@supersuit/artifacts 0.8.0 → 0.9.0

package/CHANGELOG.md

@@ -3,6 +3,19 @@
 `@supersuit/artifacts`. One entry per version, newest first. Each entry says what changed, how a
 host can tell whether it is affected (DETECTOR), what a host does about it (REMEDY), and the tests.
 
+## 0.9.0 (2026-09-27)
+
+**A host can word its own sign-in door.** `signInNote` on `createArtifactRoutes` replaces the
+door's line on a gated page. The default still names the Freedom account, so every host that
+passes nothing reads exactly as before. A host that signs readers in itself, rather than through
+a Freedom account, needs the door to say so, or readers are told to use an account they do not
+have.
+
+- DETECTOR: a host whose `signInOrigin` is not a Freedom account service, and whose door still
+  says "your Freedom account".
+- REMEDY: bump and pass `signInNote`.
+- Tests: `gated.test.tsx` pins the default line and a host's own line replacing it.
+
 ## 0.8.0 (2026-09-27)
 
 **Pages play audio clips.** `![caption](clip.mp3)` renders a captioned player with native

package/lib/artifacts/confidential.d.ts

@@ -25,9 +25,13 @@ export declare function Watermark({ email }: {
 }): import("react").JSX.Element;
 /** Printing shows this and nothing else, whichever way the print dialog was reached. */
 export declare const NO_PRINT_CSS = "@media print { body * { visibility: hidden !important; } body::after { content: \"This page is confidential and cannot be printed.\"; visibility: visible; position: fixed; top: 40%; left: 0; right: 0; text-align: center; font: 16px sans-serif; color: #000; } }";
-export declare function SignInDoor({ brand, href }: {
+/** The door's default line, for a host whose readers sign in with a Freedom account. A host
+ *  that signs readers in some other way passes `signInNote` to say so in its own words. */
+export declare const DEFAULT_SIGN_IN_NOTE = "This page is confidential. Sign in with the Google account your Freedom account uses, or the address it was shared with.";
+export declare function SignInDoor({ brand, href, note }: {
     brand: BrandPack;
     href?: string;
+    note?: string;
 }): import("react").JSX.Element;
 export declare function NotAllowedDoor({ brand, reader, signOutUrl }: {
     brand: BrandPack;

package/lib/artifacts/confidential.js

@@ -19,12 +19,15 @@ export function Watermark({ email }) {
 }
 /** Printing shows this and nothing else, whichever way the print dialog was reached. */
 export const NO_PRINT_CSS = `@media print { body * { visibility: hidden !important; } body::after { content: "This page is confidential and cannot be printed."; visibility: visible; position: fixed; top: 40%; left: 0; right: 0; text-align: center; font: 16px sans-serif; color: #000; } }`;
-export function SignInDoor({ brand, href }) {
+/** The door's default line, for a host whose readers sign in with a Freedom account. A host
+ *  that signs readers in some other way passes `signInNote` to say so in its own words. */
+export const DEFAULT_SIGN_IN_NOTE = 'This page is confidential. Sign in with the Google account your Freedom account uses, or the address it was shared with.';
+export function SignInDoor({ brand, href, note = DEFAULT_SIGN_IN_NOTE }) {
     // No href means the host configured no sign-in authority: the door stays, with no way through.
     if (!href) {
         return (_jsx("div", { "data-nospeak": true, className: "mx-auto max-w-sm px-6 pb-24 text-center", children: _jsx("p", { className: "text-sm opacity-70", children: "This page is confidential, and this site cannot sign readers in yet." }) }));
     }
-    return (_jsxs("div", { "data-nospeak": true, className: "mx-auto max-w-sm px-6 pb-24 text-center", children: [_jsx("p", { className: "text-sm opacity-70", children: "This page is confidential. Sign in with the Google account your Freedom account uses, or the address it was shared with." }), _jsx("a", { href: href, className: "mt-5 inline-block rounded-lg px-5 py-2 text-sm font-medium", style: { background: brand.accent, color: brand.ground }, children: "Sign in to read" })] }));
+    return (_jsxs("div", { "data-nospeak": true, className: "mx-auto max-w-sm px-6 pb-24 text-center", children: [_jsx("p", { className: "text-sm opacity-70", children: note }), _jsx("a", { href: href, className: "mt-5 inline-block rounded-lg px-5 py-2 text-sm font-medium", style: { background: brand.accent, color: brand.ground }, children: "Sign in to read" })] }));
 }
 export function NotAllowedDoor({ brand, reader, signOutUrl }) {
     return (_jsxs("div", { "data-nospeak": true, className: "mx-auto max-w-sm px-6 pb-24 text-center text-sm", children: [_jsxs("p", { className: "opacity-80", children: ["You are signed in as ", reader.email, ", and this page has not been shared with that address. If it was sent to a different address of yours, sign out and use that one."] }), _jsx("p", { className: "mt-3 opacity-60", children: "This attempt was recorded." }), _jsx("a", { href: signOutUrl, className: "mt-5 inline-block underline", style: { color: brand.accent }, children: "Sign out" })] }));

package/lib/routes/artifacts.d.ts

@@ -32,6 +32,9 @@ export type ArtifactRoutesConfig = {
     /** The sign-in authority's origin; readers go to `<signInOrigin>/artifact/sign-in?to=<page>`.
      *  No default: without it a gated page shows its door with no way through (fails closed). */
     signInOrigin?: string;
+    /** The line on the sign-in door, for a host whose readers do not sign in with a Freedom
+     *  account. Default names the Freedom account. */
+    signInNote?: string;
     /** Who the banner says grants access, e.g. "Example Co". Default the brand name. */
     owner?: string;
     /** The address the state routes' rate limit counts by. Default reads the first hop of

package/lib/routes/artifacts.js

@@ -151,7 +151,7 @@ export function createArtifactRoutes(config) {
                 void config.readers.flag({ artifactId: id, reader: d.reader, kind: 'refused' }).catch(() => { });
             return (_jsxs(BrandGround, { pack: pack, mode: a.theme, children: [header, d.why === 'not-allowed'
                         ? _jsx(NotAllowedDoor, { brand: brand, reader: d.reader, signOutUrl: signOutUrl(id) })
-                        : _jsx(SignInDoor, { brand: brand, href: signInOrigin ? signInUrl(signInOrigin, here) : undefined })] }));
+                        : _jsx(SignInDoor, { brand: brand, href: signInOrigin ? signInUrl(signInOrigin, here) : undefined, note: config.signInNote })] }));
         }
         const r = reader;
         // The agreement comes before the body, every reader, once per page. No agreement, no body.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supersuit/artifacts",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Publish markdown as branded, read-aloud pages from a Next.js app: the artifacts store, the route factory, the read-along reader, brand packs, password and confidential pages, and share cards.",
   "license": "MIT",
   "type": "module",