@abinnovision/payloadcms-mcpx 2.0.0-beta.13 → 2.0.0-beta.15

package/dist/admin/capability-toggles.mjs

@@ -1,40 +1,59 @@
-import { CAPABILITY_OPERATIONS, cellPath, toolPath } from "../api-keys/capability-matrix.mjs";
+import { STORED_OPERATIONS, cellPath, toolPath } from "../api-keys/capability-matrix.mjs";
 //#region src/admin/capability-toggles.ts
-const stateOf = (paths, values) => {
-	if (paths.length === 0) return "off";
-	const granted = paths.filter((path) => values[path] === true).length;
+/**
+* How far a key may go with an entity. Each level includes the ones before it.
+*/ const ACCESS_LEVELS = [
+	"none",
+	"read",
+	"write",
+	"publish"
+];
+const toolsState = (matrix, basePath, values) => {
+	const granted = matrix.tools.filter((tool) => values[toolPath(basePath, tool.name)] === true).length;
 	if (granted === 0) return "off";
-	return granted === paths.length ? "on" : "mixed";
+	return granted === matrix.tools.length ? "on" : "mixed";
 };
 /**
-* Whether a column's bulk toggle reads as on, off or indeterminate. Cells the
-* config does not expose are ignored: two granted cells and one dash read as on.
-*/ const columnState = (matrix, basePath, namespace, operation, values) => stateOf(matrix[namespace].filter((row) => row[operation]).map((row) => cellPath(basePath, namespace, row.fieldName, operation)), values);
+* The levels a row offers: none, then each operation the config exposes.
+*/ const accessLevelsOf = (row) => ACCESS_LEVELS.filter((level) => level === "none" || row[level]);
+/**
+* The highest level whose flags are all granted, counting only operations the
+* config exposes. A write without a read reads as none, as on the server.
+*/ const accessLevelOf = (basePath, namespace, row, values) => {
+	let reached = "none";
+	for (const level of ACCESS_LEVELS) {
+		if (level === "none") continue;
+		if (!row[level] || values[cellPath(basePath, namespace, row.fieldName, level)] !== true) break;
+		reached = level;
+	}
+	return reached;
+};
 /**
-* Whether an entity's row toggle reads as on, off or indeterminate, over the
-* operations the config exposes for that row.
-*/ const rowState = (basePath, namespace, row, values) => stateOf(CAPABILITY_OPERATIONS.filter((operation) => row[operation.id]).map((operation) => cellPath(basePath, namespace, row.fieldName, operation.id)), values);
-const toolsState = (matrix, basePath, values) => stateOf(matrix.tools.map((tool) => toolPath(basePath, tool.name)), values);
+* The delete mode a row's stored flags read as.
+*/ const deleteModeOf = (basePath, namespace, row, values) => {
+	const granted = (operation) => values[cellPath(basePath, namespace, row.fieldName, operation)] === true;
+	if (!granted("read") || !granted("delete")) return "off";
+	return row.deleteUnattended && granted("deleteUnattended") ? "trash" : "approve";
+};
+const requiresOf = (operation) => {
+	const found = STORED_OPERATIONS.find((candidate) => candidate.id === operation);
+	return found && "requires" in found ? found.requires : void 0;
+};
+const prerequisitesOf = (operation) => {
+	const required = requiresOf(operation);
+	return required ? [required, ...prerequisitesOf(required)] : [];
+};
 const reconcile = (next, touched) => {
-	if (touched.has("publish") && next.publish) return {
-		...next,
-		write: true
-	};
-	if (touched.has("write") && !next.write) return {
-		...next,
-		publish: false
-	};
-	return next;
+	const result = { ...next };
+	for (const operation of touched) if (result[operation]) for (const required of prerequisitesOf(operation)) result[required] = true;
+	else for (const { id } of STORED_OPERATIONS) if (prerequisitesOf(id).includes(operation)) result[id] = false;
+	return result;
 };
 const rowActions = (basePath, namespace, row, values, changes) => {
-	const current = {
-		read: values[cellPath(basePath, namespace, row.fieldName, "read")] === true,
-		write: values[cellPath(basePath, namespace, row.fieldName, "write")] === true,
-		publish: values[cellPath(basePath, namespace, row.fieldName, "publish")] === true
-	};
+	const current = Object.fromEntries(STORED_OPERATIONS.map((operation) => [operation.id, values[cellPath(basePath, namespace, row.fieldName, operation.id)] === true]));
 	const touched = /* @__PURE__ */ new Set();
 	const next = { ...current };
-	for (const operation of CAPABILITY_OPERATIONS) {
+	for (const operation of STORED_OPERATIONS) {
 		const change = changes[operation.id];
 		if (change !== void 0 && row[operation.id]) {
 			next[operation.id] = change;
@@ -42,32 +61,57 @@ const rowActions = (basePath, namespace, row, values, changes) => {
 		}
 	}
 	const reconciled = reconcile(next, touched);
-	return CAPABILITY_OPERATIONS.filter((operation) => row[operation.id] && reconciled[operation.id] !== current[operation.id]).map((operation) => ({
+	return STORED_OPERATIONS.filter((operation) => row[operation.id] && reconciled[operation.id] !== current[operation.id]).map((operation) => ({
 		type: "UPDATE",
 		path: cellPath(basePath, namespace, row.fieldName, operation.id),
 		value: reconciled[operation.id]
 	}));
 };
+const grantsOf = (level) => {
+	const rank = ACCESS_LEVELS.indexOf(level);
+	return {
+		read: rank >= 1,
+		write: rank >= 2,
+		publish: rank >= 3
+	};
+};
 /**
-* The form-state updates one click implies, as literal actions. Every toggle
-* (cell, row, column or tool) comes through here, so the publish rule applies
-* to bulk grants too.
+* The form-state updates one click implies, as literal actions. Every click
+* comes through here, so the dependency rules apply to the "All" controls too:
+* picking Write ticks read, and lowering access to none clears delete.
 *
-* Only cells whose value changes get an action, so a bulk toggle that changes
-* nothing does not mark the form modified.
+* Only cells whose value changes get an action, so a click that changes
+* nothing does not mark the form modified. A level above a row's ceiling
+* grants what the row exposes and no more.
 */ const buildToggleActions = (matrix, basePath, values, intent) => {
 	if (intent.kind === "tool" || intent.kind === "tools") return matrix.tools.filter((tool) => intent.kind === "tools" || tool.name === intent.name).filter((tool) => values[toolPath(basePath, tool.name)] === true !== intent.value).map((tool) => ({
 		type: "UPDATE",
 		path: toolPath(basePath, tool.name),
 		value: intent.value
 	}));
-	const rows = matrix[intent.namespace].filter((row) => intent.kind === "column" || row.fieldName === intent.fieldName);
-	const changes = intent.kind === "row" ? {
-		read: intent.value,
-		write: intent.value,
-		publish: intent.value
-	} : { [intent.operation]: intent.value };
+	const rows = matrix[intent.namespace].filter((row) => intent.fieldName === void 0 || row.fieldName === intent.fieldName);
+	const changes = intent.kind === "access" ? grantsOf(intent.level) : {
+		delete: intent.mode !== "off",
+		deleteUnattended: intent.mode === "trash"
+	};
 	return rows.flatMap((row) => rowActions(basePath, intent.namespace, row, values, changes));
 };
+/**
+* The level a namespace's "All" control shows: the one that would change
+* nothing if picked, so rows capped below it still count. `undefined` while
+* the rows differ.
+*/ const allAccessLevel = (matrix, basePath, namespace, values) => ACCESS_LEVELS.find((level) => buildToggleActions(matrix, basePath, values, {
+	kind: "access",
+	namespace,
+	level
+}).length === 0);
+/**
+* The delete mode the "All" control shows, by the same rule. It offers no
+* trash, so a row that trashes directly reads as mixed.
+*/ const allDeleteMode = (matrix, basePath, namespace, values) => ["off", "approve"].find((mode) => buildToggleActions(matrix, basePath, values, {
+	kind: "deleteMode",
+	namespace,
+	mode
+}).length === 0);
 //#endregion
-export { buildToggleActions, columnState, rowState, toolsState };
+export { accessLevelOf, accessLevelsOf, allAccessLevel, allDeleteMode, buildToggleActions, deleteModeOf, toolsState };

package/dist/admin/confirmations-panel.mjs

@@ -0,0 +1,242 @@
+"use client";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { Button } from "@payloadcms/ui";
+//#region src/admin/confirmations-panel.tsx
+/**
+* The element id of a call's row, which the page scrolls to.
+*/ const confirmationRowId = (handle) => `mcpx-confirmation-${handle}`;
+const CELL_PADDING = "calc(var(--base) * 0.4) calc(var(--base) * 0.6)";
+const styles = {
+	panel: {
+		marginBottom: "var(--base)",
+		padding: "calc(var(--base) * 0.75)",
+		border: "1px solid var(--theme-elevation-150)",
+		borderRadius: "3px",
+		background: "var(--theme-elevation-50)"
+	},
+	heading: { margin: 0 },
+	lead: {
+		margin: "calc(var(--base) * 0.25) 0 calc(var(--base) * 0.75)",
+		color: "var(--theme-elevation-500)"
+	},
+	group: { marginBottom: "calc(var(--base) * 0.75)" },
+	groupHeading: { margin: "0 0 calc(var(--base) * 0.25)" },
+	table: {
+		width: "100%",
+		borderCollapse: "collapse",
+		textAlign: "left"
+	},
+	head: {
+		padding: CELL_PADDING,
+		color: "var(--theme-elevation-400)",
+		fontWeight: "normal",
+		borderBottom: "1px solid var(--theme-border-color)"
+	},
+	cell: {
+		padding: CELL_PADDING,
+		verticalAlign: "middle",
+		borderBottom: "1px solid var(--theme-elevation-100)"
+	},
+	highlighted: { background: "var(--theme-elevation-100)" },
+	muted: { color: "var(--theme-elevation-500)" },
+	status: {
+		display: "block",
+		color: "var(--theme-elevation-500)",
+		fontSize: "0.85em"
+	},
+	permanent: {
+		color: "var(--theme-error-500)",
+		fontWeight: 600
+	},
+	actions: {
+		display: "flex",
+		gap: "calc(var(--base) * 0.25)",
+		justifyContent: "flex-end"
+	},
+	footer: {
+		display: "flex",
+		gap: "calc(var(--base) * 0.5)"
+	}
+};
+const groupsOf = (confirmations) => {
+	const groups = /* @__PURE__ */ new Map();
+	for (const confirmation of confirmations) groups.set(confirmation.group, [...groups.get(confirmation.group) ?? [], confirmation]);
+	return [...groups];
+};
+const approveAllLabel = (confirmations) => {
+	const permanent = confirmations.filter((confirmation) => confirmation.summary.permanent).length;
+	return permanent === 0 ? `Approve all (${String(confirmations.length)})` : `Approve all (${String(confirmations.length)}, ${String(permanent)} permanent)`;
+};
+const Row = ({ busy, confirmation, onDecide }) => {
+	const { handle, highlighted, summary } = confirmation;
+	const cell = highlighted ? {
+		...styles.cell,
+		...styles.highlighted
+	} : styles.cell;
+	const name = summary.title ?? summary.id ?? "Unreadable";
+	return /*#__PURE__*/ jsxs("tr", {
+		"aria-current": highlighted ? "true" : void 0,
+		id: confirmationRowId(handle),
+		children: [
+			/*#__PURE__*/ jsx("td", {
+				style: cell,
+				children: summary.label
+			}),
+			/*#__PURE__*/ jsxs("td", {
+				style: cell,
+				children: [
+					summary.href ? /*#__PURE__*/ jsx("a", {
+						href: summary.href,
+						rel: "noreferrer",
+						target: "_blank",
+						children: name
+					}) : name,
+					summary.title && summary.id ? /*#__PURE__*/ jsxs("span", {
+						style: styles.muted,
+						children: [
+							" (",
+							summary.id,
+							")"
+						]
+					}) : null,
+					summary.status ? /*#__PURE__*/ jsx("span", {
+						style: styles.status,
+						children: summary.status
+					}) : null
+				]
+			}),
+			/*#__PURE__*/ jsx("td", {
+				style: cell,
+				children: summary.permanent ? /*#__PURE__*/ jsx("span", {
+					style: styles.permanent,
+					children: "Permanent"
+				}) : "Moves to trash"
+			}),
+			/*#__PURE__*/ jsx("td", {
+				style: cell,
+				children: summary.reason ? /*#__PURE__*/ jsxs("span", { children: [/*#__PURE__*/ jsx("span", {
+					style: styles.muted,
+					children: "The client wrote: "
+				}), summary.reason] }) : /*#__PURE__*/ jsx("span", {
+					style: styles.muted,
+					children: "No reason given"
+				})
+			}),
+			/*#__PURE__*/ jsx("td", {
+				style: cell,
+				children: /*#__PURE__*/ jsxs("div", {
+					style: styles.actions,
+					children: [/*#__PURE__*/ jsx(Button, {
+						buttonStyle: "primary",
+						disabled: busy,
+						margin: false,
+						onClick: () => {
+							onDecide([handle], "approved");
+						},
+						size: "small",
+						type: "button",
+						children: "Approve"
+					}), /*#__PURE__*/ jsx(Button, {
+						buttonStyle: "secondary",
+						disabled: busy,
+						margin: false,
+						onClick: () => {
+							onDecide([handle], "rejected");
+						},
+						size: "small",
+						type: "button",
+						children: "Reject"
+					})]
+				})
+			})
+		]
+	});
+};
+/**
+* The calls of an API key waiting for its user's decision, grouped by tool.
+* Renders nothing when none is waiting.
+*/ const ConfirmationsPanel = ({ busy, confirmations, onDecide }) => {
+	if (confirmations.length === 0) return null;
+	const handles = confirmations.map((confirmation) => confirmation.handle);
+	return /*#__PURE__*/ jsxs("section", {
+		className: "field-type",
+		style: styles.panel,
+		children: [
+			/*#__PURE__*/ jsx("h3", {
+				style: styles.heading,
+				children: "Waiting for your approval"
+			}),
+			/*#__PURE__*/ jsx("p", {
+				style: styles.lead,
+				children: "A client using this key asked for these calls. Approving runs nothing: the client runs approved calls with runConfirmed. Each call expires 15 minutes after it was requested."
+			}),
+			groupsOf(confirmations).map(([group, entries]) => /*#__PURE__*/ jsxs("div", {
+				style: styles.group,
+				children: [/*#__PURE__*/ jsx("h4", {
+					style: styles.groupHeading,
+					children: group
+				}), /*#__PURE__*/ jsxs("table", {
+					style: styles.table,
+					children: [/*#__PURE__*/ jsx("thead", { children: /*#__PURE__*/ jsxs("tr", { children: [
+						/*#__PURE__*/ jsx("th", {
+							scope: "col",
+							style: styles.head,
+							children: "Collection"
+						}),
+						/*#__PURE__*/ jsx("th", {
+							scope: "col",
+							style: styles.head,
+							children: "Document"
+						}),
+						/*#__PURE__*/ jsx("th", {
+							scope: "col",
+							style: styles.head,
+							children: "Effect"
+						}),
+						/*#__PURE__*/ jsx("th", {
+							scope: "col",
+							style: styles.head,
+							children: "Reason"
+						}),
+						/*#__PURE__*/ jsx("th", {
+							scope: "col",
+							style: styles.head,
+							children: /*#__PURE__*/ jsx("span", {
+								className: "sr-only",
+								children: "Decision"
+							})
+						})
+					] }) }), /*#__PURE__*/ jsx("tbody", { children: entries.map((confirmation) => /*#__PURE__*/ jsx(Row, {
+						busy,
+						confirmation,
+						onDecide
+					}, confirmation.handle)) })]
+				})]
+			}, group)),
+			/*#__PURE__*/ jsxs("div", {
+				style: styles.footer,
+				children: [/*#__PURE__*/ jsx(Button, {
+					buttonStyle: "primary",
+					disabled: busy,
+					margin: false,
+					onClick: () => {
+						onDecide(handles, "approved");
+					},
+					type: "button",
+					children: approveAllLabel(confirmations)
+				}), /*#__PURE__*/ jsx(Button, {
+					buttonStyle: "secondary",
+					disabled: busy,
+					margin: false,
+					onClick: () => {
+						onDecide(handles, "rejected");
+					},
+					type: "button",
+					children: "Reject all"
+				})]
+			})
+		]
+	});
+};
+//#endregion
+export { ConfirmationsPanel, confirmationRowId };

package/dist/admin/confirmations.d.mts

@@ -0,0 +1,15 @@
+import React from "react";
+//#region src/admin/confirmations.d.ts
+interface McpxConfirmationsProps {
+  /**
+   * Endpoint path below the API route, from the plugin options.
+   */
+  endpointPath: string;
+}
+/**
+ * The calls waiting for approval on the API key edit view. Reads and decides
+ * through the plugin's endpoints, never through the key's form, so a decision
+ * does not mark the key modified. Renders nothing while none is waiting.
+ */
+export declare const McpxConfirmations: React.FC<McpxConfirmationsProps>;
+//#endregion

package/dist/admin/confirmations.mjs

@@ -0,0 +1,70 @@
+"use client";
+import { CONFIRMATIONS_PATH } from "../api-keys/confirmation-view.mjs";
+import { ConfirmationsPanel, confirmationRowId } from "./confirmations-panel.mjs";
+import { jsx } from "react/jsx-runtime";
+import { toast, useConfig, useDocumentInfo } from "@payloadcms/ui";
+import { useCallback, useEffect, useState } from "react";
+//#region src/admin/confirmations.tsx
+/**
+* The calls waiting for approval on the API key edit view. Reads and decides
+* through the plugin's endpoints, never through the key's form, so a decision
+* does not mark the key modified. Renders nothing while none is waiting.
+*/ const McpxConfirmations = ({ endpointPath }) => {
+	const { id } = useDocumentInfo();
+	const { config } = useConfig();
+	const [confirmations, setConfirmations] = useState([]);
+	const [busy, setBusy] = useState(false);
+	const [version, setVersion] = useState(0);
+	const url = `${config.serverURL}${config.routes.api}${endpointPath}${CONFIRMATIONS_PATH}`;
+	useEffect(() => {
+		if (id === void 0) return;
+		let active = true;
+		const params = new URLSearchParams({ key: String(id) });
+		const highlight = new URLSearchParams(window.location.search).get("confirmation");
+		if (highlight !== null) params.set("confirmation", highlight);
+		fetch(`${url}?${params.toString()}`, { credentials: "include" }).then(async (response) => response.ok ? await response.json() : { confirmations: [] }).then((body) => {
+			if (active) setConfirmations(body.confirmations);
+		}).catch(() => void 0);
+		return () => {
+			active = false;
+		};
+	}, [
+		id,
+		url,
+		version
+	]);
+	const highlighted = confirmations.find((entry) => entry.highlighted)?.handle;
+	useEffect(() => {
+		if (highlighted !== void 0) document.getElementById(confirmationRowId(highlighted))?.scrollIntoView({ block: "center" });
+	}, [highlighted]);
+	const decide = useCallback((handles, decision) => {
+		setBusy(true);
+		fetch(url, {
+			method: "POST",
+			credentials: "include",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify({
+				key: id,
+				handles,
+				decision
+			})
+		}).then(async (response) => {
+			if (!response.ok) {
+				const body = await response.json().catch(() => ({}));
+				toast.error(body.error ?? "The decision could not be saved.");
+			}
+		}).catch(() => {
+			toast.error("The decision could not be saved.");
+		}).finally(() => {
+			setBusy(false);
+			setVersion((current) => current + 1);
+		});
+	}, [id, url]);
+	return /*#__PURE__*/ jsx(ConfirmationsPanel, {
+		busy,
+		confirmations,
+		onDecide: decide
+	});
+};
+//#endregion
+export { McpxConfirmations };

package/dist/admin/index.d.mts

@@ -1,3 +1,4 @@
 import { McpxCapabilityMatrix } from "./capability-matrix.mjs";
+import { McpxConfirmations } from "./confirmations.mjs";
 import { McpxSetupGuide } from "./setup-guide.mjs";
-export { McpxCapabilityMatrix, McpxSetupGuide };
+export { McpxCapabilityMatrix, McpxConfirmations, McpxSetupGuide };

package/dist/admin/index.mjs

@@ -1,3 +1,4 @@
 import { McpxCapabilityMatrix } from "./capability-matrix.mjs";
+import { McpxConfirmations } from "./confirmations.mjs";
 import { McpxSetupGuide } from "./setup-guide.mjs";
-export { McpxCapabilityMatrix, McpxSetupGuide };
+export { McpxCapabilityMatrix, McpxConfirmations, McpxSetupGuide };

package/dist/api-keys/capability-matrix.d.mts

@@ -2,8 +2,7 @@ import "../options.mjs";
 //#region src/api-keys/capability-matrix.d.ts
 /**
  * One entity's row. The booleans say what the plugin config exposes, not what
- * the key was granted. A `false` renders as a dash, so absence reads as a
- * refusal by config rather than a gap.
+ * the key was granted. A `false` leaves its segment out of the row's controls.
  */
 export interface CapabilityRow {
   fieldName: string;
@@ -14,10 +13,12 @@ export interface CapabilityRow {
   read: boolean;
   write: boolean;
   publish: boolean;
+  delete: boolean;
+  deleteUnattended: boolean;
   /**
-   * Said only where a row departs from what its column header promises.
+   * Writes go live immediately, as the entity keeps no drafts.
    */
-  hint?: string;
+  live?: boolean;
 }
 interface CapabilityTool {
   name: string;

package/dist/api-keys/capability-matrix.mjs

@@ -2,12 +2,12 @@ import { CAPABILITIES_FIELD, canPublish, canWrite, isLiveWrite } from "../capabi
 //#region src/api-keys/capability-matrix.ts
 /**
 * The group's `admin.description`, rendered by the matrix in Payload's
-* description slot. It explains both markings in the table: an unticked box
-* and a dash.
-*/ const CAPABILITIES_DESCRIPTION = "What this key may do. An unticked box is a refusal, and a dash means the plugin config does not expose that operation at all.";
+* description slot. It explains how to read the segmented controls.
+*/ const CAPABILITIES_DESCRIPTION = "What this key may do. Each level includes the ones before it, and a missing segment means the plugin config does not expose it.";
 /**
 * The operations a collection or global can expose. The generated checkboxes
-* and the matrix column headers share this wording.
+* and the matrix segments share this wording. `requires` names the
+* operation a grant depends on, which the server and the matrix both enforce.
 */ const CAPABILITY_OPERATIONS = [
 	{
 		id: "read",
@@ -17,27 +17,48 @@ import { CAPABILITIES_FIELD, canPublish, canWrite, isLiveWrite } from "../capabi
 	{
 		id: "write",
 		label: "Write",
-		description: "Create, patch and validate drafts."
+		description: "Create, patch and validate drafts.",
+		requires: "read"
 	},
 	{
 		id: "publish",
 		label: "Publish",
-		description: "Promote the current draft to what the public sees."
+		description: "Promote the current draft to what the public sees.",
+		requires: "write"
+	},
+	{
+		id: "delete",
+		label: "Delete",
+		description: "Delete documents. Each one is approved by this key's user in the admin panel, unless the config allows trashing directly and this key is set to.",
+		requires: "read"
 	}
 ];
-const LIVE_HINT = "Writes go live immediately.";
-const hintFor = (entity) => isLiveWrite(entity) ? { hint: LIVE_HINT } : {};
+/**
+* Stored as a checkbox of its own but drawn as the Trash segment of the Delete
+* control.
+*/ const DELETE_UNATTENDED = {
+	id: "deleteUnattended",
+	label: "Trash directly",
+	description: "Move documents to trash without asking this key's user.",
+	requires: "delete"
+};
+/**
+* Every operation with a stored checkbox: the capability operations plus
+* the unattended delete.
+*/ const STORED_OPERATIONS = [...CAPABILITY_OPERATIONS, DELETE_UNATTENDED];
 const toRow = (entity) => ({
 	fieldName: entity.fieldName,
 	label: entity.slug,
 	read: entity.read,
 	write: canWrite(entity),
 	publish: canPublish(entity),
-	...hintFor(entity)
+	delete: entity.delete,
+	deleteUnattended: entity.deleteUnattended,
+	...isLiveWrite(entity) ? { live: true } : {}
 });
 /**
 * The single description of what the config exposes. `createCapabilityFields`
-* and the admin component both draw from it, so a cell cannot appear without a
+* and the admin component both draw from it, so a control cannot appear without a
 * field behind it.
 */ const createCapabilityMatrix = (options) => ({
 	collections: options.collections.map(toRow),
@@ -51,6 +72,6 @@ const cellPath = (basePath, namespace, fieldName, operation) => `${basePath}.${n
 const toolPath = (basePath, name) => `${basePath}.tools.${name}`;
 /**
 * Every path the matrix can address, in a stable order.
-*/ const capabilityPaths = (matrix, basePath = CAPABILITIES_FIELD) => [...["collections", "globals"].flatMap((namespace) => matrix[namespace].flatMap((row) => CAPABILITY_OPERATIONS.filter((operation) => row[operation.id]).map((operation) => cellPath(basePath, namespace, row.fieldName, operation.id)))), ...matrix.tools.map((tool) => toolPath(basePath, tool.name))];
+*/ const capabilityPaths = (matrix, basePath = CAPABILITIES_FIELD) => [...["collections", "globals"].flatMap((namespace) => matrix[namespace].flatMap((row) => STORED_OPERATIONS.filter((operation) => row[operation.id]).map((operation) => cellPath(basePath, namespace, row.fieldName, operation.id)))), ...matrix.tools.map((tool) => toolPath(basePath, tool.name))];
 //#endregion
-export { CAPABILITIES_DESCRIPTION, CAPABILITY_OPERATIONS, capabilityPaths, cellPath, createCapabilityMatrix, toolPath };
+export { CAPABILITIES_DESCRIPTION, CAPABILITY_OPERATIONS, STORED_OPERATIONS, capabilityPaths, cellPath, createCapabilityMatrix, toolPath };

package/dist/api-keys/collection.mjs

@@ -1,4 +1,4 @@
-import { createCapabilityFields, createKeyFields, withSetupGuideTab } from "./fields.mjs";
+import { createCapabilityFields, createConfirmationFields, createKeyFields, withSetupGuideTab } from "./fields.mjs";
 import { generateApiKey, hashApiKey } from "./key.mjs";
 //#region src/api-keys/collection.ts
 /**
@@ -37,7 +37,7 @@ import { generateApiKey, hashApiKey } from "./key.mjs";
 			delete: ownKeysOnly
 		},
 		hooks: { beforeChange: [keyBeforeChange] },
-		fields: withSetupGuideTab([
+		fields: [...createConfirmationFields(options), ...withSetupGuideTab([
 			{
 				name: "user",
 				type: "relationship",
@@ -52,7 +52,7 @@ import { generateApiKey, hashApiKey } from "./key.mjs";
 			},
 			...createKeyFields(),
 			...createCapabilityFields(options)
-		], options)
+		], options)]
 	};
 };
 //#endregion

package/dist/api-keys/confirmation-view.mjs

@@ -0,0 +1,6 @@
+//#region src/api-keys/confirmation-view.ts
+/**
+* Path of the confirmations endpoints below the plugin's endpoint path.
+*/ const CONFIRMATIONS_PATH = "/confirmations";
+//#endregion
+export { CONFIRMATIONS_PATH };