From 6318484ce0b73b9725ad43818dab2795d48892a8 Mon Sep 17 00:00:00 2001
From: Jack Sleight <jacksleight@gmail.com>
Date: Wed, 16 Sep 2026 09:15:12 +0100
Subject: [PATCH 1/4] Add asset container actions

---
 .../js/components/assets/Browser/Browser.vue  | 101 +++++++++++++-----
 resources/js/pages/assets/Browse.vue          |   5 +-
 routes/cp.php                                 |   3 +
 .../CP/Assets/BrowserController.php           |   3 +
 .../CP/Assets/ContainerActionController.php   |  14 +++
 tests/Feature/Assets/BrowserTest.php          |  93 ++++++++++++++++
 6 files changed, 188 insertions(+), 31 deletions(-)
 create mode 100644 src/Http/Controllers/CP/Assets/ContainerActionController.php

diff --git a/resources/js/components/assets/Browser/Browser.vue b/resources/js/components/assets/Browser/Browser.vue
index d603d716b71..5a71ebd1e13 100644
--- a/resources/js/components/assets/Browser/Browser.vue
+++ b/resources/js/components/assets/Browser/Browser.vue
@@ -37,35 +37,53 @@
                     <template #default="{ items }">
                         <slot name="header" v-bind="{ canUpload, openFileBrowser, canCreateFolders, startCreatingFolder, mode, modeChanged }">
                             <Header :title="__(container.title)" icon="assets">
-                                <Dropdown v-if="container.can_edit || container.can_delete || container.can_create">
-                                    <DropdownMenu>
-                                        <DropdownItem
-                                            icon="container-add"
-                                            v-if="canCreateContainers"
-                                            :text="__('Create Container')"
-                                            :href="createContainerUrl"
-                                        />
-                                        <DropdownItem
-                                            icon="cog"
-                                            v-if="container.can_edit"
-                                            :text="__('Configure Container')"
-                                            :href="container.edit_url"
-                                        />
-                                        <DropdownItem
-                                            icon="blueprint-edit"
-                                            :text="__('Edit Blueprint')"
-                                            :href="container.blueprint_url"
-                                        />
-                                        <DropdownSeparator v-if="container.can_delete" />
-                                        <DropdownItem
-                                            icon="trash"
-                                            variant="destructive"
-                                            v-if="container.can_delete"
-                                            :text="__('Delete Container')"
-                                            @click="$event.preventDefault(); $refs.deleter.confirm()"
-                                        />
-                                    </DropdownMenu>
-                                </Dropdown>
+                                <ItemActions
+                                    ref="containerActions"
+                                    :url="container.actions_url"
+                                    :actions="container.actions"
+                                    :item="container.id"
+                                    @completed="containerActionCompleted"
+                                    v-slot="{ actions }"
+                                >
+                                    <Dropdown v-if="container.can_edit || container.can_delete || container.can_create || actions.length">
+                                        <DropdownMenu>
+                                            <DropdownItem
+                                                icon="container-add"
+                                                v-if="canCreateContainers"
+                                                :text="__('Create Container')"
+                                                :href="createContainerUrl"
+                                            />
+                                            <DropdownItem
+                                                icon="cog"
+                                                v-if="container.can_edit"
+                                                :text="__('Configure Container')"
+                                                :href="container.edit_url"
+                                            />
+                                            <DropdownItem
+                                                icon="blueprint-edit"
+                                                :text="__('Edit Blueprint')"
+                                                :href="container.blueprint_url"
+                                            />
+                                            <DropdownSeparator v-if="actions.length" />
+                                            <DropdownItem
+                                                v-for="action in actions"
+                                                :key="action.handle"
+                                                :text="__(action.title)"
+                                                :icon="action.icon"
+                                                :variant="action.dangerous ? 'destructive' : 'default'"
+                                                @click="action.run"
+                                            />
+                                            <DropdownSeparator v-if="container.can_delete" />
+                                            <DropdownItem
+                                                icon="trash"
+                                                variant="destructive"
+                                                v-if="container.can_delete"
+                                                :text="__('Delete Container')"
+                                                @click="$event.preventDefault(); $refs.deleter.confirm()"
+                                            />
+                                        </DropdownMenu>
+                                    </Dropdown>
+                                </ItemActions>
 
                                 <resource-deleter
                                     ref="deleter"
@@ -192,6 +210,7 @@ import Table from './Table.vue';
 import HasPreferences from '../../data-list/HasPreferences';
 import Uploader from '../Uploader.vue';
 import Uploads from '../Uploads.vue';
+import ItemActions from '@/components/actions/ItemActions.vue';
 import { debounce, sortBy } from 'lodash-es';
 import {
     Header,
@@ -231,6 +250,7 @@ export default {
         DropdownSeparator,
         AssetThumbnail,
         AssetEditor,
+        ItemActions,
         Uploader,
         Uploads,
         Grid,
@@ -556,6 +576,19 @@ export default {
             this.$refs.listing.refresh();
         },
 
+        containerActionCompleted(successful, response = {}) {
+            if (!successful) {
+                Statamic.$toast.error(response.message || __('Action failed'));
+                return;
+            }
+
+            if (response.message !== false) {
+                Statamic.$toast.success(response.message || __('Action completed'));
+            }
+
+            if (!response.redirect) this.$refs.listing.refresh();
+        },
+
         assetSaved() {
             this.loadAssets();
         },
@@ -822,6 +855,16 @@ export default {
                 icon: 'trash',
                 action: () => this.$refs.deleter.confirm(),
             });
+
+            this.container.actions?.forEach(action => Statamic.$commandPalette.add({
+                when: () => Boolean(this.$refs.containerActions),
+                category: Statamic.$commandPalette.category.Actions,
+                text: [__('Container'), action.title],
+                icon: action.icon,
+                action: () => this.$refs.containerActions.preparedActions
+                    .find(prepared => prepared.handle === action.handle)
+                    ?.run(),
+            }));
         }
     },
 };
diff --git a/resources/js/pages/assets/Browse.vue b/resources/js/pages/assets/Browse.vue
index 07964e9663e..3f244bf2bc4 100644
--- a/resources/js/pages/assets/Browse.vue
+++ b/resources/js/pages/assets/Browse.vue
@@ -1,6 +1,7 @@
 <script>
 import Head from '@/pages/layout/Head.vue';
 import { DocsCallout } from '@ui';
+import { toRaw } from 'vue';
 
 export default {
     components: {
@@ -39,7 +40,7 @@ export default {
          * navigation back and forth through folders using browser buttons.
          */
         bindBrowserNavigation() {
-            window.history.replaceState({ container: { ...this.container }, path: this.path }, '');
+            window.history.replaceState({ container: toRaw(this.container), path: this.path }, '');
 
             window.onpopstate = (e) => {
                 this.path = e.state.path;
@@ -81,7 +82,7 @@ export default {
 
             window.history.pushState(
                 {
-                    container: { ...this.container },
+                    container: toRaw(this.container),
                     path: this.path,
                 },
                 '',
diff --git a/routes/cp.php b/routes/cp.php
index c0e022faaba..3d4a4eca0de 100644
--- a/routes/cp.php
+++ b/routes/cp.php
@@ -12,6 +12,7 @@
 use Statamic\Http\Controllers\CP\Assets\AssetContainersController;
 use Statamic\Http\Controllers\CP\Assets\AssetsController;
 use Statamic\Http\Controllers\CP\Assets\BrowserController;
+use Statamic\Http\Controllers\CP\Assets\ContainerActionController;
 use Statamic\Http\Controllers\CP\Assets\FieldtypeController;
 use Statamic\Http\Controllers\CP\Assets\FolderActionController;
 use Statamic\Http\Controllers\CP\Assets\FoldersController;
@@ -250,6 +251,8 @@
     Route::patch('globals/{global_set}/variables', [GlobalVariablesController::class, 'update'])->name('globals.variables.update');
 
     Route::resource('asset-containers', AssetContainersController::class)->except('index');
+    Route::post('asset-containers/actions', [ContainerActionController::class, 'run'])->name('asset-containers.actions.run');
+    Route::post('asset-containers/actions/list', [ContainerActionController::class, 'bulkActions'])->name('asset-containers.actions.bulk');
     Route::post('asset-containers/{asset_container}/folders', [FoldersController::class, 'store']);
     Route::post('assets/actions', [AssetActionController::class, 'run'])->name('assets.actions.run');
     Route::post('assets/actions/list', [AssetActionController::class, 'bulkActions'])->name('assets.actions.bulk');
diff --git a/src/Http/Controllers/CP/Assets/BrowserController.php b/src/Http/Controllers/CP/Assets/BrowserController.php
index 0a48fc9674f..7d8d42fc941 100644
--- a/src/Http/Controllers/CP/Assets/BrowserController.php
+++ b/src/Http/Controllers/CP/Assets/BrowserController.php
@@ -10,6 +10,7 @@
 use Statamic\CP\Column;
 use Statamic\Exceptions\AuthorizationException;
 use Statamic\Exceptions\NotFoundHttpException;
+use Statamic\Facades\Action;
 use Statamic\Facades\Asset;
 use Statamic\Facades\Scope;
 use Statamic\Facades\User;
@@ -89,6 +90,8 @@ protected function browseData($container, $path)
                 'can_create_folders' => User::current()->can('create', [\Statamic\Contracts\Assets\AssetFolder::class, $container]),
                 'sort_field' => $container->sortField(),
                 'sort_direction' => $container->sortDirection(),
+                'actions' => Action::for($container, ['view' => 'form']),
+                'actions_url' => cp_route('asset-containers.actions.run'),
             ],
             'folder' => $path,
             'columns' => $this->columns,
diff --git a/src/Http/Controllers/CP/Assets/ContainerActionController.php b/src/Http/Controllers/CP/Assets/ContainerActionController.php
new file mode 100644
index 00000000000..0cc007b2f2e
--- /dev/null
+++ b/src/Http/Controllers/CP/Assets/ContainerActionController.php
@@ -0,0 +1,14 @@
+<?php
+
+namespace Statamic\Http\Controllers\CP\Assets;
+
+use Statamic\Facades\AssetContainer;
+use Statamic\Http\Controllers\CP\ActionController as Controller;
+
+class ContainerActionController extends Controller
+{
+    protected function getSelectedItems($items, $context)
+    {
+        return $items->map(fn ($item) => AssetContainer::find($item));
+    }
+}
diff --git a/tests/Feature/Assets/BrowserTest.php b/tests/Feature/Assets/BrowserTest.php
index af3d1f7201b..d3609639bd3 100644
--- a/tests/Feature/Assets/BrowserTest.php
+++ b/tests/Feature/Assets/BrowserTest.php
@@ -4,6 +4,8 @@
 
 use Illuminate\Http\UploadedFile;
 use PHPUnit\Framework\Attributes\Test;
+use Statamic\Actions\Action;
+use Statamic\Contracts\Assets\AssetContainer as AssetContainerContract;
 use Statamic\Facades\AssetContainer;
 use Statamic\Facades\User;
 use Tests\FakesRoles;
@@ -364,6 +366,72 @@ public function it_denies_access_without_permission_to_view_asset()
             ->assertForbidden();
     }
 
+    #[Test]
+    public function it_includes_container_actions_in_the_browse_data()
+    {
+        TestContainerAction::register();
+
+        AssetContainer::make('test')->disk('test')->save();
+
+        $this
+            ->actingAs($this->userWithContainerActionPermission())
+            ->get(cp_route('assets.browse.show', 'test'))
+            ->assertSuccessful()
+            ->assertInertia(fn ($page) => $page
+                ->component('assets/Browse')
+                ->where('container.actions_url', 'http://localhost/cp/asset-containers/actions')
+                ->where('container.actions.0.handle', 'test-container-action'));
+    }
+
+    #[Test]
+    public function it_runs_a_container_action()
+    {
+        TestContainerAction::register();
+        TestContainerAction::$ran = [];
+
+        $container = AssetContainer::make('test')->disk('test')->save();
+
+        $this
+            ->actingAs($this->userWithContainerActionPermission())
+            ->post(cp_route('asset-containers.actions.run'), [
+                'action' => 'test-container-action',
+                'selections' => ['test'],
+                'values' => [],
+            ])
+            ->assertSuccessful();
+
+        $this->assertCount(1, TestContainerAction::$ran);
+        $this->assertInstanceOf(AssetContainerContract::class, TestContainerAction::$ran[0]);
+        $this->assertEquals($container->handle(), TestContainerAction::$ran[0]->handle());
+    }
+
+    #[Test]
+    public function it_doesnt_run_a_container_action_without_permission()
+    {
+        TestContainerAction::register();
+        TestContainerAction::$ran = [];
+
+        AssetContainer::make('test')->disk('test')->save();
+
+        $this
+            ->actingAs($this->userWithoutPermission())
+            ->post(cp_route('asset-containers.actions.run'), [
+                'action' => 'test-container-action',
+                'selections' => ['test'],
+                'values' => [],
+            ])
+            ->assertForbidden();
+
+        $this->assertCount(0, TestContainerAction::$ran);
+    }
+
+    private function userWithContainerActionPermission()
+    {
+        $this->setTestRoles(['test' => ['access cp', 'view test assets', 'configure asset containers']]);
+
+        return User::make()->assignRole('test')->save();
+    }
+
     private function userWithPermission()
     {
         $this->setTestRoles(['test' => ['access cp', 'view test assets', 'view one assets', 'view two assets']]);
@@ -394,3 +462,28 @@ private function jsonStructure()
         ];
     }
 }
+
+class TestContainerAction extends Action
+{
+    public static $ran = [];
+
+    public static function handle()
+    {
+        return 'test-container-action';
+    }
+
+    public function visibleTo($item)
+    {
+        return $item instanceof AssetContainerContract;
+    }
+
+    public function authorize($user, $item)
+    {
+        return $user->can('configure asset containers');
+    }
+
+    public function run($items, $values)
+    {
+        static::$ran = $items->all();
+    }
+}

From ec998460521f8aa2c1b6480dd06db5924dc77c19 Mon Sep 17 00:00:00 2001
From: Jack Sleight <jacksleight@gmail.com>
Date: Wed, 16 Sep 2026 09:15:20 +0100
Subject: [PATCH 2/4] Require permission to edit an asset container blueprint

---
 .../js/components/assets/Browser/Browser.vue  |  4 +++-
 .../CP/Assets/BrowserController.php           |  1 +
 tests/Feature/Assets/BrowserTest.php          | 20 +++++++++++++++++++
 3 files changed, 24 insertions(+), 1 deletion(-)

diff --git a/resources/js/components/assets/Browser/Browser.vue b/resources/js/components/assets/Browser/Browser.vue
index 5a71ebd1e13..7c1c3439d2b 100644
--- a/resources/js/components/assets/Browser/Browser.vue
+++ b/resources/js/components/assets/Browser/Browser.vue
@@ -45,7 +45,7 @@
                                     @completed="containerActionCompleted"
                                     v-slot="{ actions }"
                                 >
-                                    <Dropdown v-if="container.can_edit || container.can_delete || container.can_create || actions.length">
+                                    <Dropdown v-if="container.can_edit || container.can_delete || container.can_edit_blueprint || actions.length">
                                         <DropdownMenu>
                                             <DropdownItem
                                                 icon="container-add"
@@ -61,6 +61,7 @@
                                             />
                                             <DropdownItem
                                                 icon="blueprint-edit"
+                                                v-if="container.can_edit_blueprint"
                                                 :text="__('Edit Blueprint')"
                                                 :href="container.blueprint_url"
                                             />
@@ -842,6 +843,7 @@ export default {
             });
 
             Statamic.$commandPalette.add({
+                when: () => this.container.can_edit_blueprint,
                 category: Statamic.$commandPalette.category.Actions,
                 text: __('Edit Blueprint'),
                 icon: 'blueprint-edit',
diff --git a/src/Http/Controllers/CP/Assets/BrowserController.php b/src/Http/Controllers/CP/Assets/BrowserController.php
index 7d8d42fc941..67967d97ca0 100644
--- a/src/Http/Controllers/CP/Assets/BrowserController.php
+++ b/src/Http/Controllers/CP/Assets/BrowserController.php
@@ -86,6 +86,7 @@ protected function browseData($container, $path)
                 'blueprint_url' => cp_route('blueprints.asset-containers.edit', $container->handle()),
                 'can_edit' => User::current()->can('edit', $container),
                 'can_delete' => User::current()->can('delete', $container),
+                'can_edit_blueprint' => User::current()->can('configure fields'),
                 'can_upload' => User::current()->can('store', [\Statamic\Contracts\Assets\Asset::class, $container]),
                 'can_create_folders' => User::current()->can('create', [\Statamic\Contracts\Assets\AssetFolder::class, $container]),
                 'sort_field' => $container->sortField(),
diff --git a/tests/Feature/Assets/BrowserTest.php b/tests/Feature/Assets/BrowserTest.php
index d3609639bd3..711fbc93e1d 100644
--- a/tests/Feature/Assets/BrowserTest.php
+++ b/tests/Feature/Assets/BrowserTest.php
@@ -366,6 +366,26 @@ public function it_denies_access_without_permission_to_view_asset()
             ->assertForbidden();
     }
 
+    #[Test]
+    public function it_only_allows_editing_the_blueprint_with_permission()
+    {
+        AssetContainer::make('test')->disk('test')->save();
+
+        $this->setTestRoles(['test' => ['access cp', 'view test assets', 'configure fields']]);
+
+        $this
+            ->actingAs(User::make()->assignRole('test')->save())
+            ->get(cp_route('assets.browse.show', 'test'))
+            ->assertSuccessful()
+            ->assertInertia(fn ($page) => $page->where('container.can_edit_blueprint', true));
+
+        $this
+            ->actingAs($this->userWithPermission())
+            ->get(cp_route('assets.browse.show', 'test'))
+            ->assertSuccessful()
+            ->assertInertia(fn ($page) => $page->where('container.can_edit_blueprint', false));
+    }
+
     #[Test]
     public function it_includes_container_actions_in_the_browse_data()
     {

From 7fa5ccbdbe293973c13f6dd29f703f962e6ffa2e Mon Sep 17 00:00:00 2001
From: Jack Sleight <jacksleight@gmail.com>
Date: Wed, 16 Sep 2026 09:15:20 +0100
Subject: [PATCH 3/4] Fix collection actions never completing

---
 resources/js/pages/collections/Show.vue | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/resources/js/pages/collections/Show.vue b/resources/js/pages/collections/Show.vue
index 66eb27b2647..68372b0174f 100644
--- a/resources/js/pages/collections/Show.vue
+++ b/resources/js/pages/collections/Show.vue
@@ -7,6 +7,7 @@
                 :url="actionUrl"
                 :actions="actions"
                 :item="handle"
+                @completed="actionCompleted"
                 v-slot="{ actions }"
             >
                 <Dropdown v-if="canEdit || canEditBlueprints || actions.length" placement="left-start">
@@ -408,7 +409,16 @@ export default {
             $event.metaKey ? window.open(url) : router.get(url);
         },
 
-        afterActionSuccessfullyCompleted(response) {
+        actionCompleted(successful, response = {}) {
+            if (!successful) {
+                Statamic.$toast.error(response.message || __('Action failed'));
+                return;
+            }
+
+            if (response.message !== false) {
+                Statamic.$toast.success(response.message || __('Action completed'));
+            }
+
             if (!response.redirect) router.reload();
         },
 

From 0e2736a7bd3cfd667ce956751373ef2525f3d9bc Mon Sep 17 00:00:00 2001
From: Jason Varga <jason@pixelfear.com>
Date: Thu, 17 Sep 2026 16:53:32 -0400
Subject: [PATCH 4/4] Reload the page after a container action completes

Refreshing only the listing left the container's own data (e.g. title) stale until a manual reload, unlike the equivalent collection-action flow which does a full reload.
---
 resources/js/components/assets/Browser/Browser.vue | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/resources/js/components/assets/Browser/Browser.vue b/resources/js/components/assets/Browser/Browser.vue
index 7c1c3439d2b..6e7f9dc8a4f 100644
--- a/resources/js/components/assets/Browser/Browser.vue
+++ b/resources/js/components/assets/Browser/Browser.vue
@@ -237,6 +237,7 @@ import {
 } from '@ui';
 import Breadcrumbs from './Breadcrumbs.vue';
 import useCheckerboard from '@/composables/checkerboard.js';
+import { router } from '@inertiajs/vue3';
 
 export default {
     mixins: [HasPreferences],
@@ -587,7 +588,7 @@ export default {
                 Statamic.$toast.success(response.message || __('Action completed'));
             }
 
-            if (!response.redirect) this.$refs.listing.refresh();
+            if (!response.redirect) router.reload();
         },
 
         assetSaved() {