awcms-news-portal

🇬🇧 English (source) · 🇮🇩 Bahasa Indonesia

AWCMS — News Portal (full-online R2-only media)

<!-- sql-refs: awcms-mini — the `sql/NNN` numbers in this skill body use awcms-mini numbering; the module HAS BEEN ported to awcms as `sql/041`–`sql/045` (see the module README + the real `sql/` for the actual numbers) -->

STATUS — THIS MODULE NO LONGER EXISTS (ADR-0044, PR #300). news_portal was MERGED into blog_content. What changed, and what must be read before a single line of code is written from this skill:

• src/modules/news-portal/ deleted; src/modules/index.ts does not load it (registry = 21 modules). There is no basePath /api/v1/news-portal.
• Its features are not gone: the homepage-section composer and ad placement with a verified media_object_id are now owned by blog_content, with widened targeting (#301), a legacy ad ingest job (#302), the free-URL ad write path closed off (#303), and a gated content-block vocabulary (#304).
• The awcms_news_portal_* table names are KEPT (ADR-0036 precedent: hard composite FK from ad placements). A table name is therefore NOT a hint about which module owns it here.
• Its OpenAPI contract moved too (PR #308). openapi/modules/news-portal.openapi.yaml was deleted; the four /api/v1/news-portal/* paths and their schemas now live in openapi/modules/blog-content.openapi.yaml. The path names and tag names (News Portal Homepage Sections/News Portal Ad Placements) were deliberately NOT changed — ADR-0044 §3/§6 moves ownership, not the public surface; the only thing corrected was the module attribution in the tag descriptions. The fragment ownership gate now rejects a fragment with no owning module, so this oversight cannot silently recur.
• To change those features: the awcms-blog-content skill. For media: awcms-media-library. This skill no longer has any code to change.
• The body below is kept as the pre-merge specification because §640 is still referenced by src/modules/blog-content/README.md for the content-quality checklist rules. Every file path inside it is history.

<details> <summary>Old port status (pre-ADR-0044, kept for context)</summary>

news_portal used to be real here: src/modules/news-portal, migrations sql/041_awcms_news_media_object_registry_schema.sql–sql/045_awcms_news_portal_ad_placements_schema.sql, 4 awcms_news_* tables (all FORCE ROW LEVEL SECURITY). This skill is now a guide to changing/adding real code. Read src/modules/news-portal/README.md

• sql/ for accurate numbers/tables.

⚠ ADR-0036 INVERSION (MUST READ — it changes media ownership): media is NO LONGER owned by news_portal. Migrations 052/053/054 extract the ENTIRE media registry (awcms_news_media_objects), presigned upload/finalize/cancel, MIME sniffer, R2 config/client/verification, categorization, and the news-media:reconcile job OUT of news-portal/ into the new module src/modules/media-library/ (files news-media-* → media-*, internal symbols fetchNewsMediaObjectById/NewsMediaObjectView KEPT). The port _shared/ports/news-media-port.ts was DELETED → media-library-port.ts (MediaLibraryPort, isManagedMediaEnforcementActiveForTenant). Permission news_portal.media.* → media_library.media.* (destructive repoint sql/052). For anything about media (upload, registry, reconcile, R2 config, enforcement) use the awcms-media-library skill, NOT this one. news_portal here is only homepage sections + ad placements; it CONSUMES media_library. Most of the skill body below still specifies the PRE-inversion (mini) shape — treat its media sections as history, not as where the code lives now.

AWCMS PORT DELTA (MUST READ — most of the skill body below specifies the mini shape; this is what DIFFERS here):

• DROPPED: the host-resolved /news/** family of public routes (index, detail, category, tag, search, feed, sitemap) along with their render helpers (homepage-section-composer, homepage-section-rendering, news-share-config). They need lib/tenant/public-host-tenant-resolver.ts + env PUBLIC_TENANT_RESOLUTION_MODE from the tenant_domain module. UPDATE 2026-07-25: tenant_domain HAS BEEN ported (#219, sql/046–048), so the foundation blocker is gone — but the /news/** routes themselves are still not adopted. Do not build/reference /news/** as existing; adopting it now is work of its own, not an automatic consequence of tenant_domain. (The public route that DOES exist = /blog/{tenantCode} owned by blog_content, path-based ADR-0009.)
• DROPPED: activation of the news_portal_full_online_r2 preset (apply-news-portal-preset.ts) — it needs the module_management preset subsystem, which has not been ported. The awcms_news_portal_tenant_state table + reader isFullOnlineR2ModeAppliedForTenant still exist (forward-compatible) but without a writer (inert). Post-ADR-0036, managed-media enforcement is driven by media_library via isManagedMediaEnforcementActiveForTenant (readiness + per-tenant flag sql/053), switched on via POST /api/v1/media/ enforcement — NO LONGER the old isFullOnlineR2ModeActiveForTenant port.
• What was ACTUALLY ported & active IN news_portal: the homepage section composer + ad placements (sql/044/045). The media registry + presigned upload/finalize + MIME sniff/SHA-256 + the news-media:reconcile job have MOVED to media_library (ADR-0036) — see the awcms-media-library skill. The news_media capability is retired; news_portal now CONSUMES media_library.
• NEWS_MEDIA_R2_* env pre-validation (validate-env + 3 security-readiness checks) was deferred during the port — the module is fail-safe without it at runtime.
• The sql/NNN numbers in the skill body = awcms-mini numbering; the real ones in awcms are sql/041–sql/045.

The news_portal epic (#631-#642, #649) adds an editorial + media layer on top of blog_content (base module, already active) and online public routing (tenant_domain, ADR-0009/ADR-0010), specifically for full-online deployments that turn on R2-only mode for news images. The follow-on epic social-publishing (#643-#647) depends on this epic's architectural foundation (particularly the #633 media registry for images shared to social platforms) but is not part of the status table below — see the separate skill/documentation once that epic starts.

</details>

When to use this skill vs the generic skills

This skill complements (does not replace) awcms-new-endpoint, awcms-new-migration, awcms-integration (outbox/circuit-breaker patterns for R2, ADR-0006), awcms-idempotency (the upload confirm mutation), awcms-sensitive-data (photos are potentially PII), awcms-abac-guard, and awcms-blog-content (the post/page/gallery/ads content model that consumes the media registry). This skill provides the epic-specific cross-cutting context — above all the "R2-only, bucket separate from sync-storage" decision that must be preserved in every issue.

Read first: docs/awcms/news-portal/full-online-r2-architecture.md before working on any issue in this epic — that document (not this skill) is the architectural source of truth; this skill summarises status + pointers, it does not duplicate its contents.

Status per issue (do not rebuild what already exists)

Issue	Scope	Status
#631	Full-online R2-only architecture documentation + SOP + security + IR + backup + user guide	Done — see §Existing documents below
#632	news_portal_full_online_r2 preset (module descriptor/config gate)	Done — see §632 below
#633	Tenant-scoped R2-only media object registry (schema + migration)	Done — see §633 below
#634	Direct-to-R2 presigned upload flow (upload/confirm endpoints)	Done — see §634 below
#635	Config validation + readiness checks (config:validate/security:readiness/production:preflight) for R2 image delivery	Done — see §635 below
#636	blog_content must reference an R2 media object for news images when the mode is active	Done — see §636 below
#637	Editorial homepage section composer /news with R2-only rendering	Done — see §637 below
#638	News portal ad placement preset with R2-only image validation	Done — see §638 below
#639	video_news content block with a mandatory R2 thumbnail	Done — see §639 below
#640	Publishing content quality checklist with an R2 image requirement	Done — see §640 below
#641	Automatic internal tag linking for post/news content	Done — see §641 below
#642	Public social sha

---

Content truncated.