@anthusai/papyrus 5.33.2 → 5.35.0

package/amplify/auth/resource.js

@@ -1,6 +1,6 @@
 import { defineAuth, secret } from "@aws-amplify/backend";
 import { manageUserRole } from "../functions/manage-user-role/resource.js";
-import { CfnUserPoolDomain } from "aws-cdk-lib/aws-cognito";
+import { CfnUserPoolDomain, CfnUserPoolIdentityProvider } from "aws-cdk-lib/aws-cognito";
 import { expandNewsroomRedirectUrls } from "./redirect-urls.js";
 // Default OAuth redirect URLs for the p.apyr.us app. Other publications pass
 // `auth.redirectUrls` to `defineSiteBackend` (or, for Papyrus's own backend,
@@ -35,6 +35,21 @@ export function authConfigFromEnv() {
 export function siteAuthRedirectUrls(config) {
     return config.redirectUrls ?? DEFAULT_AUTH_REDIRECT_URLS;
 }
+/** Keep Cognito's federated email verification state in sync with Google's verified claim. */
+export function applyGoogleEmailVerifiedMapping(authStack) {
+    const googleProviders = authStack.node
+        .findAll()
+        .filter((construct) => construct instanceof CfnUserPoolIdentityProvider && construct.providerName === "Google");
+    if (googleProviders.length !== 1) {
+        throw new Error(`Expected exactly one Google identity provider to map email_verified, found ${googleProviders.length}`);
+    }
+    const [provider] = googleProviders;
+    const mapping = provider.attributeMapping;
+    if (mapping !== undefined && (typeof mapping !== "object" || Array.isArray(mapping))) {
+        throw new Error("Expected Google identity provider attribute mappings to be a plain object");
+    }
+    provider.attributeMapping = { ...(mapping ?? {}), email_verified: "email_verified" };
+}
 export function defineSiteAuth(config) {
     const authRedirectUrls = expandNewsroomRedirectUrls(siteAuthRedirectUrls(config), config.newsroomBasePath);
     const disableGoogleOAuth = config.disableGoogleOAuth === true;

package/amplify/auth/resource.ts

@@ -1,7 +1,7 @@
 import { defineAuth, secret } from "@aws-amplify/backend";
 import { manageUserRole } from "../functions/manage-user-role/resource";
 import { Stack } from "aws-cdk-lib";
-import { CfnUserPoolDomain } from "aws-cdk-lib/aws-cognito";
+import { CfnUserPoolDomain, CfnUserPoolIdentityProvider } from "aws-cdk-lib/aws-cognito";
 import type { PapyrusAuthConfig } from "../site-backend-config";
 import { expandNewsroomRedirectUrls } from "./redirect-urls";
 
@@ -41,6 +41,24 @@ export function siteAuthRedirectUrls(config: PapyrusAuthConfig): string[] {
   return config.redirectUrls ?? DEFAULT_AUTH_REDIRECT_URLS;
 }
 
+/** Keep Cognito's federated email verification state in sync with Google's verified claim. */
+export function applyGoogleEmailVerifiedMapping(authStack: Stack): void {
+  const googleProviders = authStack.node
+    .findAll()
+    .filter((construct): construct is CfnUserPoolIdentityProvider =>
+      construct instanceof CfnUserPoolIdentityProvider && construct.providerName === "Google");
+  if (googleProviders.length !== 1) {
+    throw new Error(`Expected exactly one Google identity provider to map email_verified, found ${googleProviders.length}`);
+  }
+
+  const [provider] = googleProviders;
+  const mapping = provider.attributeMapping;
+  if (mapping !== undefined && (typeof mapping !== "object" || Array.isArray(mapping))) {
+    throw new Error("Expected Google identity provider attribute mappings to be a plain object");
+  }
+  provider.attributeMapping = { ...(mapping ?? {}), email_verified: "email_verified" };
+}
+
 export function defineSiteAuth(config: PapyrusAuthConfig) {
   const authRedirectUrls = expandNewsroomRedirectUrls(
     siteAuthRedirectUrls(config),

package/amplify/site-backend-config.ts

@@ -166,7 +166,7 @@ export type PapyrusSiteBackendConfig = {
   /**
    * SES receipt options for a site that is not the legacy p.apyr.us backend.
    * By default the site gets its own brand-named rule set that is never
-   * activated by CloudFormation (SES allows one active rule set per region).
+   * activated by CloudFormation (SES allows one active rule set per account/region).
    */
   inboundEmailSes?: {
     /** Add this site's rule to a rule set another stack owns instead of creating one. */

package/amplify/site-backend-names.js

@@ -68,8 +68,10 @@ export function deriveStorageBackupVaultName(identity, explicitName) {
 /**
  * The `papyrus-site-inbound-` prefix keeps a brand named `p-apyr-us` from
  * colliding with the legacy `papyrus-inbound-p-apyr-us` set.
- * SES allows one ACTIVE receipt rule set per region. A non-legacy site creates
- * its own brand-named rule set and never activates it from CloudFormation.
+ * SES allows one ACTIVE receipt rule set per account and region. A non-legacy
+ * site creates its own brand-named rule set and never activates it from
+ * CloudFormation. SES accounts that receive the same domain process their
+ * matching rules independently; the limit does not span accounts.
  */
 export function deriveReceiptRuleSetName(identity, inboundEmailDomain) {
     const name = isLegacyProductionApp(identity)

package/amplify/site-backend-names.ts

@@ -109,8 +109,10 @@ export function deriveStorageBackupVaultName(identity: SiteBackendIdentity, expl
 /**
  * The `papyrus-site-inbound-` prefix keeps a brand named `p-apyr-us` from
  * colliding with the legacy `papyrus-inbound-p-apyr-us` set.
- * SES allows one ACTIVE receipt rule set per region. A non-legacy site creates
- * its own brand-named rule set and never activates it from CloudFormation.
+ * SES allows one ACTIVE receipt rule set per account and region. A non-legacy
+ * site creates its own brand-named rule set and never activates it from
+ * CloudFormation. SES accounts that receive the same domain process their
+ * matching rules independently; the limit does not span accounts.
  */
 export function deriveReceiptRuleSetName(identity: SiteBackendIdentity, inboundEmailDomain: string): string {
   const name = isLegacyProductionApp(identity)

package/amplify/site-backend.js

@@ -18,7 +18,7 @@ import { assertValidPublicationConfig } from "./site-backend-config.js";
 import { revalidateSecretReadStatement } from "./revalidate-secret-policy.js";
 import { revalidateDistributionEnvironment, revalidateInvalidationStatement, validateRevalidateDistributionIds, } from "./revalidate-invalidation-settings.js";
 import { addInvalidationPathAlarm } from "./publication/invalidation-alarm.js";
-import { applyCognitoDomainPrefix, authConfigFromEnv, defineSiteAuth, siteAuthRedirectUrls } from "./auth/resource.js";
+import { applyCognitoDomainPrefix, applyGoogleEmailVerifiedMapping, authConfigFromEnv, defineSiteAuth, siteAuthRedirectUrls } from "./auth/resource.js";
 import { PROSPECTUS_SIGN_IN_CALLBACK_PATH, addProspectusGoogleOnlyClient } from "./auth/prospectus-google-client.js";
 import { defineSiteData } from "./data/resource.js";
 import { editorialChecks } from "./functions/editorial-checks/resource.js";
@@ -116,6 +116,9 @@ export function defineSiteBackend(papyrusSite) {
         slackDelivery,
         storage,
     });
+    if (authConfig.disableGoogleOAuth !== true) {
+        applyGoogleEmailVerifiedMapping(backend.auth.stack);
+    }
     orderModelStacksInWaves(backend.data.resources.graphqlApi.node.scope, Object.keys(backend.data.resources.tables), site.resolverWaveSize ?? DEFAULT_RESOLVER_WAVE_SIZE);
     const requestedCognitoDomainPrefix = (authConfig.cognitoDomainPrefix ?? "").trim();
     if (authConfig.applyCognitoDomainPrefix === true
@@ -469,7 +472,7 @@ export function defineSiteBackend(papyrusSite) {
             resources: ["*"],
         }));
         const inboundEventStack = Stack.of(receiveLambda);
-        // SES allows one active receipt rule set per region, so a non-legacy site
+        // SES allows one active receipt rule set per account and region, so a non-legacy site
         // creates its own brand-named rule set and never activates it here.
         const inboundSesPlan = planInboundEmailSes(siteBackendIdentity, enableInboundEmail, site.inboundEmailSes);
         if (inboundSesPlan.createReceiptRules) {

package/amplify/site-backend.ts

@@ -25,7 +25,7 @@ import {
   validateRevalidateDistributionIds,
 } from "./revalidate-invalidation-settings";
 import { addInvalidationPathAlarm } from "./publication/invalidation-alarm";
-import { applyCognitoDomainPrefix, authConfigFromEnv, defineSiteAuth, siteAuthRedirectUrls } from "./auth/resource";
+import { applyCognitoDomainPrefix, applyGoogleEmailVerifiedMapping, authConfigFromEnv, defineSiteAuth, siteAuthRedirectUrls } from "./auth/resource";
 import { PROSPECTUS_SIGN_IN_CALLBACK_PATH, addProspectusGoogleOnlyClient } from "./auth/prospectus-google-client";
 import { defineSiteData } from "./data/resource";
 import { editorialChecks } from "./functions/editorial-checks/resource";
@@ -138,6 +138,10 @@ export function defineSiteBackend(papyrusSite: PapyrusSite) {
     storage,
   });
 
+  if (authConfig.disableGoogleOAuth !== true) {
+    applyGoogleEmailVerifiedMapping(backend.auth.stack);
+  }
+
   orderModelStacksInWaves(
     backend.data.resources.graphqlApi.node.scope as Construct,
     Object.keys(backend.data.resources.tables),
@@ -601,7 +605,7 @@ export function defineSiteBackend(papyrusSite: PapyrusSite) {
 
     const inboundEventStack = Stack.of(receiveLambda);
 
-    // SES allows one active receipt rule set per region, so a non-legacy site
+    // SES allows one active receipt rule set per account and region, so a non-legacy site
     // creates its own brand-named rule set and never activates it here.
     const inboundSesPlan = planInboundEmailSes(siteBackendIdentity, enableInboundEmail, site.inboundEmailSes);
     if (inboundSesPlan.createReceiptRules) {

package/components/news-desk-client-provider.tsx

@@ -1,6 +1,7 @@
 "use client";
 
 import { Hub } from "aws-amplify/utils";
+import { isUnauthenticatedError } from "./reader-auth-state";
 import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState } from "react";
 import type { DevSandboxEditorAuth } from "../lib/dev-sandbox-editor-auth";
 import type { CategorySteeringDashboard } from "../lib/category-repository";
@@ -14,9 +15,10 @@ import {
 } from "./news-desk-taxonomy-client";
 import {
   beginAccessCheck,
-  beginAuthenticatedDeskHydration,
+  beginDeskLoad,
   createInitialNewsDeskShellState,
   patchDashboard,
+  resolveAccessFailure,
   resolveDashboardFailure,
   resolveDashboardReady,
   resolveForbidden,
@@ -94,11 +96,11 @@ export function NewsDeskClientProvider({
       return;
     }
     if (access.status === "error") {
-      setShell((current) => resolveDashboardFailure(current, access.auth, access.error));
+      setShell((current) => resolveAccessFailure(current, access.error));
       return;
     }
 
-    setShell((current) => beginAuthenticatedDeskHydration(current, access.auth, { canManageUsers: access.isAdmin }));
+    setShell((current) => beginDeskLoad(current, access.auth));
 
     try {
       const dashboard = await loadEditorNewsDeskDashboard({ isAdmin: access.isAdmin });
@@ -106,6 +108,10 @@ export function NewsDeskClientProvider({
       setShell((current) => resolveDashboardReady(current, dashboard, access.auth, new Date().toISOString()));
     } catch (error) {
       if (bootstrapSequenceRef.current !== sequence) return;
+      if (isUnauthenticatedError(error)) {
+        setShell((current) => resolveSignedOut(current, { status: "signedOut", label: "Signed out" }));
+        return;
+      }
       if (isAuthorizationError(error)) {
         setShell((current) => resolveForbidden(current, access.auth));
         return;
@@ -132,11 +138,7 @@ export function NewsDeskClientProvider({
       ));
     } catch (error) {
       const auth = shellRef.current.auth;
-      setShell((current) => resolveDashboardFailure(
-        current,
-        auth,
-        error instanceof Error ? error.message : "Could not refresh assignments.",
-      ));
+      setShell((current) => resolvePrivateReadFailure(current, auth, error, "Could not refresh assignments."));
     }
   }, []);
 
@@ -153,11 +155,7 @@ export function NewsDeskClientProvider({
       ));
     } catch (error) {
       const auth = shellRef.current.auth;
-      setShell((current) => resolveDashboardFailure(
-        current,
-        auth,
-        error instanceof Error ? error.message : "Could not refresh doctrine records.",
-      ));
+      setShell((current) => resolvePrivateReadFailure(current, auth, error, "Could not refresh doctrine records."));
     }
   }, []);
 
@@ -175,11 +173,7 @@ export function NewsDeskClientProvider({
       ));
     } catch (error) {
       const auth = shellRef.current.auth;
-      setShell((current) => resolveDashboardFailure(
-        current,
-        auth,
-        error instanceof Error ? error.message : "Could not refresh the user directory.",
-      ));
+      setShell((current) => resolvePrivateReadFailure(current, auth, error, "Could not refresh the user directory."));
     }
   }, []);
 
@@ -221,6 +215,12 @@ function isAuthorizationError(error: unknown): boolean {
   return /not authorized|unauthorized|access denied|forbidden/i.test(message);
 }
 
+function resolvePrivateReadFailure(state: NewsDeskShellState, auth: NewsDeskShellState["auth"], error: unknown, fallback: string): NewsDeskShellState {
+  if (isUnauthenticatedError(error)) return resolveSignedOut(state, { status: "signedOut", label: "Signed out" });
+  if (isAuthorizationError(error)) return resolveForbidden(state, auth);
+  return resolveDashboardFailure(state, auth, error instanceof Error ? error.message : fallback);
+}
+
 export function useOptionalNewsDeskClient() {
   return useContext(NewsDeskClientContext);
 }

package/components/news-desk-taxonomy-client.ts

@@ -832,10 +832,8 @@ export async function loadEditorResolvedAccessState(): Promise<EditorAccessState
     };
   }
   try {
-    const snapshot = await loadReaderSessionSnapshot();
-    if (!snapshot.hasSession || snapshot.auth.status === "signedOut") {
-      return { status: "signedOut", isEditor: false, isAdmin: false, auth: snapshot.auth, error: null };
-    }
+    // One refreshed session supplies both identity and current group claims.
+    // A second, sequential session read only extends the blocking access check.
     const refreshed = await loadReaderSessionSnapshot({ forceRefresh: true });
     if (!refreshed.hasSession || refreshed.auth.status === "signedOut") {
       return { status: "signedOut", isEditor: false, isAdmin: false, auth: refreshed.auth, error: null };
@@ -883,9 +881,8 @@ export async function loadEditorNewsDeskDashboard({ isAdmin }: { isAdmin: boolea
     isAdmin ? loadUserDirectory() : Promise.resolve([]),
   ]);
   const summaryError = summaryResult.status === "rejected" ? summaryResult.reason : null;
-  if (summaryError && isUnauthenticatedError(summaryError)) {
-    throw summaryError;
-  }
+  if (summaryError) throw summaryError;
+  if (userDirectoryResult.status === "rejected") throw userDirectoryResult.reason;
   const summary = summaryResult.status === "fulfilled" ? summaryResult.value : null;
   const userDirectory = userDirectoryResult.status === "fulfilled" ? userDirectoryResult.value : [];
 

package/components/newsroom-access-gate.tsx

@@ -6,11 +6,13 @@ import { SITE_BRAND } from "../lib/site-brand";
 import type { NewsDeskShellState } from "../lib/news-desk-session";
 import { cn } from "../lib/utils";
 import { NewsroomOpsShell } from "./newsroom-ops-shell";
+import { NewsroomOverviewSkeleton } from "./newsroom-overview-skeleton";
 import { ReaderAuthControl } from "./reader-auth-control";
 import { buttonVariants } from "./ui/button";
 
 export function NewsDeskAccessGate({ shell, showSectionTabs = false }: { shell: NewsDeskShellState | null; showSectionTabs?: boolean }) {
   const accessPhase = shell?.phase ?? "checkingAccess";
+  const pending = accessPhase === "checkingAccess" || accessPhase === "loadingDesk";
 
   return (
     <NewsroomOpsShell
@@ -21,9 +23,20 @@ export function NewsDeskAccessGate({ shell, showSectionTabs = false }: { shell:
       headerActions={(
         <Link className={cn(buttonVariants({ variant: "ghost", size: "sm" }))} href="/settings">Settings</Link>
       )}
-      pageTitle="Newsroom"
+      pageTitle={showSectionTabs ? "Notification Center" : "Newsroom"}
       showNavigation={showSectionTabs}
     >
+      {pending ? (showSectionTabs ? <NewsroomOverviewSkeleton /> : (
+        <div aria-label="Loading newsroom" className="space-y-4" data-newsroom-page-skeleton role="status">
+          <div className="h-6 w-48 rounded bg-muted" />
+          <div className="h-4 w-3/4 rounded bg-muted" />
+          <div className="grid gap-3 sm:grid-cols-2">
+            {Array.from({ length: 4 }, (_, index) => <div className="h-32 rounded-xl border bg-card p-4" key={index}>
+              <div className="h-4 w-2/3 rounded bg-muted" /><div className="mt-4 h-3 w-1/2 rounded bg-muted" />
+            </div>)}
+          </div>
+        </div>
+      )) : (
       <section aria-live="polite" data-news-desk-access={accessPhase} data-news-desk-access-phase={accessPhase}>
         <div className="space-y-3 rounded-xl border border-border bg-card p-6">
           <p className="m-0 text-[0.7rem] font-semibold uppercase tracking-[0.08em] text-muted-foreground">Access</p>
@@ -38,6 +51,7 @@ export function NewsDeskAccessGate({ shell, showSectionTabs = false }: { shell:
           ) : null}
         </div>
       </section>
+      )}
     </NewsroomOpsShell>
   );
 }

package/components/newsroom-article-editor.tsx

@@ -513,8 +513,10 @@ export function NewsroomArticleEditor({ articleId, demo, embedded = false }: { a
     }
     if (!editor) {
       return (
-        <div className="flex items-center gap-2 text-sm text-muted-foreground">
-          <Spinner /> Loading article…
+        <div aria-label="Loading article" className="space-y-5" role="status">
+          <div className="h-8 w-2/3 rounded bg-muted" />
+          <div className="grid gap-4 sm:grid-cols-2"><div className="h-12 rounded bg-muted" /><div className="h-12 rounded bg-muted" /></div>
+          <div className="h-64 rounded-xl border bg-card p-4"><div className="h-4 w-5/6 rounded bg-muted" /><div className="mt-3 h-4 w-3/4 rounded bg-muted" /></div>
         </div>
       );
     }

package/components/newsroom-articles-view.tsx

@@ -5,7 +5,6 @@ import Link from "next/link";
 import { useEffect, useMemo, useState } from "react";
 import { Badge } from "./ui/badge";
 import { buttonVariants } from "./ui/button";
-import { Spinner } from "./ui/spinner";
 import { Tabs, TabsList, TabsTrigger } from "./ui/tabs";
 import { SITE_BRAND } from "../lib/site-brand";
 import { getNewsroomNavHref } from "../lib/newsroom-nav";
@@ -89,15 +88,16 @@ export function NewsroomArticlesView({ demo }: { demo: boolean }) {
           </TabsList>
         </Tabs>
         {loadError ? <NewsroomOpsStatusBanner tone="error">{loadError}</NewsroomOpsStatusBanner> : null}
-        {rows === null && !loadError ? (
-          <div className="flex items-center gap-2 text-sm text-muted-foreground">
-            <Spinner /> Loading articles…
-          </div>
-        ) : null}
         {rows !== null && visibleRows.length === 0 ? (
           <p className="text-sm text-muted-foreground">Nothing here yet.</p>
         ) : null}
         <ul className="divide-y divide-border rounded-xl border border-border bg-card" data-newsroom-articles-list>
+          {rows === null && !loadError ? Array.from({ length: 5 }, (_, index) => (
+            <li aria-hidden="true" className="flex items-center justify-between px-4 py-3" key={index}>
+              <span className="w-2/3"><span className="block h-4 w-3/4 rounded bg-muted" /><span className="mt-2 block h-3 w-1/2 rounded bg-muted" /></span>
+              <span className="h-5 w-16 rounded bg-muted" />
+            </li>
+          )) : null}
           {visibleRows.map((row) => (
             <li key={row.id}>
               <Link

package/components/newsroom-board-view.tsx

@@ -160,7 +160,7 @@ export function NewsroomBoardView({ subject, deskId }: { subject: NewsroomBoardS
   if (!allowed) return <NewsDeskAccessGate shell={session?.shell ?? null} />;
   return <NewsroomOpsShell activeTab={subject === "contentItem" ? "articles" : subject === "desk" ? "desks" : "assignments"} appTitle={SITE_BRAND.appTitle} backLabel={SITE_BRAND.backToHomeLabel} pageTitle={pageTitle}
     headerActions={<>
-      <span role="status" className="organizer-board-note">{loading ? "Loading records…" : `${issues.length} records loaded.`}</span>
+      {!loading ? <span role="status" className="organizer-board-note">{issues.length} records loaded.</span> : null}
       <div role="group" aria-label="Record presentation" className="organizer-board-view-toggle"><button type="button" className="organizer-header-button" aria-pressed={view === "board"} onClick={() => setView("board")}>Board</button><button type="button" className="organizer-header-button" aria-pressed={view === "list"} onClick={() => setView("list")}>List</button></div>
       {showsContentItems && (
         <Link className="organizer-header-button" data-newsroom-article-new href={getNewsroomNavHref(newsroomHref("articles", "new"))}>
@@ -174,11 +174,16 @@ export function NewsroomBoardView({ subject, deskId }: { subject: NewsroomBoardS
       {error && <NewsroomOpsStatusBanner tone="error">{error}</NewsroomOpsStatusBanner>}
       {subject === "desk" && <IssueTypeFilter config={config} value={typeFilter} onChange={setTypeFilter} name="Record type" className="organizer-board-type-filter" />}
       <div className="organizer-board-body" data-detail-open={Boolean(issue)} ref={boardBodyRef} onScrollCapture={handleBoardScroll}>
-        <IssueCollection issues={issues} config={config} query={{ type: subject === "desk" ? issueTypeFromFilter(typeFilter) : boardType }} view={view}
+        {loading && !issues.length ? <div aria-label="Loading board records" className="grid w-full grid-cols-1 gap-3 sm:grid-cols-3" role="status">
+          {Array.from({ length: 3 }, (_, column) => <div className="min-h-64 space-y-3 rounded-xl border bg-card p-4" key={column}>
+            <div className="h-4 w-1/2 rounded bg-muted" />
+            {Array.from({ length: 2 }, (_, row) => <div className="h-24 rounded-lg border bg-background p-3" key={row}><div className="h-4 w-3/4 rounded bg-muted" /><div className="mt-3 h-3 w-1/2 rounded bg-muted" /></div>)}
+          </div>)}
+        </div> : <IssueCollection issues={issues} config={config} query={{ type: subject === "desk" ? issueTypeFromFilter(typeFilter) : boardType }} view={view}
           motion={lowMotion ? STATIC_MOTION : undefined}
           collapsedColumns={columnState.collapsedColumns} onToggleCollapse={columnState.toggleColumn} initialScroll="start"
           selectedIssueId={selected} detailOpen={Boolean(issue)} onSelectIssue={item => setSelected(item.id)} ariaLabel={pageTitle}
-          emptyMessage={loading ? "Loading records…" : error ? "Records could not be loaded." : "No records in this selection."} />
+          emptyMessage={error ? "Records could not be loaded." : "No records in this selection."} />}
         {issue && <IssueDetailPanel issue={issue} onClose={() => setSelected(null)} fields={[]}>
           {issue.kind === "contentItem"
             ? <>

package/components/newsroom-ops-overview.tsx

@@ -1,24 +1,13 @@
 "use client";
 
-import {
-  BookOpenIcon,
-  ClipboardListIcon,
-  FileTextIcon,
-  LayersIcon,
-  MessageSquareIcon,
-  NetworkIcon,
-  SearchIcon,
-  SettingsIcon,
-} from "lucide-react";
 import Link from "next/link";
 import { usePathname } from "next/navigation";
 import { useMemo } from "react";
 import { Badge } from "./ui/badge";
 import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "./ui/card";
-import type { AssignmentRecord, MessageRecord, NewsroomSectionRecord, ReferenceRecord } from "../lib/category-repository";
-import { getNewsroomNavHref, NEWSROOM_OPS_NAV, type NewsroomNavTabId } from "../lib/newsroom-nav";
+import type { AssignmentRecord, NewsroomSectionRecord, ReferenceRecord } from "../lib/category-repository";
+import { getNewsroomNavHref } from "../lib/newsroom-nav";
 import {
-  countReferencesByStatus,
   filterReferencesByStatus,
   formatReferenceListDate,
   referenceDisplayTitle,
@@ -42,7 +31,6 @@ type NewsroomOpsOverviewProps = {
   decisions?: ReadonlyMap<string, RelevanceDecisionView>;
   demo?: boolean;
   humanCuratedReferenceLineageIds?: ReadonlySet<string>;
-  messages: MessageRecord[];
   newsroomSections: NewsroomSectionRecord[];
   references: ReferenceRecord[];
 };
@@ -50,51 +38,17 @@ type NewsroomOpsOverviewProps = {
 const NO_DECISIONS: ReadonlyMap<string, RelevanceDecisionView> = new Map();
 const NO_IDS: ReadonlySet<string> = new Set();
 
-type DestinationKey = Exclude<NewsroomNavTabId, "overview" | "desks">;
-
-const DESTINATION_ICONS: Record<DestinationKey, typeof BookOpenIcon> = {
-  articles: FileTextIcon,
-  assignments: ClipboardListIcon,
-  references: BookOpenIcon,
-  messages: MessageSquareIcon,
-  topics: LayersIcon,
-  concepts: NetworkIcon,
-  administration: SettingsIcon,
-  search: SearchIcon,
-};
-
-const DESTINATIONS = NEWSROOM_OPS_NAV.filter((item) => item.id !== "overview").map((item) => ({
-  key: item.id as DestinationKey,
-  label: item.label,
-  detail: item.detail,
-  href: item.href,
-  icon: DESTINATION_ICONS[item.id as DestinationKey],
-}));
-
-function openAssignmentCount(assignments: AssignmentRecord[]): number {
-  return assignments.filter((assignment) => {
-    const status = assignment.status?.trim().toLowerCase() ?? "";
-    return status === "open" || status === "claimed" || status === "pending";
-  }).length;
-}
-
-function recentMessageCount(messages: MessageRecord[]): number {
-  return messages.filter((message) => message.status !== "archived").length;
-}
-
 export function NewsroomOpsOverview({
   actorLabel = "",
   assignments,
   decisions = NO_DECISIONS,
   demo = false,
   humanCuratedReferenceLineageIds = NO_IDS,
-  messages,
   newsroomSections,
   references,
 }: NewsroomOpsOverviewProps) {
   const pathname = usePathname();
   const canonicalReferences = useMemo(() => selectCanonicalReferenceRecords(references), [references]);
-  const referenceCounts = useMemo(() => countReferencesByStatus(canonicalReferences), [canonicalReferences]);
   const pendingReferences = useMemo(
     () => filterReferencesByStatus(canonicalReferences, "pending").slice(0, 5),
     [canonicalReferences],
@@ -115,12 +69,6 @@ export function NewsroomOpsOverview({
   const coreDesks = useMemo(() => desks.filter(desk => newsroomDeskKind(desk) === "core"), [desks]);
   const rotatingDesks = useMemo(() => desks.filter(desk => newsroomDeskKind(desk) === "rotating"), [desks]);
 
-  const destinationCounts: Partial<Record<DestinationKey, number | null>> = {
-    references: referenceCounts.pending ?? 0,
-    assignments: openAssignmentCount(assignments),
-    messages: recentMessageCount(messages),
-  };
-
   return (
     <div
       className="space-y-8 font-sans"
@@ -128,51 +76,15 @@ export function NewsroomOpsOverview({
       data-newsroom-ops-home="true"
     >
       <div className="space-y-8" data-newsroom-overview-feeds>
-        <NotificationCenter
-          actorLabel={actorLabel}
-          decisions={decisions}
-          demo={demo}
-          humanCuratedReferenceLineageIds={humanCuratedReferenceLineageIds}
-          references={canonicalReferences}
-        />
-        <section aria-label="Destinations" className="space-y-3">
-          <h2 className="text-sm font-medium text-muted-foreground">Go to</h2>
-          <div className="grid grid-cols-2 gap-3 sm:grid-cols-4">
-            {DESTINATIONS.map((meta) => {
-              const key = meta.key;
-              const Icon = meta.icon;
-              const count = destinationCounts[key];
-              const href = getNewsroomNavHref(meta.href, demo);
-              return (
-                <Link
-                  className="group block rounded-xl focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
-                  data-newsroom-ops-destination={key}
-                  data-newsroom-overview-section={key}
-                  href={href}
-                  key={key}
-                >
-                  <Card className="h-full transition-colors group-hover:border-primary/40">
-                    <CardHeader className="space-y-3 p-4">
-                      <div className="flex items-center justify-between gap-2">
-                        <span className="flex size-9 items-center justify-center rounded-lg bg-primary/10 text-primary">
-                          <Icon className="size-4" aria-hidden="true" />
-                        </span>
-                        {count != null && count > 0 ? (
-                          <Badge variant="default">{count}</Badge>
-                        ) : null}
-                      </div>
-                      <div className="space-y-0.5">
-                        <CardTitle className="text-base font-semibold">{meta.label}</CardTitle>
-                        <CardDescription>{meta.detail}</CardDescription>
-                      </div>
-                    </CardHeader>
-                  </Card>
-                </Link>
-              );
-            })}
-          </div>
-        </section>
-
+        <div aria-label="Notification Center feed" className="newsroom-overview-feed-frame overflow-y-auto rounded-xl border bg-card p-4 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring" data-newsroom-overview-notifications role="region" tabIndex={0}>
+          <NotificationCenter
+            actorLabel={actorLabel}
+            decisions={decisions}
+            demo={demo}
+            humanCuratedReferenceLineageIds={humanCuratedReferenceLineageIds}
+            references={canonicalReferences}
+          />
+        </div>
         <section aria-label="Needs attention" className="space-y-3">
           <h2 className="text-sm font-medium text-muted-foreground">Needs attention</h2>
           {pendingReferences.length || attentionAssignments.length ? (
@@ -226,7 +138,7 @@ export function NewsroomOpsOverview({
           ) : (
             <Card>
               <CardContent className="p-4 text-sm text-muted-foreground">
-                Nothing needs attention right now. Check References for new intake or open Assignments from the destinations above.
+                No pending references or open assignments. Check those destinations for other work.
               </CardContent>
             </Card>
           )}

package/components/newsroom-ops-shell.tsx

@@ -8,7 +8,7 @@ import { cn } from "../lib/utils";
 import { useEffect, useId, useState, type ReactNode } from "react";
 import Link from "next/link";
 import { usePathname, useRouter, useSearchParams } from "next/navigation";
-import { BookOpen, ClipboardList, Menu, Search, MessagesSquare, PanelLeftClose, PanelLeftOpen, Settings, UserRound, LogIn, LogOut } from "lucide-react";
+import { BookOpen, ClipboardList, House, Menu, Search, MessagesSquare, PanelLeftClose, PanelLeftOpen, Settings, UserRound, LogIn, LogOut } from "lucide-react";
 import { ORGANIZER_NAV_GROUPS, ORGANIZER_PRIMARY_NAV, ORGANIZER_SETTINGS_DESTINATION } from "../lib/newsroom-organizer-nav";
 import { browserPathToInternalNewsroomPath } from "../lib/newsroom-base-path";
 import { getNewsroomNavHref } from "../lib/newsroom-nav";
@@ -55,7 +55,7 @@ function OrganizerSearch({ demo }: { demo: boolean }) {
   </form>;
 }
 
-const ICONS = { articles: ClipboardList, references: BookOpen, messages: MessagesSquare };
+const ICONS = { overview: House, articles: ClipboardList, references: BookOpen, messages: MessagesSquare };
 
 /** Navigation is a presentation layer; existing route and server authorization still own access. */
 function Navigation({ activePath, demo, admin, surface, onNavigate }: { activePath: string; demo: boolean; admin: boolean; surface: string; onNavigate?: () => void }) {

package/components/newsroom-organizer.css

@@ -23,6 +23,8 @@ body:has(.newsroom-organizer)>[data-staging-banner]{flex-shrink:0}
 .organizer-sidebar-head{display:flex;align-items:flex-start;justify-content:space-between;gap:8px}.organizer-sidebar-head .organizer-brand{flex:1;min-width:0}
 .organizer-header-actions{display:flex;align-items:center;gap:8px;min-width:0;max-width:45%;overflow-x:auto}
 .organizer-main{min-width:0;min-height:0;overflow:auto;overscroll-behavior:contain;flex:1;padding:16px 0}
+.newsroom-overview-feed-frame{height:32rem}
+@media(min-width:640px){.newsroom-overview-feed-frame{height:38rem}}
 .organizer-main>[data-category-steering]{min-height:0}.organizer-demo-notice{font-size:11px;color:var(--org-muted);margin-bottom:12px}
 .organizer-account{display:flex;align-items:center;gap:10px;min-height:44px;flex-shrink:0;border:1px solid var(--org-line);padding:8px;text-align:left;border-radius:3px}
 .organizer-account span{min-width:0}.organizer-account strong{display:block;font:600 11px var(--kb-theme-ui-font);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.organizer-account small{display:block;font-size:9px;color:var(--org-muted);margin-top:2px}

package/components/newsroom-overview-skeleton.tsx

@@ -0,0 +1,25 @@
+"use client";
+
+import * as React from "react";
+
+/** Placeholder geometry for the overview while private records or access are unresolved. */
+export function NewsroomOverviewSkeleton() {
+  return (
+    <div aria-label="Loading newsroom overview" className="space-y-8 font-sans" data-newsroom-overview-skeleton role="status">
+      <section className="newsroom-overview-feed-frame space-y-4 overflow-hidden rounded-xl border bg-card p-4" aria-label="Notification Center">
+        <div className="h-6 w-48 rounded bg-muted" />
+        <div className="h-4 w-3/4 max-w-xl rounded bg-muted" />
+        <div className="h-4 w-2/3 max-w-lg rounded bg-muted" />
+        <div className="grid gap-3 sm:grid-cols-2">
+          {Array.from({ length: 4 }, (_, index) => <div className="h-28 rounded-xl border bg-card p-4" key={index}>
+            <div className="h-4 w-2/3 rounded bg-muted" /><div className="mt-4 h-3 w-1/2 rounded bg-muted" />
+          </div>)}
+        </div>
+      </section>
+      <section aria-label="Needs attention" className="space-y-3">
+        <div className="h-4 w-32 rounded bg-muted" />
+        <div className="h-16 rounded-xl border bg-card p-4"><div className="h-4 w-1/2 rounded bg-muted" /><div className="mt-2 h-3 w-1/3 rounded bg-muted" /></div>
+      </section>
+    </div>
+  );
+}