Capability matrix. Owner group is immutable; all others are editable inline.

{% for g in groups %}

{{ g.name }} {% if g.is_builtin %}built-in{% endif %} {% if g.description %} — {{ g.description }}{% endif %}

{% for cap in capabilities %} {% set mode = perms[g.id|string].get(cap, "deny") %} {% endfor %}

Capability	Mode
`{{ cap }}` {% if cap_descriptions and cap_descriptions.get(cap) %} {{ cap_descriptions.get(cap) }} {% endif %}	{% if g.is_builtin and g.name == "Owner" %} {{ mode }} {% else %} {% for m_val, m_label in [("allow", "Allow"), ("prompt_host", "Prompt"), ("deny", "Deny")] %} {% endfor %} {% endif %}

{% endfor %}