@supersuit/artifacts 0.58.0 → 0.58.1

package/CHANGELOG.md

@@ -3,6 +3,19 @@
 `@supersuit/artifacts`. One entry per version, newest first. Each entry says what changed, how a
 host can tell whether it is affected (DETECTOR), what a host does about it (REMEDY), and the tests.
 
+## 0.58.1 (2026-10-27)
+
+**The no-link door on a per-reader page offers sign-in.** A signed-in owner or hub admin already got
+through a `links: per-reader` page without a link, but a signed-out one met "This page opens from the
+link it was sent with." and nothing else, so a co-founder opening a company page's bare address had
+no way in (2026-10-27).
+
+- DETECTOR: open a per-reader page's bare address signed out; the door has no sign-in link.
+- REMEDY: none for the host beyond taking this version. The door now carries "Sign in" (only with
+  `signInOrigin` set, only to a visitor not signed in); a signed-in reader who is not owner or admin
+  still sees the plain door, and nothing of the page is shown before the gate.
+- Tests: `src/routes/per-reader.test.tsx` (sign-in offered when signed out, not offered when signed in).
+
 ## 0.58.0 (2026-10-27)
 
 **A link's provenance can name its reader by an opaque person id.** Superlinks step 6: a funnel

package/lib/routes/artifacts.js

@@ -353,7 +353,9 @@ export function createArtifactRoutes(config) {
             const secret = usableSecret(config.recipientSecret?.());
             const g = await perReaderGate({ id, param, cookie: await readCookie(ridCookieName(id)).catch(() => undefined), secret, recipients: config.recipients });
             if (g.state === 'shut') {
-                return (_jsx(BrandGround, { pack: pack, mode: a.theme, children: _jsx("p", { "data-per-reader-shut": true, className: "mx-auto max-w-xl px-6 pt-32 text-center text-lg opacity-80", children: g.why === 'no-link' ? NO_LINK : UNAVAILABLE }) }));
+                return (_jsxs(BrandGround, { pack: pack, mode: a.theme, children: [_jsx("p", { "data-per-reader-shut": true, className: "mx-auto max-w-xl px-6 pt-32 text-center text-lg opacity-80", children: g.why === 'no-link' ? NO_LINK : UNAVAILABLE }), g.why === 'no-link' && !me && signInOrigin
+                            ? _jsxs("p", { "data-per-reader-sign-in": true, className: "mx-auto max-w-xl px-6 pt-4 text-center text-base opacity-70", children: ["Published this page or help run this site? ", _jsx("a", { className: "underline", href: signInUrl(signInOrigin, pageUrl(id)), children: "Sign in" })] })
+                            : null] }));
             }
             // A fetcher is not the reader: it sets no cookie, carries no render token and sees no note.
             const remember = g.fromLink && !bot

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supersuit/artifacts",
-  "version": "0.58.0",
+  "version": "0.58.1",
   "description": "Publish markdown as branded, read-aloud pages from a Next.js app: the artifacts store, the route factory, the read-along reader, brand packs, password and confidential pages, and share cards.",
   "license": "MIT",
   "type": "module",