@supersuit/artifacts 0.20.0 → 0.21.0

package/CHANGELOG.md

@@ -3,6 +3,24 @@
 `@supersuit/artifacts`. One entry per version, newest first. Each entry says what changed, how a
 host can tell whether it is affected (DETECTOR), what a host does about it (REMEDY), and the tests.
 
+## 0.21.0 (2026-10-08)
+
+**A page's past versions are for its admins.** Every reader who could open a page could also open
+its History and read every earlier version at `/<id>/v/<n>`, so a passage edited out of a page
+(a name taken out, a figure corrected) stayed readable one click away.
+
+- New config `admins` (sign-in emails) and `history: 'admins' | 'everyone'`. The default,
+  `'admins'`, shows the History control and serves `/<id>/v/<n>` only to a signed-in reader whose
+  email is `ownerEmail` or in `admins`, compared without case. To everyone else the control is
+  absent and a past version is not found. "Version N · Updated <minute>" still shows to everyone.
+- DETECTOR: after the bump, a reader who is not an admin no longer sees "History" under a page's
+  summary. A host that configures neither `ownerEmail` nor `admins` hides history from everyone.
+- REMEDY: pass `admins` (and `ownerEmail`) for the people who should keep seeing history, or
+  `history: 'everyone'` to keep the 0.20.0 behaviour.
+- Tests: signed out, a signed-in non-admin, the owner in another case and a listed admin, a past
+  version 404ing for non-admins, nobody configured, and `'everyone'` restoring the old page. The
+  earlier version and golden tests pin `history: 'everyone'`, so they still prove 0.20.0's page.
+
 ## 0.20.0 (2026-10-07)
 
 **A host can hear when a confidential page is read.** The reader record answered `GET /reads`

package/README.md

@@ -123,6 +123,17 @@ phone, a side panel on a desk), so opening it moves no text. Each past version i
 the same password or confidential door as the page itself. A version that does not exist is a
 404; on a shut page the door comes first, so it never says which versions exist.
 
+**Past versions are for admins by default (0.21.0).** An earlier draft can hold what the current
+one was edited to remove, so only the page's admins see the History control or open
+`/<id>/v/<n>`: the reader signed in as `ownerEmail` or any address in `admins` (case does not
+matter). Everyone else still sees "Version N · Updated <minute>", and a past version is a 404 to
+them. With neither configured, nobody does. `history: 'everyone'` in the config restores the old
+behaviour, where every reader who can open the page reads its history.
+
+```ts
+createArtifactRoutes({ ..., ownerEmail: 'owner@example.com', admins: ['editor@example.com'] })
+```
+
 **Do not write a "Version history" section in the markdown.** Say what changed when you publish:
 
 - `POST /api/artifacts?id=<id>&note=<one line>`, or a `change:` line in the front matter. The query

package/lib/routes/artifacts.d.ts

@@ -64,6 +64,15 @@ export type ArtifactRoutesConfig = {
      *  its writer's name, whatever `comments_visible:` says. Without it nobody is the owner, and
      *  the publisher reads comments through /responses. */
     ownerEmail?: string;
+    /** Sign-in emails, besides `ownerEmail`, of the people who administer this host's pages. They
+     *  see a page's version history; with `history: 'admins'` (the default) nobody else does. */
+    admins?: readonly string[];
+    /** Who sees a page's past versions: the History control under the summary and every
+     *  `/<id>/v/<n>`. `'admins'` (default): only `ownerEmail` and `admins`, signed in; to everyone
+     *  else the History control is absent and a past version is not found, because an earlier draft
+     *  can hold what the current one was edited to remove. `'everyone'`: every reader who can open
+     *  the page, which was the only behaviour before 0.21.0. */
+    history?: 'admins' | 'everyone';
     /** Turns a reader's voice memo into text on the server, so the service's key never reaches a
      *  browser: `deepgramTranscriber(key)` or `openaiTranscriber(key)` from `./artifacts`, or your
      *  own. Without it the transcribe route answers 404 and readers get the browser's live

package/lib/routes/artifacts.js

@@ -60,6 +60,9 @@ export function createArtifactRoutes(config) {
     const signInOrigin = config.signInOrigin;
     const owner = config.owner ?? brand.name;
     const ownerEmail = config.ownerEmail?.trim().toLowerCase();
+    const admins = new Set([ownerEmail, ...(config.admins ?? []).map((e) => e.trim().toLowerCase())].filter((e) => !!e));
+    /** Whether this reader may see a page's past versions (config `history`). */
+    const seesHistory = (reader) => config.history === 'everyone' || (!!reader && admins.has(reader.email.trim().toLowerCase()));
     const readerSecret = () => config.readerSecret?.();
     const signOutUrl = (id) => `/api/reader/leave?to=${encodeURIComponent(pagePath(id))}`;
     // Signing out alone cannot change the account: the authority still holds the Google session
@@ -195,7 +198,7 @@ export function createArtifactRoutes(config) {
         if (!a)
             notFound();
         const { pack, brand } = lookOf(a);
-        const render = (top, reader) => (n === null ? Body(a, { top, reader }) : VersionBody(a, n, { top }));
+        const render = (top, reader) => (n === null ? Body(a, { top, reader }) : VersionBody(a, n, { top, reader }));
         if (a.access)
             return GatedPage(a, id, render, n);
         // A password shuts the body, never the title: the header stays so the reader knows which
@@ -273,8 +276,8 @@ export function createArtifactRoutes(config) {
         return store.history(id).catch(() => null);
     }
     /** "Version N · Updated <minute> · History": the line under the summary. */
-    function VersionLine({ a, n, at, history }) {
-        return (_jsxs("p", { "data-nospeak": true, className: "mt-4 text-xs opacity-60", children: [`Version ${n} · Updated `, _jsx(UpdatedTime, { iso: at }), history && history.length > 1 ? (_jsxs(_Fragment, { children: [' · ', _jsx(VersionHistory, { items: history, base: pagePath(a.id), viewing: n })] })) : null] }));
+    function VersionLine({ a, n, at, history, reader }) {
+        return (_jsxs("p", { "data-nospeak": true, className: "mt-4 text-xs opacity-60", children: [`Version ${n} · Updated `, _jsx(UpdatedTime, { iso: at }), history && history.length > 1 && seesHistory(reader) ? (_jsxs(_Fragment, { children: [' · ', _jsx(VersionHistory, { items: history, base: pagePath(a.id), viewing: n })] })) : null] }));
     }
     /** The title block and the body, in the pack's Article when it has one. Without one this is
      *  exactly the markup every page had before packs could frame it. */
@@ -284,8 +287,11 @@ export function createArtifactRoutes(config) {
         return (_jsxs(_Fragment, { children: [cover, _jsxs("article", { className: "mx-auto max-w-2xl px-6 pb-24", children: [toc, children] })] }));
     }
     /** A past version: its own body and title, read-only (no narration, no answers), under a banner. */
-    async function VersionBody(a, n, { top }) {
+    async function VersionBody(a, n, { top, reader }) {
         const { pack, brand } = lookOf(a);
+        // Past versions are for admins unless the host says otherwise: to anyone else none exists.
+        if (!seesHistory(reader))
+            notFound();
         const v = store.version ? await store.version(a.id, n) : null;
         if (!v)
             notFound();
@@ -296,7 +302,7 @@ export function createArtifactRoutes(config) {
         const title = v.title ?? a.title;
         const summary = v.summary ?? a.summary;
         const toc = showToc(v.markdown, a.toc) ? tocOf(v.markdown) : [];
-        return (_jsxs(_Fragment, { children: [toc.length ? _jsx(TocRail, { items: toc }) : null, _jsx("div", { "data-nospeak": true, className: `mx-auto max-w-2xl px-6 ${top ? 'pt-20 sm:pt-24' : 'pt-8'}`, children: _jsxs("p", { "data-version-banner": true, role: "status", className: "rounded-lg border px-4 py-3 text-sm", style: { borderColor: brand.accent }, children: [`You are reading version ${n} of ${of}. `, _jsx("a", { href: pagePath(a.id), className: "underline underline-offset-4", style: { color: brand.accent }, children: "Read the current version" })] }) }), _jsx(Framed, { pack: pack, toc: toc.length ? _jsx(TocInline, { items: toc }) : null, cover: pack.Cover ? (_jsx(pack.Cover, { title: title, subtitle: v.subtitle, summary: summary, to: v.to, markdown: v.markdown, kicker: _jsx(Kicker, { to: v.to, brand: brand }), meta: _jsx(VersionLine, { a: a, n: n, at: v.at, history: history }), version: n, updatedAt: v.at, createdAt: a.createdAt })) : (_jsxs("div", { className: `mx-auto max-w-2xl px-6 ${top ? 'pt-10 sm:pt-12' : 'pt-10'} pb-8 text-center`, children: [_jsx(Kicker, { to: v.to, brand: brand }), _jsx("h1", { className: "text-4xl sm:text-5xl", style: { fontFamily: brand.type.display, color: brand.ink }, children: title }), v.subtitle ? (_jsx("p", { className: "mx-auto mt-4 max-w-xl text-xl sm:text-2xl", style: { fontFamily: brand.type.display, color: brand.ink }, children: v.subtitle })) : null, _jsx("p", { className: "mx-auto mt-6 max-w-xl text-lg italic opacity-80", children: summary }), _jsx(VersionLine, { a: a, n: n, at: v.at, history: history })] })), children: _jsx(ArtifactMarkdown, { markdown: v.markdown, definitions: a.definitions, Section: pack.Section, figure: pack.figure }) })] }));
+        return (_jsxs(_Fragment, { children: [toc.length ? _jsx(TocRail, { items: toc }) : null, _jsx("div", { "data-nospeak": true, className: `mx-auto max-w-2xl px-6 ${top ? 'pt-20 sm:pt-24' : 'pt-8'}`, children: _jsxs("p", { "data-version-banner": true, role: "status", className: "rounded-lg border px-4 py-3 text-sm", style: { borderColor: brand.accent }, children: [`You are reading version ${n} of ${of}. `, _jsx("a", { href: pagePath(a.id), className: "underline underline-offset-4", style: { color: brand.accent }, children: "Read the current version" })] }) }), _jsx(Framed, { pack: pack, toc: toc.length ? _jsx(TocInline, { items: toc }) : null, cover: pack.Cover ? (_jsx(pack.Cover, { title: title, subtitle: v.subtitle, summary: summary, to: v.to, markdown: v.markdown, kicker: _jsx(Kicker, { to: v.to, brand: brand }), meta: _jsx(VersionLine, { a: a, n: n, at: v.at, history: history, reader: reader }), version: n, updatedAt: v.at, createdAt: a.createdAt })) : (_jsxs("div", { className: `mx-auto max-w-2xl px-6 ${top ? 'pt-10 sm:pt-12' : 'pt-10'} pb-8 text-center`, children: [_jsx(Kicker, { to: v.to, brand: brand }), _jsx("h1", { className: "text-4xl sm:text-5xl", style: { fontFamily: brand.type.display, color: brand.ink }, children: title }), v.subtitle ? (_jsx("p", { className: "mx-auto mt-4 max-w-xl text-xl sm:text-2xl", style: { fontFamily: brand.type.display, color: brand.ink }, children: v.subtitle })) : null, _jsx("p", { className: "mx-auto mt-6 max-w-xl text-lg italic opacity-80", children: summary }), _jsx(VersionLine, { a: a, n: n, at: v.at, history: history, reader: reader })] })), children: _jsx(ArtifactMarkdown, { markdown: v.markdown, definitions: a.definitions, Section: pack.Section, figure: pack.figure }) })] }));
     }
     /** The page itself, shared by open and gated pages. */
     async function Body(a, { top, reader }) {
@@ -317,7 +323,7 @@ export function createArtifactRoutes(config) {
         const mode = config.state && a.state && a.comments && a.comments !== 'off' && a.state.slots[COMMENTS_SLOT] ? a.comments : 'off';
         return (_jsxs(_Fragment, { children: [toc.length ? _jsx(TocRail, { items: toc }) : null, _jsx("div", { id: "artifact-narration-root", children: await (async () => {
                         const n = a.version ?? (a.versions?.length ?? 0) + 1;
-                        const meta = (_jsxs(_Fragment, { children: [_jsx(VersionLine, { a: a, n: n, at: a.updatedAt, history: await historyOf(a.id) }), top && reader ? (_jsxs("p", { "data-nospeak": true, "data-reader-line": true, className: "mt-2 text-xs opacity-60", children: [`Signed in as ${reader.email} · `, _jsx("a", { href: switchUrl(a.id), className: "underline", children: "Use a different account" }), ' · ', _jsx("a", { href: signOutUrl(a.id), className: "underline", children: "Sign out" })] })) : null] }));
+                        const meta = (_jsxs(_Fragment, { children: [_jsx(VersionLine, { a: a, n: n, at: a.updatedAt, history: await historyOf(a.id), reader: reader }), top && reader ? (_jsxs("p", { "data-nospeak": true, "data-reader-line": true, className: "mt-2 text-xs opacity-60", children: [`Signed in as ${reader.email} · `, _jsx("a", { href: switchUrl(a.id), className: "underline", children: "Use a different account" }), ' · ', _jsx("a", { href: signOutUrl(a.id), className: "underline", children: "Sign out" })] })) : null] }));
                         const header = pack.Cover ? (_jsx(pack.Cover, { title: a.title, subtitle: a.subtitle, summary: a.summary, to: a.to, markdown: a.markdown, kicker: _jsx(Kicker, { to: a.to, brand: brand }), meta: meta, version: n, updatedAt: a.updatedAt, createdAt: a.createdAt })) : (_jsxs("div", { className: `mx-auto max-w-2xl px-6 ${top ? 'pt-24 sm:pt-28' : 'pt-12'} pb-8 text-center`, children: [_jsx(Kicker, { to: a.to, brand: brand }), _jsx("h1", { className: "text-4xl sm:text-5xl", style: { fontFamily: brand.type.display, color: brand.ink }, children: a.title }), a.subtitle ? (_jsx("p", { className: "mx-auto mt-4 max-w-xl text-xl sm:text-2xl", style: { fontFamily: brand.type.display, color: brand.ink }, children: a.subtitle })) : null, _jsx("p", { className: "mx-auto mt-6 max-w-xl text-lg italic opacity-80", children: a.summary }), meta] }));
                         return (_jsx(Framed, { pack: pack, toc: toc.length ? _jsx(TocInline, { items: toc }) : null, cover: _jsxs(_Fragment, { children: [header, a.cover ? (_jsx("div", { className: "mx-auto max-w-2xl px-6 pb-8", children: _jsx("img", { src: a.cover, alt: "", className: "w-full rounded-xl border border-[color:var(--a-line)]" }) })) : null] }), children: _jsx(ArtifactMarkdown, { markdown: a.markdown, definitions: a.definitions, notes: config.state && a.state ? { artifactId: a.id, accent: brand.accent } : undefined, Section: pack.Section, figure: pack.figure }) }));
                     })() }), _jsx(CommentLayer, { artifactId: a.id, rootId: "artifact-narration-root", ownerName: owner, comments: mode, canShare: mode !== 'off' && (reader !== null || effectiveWriters(a.state, a.access, COMMENTS_SLOT) === 'anyone'), signedIn: reader !== null, isOwner: !!reader && !!ownerEmail && reader.email === ownerEmail, version: a.version ?? (a.versions?.length ?? 0) + 1, accent: brand.accent, ground: brand.ground, signIn: signInOrigin ? signInUrl(signInOrigin, pageUrl(a.id)) : null }), a.narration && words.length > 0 ? (_jsx(ArtifactReader, { src: a.narration, words: words, rootId: "artifact-narration-root", label: brand.narratorLabel(a.voice), accent: brand.accent, ground: brand.ground })) : null /* No recorded narration: no player. Never the browser's own voice (the operator,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supersuit/artifacts",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "Publish markdown as branded, read-aloud pages from a Next.js app: the artifacts store, the route factory, the read-along reader, brand packs, password and confidential pages, and share cards.",
   "license": "MIT",
   "type": "module",