@anthusai/papyrus 1.0.0-next.32 → 1.0.0-next.34

package/amplify/auth/redirect-urls.js

@@ -0,0 +1,54 @@
+export const DEFAULT_NEWSROOM_BASE_PATH = "/newsroom";
+function parseRedirectUrl(value) {
+    try {
+        const parsed = new URL(value);
+        return { original: value, origin: parsed.origin, path: parsed.pathname.replace(/\/+$/, "") };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Expands every origin in an OAuth redirect list to both the newsroom return
+ * path and the site root, newsroom first. Amplify signs in with the first
+ * entry that matches the current origin, so a list that names only
+ * `https://host/` would land a signed-in editor on the public reader.
+ *
+ * With `newsroomBasePath` of `""` (a CMS-only host that mounts the newsroom at
+ * `/`), the root already is the newsroom and nothing is added. Explicit
+ * entries are kept; unparseable entries pass through unchanged.
+ */
+export function expandNewsroomRedirectUrls(redirectUrls, newsroomBasePath = DEFAULT_NEWSROOM_BASE_PATH) {
+    const newsroomPath = newsroomBasePath.replace(/\/+$/, "");
+    const originOrder = [];
+    const explicitByOrigin = new Map();
+    const passthrough = [];
+    for (const value of redirectUrls) {
+        const parsed = parseRedirectUrl(value);
+        if (!parsed) {
+            passthrough.push(value);
+            continue;
+        }
+        if (!explicitByOrigin.has(parsed.origin)) {
+            originOrder.push(parsed.origin);
+            explicitByOrigin.set(parsed.origin, []);
+        }
+        explicitByOrigin.get(parsed.origin)?.push(value);
+    }
+    const expanded = [];
+    for (const origin of originOrder) {
+        const explicit = explicitByOrigin.get(origin) ?? [];
+        if (newsroomPath === "") {
+            expanded.push(...explicit);
+            continue;
+        }
+        const newsroomEntries = explicit.filter((value) => parseRedirectUrl(value)?.path === newsroomPath);
+        const otherEntries = explicit.filter((value) => {
+            const path = parseRedirectUrl(value)?.path;
+            return path !== newsroomPath && path !== "";
+        });
+        expanded.push(...(newsroomEntries.length > 0 ? newsroomEntries : [`${origin}${newsroomPath}`]), `${origin}/`, ...otherEntries);
+    }
+    expanded.push(...passthrough);
+    return [...new Set(expanded)];
+}

package/amplify/auth/redirect-urls.ts

@@ -0,0 +1,66 @@
+export const DEFAULT_NEWSROOM_BASE_PATH = "/newsroom";
+
+type ParsedRedirectUrl = { original: string; origin: string; path: string } | null;
+
+function parseRedirectUrl(value: string): ParsedRedirectUrl {
+  try {
+    const parsed = new URL(value);
+    return { original: value, origin: parsed.origin, path: parsed.pathname.replace(/\/+$/, "") };
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Expands every origin in an OAuth redirect list to both the newsroom return
+ * path and the site root, newsroom first. Amplify signs in with the first
+ * entry that matches the current origin, so a list that names only
+ * `https://host/` would land a signed-in editor on the public reader.
+ *
+ * With `newsroomBasePath` of `""` (a CMS-only host that mounts the newsroom at
+ * `/`), the root already is the newsroom and nothing is added. Explicit
+ * entries are kept; unparseable entries pass through unchanged.
+ */
+export function expandNewsroomRedirectUrls(
+  redirectUrls: readonly string[],
+  newsroomBasePath: string = DEFAULT_NEWSROOM_BASE_PATH,
+): string[] {
+  const newsroomPath = newsroomBasePath.replace(/\/+$/, "");
+  const originOrder: string[] = [];
+  const explicitByOrigin = new Map<string, string[]>();
+  const passthrough: string[] = [];
+
+  for (const value of redirectUrls) {
+    const parsed = parseRedirectUrl(value);
+    if (!parsed) {
+      passthrough.push(value);
+      continue;
+    }
+    if (!explicitByOrigin.has(parsed.origin)) {
+      originOrder.push(parsed.origin);
+      explicitByOrigin.set(parsed.origin, []);
+    }
+    explicitByOrigin.get(parsed.origin)?.push(value);
+  }
+
+  const expanded: string[] = [];
+  for (const origin of originOrder) {
+    const explicit = explicitByOrigin.get(origin) ?? [];
+    if (newsroomPath === "") {
+      expanded.push(...explicit);
+      continue;
+    }
+    const newsroomEntries = explicit.filter((value) => parseRedirectUrl(value)?.path === newsroomPath);
+    const otherEntries = explicit.filter((value) => {
+      const path = parseRedirectUrl(value)?.path;
+      return path !== newsroomPath && path !== "";
+    });
+    expanded.push(
+      ...(newsroomEntries.length > 0 ? newsroomEntries : [`${origin}${newsroomPath}`]),
+      `${origin}/`,
+      ...otherEntries,
+    );
+  }
+  expanded.push(...passthrough);
+  return [...new Set(expanded)];
+}

package/amplify/auth/resource.js

@@ -1,9 +1,11 @@
 import { defineAuth, secret } from "@aws-amplify/backend";
 import { manageUserRole } from "../functions/manage-user-role/resource.js";
 import { CfnUserPoolDomain } from "aws-cdk-lib/aws-cognito";
+import { expandNewsroomRedirectUrls } from "./redirect-urls.js";
 // Default OAuth redirect URLs for the p.apyr.us app. Other publications pass
 // `auth.redirectUrls` to `defineSiteBackend` (or, for Papyrus's own backend,
 // the PAPYRUS_OAUTH_REDIRECT_URLS branch env var, comma-separated).
+// `defineSiteAuth` adds the newsroom and root variants of every origin listed.
 // See docs/google-oauth-setup.md.
 const DEFAULT_AUTH_REDIRECT_URLS = [
     "http://localhost:3001/",
@@ -31,7 +33,7 @@ export function authConfigFromEnv() {
     };
 }
 export function defineSiteAuth(config) {
-    const authRedirectUrls = config.redirectUrls ?? DEFAULT_AUTH_REDIRECT_URLS;
+    const authRedirectUrls = expandNewsroomRedirectUrls(config.redirectUrls ?? DEFAULT_AUTH_REDIRECT_URLS, config.newsroomBasePath);
     const disableGoogleOAuth = config.disableGoogleOAuth === true;
     return defineAuth({
         loginWith: {

package/amplify/auth/resource.ts

@@ -3,10 +3,12 @@ import { manageUserRole } from "../functions/manage-user-role/resource";
 import { Stack } from "aws-cdk-lib";
 import { CfnUserPoolDomain } from "aws-cdk-lib/aws-cognito";
 import type { PapyrusAuthConfig } from "../site-backend-config";
+import { expandNewsroomRedirectUrls } from "./redirect-urls";
 
 // Default OAuth redirect URLs for the p.apyr.us app. Other publications pass
 // `auth.redirectUrls` to `defineSiteBackend` (or, for Papyrus's own backend,
 // the PAPYRUS_OAUTH_REDIRECT_URLS branch env var, comma-separated).
+// `defineSiteAuth` adds the newsroom and root variants of every origin listed.
 // See docs/google-oauth-setup.md.
 const DEFAULT_AUTH_REDIRECT_URLS = [
   "http://localhost:3001/",
@@ -36,7 +38,10 @@ export function authConfigFromEnv(): PapyrusAuthConfig {
 }
 
 export function defineSiteAuth(config: PapyrusAuthConfig) {
-  const authRedirectUrls = config.redirectUrls ?? DEFAULT_AUTH_REDIRECT_URLS;
+  const authRedirectUrls = expandNewsroomRedirectUrls(
+    config.redirectUrls ?? DEFAULT_AUTH_REDIRECT_URLS,
+    config.newsroomBasePath,
+  );
   const disableGoogleOAuth = config.disableGoogleOAuth === true;
   return defineAuth({
     loginWith: {

package/amplify/data/resource.js

@@ -287,6 +287,8 @@ const schema = a.schema({
         actorLabel: a.string(),
         note: a.string(),
         reasonCode: a.string(),
+        decisionRelationId: a.id(),
+        shareable: a.boolean(),
     })
         .returns(a.ref("ReferenceCurationActionResult"))
         .authorization((allow) => [

package/amplify/data/resource.ts

@@ -312,6 +312,8 @@ const schema = a.schema({
       actorLabel: a.string(),
       note: a.string(),
       reasonCode: a.string(),
+      decisionRelationId: a.id(),
+      shareable: a.boolean(),
     })
     .returns(a.ref("ReferenceCurationActionResult"))
     .authorization((allow) => [

package/amplify/data/schema.js

@@ -245,6 +245,8 @@ export const schema = a.schema({
         actorLabel: a.string(),
         note: a.string(),
         reasonCode: a.string(),
+        decisionRelationId: a.id(),
+        shareable: a.boolean(),
     })
         .returns(a.ref("ReferenceCurationActionResult"))
         .authorization((allow) => [

package/amplify/data/schema.ts

@@ -268,6 +268,8 @@ export const schema = a.schema({
       actorLabel: a.string(),
       note: a.string(),
       reasonCode: a.string(),
+      decisionRelationId: a.id(),
+      shareable: a.boolean(),
     })
     .returns(a.ref("ReferenceCurationActionResult"))
     .authorization((allow) => [

package/amplify/functions/category-action/handler.ts

@@ -4,6 +4,7 @@ import { Amplify } from "aws-amplify";
 import { generateClient } from "aws-amplify/data";
 import type { Schema } from "../../data/resource";
 import { putJsonModelPayload, putTextModelPayload, readJsonModelPayload } from "../shared/model-payloads";
+import { referenceCurationMetadata } from "../shared/reference-curation-metadata";
 
 type ReviewHandler = Schema["reviewSteeringProposal"]["functionHandler"];
 type ReferenceCurationHandler = Schema["reviewReferenceCuration"]["functionHandler"];
@@ -225,14 +226,15 @@ async function reviewReferenceCuration(event: Parameters<ReferenceCurationHandle
     { ownerKind: "message", ownerId: messageId, ownerLineageId: messageId },
     "metadata",
     "metadata",
-    {
+    referenceCurationMetadata({
       action,
       curationStatus: nextStatus,
       reasonCode,
-      curationReasonCode: reasonCode,
       referenceId,
       referenceLineageId,
-    },
+      decisionRelationId: normalizeOptionalString(event.arguments.decisionRelationId),
+      shareable: event.arguments.shareable ?? null,
+    }),
     { filename: "metadata.json", now },
   );
 

package/amplify/functions/shared/reference-curation-metadata.ts

@@ -0,0 +1,29 @@
+/**
+ * Metadata stored with an editor's reference curation Message. When the
+ * relevance cyclotron decided the reference, the review records which
+ * decision it answered and whether its explanation may be shared (for the
+ * Cyclotron marketing recording). Both are optional.
+ */
+export type ReferenceCurationMetadataInput = {
+  action: string
+  curationStatus: string
+  reasonCode: string | null
+  referenceId: string
+  referenceLineageId: string
+  decisionRelationId?: string | null
+  shareable?: boolean | null
+}
+
+export function referenceCurationMetadata(input: ReferenceCurationMetadataInput): Record<string, unknown> {
+  const decisionRelationId = input.decisionRelationId?.trim() || null
+  return {
+    action: input.action,
+    curationStatus: input.curationStatus,
+    reasonCode: input.reasonCode,
+    curationReasonCode: input.reasonCode,
+    referenceId: input.referenceId,
+    referenceLineageId: input.referenceLineageId,
+    ...(decisionRelationId ? {decisionRelationId} : {}),
+    ...(decisionRelationId ? {shareable: input.shareable === true} : {}),
+  }
+}

package/amplify/site-backend-config.ts

@@ -7,6 +7,12 @@ export type PapyrusAuthConfig = {
   /** OAuth callback/logout URLs for Google sign-in (ignored when Google is disabled). */
   redirectUrls?: string[];
   disableGoogleOAuth?: boolean;
+  /**
+   * Public newsroom path prefix for sign-in return URLs. Default `/newsroom`;
+   * `""` on a CMS-only host where the newsroom is the root. Filled from the
+   * active brand's `newsroomBasePath` by `defineSiteBackend` when unset.
+   */
+  newsroomBasePath?: string;
   /** Desired Cognito hosted-UI domain prefix. Only applied when `applyCognitoDomainPrefix` is true. */
   cognitoDomainPrefix?: string;
   /**

package/amplify/site-backend.js

@@ -54,7 +54,12 @@ export function defineSiteBackend(papyrusSite) {
     const enableInboundEmail = featureFlags.inboundEmail;
     const enableSlackAgent = featureFlags.slack;
     const enableStorageBackups = featureFlags.storageBackups;
-    const authConfig = site.auth ?? authConfigFromEnv();
+    const baseAuthConfig = site.auth ?? authConfigFromEnv();
+    const activeBrand = (papyrusSite.brands ?? []).find((brand) => brand.id.toLowerCase() === siteBackendIdentity.brandId);
+    const authConfig = {
+        ...baseAuthConfig,
+        newsroomBasePath: baseAuthConfig.newsroomBasePath ?? activeBrand?.newsroomBasePath,
+    };
     const backend = defineBackend({
         assignmentAction,
         auth: defineSiteAuth(authConfig),

package/amplify/site-backend.ts

@@ -71,7 +71,12 @@ export function defineSiteBackend(papyrusSite: PapyrusSite) {
   const enableSlackAgent = featureFlags.slack;
   const enableStorageBackups = featureFlags.storageBackups;
 
-  const authConfig = site.auth ?? authConfigFromEnv();
+  const baseAuthConfig = site.auth ?? authConfigFromEnv();
+  const activeBrand = (papyrusSite.brands ?? []).find((brand) => brand.id.toLowerCase() === siteBackendIdentity.brandId);
+  const authConfig = {
+    ...baseAuthConfig,
+    newsroomBasePath: baseAuthConfig.newsroomBasePath ?? activeBrand?.newsroomBasePath,
+  };
   const backend = defineBackend({
     assignmentAction,
     auth: defineSiteAuth(authConfig),

package/app/newsroom/layout.tsx

@@ -1,3 +1,5 @@
+// Component rules only (no reset, no theme): the Cyclotron review control and status widget.
+import "cyclotron/styles/components.css";
 import { NewsroomClientShell } from "../../components/newsroom-client-shell";
 
 export default function NewsroomLayout({ children }: Readonly<{ children: React.ReactNode }>) {

package/components/amplify-client-provider.tsx

@@ -8,6 +8,8 @@ import { CookieStorage, Hub } from "aws-amplify/utils";
 import { useEffect } from "react";
 import { assertSandboxAmplifyOutputsForDev } from "../lib/amplify-outputs-guard";
 import amplifyOutputs from "papyrus-amplify-outputs";
+import { getPublicNewsroomBasePath } from "../lib/newsroom-base-path";
+import { prioritizeRedirectUrlsForOrigin } from "../lib/oauth-redirect-priority";
 
 let configured = false;
 
@@ -72,14 +74,10 @@ function prioritizeCurrentOrigin(config: ResourcesConfig): ResourcesConfig {
   const auth = (config as { auth?: { oauth?: Record<string, unknown> } }).auth;
   const oauth = auth?.oauth;
   if (!auth || !oauth) return config;
-  const origin = normalizeUrlOrigin(window.location.origin);
   const reorder = (urls: unknown) => {
     if (!Array.isArray(urls)) return urls;
-    const normalized = urls.filter((value): value is string => typeof value === "string");
-    const head = normalized.filter((value) => normalizeUrlOrigin(value) === origin);
-    if (!head.length) return normalized;
-    const tail = normalized.filter((value) => normalizeUrlOrigin(value) !== origin);
-    return [...head, ...tail];
+    const strings = urls.filter((value): value is string => typeof value === "string");
+    return prioritizeRedirectUrlsForOrigin(strings, window.location.origin, getPublicNewsroomBasePath());
   };
   return {
     ...config,
@@ -111,22 +109,6 @@ function redirectLoopbackToLocalhost(): void {
   window.location.replace(target);
 }
 
-function normalizeUrlOrigin(value: string): string {
-  const trimmed = value.replace(/\/+$/, "");
-  try {
-    const parsed = new URL(trimmed);
-    const hostname = normalizeLoopbackHostname(parsed.hostname);
-    return `${parsed.protocol}//${hostname}${parsed.port ? `:${parsed.port}` : ""}`;
-  } catch {
-    return trimmed;
-  }
-}
-
-function normalizeLoopbackHostname(hostname: string): string {
-  if (hostname === "127.0.0.1" || hostname === "::1") return "localhost";
-  return hostname;
-}
-
 function extractAuthFailureDetail(error: unknown): string | null {
   if (!error) return null;
   if (typeof error === "string") return error;

package/components/news-desk-taxonomy-client.ts

@@ -3682,3 +3682,54 @@ function normalizeUnknownErrorMessage(error: unknown, fallback: string): string
     return fallback;
   }
 }
+
+const CREATE_KNOWLEDGE_RAW_PAYLOAD_MUTATION = `
+  mutation CreateKnowledgeRawPayload($input: CreateKnowledgeRawPayloadInput!) {
+    createKnowledgeRawPayload(input: $input) { id }
+  }
+`;
+
+const GET_KNOWLEDGE_RAW_PAYLOAD_QUERY = `
+  query GetKnowledgeRawPayload($id: ID!) {
+    getKnowledgeRawPayload(id: $id) { id }
+  }
+`;
+
+/** The relevance cyclotron's latest cyclotron-status/v1 snapshot, as the sweep recorded it. */
+export async function loadCyclotronStatus(cyclotronId: string): Promise<import("cyclotron/cyclotron-status").CyclotronStatus | null> {
+  const { cyclotronStatusPayloadId, latestCyclotronStatus } = await import("../lib/relevance-status");
+  const payloads = await loadModelPayloadsForOwner("knowledgeRawPayload", cyclotronStatusPayloadId(cyclotronId), ["raw_payload"]);
+  return latestCyclotronStatus(payloads.map((payload) => ({ json: payload.json, updatedAt: payload.attachment.updatedAt })));
+}
+
+/** Ask the next decide-relevance sweep to set or clear a manual review rate. */
+export async function requestCyclotronReviewRate(
+  cyclotronId: string,
+  request: import("../lib/relevance-status").ReviewRateRequest,
+): Promise<void> {
+  const { reviewRateRequestPayloadId, safeId } = await import("../lib/relevance-status");
+  const id = reviewRateRequestPayloadId(cyclotronId);
+  const existing = await runGraphql<{ getKnowledgeRawPayload?: { id: string } | null }>(GET_KNOWLEDGE_RAW_PAYLOAD_QUERY, { id });
+  if (!existing.getKnowledgeRawPayload) {
+    await runGraphql(CREATE_KNOWLEDGE_RAW_PAYLOAD_MUTATION, {
+      input: {
+        id,
+        ownerType: "cyclotron",
+        ownerId: safeId(cyclotronId),
+        payloadKind: "cyclotron-review-rate-request",
+        createdAt: request.requestedAt,
+        updatedAt: request.requestedAt,
+      },
+    });
+  }
+  await uploadModelPayloadForOwner({
+    ownerKind: "knowledgeRawPayload",
+    ownerId: id,
+    ownerLineageId: id,
+    role: "raw_payload",
+    sortKey: `review-rate-request-${request.requestedAt}`,
+    filename: "review-rate-request.json",
+    mediaType: "application/json",
+    content: JSON.stringify(request),
+  });
+}

package/components/newsroom-references-view.tsx

@@ -44,21 +44,36 @@ import {
 import { normalizeReferenceCurationStatus } from "../lib/reference-policy";
 import { newsroomListRowClassName } from "../lib/newsroom-list-selection";
 import { ReferenceSourcePreview } from "./reference-source-preview";
+import { ReferenceRelevanceReview } from "./reference-relevance-review";
+import { ReferenceCyclotronStatus, type ReviewRateChoice } from "./reference-cyclotron-status";
+import type { CyclotronStatus } from "cyclotron/cyclotron-status";
+import type { RelevanceCuration, RelevanceDecisionView } from "../lib/relevance-decisions";
 import {
   loadReferenceAttachmentsForLineageId,
   loadStoragePathUrl,
 } from "./news-desk-taxonomy-client";
 
 type NewsroomReferencesViewProps = {
+  /** The relevance cyclotron's status snapshot, shown above the list. */
+  cyclotronStatus?: CyclotronStatus | null;
+  /** Present for editors who may ask for a manual review rate. */
+  onRequestReviewRate?: (choice: ReviewRateChoice) => Promise<void> | void;
   demo?: boolean;
+  /** The relevance cyclotron's current decisions, keyed by reference lineage. */
+  decisions?: Map<string, RelevanceDecisionView>;
   disabled?: boolean;
+  onRelevanceReview?: (reference: ReferenceRecord, curation: RelevanceCuration) => void;
   initialReferenceLineageId?: string | null;
   onReview: (reference: ReferenceRecord, action: ReferenceCurationAction) => void;
   referenceAttachments?: ReferenceAttachmentRecord[];
   references: ReferenceRecord[];
 };
 
-const STATUS_FILTERS: Array<{ key: ReferenceStatusFilter; label: string }> = [
+type ReferenceListFilter = ReferenceStatusFilter | "needs_review";
+
+const NEEDS_REVIEW_FILTER: { key: ReferenceListFilter; label: string } = { key: "needs_review", label: "Needs review" };
+
+const STATUS_FILTERS: Array<{ key: ReferenceListFilter; label: string }> = [
   { key: "all", label: "All" },
   { key: "pending", label: "Pending" },
   { key: "accepted", label: "Accepted" },
@@ -183,16 +198,30 @@ function useReferencePreviewAttachments(
   return previewAttachments;
 }
 
+function decisionSummary(decision: RelevanceDecisionView): string {
+  const sure = decision.confidence == null ? "confidence unknown" : `${Math.round(decision.confidence * 100)}% sure`;
+  return `${decision.label} · ${sure}${decision.version != null ? ` · version ${decision.version}` : ""}`;
+}
+
+function needsReview(reference: ReferenceRecord, decision: RelevanceDecisionView | undefined): boolean {
+  return Boolean(decision?.reviewRecommended)
+    && normalizeReferenceCurationStatus(reference.curationStatus) === "pending";
+}
+
 function ReferenceDetailPanel({
+  decision,
   demo,
   disabled,
+  onRelevanceReview,
   onReview,
   previewAttachments,
   reference,
   onClose,
 }: {
+  decision?: RelevanceDecisionView;
   demo?: boolean;
   disabled?: boolean;
+  onRelevanceReview?: (curation: RelevanceCuration) => void;
   onReview: (action: ReferenceCurationAction) => void;
   previewAttachments: ReferenceAttachmentRecord[];
   reference: ReferenceRecord;
@@ -224,11 +253,25 @@ function ReferenceDetailPanel({
           ) : null}
         </div>
 
+        {decision && status === "pending" && onRelevanceReview ? (
+          <ReferenceRelevanceReview
+            decision={decision}
+            disabled={disabled}
+            onCurate={onRelevanceReview}
+            referenceLineageId={lineageId}
+          />
+        ) : decision ? (
+          <p className="text-sm text-muted-foreground" data-reference-relevance-decision={lineageId}>
+            Cyclotron decision: {decisionSummary(decision)}
+          </p>
+        ) : null}
+
         <div
           className="flex flex-wrap items-center gap-2"
           data-news-desk-reference-curation-cluster
           data-reference-curation-status={status}
         >
+          {decision && status === "pending" && onRelevanceReview ? null : <>
           <Button
             aria-label="Accept reference"
             aria-pressed={status === "accepted"}
@@ -255,6 +298,7 @@ function ReferenceDetailPanel({
             <ThumbsDownIcon className="size-4" />
             Reject
           </Button>
+          </>}
           <Button
             aria-label="Archive reference"
             disabled={archiveDisabled}
@@ -347,8 +391,12 @@ function ReferenceDetailPanel({
 }
 
 export function NewsroomReferencesView({
+  cyclotronStatus,
+  decisions,
+  onRequestReviewRate,
   demo = false,
   disabled = false,
+  onRelevanceReview,
   initialReferenceLineageId = null,
   onReview,
   referenceAttachments = [],
@@ -365,13 +413,20 @@ export function NewsroomReferencesView({
   const canonicalReferences = useMemo(() => selectCanonicalReferenceRecords(references), [references]);
   const statusCounts = useMemo(() => countReferencesByStatus(canonicalReferences), [canonicalReferences]);
 
-  const [statusFilter, setStatusFilter] = useState<ReferenceStatusFilter>("all");
+  const [statusFilter, setStatusFilter] = useState<ReferenceListFilter>("all");
+  const needsReviewCount = useMemo(
+    () => canonicalReferences.filter((reference) => needsReview(reference, decisions?.get(referenceLineageId(reference)))).length,
+    [canonicalReferences, decisions],
+  );
+  const filters = decisions?.size ? [NEEDS_REVIEW_FILTER, ...STATUS_FILTERS] : STATUS_FILTERS;
   const [selectedLineageId, setSelectedLineageId] = useState(routeLineageId);
   const [mobileDetailOpen, setMobileDetailOpen] = useState(Boolean(routeLineageId) && isMobileDetail);
 
   const filteredReferences = useMemo(
-    () => filterReferencesByStatus(canonicalReferences, statusFilter),
-    [canonicalReferences, statusFilter],
+    () => statusFilter === "needs_review"
+      ? canonicalReferences.filter((reference) => needsReview(reference, decisions?.get(referenceLineageId(reference))))
+      : filterReferencesByStatus(canonicalReferences, statusFilter),
+    [canonicalReferences, decisions, statusFilter],
   );
 
   const selectedReference = useMemo(
@@ -390,7 +445,7 @@ export function NewsroomReferencesView({
     ? filteredReferences[selectedIndex + 1]
     : null;
 
-  const syncStatusUrl = useCallback((nextStatus: ReferenceStatusFilter) => {
+  const syncStatusUrl = useCallback((nextStatus: ReferenceListFilter) => {
     if (demo) return;
     syncBrowserNewsroomIndexUrl("references", {
       status: nextStatus === "all" ? "" : nextStatus,
@@ -452,22 +507,29 @@ export function NewsroomReferencesView({
             Review source intake before it becomes accepted evidence.
           </p>
         </div>
+        {cyclotronStatus ? (
+          <div className="shrink-0">
+            <ReferenceCyclotronStatus onRequestRate={disabled ? undefined : onRequestReviewRate} status={cyclotronStatus} />
+          </div>
+        ) : null}
 
         <Tabs
           className="shrink-0"
           defaultValue="all"
           onValueChange={(value) => {
-            const next = value as ReferenceStatusFilter;
+            const next = value as ReferenceListFilter;
             setStatusFilter(next);
             syncStatusUrl(next);
           }}
           value={statusFilter}
         >
           <TabsList className="h-auto w-full flex-wrap justify-start gap-1 bg-muted/40 p-1">
-            {STATUS_FILTERS.map((filter) => {
+            {filters.map((filter) => {
               const count = filter.key === "all"
                 ? canonicalReferences.length
-                : statusCounts[filter.key] ?? 0;
+                : filter.key === "needs_review"
+                  ? needsReviewCount
+                  : statusCounts[filter.key] ?? 0;
               return (
                 <TabsTrigger className="text-xs sm:text-sm" key={filter.key} value={filter.key}>
                   {filter.label}
@@ -484,6 +546,7 @@ export function NewsroomReferencesView({
               const lineageId = referenceLineageId(reference);
               const status = normalizeReferenceCurationStatus(reference.curationStatus);
               const active = selectedLineageId === lineageId;
+              const decision = decisions?.get(lineageId);
               return (
                 <button
                   aria-current={active ? "true" : undefined}
@@ -504,6 +567,14 @@ export function NewsroomReferencesView({
                     <Badge variant={referenceStatusBadgeVariant(status)}>{referenceStatusLabel(status)}</Badge>
                   </div>
                   <p className="mt-2 text-xs text-muted-foreground">{formatReferenceListDate(reference)}</p>
+                  {decision ? (
+                    <p className="mt-1 flex flex-wrap items-center gap-2 text-xs text-muted-foreground" data-reference-relevance-row={lineageId}>
+                      <span>Decision: {decisionSummary(decision)}</span>
+                      {needsReview(reference, decision) ? (
+                        <Badge variant="outline"><span aria-hidden="true">●</span> Needs review</Badge>
+                      ) : null}
+                    </p>
+                  ) : null}
                 </button>
               );
             }) : (
@@ -552,8 +623,10 @@ export function NewsroomReferencesView({
         <ScrollArea className="min-h-0 flex-1">
           {selectedReference ? (
             <ReferenceDetailPanel
+              decision={decisions?.get(referenceLineageId(selectedReference))}
               demo={demo}
               disabled={disabled}
+              onRelevanceReview={onRelevanceReview ? (curation) => onRelevanceReview(selectedReference, curation) : undefined}
               onReview={runReview}
               previewAttachments={previewAttachments}
               reference={selectedReference}
@@ -581,9 +654,11 @@ export function NewsroomReferencesView({
             {selectedReference ? (
               <ScrollArea className="max-h-[75dvh]">
                 <ReferenceDetailPanel
+                  decision={decisions?.get(referenceLineageId(selectedReference))}
                   demo={demo}
                   disabled={disabled}
                   onClose={closeDetail}
+                  onRelevanceReview={onRelevanceReview ? (curation) => onRelevanceReview(selectedReference, curation) : undefined}
                   onReview={runReview}
                   previewAttachments={previewAttachments}
                   reference={selectedReference}