@anthusai/papyrus 1.14.0 → 1.16.0

package/lib/curation-delegation-helpers.ts

@@ -1,6 +1,4 @@
-export const DEFAULT_DELEGATION_HOURS = 8;
-export const MINIMUM_DELEGATION_HOURS = 1;
-export const MAXIMUM_DELEGATION_HOURS = 72;
+export type CurationDelegationState = "pending" | "approved" | "denied" | "expired" | "revoked";
 
 export type CurationDelegationRecord = {
   delegationId: string;
@@ -8,25 +6,15 @@ export type CurationDelegationRecord = {
   grantorLabel: string | null;
   expiresAt: string;
   revokedAt: string | null;
+  state?: CurationDelegationState | null;
+  /** XXXX-XXXX, present only while the request is pending. */
+  userCode?: string | null;
+  requestedHours?: number | null;
+  pendingExpiresAt?: string | null;
+  approvedAt?: string | null;
+  deniedAt?: string | null;
 };
 
-export type DelegationInputValidation =
-  | { ok: true; agentLabel: string; hours: number }
-  | { ok: false; message: string };
-
-export function validateDelegationInput(agentLabelText: string, hoursText: string): DelegationInputValidation {
-  const agentLabel = agentLabelText.trim();
-  if (!agentLabel) return { ok: false, message: "Enter the name of the agent you are trusting." };
-  if (/\s/.test(agentLabel)) return { ok: false, message: "The agent name cannot contain spaces. Use the name the agent passes as --agent." };
-  const trimmedHours = hoursText.trim();
-  if (!/^\d+$/.test(trimmedHours)) return { ok: false, message: `Enter a whole number of hours from ${MINIMUM_DELEGATION_HOURS} to ${MAXIMUM_DELEGATION_HOURS}.` };
-  const hours = Number(trimmedHours);
-  if (hours < MINIMUM_DELEGATION_HOURS || hours > MAXIMUM_DELEGATION_HOURS) {
-    return { ok: false, message: `A delegation lasts from ${MINIMUM_DELEGATION_HOURS} to ${MAXIMUM_DELEGATION_HOURS} hours.` };
-  }
-  return { ok: true, agentLabel, hours };
-}
-
 export function delegationExpiryText(expiresAt: string, revokedAt: string | null, nowMilliseconds: number): string {
   if (revokedAt) return "Revoked";
   const remaining = Date.parse(expiresAt) - nowMilliseconds;
@@ -41,11 +29,6 @@ export function isDelegationActive(record: CurationDelegationRecord, nowMillisec
   return !record.revokedAt && Date.parse(record.expiresAt) > nowMilliseconds;
 }
 
-export function buildDelegatedCommandLine(input: { email: string; agentLabel: string; token: string; action?: "approve" | "reject" }): string {
-  const email = input.email.trim() || "<your-email>";
-  return `papyrus references ${input.action ?? "approve"} <reference-id> --on-behalf-of ${email} --agent ${input.agentLabel} --instruction "<the person's own words>" --delegation-token ${input.token}`;
-}
-
 export function describeDelegationError(error: unknown): string {
   const raw = error instanceof Error ? error.message : typeof error === "string" ? error : "";
   const graphql = (error as { errors?: Array<{ message?: string }> } | null)?.errors?.[0]?.message ?? "";
@@ -57,3 +40,30 @@ export function describeDelegationError(error: unknown): string {
   const detail = (graphql || raw).trim();
   return detail ? `The server refused the request: ${detail}` : "Something went wrong. Nothing was changed.";
 }
+
+/** A pending request that an agent started and nobody has approved, denied or let lapse. */
+export function isPendingDelegation(record: CurationDelegationRecord, nowMilliseconds: number): boolean {
+  return record.state === "pending" && Boolean(record.userCode) && Date.parse(record.pendingExpiresAt ?? record.expiresAt) > nowMilliseconds;
+}
+
+/** "9:41 left" for a request that is still open, "Expired" once its window has passed. */
+export function pendingCountdownText(pendingExpiresAt: string | null | undefined, nowMilliseconds: number): string {
+  const remaining = Date.parse(pendingExpiresAt ?? "") - nowMilliseconds;
+  if (!Number.isFinite(remaining) || remaining <= 0) return "Expired";
+  const totalSeconds = Math.ceil(remaining / 1000);
+  const minutes = Math.floor(totalSeconds / 60);
+  const seconds = totalSeconds % 60;
+  return `${minutes}:${String(seconds).padStart(2, "0")} left`;
+}
+
+/** The state of a decided or lapsed delegation in words an editor reads in the list. */
+export function delegationStateText(record: CurationDelegationRecord, nowMilliseconds: number): string {
+  if (record.state === "denied") return "Denied";
+  if (record.state === "pending") return pendingCountdownText(record.pendingExpiresAt ?? record.expiresAt, nowMilliseconds) === "Expired" ? "Request expired" : "Waiting for a decision";
+  return delegationExpiryText(record.expiresAt, record.revokedAt, nowMilliseconds);
+}
+
+export function requestedHoursText(hours: number | null | undefined): string {
+  if (!hours || hours <= 0) return "Duration not stated";
+  return `Asks for ${hours} ${hours === 1 ? "hour" : "hours"}`;
+}

package/lib/prospectus-account-client.ts

@@ -18,6 +18,7 @@ type FetchImplementation = (input: string, init?: RequestInit) => Promise<Respon
 
 const SESSION_PATH = "/api/auth/prospectus/session";
 const SELECTION_PATH = "/api/auth/prospectus/selection";
+const ACCOUNTS_PATH = "/api/auth/prospectus/accounts";
 const SIGN_IN_PATH = "/api/auth/prospectus/sign-in";
 
 export function prospectusSignInUrl(returnPath: string): string {
@@ -62,3 +63,28 @@ export async function selectProspectusAccount(
   if (!response.ok || !body?.selectedAccountId) return { error: body?.message ?? "That account could not be selected." };
   return { selectedAccountId: body.selectedAccountId, role: body.role ?? "" };
 }
+
+/**
+ * Create a publishing account for the signed-in person and select it. Each call carries a fresh idempotency key,
+ * so a retried request after a dropped response cannot create a second account.
+ */
+export async function createProspectusAccount(
+  name: string,
+  fetchImplementation: FetchImplementation = fetch,
+  idempotencyKey: string = crypto.randomUUID(),
+): Promise<{ selectedAccountId: string; role: string } | { error: string }> {
+  let response: Response;
+  try {
+    response = await fetchImplementation(ACCOUNTS_PATH, {
+      method: "POST",
+      credentials: "same-origin",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ name: name.trim() || undefined, idempotencyKey }),
+    });
+  } catch {
+    return { error: "The publishing account could not be created. Check your connection and try again." };
+  }
+  const body = await response.json().catch(() => null) as { selectedAccountId?: string; role?: string; message?: string } | null;
+  if (!response.ok || !body?.selectedAccountId) return { error: body?.message ?? "The publishing account could not be created." };
+  return { selectedAccountId: body.selectedAccountId, role: body.role ?? "" };
+}

package/lib/prospectus-sign-in-routes.ts

@@ -282,3 +282,48 @@ export async function handleProspectusAccountSelection(request: NextRequest, opt
     return signInFailedResponse(503, "prospectus_unavailable", "Prospectus could not be reached.");
   }
 }
+
+const MAXIMUM_PUBLISHING_ACCOUNT_NAME_LENGTH = 150;
+const DEFAULT_PUBLISHING_ACCOUNT_NAME = "Publishing account";
+const IDEMPOTENCY_KEY_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+
+export async function handleProspectusPublishingAccountCreation(request: NextRequest, options: ProspectusSignInRouteOptions = {}): Promise<NextResponse> {
+  const runtime = await signInRuntimeFor(request, options);
+  if (!runtime) return signInUnavailableResponse();
+  if (request.headers.get("origin") !== request.nextUrl.origin) {
+    return signInFailedResponse(403, "cross_origin_creation", "Create an account from this site.");
+  }
+  const nowInSeconds = currentTimeInSeconds(options);
+  const session = signedInProspectusSession(request, runtime.sealingSecret, nowInSeconds);
+  if (!session) return signInFailedResponse(401, "signed_out", "Sign in first.");
+  const body = await request.json().catch(() => null) as { name?: unknown; idempotencyKey?: unknown } | null;
+  const requestedName = typeof body?.name === "string" ? body.name.trim() : "";
+  const accountName = requestedName || DEFAULT_PUBLISHING_ACCOUNT_NAME;
+  if (accountName.length > MAXIMUM_PUBLISHING_ACCOUNT_NAME_LENGTH) {
+    return signInFailedResponse(400, "account_name_too_long", "Name the account in 150 characters or fewer.");
+  }
+  const idempotencyKey = typeof body?.idempotencyKey === "string" ? body.idempotencyKey : "";
+  if (!IDEMPOTENCY_KEY_PATTERN.test(idempotencyKey)) {
+    return signInFailedResponse(400, "idempotency_key_required", "Send a UUID idempotency key.");
+  }
+  try {
+    const created = await runtime.accounts.createAccount(session.accessToken, accountName, idempotencyKey);
+    const selection = await freshlyAuthorizedPublishingSelection(runtime, session, created.account.id, siteProductFor(options));
+    if (!selection) return signInFailedResponse(403, "not_a_publishing_account", "The new account does not grant publishing access on this site.");
+    const response = NextResponse.json(
+      { selectedAccountId: selection.accountId, role: selection.role, publicationCapabilities: selection.publicationCapabilities },
+      { status: 201, headers: NO_STORE_HEADERS },
+    );
+    const selectedSession: ProspectusSignedInSession = { ...session, selectedAccountId: selection.accountId };
+    response.cookies.set(
+      PROSPECTUS_SESSION_COOKIE,
+      sealProspectusCookie(runtime.sealingSecret, PROSPECTUS_SESSION_COOKIE, selectedSession, session.accessTokenExpiresAt),
+      sealedCookieAttributes(session.accessTokenExpiresAt, nowInSeconds),
+    );
+    return response;
+  } catch (error) {
+    if (error instanceof ProspectusAccountsError) return signInFailedResponse(error.status, error.code, error.message);
+    console.error(`Prospectus account creation failed (${error instanceof Error ? error.name : "error"}).`);
+    return signInFailedResponse(503, "prospectus_unavailable", "Prospectus could not be reached.");
+  }
+}

package/lib/prospectus-site-identity.ts

@@ -49,6 +49,7 @@ export interface ProspectusRequest {
   body?: unknown;
   humanAccessToken?: string;
   identityToken?: string;
+  idempotencyKey?: string;
 }
 
 export type ProspectusTransport = (request: ProspectusRequest) => Promise<unknown>;
@@ -84,7 +85,7 @@ export function signedProspectusTransport(options: SignedProspectusTransportOpti
   }
   const runtimeCredentials = options.runtimeCredentials ?? defaultProvider();
   const fetcher = options.fetcher ?? fetch;
-  return async ({ path, method, body, humanAccessToken, identityToken }) => {
+  return async ({ path, method, body, humanAccessToken, identityToken, idempotencyKey }) => {
     const credentials = await runtimeCredentials();
     if (!credentials.sessionToken || (credentials.expiration && credentials.expiration.getTime() <= Date.now())) {
       throw new Error("Prospectus calls require the site's temporary runtime credentials; static access keys are refused.");
@@ -95,6 +96,7 @@ export function signedProspectusTransport(options: SignedProspectusTransportOpti
       host: url.host,
       ...(humanAccessToken ? { "x-prospectus-human-token": humanAccessToken } : {}),
       ...(identityToken ? { "x-prospectus-identity-token": identityToken } : {}),
+      ...(idempotencyKey ? { "idempotency-key": idempotencyKey } : {}),
       ...(payload ? { "content-type": "application/json" } : {}),
     };
     const signer = new SignatureV4({ service: "execute-api", region: options.region, credentials, sha256: Sha256 });
@@ -144,6 +146,16 @@ export class ProspectusSiteAccounts {
     }) as Promise<ProspectusAccountAuthorization>;
   }
 
+  createAccount(humanAccessToken: string, accountName: string, idempotencyKey: string): Promise<{ account: { id: string; name: string; role: ProspectusRole } }> {
+    return this.transport({
+      path: "/v1/accounts",
+      method: "POST",
+      body: { name: accountName },
+      humanAccessToken,
+      idempotencyKey,
+    }) as Promise<{ account: { id: string; name: string; role: ProspectusRole } }>;
+  }
+
   accountDirectory(humanAccessToken: string): Promise<{ person: ProspectusPerson | null; accounts: ProspectusDirectoryAccount[] }> {
     return this.transport({ path: "/v1/account-directory", method: "GET", humanAccessToken }) as Promise<{
       person: ProspectusPerson | null;

package/package.json

@@ -302,6 +302,7 @@
     "./app/[year]/[month]/[day]/page/[pageNumber]/page": "./app/[year]/[month]/[day]/page/[pageNumber]/page.tsx",
     "./app/[year]/[month]/[day]/section/[sectionKey]/page": "./app/[year]/[month]/[day]/section/[sectionKey]/page.tsx",
     "./app/api/archive/editions/route": "./app/api/archive/editions/route.ts",
+    "./app/api/auth/prospectus/accounts/route": "./app/api/auth/prospectus/accounts/route.ts",
     "./app/api/auth/prospectus/callback/route": "./app/api/auth/prospectus/callback/route.ts",
     "./app/api/auth/prospectus/selection/route": "./app/api/auth/prospectus/selection/route.ts",
     "./app/api/auth/prospectus/session/route": "./app/api/auth/prospectus/session/route.ts",
@@ -376,7 +377,7 @@
       "optional": true
     }
   },
-  "version": "1.14.0",
+  "version": "1.16.0",
   "dependencies": {
     "@aws-amplify/adapter-nextjs": "^1.7.3",
     "@aws-crypto/sha256-js": "5.2.0",

package/routes.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.14.0",
+  "version": "1.16.0",
   "routes": [
     {
       "file": "app/%5F_preview/[[...path]]/route.ts",
@@ -66,6 +66,17 @@
         "revalidate": "60"
       }
     },
+    {
+      "file": "app/api/auth/prospectus/accounts/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
     {
       "file": "app/api/auth/prospectus/callback/route.ts",
       "hasDefault": false,