@anthusai/papyrus 5.36.0 → 5.38.0

package/amplify/plugins/reader-steering/function/handler.py

@@ -1015,15 +1015,22 @@ class DynamoReaderStore:
             raise
         return True
 
-    def change_proposal(self, proposal_id: str, changes: dict[str, Any], expected_state: str, now_iso: str) -> bool:
+    def change_proposal(self, proposal_id: str, changes: dict[str, Any], expected_state: str, now_iso: str, *, expected_updated_at: str | None = None) -> bool:
+        """Apply ``changes`` if the state (and, when given, ``updatedAt``) is still what the caller saw; a value of ``None`` removes the attribute."""
         names = {"#st": "state", "#u": "updatedAt", **{f"#c{index}": key for index, key in enumerate(changes)}}
-        assignments = ", ".join(f"#c{index} = :c{index}" for index in range(len(changes)))
-        values = {":expected": expected_state, ":now": now_iso, **{f":c{index}": value for index, value in enumerate(changes.values())}}
+        sets = ", ".join(f"#c{index} = :c{index}" for index, value in enumerate(changes.values()) if value is not None)
+        removes = ", ".join(f"#c{index}" for index, value in enumerate(changes.values()) if value is None)
+        values = {":expected": expected_state, ":now": now_iso, **{f":c{index}": value for index, value in enumerate(changes.values()) if value is not None}}
+        condition = "#st = :expected"
+        if expected_updated_at is not None:
+            condition += " AND #u = :seen"
+            values[":seen"] = expected_updated_at
+        expression = f"SET {sets + ', ' if sets else ''}#u = :now" + (f" REMOVE {removes}" if removes else "")
         try:
             self._table("proposal").update_item(
                 Key={"id": proposal_id},
-                UpdateExpression=f"SET {assignments}, #u = :now",
-                ConditionExpression="#st = :expected",
+                UpdateExpression=expression,
+                ConditionExpression=condition,
                 ExpressionAttributeNames=names,
                 ExpressionAttributeValues=values,
             )

package/amplify/plugins/reader-steering/function/proposals.py

@@ -6,7 +6,7 @@ and steered by votes; an editor decides. Staff reach this through the ``fileProp
 mutations (editors and admins; the function checks the groups again). An operator's IAM role in the function's own account
 (an unattended automation or an agent without a browser sign-in) may also file an AI proposal and move it from draft to
 in_steering or declined, and nothing else: approving, deciding after review and overriding stay with editors and admins.
-Every state change is appended to the proposal's
+``editProposal`` is the editor tier (pin, hold, exclude and restore votes): editors and admins only, never an operator. Every state change is appended to the proposal's
 ``history`` in the same conditional write that changes the state, so the history and the state cannot disagree.
 
 Nothing here knows a person id. The proposer is ``"ai"`` or a reader's siteSubject, which is stored and never published; the
@@ -56,7 +56,19 @@ TARGET_COUNTS: dict[str, tuple[int, int]] = {
 }
 TARGET_TYPES = ("concept", "entity", "column", "story", "cluster")
 
-MUTATIONS = ("fileProposal", "transitionProposal")
+MUTATIONS = ("fileProposal", "transitionProposal", "editProposal")
+
+#: What ``editProposal`` does beyond moving the state. Editors and admins only: an operator is refused every one of them.
+PIN, UNPIN, HOLD, RELEASE, EXCLUDE_VOTES, UNDO_EXCLUSION = "pin", "unpin", "hold", "release", "exclude_votes", "undo_exclusion"
+EDIT_ACTIONS = (PIN, UNPIN, HOLD, RELEASE, EXCLUDE_VOTES, UNDO_EXCLUSION)
+FINAL_STATES = (APPROVED, DECLINED, OVERRIDDEN_BY_EDITOR)
+#: The batch rules for excluding votes. A rule excludes the votes on one proposal that were already cast, by accounts that were
+#: younger than ``hours`` when they voted; the snapshot applies it (votes are not counted here). ``label`` is the public wording.
+EXCLUSION_RULES: dict[str, dict[str, Any]] = {
+    "new-accounts-24h": {"hours": 24, "label": "accounts under 24 h"},
+}
+EXCLUSION_ID = re.compile(r"exc-[0-9a-f]{12}")
+MAXIMUM_EDITOR_LOG = 200
 
 
 def event_field_name(event: dict[str, Any]) -> str | None:
@@ -87,6 +99,11 @@ MAXIMUM_BODY = 50_000
 MAXIMUM_REASON = 500
 MAXIMUM_EVIDENCE_SOURCE = 200
 MAXIMUM_EVIDENCE_SIGNALS = 1_000_000
+#: An optional figure spec kept in ``evidence.figure``: a small chart of cited series (no image), approved with the copy.
+FIGURE_TYPES = ("line", "bar")
+MAXIMUM_FIGURE_POINTS = 60
+MAXIMUM_FIGURE_SERIES = 6
+MAXIMUM_FIGURE_BYTES = 8_000
 
 
 @dataclass
@@ -109,7 +126,7 @@ class ProposalStore(Protocol):
 
     def create_proposal(self, row: dict[str, Any]) -> bool: ...
 
-    def change_proposal(self, proposal_id: str, changes: dict[str, Any], expected_state: str, now_iso: str) -> bool: ...
+    def change_proposal(self, proposal_id: str, changes: dict[str, Any], expected_state: str, now_iso: str, *, expected_updated_at: str | None = None) -> bool: ...
 
 
 def staff_subject(identity: dict[str, Any]) -> str | None:
@@ -178,18 +195,53 @@ def clean_targets(kind: str, raw: Any) -> list[dict[str, str]] | Outcome:
     return targets
 
 
+def clean_figure(raw: Any) -> dict[str, Any] | None:
+    """A chart spec ``{type, title, caption, unit, source, x, series: [{signal, label, values}]}``, or None when it is malformed.
+
+    Unknown keys are dropped. Every series has exactly one value per ``x`` label; values are whole or decimal numbers, never text."""
+    if not isinstance(raw, dict) or raw.get("type") not in FIGURE_TYPES:
+        return None
+    title, caption, unit, source = (clean_text(raw.get(key), limit) for key, limit in (("title", 200), ("caption", 300), ("unit", 60), ("source", MAXIMUM_EVIDENCE_SOURCE)))
+    x, series = raw.get("x"), raw.get("series")
+    if None in (title, caption, unit, source) or not isinstance(x, list) or not isinstance(series, list):
+        return None
+    if not 2 <= len(x) <= MAXIMUM_FIGURE_POINTS or not 1 <= len(series) <= MAXIMUM_FIGURE_SERIES:
+        return None
+    labels = [clean_text(label, 20) for label in x]
+    if None in labels:
+        return None
+    cleaned = []
+    for entry in series:
+        if not isinstance(entry, dict):
+            return None
+        signal, label, values = clean_text(entry.get("signal"), 130), clean_text(entry.get("label"), 120), entry.get("values")
+        if signal is None or label is None or not isinstance(values, list) or len(values) != len(labels):
+            return None
+        if any(isinstance(value, bool) or not isinstance(value, (int, float)) or not 0 <= value <= 1_000_000_000 for value in values):
+            return None
+        cleaned.append({"signal": signal, "label": label, "values": list(values)})
+    figure = {"type": raw["type"], "title": title, "caption": caption, "unit": unit, "source": source, "x": labels, "series": cleaned}
+    return figure if len(json.dumps(figure)) <= MAXIMUM_FIGURE_BYTES else None
+
+
 def clean_evidence(raw: Any) -> dict[str, Any] | None | Outcome:
     parsed = parse_json(raw) if raw is not None else None
     if parsed is None:
         return None
     if not isinstance(parsed, dict):
-        return refused("invalid_evidence", "evidence must be {signals, source}.")
+        return refused("invalid_evidence", "evidence must be {signals, source} with an optional figure.")
     signals, source = parsed.get("signals"), parsed.get("source")
     if not isinstance(signals, int) or isinstance(signals, bool) or not 0 <= signals <= MAXIMUM_EVIDENCE_SIGNALS:
         return refused("invalid_evidence", "evidence.signals must be a whole number of signals.")
     if source is not None and clean_text(source, MAXIMUM_EVIDENCE_SOURCE) is None:
         return refused("invalid_evidence", "evidence.source must be short text.")
-    return {"signals": signals, "source": source.strip() if isinstance(source, str) else None}
+    evidence = {"signals": signals, "source": source.strip() if isinstance(source, str) else None}
+    if parsed.get("figure") is not None:
+        figure = clean_figure(parsed["figure"])
+        if figure is None:
+            return refused("invalid_evidence", "evidence.figure must be a small chart spec: type line or bar, title, caption, unit, source, x labels and series with one value per label.")
+        evidence["figure"] = figure
+    return evidence
 
 
 def file_proposal(arguments: dict[str, Any], *, actor_sub: str, now_iso: str, proposal_id: str | None = None) -> tuple[dict[str, Any] | None, Outcome | None]:
@@ -238,6 +290,8 @@ def transition_plan(row: dict[str, Any], to_state: Any, reason: Any, *, actor_su
         return refused("invalid_state", f"state must be one of {', '.join(STATES)}.")
     if to_state not in TRANSITIONS.get(state, ()):
         return refused("transition_not_allowed", f"A proposal in {state} cannot move to {to_state}.")
+    if row.get("held"):
+        return refused("proposal_held", "That proposal is on hold. Release it before it moves.")
     text = None
     if reason is not None and str(reason).strip():
         text = clean_text(reason, MAXIMUM_REASON)
@@ -254,7 +308,11 @@ def transition_plan(row: dict[str, Any], to_state: Any, reason: Any, *, actor_su
     if result is not None:
         entry["result"] = result
     history = [*(parse_json(row.get("history")) or []), entry]
-    return {"state": to_state, "history": json.dumps(history)}
+    changes: dict[str, Any] = {"state": to_state, "history": json.dumps(history)}
+    if to_state == OVERRIDDEN_BY_EDITOR:
+        # Stored on the proposal beside the community result, which stays as it was: readers see both.
+        changes["override"] = json.dumps({"result": result, "reason": text, "at": now_iso})
+    return changes
 
 
 def apply_transition(
@@ -285,8 +343,77 @@ def apply_transition(
     return Outcome("ok", id=proposal_id)
 
 
+def log_entry(action: str, actor_sub: str, now_iso: str, detail: dict[str, Any] | None = None) -> dict[str, Any]:
+    entry: dict[str, Any] = {"action": action, "by": BY_STAFF, "actor": actor_sub, "at": now_iso}
+    if detail:
+        entry["detail"] = detail
+    return entry
+
+
+def edit_plan(row: dict[str, Any], action: Any, *, rule: Any = None, exclusion_id: Any = None, actor_sub: str, now_iso: str) -> dict[str, Any] | Outcome:
+    """The changes for a pin, hold or vote-exclusion action on ``row``, or why it may not be done.
+
+    Every action is appended to the private ``editorLog`` in the same write. Changing the exclusions clears the frozen
+    ``communityResult`` so the next snapshot fixes it again with the exclusions applied; the function never counts votes itself.
+    """
+    if action not in EDIT_ACTIONS:
+        return refused("invalid_action", f"action must be one of {', '.join(EDIT_ACTIONS)}.")
+    detail: dict[str, Any] | None = None
+    changes: dict[str, Any] = {}
+    if action in (PIN, UNPIN):
+        if bool(row.get("pinned")) == (action == PIN):
+            return refused("already_pinned" if action == PIN else "not_pinned", "That proposal is already pinned." if action == PIN else "That proposal is not pinned.")
+        changes["pinned"] = action == PIN
+    elif action in (HOLD, RELEASE):
+        if action == HOLD and row.get("state") in FINAL_STATES:
+            return refused("proposal_decided", "A decided proposal cannot be put on hold.")
+        if bool(row.get("held")) == (action == HOLD):
+            return refused("already_held" if action == HOLD else "not_held", "That proposal is already on hold." if action == HOLD else "That proposal is not on hold.")
+        changes["held"] = action == HOLD
+    else:
+        exclusions = parse_json(row.get("exclusions")) or []
+        if action == EXCLUDE_VOTES:
+            if rule not in EXCLUSION_RULES:
+                return refused("invalid_rule", f"rule must be one of {', '.join(EXCLUSION_RULES)}.")
+            identifier = "exc-" + uuid.uuid4().hex[:12]
+            exclusions = [*exclusions, {"id": identifier, "rule": rule, "at": now_iso, "actor": actor_sub}]
+            detail = {"exclusion": identifier, "rule": rule}
+        else:
+            if not isinstance(exclusion_id, str) or not EXCLUSION_ID.fullmatch(exclusion_id):
+                return refused("invalid_exclusion", "That is not an exclusion id.")
+            found = next((entry for entry in exclusions if entry.get("id") == exclusion_id), None)
+            if found is None:
+                return refused("unknown_exclusion", "That proposal has no such exclusion.")
+            if found.get("undoneAt"):
+                return refused("already_undone", "That exclusion was already undone.")
+            found["undoneAt"], found["undoneBy"] = now_iso, actor_sub
+            detail = {"exclusion": exclusion_id, "rule": found.get("rule")}
+        changes["exclusions"] = json.dumps(exclusions)
+        if row.get("communityResult"):
+            changes["communityResult"] = None  # removed: the next snapshot fixes it again without the excluded votes
+    log = [*(parse_json(row.get("editorLog")) or []), log_entry(action, actor_sub, now_iso, detail)][-MAXIMUM_EDITOR_LOG:]
+    changes["editorLog"] = json.dumps(log)
+    return changes
+
+
+def apply_edit(store: ProposalStore, *, proposal_id: Any, action: Any, rule: Any, exclusion_id: Any, actor_sub: str, now_iso: str) -> Outcome:
+    if not isinstance(proposal_id, str) or not PROPOSAL_ID.fullmatch(proposal_id):
+        return refused("invalid_proposal", "That is not a proposal id.")
+    row = store.get_proposal(proposal_id)
+    if row is None:
+        return refused("not_found", "There is no such proposal.")
+    plan = edit_plan(row, action, rule=rule, exclusion_id=exclusion_id, actor_sub=actor_sub, now_iso=now_iso)
+    if isinstance(plan, Outcome):
+        return plan
+    if not store.change_proposal(proposal_id, plan, row["state"], now_iso, expected_updated_at=row.get("updatedAt")):
+        return refused("target_changed", "Someone else changed that proposal first.")
+    # An exclusion's id is what undo_exclusion takes; the pin and hold receipts carry the proposal id.
+    created = json.loads(plan["exclusions"])[-1]["id"] if action == EXCLUDE_VOTES else proposal_id
+    return Outcome("ok", id=created)
+
+
 def handle_proposal_event(event: dict[str, Any], store: ProposalStore, *, now_iso: str, account_id: str | None = None) -> dict[str, Any]:
-    """``fileProposal`` or ``transitionProposal`` from AppSync. Answers a receipt, never an exception.
+    """``fileProposal``, ``transitionProposal`` or ``editProposal`` from AppSync. Answers a receipt, never an exception.
 
     Editors and admins act as themselves. An IAM principal of ``account_id`` (the function's own account) acts as an operator:
     it files AI proposals and moves draft to in_steering or declined, recorded as ``operator:<ARN>``. Anyone else is refused.
@@ -299,6 +426,18 @@ def handle_proposal_event(event: dict[str, Any], store: ProposalStore, *, now_is
         return refused("not_staff", "Only editors, admins and operators of this account can file proposals; only editors and admins decide them.").to_dict()
     arguments = event.get("arguments") or {}
     field = event_field_name(event)
+    if field == "editProposal":
+        if staff is None:
+            return refused("operator_not_allowed", "Pinning, holding and excluding votes are for editors and admins; an operator can only file proposals and move a draft to in_steering or declined.").to_dict()
+        return apply_edit(
+            store,
+            proposal_id=arguments.get("proposalId"),
+            action=arguments.get("action"),
+            rule=arguments.get("rule"),
+            exclusion_id=arguments.get("exclusionId"),
+            actor_sub=staff,
+            now_iso=now_iso,
+        ).to_dict()
     if field == "fileProposal":
         row, problem = file_proposal(arguments, actor_sub=actor, now_iso=now_iso)
         if problem is not None:

package/amplify/plugins/reader-steering/papyrus.plugin.js

@@ -15,7 +15,7 @@ export const readerSteeringManifest = {
     name: "reader-steering",
     contract: 1,
     models: ["ReaderProfile", "ReaderHandle", "ReaderVote", "ReaderFlag", "ReaderSubmission", "ReaderComment", "ReaderReport", "ModerationAction", "Proposal"],
-    mutations: ["moderateReader", "fileProposal", "transitionProposal"],
+    mutations: ["moderateReader", "fileProposal", "transitionProposal", "editProposal"],
     guest: { mutations: [] },
     newsroomPanels: [{ id: "moderation", label: "Moderation" }],
     staticAssets: ["_plugins/papyrus-reader@1.js", "_plugins/papyrus-reader@1.css"],

package/amplify/plugins/reader-steering/papyrus.plugin.ts

@@ -22,7 +22,7 @@ export const readerSteeringManifest: PluginManifest = {
   name: "reader-steering",
   contract: 1,
   models: ["ReaderProfile", "ReaderHandle", "ReaderVote", "ReaderFlag", "ReaderSubmission", "ReaderComment", "ReaderReport", "ModerationAction", "Proposal"],
-  mutations: ["moderateReader", "fileProposal", "transitionProposal"],
+  mutations: ["moderateReader", "fileProposal", "transitionProposal", "editProposal"],
   guest: { mutations: [] },
   newsroomPanels: [{ id: "moderation", label: "Moderation" }],
   staticAssets: ["_plugins/papyrus-reader@1.js", "_plugins/papyrus-reader@1.css"],

package/amplify/plugins/reader-steering/schema.js

@@ -148,6 +148,12 @@ export function readerSteeringSchemaDefinitions() {
             state: a.string().required(),
             history: a.json().required(),
             communityResult: a.json(),
+            pinned: a.boolean(),
+            held: a.boolean(),
+            override: a.json(),
+            exclusions: a.json(),
+            editorLog: a.json(),
+            needsLook: a.json(),
             createdAt: a.datetime().required(),
         })
             .disableOperations(["subscriptions"])
@@ -188,6 +194,19 @@ export function readerSteeringSchemaDefinitions() {
             .returns(a.ref("ProposalReceipt"))
             .authorization((allow) => [allow.group("editor"), allow.group("admin")])
             .handler(functionHandler("readerActions", readerActions)),
+        // Editors and admins only, and the function refuses an IAM operator: pin, unpin, hold, release, exclude_votes and
+        // undo_exclusion. `rule` is a batch rule for exclude_votes; `exclusionId` names the exclusion undo_exclusion reverses.
+        editProposal: a
+            .mutation()
+            .arguments({
+            proposalId: a.string().required(),
+            action: a.string().required(),
+            rule: a.string(),
+            exclusionId: a.string(),
+        })
+            .returns(a.ref("ProposalReceipt"))
+            .authorization((allow) => [allow.group("editor"), allow.group("admin")])
+            .handler(functionHandler("readerActions", readerActions)),
         ModerationReceipt: a.customType({
             status: a.string().required(),
             id: a.string(),

package/amplify/plugins/reader-steering/schema.ts

@@ -150,6 +150,12 @@ export function readerSteeringSchemaDefinitions() {
         state: a.string().required(),
         history: a.json().required(),
         communityResult: a.json(),
+        pinned: a.boolean(),
+        held: a.boolean(),
+        override: a.json(),
+        exclusions: a.json(),
+        editorLog: a.json(),
+        needsLook: a.json(),
         createdAt: a.datetime().required(),
       })
       .disableOperations(["subscriptions"])
@@ -190,6 +196,19 @@ export function readerSteeringSchemaDefinitions() {
       .returns(a.ref("ProposalReceipt"))
       .authorization((allow) => [allow.group("editor"), allow.group("admin")])
       .handler(functionHandler("readerActions", readerActions)),
+    // Editors and admins only, and the function refuses an IAM operator: pin, unpin, hold, release, exclude_votes and
+    // undo_exclusion. `rule` is a batch rule for exclude_votes; `exclusionId` names the exclusion undo_exclusion reverses.
+    editProposal: a
+      .mutation()
+      .arguments({
+        proposalId: a.string().required(),
+        action: a.string().required(),
+        rule: a.string(),
+        exclusionId: a.string(),
+      })
+      .returns(a.ref("ProposalReceipt"))
+      .authorization((allow) => [allow.group("editor"), allow.group("admin")])
+      .handler(functionHandler("readerActions", readerActions)),
     ModerationReceipt: a.customType({
       status: a.string().required(),
       id: a.string(),

package/components/automation-view.tsx

@@ -15,6 +15,7 @@ import {
   statusText,
   storyHref,
   triggerText,
+  toolsText,
   whoText,
   type AutomationOutsideRun,
   type AutomationRecord,
@@ -46,8 +47,10 @@ function RunLine({ run, demo }: { run: AutomationRun; demo: boolean }) {
         {run.runRecord === "unavailable" ? " (the run record could not be read)" : ""}
       </span>
       <span>
-        {run.storyId ? <>Story: <Link href={storyHref(run.storyId, demo)} data-automation-story-link>{run.storyTitle ?? run.storyId}</Link></> : "Story: none recorded"}
+        {run.storyId && run.storyExists === false ? <>Story: {run.storyTitle ?? run.storyId} (story deleted)</>
+          : run.storyId ? <>Story: <Link href={storyHref(run.storyId, demo)} data-automation-story-link>{run.storyTitle ?? run.storyId}</Link></> : "Story: none recorded"}
       </span>
+      <span data-automation-run-tools>{toolsText(run)}</span>
       <span data-automation-run-cost data-over-budget={run.overBudget || undefined}>
         <span aria-hidden="true">{run.overBudget ? "! " : ""}</span>{costText(run)}
       </span>

package/components/editorial-checks-admin-panel.tsx

@@ -218,7 +218,7 @@ export function EditorialChecksAdminPanel() {
             {policies.map((policy) => (
               <tr data-editorial-policy-row={policy.id} key={policy.id}>
                 <td>{policy.title}<br /><small>{policy.policyKey} · v{policy.version}</small></td>
-                <td>{policy.scope === "publication" ? "Whole publication" : `Desk: ${policy.scope}`}</td>
+                <td>{policy.scope === "publication" ? "Whole publication" : `Section: ${policy.scope}`}</td>
                 <td>{policy.severity}</td>
                 <td>{policy.detectors.length === 0 ? "Guidance only" : policy.detectors.length}</td>
                 <td>
@@ -251,7 +251,7 @@ export function EditorialChecksAdminPanel() {
           <label>Key <Input disabled={!draft.isNew} onChange={(event) => patchDraft({ policyKey: event.target.value })} value={draft.record.policyKey} /></label>
           <label>Title <Input onChange={(event) => patchDraft({ title: event.target.value })} value={draft.record.title} /></label>
           <label>
-            Applies to (publication, or a desk key){" "}
+            Applies to (publication, or a section key){" "}
             <Input disabled={!draft.isNew} onChange={(event) => patchDraft({ scope: event.target.value.trim() || "publication" })} value={draft.record.scope} />
           </label>
           <label>

package/components/newsroom-access-gate.tsx

@@ -57,7 +57,7 @@ export function NewsDeskAccessGate({ shell, showSectionTabs = false }: { shell:
 }
 
 function formatAccessTitle(state: NewsDeskShellState | null): string {
-  if (!state || state.phase === "checkingAccess") return "Checking Desk Credentials";
+  if (!state || state.phase === "checkingAccess") return "Checking Credentials";
   if (state.phase === "loadingDesk") return "Loading Newsroom Records";
   if (state.phase === "forbidden") return "Editor Role Required";
   if (state.phase === "error") return "Newsroom Unavailable";

package/components/newsroom-article-editor.tsx

@@ -670,21 +670,21 @@ export function NewsroomArticleEditor({ articleId, demo, embedded = false }: { a
                   </Select>
                 </label>
                 <label className="space-y-1 text-sm font-medium">
-                  <span>Desk</span>
+                  <span>Section</span>
                   <Select
                     onValueChange={(value) => {
                       if (typeof value === "string") patchEditor({ section: value === NO_DESK_VALUE ? "" : value });
                     }}
                     value={deskOptions.some(option => option.value === editor.section) ? editor.section : NO_DESK_VALUE}
                   >
-                    <SelectTrigger aria-label="Desk" className="w-full" data-newsroom-article-section>
-                      <SelectValue>{deskOptions.find(option => option.value === editor.section)?.label ?? "No desk"}</SelectValue>
+                    <SelectTrigger aria-label="Section" className="w-full" data-newsroom-article-section>
+                      <SelectValue>{deskOptions.find(option => option.value === editor.section)?.label ?? "No section"}</SelectValue>
                     </SelectTrigger>
                     <SelectContent>
-                      <SelectItem value={NO_DESK_VALUE}>No desk</SelectItem>
+                      <SelectItem value={NO_DESK_VALUE}>No section</SelectItem>
                       {(["core", "rotating"] as const).map((kind) => deskOptions.some(option => option.kind === kind) ? (
                         <SelectGroup key={kind}>
-                          <SelectLabel>{kind === "core" ? "Core desks" : "Rotating desks"}</SelectLabel>
+                          <SelectLabel>{kind === "core" ? "Core sections" : "Rotating sections"}</SelectLabel>
                           {deskOptions.filter(option => option.kind === kind).map((option) => (
                             <SelectItem key={option.value} value={option.value}>{option.label}</SelectItem>
                           ))}

package/components/newsroom-assignment-detail.tsx

@@ -36,7 +36,7 @@ export function NewsroomAssignmentDetail({ assignment, deskOptions = [], onDeskC
   const changeDesk = (value: string) => {
     if (!onDeskChange) return;
     setSavingDesk(true); setDeskError(null);
-    onDeskChange(value === NO_DESK_VALUE ? null : value).catch((reason: unknown) => setDeskError(reason instanceof Error ? reason.message : "Could not save the desk.")).finally(() => setSavingDesk(false));
+    onDeskChange(value === NO_DESK_VALUE ? null : value).catch((reason: unknown) => setDeskError(reason instanceof Error ? reason.message : "Could not save the section.")).finally(() => setSavingDesk(false));
   };
   const facts: DetailField[] = [
     { label: "Status", value: assignment.status },
@@ -58,14 +58,14 @@ export function NewsroomAssignmentDetail({ assignment, deskOptions = [], onDeskC
       {facts.map(field => <div key={field.label}><dt>{field.label}</dt><dd>{field.value}</dd></div>)}
     </dl>
     {onDeskChange && <label className="newsroom-assignment-detail-desk">
-      <span>Desk</span>
+      <span>Section</span>
       <Select onValueChange={(value) => { if (typeof value === "string") changeDesk(value); }} value={deskChoices.some(option => option.value === currentDesk) ? currentDesk : NO_DESK_VALUE} disabled={savingDesk}>
-        <SelectTrigger aria-label="Desk" className="w-full" data-newsroom-assignment-desk>
-          <SelectValue>{deskChoices.find(option => option.value === currentDesk)?.label ?? "No desk"}</SelectValue>
+        <SelectTrigger aria-label="Section" className="w-full" data-newsroom-assignment-desk>
+          <SelectValue>{deskChoices.find(option => option.value === currentDesk)?.label ?? "No section"}</SelectValue>
         </SelectTrigger>
         <SelectContent>
-          <SelectItem value={NO_DESK_VALUE}>No desk</SelectItem>
-          {(["core", "rotating"] as const).map(kind => deskChoices.some(option => option.kind === kind) ? <SelectGroup key={kind}><SelectLabel>{kind === "core" ? "Core desks" : "Rotating desks"}</SelectLabel>{deskChoices.filter(option => option.kind === kind).map(option => <SelectItem key={option.value} value={option.value}>{option.label}</SelectItem>)}</SelectGroup> : null)}
+          <SelectItem value={NO_DESK_VALUE}>No section</SelectItem>
+          {(["core", "rotating"] as const).map(kind => deskChoices.some(option => option.kind === kind) ? <SelectGroup key={kind}><SelectLabel>{kind === "core" ? "Core sections" : "Rotating sections"}</SelectLabel>{deskChoices.filter(option => option.kind === kind).map(option => <SelectItem key={option.value} value={option.value}>{option.label}</SelectItem>)}</SelectGroup> : null)}
         </SelectContent>
       </Select>
       {currentDesk && !deskChoices.some(option => option.value === currentDesk) ? <small className="newsroom-desk-legacy-value">Old section value: {currentDesk}</small> : null}

package/components/newsroom-ops-overview.tsx

@@ -76,7 +76,7 @@ export function NewsroomOpsOverview({
       data-newsroom-ops-home="true"
     >
       <div className="space-y-8" data-newsroom-overview-feeds>
-        <div aria-label="Notification Center feed" className="newsroom-overview-feed-frame overflow-y-auto rounded-xl border bg-card p-4 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring" data-newsroom-overview-notifications role="region" tabIndex={0}>
+        <div aria-label="Notification Center feed" className="newsroom-overview-feed-frame rounded-xl border bg-card p-4 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring" data-newsroom-overview-notifications role="region" tabIndex={0}>
           <NotificationCenter
             actorLabel={actorLabel}
             decisions={decisions}
@@ -145,9 +145,9 @@ export function NewsroomOpsOverview({
         </section>
 
         {desks.length ? (
-          <section aria-label="Desks" className="space-y-3" data-newsroom-ops-desks>
-            <h2 className="text-sm font-medium text-muted-foreground">Desks</h2>
-            {coreDesks.length ? <h3 className="newsroom-desk-group-heading" data-newsroom-ops-desk-group="core">Core desks</h3> : null}
+          <section aria-label="Sections" className="space-y-3" data-newsroom-ops-desks>
+            <h2 className="text-sm font-medium text-muted-foreground">Sections</h2>
+            {coreDesks.length ? <h3 className="newsroom-desk-group-heading" data-newsroom-ops-desk-group="core">Core sections</h3> : null}
             <div className="grid gap-3 sm:grid-cols-2 lg:grid-cols-3">
               {coreDesks.map((section) => (
                 <Link
@@ -167,7 +167,7 @@ export function NewsroomOpsOverview({
                 </Link>
               ))}
             </div>
-            {rotatingDesks.length ? <h3 className="newsroom-desk-group-heading" data-newsroom-ops-desk-group="rotating">Rotating desks <small>appear for a while, then rotate out</small></h3> : null}
+            {rotatingDesks.length ? <h3 className="newsroom-desk-group-heading" data-newsroom-ops-desk-group="rotating">Rotating sections <small>appear for a while, then rotate out</small></h3> : null}
             {rotatingDesks.length ? <div className="grid gap-3 sm:grid-cols-2 lg:grid-cols-3">
               {rotatingDesks.map((section) => (
                 <Link

package/components/newsroom-organizer.css

@@ -23,8 +23,8 @@ body:has(.newsroom-organizer)>[data-staging-banner]{flex-shrink:0}
 .organizer-sidebar-head{display:flex;align-items:flex-start;justify-content:space-between;gap:8px}.organizer-sidebar-head .organizer-brand{flex:1;min-width:0}
 .organizer-header-actions{display:flex;align-items:center;gap:8px;min-width:0;max-width:45%;overflow-x:auto}
 .organizer-main{min-width:0;min-height:0;overflow:auto;overscroll-behavior:contain;flex:1;padding:16px 0}
-.newsroom-overview-feed-frame{height:32rem}
-@media(min-width:640px){.newsroom-overview-feed-frame{height:38rem}}
+.newsroom-overview-feed-frame{height:auto}
+@media(min-width:640px){.newsroom-overview-feed-frame{height:38rem;overflow-y:auto}}
 .organizer-main>[data-category-steering]{min-height:0}.organizer-demo-notice{font-size:11px;color:var(--org-muted);margin-bottom:12px}
 .organizer-account{display:flex;align-items:center;gap:10px;min-height:44px;flex-shrink:0;border:1px solid var(--org-line);padding:8px;text-align:left;border-radius:3px}
 .organizer-account span{min-width:0}.organizer-account strong{display:block;font:600 11px var(--kb-theme-ui-font);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.organizer-account small{display:block;font-size:9px;color:var(--org-muted);margin-top:2px}

package/components/notification-center.tsx

@@ -7,7 +7,7 @@ import { Button } from "./ui/button";
 import { getNewsroomNavHref } from "../lib/newsroom-nav";
 import {
   cyclotronAutoDecided, cyclotronHeldForReview, formatWhen, isUnread, modeLabel, modeMark, nextText, sectionReviews,
-  steeringText, subjectHref, summarize, summaryText,
+  steeringText, subjectHref, subjectLabel, summarize, summaryText,
   type AnswerInput, type CyclotronEntry, type ReviewRequest,
 } from "../lib/review-requests";
 import type { ReferenceRecord } from "../lib/category-repository";
@@ -22,6 +22,7 @@ type ViewProps = {
   readIds: ReadonlySet<string>;
   held: CyclotronEntry[];
   autoDecided: CyclotronEntry[];
+  storyTitles?: Readonly<Record<string, string>>;
   demo?: boolean;
   busyId?: string | null;
   error?: string | null;
@@ -30,8 +31,8 @@ type ViewProps = {
   onMarkAllRead?: () => void;
 };
 
-function Entry({ request, unread, demo, busy, onAnswer, onMarkRead }: {
-  request: ReviewRequest; unread: boolean; demo: boolean; busy: boolean;
+function Entry({ request, unread, demo, busy, titles, onAnswer, onMarkRead }: {
+  request: ReviewRequest; unread: boolean; demo: boolean; busy: boolean; titles: Readonly<Record<string, string>>;
   onAnswer?: ViewProps["onAnswer"]; onMarkRead?: ViewProps["onMarkRead"];
 }) {
   const [note, setNote] = useState("");
@@ -48,7 +49,7 @@ function Entry({ request, unread, demo, busy, onAnswer, onMarkRead }: {
       </div>
       <p className="text-xs text-muted-foreground">
         Raised by {request.raisedBy} on {formatWhen(request.raisedAt)}
-        {" · "}About: {href ? <Link href={href} onClick={() => onMarkRead?.(request.id)}>{request.subject.type.replace("_", " ")} {request.subject.id}</Link> : <span>{request.subject.type} {request.subject.id}</span>}
+        {" · "}About: {href ? <Link href={href} onClick={() => onMarkRead?.(request.id)}>{subjectLabel(request.subject, titles)}</Link> : <span>{subjectLabel(request.subject, titles)}</span>}
       </p>
       {request.ask ? <p className="text-sm">{request.ask}</p> : null}
       {request.links.length ? (
@@ -124,12 +125,12 @@ function Section({ id, title, count, children, empty }: { id: string; title: str
 }
 
 /** The CMS console home: what needs a person, what will proceed on its own, and what the system decided. Ignore-safe by design. */
-export function NotificationCenterView({ loadState, requests, readIds, held, autoDecided, demo = false, busyId = null, error = null, onAnswer, onMarkRead, onMarkAllRead }: ViewProps) {
+export function NotificationCenterView({ loadState, requests, readIds, held, autoDecided, demo = false, storyTitles = {}, busyId = null, error = null, onAnswer, onMarkRead, onMarkAllRead }: ViewProps) {
   const sections = useMemo(() => sectionReviews(requests), [requests]);
   const unreadCount = requests.filter((request) => isUnread(request, readIds)).length;
   const summary = summarize(sections, held, autoDecided, unreadCount);
   const entry = (request: ReviewRequest) => (
-    <Entry busy={busyId === request.id} demo={demo} key={request.id} onAnswer={onAnswer} onMarkRead={onMarkRead} request={request} unread={isUnread(request, readIds)} />
+    <Entry busy={busyId === request.id} demo={demo} key={request.id} titles={storyTitles} onAnswer={onAnswer} onMarkRead={onMarkRead} request={request} unread={isUnread(request, readIds)} />
   );
   if (loadState === "loading") return (
     <section aria-label="Loading Notification Center" className="space-y-4" data-notification-state="loading" role="status">
@@ -204,6 +205,7 @@ export function NotificationCenter({ references, decisions, humanCuratedReferenc
   const [userKey, setUserKey] = useState<string | null>(null);
   const [busyId, setBusyId] = useState<string | null>(null);
   const [error, setError] = useState<string | null>(null);
+  const [storyTitles, setStoryTitles] = useState<Record<string, string>>({});
 
   const refresh = useCallback(async () => {
     if (demo) {
@@ -223,6 +225,8 @@ export function NotificationCenter({ references, decisions, humanCuratedReferenc
       setReadIds(new Set(loaded.readIds));
       setUserKey(loaded.userKey);
       setLoadState("ready");
+      const { loadStoryTitles } = await import("../lib/review-client");
+      setStoryTitles(await loadStoryTitles(loaded.requests.filter((request) => request.subject.type === "story").map((request) => request.subject.id)).catch(() => ({})));
     } catch {
       setLoadState("unavailable");
     }
@@ -266,7 +270,7 @@ export function NotificationCenter({ references, decisions, humanCuratedReferenc
 
   return (
     <NotificationCenterView
-      autoDecided={autoDecided} busyId={busyId} demo={demo} error={error} held={held} loadState={loadState}
+      autoDecided={autoDecided} busyId={busyId} storyTitles={storyTitles} demo={demo} error={error} held={held} loadState={loadState}
       onAnswer={answer} onMarkAllRead={markAllRead} onMarkRead={markRead} readIds={readIds} requests={requests}
     />
   );

package/components/topic-steering-workspace.tsx

@@ -667,7 +667,7 @@ export function NewsDeskWorkspace({
         editorShellReady
         initialSelection={initialSelection}
         initialTab={initialTab}
-        authState={{ status: "signedIn", label: "Demo Desk" }}
+        authState={{ status: "signedIn", label: "Demo section" }}
         isRefreshing={false}
         shellError={null}
       />
@@ -3903,7 +3903,7 @@ function NewsroomSectionRail({
     <aside className="newsroom-section-rail" data-newsroom-section-rail aria-labelledby="newsroom-section-rail-title" ref={railRef}>
       <header className="newsroom-section-rail__header">
         <p className="story-label">Sections</p>
-        <h2 id="newsroom-section-rail-title">Section Desk</h2>
+        <h2 id="newsroom-section-rail-title">Section</h2>
       </header>
       <div className="newsroom-section-rail__body">
         {canonicalSections.length ? (
@@ -5743,7 +5743,7 @@ function DesksDeskView({
     <div className="news-desk-columns news-desk-columns--administration news-desk-columns--taxonomy" data-news-desk-section="desks">
       <div className="news-desk-main-column">
         <section className="category-steering-section category-steering-section--lead" aria-labelledby="newsroom-desks-title">
-          <SectionHeader title="News Desks" detail={`${roots.length} root topic desks`} />
+          <SectionHeader title="News sections" detail={`${roots.length} root topic sections`} />
           <div className="news-desk-desk-list">
             {roots.length ? roots.map((root) => {
               const rootNode = root.node ?? categoryToCategoryTreeNode(root.category);
@@ -5763,11 +5763,11 @@ function DesksDeskView({
                 >
                   <span>{rootNode.shortTitle ?? deriveShortTitle(rootNode.displayName)}</span>
                   <strong>{rootNode.displayName}</strong>
-                  <p>{rootNode.description ?? "No desk description yet."}</p>
+                  <p>{rootNode.description ?? "No section description yet."}</p>
                   <small>{referenceCount} refs / {assignmentCount} assignments / {root.subcategorys.length} subtopics / {doctrineStatus.savedCount} of 2 doctrine slots</small>
                 </Link>
               );
-            }) : <EmptyRow label="No root topic desks are available in the canonical category set" />}
+            }) : <EmptyRow label="No root topic sections are available in the canonical category set" />}
           </div>
         </section>
 
@@ -5788,18 +5788,18 @@ function DesksDeskView({
 
       <aside className="news-desk-rail-column">
         <section className="category-steering-section" aria-labelledby="desk-index-notes-title">
-          <SectionHeader title="Desk Rules" detail="Root topics only" />
+          <SectionHeader title="Section rules" detail="Root topics only" />
           <div className="news-desk-ledger-list">
             <article className="news-desk-ledger-item">
               <header>
-                <strong>Desk Identity</strong>
+                <strong>Section identity</strong>
                 <span>Category</span>
               </header>
               <p>Official name, short title, subtitle, and description stay on the accepted root Category record.</p>
             </article>
             <article className="news-desk-ledger-item">
               <header>
-                <strong>Desk Doctrine</strong>
+                <strong>Section doctrine</strong>
                 <span>Private Item</span>
               </header>
               <p>Mission and policies are private doctrine Items tied to the root category lineage.</p>
@@ -5849,7 +5849,7 @@ function DeskDetailPanel({
     <section className="category-steering-section news-desk-desk-detail" aria-labelledby="selected-desk-title">
       <header className="news-desk-topic-detail__header">
         <div>
-          <p className="story-label">News Desk</p>
+          <p className="story-label">News section</p>
           <h3 id="selected-desk-title">{rootNode.displayName}</h3>
           <span>{rootNode.shortTitle ?? deriveShortTitle(rootNode.displayName)}</span>
         </div>
@@ -5932,7 +5932,7 @@ function CategoryDoctrineEditorCard({
     <article className="news-desk-doctrine-card" data-news-desk-doctrine={definition.slug}>
       <header className="news-desk-doctrine-card__header">
         <div>
-          <p className="story-label">Desk Doctrine</p>
+          <p className="story-label">Section doctrine</p>
           <h3>{definition.label}</h3>
         </div>
         <span>{record ? "Saved record" : "Empty slot"}</span>
@@ -12297,7 +12297,7 @@ function AssignmentRow({
             {context ? (
               <>
                 <p className="news-desk-assignment-row__angle">
-                  <span>{context.deskTitle ?? context.deskKey ?? "Desk"}</span>
+                  <span>{context.deskTitle ?? context.deskKey ?? "Section"}</span>
                   {`${context.focusTitle ?? context.focusKey ?? "focus"} / ${context.targetSystemType ?? context.contextProfile ?? "context"}`}
                 </p>
                 {context.contextProfile || context.contextTokenBudget ? (
@@ -12412,7 +12412,7 @@ function normalizeAnalysisReindexMode(value: string | null | undefined): Analysi
 function formatAnalysisReindexModeLabel(mode: AnalysisReindexMode): string {
   if (mode === "online-update") return "Online update - new or changed accepted references";
   if (mode === "classifier-retrain") return "Classifier retrain - rebuild topic classifier";
-  if (mode === "scoped-topic-rebuild") return "Scoped topic rebuild - one desk or focus";
+  if (mode === "scoped-topic-rebuild") return "Scoped topic rebuild - one section or focus";
   if (mode === "entity-graph-rebuild") return "Entity graph rebuild - generated graph outputs";
   return "Generated analysis rebuild - clear and rebuild targeted generated outputs";
 }
@@ -12442,7 +12442,7 @@ function mergeAnalysisCorpora(configuredCorpora: CategorySteeringCorpus[], liveC
 function analysisReindexModeHelp(mode: AnalysisReindexMode): string {
   if (mode === "generated-analysis-rebuild") return "Use this for a full generated-output rebuild for the selected profile. It still creates an assignment only; the worker/operator executes it later.";
   if (mode === "classifier-retrain") return "Use this when authoritative labels or accepted references should retrain the semi-supervised topic classifier.";
-  if (mode === "scoped-topic-rebuild") return "Use this when proposals for a desk or focus topic should be regenerated from the accepted taxonomy plus steering feedback.";
+  if (mode === "scoped-topic-rebuild") return "Use this when proposals for a section or focus topic should be regenerated from the accepted taxonomy plus steering feedback.";
   if (mode === "entity-graph-rebuild") return "Use this when generated ontology/entity graph records should be rebuilt from accepted references.";
   return "Use this for incremental processing of new or changed accepted references without clearing broader generated outputs.";
 }
@@ -13092,7 +13092,7 @@ function formatDeskSectionHeadline(section: NewsDeskTab): string {
 
 function formatDeskSectionLede(section: NewsDeskTab): string {
   if (section === "search") return "Search the newsroom knowledge base with semantic and ontology context.";
-  if (section === "desks") return "The desks and topic categories that organize coverage, with each desk's mission and policies.";
+  if (section === "desks") return "The sections and topic categories that organize coverage, with each section's mission and policies.";
   if (section === "topics") return "Review suggested changes to the subject areas the newsroom covers.";
   if (section === "concepts") return "Browse people, organizations, places, and ideas found in the source material.";
   if (section === "references") return "Review source materials before they become usable evidence.";

package/lib/automation-overview.ts

@@ -14,7 +14,9 @@ export type AutomationUsage = {
 };
 
 export type AutomationRun = {
-  origin: "monitor" | "manual";
+  origin: "monitor" | "manual" | "stage";
+  /** The stage a story entered to start this run (origin "stage"). */
+  stage?: string | null;
   requestedBy: string | null;
   reason: string | null;
   sourceId: string | null;
@@ -28,6 +30,10 @@ export type AutomationRun = {
   error: string | null;
   runRecord: "found" | "missing" | "unavailable" | "none";
   storyId: string | null;
+  /** False when no version of the story remains (it was deleted); null when this was not looked up. */
+  storyExists?: boolean | null;
+  /** Tool name to number of calls the procedure made, when the run recorded them. */
+  toolsUsed?: Record<string, number> | null;
   storyVersionId: string | null;
   storyTitle: string | null;
   costUsd: number | null;
@@ -164,7 +170,13 @@ export function costText(run: Pick<AutomationRun, "costUsd" | "costNote" | "over
   return run.overBudget && run.budgetUsd != null ? `${base}. Over the budget of ${dollars(run.budgetUsd)} per run` : base;
 }
 
-export function whoText(run: Pick<AutomationRun, "origin" | "requestedBy" | "sourceId">): string {
+export function toolsText(run: Pick<AutomationRun, "toolsUsed">): string {
+  const tools = Object.entries(run.toolsUsed ?? {}).sort(([a], [b]) => a.localeCompare(b));
+  return tools.length ? `Tools used: ${tools.map(([name, count]) => `${name} x${count}`).join(", ")}` : "Tools used: none recorded";
+}
+
+export function whoText(run: Pick<AutomationRun, "origin" | "requestedBy" | "sourceId"> & { stage?: string | null }): string {
+  if (run.origin === "stage") return `Story entered ${run.stage ?? "a stage"}`;
   return run.origin === "manual" ? `Run now by ${run.requestedBy ?? "someone"}` : `Item: ${run.sourceId ?? "unknown"}`;
 }
 

package/lib/category-repository.ts

@@ -1504,7 +1504,7 @@ export function createDemoCategorySteeringDashboard(
             riskFlags: ["Avoid promotional framing."],
             coverageGaps: ["Need a second independent source."],
             openQuestions: ["Which users are affected first?"],
-            copywriterBrief: "Use accepted evidence and recent desk memory before drafting.",
+            copywriterBrief: "Use accepted evidence and recent section memory before drafting.",
           },
         },
       },
@@ -1654,8 +1654,8 @@ export function createDemoCategorySteeringDashboard(
         slug: "editorial-doctrine-policy",
         title: "Editorial Policy",
         body: [
-          "Publication doctrine is the global inclusion standard; desk doctrine sets local source priorities and framing.",
-          "News reporting should prioritize current, journalistic, and official sources; desk workflows may use academic research as background unless a desk policy explicitly makes research the primary evidence class.",
+          "Publication doctrine is the global inclusion standard; section doctrine sets local source priorities and framing.",
+          "News reporting should prioritize current, journalistic, and official sources; section workflows may use academic research as background unless a section policy explicitly makes research the primary evidence class.",
           "High-risk domains, including health-related claims, require stricter sourcing, explicit uncertainty handling, and clear separation between verified facts and interpretation.",
         ],
         editorial: { kind: "policy" },

package/lib/console-web-context.ts

@@ -41,7 +41,7 @@ export function formatConsoleWebContextMessage(
     webPath ? `Web path: ${webPath}` : null,
     objectUri ? `Focused object: ${objectUri}` : null,
     label ? `Label: ${label}` : null,
-    tab ? `Desk: ${tab}` : null,
+    tab ? `Section: ${tab}` : null,
     viewMode ? `View: ${viewMode}` : null,
   ].filter((line): line is string => Boolean(line));
 

package/lib/newsroom-demo-dashboard.ts

@@ -237,7 +237,7 @@ export function applyPilobolusDemoDashboardContent(
         ...record,
         title: "Pilobolus Editorial Policy",
         body: [
-          "Publication doctrine is the global inclusion standard for Pilobol.us; desk doctrine sets local intake priorities for field notes and source intake.",
+          "Publication doctrine is the global inclusion standard for Pilobol.us; section doctrine sets local intake priorities for field notes and source intake.",
           "Field-notes reporting should prioritize accepted Pilobolus references and annotated intake artifacts—not the Papyrus platform knowledge base.",
           "High-risk claims about host takeover or network control require explicit uncertainty handling and accepted source linkage.",
         ],

package/lib/newsroom-nav.ts

@@ -21,7 +21,7 @@ export type NewsroomNavItem = {
 };
 
 export const NEWSROOM_OPS_NAV: NewsroomNavItem[] = [
-  { id: "overview", label: "Overview", detail: "Desk home", href: newsroomHref() },
+  { id: "overview", label: "Overview", detail: "Newsroom home", href: newsroomHref() },
   { id: "articles", label: getContentItemName().plural, detail: "Drafts & published", href: newsroomHref("articles") },
   { id: "assignments", label: "Assignments", detail: "Work queue", href: newsroomHref("assignments") },
   { id: "references", label: "References", detail: "Knowledge base", href: newsroomHref("references") },

package/lib/prospectus-sign-in-routes.ts

@@ -98,12 +98,13 @@ type SignInFailureBranch = "pending_cookie" | "provider_error" | "missing_parame
 
 /**
  * One structured line per failed callback: `prospectus_sign_in_failed {"code":...,"branch":...}`. It carries only the
- * code, the branch, and (for errors from completing the sign-in) the HTTP status, Prospectus error code and error name.
+ * code, the branch, and (for errors from completing the sign-in) the HTTP status, Prospectus error code, its rule text
+ * (`prospectusMessage`, which names the broken rule and carries no personal data) and error name.
  * Never tokens, authorization codes, state, emails or subjects.
  */
 function logSignInFailure(
   options: ProspectusSignInRouteOptions,
-  entry: { code: string; branch: SignInFailureBranch; httpStatus?: number; prospectusError?: string; errorName?: string },
+  entry: { code: string; branch: SignInFailureBranch; httpStatus?: number; prospectusError?: string; prospectusMessage?: string; errorName?: string },
 ): void {
   (options.log ?? console.error)(`prospectus_sign_in_failed ${JSON.stringify(entry)}`);
 }
@@ -186,7 +187,7 @@ async function completeCallback(
   options: ProspectusSignInRouteOptions,
   nowInSeconds: number,
 ): Promise<NextResponse> {
-  const failed = (code: string, branch: SignInFailureBranch, detail: { httpStatus?: number; prospectusError?: string; errorName?: string } = {}) => {
+  const failed = (code: string, branch: SignInFailureBranch, detail: { httpStatus?: number; prospectusError?: string; prospectusMessage?: string; errorName?: string } = {}) => {
     logSignInFailure(options, { code, branch, ...detail });
     return signInFailedRedirect(request, options, pendingSignIn?.returnPath ?? null, code);
   };
@@ -220,7 +221,7 @@ async function completeCallback(
     );
     return response;
   } catch (error) {
-    if (error instanceof ProspectusAccountsError) return failed(error.code, "completion", { httpStatus: error.status, prospectusError: error.code });
+    if (error instanceof ProspectusAccountsError) return failed(error.code, "completion", { httpStatus: error.status, prospectusError: error.code, prospectusMessage: error.message.slice(0, 300) });
     return failed("sign_in_failed", "unexpected", { errorName: error instanceof Error ? error.name : "error" });
   }
 }

package/lib/prospectus-site-identity.ts

@@ -132,19 +132,28 @@ export function signedProspectusTransport(options: SignedProspectusTransportOpti
 export class ProspectusSiteAccounts {
   constructor(private readonly transport: ProspectusTransport) {}
 
-  requestGoogleSignInChallenge(): Promise<{ challengeId: string; nonce: string; expiresAt: number }> {
+  requestGoogleSignInChallenge(): Promise<{ challengeId: string; nonce: string; expiresAt: number; challengeToken?: string }> {
     return this.transport({ path: "/v1/identities/google/challenge", method: "POST", body: {} }) as Promise<{
       challengeId: string;
       nonce: string;
       expiresAt: number;
+      challengeToken?: string;
     }>;
   }
 
-  resolveGoogleSignIn(challengeId: string, humanAccessToken: string, identityToken: string): Promise<{ person: ProspectusPerson }> {
+  /**
+   * When Prospectus signs its challenges it stores nothing, so the signed `challengeToken` is the only proof the
+   * challenge exists and must be sent back unchanged. Without a token (a service that stores challenges) the ID is sent.
+   */
+  resolveGoogleSignIn(
+    challenge: { challengeId: string; challengeToken?: string },
+    humanAccessToken: string,
+    identityToken: string,
+  ): Promise<{ person: ProspectusPerson }> {
     return this.transport({
       path: "/v1/identities/google/resolve",
       method: "POST",
-      body: { challengeId },
+      body: challenge.challengeToken ? { challengeToken: challenge.challengeToken } : { challengeId: challenge.challengeId },
       humanAccessToken,
       identityToken,
     }) as Promise<{ person: ProspectusPerson }>;
@@ -197,6 +206,8 @@ export interface GoogleOnlyCognitoClient {
 export interface PendingProspectusSignIn {
   challengeId: string;
   nonce: string;
+  /** The signed challenge from Prospectus, present when it signs challenges instead of storing them. */
+  challengeToken?: string;
   state: string;
   codeVerifier: string;
   expiresAt: number;
@@ -242,7 +253,13 @@ export async function beginProspectusGoogleSignIn(
   }).toString();
   return {
     authorizationUrl: authorizationUrl.toString(),
-    pendingSignIn: { challengeId: challenge.challengeId, nonce: challenge.nonce, state, codeVerifier, expiresAt: challenge.expiresAt },
+    pendingSignIn: {
+      challengeId: challenge.challengeId,
+      nonce: challenge.nonce,
+      ...(challenge.challengeToken ? { challengeToken: challenge.challengeToken } : {}),
+      state, codeVerifier,
+      expiresAt: challenge.expiresAt,
+    },
   };
 }
 
@@ -303,7 +320,7 @@ export async function completeProspectusGoogleSignIn(
     expiresInSeconds: Number(tokenBody.expires_in) || 0,
   };
   await (input.verifyCognitoTokens ?? cognitoTokenVerifier(input.cognitoClient))(tokens, input.pendingSignIn.nonce);
-  const { person } = await input.accounts.resolveGoogleSignIn(input.pendingSignIn.challengeId, tokens.accessToken, tokens.idToken);
+  const { person } = await input.accounts.resolveGoogleSignIn(input.pendingSignIn, tokens.accessToken, tokens.idToken);
   return {
     person,
     accessToken: tokens.accessToken,

package/lib/review-client.ts

@@ -97,3 +97,21 @@ export async function markReviewRead(userKey: string, requestId: string, now: Da
     await run(`mutation Mark($input: UpdateReviewReadMarkInput!) { updateReviewReadMark(input: $input) { id } }`, { input });
   }
 }
+
+const MAX_TITLE_LOOKUPS = 40;
+
+/** Titles of the stories that review requests are about, by lineage id. A story that cannot be read simply has no entry (the card falls back to the id). */
+export async function loadStoryTitles(ids: string[]): Promise<Record<string, string>> {
+  const titles: Record<string, string> = {};
+  await Promise.all([...new Set(ids)].slice(0, MAX_TITLE_LOOKUPS).map(async (id) => {
+    const result = await run(
+      `query StoryTitle($lineageId: ID!) { listItemsByLineageAndVersion(lineageId: $lineageId, limit: 50) { items { versionNumber headline title } } }`,
+      { lineageId: id },
+    );
+    const items = (result.data?.listItemsByLineageAndVersion?.items ?? []).filter(Boolean) as { versionNumber?: number; headline?: string; title?: string }[];
+    const newest = items.sort((a, b) => (b.versionNumber ?? 0) - (a.versionNumber ?? 0))[0];
+    const title = newest?.headline || newest?.title;
+    if (title) titles[id] = title;
+  }));
+  return titles;
+}

package/lib/review-requests.ts

@@ -145,6 +145,12 @@ export function steeringText(request: ReviewRequest): string | null {
   return `You steered ${said}. ${request.raisedBy} has not used it yet; it will on its next run.`;
 }
 
+/** What a request is about, in words: a story shows its title (the id when the title is not known), anything else its type and id. */
+export function subjectLabel(subject: { type: string; id: string }, titles: Readonly<Record<string, string>> = {}): string {
+  if (subject.type === "story") return titles[subject.id] ?? `story ${subject.id}`;
+  return `${subject.type.replace("_", " ")} ${subject.id}`;
+}
+
 export function subjectHref(subject: { type: string; id: string }, demo = false): string | null {
   const id = encodeURIComponent(subject.id);
   if (subject.type === "story") return getNewsroomNavHref(`/newsroom/articles/${id}`, demo);

package/package.json

@@ -448,7 +448,7 @@
       "optional": true
     }
   },
-  "version": "5.36.0",
+  "version": "5.38.0",
   "dependencies": {
     "@aws-amplify/adapter-nextjs": "^1.7.3",
     "@aws-crypto/sha256-js": "5.2.0",

package/routes.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "5.36.0",
+  "version": "5.38.0",
   "routes": [
     {
       "file": "app/%5F_preview/[[...path]]/route.ts",