@anthusai/papyrus 5.39.0 → 5.41.0

package/amplify/data/resource.js

@@ -597,6 +597,12 @@ const schema = a.schema({
         .returns(a.json())
         .authorization((allow) => [allow.groups(contentWriteGroups)])
         .handler(functionHandler("contentActions", contentActions)),
+    intakeEmailSubmissionReferences: a
+        .mutation()
+        .arguments({ input: a.json().required() })
+        .returns(a.json())
+        .authorization((allow) => [allow.groups(contentWriteGroups)])
+        .handler(functionHandler("contentActions", contentActions)),
     saveItemDraft: a
         .mutation()
         .arguments({ input: a.json().required() })

package/amplify/data/resource.ts

@@ -650,6 +650,13 @@ const schema = a.schema({
     .authorization((allow) => [allow.groups(contentWriteGroups)])
     .handler(functionHandler("contentActions", contentActions)),
 
+  intakeEmailSubmissionReferences: a
+    .mutation()
+    .arguments({ input: a.json().required() })
+    .returns(a.json())
+    .authorization((allow) => [allow.groups(contentWriteGroups)])
+    .handler(functionHandler("contentActions", contentActions)),
+
   saveItemDraft: a
     .mutation()
     .arguments({ input: a.json().required() })

package/amplify/data/schema.js

@@ -523,6 +523,12 @@ function buildBaseDefinitions(includeEditions) {
             .returns(a.json())
             .authorization((allow) => [allow.groups(contentWriteGroups)])
             .handler(functionHandler("contentActions", contentActions)),
+        intakeEmailSubmissionReferences: a
+            .mutation()
+            .arguments({ input: a.json().required() })
+            .returns(a.json())
+            .authorization((allow) => [allow.groups(contentWriteGroups)])
+            .handler(functionHandler("contentActions", contentActions)),
         saveItemDraft: a
             .mutation()
             .arguments({ input: a.json().required() })

package/amplify/data/schema.ts

@@ -574,6 +574,13 @@ const definitions = {
     .authorization((allow) => [allow.groups(contentWriteGroups)])
     .handler(functionHandler("contentActions", contentActions)),
 
+  intakeEmailSubmissionReferences: a
+    .mutation()
+    .arguments({ input: a.json().required() })
+    .returns(a.json())
+    .authorization((allow) => [allow.groups(contentWriteGroups)])
+    .handler(functionHandler("contentActions", contentActions)),
+
   saveItemDraft: a
     .mutation()
     .arguments({ input: a.json().required() })

package/amplify/functions/content-actions/handler.py

@@ -27,7 +27,7 @@ from papyrus_content.rebuild_trigger import (
 from papyrus_content.story_reporting import save_story_version
 from papyrus_content.publication import ensure_publication_from_environment
 from papyrus_content.editorial_checks import GraphQLEditorialStore, ensure_default_policies
-from papyrus_content.reference_intake import IntakeError, intake_references
+from papyrus_content.reference_intake import IntakeError, intake_email_submission_references, intake_references
 from papyrus_content.publish_alerts import PUBLISHED_TASK_KEY, announce_published
 from papyrus_content.publishing import (
     ItemFields,
@@ -356,6 +356,15 @@ def handler(event, context):
                 return intake_references(client, arguments, event.get("identity") or {})
             except IntakeError as error:
                 return {"ok": False, "errors": [{"code": "intake-rejected", "message": str(error)}]}
+        if field == "intakeEmailSubmissionReferences":
+            client, _claims = create_authoring_client()
+            try:
+                from papyrus_content.monitoring_view import default_store_factory
+                receipt_store = default_store_factory(os.environ)()
+                return intake_email_submission_references(
+                    client, arguments, event.get("identity") or {}, receipt_store=receipt_store)
+            except IntakeError as error:
+                return {"ok": False, "errors": [{"code": "intake-rejected", "message": str(error)}]}
         if field == "deriveMarkus":
             return derive_markus_action(arguments)
         if field == "saveItemDraft":

package/amplify/functions/monitoring-view/schema.js

@@ -14,4 +14,16 @@ export const monitoringViewSchemaDefinitions = {
         .returns(a.json())
         .authorization((allow) => [allow.groups(editors)])
         .handler(functionHandler("monitoringView", monitoringView)),
+    monitoringEmailSubmission: a
+        .query()
+        .arguments({ receiptId: a.string().required() })
+        .returns(a.json())
+        .authorization((allow) => [allow.groups(editors)])
+        .handler(functionHandler("monitoringView", monitoringView)),
+    monitoringResolveEmailArticleLink: a
+        .mutation()
+        .arguments({ receiptId: a.string().required(), candidateIndex: a.integer().required() })
+        .returns(a.json())
+        .authorization((allow) => [allow.groups(editors)])
+        .handler(functionHandler("monitoringView", monitoringView)),
 };

package/amplify/functions/monitoring-view/schema.ts

@@ -16,4 +16,16 @@ export const monitoringViewSchemaDefinitions = {
     .returns(a.json())
     .authorization((allow) => [allow.groups(editors)])
     .handler(functionHandler("monitoringView", monitoringView)),
+  monitoringEmailSubmission: a
+    .query()
+    .arguments({ receiptId: a.string().required() })
+    .returns(a.json())
+    .authorization((allow) => [allow.groups(editors)])
+    .handler(functionHandler("monitoringView", monitoringView)),
+  monitoringResolveEmailArticleLink: a
+    .mutation()
+    .arguments({ receiptId: a.string().required(), candidateIndex: a.integer().required() })
+    .returns(a.json())
+    .authorization((allow) => [allow.groups(editors)])
+    .handler(functionHandler("monitoringView", monitoringView)),
 };

package/amplify/functions/monitoring-view/wire.js

@@ -34,4 +34,29 @@ export function wireMonitoringView(backend) {
         actions: MONITORING_VIEW_TABLE_ACTIONS,
         resources: monitoringViewTableArns(stack.region, stack.account),
     }));
+    // Resolving a selected newsletter article records its destination in the
+    // same receipt partition. The editor-facing resolver validates the receipt
+    // and candidate before this single-key write.
+    lambda.addToRolePolicy(new PolicyStatement({
+        effect: Effect.ALLOW,
+        actions: ["dynamodb:PutItem"],
+        resources: monitoringViewTableArns(stack.region, stack.account).slice(0, 1),
+        conditions: { "ForAllValues:StringEquals": { "dynamodb:LeadingKeys": ["MONITOR#hn"] } },
+    }));
+}
+/** Lets the authenticated Reference-intake action verify a selected email receipt. */
+export function wireEmailReferenceIntake(lambda) {
+    const stack = Stack.of(lambda);
+    lambda.addEnvironment("PAPYRUS_MONITORING_TABLE_PARAMETER", MONITORING_TABLE_PARAMETER);
+    lambda.addToRolePolicy(new PolicyStatement({
+        effect: Effect.ALLOW,
+        actions: ["ssm:GetParameter"],
+        resources: [monitoringViewParameterArn(stack.region, stack.account)],
+    }));
+    lambda.addToRolePolicy(new PolicyStatement({
+        effect: Effect.ALLOW,
+        actions: MONITORING_VIEW_TABLE_ACTIONS,
+        resources: monitoringViewTableArns(stack.region, stack.account).slice(0, 1),
+        conditions: { "ForAllValues:StringEquals": { "dynamodb:LeadingKeys": ["MONITOR#hn"] } },
+    }));
 }

package/amplify/functions/monitoring-view/wire.ts

@@ -44,4 +44,36 @@ export function wireMonitoringView(backend: any): void {
       resources: monitoringViewTableArns(stack.region, stack.account),
     }),
   );
+  // Resolving a selected newsletter article records its destination in the
+  // same receipt partition. The editor-facing resolver validates the receipt
+  // and candidate before this single-key write.
+  lambda.addToRolePolicy(
+    new PolicyStatement({
+      effect: Effect.ALLOW,
+      actions: ["dynamodb:PutItem"],
+      resources: monitoringViewTableArns(stack.region, stack.account).slice(0, 1),
+      conditions: { "ForAllValues:StringEquals": { "dynamodb:LeadingKeys": ["MONITOR#hn"] } },
+    }),
+  );
+}
+
+/** Lets the authenticated Reference-intake action verify a selected email receipt. */
+export function wireEmailReferenceIntake(lambda: LambdaFunction): void {
+  const stack = Stack.of(lambda);
+  lambda.addEnvironment("PAPYRUS_MONITORING_TABLE_PARAMETER", MONITORING_TABLE_PARAMETER);
+  lambda.addToRolePolicy(
+    new PolicyStatement({
+      effect: Effect.ALLOW,
+      actions: ["ssm:GetParameter"],
+      resources: [monitoringViewParameterArn(stack.region, stack.account)],
+    }),
+  );
+  lambda.addToRolePolicy(
+    new PolicyStatement({
+      effect: Effect.ALLOW,
+      actions: MONITORING_VIEW_TABLE_ACTIONS,
+      resources: monitoringViewTableArns(stack.region, stack.account).slice(0, 1),
+      conditions: { "ForAllValues:StringEquals": { "dynamodb:LeadingKeys": ["MONITOR#hn"] } },
+    }),
+  );
 }

package/amplify/site-backend.js

@@ -25,7 +25,7 @@ import { editorialChecks } from "./functions/editorial-checks/resource.js";
 import { automationView } from "./functions/automation-view/resource.js";
 import { wireAutomationView } from "./functions/automation-view/wire.js";
 import { monitoringView } from "./functions/monitoring-view/resource.js";
-import { wireMonitoringView } from "./functions/monitoring-view/wire.js";
+import { wireEmailReferenceIntake, wireMonitoringView } from "./functions/monitoring-view/wire.js";
 import { wireEditorialChecks } from "./functions/editorial-checks/wire.js";
 import { resolvePlugins } from "./plugins/registry.js";
 import { wirePlugins } from "./plugins/wire.js";
@@ -336,6 +336,7 @@ export function defineSiteBackend(papyrusSite) {
     // and publication to this deployment's pool and existing API endpoint.
     contentActionsLambda.addEnvironment("PAPYRUS_USER_POOL_ISSUER", `https://cognito-idp.${Stack.of(contentActionsLambda).region}.amazonaws.com/${backend.auth.resources.userPool.userPoolId}`);
     contentActionsLambda.addEnvironment("PAPYRUS_GRAPHQL_ENDPOINT", backend.data.resources.cfnResources.cfnGraphqlApi.attrGraphQlUrl);
+    wireEmailReferenceIntake(contentActionsLambda);
     contentActionsLambda.addToRolePolicy(new PolicyStatement({
         actions: ["appsync:GraphQL"],
         resources: ["*"],

package/amplify/site-backend.ts

@@ -32,7 +32,7 @@ import { editorialChecks } from "./functions/editorial-checks/resource";
 import { automationView } from "./functions/automation-view/resource";
 import { wireAutomationView } from "./functions/automation-view/wire";
 import { monitoringView } from "./functions/monitoring-view/resource";
-import { wireMonitoringView } from "./functions/monitoring-view/wire";
+import { wireEmailReferenceIntake, wireMonitoringView } from "./functions/monitoring-view/wire";
 import { wireEditorialChecks } from "./functions/editorial-checks/wire";
 import { resolvePlugins } from "./plugins/registry";
 import { wirePlugins } from "./plugins/wire";
@@ -429,6 +429,7 @@ export function defineSiteBackend(papyrusSite: PapyrusSite) {
     "PAPYRUS_GRAPHQL_ENDPOINT",
     backend.data.resources.cfnResources.cfnGraphqlApi.attrGraphQlUrl,
   );
+  wireEmailReferenceIntake(contentActionsLambda);
   contentActionsLambda.addToRolePolicy(
     new PolicyStatement({
       actions: ["appsync:GraphQL"],

package/app/api/newsroom/chat/[...path]/route.ts

@@ -0,0 +1,17 @@
+import type { NextRequest } from "next/server";
+import { handlePapyrusHostedChatRequest } from "../../../../../lib/papyrus-hosted-chat";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+type RouteContext = { params: Promise<{ path: string[] }> };
+
+export async function GET(request: NextRequest, context: RouteContext) {
+  const { path } = await context.params;
+  return handlePapyrusHostedChatRequest(request, path);
+}
+
+export async function POST(request: NextRequest, context: RouteContext) {
+  const { path } = await context.params;
+  return handlePapyrusHostedChatRequest(request, path);
+}

package/app/layout.tsx

@@ -1,3 +1,5 @@
+import "chatticus/chat.css";
+import "../components/papyrus-console-conversation.css";
 import type { Metadata } from "next";
 import { Playfair_Display, Plus_Jakarta_Sans } from "next/font/google";
 import Script from "next/script";
@@ -152,7 +154,9 @@ export default async function RootLayout({ children }: Readonly<{ children: Reac
         {showStagingBanner() ? <StagingBanner /> : null}
         <AmplifyClientProvider>
           <TooltipProvider>
-            <PapyrusConsoleShell>{children}</PapyrusConsoleShell>
+            <PapyrusConsoleShell privateChatEnabled={process.env.PAPYRUS_PRIVATE_CHAT_ENABLED === "true"}>
+              {children}
+            </PapyrusConsoleShell>
           </TooltipProvider>
         </AmplifyClientProvider>
       </body>

package/components/monitoring-overview-view.tsx

@@ -1,4 +1,6 @@
+import { useEffect, useRef, useState } from "react";
 import Link from "next/link";
+import { getNewsroomNavHref } from "../lib/newsroom-nav";
 import {
   confidenceText,
   describeDelivery,
@@ -7,8 +9,15 @@ import {
   formatUtc,
   referenceHref,
   routingLabel,
-  usageText,
+  beginEmailSubmissionAction,
+  endEmailSubmissionAction,
+  isCurrentEmailSubmissionAction,
   type MonitoringItem,
+  type MonitoringEmailDetails,
+  type MonitoringEmailArticleResolution,
+  type EmailReferenceImportItem,
+  type EmailReferenceImportOutcome,
+  type MonitoringEmailSummary,
   type MonitoringOverview,
   type MonitoringRelevance,
   type MonitoringResult,
@@ -88,8 +97,160 @@ function QueueItem({ item, ownId, demo }: { item: MonitoringItem; ownId: string
   );
 }
 
-function Ready({ data, demo }: { data: MonitoringOverview; demo: boolean }) {
-  const ceilings = data.usage?.ceilings ?? null;
+function EmailSubmissions({ items, detail, onOpen, onResolveArticleLink, onImportCandidates }: {
+  items: MonitoringEmailSummary[]; detail: MonitoringEmailDetails | null; onOpen: (receiptId: string) => void;
+  onResolveArticleLink?: (receiptId: string, candidateIndex: number) => Promise<MonitoringEmailArticleResolution>;
+  onImportCandidates?: (receiptId: string, items: EmailReferenceImportItem[]) => Promise<EmailReferenceImportOutcome>;
+}) {
+  const [selectedByReceipt, setSelectedByReceipt] = useState<Record<string, Record<number, boolean>>>({});
+  const [resolvedByReceipt, setResolvedByReceipt] = useState<Record<string, Record<number, { url: string; title: string }>>>({});
+  const [busyIndexByReceipt, setBusyIndexByReceipt] = useState<Record<string, number | null>>({});
+  const [busyImportByReceipt, setBusyImportByReceipt] = useState<Record<string, boolean>>({});
+  const [noticeByReceipt, setNoticeByReceipt] = useState<Record<string, string>>({});
+  const [importedByReceipt, setImportedByReceipt] = useState<Record<string, EmailReferenceImportOutcome["references"]>>({});
+  const receiptId = detail && "submission" in detail ? detail.submission.receiptId : null;
+  const receiptKey = receiptId ?? "";
+  const selected = selectedByReceipt[receiptKey] ?? {};
+  const resolved = resolvedByReceipt[receiptKey] ?? {};
+  const busyIndex = busyIndexByReceipt[receiptKey] ?? null;
+  const busyImport = busyImportByReceipt[receiptKey] ?? false;
+  const notice = noticeByReceipt[receiptKey] ?? "";
+  const importedReferences = importedByReceipt[receiptKey] ?? [];
+  const activeReceiptId = useRef<string | null>(receiptId);
+  activeReceiptId.current = receiptId;
+  const inFlightActions = useRef(new Set<string>());
+  useEffect(() => {
+    if (!detail || !("submission" in detail)) return;
+    setSelectedByReceipt((current) => current[receiptKey] ? current : {
+      ...current,
+      [receiptKey]: Object.fromEntries(detail.candidateLinks.map((link, index) => [index, link.resolutionStatus !== "unresolved"])),
+    });
+  }, [receiptKey, detail]);
+
+  const resolveLink = async (index: number) => {
+    if (!receiptId || !onResolveArticleLink) return;
+    const requestReceiptId = receiptId;
+    const actionKey = `resolve:${requestReceiptId}:${index}`;
+    if (!beginEmailSubmissionAction(inFlightActions.current, actionKey)) return;
+    setBusyIndexByReceipt((current) => ({ ...current, [requestReceiptId]: index }));
+    setNoticeByReceipt((current) => ({ ...current, [requestReceiptId]: "" }));
+    try {
+      const result = await onResolveArticleLink(requestReceiptId, index);
+      if (!isCurrentEmailSubmissionAction(activeReceiptId.current, requestReceiptId)) return;
+      if (!("url" in result)) {
+        setNoticeByReceipt((current) => ({ ...current, [requestReceiptId]: "The article destination could not be resolved safely. The original link remains private and unchanged." }));
+        return;
+      }
+      const candidate = detail && "submission" in detail ? detail.candidateLinks[index] : null;
+      setResolvedByReceipt((current) => ({ ...current, [requestReceiptId]: { ...current[requestReceiptId], [index]: { url: result.url, title: result.title || candidate?.title || "Article" } } }));
+      setSelectedByReceipt((current) => ({ ...current, [requestReceiptId]: { ...current[requestReceiptId], [index]: true } }));
+      setNoticeByReceipt((current) => ({ ...current, [requestReceiptId]: "Resolved. This request may be recorded as a click by the newsletter sender." }));
+    } catch {
+      if (isCurrentEmailSubmissionAction(activeReceiptId.current, requestReceiptId)) {
+        setNoticeByReceipt((current) => ({ ...current, [requestReceiptId]: "The article destination could not be resolved. Try again later." }));
+      }
+    } finally {
+      endEmailSubmissionAction(inFlightActions.current, actionKey);
+      setBusyIndexByReceipt((current) => ({ ...current, [requestReceiptId]: null }));
+    }
+  };
+
+  const importSelected = async () => {
+    if (!receiptId || !detail || !("submission" in detail) || !onImportCandidates) return;
+    const requestReceiptId = receiptId;
+    const actionKey = `import:${requestReceiptId}`;
+    if (inFlightActions.current.has(actionKey)) return;
+    const candidates = detail.candidateLinks.flatMap((link, index) => {
+      if (!selected[index]) return [];
+      const resolvedLink = resolved[index];
+      if (!resolvedLink && link.resolutionStatus === "unresolved") return [];
+      const url = resolvedLink?.url ?? link.url;
+      return [{ candidateIndex: index, source_uri: url }];
+    });
+    if (!candidates.length) {
+      setNoticeByReceipt((current) => ({ ...current, [requestReceiptId]: "Select at least one available candidate link. Resolve tracking links before importing them." }));
+      return;
+    }
+    if (!beginEmailSubmissionAction(inFlightActions.current, actionKey)) return;
+    setBusyImportByReceipt((current) => ({ ...current, [requestReceiptId]: true }));
+    setNoticeByReceipt((current) => ({ ...current, [requestReceiptId]: "" }));
+    try {
+      const result = await onImportCandidates(requestReceiptId, candidates);
+      if (!isCurrentEmailSubmissionAction(activeReceiptId.current, requestReceiptId)) return;
+      setImportedByReceipt((current) => ({ ...current, [requestReceiptId]: result.references }));
+      if (result.error) {
+        setNoticeByReceipt((current) => ({ ...current, [requestReceiptId]: `${result.imported} of ${candidates.length} selected candidates were registered or matched. ${result.error}` }));
+      } else {
+        setNoticeByReceipt((current) => ({ ...current, [requestReceiptId]: `${result.imported} selected candidates are available as References. Import does not approve or publish them.` }));
+      }
+    } catch {
+      if (isCurrentEmailSubmissionAction(activeReceiptId.current, requestReceiptId)) {
+        setNoticeByReceipt((current) => ({ ...current, [requestReceiptId]: "The import stopped. Any completed references are safe to retry; no review decision was made." }));
+      }
+    } finally {
+      endEmailSubmissionAction(inFlightActions.current, actionKey);
+      setBusyImportByReceipt((current) => ({ ...current, [requestReceiptId]: false }));
+    }
+  };
+
+  return (
+    <article className="news-desk-doctrine-card" data-monitoring-section="email-submissions">
+      <div className="news-desk-doctrine-card__header"><div><h3>Email submissions</h3><span>Untrusted source material held privately for editor review</span></div></div>
+      {items.length ? <ul className="news-desk-monitoring__list">
+        {items.map((item) => <li key={item.receiptId} data-email-submission={item.receiptId}>
+          <strong>{item.subject || "(no subject)"}</strong>
+          <span>{formatUtc(item.observedAt)} · {item.linkCount} candidate links · {item.reviewRequired
+            ? `${item.linkCount} await editor import` : `${item.processedCount} queued`}</span>
+          {item.reviewRequired ? <span>Authentication warnings: private review required; nothing was routed automatically.</span> : null}
+          {item.unresolvedLinkCount ? <span>{item.unresolvedLinkCount} tracking links remain unresolved and were not opened.</span> : null}
+          <span>Envelope sender: {item.envelopeSender || "unknown"} · MIME From (unverified): {item.headerFrom || "unknown"}</span>
+          <span>SES signals — SPF {item.verdicts.spf}, DKIM {item.verdicts.dkim}, DMARC {item.verdicts.dmarc}; spam {item.verdicts.spam}, virus {item.verdicts.virus}</span>
+          {item.warnings.length ? <span>Warnings: {item.warnings.join(", ")}</span> : null}
+          {item.errorCode ? <span>State: {item.status} ({item.errorCode})</span> : <span>State: {item.status}</span>}
+          <button type="button" onClick={() => onOpen(item.receiptId)}>Read email and review candidate links</button>
+        </li>)}
+      </ul> : <p>No email submissions are available for this publication.</p>}
+      {detail && "submission" in detail ? (
+        <section aria-label="Email submission details" data-email-submission-details={detail.submission.receiptId}>
+          <h4>{detail.submission.subject || "Submitted email"}</h4>
+          <p>Original content is shown as inert text. Sender and message content are untrusted; no instructions are executed.</p>
+          <pre style={{ whiteSpace: "pre-wrap", overflowWrap: "anywhere" }}>{detail.safeBodyText}</pre>
+          <h5>Candidate references ({detail.candidateLinks.length})</h5>
+          <ul>{detail.candidateLinks.map((link, index) => <li key={`${link.url}-${index}`}>
+            {link.resolutionStatus === "unresolved" && !resolved[index]
+              ? <span>{link.title || "Newsletter article link"} (tracking redirect not opened)</span>
+              : <a href={(resolved[index]?.url ?? link.url)} target="_blank" rel="noreferrer noopener">{resolved[index]?.title ?? (link.title || "Source link")}</a>}
+            <label>
+              <input type="checkbox" checked={selected[index] ?? false}
+                disabled={link.resolutionStatus === "unresolved" && !resolved[index]}
+                onChange={(event) => setSelectedByReceipt((current) => ({ ...current, [receiptKey]: { ...current[receiptKey], [index]: event.target.checked } }))} />
+              Add as pending Reference
+            </label>
+            {link.resolutionStatus === "unresolved" && !resolved[index] ? (
+              <button type="button" disabled={busyIndex !== null || !onResolveArticleLink} onClick={() => void resolveLink(index)}>
+                {busyIndex === index ? "Resolving…" : "Resolve article redirect (may register a click)"}
+              </button>
+            ) : null}
+          </li>)}</ul>
+          <p>Adding links creates or reuses pending References. It does not approve, label, classify, or publish them.</p>
+          <button type="button" disabled={busyImport || !onImportCandidates || !detail.submission.corpusId}
+            onClick={() => void importSelected()}>
+            {busyImport ? "Adding References…" : "Add selected links to References"}
+          </button>
+          {notice ? <p role="status" data-email-import-result>{notice}</p> : null}
+          {importedReferences.length ? <p><Link href={getNewsroomNavHref("/newsroom/references", false)}>Review these References</Link></p> : null}
+        </section>
+      ) : detail && "error" in detail ? <p role="alert">You cannot read this submission.</p>
+        : detail && "state" in detail ? <p role="alert">Submission details are unavailable.</p> : null}
+    </article>
+  );
+}
+
+function Ready({ data, demo, emailDetail, onEmailOpen, onResolveArticleLink, onImportCandidates }: {
+  data: MonitoringOverview; demo: boolean; emailDetail: MonitoringEmailDetails | null; onEmailOpen: (id: string) => void;
+  onResolveArticleLink?: (receiptId: string, candidateIndex: number) => Promise<MonitoringEmailArticleResolution>;
+  onImportCandidates?: (receiptId: string, items: EmailReferenceImportItem[]) => Promise<EmailReferenceImportOutcome>;
+}) {
   const router = data.router;
   return (
     <>
@@ -97,6 +258,10 @@ function Ready({ data, demo }: { data: MonitoringOverview; demo: boolean }) {
         <p className="news-desk-delegation-note" data-monitoring-notice>This publication is not one of the router&apos;s outputs, so no relevance is shown for it here.</p>
       ) : null}
 
+      <EmailSubmissions items={data.emailSubmissions ?? []} detail={emailDetail} onOpen={onEmailOpen}
+        onResolveArticleLink={demo ? undefined : onResolveArticleLink}
+        onImportCandidates={demo ? undefined : onImportCandidates} />
+
       <article className="news-desk-doctrine-card" data-monitoring-section="router">
         <div className="news-desk-doctrine-card__header"><div><h3>Router</h3><span>Sends collected items to the shared Cyclotron and delivers relevant ones to References</span></div></div>
         {router ? (
@@ -110,15 +275,14 @@ function Ready({ data, demo }: { data: MonitoringOverview; demo: boolean }) {
       </article>
 
       <article className="news-desk-doctrine-card" data-monitoring-section="usage">
-        <div className="news-desk-doctrine-card__header"><div><h3>Usage</h3><span>Decisions the router recorded, against the shared Cyclotron&apos;s ceilings (UTC days)</span></div></div>
+        <div className="news-desk-doctrine-card__header"><div><h3>Usage</h3><span>Observed router decisions, not a Cyclotron quota (UTC days)</span></div></div>
         {data.usage ? (
           <>
             <dl className="news-desk-monitoring__usage">
-              <div><dt>Decisions today ({data.usage.day})</dt><dd>{usageText(data.usage.decisionsToday, ceilings?.decisionsPerDay)}</dd></div>
-              <div><dt>Decisions in total</dt><dd>{usageText(data.usage.decisionsTotal, ceilings?.decisionsTotal)}</dd></div>
-              {ceilings?.items !== undefined ? <div><dt>Items judged (ceiling)</dt><dd>{usageText(data.usage.decisionsTotal, ceilings.items)}</dd></div> : null}
+              <div><dt>Decisions today ({data.usage.day})</dt><dd>{data.usage.historyComplete ? data.usage.decisionsToday : `At least ${data.usage.decisionsToday}`}</dd></div>
+              <div><dt>Decisions in inspected history</dt><dd>{data.usage.historyComplete ? data.usage.decisionsTotal : `At least ${data.usage.decisionsTotal}`}</dd></div>
             </dl>
-            {ceilings === null ? <p className="news-desk-delegation-note">No ceilings are configured here, so only usage is shown.</p> : null}
+            {!data.usage.historyComplete ? <p className="news-desk-delegation-note">Counts are lower bounds from a bounded history read.</p> : null}
           </>
         ) : <p>No usage recorded yet.</p>}
       </article>
@@ -192,12 +356,20 @@ export function MonitoringOverviewView({
   mode,
   onModeChange,
   demo = false,
+  emailDetail = null,
+  onEmailOpen = () => {},
+  onResolveArticleLink,
+  onImportCandidates,
 }: {
   result: MonitoringResult | null;
   canViewAll: boolean;
   mode: MonitoringMode;
   onModeChange: (mode: MonitoringMode) => void;
   demo?: boolean;
+  emailDetail?: MonitoringEmailDetails | null;
+  onEmailOpen?: (receiptId: string) => void;
+  onResolveArticleLink?: (receiptId: string, candidateIndex: number) => Promise<MonitoringEmailArticleResolution>;
+  onImportCandidates?: (receiptId: string, items: EmailReferenceImportItem[]) => Promise<EmailReferenceImportOutcome>;
 }) {
   let body: React.ReactNode;
   if (result === null) {
@@ -213,7 +385,8 @@ export function MonitoringOverviewView({
   } else if (result.state === "empty") {
     body = <Message kind="empty" title="Nothing has been collected yet">No feed is configured and no run has been recorded. Items appear here after the collector&apos;s first run.</Message>;
   } else {
-    body = <Ready data={result} demo={demo} />;
+    body = <Ready data={result} demo={demo} emailDetail={emailDetail} onEmailOpen={onEmailOpen}
+      onResolveArticleLink={onResolveArticleLink} onImportCandidates={onImportCandidates} />;
   }
   const scopeLine = result && "scope" in result
     ? (result.scope.mode === "all" ? "Showing the whole shared pipeline, every publication." : `Showing what is relevant to ${result.scope.publicationId ?? "this publication"}.`)

package/components/monitoring-panel.tsx

@@ -1,9 +1,14 @@
 "use client";
 
 import { useEffect, useState } from "react";
-import { loadMonitoringOverview } from "../lib/monitoring-client";
+import {
+  importMonitoringEmailCandidates,
+  loadMonitoringEmailSubmission,
+  loadMonitoringOverview,
+  resolveMonitoringEmailArticleLink,
+} from "../lib/monitoring-client";
 import { FIXTURE_ALL_PIPELINE_OVERVIEW, FIXTURE_MONITORING_OVERVIEW } from "../lib/monitoring-overview-fixture";
-import type { MonitoringResult } from "../lib/monitoring-overview";
+import type { EmailReferenceImportItem, MonitoringEmailDetails, MonitoringResult } from "../lib/monitoring-overview";
 import { MonitoringOverviewView, type MonitoringMode } from "./monitoring-overview-view";
 
 const REFRESH_MILLISECONDS = 60_000;
@@ -12,6 +17,7 @@ const REFRESH_MILLISECONDS = 60_000;
 export function MonitoringPanel({ isAdmin, isDemo }: { isAdmin: boolean; isDemo: boolean }) {
   const [mode, setMode] = useState<MonitoringMode>("publication");
   const [result, setResult] = useState<MonitoringResult | null>(null);
+  const [emailDetail, setEmailDetail] = useState<MonitoringEmailDetails | null>(null);
 
   useEffect(() => {
     if (isDemo) {
@@ -36,5 +42,19 @@ export function MonitoringPanel({ isAdmin, isDemo }: { isAdmin: boolean; isDemo:
     };
   }, [mode, isDemo]);
 
-  return <MonitoringOverviewView result={result} canViewAll={isAdmin} mode={mode} onModeChange={setMode} demo={isDemo} />;
+  const openEmail = async (receiptId: string) => {
+    setEmailDetail({ state: "unavailable" });
+    const next = await loadMonitoringEmailSubmission(receiptId);
+    setEmailDetail(next);
+  };
+
+  const resolveEmailArticleLink = (receiptId: string, candidateIndex: number) =>
+    resolveMonitoringEmailArticleLink(receiptId, candidateIndex);
+
+  const importEmailCandidates = (receiptId: string, candidates: EmailReferenceImportItem[]) =>
+    importMonitoringEmailCandidates(receiptId, candidates);
+
+  return <MonitoringOverviewView result={result} canViewAll={isAdmin} mode={mode} onModeChange={setMode} demo={isDemo}
+    emailDetail={emailDetail} onEmailOpen={isDemo ? () => {} : openEmail} onResolveArticleLink={isDemo ? undefined : resolveEmailArticleLink}
+    onImportCandidates={importEmailCandidates} />;
 }

package/components/notification-center.tsx

@@ -23,6 +23,7 @@ type ViewProps = {
   held: CyclotronEntry[];
   autoDecided: CyclotronEntry[];
   storyTitles?: Readonly<Record<string, string>>;
+  deletedStories?: ReadonlySet<string>;
   demo?: boolean;
   busyId?: string | null;
   error?: string | null;
@@ -31,8 +32,8 @@ type ViewProps = {
   onMarkAllRead?: () => void;
 };
 
-function Entry({ request, unread, demo, busy, titles, onAnswer, onMarkRead }: {
-  request: ReviewRequest; unread: boolean; demo: boolean; busy: boolean; titles: Readonly<Record<string, string>>;
+function Entry({ request, unread, demo, busy, titles, deleted, onAnswer, onMarkRead }: {
+  request: ReviewRequest; unread: boolean; demo: boolean; busy: boolean; titles: Readonly<Record<string, string>>; deleted: ReadonlySet<string>;
   onAnswer?: ViewProps["onAnswer"]; onMarkRead?: ViewProps["onMarkRead"];
 }) {
   const [note, setNote] = useState("");
@@ -49,7 +50,7 @@ function Entry({ request, unread, demo, busy, titles, onAnswer, onMarkRead }: {
       </div>
       <p className="text-xs text-muted-foreground">
         Raised by {request.raisedBy} on {formatWhen(request.raisedAt)}
-        {" · "}About: {href ? <Link href={href} onClick={() => onMarkRead?.(request.id)}>{subjectLabel(request.subject, titles)}</Link> : <span>{subjectLabel(request.subject, titles)}</span>}
+        {" · "}About: {href ? <Link href={href} onClick={() => onMarkRead?.(request.id)}>{subjectLabel(request.subject, titles, deleted)}</Link> : <span>{subjectLabel(request.subject, titles, deleted)}</span>}
       </p>
       {request.ask ? <p className="text-sm">{request.ask}</p> : null}
       {request.links.length ? (
@@ -78,7 +79,7 @@ function Entry({ request, unread, demo, busy, titles, onAnswer, onMarkRead }: {
           </label>
           <div className="flex flex-wrap gap-2">
             {request.mode === "flag" ? (
-              <Button disabled={busy} onClick={() => act({ decision: "approve" })} size="sm" variant="outline">Acknowledge</Button>
+              <Button disabled={busy} onClick={() => act({ decision: "acknowledge" })} size="sm" variant="outline">Acknowledge</Button>
             ) : (
               <>
                 <Button disabled={busy} onClick={() => act({ decision: "approve" })} size="sm" variant="outline">Approve</Button>
@@ -125,12 +126,12 @@ function Section({ id, title, count, children, empty }: { id: string; title: str
 }
 
 /** The CMS console home: what needs a person, what will proceed on its own, and what the system decided. Ignore-safe by design. */
-export function NotificationCenterView({ loadState, requests, readIds, held, autoDecided, demo = false, storyTitles = {}, busyId = null, error = null, onAnswer, onMarkRead, onMarkAllRead }: ViewProps) {
+export function NotificationCenterView({ loadState, requests, readIds, held, autoDecided, demo = false, storyTitles = {}, deletedStories = new Set<string>(), busyId = null, error = null, onAnswer, onMarkRead, onMarkAllRead }: ViewProps) {
   const sections = useMemo(() => sectionReviews(requests), [requests]);
   const unreadCount = requests.filter((request) => isUnread(request, readIds)).length;
   const summary = summarize(sections, held, autoDecided, unreadCount);
   const entry = (request: ReviewRequest) => (
-    <Entry busy={busyId === request.id} demo={demo} key={request.id} titles={storyTitles} onAnswer={onAnswer} onMarkRead={onMarkRead} request={request} unread={isUnread(request, readIds)} />
+    <Entry busy={busyId === request.id} demo={demo} key={request.id} titles={storyTitles} deleted={deletedStories} onAnswer={onAnswer} onMarkRead={onMarkRead} request={request} unread={isUnread(request, readIds)} />
   );
   if (loadState === "loading") return (
     <section aria-label="Loading Notification Center" className="space-y-4" data-notification-state="loading" role="status">
@@ -206,6 +207,7 @@ export function NotificationCenter({ references, decisions, humanCuratedReferenc
   const [busyId, setBusyId] = useState<string | null>(null);
   const [error, setError] = useState<string | null>(null);
   const [storyTitles, setStoryTitles] = useState<Record<string, string>>({});
+  const [deletedStories, setDeletedStories] = useState<ReadonlySet<string>>(new Set());
 
   const refresh = useCallback(async () => {
     if (demo) {
@@ -226,7 +228,9 @@ export function NotificationCenter({ references, decisions, humanCuratedReferenc
       setUserKey(loaded.userKey);
       setLoadState("ready");
       const { loadStoryTitles } = await import("../lib/review-client");
-      setStoryTitles(await loadStoryTitles(loaded.requests.filter((request) => request.subject.type === "story").map((request) => request.subject.id)).catch(() => ({})));
+      const stories = await loadStoryTitles(loaded.requests.filter((request) => request.subject.type === "story").map((request) => request.subject.id)).catch(() => ({ titles: {}, deleted: [] as string[] }));
+      setStoryTitles(stories.titles);
+      setDeletedStories(new Set(stories.deleted));
     } catch {
       setLoadState("unavailable");
     }
@@ -270,7 +274,7 @@ export function NotificationCenter({ references, decisions, humanCuratedReferenc
 
   return (
     <NotificationCenterView
-      autoDecided={autoDecided} busyId={busyId} storyTitles={storyTitles} demo={demo} error={error} held={held} loadState={loadState}
+      autoDecided={autoDecided} busyId={busyId} storyTitles={storyTitles} deletedStories={deletedStories} demo={demo} error={error} held={held} loadState={loadState}
       onAnswer={answer} onMarkAllRead={markAllRead} onMarkRead={markRead} readIds={readIds} requests={requests}
     />
   );