@anthusai/papyrus 2.0.0-next.8 → 2.0.0-next.80

package/amplify/data/schema.ts

@@ -1,13 +1,18 @@
 import { type ClientSchema, a } from "@aws-amplify/backend";
 import { assignmentAction } from "../functions/assignment-action/resource";
 import { categoryAction } from "../functions/category-action/resource";
+import { editorialChecksSchemaDefinitions } from "../functions/editorial-checks/schema";
+import { automationViewSchemaDefinitions } from "../functions/automation-view/schema";
+import { monitoringViewSchemaDefinitions } from "../functions/monitoring-view/schema";
 import { contentActions } from "../functions/content-actions/resource";
 import { knowledgeQuery } from "../functions/knowledge-query/resource";
 import { manageUserRole } from "../functions/manage-user-role/resource";
 import { modelAttachmentUpload } from "../functions/model-attachment-upload/resource";
 import { newsroomSummary } from "../functions/newsroom-summary/resource";
+import { publicForms } from "../functions/public-forms/resource";
 import { procedureAction } from "../functions/procedure-action/resource";
 import { readerSettings } from "../functions/reader-settings/resource";
+import { functionHandler } from "./function-handler";
 
 const authoringOperations: ("read" | "create" | "update" | "delete")[] = [
   "read",
@@ -23,7 +28,27 @@ const modelWithoutSubscriptions = <Fields extends Parameters<typeof a.model>[0]>
   a.model(fields).disableOperations(["subscriptions"]);
 const realtimeModel = <Fields extends Parameters<typeof a.model>[0]>(fields: Fields) => a.model(fields);
 
-const baseDefinitions = {
+/**
+ * Model groups a site may leave out of its data API. CloudFormation creates at most 2,500 resources in one stack
+ * operation, nested stacks included, and the full model set exceeds that on a fresh create. A first deploy that
+ * excludes a group fits; a second deploy without the exclusion adds the models as an ordinary update.
+ */
+export const OPTIONAL_MODEL_GROUPS = {
+  editions: ["Edition", "EditionItem", "PublishedEdition", "PublishedEditionItem"],
+} as const;
+
+export type OptionalModelGroup = keyof typeof OPTIONAL_MODEL_GROUPS;
+
+export function assertKnownModelGroups(groups: readonly string[]): asserts groups is readonly OptionalModelGroup[] {
+  for (const group of groups) {
+    if (!(group in OPTIONAL_MODEL_GROUPS)) {
+      throw new Error(`Unknown model group "${group}"; known groups: ${Object.keys(OPTIONAL_MODEL_GROUPS).join(", ")}`);
+    }
+  }
+}
+
+function buildBaseDefinitions(includeEditions: boolean) {
+const definitions = {
   UserProfile: modelWithoutSubscriptions({
       id: a.id().required(),
       email: a.email(),
@@ -138,7 +163,7 @@ const baseDefinitions = {
     .query()
     .returns(a.ref("UserDirectoryResult"))
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(manageUserRole)),
+    .handler(functionHandler("manageUserRole", manageUserRole)),
 
   grantUserRole: a
     .mutation()
@@ -150,7 +175,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("UserRoleMutationResult"))
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(manageUserRole)),
+    .handler(functionHandler("manageUserRole", manageUserRole)),
 
   revokeUserRole: a
     .mutation()
@@ -162,7 +187,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("UserRoleMutationResult"))
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(manageUserRole)),
+    .handler(functionHandler("manageUserRole", manageUserRole)),
 
   mergeUserProfiles: a
     .mutation()
@@ -175,13 +200,13 @@ const baseDefinitions = {
     })
     .returns(a.ref("UserDirectoryEntry"))
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(manageUserRole)),
+    .handler(functionHandler("manageUserRole", manageUserRole)),
 
   getReaderSettings: a
     .query()
     .returns(a.ref("ReaderSettingsResult"))
     .authorization((allow) => [allow.authenticated()])
-    .handler(a.handler.function(readerSettings)),
+    .handler(functionHandler("readerSettings", readerSettings)),
 
   updateReaderSettings: a
     .mutation()
@@ -190,7 +215,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("ReaderSettingsResult"))
     .authorization((allow) => [allow.authenticated()])
-    .handler(a.handler.function(readerSettings)),
+    .handler(functionHandler("readerSettings", readerSettings)),
 
   SteeringActionResult: a.customType({
     ok: a.boolean().required(),
@@ -220,7 +245,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("SteeringActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   CurationDelegationResult: a.customType({
     ok: a.boolean().required(),
@@ -307,7 +332,7 @@ const baseDefinitions = {
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   createCurationDelegation: a
     .mutation()
@@ -319,7 +344,7 @@ const baseDefinitions = {
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   revokeCurationDelegation: a
     .mutation()
@@ -330,7 +355,7 @@ const baseDefinitions = {
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   listCurationDelegations: a
     .query()
@@ -338,7 +363,7 @@ const baseDefinitions = {
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   requestCurationDelegation: a
     .mutation()
@@ -352,7 +377,7 @@ const baseDefinitions = {
     .authorization((allow) => [
       allow.authenticated("identityPool"),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   approveCurationDelegation: a
     .mutation()
@@ -363,7 +388,7 @@ const baseDefinitions = {
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   denyCurationDelegation: a
     .mutation()
@@ -374,7 +399,7 @@ const baseDefinitions = {
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   getCurationDelegationStatus: a
     .query()
@@ -385,7 +410,7 @@ const baseDefinitions = {
     .authorization((allow) => [
       allow.authenticated("identityPool"),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   recordDelegatedCuration: a
     .mutation()
@@ -407,7 +432,7 @@ const baseDefinitions = {
     .authorization((allow) => [
       allow.authenticated("identityPool"),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   setReferenceQualityRating: a
     .mutation()
@@ -422,7 +447,7 @@ const baseDefinitions = {
     .authorization((allow) => [
       allow.groups(categoryWriteGroups),
     ])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   createCategorySetDraft: a
     .mutation()
@@ -434,7 +459,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("CategorySetDraftActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   promoteCategorySetDraft: a
     .mutation()
@@ -445,7 +470,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("CategorySetDraftActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   discardCategorySetDraft: a
     .mutation()
@@ -456,7 +481,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("CategorySetDraftActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   createDraftCategory: a
     .mutation()
@@ -472,7 +497,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("SteeringActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   updateDraftCategory: a
     .mutation()
@@ -488,7 +513,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("SteeringActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   archiveDraftCategory: a
     .mutation()
@@ -499,7 +524,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("SteeringActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   reviewReferenceTopicLabel: a
     .mutation()
@@ -513,7 +538,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("TopicLabelActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(categoryAction)),
+    .handler(functionHandler("categoryAction", categoryAction)),
 
   NewsroomSummary: a.customType({
     generatedAt: a.datetime().required(),
@@ -533,42 +558,56 @@ const baseDefinitions = {
     .query()
     .returns(a.ref("NewsroomSummary"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(newsroomSummary)),
+    .handler(functionHandler("newsroomSummary", newsroomSummary)),
 
   deriveMarkus: a
     .query()
     .arguments({ input: a.json().required() })
     .returns(a.json())
     .authorization((allow) => [allow.groups(contentWriteGroups)])
-    .handler(a.handler.function(contentActions)),
+    .handler(functionHandler("contentActions", contentActions)),
+
+  intakePendingReferences: a
+    .mutation()
+    .arguments({ input: a.json().required() })
+    .returns(a.json())
+    .authorization((allow) => [allow.groups(contentWriteGroups)])
+    .handler(functionHandler("contentActions", contentActions)),
 
   saveItemDraft: a
     .mutation()
     .arguments({ input: a.json().required() })
     .returns(a.json())
     .authorization((allow) => [allow.groups(contentWriteGroups)])
-    .handler(a.handler.function(contentActions)),
+    .handler(functionHandler("contentActions", contentActions)),
 
   publishItem: a
     .mutation()
     .arguments({ input: a.json().required() })
     .returns(a.json())
     .authorization((allow) => [allow.groups(contentWriteGroups)])
-    .handler(a.handler.function(contentActions)),
+    .handler(functionHandler("contentActions", contentActions)),
+
+  moveStoryStage: a
+    .mutation()
+    .arguments({ input: a.json().required() })
+    .returns(a.json())
+    .authorization((allow) => [allow.groups(contentWriteGroups)])
+    .handler(functionHandler("contentActions", contentActions)),
 
   unpublishItem: a
     .mutation()
     .arguments({ input: a.json().required() })
     .returns(a.json())
     .authorization((allow) => [allow.groups(contentWriteGroups)])
-    .handler(a.handler.function(contentActions)),
+    .handler(functionHandler("contentActions", contentActions)),
 
   requestStagingBuild: a
     .mutation()
     .arguments({ input: a.json().required() })
     .returns(a.json())
     .authorization((allow) => [allow.groups(contentWriteGroups)])
-    .handler(a.handler.function(contentActions)),
+    .handler(functionHandler("contentActions", contentActions)),
 
   knowledgeQuery: a
     .query()
@@ -577,7 +616,7 @@ const baseDefinitions = {
     })
     .returns(a.json())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(knowledgeQuery)),
+    .handler(functionHandler("knowledgeQuery", knowledgeQuery)),
 
   updateNewsroomSummary: a
     .mutation()
@@ -588,7 +627,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("NewsroomSummary"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(newsroomSummary)),
+    .handler(functionHandler("newsroomSummary", newsroomSummary)),
 
   ModelAttachmentUploadSlot: a.customType({
     ok: a.boolean().required(),
@@ -648,7 +687,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("ModelAttachmentUploadSlot"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(modelAttachmentUpload)),
+    .handler(functionHandler("modelAttachmentUpload", modelAttachmentUpload)),
 
   completeModelAttachmentUpload: a
     .mutation()
@@ -670,7 +709,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("ModelAttachment"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(modelAttachmentUpload)),
+    .handler(functionHandler("modelAttachmentUpload", modelAttachmentUpload)),
 
   abortModelAttachmentUpload: a
     .mutation()
@@ -692,7 +731,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("ModelAttachmentUploadAbortResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(modelAttachmentUpload)),
+    .handler(functionHandler("modelAttachmentUpload", modelAttachmentUpload)),
 
   createModelAttachmentDownload: a
     .mutation()
@@ -701,7 +740,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("ModelAttachmentDownloadSlot"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(modelAttachmentUpload)),
+    .handler(functionHandler("modelAttachmentUpload", modelAttachmentUpload)),
 
   AssignmentActionResult: a.customType({
     ok: a.boolean().required(),
@@ -796,7 +835,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("AssignmentContext").array().required())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   listAssignmentQueue: a
     .query()
@@ -807,7 +846,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("AssignmentContext").array().required())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   getEditorialContext: a
     .query()
@@ -817,10 +856,11 @@ const baseDefinitions = {
       storyLineageId: a.id(),
       assignmentId: a.id(),
       maxCharacters: a.integer(),
+      optionalPublicationDoctrine: a.boolean(),
     })
     .returns(a.json().required())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   getAssignmentContext: a
     .query()
@@ -829,7 +869,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("AssignmentContext"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   claimAssignment: a
     .mutation()
@@ -846,7 +886,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("AssignmentActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   releaseAssignment: a
     .mutation()
@@ -858,7 +898,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("AssignmentActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   completeAssignment: a
     .mutation()
@@ -870,7 +910,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("AssignmentActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   cancelAssignment: a
     .mutation()
@@ -882,7 +922,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("AssignmentActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   reopenAssignment: a
     .mutation()
@@ -894,7 +934,7 @@ const baseDefinitions = {
     })
     .returns(a.ref("AssignmentActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   retryImmediateAssignment: a
     .mutation()
@@ -906,13 +946,13 @@ const baseDefinitions = {
     })
     .returns(a.ref("AssignmentActionResult"))
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(assignmentAction)),
+    .handler(functionHandler("assignmentAction", assignmentAction)),
 
   listNewsroomProcedureDefinitions: a
     .query()
     .returns(a.json())
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   getNewsroomProcedureDefinition: a
     .query()
@@ -922,7 +962,7 @@ const baseDefinitions = {
     })
     .returns(a.json())
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   saveNewsroomProcedureDefinition: a
     .mutation()
@@ -931,7 +971,7 @@ const baseDefinitions = {
     })
     .returns(a.json())
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   saveNewsroomProcedureVersionDraft: a
     .mutation()
@@ -940,7 +980,7 @@ const baseDefinitions = {
     })
     .returns(a.json())
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   publishNewsroomProcedureVersion: a
     .mutation()
@@ -949,7 +989,7 @@ const baseDefinitions = {
     })
     .returns(a.json())
     .authorization((allow) => [allow.group(adminGroup)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   startNewsroomProcedureRun: a
     .mutation()
@@ -964,7 +1004,7 @@ const baseDefinitions = {
     })
     .returns(a.json())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   getNewsroomProcedureRun: a
     .query()
@@ -973,7 +1013,7 @@ const baseDefinitions = {
     })
     .returns(a.json())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   listNewsroomProcedureRunsByProcedure: a
     .query()
@@ -982,7 +1022,7 @@ const baseDefinitions = {
     })
     .returns(a.json())
     .authorization((allow) => [allow.groups(categoryWriteGroups)])
-    .handler(a.handler.function(procedureAction)),
+    .handler(functionHandler("procedureAction", procedureAction)),
 
   Assignment: modelWithoutSubscriptions({
       id: a.id().required(),
@@ -1126,6 +1166,8 @@ const baseDefinitions = {
       error: a.json(),
       attempt: a.integer(),
       newsroomFeedKey: a.string(),
+      usage: a.json(),
+      costUsd: a.float(),
     })
     .secondaryIndexes((index) => [
       index("procedureId").sortKeys(["requestedAt"]).queryField("listProcedureRunsByProcedureAndRequestedAt"),
@@ -1138,6 +1180,74 @@ const baseDefinitions = {
       allow.group(adminGroup).to(authoringOperations),
     ]),
 
+  /** A named "when X happens, run procedure Y" (PPY-9ff95b). Step 1 mirrors the monitoring router's procedureTriggers and starts nothing itself. */
+  Automation: modelWithoutSubscriptions({
+      id: a.id().required(),
+      title: a.string().required(),
+      description: a.string(),
+      enabled: a.boolean().required(),
+      trigger: a.json().required(),
+      procedureKey: a.string().required(),
+      inputTemplate: a.json(),
+      limits: a.json(),
+      createdBy: a.string(),
+      createdAt: a.datetime().required(),
+      updatedBy: a.string(),
+      updatedAt: a.datetime().required(),
+    })
+    .authorization((allow) => [
+      allow.group("editor").to(["read", "create", "update"]),
+      allow.group(adminGroup).to(authoringOperations),
+    ]),
+
+  /** A human review point raised by a step on any item (PPY-ab6a50). Review is not a story state. */
+  ReviewRequest: modelWithoutSubscriptions({
+      id: a.id().required(),
+      subject: a.json().required(),
+      mode: a.string().required(),
+      reason: a.string().required(),
+      ask: a.string(),
+      raisedBy: a.string().required(),
+      raisedAt: a.datetime().required(),
+      deadline: a.datetime(),
+      state: a.string().required(),
+      answer: a.json(),
+      links: a.json(),
+      history: a.json(),
+      appliedIn: a.json(),
+      updatedAt: a.datetime().required(),
+    })
+    .authorization((allow) => [
+      allow.group("editor").to(["read", "create", "update"]),
+      allow.group(adminGroup).to(authoringOperations),
+    ]),
+
+  /** One user's read mark on one review request; id is "<userKey>#<requestId>". */
+  ReviewReadMark: modelWithoutSubscriptions({
+      id: a.id().required(),
+      requestId: a.string().required(),
+      userKey: a.string().required(),
+      readAt: a.datetime().required(),
+    })
+    .authorization((allow) => [
+      allow.groups(["editor", adminGroup]).to(["read", "create", "update"]),
+    ]),
+
+  /** Who is told about review requests: scope default, mode or automation. Changed by data, not code. */
+  ReviewRecipientRule: modelWithoutSubscriptions({
+      id: a.id().required(),
+      scope: a.string().required(),
+      key: a.string(),
+      roles: a.string().array(),
+      emails: a.string().array(),
+      updatedBy: a.string(),
+      updatedAt: a.datetime().required(),
+    })
+    .authorization((allow) => [
+      allow.group("editor").to(["read"]),
+      allow.group(adminGroup).to(authoringOperations),
+    ]),
+
   NewsroomSection: modelWithoutSubscriptions({
       id: a.id().required(),
       tenantId: a.string(),
@@ -1782,7 +1892,7 @@ const baseDefinitions = {
       updatedAt: a.datetime(),
       tags: a.hasMany("ItemTag", "itemId"),
       mediaAssets: a.hasMany("MediaAsset", "itemId"),
-      editionItems: a.hasMany("EditionItem", "itemId"),
+      ...(includeEditions ? { editionItems: a.hasMany("EditionItem", "itemId") } : {}),
     })
     .secondaryIndexes((index) => [
       index("lineageId").sortKeys(["versionNumber"]).queryField("listItemsByLineageAndVersion"),
@@ -2105,21 +2215,26 @@ const baseDefinitions = {
       allow.guest().to(["read"]),
       allow.groups(contentWriteGroups),
     ]),
+  ...editorialChecksSchemaDefinitions,
+  ...monitoringViewSchemaDefinitions,
+  ...automationViewSchemaDefinitions,
 };
+if (!includeEditions) {
+  const mutableDefinitions = definitions as Record<string, unknown>;
+  for (const modelName of OPTIONAL_MODEL_GROUPS.editions) delete mutableDefinitions[modelName];
+}
+return definitions;
+}
 
-export const schema = a.schema(baseDefinitions).authorization((allow) => [
-  allow.resource(assignmentAction).to(["query", "mutate"]),
-  allow.resource(categoryAction),
-  allow.resource(contentActions),
-  allow.resource(manageUserRole),
-  allow.resource(modelAttachmentUpload),
-  allow.resource(newsroomSummary),
-  allow.resource(procedureAction),
-]);
+export function baseModelNames(excludedGroups: readonly OptionalModelGroup[] = []): string[] {
+  return Object.keys(buildBaseDefinitions(!excludedGroups.includes("editions")));
+}
 
-/** The deployed schema of a site that enables plugins: the base definitions plus what each plugin contributes (docs/plugins.md). */
-export function schemaWithPlugins(pluginDefinitions: Record<string, any>) {
-  return a.schema({ ...baseDefinitions, ...pluginDefinitions } as typeof baseDefinitions).authorization((allow) => [
+const baseDefinitions = buildBaseDefinitions(true);
+
+/** Schema-level function grants shared by every deployed schema, with or without plugins, so none can drop one. */
+function functionGrants(allow: any) {
+  return [
     allow.resource(assignmentAction).to(["query", "mutate"]),
     allow.resource(categoryAction),
     allow.resource(contentActions),
@@ -2127,7 +2242,21 @@ export function schemaWithPlugins(pluginDefinitions: Record<string, any>) {
     allow.resource(modelAttachmentUpload),
     allow.resource(newsroomSummary),
     allow.resource(procedureAction),
-  ]);
+    allow.resource(publicForms).to(["mutate"]),
+  ];
+}
+
+export const schema = a.schema(baseDefinitions).authorization(functionGrants);
+
+/** The deployed schema of a site that enables plugins: the base definitions plus what each plugin contributes (docs/plugins.md). */
+export function schemaWithPlugins(pluginDefinitions: Record<string, any>) {
+  return a.schema({ ...baseDefinitions, ...pluginDefinitions } as typeof baseDefinitions).authorization(functionGrants);
+}
+
+/** The schema of a site that leaves optional model groups out of its first deploy. */
+export function schemaExcludingGroups(excludedGroups: readonly OptionalModelGroup[], pluginDefinitions: Record<string, any> = {}) {
+  const definitions = buildBaseDefinitions(!excludedGroups.includes("editions")) as unknown as typeof baseDefinitions;
+  return a.schema({ ...definitions, ...pluginDefinitions } as typeof baseDefinitions).authorization(functionGrants);
 }
 
 export type Schema = ClientSchema<typeof schema>;