@supersuit/artifacts 0.53.0 → 0.54.0

package/CHANGELOG.md

@@ -3,6 +3,26 @@
 `@supersuit/artifacts`. One entry per version, newest first. Each entry says what changed, how a
 host can tell whether it is affected (DETECTOR), what a host does about it (REMEDY), and the tests.
 
+## 0.54.0 (2026-10-25)
+
+**A page no longer records under a reader left on the browser by another page.** posthog-js keeps
+the last identity it was given on an origin, and `PageAnalytics` never cleared it, so a browser that
+opened one per-reader link sent every password or public page it opened afterward under that
+reader's recipient id and label, and a per-reader page's init-time `$pageview` went out under the
+previous reader before `identify()` switched it.
+
+- `PageAnalytics` calls `posthog.reset()` when the browser is identified as anyone other than the
+  page's own reader, before `register` (reset clears registered properties). An anonymous browser
+  is not reset, so its first visit still joins the reader it becomes; the device id survives.
+- `capture_pageview` is now `false`; the page captures `$pageview` itself once the reader is settled.
+- DETECTOR: in PostHog, a `password` or `public` `page_kind` event whose `distinct_id` starts with
+  `recipient:`, or whose person has a `name`, came from a host on an older version.
+- REMEDY: update the host. Events already recorded keep the leftover identity; a dashboard should
+  name a reader only by an id of the page's own kind (a recipient id on `per-reader`, an email on
+  `gated`) and count everything else by device.
+- Tests: `page-analytics-identity.test.tsx` mounts the component against a stand-in posthog-js
+  holding a leftover identity and checks the call order on every page kind.
+
 ## 0.53.0 (2026-10-25)
 
 **Every per-reader link can record who minted it, on whose authority, when, and the funnel step it

package/lib/reader/page-analytics.js

@@ -11,6 +11,12 @@
 // than a gated one: the replay still shows where the reader went, how far and how fast, without the
 // words. Autocapture is told not to collect element text for the same reason. There is no opt-out:
 // the options come from posthogInitOptions, which a test holds to RECORDING_MASK for every kind.
+//
+// posthog-js keeps the last identity it was given on this origin, and a page that names nobody does
+// not clear it. So a browser that opened one reader's per-reader link reported every page it opened
+// after under that reader's id and label, and a per-reader page's init-time view went out under the
+// previous reader before identify switched it. The page now drops an identity it was not given
+// before it records anything, and captures its own page view once it has settled who the reader is.
 import { useEffect } from 'react';
 import { currentSection } from '../artifacts/toc-spy.js';
 /** Sections read for less than this are passed over, not read. */
@@ -65,7 +71,8 @@ export function posthogInitOptions(plan) {
     return {
         api_host: plan.host,
         person_profiles: 'identified_only',
-        capture_pageview: true,
+        // Captured by the page once it has settled who the reader is (see PageAnalytics).
+        capture_pageview: false,
         capture_pageleave: true,
         autocapture: true,
         // Autocapture records a clicked element's text; on these pages that text is the page.
@@ -85,11 +92,17 @@ export function PageAnalytics({ plan, rootId = 'artifact-narration-root' }) {
             if (cancelled)
                 return;
             posthog.init(key, posthogInitOptions({ host }));
+            const who = identity ? JSON.parse(identity) : null;
+            // A reader left on this browser by another page is dropped first: reset also clears the
+            // registered properties, so it comes before register. An anonymous browser is left alone, so
+            // its first visit still joins the reader it becomes.
+            const left = posthog.get_property('$user_state') === 'identified' ? posthog.get_distinct_id() : null;
+            if (left && left !== who?.distinctId)
+                posthog.reset();
             posthog.register({ artifact_id: pageId, page_kind: kind, ...(tenant ? { tenant } : {}) });
-            if (identity) {
-                const who = JSON.parse(identity);
+            if (who)
                 posthog.identify(who.distinctId, { ...(who.email ? { email: who.email } : {}), ...(who.name ? { name: who.name } : {}) });
-            }
+            posthog.capture('$pageview');
             const capture = (e, p) => posthog.capture(e, p);
             const root = document.getElementById(rootId);
             const ids = root ? Array.from(root.querySelectorAll('h2[id], h3[id]'), (h) => h.id) : [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supersuit/artifacts",
-  "version": "0.53.0",
+  "version": "0.54.0",
   "description": "Publish markdown as branded, read-aloud pages from a Next.js app: the artifacts store, the route factory, the read-along reader, brand packs, password and confidential pages, and share cards.",
   "license": "MIT",
   "type": "module",