ImageSquare, Info, Key, Link as Link$2, LinkBreak, LinkSimple, List, ListBullets, ListChecks, ListNumbers, MagnifyingGlass, Minus, Monitor, Moon, Palette, PaperPlaneTilt, Paragraph, Pencil, PencilSimple, PlugsConnected, Plus, Prohibit, PuzzlePiece, Quotes, Rows, Ruler, ShareNetwork, Shield, ShieldCheck, ShieldWarning, SignOut, SlidersHorizontal, Sparkle, SquaresFour, Stack, Storefront, Sun, TextAlignCenter, TextAlignLeft, TextAlignRight, TextB, TextHOne, TextHThree, TextHTwo, TextItalic, TextStrikethrough, TextT, TextUnderline, ToggleLeft, Trash, Upload, User, UserCircle, UserPlus, Users, Warning, WarningCircle, WebhooksLogo, X, YoutubeLogo } from "@phosphor-icons/react";
 import { clsx } from "clsx";
 import { twMerge } from "tailwind-merge";
 import { DndContext, DragOverlay, KeyboardSensor, PointerSensor, closestCenter, rectIntersection, useDraggable, useDroppable, useSensor, useSensors } from "@dnd-kit/core";
@@ -100,6 +100,34 @@ function useTheme() {
 	return context;
 }
 
+//#endregion
+//#region src/lib/auth-provider-context.tsx
+const AuthProviderContext = createContext({});
+/**
+* Provider that makes auth provider components available to all descendants
+*/
+function AuthProviderProvider({ children, authProviders }) {
+	return /* @__PURE__ */ jsx(AuthProviderContext.Provider, {
+		value: authProviders,
+		children
+	});
+}
+/**
+* Get all auth provider modules
+*/
+function useAuthProviders() {
+	return useContext(AuthProviderContext);
+}
+/**
+* Get auth providers as an ordered array (buttons first, then forms)
+*/
+function useAuthProviderList() {
+	const providers = useContext(AuthProviderContext);
+	return Object.values(providers).toSorted((a, b) => {
+		return (a.LoginForm ? 1 : 0) - (b.LoginForm ? 1 : 0);
+	});
+}
+
 //#endregion
 //#region src/lib/plugin-context.tsx
 const PluginAdminContext = createContext({});
@@ -1105,6 +1133,8 @@ async function fetchContentList(collection, options) {
 	if (options?.limit) params.set("limit", String(options.limit));
 	if (options?.status) params.set("status", options.status);
 	if (options?.locale) params.set("locale", options.locale);
+	if (options?.orderBy) params.set("orderBy", options.orderBy);
+	if (options?.order) params.set("order", options.order);
 	return parseApiResponse(await apiFetch(`${API_BASE}/content/${collection}${params.toString() ? `?${params}` : ""}`), "Failed to fetch content");
 }
 /**
@@ -2261,6 +2291,10 @@ const API_TOKEN_SCOPES = {
 	MediaWrite: "media:write",
 	SchemaRead: "schema:read",
 	SchemaWrite: "schema:write",
+	TaxonomiesManage: "taxonomies:manage",
+	MenusManage: "menus:manage",
+	SettingsRead: "settings:read",
+	SettingsManage: "settings:manage",
 	Admin: "admin"
 };
 /**
@@ -2921,7 +2955,7 @@ var PluginFieldErrorBoundary = class extends React.Component {
 * Each item is a collapsible card containing the defined sub-fields.
 * Items can be added, removed, and reordered via drag-and-drop.
 */
-function ensureKeys(items) {
+function ensureKeys$1(items) {
 	return items.map((item, i) => {
 		const obj = typeof item === "object" && item !== null ? item : {};
 		return {
@@ -2930,20 +2964,28 @@ function ensureKeys(items) {
 		};
 	});
 }
-function stripKeys(items) {
+function stripKeys$1(items) {
 	return items.map(({ _key, ...rest }) => rest);
 }
 function RepeaterField({ label, id, value, onChange, subFields, minItems = 0, maxItems }) {
 	const { _: _t } = useLingui();
 	const rawItems = Array.isArray(value) ? value : [];
-	const [items, setItems] = React.useState(() => ensureKeys(rawItems));
+	const [items, setItems] = React.useState(() => ensureKeys$1(rawItems));
 	const [collapsedItems, setCollapsedItems] = React.useState(/* @__PURE__ */ new Set());
 	React.useEffect(() => {
-		setItems(ensureKeys(Array.isArray(value) ? value : []));
+		const incoming = Array.isArray(value) ? value : [];
+		setItems((prev) => incoming.map((item, i) => {
+			const obj = typeof item === "object" && item !== null ? item : {};
+			const existingKey = obj._key || prev[i]?._key;
+			return {
+				...obj,
+				_key: existingKey || `item-${i}-${Date.now()}`
+			};
+		}));
 	}, [value]);
 	const emitChange = (updated) => {
 		setItems(updated);
-		onChange(stripKeys(updated));
+		onChange(stripKeys$1(updated));
 	};
 	const handleAdd = () => {
 		if (maxItems && items.length >= maxItems) return;
@@ -3109,14 +3151,16 @@ function SubFieldInput({ subField, value, onChange }) {
 			label: subField.label,
 			value: typeof value === "string" ? value : "",
 			onChange: (e) => onChange(e.target.value),
-			required: subField.required
+			required: subField.required,
+			dir: "auto"
 		});
 		case "text": return /* @__PURE__ */ jsx(InputArea, {
 			label: subField.label,
 			value: typeof value === "string" ? value : "",
 			onChange: (e) => onChange(e.target.value),
 			required: subField.required,
-			rows: 3
+			rows: 3,
+			dir: "auto"
 		});
 		case "number":
 		case "integer": return /* @__PURE__ */ jsx(Input, {
@@ -6630,6 +6674,24 @@ function SlashCommandMenu({ state, onCommand, onClose: _onClose, setSelectedInde
 		}, item.id))
 	}), document.body);
 }
+function getPluginBlockDefaultValues(fields) {
+	const defaults = {};
+	for (const field of fields ?? []) {
+		const initialValue = "initial_value" in field ? field.initial_value : void 0;
+		if (initialValue !== void 0) defaults[field.action_id] = initialValue;
+	}
+	return defaults;
+}
+function buildPluginBlockFormValues(block, initialValues) {
+	const defaults = getPluginBlockDefaultValues(block?.fields);
+	return initialValues ? {
+		...defaults,
+		...initialValues
+	} : defaults;
+}
+function hasPluginBlockFormData(values) {
+	return Object.values(values).some((value) => value !== void 0 && value !== null && value !== "");
+}
 /**
 * Plugin block insertion/editing modal.
 * When the block has `fields`, renders Block Kit elements.
@@ -6640,8 +6702,7 @@ function PluginBlockModal({ block, initialValues, onClose, onInsert }) {
 	const inputRef = React.useRef(null);
 	React.useEffect(() => {
 		if (block) {
-			if (initialValues) setFormValues({ ...initialValues });
-			else setFormValues({});
+			setFormValues(buildPluginBlockFormValues(block, initialValues));
 			if (!block.fields || block.fields.length === 0) setTimeout(() => inputRef.current?.focus(), 0);
 		}
 	}, [block, initialValues]);
@@ -6661,7 +6722,7 @@ function PluginBlockModal({ block, initialValues, onClose, onInsert }) {
 	};
 	const isEditing = !!initialValues;
 	const hasFields = block?.fields && block.fields.length > 0;
-	const canSubmit = hasFields ? Object.values(formValues).some((v) => v !== void 0 && v !== null && v !== "") : typeof formValues.id === "string" && formValues.id.trim().length > 0;
+	const canSubmit = hasFields ? hasPluginBlockFormData(formValues) : typeof formValues.id === "string" && formValues.id.trim().length > 0;
 	return /* @__PURE__ */ jsx(Dialog.Root, {
 		open: !!block,
 		onOpenChange: (open) => !open && onClose(),
@@ -6694,7 +6755,7 @@ function PluginBlockModal({ block, initialValues, onClose, onInsert }) {
 			}), /* @__PURE__ */ jsxs("form", {
 				onSubmit: handleSubmit,
 				children: [/* @__PURE__ */ jsx("div", {
-					className: "py-4 space-y-4",
+					className: "py-4 space-y-4 max-h-[70vh] overflow-y-auto -mx-1 px-1",
 					children: hasFields ? block.fields.map((field) => /* @__PURE__ */ jsx(BlockKitField, {
 						field,
 						pluginId: block.pluginId,
@@ -6781,12 +6842,244 @@ function BlockKitField({ field, pluginId, value, onChange }) {
 				children: field.label
 			})]
 		});
+		case "repeater": return /* @__PURE__ */ jsx(BlockKitRepeater, {
+			field,
+			pluginId,
+			value,
+			onChange
+		});
 		default: return /* @__PURE__ */ jsxs("div", {
 			className: "text-sm text-kumo-subtle",
 			children: ["Unknown field type: ", field.type]
 		});
 	}
 }
+function ensureKeys(items) {
+	return items.map((item, i) => {
+		const obj = typeof item === "object" && item !== null ? item : {};
+		return {
+			...obj,
+			_key: obj._key || `item-${i}-${Date.now()}`
+		};
+	});
+}
+function stripKeys(items) {
+	return items.map(({ _key, ...rest }) => rest);
+}
+function BlockKitRepeater({ field, pluginId, value, onChange }) {
+	const { _: _t2 } = useLingui();
+	const rawItems = React.useMemo(() => Array.isArray(value) ? value : [], [value]);
+	const [items, setItems] = React.useState(() => ensureKeys(rawItems));
+	const [expanded, setExpanded] = React.useState(/* @__PURE__ */ new Set());
+	const sensors = useSensors(useSensor(PointerSensor), useSensor(KeyboardSensor, { coordinateGetter: sortableKeyboardCoordinates }));
+	const lastEmittedRef = React.useRef(null);
+	React.useEffect(() => {
+		if (lastEmittedRef.current === rawItems) return;
+		setItems((prev) => rawItems.map((item, i) => {
+			const obj = typeof item === "object" && item !== null ? item : {};
+			const existingKey = obj._key || prev[i]?._key;
+			return {
+				...obj,
+				_key: existingKey || `item-${i}-${Date.now()}`
+			};
+		}));
+	}, [rawItems]);
+	const minItems = field.min_items ?? 0;
+	const maxItems = field.max_items;
+	const canAdd = maxItems === void 0 || items.length < maxItems;
+	const canRemove = items.length > minItems;
+	const addButtonLabel = field.item_label ? _t2({
+		id: "3nLdaX",
+		message: "Add {0}",
+		values: { 0: field.item_label }
+	}) : _t2({
+		id: "NQ8llq",
+		message: "Add item"
+	});
+	const emit = (next) => {
+		setItems(next);
+		const stripped = stripKeys(next);
+		lastEmittedRef.current = stripped;
+		onChange(field.action_id, stripped);
+	};
+	const handleAdd = () => {
+		if (!canAdd) return;
+		const newItem = { _key: `item-${Date.now()}-${Math.random().toString(36).slice(2, 7)}` };
+		for (const sf of field.fields) switch (sf.type) {
+			case "toggle":
+				newItem[sf.action_id] = false;
+				break;
+			case "number_input":
+				newItem[sf.action_id] = void 0;
+				break;
+			default: newItem[sf.action_id] = "";
+		}
+		setExpanded((prev) => {
+			const next = new Set(prev);
+			next.add(newItem._key);
+			return next;
+		});
+		emit([...items, newItem]);
+	};
+	const handleRemove = (key) => {
+		if (!canRemove) return;
+		setExpanded((prev) => {
+			if (!prev.has(key)) return prev;
+			const next = new Set(prev);
+			next.delete(key);
+			return next;
+		});
+		emit(items.filter((it) => it._key !== key));
+	};
+	const handleItemChange = (key, subActionId, subValue) => {
+		emit(items.map((it) => it._key === key ? {
+			...it,
+			[subActionId]: subValue
+		} : it));
+	};
+	const handleDragEnd = (event) => {
+		const { active, over } = event;
+		if (!over || active.id === over.id) return;
+		const oldIndex = items.findIndex((it) => it._key === active.id);
+		const newIndex = items.findIndex((it) => it._key === over.id);
+		if (oldIndex === -1 || newIndex === -1) return;
+		emit(arrayMove(items, oldIndex, newIndex));
+	};
+	const toggleExpanded = (key) => {
+		setExpanded((prev) => {
+			const next = new Set(prev);
+			if (next.has(key)) next.delete(key);
+			else next.add(key);
+			return next;
+		});
+	};
+	return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-2",
+		children: [/* @__PURE__ */ jsxs("div", {
+			className: "flex items-center justify-between",
+			children: [/* @__PURE__ */ jsxs("label", {
+				className: "text-sm font-medium",
+				children: [field.label, items.length > 0 && /* @__PURE__ */ jsxs("span", {
+					className: "ms-2 text-kumo-subtle font-normal",
+					children: [
+						"(",
+						items.length,
+						")"
+					]
+				})]
+			}), canAdd && /* @__PURE__ */ jsx(Button, {
+				variant: "outline",
+				size: "sm",
+				icon: /* @__PURE__ */ jsx(Plus, {}),
+				onClick: handleAdd,
+				type: "button",
+				children: addButtonLabel
+			})]
+		}), items.length === 0 ? /* @__PURE__ */ jsxs("div", {
+			className: "border-2 border-dashed rounded-lg p-6 text-center text-kumo-subtle",
+			children: [/* @__PURE__ */ jsx("p", {
+				className: "text-sm",
+				children: _t2({
+					id: "bWmJ0A",
+					message: "No items yet"
+				})
+			}), canAdd && /* @__PURE__ */ jsx(Button, {
+				variant: "outline",
+				size: "sm",
+				className: "mt-2",
+				icon: /* @__PURE__ */ jsx(Plus, {}),
+				onClick: handleAdd,
+				type: "button",
+				children: addButtonLabel
+			})]
+		}) : /* @__PURE__ */ jsx(DndContext, {
+			sensors,
+			collisionDetection: closestCenter,
+			onDragEnd: handleDragEnd,
+			children: /* @__PURE__ */ jsx(SortableContext, {
+				items: items.map((it) => it._key),
+				strategy: verticalListSortingStrategy,
+				children: /* @__PURE__ */ jsx("div", {
+					className: "space-y-2",
+					children: items.map((item, index) => /* @__PURE__ */ jsx(BlockKitRepeaterItem, {
+						item,
+						index,
+						fields: field.fields,
+						pluginId,
+						isCollapsed: !expanded.has(item._key),
+						onToggleCollapse: () => toggleExpanded(item._key),
+						onRemove: canRemove ? () => handleRemove(item._key) : void 0,
+						onChange: (subActionId, v) => handleItemChange(item._key, subActionId, v)
+					}, item._key))
+				})
+			})
+		})]
+	});
+}
+function BlockKitRepeaterItem({ item, index, fields, pluginId, isCollapsed, onToggleCollapse, onRemove, onChange }) {
+	const { _: _t3 } = useLingui();
+	const { attributes, listeners, setNodeRef, transform, transition, isDragging } = useSortable({ id: item._key });
+	const style = {
+		transform: CSS.Transform.toString(transform),
+		transition
+	};
+	const summaryField = fields.find((f) => f.type === "text_input");
+	const summaryLabel = (summaryField && typeof item[summaryField.action_id] === "string" ? item[summaryField.action_id] : "").trim() || _t3({
+		id: "y/5CE8",
+		message: "Item {0}",
+		values: { 0: index + 1 }
+	});
+	return /* @__PURE__ */ jsxs("div", {
+		ref: setNodeRef,
+		style,
+		className: cn("border border-kumo-line rounded-lg bg-kumo-base", isDragging && "opacity-50 ring-2 ring-kumo-brand"),
+		children: [/* @__PURE__ */ jsxs("div", {
+			className: "flex items-center gap-2 px-3 py-2 border-b border-kumo-line",
+			children: [
+				/* @__PURE__ */ jsx("span", {
+					className: "inline-flex h-4 w-4 text-kumo-subtle cursor-grab shrink-0",
+					"aria-label": _t3({
+						id: "KGi3u9",
+						message: "Drag to reorder"
+					}),
+					...attributes,
+					...listeners,
+					children: /* @__PURE__ */ jsx(DotsSixVertical, { className: "h-4 w-4" })
+				}),
+				/* @__PURE__ */ jsxs("button", {
+					type: "button",
+					className: "flex items-center gap-2 flex-1 min-w-0 text-left cursor-pointer",
+					onClick: onToggleCollapse,
+					"aria-expanded": !isCollapsed,
+					children: [isCollapsed ? /* @__PURE__ */ jsx(CaretRight, { className: "h-4 w-4 text-kumo-subtle shrink-0" }) : /* @__PURE__ */ jsx(CaretDown, { className: "h-4 w-4 text-kumo-subtle shrink-0" }), /* @__PURE__ */ jsx("span", {
+						className: "text-sm font-medium flex-1 truncate",
+						children: summaryLabel
+					})]
+				}),
+				onRemove && /* @__PURE__ */ jsx(Button, {
+					variant: "ghost",
+					shape: "square",
+					type: "button",
+					onClick: onRemove,
+					"aria-label": _t3({
+						id: "mU3j1b",
+						message: "Remove item {0}",
+						values: { 0: index + 1 }
+					}),
+					children: /* @__PURE__ */ jsx(Trash, { className: "h-3.5 w-3.5 text-kumo-danger" })
+				})
+			]
+		}), !isCollapsed && /* @__PURE__ */ jsx("div", {
+			className: "p-3 space-y-3",
+			children: fields.map((sf) => /* @__PURE__ */ jsx(BlockKitField, {
+				field: sf,
+				pluginId,
+				value: item[sf.action_id],
+				onChange: (actionId, v) => onChange(actionId, v)
+			}, sf.action_id))
+		})]
+	});
+}
 /**
 * Select field that supports loading options dynamically via `optionsRoute`.
 * When `optionsRoute` is set, fetches `{ items: [{ id, name }] }` from the plugin route.
@@ -6885,7 +7178,7 @@ function EditorFooter({ editor }) {
 * Portable Text Editor Component
 */
 function PortableTextEditor({ value, onChange, placeholder = "Start writing...", className, editable = true, "aria-labelledby": ariaLabelledby, pluginBlocks = [], focusMode: controlledFocusMode, onFocusModeChange, onEditorReady, minimal = false, onBlockSidebarOpen, onBlockSidebarClose }) {
-	const { _: _t2 } = useLingui();
+	const { _: _t4 } = useLingui();
 	const onChangeRef = React.useRef(onChange);
 	React.useEffect(() => {
 		onChangeRef.current = onChange;
@@ -6969,7 +7262,7 @@ function PortableTextEditor({ value, onChange, placeholder = "Start writing...",
 		for (const block of pluginBlocks) cmds.push({
 			id: `plugin-${block.pluginId}-${block.type}`,
 			title: block.label,
-			description: block.description ?? _t2({
+			description: block.description ?? _t4({
 				id: "g0zqOw",
 				message: "Embed a {0}",
 				values: { 0: block.label }
@@ -6986,7 +7279,7 @@ function PortableTextEditor({ value, onChange, placeholder = "Start writing...",
 			}
 		});
 		return cmds;
-	}, [pluginBlocks, _t2]);
+	}, [pluginBlocks, _t4]);
 	const filterCommandsRef = React.useRef((_q) => []);
 	filterCommandsRef.current = (query) => {
 		if (!query) return slashCommands;
@@ -6994,8 +7287,8 @@ function PortableTextEditor({ value, onChange, placeholder = "Start writing...",
 		const titleMatches = [];
 		const otherMatches = [];
 		for (const item of slashCommands) {
-			const titleStr = typeof item.title === "string" ? item.title : _t2(item.title);
-			const descStr = typeof item.description === "string" ? item.description : _t2(item.description);
+			const titleStr = typeof item.title === "string" ? item.title : _t4(item.title);
+			const descStr = typeof item.description === "string" ? item.description : _t4(item.description);
 			if (titleStr.toLowerCase().includes(searchText)) titleMatches.push(item);
 			else if (descStr.toLowerCase().includes(searchText) || item.aliases?.some((alias) => alias.toLowerCase().includes(searchText))) otherMatches.push(item);
 		}
@@ -7047,7 +7340,10 @@ function PortableTextEditor({ value, onChange, placeholder = "Start writing...",
 		content: initialContent,
 		editable,
 		immediatelyRender: true,
-		editorProps: React.useMemo(() => ({ attributes: { class: "prose prose-sm sm:prose-base dark:prose-invert max-w-none focus:outline-none min-h-[200px] p-4" } }), []),
+		editorProps: React.useMemo(() => ({ attributes: {
+			class: "prose prose-sm sm:prose-base dark:prose-invert max-w-none focus:outline-none min-h-[200px] p-4",
+			dir: "auto"
+		} }), []),
 		onUpdate: ({ editor: updatedEditor }) => {
 			const cb = onChangeRef.current;
 			if (cb) cb(prosemirrorToPortableText(updatedEditor.getJSON()));
@@ -8398,7 +8694,8 @@ function SeoPanel({ contentKey, seo, onChange }) {
 				value: draft.title,
 				onChange: (e) => {
 					updateDraft({ title: e.target.value });
-				}
+				},
+				dir: "auto"
 			}),
 			/* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx(InputArea, {
 				label: _t({
@@ -8417,7 +8714,8 @@ function SeoPanel({ contentKey, seo, onChange }) {
 				onChange: (e) => {
 					updateDraft({ description: e.target.value });
 				},
-				rows: 3
+				rows: 3,
+				dir: "auto"
 			}) }),
 			/* @__PURE__ */ jsx(Input, {
 				label: _t({
@@ -8455,6 +8753,65 @@ function SeoPanel({ contentKey, seo, onChange }) {
 	});
 }
 
+//#endregion
+//#region src/lib/taxonomy-match.ts
+/**
+* Taxonomy term matching for the admin picker.
+*
+* The picker filters an editor's typed input against existing terms. A naive
+* `label.toLowerCase().includes(input.toLowerCase())` fails the accent case:
+* typing `"Mexico"` does not substring-match a term labeled `"México"`
+* because `"méxico".toLowerCase()` is still `"méxico"` and
+* `"méxico".includes("mexico")` is `false`. The editor then sees zero
+* suggestions and creates a duplicate `"Mexico"` term alongside the
+* canonical `"México"`, splitting the taxonomy.
+*
+* This module folds diacritics via NFD decomposition before substring
+* matching. No regexes are compiled from user input, so there is no ReDoS
+* surface.
+*/
+const DIACRITIC_RANGE = /[\u0300-\u036f]/g;
+/**
+* Case-fold + diacritic-fold normalization for substring matching.
+*
+* `"México"`, `"mexico"`, `"MÉXICO"` all collapse to `"mexico"`.
+*
+* NFD decomposes accented characters into a base + combining-diacritic
+* sequence; the regex drops the combiners. Greek tonos, Vietnamese
+* stacked diacritics, and other Latin-adjacent scripts are covered.
+* Combining marks used meaningfully in non-Latin scripts (Arabic harakat
+* U+064B–U+0652, Japanese dakuten U+3099) fall outside the U+0300–036F
+* block and are left untouched — stripping them would change meaning.
+*/
+function foldForMatch(value) {
+	return value.normalize("NFD").replace(DIACRITIC_RANGE, "").toLowerCase();
+}
+/**
+* True if `input` is a substring of the term's label, ignoring case and
+* diacritics.
+*
+* Empty or whitespace-only input returns `false` — the caller decides
+* whether to show all terms or none in that state. The whitespace guard
+* matters: without it, a needle of `"   "` would `.includes()`-match
+* every term whose label contains a space.
+*/
+function termMatches(term, input) {
+	const needle = foldForMatch(input).trim();
+	if (!needle) return false;
+	return foldForMatch(term.label).includes(needle);
+}
+/**
+* True if `input` is an exact (fold-equal) match for the term's label.
+* Used to decide whether to show the "Create new term" button — if an
+* editor types `"Mexico"` and a term labeled `"México"` already exists,
+* Create must not appear or they'll produce a duplicate.
+*/
+function termExactMatches(term, input) {
+	const needle = foldForMatch(input).trim();
+	if (!needle) return false;
+	return foldForMatch(term.label).trim() === needle;
+}
+
 //#endregion
 //#region src/components/TaxonomySidebar.tsx
 /**
@@ -8500,7 +8857,7 @@ function CategoryCheckboxTree({ term, level = 0, selectedIds, onToggle }) {
 	const isChecked = selectedIds.has(term.id);
 	return /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsxs("label", {
 		className: "flex items-center py-1 cursor-pointer hover:bg-kumo-tint/50 rounded px-2",
-		style: { marginLeft: `${level}rem` },
+		style: { marginInlineStart: `${level}rem` },
 		children: [/* @__PURE__ */ jsx("input", {
 			type: "checkbox",
 			checked: isChecked,
@@ -8527,7 +8884,7 @@ function TagInput({ terms, selectedIds, onAdd, onRemove, onCreate, isCreating, l
 	const trimmedInput = input.trim();
 	const suggestions = React.useMemo(() => {
 		if (!trimmedInput) return [];
-		return terms.filter((term) => term.label.toLowerCase().includes(trimmedInput.toLowerCase()) && !selectedIds.has(term.id)).slice(0, 5);
+		return terms.filter((term) => !selectedIds.has(term.id) && termMatches(term, trimmedInput)).slice(0, 5);
 	}, [
 		trimmedInput,
 		terms,
@@ -8535,7 +8892,7 @@ function TagInput({ terms, selectedIds, onAdd, onRemove, onCreate, isCreating, l
 	]);
 	const hasExactMatch = React.useMemo(() => {
 		if (!trimmedInput) return false;
-		return terms.some((term) => term.label.toLowerCase() === trimmedInput.toLowerCase());
+		return terms.some((term) => termExactMatches(term, trimmedInput));
 	}, [trimmedInput, terms]);
 	const showCreateOption = trimmedInput.length > 0 && !hasExactMatch;
 	const handleSelect = (term) => {
@@ -8850,13 +9207,6 @@ function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSav
 		roleLabel: entry.roleLabel
 	})) ?? []);
 	const [portableTextEditor, setPortableTextEditor] = React.useState(null);
-	const ptEditorClaimedRef = React.useRef(false);
-	React.useCallback((editor) => {
-		if (!ptEditorClaimedRef.current) {
-			ptEditorClaimedRef.current = true;
-			setPortableTextEditor(editor);
-		}
-	}, []);
 	const [blockSidebarPanel, setBlockSidebarPanel] = React.useState(null);
 	const handleBlockSidebarOpen = React.useCallback((panel) => {
 		setBlockSidebarPanel(panel);
@@ -9684,6 +10034,7 @@ function FieldRenderer({ name, field, value, onChange, onEditorReady, minimal, p
 			value: typeof value === "string" ? value : "",
 			onChange: (e) => handleChange(e.target.value),
 			required: field.required,
+			dir: "auto",
 			className: minimal ? "border-0 bg-transparent px-0 text-lg font-medium focus-visible:ring-0 focus-visible:ring-offset-0" : void 0
 		});
 		case "number": return /* @__PURE__ */ jsx(Input, {
@@ -9734,6 +10085,7 @@ function FieldRenderer({ name, field, value, onChange, onEditorReady, minimal, p
 			value: typeof value === "string" ? value : "",
 			onChange: (e) => handleChange(e.target.value),
 			rows: 10,
+			dir: "auto",
 			placeholder: _t2({
 				id: "dPFFy+",
 				message: "Enter markdown content..."
@@ -9830,7 +10182,8 @@ function FieldRenderer({ name, field, value, onChange, onEditorReady, minimal, p
 			id,
 			value: typeof value === "string" ? value : "",
 			onChange: (e) => handleChange(e.target.value),
-			required: field.required
+			required: field.required,
+			dir: "auto"
 		});
 	}
 }
@@ -10470,7 +10823,7 @@ function getItemTitle$1(item) {
 /**
 * Content list view with table display and trash tab
 */
-function ContentList({ collection, collectionLabel, items, trashedItems = [], isLoading, isTrashedLoading, onDelete, onDuplicate, onRestore, onPermanentDelete, onLoadMore, onLoadMoreTrashed, hasMore, hasMoreTrashed, trashedCount = 0, i18n: i18n$1, activeLocale, onLocaleChange, urlPattern }) {
+function ContentList({ collection, collectionLabel, items, trashedItems = [], isLoading, isTrashedLoading, onDelete, onDuplicate, onRestore, onPermanentDelete, onLoadMore, onLoadMoreTrashed, hasMore, hasMoreTrashed, trashedCount = 0, i18n: i18n$1, activeLocale, onLocaleChange, urlPattern, sort, onSortChange }) {
 	const { _: _t } = useLingui();
 	const [activeTab, setActiveTab] = React.useState("all");
 	const [searchQuery, setSearchQuery] = React.useState("");
@@ -10586,34 +10939,38 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 						children: [/* @__PURE__ */ jsx("thead", { children: /* @__PURE__ */ jsxs("tr", {
 							className: "border-b bg-kumo-tint/50",
 							children: [
-								/* @__PURE__ */ jsx("th", {
-									scope: "col",
-									className: "px-4 py-3 text-start text-sm font-medium",
-									children: _t({
+								/* @__PURE__ */ jsx(SortableTh, {
+									field: "title",
+									sort,
+									onSortChange,
+									label: _t({
 										id: "MHrjPM",
 										message: "Title"
 									})
 								}),
-								/* @__PURE__ */ jsx("th", {
-									scope: "col",
-									className: "px-4 py-3 text-start text-sm font-medium",
-									children: _t({
+								/* @__PURE__ */ jsx(SortableTh, {
+									field: "status",
+									sort,
+									onSortChange,
+									label: _t({
 										id: "uAQUqI",
 										message: "Status"
 									})
 								}),
-								i18n$1 && /* @__PURE__ */ jsx("th", {
-									scope: "col",
-									className: "px-4 py-3 text-start text-sm font-medium",
-									children: _t({
+								i18n$1 && /* @__PURE__ */ jsx(SortableTh, {
+									field: "locale",
+									sort,
+									onSortChange,
+									label: _t({
 										id: "8NbHF7",
 										message: "Locale"
 									})
 								}),
-								/* @__PURE__ */ jsx("th", {
-									scope: "col",
-									className: "px-4 py-3 text-start text-sm font-medium",
-									children: _t({
+								/* @__PURE__ */ jsx(SortableTh, {
+									field: "updatedAt",
+									sort,
+									onSortChange,
+									label: _t({
 										id: "mYGY3B",
 										message: "Date"
 									})
@@ -10806,6 +11163,52 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 		]
 	});
 }
+/**
+* Table header that doubles as a sort control when the parent opted in by
+* passing `onSortChange`. When no callback is provided we fall back to a
+* plain `<th>` so legacy callers (and screen readers) see exactly the same
+* markup as before this change.
+*
+* The button's accessible name is just the column label — the sort state
+* is conveyed via `aria-sort` on the <th>, which screen readers announce
+* automatically. Adding a verbose aria-label would make each header re-read
+* the sort instruction on every focus, which is noisy.
+*/
+function SortableTh({ field, sort, onSortChange, label }) {
+	const isActive = sort?.field === field;
+	const direction = isActive ? sort?.direction : void 0;
+	if (!onSortChange) return /* @__PURE__ */ jsx("th", {
+		scope: "col",
+		className: "px-4 py-3 text-start text-sm font-medium",
+		children: label
+	});
+	const ariaSort = isActive ? direction === "asc" ? "ascending" : "descending" : "none";
+	const handleClick = () => {
+		if (isActive) onSortChange({
+			field,
+			direction: direction === "asc" ? "desc" : "asc"
+		});
+		else onSortChange({
+			field,
+			direction: "desc"
+		});
+	};
+	const Icon = isActive ? direction === "asc" ? CaretUp : CaretDown : CaretUpDown;
+	return /* @__PURE__ */ jsx("th", {
+		scope: "col",
+		"aria-sort": ariaSort,
+		className: "px-4 py-3 text-start text-sm font-medium",
+		children: /* @__PURE__ */ jsxs("button", {
+			type: "button",
+			onClick: handleClick,
+			className: cn("inline-flex items-center gap-1 rounded hover:text-kumo-brand", "focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-kumo-brand", isActive ? "text-kumo-fg" : "text-kumo-subtle"),
+			children: [/* @__PURE__ */ jsx("span", { children: label }), /* @__PURE__ */ jsx(Icon, {
+				className: "h-3 w-3",
+				"aria-hidden": "true"
+			})]
+		})
+	});
+}
 function ContentListItem({ item, collection, onDelete, onDuplicate, showLocale, urlPattern }) {
 	const { _: _t2 } = useLingui();
 	const title = getItemTitle$1(item);
@@ -12027,7 +12430,7 @@ function ContentTypeEditor({ collection, isNew, isSaving, onSave, onAddField, on
 	const [labelSingular, setLabelSingular] = React.useState(collection?.labelSingular ?? "");
 	const [description, setDescription] = React.useState(collection?.description ?? "");
 	const [urlPattern, setUrlPattern] = React.useState(collection?.urlPattern ?? "");
-	const [supports, setSupports] = React.useState((collection?.supports ?? ["drafts"]).filter((s) => s !== "seo"));
+	const [supports, setSupports] = React.useState((collection?.supports ?? ["drafts", "revisions"]).filter((s) => s !== "seo"));
 	const [hasSeo, setHasSeo] = React.useState(collection?.hasSeo ?? false);
 	const [commentsEnabled, setCommentsEnabled] = React.useState(collection?.commentsEnabled ?? false);
 	const [commentsModeration, setCommentsModeration] = React.useState(collection?.commentsModeration ?? "first_time");
@@ -14119,6 +14522,24 @@ function LogoLockup({ className, ...props }) {
 		]
 	});
 }
+function BrandLogo({ logoUrl, siteName, className }) {
+	if (logoUrl) return /* @__PURE__ */ jsx("img", {
+		src: logoUrl,
+		alt: siteName || "",
+		className,
+		style: { objectFit: "contain" }
+	});
+	return /* @__PURE__ */ jsx(LogoLockup, { className });
+}
+function BrandIcon({ logoUrl, siteName, className }) {
+	if (logoUrl) return /* @__PURE__ */ jsx("img", {
+		src: logoUrl,
+		alt: siteName || "",
+		className,
+		style: { objectFit: "contain" }
+	});
+	return /* @__PURE__ */ jsx(LogoIcon, { className });
+}
 
 //#endregion
 //#region src/components/InviteAcceptPage.tsx
@@ -14657,54 +15078,13 @@ function PasskeyLogin({ optionsEndpoint, verifyEndpoint, onSuccess, onError, sho
 * It's a standalone page for authentication.
 *
 * Supports:
-* - Passkey authentication (primary)
-* - OAuth (GitHub, Google) when configured
+* - Passkey authentication (always available)
+* - Pluggable auth providers (AT Protocol, GitHub, Google, etc.) when configured
 * - Magic link (email) when configured
 *
 * When external auth (e.g., Cloudflare Access) is configured, this page
 * redirects to the admin dashboard since authentication is handled externally.
 */
-function GitHubIcon({ className }) {
-	return /* @__PURE__ */ jsx("svg", {
-		className,
-		viewBox: "0 0 24 24",
-		fill: "currentColor",
-		children: /* @__PURE__ */ jsx("path", { d: "M12 0c-6.626 0-12 5.373-12 12 0 5.302 3.438 9.8 8.207 11.387.599.111.793-.261.793-.577v-2.234c-3.338.726-4.033-1.416-4.033-1.416-.546-1.387-1.333-1.756-1.333-1.756-1.089-.745.083-.729.083-.729 1.205.084 1.839 1.237 1.839 1.237 1.07 1.834 2.807 1.304 3.492.997.107-.775.418-1.305.762-1.604-2.665-.305-5.467-1.334-5.467-5.931 0-1.311.469-2.381 1.236-3.221-.124-.303-.535-1.524.117-3.176 0 0 1.008-.322 3.301 1.23.957-.266 1.983-.399 3.003-.404 1.02.005 2.047.138 3.006.404 2.291-1.552 3.297-1.23 3.297-1.23.653 1.653.242 2.874.118 3.176.77.84 1.235 1.911 1.235 3.221 0 4.609-2.807 5.624-5.479 5.921.43.372.823 1.102.823 2.222v3.293c0 .319.192.694.801.576 4.765-1.589 8.199-6.086 8.199-11.386 0-6.627-5.373-12-12-12z" })
-	});
-}
-function GoogleIcon({ className }) {
-	return /* @__PURE__ */ jsxs("svg", {
-		className,
-		viewBox: "0 0 24 24",
-		children: [
-			/* @__PURE__ */ jsx("path", {
-				fill: "#4285F4",
-				d: "M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z"
-			}),
-			/* @__PURE__ */ jsx("path", {
-				fill: "#34A853",
-				d: "M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z"
-			}),
-			/* @__PURE__ */ jsx("path", {
-				fill: "#FBBC05",
-				d: "M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z"
-			}),
-			/* @__PURE__ */ jsx("path", {
-				fill: "#EA4335",
-				d: "M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z"
-			})
-		]
-	});
-}
-const OAUTH_PROVIDERS = [{
-	id: "github",
-	name: "GitHub",
-	icon: /* @__PURE__ */ jsx(GitHubIcon, { className: "h-5 w-5" })
-}, {
-	id: "google",
-	name: "Google",
-	icon: /* @__PURE__ */ jsx(GoogleIcon, { className: "h-5 w-5" })
-}];
 function MagicLinkForm({ onBack }) {
 	const { _: _t } = useLingui();
 	const [email, setEmail] = React.useState("");
@@ -14845,22 +15225,21 @@ function MagicLinkForm({ onBack }) {
 		]
 	});
 }
-function handleOAuthClick(providerId) {
-	window.location.href = `/_emdash/api/auth/oauth/${providerId}`;
-}
 function LoginPage({ redirectUrl = "/_emdash/admin" }) {
 	const safeRedirectUrl = sanitizeRedirectUrl(redirectUrl);
 	const { _: _t2 } = useLingui();
 	const { locale, setLocale } = useLocale();
 	const [method, setMethod] = React.useState("passkey");
 	const [urlError, setUrlError] = React.useState(null);
-	const { data: manifest, isLoading: manifestLoading } = useQuery({
-		queryKey: ["manifest"],
-		queryFn: fetchManifest
+	const [activeProvider, setActiveProvider] = React.useState(null);
+	const authProviderList = useAuthProviderList();
+	const { data: authInfo, isLoading: authModeLoading } = useQuery({
+		queryKey: ["authMode"],
+		queryFn: fetchAuthMode
 	});
 	React.useEffect(() => {
-		if (manifest?.authMode && manifest.authMode !== "passkey") window.location.href = safeRedirectUrl;
-	}, [manifest, safeRedirectUrl]);
+		if (authInfo?.authMode && authInfo.authMode !== "passkey") window.location.href = safeRedirectUrl;
+	}, [authInfo, safeRedirectUrl]);
 	React.useEffect(() => {
 		const params = new URLSearchParams(window.location.search);
 		const error = params.get("error");
@@ -14877,11 +15256,12 @@ function LoginPage({ redirectUrl = "/_emdash/admin" }) {
 	const handleSuccess = () => {
 		window.location.href = safeRedirectUrl;
 	};
-	if (manifestLoading || manifest?.authMode && manifest.authMode !== "passkey") return /* @__PURE__ */ jsx("div", {
+	const buttonProviders = authProviderList.filter((p) => p.LoginButton);
+	if (authModeLoading || authInfo?.authMode && authInfo.authMode !== "passkey") return /* @__PURE__ */ jsx("div", {
 		className: "min-h-screen flex items-center justify-center bg-kumo-base p-4",
 		children: /* @__PURE__ */ jsxs("div", {
 			className: "flex flex-col items-center",
-			children: [/* @__PURE__ */ jsx(LogoLockup, { className: "h-10 mb-4" }), /* @__PURE__ */ jsx(Loader, {})]
+			children: [/* @__PURE__ */ jsx(BrandLogo, { className: "h-10 mb-4" }), /* @__PURE__ */ jsx(Loader, {})]
 		})
 	});
 	return /* @__PURE__ */ jsx("div", {
@@ -14891,15 +15271,19 @@ function LoginPage({ redirectUrl = "/_emdash/admin" }) {
 			children: [
 				/* @__PURE__ */ jsxs("div", {
 					className: "text-center mb-8",
-					children: [/* @__PURE__ */ jsx(LogoLockup, { className: "h-10 mx-auto mb-2" }), /* @__PURE__ */ jsxs("h1", {
+					children: [/* @__PURE__ */ jsx(BrandLogo, { className: "h-10 mx-auto mb-2" }), /* @__PURE__ */ jsx("h1", {
 						className: "text-2xl font-semibold text-kumo-default",
-						children: [method === "passkey" && _t2({
-							id: "lE0wHD",
-							message: "Sign in to your site"
-						}), method === "magic-link" && _t2({
+						children: method === "magic-link" ? _t2({
 							id: "me9L29",
 							message: "Sign in with email"
-						})]
+						}) : activeProvider ? _t2({
+							id: "e/ToF5",
+							message: "Sign in with {0}",
+							values: { 0: authProviderList.find((p) => p.id === activeProvider)?.label ?? activeProvider }
+						}) : _t2({
+							id: "lE0wHD",
+							message: "Sign in to your site"
+						})
 					})]
 				}),
 				urlError && /* @__PURE__ */ jsx("div", {
@@ -14908,71 +15292,94 @@ function LoginPage({ redirectUrl = "/_emdash/admin" }) {
 				}),
 				/* @__PURE__ */ jsxs("div", {
 					className: "bg-kumo-base border rounded-lg shadow-sm p-6",
-					children: [method === "passkey" && /* @__PURE__ */ jsxs("div", {
-						className: "space-y-6",
-						children: [
-							/* @__PURE__ */ jsx(PasskeyLogin, {
-								optionsEndpoint: "/_emdash/api/auth/passkey/options",
-								verifyEndpoint: "/_emdash/api/auth/passkey/verify",
-								onSuccess: handleSuccess,
-								buttonText: _t2({
-									id: "QjsOMP",
-									message: "Sign in with Passkey"
-								})
-							}),
-							/* @__PURE__ */ jsxs("div", {
-								className: "relative",
-								children: [/* @__PURE__ */ jsx("div", {
-									className: "absolute inset-0 flex items-center",
-									children: /* @__PURE__ */ jsx("span", { className: "w-full border-t" })
-								}), /* @__PURE__ */ jsx("div", {
-									className: "relative flex justify-center text-xs uppercase",
-									children: /* @__PURE__ */ jsx("span", {
-										className: "bg-kumo-base px-2 text-kumo-subtle",
-										children: _t2({
-											id: "zW+FpA",
-											message: "Or continue with"
+					children: [
+						method === "passkey" && !activeProvider && /* @__PURE__ */ jsxs("div", {
+							className: "space-y-6",
+							children: [
+								/* @__PURE__ */ jsx(PasskeyLogin, {
+									optionsEndpoint: "/_emdash/api/auth/passkey/options",
+									verifyEndpoint: "/_emdash/api/auth/passkey/verify",
+									onSuccess: handleSuccess,
+									buttonText: _t2({
+										id: "QjsOMP",
+										message: "Sign in with Passkey"
+									})
+								}),
+								/* @__PURE__ */ jsxs("div", {
+									className: "relative",
+									children: [/* @__PURE__ */ jsx("div", {
+										className: "absolute inset-0 flex items-center",
+										children: /* @__PURE__ */ jsx("span", { className: "w-full border-t" })
+									}), /* @__PURE__ */ jsx("div", {
+										className: "relative flex justify-center text-xs uppercase",
+										children: /* @__PURE__ */ jsx("span", {
+											className: "bg-kumo-base px-2 text-kumo-subtle",
+											children: _t2({
+												id: "zW+FpA",
+												message: "Or continue with"
+											})
 										})
+									})]
+								}),
+								buttonProviders.length > 0 && /* @__PURE__ */ jsx("div", {
+									className: `grid gap-3 ${buttonProviders.length === 1 ? "grid-cols-1" : "grid-cols-2"}`,
+									children: buttonProviders.map((provider) => {
+										const Btn = provider.LoginButton;
+										const hasForm = !!provider.LoginForm;
+										const selectProvider = () => setActiveProvider(provider.id);
+										return /* @__PURE__ */ jsx("div", {
+											onClick: hasForm ? selectProvider : void 0,
+											children: /* @__PURE__ */ jsx(Btn, {})
+										}, provider.id);
 									})
-								})]
-							}),
-							/* @__PURE__ */ jsx("div", {
-								className: "grid grid-cols-2 gap-3",
-								children: OAUTH_PROVIDERS.map((provider) => /* @__PURE__ */ jsxs(Button, {
-									variant: "outline",
-									type: "button",
-									onClick: () => handleOAuthClick(provider.id),
+								}),
+								/* @__PURE__ */ jsx(Button, {
+									variant: "ghost",
 									className: "w-full justify-center",
-									children: [provider.icon, /* @__PURE__ */ jsx("span", {
-										className: "ms-2",
-										children: provider.name
-									})]
-								}, provider.id))
-							}),
-							/* @__PURE__ */ jsx(Button, {
-								variant: "ghost",
-								className: "w-full justify-center",
-								type: "button",
-								onClick: () => setMethod("magic-link"),
-								children: _t2({
-									id: "RxerEl",
-									message: "Sign in with email link"
+									type: "button",
+									onClick: () => setMethod("magic-link"),
+									children: _t2({
+										id: "RxerEl",
+										message: "Sign in with email link"
+									})
 								})
-							})
-						]
-					}), method === "magic-link" && /* @__PURE__ */ jsx(MagicLinkForm, { onBack: () => setMethod("passkey") })]
+							]
+						}),
+						method === "passkey" && activeProvider && (() => {
+							const provider = authProviderList.find((p) => p.id === activeProvider);
+							if (!provider?.LoginForm) return null;
+							const Form = provider.LoginForm;
+							return /* @__PURE__ */ jsxs("div", {
+								className: "space-y-4",
+								children: [/* @__PURE__ */ jsx(Form, {}), /* @__PURE__ */ jsx(Button, {
+									type: "button",
+									variant: "ghost",
+									className: "w-full justify-center",
+									onClick: () => setActiveProvider(null),
+									children: _t2({
+										id: "VCoEm+",
+										message: "Back to login"
+									})
+								})]
+							});
+						})(),
+						method === "magic-link" && /* @__PURE__ */ jsx(MagicLinkForm, { onBack: () => setMethod("passkey") })
+					]
 				}),
 				/* @__PURE__ */ jsx("p", {
 					className: "text-center mt-6 text-sm text-kumo-subtle",
-					children: method === "passkey" ? _t2({
-						id: "+ET/av",
-						message: "Use your registered passkey to sign in securely."
-					}) : _t2({
+					children: method === "magic-link" ? _t2({
 						id: "pv+wH3",
 						message: "We'll send you a link to sign in without a password."
+					}) : activeProvider ? _t2({
+						id: "TZGT4o",
+						message: "Enter your handle to sign in."
+					}) : _t2({
+						id: "+ET/av",
+						message: "Use your registered passkey to sign in securely."
 					})
 				}),
-				manifest?.signupEnabled && /* @__PURE__ */ jsx("p", {
+				authInfo?.signupEnabled && /* @__PURE__ */ jsx("p", {
 					className: "text-center mt-4 text-sm text-kumo-subtle",
 					children: /* @__PURE__ */ jsx(Trans, {
 						id: "352VU2",
@@ -21366,6 +21773,50 @@ const API_TOKEN_SCOPE_VALUES = [
 			message: "Modify collection schemas"
 		}
 	},
+	{
+		scope: API_TOKEN_SCOPES.TaxonomiesManage,
+		label: {
+			id: "cfmuSI",
+			message: "Taxonomies Manage"
+		},
+		description: {
+			id: "mmBufY",
+			message: "Create, update, and delete taxonomy terms"
+		}
+	},
+	{
+		scope: API_TOKEN_SCOPES.MenusManage,
+		label: {
+			id: "Wosws9",
+			message: "Menus Manage"
+		},
+		description: {
+			id: "DGhfmD",
+			message: "Create, update, and delete navigation menus"
+		}
+	},
+	{
+		scope: API_TOKEN_SCOPES.SettingsRead,
+		label: {
+			id: "tYQSLw",
+			message: "Settings Read"
+		},
+		description: {
+			id: "fHKrk0",
+			message: "Read site settings"
+		}
+	},
+	{
+		scope: API_TOKEN_SCOPES.SettingsManage,
+		label: {
+			id: "+K5A49",
+			message: "Settings Manage"
+		},
+		description: {
+			id: "RAXQwS",
+			message: "Update site settings"
+		}
+	},
 	{
 		scope: API_TOKEN_SCOPES.Admin,
 		label: {
@@ -23423,8 +23874,9 @@ function SocialSettings() {
 *
 * Steps:
 * 1. Site Configuration (title, tagline, sample content)
-* 2. Admin Account (email, name)
-* 3. Passkey Registration
+* 2. Create admin account — user picks any available auth method:
+*    - Passkey (always available)
+*    - Any configured auth provider (AT Protocol, GitHub, Google, etc.)
 */
 async function fetchSetupStatus() {
 	return parseApiResponse(await apiFetch("/_emdash/api/setup/status"), "Failed to fetch setup status");
@@ -23445,8 +23897,8 @@ async function executeAdminSetup(data) {
 }
 function SiteStep({ seedInfo, onNext, isLoading, error }) {
 	const { _: _t } = useLingui();
-	const [title, setTitle] = React.useState("");
-	const [tagline, setTagline] = React.useState("");
+	const [title, setTitle] = React.useState(seedInfo?.title ?? "");
+	const [tagline, setTagline] = React.useState(seedInfo?.tagline ?? "");
 	const [includeContent, setIncludeContent] = React.useState(true);
 	const [errors, setErrors] = React.useState({});
 	const validate = () => {
@@ -23658,58 +24110,97 @@ function AdminStep({ onNext, onBack, isLoading, error }) {
 		]
 	});
 }
-function handlePasskeySuccess() {
+function handleSetupSuccess() {
 	window.location.href = "/_emdash/admin";
 }
-function PasskeyStep({ adminData, onBack }) {
+function AuthMethodStep({ adminData, providers, onBack }) {
 	const { _: _t3 } = useLingui();
+	const [activeProvider, setActiveProvider] = React.useState(null);
+	const buttonProviders = providers.filter((p) => p.LoginButton);
+	const hasProviders = buttonProviders.length > 0;
+	if (activeProvider) {
+		const provider = providers.find((p) => p.id === activeProvider);
+		if (provider && (provider.SetupStep || provider.LoginForm)) return /* @__PURE__ */ jsxs("div", {
+			className: "space-y-4",
+			children: [
+				/* @__PURE__ */ jsx("div", {
+					className: "text-center mb-2",
+					children: /* @__PURE__ */ jsx("h3", {
+						className: "text-lg font-medium",
+						children: _t3({
+							id: "e/ToF5",
+							message: "Sign in with {0}",
+							values: { 0: provider.label }
+						})
+					})
+				}),
+				provider.SetupStep ? /* @__PURE__ */ jsx(provider.SetupStep, { onComplete: handleSetupSuccess }) : provider.LoginForm ? /* @__PURE__ */ jsx(provider.LoginForm, {}) : null,
+				/* @__PURE__ */ jsx(Button, {
+					type: "button",
+					variant: "ghost",
+					className: "w-full justify-center",
+					onClick: () => setActiveProvider(null),
+					children: _t3({
+						id: "2ygf/L",
+						message: "← Back"
+					})
+				})
+			]
+		});
+	}
 	return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
 		children: [
 			/* @__PURE__ */ jsxs("div", {
 				className: "text-center",
-				children: [
-					/* @__PURE__ */ jsx("div", {
-						className: "inline-flex items-center justify-center w-16 h-16 rounded-full bg-kumo-brand/10 mb-4",
-						children: /* @__PURE__ */ jsx("svg", {
-							className: "w-8 h-8 text-kumo-brand",
-							fill: "none",
-							stroke: "currentColor",
-							viewBox: "0 0 24 24",
-							children: /* @__PURE__ */ jsx("path", {
-								strokeLinecap: "round",
-								strokeLinejoin: "round",
-								strokeWidth: 2,
-								d: "M12 11c0 3.517-1.009 6.799-2.753 9.571m-3.44-2.04l.054-.09A13.916 13.916 0 008 11a4 4 0 118 0c0 1.017-.07 2.019-.203 3m-2.118 6.844A21.88 21.88 0 0015.171 17m3.839 1.132c.645-2.266.99-4.659.99-7.132A8 8 0 008 4.07M3 15.364c.64-1.319 1-2.8 1-4.364 0-1.457.39-2.823 1.07-4"
-							})
-						})
-					}),
-					/* @__PURE__ */ jsx("h3", {
-						className: "text-lg font-medium",
-						children: _t3({
-							id: "fifQ8k",
-							message: "Set up your passkey"
-						})
-					}),
-					/* @__PURE__ */ jsx("p", {
-						className: "text-sm text-kumo-subtle mt-1",
-						children: _t3({
-							id: "YdZ7D8",
-							message: "Passkeys are more secure than passwords. You'll use your device's biometrics, PIN, or security key to sign in."
-						})
+				children: [/* @__PURE__ */ jsx("h3", {
+					className: "text-lg font-medium",
+					children: _t3({
+						id: "HAV363",
+						message: "Choose how to sign in"
 					})
-				]
+				}), /* @__PURE__ */ jsx("p", {
+					className: "text-sm text-kumo-subtle mt-1",
+					children: _t3({
+						id: "NH33Oi",
+						message: "Pick any method to create your admin account."
+					})
+				})]
 			}),
 			/* @__PURE__ */ jsx(PasskeyRegistration, {
 				optionsEndpoint: "/_emdash/api/setup/admin",
 				verifyEndpoint: "/_emdash/api/setup/admin/verify",
-				onSuccess: handlePasskeySuccess,
+				onSuccess: handleSetupSuccess,
 				buttonText: _t3({
 					id: "AKqzR1",
 					message: "Create Passkey"
 				}),
 				additionalData: { ...adminData }
 			}),
+			hasProviders && /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsxs("div", {
+				className: "relative",
+				children: [/* @__PURE__ */ jsx("div", {
+					className: "absolute inset-0 flex items-center",
+					children: /* @__PURE__ */ jsx("span", { className: "w-full border-t" })
+				}), /* @__PURE__ */ jsx("div", {
+					className: "relative flex justify-center text-xs uppercase",
+					children: /* @__PURE__ */ jsx("span", {
+						className: "bg-kumo-base px-2 text-kumo-subtle",
+						children: "Or continue with"
+					})
+				})]
+			}), /* @__PURE__ */ jsx("div", {
+				className: `grid gap-3 ${buttonProviders.length === 1 ? "grid-cols-1" : "grid-cols-2"}`,
+				children: buttonProviders.map((provider) => {
+					const Btn = provider.LoginButton;
+					const hasForm = !!provider.LoginForm || !!provider.SetupStep;
+					const selectProvider = () => setActiveProvider(provider.id);
+					return /* @__PURE__ */ jsx("div", {
+						onClick: hasForm ? selectProvider : void 0,
+						children: /* @__PURE__ */ jsx(Btn, {})
+					}, provider.id);
+				})
+			})] }),
 			/* @__PURE__ */ jsx(Button, {
 				type: "button",
 				variant: "ghost",
@@ -23749,8 +24240,8 @@ function StepIndicator$1({ currentStep, useAccessAuth }) {
 		{
 			key: "passkey",
 			label: _t4({
-				id: "FGSN4s",
-				message: "Passkey"
+				id: "n1ekoW",
+				message: "Sign In"
 			})
 		}
 	];
@@ -23788,11 +24279,26 @@ function SetupWizard() {
 	const [_siteData, setSiteData] = React.useState(null);
 	const [adminData, setAdminData] = React.useState(null);
 	const [error, setError] = React.useState();
+	const [urlError, setUrlError] = React.useState(null);
+	const authProviderList = useAuthProviderList();
+	React.useEffect(() => {
+		const params = new URLSearchParams(window.location.search);
+		const errorParam = params.get("error");
+		const message = params.get("message");
+		if (errorParam) {
+			setUrlError(message || `Authentication error: ${errorParam}`);
+			window.history.replaceState({}, "", window.location.pathname);
+		}
+	}, []);
 	const { data: status, isLoading: statusLoading, error: statusError } = useQuery({
 		queryKey: ["setup", "status"],
 		queryFn: fetchSetupStatus,
 		retry: false
 	});
+	const { data: manifest } = useQuery({
+		queryKey: ["manifest"],
+		queryFn: fetchManifest
+	});
 	const useAccessAuth = status?.authMode === "cloudflare-access";
 	const siteMutation = useMutation({
 		mutationFn: executeSiteSetup,
@@ -23871,7 +24377,11 @@ function SetupWizard() {
 				/* @__PURE__ */ jsxs("div", {
 					className: "text-center mb-6",
 					children: [
-						/* @__PURE__ */ jsx(LogoLockup, { className: "h-10 mx-auto mb-2" }),
+						/* @__PURE__ */ jsx(BrandLogo, {
+							logoUrl: manifest?.admin?.logo,
+							siteName: manifest?.admin?.siteName,
+							className: "h-10 mx-auto mb-2"
+						}),
 						/* @__PURE__ */ jsxs("h1", {
 							className: "text-2xl font-semibold text-kumo-default",
 							children: [
@@ -23898,6 +24408,10 @@ function SetupWizard() {
 						})
 					]
 				}),
+				urlError && /* @__PURE__ */ jsx("div", {
+					className: "mb-6 rounded-lg bg-kumo-danger/10 border border-kumo-danger/20 p-4 text-sm text-kumo-danger",
+					children: urlError
+				}),
 				/* @__PURE__ */ jsx(StepIndicator$1, {
 					currentStep,
 					useAccessAuth
@@ -23920,8 +24434,9 @@ function SetupWizard() {
 							isLoading: adminMutation.isPending,
 							error
 						}),
-						currentStep === "passkey" && adminData && /* @__PURE__ */ jsx(PasskeyStep, {
+						currentStep === "passkey" && adminData && /* @__PURE__ */ jsx(AuthMethodStep, {
 							adminData,
+							providers: authProviderList,
 							onBack: () => {
 								setError(void 0);
 								setCurrentStep("admin");
@@ -24655,12 +25170,14 @@ function SidebarNav({ manifest }) {
 			/* @__PURE__ */ jsx(KumoSidebar.Header, { children: /* @__PURE__ */ jsxs(Link$1, {
 				to: "/",
 				className: "emdash-brand-link flex w-full min-w-0 items-center gap-2 px-3 py-1",
-				children: [/* @__PURE__ */ jsx(LogoIcon, {
+				children: [/* @__PURE__ */ jsx(BrandIcon, {
+					logoUrl: manifest.admin?.logo,
+					siteName: manifest.admin?.siteName,
 					className: "size-5 shrink-0",
 					"aria-hidden": "true"
 				}), /* @__PURE__ */ jsx("span", {
 					className: "emdash-brand-text font-semibold truncate",
-					children: "EmDash"
+					children: manifest.admin?.siteName || "EmDash"
 				})]
 			}) }),
 			/* @__PURE__ */ jsxs(KumoSidebar.Content, { children: [
@@ -24726,7 +25243,8 @@ function SidebarNav({ manifest }) {
 			/* @__PURE__ */ jsx(KumoSidebar.Footer, { children: /* @__PURE__ */ jsxs("p", {
 				className: "emdash-nav-label px-3 py-2 text-[11px] text-white/30",
 				children: [
-					"EmDash CMS v",
+					manifest.admin?.siteName || "EmDash CMS",
+					" v",
 					manifest.version || "0.0.0",
 					manifest.commit && ` (${manifest.commit})`
 				]
@@ -25684,7 +26202,7 @@ function TermRow({ term, level = 0, onEdit, onDelete }) {
 		className: "flex items-center gap-4 py-2 px-4 border-b hover:bg-kumo-tint/50",
 		children: [
 			/* @__PURE__ */ jsxs("div", {
-				style: { marginLeft: `${level * 1.5}rem` },
+				style: { marginInlineStart: `${level * 1.5}rem` },
 				className: "flex-1",
 				children: [/* @__PURE__ */ jsx("span", {
 					className: "font-medium",
@@ -27028,7 +27546,20 @@ function Widgets() {
 	const [activeId, setActiveId] = React.useState(null);
 	const [activeDragData, setActiveDragData] = React.useState(null);
 	const [expandedWidgets, setExpandedWidgets] = React.useState(/* @__PURE__ */ new Set());
+	const [blockSidebarPanel, setBlockSidebarPanel] = React.useState(null);
 	const draggingFromPaletteRef = React.useRef(false);
+	const handleBlockSidebarOpen = React.useCallback((panel) => {
+		setBlockSidebarPanel((prev) => {
+			prev?.onClose();
+			return panel;
+		});
+	}, []);
+	const handleBlockSidebarClose = React.useCallback(() => {
+		setBlockSidebarPanel((prev) => {
+			prev?.onClose();
+			return null;
+		});
+	}, []);
 	const { data: areas = [], isLoading } = useQuery({
 		queryKey: ["widget-areas"],
 		queryFn: fetchWidgetAreas
@@ -27166,174 +27697,189 @@ function Widgets() {
 		collisionDetection,
 		onDragStart: handleDragStart,
 		onDragEnd: handleDragEnd,
-		children: [/* @__PURE__ */ jsxs("div", {
-			className: "space-y-6",
-			children: [/* @__PURE__ */ jsxs("div", {
-				className: "flex items-center justify-between",
-				children: [/* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("h1", {
-					className: "text-3xl font-bold",
-					children: "Widgets"
-				}), /* @__PURE__ */ jsx("p", {
-					className: "text-kumo-subtle",
-					children: "Manage content widgets in your widget areas"
-				})] }), /* @__PURE__ */ jsxs(Dialog.Root, {
-					open: isCreateAreaOpen,
-					onOpenChange: (open) => {
-						setIsCreateAreaOpen(open);
-						if (!open) setCreateAreaError(null);
-					},
-					children: [/* @__PURE__ */ jsx(Dialog.Trigger, { render: (props) => /* @__PURE__ */ jsx(Button, {
-						...props,
-						icon: /* @__PURE__ */ jsx(Plus, {}),
-						children: "Add Widget Area"
-					}) }), /* @__PURE__ */ jsxs(Dialog, {
-						className: "p-6",
-						size: "lg",
-						children: [/* @__PURE__ */ jsxs("div", {
-							className: "flex items-start justify-between gap-4 mb-4",
-							children: [/* @__PURE__ */ jsx(Dialog.Title, {
-								className: "text-lg font-semibold leading-none tracking-tight",
-								children: "Create Widget Area"
-							}), /* @__PURE__ */ jsx(Dialog.Close, {
-								"aria-label": "Close",
-								render: (props) => /* @__PURE__ */ jsxs(Button, {
-									...props,
-									variant: "ghost",
-									shape: "square",
+		children: [
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-6",
+				children: [/* @__PURE__ */ jsxs("div", {
+					className: "flex items-center justify-between",
+					children: [/* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("h1", {
+						className: "text-3xl font-bold",
+						children: "Widgets"
+					}), /* @__PURE__ */ jsx("p", {
+						className: "text-kumo-subtle",
+						children: "Manage content widgets in your widget areas"
+					})] }), /* @__PURE__ */ jsxs(Dialog.Root, {
+						open: isCreateAreaOpen,
+						onOpenChange: (open) => {
+							setIsCreateAreaOpen(open);
+							if (!open) setCreateAreaError(null);
+						},
+						children: [/* @__PURE__ */ jsx(Dialog.Trigger, { render: (props) => /* @__PURE__ */ jsx(Button, {
+							...props,
+							icon: /* @__PURE__ */ jsx(Plus, {}),
+							children: "Add Widget Area"
+						}) }), /* @__PURE__ */ jsxs(Dialog, {
+							className: "p-6",
+							size: "lg",
+							children: [/* @__PURE__ */ jsxs("div", {
+								className: "flex items-start justify-between gap-4 mb-4",
+								children: [/* @__PURE__ */ jsx(Dialog.Title, {
+									className: "text-lg font-semibold leading-none tracking-tight",
+									children: "Create Widget Area"
+								}), /* @__PURE__ */ jsx(Dialog.Close, {
 									"aria-label": "Close",
-									className: "absolute end-4 top-4",
-									children: [/* @__PURE__ */ jsx(X, { className: "h-4 w-4" }), /* @__PURE__ */ jsx("span", {
-										className: "sr-only",
-										children: "Close"
-									})]
-								})
+									render: (props) => /* @__PURE__ */ jsxs(Button, {
+										...props,
+										variant: "ghost",
+										shape: "square",
+										"aria-label": "Close",
+										className: "absolute end-4 top-4",
+										children: [/* @__PURE__ */ jsx(X, { className: "h-4 w-4" }), /* @__PURE__ */ jsx("span", {
+											className: "sr-only",
+											children: "Close"
+										})]
+									})
+								})]
+							}), /* @__PURE__ */ jsxs("form", {
+								onSubmit: handleCreateArea,
+								className: "space-y-4",
+								children: [
+									/* @__PURE__ */ jsx(Input, {
+										label: "Name",
+										name: "name",
+										required: true,
+										placeholder: "sidebar",
+										pattern: "[a-z0-9-]+"
+									}),
+									/* @__PURE__ */ jsx(Input, {
+										label: "Label",
+										name: "label",
+										required: true,
+										placeholder: "Main Sidebar"
+									}),
+									/* @__PURE__ */ jsx(Input, {
+										label: "Description",
+										name: "description",
+										placeholder: "Appears on posts and pages"
+									}),
+									/* @__PURE__ */ jsx(DialogError, { message: createAreaError || getMutationError(createAreaMutation.error) }),
+									/* @__PURE__ */ jsxs("div", {
+										className: "flex justify-end gap-2",
+										children: [/* @__PURE__ */ jsx(Button, {
+											type: "button",
+											variant: "outline",
+											onClick: () => setIsCreateAreaOpen(false),
+											children: "Cancel"
+										}), /* @__PURE__ */ jsx(Button, {
+											type: "submit",
+											disabled: createAreaMutation.isPending,
+											children: "Create"
+										})]
+									})
+								]
 							})]
-						}), /* @__PURE__ */ jsxs("form", {
-							onSubmit: handleCreateArea,
-							className: "space-y-4",
+						})]
+					})]
+				}), /* @__PURE__ */ jsxs("div", {
+					className: "grid grid-cols-12 gap-6",
+					children: [/* @__PURE__ */ jsx("div", {
+						className: "col-span-4",
+						children: /* @__PURE__ */ jsxs("div", {
+							className: "rounded-lg border bg-kumo-base p-6 space-y-4",
 							children: [
-								/* @__PURE__ */ jsx(Input, {
-									label: "Name",
-									name: "name",
-									required: true,
-									placeholder: "sidebar",
-									pattern: "[a-z0-9-]+"
-								}),
-								/* @__PURE__ */ jsx(Input, {
-									label: "Label",
-									name: "label",
-									required: true,
-									placeholder: "Main Sidebar"
+								/* @__PURE__ */ jsx("h2", {
+									className: "text-xl font-semibold",
+									children: "Available Widgets"
 								}),
-								/* @__PURE__ */ jsx(Input, {
-									label: "Description",
-									name: "description",
-									placeholder: "Appears on posts and pages"
+								/* @__PURE__ */ jsx("p", {
+									className: "text-sm text-kumo-subtle",
+									children: "Drag widgets into an area to add them"
 								}),
-								/* @__PURE__ */ jsx(DialogError, { message: createAreaError || getMutationError(createAreaMutation.error) }),
 								/* @__PURE__ */ jsxs("div", {
-									className: "flex justify-end gap-2",
-									children: [/* @__PURE__ */ jsx(Button, {
-										type: "button",
-										variant: "outline",
-										onClick: () => setIsCreateAreaOpen(false),
-										children: "Cancel"
-									}), /* @__PURE__ */ jsx(Button, {
-										type: "submit",
-										disabled: createAreaMutation.isPending,
-										children: "Create"
-									})]
+									className: "space-y-2",
+									children: [BUILTIN_WIDGETS.map((item) => /* @__PURE__ */ jsx(DraggablePaletteItem, {
+										id: item.id,
+										label: _t(item.label),
+										description: _t(item.description),
+										widgetInput: {
+											...item.input,
+											title: _t(item.label)
+										}
+									}, item.id)), components.map((comp) => /* @__PURE__ */ jsx(DraggablePaletteItem, {
+										id: `palette-comp-${comp.id}`,
+										label: comp.label,
+										description: comp.description,
+										widgetInput: {
+											type: "component",
+											title: comp.label,
+											componentId: comp.id
+										}
+									}, `palette-comp-${comp.id}`))]
 								})
 							]
-						})]
+						})
+					}), /* @__PURE__ */ jsx("div", {
+						className: "col-span-8 space-y-4",
+						children: areas.length === 0 ? /* @__PURE__ */ jsx("div", {
+							className: "rounded-lg border bg-kumo-base p-12 text-center",
+							children: /* @__PURE__ */ jsx("p", {
+								className: "text-kumo-subtle",
+								children: "No widget areas yet. Create one to get started."
+							})
+						}) : areas.map((area) => /* @__PURE__ */ jsx(WidgetAreaPanel, {
+							area,
+							expandedWidgets,
+							onToggleWidget: toggleWidget,
+							isDraggingPalette: activeDragData !== null && isPaletteItem(activeDragData),
+							components,
+							pluginBlocks,
+							onBlockSidebarOpen: handleBlockSidebarOpen,
+							onBlockSidebarClose: handleBlockSidebarClose
+						}, area.id))
 					})]
 				})]
-			}), /* @__PURE__ */ jsxs("div", {
-				className: "grid grid-cols-12 gap-6",
-				children: [/* @__PURE__ */ jsx("div", {
-					className: "col-span-4",
+			}),
+			/* @__PURE__ */ jsx(DragOverlay, {
+				dropAnimation: draggingFromPaletteRef.current ? null : void 0,
+				children: activePaletteLabel ? /* @__PURE__ */ jsx("div", {
+					className: "rounded border bg-kumo-base p-3 shadow-lg opacity-90",
+					children: /* @__PURE__ */ jsx("div", {
+						className: "font-medium",
+						children: activePaletteLabel
+					})
+				}) : activeWidget ? /* @__PURE__ */ jsx("div", {
+					className: "rounded border bg-kumo-base p-3 shadow-lg opacity-90",
 					children: /* @__PURE__ */ jsxs("div", {
-						className: "rounded-lg border bg-kumo-base p-6 space-y-4",
+						className: "flex items-center gap-2",
 						children: [
-							/* @__PURE__ */ jsx("h2", {
-								className: "text-xl font-semibold",
-								children: "Available Widgets"
-							}),
-							/* @__PURE__ */ jsx("p", {
-								className: "text-sm text-kumo-subtle",
-								children: "Drag widgets into an area to add them"
+							/* @__PURE__ */ jsx(DotsSixVertical, { className: "h-4 w-4 text-kumo-subtle" }),
+							/* @__PURE__ */ jsx("span", {
+								className: "font-medium",
+								children: activeWidget.title || "Untitled Widget"
 							}),
-							/* @__PURE__ */ jsxs("div", {
-								className: "space-y-2",
-								children: [BUILTIN_WIDGETS.map((item) => /* @__PURE__ */ jsx(DraggablePaletteItem, {
-									id: item.id,
-									label: _t(item.label),
-									description: _t(item.description),
-									widgetInput: {
-										...item.input,
-										title: _t(item.label)
-									}
-								}, item.id)), components.map((comp) => /* @__PURE__ */ jsx(DraggablePaletteItem, {
-									id: `palette-comp-${comp.id}`,
-									label: comp.label,
-									description: comp.description,
-									widgetInput: {
-										type: "component",
-										title: comp.label,
-										componentId: comp.id
-									}
-								}, `palette-comp-${comp.id}`))]
+							/* @__PURE__ */ jsxs("span", {
+								className: "text-xs text-kumo-subtle",
+								children: [
+									"(",
+									activeWidget.type,
+									")"
+								]
 							})
 						]
 					})
-				}), /* @__PURE__ */ jsx("div", {
-					className: "col-span-8 space-y-4",
-					children: areas.length === 0 ? /* @__PURE__ */ jsx("div", {
-						className: "rounded-lg border bg-kumo-base p-12 text-center",
-						children: /* @__PURE__ */ jsx("p", {
-							className: "text-kumo-subtle",
-							children: "No widget areas yet. Create one to get started."
-						})
-					}) : areas.map((area) => /* @__PURE__ */ jsx(WidgetAreaPanel, {
-						area,
-						expandedWidgets,
-						onToggleWidget: toggleWidget,
-						isDraggingPalette: activeDragData !== null && isPaletteItem(activeDragData),
-						components,
-						pluginBlocks
-					}, area.id))
-				})]
-			})]
-		}), /* @__PURE__ */ jsx(DragOverlay, {
-			dropAnimation: draggingFromPaletteRef.current ? null : void 0,
-			children: activePaletteLabel ? /* @__PURE__ */ jsx("div", {
-				className: "rounded border bg-kumo-base p-3 shadow-lg opacity-90",
-				children: /* @__PURE__ */ jsx("div", {
-					className: "font-medium",
-					children: activePaletteLabel
-				})
-			}) : activeWidget ? /* @__PURE__ */ jsx("div", {
-				className: "rounded border bg-kumo-base p-3 shadow-lg opacity-90",
-				children: /* @__PURE__ */ jsxs("div", {
-					className: "flex items-center gap-2",
-					children: [
-						/* @__PURE__ */ jsx(DotsSixVertical, { className: "h-4 w-4 text-kumo-subtle" }),
-						/* @__PURE__ */ jsx("span", {
-							className: "font-medium",
-							children: activeWidget.title || "Untitled Widget"
-						}),
-						/* @__PURE__ */ jsxs("span", {
-							className: "text-xs text-kumo-subtle",
-							children: [
-								"(",
-								activeWidget.type,
-								")"
-							]
-						})
-					]
-				})
-			}) : null
-		})]
+				}) : null
+			}),
+			blockSidebarPanel?.type === "image" && /* @__PURE__ */ jsx(ImageDetailPanel, {
+				attributes: blockSidebarPanel.attrs,
+				onUpdate: (attrs) => blockSidebarPanel.onUpdate(attrs),
+				onReplace: (attrs) => blockSidebarPanel.onReplace(attrs),
+				onDelete: () => {
+					blockSidebarPanel.onDelete();
+					setBlockSidebarPanel(null);
+				},
+				onClose: handleBlockSidebarClose
+			})
+		]
 	});
 }
 /** A draggable item in the available widgets palette */
@@ -27360,7 +27906,7 @@ function DraggablePaletteItem({ id, label, description, widgetInput }) {
 		})]
 	});
 }
-function WidgetAreaPanel({ area, expandedWidgets, onToggleWidget, isDraggingPalette, components, pluginBlocks }) {
+function WidgetAreaPanel({ area, expandedWidgets, onToggleWidget, isDraggingPalette, components, pluginBlocks, onBlockSidebarOpen, onBlockSidebarClose }) {
 	const queryClient = useQueryClient();
 	const toastManager = Toast.useToastManager();
 	const [deleteAreaName, setDeleteAreaName] = React.useState(null);
@@ -27406,7 +27952,9 @@ function WidgetAreaPanel({ area, expandedWidgets, onToggleWidget, isDraggingPale
 							isExpanded: expandedWidgets.has(widget.id),
 							onToggle: () => onToggleWidget(widget.id),
 							components,
-							pluginBlocks
+							pluginBlocks,
+							onBlockSidebarOpen,
+							onBlockSidebarClose
 						}, widget.id))
 					}) : null,
 					isDraggingPalette && /* @__PURE__ */ jsx("div", {
@@ -27436,7 +27984,7 @@ function WidgetAreaPanel({ area, expandedWidgets, onToggleWidget, isDraggingPale
 		]
 	});
 }
-function WidgetItem({ widget, areaName, isExpanded, onToggle, components, pluginBlocks }) {
+function WidgetItem({ widget, areaName, isExpanded, onToggle, components, pluginBlocks, onBlockSidebarOpen, onBlockSidebarClose }) {
 	const queryClient = useQueryClient();
 	const toastManager = Toast.useToastManager();
 	const { attributes, listeners, setNodeRef, transform, transition, isDragging } = useSortable({
@@ -27528,12 +28076,14 @@ function WidgetItem({ widget, areaName, isExpanded, onToggle, components, plugin
 			components,
 			pluginBlocks,
 			onSave: (input) => updateMutation.mutate(input),
-			isSaving: updateMutation.isPending
+			isSaving: updateMutation.isPending,
+			onBlockSidebarOpen,
+			onBlockSidebarClose
 		})]
 	});
 }
 /** Inline editor form for a widget, rendered when the widget is expanded */
-function WidgetEditor({ widget, components, pluginBlocks, onSave, isSaving }) {
+function WidgetEditor({ widget, components, pluginBlocks, onSave, isSaving, onBlockSidebarOpen, onBlockSidebarClose }) {
 	const [title, setTitle] = React.useState(widget.title ?? "");
 	const [content, setContent] = React.useState(Array.isArray(widget.content) ? widget.content : []);
 	const [menuName, setMenuName] = React.useState(widget.menuName ?? "");
@@ -27572,7 +28122,9 @@ function WidgetEditor({ widget, components, pluginBlocks, onSave, isSaving }) {
 				onChange: (value) => setContent(value),
 				minimal: true,
 				placeholder: "Write widget content...",
-				pluginBlocks
+				pluginBlocks,
+				onBlockSidebarOpen,
+				onBlockSidebarClose
 			})] }),
 			widget.type === "menu" && /* @__PURE__ */ jsxs(Select, {
 				label: "Menu",
@@ -30825,8 +31377,8 @@ function UserDetail({ user, isLoading, isOpen, isSaving, isSendingRecovery, reco
 	return /* @__PURE__ */ jsx(Dialog$1.Root, {
 		open: isOpen,
 		onOpenChange: (open) => !open && stableOnClose(),
-		children: /* @__PURE__ */ jsxs(Dialog$1.Portal, { children: [/* @__PURE__ */ jsx(Dialog$1.Backdrop, { className: cn("fixed inset-0 z-40 bg-black/50 transition-opacity duration-200", "data-starting-style:opacity-0 data-ending-style:opacity-0") }), /* @__PURE__ */ jsxs(Dialog$1.Popup, {
-			className: cn("fixed top-0 end-0 z-50 flex h-full w-full max-w-md flex-col bg-kumo-base shadow-xl outline-none", "transform transition-transform duration-200 ease-out", "data-starting-style:ltr:translate-x-full data-starting-style:rtl:-translate-x-full", "data-ending-style:ltr:translate-x-full data-ending-style:rtl:-translate-x-full"),
+		children: /* @__PURE__ */ jsxs(Dialog$1.Portal, { children: [/* @__PURE__ */ jsx(Dialog$1.Backdrop, { className: cn("fixed inset-0 bg-black/50 transition-opacity duration-200", "data-starting-style:opacity-0 data-ending-style:opacity-0") }), /* @__PURE__ */ jsxs(Dialog$1.Popup, {
+			className: cn("fixed top-0 end-0 flex h-full w-full max-w-md flex-col bg-kumo-base shadow-xl outline-none", "transform transition-transform duration-200 ease-out", "data-starting-style:ltr:translate-x-full data-starting-style:rtl:-translate-x-full", "data-ending-style:ltr:translate-x-full data-ending-style:rtl:-translate-x-full"),
 			children: [
 				/* @__PURE__ */ jsxs("div", {
 					className: "flex items-center justify-between border-b px-6 py-4",
@@ -31790,16 +32342,25 @@ function ContentListPage() {
 	});
 	const i18n = manifest?.i18n;
 	const activeLocale = i18n ? localeParam ?? i18n.defaultLocale : void 0;
+	const [sort, setSort] = React.useState({
+		field: "updatedAt",
+		direction: "desc"
+	});
 	const { data, fetchNextPage, hasNextPage, isFetchingNextPage, isLoading, error } = useInfiniteQuery({
 		queryKey: [
 			"content",
 			collection,
-			{ locale: activeLocale }
+			{
+				locale: activeLocale,
+				sort
+			}
 		],
 		queryFn: ({ pageParam }) => fetchContentList(collection, {
 			locale: activeLocale,
 			cursor: pageParam,
-			limit: 100
+			limit: 100,
+			orderBy: sort.field,
+			order: sort.direction
 		}),
 		initialPageParam: void 0,
 		getNextPageParam: (lastPage) => lastPage.nextCursor,
@@ -31910,7 +32471,9 @@ function ContentListPage() {
 		i18n,
 		activeLocale,
 		onLocaleChange: handleLocaleChange,
-		urlPattern: collectionConfig.urlPattern
+		urlPattern: collectionConfig.urlPattern,
+		sort,
+		onSortChange: setSort
 	});
 }
 const contentNewRoute = createRoute({
@@ -32630,7 +33193,7 @@ function MarketplaceBrowsePage() {
 	const { data: plugins } = useQuery({
 		queryKey: ["plugins"],
 		queryFn: async () => {
-			const { fetchPlugins } = await import("./plugins-XhZqfegd.js").then((n) => n.a);
+			const { fetchPlugins } = await import("./plugins-DUJY_8HN.js").then((n) => n.a);
 			return fetchPlugins();
 		}
 	});
@@ -32649,7 +33212,7 @@ function MarketplaceDetailPage() {
 	const { data: plugins } = useQuery({
 		queryKey: ["plugins"],
 		queryFn: async () => {
-			const { fetchPlugins } = await import("./plugins-XhZqfegd.js").then((n) => n.a);
+			const { fetchPlugins } = await import("./plugins-DUJY_8HN.js").then((n) => n.a);
 			return fetchPlugins();
 		}
 	});
@@ -33062,7 +33625,8 @@ const router = createAdminRouter(queryClient);
 * Main Admin Application
 */
 const EMPTY_PLUGINS = {};
-function AdminApp({ pluginAdmins = EMPTY_PLUGINS, locale = "en", messages = {} }) {
+const EMPTY_AUTH_PROVIDERS = {};
+function AdminApp({ pluginAdmins = EMPTY_PLUGINS, authProviders = EMPTY_AUTH_PROVIDERS, locale = "en", messages = {} }) {
 	React.useEffect(() => {
 		document.getElementById("emdash-boot-loader")?.remove();
 	}, []);
@@ -33076,16 +33640,19 @@ function AdminApp({ pluginAdmins = EMPTY_PLUGINS, locale = "en", messages = {} }
 	}
 	return /* @__PURE__ */ jsx(ThemeProvider, { children: /* @__PURE__ */ jsx(I18nProvider, {
 		i18n,
-		children: /* @__PURE__ */ jsx(LocaleDirectionProvider, { children: /* @__PURE__ */ jsx(Toasty, { children: /* @__PURE__ */ jsx(PluginAdminProvider, {
-			pluginAdmins,
-			children: /* @__PURE__ */ jsx(QueryClientProvider, {
-				client: queryClient,
-				children: /* @__PURE__ */ jsx(RouterProvider, { router })
+		children: /* @__PURE__ */ jsx(LocaleDirectionProvider, { children: /* @__PURE__ */ jsx(Toasty, { children: /* @__PURE__ */ jsx(AuthProviderProvider, {
+			authProviders,
+			children: /* @__PURE__ */ jsx(PluginAdminProvider, {
+				pluginAdmins,
+				children: /* @__PURE__ */ jsx(QueryClientProvider, {
+					client: queryClient,
+					children: /* @__PURE__ */ jsx(RouterProvider, { router })
+				})
 			})
 		}) }) })
 	}) });
 }
 
 //#endregion
-export { API_BASE, API_TOKEN_SCOPES, AdminApp, AdminApp as App, CAPABILITY_LABELS, ContentEditor, ContentList, DEFAULT_LOCALE, Dashboard, Header, Link, LoginPage, MediaLibrary, MediaPickerModal, PasskeyLogin, PasskeyRegistration, PluginAdminProvider, PortableTextEditor, SUPPORTED_LOCALES, SUPPORTED_LOCALE_CODES, SaveButton, Settings, SetupWizard, Shell, KumoSidebar as Sidebar, SidebarNav, analyzeWpPluginSite, analyzeWxr, apiFetch, bulkCommentAction, checkPluginUpdates, cn, compareRevisions, completeSignup, createAdminRouter, createAllowedDomain, createApiToken, createByline, createCollection, createContent, createField, createMenu, createMenuItem, createRedirect, createSection, createTaxonomy, createTerm, createWidget, createWidgetArea, deleteAllowedDomain, deleteByline, deleteCollection, deleteComment, deleteContent, deleteField, deleteFromProvider, deleteMedia, deleteMenu, deleteMenuItem, deletePasskey, deleteRedirect, deleteSection, deleteTerm, deleteWidget, deleteWidgetArea, describeCapability, disablePlugin, disableUser, discardDraft, duplicateContent, enablePlugin, enableUser, executeWpPluginImport, executeWxrImport, fetch404Summary, fetchAllowedDomains, fetchApiTokens, fetchByline, fetchBylines, fetchCollection, fetchCollections, fetchComment, fetchCommentCounts, fetchComments, fetchContent, fetchContentList, fetchDashboardStats, fetchEmailSettings, fetchFields, fetchManifest, fetchMarketplacePlugin, fetchMediaList, fetchMediaProviders, fetchMenu, fetchMenus, fetchOrphanedTables, fetchPasskeys, fetchPlugin, fetchPlugins, fetchProviderMedia, fetchRedirects, fetchRevision, fetchRevisions, fetchSection, fetchSections, fetchSettings, fetchTaxonomyDef, fetchTaxonomyDefs, fetchTerms, fetchTheme, fetchTranslations, fetchTrashedContent, fetchUser, fetchUsers, fetchWidgetArea, fetchWidgetAreas, fetchWidgetComponents, generatePreviewUrl, getDraftStatus, getPreviewUrl, hasAllowedDomains, importWxrMedia, installMarketplacePlugin, inviteUser, parseApiResponse, permanentDeleteContent, prepareWxrImport, probeImportUrl, publishContent, registerOrphanedTable, renamePasskey, reorderFields, reorderMenuItems, reorderWidgets, requestSignup, resolveLocale, restoreContent, restoreRevision, revokeApiToken, rewriteContentUrls, scheduleContent, searchMarketplace, searchThemes, sendRecoveryLink, sendTestEmail, setSearchEnabled, throwResponseError, uninstallMarketplacePlugin, unpublishContent, unscheduleContent, updateAllowedDomain, updateByline, updateCollection, updateCommentStatus, updateContent, updateField, updateMarketplacePlugin, updateMedia, updateMenu, updateMenuItem, updateRedirect, updateSection, updateSettings, updateTerm, updateUser, updateWidget, uploadMedia, uploadToProvider, useCurrentUser, useLocale, useNavigate, useParams, usePluginAdmins, usePluginField, usePluginHasPages, usePluginHasWidgets, usePluginPage, usePluginWidget, validateInviteToken, verifySignupToken };
+export { API_BASE, API_TOKEN_SCOPES, AdminApp, AdminApp as App, AuthProviderProvider, CAPABILITY_LABELS, ContentEditor, ContentList, DEFAULT_LOCALE, Dashboard, Header, Link, LoginPage, MediaLibrary, MediaPickerModal, PasskeyLogin, PasskeyRegistration, PluginAdminProvider, PortableTextEditor, SUPPORTED_LOCALES, SUPPORTED_LOCALE_CODES, SaveButton, Settings, SetupWizard, Shell, KumoSidebar as Sidebar, SidebarNav, analyzeWpPluginSite, analyzeWxr, apiFetch, bulkCommentAction, checkPluginUpdates, cn, compareRevisions, completeSignup, createAdminRouter, createAllowedDomain, createApiToken, createByline, createCollection, createContent, createField, createMenu, createMenuItem, createRedirect, createSection, createTaxonomy, createTerm, createWidget, createWidgetArea, deleteAllowedDomain, deleteByline, deleteCollection, deleteComment, deleteContent, deleteField, deleteFromProvider, deleteMedia, deleteMenu, deleteMenuItem, deletePasskey, deleteRedirect, deleteSection, deleteTerm, deleteWidget, deleteWidgetArea, describeCapability, disablePlugin, disableUser, discardDraft, duplicateContent, enablePlugin, enableUser, executeWpPluginImport, executeWxrImport, fetch404Summary, fetchAllowedDomains, fetchApiTokens, fetchAuthMode, fetchByline, fetchBylines, fetchCollection, fetchCollections, fetchComment, fetchCommentCounts, fetchComments, fetchContent, fetchContentList, fetchDashboardStats, fetchEmailSettings, fetchFields, fetchManifest, fetchMarketplacePlugin, fetchMediaList, fetchMediaProviders, fetchMenu, fetchMenus, fetchOrphanedTables, fetchPasskeys, fetchPlugin, fetchPlugins, fetchProviderMedia, fetchRedirects, fetchRevision, fetchRevisions, fetchSection, fetchSections, fetchSettings, fetchTaxonomyDef, fetchTaxonomyDefs, fetchTerms, fetchTheme, fetchTranslations, fetchTrashedContent, fetchUser, fetchUsers, fetchWidgetArea, fetchWidgetAreas, fetchWidgetComponents, generatePreviewUrl, getDraftStatus, getPreviewUrl, hasAllowedDomains, importWxrMedia, installMarketplacePlugin, inviteUser, parseApiResponse, permanentDeleteContent, prepareWxrImport, probeImportUrl, publishContent, registerOrphanedTable, renamePasskey, reorderFields, reorderMenuItems, reorderWidgets, requestSignup, resolveLocale, restoreContent, restoreRevision, revokeApiToken, rewriteContentUrls, scheduleContent, searchMarketplace, searchThemes, sendRecoveryLink, sendTestEmail, setSearchEnabled, throwResponseError, uninstallMarketplacePlugin, unpublishContent, unscheduleContent, updateAllowedDomain, updateByline, updateCollection, updateCommentStatus, updateContent, updateField, updateMarketplacePlugin, updateMedia, updateMenu, updateMenuItem, updateRedirect, updateSection, updateSettings, updateTerm, updateUser, updateWidget, uploadMedia, uploadToProvider, useAuthProviderList, useAuthProviders, useCurrentUser, useLocale, useNavigate, useParams, usePluginAdmins, usePluginField, usePluginHasPages, usePluginHasWidgets, usePluginPage, usePluginWidget, validateInviteToken, verifySignupToken };
 //# sourceMappingURL=index.js.map