@anthusai/papyrus 2.0.0-next.5 → 2.0.0-next.51

package/lib/site-origin.ts

@@ -0,0 +1,67 @@
+import { NextResponse, type NextRequest } from "next/server";
+import { getSiteEnv } from "./site-env";
+
+type EnvironmentVariables = Record<string, string | undefined>;
+
+export const SITE_ORIGIN_ENV = "PAPYRUS_SITE_ORIGIN";
+
+/**
+ * The site's public origin cannot be read from the request on Amplify SSR (WEB_COMPUTE):
+ * there `request.nextUrl.origin` is the compute adapter's internal https://localhost:3000.
+ * It also must never be derived from Host or X-Forwarded-* headers, which a client can set.
+ * The one trusted source is PAPYRUS_SITE_ORIGIN, set by the app shell from the site's host.
+ */
+export class SiteOriginNotConfiguredError extends Error {
+  readonly status = 503;
+  readonly code = "site_origin_not_configured";
+}
+
+export function siteOriginNotConfiguredResponse(error: SiteOriginNotConfiguredError): NextResponse {
+  return NextResponse.json({ error: error.code, message: error.message }, { status: error.status, headers: { "cache-control": "no-store" } });
+}
+
+function isLoopbackHostname(hostname: string): boolean {
+  return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "[::1]";
+}
+
+function configuredOrigin(value: string): string {
+  const invalid = () => new SiteOriginNotConfiguredError(`${SITE_ORIGIN_ENV} must be an https origin such as https://example.com with no path.`);
+  let parsed: URL;
+  try {
+    parsed = new URL(value);
+  } catch {
+    throw invalid();
+  }
+  if (parsed.protocol !== "https:" || parsed.origin !== value) throw invalid();
+  return parsed.origin;
+}
+
+function siteEnvOrNull(environment: EnvironmentVariables): string | null {
+  try {
+    return getSiteEnv(environment);
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * The site's public origin, from trusted configuration.
+ * - PAPYRUS_SITE_ORIGIN set: it must be an https origin with no path; it is used as is.
+ * - Unset: `request.nextUrl.origin` only when it is loopback, SITE_ENV resolves to development
+ *   and NODE_ENV is not production (a local `next dev` server). Anything else, production and staging included, throws
+ *   SiteOriginNotConfiguredError so routes answer 503 instead of redirecting to localhost.
+ */
+export function publicSiteOrigin(request: Pick<NextRequest, "nextUrl">, environment: EnvironmentVariables = process.env): string {
+  const configured = (environment[SITE_ORIGIN_ENV] ?? "").trim();
+  if (configured) return configuredOrigin(configured);
+  const { hostname, origin } = request.nextUrl;
+  // SITE_ENV defaults to development when a runtime never received it, so NODE_ENV=production also closes the fallback.
+  const developing = siteEnvOrNull(environment) === "development" && environment.NODE_ENV !== "production";
+  if (isLoopbackHostname(hostname) && developing) return origin;
+  throw new SiteOriginNotConfiguredError(`${SITE_ORIGIN_ENV} is not set; this site cannot tell its public origin.`);
+}
+
+/** An absolute URL on the site's public origin, for redirects. Fails closed like publicSiteOrigin. */
+export function publicSiteUrl(path: string, request: Pick<NextRequest, "nextUrl">, environment: EnvironmentVariables = process.env): URL {
+  return new URL(path, publicSiteOrigin(request, environment));
+}

package/middleware.ts

@@ -5,6 +5,7 @@ import { newsroomHref } from "./lib/newsroom-base-path";
 import { getReaderBasePath } from "./lib/reader-base-path";
 import { isStagingGatedPath, isStaticOrApiPath } from "./lib/staging-gated-path";
 import { getSiteEnv, isIndexable } from "./lib/site-env";
+import { SiteOriginNotConfiguredError, publicSiteUrl, siteOriginNotConfiguredResponse } from "./lib/site-origin";
 import { getStagingAccess } from "./lib/staging-gate";
 import {
   isPreviewGatedPath,
@@ -38,11 +39,11 @@ function routeRequest(request: NextRequest): NextResponse {
   }
 
   if (pathname === "/newsroom" || pathname === "/newsroom/") {
-    return NextResponse.redirect(new URL(`/${request.nextUrl.search}`, request.url));
+    return NextResponse.redirect(publicSiteUrl(`/${request.nextUrl.search}`, request));
   }
   if (pathname.startsWith("/newsroom/")) {
     const target = pathname.slice("/newsroom".length) || "/";
-    return NextResponse.redirect(new URL(`${target}${request.nextUrl.search}`, request.url));
+    return NextResponse.redirect(publicSiteUrl(`${target}${request.nextUrl.search}`, request));
   }
 
   if (pathname === "/" || pathname === "") {
@@ -59,6 +60,16 @@ function routeRequest(request: NextRequest): NextResponse {
 }
 
 export async function middleware(request: NextRequest): Promise<NextResponse> {
+  try {
+    return await handleRequest(request);
+  } catch (error) {
+    // Redirects name the site's public origin (request.url is localhost on Amplify); without it, fail closed.
+    if (error instanceof SiteOriginNotConfiguredError) return withRobotsHeader(siteOriginNotConfiguredResponse(error));
+    throw error;
+  }
+}
+
+async function handleRequest(request: NextRequest): Promise<NextResponse> {
   let sessionResponse: NextResponse | null = null;
   const { pathname } = request.nextUrl;
   const gated = isStaticPreviewEnabled()
@@ -68,7 +79,7 @@ export async function middleware(request: NextRequest): Promise<NextResponse> {
     sessionResponse = NextResponse.next();
     const access = await getStagingAccess(request, sessionResponse);
     if (access === "anonymous") {
-      return withRobotsHeader(NextResponse.redirect(new URL(newsroomHref(), request.url)));
+      return withRobotsHeader(NextResponse.redirect(publicSiteUrl(newsroomHref(), request)));
     }
     if (access === "forbidden") {
       return withRobotsHeader(new NextResponse("Staging is limited to editors and admins.", { status: 403 }));

package/package.json

@@ -85,9 +85,14 @@
     "./components/item-stream-view": "./components/item-stream-view.tsx",
     "./components/markus-body-editor": "./components/markus-body-editor.tsx",
     "./components/markus-ir-preview": "./components/markus-ir-preview.tsx",
+    "./components/moderation-panel": "./components/moderation-panel.tsx",
+    "./components/monitoring-overview-view": "./components/monitoring-overview-view.tsx",
+    "./components/monitoring-panel": "./components/monitoring-panel.tsx",
     "./components/news-desk-client-provider": "./components/news-desk-client-provider.tsx",
     "./components/news-desk-page": "./components/news-desk-page.tsx",
     "./components/news-desk-taxonomy-client": "./components/news-desk-taxonomy-client.ts",
+    "./components/newsletter-panel": "./components/newsletter-panel.tsx",
+    "./components/newsletter-sections": "./components/newsletter-sections.tsx",
     "./components/newspaper": "./components/newspaper.tsx",
     "./components/newsroom-access-gate": "./components/newsroom-access-gate.tsx",
     "./components/newsroom-article-editor": "./components/newsroom-article-editor.tsx",
@@ -96,6 +101,7 @@
     "./components/newsroom-assignments-view": "./components/newsroom-assignments-view.tsx",
     "./components/newsroom-board-view": "./components/newsroom-board-view.tsx",
     "./components/newsroom-client-shell": "./components/newsroom-client-shell.tsx",
+    "./components/newsroom-curation-bootstrap": "./components/newsroom-curation-bootstrap.tsx",
     "./components/newsroom-curation-provider": "./components/newsroom-curation-provider.tsx",
     "./components/newsroom-ops-overview": "./components/newsroom-ops-overview.tsx",
     "./components/newsroom-ops-shell": "./components/newsroom-ops-shell.tsx",
@@ -118,6 +124,7 @@
     "./components/reader-auth-state": "./components/reader-auth-state.ts",
     "./components/reader-settings": "./components/reader-settings.ts",
     "./components/reader-theme-control": "./components/reader-theme-control.tsx",
+    "./components/reference-add-entry": "./components/reference-add-entry.tsx",
     "./components/reference-curation-controls": "./components/reference-curation-controls.tsx",
     "./components/reference-cyclotron-priming": "./components/reference-cyclotron-priming.tsx",
     "./components/reference-cyclotron-status": "./components/reference-cyclotron-status.tsx",
@@ -188,6 +195,7 @@
     "./lib/content-types": "./lib/content-types.ts",
     "./lib/curation-client": "./lib/curation-client.ts",
     "./lib/curation-delegation-helpers": "./lib/curation-delegation-helpers.ts",
+    "./lib/curation-routes": "./lib/curation-routes.ts",
     "./lib/cyclotron-suggestions": "./lib/cyclotron-suggestions.ts",
     "./lib/define-site": "./lib/define-site.ts",
     "./lib/demo-amplify-outputs": "./lib/demo-amplify-outputs.ts",
@@ -224,7 +232,15 @@
     "./lib/markus-projection": "./lib/markus-projection.ts",
     "./lib/markus-to-article": "./lib/markus-to-article.ts",
     "./lib/media-route-response": "./lib/media-route-response.ts",
+    "./lib/monitoring-client": "./lib/monitoring-client.ts",
+    "./lib/monitoring-overview-fixture": "./lib/monitoring-overview-fixture.ts",
+    "./lib/monitoring-overview": "./lib/monitoring-overview.ts",
     "./lib/news-desk-session": "./lib/news-desk-session.ts",
+    "./lib/newsletter-api": "./lib/newsletter-api.ts",
+    "./lib/newsletter-client": "./lib/newsletter-client.ts",
+    "./lib/newsletter-fixture": "./lib/newsletter-fixture.ts",
+    "./lib/newsletter-model": "./lib/newsletter-model.ts",
+    "./lib/newsletter-pages": "./lib/newsletter-pages.ts",
     "./lib/newspaper-layout": "./lib/newspaper-layout.ts",
     "./lib/newsroom-articles": "./lib/newsroom-articles.ts",
     "./lib/newsroom-assignments": "./lib/newsroom-assignments.ts",
@@ -265,11 +281,15 @@
     "./lib/publication-cyclotron": "./lib/publication-cyclotron.ts",
     "./lib/publication-items": "./lib/publication-items.ts",
     "./lib/rate-limit-retry": "./lib/rate-limit-retry.ts",
+    "./lib/reader-api": "./lib/reader-api.ts",
     "./lib/reader-base-path": "./lib/reader-base-path.ts",
     "./lib/reader-cache-lifetime": "./lib/reader-cache-lifetime.ts",
+    "./lib/reader-moderation": "./lib/reader-moderation.ts",
+    "./lib/reader-retirement-route": "./lib/reader-retirement-route.ts",
     "./lib/reader-route-config": "./lib/reader-route-config.ts",
     "./lib/reader-static-params": "./lib/reader-static-params.ts",
     "./lib/reader-storage-url": "./lib/reader-storage-url.ts",
+    "./lib/reader-subject": "./lib/reader-subject.ts",
     "./lib/reference-display": "./lib/reference-display.ts",
     "./lib/reference-policy": "./lib/reference-policy.ts",
     "./lib/reference-source-preview": "./lib/reference-source-preview.ts",
@@ -288,6 +308,7 @@
     "./lib/site-brand-tenant": "./lib/site-brand-tenant.ts",
     "./lib/site-brand": "./lib/site-brand.ts",
     "./lib/site-env": "./lib/site-env.ts",
+    "./lib/site-origin": "./lib/site-origin.ts",
     "./lib/site-renderer": "./lib/site-renderer.ts",
     "./lib/site-section-suggestions": "./lib/site-section-suggestions.ts",
     "./lib/site-stack": "./lib/site-stack.ts",
@@ -330,6 +351,23 @@
     "./app/api/local-preview/derive/route": "./app/api/local-preview/derive/route.ts",
     "./app/api/local-preview/media/route": "./app/api/local-preview/media/route.ts",
     "./app/api/media/[...path]/route": "./app/api/media/[...path]/route.ts",
+    "./app/api/newsletter/confirm/route": "./app/api/newsletter/confirm/route.ts",
+    "./app/api/newsletter/preferences/route": "./app/api/newsletter/preferences/route.ts",
+    "./app/api/newsletter/subscribe/route": "./app/api/newsletter/subscribe/route.ts",
+    "./app/api/newsletter/unsubscribe/route": "./app/api/newsletter/unsubscribe/route.ts",
+    "./app/api/newsroom/curation/context/route": "./app/api/newsroom/curation/context/route.ts",
+    "./app/api/newsroom/curation/priming/route": "./app/api/newsroom/curation/priming/route.ts",
+    "./app/api/newsroom/curation/publication/route": "./app/api/newsroom/curation/publication/route.ts",
+    "./app/api/reader/comment/delete/route": "./app/api/reader/comment/delete/route.ts",
+    "./app/api/reader/comment/edit/route": "./app/api/reader/comment/edit/route.ts",
+    "./app/api/reader/comment/route": "./app/api/reader/comment/route.ts",
+    "./app/api/reader/handle/route": "./app/api/reader/handle/route.ts",
+    "./app/api/reader/me/route": "./app/api/reader/me/route.ts",
+    "./app/api/reader/rating/route": "./app/api/reader/rating/route.ts",
+    "./app/api/reader/report/route": "./app/api/reader/report/route.ts",
+    "./app/api/reader/retired/route": "./app/api/reader/retired/route.ts",
+    "./app/api/reader/submit/route": "./app/api/reader/submit/route.ts",
+    "./app/api/reader/vote/route": "./app/api/reader/vote/route.ts",
     "./app/api/revalidate/route": "./app/api/revalidate/route.ts",
     "./app/archive/page": "./app/archive/page.tsx",
     "./app/articles/[slug]/page": "./app/articles/[slug]/page.tsx",
@@ -395,14 +433,14 @@
       "optional": true
     }
   },
-  "version": "2.0.0-next.5",
+  "version": "2.0.0-next.51",
   "dependencies": {
     "@aws-amplify/adapter-nextjs": "^1.7.3",
     "@aws-crypto/sha256-js": "5.2.0",
     "@aws-sdk/client-cognito-identity-provider": "3.1045.0",
+    "@aws-sdk/client-dynamodb": "^3.1045.0",
     "@aws-sdk/client-lambda": "^3.1045.0",
     "@aws-sdk/client-s3": "^3.1045.0",
-    "@aws-sdk/client-secrets-manager": "3.1045.0",
     "@aws-sdk/client-ssm": "^3.1045.0",
     "@aws-sdk/credential-provider-node": "3.972.84",
     "@aws-sdk/s3-request-presigner": "^3.1045.0",
@@ -422,7 +460,7 @@
     "@fontsource-variable/source-serif-4": "5.3.1",
     "@fontsource/ibm-plex-mono": "5.3.0",
     "@fontsource/ibm-plex-sans": "5.3.0",
-    "@kanbus/ui": "https://github.com/AnthusAI/Kanbus/releases/download/ui-v0.4.0/kanbus-ui-0.4.0.tgz",
+    "@kanbus/ui": "https://github.com/AnthusAI/Kanbus/releases/download/ui-v0.4.1/kanbus-ui-0.4.1.tgz",
     "@lezer/highlight": "^1.2.5",
     "@radix-ui/colors": "3.0.0",
     "@smithy/protocol-http": "5.4.1",
@@ -435,7 +473,7 @@
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
-    "cyclotron": "https://github.com/AnthusAI/Cyclotron/releases/download/ui-v0.2.2/cyclotron-0.2.2.tgz",
+    "cyclotron": "https://github.com/AnthusAI/Cyclotron/releases/download/ui-v0.2.3/cyclotron-0.2.3.tgz",
     "d3": "^7.9.0",
     "esbuild": "^0.28.2",
     "framer-motion": "^14.3.0",

package/routes.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.0.0-next.5",
+  "version": "2.0.0-next.51",
   "routes": [
     {
       "file": "app/%5F_preview/[[...path]]/route.ts",
@@ -170,6 +170,196 @@
         "dynamic": "\"force-dynamic\""
       }
     },
+    {
+      "file": "app/api/newsletter/confirm/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "GET",
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/newsletter/preferences/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "GET",
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/newsletter/subscribe/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/newsletter/unsubscribe/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "GET",
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/newsroom/curation/context/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "GET"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/newsroom/curation/priming/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/newsroom/curation/publication/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/reader/comment/delete/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/reader/comment/edit/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/reader/comment/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/reader/handle/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/reader/me/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "GET"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/reader/rating/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/reader/report/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/reader/retired/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "GET"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/reader/submit/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
+    {
+      "file": "app/api/reader/vote/route.ts",
+      "hasDefault": false,
+      "exports": [
+        "POST"
+      ],
+      "config": {
+        "dynamic": "\"force-dynamic\"",
+        "runtime": "\"nodejs\""
+      }
+    },
     {
       "file": "app/api/revalidate/route.ts",
       "hasDefault": false,

package/amplify/plugins/editorial-checks/function/handler.py

@@ -1,11 +0,0 @@
-"""The editorial-checks plugin's function: routes its GraphQL fields to papyrus_content.editorial_checks."""
-
-from __future__ import annotations
-
-from typing import Any
-
-from papyrus_content.editorial_checks import GraphQLEditorialStore, Services, handle
-
-
-def handler(event: dict[str, Any], _context: Any = None) -> dict[str, Any]:
-    return handle(event["info"]["fieldName"], event.get("arguments") or {}, Services(store=GraphQLEditorialStore()))

package/amplify/plugins/editorial-checks/function/requirements.txt

@@ -1 +0,0 @@
-limatus[jev]>=0.31,<0.32

package/amplify/plugins/editorial-checks/papyrus.plugin.js

@@ -1,50 +0,0 @@
-import { secret } from "@aws-amplify/backend";
-import { Stack } from "aws-cdk-lib";
-import { Effect, PolicyStatement } from "aws-cdk-lib/aws-iam";
-import { editorialChecks } from "./function/resource.js";
-import { editorialChecksSchemaDefinitions } from "./schema.js";
-export const EDITORIAL_CHECKS_QUERIES = ["checkEditorial", "suggestEditorialRewrite", "draftEditorialQuestions", "tryEditorialPolicy"];
-export const EDITORIAL_CHECKS_MUTATIONS = ["importEditorialStarterPack", "recalibrateEditorialPolicies"];
-/** The model operations the function performs with its own role. */
-export const EDITORIAL_CHECKS_FUNCTION_FIELDS = [
-    "Query/fields/listEditorialPolicies",
-    "Query/fields/getEditorialCheckSettings",
-    "Query/fields/listEditorialFeedbacks",
-    "Mutation/fields/createEditorialPolicy",
-    "Mutation/fields/updateEditorialPolicy",
-];
-export const editorialChecksManifest = {
-    name: "editorial-checks",
-    contract: 1,
-    models: ["EditorialPolicy", "EditorialCheckSettings", "EditorialFeedback"],
-    mutations: [...EDITORIAL_CHECKS_QUERIES, ...EDITORIAL_CHECKS_MUTATIONS],
-    guest: { mutations: [] },
-    newsroomPanels: [{ id: "editorial-checks", label: "Editorial checks" }],
-    staticAssets: [],
-};
-export function resolveEditorialChecksConfig(request) {
-    const raw = typeof request === "string" ? { name: request } : request;
-    const unknown = Object.keys(raw).filter((key) => key !== "name");
-    if (unknown.length > 0)
-        throw new Error(`Unknown editorial-checks plugin settings: ${unknown.join(", ")} (runtime settings are edited in the newsroom)`);
-    return {};
-}
-export const editorialChecksPlugin = {
-    manifest: editorialChecksManifest,
-    resolveConfig: resolveEditorialChecksConfig,
-    functions: () => ({ editorialChecks }),
-    schemaDefinitions: editorialChecksSchemaDefinitions,
-    publicSettings: () => ({ contract: editorialChecksManifest.contract }),
-    wire(backend, _config, context) {
-        const lambda = backend.editorialChecks.resources.lambda;
-        const stack = Stack.of(lambda);
-        lambda.addEnvironment("PAPYRUS_GRAPHQL_ENDPOINT", context.graphqlEndpoint);
-        backend.editorialChecks.addEnvironment("TYPESAFE_API_KEY", secret("TYPESAFE_API_KEY"));
-        backend.editorialChecks.addEnvironment("OPENAI_API_KEY", secret("OPENAI_API_KEY"));
-        lambda.addToRolePolicy(new PolicyStatement({
-            effect: Effect.ALLOW,
-            actions: ["appsync:GraphQL"],
-            resources: EDITORIAL_CHECKS_FUNCTION_FIELDS.map((field) => `arn:aws:appsync:${stack.region}:${stack.account}:apis/${context.graphqlApiId}/types/${field}`),
-        }));
-    },
-};

package/amplify/plugins/editorial-checks/papyrus.plugin.ts

@@ -1,63 +0,0 @@
-import { secret } from "@aws-amplify/backend";
-import { Stack } from "aws-cdk-lib";
-import { Effect, PolicyStatement } from "aws-cdk-lib/aws-iam";
-import type { Function as LambdaFunction } from "aws-cdk-lib/aws-lambda";
-import type { PapyrusPlugin, PluginManifest, PluginRequest, PluginWiringContext } from "../types";
-import { editorialChecks } from "./function/resource";
-import { editorialChecksSchemaDefinitions } from "./schema";
-
-/** Runtime settings (lanes, models, deadline) live in EditorialCheckSettings, edited in the newsroom; enabling the plugin takes no options. */
-export type EditorialChecksPluginConfig = Record<string, never>;
-
-export const EDITORIAL_CHECKS_QUERIES = ["checkEditorial", "suggestEditorialRewrite", "draftEditorialQuestions", "tryEditorialPolicy"];
-export const EDITORIAL_CHECKS_MUTATIONS = ["importEditorialStarterPack", "recalibrateEditorialPolicies"];
-
-/** The model operations the function performs with its own role. */
-export const EDITORIAL_CHECKS_FUNCTION_FIELDS = [
-  "Query/fields/listEditorialPolicies",
-  "Query/fields/getEditorialCheckSettings",
-  "Query/fields/listEditorialFeedbacks",
-  "Mutation/fields/createEditorialPolicy",
-  "Mutation/fields/updateEditorialPolicy",
-];
-
-export const editorialChecksManifest: PluginManifest = {
-  name: "editorial-checks",
-  contract: 1,
-  models: ["EditorialPolicy", "EditorialCheckSettings", "EditorialFeedback"],
-  mutations: [...EDITORIAL_CHECKS_QUERIES, ...EDITORIAL_CHECKS_MUTATIONS],
-  guest: { mutations: [] },
-  newsroomPanels: [{ id: "editorial-checks", label: "Editorial checks" }],
-  staticAssets: [],
-};
-
-export function resolveEditorialChecksConfig(request: PluginRequest): EditorialChecksPluginConfig {
-  const raw = typeof request === "string" ? { name: request } : request;
-  const unknown = Object.keys(raw).filter((key) => key !== "name");
-  if (unknown.length > 0) throw new Error(`Unknown editorial-checks plugin settings: ${unknown.join(", ")} (runtime settings are edited in the newsroom)`);
-  return {};
-}
-
-export const editorialChecksPlugin: PapyrusPlugin<EditorialChecksPluginConfig, { editorialChecks: typeof editorialChecks }> = {
-  manifest: editorialChecksManifest,
-  resolveConfig: resolveEditorialChecksConfig,
-  functions: () => ({ editorialChecks }),
-  schemaDefinitions: editorialChecksSchemaDefinitions,
-  publicSettings: () => ({ contract: editorialChecksManifest.contract }),
-  wire(backend, _config, context: PluginWiringContext) {
-    const lambda = backend.editorialChecks.resources.lambda as LambdaFunction;
-    const stack = Stack.of(lambda);
-    lambda.addEnvironment("PAPYRUS_GRAPHQL_ENDPOINT", context.graphqlEndpoint);
-    backend.editorialChecks.addEnvironment("TYPESAFE_API_KEY", secret("TYPESAFE_API_KEY"));
-    backend.editorialChecks.addEnvironment("OPENAI_API_KEY", secret("OPENAI_API_KEY"));
-    lambda.addToRolePolicy(
-      new PolicyStatement({
-        effect: Effect.ALLOW,
-        actions: ["appsync:GraphQL"],
-        resources: EDITORIAL_CHECKS_FUNCTION_FIELDS.map(
-          (field) => `arn:aws:appsync:${stack.region}:${stack.account}:apis/${context.graphqlApiId}/types/${field}`,
-        ),
-      }),
-    );
-  },
-};