@anthusai/papyrus 5.41.1 → 5.42.0

package/amplify/plugins/reader-steering/function/handler.py

@@ -1015,6 +1015,26 @@ class DynamoReaderStore:
             raise
         return True
 
+    def list_story_drafts(self, limit: int) -> list[dict[str, Any]]:
+        """The story drafts of the table, only the fields ``listStoryDrafts`` may answer; at most ``limit`` (the newest if there are more)."""
+        fields = proposal_rules.STORY_DRAFT_FIELDS
+        names = {"#kind": "kind", **{f"#f{index}": field for index, field in enumerate(fields)}}
+        request: dict[str, Any] = {
+            "FilterExpression": "#kind = :kind",
+            "ProjectionExpression": ", ".join(f"#f{index}" for index in range(len(fields))) + ", #kind",
+            "ExpressionAttributeNames": names,
+            "ExpressionAttributeValues": {":kind": "story_draft"},
+        }
+        rows: list[dict[str, Any]] = []
+        while True:
+            page = self._table("proposal").scan(**request)
+            rows.extend(plain(item) for item in page.get("Items") or [])
+            if not page.get("LastEvaluatedKey"):
+                break
+            request["ExclusiveStartKey"] = page["LastEvaluatedKey"]
+        rows.sort(key=lambda row: (row.get("createdAt") or "", row.get("id") or ""), reverse=True)
+        return [{field: row.get(field) for field in fields} for row in rows[:limit]]
+
     def change_proposal(self, proposal_id: str, changes: dict[str, Any], expected_state: str, now_iso: str, *, expected_updated_at: str | None = None) -> bool:
         """Apply ``changes`` if the state (and, when given, ``updatedAt``) is still what the caller saw; a value of ``None`` removes the attribute."""
         names = {"#st": "state", "#u": "updatedAt", **{f"#c{index}": key for index, key in enumerate(changes)}}
@@ -1510,6 +1530,8 @@ def handle_staff_event(event: dict[str, Any], *, store: Any, settings: ReaderSet
     """``moderateReader`` from AppSync: an editor or admin hides, approves, promotes, bans or undoes. Answers a receipt, never an exception."""
     if proposal_rules.event_field_name(event) in proposal_rules.MUTATIONS:
         return proposal_rules.handle_proposal_event(event, store, now_iso=iso(now_seconds), account_id=account_id)
+    if proposal_rules.event_field_name(event) in proposal_rules.QUERIES:
+        return proposal_rules.handle_proposal_query(event, store, account_id=account_id)
     identity = event.get("identity") or {}
     claims = identity.get("claims") or {}
     groups = claims.get("cognito:groups") or identity.get("groups") or []

package/amplify/plugins/reader-steering/function/proposals.py

@@ -57,6 +57,11 @@ TARGET_COUNTS: dict[str, tuple[int, int]] = {
 TARGET_TYPES = ("concept", "entity", "column", "story", "cluster")
 
 MUTATIONS = ("fileProposal", "transitionProposal", "editProposal")
+#: The one read an operator has: ``listStoryDrafts`` answers the story drafts and nothing else of them (never the body, the evidence, the
+#: history, the proposer, a vote, the editor log or a reason), so an unattended run can avoid filing a near-duplicate of an earlier draft.
+QUERIES = ("listStoryDrafts",)
+STORY_DRAFT_FIELDS = ("id", "title", "summary", "targets", "state", "createdAt")
+MAXIMUM_STORY_DRAFTS = 500
 
 #: What ``editProposal`` does beyond moving the state. Editors and admins only: an operator is refused every one of them.
 PIN, UNPIN, HOLD, RELEASE, EXCLUDE_VOTES, UNDO_EXCLUSION = "pin", "unpin", "hold", "release", "exclude_votes", "undo_exclusion"
@@ -128,6 +133,8 @@ class ProposalStore(Protocol):
 
     def change_proposal(self, proposal_id: str, changes: dict[str, Any], expected_state: str, now_iso: str, *, expected_updated_at: str | None = None) -> bool: ...
 
+    def list_story_drafts(self, limit: int) -> list[dict[str, Any]]: ...
+
 
 def staff_subject(identity: dict[str, Any]) -> str | None:
     """The Cognito subject of an editor or admin, or ``None`` for anyone else."""
@@ -456,3 +463,25 @@ def handle_proposal_event(event: dict[str, Any], store: ProposalStore, *, now_is
         by=BY_OPERATOR if operator else BY_STAFF,
         allowed=OPERATOR_TRANSITIONS if operator else None,
     ).to_dict()
+
+
+def story_draft_summary(row: dict[str, Any]) -> dict[str, Any]:
+    """The six fields an operator may read of a story draft. ``targets`` stays the JSON text it is stored as."""
+    summary = {field: row.get(field) for field in STORY_DRAFT_FIELDS}
+    if summary["targets"] is not None and not isinstance(summary["targets"], str):
+        summary["targets"] = json.dumps(summary["targets"])
+    return summary
+
+
+def handle_proposal_query(event: dict[str, Any], store: ProposalStore, *, account_id: str | None = None) -> dict[str, Any]:
+    """``listStoryDrafts`` from AppSync: the story drafts, newest first, with only ``STORY_DRAFT_FIELDS``. Read only.
+
+    The same caller check as :func:`handle_proposal_event`: an editor or admin, or an IAM principal of ``account_id`` (the function's own
+    account) acting as an operator. An identity-pool user and a principal of any other account are refused. Answers a receipt-shaped
+    object, never an exception.
+    """
+    identity = event.get("identity") or {}
+    if staff_subject(identity) is None and operator_actor(identity, account_id) is None:
+        return {**refused("not_staff", "Only editors, admins and operators of this account can list story drafts.").to_dict(), "drafts": []}
+    rows = sorted(store.list_story_drafts(MAXIMUM_STORY_DRAFTS), key=lambda row: (row.get("createdAt") or "", row.get("id") or ""), reverse=True)
+    return {"status": "ok", "id": None, "error": None, "message": None, "drafts": [story_draft_summary(row) for row in rows[:MAXIMUM_STORY_DRAFTS]]}

package/amplify/plugins/reader-steering/papyrus.plugin.js

@@ -16,6 +16,7 @@ export const readerSteeringManifest = {
     contract: 1,
     models: ["ReaderProfile", "ReaderHandle", "ReaderVote", "ReaderFlag", "ReaderSubmission", "ReaderComment", "ReaderReport", "ModerationAction", "Proposal"],
     mutations: ["moderateReader", "fileProposal", "transitionProposal", "editProposal"],
+    queries: ["listStoryDrafts"],
     guest: { mutations: [] },
     newsroomPanels: [{ id: "moderation", label: "Moderation" }],
     staticAssets: ["_plugins/papyrus-reader@1.js", "_plugins/papyrus-reader@1.css"],

package/amplify/plugins/reader-steering/papyrus.plugin.ts

@@ -23,6 +23,7 @@ export const readerSteeringManifest: PluginManifest = {
   contract: 1,
   models: ["ReaderProfile", "ReaderHandle", "ReaderVote", "ReaderFlag", "ReaderSubmission", "ReaderComment", "ReaderReport", "ModerationAction", "Proposal"],
   mutations: ["moderateReader", "fileProposal", "transitionProposal", "editProposal"],
+  queries: ["listStoryDrafts"],
   guest: { mutations: [] },
   newsroomPanels: [{ id: "moderation", label: "Moderation" }],
   staticAssets: ["_plugins/papyrus-reader@1.js", "_plugins/papyrus-reader@1.css"],

package/amplify/plugins/reader-steering/schema.js

@@ -165,6 +165,22 @@ export function readerSteeringSchemaDefinitions() {
             error: a.string(),
             message: a.string(),
         }),
+        // What an operator may read of a story draft: these six fields and nothing else (no body, evidence, history, proposer, vote or log).
+        StoryDraftSummary: a.customType({
+            id: a.string().required(),
+            title: a.string().required(),
+            summary: a.string(),
+            targets: a.json(),
+            state: a.string().required(),
+            createdAt: a.string().required(),
+        }),
+        StoryDraftList: a.customType({
+            status: a.string().required(),
+            id: a.string(),
+            error: a.string(),
+            message: a.string(),
+            drafts: a.ref("StoryDraftSummary").array(),
+        }),
         // Editors and admins file as themselves. AppSync also admits an IAM principal whose own policy allows the field (the
         // schema accepts IAM callers for the functions that call it); the function files an AI proposal for an IAM principal
         // of its own account only, and refuses an identity-pool user and any other account. No IAM rule is declared here.
@@ -194,6 +210,13 @@ export function readerSteeringSchemaDefinitions() {
             .returns(a.ref("ProposalReceipt"))
             .authorization((allow) => [allow.group("editor"), allow.group("admin")])
             .handler(functionHandler("readerActions", readerActions)),
+        // Read only, and the same caller rule as fileProposal: editors and admins, or an IAM principal of the function's own account. The function
+        // answers the story drafts' id, title, summary, targets, state and createdAt so an unattended trend run can dedupe; nothing else.
+        listStoryDrafts: a
+            .query()
+            .returns(a.ref("StoryDraftList"))
+            .authorization((allow) => [allow.group("editor"), allow.group("admin")])
+            .handler(functionHandler("readerActions", readerActions)),
         // Editors and admins only, and the function refuses an IAM operator: pin, unpin, hold, release, exclude_votes and
         // undo_exclusion. `rule` is a batch rule for exclude_votes; `exclusionId` names the exclusion undo_exclusion reverses.
         editProposal: a

package/amplify/plugins/reader-steering/schema.ts

@@ -167,6 +167,22 @@ export function readerSteeringSchemaDefinitions() {
       error: a.string(),
       message: a.string(),
     }),
+    // What an operator may read of a story draft: these six fields and nothing else (no body, evidence, history, proposer, vote or log).
+    StoryDraftSummary: a.customType({
+      id: a.string().required(),
+      title: a.string().required(),
+      summary: a.string(),
+      targets: a.json(),
+      state: a.string().required(),
+      createdAt: a.string().required(),
+    }),
+    StoryDraftList: a.customType({
+      status: a.string().required(),
+      id: a.string(),
+      error: a.string(),
+      message: a.string(),
+      drafts: a.ref("StoryDraftSummary").array(),
+    }),
     // Editors and admins file as themselves. AppSync also admits an IAM principal whose own policy allows the field (the
     // schema accepts IAM callers for the functions that call it); the function files an AI proposal for an IAM principal
     // of its own account only, and refuses an identity-pool user and any other account. No IAM rule is declared here.
@@ -196,6 +212,13 @@ export function readerSteeringSchemaDefinitions() {
       .returns(a.ref("ProposalReceipt"))
       .authorization((allow) => [allow.group("editor"), allow.group("admin")])
       .handler(functionHandler("readerActions", readerActions)),
+    // Read only, and the same caller rule as fileProposal: editors and admins, or an IAM principal of the function's own account. The function
+    // answers the story drafts' id, title, summary, targets, state and createdAt so an unattended trend run can dedupe; nothing else.
+    listStoryDrafts: a
+      .query()
+      .returns(a.ref("StoryDraftList"))
+      .authorization((allow) => [allow.group("editor"), allow.group("admin")])
+      .handler(functionHandler("readerActions", readerActions)),
     // Editors and admins only, and the function refuses an IAM operator: pin, unpin, hold, release, exclude_votes and
     // undo_exclusion. `rule` is a batch rule for exclude_votes; `exclusionId` names the exclusion undo_exclusion reverses.
     editProposal: a

package/components/monitoring-overview-view.tsx

@@ -336,7 +336,7 @@ function Ready({ data, demo, emailDetail, onEmailOpen, onResolveArticleLink, onI
         <div className="news-desk-doctrine-card__header"><div><h3>Collected queue</h3><span>Newest first, with what the shared Cyclotron decided</span></div></div>
         {data.items.length ? (
           <ul className="news-desk-monitoring__queue">
-            {data.items.map((item) => <QueueItem key={`${item.sourceId}-${item.revision}`} item={item} ownId={data.scope.publicationId} demo={demo} />)}
+            {data.items.map((item) => <QueueItem key={`${item.monitorId ?? ""}-${item.sourceId}-${item.revision}`} item={item} ownId={data.scope.publicationId} demo={demo} />)}
           </ul>
         ) : <p>No items in the queue.</p>}
         {data.hiddenNotRelevant > 0 ? (
@@ -345,6 +345,14 @@ function Ready({ data, demo, emailDetail, onEmailOpen, onResolveArticleLink, onI
           </p>
         ) : null}
       </article>
+
+      {data.otherMonitors?.length ? (
+        <details className="news-desk-delegation-note" data-monitoring-other-monitors>
+          <summary>Not routed to this site ({data.otherMonitors.length})</summary>
+          <p>These monitors collect items, but none of them is routed to this site, so their items are not shown here.</p>
+          <ul>{data.otherMonitors.map((id) => <li key={id} data-monitoring-other-monitor={id}>{id}</li>)}</ul>
+        </details>
+      ) : null}
     </>
   );
 }

package/lib/monitoring-overview.ts

@@ -20,6 +20,7 @@ export type MonitoringRelevance = {
 };
 
 export type MonitoringItem = {
+  monitorId?: string;
   sourceId: string;
   revision: number;
   title: string;
@@ -128,6 +129,8 @@ export type MonitoringOverview = {
     historyComplete: boolean;
   } | null;
   items: MonitoringItem[];
+  /** Monitors that do not route to this site: named only, with no items. */
+  otherMonitors?: string[];
   emailSubmissions?: MonitoringEmailSummary[];
   hiddenNotRelevant: number;
 };

package/package.json

@@ -456,7 +456,7 @@
       "optional": true
     }
   },
-  "version": "5.41.1",
+  "version": "5.42.0",
   "dependencies": {
     "@aws-amplify/adapter-nextjs": "^1.7.3",
     "@aws-crypto/sha256-js": "5.2.0",

package/routes.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "5.41.1",
+  "version": "5.42.0",
   "routes": [
     {
       "file": "app/%5F_preview/[[...path]]/route.ts",