@abinnovision/payloadcms-mcpx 2.0.0-beta.12 → 2.0.0-beta.14

package/README.md

@@ -61,7 +61,7 @@ The plugin adds:
 - An `mcpx-api-keys` collection in the admin group "MCP", holding the keys.
 - A draft guard on every collection and global that turns MCP writes into draft saves.
 
-The key form uses two admin components, so regenerate the import map:
+The key form uses two admin components, three with `delete`, so regenerate the import map:
 
 ```sh
 payload generate:importmap
@@ -86,24 +86,25 @@ Claude Desktop and the MCP Inspector are covered in
 
 ## Options
 
-| Option                       | Default                                   | Description                                                         |
-| ---------------------------- | ----------------------------------------- | ------------------------------------------------------------------- |
-| `collections`                | required                                  | Collections to expose. `true` means `{}`, everything it supports.   |
-| `collections.<slug>.read`    | `true`                                    | Expose the read tools for this collection.                          |
-| `collections.<slug>.write`   | `true`                                    | Expose the write tools. Without drafts, a write goes live.          |
-| `collections.<slug>.publish` | `true` with drafts                        | Expose `publishDocument`. Needs `versions.drafts` and `write`.      |
-| `globals`                    | `{}`                                      | Globals to expose, with the same three options.                     |
-| `userCollection`             | `config.admin.user`, then `users`         | Auth collection whose users the keys act as.                        |
-| `apiKeys.slug`               | `mcpx-api-keys`                           | Slug of the key collection.                                         |
-| `apiKeys.setupGuide`         | `true`                                    | Add the "Connect a client" tab to saved keys.                       |
-| `apiKeys.overrideCollection` | none                                      | Function that receives the key collection and returns it.           |
-| `endpoint.path`              | `/mcpx`                                   | Endpoint path below the API route.                                  |
-| `limits.maxLimit`            | `25`                                      | Highest `limit` a client may pass to a list tool.                   |
-| `limits.maxDepth`            | `1`                                       | Highest `depth` a client may pass to a read tool.                   |
-| `tools`                      | `[]`                                      | Custom tools, see [`docs/custom-tools.md`](./docs/custom-tools.md). |
-| `auth.resolve`               | none                                      | Replace or wrap the key lookup.                                     |
-| `serverInfo`                 | `payloadcms-mcpx` and the package version | `{ name, version }` reported to clients.                            |
-| `diagnostics`                | `true`                                    | Expose the server version plus repository and issue links.          |
+| Option                       | Default                                   | Description                                                                                                                         |
+| ---------------------------- | ----------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------- |
+| `collections`                | required                                  | Collections to expose. `true` means `{}`, everything it supports.                                                                   |
+| `collections.<slug>.read`    | `true`                                    | Expose the read tools for this collection.                                                                                          |
+| `collections.<slug>.write`   | `true`                                    | Expose the write tools. Without drafts, a write goes live.                                                                          |
+| `collections.<slug>.publish` | `true` with drafts                        | Expose `publishDocument`. Needs `versions.drafts` and `write`.                                                                      |
+| `collections.<slug>.delete`  | `false`                                   | Expose `deleteDocument`. Each delete is approved in the admin. `"unattended"` also offers trashing without approval; needs `trash`. |
+| `globals`                    | `{}`                                      | Globals to expose, with `read`, `write` and `publish`.                                                                              |
+| `userCollection`             | `config.admin.user`, then `users`         | Auth collection whose users the keys act as.                                                                                        |
+| `apiKeys.slug`               | `mcpx-api-keys`                           | Slug of the key collection.                                                                                                         |
+| `apiKeys.setupGuide`         | `true`                                    | Add the "Connect a client" tab to saved keys.                                                                                       |
+| `apiKeys.overrideCollection` | none                                      | Function that receives the key collection and returns it.                                                                           |
+| `endpoint.path`              | `/mcpx`                                   | Endpoint path below the API route.                                                                                                  |
+| `limits.maxLimit`            | `25`                                      | Highest `limit` a client may pass to a list tool.                                                                                   |
+| `limits.maxDepth`            | `1`                                       | Highest `depth` a client may pass to a read tool.                                                                                   |
+| `tools`                      | `[]`                                      | Custom tools, see [`docs/custom-tools.md`](./docs/custom-tools.md).                                                                 |
+| `auth.resolve`               | none                                      | Replace or wrap the key lookup.                                                                                                     |
+| `serverInfo`                 | `payloadcms-mcpx` and the package version | `{ name, version }` reported to clients.                                                                                            |
+| `diagnostics`                | `true`                                    | Expose the server version plus repository and issue links.                                                                          |
 
 The config only takes capabilities away: `true` exposes everything the entity supports, and a key's
 checkboxes decide what each key may do. `publish: false` keeps MCP writes as drafts. On an entity
@@ -126,6 +127,8 @@ every check.
 | `createDocument`   | Creates a draft from a seed, with a file in an upload collection.  | `write`            |
 | `validateDocument` | Lists what blocks publishing, without saving.                      | `write`            |
 | `publishDocument`  | Publishes the current draft.                                       | `write`, `publish` |
+| `deleteDocument`   | Asks to delete a document, which the key's user approves.          | `delete`           |
+| `runConfirmed`     | Runs the approved calls.                                           | `delete`           |
 
 Collections and globals use the same tools. A tool that addresses one document takes either
 `collection` and `id`, or `global` alone. [`docs/concepts.md`](./docs/concepts.md#tools) lists
@@ -138,11 +141,17 @@ A key can do something only when both the config and the key allow it.
 The plugin config sets the upper bound: which collections and globals are exposed, and whether
 each one is readable, writable and publishable. A key cannot go past it.
 
-Each key carries one checkbox per exposed entity and operation (`read`, `write`, `publish`), and
+Each key carries one checkbox per exposed entity and operation (`read`, `write`, `publish`,
+`delete`), and
 one per custom tool. The admin panel shows them as a matrix with a row per entity and a column per
 operation. A cell the config does not expose shows a dash. `publish` exists only where the config
 exposes `write` and `publish` on an entity with drafts, and counts only when `write` is ticked as
 well. A write checkbox on an entity without drafts is marked "Writes go live immediately."
+`delete` exists only where the config sets `delete: true` on a collection, and counts only when
+`read` is ticked as well. The row toggle leaves it alone. A delete runs only after the key's user
+approved it on the key's edit view, except where the config sets `delete: "unattended"` and the
+key ticks "Delete without approval": there the document moves to trash at once. See
+[deleting](./docs/concepts.md#deleting).
 
 `tools/list` follows the key. A tool the key cannot use is not listed, and each `collection` and
 `global` argument lists only the slugs the key may use with that tool. A checkbox added by a later
@@ -167,6 +176,9 @@ To restrict that, use `apiKeys.overrideCollection` as shown in
 - A file is sent in a second step, a `PUT`, and downloaded with a `GET`, each with a short-lived,
   single-use grant. Only collections with `upload.mimeTypes` take files. Downloads go through the
   collection's own file access. See [uploads](./docs/security.md#uploads).
+- A delete waits for the key's user to approve it in the admin panel and is then run by the same
+  key. Collections with `trash` move the document to trash. See
+  [confirmations](./docs/security.md#confirmations).
 - Custom tools are trusted code and must apply access control themselves.
 
 Open limitations: a filter through a relation into a readable collection ignores that collection's

package/dist/admin/capability-toggles.mjs

@@ -10,27 +10,47 @@ const stateOf = (paths, values) => {
 * Whether a column's bulk toggle reads as on, off or indeterminate. Cells the
 * config does not expose are ignored: two granted cells and one dash read as on.
 */ const columnState = (matrix, basePath, namespace, operation, values) => stateOf(matrix[namespace].filter((row) => row[operation]).map((row) => cellPath(basePath, namespace, row.fieldName, operation)), values);
+const ROW_OPERATIONS = CAPABILITY_OPERATIONS.filter((operation) => operation.id !== "delete" && operation.id !== "deleteUnattended");
 /**
 * Whether an entity's row toggle reads as on, off or indeterminate, over the
-* operations the config exposes for that row.
-*/ const rowState = (basePath, namespace, row, values) => stateOf(CAPABILITY_OPERATIONS.filter((operation) => row[operation.id]).map((operation) => cellPath(basePath, namespace, row.fieldName, operation.id)), values);
+* operations the config exposes for that row, deletes aside.
+*/ const rowState = (basePath, namespace, row, values) => stateOf(ROW_OPERATIONS.filter((operation) => row[operation.id]).map((operation) => cellPath(basePath, namespace, row.fieldName, operation.id)), values);
 const toolsState = (matrix, basePath, values) => stateOf(matrix.tools.map((tool) => toolPath(basePath, tool.name)), values);
 const reconcile = (next, touched) => {
-	if (touched.has("publish") && next.publish) return {
-		...next,
+	let result = next;
+	if (touched.has("publish") && result.publish) result = {
+		...result,
 		write: true
 	};
-	if (touched.has("write") && !next.write) return {
-		...next,
+	if (touched.has("write") && !result.write) result = {
+		...result,
 		publish: false
 	};
-	return next;
+	if (touched.has("deleteUnattended") && result.deleteUnattended) result = {
+		...result,
+		delete: true
+	};
+	if ((touched.has("delete") || touched.has("deleteUnattended")) && result.delete) result = {
+		...result,
+		read: true
+	};
+	if (touched.has("read") && !result.read) result = {
+		...result,
+		delete: false
+	};
+	if ((touched.has("delete") || touched.has("read")) && !result.delete) result = {
+		...result,
+		deleteUnattended: false
+	};
+	return result;
 };
 const rowActions = (basePath, namespace, row, values, changes) => {
 	const current = {
 		read: values[cellPath(basePath, namespace, row.fieldName, "read")] === true,
 		write: values[cellPath(basePath, namespace, row.fieldName, "write")] === true,
-		publish: values[cellPath(basePath, namespace, row.fieldName, "publish")] === true
+		publish: values[cellPath(basePath, namespace, row.fieldName, "publish")] === true,
+		delete: values[cellPath(basePath, namespace, row.fieldName, "delete")] === true,
+		deleteUnattended: values[cellPath(basePath, namespace, row.fieldName, "deleteUnattended")] === true
 	};
 	const touched = /* @__PURE__ */ new Set();
 	const next = { ...current };

package/dist/admin/confirmations-panel.mjs

@@ -0,0 +1,242 @@
+"use client";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { Button } from "@payloadcms/ui";
+//#region src/admin/confirmations-panel.tsx
+/**
+* The element id of a call's row, which the page scrolls to.
+*/ const confirmationRowId = (handle) => `mcpx-confirmation-${handle}`;
+const CELL_PADDING = "calc(var(--base) * 0.4) calc(var(--base) * 0.6)";
+const styles = {
+	panel: {
+		marginBottom: "var(--base)",
+		padding: "calc(var(--base) * 0.75)",
+		border: "1px solid var(--theme-elevation-150)",
+		borderRadius: "3px",
+		background: "var(--theme-elevation-50)"
+	},
+	heading: { margin: 0 },
+	lead: {
+		margin: "calc(var(--base) * 0.25) 0 calc(var(--base) * 0.75)",
+		color: "var(--theme-elevation-500)"
+	},
+	group: { marginBottom: "calc(var(--base) * 0.75)" },
+	groupHeading: { margin: "0 0 calc(var(--base) * 0.25)" },
+	table: {
+		width: "100%",
+		borderCollapse: "collapse",
+		textAlign: "left"
+	},
+	head: {
+		padding: CELL_PADDING,
+		color: "var(--theme-elevation-400)",
+		fontWeight: "normal",
+		borderBottom: "1px solid var(--theme-border-color)"
+	},
+	cell: {
+		padding: CELL_PADDING,
+		verticalAlign: "middle",
+		borderBottom: "1px solid var(--theme-elevation-100)"
+	},
+	highlighted: { background: "var(--theme-elevation-100)" },
+	muted: { color: "var(--theme-elevation-500)" },
+	status: {
+		display: "block",
+		color: "var(--theme-elevation-500)",
+		fontSize: "0.85em"
+	},
+	permanent: {
+		color: "var(--theme-error-500)",
+		fontWeight: 600
+	},
+	actions: {
+		display: "flex",
+		gap: "calc(var(--base) * 0.25)",
+		justifyContent: "flex-end"
+	},
+	footer: {
+		display: "flex",
+		gap: "calc(var(--base) * 0.5)"
+	}
+};
+const groupsOf = (confirmations) => {
+	const groups = /* @__PURE__ */ new Map();
+	for (const confirmation of confirmations) groups.set(confirmation.group, [...groups.get(confirmation.group) ?? [], confirmation]);
+	return [...groups];
+};
+const approveAllLabel = (confirmations) => {
+	const permanent = confirmations.filter((confirmation) => confirmation.summary.permanent).length;
+	return permanent === 0 ? `Approve all (${String(confirmations.length)})` : `Approve all (${String(confirmations.length)}, ${String(permanent)} permanent)`;
+};
+const Row = ({ busy, confirmation, onDecide }) => {
+	const { handle, highlighted, summary } = confirmation;
+	const cell = highlighted ? {
+		...styles.cell,
+		...styles.highlighted
+	} : styles.cell;
+	const name = summary.title ?? summary.id ?? "Unreadable";
+	return /*#__PURE__*/ jsxs("tr", {
+		"aria-current": highlighted ? "true" : void 0,
+		id: confirmationRowId(handle),
+		children: [
+			/*#__PURE__*/ jsx("td", {
+				style: cell,
+				children: summary.label
+			}),
+			/*#__PURE__*/ jsxs("td", {
+				style: cell,
+				children: [
+					summary.href ? /*#__PURE__*/ jsx("a", {
+						href: summary.href,
+						rel: "noreferrer",
+						target: "_blank",
+						children: name
+					}) : name,
+					summary.title && summary.id ? /*#__PURE__*/ jsxs("span", {
+						style: styles.muted,
+						children: [
+							" (",
+							summary.id,
+							")"
+						]
+					}) : null,
+					summary.status ? /*#__PURE__*/ jsx("span", {
+						style: styles.status,
+						children: summary.status
+					}) : null
+				]
+			}),
+			/*#__PURE__*/ jsx("td", {
+				style: cell,
+				children: summary.permanent ? /*#__PURE__*/ jsx("span", {
+					style: styles.permanent,
+					children: "Permanent"
+				}) : "Moves to trash"
+			}),
+			/*#__PURE__*/ jsx("td", {
+				style: cell,
+				children: summary.reason ? /*#__PURE__*/ jsxs("span", { children: [/*#__PURE__*/ jsx("span", {
+					style: styles.muted,
+					children: "The client wrote: "
+				}), summary.reason] }) : /*#__PURE__*/ jsx("span", {
+					style: styles.muted,
+					children: "No reason given"
+				})
+			}),
+			/*#__PURE__*/ jsx("td", {
+				style: cell,
+				children: /*#__PURE__*/ jsxs("div", {
+					style: styles.actions,
+					children: [/*#__PURE__*/ jsx(Button, {
+						buttonStyle: "primary",
+						disabled: busy,
+						margin: false,
+						onClick: () => {
+							onDecide([handle], "approved");
+						},
+						size: "small",
+						type: "button",
+						children: "Approve"
+					}), /*#__PURE__*/ jsx(Button, {
+						buttonStyle: "secondary",
+						disabled: busy,
+						margin: false,
+						onClick: () => {
+							onDecide([handle], "rejected");
+						},
+						size: "small",
+						type: "button",
+						children: "Reject"
+					})]
+				})
+			})
+		]
+	});
+};
+/**
+* The calls of an API key waiting for its user's decision, grouped by tool.
+* Renders nothing when none is waiting.
+*/ const ConfirmationsPanel = ({ busy, confirmations, onDecide }) => {
+	if (confirmations.length === 0) return null;
+	const handles = confirmations.map((confirmation) => confirmation.handle);
+	return /*#__PURE__*/ jsxs("section", {
+		className: "field-type",
+		style: styles.panel,
+		children: [
+			/*#__PURE__*/ jsx("h3", {
+				style: styles.heading,
+				children: "Waiting for your approval"
+			}),
+			/*#__PURE__*/ jsx("p", {
+				style: styles.lead,
+				children: "A client using this key asked for these calls. Approving runs nothing: the client runs approved calls with runConfirmed. Each call expires 15 minutes after it was requested."
+			}),
+			groupsOf(confirmations).map(([group, entries]) => /*#__PURE__*/ jsxs("div", {
+				style: styles.group,
+				children: [/*#__PURE__*/ jsx("h4", {
+					style: styles.groupHeading,
+					children: group
+				}), /*#__PURE__*/ jsxs("table", {
+					style: styles.table,
+					children: [/*#__PURE__*/ jsx("thead", { children: /*#__PURE__*/ jsxs("tr", { children: [
+						/*#__PURE__*/ jsx("th", {
+							scope: "col",
+							style: styles.head,
+							children: "Collection"
+						}),
+						/*#__PURE__*/ jsx("th", {
+							scope: "col",
+							style: styles.head,
+							children: "Document"
+						}),
+						/*#__PURE__*/ jsx("th", {
+							scope: "col",
+							style: styles.head,
+							children: "Effect"
+						}),
+						/*#__PURE__*/ jsx("th", {
+							scope: "col",
+							style: styles.head,
+							children: "Reason"
+						}),
+						/*#__PURE__*/ jsx("th", {
+							scope: "col",
+							style: styles.head,
+							children: /*#__PURE__*/ jsx("span", {
+								className: "sr-only",
+								children: "Decision"
+							})
+						})
+					] }) }), /*#__PURE__*/ jsx("tbody", { children: entries.map((confirmation) => /*#__PURE__*/ jsx(Row, {
+						busy,
+						confirmation,
+						onDecide
+					}, confirmation.handle)) })]
+				})]
+			}, group)),
+			/*#__PURE__*/ jsxs("div", {
+				style: styles.footer,
+				children: [/*#__PURE__*/ jsx(Button, {
+					buttonStyle: "primary",
+					disabled: busy,
+					margin: false,
+					onClick: () => {
+						onDecide(handles, "approved");
+					},
+					type: "button",
+					children: approveAllLabel(confirmations)
+				}), /*#__PURE__*/ jsx(Button, {
+					buttonStyle: "secondary",
+					disabled: busy,
+					margin: false,
+					onClick: () => {
+						onDecide(handles, "rejected");
+					},
+					type: "button",
+					children: "Reject all"
+				})]
+			})
+		]
+	});
+};
+//#endregion
+export { ConfirmationsPanel, confirmationRowId };

package/dist/admin/confirmations.d.mts

@@ -0,0 +1,15 @@
+import React from "react";
+//#region src/admin/confirmations.d.ts
+interface McpxConfirmationsProps {
+  /**
+   * Endpoint path below the API route, from the plugin options.
+   */
+  endpointPath: string;
+}
+/**
+ * The calls waiting for approval on the API key edit view. Reads and decides
+ * through the plugin's endpoints, never through the key's form, so a decision
+ * does not mark the key modified. Renders nothing while none is waiting.
+ */
+export declare const McpxConfirmations: React.FC<McpxConfirmationsProps>;
+//#endregion

package/dist/admin/confirmations.mjs

@@ -0,0 +1,70 @@
+"use client";
+import { CONFIRMATIONS_PATH } from "../api-keys/confirmation-view.mjs";
+import { ConfirmationsPanel, confirmationRowId } from "./confirmations-panel.mjs";
+import { jsx } from "react/jsx-runtime";
+import { toast, useConfig, useDocumentInfo } from "@payloadcms/ui";
+import { useCallback, useEffect, useState } from "react";
+//#region src/admin/confirmations.tsx
+/**
+* The calls waiting for approval on the API key edit view. Reads and decides
+* through the plugin's endpoints, never through the key's form, so a decision
+* does not mark the key modified. Renders nothing while none is waiting.
+*/ const McpxConfirmations = ({ endpointPath }) => {
+	const { id } = useDocumentInfo();
+	const { config } = useConfig();
+	const [confirmations, setConfirmations] = useState([]);
+	const [busy, setBusy] = useState(false);
+	const [version, setVersion] = useState(0);
+	const url = `${config.serverURL}${config.routes.api}${endpointPath}${CONFIRMATIONS_PATH}`;
+	useEffect(() => {
+		if (id === void 0) return;
+		let active = true;
+		const params = new URLSearchParams({ key: String(id) });
+		const highlight = new URLSearchParams(window.location.search).get("confirmation");
+		if (highlight !== null) params.set("confirmation", highlight);
+		fetch(`${url}?${params.toString()}`, { credentials: "include" }).then(async (response) => response.ok ? await response.json() : { confirmations: [] }).then((body) => {
+			if (active) setConfirmations(body.confirmations);
+		}).catch(() => void 0);
+		return () => {
+			active = false;
+		};
+	}, [
+		id,
+		url,
+		version
+	]);
+	const highlighted = confirmations.find((entry) => entry.highlighted)?.handle;
+	useEffect(() => {
+		if (highlighted !== void 0) document.getElementById(confirmationRowId(highlighted))?.scrollIntoView({ block: "center" });
+	}, [highlighted]);
+	const decide = useCallback((handles, decision) => {
+		setBusy(true);
+		fetch(url, {
+			method: "POST",
+			credentials: "include",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify({
+				key: id,
+				handles,
+				decision
+			})
+		}).then(async (response) => {
+			if (!response.ok) {
+				const body = await response.json().catch(() => ({}));
+				toast.error(body.error ?? "The decision could not be saved.");
+			}
+		}).catch(() => {
+			toast.error("The decision could not be saved.");
+		}).finally(() => {
+			setBusy(false);
+			setVersion((current) => current + 1);
+		});
+	}, [id, url]);
+	return /*#__PURE__*/ jsx(ConfirmationsPanel, {
+		busy,
+		confirmations,
+		onDecide: decide
+	});
+};
+//#endregion
+export { McpxConfirmations };

package/dist/admin/index.d.mts

@@ -1,3 +1,4 @@
 import { McpxCapabilityMatrix } from "./capability-matrix.mjs";
+import { McpxConfirmations } from "./confirmations.mjs";
 import { McpxSetupGuide } from "./setup-guide.mjs";
-export { McpxCapabilityMatrix, McpxSetupGuide };
+export { McpxCapabilityMatrix, McpxConfirmations, McpxSetupGuide };

package/dist/admin/index.mjs

@@ -1,3 +1,4 @@
 import { McpxCapabilityMatrix } from "./capability-matrix.mjs";
+import { McpxConfirmations } from "./confirmations.mjs";
 import { McpxSetupGuide } from "./setup-guide.mjs";
-export { McpxCapabilityMatrix, McpxSetupGuide };
+export { McpxCapabilityMatrix, McpxConfirmations, McpxSetupGuide };

package/dist/api-keys/capability-matrix.d.mts

@@ -14,6 +14,8 @@ export interface CapabilityRow {
   read: boolean;
   write: boolean;
   publish: boolean;
+  delete: boolean;
+  deleteUnattended: boolean;
   /**
    * Said only where a row departs from what its column header promises.
    */

package/dist/api-keys/capability-matrix.mjs

@@ -23,6 +23,16 @@ import { CAPABILITIES_FIELD, canPublish, canWrite, isLiveWrite } from "../capabi
 		id: "publish",
 		label: "Publish",
 		description: "Promote the current draft to what the public sees."
+	},
+	{
+		id: "delete",
+		label: "Delete",
+		description: "Delete documents, each approved by this key's user in the admin panel."
+	},
+	{
+		id: "deleteUnattended",
+		label: "Delete without approval",
+		description: "Move documents to trash without asking this key's user."
 	}
 ];
 const LIVE_HINT = "Writes go live immediately.";
@@ -33,6 +43,8 @@ const toRow = (entity) => ({
 	read: entity.read,
 	write: canWrite(entity),
 	publish: canPublish(entity),
+	delete: entity.delete,
+	deleteUnattended: entity.deleteUnattended,
 	...hintFor(entity)
 });
 /**

package/dist/api-keys/collection.mjs

@@ -1,4 +1,4 @@
-import { createCapabilityFields, createKeyFields, withSetupGuideTab } from "./fields.mjs";
+import { createCapabilityFields, createConfirmationFields, createKeyFields, withSetupGuideTab } from "./fields.mjs";
 import { generateApiKey, hashApiKey } from "./key.mjs";
 //#region src/api-keys/collection.ts
 /**
@@ -37,7 +37,7 @@ import { generateApiKey, hashApiKey } from "./key.mjs";
 			delete: ownKeysOnly
 		},
 		hooks: { beforeChange: [keyBeforeChange] },
-		fields: withSetupGuideTab([
+		fields: [...createConfirmationFields(options), ...withSetupGuideTab([
 			{
 				name: "user",
 				type: "relationship",
@@ -52,7 +52,7 @@ import { generateApiKey, hashApiKey } from "./key.mjs";
 			},
 			...createKeyFields(),
 			...createCapabilityFields(options)
-		], options)
+		], options)]
 	};
 };
 //#endregion

package/dist/api-keys/confirmation-view.mjs

@@ -0,0 +1,6 @@
+//#region src/api-keys/confirmation-view.ts
+/**
+* Path of the confirmations endpoints below the plugin's endpoint path.
+*/ const CONFIRMATIONS_PATH = "/confirmations";
+//#endregion
+export { CONFIRMATIONS_PATH };

package/dist/api-keys/fields.mjs

@@ -79,6 +79,23 @@ const SETUP_GUIDE_FIELD = "setupGuide";
 	}
 ];
 /**
+* The pending calls of the key, above everything else on its edit view, where
+* a collection exposes `delete`. The component renders nothing while none is
+* pending and never touches the form, so deciding does not mark the key
+* modified.
+*/ const createConfirmationFields = (options) => options.confirmations ? [{
+	name: "confirmations",
+	type: "ui",
+	admin: {
+		disableListColumn: true,
+		components: { Field: {
+			path: "@abinnovision/payloadcms-mcpx/admin",
+			exportName: "McpxConfirmations",
+			clientProps: { endpointPath: options.endpointPath }
+		} }
+	}
+}] : [];
+/**
 * Wraps the key fields and the setup guide in unnamed tabs, so wide snippets
 * get the full form width. Named tabs would nest the data and move
 * `capabilities` off the document root, which capability resolution reads.
@@ -165,4 +182,4 @@ const SETUP_GUIDE_FIELD = "setupGuide";
 	}];
 };
 //#endregion
-export { createCapabilityFields, createKeyFields, withSetupGuideTab };
+export { createCapabilityFields, createConfirmationFields, createKeyFields, withSetupGuideTab };

package/dist/builtin-tool-names.mjs

@@ -10,7 +10,9 @@
 	"patchDocument",
 	"createDocument",
 	"validateDocument",
-	"publishDocument"
+	"publishDocument",
+	"deleteDocument",
+	"runConfirmed"
 ];
 //#endregion
 export { BUILTIN_TOOL_NAMES };

package/dist/capabilities.mjs

@@ -28,10 +28,13 @@ const publishFlag = (entity, group) => canPublish(entity) && flag(group, "write"
 		const resolved = {};
 		for (const entity of entities) {
 			const group = isPlainObject(namespaceGroup) ? namespaceGroup[entity.fieldName] : void 0;
+			const deleting = entity.delete && flag(group, "read") && flag(group, "delete");
 			resolved[entity.slug] = {
 				read: entity.read && flag(group, "read"),
 				write: canWrite(entity) && flag(group, "write"),
-				publish: publishFlag(entity, group)
+				publish: publishFlag(entity, group),
+				delete: deleting,
+				deleteUnattended: deleting && entity.deleteUnattended && flag(group, "deleteUnattended")
 			};
 		}
 		return resolved;
@@ -53,7 +56,8 @@ const publishFlag = (entity, group) => canPublish(entity) && flag(group, "write"
 	return {
 		readable: slugsWith("read"),
 		writable: slugsWith("write"),
-		publishable: slugsWith("publish")
+		publishable: slugsWith("publish"),
+		deletable: slugsWith("delete")
 	};
 };
 //#endregion

package/dist/define-tool.d.mts

@@ -1,23 +1,23 @@
-import { McpxAnyTool, McpxTool, McpxToolScope } from "./types.mjs";
+import { McpxAnyTool, McpxTool, McpxToolConfirm, McpxToolDefinition, McpxToolScope } from "./types.mjs";
 import { z } from "zod";
 //#region src/define-tool.d.ts
 /**
  * Fixed shape; arguments inferred from it.
  */
-export declare function defineMcpxTool<Shape extends z.ZodRawShape>(tool: McpxTool<Shape> & {
+export declare function defineMcpxTool<Shape extends z.ZodRawShape, Confirm extends McpxToolConfirm | undefined = undefined>(tool: McpxToolDefinition<Shape, z.infer<z.ZodObject<Shape>>, Confirm> & {
   inputSchema?: Shape;
 }): McpxTool<Shape>;
 /**
  * Per-request shape returned as an object literal; arguments inferred from it.
  */
-export declare function defineMcpxTool<Shape extends z.ZodRawShape>(tool: McpxTool<Shape> & {
+export declare function defineMcpxTool<Shape extends z.ZodRawShape, Confirm extends McpxToolConfirm | undefined = undefined>(tool: McpxToolDefinition<Shape, z.infer<z.ZodObject<Shape>>, Confirm> & {
   inputSchema: (scope: McpxToolScope) => Shape;
 }): McpxAnyTool;
 /**
  * Per-request shape built from helpers that erase to `z.ZodRawShape`, as the
  * builtins do. Nothing to infer from, so state the arguments instead.
  */
-export declare function defineMcpxTool<Args>(tool: McpxTool<z.ZodRawShape, Args> & {
+export declare function defineMcpxTool<Args, Confirm extends McpxToolConfirm | undefined = undefined>(tool: McpxToolDefinition<z.ZodRawShape, Args, Confirm> & {
   inputSchema: (scope: McpxToolScope) => z.ZodRawShape;
 }): McpxAnyTool;
 //#endregion