@anthusai/papyrus 2.0.0-next.11 → 2.0.0-next.110

package/amplify/data/resource.ts

@@ -6,13 +6,15 @@ import { knowledgeQuery } from "../functions/knowledge-query/resource";
 import { manageUserRole } from "../functions/manage-user-role/resource";
 import { modelAttachmentUpload } from "../functions/model-attachment-upload/resource";
 import { newsroomSummary } from "../functions/newsroom-summary/resource";
+import { publicForms } from "../functions/public-forms/resource";
 import { procedureAction } from "../functions/procedure-action/resource";
 import { readerSettings } from "../functions/reader-settings/resource";
 import { emailSubmissionProcessor } from "../functions/email-submission-processor/resource";
 import { sesInboundReceive } from "../functions/ses-inbound-receive/resource";
 import { slackDelivery } from "../functions/slack-delivery/resource";
 import { slackEvents } from "../functions/slack-events/resource";
-import { schema as leanSchema, schemaWithPlugins } from "./schema";
+import { assertKnownModelGroups, schema as leanSchema, schemaExcludingGroups, schemaWithPlugins } from "./schema";
+import { functionHandler, sharedFunctions } from "./function-handler";
 const authoringOperations: ("read" | "create" | "update" | "delete")[] = [
   "read",
   "create",
@@ -144,7 +146,7 @@ const schema = a.schema({
     .query()
     .returns(a.ref("UserDirectoryResult"))
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(manageUserRole)),
+    .handler(functionHandler("manageUserRole", manageUserRole)),
 
   grantUserRole: a
     .mutation()
@@ -156,7 +158,7 @@ const schema = a.schema({
     })
     .returns(a.ref("UserRoleMutationResult"))
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(manageUserRole)),
+    .handler(functionHandler("manageUserRole", manageUserRole)),
 
   revokeUserRole: a
     .mutation()
@@ -168,7 +170,7 @@ const schema = a.schema({
     })
     .returns(a.ref("UserRoleMutationResult"))
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(manageUserRole)),
+    .handler(functionHandler("manageUserRole", manageUserRole)),
 
   mergeUserProfiles: a
     .mutation()
@@ -181,13 +183,13 @@ const schema = a.schema({
     })
     .returns(a.ref("UserDirectoryEntry"))
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(manageUserRole)),
+    .handler(functionHandler("manageUserRole", manageUserRole)),
 
   getReaderSettings: a
     .query()
     .returns(a.ref("ReaderSettingsResult"))
     .authorization((allow) => [allow.authenticated()])
-    .handler(a.handler.function(readerSettings)),
+    .handler(functionHandler("readerSettings", readerSettings)),
 
   updateReaderSettings: a
     .mutation()
@@ -196,7 +198,7 @@ const schema = a.schema({
     })
     .returns(a.ref("ReaderSettingsResult"))
     .authorization((allow) => [allow.authenticated()])
-    .handler(a.handler.function(readerSettings)),
+    .handler(functionHandler("readerSettings", readerSettings)),
 
   SteeringActionResult: a.customType({
     ok: a.boolean().required(),
@@ -226,7 +228,7 @@ const schema = a.schema({
     })
     .returns(a.ref("SteeringActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   CurationDelegationResult: a.customType({
     ok: a.boolean().required(),
@@ -351,7 +353,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   createCurationDelegation: a
     .mutation()
@@ -363,7 +365,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   revokeCurationDelegation: a
     .mutation()
@@ -374,7 +376,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   listCurationDelegations: a
     .query()
@@ -382,7 +384,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   requestCurationDelegation: a
     .mutation()
@@ -396,7 +398,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.authenticated("identityPool"),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   approveCurationDelegation: a
     .mutation()
@@ -407,7 +409,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   denyCurationDelegation: a
     .mutation()
@@ -418,7 +420,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   getCurationDelegationStatus: a
     .query()
@@ -429,7 +431,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.authenticated("identityPool"),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   recordDelegatedCuration: a
     .mutation()
@@ -451,7 +453,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.authenticated("identityPool"),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   setReferenceQualityRating: a
     .mutation()
@@ -466,7 +468,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   createReferenceNote: a
     .mutation()
@@ -481,7 +483,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   moveReferenceCorpus: a
     .mutation()
@@ -496,7 +498,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   startReferenceCuration: a
     .mutation()
@@ -510,7 +512,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   getReferenceCurationStatus: a
     .query()
@@ -521,7 +523,7 @@ const schema = a.schema({
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   createCategorySetDraft: a
     .mutation()
@@ -533,7 +535,7 @@ const schema = a.schema({
     })
     .returns(a.ref("CategorySetDraftActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   promoteCategorySetDraft: a
     .mutation()
@@ -544,7 +546,7 @@ const schema = a.schema({
     })
     .returns(a.ref("CategorySetDraftActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   discardCategorySetDraft: a
     .mutation()
@@ -555,7 +557,7 @@ const schema = a.schema({
     })
     .returns(a.ref("CategorySetDraftActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   createDraftCategory: a
     .mutation()
@@ -571,7 +573,7 @@ const schema = a.schema({
     })
     .returns(a.ref("SteeringActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   updateDraftCategory: a
     .mutation()
@@ -587,7 +589,7 @@ const schema = a.schema({
     })
     .returns(a.ref("SteeringActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   archiveDraftCategory: a
     .mutation()
@@ -598,7 +600,7 @@ const schema = a.schema({
     })
     .returns(a.ref("SteeringActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   reviewReferenceTopicLabel: a
     .mutation()
@@ -612,7 +614,7 @@ const schema = a.schema({
     })
     .returns(a.ref("TopicLabelActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   NewsroomSummary: a.customType({
     generatedAt: a.datetime().required(),
@@ -632,49 +634,63 @@ const schema = a.schema({
     .query()
     .returns(a.ref("NewsroomSummary"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(newsroomSummary)),
+    .handler(functionHandler("newsroomSummary", newsroomSummary)),
 
   deriveMarkus: a
     .query()
     .arguments({ input: a.json().required() })
     .returns(a.json())
     .authorization((allow) => [allow.groups(contentWriteGroups)])
-    .handler(a.handler.function(contentActions)),
+    .handler(functionHandler("contentActions", contentActions)),
 
   intakePendingReferences: a
     .mutation()
     .arguments({ input: a.json().required() })
     .returns(a.json())
     .authorization((allow) => [allow.groups(contentWriteGroups)])
-    .handler(a.handler.function(contentActions)),
+    .handler(functionHandler("contentActions", contentActions)),
+
+  intakeEmailSubmissionReferences: a
+    .mutation()
+    .arguments({ input: a.json().required() })
+    .returns(a.json())
+    .authorization((allow) => [allow.groups(contentWriteGroups)])
+    .handler(functionHandler("contentActions", contentActions)),
 
   saveItemDraft: a
     .mutation()
     .arguments({ input: a.json().required() })
     .returns(a.json())
     .authorization((allow) => [allow.groups(contentWriteGroups)])
-    .handler(a.handler.function(contentActions)),
+    .handler(functionHandler("contentActions", contentActions)),
 
   publishItem: a
     .mutation()
     .arguments({ input: a.json().required() })
     .returns(a.json())
     .authorization((allow) => [allow.groups(contentWriteGroups)])
-    .handler(a.handler.function(contentActions)),
+    .handler(functionHandler("contentActions", contentActions)),
+
+  moveStoryStage: a
+    .mutation()
+    .arguments({ input: a.json().required() })
+    .returns(a.json())
+    .authorization((allow) => [allow.groups(contentWriteGroups)])
+    .handler(functionHandler("contentActions", contentActions)),
 
   unpublishItem: a
     .mutation()
     .arguments({ input: a.json().required() })
     .returns(a.json())
     .authorization((allow) => [allow.groups(contentWriteGroups)])
-    .handler(a.handler.function(contentActions)),
+    .handler(functionHandler("contentActions", contentActions)),
 
   requestStagingBuild: a
     .mutation()
     .arguments({ input: a.json().required() })
     .returns(a.json())
     .authorization((allow) => [allow.groups(contentWriteGroups)])
-    .handler(a.handler.function(contentActions)),
+    .handler(functionHandler("contentActions", contentActions)),
 
   knowledgeQuery: a
     .query()
@@ -683,7 +699,7 @@ const schema = a.schema({
     })
     .returns(a.json())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(knowledgeQuery)),
+    .handler(functionHandler("knowledgeQuery", knowledgeQuery)),
 
   updateNewsroomSummary: a
     .mutation()
@@ -694,7 +710,7 @@ const schema = a.schema({
     })
     .returns(a.ref("NewsroomSummary"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(newsroomSummary)),
+    .handler(functionHandler("newsroomSummary", newsroomSummary)),
 
   ModelAttachmentUploadSlot: a.customType({
     ok: a.boolean().required(),
@@ -754,7 +770,7 @@ const schema = a.schema({
     })
     .returns(a.ref("ModelAttachmentUploadSlot"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(modelAttachmentUpload)),
+    .handler(functionHandler("modelAttachmentUpload", modelAttachmentUpload)),
 
   completeModelAttachmentUpload: a
     .mutation()
@@ -776,7 +792,7 @@ const schema = a.schema({
     })
     .returns(a.ref("ModelAttachment"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(modelAttachmentUpload)),
+    .handler(functionHandler("modelAttachmentUpload", modelAttachmentUpload)),
 
   abortModelAttachmentUpload: a
     .mutation()
@@ -798,7 +814,7 @@ const schema = a.schema({
     })
     .returns(a.ref("ModelAttachmentUploadAbortResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(modelAttachmentUpload)),
+    .handler(functionHandler("modelAttachmentUpload", modelAttachmentUpload)),
 
   createModelAttachmentDownload: a
     .mutation()
@@ -807,7 +823,7 @@ const schema = a.schema({
     })
     .returns(a.ref("ModelAttachmentDownloadSlot"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(modelAttachmentUpload)),
+    .handler(functionHandler("modelAttachmentUpload", modelAttachmentUpload)),
 
   AssignmentActionResult: a.customType({
     ok: a.boolean().required(),
@@ -902,7 +918,7 @@ const schema = a.schema({
     })
     .returns(a.ref("AssignmentContext").array().required())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   listAssignmentQueue: a
     .query()
@@ -913,7 +929,7 @@ const schema = a.schema({
     })
     .returns(a.ref("AssignmentContext").array().required())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   getEditorialContext: a
     .query()
@@ -923,10 +939,11 @@ const schema = a.schema({
       storyLineageId: a.id(),
       assignmentId: a.id(),
       maxCharacters: a.integer(),
+      optionalPublicationDoctrine: a.boolean(),
     })
     .returns(a.json().required())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   getAssignmentContext: a
     .query()
@@ -935,7 +952,7 @@ const schema = a.schema({
     })
     .returns(a.ref("AssignmentContext"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   claimAssignment: a
     .mutation()
@@ -952,7 +969,7 @@ const schema = a.schema({
     })
     .returns(a.ref("AssignmentActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   releaseAssignment: a
     .mutation()
@@ -964,7 +981,7 @@ const schema = a.schema({
     })
     .returns(a.ref("AssignmentActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   completeAssignment: a
     .mutation()
@@ -976,7 +993,7 @@ const schema = a.schema({
     })
     .returns(a.ref("AssignmentActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   cancelAssignment: a
     .mutation()
@@ -988,7 +1005,7 @@ const schema = a.schema({
     })
     .returns(a.ref("AssignmentActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   reopenAssignment: a
     .mutation()
@@ -1000,7 +1017,7 @@ const schema = a.schema({
     })
     .returns(a.ref("AssignmentActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   retryImmediateAssignment: a
     .mutation()
@@ -1012,13 +1029,13 @@ const schema = a.schema({
     })
     .returns(a.ref("AssignmentActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   listNewsroomProcedureDefinitions: a
     .query()
     .returns(a.json())
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   getNewsroomProcedureDefinition: a
     .query()
@@ -1028,7 +1045,7 @@ const schema = a.schema({
     })
     .returns(a.json())
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   saveNewsroomProcedureDefinition: a
     .mutation()
@@ -1037,7 +1054,7 @@ const schema = a.schema({
     })
     .returns(a.json())
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   saveNewsroomProcedureVersionDraft: a
     .mutation()
@@ -1046,7 +1063,7 @@ const schema = a.schema({
     })
     .returns(a.json())
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   publishNewsroomProcedureVersion: a
     .mutation()
@@ -1055,7 +1072,7 @@ const schema = a.schema({
     })
     .returns(a.json())
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   startNewsroomProcedureRun: a
     .mutation()
@@ -1070,7 +1087,7 @@ const schema = a.schema({
     })
     .returns(a.json())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   getNewsroomProcedureRun: a
     .query()
@@ -1079,7 +1096,7 @@ const schema = a.schema({
     })
     .returns(a.json())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   listNewsroomProcedureRunsByProcedure: a
     .query()
@@ -1088,7 +1105,7 @@ const schema = a.schema({
     })
     .returns(a.json())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   Assignment: a
     .model({
@@ -1238,6 +1255,8 @@ const schema = a.schema({
       error: a.json(),
       attempt: a.integer(),
       newsroomFeedKey: a.string(),
+      usage: a.json(),
+      costUsd: a.float(),
     })
     .secondaryIndexes((index) => [
       index("procedureId").sortKeys(["requestedAt"]).queryField("listProcedureRunsByProcedureAndRequestedAt"),
@@ -1250,6 +1269,77 @@ const schema = a.schema({
       allow.group(adminGroup).to(authoringOperations),
     ]),
 
+  Automation: a
+    .model({
+      id: a.id().required(),
+      title: a.string().required(),
+      description: a.string(),
+      enabled: a.boolean().required(),
+      trigger: a.json().required(),
+      procedureKey: a.string().required(),
+      inputTemplate: a.json(),
+      limits: a.json(),
+      createdBy: a.string(),
+      createdAt: a.datetime().required(),
+      updatedBy: a.string(),
+      updatedAt: a.datetime().required(),
+    })
+    .authorization((allow) => [
+      allow.group("editor").to(["read", "create", "update"]),
+      allow.group(adminGroup).to(authoringOperations),
+    ]),
+
+  /** A human review point raised by a step on any item (PPY-ab6a50). Review is not a story state. */
+  ReviewRequest: a
+    .model({
+      id: a.id().required(),
+      subject: a.json().required(),
+      mode: a.string().required(),
+      reason: a.string().required(),
+      ask: a.string(),
+      raisedBy: a.string().required(),
+      raisedAt: a.datetime().required(),
+      deadline: a.datetime(),
+      state: a.string().required(),
+      answer: a.json(),
+      links: a.json(),
+      history: a.json(),
+      appliedIn: a.json(),
+      updatedAt: a.datetime().required(),
+    })
+    .authorization((allow) => [
+      allow.group("editor").to(["read", "create", "update"]),
+      allow.group(adminGroup).to(authoringOperations),
+    ]),
+
+  /** One user's read mark on one review request; id is "<userKey>#<requestId>". */
+  ReviewReadMark: a
+    .model({
+      id: a.id().required(),
+      requestId: a.string().required(),
+      userKey: a.string().required(),
+      readAt: a.datetime().required(),
+    })
+    .authorization((allow) => [
+      allow.groups(["editor", adminGroup]).to(["read", "create", "update"]),
+    ]),
+
+  /** Who is told about review requests: scope default, mode or automation. Changed by data, not code. */
+  ReviewRecipientRule: a
+    .model({
+      id: a.id().required(),
+      scope: a.string().required(),
+      key: a.string(),
+      roles: a.string().array(),
+      emails: a.string().array(),
+      updatedBy: a.string(),
+      updatedAt: a.datetime().required(),
+    })
+    .authorization((allow) => [
+      allow.group("editor").to(["read"]),
+      allow.group(adminGroup).to(authoringOperations),
+    ]),
+
   NewsroomSection: a
     .model({
       id: a.id().required(),
@@ -2285,6 +2375,7 @@ const schema = a.schema({
   allow.resource(modelAttachmentUpload),
   allow.resource(newsroomSummary),
   allow.resource(procedureAction),
+  allow.resource(publicForms).to(["mutate"]),
   allow.resource(sesInboundReceive),
   allow.resource(emailSubmissionProcessor),
   allow.resource(slackEvents),
@@ -2297,10 +2388,15 @@ export type Schema = ClientSchema<typeof schema>;
  * The site's data API. Amplify allows one `defineData` per backend and registers it when called, so this is
  * a function: a site without plugins passes none and gets exactly the base schema.
  */
-export function defineSiteData(pluginDefinitions: Record<string, unknown> = {}) {
+export function defineSiteData(pluginDefinitions: Record<string, unknown> = {}, excludeModelGroups: readonly string[] = []) {
+  assertKnownModelGroups(excludeModelGroups);
+  const hasPlugins = Object.keys(pluginDefinitions).length > 0;
   return defineData({
     name: "PapyrusCmsApi",
-    schema: Object.keys(pluginDefinitions).length === 0 ? leanSchema : schemaWithPlugins(pluginDefinitions),
+    functions: sharedFunctions(),
+    schema: excludeModelGroups.length > 0
+      ? schemaExcludingGroups(excludeModelGroups, pluginDefinitions)
+      : hasPlugins ? schemaWithPlugins(pluginDefinitions) : leanSchema,
     authorizationModes: {
       defaultAuthorizationMode: "userPool",
       apiKeyAuthorizationMode: {