Nuke

nuke:strike no longer reaches everything on the site. A non-admin can now strike only sections, volumes and category groups where they hold Craft's own delete permissions — Delete entries and Delete other authors' entries, Delete assets and Delete other people's assets, Delete categories. Someone who relied on nuke:strike alone needs those permissions for the sources they clean up, or an admin to run the strike.

Security

• Nuke checked only its own permission, so a user granted nuke:strike to clean up one section could aim it at any section, volume or category group on the site, including ones they couldn't see. The strike screen now offers non-admins only the sources they may delete everything in, and preview and fire refuse the rest. An explicit list of element IDs, which skips the source filter, is checked against the sources those elements are actually in. Targeting every source at once, and nested entries by ID, are admin-only. Tags need nothing extra: Craft lets anyone delete a tag. Console strikes are unchanged, and a queued strike is checked when it's queued.

Fixed

• With allowAdminChanges off, Nuke's settings screens returned 403 even to admins. They now show read-only, with Craft's standard notice, and saving is refused.
• Saving settings copied any config/nuke.php overrides into project config. Saves now start from the settings stored in project config.

Added

• Entry and asset strikes can be narrowed by author — entries a user is an author of, assets they uploaded — including suspended, inactive and recently removed users still in Craft's trash.
• --authors on nuke/strike/fire, taking usernames, emails or user IDs.
• The preview counts co-authored entries, and says when a removed user's authorship will be lost to garbage collection.

Initial release.

Added

• Strikes: bulk deletion of entries, categories, tags, assets and users, narrowed by source, entry type, site, status, age, search or explicit IDs.
• A blast-radius preview that shares its resolved element list with the execution, counts drafts, revisions and relations, and lists the surviving elements that reference what is about to go.
• Guardrails: typed confirmation, pre-strike database backup, soft delete by default, an element ceiling per run, protected scopes, and a separate permission for permanent deletion.
• 23 housekeeping sweepers across content, database, files and Craft's own garbage collection, each with its own retention window.
• A run ledger recording the target, the preview and the outcome of every strike and sweep, plus a dedicated storage/logs/nuke.log audit trail.
• Console commands nuke/strike/fire, nuke/strike/scopes, nuke/sweep/run, nuke/sweep/list and nuke/sweep/due, all defaulting to a dry run.
• Scheduled sweeps and emailed reports (Pro).
• Scopes::EVENT_REGISTER_SCOPES and Sweepers::EVENT_REGISTER_SWEEPERS for adding your own, plus cancellable beforeStrike and beforeSweep events.