@anthusai/papyrus 5.30.0 → 5.32.0

package/amplify/plugins/reader-steering/papyrus.plugin.js

@@ -14,8 +14,8 @@ export const READER_POLL_SECRET_PARAMETER_ENV = "PAPYRUS_READER_POLL_SECRET_PARA
 export const readerSteeringManifest = {
     name: "reader-steering",
     contract: 1,
-    models: ["ReaderProfile", "ReaderHandle", "ReaderVote", "ReaderSubmission", "ReaderComment", "ReaderReport", "ModerationAction"],
-    mutations: ["moderateReader"],
+    models: ["ReaderProfile", "ReaderHandle", "ReaderVote", "ReaderFlag", "ReaderSubmission", "ReaderComment", "ReaderReport", "ModerationAction", "Proposal"],
+    mutations: ["moderateReader", "fileProposal", "transitionProposal"],
     guest: { mutations: [] },
     newsroomPanels: [{ id: "moderation", label: "Moderation" }],
     staticAssets: ["_plugins/papyrus-reader@1.js", "_plugins/papyrus-reader@1.css"],
@@ -26,6 +26,7 @@ export function readerActionsSettings(config, allowInterimSubjects) {
         dimensions: config.dimensions,
         limits: config.limits,
         submissions: config.submissions,
+        subjects: config.subjects,
         comments: config.comments,
         moderation: config.moderation,
         reservedHandles: config.reservedHandles,
@@ -38,6 +39,7 @@ export function readerSnapshotSettings(config) {
     return {
         dimensions: config.dimensions,
         submissions: config.submissions,
+        subjects: config.subjects,
         karma: config.karma,
         ranking: config.ranking,
         limits: { newAccountHours: config.limits.newAccountHours },
@@ -100,6 +102,7 @@ export const readerSteeringPlugin = {
     publicSettings: (config) => ({
         contract: readerSteeringManifest.contract,
         dimensions: config.dimensions,
+        subjects: { types: config.subjects.types },
         moderation: { mode: config.moderation.mode },
     }),
     wire(backend, config, context) {
@@ -110,10 +113,12 @@ export const readerSteeringPlugin = {
             ["PAPYRUS_READER_PROFILE_TABLE", "ReaderProfile"],
             ["PAPYRUS_READER_HANDLE_TABLE", "ReaderHandle"],
             ["PAPYRUS_READER_VOTE_TABLE", "ReaderVote"],
+            ["PAPYRUS_READER_FLAG_TABLE", "ReaderFlag"],
             ["PAPYRUS_READER_SUBMISSION_TABLE", "ReaderSubmission"],
             ["PAPYRUS_READER_COMMENT_TABLE", "ReaderComment"],
             ["PAPYRUS_READER_REPORT_TABLE", "ReaderReport"],
             ["PAPYRUS_READER_ACTION_TABLE", "ModerationAction"],
+            ["PAPYRUS_READER_PROPOSAL_TABLE", "Proposal"],
         ]) {
             tables[model].grantReadWriteData(lambda);
             lambda.addEnvironment(variable, tables[model].tableName);
@@ -125,10 +130,13 @@ export const readerSteeringPlugin = {
         tables.PublishedItem.grantReadData(lambda);
         lambda.addEnvironment("PAPYRUS_READER_PUBLISHED_ITEM_TABLE", tables.PublishedItem.tableName);
         tables.ReaderVote.grantReadData(contentActions);
+        tables.ReaderFlag.grantReadData(contentActions);
         tables.ReaderProfile.grantReadWriteData(contentActions);
         // The snapshot reads submissions, and the review step writes their signals and moderation state.
         tables.ReaderSubmission.grantReadWriteData(contentActions);
         tables.ReaderComment.grantReadWriteData(contentActions);
+        // The snapshot reads proposals and freezes the community result of one that reaches editor review.
+        tables.Proposal.grantReadWriteData(contentActions);
         lambda.addEnvironment("PAPYRUS_READER_SETTINGS", JSON.stringify(readerActionsSettings(config, interimSubjectsAllowedAtSynth())));
         if (config.reservedConcurrency !== undefined) {
             lambda.node.defaultChild.addPropertyOverride("ReservedConcurrentExecutions", config.reservedConcurrency);

package/amplify/plugins/reader-steering/papyrus.plugin.ts

@@ -21,8 +21,8 @@ export const READER_POLL_SECRET_PARAMETER_ENV = "PAPYRUS_READER_POLL_SECRET_PARA
 export const readerSteeringManifest: PluginManifest = {
   name: "reader-steering",
   contract: 1,
-  models: ["ReaderProfile", "ReaderHandle", "ReaderVote", "ReaderSubmission", "ReaderComment", "ReaderReport", "ModerationAction"],
-  mutations: ["moderateReader"],
+  models: ["ReaderProfile", "ReaderHandle", "ReaderVote", "ReaderFlag", "ReaderSubmission", "ReaderComment", "ReaderReport", "ModerationAction", "Proposal"],
+  mutations: ["moderateReader", "fileProposal", "transitionProposal"],
   guest: { mutations: [] },
   newsroomPanels: [{ id: "moderation", label: "Moderation" }],
   staticAssets: ["_plugins/papyrus-reader@1.js", "_plugins/papyrus-reader@1.css"],
@@ -34,6 +34,7 @@ export function readerActionsSettings(config: ReaderSteeringConfig, allowInterim
     dimensions: config.dimensions,
     limits: config.limits,
     submissions: config.submissions,
+    subjects: config.subjects,
     comments: config.comments,
     moderation: config.moderation,
     reservedHandles: config.reservedHandles,
@@ -47,6 +48,7 @@ export function readerSnapshotSettings(config: ReaderSteeringConfig) {
   return {
     dimensions: config.dimensions,
     submissions: config.submissions,
+    subjects: config.subjects,
     karma: config.karma,
     ranking: config.ranking,
     limits: { newAccountHours: config.limits.newAccountHours },
@@ -118,6 +120,7 @@ export const readerSteeringPlugin: PapyrusPlugin<ReaderSteeringConfig, { readerA
   publicSettings: (config) => ({
     contract: readerSteeringManifest.contract,
     dimensions: config.dimensions,
+    subjects: { types: config.subjects.types },
     moderation: { mode: config.moderation.mode },
   }),
   wire(backend, config, context: PluginWiringContext) {
@@ -129,10 +132,12 @@ export const readerSteeringPlugin: PapyrusPlugin<ReaderSteeringConfig, { readerA
       ["PAPYRUS_READER_PROFILE_TABLE", "ReaderProfile"],
       ["PAPYRUS_READER_HANDLE_TABLE", "ReaderHandle"],
       ["PAPYRUS_READER_VOTE_TABLE", "ReaderVote"],
+      ["PAPYRUS_READER_FLAG_TABLE", "ReaderFlag"],
       ["PAPYRUS_READER_SUBMISSION_TABLE", "ReaderSubmission"],
       ["PAPYRUS_READER_COMMENT_TABLE", "ReaderComment"],
       ["PAPYRUS_READER_REPORT_TABLE", "ReaderReport"],
       ["PAPYRUS_READER_ACTION_TABLE", "ModerationAction"],
+      ["PAPYRUS_READER_PROPOSAL_TABLE", "Proposal"],
     ] as const) {
       tables[model].grantReadWriteData(lambda);
       lambda.addEnvironment(variable, tables[model].tableName);
@@ -144,10 +149,13 @@ export const readerSteeringPlugin: PapyrusPlugin<ReaderSteeringConfig, { readerA
     tables.PublishedItem.grantReadData(lambda);
     lambda.addEnvironment("PAPYRUS_READER_PUBLISHED_ITEM_TABLE", tables.PublishedItem.tableName);
     tables.ReaderVote.grantReadData(contentActions);
+    tables.ReaderFlag.grantReadData(contentActions);
     tables.ReaderProfile.grantReadWriteData(contentActions);
     // The snapshot reads submissions, and the review step writes their signals and moderation state.
     tables.ReaderSubmission.grantReadWriteData(contentActions);
     tables.ReaderComment.grantReadWriteData(contentActions);
+    // The snapshot reads proposals and freezes the community result of one that reaches editor review.
+    tables.Proposal.grantReadWriteData(contentActions);
 
     lambda.addEnvironment("PAPYRUS_READER_SETTINGS", JSON.stringify(readerActionsSettings(config, interimSubjectsAllowedAtSynth())));
     if (config.reservedConcurrency !== undefined) {

package/amplify/plugins/reader-steering/schema.js

@@ -3,7 +3,7 @@ import { readerActions } from "./function/resource.js";
 /**
  * Staff and IAM only: no guest, API key or reader rule on any model. The reader-actions function writes the
  * tables directly with its own role, and editors may list them; admins may delete. `id` is the lookup key:
- * the siteSubject for a profile, the lowercase handle for a claim, `subjectKey#readerId#dimension` for a vote and
+ * the siteSubject for a profile, the lowercase handle for a claim, `subjectKey#readerId#dimension` for a vote (`subjectKey#readerId#kind` for a flag; the key is the bare id for items and submissions and `type:id` for the rest) and
  * `sub-<sha256 of the canonical URL>` for a submission (so a canonical URL is one submission).
  */
 const staffOnly = (allow) => [allow.group("editor").to(["read"]), allow.group("admin").to(["read", "delete"])];
@@ -32,6 +32,7 @@ export function readerSteeringSchemaDefinitions() {
             .model({
             id: a.id().required(),
             subjectKey: a.string().required(),
+            subjectType: a.string(),
             readerId: a.string().required(),
             dimension: a.string().required(),
             value: a.integer().required(),
@@ -39,6 +40,21 @@ export function readerSteeringSchemaDefinitions() {
         })
             .disableOperations(["subscriptions"])
             .authorization(staffOnly),
+        ReaderFlag: a
+            .model({
+            id: a.id().required(),
+            subjectKey: a.string().required(),
+            subjectType: a.string().required(),
+            readerId: a.string().required(),
+            kind: a.string().required(),
+            reason: a.string().required(),
+            targetKey: a.string(),
+            suggestedName: a.string(),
+            voterRole: a.string().required(),
+            createdAt: a.datetime().required(),
+        })
+            .disableOperations(["subscriptions"])
+            .authorization(staffOnly),
         ReaderComment: a
             .model({
             id: a.id().required(),
@@ -118,6 +134,54 @@ export function readerSteeringSchemaDefinitions() {
             .disableOperations(["subscriptions"])
             .secondaryIndexes((index) => [index("target").sortKeys(["at"]).name("actionsByTarget").queryField("listModerationActionsByTargetAndAt")])
             .authorization(staffOnly),
+        Proposal: a
+            .model({
+            id: a.id().required(),
+            kind: a.string().required(),
+            title: a.string().required(),
+            summary: a.string(),
+            body: a.string().required(),
+            targets: a.json().required(),
+            evidence: a.json(),
+            proposer: a.string().required(),
+            state: a.string().required(),
+            history: a.json().required(),
+            communityResult: a.json(),
+            createdAt: a.datetime().required(),
+        })
+            .disableOperations(["subscriptions"])
+            .secondaryIndexes((index) => [index("state").sortKeys(["createdAt"]).name("proposalsByState").queryField("listProposalsByStateAndCreatedAt")])
+            .authorization(staffOnly),
+        ProposalReceipt: a.customType({
+            status: a.string().required(),
+            id: a.string(),
+            error: a.string(),
+            message: a.string(),
+        }),
+        fileProposal: a
+            .mutation()
+            .arguments({
+            kind: a.string().required(),
+            title: a.string().required(),
+            body: a.string().required(),
+            summary: a.string(),
+            targets: a.json(),
+            evidence: a.json(),
+        })
+            .returns(a.ref("ProposalReceipt"))
+            .authorization((allow) => [allow.group("editor"), allow.group("admin")])
+            .handler(a.handler.function(readerActions)),
+        transitionProposal: a
+            .mutation()
+            .arguments({
+            proposalId: a.string().required(),
+            state: a.string().required(),
+            reason: a.string(),
+            result: a.string(),
+        })
+            .returns(a.ref("ProposalReceipt"))
+            .authorization((allow) => [allow.group("editor"), allow.group("admin")])
+            .handler(a.handler.function(readerActions)),
         ModerationReceipt: a.customType({
             status: a.string().required(),
             id: a.string(),

package/amplify/plugins/reader-steering/schema.ts

@@ -4,7 +4,7 @@ import { readerActions } from "./function/resource";
 /**
  * Staff and IAM only: no guest, API key or reader rule on any model. The reader-actions function writes the
  * tables directly with its own role, and editors may list them; admins may delete. `id` is the lookup key:
- * the siteSubject for a profile, the lowercase handle for a claim, `subjectKey#readerId#dimension` for a vote and
+ * the siteSubject for a profile, the lowercase handle for a claim, `subjectKey#readerId#dimension` for a vote (`subjectKey#readerId#kind` for a flag; the key is the bare id for items and submissions and `type:id` for the rest) and
  * `sub-<sha256 of the canonical URL>` for a submission (so a canonical URL is one submission).
  */
 const staffOnly = (allow: any) => [allow.group("editor").to(["read"]), allow.group("admin").to(["read", "delete"])];
@@ -34,6 +34,7 @@ export function readerSteeringSchemaDefinitions() {
       .model({
         id: a.id().required(),
         subjectKey: a.string().required(),
+        subjectType: a.string(),
         readerId: a.string().required(),
         dimension: a.string().required(),
         value: a.integer().required(),
@@ -41,6 +42,21 @@ export function readerSteeringSchemaDefinitions() {
       })
       .disableOperations(["subscriptions"])
       .authorization(staffOnly),
+    ReaderFlag: a
+      .model({
+        id: a.id().required(),
+        subjectKey: a.string().required(),
+        subjectType: a.string().required(),
+        readerId: a.string().required(),
+        kind: a.string().required(),
+        reason: a.string().required(),
+        targetKey: a.string(),
+        suggestedName: a.string(),
+        voterRole: a.string().required(),
+        createdAt: a.datetime().required(),
+      })
+      .disableOperations(["subscriptions"])
+      .authorization(staffOnly),
     ReaderComment: a
       .model({
         id: a.id().required(),
@@ -120,6 +136,54 @@ export function readerSteeringSchemaDefinitions() {
       .disableOperations(["subscriptions"])
       .secondaryIndexes((index) => [index("target").sortKeys(["at"]).name("actionsByTarget").queryField("listModerationActionsByTargetAndAt")])
       .authorization(staffOnly),
+    Proposal: a
+      .model({
+        id: a.id().required(),
+        kind: a.string().required(),
+        title: a.string().required(),
+        summary: a.string(),
+        body: a.string().required(),
+        targets: a.json().required(),
+        evidence: a.json(),
+        proposer: a.string().required(),
+        state: a.string().required(),
+        history: a.json().required(),
+        communityResult: a.json(),
+        createdAt: a.datetime().required(),
+      })
+      .disableOperations(["subscriptions"])
+      .secondaryIndexes((index) => [index("state").sortKeys(["createdAt"]).name("proposalsByState").queryField("listProposalsByStateAndCreatedAt")])
+      .authorization(staffOnly),
+    ProposalReceipt: a.customType({
+      status: a.string().required(),
+      id: a.string(),
+      error: a.string(),
+      message: a.string(),
+    }),
+    fileProposal: a
+      .mutation()
+      .arguments({
+        kind: a.string().required(),
+        title: a.string().required(),
+        body: a.string().required(),
+        summary: a.string(),
+        targets: a.json(),
+        evidence: a.json(),
+      })
+      .returns(a.ref("ProposalReceipt"))
+      .authorization((allow) => [allow.group("editor"), allow.group("admin")])
+      .handler(a.handler.function(readerActions)),
+    transitionProposal: a
+      .mutation()
+      .arguments({
+        proposalId: a.string().required(),
+        state: a.string().required(),
+        reason: a.string(),
+        result: a.string(),
+      })
+      .returns(a.ref("ProposalReceipt"))
+      .authorization((allow) => [allow.group("editor"), allow.group("admin")])
+      .handler(a.handler.function(readerActions)),
     ModerationReceipt: a.customType({
       status: a.string().required(),
       id: a.string(),

package/amplify/site-backend.js

@@ -22,6 +22,8 @@ import { applyCognitoDomainPrefix, authConfigFromEnv, defineSiteAuth, siteAuthRe
 import { PROSPECTUS_SIGN_IN_CALLBACK_PATH, addProspectusGoogleOnlyClient } from "./auth/prospectus-google-client.js";
 import { defineSiteData } from "./data/resource.js";
 import { editorialChecks } from "./functions/editorial-checks/resource.js";
+import { automationView } from "./functions/automation-view/resource.js";
+import { wireAutomationView } from "./functions/automation-view/wire.js";
 import { monitoringView } from "./functions/monitoring-view/resource.js";
 import { wireMonitoringView } from "./functions/monitoring-view/wire.js";
 import { wireEditorialChecks } from "./functions/editorial-checks/wire.js";
@@ -94,6 +96,7 @@ export function defineSiteBackend(papyrusSite) {
     const backend = defineBackend({
         ...pluginFunctions,
         assignmentAction,
+        automationView,
         auth: defineSiteAuth(authConfig),
         categoryAction,
         contentActions,
@@ -621,6 +624,7 @@ export function defineSiteBackend(papyrusSite) {
     });
     wireEditorialChecks(backend);
     wireMonitoringView(backend);
+    wireAutomationView(backend);
     wirePlugins(backend, plugins, contentActionsLambda);
     return backend;
 }

package/amplify/site-backend.ts

@@ -29,6 +29,8 @@ import { applyCognitoDomainPrefix, authConfigFromEnv, defineSiteAuth, siteAuthRe
 import { PROSPECTUS_SIGN_IN_CALLBACK_PATH, addProspectusGoogleOnlyClient } from "./auth/prospectus-google-client";
 import { defineSiteData } from "./data/resource";
 import { editorialChecks } from "./functions/editorial-checks/resource";
+import { automationView } from "./functions/automation-view/resource";
+import { wireAutomationView } from "./functions/automation-view/wire";
 import { monitoringView } from "./functions/monitoring-view/resource";
 import { wireMonitoringView } from "./functions/monitoring-view/wire";
 import { wireEditorialChecks } from "./functions/editorial-checks/wire";
@@ -115,6 +117,7 @@ export function defineSiteBackend(papyrusSite: PapyrusSite) {
   const backend = defineBackend({
     ...pluginFunctions,
     assignmentAction,
+    automationView,
     auth: defineSiteAuth(authConfig),
     categoryAction,
     contentActions,
@@ -766,6 +769,7 @@ export function defineSiteBackend(papyrusSite: PapyrusSite) {
   });
   wireEditorialChecks(backend);
   wireMonitoringView(backend);
+  wireAutomationView(backend);
   wirePlugins(backend, plugins, contentActionsLambda);
 
   return backend;

package/app/api/reader/flag/route.ts

@@ -0,0 +1,9 @@
+import type { NextRequest } from "next/server";
+import { handleReaderRequest } from "../../../../lib/reader-api";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+export function POST(request: NextRequest) {
+  return handleReaderRequest(request, "flag");
+}

package/components/automation-panel.tsx

@@ -0,0 +1,39 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import { loadAutomationOverview } from "../lib/automation-client";
+import { FIXTURE_AUTOMATION_OVERVIEW } from "../lib/automation-fixture";
+import type { AutomationResult } from "../lib/automation-overview";
+import { AutomationView } from "./automation-view";
+
+const REFRESH_MILLISECONDS = 60_000;
+
+/** Administration, Automation: loads the records and their recent runs, and refreshes each minute. */
+export function AutomationPanel({ isDemo }: { isDemo: boolean }) {
+  const [result, setResult] = useState<AutomationResult | null>(null);
+  const [selectedId, setSelectedId] = useState<string | null>(null);
+
+  useEffect(() => {
+    if (isDemo) {
+      setResult(FIXTURE_AUTOMATION_OVERVIEW);
+      return;
+    }
+    let live = true;
+    const refresh = async () => {
+      try {
+        const next = await loadAutomationOverview();
+        if (live) setResult(next);
+      } catch {
+        if (live) setResult({ state: "unavailable" });
+      }
+    };
+    void refresh();
+    const timer = window.setInterval(() => void refresh(), REFRESH_MILLISECONDS);
+    return () => {
+      live = false;
+      window.clearInterval(timer);
+    };
+  }, [isDemo]);
+
+  return <AutomationView result={result} selectedId={selectedId} onSelect={setSelectedId} demo={isDemo} />;
+}

package/components/automation-view.tsx

@@ -0,0 +1,149 @@
+import Link from "next/link";
+import {
+  ENABLED_NOTE,
+  durationText,
+  enabledText,
+  formatUtc,
+  linkText,
+  noticeText,
+  proceduresHref,
+  statusMark,
+  statusText,
+  storyHref,
+  triggerText,
+  type AutomationRecord,
+  type AutomationResult,
+  type AutomationRun,
+} from "../lib/automation-overview";
+
+function Message({ title, children, kind }: { title: string; children?: React.ReactNode; kind: string }) {
+  return (
+    <div className="category-steering-empty" role={kind === "loading" ? "status" : "alert"} data-automation-state={kind}>
+      <strong>{title}</strong>
+      {children ? <p>{children}</p> : null}
+    </div>
+  );
+}
+
+function RunLine({ run, demo }: { run: AutomationRun; demo: boolean }) {
+  return (
+    <li data-automation-run={run.runId ?? run.sourceId ?? "unlinked"} data-run-status={run.status ?? "unknown"}>
+      <strong>{formatUtc(run.startedAt)}</strong>
+      <span><span aria-hidden="true">{statusMark(run.status)} </span>Status: {statusText(run.status)} &middot; {durationText(run.durationSeconds)}</span>
+      <span>Item: {run.sourceId ?? "unknown"}</span>
+      {run.error ? <span data-automation-run-error>Error: {run.error}</span> : null}
+      <span>
+        {run.runId ? <>Run {run.runId} (<Link href={proceduresHref(demo)}>Procedures</Link>)</> : run.triggerStatus === "started" ? "Run record not linked yet" : "No run record"}
+        {run.runRecord === "missing" ? " (the run record was not found)" : ""}
+        {run.runRecord === "unavailable" ? " (the run record could not be read)" : ""}
+      </span>
+      <span>
+        {run.storyId ? <>Story: <Link href={storyHref(run.storyId, demo)} data-automation-story-link>{run.storyTitle ?? run.storyId}</Link></> : "Story: none recorded"}
+      </span>
+      <span>Cost: unknown ({run.costNote})</span>
+    </li>
+  );
+}
+
+function Detail({ record, demo }: { record: AutomationRecord; demo: boolean }) {
+  const notice = noticeText(record.notice);
+  return (
+    <article className="news-desk-doctrine-card" data-automation-detail={record.id}>
+      <div className="news-desk-doctrine-card__header"><div><h3>{record.title}</h3><span>{record.description ?? record.id}</span></div></div>
+      <dl className="news-desk-monitoring__usage">
+        <div><dt>Trigger</dt><dd>{triggerText(record.trigger)}{record.supported ? "" : ` (${record.supportNote ?? "not yet supported"})`}</dd></div>
+        <div><dt>Procedure</dt><dd>{record.procedureKey}</dd></div>
+        <div><dt>Input</dt><dd>{Object.keys(record.inputTemplate).length ? Object.entries(record.inputTemplate).map(([name, template]) => `${name} = ${template}`).join("; ") : "none"}</dd></div>
+        <div><dt>Enabled</dt><dd>{enabledText(record)} ({ENABLED_NOTE})</dd></div>
+        <div><dt>Limits</dt><dd>timeout {record.limits.timeoutSeconds ?? "?"} s, {record.limits.maxConcurrent ?? "?"} at a time{record.limits.budgetUsdPerRun !== undefined ? `, about $${record.limits.budgetUsdPerRun} per run` : ""} ({record.limitsNote})</dd></div>
+        <div><dt>Router</dt><dd data-automation-link={record.link?.state ?? "unchecked"}>{linkText(record.link)}</dd></div>
+      </dl>
+      {notice ? <p className="news-desk-delegation-note" data-automation-notice>{notice}</p> : null}
+      <h4>Recent runs</h4>
+      {record.runs.length ? (
+        <ul className="news-desk-monitoring__list" data-automation-runs>
+          {record.runs.map((run) => <RunLine key={run.runId ?? `${run.sourceId}-${run.startedAt}`} run={run} demo={demo} />)}
+        </ul>
+      ) : <p data-automation-no-runs>No runs yet.</p>}
+      {record.skippedAlreadyHadReference > 0 ? (
+        <p className="news-desk-delegation-note" data-automation-skipped>
+          {record.skippedAlreadyHadReference} {record.skippedAlreadyHadReference === 1 ? "item was" : "items were"} not started because the Reference already existed.
+        </p>
+      ) : null}
+    </article>
+  );
+}
+
+function ListItem({ record, selected, onSelect }: { record: AutomationRecord; selected: boolean; onSelect: (id: string) => void }) {
+  const last = record.lastRun;
+  return (
+    <li data-automation={record.id}>
+      <div>
+        <strong>{record.title}</strong>
+        <span>{triggerText(record.trigger)}{record.supported ? "" : ` (${record.supportNote ?? "not yet supported"})`}</span>
+      </div>
+      <span>Procedure: {record.procedureKey}</span>
+      <span>{enabledText(record)} ({ENABLED_NOTE})</span>
+      <span data-automation-last-run>
+        Last run: <span aria-hidden="true">{statusMark(last?.status)} </span>{statusText(last?.status)}{last ? `, ${formatUtc(last.startedAt)}` : ""}
+      </span>
+      <button type="button" aria-pressed={selected} data-automation-select={record.id} onClick={() => onSelect(record.id)}>
+        {selected ? "Showing runs" : "Show runs"}
+      </button>
+    </li>
+  );
+}
+
+/** Presentation only: the panel fetches, this renders any result, so every state is testable from fixtures. */
+export function AutomationView({
+  result,
+  selectedId,
+  onSelect,
+  demo = false,
+}: {
+  result: AutomationResult | null;
+  selectedId: string | null;
+  onSelect: (id: string) => void;
+  demo?: boolean;
+}) {
+  let body: React.ReactNode;
+  if (result === null) {
+    body = <Message kind="loading" title="Loading automations" />;
+  } else if ("error" in result) {
+    body = result.error === "forbidden"
+      ? <Message kind="forbidden" title="Automations are for editors and admins">Your account does not have access to this page. Ask an admin for the editor role.</Message>
+      : <Message kind="error" title="Automations could not be read">The request was not understood. Reload the page.</Message>;
+  } else if (result.state === "unavailable") {
+    body = <Message kind="unavailable" title="Automations could not be read right now">Nothing is affected. Try again in a minute.</Message>;
+  } else if (result.state === "empty") {
+    body = <Message kind="empty" title="No automations yet">An operator creates one with <code>papyrus automations create</code>. Nothing is configured to run on its own from this page.</Message>;
+  } else {
+    const selected = result.automations.find((record) => record.id === selectedId) ?? (result.automations.length === 1 ? result.automations[0] : null);
+    body = (
+      <>
+        <article className="news-desk-doctrine-card" data-automation-section="list">
+          <div className="news-desk-doctrine-card__header"><div><h3>Automations</h3><span>What starts a procedure by itself</span></div></div>
+          <ul className="news-desk-monitoring__list">
+            {result.automations.map((record) => <ListItem key={record.id} record={record} selected={selected?.id === record.id} onSelect={onSelect} />)}
+          </ul>
+          {result.monitoring === "not_configured" ? <p className="news-desk-delegation-note" data-automation-notice>{noticeText("monitoring_not_configured")}</p> : null}
+        </article>
+        {selected ? <Detail record={selected} demo={demo} /> : <p className="news-desk-delegation-note" data-automation-pick>Choose an automation to see its recent runs.</p>}
+      </>
+    );
+  }
+  return (
+    <div data-news-desk-admin-panel="automations">
+      <article className="news-desk-doctrine-card">
+        <div className="news-desk-doctrine-card__header">
+          <div>
+            <h3>Automation</h3>
+            <span>Procedures that start on their own. Read only here; an operator changes them with the command line.</span>
+          </div>
+        </div>
+        {result && "asOf" in result ? <p className="news-desk-delegation-note" data-automation-as-of>As of {formatUtc(result.asOf)}. The enabled setting is {ENABLED_NOTE}.</p> : null}
+      </article>
+      {body}
+    </div>
+  );
+}

package/components/topic-steering-workspace.tsx

@@ -14,6 +14,7 @@ import type { ReactNode, RefObject } from "react";
 import { useCallback, useEffect, useId, useLayoutEffect, useMemo, useRef, useState, useTransition } from "react";
 import amplifyOutputs from "papyrus-amplify-outputs";
 import { EditorialChecksAdminPanel } from "./editorial-checks-admin-panel";
+import { AutomationPanel } from "./automation-panel";
 import { MonitoringPanel } from "./monitoring-panel";
 import { ModerationPanel } from "./moderation-panel";
 import { NewsletterPanel } from "./newsletter-panel";
@@ -251,7 +252,7 @@ type AssignmentAction = "claim" | "release" | "complete" | "cancel" | "reopen" |
 type ReportingPacketReviewDecision = "select" | "merge" | "brief" | "hold" | "kill";
 type AssignmentDeskViewMode = "queue" | "budget";
 type UserRoleAction = "grant" | "revoke";
-type AdministrationPanel = "users" | "policies" | "sections" | "procedures" | "delegations" | "signups" | "newsletter" | "moderation" | "editorial-checks" | "monitoring";
+type AdministrationPanel = "users" | "policies" | "sections" | "procedures" | "automations" | "delegations" | "signups" | "newsletter" | "moderation" | "editorial-checks" | "monitoring";
 export type NewsDeskTab = "overview" | "desks" | "topics" | "concepts" | "references" | "messages" | "assignments" | "administration" | "search";
 type LexicalRuleScope = "publication" | "corpus" | "classifier" | "category";
 type AnalysisReindexMode = "online-update" | "classifier-retrain" | "scoped-topic-rebuild" | "entity-graph-rebuild" | "generated-analysis-rebuild";
@@ -4315,6 +4316,15 @@ function AdministrationDeskView({
                 <strong>Procedures</strong>
                 <span>Procedure registry and versioned Tactus code</span>
               </Link>
+              <Link
+                href={administrationPanelHref("automations", isDemo)}
+                data-news-desk-admin-nav="automations"
+                data-active={administrationPanel === "automations" || undefined}
+                onClick={() => onPanelChange("automations")}
+              >
+                <strong>Automation</strong>
+                <span>Procedures that start on their own</span>
+              </Link>
               <Link
                 href={administrationPanelHref("delegations", isDemo)}
                 data-news-desk-admin-nav="delegations"
@@ -4381,6 +4391,7 @@ function AdministrationDeskView({
               {administrationPanel === "newsletter" ? <NewsletterPanel isAdmin={canManageUsers} isDemo={isDemo} /> : null}
               {administrationPanel === "moderation" ? <ModerationPanel /> : null}
               {administrationPanel === "editorial-checks" ? <EditorialChecksAdminPanel /> : null}
+              {administrationPanel === "automations" ? <AutomationPanel isDemo={isDemo} /> : null}
               {administrationPanel === "monitoring" ? <MonitoringPanel isAdmin={canManageUsers} isDemo={isDemo} /> : null}
               {administrationPanel === "delegations" ? <AdministrationDelegationsPanel disabled={disabled} /> : null}
               {administrationPanel === "users" ? (
@@ -12855,7 +12866,7 @@ function readerPluginEnabled(): boolean {
 }
 
 function normalizeAdministrationPanel(value: string | null | undefined, demo = false): AdministrationPanel {
-  if (value === "policies" || value === "sections" || value === "procedures" || value === "delegations" || value === "editorial-checks" || value === "monitoring") return value;
+  if (value === "policies" || value === "sections" || value === "procedures" || value === "automations" || value === "delegations" || value === "editorial-checks" || value === "monitoring") return value;
   if (value === "signups" && signupPluginEnabled()) return value;
   if (value === "newsletter" && newsletterPluginEnabled(demo)) return value;
   if (value === "moderation" && readerPluginEnabled()) return value;

package/lib/automation-client.ts

@@ -0,0 +1,29 @@
+"use client";
+
+import { generateClient } from "aws-amplify/data";
+import type { AutomationResult } from "./automation-overview";
+
+type GraphQLResult = { data?: { automationOverview?: unknown }; errors?: { message?: string; errorType?: string }[] };
+
+/**
+ * Reads the automations through the site's own authenticated API (user pool, editor or admin).
+ * The browser holds no table name, key or secret: the function behind the query does the reads.
+ */
+export async function loadAutomationOverview(): Promise<AutomationResult> {
+  const client = generateClient({ authMode: "userPool" });
+  let result: GraphQLResult;
+  try {
+    result = (await client.graphql({
+      query: `query AutomationOverview($automationId: String) { automationOverview(automationId: $automationId) }`,
+      variables: {},
+    })) as GraphQLResult;
+  } catch (error) {
+    // Amplify throws the response when AppSync returns errors.
+    result = (error && typeof error === "object" && "errors" in error ? error : { errors: [{ message: "failed" }] }) as GraphQLResult;
+  }
+  const refused = result.errors?.some((entry) => /unauthorized|not authorized|forbidden/i.test(`${entry.errorType ?? ""} ${entry.message ?? ""}`));
+  if (refused) return { error: "forbidden" };
+  if (result.errors?.length || result.data?.automationOverview === undefined || result.data.automationOverview === null) return { state: "unavailable" };
+  const raw = result.data.automationOverview;
+  return (typeof raw === "string" ? JSON.parse(raw) : raw) as AutomationResult;
+}