From edf092939e2c2f9cec3f1e026900ae2e7f094c77 Mon Sep 17 00:00:00 2001
From: NiclasDev63 <niclas.gregor20@gmail.com>
Date: Thu, 20 Aug 2026 23:52:02 +0200
Subject: [PATCH] added person analytics and removed unnecessary loading
 overlays from landing page

---
 apps/app/src/app/[lang]/profile/layout.tsx    |   7 +-
 .../app/src/features/organizations/CONTEXT.md |   7 +
 .../navigation/profile-shell-navigation.tsx   |   5 +
 .../shared/analytics/analytics-area.test.tsx  |  74 +++++++++
 .../src/shared/analytics/analytics-area.tsx   |  32 ++++
 .../analytics/product-analytics.test.tsx      |  22 +--
 .../shared/analytics/product-analytics.tsx    |   3 +-
 .../comparison/comparison.tsx                 |  18 +--
 .../hero/product-preview-section.tsx          |  24 +--
 .../components/marketing-section-content.tsx  |   5 +-
 apps/web/src/app/[lang]/components/navbar.tsx |   2 -
 apps/web/src/app/[lang]/loading.tsx           |   9 --
 apps/web/src/app/loading.tsx                  |   9 --
 .../components/localized-loading-overlay.tsx  |  28 ----
 apps/web/src/styles/marketing-motion.css      |  40 ++++-
 .../adr/0003-pseudonymous-person-analytics.md |  43 ++++++
 packages/observability/package.json           |   2 +
 .../src/config/event-context.test.ts          |  49 ++++++
 .../observability/src/config/event-context.ts |  22 +++
 packages/observability/src/config/types.ts    |   3 +
 packages/observability/src/consent/cookie.ts  |  11 ++
 .../next/apply-consent-and-identity.test.ts   |  82 ++++++++++
 .../src/next/apply-consent-and-identity.ts    |  39 +++++
 .../observability/src/next/posthog-root.tsx   | 140 +++++-------------
 packages/observability/src/provider.tsx       |  14 +-
 packages/observability/tsconfig.json          |   3 +-
 pnpm-lock.yaml                                |  51 ++++---
 27 files changed, 504 insertions(+), 240 deletions(-)
 create mode 100644 apps/app/src/shared/analytics/analytics-area.test.tsx
 create mode 100644 apps/app/src/shared/analytics/analytics-area.tsx
 delete mode 100644 apps/web/src/app/[lang]/loading.tsx
 delete mode 100644 apps/web/src/app/loading.tsx
 delete mode 100644 apps/web/src/components/localized-loading-overlay.tsx
 create mode 100644 docs/adr/0003-pseudonymous-person-analytics.md
 create mode 100644 packages/observability/src/config/event-context.test.ts
 create mode 100644 packages/observability/src/config/event-context.ts
 create mode 100644 packages/observability/src/next/apply-consent-and-identity.test.ts
 create mode 100644 packages/observability/src/next/apply-consent-and-identity.ts

diff --git a/apps/app/src/app/[lang]/profile/layout.tsx b/apps/app/src/app/[lang]/profile/layout.tsx
index b51c34b..a6325c4 100644
--- a/apps/app/src/app/[lang]/profile/layout.tsx
+++ b/apps/app/src/app/[lang]/profile/layout.tsx
@@ -8,6 +8,7 @@ import { redirect } from "next/navigation";
 
 import { ProfileShell } from "@/features/organizations/client";
 import { getFullDictionary } from "@/i18n/dictionaries";
+import { AnalyticsArea } from "@/shared/analytics/analytics-area";
 import { ProductAnalytics } from "@/shared/analytics/product-analytics";
 import { api, HydrateClient } from "@/shared/api/trpc/server";
 
@@ -36,9 +37,11 @@ export default async function RootLayout({
   const dict = await getFullDictionary(lang);
 
   return (
-    <SciblyPostHogProvider surface="app">
-      <ProductAnalytics />
+    <SciblyPostHogProvider surface="app" identity={{ userId: session.user.id }}>
       <HydrateClient>
+        {/* Inside the boundary so AnalyticsArea's organization query reads the cache prefetched above. */}
+        <ProductAnalytics />
+        <AnalyticsArea />
         <ErrorBoundaryWrapper>
           <ProfileShell
             user={{
diff --git a/apps/app/src/features/organizations/CONTEXT.md b/apps/app/src/features/organizations/CONTEXT.md
index 3fc35bf..2d75408 100644
--- a/apps/app/src/features/organizations/CONTEXT.md
+++ b/apps/app/src/features/organizations/CONTEXT.md
@@ -21,6 +21,13 @@ at once. Says nothing on its own about what they may do — that is the
 membership's to say.
 _Avoid_: account, profile
 
+**Area**:
+Where a user currently is: their own space, or one organization. Never a synonym
+for Organization — an area may be personal, an organization never is, and only
+an organization area has a role attached to it.
+_Avoid_: workspace (an integration's word for the provider's own container),
+tenant, scope, section
+
 ### Who belongs to it
 
 **Member**:
diff --git a/apps/app/src/features/organizations/navigation/profile-shell-navigation.tsx b/apps/app/src/features/organizations/navigation/profile-shell-navigation.tsx
index 1639cc4..f15c7c3 100644
--- a/apps/app/src/features/organizations/navigation/profile-shell-navigation.tsx
+++ b/apps/app/src/features/organizations/navigation/profile-shell-navigation.tsx
@@ -5,6 +5,7 @@ import type { ProfileShellController } from "./profile-shell";
 
 import { signOut } from "@scibly/auth/client";
 import { getInitials } from "@scibly/lib";
+import { usePostHog } from "@scibly/observability/client";
 import { routes } from "@scibly/routes";
 import {
   Avatar,
@@ -102,6 +103,8 @@ export function ProfileTopBar({
   displayAvatar: string | null;
   openMobileNavigation: () => void;
 }) {
+  const posthog = usePostHog();
+
   return (
     <div className="border-hairline flex h-14 shrink-0 items-center justify-between border-b bg-white px-4 md:px-8">
       <div className="flex items-center gap-2">
@@ -133,6 +136,8 @@ export function ProfileTopBar({
         <button
           onClick={async () => {
             await signOut();
+            // PostHog does not infer identity from the session ending, and reset() also wipes its own consent record — restored below from our consent cookie.
+            posthog.reset();
             window.location.href = routes.app.auth.default;
           }}
           className="text-ink-faint hover:bg-ink/[0.05] hover:text-ink rounded-xl p-1.5 transition-colors"
diff --git a/apps/app/src/shared/analytics/analytics-area.test.tsx b/apps/app/src/shared/analytics/analytics-area.test.tsx
new file mode 100644
index 0000000..7aa3e0e
--- /dev/null
+++ b/apps/app/src/shared/analytics/analytics-area.test.tsx
@@ -0,0 +1,74 @@
+import { render } from "@testing-library/react";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import { AnalyticsArea } from "./analytics-area";
+
+const useParams = vi.hoisted(() => vi.fn());
+const useQuery = vi.hoisted(() => vi.fn());
+const setAnalyticsContext = vi.hoisted(() => vi.fn());
+
+vi.mock("next/navigation", () => ({ useParams }));
+vi.mock("@/shared/api/trpc/client", () => ({
+  api: { organization: { listMyOrgs: { useQuery } } },
+}));
+vi.mock("@scibly/observability/event-context", () => ({ setAnalyticsContext }));
+
+const acme = { id: "org_1", slug: "acme", name: "Acme", role: "owner" };
+const globex = { id: "org_2", slug: "globex", name: "Globex", role: "member" };
+
+function at(orgSlug: string | undefined) {
+  useParams.mockReturnValue(orgSlug ? { orgSlug } : {});
+}
+
+beforeEach(() => {
+  vi.clearAllMocks();
+  useQuery.mockReturnValue({ data: [acme, globex] });
+  at(undefined);
+});
+
+describe("AnalyticsArea", () => {
+  it("reports the organization the route is in", () => {
+    at("acme");
+    render(<AnalyticsArea />);
+
+    expect(setAnalyticsContext).toHaveBeenCalledWith({
+      area: "organization",
+      org_id: "org_1",
+      org_name: "Acme",
+      role: "owner",
+    });
+  });
+
+  it("reports the user's own space off the organization routes", () => {
+    render(<AnalyticsArea />);
+
+    expect(setAnalyticsContext).toHaveBeenCalledWith({ area: "personal" });
+  });
+
+  it("replaces the whole context on the way out of an organization", () => {
+    at("acme");
+    const view = render(<AnalyticsArea />);
+
+    at(undefined);
+    view.rerender(<AnalyticsArea />);
+
+    // Replaced, not merged — otherwise `role` would outlive the organization it came from.
+    expect(setAnalyticsContext).toHaveBeenLastCalledWith({ area: "personal" });
+  });
+
+  // Kept apart from "personal": calling an organization route personal while data is still missing is a wrong answer, not a missing one.
+  it("stays quiet while the organization list is still loading", () => {
+    at("acme");
+    useQuery.mockReturnValue({ data: undefined });
+    render(<AnalyticsArea />);
+
+    expect(setAnalyticsContext).not.toHaveBeenCalled();
+  });
+
+  it("stays quiet on an organization the user is not a member of", () => {
+    at("initech");
+    render(<AnalyticsArea />);
+
+    expect(setAnalyticsContext).not.toHaveBeenCalled();
+  });
+});
diff --git a/apps/app/src/shared/analytics/analytics-area.tsx b/apps/app/src/shared/analytics/analytics-area.tsx
new file mode 100644
index 0000000..4fc295e
--- /dev/null
+++ b/apps/app/src/shared/analytics/analytics-area.tsx
@@ -0,0 +1,32 @@
+"use client";
+
+import { setAnalyticsContext } from "@scibly/observability/event-context";
+import { useParams } from "next/navigation";
+import { useEffect } from "react";
+
+import { api } from "@/shared/api/trpc/client";
+
+/** Held by the observability package rather than PostHog's own store, which it clears on every `reset()` — including the ones cookieless mode triggers on its own. */
+export function AnalyticsArea() {
+  const orgSlug = useParams<{ orgSlug?: string }>().orgSlug ?? null;
+  const orgsQuery = api.organization.listMyOrgs.useQuery();
+  const org = orgsQuery.data?.find((o) => o.slug === orgSlug) ?? null;
+
+  useEffect(() => {
+    // Don't call an organization route personal just because the list is still in flight.
+    if (orgSlug !== null && !org) return;
+
+    setAnalyticsContext(
+      org
+        ? {
+            area: "organization",
+            org_id: org.id,
+            org_name: org.name,
+            role: org.role,
+          }
+        : { area: "personal" },
+    );
+  }, [org, orgSlug]);
+
+  return null;
+}
diff --git a/apps/app/src/shared/analytics/product-analytics.test.tsx b/apps/app/src/shared/analytics/product-analytics.test.tsx
index 76fedab..256db0a 100644
--- a/apps/app/src/shared/analytics/product-analytics.test.tsx
+++ b/apps/app/src/shared/analytics/product-analytics.test.tsx
@@ -69,22 +69,6 @@ describe("ProductAnalytics", () => {
     );
   });
 
-  it("carries the organization the action happened in", async () => {
-    renderWithClient(
-      <RunMutation
-        path="organization.inviteMembers"
-        variables={{ orgSlug: "acme" }}
-      />,
-    );
-
-    await waitFor(() =>
-      expect(capture).toHaveBeenCalledWith("members_invited", {
-        kind: undefined,
-        orgSlug: "acme",
-      }),
-    );
-  });
-
   it("resolves procedures nested under a sub-router", async () => {
     renderWithClient(<RunMutation path="notebook.source.addText" />);
 
@@ -106,12 +90,12 @@ describe("ProductAnalytics", () => {
     await waitFor(() =>
       expect(capture).toHaveBeenCalledWith("checkout_started", {
         kind: "topup",
-        orgSlug: "acme",
         pack: "large",
       }),
     );
   });
 
+  // orgSlug is deliberately not expected back out: AnalyticsArea already reports the organization.
   it("leaves out mutation input that is not worth reporting", async () => {
     renderWithClient(
       <RunMutation
@@ -123,7 +107,6 @@ describe("ProductAnalytics", () => {
     await waitFor(() =>
       expect(capture).toHaveBeenCalledWith("course_created", {
         kind: undefined,
-        orgSlug: "acme",
       }),
     );
   });
@@ -153,8 +136,7 @@ describe("ProductAnalytics", () => {
     expect(capture).toHaveBeenCalledTimes(1);
   });
 
-  // Both negatives run a tracked mutation alongside the one under test and wait for *its*
-  // event, so the cache has drained before we conclude nothing was reported.
+  // Runs a tracked mutation alongside the untracked one and waits for *its* event, so the cache has drained before concluding nothing else was reported.
   it("stays silent for mutations that are not on the allowlist", async () => {
     renderWithClient(
       <>
diff --git a/apps/app/src/shared/analytics/product-analytics.tsx b/apps/app/src/shared/analytics/product-analytics.tsx
index 849e38b..0cfeb33 100644
--- a/apps/app/src/shared/analytics/product-analytics.tsx
+++ b/apps/app/src/shared/analytics/product-analytics.tsx
@@ -41,7 +41,8 @@ const TRACKED_BY_PATH = new Map<string, TrackedMutation>(
   Object.entries(TRACKED_MUTATIONS),
 );
 
-const TRACKED_INPUTS = ["orgSlug", "pack", "quantity"];
+// orgSlug is not here: AnalyticsArea puts the organization on every event already.
+const TRACKED_INPUTS = ["pack", "quantity"];
 
 function trackedInputsOf(variables: unknown) {
   const properties: Record<string, string | number> = {};
diff --git a/apps/web/src/app/[lang]/components/home-page-section/comparison/comparison.tsx b/apps/web/src/app/[lang]/components/home-page-section/comparison/comparison.tsx
index 147bfd6..57eff03 100644
--- a/apps/web/src/app/[lang]/components/home-page-section/comparison/comparison.tsx
+++ b/apps/web/src/app/[lang]/components/home-page-section/comparison/comparison.tsx
@@ -14,7 +14,6 @@ import {
   toPillarId,
 } from "@/app/[lang]/components/marketing-tokens";
 import { SciblyMark } from "@/components/brand-logo";
-import { useInViewOnce } from "@/components/in-view-reveal";
 
 import { type ComparisonDictionary } from "./i18n/comparison.types";
 
@@ -38,15 +37,10 @@ const boardKeyClass =
   "mt-[1px] inline-flex shrink-0 items-center gap-[7px] rounded-[11px] bg-[#0066FF] px-[11px] py-[7px] text-[11.5px] leading-none font-bold text-white shadow-[0_2px_0_0_#0046ad] transition-transform duration-150 ease-press group-hover:-translate-y-[2px] sm:mt-0 sm:size-[26px] sm:justify-center sm:gap-0 sm:rounded-[8px] sm:p-0";
 
 export function ComparisonSection({ t }: ComparisonSectionProps) {
-  const { ref, inView } = useInViewOnce<HTMLElement>(0.16);
   const lastIndex = t.table.rows.length - 1;
 
   return (
-    <MarketingSection
-      ref={ref}
-      id="comparison"
-      aria-labelledby="comparison-heading"
-    >
+    <MarketingSection id="comparison" aria-labelledby="comparison-heading">
       <h2 id="comparison-heading" className={cn(titleClass, "max-w-[680px]")}>
         {t.title1} {t.title2}
       </h2>
@@ -98,15 +92,13 @@ export function ComparisonSection({ t }: ComparisonSectionProps) {
               <li
                 key={row.label}
                 className={cn(
-                  "group grid transition-opacity duration-500 ease-out motion-reduce:transition-none",
+                  "sc-reveal group grid",
                   "max-sm:border-hairline max-sm:overflow-hidden max-sm:rounded-[20px] max-sm:border-2 max-sm:bg-white max-sm:shadow-[0_4px_0_0_var(--color-lip)]",
                   columnsClass,
-                  inView ? "opacity-100" : "sc-reveal-hidden",
                 )}
-                style={{
-                  "--row-wash": tint(pillar.softColor, 26),
-                  transitionDelay: inView ? `${70 + index * 55}ms` : "0ms",
-                }}
+                // Each row runs its own scroll timeline, so they stagger by how
+                // far apart they sit rather than by a delay we have to pick.
+                style={{ "--row-wash": tint(pillar.softColor, 26) }}
               >
                 <div className="border-ground flex items-center gap-3 border-b-2 px-4 py-3.5 sm:border-0 sm:px-0 sm:pt-[clamp(14px,1.8vw,19px)] sm:pr-[clamp(12px,2vw,24px)] sm:pb-[clamp(14px,1.8vw,19px)]">
                   <ChapterKey id={kind} />
diff --git a/apps/web/src/app/[lang]/components/home-page-section/hero/product-preview-section.tsx b/apps/web/src/app/[lang]/components/home-page-section/hero/product-preview-section.tsx
index 29929c8..ea4f5ab 100644
--- a/apps/web/src/app/[lang]/components/home-page-section/hero/product-preview-section.tsx
+++ b/apps/web/src/app/[lang]/components/home-page-section/hero/product-preview-section.tsx
@@ -93,15 +93,7 @@ export function ProductPreviewSection({
       className="scroll-mt-16"
       atmosphere={<ProductPreviewAtmosphere />}
     >
-      <div
-        className={cn(
-          "transition-[opacity,translate] duration-700",
-          REVEAL_EASING,
-          hasSeen
-            ? "translate-y-0 opacity-100"
-            : "sc-reveal-hidden translate-y-4",
-        )}
-      >
+      <div className="sc-reveal">
         <MarketingSectionHeader
           titleId="product-preview-heading"
           eyebrow={t.previewSection.eyebrow}
@@ -163,17 +155,13 @@ export function ProductPreviewSection({
             chapters use */}
         <div
           className={cn(
-            "min-w-0 rounded-[28px] border p-3 duration-700 md:p-[18px]",
-            "transition-[opacity,translate,background-color,border-color,box-shadow]",
+            "sc-reveal min-w-0 rounded-[28px] border p-3 duration-700 md:p-[18px]",
+            // The wash still transitions, because switching tabs recolours the
+            // stage in place. Only the entrance moved to the scroll timeline.
+            "transition-[background-color,border-color,box-shadow]",
             REVEAL_EASING,
-            hasSeen
-              ? "translate-y-0 opacity-100"
-              : "sc-reveal-hidden translate-y-6",
           )}
-          style={{
-            ...washStyle(pillar),
-            transitionDelay: hasSeen ? "140ms" : "0ms",
-          }}
+          style={washStyle(pillar)}
         >
           <div id="product-preview-stage" role="tabpanel">
             <div key={tab} className="product-preview-swap">
diff --git a/apps/web/src/app/[lang]/components/marketing-section-content.tsx b/apps/web/src/app/[lang]/components/marketing-section-content.tsx
index 2bd1387..0753f7f 100644
--- a/apps/web/src/app/[lang]/components/marketing-section-content.tsx
+++ b/apps/web/src/app/[lang]/components/marketing-section-content.tsx
@@ -9,10 +9,11 @@ import { type ComponentPropsWithoutRef, type ReactNode, type Ref } from "react";
 import { MarketingGridField } from "./marketing-grid-field";
 import { MarketingSectionFrame } from "./marketing-section-frame";
 
+// `clip` and not `hidden`: `overflow-hidden` makes the section a scroll container, which breaks `position: sticky` descendants and rebinds `animation-timeline: view()` to a scroller that never moves.
 export const marketingPageSectionClass =
-  "font-display relative z-10 overflow-hidden bg-white";
+  "font-display relative z-10 overflow-clip bg-white";
 
-// `overflow-hidden` would make the section a scroll container, which silently stops `position: sticky` descendants from sticking, so this only clips the horizontal axis.
+// Same reasoning, clipped on the inline axis only so a sticky child can still travel past the section's own block-axis box.
 export const marketingPageSectionStickyClass =
   "font-display relative z-10 overflow-x-clip bg-white";
 
diff --git a/apps/web/src/app/[lang]/components/navbar.tsx b/apps/web/src/app/[lang]/components/navbar.tsx
index d6d87c4..d944151 100644
--- a/apps/web/src/app/[lang]/components/navbar.tsx
+++ b/apps/web/src/app/[lang]/components/navbar.tsx
@@ -283,7 +283,6 @@ export function Navbar({ t }: NavbarProps) {
             </div>
           </div>
 
-          {/* Mobile: sign in + primary action + menu toggle */}
           <div className="flex items-center gap-2.5 md:hidden">
             <a
               href={routes.app.auth.signIn}
@@ -318,7 +317,6 @@ export function Navbar({ t }: NavbarProps) {
         </div>
       </div>
 
-      {/* Mobile Menu Overlay */}
       {isMobileMenuOpen && (
         <div
           id="navbar-mobile-menu"
diff --git a/apps/web/src/app/[lang]/loading.tsx b/apps/web/src/app/[lang]/loading.tsx
deleted file mode 100644
index ec4d93c..0000000
--- a/apps/web/src/app/[lang]/loading.tsx
+++ /dev/null
@@ -1,9 +0,0 @@
-import { LocalizedLoadingOverlay } from "@/components/localized-loading-overlay";
-
-export default function Loading() {
-  return (
-    <div className="flex min-h-dvh items-center justify-center">
-      <LocalizedLoadingOverlay variant="loadingPage" />
-    </div>
-  );
-}
diff --git a/apps/web/src/app/loading.tsx b/apps/web/src/app/loading.tsx
deleted file mode 100644
index ec4d93c..0000000
--- a/apps/web/src/app/loading.tsx
+++ /dev/null
@@ -1,9 +0,0 @@
-import { LocalizedLoadingOverlay } from "@/components/localized-loading-overlay";
-
-export default function Loading() {
-  return (
-    <div className="flex min-h-dvh items-center justify-center">
-      <LocalizedLoadingOverlay variant="loadingPage" />
-    </div>
-  );
-}
diff --git a/apps/web/src/components/localized-loading-overlay.tsx b/apps/web/src/components/localized-loading-overlay.tsx
deleted file mode 100644
index 2effdce..0000000
--- a/apps/web/src/components/localized-loading-overlay.tsx
+++ /dev/null
@@ -1,28 +0,0 @@
-"use client";
-
-import { LoadingOverlay } from "@scibly/ui/components/loading-overlay";
-
-import { type AppRouteLoadingVariant } from "@/app/[lang]/i18n/app-routes.types";
-import { useTranslation } from "@/i18n/hooks/use-translation";
-
-const FALLBACK = {
-  loadingPage: "Seite wird geladen...",
-  loadingEditor: "Editor wird geladen...",
-  loadingWorksheet: "Arbeitsblatt wird geladen...",
-  loadingWorksheets: "Arbeitsblätter werden geladen...",
-  loadingSettings: "Einstellungen werden geladen...",
-} satisfies Record<AppRouteLoadingVariant, string>;
-
-type LocalizedLoadingOverlayProps = {
-  variant: AppRouteLoadingVariant;
-};
-
-export const LocalizedLoadingOverlay = ({
-  variant,
-}: LocalizedLoadingOverlayProps) => {
-  const { translations } = useTranslation("appRoutes");
-  if (!translations) {
-    return <LoadingOverlay message={FALLBACK[variant]} />;
-  }
-  return <LoadingOverlay message={translations[variant]} />;
-};
diff --git a/apps/web/src/styles/marketing-motion.css b/apps/web/src/styles/marketing-motion.css
index fff4c00..6b5d948 100644
--- a/apps/web/src/styles/marketing-motion.css
+++ b/apps/web/src/styles/marketing-motion.css
@@ -200,15 +200,43 @@
 }
 
 /*
- * Both rules hide markup the server already sent and wait on an
- * IntersectionObserver to bring it back, so they must not apply where that
- * observer will never run — the content would stay invisible for good.
+ * Never waits on JavaScript, and never touches opacity — only transform.
+ * `animation-timeline: view()` support is inconsistent across engines, and one
+ * that strands the timeline at progress 0 must not strand content at
+ * `opacity: 0`; a stranded translate just costs an unnoticed 14px offset. No
+ * property in `sc-reveal-lift` may affect whether the content can be read.
  */
-@media (scripting: enabled) {
-  .sc-reveal-hidden {
-    opacity: 0;
+@keyframes sc-reveal-lift {
+  from {
+    transform: translate3d(0, 14px, 0);
+  }
+  to {
+    transform: none;
   }
+}
 
+@supports (animation-timeline: view()) {
+  .sc-reveal {
+    animation-name: sc-reveal-lift;
+    animation-fill-mode: both;
+    animation-timing-function: ease-out;
+    animation-timeline: view();
+    animation-range: entry 0% entry 42%;
+  }
+
+  @media (prefers-reduced-motion: reduce) {
+    .sc-reveal {
+      animation-name: none;
+    }
+  }
+}
+
+/*
+ * Decoration, not content: the illustrations inside the bento cards, whose
+ * hidden state is their animation's first frame. The card text around them is
+ * never hidden, so a late observer costs the drawing and not the reading.
+ */
+@media (scripting: enabled) {
   .sc-bento:not(.sc-bento-ready) [data-bento-anim] {
     animation: none !important;
     opacity: 0;
diff --git a/docs/adr/0003-pseudonymous-person-analytics.md b/docs/adr/0003-pseudonymous-person-analytics.md
new file mode 100644
index 0000000..5fa31a2
--- /dev/null
+++ b/docs/adr/0003-pseudonymous-person-analytics.md
@@ -0,0 +1,43 @@
+# Analytics identifies the user and says nothing else about them
+
+Every event is attributed to a PostHog person keyed by `User.id`, from a bare
+`identify()` that sets no person properties. Organization, role, and whether the
+user was acting inside an organization or on their own travel on the event
+instead. PostHog's onboarding suggests a person profile carrying name and email.
+We don't do that.
+
+## Why
+
+A user belongs to several organizations at once and holds a different role in
+each, so a role or an organization written onto the person is last-write-wins.
+It records where they were last and mislabels everything before that. With role,
+organization and plan ruled out, nothing that remains answers a question we have.
+
+Name and email are out for a different reason. Anyone can delete their own
+account from user settings, and GDPR gives them erasure of the copies our
+processors hold, PostHog included. If PostHog held name or email, honoring that
+means deleting the person and their events there, and every funnel, retention
+curve and conversion rate they were part of loses the data. A bare `User.id`
+means nothing without the user row, so deleting the row cuts the link instead.
+The events stop being attributable to anyone and the aggregate history survives.
+Deleting the account is the erasure, as long as nothing identifying rides along
+on the events.
+
+## Consequences
+
+- The Persons list shows opaque cuids. Mapping one back to a human takes a query
+  against our own database.
+- `area`, `org_id`, `org_name` and `role` are named once and stay that way.
+  Renaming a shipped property means dual-writing and rewriting every saved
+  insight. `area` avoids `workspace`, which already means three other things
+  here.
+- Group analytics stays off. It is a paid add-on billed on every identified
+  event in the project, not only the grouped ones.
+- Identified events cost up to 4x anonymous ones, and the flag that marks a
+  browser identified is sticky. `posthog.reset()` on sign-out returns a browser
+  to the cheap rate and keeps two people out of one profile.
+- Only users who accept the banner become people. Rejecting it leaves the
+  browser cookieless, so the identified population is the consenting one.
+- Adding any identifying property later is an ADR-level decision. The
+  Datenschutzerklärung and the consent copy change first, and account deletion
+  grows a step it does not have today.
diff --git a/packages/observability/package.json b/packages/observability/package.json
index 31d2786..acd4fcf 100644
--- a/packages/observability/package.json
+++ b/packages/observability/package.json
@@ -7,6 +7,7 @@
     "./client": "./src/next/client-root.tsx",
     "./consent": "./src/consent/cookie.ts",
     "./autocapture": "./src/autocapture/attributes.ts",
+    "./event-context": "./src/config/event-context.ts",
     "./provider": "./src/provider.tsx",
     "./provider/deferred": "./src/provider-deferred.tsx",
     "./proxy": "./src/proxy/index.ts",
@@ -23,6 +24,7 @@
     "@scibly/i18n": "workspace:*",
     "@scibly/lib": "workspace:*",
     "@scibly/next-proxy": "workspace:*",
+    "@scibly/routes": "workspace:*",
     "@scibly/ui": "workspace:*",
     "cookies-next": "^4.3.0",
     "server-only": "^0.0.1",
diff --git a/packages/observability/src/config/event-context.test.ts b/packages/observability/src/config/event-context.test.ts
new file mode 100644
index 0000000..9ac707a
--- /dev/null
+++ b/packages/observability/src/config/event-context.test.ts
@@ -0,0 +1,49 @@
+import { beforeEach, describe, expect, it } from "vitest";
+
+import { setAnalyticsContext, withAnalyticsContext } from "./event-context";
+
+const stamp = withAnalyticsContext({ surface: "app", env: "test" });
+
+const event = (name = "course_created") => ({
+  event: name,
+  properties: { kind: "topup" },
+});
+
+describe("withAnalyticsContext", () => {
+  beforeEach(() => setAnalyticsContext({}));
+
+  it("stamps every event with the properties fixed at init", () => {
+    expect(stamp(event())?.properties).toMatchObject({
+      surface: "app",
+      env: "test",
+    });
+  });
+
+  it("adds whatever the app last set as context", () => {
+    setAnalyticsContext({ area: "organization", org_id: "org_1" });
+
+    expect(stamp(event())?.properties).toMatchObject({
+      area: "organization",
+      org_id: "org_1",
+    });
+  });
+
+  it("drops the properties of an area the user has left", () => {
+    setAnalyticsContext({ area: "organization", org_id: "org_1" });
+    setAnalyticsContext({ area: "personal" });
+
+    expect(stamp(event())?.properties).not.toHaveProperty("org_id");
+  });
+
+  it("keeps the properties the event already carried", () => {
+    expect(stamp(event())?.properties).toMatchObject({ kind: "topup" });
+  });
+
+  it("leaves session recording payloads alone", () => {
+    expect(stamp(event("$snapshot"))?.properties).not.toHaveProperty("surface");
+  });
+
+  it("passes through an event another hook already dropped", () => {
+    expect(stamp(null)).toBeNull();
+  });
+});
diff --git a/packages/observability/src/config/event-context.ts b/packages/observability/src/config/event-context.ts
new file mode 100644
index 0000000..2ec2d34
--- /dev/null
+++ b/packages/observability/src/config/event-context.ts
@@ -0,0 +1,22 @@
+/** The part of a posthog event this touches, kept structural so shaping an event does not pull in the SDK's types. Properties are only ever added to, never read. */
+type OutgoingEvent = { event: string; properties: object };
+
+/** Module state shared by every request a server instance is handling at once — write only from an effect or event handler, never during render, or one user's organization silently lands on another user's events. */
+let context: Record<string, string> = {};
+
+/** Replaces the whole set, so leaving an organization drops its properties too. */
+export function setAnalyticsContext(next: Record<string, string>): void {
+  context = next;
+}
+
+/** Config rather than super properties, which posthog clears on every `reset()` — including the ones cookieless mode triggers on its own — and re-registering them would need something watching for that. */
+export function withAnalyticsContext(fixed: Record<string, string>) {
+  // Runs on every event including autocaptured ones, so it must never throw.
+  return <T extends OutgoingEvent>(event: T | null): T | null => {
+    // $snapshot is a session-recording payload, which posthog documents as unsafe to edit.
+    if (event?.properties && event.event !== "$snapshot") {
+      Object.assign(event.properties, fixed, context);
+    }
+    return event;
+  };
+}
diff --git a/packages/observability/src/config/types.ts b/packages/observability/src/config/types.ts
index b9a1546..08a580e 100644
--- a/packages/observability/src/config/types.ts
+++ b/packages/observability/src/config/types.ts
@@ -1,6 +1,9 @@
 export type AnalyticsSurface = "app" | "web";
 export type AnalyticsEnv = "development" | "test" | "production";
 
+/** Who the browser belongs to, on surfaces that know. Pseudonymous — the id and nothing else. */
+export type AnalyticsIdentity = { userId: string };
+
 export type ConsentLabels = {
   title: string;
   message: string;
diff --git a/packages/observability/src/consent/cookie.ts b/packages/observability/src/consent/cookie.ts
index f5f90af..a9dcacd 100644
--- a/packages/observability/src/consent/cookie.ts
+++ b/packages/observability/src/consent/cookie.ts
@@ -13,12 +13,15 @@ const consentCookieOptions = {
 
 export type ConsentStatus = "pending" | "granted" | "declined";
 
+const listeners = new Set<() => void>();
+
 export function setAnalyticsConsent(granted: boolean): void {
   setCookie(
     analyticsConsentCookieName,
     granted ? GRANTED : DECLINED,
     consentCookieOptions,
   );
+  for (const listener of listeners) listener();
 }
 
 // Client-side only: reading via headers()/cookies() during SSR would force
@@ -29,3 +32,11 @@ export function getAnalyticsConsent(): ConsentStatus {
   if (value === DECLINED) return "declined";
   return "pending";
 }
+
+/** The cookie is the state; components read it through `useSyncExternalStore` rather than copying it. */
+export function subscribeToAnalyticsConsent(listener: () => void): () => void {
+  listeners.add(listener);
+  return () => {
+    listeners.delete(listener);
+  };
+}
diff --git a/packages/observability/src/next/apply-consent-and-identity.test.ts b/packages/observability/src/next/apply-consent-and-identity.test.ts
new file mode 100644
index 0000000..5e290d9
--- /dev/null
+++ b/packages/observability/src/next/apply-consent-and-identity.test.ts
@@ -0,0 +1,82 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import { analyticsConsentCookieName } from "../consent/cookie";
+import { applyConsentAndIdentity } from "./apply-consent-and-identity";
+
+function fakeClient(properties: Record<string, string> = {}) {
+  return {
+    get_property: vi.fn((key: string) => properties[key]),
+    reset: vi.fn(),
+    identify: vi.fn(),
+    opt_in_capturing: vi.fn(),
+    opt_out_capturing: vi.fn(),
+  };
+}
+
+function answerConsent(value: "v1" | "declined" | null) {
+  document.cookie = `${analyticsConsentCookieName}=; max-age=0; path=/`;
+  if (value) document.cookie = `${analyticsConsentCookieName}=${value}; path=/`;
+}
+
+describe("applyConsentAndIdentity", () => {
+  beforeEach(() => answerConsent(null));
+
+  it("identifies a signed-in user who granted consent", () => {
+    answerConsent("v1");
+    const posthog = fakeClient();
+
+    applyConsentAndIdentity(posthog, "user_1");
+
+    expect(posthog.opt_in_capturing).toHaveBeenCalled();
+    expect(posthog.identify).toHaveBeenCalledWith("user_1");
+  });
+
+  it("leaves a user who has not answered the banner anonymous", () => {
+    const posthog = fakeClient();
+
+    applyConsentAndIdentity(posthog, "user_1");
+
+    expect(posthog.identify).not.toHaveBeenCalled();
+    expect(posthog.opt_in_capturing).not.toHaveBeenCalled();
+    expect(posthog.opt_out_capturing).not.toHaveBeenCalled();
+  });
+
+  it("leaves a user who declined anonymous, and opts capturing out", () => {
+    answerConsent("declined");
+    const posthog = fakeClient();
+
+    applyConsentAndIdentity(posthog, "user_1");
+
+    expect(posthog.opt_out_capturing).toHaveBeenCalled();
+    expect(posthog.identify).not.toHaveBeenCalled();
+  });
+
+  it("clears the browser when a different person signs in", () => {
+    answerConsent("v1");
+    const posthog = fakeClient({ $user_id: "user_1" });
+
+    applyConsentAndIdentity(posthog, "user_2");
+
+    expect(posthog.reset).toHaveBeenCalledWith(true);
+    expect(posthog.identify).toHaveBeenCalledWith("user_2");
+  });
+
+  it("keeps the browser for the same person signing in again", () => {
+    answerConsent("v1");
+    const posthog = fakeClient({ $user_id: "user_1" });
+
+    applyConsentAndIdentity(posthog, "user_1");
+
+    expect(posthog.reset).not.toHaveBeenCalled();
+  });
+
+  it("keeps an identified browser on the pages that have no session", () => {
+    answerConsent("v1");
+    const posthog = fakeClient({ $user_id: "user_1" });
+
+    applyConsentAndIdentity(posthog, undefined);
+
+    expect(posthog.reset).not.toHaveBeenCalled();
+    expect(posthog.identify).not.toHaveBeenCalled();
+  });
+});
diff --git a/packages/observability/src/next/apply-consent-and-identity.ts b/packages/observability/src/next/apply-consent-and-identity.ts
new file mode 100644
index 0000000..3a9dcb3
--- /dev/null
+++ b/packages/observability/src/next/apply-consent-and-identity.ts
@@ -0,0 +1,39 @@
+import type { PostHog } from "@posthog/react";
+
+import { getAnalyticsConsent } from "../consent/cookie";
+
+// Only the calls this needs: posthog hands `loaded` a narrower instance than the
+// one `usePostHog()` returns, and both satisfy this.
+type AnalyticsClient = Pick<
+  PostHog,
+  | "get_property"
+  | "identify"
+  | "opt_in_capturing"
+  | "opt_out_capturing"
+  | "reset"
+>;
+
+/** Call only from posthog's `loaded` option or an event handler — `PostHogProvider`'s own init effect runs after a component's effect, so calling this from there reaches a client with no persistence yet and silently no-ops. */
+export function applyConsentAndIdentity(
+  posthog: AnalyticsClient,
+  userId: string | undefined,
+): void {
+  // No consent gate — this only clears local state — and must run before the consent calls below since `reset` wipes posthog's consent record too.
+  const previous = posthog.get_property("$user_id");
+  // Gated on `userId`: being signed out is not evidence someone else is now at the keyboard, so a missing session must not reset an identified browser.
+  if (userId && previous && previous !== userId) {
+    posthog.reset(true);
+  }
+
+  const consent = getAnalyticsConsent();
+  if (consent === "granted") {
+    posthog.opt_in_capturing();
+  } else if (consent === "declined") {
+    posthog.opt_out_capturing();
+  }
+
+  // Until consent is granted the SDK captures cookielessly — identifying here would attach a durable id to the very events that exist to avoid one.
+  if (userId && consent === "granted") {
+    posthog.identify(userId);
+  }
+}
diff --git a/packages/observability/src/next/posthog-root.tsx b/packages/observability/src/next/posthog-root.tsx
index ebc9e2a..d99e1a6 100644
--- a/packages/observability/src/next/posthog-root.tsx
+++ b/packages/observability/src/next/posthog-root.tsx
@@ -3,121 +3,66 @@
 import type { Locale } from "@scibly/i18n/constants";
 import type {
   AnalyticsEnv,
+  AnalyticsIdentity,
   AnalyticsSurface,
-  ConsentLabels,
 } from "../config/types";
 
 import { usePostHog } from "@posthog/next";
 import { PostHogProvider } from "@posthog/react";
 import { getLocale, localeFromPathname } from "@scibly/i18n";
+import { localizedUrl, routes } from "@scibly/routes";
 import { usePathname } from "next/navigation";
-import { type ReactNode, useCallback, useEffect, useState } from "react";
+import { type ReactNode, useCallback, useSyncExternalStore } from "react";
 
 import { POSTHOG_AUTOCAPTURE_CONFIG } from "../config/autocapture";
 import { INGEST_PATH } from "../config/env";
+import { withAnalyticsContext } from "../config/event-context";
 import { getConsentLabels } from "../config/labels";
 import { ConsentBanner } from "../consent/consent-banner";
 import {
-  type ConsentStatus,
   getAnalyticsConsent,
   setAnalyticsConsent,
+  subscribeToAnalyticsConsent,
 } from "../consent/cookie";
+import { applyConsentAndIdentity } from "./apply-consent-and-identity";
 
-// The server can't read the consent cookie without forcing per-request
-// dynamic rendering, so PostHog always inits opted-out and this corrects
-// it client-side on mount for returning users.
-function ConsentSync({
-  setStatus,
-}: {
-  setStatus: (status: ConsentStatus) => void;
-}) {
-  const posthog = usePostHog();
-
-  useEffect(() => {
-    const resolved = getAnalyticsConsent();
-    if (resolved === "granted") {
-      posthog.opt_in_capturing();
-    } else if (resolved === "declined") {
-      posthog.opt_out_capturing();
-    }
-    setStatus(resolved);
-  }, [posthog, setStatus]);
-
-  return null;
-}
-
-// Registered globally, not passed per capture call, so autocaptured events carry these properties too.
-function SuperProperties({
-  surface,
-  env,
-}: {
-  surface: AnalyticsSurface;
-  env: AnalyticsEnv;
-}) {
-  const posthog = usePostHog();
-
-  useEffect(() => {
-    posthog.register({ surface, env });
-  }, [env, posthog, surface]);
-
-  return null;
-}
+// The server cannot read the consent cookie without forcing the route into
+// per-request dynamic rendering, so it renders no banner and the client decides
+// after hydration.
+const noConsentOnTheServer = () => undefined;
 
-function ConsentControls({
-  status,
-  setStatus,
-  labels,
-  locale,
-  surface,
-}: {
-  status: ConsentStatus | undefined;
-  setStatus: (status: ConsentStatus) => void;
-  labels: ConsentLabels;
-  locale: Locale;
-  surface: AnalyticsSurface;
-}) {
+function ConsentControls({ userId }: { userId: string | undefined }) {
   const posthog = usePostHog();
+  const pathname = usePathname();
+  const status = useSyncExternalStore(
+    subscribeToAnalyticsConsent,
+    getAnalyticsConsent,
+    noConsentOnTheServer,
+  );
 
-  const acceptConsent = useCallback(() => {
-    setAnalyticsConsent(true);
-    posthog.opt_in_capturing();
-    setStatus("granted");
-  }, [posthog, setStatus]);
-
-  const rejectConsent = useCallback(() => {
-    setAnalyticsConsent(false);
-    posthog.opt_out_capturing();
-    setStatus("declined");
-  }, [posthog, setStatus]);
-
-  const savePreferences = useCallback(
+  // A click is the one moment a component can be sure posthog has initialised.
+  const answer = useCallback(
     (analyticsEnabled: boolean) => {
-      if (analyticsEnabled) {
-        acceptConsent();
-        return;
-      }
-      rejectConsent();
+      setAnalyticsConsent(analyticsEnabled);
+      applyConsentAndIdentity(posthog, userId);
     },
-    [acceptConsent, rejectConsent],
+    [posthog, userId],
   );
 
   if (status !== "pending") {
     return null;
   }
 
-  const webOrigin = process.env.NEXT_PUBLIC_WEB_URL?.replace(/\/$/, "");
-  const privacyPolicyHref =
-    surface === "app" && webOrigin
-      ? `${webOrigin}/${locale}/datenschutz`
-      : `/${locale}/datenschutz`;
+  const locale: Locale = getLocale(localeFromPathname(pathname), true);
 
   return (
     <ConsentBanner
-      labels={labels}
-      privacyPolicyHref={privacyPolicyHref}
-      onAcceptAll={acceptConsent}
-      onNecessaryOnly={rejectConsent}
-      onSavePreferences={savePreferences}
+      labels={getConsentLabels(locale)}
+      // The policy lives on the marketing site, so both surfaces link out to it.
+      privacyPolicyHref={localizedUrl(locale, routes.web.legal.datenschutz)}
+      onAcceptAll={() => answer(true)}
+      onNecessaryOnly={() => answer(false)}
+      onSavePreferences={answer}
     />
   );
 }
@@ -127,6 +72,7 @@ export type PostHogRootProps = {
   env: AnalyticsEnv;
   apiKey: string;
   uiHost: string;
+  identity?: AnalyticsIdentity;
   children?: ReactNode;
 };
 
@@ -135,15 +81,10 @@ export function PostHogRoot({
   env,
   apiKey,
   uiHost,
+  identity,
   children,
 }: PostHogRootProps) {
-  // Undefined until ConsentSync reads the cookie. Starting at "pending" would
-  // render the banner server-side and flash it at everyone who already
-  // answered, since the server cannot see the cookie.
-  const [status, setStatus] = useState<ConsentStatus>();
-  const pathname = usePathname();
-  const locale: Locale = getLocale(localeFromPathname(pathname), true);
-  const labels = getConsentLabels(locale);
+  const userId = identity?.userId;
 
   return (
     <PostHogProvider
@@ -162,18 +103,17 @@ export function PostHogRoot({
         },
         persistence: "cookie",
         opt_out_capturing_by_default: true,
+
+        before_send: withAnalyticsContext({ surface, env }),
+
+        // The one callback guaranteed to run after persistence exists and before
+        // the first pageview. See `applyConsentAndIdentity` for why a component
+        // effect cannot stand in for it.
+        loaded: (posthog) => applyConsentAndIdentity(posthog, userId),
       }}
     >
-      <ConsentSync setStatus={setStatus} />
-      <SuperProperties surface={surface} env={env} />
       {children}
-      <ConsentControls
-        status={status}
-        setStatus={setStatus}
-        labels={labels}
-        locale={locale}
-        surface={surface}
-      />
+      <ConsentControls userId={userId} />
     </PostHogProvider>
   );
 }
diff --git a/packages/observability/src/provider.tsx b/packages/observability/src/provider.tsx
index dd46f26..3fdaf2d 100644
--- a/packages/observability/src/provider.tsx
+++ b/packages/observability/src/provider.tsx
@@ -1,22 +1,20 @@
 import type { ReactNode } from "react";
-import type { AnalyticsSurface } from "./config/types";
+import type { AnalyticsIdentity, AnalyticsSurface } from "./config/types";
 
 import "server-only";
 
 import { resolveObservabilityConfig } from "./config/resolve";
 import { ClientObservabilityRoot } from "./next/client-root";
 
-/**
- * Analytics wrapped around the page, loaded with it. Use on surfaces that read
- * the client through `usePostHog()`. Surfaces that only autocapture should use
- * `@scibly/observability/provider/deferred` instead, which keeps posthog-js out
- * of the initial download.
- */
+/** Use on surfaces that read the client through `usePostHog()`; surfaces that only autocapture should use `@scibly/observability/provider/deferred` instead, which keeps posthog-js out of the initial download. */
 export async function SciblyPostHogProvider({
   surface,
+  identity,
   children,
 }: {
   surface: AnalyticsSurface;
+  // Optional because most surfaces have no session — omitting it does not make the browser anonymous again, only signing out does.
+  identity?: AnalyticsIdentity;
   children: ReactNode;
 }) {
   const config = resolveObservabilityConfig();
@@ -26,7 +24,7 @@ export async function SciblyPostHogProvider({
   }
 
   return (
-    <ClientObservabilityRoot surface={surface} {...config}>
+    <ClientObservabilityRoot surface={surface} identity={identity} {...config}>
       {children}
     </ClientObservabilityRoot>
   );
diff --git a/packages/observability/tsconfig.json b/packages/observability/tsconfig.json
index 6f04327..56181bf 100644
--- a/packages/observability/tsconfig.json
+++ b/packages/observability/tsconfig.json
@@ -4,6 +4,5 @@
     "jsx": "react-jsx",
     "lib": ["ES2023", "DOM", "DOM.Iterable"]
   },
-  "include": ["src/**/*.ts", "src/**/*.tsx", "src/**/*.json"],
-  "exclude": ["src/**/*.test.ts", "src/**/*.test.tsx"]
+  "include": ["src/**/*.ts", "src/**/*.tsx", "src/**/*.json"]
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index c4c8bc3..1720a35 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1211,7 +1211,7 @@ importers:
     dependencies:
       '@posthog/next':
         specifier: ^0.8.0
-        version: 0.8.0(@types/react@19.2.14)(next@16.3.0(@opentelemetry/api@1.9.1)(@playwright/test@1.60.0)(@types/node@20.19.41)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(rxjs@7.8.2)
+        version: 0.8.0(@types/react@19.2.14)(next@16.3.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.1)(@playwright/test@1.60.0)(@types/node@20.19.41)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(rxjs@7.8.2)
       '@posthog/react':
         specifier: ^1.10.3
         version: 1.10.3(@types/react@19.2.14)(posthog-js@1.399.4)(react@19.2.4)
@@ -1224,6 +1224,9 @@ importers:
       '@scibly/next-proxy':
         specifier: workspace:*
         version: link:../next-proxy
+      '@scibly/routes':
+        specifier: workspace:*
+        version: link:../routes
       '@scibly/ui':
         specifier: workspace:*
         version: link:../ui
@@ -10437,28 +10440,36 @@ snapshots:
     optionalDependencies:
       '@opentelemetry/api': 1.9.1
 
-  '@better-auth/drizzle-adapter@1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)':
+  '@better-auth/drizzle-adapter@1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)':
     dependencies:
-      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0)
+      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0)
       '@better-auth/utils': 0.4.0
 
-  '@better-auth/kysely-adapter@1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)(kysely@0.28.17)':
+  '@better-auth/kysely-adapter@1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)(kysely@0.28.17)':
     dependencies:
-      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0)
+      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0)
       '@better-auth/utils': 0.4.0
     optionalDependencies:
       kysely: 0.28.17
 
-  '@better-auth/memory-adapter@1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)':
+  '@better-auth/memory-adapter@1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)':
     dependencies:
-      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0)
+      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0)
       '@better-auth/utils': 0.4.0
 
-  '@better-auth/mongo-adapter@1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)':
+  '@better-auth/mongo-adapter@1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)':
     dependencies:
-      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0)
+      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0)
       '@better-auth/utils': 0.4.0
 
+  '@better-auth/prisma-adapter@1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)(@prisma/client@7.8.0(prisma@7.8.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(magicast@0.5.3)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))(typescript@5.9.3))(prisma@7.8.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(magicast@0.5.3)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))':
+    dependencies:
+      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0)
+      '@better-auth/utils': 0.4.0
+    optionalDependencies:
+      '@prisma/client': 7.8.0(prisma@7.8.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(magicast@0.5.3)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))(typescript@5.9.3)
+      prisma: 7.8.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(magicast@0.5.3)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3)
+
   '@better-auth/prisma-adapter@1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)(@prisma/client@7.8.0(prisma@7.8.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(magicast@0.5.3)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))(typescript@5.9.3))(prisma@7.8.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(magicast@0.5.3)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))':
     dependencies:
       '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0)
@@ -10476,9 +10487,9 @@ snapshots:
       stripe: 20.4.1(@types/node@20.19.41)
       zod: 4.4.3
 
-  '@better-auth/telemetry@1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)':
+  '@better-auth/telemetry@1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)':
     dependencies:
-      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0)
+      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0)
       '@better-auth/utils': 0.4.0
       '@better-fetch/fetch': 1.1.21
 
@@ -11409,7 +11420,7 @@ snapshots:
     dependencies:
       '@posthog/types': 1.393.0
 
-  '@posthog/next@0.8.0(@types/react@19.2.14)(next@16.3.0(@opentelemetry/api@1.9.1)(@playwright/test@1.60.0)(@types/node@20.19.41)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(rxjs@7.8.2)':
+  '@posthog/next@0.8.0(@types/react@19.2.14)(next@16.3.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.1)(@playwright/test@1.60.0)(@types/node@20.19.41)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(rxjs@7.8.2)':
     dependencies:
       '@posthog/core': 1.40.2
       '@posthog/react': 1.10.3(@types/react@19.2.14)(posthog-js@1.399.4)(react@19.2.4)
@@ -13516,7 +13527,7 @@ snapshots:
       obug: 2.1.1
       std-env: 4.1.0
       tinyrainbow: 3.1.0
-      vitest: 4.1.6(@opentelemetry/api@1.9.1)(@types/node@25.9.1)(@vitest/coverage-v8@4.1.6)(@vitest/ui@4.1.6)(happy-dom@20.11.1)(jsdom@26.1.0)(vite@8.0.13(@types/node@25.9.1)(esbuild@0.28.0)(jiti@2.7.0)(tsx@4.22.3))
+      vitest: 4.1.6(@opentelemetry/api@1.9.1)(@types/node@20.19.41)(@vitest/coverage-v8@4.1.6)(@vitest/ui@4.1.6)(happy-dom@20.11.1)(jsdom@26.1.0)(vite@8.0.13(@types/node@20.19.41)(esbuild@0.28.0)(jiti@2.7.0)(tsx@4.22.3))
 
   '@vitest/expect@4.1.6':
     dependencies:
@@ -13578,7 +13589,7 @@ snapshots:
       sirv: 3.0.2
       tinyglobby: 0.2.16
       tinyrainbow: 3.1.0
-      vitest: 4.1.6(@opentelemetry/api@1.9.1)(@types/node@25.9.1)(@vitest/coverage-v8@4.1.6)(@vitest/ui@4.1.6)(happy-dom@20.11.1)(jsdom@26.1.0)(vite@8.0.13(@types/node@25.9.1)(esbuild@0.28.0)(jiti@2.7.0)(tsx@4.22.3))
+      vitest: 4.1.6(@opentelemetry/api@1.9.1)(@types/node@20.19.41)(@vitest/coverage-v8@4.1.6)(@vitest/ui@4.1.6)(happy-dom@20.11.1)(jsdom@26.1.0)(vite@8.0.13(@types/node@20.19.41)(esbuild@0.28.0)(jiti@2.7.0)(tsx@4.22.3))
 
   '@vitest/utils@4.1.6':
     dependencies:
@@ -13852,12 +13863,12 @@ snapshots:
   better-auth@1.6.11(@opentelemetry/api@1.9.1)(@prisma/client@7.8.0(prisma@7.8.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(magicast@0.5.3)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))(typescript@5.9.3))(mysql2@3.15.3)(next@16.3.0(@opentelemetry/api@1.9.1)(@playwright/test@1.60.0)(@types/node@20.19.41)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(pg@8.21.0)(prisma@7.8.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(magicast@0.5.3)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(vitest@4.1.6):
     dependencies:
       '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0)
-      '@better-auth/drizzle-adapter': 1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)
-      '@better-auth/kysely-adapter': 1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)(kysely@0.28.17)
-      '@better-auth/memory-adapter': 1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)
-      '@better-auth/mongo-adapter': 1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)
-      '@better-auth/prisma-adapter': 1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)(@prisma/client@7.8.0(prisma@7.8.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(magicast@0.5.3)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))(typescript@5.9.3))(prisma@7.8.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(magicast@0.5.3)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))
-      '@better-auth/telemetry': 1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.7(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)
+      '@better-auth/drizzle-adapter': 1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)
+      '@better-auth/kysely-adapter': 1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)(kysely@0.28.17)
+      '@better-auth/memory-adapter': 1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)
+      '@better-auth/mongo-adapter': 1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)
+      '@better-auth/prisma-adapter': 1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)(@prisma/client@7.8.0(prisma@7.8.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(magicast@0.5.3)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))(typescript@5.9.3))(prisma@7.8.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(magicast@0.5.3)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))
+      '@better-auth/telemetry': 1.6.11(@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(@opentelemetry/api@1.9.1)(better-call@1.3.5(zod@4.4.3))(jose@6.2.3)(kysely@0.28.17)(nanostores@1.3.0))(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)
       '@better-auth/utils': 0.4.0
       '@better-fetch/fetch': 1.1.21
       '@noble/ciphers': 2.2.0