@anthusai/papyrus 3.0.0 → 3.2.0

package/amplify/data/resource.js

@@ -2146,6 +2146,7 @@ const schema = a.schema({
         allow.groups(contentWriteGroups),
     ]),
 }).authorization((allow) => [
+    allow.resource(assignmentAction).to(["query", "mutate"]),
     allow.resource(categoryAction),
     allow.resource(contentActions),
     allow.resource(manageUserRole),

package/amplify/data/resource.ts

@@ -2271,6 +2271,7 @@ const schema = a.schema({
       allow.groups(contentWriteGroups),
     ]),
 }).authorization((allow) => [
+  allow.resource(assignmentAction).to(["query", "mutate"]),
   allow.resource(categoryAction),
   allow.resource(contentActions),
   allow.resource(manageUserRole),

package/amplify/data/schema.js

@@ -1989,6 +1989,7 @@ const baseDefinitions = {
     ]),
 };
 export const schema = a.schema(baseDefinitions).authorization((allow) => [
+    allow.resource(assignmentAction).to(["query", "mutate"]),
     allow.resource(categoryAction),
     allow.resource(contentActions),
     allow.resource(manageUserRole),
@@ -1999,6 +2000,7 @@ export const schema = a.schema(baseDefinitions).authorization((allow) => [
 /** The deployed schema of a site that enables plugins: the base definitions plus what each plugin contributes (docs/plugins.md). */
 export function schemaWithPlugins(pluginDefinitions) {
     return a.schema({ ...baseDefinitions, ...pluginDefinitions }).authorization((allow) => [
+        allow.resource(assignmentAction).to(["query", "mutate"]),
         allow.resource(categoryAction),
         allow.resource(contentActions),
         allow.resource(manageUserRole),

package/amplify/data/schema.ts

@@ -2108,6 +2108,7 @@ const baseDefinitions = {
 };
 
 export const schema = a.schema(baseDefinitions).authorization((allow) => [
+  allow.resource(assignmentAction).to(["query", "mutate"]),
   allow.resource(categoryAction),
   allow.resource(contentActions),
   allow.resource(manageUserRole),
@@ -2119,6 +2120,7 @@ export const schema = a.schema(baseDefinitions).authorization((allow) => [
 /** The deployed schema of a site that enables plugins: the base definitions plus what each plugin contributes (docs/plugins.md). */
 export function schemaWithPlugins(pluginDefinitions: Record<string, any>) {
   return a.schema({ ...baseDefinitions, ...pluginDefinitions } as typeof baseDefinitions).authorization((allow) => [
+    allow.resource(assignmentAction).to(["query", "mutate"]),
     allow.resource(categoryAction),
     allow.resource(contentActions),
     allow.resource(manageUserRole),

package/amplify/functions/assignment-action/data-access.js

@@ -0,0 +1,88 @@
+import { Aspects, Stack } from "aws-cdk-lib";
+import { CfnPolicy } from "aws-cdk-lib/aws-iam";
+/** Lifecycle/context calls, including the fixed reference registration CLI's provenance operations. */
+export const ASSIGNMENT_DATA_FIELDS = [
+    "Query/fields/getAssignment",
+    "Query/fields/getKnowledgeRawPayload",
+    "Query/fields/getProcedureRun",
+    "Query/fields/getProcedureVersion",
+    "Query/fields/getProcedureDefinition",
+    "Query/fields/getModelAttachment",
+    "Query/fields/getNewsroomSection",
+    "Query/fields/getKnowledgeCorpus",
+    "Query/fields/getKnowledgeImportRun",
+    "Query/fields/getReference",
+    "Query/fields/getReferenceAttachment",
+    "Query/fields/getMessage",
+    "Query/fields/getSemanticRelation",
+    "Query/fields/getSemanticNode",
+    "Query/fields/listReferences",
+    "Query/fields/listReferenceAttachments",
+    "Query/fields/listSemanticRelations",
+    "Query/fields/listKnowledgeCorporaByRoleAndName",
+    "Query/fields/listItemsByLineageAndVersion",
+    "Query/fields/itemBySlug",
+    "Query/fields/itemByTenantSlug",
+    "Query/fields/listModelAttachmentsByOwnerRoleAndSortKey",
+    "Query/fields/listAssignmentsByQueueStatusAndPriority",
+    "Query/fields/listSemanticRelationsByObjectState",
+    "Query/fields/listSemanticRelationsBySubjectState",
+    "Query/fields/listAssignmentEventsByAssignmentAndCreatedAt",
+    "Mutation/fields/createAssignment",
+    "Mutation/fields/updateAssignment",
+    "Mutation/fields/createAssignmentEvent",
+    "Mutation/fields/createProcedureRun",
+    "Mutation/fields/updateProcedureRun",
+    "Mutation/fields/createKnowledgeCorpus",
+    "Mutation/fields/updateKnowledgeCorpus",
+    "Mutation/fields/createKnowledgeImportRun",
+    "Mutation/fields/updateKnowledgeImportRun",
+    "Mutation/fields/createKnowledgeRawPayload",
+    "Mutation/fields/updateKnowledgeRawPayload",
+    "Mutation/fields/createReference",
+    "Mutation/fields/updateReference",
+    "Mutation/fields/createReferenceAttachment",
+    "Mutation/fields/updateReferenceAttachment",
+    "Mutation/fields/createMessage",
+    "Mutation/fields/updateMessage",
+    "Mutation/fields/createSemanticRelation",
+    "Mutation/fields/updateSemanticRelation",
+    "Mutation/fields/createSemanticNode",
+    "Mutation/fields/updateSemanticNode",
+    "Mutation/fields/createModelAttachment",
+    "Mutation/fields/updateModelAttachment",
+    "Mutation/fields/createModelAttachmentUpload",
+    "Mutation/fields/completeModelAttachmentUpload",
+    "Mutation/fields/createModelAttachmentDownload",
+    "Mutation/fields/updateNewsroomSummary",
+];
+/** Keep the SDK's generated configuration, replacing only this role's GraphQL grants at synthesis. */
+export function scopeAssignmentDataAccess(lambda, graphqlApiArn) {
+    if (!lambda.role)
+        throw new Error("Assignment function needs an execution role.");
+    const roleName = lambda.role.roleName;
+    const resources = ASSIGNMENT_DATA_FIELDS.map((field) => `${graphqlApiArn}/types/${field}`);
+    Aspects.of(Stack.of(lambda)).add({
+        visit(node) {
+            if (!(node instanceof CfnPolicy))
+                return;
+            const stack = Stack.of(node);
+            const roles = stack.resolve(node.roles);
+            if (!roles?.some((role) => JSON.stringify(role) === JSON.stringify(stack.resolve(roleName))))
+                return;
+            const document = stack.resolve(node.policyDocument);
+            document.Statement.forEach((statement, index) => {
+                const actions = Array.isArray(statement.Action) ? statement.Action : [statement.Action];
+                if (actions.includes("*") || actions.includes("appsync:*")) {
+                    throw new Error("Unexpected wildcard assignment action; review permissions before synthesis.");
+                }
+                if (!actions.includes("appsync:GraphQL"))
+                    return;
+                if (statement.Effect !== "Allow" || actions.length !== 1 || statement.NotResource) {
+                    throw new Error("Unexpected assignment GraphQL policy; review field scoping before synthesis.");
+                }
+                node.addPropertyOverride(`PolicyDocument.Statement.${index}.Resource`, resources);
+            });
+        },
+    });
+}

package/amplify/functions/assignment-action/data-access.ts

@@ -0,0 +1,87 @@
+import { Aspects, Stack } from "aws-cdk-lib";
+import { CfnPolicy } from "aws-cdk-lib/aws-iam";
+import type { IFunction } from "aws-cdk-lib/aws-lambda";
+
+/** Lifecycle/context calls, including the fixed reference registration CLI's provenance operations. */
+export const ASSIGNMENT_DATA_FIELDS = [
+  "Query/fields/getAssignment",
+  "Query/fields/getKnowledgeRawPayload",
+  "Query/fields/getProcedureRun",
+  "Query/fields/getProcedureVersion",
+  "Query/fields/getProcedureDefinition",
+  "Query/fields/getModelAttachment",
+  "Query/fields/getNewsroomSection",
+  "Query/fields/getKnowledgeCorpus",
+  "Query/fields/getKnowledgeImportRun",
+  "Query/fields/getReference",
+  "Query/fields/getReferenceAttachment",
+  "Query/fields/getMessage",
+  "Query/fields/getSemanticRelation",
+  "Query/fields/getSemanticNode",
+  "Query/fields/listReferences",
+  "Query/fields/listReferenceAttachments",
+  "Query/fields/listSemanticRelations",
+  "Query/fields/listKnowledgeCorporaByRoleAndName",
+  "Query/fields/listItemsByLineageAndVersion",
+  "Query/fields/itemBySlug",
+  "Query/fields/itemByTenantSlug",
+  "Query/fields/listModelAttachmentsByOwnerRoleAndSortKey",
+  "Query/fields/listAssignmentsByQueueStatusAndPriority",
+  "Query/fields/listSemanticRelationsByObjectState",
+  "Query/fields/listSemanticRelationsBySubjectState",
+  "Query/fields/listAssignmentEventsByAssignmentAndCreatedAt",
+  "Mutation/fields/createAssignment",
+  "Mutation/fields/updateAssignment",
+  "Mutation/fields/createAssignmentEvent",
+  "Mutation/fields/createProcedureRun",
+  "Mutation/fields/updateProcedureRun",
+  "Mutation/fields/createKnowledgeCorpus",
+  "Mutation/fields/updateKnowledgeCorpus",
+  "Mutation/fields/createKnowledgeImportRun",
+  "Mutation/fields/updateKnowledgeImportRun",
+  "Mutation/fields/createKnowledgeRawPayload",
+  "Mutation/fields/updateKnowledgeRawPayload",
+  "Mutation/fields/createReference",
+  "Mutation/fields/updateReference",
+  "Mutation/fields/createReferenceAttachment",
+  "Mutation/fields/updateReferenceAttachment",
+  "Mutation/fields/createMessage",
+  "Mutation/fields/updateMessage",
+  "Mutation/fields/createSemanticRelation",
+  "Mutation/fields/updateSemanticRelation",
+  "Mutation/fields/createSemanticNode",
+  "Mutation/fields/updateSemanticNode",
+  "Mutation/fields/createModelAttachment",
+  "Mutation/fields/updateModelAttachment",
+  "Mutation/fields/createModelAttachmentUpload",
+  "Mutation/fields/completeModelAttachmentUpload",
+  "Mutation/fields/createModelAttachmentDownload",
+  "Mutation/fields/updateNewsroomSummary",
+] as const;
+
+/** Keep the SDK's generated configuration, replacing only this role's GraphQL grants at synthesis. */
+export function scopeAssignmentDataAccess(lambda: IFunction, graphqlApiArn: string): void {
+  if (!lambda.role) throw new Error("Assignment function needs an execution role.");
+  const roleName = lambda.role.roleName;
+  const resources = ASSIGNMENT_DATA_FIELDS.map((field) => `${graphqlApiArn}/types/${field}`);
+  Aspects.of(Stack.of(lambda)).add({
+    visit(node) {
+      if (!(node instanceof CfnPolicy)) return;
+      const stack = Stack.of(node);
+      const roles = stack.resolve(node.roles) as unknown[] | undefined;
+      if (!roles?.some((role) => JSON.stringify(role) === JSON.stringify(stack.resolve(roleName)))) return;
+      const document = stack.resolve(node.policyDocument) as { Statement: Array<Record<string, unknown>> };
+      document.Statement.forEach((statement, index) => {
+        const actions = Array.isArray(statement.Action) ? statement.Action : [statement.Action];
+        if (actions.includes("*") || actions.includes("appsync:*")) {
+          throw new Error("Unexpected wildcard assignment action; review permissions before synthesis.");
+        }
+        if (!actions.includes("appsync:GraphQL")) return;
+        if (statement.Effect !== "Allow" || actions.length !== 1 || statement.NotResource) {
+          throw new Error("Unexpected assignment GraphQL policy; review field scoping before synthesis.");
+        }
+        node.addPropertyOverride(`PolicyDocument.Statement.${index}.Resource`, resources);
+      });
+    },
+  });
+}

package/amplify/plugins/editorial-checks/function/handler.py

@@ -4,7 +4,10 @@ from __future__ import annotations
 
 from typing import Any
 
-from papyrus_content.editorial_checks import GraphQLEditorialStore, Services, handle
+from papyrus_content.editorial_checks import GraphQLEditorialStore, Services, handle, load_provider_keys
+
+# Amplify passes secrets to Python functions as placeholders; resolve them once per cold start.
+load_provider_keys()
 
 
 def handler(event: dict[str, Any], _context: Any = None) -> dict[str, Any]:

package/amplify/plugins/editorial-checks/papyrus.plugin.js

@@ -7,12 +7,28 @@ export const EDITORIAL_CHECKS_QUERIES = ["checkEditorial", "suggestEditorialRewr
 export const EDITORIAL_CHECKS_MUTATIONS = ["importEditorialStarterPack", "recalibrateEditorialPolicies"];
 /** The model operations the function performs with its own role. */
 export const EDITORIAL_CHECKS_FUNCTION_FIELDS = [
+    "Query/fields/listKnowledgeCorporaByRoleAndName",
+    "Query/fields/getEditorialContext",
     "Query/fields/listEditorialPolicies",
     "Query/fields/getEditorialCheckSettings",
     "Query/fields/listEditorialFeedbacks",
     "Mutation/fields/createEditorialPolicy",
     "Mutation/fields/updateEditorialPolicy",
 ];
+export const EDITORIAL_CHECKS_SECRETS = ["TYPESAFE_API_KEY", "OPENAI_API_KEY"];
+/**
+ * SSM parameters holding the provider keys. A Python function reads its secret()
+ * values itself (Amplify only resolves them for Node functions), so it needs read
+ * access to the app's branch and shared secret paths, and to the sandbox paths.
+ */
+export function editorialChecksSecretParameters(region, account, appId) {
+    const arn = (path) => `arn:aws:ssm:${region}:${account}:parameter/amplify/${path}`;
+    return EDITORIAL_CHECKS_SECRETS.flatMap((name) => [
+        arn(`papyrus/*/${name}`),
+        arn(`shared/papyrus/${name}`),
+        ...(appId ? [arn(`${appId}/*/${name}`), arn(`shared/${appId}/${name}`)] : []),
+    ]);
+}
 export const editorialChecksManifest = {
     name: "editorial-checks",
     contract: 1,
@@ -39,8 +55,13 @@ export const editorialChecksPlugin = {
         const lambda = backend.editorialChecks.resources.lambda;
         const stack = Stack.of(lambda);
         lambda.addEnvironment("PAPYRUS_GRAPHQL_ENDPOINT", context.graphqlEndpoint);
-        backend.editorialChecks.addEnvironment("TYPESAFE_API_KEY", secret("TYPESAFE_API_KEY"));
-        backend.editorialChecks.addEnvironment("OPENAI_API_KEY", secret("OPENAI_API_KEY"));
+        for (const name of EDITORIAL_CHECKS_SECRETS)
+            backend.editorialChecks.addEnvironment(name, secret(name));
+        lambda.addToRolePolicy(new PolicyStatement({
+            effect: Effect.ALLOW,
+            actions: ["ssm:GetParameter", "ssm:GetParameters"],
+            resources: editorialChecksSecretParameters(stack.region, stack.account, (process.env.AWS_APP_ID ?? "").trim()),
+        }));
         lambda.addToRolePolicy(new PolicyStatement({
             effect: Effect.ALLOW,
             actions: ["appsync:GraphQL"],

package/amplify/plugins/editorial-checks/papyrus.plugin.ts

@@ -14,6 +14,8 @@ export const EDITORIAL_CHECKS_MUTATIONS = ["importEditorialStarterPack", "recali
 
 /** The model operations the function performs with its own role. */
 export const EDITORIAL_CHECKS_FUNCTION_FIELDS = [
+  "Query/fields/listKnowledgeCorporaByRoleAndName",
+  "Query/fields/getEditorialContext",
   "Query/fields/listEditorialPolicies",
   "Query/fields/getEditorialCheckSettings",
   "Query/fields/listEditorialFeedbacks",
@@ -21,6 +23,22 @@ export const EDITORIAL_CHECKS_FUNCTION_FIELDS = [
   "Mutation/fields/updateEditorialPolicy",
 ];
 
+export const EDITORIAL_CHECKS_SECRETS = ["TYPESAFE_API_KEY", "OPENAI_API_KEY"];
+
+/**
+ * SSM parameters holding the provider keys. A Python function reads its secret()
+ * values itself (Amplify only resolves them for Node functions), so it needs read
+ * access to the app's branch and shared secret paths, and to the sandbox paths.
+ */
+export function editorialChecksSecretParameters(region: string, account: string, appId: string): string[] {
+  const arn = (path: string) => `arn:aws:ssm:${region}:${account}:parameter/amplify/${path}`;
+  return EDITORIAL_CHECKS_SECRETS.flatMap((name) => [
+    arn(`papyrus/*/${name}`),
+    arn(`shared/papyrus/${name}`),
+    ...(appId ? [arn(`${appId}/*/${name}`), arn(`shared/${appId}/${name}`)] : []),
+  ]);
+}
+
 export const editorialChecksManifest: PluginManifest = {
   name: "editorial-checks",
   contract: 1,
@@ -48,8 +66,14 @@ export const editorialChecksPlugin: PapyrusPlugin<EditorialChecksPluginConfig, {
     const lambda = backend.editorialChecks.resources.lambda as LambdaFunction;
     const stack = Stack.of(lambda);
     lambda.addEnvironment("PAPYRUS_GRAPHQL_ENDPOINT", context.graphqlEndpoint);
-    backend.editorialChecks.addEnvironment("TYPESAFE_API_KEY", secret("TYPESAFE_API_KEY"));
-    backend.editorialChecks.addEnvironment("OPENAI_API_KEY", secret("OPENAI_API_KEY"));
+    for (const name of EDITORIAL_CHECKS_SECRETS) backend.editorialChecks.addEnvironment(name, secret(name));
+    lambda.addToRolePolicy(
+      new PolicyStatement({
+        effect: Effect.ALLOW,
+        actions: ["ssm:GetParameter", "ssm:GetParameters"],
+        resources: editorialChecksSecretParameters(stack.region, stack.account, (process.env.AWS_APP_ID ?? "").trim()),
+      }),
+    );
     lambda.addToRolePolicy(
       new PolicyStatement({
         effect: Effect.ALLOW,

package/amplify/site-backend.js

@@ -23,6 +23,7 @@ import { defineSiteData } from "./data/resource.js";
 import { resolvePlugins } from "./plugins/registry.js";
 import { wirePlugins } from "./plugins/wire.js";
 import { assignmentAction } from "./functions/assignment-action/resource.js";
+import { scopeAssignmentDataAccess } from "./functions/assignment-action/data-access.js";
 import { categoryAction } from "./functions/category-action/resource.js";
 import { ConsoleChatResponderStack } from "./functions/console-chat-responder/resource.js";
 import { contentActions, setSiteFilesForContentActionsBundle } from "./functions/content-actions/resource.js";
@@ -304,6 +305,7 @@ export function defineSiteBackend(papyrusSite) {
     }
     grantCorporaRead(backend.knowledgeQuery.resources.lambda);
     grantNewsroomReadWrite(backend.assignmentAction.resources.lambda);
+    scopeAssignmentDataAccess(backend.assignmentAction.resources.lambda, backend.data.resources.graphqlApi.arn);
     grantNewsroomReadWrite(backend.categoryAction.resources.lambda);
     grantNewsroomReadWrite(backend.newsroomSummary.resources.lambda);
     const contentActionsLambda = backend.contentActions.resources.lambda;

package/amplify/site-backend.ts

@@ -30,6 +30,7 @@ import { defineSiteData } from "./data/resource";
 import { resolvePlugins } from "./plugins/registry";
 import { wirePlugins } from "./plugins/wire";
 import { assignmentAction } from "./functions/assignment-action/resource";
+import { scopeAssignmentDataAccess } from "./functions/assignment-action/data-access";
 import { categoryAction } from "./functions/category-action/resource";
 import { ConsoleChatResponderStack } from "./functions/console-chat-responder/resource";
 import { contentActions, setSiteFilesForContentActionsBundle } from "./functions/content-actions/resource";
@@ -387,6 +388,10 @@ export function defineSiteBackend(papyrusSite: PapyrusSite) {
   }
   grantCorporaRead(backend.knowledgeQuery.resources.lambda as LambdaFunction);
   grantNewsroomReadWrite(backend.assignmentAction.resources.lambda as LambdaFunction);
+  scopeAssignmentDataAccess(
+    backend.assignmentAction.resources.lambda as LambdaFunction,
+    backend.data.resources.graphqlApi.arn,
+  );
   grantNewsroomReadWrite(backend.categoryAction.resources.lambda as LambdaFunction);
   grantNewsroomReadWrite(backend.newsroomSummary.resources.lambda as LambdaFunction);
   const contentActionsLambda = backend.contentActions.resources.lambda as LambdaFunction;

package/components/newsroom-board-view.tsx

@@ -3,7 +3,7 @@
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import Link from "next/link";
 import { usePathname, useRouter, useSearchParams } from "next/navigation";
-import { IssueCollection, IssueDetailPanel, IssueTypeFilter, issueTypeFromFilter, useBoardColumnState } from "@kanbus/ui";
+import { IssueCollection, IssueDetailPanel, IssueIdFormatProvider, IssueTypeFilter, issueTypeFromFilter, useBoardColumnState } from "@kanbus/ui";
 import "./newsroom-theme";
 import { PlusIcon } from "lucide-react";
 import { newsroomHref } from "../lib/newsroom-base-path";
@@ -16,6 +16,7 @@ import {
   deskBoardConfig,
   deskContainsAssignment,
   deskContainsContentItem,
+  formatNativeIssueId,
   projectAssignmentBoard,
   projectContentItemBoard,
   type NativeBoardIssue,
@@ -168,6 +169,7 @@ export function NewsroomBoardView({ subject, deskId }: { subject: NewsroomBoardS
         </Link>
       )}
     </>}>
+    <IssueIdFormatProvider formatIssueId={formatNativeIssueId}>
     <div className="organizer-native-board">
       {error && <NewsroomOpsStatusBanner tone="error">{error}</NewsroomOpsStatusBanner>}
       {subject === "desk" && <IssueTypeFilter config={config} value={typeFilter} onChange={setTypeFilter} name="Record type" className="organizer-board-type-filter" />}
@@ -192,5 +194,6 @@ export function NewsroomBoardView({ subject, deskId }: { subject: NewsroomBoardS
         </IssueDetailPanel>}
       </div>
     </div>
+    </IssueIdFormatProvider>
   </NewsroomOpsShell>;
 }

package/lib/newsroom-board.ts

@@ -21,6 +21,31 @@ export interface NativeBoardIssue extends KanbanIssue {
   href: string;
   /** A few lines to show under the headline: the blurb, else the subtitle. */
   excerpt?: string;
+  /** The quiet path shown where a board would print the ID, e.g. `articles/my-slug` or `assignments/write-it`. */
+  displayId: string;
+}
+
+function slugify(text: string): string {
+  return text.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+}
+
+/** Section and slug for a content item, falling back to the publication's board path segment. */
+export function contentItemDisplayId(version: { section?: string | null; slug?: string | null; lineageId: string }): string {
+  const section = slugify(version.section ?? "") || contentItemBoardPathSegment();
+  return `${section}/${slugify(version.slug ?? "") || version.lineageId.slice(0, 8)}`;
+}
+
+/** Assignments have no slug: use the title as one, else a short id. */
+export function assignmentDisplayId(assignment: { id: string; title?: string | null }): string {
+  const titleSlug = slugify(assignment.title ?? "").slice(0, 48).replace(/-+$/g, "");
+  return `assignments/${titleSlug || assignment.id.slice(0, 8)}`;
+}
+
+/** `formatIssueId` for the Kanbus UI: the host-provided path, never the raw `kind:id` prefix. */
+export function formatNativeIssueId(issue: KanbanIssue): string {
+  const displayId = (issue as Partial<NativeBoardIssue>).displayId;
+  if (displayId) return displayId;
+  return issue.id.replace(/^[A-Za-z]+:/, "").slice(0, 12);
 }
 
 export function contentItemBoardPathSegment(): string {
@@ -60,7 +85,7 @@ export function projectContentItemBoard(records: {
       title: version.headline || version.title || version.slug, nativeStatus: stage, status: `${contentItemType}/${stage}`,
       priority: 2, description: workCount ? `${workCount} assignment${workCount === 1 ? "" : "s"} on this ${contentItemType}.` : undefined,
       updated_at: version.updatedAt ?? undefined, href: `/newsroom/articles/${encodeURIComponent(version.id)}`,
-      excerpt: contentItemExcerpt(version),
+      excerpt: contentItemExcerpt(version), displayId: contentItemDisplayId(version),
     };
   });
 }
@@ -73,7 +98,7 @@ export function projectAssignmentBoard(assignments: readonly AssignmentRecord[])
     priority: row.priority ?? 2, assignee: row.assigneeId || undefined,
     description: row.summary || row.brief || undefined,
     created_at: row.createdAt, updated_at: row.updatedAt,
-    href: `/newsroom/assignments/${encodeURIComponent(row.id)}`,
+    href: `/newsroom/assignments/${encodeURIComponent(row.id)}`, displayId: assignmentDisplayId(row),
   }));
 }
 

package/package.json

@@ -395,7 +395,7 @@
       "optional": true
     }
   },
-  "version": "3.0.0",
+  "version": "3.2.0",
   "dependencies": {
     "@aws-amplify/adapter-nextjs": "^1.7.3",
     "@aws-crypto/sha256-js": "5.2.0",
@@ -422,7 +422,7 @@
     "@fontsource-variable/source-serif-4": "5.3.1",
     "@fontsource/ibm-plex-mono": "5.3.0",
     "@fontsource/ibm-plex-sans": "5.3.0",
-    "@kanbus/ui": "https://github.com/AnthusAI/Kanbus/releases/download/ui-v0.4.0/kanbus-ui-0.4.0.tgz",
+    "@kanbus/ui": "https://github.com/AnthusAI/Kanbus/releases/download/ui-v0.4.1/kanbus-ui-0.4.1.tgz",
     "@lezer/highlight": "^1.2.5",
     "@radix-ui/colors": "3.0.0",
     "@smithy/protocol-http": "5.4.1",

package/routes.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "3.0.0",
+  "version": "3.2.0",
   "routes": [
     {
       "file": "app/%5F_preview/[[...path]]/route.ts",