@supersuit/artifacts 0.53.0 → 0.55.0

package/CHANGELOG.md

@@ -3,6 +3,40 @@
 `@supersuit/artifacts`. One entry per version, newest first. Each entry says what changed, how a
 host can tell whether it is affected (DETECTOR), what a host does about it (REMEDY), and the tests.
 
+## 0.55.0 (2026-10-26)
+
+**`GET /api/artifacts/<id>` now returns the page as written, not only its narration.** It answered
+`{ id, text }`, and `text` is the narration, which drops every list item, so an agent reading a
+prep sheet through the key got its headings ("Questions for him", "About him, first:") with the
+questions missing.
+
+- The response adds `title`, `subtitle` (when set), `summary`, `to` (when set), `markdown`,
+  `version` and `updatedAt`. `text` is unchanged, so existing callers keep working.
+- Never the password, the access list or reader data.
+- DETECTOR: `GET /api/artifacts/<id>` with the publish key answers no `markdown` field.
+- REMEDY: update the host.
+- Tests: `src/routes/artifacts.test.tsx` "GET returns the narration text and the markdown".
+
+## 0.54.0 (2026-10-25)
+
+**A page no longer records under a reader left on the browser by another page.** posthog-js keeps
+the last identity it was given on an origin, and `PageAnalytics` never cleared it, so a browser that
+opened one per-reader link sent every password or public page it opened afterward under that
+reader's recipient id and label, and a per-reader page's init-time `$pageview` went out under the
+previous reader before `identify()` switched it.
+
+- `PageAnalytics` calls `posthog.reset()` when the browser is identified as anyone other than the
+  page's own reader, before `register` (reset clears registered properties). An anonymous browser
+  is not reset, so its first visit still joins the reader it becomes; the device id survives.
+- `capture_pageview` is now `false`; the page captures `$pageview` itself once the reader is settled.
+- DETECTOR: in PostHog, a `password` or `public` `page_kind` event whose `distinct_id` starts with
+  `recipient:`, or whose person has a `name`, came from a host on an older version.
+- REMEDY: update the host. Events already recorded keep the leftover identity; a dashboard should
+  name a reader only by an id of the page's own kind (a recipient id on `per-reader`, an email on
+  `gated`) and count everything else by device.
+- Tests: `page-analytics-identity.test.tsx` mounts the component against a stand-in posthog-js
+  holding a leftover identity and checks the call order on every page kind.
+
 ## 0.53.0 (2026-10-25)
 
 **Every per-reader link can record who minted it, on whose authority, when, and the funnel step it

package/README.md

@@ -248,6 +248,12 @@ createArtifactRoutes({ ..., ownerEmail: 'owner@example.com', admins: ['editor@ex
 - `GET /api/artifacts/<id>/versions` lists the history; `POST` it `{ "version": 2, "note": "..." }`
   (or `"note": null`) to write a note onto a version after the fact.
 
+**Reading a page as its owner.** `GET /api/artifacts/<id>` with the publish key answers
+`{ id, title, subtitle?, summary, to?, markdown, version, updatedAt, text }`. `markdown` is the
+body as written, lists included, and is what an agent should read; `text` is the narration, which
+drops list items. Neither ever carries the page's password or anything about its readers. A page
+behind a sign-in door, a password or per-reader links is readable this way by whoever holds the key.
+
 ## Front matter
 
 ```markdown

package/lib/reader/page-analytics.js

@@ -11,6 +11,12 @@
 // than a gated one: the replay still shows where the reader went, how far and how fast, without the
 // words. Autocapture is told not to collect element text for the same reason. There is no opt-out:
 // the options come from posthogInitOptions, which a test holds to RECORDING_MASK for every kind.
+//
+// posthog-js keeps the last identity it was given on this origin, and a page that names nobody does
+// not clear it. So a browser that opened one reader's per-reader link reported every page it opened
+// after under that reader's id and label, and a per-reader page's init-time view went out under the
+// previous reader before identify switched it. The page now drops an identity it was not given
+// before it records anything, and captures its own page view once it has settled who the reader is.
 import { useEffect } from 'react';
 import { currentSection } from '../artifacts/toc-spy.js';
 /** Sections read for less than this are passed over, not read. */
@@ -65,7 +71,8 @@ export function posthogInitOptions(plan) {
     return {
         api_host: plan.host,
         person_profiles: 'identified_only',
-        capture_pageview: true,
+        // Captured by the page once it has settled who the reader is (see PageAnalytics).
+        capture_pageview: false,
         capture_pageleave: true,
         autocapture: true,
         // Autocapture records a clicked element's text; on these pages that text is the page.
@@ -85,11 +92,17 @@ export function PageAnalytics({ plan, rootId = 'artifact-narration-root' }) {
             if (cancelled)
                 return;
             posthog.init(key, posthogInitOptions({ host }));
+            const who = identity ? JSON.parse(identity) : null;
+            // A reader left on this browser by another page is dropped first: reset also clears the
+            // registered properties, so it comes before register. An anonymous browser is left alone, so
+            // its first visit still joins the reader it becomes.
+            const left = posthog.get_property('$user_state') === 'identified' ? posthog.get_distinct_id() : null;
+            if (left && left !== who?.distinctId)
+                posthog.reset();
             posthog.register({ artifact_id: pageId, page_kind: kind, ...(tenant ? { tenant } : {}) });
-            if (identity) {
-                const who = JSON.parse(identity);
+            if (who)
                 posthog.identify(who.distinctId, { ...(who.email ? { email: who.email } : {}), ...(who.name ? { name: who.name } : {}) });
-            }
+            posthog.capture('$pageview');
             const capture = (e, p) => posthog.capture(e, p);
             const root = document.getElementById(rootId);
             const ids = root ? Array.from(root.querySelectorAll('h2[id], h3[id]'), (h) => h.id) : [];

package/lib/routes/artifacts.d.ts

@@ -251,8 +251,15 @@ export declare function createArtifactRoutes(config: ArtifactRoutesConfig): {
     GET: (request: NextRequest, { params }: Params) => Promise<NextResponse<{
         error: string;
     }> | NextResponse<{
+        markdown: string;
+        version: number;
+        updatedAt: string;
+        to?: string | undefined;
+        summary: string;
+        subtitle?: string | undefined;
         id: string;
         text: string;
+        title: string;
     }>>;
     DELETE: (request: NextRequest, { params }: Params) => Promise<NextResponse<{
         error: string;

package/lib/routes/artifacts.js

@@ -891,7 +891,15 @@ export function createArtifactRoutes(config) {
         const a = await kept.get(id);
         if (!a)
             return NextResponse.json({ error: `no artifact with id ${id}` }, { status: 404 });
-        return NextResponse.json({ id, text: narrationText({ title: a.title, subtitle: a.subtitle, summary: a.summary, markdown: a.markdown }) });
+        // `text` is the narration (lists and headings without their items read badly aloud, so it
+        // drops them); `markdown` is the page as written, which is what an agent reading the page
+        // needs. Never the password or any reader data.
+        return NextResponse.json({
+            id,
+            text: narrationText({ title: a.title, subtitle: a.subtitle, summary: a.summary, markdown: a.markdown }),
+            title: a.title, ...(a.subtitle ? { subtitle: a.subtitle } : {}), summary: a.summary, ...(a.to ? { to: a.to } : {}),
+            markdown: a.markdown, version: a.version ?? 1, updatedAt: a.updatedAt,
+        });
     }
     /** PUT /api/artifacts/<id>/assets/<name>: raw bytes in, public URL out. 16 MiB cap. */
     async function PUT_ASSET(request, { params }) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supersuit/artifacts",
-  "version": "0.53.0",
+  "version": "0.55.0",
   "description": "Publish markdown as branded, read-aloud pages from a Next.js app: the artifacts store, the route factory, the read-along reader, brand packs, password and confidential pages, and share cards.",
   "license": "MIT",
   "type": "module",