@anthusai/papyrus 1.0.0-next.2 → 1.0.0-next.4

package/lib/layout-scenarios.ts

@@ -5,7 +5,6 @@ import { createDefaultEditionLayoutPlan, type EditionLayoutPlan } from "./layout
 import { articleToPublicationItem, cloneArticle } from "./publication-items";
 import { PILOBOL_SAMPLE_SCENARIO_ID, createPilobolSampleEditionContent } from "./pilobol-sample";
 import { SITE_BRAND } from "./site-brand";
-import threatIntelligenceSeedContent from "../publications/threat_intelligence/seed/seed-edition-content.json";
 
 export type LayoutScenario = EditionContent & {
   source: "scenario";
@@ -190,7 +189,8 @@ function getDefaultScenarioSeed(): {
   editionVideo?: ArticleVideoAsset;
   newsDeskAppendix?: NewsDeskAppendix | null;
 } {
-  if (SITE_BRAND.id !== "threat-intelligence") {
+  const demoEdition = SITE_BRAND.demoEdition;
+  if (!demoEdition) {
     return {
       title: "Current Edition",
       editionDate,
@@ -201,12 +201,12 @@ function getDefaultScenarioSeed(): {
   }
 
   return {
-    title: threatIntelligenceSeedContent.title,
-    editionDate: threatIntelligenceSeedContent.publishDate,
-    description: threatIntelligenceSeedContent.description,
-    articles: threatIntelligenceSeedContent.articles as Article[],
-    suppressNewsDeskAppendix: threatIntelligenceSeedContent.suppressNewsDeskAppendix === true,
-    editionVideo: threatIntelligenceSeedContent.video as ArticleVideoAsset | undefined,
+    title: demoEdition.title,
+    editionDate: demoEdition.editionDate,
+    description: demoEdition.description,
+    articles: demoEdition.articles,
+    suppressNewsDeskAppendix: demoEdition.suppressNewsDeskAppendix === true,
+    editionVideo: demoEdition.editionVideo,
     newsDeskAppendix: null,
   };
 }

package/lib/site-brand-tenant.ts

@@ -1,27 +1,8 @@
 import path from "node:path";
-import {
-  getSiteBrand,
-  resolveRuntimeSiteBrandId,
-  resolveSiteBrandId,
-  type SiteBrand,
-  type SiteBrandId,
-} from "./site-brand";
+import { getSiteBrand, resolveSiteBrandId, type SiteBrand, type SiteBrandId } from "./site-brand";
 
-export const BRAND_OVERRIDE_COOKIE = "papyrus-site-brand-override";
-
-export function resolveActiveSiteBrandId(
-  cookieOverride: string | undefined | null = null,
-  envBrandId: SiteBrandId = resolveSiteBrandId(),
-): SiteBrandId {
-  return resolveRuntimeSiteBrandId(cookieOverride) ?? envBrandId;
-}
-
-export function resolveActiveSiteBrand(
-  cookieOverride: string | undefined | null = null,
-  brandId?: SiteBrandId,
-): SiteBrand {
-  const resolvedId = brandId ?? resolveActiveSiteBrandId(cookieOverride);
-  return getSiteBrand(resolvedId);
+export function resolveActiveSiteBrand(brandId?: SiteBrandId): SiteBrand {
+  return getSiteBrand(brandId ?? resolveSiteBrandId());
 }
 
 export function resolveBrandConfigPath(relativePath: string): string {

package/lib/site-brand.ts

@@ -1,8 +1,9 @@
+import type { ComponentType } from "react";
 import type { EditionPresentationFormat } from "./content-types";
+import type { Article, ArticleVideoAsset } from "./articles";
+import type { BlogPageBackgroundProps } from "../components/blog-page-background";
+import type { PictogramFigureProps } from "../components/pictogram-figure";
 import papyrusSite from "papyrus-site";
-import { threatIntelligenceBrand } from "../publications/threat_intelligence/brand";
-import { pilobolUsBrand } from "../publications/pilobol_us/brand";
-import { anthUsBrand } from "../publications/anth_us/brand";
 import {
   DEFAULT_THEME_PACK_TOKENS,
   type HostingConfig,
@@ -17,6 +18,22 @@ import {
 /** Open string: a publication registers its own brand through `papyrus.config.ts` (`defineSite`). */
 export type SiteBrandId = string;
 
+/** Brand-specific replacements for generic Pretext components. */
+export type SiteBrandComponents = {
+  PictogramFigure?: ComponentType<PictogramFigureProps>;
+  BlogPageBackground?: ComponentType<BlogPageBackgroundProps>;
+};
+
+/** Default scenario content a brand supplies for the layout lab. */
+export type SiteBrandDemoEdition = {
+  title: string;
+  editionDate: string;
+  description: string;
+  articles: Article[];
+  suppressNewsDeskAppendix?: boolean;
+  editionVideo?: ArticleVideoAsset;
+};
+
 export type SiteBrand = {
   id: SiteBrandId;
   appTitle: string;
@@ -57,11 +74,13 @@ export type SiteBrand = {
   newsroomSectionsConfigPath: string;
   analysisProfilesPath: string;
   publicationName: string;
+  components?: SiteBrandComponents;
+  demoEdition?: SiteBrandDemoEdition;
 };
 
 const SERIF_TEXT_FONT = 'Georgia, "Times New Roman", serif';
 
-const BUILT_IN_SITE_BRANDS: Record<SiteBrandId, SiteBrand> = {
+const REFERENCE_SITE_BRANDS: Record<SiteBrandId, SiteBrand> = {
   papyrus: {
     id: "papyrus",
     appTitle: "Papyrus",
@@ -88,63 +107,46 @@ const BUILT_IN_SITE_BRANDS: Record<SiteBrandId, SiteBrand> = {
     analysisProfilesPath: "corpora/papyrus-analysis-profiles.yml",
     publicationName: "Anthus Threat Intelligence",
   },
-  "threat-intelligence": threatIntelligenceBrand,
-  "pilobol-us": pilobolUsBrand,
-  "anth-us": anthUsBrand,
 };
 
 /**
- * Built-in reference brands plus whatever the publication registered in its
+ * The Papyrus reference brand plus whatever the publication registered in its
  * own `papyrus.config.ts` (resolved through the `papyrus-site` alias).
  */
 const SITE_BRANDS: Record<SiteBrandId, SiteBrand> = {
-  ...BUILT_IN_SITE_BRANDS,
+  ...REFERENCE_SITE_BRANDS,
   ...Object.fromEntries((papyrusSite.brands ?? []).map((brand) => [brand.id, brand])),
 };
 
 export function normalizeSiteBrandId(value: string | undefined | null): SiteBrandId | null {
   if (!value) return null;
-  const normalized = value.trim().toLowerCase().replace(/[._]/g, "-");
-  if (!normalized) return null;
-  if (normalized === "papyrus") return "papyrus";
-  // NOTE: the bare alias `anthus` has resolved to `threat-intelligence` since
-  // that brand was added and is kept pointing there so existing
-  // PAPYRUS_SITE_BRAND values do not silently change meaning. The Anth.us
-  // publication is therefore addressed as `anth-us` / `anth.us` / `anth_us`
-  // only. Do not "tidy" this by moving `anthus` across.
-  if (normalized === "threat-intelligence" || normalized === "threat-intel" || normalized === "anthus") {
-    return "threat-intelligence";
-  }
-  if (normalized === "anth-us") {
-    // `normalized` has already mapped `.` and `_` to `-`, so this covers
-    // `anth.us` and `anth_us` too.
-    return "anth-us";
-  }
-  // Bare `pilobol` is deliberately NOT an alias (f268e72): the brand name is
-  // Pilobolus; Pilobol.us is the domain and `pilobol-us` the technical id.
-  if (normalized === "pilobol-us" || normalized === "pilobolus") {
-    return "pilobol-us";
-  }
-  // Registered brands (publication-owned `papyrus.config.ts`): exact id only.
-  if (Object.prototype.hasOwnProperty.call(SITE_BRANDS, normalized)) return normalized;
-  return null;
+  const trimmed = value.trim();
+  return Object.prototype.hasOwnProperty.call(SITE_BRANDS, trimmed) ? trimmed : null;
 }
 
-export function resolveSiteBrandId(
-  raw: string | undefined | null = process.env.NEXT_PUBLIC_PAPYRUS_SITE_BRAND ?? process.env.PAPYRUS_SITE_BRAND,
-): SiteBrandId {
-  return normalizeSiteBrandId(raw) ?? papyrusSite.defaultBrand ?? "papyrus";
+function unknownBrandError(value: string): Error {
+  return new Error(`Unknown brand '${value}'. Registered: ${Object.keys(SITE_BRANDS).join(", ")}`);
 }
 
-/** Cookie set by middleware when `?brand=` is present (demo without rebuild). */
-export function resolveRuntimeSiteBrandId(
-  cookieOverride: string | undefined | null = null,
+export function resolveSiteBrandId(
+  raw: string | undefined | null = process.env.NEXT_PUBLIC_PAPYRUS_SITE_BRAND ?? process.env.PAPYRUS_SITE_BRAND,
 ): SiteBrandId {
-  return normalizeSiteBrandId(cookieOverride) ?? resolveSiteBrandId();
+  const requested = raw?.trim();
+  if (requested) {
+    const normalized = normalizeSiteBrandId(requested);
+    if (normalized === null) throw unknownBrandError(requested);
+    return normalized;
+  }
+  const fallback = papyrusSite.defaultBrand ?? "papyrus";
+  const normalizedFallback = normalizeSiteBrandId(fallback);
+  if (normalizedFallback === null) throw unknownBrandError(fallback);
+  return normalizedFallback;
 }
 
 export function getSiteBrand(id: SiteBrandId = resolveSiteBrandId()): SiteBrand {
-  return SITE_BRANDS[id];
+  const brand = Object.prototype.hasOwnProperty.call(SITE_BRANDS, id) ? SITE_BRANDS[id] : undefined;
+  if (!brand) throw unknownBrandError(id);
+  return brand;
 }
 
 export const SITE_BRAND = getSiteBrand();

package/lib/site-env.ts

@@ -0,0 +1,52 @@
+export type SiteEnv = "production" | "staging" | "development";
+export type ContentSource = "published" | "drafts";
+
+type EnvironmentVariables = Record<string, string | undefined>;
+
+const SITE_ENVIRONMENTS: readonly SiteEnv[] = ["production", "staging", "development"];
+const CONTENT_SOURCES: readonly ContentSource[] = ["published", "drafts"];
+const PRODUCTION_BRANCH = "main";
+
+export function getSiteEnv(environment: EnvironmentVariables = process.env): SiteEnv {
+  const configured = (environment.SITE_ENV ?? "").trim();
+  if (!configured) return "development";
+  if (!SITE_ENVIRONMENTS.includes(configured as SiteEnv)) {
+    throw new Error(`SITE_ENV must be one of ${SITE_ENVIRONMENTS.join(", ")}; received "${configured}".`);
+  }
+  if (configured === "production") {
+    const branch = (environment.AWS_BRANCH ?? "").trim();
+    if (branch && branch !== PRODUCTION_BRANCH) return "staging";
+  }
+  return configured as SiteEnv;
+}
+
+export function getContentSource(environment: EnvironmentVariables = process.env): ContentSource {
+  const configured = (environment.PAPYRUS_CONTENT_SOURCE ?? "").trim();
+  if (!configured) return "published";
+  if (!CONTENT_SOURCES.includes(configured as ContentSource)) {
+    throw new Error(`PAPYRUS_CONTENT_SOURCE must be one of ${CONTENT_SOURCES.join(", ")}; received "${configured}".`);
+  }
+  return configured as ContentSource;
+}
+
+export function isIndexable(environment: EnvironmentVariables = process.env): boolean {
+  return getSiteEnv(environment) === "production";
+}
+
+export function showStagingBanner(environment: EnvironmentVariables = process.env): boolean {
+  return getSiteEnv(environment) === "staging";
+}
+
+export function analyticsAllowed(environment: EnvironmentVariables = process.env): boolean {
+  return getSiteEnv(environment) === "production";
+}
+
+export function assertContentSourceMatchesEnv(environment: EnvironmentVariables = process.env): void {
+  if (getContentSource(environment) !== "drafts") return;
+  const siteEnv = getSiteEnv(environment);
+  if (siteEnv !== "staging") {
+    throw new Error(
+      `PAPYRUS_CONTENT_SOURCE=drafts requires SITE_ENV=staging; the resolved site environment is "${siteEnv}". Drafts must never be served from production or development.`,
+    );
+  }
+}

package/lib/staging-gate.ts

@@ -0,0 +1,37 @@
+import type { NextRequest, NextResponse } from "next/server";
+import { fetchAuthSession } from "aws-amplify/auth/server";
+import { getAmplifyServerRuntime } from "./amplify-server-runtime";
+
+export type StagingAccess = "anonymous" | "forbidden" | "ok";
+
+const STAGING_ALLOWED_GROUPS = ["editor", "admin"];
+
+export function groupsFromIdTokenPayload(payload: Record<string, unknown> | undefined): string[] {
+  const raw = payload?.["cognito:groups"];
+  if (Array.isArray(raw)) return raw.filter((group): group is string => typeof group === "string");
+  if (typeof raw === "string" && raw) return [raw];
+  return [];
+}
+
+export function accessForGroups(groups: string[] | null): StagingAccess {
+  if (groups === null) return "anonymous";
+  return groups.some((group) => STAGING_ALLOWED_GROUPS.includes(group)) ? "ok" : "forbidden";
+}
+
+export async function getStagingAccess(request: NextRequest, response: NextResponse): Promise<StagingAccess> {
+  const { runWithAmplifyServerContext } = getAmplifyServerRuntime();
+  const groups = await runWithAmplifyServerContext({
+    nextServerContext: { request, response },
+    operation: async (contextSpec) => {
+      try {
+        const session = await fetchAuthSession(contextSpec);
+        const idTokenPayload = session.tokens?.idToken?.payload as Record<string, unknown> | undefined;
+        if (!session.tokens?.idToken) return null;
+        return groupsFromIdTokenPayload(idTokenPayload);
+      } catch {
+        return null;
+      }
+    },
+  });
+  return accessForGroups(groups);
+}

package/middleware.ts

@@ -1,16 +1,12 @@
 import type { NextRequest } from "next/server";
 import { NextResponse } from "next/server";
-import { getSiteBrand, normalizeSiteBrandId, resolveSiteBrandId } from "./lib/site-brand";
+import { getSiteBrand } from "./lib/site-brand";
+import { getSiteEnv, isIndexable } from "./lib/site-env";
+import { getStagingAccess } from "./lib/staging-gate";
 
-const BRAND_OVERRIDE_COOKIE = "papyrus-site-brand-override";
-
-function usesNewsroomRootPaths(request: NextRequest): boolean {
-  const cookieBrand = request.cookies.get(BRAND_OVERRIDE_COOKIE)?.value;
-  const brandId = normalizeSiteBrandId(cookieBrand)
-    ?? normalizeSiteBrandId(request.nextUrl.searchParams.get("brand"))
-    ?? resolveSiteBrandId();
-  // Brand property (not a hard-coded id) so publication-registered brands work.
-  return getSiteBrand(brandId).rootRoute?.kind === "newsroom" && getSiteBrand(brandId).newsroomBasePath === "";
+function usesNewsroomRootPaths(): boolean {
+  const brand = getSiteBrand();
+  return brand.rootRoute?.kind === "newsroom" && brand.newsroomBasePath === "";
 }
 
 function isStaticOrApiPath(pathname: string): boolean {
@@ -23,27 +19,21 @@ function isStaticOrApiPath(pathname: string): boolean {
   );
 }
 
-export function middleware(request: NextRequest) {
-  const brandParam = request.nextUrl.searchParams.get("brand");
-  const brandId = normalizeSiteBrandId(brandParam);
-  let response: NextResponse | null = null;
-
-  if (brandId) {
-    response = NextResponse.next();
-    response.cookies.set(BRAND_OVERRIDE_COOKIE, brandId, {
-      path: "/",
-      maxAge: 60 * 60 * 24 * 30,
-      sameSite: "lax",
-    });
-  }
+function isStagingGatedPath(pathname: string): boolean {
+  if (isStaticOrApiPath(pathname)) return false;
+  if (pathname === "/robots.txt") return false;
+  if (pathname === "/newsroom" || pathname.startsWith("/newsroom/")) return false;
+  return true;
+}
 
-  if (!usesNewsroomRootPaths(request)) {
-    return response ?? NextResponse.next();
+function routeRequest(request: NextRequest): NextResponse {
+  if (!usesNewsroomRootPaths()) {
+    return NextResponse.next();
   }
 
   const { pathname } = request.nextUrl;
   if (isStaticOrApiPath(pathname)) {
-    return response ?? NextResponse.next();
+    return NextResponse.next();
   }
 
   if (pathname === "/newsroom" || pathname === "/newsroom/") {
@@ -55,24 +45,46 @@ export function middleware(request: NextRequest) {
   }
 
   if (pathname === "/" || pathname === "") {
-    return response ?? NextResponse.next();
+    return NextResponse.next();
   }
 
   if (!pathname.startsWith("/newsroom")) {
     const rewriteUrl = request.nextUrl.clone();
     rewriteUrl.pathname = `/newsroom${pathname}`;
-    const rewrite = NextResponse.rewrite(rewriteUrl);
-    if (response) {
-      for (const cookie of response.cookies.getAll()) {
-        rewrite.cookies.set(cookie);
-      }
+    return NextResponse.rewrite(rewriteUrl);
+  }
+
+  return NextResponse.next();
+}
+
+export async function middleware(request: NextRequest): Promise<NextResponse> {
+  let sessionResponse: NextResponse | null = null;
+  if (getSiteEnv() === "staging" && isStagingGatedPath(request.nextUrl.pathname)) {
+    sessionResponse = NextResponse.next();
+    const access = await getStagingAccess(request, sessionResponse);
+    if (access === "anonymous") {
+      return withRobotsHeader(NextResponse.redirect(new URL("/newsroom", request.url)));
+    }
+    if (access === "forbidden") {
+      return withRobotsHeader(new NextResponse("Staging is limited to editors and admins.", { status: 403 }));
+    }
+  }
+
+  const response = routeRequest(request);
+  if (sessionResponse) {
+    for (const cookie of sessionResponse.headers.getSetCookie()) {
+      response.headers.append("set-cookie", cookie);
     }
-    return rewrite;
   }
+  return withRobotsHeader(response);
+}
 
-  return response ?? NextResponse.next();
+function withRobotsHeader(response: NextResponse): NextResponse {
+  if (!isIndexable()) response.headers.set("X-Robots-Tag", "noindex, nofollow");
+  return response;
 }
 
 export const config = {
+  runtime: "nodejs",
   matcher: ["/((?!_next/static|_next/image|favicon.ico|icon).*)"],
 };

package/package.json

@@ -95,6 +95,7 @@
     "./components/reader-theme-control": "./components/reader-theme-control.tsx",
     "./components/reference-source-preview": "./components/reference-source-preview.tsx",
     "./components/settings-page": "./components/settings-page.tsx",
+    "./components/staging-banner": "./components/staging-banner.tsx",
     "./components/topic-steering-workspace": "./components/topic-steering-workspace.tsx",
     "./components/ui/badge": "./components/ui/badge.tsx",
     "./components/ui/button-group": "./components/ui/button-group.tsx",
@@ -126,8 +127,10 @@
     "./lib/category-repository": "./lib/category-repository.ts",
     "./lib/console-chat-client": "./lib/console-chat-client.ts",
     "./lib/console-web-context": "./lib/console-web-context.ts",
+    "./lib/content-actions-client": "./lib/content-actions-client.ts",
     "./lib/content-load-timing": "./lib/content-load-timing.ts",
     "./lib/content-repository": "./lib/content-repository.ts",
+    "./lib/content-source-context": "./lib/content-source-context.ts",
     "./lib/content-types": "./lib/content-types.ts",
     "./lib/define-site": "./lib/define-site.ts",
     "./lib/demo-amplify-outputs": "./lib/demo-amplify-outputs.ts",
@@ -180,8 +183,10 @@
     "./lib/semantic-graph": "./lib/semantic-graph.ts",
     "./lib/site-brand-tenant": "./lib/site-brand-tenant.ts",
     "./lib/site-brand": "./lib/site-brand.ts",
+    "./lib/site-env": "./lib/site-env.ts",
     "./lib/site-renderer": "./lib/site-renderer.ts",
     "./lib/site-stack": "./lib/site-stack.ts",
+    "./lib/staging-gate": "./lib/staging-gate.ts",
     "./lib/themed-image": "./lib/themed-image.ts",
     "./lib/utils": "./lib/utils.ts",
     "./renderers/markus/index": "./renderers/markus/index.ts",
@@ -256,7 +261,7 @@
       "optional": true
     }
   },
-  "version": "1.0.0-next.2",
+  "version": "1.0.0-next.4",
   "dependencies": {
     "@aws-amplify/adapter-nextjs": "^1.7.3",
     "@aws-sdk/client-cognito-identity-provider": "3.1045.0",

package/renderers/pretext/article-page.tsx

@@ -7,15 +7,10 @@ import { getPublicationItemVideoAsset } from "../../lib/publication-items";
 import type { ArticlePageEditionFooter, RenderArticleProps, RenderItemProps } from "../../lib/renderer";
 import { SITE_BRAND } from "../../lib/site-brand";
 import { ArticleVideoFigure } from "../../components/article-video";
-import { PictogramFigure as ThreatIntelligencePictogramFigure } from "../../publications/threat_intelligence/pictograms/figure";
 import { PictogramFigure as GenericPictogramFigure } from "../../components/pictogram-figure";
 import { PresentationFooter } from "../../components/presentation-footer";
 
-// Threat Intelligence supplies its own pictogram figure media; any other
-// publication gets the generic fallback (components/pictogram-figure.tsx).
-// Same decoupling as renderers/pretext/presentation-shell.tsx -- see
-// docs/pluggable-publishers.md section 2.6 and PPY-d79ff2.
-const PictogramFigure = SITE_BRAND.id === "threat-intelligence" ? ThreatIntelligencePictogramFigure : GenericPictogramFigure;
+const PictogramFigure = SITE_BRAND.components?.PictogramFigure ?? GenericPictogramFigure;
 
 export type { ArticlePageEditionFooter };
 

package/renderers/pretext/presentation-shell.tsx

@@ -18,21 +18,14 @@ import type { ArticleVideoAsset } from "../../lib/articles";
 import type { PresentationTarget, RenderEditionProps } from "../../lib/renderer";
 import { SITE_BRAND, enforcePresentation, getDefaultPretextLayout } from "../../lib/site-brand";
 import { ArticleVideoFigure } from "../../components/article-video";
-import { BlogPageBackground as ThreatIntelligenceBlogPageBackground } from "../../publications/threat_intelligence/blog-defense/page-background";
 import { BlogPageBackground as GenericBlogPageBackground } from "../../components/blog-page-background";
 import { Newspaper } from "../../components/newspaper";
-import { PictogramFigure as ThreatIntelligencePictogramFigure } from "../../publications/threat_intelligence/pictograms/figure";
 import { PictogramFigure as GenericPictogramFigure } from "../../components/pictogram-figure";
 import { PresentationFooter } from "../../components/presentation-footer";
 import { readLocalReaderSettings, resolveReaderSettings, subscribeReaderSettingsChanges } from "../../components/reader-settings";
 
-// Threat Intelligence supplies its own blog background and figure media; any
-// other publication gets the generic fallback (components/). This is the
-// coupling docs/pluggable-publishers.md section 2.6 flags, decoupled here
-// per PPY-d79ff2 by making the choice publication-conditional instead of
-// hardcoded.
-const BlogPageBackground = SITE_BRAND.id === "threat-intelligence" ? ThreatIntelligenceBlogPageBackground : GenericBlogPageBackground;
-const PictogramFigure = SITE_BRAND.id === "threat-intelligence" ? ThreatIntelligencePictogramFigure : GenericPictogramFigure;
+const BlogPageBackground = SITE_BRAND.components?.BlogPageBackground ?? GenericBlogPageBackground;
+const PictogramFigure = SITE_BRAND.components?.PictogramFigure ?? GenericPictogramFigure;
 
 export type { PresentationTarget };
 

package/routes.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.0-next.2",
+  "version": "1.0.0-next.4",
   "routes": [
     {
       "file": "app/[year]/[month]/[day]/[articleSlug]/page.tsx",

package/src/with-papyrus.mjs

@@ -1,10 +1,14 @@
+import fs from "node:fs";
 import path from "node:path";
+import { fileURLToPath } from "node:url";
 
 /**
  * Wrap a publication repo's Next config for Papyrus (SPIKE, PPY-82be6c).
  * - transpile the package (it ships TypeScript source),
- * - alias `papyrus-site` -> ./papyrus.config.ts and
- *   `papyrus-amplify-outputs` -> ./amplify_outputs.json (both webpack and turbopack),
+ * - alias `papyrus-site` -> ./papyrus.config.ts,
+ *   `papyrus-amplify-outputs` -> ./amplify_outputs.json and
+ *   `papyrus-site-theme` -> ./publication/theme.css when it exists, else the shipped
+ *   empty lib/empty-theme.css (both webpack and turbopack),
  * - carry Papyrus's own server-external packages and image settings.
  */
 const SERVER_EXTERNAL = [
@@ -18,11 +22,19 @@ const SERVER_EXTERNAL = [
   "@aws-amplify/data-schema",
 ];
 
+const EMPTY_THEME = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../lib/empty-theme.css");
+
 export function withPapyrus(nextConfig = {}, options = {}) {
   const root = options.root ?? process.cwd();
+  const hasPublicationTheme = fs.existsSync(path.join(root, "publication/theme.css"));
+  const toProjectRelative = (absolute) => {
+    const relative = path.relative(root, absolute).split(path.sep).join("/");
+    return relative.startsWith(".") ? relative : `./${relative}`;
+  };
   const aliases = {
     "papyrus-site": path.join(root, "papyrus.config.ts"),
     "papyrus-amplify-outputs": path.join(root, "amplify_outputs.json"),
+    "papyrus-site-theme": hasPublicationTheme ? path.join(root, "publication/theme.css") : EMPTY_THEME,
   };
   return {
     distDir: process.env.NEXT_DIST_DIR || ".next",
@@ -37,6 +49,7 @@ export function withPapyrus(nextConfig = {}, options = {}) {
         ...nextConfig.turbopack?.resolveAlias,
         "papyrus-site": "./papyrus.config.ts",
         "papyrus-amplify-outputs": "./amplify_outputs.json",
+        "papyrus-site-theme": toProjectRelative(hasPublicationTheme ? path.join(root, "publication/theme.css") : EMPTY_THEME),
       },
     },
     webpack(config, context) {

package/publications/anth_us/brand.ts

@@ -1,68 +0,0 @@
-import type { SiteBrand } from "../../lib/site-brand";
-import { ANTH_US_THEME_PACK_TOKENS } from "../../lib/site-stack";
-
-/**
- * Site definition for the Anth.us publication on Papyrus.
- *
- * This is the **site**: masthead, theme pack, corpus wiring, deployment
- * metadata. It is a sibling of `publications/anthus/`, which is the
- * **editorial identity** (`style-profile.yml`, `editorial-rewrite-skill.yml`,
- * `reference-samples/`) and is not touched by this file.
- *
- * Every string below is read off the live Gatsby site at `AnthusAI/Anth.us`:
- * `gatsby-config.mjs` `siteMetadata` for the title/description/author,
- * `src/components/header.js` for the wordmark, `gatsby-plugin-manifest` for
- * "Anth.us AI Solutions", and `src/components/seo.js` for the
- * `"<page> | Anthus"` title pattern.
- */
-export const anthUsBrand: SiteBrand = {
-  id: "anth-us",
-  appTitle: "Anthus",
-  appDescription:
-    "Anthus builds and operates self-aligning AI systems — custom models, agent harnesses, and evaluation loops with a human in the loop, grounded in 14 years of production operations.",
-  // The live header renders the bare word "Anthus" (Jersey 25, weight 900),
-  // not a dotted domain wordmark, so this is not "ANTH.US".
-  mastheadTitle: "Anthus",
-  mastheadSubtitle: "AI Solutions",
-  backToHomeLabel: "Back to Anthus",
-  articleTitleSuffix: "Anthus",
-  placeholderByline: "Ryan Porter",
-  // The source site is a blog with a long single-column measure, not a
-  // newsprint grid.
-  defaultPresentation: "blog",
-  textFont:
-    '"Montserrat", -apple-system, BlinkMacSystemFont, "Segoe UI", Helvetica, Arial, sans-serif',
-  mastheadWordSplit: false,
-  mastheadDateFormat: "formatted",
-  mastheadSource: "brand",
-  sectionLinkStrategy: "route",
-  themePack: "anth-us",
-  themeTokens: ANTH_US_THEME_PACK_TOKENS,
-  renderer: { kind: "markus" },
-  hosting: { kind: "amplify-ssr" },
-  readerDeployment: {
-    kind: "amplify-static",
-    repository: "https://github.com/AnthusAI/Anth.us-Papyrus",
-    // `domain` and `amplifyAppId` are deliberately unset.
-    //
-    // This reader is a **staging** port of a live marketing site. Production
-    // `anth.us` stays pointed at the existing Gatsby build until the port has
-    // been reviewed, so writing `domain: "anth.us"` here would assert a
-    // canonical host this build does not serve. Staging runs on whatever
-    // hostname Amplify hands out. No DNS or domain association is configured
-    // anywhere in this repo for it.
-    //
-    // The repository is private while the port is half-finished; the URL above
-    // will 404 for anyone without access. That is expected, not a typo.
-  },
-  rootRoute: { kind: "newsroom" },
-  newsroomBasePath: "",
-  opsChrome: "app",
-  corpusKey: "anth-us",
-  // Declared paths. The YAML files themselves are not in the repo yet — see
-  // README.md "Not wired yet".
-  steeringConfigPath: "corpora/anth-us-steering.yml",
-  newsroomSectionsConfigPath: "corpora/anth-us-newsroom-sections.yml",
-  analysisProfilesPath: "corpora/anth-us-analysis-profiles.yml",
-  publicationName: "Anthus",
-};