Flatten to three packages + extract mizan-runtime

packages/
  mizan-runtime/   Framework-agnostic state engine (~150 lines)
                   Context registry, batched invalidation, fetch primitives
  mizan-django/    Django server adapter (was packages/mizan-rpc/adapters/django/)
                   Codegen moved to mizan-django/generate/
  mizan-react/     React adapter (was packages/mizan-csr/adapters/react/)

Removed premature abstractions: mizan-ast, mizan-schema, mizan-rpc,
mizan-csr, mizan-ssr stub packages. The actual architecture is three
concrete packages, not five abstract layers.

mizan-runtime implements the v1 spec: registerContext with params,
scoped invalidation via microtask batching, server-driven invalidation
from mutation responses, mizanFetch for context bundles, mizanCall for
mutations.

264 Django + 33 React tests pass.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/mizan-react/src/allauth/components/PasskeyLogin.tsx

@@ -0,0 +1,103 @@
+'use client'
+
+import { useState } from 'react'
+import { useRouter } from '../contexts/RouterContext'
+import { useConfig } from '../contexts/AuthContext'
+import { useAllauthAPI } from '../contexts/APIContext'
+import { useAuthContext } from '../contexts/AuthContext'
+import { useStyles } from '../contexts/StylesContext'
+
+interface PasskeyLoginProps {
+    onSuccess?: () => void
+}
+
+export function PasskeyLogin({ onSuccess }: PasskeyLoginProps) {
+    const router = useRouter()
+    const config = useConfig()
+    const api = useAllauthAPI()
+    const { refresh } = useAuthContext()
+    const styles = useStyles()
+    const [error, setError] = useState<string | null>(null)
+    const [authenticating, setAuthenticating] = useState(false)
+
+    // Check if passkey login is enabled
+    const passkeyLoginEnabled = config?.data?.mfa?.passkey_login_enabled
+
+    if (!passkeyLoginEnabled) {
+        return null
+    }
+
+    const handlePasskeyLogin = async () => {
+        setError(null)
+        setAuthenticating(true)
+
+        try {
+            const { startAuthentication } = await import('@simplewebauthn/browser')
+
+            // Get login options (challenge) from server
+            const optionsRes = await api.webauthn.requestOptions.login()
+
+            if (optionsRes.status !== 200) {
+                throw new Error('Failed to get login options')
+            }
+
+            // Extract publicKey options - allauth returns { request_options: { publicKey: {...} } }
+            const publicKeyOptions = optionsRes.data?.request_options?.publicKey
+
+            if (!publicKeyOptions?.challenge) {
+                throw new Error('Invalid login options')
+            }
+
+            // Perform WebAuthn authentication in browser
+            // @simplewebauthn/browser v13+ expects { optionsJSON: ... }
+            const credential = await startAuthentication({ optionsJSON: publicKeyOptions as any })
+
+            // Submit credential to server for login
+            const res = await api.webauthn.login(credential)
+
+            if (res.status === 200) {
+                await refresh()
+                if (onSuccess) {
+                    onSuccess()
+                } else {
+                    const next = router.searchParams.get('next')
+                    router.push(next?.startsWith('/') ? next : '/dashboard')
+                }
+            } else {
+                setError('Login failed. Please try again.')
+            }
+        } catch (e: any) {
+            if (e.name === 'AbortError' || e.name === 'NotAllowedError') {
+                // User cancelled - not an error
+                setError(null)
+            } else {
+                setError(e.message || 'Failed to sign in with passkey')
+            }
+        } finally {
+            setAuthenticating(false)
+        }
+    }
+
+    return (
+        <div className={styles.passkeyContainer}>
+            <div className={styles.divider}>
+                <span className={styles.dividerText}>or</span>
+            </div>
+
+            {error && (
+                <div className={styles.error}>
+                    <p>{error}</p>
+                </div>
+            )}
+
+            <button
+                type="button"
+                onClick={handlePasskeyLogin}
+                disabled={authenticating}
+                className={styles.passkeyButton}
+            >
+                {authenticating ? 'Waiting for passkey...' : 'Sign in with Passkey'}
+            </button>
+        </div>
+    )
+}