@anthusai/papyrus 2.0.0-next.6 → 2.0.0-next.61

package/app/api/newsletter/subscribe/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleNewsletterSubscribe } from "../../../../lib/newsletter-api";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function POST(request: NextRequest) {
+  return handleNewsletterSubscribe(request);
+}

package/app/api/newsletter/unsubscribe/route.ts

@@ -0,0 +1,13 @@
+import type { NextRequest } from "next/server";
+import { handleNewsletterUnsubscribe } from "../../../../lib/newsletter-api";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function GET(request: NextRequest) {
+  return handleNewsletterUnsubscribe(request);
+}
+
+export function POST(request: NextRequest) {
+  return handleNewsletterUnsubscribe(request);
+}

package/app/api/newsroom/curation/context/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleCurationRoute } from "../../../../../lib/curation-routes";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function GET(request: NextRequest) {
+  return handleCurationRoute(request, "context");
+}

package/app/api/newsroom/curation/priming/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleCurationRoute } from "../../../../../lib/curation-routes";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function POST(request: NextRequest) {
+  return handleCurationRoute(request, "priming");
+}

package/app/api/newsroom/curation/publication/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleCurationRoute } from "../../../../../lib/curation-routes";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function POST(request: NextRequest) {
+  return handleCurationRoute(request, "publication");
+}

package/app/api/reader/comment/delete/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleReaderRequest } from "../../../../../lib/reader-api";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function POST(request: NextRequest) {
+  return handleReaderRequest(request, "comment-delete");
+}

package/app/api/reader/comment/edit/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleReaderRequest } from "../../../../../lib/reader-api";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function POST(request: NextRequest) {
+  return handleReaderRequest(request, "comment-edit");
+}

package/app/api/reader/comment/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleReaderRequest } from "../../../../lib/reader-api";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function POST(request: NextRequest) {
+  return handleReaderRequest(request, "comment");
+}

package/app/api/reader/handle/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleReaderRequest } from "../../../../lib/reader-api";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function POST(request: NextRequest) {
+  return handleReaderRequest(request, "handle");
+}

package/app/api/reader/me/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleReaderRequest } from "../../../../lib/reader-api";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function GET(request: NextRequest) {
+  return handleReaderRequest(request, "me");
+}

package/app/api/reader/rating/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleReaderRequest } from "../../../../lib/reader-api";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function POST(request: NextRequest) {
+  return handleReaderRequest(request, "rating");
+}

package/app/api/reader/report/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleReaderRequest } from "../../../../lib/reader-api";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function POST(request: NextRequest) {
+  return handleReaderRequest(request, "report");
+}

package/app/api/reader/retired/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleReaderRetiredSubjects } from "../../../../lib/reader-retirement-route";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function GET(request: NextRequest) {
+  return handleReaderRetiredSubjects(request);
+}

package/app/api/reader/submit/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleReaderRequest } from "../../../../lib/reader-api";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function POST(request: NextRequest) {
+  return handleReaderRequest(request, "submit");
+}

package/app/api/reader/vote/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleReaderRequest } from "../../../../lib/reader-api";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function POST(request: NextRequest) {
+  return handleReaderRequest(request, "vote");
+}

package/bin/papyrus-infra.mjs

@@ -19,6 +19,7 @@ const USAGE = [
   "       papyrus-infra synth --account-stack github-oidc [--out cdk.out] [--account A] [--region R]",
   "       papyrus-infra print-buildspec --site infra/site.json --app cms-production|cms-staging|reader",
   "       papyrus-infra deploy-edge --stack NAME --template FILE [--adoption-template FILE --adopt-resources FILE] [--parameter KEY=VALUE]... [--delete-function NAME] [--only-branch main] [--only-app-id ID] [--region R]",
+  "       papyrus-infra compile-edge-function --static-dir web [--out FILE]",
   "       papyrus-infra deploy --site infra/site.json [--only-branch main] [--only-app-id ID] [--out cdk.out] [--account A] [--region R]",
 ].join("\n");
 
@@ -36,11 +37,29 @@ const resolveEnvironmentOrExit = () => {
   }
 };
 const command = args[0];
-if (command !== "synth" && command !== "print-buildspec" && command !== "deploy" && command !== "deploy-edge") {
+if (command !== "synth" && command !== "print-buildspec" && command !== "deploy" && command !== "deploy-edge" && command !== "compile-edge-function") {
   console.error(USAGE);
   process.exit(command ? 1 : 0);
 }
 
+if (command === "compile-edge-function") {
+  // The viewer-request CloudFront Function with the site's projection.json rules compiled in: for an edge stack that is
+  // not deployed by the CMS backend, so that no site writes its own redirect function.
+  const staticDir = opt("static-dir");
+  if (!staticDir) {
+    console.error(USAGE);
+    process.exit(1);
+  }
+  const { compileRedirectFunctionSource, readEdgeConfig } = await import("../amplify/publication/redirect-rules.js");
+  const functionSource = fs.readFileSync(new URL("../amplify/publication/redirect-and-index.js", import.meta.url), "utf8");
+  const config = readEdgeConfig(staticDir);
+  const compiled = compileRedirectFunctionSource(functionSource, config.rules, { negotiateMarkdown: config.negotiateMarkdown, directoryTwins: config.directoryTwins });
+  const out = opt("out");
+  if (out) fs.writeFileSync(path.resolve(out), compiled);
+  else process.stdout.write(compiled);
+  process.exit(0);
+}
+
 if (command === "deploy-edge") {
   const buildAppId = process.env.AWS_APP_ID;
   const buildBranch = process.env.AWS_BRANCH;

package/components/editorial-checks-admin-panel.tsx

@@ -12,6 +12,7 @@ import {
   draftQuestions,
   importStarterPack,
   listPolicies,
+  listStarterPacks,
   loadSettings,
   recalibrate,
   savePolicy,
@@ -19,9 +20,9 @@ import {
   tryPolicy,
   type EditorialPolicyRecord,
   type EditorialSettings,
+  type StarterPackSummary,
 } from "../lib/editorial-checks-client";
 
-const STARTER_PACK = "ai-writing-tells";
 const POLICY_KEY = /^[a-z0-9][a-z0-9._-]*$/;
 
 type Draft = {
@@ -63,8 +64,8 @@ function lines(text: string): string[] {
   return text.split("\n").map((line) => line.trim()).filter(Boolean);
 }
 
-/** The policy as Limatus sees it (its key is the policy id). Throws on invalid detector JSON. */
-function limatusPolicy(draft: Draft): Record<string, unknown> {
+/** The policy as Humanus sees it (its key is the policy id). Throws on invalid detector JSON. */
+function humanusPolicy(draft: Draft): Record<string, unknown> {
   const detectors = JSON.parse(draft.detectorsText || "[]") as unknown;
   if (!Array.isArray(detectors)) throw new Error("Detectors must be a JSON list.");
   const violates = lines(draft.violatesText);
@@ -87,6 +88,8 @@ export function EditorialChecksAdminPanel() {
   const [settings, setSettings] = useState<EditorialSettings>(DEFAULT_EDITORIAL_SETTINGS);
   const [settingsExist, setSettingsExist] = useState(false);
   const [draft, setDraft] = useState<Draft | null>(null);
+  const [starterPacks, setStarterPacks] = useState<StarterPackSummary[]>([]);
+  const [starterPack, setStarterPack] = useState<string>("");
   const [message, setMessage] = useState<string | null>(null);
   const [working, setWorking] = useState<string | null>(null);
   const [tryText, setTryText] = useState("");
@@ -94,7 +97,9 @@ export function EditorialChecksAdminPanel() {
 
   const refresh = useCallback(async () => {
     try {
-      const [loadedPolicies, loadedSettings] = await Promise.all([listPolicies(), loadSettings()]);
+      const [loadedPolicies, loadedSettings, catalog] = await Promise.all([listPolicies(), loadSettings(), listStarterPacks()]);
+      setStarterPacks(catalog.packs);
+      setStarterPack((current) => current || catalog.packs[0]?.name || "");
       setPolicies(loadedPolicies);
       setSettings(loadedSettings.settings);
       setSettingsExist(loadedSettings.exists);
@@ -128,7 +133,7 @@ export function EditorialChecksAdminPanel() {
       const key = draft.record.policyKey.trim();
       if (!POLICY_KEY.test(key)) throw new Error("The key must be lowercase letters, digits, dots, hyphens or underscores.");
       if (!draft.record.title.trim() || !draft.record.guidance.trim()) throw new Error("A policy needs a title and guidance.");
-      const policy = limatusPolicy(draft);
+      const policy = humanusPolicy(draft);
       const record: EditorialPolicyRecord = {
         ...draft.record,
         id: draft.isNew ? `${draft.record.scope}#${key}` : draft.record.id,
@@ -157,19 +162,38 @@ export function EditorialChecksAdminPanel() {
       <h4>Policies</h4>
       <div className="flex flex-wrap gap-2">
         <Button onClick={() => { setDraft(draftFrom(emptyPolicy(), true)); setTryResult(null); }} size="sm" type="button">New policy</Button>
+        <select aria-label="Starter pack" onChange={(event) => setStarterPack(event.target.value)} value={starterPack}>
+          {starterPacks.map((pack) => (
+            <option key={pack.name} value={pack.name}>
+              {pack.title} ({pack.importedCount} of {pack.policyCount} added)
+            </option>
+          ))}
+        </select>
         <Button
-          disabled={working !== null}
+          disabled={working !== null || !starterPack}
           onClick={() => run("import", async () => {
-            const outcome = await importStarterPack(STARTER_PACK);
+            const outcome = await importStarterPack(starterPack);
             await refresh();
-            return `Starter pack: ${outcome.created} policies added, ${outcome.skipped} already present.`;
+            const label = starterPacks.find((pack) => pack.name === starterPack)?.title ?? starterPack;
+            return `${label}: ${outcome.created} policies added, ${outcome.skipped} already present.`;
           })}
           size="sm"
           type="button"
           variant="outline"
         >
-          Add AI-writing tells starter pack
+          Add starter pack
         </Button>
+      </div>
+      {(() => {
+        const selected = starterPacks.find((pack) => pack.name === starterPack);
+        return selected ? (
+          <p className="text-sm text-muted-foreground">
+            {selected.title}{selected.version ? ` ${selected.version}` : ""}: {selected.policyCount} policies
+            {selected.isDefault ? " (added to every new site)" : ""}. {selected.guidance}
+          </p>
+        ) : null;
+      })()}
+      <div className="flex flex-wrap gap-2">
         <Button
           disabled={working !== null}
           onClick={() => run("recalibrate", async () => {
@@ -243,7 +267,7 @@ export function EditorialChecksAdminPanel() {
           <label>Examples that break it (one per line) <Textarea onChange={(event) => setDraft({ ...draft, violatesText: event.target.value })} rows={3} value={draft.violatesText} /></label>
           <label>Examples that follow it (one per line) <Textarea onChange={(event) => setDraft({ ...draft, compliesText: event.target.value })} rows={3} value={draft.compliesText} /></label>
           <label>
-            Detectors (JSON; see <code>limatus schema policy-pack-v1</code>)
+            Detectors (JSON; see <code>humanus schema policy-pack-v1</code>)
             <Textarea className="font-mono text-xs" onChange={(event) => setDraft({ ...draft, detectorsText: event.target.value })} rows={10} value={draft.detectorsText} />
           </label>
           <div className="flex flex-wrap gap-2">
@@ -284,7 +308,7 @@ export function EditorialChecksAdminPanel() {
             <Button
               disabled={working !== null || !tryText.trim()}
               onClick={() => run("try", async () => {
-                setTryResult(await tryPolicy(limatusPolicy(draft), tryText));
+                setTryResult(await tryPolicy(humanusPolicy(draft), tryText));
               })}
               size="sm"
               type="button"
@@ -320,6 +344,7 @@ export function EditorialChecksAdminPanel() {
           });
         }}
       >
+        <label><input checked={settings.enabled} data-editorial-enabled onChange={(event) => setSettings({ ...settings, enabled: event.target.checked })} type="checkbox" /> Run editorial checks for this publication (turning this off stops checks and rewrites; policies are kept)</label>
         <label><input checked={settings.lanes.rules} onChange={(event) => setSettings({ ...settings, lanes: { ...settings.lanes, rules: event.target.checked } })} type="checkbox" /> Rule checks</label>
         <label><input checked={settings.lanes.classifier} onChange={(event) => setSettings({ ...settings, lanes: { ...settings.lanes, classifier: event.target.checked } })} type="checkbox" /> Judgment checks (decision model)</label>
         <label><input checked={settings.checkWhileTyping} onChange={(event) => setSettings({ ...settings, checkWhileTyping: event.target.checked })} type="checkbox" /> Check while editors type (after a short pause)</label>

package/components/moderation-panel.tsx

@@ -0,0 +1,248 @@
+"use client";
+
+import { generateClient } from "aws-amplify/data";
+import amplifyOutputs from "papyrus-amplify-outputs";
+import { useCallback, useEffect, useMemo, useState } from "react";
+import { pluginSettings, type PluginOutputs } from "../lib/plugin-settings";
+import {
+  buildActionLog,
+  buildHidden,
+  buildQueue,
+  moderationModeText,
+  receiptMessage,
+  shortReader,
+  type ActionEntry,
+  type ActionRow,
+  type CommentRow,
+  type ModerationActionName,
+  type ModerationRow,
+  type ModerationTarget,
+  type Receipt,
+  type ReportRow,
+  type SubmissionRow,
+} from "../lib/reader-moderation";
+
+const SUBMISSION_FIELDS = "id canonicalUrl domain title kind note readerId state moderation reportCount signals itemId createdAt";
+const COMMENT_FIELDS = "id subjectKey readerId body parentId state moderation reportCount signals createdAt";
+
+const QUEUE_SUBMISSIONS = `query Queue($nextToken: String) { listReaderSubmissionsByModerationAndCreatedAt(moderation: "new", sortDirection: DESC, limit: 100, nextToken: $nextToken) { items { ${SUBMISSION_FIELDS} } nextToken } }`;
+const QUEUE_COMMENTS = `query Queue($nextToken: String) { listReaderCommentsByModerationAndCreatedAt(moderation: "new", sortDirection: DESC, limit: 100, nextToken: $nextToken) { items { ${COMMENT_FIELDS} } nextToken } }`;
+const HIDDEN_SUBMISSIONS = `query Hidden($nextToken: String) { listReaderSubmissions(filter: { state: { eq: "hidden" } }, limit: 500, nextToken: $nextToken) { items { ${SUBMISSION_FIELDS} } nextToken } }`;
+const HIDDEN_COMMENTS = `query Hidden($nextToken: String) { listReaderComments(filter: { state: { eq: "hidden" } }, limit: 500, nextToken: $nextToken) { items { ${COMMENT_FIELDS} } nextToken } }`;
+const OPEN_REPORTS = `query Reports($nextToken: String) { listReaderReports(filter: { state: { eq: "open" } }, limit: 500, nextToken: $nextToken) { items { id targetType target reporterReaderId reason state createdAt } nextToken } }`;
+const ACTIONS = `query Actions($nextToken: String) { listModerationActions(limit: 500, nextToken: $nextToken) { items { id by actorSub action targetType target reason fromState toState undoOf undoneBy at } nextToken } }`;
+const HANDLES = `query Handles($nextToken: String) { listReaderHandles(limit: 1000, nextToken: $nextToken) { items { id readerId } nextToken } }`;
+const MODERATE = `mutation Moderate($action: String!, $targetType: String!, $target: String!, $reason: String, $undoOf: String) { moderateReader(action: $action, targetType: $targetType, target: $target, reason: $reason, undoOf: $undoOf) { status id error message } }`;
+
+type GraphResult = { data?: Record<string, { items: unknown[]; nextToken?: string | null } | Receipt | null>; errors?: { message?: string }[] };
+const MAXIMUM_PAGES = 20;
+
+async function loadAll<T>(query: string, field: string): Promise<T[]> {
+  const client = generateClient({ authMode: "userPool" });
+  const rows: T[] = [];
+  let nextToken: string | null | undefined;
+  for (let page = 0; page < MAXIMUM_PAGES; page += 1) {
+    const result = (await client.graphql({ query, variables: { nextToken } })) as GraphResult;
+    if (result.errors?.length) throw new Error(result.errors[0]?.message ?? "Could not load moderation data.");
+    const connection = result.data?.[field] as { items: T[]; nextToken?: string | null } | undefined;
+    rows.push(...(connection?.items ?? []).filter(Boolean));
+    nextToken = connection?.nextToken;
+    if (!nextToken) break;
+  }
+  return rows;
+}
+
+async function moderate(variables: Record<string, string | undefined>): Promise<Receipt> {
+  const client = generateClient({ authMode: "userPool" });
+  const result = (await client.graphql({ query: MODERATE, variables })) as GraphResult;
+  if (result.errors?.length) return { status: "refused", message: result.errors[0]?.message ?? "The action failed." };
+  return (result.data?.moderateReader as Receipt | null) ?? { status: "refused", message: "The action did not answer." };
+}
+
+export type ModerationViewProps = {
+  mode: unknown;
+  queue: ModerationRow[];
+  hidden: ModerationRow[];
+  log: ActionEntry[];
+  tab: "queue" | "hidden" | "log";
+  busy: boolean;
+  status: string;
+  reason: string;
+  onTab: (tab: "queue" | "hidden" | "log") => void;
+  onReason: (reason: string) => void;
+  onAction: (action: ModerationActionName, targetType: ModerationTarget, target: string, undoOf?: string) => void;
+  onRefresh: () => void;
+};
+
+function Row({ row, busy, onAction, listed }: { row: ModerationRow; busy: boolean; onAction: ModerationViewProps["onAction"]; listed: "queue" | "hidden" }) {
+  const kind = row.kind === "submission" ? "Submission" : "Comment";
+  return (
+    <li data-moderation-row={row.id}>
+      <article aria-label={`${kind} by ${shortReader(row.readerId, row.handle)}`}>
+        <p>
+          <strong>{kind}</strong> by {shortReader(row.readerId, row.handle)} <time dateTime={row.createdAt}>{row.createdAt}</time> ({row.state}
+          {row.reports.length > 0 ? `, ${row.reports.length} ${row.reports.length === 1 ? "report" : "reports"}` : ""})
+        </p>
+        {row.kind === "submission" ? (
+          <p>
+            {row.url ? (
+              <a href={row.url} target="_blank" rel="noopener noreferrer nofollow">{row.title}</a>
+            ) : (
+              <span>{row.title}</span>
+            )}
+          </p>
+        ) : null}
+        {row.text ? <p style={{ whiteSpace: "pre-wrap", overflowWrap: "anywhere" }}>{row.text}</p> : null}
+        {row.signals.length > 0 ? (
+          <ul aria-label="Automatic signals">
+            {row.signals.map((signal, index) => (
+              <li key={`${signal.detector}-${index}`}>Signal ({signal.severity}): {signal.policy} / {signal.detector}{signal.excerpt ? ` — “${signal.excerpt}”` : ""}</li>
+            ))}
+          </ul>
+        ) : null}
+        {row.reports.length > 0 ? (
+          <ul aria-label="Reports">
+            {row.reports.map((report) => (
+              <li key={report.id}>Reported: {report.reason}</li>
+            ))}
+          </ul>
+        ) : null}
+        <p>
+          {listed === "queue" ? (
+            <button type="button" disabled={busy} onClick={() => onAction("approve", row.kind, row.id)}>Approve</button>
+          ) : (
+            <button type="button" disabled={busy} onClick={() => onAction("unhide", row.kind, row.id)}>Show again</button>
+          )}{" "}
+          {row.state !== "hidden" ? <button type="button" disabled={busy} onClick={() => onAction("hide", row.kind, row.id)}>Hide</button> : null}{" "}
+          {row.canPromote ? <button type="button" disabled={busy} onClick={() => onAction("promote", row.kind, row.id)}>Promote to a draft</button> : null}{" "}
+          <button type="button" disabled={busy} onClick={() => onAction("ban", "reader", row.readerId)}>Ban reader</button>{" "}
+          <button type="button" disabled={busy} onClick={() => onAction("limit", "reader", row.readerId)}>Limit reader</button>
+        </p>
+      </article>
+    </li>
+  );
+}
+
+export function ModerationView(props: ModerationViewProps) {
+  const { queue, hidden, log, tab, busy } = props;
+  return (
+    <section aria-labelledby="newsroom-moderation-title" data-news-desk-admin-panel="moderation">
+      <h3 id="newsroom-moderation-title">Moderation</h3>
+      <p>{moderationModeText(props.mode)} Only editors and admins can see this.</p>
+      <p role="tablist" aria-label="Moderation views">
+        <button type="button" role="tab" aria-selected={tab === "queue"} onClick={() => props.onTab("queue")}>Queue ({queue.length})</button>{" "}
+        <button type="button" role="tab" aria-selected={tab === "hidden"} onClick={() => props.onTab("hidden")}>Hidden ({hidden.length})</button>{" "}
+        <button type="button" role="tab" aria-selected={tab === "log"} onClick={() => props.onTab("log")}>Recent actions</button>{" "}
+        <button type="button" onClick={props.onRefresh} disabled={busy}>Refresh</button>
+      </p>
+      <label>
+        Reason for the next action (optional){" "}
+        <input type="text" value={props.reason} maxLength={500} onChange={(event) => props.onReason(event.target.value)} />
+      </label>
+      <p role="status" aria-live="polite">{props.status}</p>
+      {tab === "queue" ? (
+        queue.length === 0 ? <p>Nothing is waiting for a decision.</p> : <ul>{queue.map((row) => <Row key={row.id} row={row} busy={busy} onAction={props.onAction} listed="queue" />)}</ul>
+      ) : null}
+      {tab === "hidden" ? (
+        hidden.length === 0 ? <p>Nothing is hidden.</p> : <ul>{hidden.map((row) => <Row key={row.id} row={row} busy={busy} onAction={props.onAction} listed="hidden" />)}</ul>
+      ) : null}
+      {tab === "log" ? (
+        log.length === 0 ? <p>No moderation actions yet.</p> : (
+          <table>
+            <thead>
+              <tr><th scope="col">When</th><th scope="col">Action</th><th scope="col">Target</th><th scope="col">By</th><th scope="col">Reason</th><th scope="col"><span>Undo</span></th></tr>
+            </thead>
+            <tbody>
+              {log.map((entry) => (
+                <tr key={entry.id}>
+                  <td>{entry.at}</td>
+                  <td>{entry.label} ({entry.fromState} to {entry.toState}){entry.undoneBy ? ", undone" : ""}</td>
+                  <td>{entry.targetType} {entry.target.slice(0, 12)}</td>
+                  <td>{entry.byLabel}</td>
+                  <td>{entry.reason}</td>
+                  <td>
+                    {entry.undoable ? (
+                      <button type="button" disabled={busy} onClick={() => props.onAction("undo", entry.targetType as ModerationTarget, entry.target, entry.id)}>Undo</button>
+                    ) : null}
+                  </td>
+                </tr>
+              ))}
+            </tbody>
+          </table>
+        )
+      ) : null}
+    </section>
+  );
+}
+
+export function ModerationPanel() {
+  const mode = useMemo(() => pluginSettings(amplifyOutputs as PluginOutputs, "reader-steering")?.moderation, []);
+  const [tab, setTab] = useState<"queue" | "hidden" | "log">("queue");
+  const [data, setData] = useState<{ queue: ModerationRow[]; hidden: ModerationRow[]; log: ActionEntry[] } | null>(null);
+  const [status, setStatus] = useState("Loading...");
+  const [busy, setBusy] = useState(false);
+  const [reason, setReason] = useState("");
+
+  const refresh = useCallback(async (quiet = false) => {
+    setBusy(true);
+    try {
+      const [newSubmissions, newComments, hiddenSubmissions, hiddenComments, reports, actions, handleRows] = await Promise.all([
+        loadAll<SubmissionRow>(QUEUE_SUBMISSIONS, "listReaderSubmissionsByModerationAndCreatedAt"),
+        loadAll<CommentRow>(QUEUE_COMMENTS, "listReaderCommentsByModerationAndCreatedAt"),
+        loadAll<SubmissionRow>(HIDDEN_SUBMISSIONS, "listReaderSubmissions"),
+        loadAll<CommentRow>(HIDDEN_COMMENTS, "listReaderComments"),
+        loadAll<ReportRow>(OPEN_REPORTS, "listReaderReports"),
+        loadAll<ActionRow>(ACTIONS, "listModerationActions"),
+        loadAll<{ id: string; readerId: string }>(HANDLES, "listReaderHandles"),
+      ]);
+      const handles = Object.fromEntries(handleRows.map((row) => [row.readerId, row.id]));
+      setData({
+        queue: buildQueue({ submissions: newSubmissions, comments: newComments, reports, handles }),
+        hidden: buildHidden({ submissions: hiddenSubmissions, comments: hiddenComments, reports, handles }),
+        log: buildActionLog(actions),
+      });
+      if (!quiet) setStatus("");
+    } catch (error) {
+      setStatus(`Error: ${error instanceof Error ? error.message : "Could not load moderation data."}`);
+    } finally {
+      setBusy(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    void refresh();
+  }, [refresh]);
+
+  const onAction = useCallback(
+    async (action: ModerationActionName, targetType: ModerationTarget, target: string, undoOf?: string) => {
+      setBusy(true);
+      setStatus("Working...");
+      try {
+        const receipt = await moderate({ action, targetType, target, ...(reason.trim() ? { reason: reason.trim() } : {}), ...(undoOf ? { undoOf } : {}) });
+        setStatus(receiptMessage(receipt));
+        if (receipt.status === "ok") setReason("");
+      } catch (error) {
+        setStatus(`Error: ${error instanceof Error ? error.message : "The action failed."}`);
+      }
+      await refresh(true);
+    },
+    [reason, refresh],
+  );
+
+  return (
+    <ModerationView
+      mode={mode}
+      queue={data?.queue ?? []}
+      hidden={data?.hidden ?? []}
+      log={data?.log ?? []}
+      tab={tab}
+      busy={busy}
+      status={status}
+      reason={reason}
+      onTab={setTab}
+      onReason={setReason}
+      onAction={(action, targetType, target, undoOf) => void onAction(action, targetType, target, undoOf)}
+      onRefresh={() => void refresh()}
+    />
+  );
+}