@bison-lab/payload-core 3.12.0 → 3.13.0

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { n as documentTitle, r as titleTemplate, t as SHARE_IMAGE_SIZE } from "./share-image-C4ILz4p2.mjs";
-import { A as THEME_IDENTITY_FALLBACK, C as THEME_APPEARANCE_FIELD, D as THEME_DOCUMENT_CONTROLS, E as THEME_CONTRAST_REPORT, F as THEME_SECTION_HEADING, I as headingSelectValue, M as THEME_PAIRING_FIELD, N as THEME_PUBLISH_FIELD, O as THEME_FONT_FIELD, P as THEME_SAVE_BUTTON, S as LOOK_FIELD, T as THEME_COLOR_SCALE_FIELD, _ as docFromConfig, a as pageEditorLooks, b as validateSourceIncluded, c as deleteLibraryColor, d as SYSTEM_COLOR_KEYS, f as THEME_APPEARANCE_SLUG, g as THEME_TYPOGRAPHY_SLUG, h as THEME_SLUG, i as PAGE_EDITOR_SYSTEM_KEYS, j as THEME_LIBRARY_FIELD, k as THEME_GREY_SCALE_FIELD, l as rewriteColorToken, m as THEME_IDENTITY_SLUG, n as colorTokenField, o as pageEditorTokens, p as THEME_COLORS_SLUG, r as lookField, s as themeLibraryFromDoc, t as resolveThemeIdentity, u as themeColorKeys, w as THEME_COLOR_FIELD, x as validateThemeHex, y as themeConfigFromDoc } from "./identity-DZOb3_Gk.mjs";
+import { A as THEME_FONT_FIELD, C as validateThemeHex, D as THEME_COLOR_SCALE_FIELD, E as THEME_COLOR_FIELD, F as THEME_PUBLISH_FIELD, I as THEME_SAVE_BUTTON, L as THEME_SECTION_HEADING, M as THEME_IDENTITY_FALLBACK, N as THEME_LIBRARY_FIELD, O as THEME_CONTRAST_REPORT, P as THEME_PAIRING_FIELD, R as headingSelectValue, S as validateSourceIncluded, T as THEME_APPEARANCE_FIELD, _ as THEME_SLUG, a as pageEditorLooks, c as findColorTokens, d as rewriteColorToken, f as themeColorKeys, g as THEME_IDENTITY_SLUG, h as THEME_COLORS_SLUG, i as PAGE_EDITOR_SYSTEM_KEYS, j as THEME_GREY_SCALE_FIELD, k as THEME_DOCUMENT_CONTROLS, l as rewriteColorTokens, m as THEME_APPEARANCE_SLUG, n as colorTokenField, o as pageEditorTokens, p as SYSTEM_COLOR_KEYS, r as lookField, s as themeLibraryFromDoc, t as resolveThemeIdentity, u as deleteLibraryColor, v as THEME_TYPOGRAPHY_SLUG, w as LOOK_FIELD, x as themeConfigFromDoc, y as docFromConfig } from "./identity-LAzSeorC.mjs";
 import { seoPlugin as seoPlugin$1 } from "@payloadcms/plugin-seo";
 import { catalog } from "@bison-lab/fonts";
 import { DESTRUCTIVE_SCALE_HEX, SHADE_STEPS, presetHints } from "@bison-lab/tokens";
@@ -164,6 +164,145 @@ const APPEARANCE_CHOICES = {
 	}
 };
 //#endregion
+//#region src/theme/color-usages.ts
+/** Theme-store REST path. LibraryField calls `/api/globals/theme` + this. */
+const COLOR_USAGES_PATH = "/color-usages";
+/**
+* Walk every current document in the named collections and globals
+* (drafts included). A color only on an unpublished page is still in use.
+*/
+async function findColorUsages(payload, scopes, key) {
+	const usages = [];
+	for (const collection of scopes?.collections ?? []) for await (const doc of eachCollectionDoc(payload, collection)) for (const hit of findColorTokens(doc, key)) usages.push({
+		collection,
+		id: idOf(doc),
+		path: hit.path,
+		token: hit.token
+	});
+	for (const slug of scopes?.globals ?? []) {
+		const doc = await payload.findGlobal({
+			slug,
+			draft: true,
+			depth: 0,
+			overrideAccess: true
+		});
+		if (!doc) continue;
+		for (const hit of findColorTokens(doc, key)) usages.push({
+			global: slug,
+			path: hit.path,
+			token: hit.token
+		});
+	}
+	return usages;
+}
+async function rewriteColorUsages(payload, scopes, fromKey, toKey) {
+	for (const collection of scopes?.collections ?? []) for await (const doc of eachCollectionDoc(payload, collection)) {
+		if (findColorTokens(doc, fromKey).length === 0) continue;
+		const { id: _id, ...data } = rewriteColorTokens(doc, fromKey, toKey);
+		const id = idOf(doc);
+		if (id == null) continue;
+		await payload.update({
+			collection,
+			id,
+			data,
+			draft: true,
+			overrideAccess: true
+		});
+	}
+	for (const slug of scopes?.globals ?? []) {
+		const doc = await payload.findGlobal({
+			slug,
+			draft: true,
+			depth: 0,
+			overrideAccess: true
+		});
+		if (!doc || findColorTokens(doc, fromKey).length === 0) continue;
+		await payload.updateGlobal({
+			slug,
+			data: rewriteColorTokens(doc, fromKey, toKey),
+			draft: true,
+			overrideAccess: true
+		});
+	}
+}
+async function replacementKeys(payload, except) {
+	return pageEditorLooks(await payload.findGlobal({
+		slug: THEME_SLUG,
+		depth: 0,
+		overrideAccess: true
+	})).map((look) => look.value).filter((key) => key !== except);
+}
+async function* eachCollectionDoc(payload, collection) {
+	let page = 1;
+	for (;;) {
+		const result = await payload.find({
+			collection,
+			draft: true,
+			depth: 0,
+			limit: 100,
+			page,
+			overrideAccess: true
+		});
+		for (const doc of result.docs) yield doc;
+		const totalPages = result.totalPages ?? (result.docs.length < 100 ? page : page + 1);
+		if (page >= totalPages || result.docs.length === 0) break;
+		page += 1;
+	}
+}
+function idOf(doc) {
+	const id = doc.id;
+	return typeof id === "string" || typeof id === "number" ? id : void 0;
+}
+//#endregion
+//#region src/theme/color-usage-endpoints.ts
+function colorUsageEndpoints(access, scopes) {
+	return [{
+		path: COLOR_USAGES_PATH,
+		method: "get",
+		handler: async (req) => {
+			const denied = await denyUnlessUpdate(req, access.update);
+			if (denied) return denied;
+			const key = queryKey(req);
+			if (!key) return Response.json({ error: "key is required" }, { status: 400 });
+			const usages = await findColorUsages(req.payload, scopes, key);
+			return Response.json({ usages });
+		}
+	}, {
+		path: COLOR_USAGES_PATH,
+		method: "post",
+		handler: async (req) => {
+			const denied = await denyUnlessUpdate(req, access.update);
+			if (denied) return denied;
+			const body = await readJson(req);
+			const key = typeof body?.key === "string" ? body.key : "";
+			const replacement = typeof body?.replacement === "string" ? body.replacement : "";
+			if (!key || !replacement) return Response.json({ error: "key and replacement are required" }, { status: 400 });
+			if (!(await replacementKeys(req.payload, key)).includes(replacement)) return Response.json({ error: "Replacement must be a different live system or remaining custom key" }, { status: 400 });
+			await rewriteColorUsages(req.payload, scopes, key, replacement);
+			return Response.json({ ok: true });
+		}
+	}];
+}
+async function denyUnlessUpdate(req, update) {
+	if (await update({ req })) return null;
+	return Response.json({ error: "Forbidden" }, { status: 403 });
+}
+function queryKey(req) {
+	const fromQuery = req.query?.key;
+	if (typeof fromQuery === "string") return fromQuery;
+	if (Array.isArray(fromQuery) && typeof fromQuery[0] === "string") return fromQuery[0];
+	if (req.url) try {
+		return new URL(req.url, "http://local").searchParams.get("key") ?? "";
+	} catch {
+		return "";
+	}
+	return "";
+}
+async function readJson(req) {
+	if (typeof req.json === "function") return req.json();
+	return null;
+}
+//#endregion
 //#region src/theme/publish.ts
 /**
 * Publishing a child writes that slice only. Other responsibilities stay
@@ -570,7 +709,7 @@ function pageHooks(child) {
 function createTheme(options) {
 	const access = requireAccess$1(options);
 	const destructive = requireDestructive(options);
-	const { seed, fonts = catalog, fontsBaseUrl = "/fonts", contrastTarget = 7, logo, identity, onPublish } = options;
+	const { seed, fonts = catalog, fontsBaseUrl = "/fonts", contrastTarget = 7, logo, identity, onPublish, colorUsages } = options;
 	const adminCustom = {
 		contrastTarget,
 		fontsBaseUrl,
@@ -599,6 +738,7 @@ function createTheme(options) {
 			...lookFields,
 			...markFields
 		],
+		endpoints: colorUsageEndpoints(access, colorUsages),
 		hooks: { afterChange: [async ({ doc }) => {
 			if (!onPublish) return;
 			const themeDoc = doc;
@@ -806,9 +946,20 @@ const CAPABILITIES = [
 function isRole(value) {
 	return typeof value === "string" && ROLES.includes(value);
 }
+/** Lowercase slug: `editor`, `site-editor`. Empty and punctuation are out. */
+function isRoleSlug(value) {
+	return typeof value === "string" && /^[a-z][a-z0-9]*(-[a-z0-9]+)*$/.test(value);
+}
+function roleLabel(role, label) {
+	const trimmed = typeof label === "string" ? label.trim() : "";
+	if (trimmed) return trimmed;
+	return isRole(role) ? ROLE_LABELS[role] : role;
+}
 //#endregion
 //#region src/roles/matrix.ts
 const ROLES_SLUG = "roles";
+const ROLES_GLOBAL_DESCRIPTION = "Who may do what. Drag to change rank.";
+const ROLES_FIELD_DESCRIPTION = "Drag to change rank. Ticks are Content, Brand, Publish, and Users.";
 /**
 * Default rank and ticks. Brand is Designer only. The API tab is not a
 * column — it is locked to Developer in `isDeveloper`.
@@ -845,42 +996,64 @@ const DEFAULT_ROLE_MATRIX = [
 ];
 const DEVELOPER_DESCRIPTION = "Everything Admin can do, plus the document API tab.";
 const LAST_USERS_TICK_MESSAGE = "Keep Users ticked on at least one of Admin or Developer.";
+const MISSING_SEED_ROLES_MESSAGE = "Roles must include Developer, Admin, Designer, and Author.";
+const DUPLICATE_ROLE_SLUG_MESSAGE = "Each role needs a unique slug.";
 const CAPABILITY_LABELS = {
 	content: "Content",
 	brand: "Brand",
 	publish: "Publish",
 	users: "Users"
 };
-function defaultRolesFieldValue() {
-	return DEFAULT_ROLE_MATRIX.map((row) => ({
+function seedRoleRows(extras = []) {
+	return [...DEFAULT_ROLE_MATRIX.map((row) => ({
+		...row,
+		label: isRole(row.role) ? ROLE_LABELS[row.role] : row.role
+	})), ...extras.map((extra) => ({ ...extra }))];
+}
+function defaultRolesFieldValue(extras = []) {
+	return seedRoleRows(extras).map((row) => ({
 		id: row.role,
 		...row
 	}));
 }
+function readRoleRow(item) {
+	const role = "role" in item ? item.role : void 0;
+	if (typeof role !== "string" || role.trim() === "") return { error: DUPLICATE_ROLE_SLUG_MESSAGE };
+	if (!isRoleSlug(role)) return { error: DUPLICATE_ROLE_SLUG_MESSAGE };
+	return {
+		id: role,
+		role,
+		label: roleLabel(role, "label" in item && typeof item.label === "string" ? item.label : void 0),
+		content: Boolean("content" in item && item.content),
+		brand: Boolean("brand" in item && item.brand),
+		publish: Boolean("publish" in item && item.publish),
+		users: Boolean("users" in item && item.users)
+	};
+}
 function parseRolesMatrix(value) {
 	if (!Array.isArray(value)) return {
 		ok: false,
-		message: "Roles must be Developer, Admin, Designer, and Author."
+		message: MISSING_SEED_ROLES_MESSAGE
 	};
 	const rows = [];
 	const seen = /* @__PURE__ */ new Set();
 	for (const item of value) {
 		if (!item || typeof item !== "object") continue;
-		const role = "role" in item ? item.role : void 0;
-		if (!isRole(role) || seen.has(role)) continue;
-		seen.add(role);
-		rows.push({
-			id: role,
-			role,
-			content: Boolean("content" in item && item.content),
-			brand: Boolean("brand" in item && item.brand),
-			publish: Boolean("publish" in item && item.publish),
-			users: Boolean("users" in item && item.users)
-		});
+		const parsed = readRoleRow(item);
+		if ("error" in parsed) return {
+			ok: false,
+			message: parsed.error
+		};
+		if (seen.has(parsed.role)) return {
+			ok: false,
+			message: DUPLICATE_ROLE_SLUG_MESSAGE
+		};
+		seen.add(parsed.role);
+		rows.push(parsed);
 	}
-	if (rows.length !== ROLES.length || ROLES.some((role) => !seen.has(role))) return {
+	if (ROLES.some((role) => !seen.has(role))) return {
 		ok: false,
-		message: "Roles must be Developer, Admin, Designer, and Author."
+		message: MISSING_SEED_ROLES_MESSAGE
 	};
 	return {
 		ok: true,
@@ -898,16 +1071,19 @@ function validateRolesMatrix(value) {
 }
 /**
 * Developer is exclusive. Admin does not swallow Designer: both store.
+* Unknown slugs (dropped catalogue keys such as `approver`) fall away unless
+* they appear on the matrix.
 */
-function normalizeStoredRoles(value) {
+function normalizeStoredRoles(value, matrix = DEFAULT_ROLE_MATRIX) {
 	if (!Array.isArray(value)) return [];
-	const roles = [...new Set(value.filter(isRole))];
+	const allowed = new Set(matrix.map((row) => row.role));
+	const roles = [...new Set(value.filter((entry) => typeof entry === "string" && allowed.has(entry)))];
 	if (roles.includes("developer")) return ["developer"];
 	return roles;
 }
 function roleSelectOptions(matrix = DEFAULT_ROLE_MATRIX) {
 	return matrix.map((row) => ({
-		label: ROLE_LABELS[row.role],
+		label: roleLabel(row.role, row.label),
 		value: row.role
 	}));
 }
@@ -918,9 +1094,22 @@ function roleDescription(role, matrix = DEFAULT_ROLE_MATRIX) {
 	if (!row) return "No capabilities";
 	return CAPABILITIES.filter((capability) => row[capability]).map((capability) => CAPABILITY_LABELS[capability]).join(", ") || "No capabilities";
 }
+/**
+* Seed ticks and package labels come back; extra rows stay as they are.
+*/
+function resetRolesMatrix(current) {
+	const extras = [];
+	if (Array.isArray(current)) for (const item of current) {
+		if (!item || typeof item !== "object") continue;
+		const parsed = readRoleRow(item);
+		if ("error" in parsed || isRole(parsed.role)) continue;
+		extras.push(parsed);
+	}
+	return [...defaultRolesFieldValue(), ...extras];
+}
 //#endregion
 //#region src/roles/access.ts
-function isAccessArgs(value) {
+function isAccessArgs$1(value) {
 	return typeof value === "object" && value !== null && "req" in value;
 }
 function storedRoles(user) {
@@ -943,9 +1132,10 @@ function hasCapability(user, capability, matrix = DEFAULT_ROLE_MATRIX) {
 * empty, missing, or unreadable. Always override-access so a Designer
 * evaluating Theme does not have to read Settings → Roles.
 */
-async function getRolesMatrix(req = {}) {
+async function getRolesMatrix(req = {}, extras = []) {
+	const fallback = seedRoleRows(extras);
 	const findGlobal = req.payload?.findGlobal;
-	if (typeof findGlobal !== "function") return [...DEFAULT_ROLE_MATRIX];
+	if (typeof findGlobal !== "function") return fallback;
 	try {
 		const doc = await findGlobal({
 			slug: ROLES_SLUG,
@@ -953,14 +1143,14 @@ async function getRolesMatrix(req = {}) {
 			req
 		});
 		const parsed = parseRolesMatrix(doc && typeof doc === "object" && "roles" in doc ? doc.roles : void 0);
-		return parsed.ok ? parsed.rows : [...DEFAULT_ROLE_MATRIX];
+		return parsed.ok ? parsed.rows : fallback;
 	} catch {
-		return [...DEFAULT_ROLE_MATRIX];
+		return fallback;
 	}
 }
 function capabilityPredicate(capability) {
 	function predicate(userOrArgs, matrix) {
-		if (isAccessArgs(userOrArgs)) {
+		if (isAccessArgs$1(userOrArgs)) {
 			const user = userOrArgs.req.user;
 			if (matrix) return hasCapability(user, capability, matrix);
 			return getRolesMatrix(userOrArgs.req).then((rows) => hasCapability(user, capability, rows));
@@ -976,10 +1166,10 @@ const canPublish = capabilityPredicate("publish");
 const isAdmin = capabilityPredicate("users");
 /** This role id currently has the Users tick. */
 function isPrivilegedRole(role, matrix = DEFAULT_ROLE_MATRIX) {
-	return isRole(role) && matrix.some((row) => row.role === role && row.users);
+	return typeof role === "string" && matrix.some((row) => row.role === role && row.users);
 }
 function isAuthenticated(userOrArgs) {
-	if (isAccessArgs(userOrArgs)) return Boolean(userOrArgs.req.user);
+	if (isAccessArgs$1(userOrArgs)) return Boolean(userOrArgs.req.user);
 	return Boolean(userOrArgs);
 }
 const isAdminOrSelf = async ({ req }) => {
@@ -998,93 +1188,431 @@ function isDeveloperTab({ req }) {
 //#endregion
 //#region src/roles/fields.ts
 const ROLES_MATRIX_FIELD = "@bison-lab/payload-core/admin#RolesMatrixField";
+const ROLES_ROW_LABEL = "@bison-lab/payload-core/admin#RolesRowLabel";
+const ROLE_SLUG_FIELD = "@bison-lab/payload-core/admin#RoleSlugField";
 const ROLES_FIELD = "@bison-lab/payload-core/admin#RolesField";
 //#endregion
 //#region src/roles/global.ts
+const roleSlugValidate = (value, options) => {
+	if (options.operation === "update" && isRole(options.previousValue)) return value === options.previousValue || "Each role needs a unique slug.";
+	if (typeof value !== "string" || value === "") return DUPLICATE_ROLE_SLUG_MESSAGE;
+	return isRoleSlug(value) || "Each role needs a unique slug.";
+};
 /**
 * Settings → Roles. Rank is the array order (Payload's drag handle). Ticks
 * are Content, Brand, Publish, Users. The API tab is not a column.
 */
-function createRoles() {
+function createRoles({ extras = [] } = {}) {
+	const rolesField = {
+		name: "roles",
+		type: "array",
+		label: "Roles",
+		labels: {
+			singular: "Role",
+			plural: "Roles"
+		},
+		minRows: 4,
+		required: true,
+		defaultValue: defaultRolesFieldValue(extras),
+		validate: validateRolesMatrix,
+		admin: {
+			components: {
+				Field: ROLES_MATRIX_FIELD,
+				RowLabel: ROLES_ROW_LABEL
+			},
+			description: ROLES_FIELD_DESCRIPTION,
+			initCollapsed: false
+		},
+		fields: [
+			{
+				name: "role",
+				type: "text",
+				label: "Slug",
+				required: true,
+				validate: roleSlugValidate,
+				hooks: { beforeChange: [({ value, previousValue }) => isRole(previousValue) ? previousValue : value] },
+				admin: { components: { Field: ROLE_SLUG_FIELD } }
+			},
+			{
+				name: "label",
+				type: "text",
+				label: "Name",
+				required: true
+			},
+			{
+				name: "content",
+				type: "checkbox",
+				label: "Content"
+			},
+			{
+				name: "brand",
+				type: "checkbox",
+				label: "Brand"
+			},
+			{
+				name: "publish",
+				type: "checkbox",
+				label: "Publish"
+			},
+			{
+				name: "users",
+				type: "checkbox",
+				label: "Users"
+			}
+		]
+	};
 	return {
 		slug: ROLES_SLUG,
 		label: "Roles",
 		admin: {
 			group: "Settings",
 			hidden: ({ user }) => !isAdmin(user),
-			description: "Who may do what. Drag to change rank. The API tab is locked to Developer."
+			description: ROLES_GLOBAL_DESCRIPTION
+		},
+		access: {
+			read: (args) => isAdmin(args),
+			update: (args) => isAdmin(args)
+		},
+		fields: [rolesField]
+	};
+}
+//#endregion
+//#region src/roles/seed.ts
+/**
+* Writes the default matrix (seed four plus any site extras). For a site's
+* migration `up()`. Never writes a user row — seeding `developer` on a
+* person stays a site concern.
+*/
+async function seedRoles(payload, extras = []) {
+	return payload.updateGlobal({
+		slug: ROLES_SLUG,
+		data: { roles: defaultRolesFieldValue(extras) }
+	});
+}
+//#endregion
+//#region src/features/fields.ts
+const FEATURES_MATRIX_FIELD = "@bison-lab/payload-core/admin#FeaturesMatrixField";
+//#endregion
+//#region src/features/types.ts
+const FEATURES_SLUG = "features";
+const PACKAGE_FEATURE_SLUGS = [
+	"pages",
+	"media",
+	"theme",
+	"brand-assets",
+	"users",
+	"roles",
+	"features"
+];
+/**
+* Package catalogue. Locked rows cannot be turned off. Empty Global falls
+* back to the named capability (Content → Pages/Media, Brand → Theme /
+* Brand assets, Users → Users/Roles/Features).
+*/
+const PACKAGE_FEATURES = [
+	{
+		slug: "pages",
+		label: "Pages",
+		fallback: "content",
+		locked: false
+	},
+	{
+		slug: "media",
+		label: "Media",
+		fallback: "content",
+		locked: false
+	},
+	{
+		slug: "theme",
+		label: "Theme",
+		fallback: "brand",
+		locked: false
+	},
+	{
+		slug: "brand-assets",
+		label: "Brand assets",
+		fallback: "brand",
+		locked: false
+	},
+	{
+		slug: "users",
+		label: "Users",
+		fallback: "users",
+		locked: true
+	},
+	{
+		slug: "roles",
+		label: "Roles",
+		fallback: "users",
+		locked: true
+	},
+	{
+		slug: "features",
+		label: "Features",
+		fallback: "users",
+		locked: true
+	}
+];
+function isPackageFeatureSlug(value) {
+	return typeof value === "string" && PACKAGE_FEATURE_SLUGS.includes(value);
+}
+function isFeatureSlug(value) {
+	return typeof value === "string" && /^[a-z][a-z0-9]*(-[a-z0-9]+)*$/.test(value);
+}
+function isLockedFeature(slug, locked) {
+	if (locked === true) return true;
+	return PACKAGE_FEATURES.find((feature) => feature.slug === slug)?.locked === true;
+}
+//#endregion
+//#region src/features/matrix.ts
+const MISSING_PACKAGE_FEATURES_MESSAGE = "Features must include Pages, Media, Theme, Brand assets, Users, Roles, and Features.";
+const LOCKED_FEATURE_MESSAGE = "Users, Roles, and Features cannot be turned off. Developer stays allowed on every row.";
+function featureCatalogue(extras = []) {
+	return [...PACKAGE_FEATURES.map((feature) => ({ ...feature })), ...extras.map((extra) => ({
+		slug: extra.slug,
+		label: extra.label,
+		fallback: null,
+		locked: false
+	}))];
+}
+function rolesForFeature(feature, matrix) {
+	const allowed = new Set(["developer"]);
+	if (feature.locked) {
+		for (const row of matrix) allowed.add(row.role);
+		return [...allowed];
+	}
+	if (feature.fallback) {
+		for (const row of matrix) if (row[feature.fallback]) allowed.add(row.role);
+	}
+	return [...allowed];
+}
+function defaultFeaturesFieldValue(extras = [], matrix = DEFAULT_ROLE_MATRIX) {
+	return featureCatalogue(extras).map((feature) => ({
+		id: feature.slug,
+		slug: feature.slug,
+		label: feature.label,
+		locked: feature.locked,
+		roles: rolesForFeature(feature, matrix)
+	}));
+}
+function parseFeaturesMatrix(value) {
+	if (!Array.isArray(value) || value.length === 0) return {
+		ok: false,
+		message: MISSING_PACKAGE_FEATURES_MESSAGE
+	};
+	const rows = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const item of value) {
+		if (!item || typeof item !== "object") continue;
+		const slug = "slug" in item ? item.slug : void 0;
+		if (!isFeatureSlug(slug) || seen.has(slug)) continue;
+		seen.add(slug);
+		const rawRoles = "roles" in item && Array.isArray(item.roles) ? item.roles : [];
+		const roles = [];
+		for (const role of rawRoles) if (typeof role === "string" && !roles.includes(role)) roles.push(role);
+		const label = "label" in item && typeof item.label === "string" ? item.label : slug;
+		rows.push({
+			id: slug,
+			slug,
+			label,
+			locked: isLockedFeature(slug, "locked" in item ? Boolean(item.locked) : void 0),
+			roles
+		});
+	}
+	if (PACKAGE_FEATURES.some((feature) => !seen.has(feature.slug))) return {
+		ok: false,
+		message: MISSING_PACKAGE_FEATURES_MESSAGE
+	};
+	return {
+		ok: true,
+		rows
+	};
+}
+function enforceFeatureLocks(rows, matrix = DEFAULT_ROLE_MATRIX) {
+	const roleSlugs = matrix.map((row) => row.role);
+	return rows.map((row) => {
+		const roles = new Set(row.roles ?? []);
+		roles.add("developer");
+		if (isLockedFeature(row.slug, row.locked)) for (const role of roleSlugs) roles.add(role);
+		return {
+			...row,
+			roles: [...roles]
+		};
+	});
+}
+function validateFeaturesMatrix(value, extras = [], matrix = DEFAULT_ROLE_MATRIX) {
+	const parsed = parseFeaturesMatrix(value);
+	if (!parsed.ok) return parsed.message;
+	const allowed = new Set(featureCatalogue(extras).map((feature) => feature.slug));
+	if (parsed.rows.some((row) => !allowed.has(row.slug))) return MISSING_PACKAGE_FEATURES_MESSAGE;
+	for (const row of parsed.rows) {
+		if (!row.roles?.includes("developer")) return LOCKED_FEATURE_MESSAGE;
+		if (isLockedFeature(row.slug, row.locked) && matrix.some((role) => !row.roles?.includes(role.role))) return LOCKED_FEATURE_MESSAGE;
+	}
+	return true;
+}
+//#endregion
+//#region src/features/global.ts
+/**
+* Settings → Features. Rows are the catalogue (code). Columns are the
+* Roles Global. Locked rows and Developer cannot be turned off.
+*/
+function createFeatures({ extras = [] } = {}) {
+	const catalogue = featureCatalogue(extras);
+	return {
+		slug: FEATURES_SLUG,
+		label: "Features",
+		admin: {
+			group: "Settings",
+			hidden: ({ user }) => !isAdmin(user),
+			description: "Who may use which collections and globals."
 		},
 		access: {
 			read: (args) => isAdmin(args),
 			update: (args) => isAdmin(args)
 		},
 		fields: [{
-			name: "roles",
+			name: "features",
 			type: "array",
-			label: "Roles",
+			label: "Features",
 			labels: {
-				singular: "Role",
-				plural: "Roles"
+				singular: "Feature",
+				plural: "Features"
 			},
-			minRows: 4,
-			maxRows: 4,
+			minRows: catalogue.length,
+			maxRows: catalogue.length,
 			required: true,
-			defaultValue: defaultRolesFieldValue(),
-			validate: validateRolesMatrix,
+			defaultValue: defaultFeaturesFieldValue(extras),
+			validate: async (value, { req }) => {
+				return validateFeaturesMatrix(value, extras, await getRolesMatrix(req));
+			},
+			hooks: { beforeChange: [async ({ value, req }) => {
+				if (!Array.isArray(value)) return value;
+				return enforceFeatureLocks(value, await getRolesMatrix(req));
+			}] },
 			admin: {
-				components: { Field: ROLES_MATRIX_FIELD },
-				description: "Drag to change rank. Ticks are Content, Brand, Publish, and Users. The API tab is locked to Developer.",
+				components: { Field: FEATURES_MATRIX_FIELD },
+				description: "Turn a feature on or off per role. Users, Roles, and Features stay on. Developer is always allowed.",
 				initCollapsed: false
 			},
 			fields: [
 				{
-					name: "role",
-					type: "select",
-					label: "Role",
+					name: "slug",
+					type: "text",
+					label: "Slug",
 					required: true,
-					options: ROLES.map((value) => ({
-						label: ROLE_LABELS[value],
-						value
-					})),
 					admin: { readOnly: true }
 				},
 				{
-					name: "content",
-					type: "checkbox",
-					label: "Content"
-				},
-				{
-					name: "brand",
-					type: "checkbox",
-					label: "Brand"
+					name: "label",
+					type: "text",
+					label: "Name",
+					required: true,
+					admin: { readOnly: true }
 				},
 				{
-					name: "publish",
+					name: "locked",
 					type: "checkbox",
-					label: "Publish"
+					label: "Locked",
+					admin: { hidden: true }
 				},
 				{
-					name: "users",
-					type: "checkbox",
-					label: "Users"
+					name: "roles",
+					type: "json",
+					label: "Roles",
+					required: true
 				}
 			]
 		}]
 	};
 }
 //#endregion
-//#region src/roles/seed.ts
+//#region src/features/seed.ts
 /**
-* Writes the default matrix. For a site's migration `up()`. Never writes a
-* user row — seeding `developer` on a person stays a site concern.
+* Writes the default switchboard (package rows plus any site extras).
+* For a site's migration `up()`.
 */
-async function seedRoles(payload) {
+async function seedFeatures(payload, extras = []) {
 	return payload.updateGlobal({
-		slug: ROLES_SLUG,
-		data: { roles: defaultRolesFieldValue() }
+		slug: FEATURES_SLUG,
+		data: { features: defaultFeaturesFieldValue(extras) }
 	});
 }
 //#endregion
+//#region src/features/access.ts
+function isAccessArgs(value) {
+	return typeof value === "object" && value !== null && "req" in value;
+}
+function fallbackFeature(user, slug, matrix) {
+	const pack = PACKAGE_FEATURES.find((feature) => feature.slug === slug);
+	if (!pack) return false;
+	return hasCapability(user, pack.fallback, matrix);
+}
+/**
+* True when any stored role is on the feature row. An empty grid falls
+* back to the capability map. Developer is always allowed.
+*/
+function hasFeature(user, slug, features = null, matrix = DEFAULT_ROLE_MATRIX) {
+	if (isDeveloper(user)) return true;
+	if (!user) return false;
+	if (!features || features.length === 0) return fallbackFeature(user, slug, matrix);
+	const row = features.find((entry) => entry.slug === slug);
+	if (!row) return false;
+	const allowed = row.roles ?? [];
+	return storedRoles(user).some((role) => allowed.includes(role));
+}
+/**
+* Reads the saved Features Global. `null` means empty or unreadable — callers
+* fall back to the capability map. Always override-access.
+*/
+async function getFeaturesMatrix(req = {}) {
+	const findGlobal = req.payload?.findGlobal;
+	if (typeof findGlobal !== "function") return null;
+	try {
+		const doc = await findGlobal({
+			slug: FEATURES_SLUG,
+			overrideAccess: true,
+			req
+		});
+		const parsed = parseFeaturesMatrix(doc && typeof doc === "object" && "features" in doc ? doc.features : void 0);
+		if (!parsed.ok) return null;
+		const matrix = await getRolesMatrix(req);
+		return enforceFeatureLocks(parsed.rows, matrix);
+	} catch {
+		return null;
+	}
+}
+/**
+* Access / nav helper for one catalogue slug. Sync against a passed grid;
+* async when given `req` so it can read both Globals.
+*/
+function canUseFeature(slug) {
+	function predicate(userOrArgs, features, roles) {
+		if (isAccessArgs(userOrArgs)) {
+			const user = userOrArgs.req.user;
+			if (features !== void 0) return hasFeature(user, slug, features, roles ?? DEFAULT_ROLE_MATRIX);
+			return Promise.all([getFeaturesMatrix(userOrArgs.req), getRolesMatrix(userOrArgs.req)]).then(([grid, matrix]) => hasFeature(user, slug, grid, matrix));
+		}
+		return hasFeature(userOrArgs, slug, features ?? null, roles ?? DEFAULT_ROLE_MATRIX);
+	}
+	return predicate;
+}
+/** `admin.hidden`: hide when the login cannot use the feature. */
+function hideUnlessFeature(slug) {
+	return (args) => {
+		const user = args.user;
+		if (args.req) {
+			const result = canUseFeature(slug)({ req: {
+				...args.req,
+				user
+			} });
+			if (result instanceof Promise) return result.then((ok) => !ok);
+			return !result;
+		}
+		return !canUseFeature(slug)(user ?? null);
+	};
+}
+//#endregion
 //#region src/fields/slug.ts
 /**
 * A stored slug from whatever was typed: lowercased, with any run of
@@ -1184,14 +1712,15 @@ function createPages({ heroBlocks, isReservedSlug, layoutBlocks, previewPath, pr
 				"_status",
 				"updatedAt"
 			],
+			hidden: hideUnlessFeature("pages"),
 			preview: (doc) => previewPath(typeof doc.slug === "string" ? doc.slug : ""),
 			...previewButton ? { components: { edit: { PreviewButton: previewButton } } } : {}
 		},
 		access: {
 			read: authenticatedOrPublished,
 			readVersions: isAuthenticated,
-			create: canManageContent,
-			update: canManageContent,
+			create: canUseFeature("pages"),
+			update: canUseFeature("pages"),
 			delete: isAdmin
 		},
 		versions: {
@@ -1283,15 +1812,21 @@ async function adminCount(req, excluding) {
 	});
 	return totalDocs;
 }
-const rolesValidate = async (value, options) => {
-	const builtIn = select(value, options);
-	if (builtIn !== true) return builtIn;
-	if (options.operation !== "update" || options.id === void 0) return true;
-	const matrix = await getRolesMatrix(options.req);
-	if (holdsPrivilegedRole(value, matrix) || !holdsPrivilegedRole(options.previousValue, matrix)) return true;
-	return await adminCount(options.req, options.id) > 0 ? true : LAST_ADMIN_DEMOTE_MESSAGE;
-};
-function createUsers({ secureCookies, rolesField }) {
+function rolesValidate(extras) {
+	return async (value, options) => {
+		const matrix = await getRolesMatrix(options.req, extras);
+		const builtIn = select(value, {
+			...options,
+			options: roleSelectOptions(matrix)
+		});
+		if (builtIn !== true) return builtIn;
+		if (options.operation !== "update" || options.id === void 0) return true;
+		if (holdsPrivilegedRole(value, matrix) || !holdsPrivilegedRole(options.previousValue, matrix)) return true;
+		return await adminCount(options.req, options.id) > 0 ? true : LAST_ADMIN_DEMOTE_MESSAGE;
+	};
+}
+function createUsers({ secureCookies, rolesField, extras = [] }) {
+	const fallback = seedRoleRows(extras);
 	return {
 		slug: "users",
 		auth: {
@@ -1304,6 +1839,7 @@ function createUsers({ secureCookies, rolesField }) {
 			}
 		},
 		admin: {
+			group: "Settings",
 			useAsTitle: "email",
 			defaultColumns: [
 				"email",
@@ -1329,7 +1865,7 @@ function createUsers({ secureCookies, rolesField }) {
 					disableErrors: true,
 					overrideAccess: true,
 					req
-				})) || await adminCount(req, id) > 0) return;
+				}), await getRolesMatrix(req, extras)) || await adminCount(req, id) > 0) return;
 				throw new APIError(LAST_ADMIN_DELETE_MESSAGE, 400);
 			}],
 			afterOperation: [async (arg) => {
@@ -1349,14 +1885,17 @@ function createUsers({ secureCookies, rolesField }) {
 			hasMany: true,
 			required: true,
 			defaultValue: ["author"],
-			options: roleSelectOptions(),
+			options: roleSelectOptions(fallback),
 			admin: {
 				components: { Field: rolesField ?? "@bison-lab/payload-core/admin#RolesField" },
 				description: "One person can hold several, e.g. Author + Designer."
 			},
 			access: { update: isAdmin },
-			validate: rolesValidate,
-			hooks: { beforeValidate: [({ value }) => Array.isArray(value) ? normalizeStoredRoles(value) : value] }
+			validate: rolesValidate(extras),
+			hooks: { beforeValidate: [async ({ value, req }) => {
+				if (!Array.isArray(value)) return value;
+				return normalizeStoredRoles(value, await getRolesMatrix(req, extras));
+			}] }
 		}]
 	};
 }
@@ -1370,10 +1909,11 @@ function createUsers({ secureCookies, rolesField }) {
 function createMedia({ staticDir = "media", mimeTypes = ["image/*"], imageSizes } = {}) {
 	return {
 		slug: "media",
+		admin: { hidden: hideUnlessFeature("media") },
 		access: {
 			read: () => true,
-			create: canManageContent,
-			update: canManageContent,
+			create: canUseFeature("media"),
+			update: canUseFeature("media"),
 			delete: isAdmin
 		},
 		upload: {
@@ -1432,6 +1972,6 @@ const adminOnlyApiTab = definePlugin({
 	})
 });
 //#endregion
-export { BRAND_ASSETS_MIME_TYPES, BRAND_ASSETS_SLUG, CAPABILITIES, DEFAULT_ROLE_MATRIX, DESCRIPTION_LENGTH, DEVELOPER_DESCRIPTION, LAST_ADMIN_DELETE_MESSAGE, LAST_ADMIN_DEMOTE_MESSAGE, LAST_USERS_TICK_MESSAGE, LOOK_FIELD, PAGE_EDITOR_SYSTEM_KEYS, ROLES, ROLES_FIELD, ROLES_MATRIX_FIELD, ROLES_SLUG, ROLE_LABELS, SHARE_IMAGE_SIZE, SYSTEM_COLOR_KEYS, THEME_APPEARANCE_FIELD, THEME_APPEARANCE_SLUG, THEME_COLORS_SLUG, THEME_COLOR_FIELD, THEME_COLOR_SCALE_FIELD, THEME_CONTRAST_REPORT, THEME_DOCUMENT_CONTROLS, THEME_FONT_FIELD, THEME_GREY_SCALE_FIELD, THEME_IDENTITY_FALLBACK, THEME_IDENTITY_SLUG, THEME_LIBRARY_FIELD, THEME_PAIRING_FIELD, THEME_PREVIEW_BREAKPOINTS, THEME_PUBLISH_FIELD, THEME_SAVE_BUTTON, THEME_SECTION_HEADING, THEME_SLUG, THEME_TYPOGRAPHY_SLUG, adminOnlyApiTab, authenticatedOrPublished, canManageBrand, canManageContent, canPublish, colorTokenField, createBrandAssets, createMedia, createPages, createRoles, createTheme, createUsers, defaultRolesFieldValue, deleteLibraryColor, documentTitle, firstImageIn, getRolesMatrix, hasCapability, hasRole, isAdmin, isAdminOrSelf, isAuthenticated, isDeveloper, isDeveloperTab, isPrivilegedRole, isRole, lookField, noIndexField, normalizeSlug, normalizeStoredRoles, pageEditorLooks, pageEditorTokens, parseRolesMatrix, persistThemeChild, publishThemeChild, resolveThemeIdentity, rewriteColorToken, roleDescription, roleSelectOptions, sanitizeSvg, seedRoles, seedTheme, seoPlugin, slugField, storedRoles, themeColorKeys, themeLibraryFromDoc, titleTemplate, truncateAtWord, validateRolesMatrix };
+export { BRAND_ASSETS_MIME_TYPES, BRAND_ASSETS_SLUG, CAPABILITIES, DEFAULT_ROLE_MATRIX, DESCRIPTION_LENGTH, DEVELOPER_DESCRIPTION, DUPLICATE_ROLE_SLUG_MESSAGE, FEATURES_MATRIX_FIELD, FEATURES_SLUG, LAST_ADMIN_DELETE_MESSAGE, LAST_ADMIN_DEMOTE_MESSAGE, LAST_USERS_TICK_MESSAGE, LOCKED_FEATURE_MESSAGE, LOOK_FIELD, MISSING_PACKAGE_FEATURES_MESSAGE, MISSING_SEED_ROLES_MESSAGE, PACKAGE_FEATURES, PACKAGE_FEATURE_SLUGS, PAGE_EDITOR_SYSTEM_KEYS, ROLES, ROLES_FIELD, ROLES_FIELD_DESCRIPTION, ROLES_GLOBAL_DESCRIPTION, ROLES_MATRIX_FIELD, ROLES_ROW_LABEL, ROLES_SLUG, ROLE_LABELS, ROLE_SLUG_FIELD, SHARE_IMAGE_SIZE, SYSTEM_COLOR_KEYS, THEME_APPEARANCE_FIELD, THEME_APPEARANCE_SLUG, THEME_COLORS_SLUG, THEME_COLOR_FIELD, THEME_COLOR_SCALE_FIELD, THEME_CONTRAST_REPORT, THEME_DOCUMENT_CONTROLS, THEME_FONT_FIELD, THEME_GREY_SCALE_FIELD, THEME_IDENTITY_FALLBACK, THEME_IDENTITY_SLUG, THEME_LIBRARY_FIELD, THEME_PAIRING_FIELD, THEME_PREVIEW_BREAKPOINTS, THEME_PUBLISH_FIELD, THEME_SAVE_BUTTON, THEME_SECTION_HEADING, THEME_SLUG, THEME_TYPOGRAPHY_SLUG, adminOnlyApiTab, authenticatedOrPublished, canManageBrand, canManageContent, canPublish, canUseFeature, colorTokenField, createBrandAssets, createFeatures, createMedia, createPages, createRoles, createTheme, createUsers, defaultFeaturesFieldValue, defaultRolesFieldValue, deleteLibraryColor, documentTitle, featureCatalogue, findColorTokens, findColorUsages, firstImageIn, getFeaturesMatrix, getRolesMatrix, hasCapability, hasFeature, hasRole, hideUnlessFeature, isAdmin, isAdminOrSelf, isAuthenticated, isDeveloper, isDeveloperTab, isFeatureSlug, isLockedFeature, isPackageFeatureSlug, isPrivilegedRole, isRole, isRoleSlug, lookField, noIndexField, normalizeSlug, normalizeStoredRoles, pageEditorLooks, pageEditorTokens, parseFeaturesMatrix, parseRolesMatrix, persistThemeChild, publishThemeChild, resetRolesMatrix, resolveThemeIdentity, rewriteColorToken, rewriteColorTokens, rewriteColorUsages, roleDescription, roleLabel, roleSelectOptions, sanitizeSvg, seedFeatures, seedRoleRows, seedRoles, seedTheme, seoPlugin, slugField, storedRoles, themeColorKeys, themeLibraryFromDoc, titleTemplate, truncateAtWord, validateFeaturesMatrix, validateRolesMatrix };
 
 //# sourceMappingURL=index.mjs.map