@anthusai/papyrus 2.0.0-next.11 → 2.0.0-next.110

package/lib/shared-chat-admission.ts

@@ -0,0 +1,182 @@
+/**
+ * Code-local trust contract for a site-hosted shared chat adapter.
+ *
+ * This module does not verify JWT signatures and is not an HTTP endpoint. The
+ * hosting server must inject a real verifier and authoritative membership
+ * resolver. Never construct VerifiedChatCredential from request JSON.
+ */
+
+export type TokenUse = string;
+
+/** Claims returned only after the injected host verifier has validated the JWT. */
+export interface VerifiedChatCredential {
+  subject: string;
+  issuer: string;
+  audiences: readonly string[];
+  clientId?: string;
+  tokenUse?: TokenUse;
+  expiresAtEpochSeconds: number;
+  notBeforeEpochSeconds?: number;
+  issuedAtEpochSeconds?: number;
+}
+
+export interface AudienceRule {
+  /** Explicitly choose which JWT claim is authoritative for this host. */
+  claim: "aud" | "client_id";
+  expectedValue: string;
+}
+
+export interface ChatHostTrustProfile {
+  issuer: string;
+  audienceRule: AudienceRule;
+  /** Must be configured by the host after verifying its actual token contract. */
+  acceptedTokenUses: readonly TokenUse[];
+  configuredSiteId: string;
+  clockSkewSeconds?: number;
+}
+
+export interface ChatRequest {
+  authorization?: string;
+  channelId: string;
+  idempotencyKey: string;
+  message: { text: string; authorSub?: string; accountId?: string; siteId?: string };
+}
+
+export interface ChatMembership {
+  accountId: string;
+  siteId: string;
+  editorSub: string;
+  active: boolean;
+  /** Host-derived authorization for the editorial chat surface (editor/admin policy). */
+  canUseEditorialChat: boolean;
+}
+
+export interface TranscriptOwner {
+  accountId: string;
+  siteId: string;
+  editorSub: string;
+  channelId: string;
+}
+
+export interface SharedChatAdmissionDependencies {
+  trust: ChatHostTrustProfile;
+  nowEpochSeconds?: () => number;
+  verifyCredential: (rawCredential: string) => Promise<VerifiedChatCredential | null>;
+  resolveMembership: (subject: string, configuredSiteId: string) => Promise<ChatMembership | null>;
+  resolveTranscriptOwner: (channelId: string) => Promise<TranscriptOwner | null>;
+}
+
+export interface AdmittedChatMessage {
+  owner: TranscriptOwner;
+  idempotencyKey: string;
+  /** Stable canonical representation used for payload-reuse detection. */
+  payloadFingerprint: string;
+}
+
+export class ChatAdmissionError extends Error {
+  readonly code: "unauthorized" | "forbidden" | "invalid_request" | "idempotency_conflict";
+
+  constructor(code: ChatAdmissionError["code"]) {
+    super(code);
+    this.name = "ChatAdmissionError";
+    this.code = code;
+  }
+}
+
+const reject = (code: ChatAdmissionError["code"]): never => { throw new ChatAdmissionError(code); };
+
+function bearerToken(value: string | undefined): string {
+  const match = value?.match(/^Bearer ([^\s]+)$/i);
+  if (!match) return reject("unauthorized");
+  return match[1];
+}
+
+function assertCredential(credential: VerifiedChatCredential, trust: ChatHostTrustProfile, now: number): void {
+  const skew = Math.max(0, trust.clockSkewSeconds ?? 0);
+  if (!trust.issuer || credential.issuer !== trust.issuer) reject("unauthorized");
+  if (!trust.acceptedTokenUses.length || !credential.tokenUse || !trust.acceptedTokenUses.includes(credential.tokenUse)) reject("unauthorized");
+  if (!Number.isFinite(credential.expiresAtEpochSeconds) || now - skew >= credential.expiresAtEpochSeconds) reject("unauthorized");
+  if (credential.notBeforeEpochSeconds !== undefined && now + skew < credential.notBeforeEpochSeconds) reject("unauthorized");
+  if (credential.issuedAtEpochSeconds !== undefined && now + skew < credential.issuedAtEpochSeconds) reject("unauthorized");
+
+  const audienceMatches = trust.audienceRule.claim === "aud"
+    ? credential.audiences.includes(trust.audienceRule.expectedValue)
+    : credential.clientId === trust.audienceRule.expectedValue;
+  if (!audienceMatches) reject("unauthorized");
+}
+
+/** Authenticate, derive the current host membership, and enforce private channel ownership. */
+export async function admitSharedChatMessage(
+  request: ChatRequest,
+  dependencies: SharedChatAdmissionDependencies,
+): Promise<AdmittedChatMessage> {
+  if (!request.channelId || !request.message.text.trim() || !/^[A-Za-z0-9._~-]{16,128}$/.test(request.idempotencyKey)) {
+    return reject("invalid_request");
+  }
+
+  const rawCredential = bearerToken(request.authorization);
+  const credential = await dependencies.verifyCredential(rawCredential);
+  if (!credential) return reject("unauthorized");
+  const now = (dependencies.nowEpochSeconds ?? (() => Date.now() / 1000))();
+  assertCredential(credential, dependencies.trust, now);
+
+  const membership = await dependencies.resolveMembership(credential.subject, dependencies.trust.configuredSiteId);
+  if (!membership || !membership.active || !membership.canUseEditorialChat
+    || membership.editorSub !== credential.subject || membership.siteId !== dependencies.trust.configuredSiteId) {
+    return reject("forbidden");
+  }
+  if ((request.message.authorSub && request.message.authorSub !== membership.editorSub)
+    || (request.message.accountId && request.message.accountId !== membership.accountId)
+    || (request.message.siteId && request.message.siteId !== membership.siteId)) {
+    return reject("forbidden");
+  }
+
+  const expectedOwner: TranscriptOwner = {
+    accountId: membership.accountId,
+    siteId: membership.siteId,
+    editorSub: membership.editorSub,
+    channelId: request.channelId,
+  };
+  const actualOwner = await dependencies.resolveTranscriptOwner(request.channelId);
+  if (!actualOwner || actualOwner.accountId !== expectedOwner.accountId || actualOwner.siteId !== expectedOwner.siteId
+    || actualOwner.editorSub !== expectedOwner.editorSub || actualOwner.channelId !== expectedOwner.channelId) {
+    return reject("forbidden");
+  }
+
+  return {
+    owner: expectedOwner,
+    idempotencyKey: request.idempotencyKey,
+    payloadFingerprint: JSON.stringify([request.channelId, request.message.text]),
+  };
+}
+
+export interface IdempotencyRequest<T> {
+  /** Storage must atomically scope key by the derived owner and operation. */
+  scope: string;
+  key: string;
+  payloadFingerprint: string;
+  run: () => Promise<T>;
+}
+
+/**
+ * Store contract for replay-safe writes. Production implementations must be
+ * atomic/durable (for example conditional put + canonical result); this module
+ * deliberately supplies no in-memory production store.
+ */
+export interface ChatIdempotencyStore {
+  executeOnce<T>(request: IdempotencyRequest<T>): Promise<T>;
+}
+
+export function runAdmittedChatMessage<T>(
+  admission: AdmittedChatMessage,
+  store: ChatIdempotencyStore,
+  operation: () => Promise<T>,
+): Promise<T> {
+  const { accountId, siteId, editorSub, channelId } = admission.owner;
+  return store.executeOnce({
+    scope: JSON.stringify(["chat-message", accountId, siteId, editorSub, channelId]),
+    key: admission.idempotencyKey,
+    payloadFingerprint: admission.payloadFingerprint,
+    run: operation,
+  });
+}

package/lib/site-brand-tenant.ts

@@ -9,14 +9,19 @@ export function resolveBrandConfigPath(relativePath: string): string {
   return path.isAbsolute(relativePath) ? relativePath : path.join(process.cwd(), relativePath);
 }
 
-export function getBrandSteeringConfigPath(brand: SiteBrand = resolveActiveSiteBrand()): string {
-  return resolveBrandConfigPath(brand.steeringConfigPath);
+/** Optional repo files a brand may still name; undefined means the site keeps that configuration as backend data and nothing is looked up. */
+function optionalBrandConfigPath(relativePath: string | undefined): string | undefined {
+  return relativePath ? resolveBrandConfigPath(relativePath) : undefined;
 }
 
-export function getBrandNewsroomSectionsConfigPath(brand: SiteBrand = resolveActiveSiteBrand()): string {
-  return resolveBrandConfigPath(brand.newsroomSectionsConfigPath);
+export function getBrandSteeringConfigPath(brand: SiteBrand = resolveActiveSiteBrand()): string | undefined {
+  return optionalBrandConfigPath(brand.steeringConfigPath);
 }
 
-export function getBrandAnalysisProfilesPath(brand: SiteBrand = resolveActiveSiteBrand()): string {
-  return resolveBrandConfigPath(brand.analysisProfilesPath);
+export function getBrandNewsroomSectionsConfigPath(brand: SiteBrand = resolveActiveSiteBrand()): string | undefined {
+  return optionalBrandConfigPath(brand.newsroomSectionsConfigPath);
+}
+
+export function getBrandAnalysisProfilesPath(brand: SiteBrand = resolveActiveSiteBrand()): string | undefined {
+  return optionalBrandConfigPath(brand.analysisProfilesPath);
 }

package/lib/site-brand.ts

@@ -142,9 +142,12 @@ export type SiteBrand = {
   readerBasePath?: string;
   opsChrome: OpsChrome;
   corpusKey: string;
-  steeringConfigPath: string;
-  newsroomSectionsConfigPath: string;
-  analysisProfilesPath: string;
+  /** Optional repo file for topic steering. Editorial and steering configuration is backend data; a data-driven site sets none and nothing is looked up. */
+  steeringConfigPath?: string;
+  /** Optional repo file for the local-preview demo sections only. Sections live in the backend. */
+  newsroomSectionsConfigPath?: string;
+  /** Optional repo file listing analysis profiles. */
+  analysisProfilesPath?: string;
   publicationName: string;
   components?: SiteBrandComponents;
   /**

package/lib/site-origin-value.ts

@@ -0,0 +1,50 @@
+import type { NextRequest } from "next/server";
+import { getSiteEnv } from "./site-env";
+
+type EnvironmentVariables = Record<string, string | undefined>;
+
+export const SITE_ORIGIN_ENV = "PAPYRUS_SITE_ORIGIN";
+
+export class SiteOriginNotConfiguredError extends Error {
+  readonly status = 503;
+  readonly code = "site_origin_not_configured";
+}
+
+function isLoopbackHostname(hostname: string): boolean {
+  return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "[::1]";
+}
+
+function configuredOrigin(value: string): string {
+  const invalid = () => new SiteOriginNotConfiguredError(`${SITE_ORIGIN_ENV} must be an https origin such as https://example.com with no path.`);
+  let parsed: URL;
+  try {
+    parsed = new URL(value);
+  } catch {
+    throw invalid();
+  }
+  if (parsed.protocol !== "https:" || parsed.origin !== value) throw invalid();
+  return parsed.origin;
+}
+
+function siteEnvOrNull(environment: EnvironmentVariables): string | null {
+  try {
+    return getSiteEnv(environment);
+  } catch {
+    return null;
+  }
+}
+
+/** The site's public origin from trusted configuration, never Host or forwarded headers. */
+export function publicSiteOrigin(request: Pick<NextRequest, "nextUrl">, environment: EnvironmentVariables = process.env): string {
+  const configured = (environment[SITE_ORIGIN_ENV] ?? "").trim();
+  if (configured) return configuredOrigin(configured);
+  const { hostname, origin } = request.nextUrl;
+  const developing = siteEnvOrNull(environment) === "development" && environment.NODE_ENV !== "production";
+  if (isLoopbackHostname(hostname) && developing) return origin;
+  throw new SiteOriginNotConfiguredError(`${SITE_ORIGIN_ENV} is not set; this site cannot tell its public origin.`);
+}
+
+/** An absolute URL on the site's trusted public origin. */
+export function publicSiteUrl(path: string, request: Pick<NextRequest, "nextUrl">, environment: EnvironmentVariables = process.env): URL {
+  return new URL(path, publicSiteOrigin(request, environment));
+}

package/lib/site-origin.ts

@@ -0,0 +1,8 @@
+import { NextResponse } from "next/server";
+import { SiteOriginNotConfiguredError } from "./site-origin-value";
+
+export { SITE_ORIGIN_ENV, SiteOriginNotConfiguredError, publicSiteOrigin, publicSiteUrl } from "./site-origin-value";
+
+export function siteOriginNotConfiguredResponse(error: SiteOriginNotConfiguredError): NextResponse {
+  return NextResponse.json({ error: error.code, message: error.message }, { status: error.status, headers: { "cache-control": "no-store" } });
+}

package/lib/use-reference-review-data.ts

@@ -0,0 +1,44 @@
+"use client";
+
+import { useCallback, useEffect, useState } from "react";
+
+/** Load persisted predictions and attributed review history without cancelling on a loading rerender. */
+export function useReferenceReviewData<Relation, Message>({
+  enabled,
+  loadRelations,
+  loadMessages,
+  onRelations,
+  onMessages,
+}: {
+  enabled: boolean;
+  loadRelations: () => Promise<Relation[]>;
+  loadMessages: () => Promise<Message[]>;
+  onRelations: (relations: Relation[]) => void;
+  onMessages: (messages: Message[]) => void;
+}) {
+  const [state, setState] = useState<"loading" | "ready" | "error">(enabled ? "loading" : "ready");
+  const [error, setError] = useState<string | null>(null);
+  const [attempt, setAttempt] = useState(0);
+  const retry = useCallback(() => setAttempt((current) => current + 1), []);
+  useEffect(() => {
+    if (!enabled) return;
+    let active = true;
+    setState("loading");
+    setError(null);
+    void Promise.allSettled([loadRelations(), loadMessages()]).then(([relations, history]) => {
+      if (!active) return;
+      if (relations.status === "fulfilled") onRelations(relations.value);
+      if (history.status === "fulfilled") onMessages(history.value);
+      const failure = relations.status === "rejected" ? relations.reason : history.status === "rejected" ? history.reason : null;
+      if (failure) {
+        const subject = relations.status === "rejected" ? "Predictions" : "Review history";
+        setError(`${subject} could not be loaded. ${failure instanceof Error ? failure.message : "Try again."}`);
+        setState("error");
+      } else {
+        setState("ready");
+      }
+    });
+    return () => { active = false; };
+  }, [enabled, loadRelations, loadMessages, onRelations, onMessages, attempt]);
+  return { state, error, retry };
+}

package/middleware.ts

@@ -5,6 +5,7 @@ import { newsroomHref } from "./lib/newsroom-base-path";
 import { getReaderBasePath } from "./lib/reader-base-path";
 import { isStagingGatedPath, isStaticOrApiPath } from "./lib/staging-gated-path";
 import { getSiteEnv, isIndexable } from "./lib/site-env";
+import { SiteOriginNotConfiguredError, publicSiteUrl, siteOriginNotConfiguredResponse } from "./lib/site-origin";
 import { getStagingAccess } from "./lib/staging-gate";
 import {
   isPreviewGatedPath,
@@ -38,11 +39,11 @@ function routeRequest(request: NextRequest): NextResponse {
   }
 
   if (pathname === "/newsroom" || pathname === "/newsroom/") {
-    return NextResponse.redirect(new URL(`/${request.nextUrl.search}`, request.url));
+    return NextResponse.redirect(publicSiteUrl(`/${request.nextUrl.search}`, request));
   }
   if (pathname.startsWith("/newsroom/")) {
     const target = pathname.slice("/newsroom".length) || "/";
-    return NextResponse.redirect(new URL(`${target}${request.nextUrl.search}`, request.url));
+    return NextResponse.redirect(publicSiteUrl(`${target}${request.nextUrl.search}`, request));
   }
 
   if (pathname === "/" || pathname === "") {
@@ -59,6 +60,16 @@ function routeRequest(request: NextRequest): NextResponse {
 }
 
 export async function middleware(request: NextRequest): Promise<NextResponse> {
+  try {
+    return await handleRequest(request);
+  } catch (error) {
+    // Redirects name the site's public origin (request.url is localhost on Amplify); without it, fail closed.
+    if (error instanceof SiteOriginNotConfiguredError) return withRobotsHeader(siteOriginNotConfiguredResponse(error));
+    throw error;
+  }
+}
+
+async function handleRequest(request: NextRequest): Promise<NextResponse> {
   let sessionResponse: NextResponse | null = null;
   const { pathname } = request.nextUrl;
   const gated = isStaticPreviewEnabled()
@@ -68,7 +79,7 @@ export async function middleware(request: NextRequest): Promise<NextResponse> {
     sessionResponse = NextResponse.next();
     const access = await getStagingAccess(request, sessionResponse);
     if (access === "anonymous") {
-      return withRobotsHeader(NextResponse.redirect(new URL(newsroomHref(), request.url)));
+      return withRobotsHeader(NextResponse.redirect(publicSiteUrl(newsroomHref(), request)));
     }
     if (access === "forbidden") {
       return withRobotsHeader(new NextResponse("Staging is limited to editors and admins.", { status: 403 }));

package/package.json

@@ -75,6 +75,9 @@
     "./components/archive-grid": "./components/archive-grid.tsx",
     "./components/archive-shell": "./components/archive-shell.tsx",
     "./components/article-video": "./components/article-video.tsx",
+    "./components/automation-panel": "./components/automation-panel.tsx",
+    "./components/automation-run-now": "./components/automation-run-now.tsx",
+    "./components/automation-view": "./components/automation-view.tsx",
     "./components/blog-page-background": "./components/blog-page-background.tsx",
     "./components/curation-delegation-client": "./components/curation-delegation-client.ts",
     "./components/dev-sandbox-editor-sign-in": "./components/dev-sandbox-editor-sign-in.tsx",
@@ -85,9 +88,14 @@
     "./components/item-stream-view": "./components/item-stream-view.tsx",
     "./components/markus-body-editor": "./components/markus-body-editor.tsx",
     "./components/markus-ir-preview": "./components/markus-ir-preview.tsx",
+    "./components/moderation-panel": "./components/moderation-panel.tsx",
+    "./components/monitoring-overview-view": "./components/monitoring-overview-view.tsx",
+    "./components/monitoring-panel": "./components/monitoring-panel.tsx",
     "./components/news-desk-client-provider": "./components/news-desk-client-provider.tsx",
     "./components/news-desk-page": "./components/news-desk-page.tsx",
     "./components/news-desk-taxonomy-client": "./components/news-desk-taxonomy-client.ts",
+    "./components/newsletter-panel": "./components/newsletter-panel.tsx",
+    "./components/newsletter-sections": "./components/newsletter-sections.tsx",
     "./components/newspaper": "./components/newspaper.tsx",
     "./components/newsroom-access-gate": "./components/newsroom-access-gate.tsx",
     "./components/newsroom-article-editor": "./components/newsroom-article-editor.tsx",
@@ -96,9 +104,11 @@
     "./components/newsroom-assignments-view": "./components/newsroom-assignments-view.tsx",
     "./components/newsroom-board-view": "./components/newsroom-board-view.tsx",
     "./components/newsroom-client-shell": "./components/newsroom-client-shell.tsx",
+    "./components/newsroom-curation-bootstrap": "./components/newsroom-curation-bootstrap.tsx",
     "./components/newsroom-curation-provider": "./components/newsroom-curation-provider.tsx",
     "./components/newsroom-ops-overview": "./components/newsroom-ops-overview.tsx",
     "./components/newsroom-ops-shell": "./components/newsroom-ops-shell.tsx",
+    "./components/newsroom-overview-skeleton": "./components/newsroom-overview-skeleton.tsx",
     "./components/newsroom-references-view": "./components/newsroom-references-view.tsx",
     "./components/newsroom-theme-fonts/broadsheet-green": "./components/newsroom-theme-fonts/broadsheet-green.tsx",
     "./components/newsroom-theme-fonts/newspaper-gothic": "./components/newsroom-theme-fonts/newspaper-gothic.tsx",
@@ -106,7 +116,10 @@
     "./components/newsroom-theme-fonts/refined-newsprint": "./components/newsroom-theme-fonts/refined-newsprint.tsx",
     "./components/newsroom-theme": "./components/newsroom-theme.tsx",
     "./components/newsroom-topics-view": "./components/newsroom-topics-view.tsx",
+    "./components/notification-center": "./components/notification-center.tsx",
+    "./components/papyrus-console-conversation": "./components/papyrus-console-conversation.tsx",
     "./components/papyrus-console-shell": "./components/papyrus-console-shell.tsx",
+    "./components/papyrus-private-chat-panel": "./components/papyrus-private-chat-panel.tsx",
     "./components/pictogram-figure": "./components/pictogram-figure.tsx",
     "./components/presentation-footer": "./components/presentation-footer.tsx",
     "./components/presentation-header": "./components/presentation-header.tsx",
@@ -118,6 +131,7 @@
     "./components/reader-auth-state": "./components/reader-auth-state.ts",
     "./components/reader-settings": "./components/reader-settings.ts",
     "./components/reader-theme-control": "./components/reader-theme-control.tsx",
+    "./components/reference-add-entry": "./components/reference-add-entry.tsx",
     "./components/reference-curation-controls": "./components/reference-curation-controls.tsx",
     "./components/reference-cyclotron-priming": "./components/reference-cyclotron-priming.tsx",
     "./components/reference-cyclotron-status": "./components/reference-cyclotron-status.tsx",
@@ -169,6 +183,9 @@
     "./lib/article-flow": "./lib/article-flow.ts",
     "./lib/article-frame-solver": "./lib/article-frame-solver.ts",
     "./lib/articles": "./lib/articles.ts",
+    "./lib/automation-client": "./lib/automation-client.ts",
+    "./lib/automation-fixture": "./lib/automation-fixture.ts",
+    "./lib/automation-overview": "./lib/automation-overview.ts",
     "./lib/blog-feature-solver": "./lib/blog-feature-solver.ts",
     "./lib/blog-rhythm": "./lib/blog-rhythm.ts",
     "./lib/brand-fonts-watch": "./lib/brand-fonts-watch.ts",
@@ -177,6 +194,7 @@
     "./lib/category-dashboard": "./lib/category-dashboard.ts",
     "./lib/category-repository": "./lib/category-repository.ts",
     "./lib/chrome-text": "./lib/chrome-text.ts",
+    "./lib/cli-login-discovery": "./lib/cli-login-discovery.ts",
     "./lib/console-chat-client": "./lib/console-chat-client.ts",
     "./lib/console-web-context": "./lib/console-web-context.ts",
     "./lib/content-actions-client": "./lib/content-actions-client.ts",
@@ -188,6 +206,7 @@
     "./lib/content-types": "./lib/content-types.ts",
     "./lib/curation-client": "./lib/curation-client.ts",
     "./lib/curation-delegation-helpers": "./lib/curation-delegation-helpers.ts",
+    "./lib/curation-routes": "./lib/curation-routes.ts",
     "./lib/cyclotron-suggestions": "./lib/cyclotron-suggestions.ts",
     "./lib/define-site": "./lib/define-site.ts",
     "./lib/demo-amplify-outputs": "./lib/demo-amplify-outputs.ts",
@@ -224,7 +243,14 @@
     "./lib/markus-projection": "./lib/markus-projection.ts",
     "./lib/markus-to-article": "./lib/markus-to-article.ts",
     "./lib/media-route-response": "./lib/media-route-response.ts",
+    "./lib/monitoring-client": "./lib/monitoring-client.ts",
+    "./lib/monitoring-overview-fixture": "./lib/monitoring-overview-fixture.ts",
+    "./lib/monitoring-overview": "./lib/monitoring-overview.ts",
     "./lib/news-desk-session": "./lib/news-desk-session.ts",
+    "./lib/newsletter-api": "./lib/newsletter-api.ts",
+    "./lib/newsletter-client": "./lib/newsletter-client.ts",
+    "./lib/newsletter-fixture": "./lib/newsletter-fixture.ts",
+    "./lib/newsletter-model": "./lib/newsletter-model.ts",
     "./lib/newspaper-layout": "./lib/newspaper-layout.ts",
     "./lib/newsroom-articles": "./lib/newsroom-articles.ts",
     "./lib/newsroom-assignments": "./lib/newsroom-assignments.ts",
@@ -248,7 +274,10 @@
     "./lib/newsroom-sections": "./lib/newsroom-sections.ts",
     "./lib/newsroom-topics": "./lib/newsroom-topics.ts",
     "./lib/oauth-redirect-priority": "./lib/oauth-redirect-priority.ts",
+    "./lib/papyrus-chat-admission": "./lib/papyrus-chat-admission.ts",
+    "./lib/papyrus-hosted-chat": "./lib/papyrus-hosted-chat.ts",
     "./lib/papyrus-object-kinds": "./lib/papyrus-object-kinds.ts",
+    "./lib/papyrus-private-chat-client": "./lib/papyrus-private-chat-client.ts",
     "./lib/papyrus-web-locations": "./lib/papyrus-web-locations.ts",
     "./lib/pilobol-sample": "./lib/pilobol-sample.ts",
     "./lib/plugin-settings": "./lib/plugin-settings.ts",
@@ -265,13 +294,19 @@
     "./lib/publication-cyclotron": "./lib/publication-cyclotron.ts",
     "./lib/publication-items": "./lib/publication-items.ts",
     "./lib/rate-limit-retry": "./lib/rate-limit-retry.ts",
+    "./lib/reader-api": "./lib/reader-api.ts",
     "./lib/reader-base-path": "./lib/reader-base-path.ts",
     "./lib/reader-cache-lifetime": "./lib/reader-cache-lifetime.ts",
+    "./lib/reader-moderation": "./lib/reader-moderation.ts",
+    "./lib/reader-retirement-route": "./lib/reader-retirement-route.ts",
     "./lib/reader-route-config": "./lib/reader-route-config.ts",
     "./lib/reader-static-params": "./lib/reader-static-params.ts",
     "./lib/reader-storage-url": "./lib/reader-storage-url.ts",
+    "./lib/reader-subject": "./lib/reader-subject.ts",
     "./lib/reference-display": "./lib/reference-display.ts",
     "./lib/reference-policy": "./lib/reference-policy.ts",
+    "./lib/reference-review-details": "./lib/reference-review-details.ts",
+    "./lib/reference-review-request": "./lib/reference-review-request.ts",
     "./lib/reference-source-preview": "./lib/reference-source-preview.ts",
     "./lib/relevance-decisions": "./lib/relevance-decisions.ts",
     "./lib/relevance-status": "./lib/relevance-status.ts",
@@ -280,14 +315,20 @@
     "./lib/reporting-story-budget": "./lib/reporting-story-budget.ts",
     "./lib/revalidate-prewarm": "./lib/revalidate-prewarm.ts",
     "./lib/revalidate-secret": "./lib/revalidate-secret.ts",
+    "./lib/review-client": "./lib/review-client.ts",
+    "./lib/review-fixture": "./lib/review-fixture.ts",
+    "./lib/review-requests": "./lib/review-requests.ts",
     "./lib/robots-policy": "./lib/robots-policy.ts",
     "./lib/root-route-redirect": "./lib/root-route-redirect.ts",
     "./lib/semantic-graph": "./lib/semantic-graph.ts",
+    "./lib/shared-chat-admission": "./lib/shared-chat-admission.ts",
     "./lib/shared-credentials-provider": "./lib/shared-credentials-provider.ts",
     "./lib/signup-csv": "./lib/signup-csv.ts",
     "./lib/site-brand-tenant": "./lib/site-brand-tenant.ts",
     "./lib/site-brand": "./lib/site-brand.ts",
     "./lib/site-env": "./lib/site-env.ts",
+    "./lib/site-origin-value": "./lib/site-origin-value.ts",
+    "./lib/site-origin": "./lib/site-origin.ts",
     "./lib/site-renderer": "./lib/site-renderer.ts",
     "./lib/site-section-suggestions": "./lib/site-section-suggestions.ts",
     "./lib/site-stack": "./lib/site-stack.ts",
@@ -299,6 +340,7 @@
     "./lib/test-editor-override": "./lib/test-editor-override.ts",
     "./lib/text-columns": "./lib/text-columns.ts",
     "./lib/themed-image": "./lib/themed-image.ts",
+    "./lib/use-reference-review-data": "./lib/use-reference-review-data.ts",
     "./lib/utils": "./lib/utils.ts",
     "./lib/video-loading": "./lib/video-loading.ts",
     "./lib/video-mode": "./lib/video-mode.ts",
@@ -315,6 +357,7 @@
     "./renderers/pretext/rhythm-blog-presentation": "./renderers/pretext/rhythm-blog-presentation.tsx",
     "./renderers/pretext/rhythm-shell-style": "./renderers/pretext/rhythm-shell-style.ts",
     "./app/%5F_preview/[[...path]]/route": "./app/%5F_preview/[[...path]]/route.ts",
+    "./app/.well-known/papyrus-cli.json/route": "./app/.well-known/papyrus-cli.json/route.ts",
     "./app/[year]/[month]/[day]/[articleSlug]/page": "./app/[year]/[month]/[day]/[articleSlug]/page.tsx",
     "./app/[year]/[month]/[day]/page": "./app/[year]/[month]/[day]/page.tsx",
     "./app/[year]/[month]/[day]/page/[pageNumber]/page": "./app/[year]/[month]/[day]/page/[pageNumber]/page.tsx",
@@ -330,6 +373,26 @@
     "./app/api/local-preview/derive/route": "./app/api/local-preview/derive/route.ts",
     "./app/api/local-preview/media/route": "./app/api/local-preview/media/route.ts",
     "./app/api/media/[...path]/route": "./app/api/media/[...path]/route.ts",
+    "./app/api/newsletter/confirm/route": "./app/api/newsletter/confirm/route.ts",
+    "./app/api/newsletter/preferences/route": "./app/api/newsletter/preferences/route.ts",
+    "./app/api/newsletter/state/route": "./app/api/newsletter/state/route.ts",
+    "./app/api/newsletter/subscribe/route": "./app/api/newsletter/subscribe/route.ts",
+    "./app/api/newsletter/unsubscribe/route": "./app/api/newsletter/unsubscribe/route.ts",
+    "./app/api/newsroom/chat/[...path]/route": "./app/api/newsroom/chat/[...path]/route.ts",
+    "./app/api/newsroom/curation/context/route": "./app/api/newsroom/curation/context/route.ts",
+    "./app/api/newsroom/curation/priming/route": "./app/api/newsroom/curation/priming/route.ts",
+    "./app/api/newsroom/curation/publication/route": "./app/api/newsroom/curation/publication/route.ts",
+    "./app/api/reader/comment/delete/route": "./app/api/reader/comment/delete/route.ts",
+    "./app/api/reader/comment/edit/route": "./app/api/reader/comment/edit/route.ts",
+    "./app/api/reader/comment/route": "./app/api/reader/comment/route.ts",
+    "./app/api/reader/flag/route": "./app/api/reader/flag/route.ts",
+    "./app/api/reader/handle/route": "./app/api/reader/handle/route.ts",
+    "./app/api/reader/me/route": "./app/api/reader/me/route.ts",
+    "./app/api/reader/rating/route": "./app/api/reader/rating/route.ts",
+    "./app/api/reader/report/route": "./app/api/reader/report/route.ts",
+    "./app/api/reader/retired/route": "./app/api/reader/retired/route.ts",
+    "./app/api/reader/submit/route": "./app/api/reader/submit/route.ts",
+    "./app/api/reader/vote/route": "./app/api/reader/vote/route.ts",
     "./app/api/revalidate/route": "./app/api/revalidate/route.ts",
     "./app/archive/page": "./app/archive/page.tsx",
     "./app/articles/[slug]/page": "./app/articles/[slug]/page.tsx",
@@ -395,14 +458,14 @@
       "optional": true
     }
   },
-  "version": "2.0.0-next.11",
+  "version": "2.0.0-next.110",
   "dependencies": {
     "@aws-amplify/adapter-nextjs": "^1.7.3",
     "@aws-crypto/sha256-js": "5.2.0",
     "@aws-sdk/client-cognito-identity-provider": "3.1045.0",
+    "@aws-sdk/client-dynamodb": "^3.1045.0",
     "@aws-sdk/client-lambda": "^3.1045.0",
     "@aws-sdk/client-s3": "^3.1045.0",
-    "@aws-sdk/client-secrets-manager": "3.1045.0",
     "@aws-sdk/client-ssm": "^3.1045.0",
     "@aws-sdk/credential-provider-node": "3.972.84",
     "@aws-sdk/s3-request-presigner": "^3.1045.0",
@@ -432,10 +495,11 @@
     "anthus-vultus": "github:AnthusAI/Vultus#af98d57",
     "aws-amplify": "^6.17.0",
     "aws-jwt-verify": "4.0.1",
+    "chatticus": "https://github.com/AnthusAI/Chatticus/archive/db862e386119f97922cf303fd00ef0505d86a08a.tar.gz",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
-    "cyclotron": "https://github.com/AnthusAI/Cyclotron/releases/download/ui-v0.2.2/cyclotron-0.2.2.tgz",
+    "cyclotron": "https://github.com/AnthusAI/Cyclotron/releases/download/ui-v0.2.3/cyclotron-0.2.3.tgz",
     "d3": "^7.9.0",
     "esbuild": "^0.28.2",
     "framer-motion": "^14.3.0",