featurely-site-manager 1.1.5 → 1.1.6

package/README.md

@@ -63,9 +63,11 @@ siteManager.init();
 
 ### 📊 Analytics
 
+- Automatic page view tracking (SPA-compatible)
+- Session start and end tracking
+- User login event tracking
+- Page exit tracking with time-on-page duration
 - Track custom events
-- Automatic feature flag usage tracking
-- Session management
 - User identification
 
 ## 📖 Usage
@@ -216,6 +218,7 @@ const manager = new SiteManager({
 });
 
 manager.init();
+// Automatically tracks: session_start, page_view, page_exit on every navigation
 
 // Track custom events
 manager.trackEvent("button_clicked", {
@@ -223,12 +226,25 @@ manager.trackEvent("button_clicked", {
   page: "/home",
 });
 
-manager.trackEvent("feature_used", {
-  feature: "dark_mode",
-  enabled: true,
+manager.trackEvent("purchase_completed", {
+  amount: 99.99,
+  plan: "pro",
 });
 ```
 
+#### Automatic Events
+
+When `enableAnalytics` is `true` (default), the SDK automatically tracks:
+
+| Event | When | Properties |
+| --- | --- | --- |
+| `session_start` | On first page load | `path`, `title`, `referrer` |
+| `page_view` | On every page navigation | `path`, `title`, `referrer`, `isLoggedIn`, `userId?`, `userEmail?` |
+| `page_exit` | When navigating away from a page | `path`, `durationSeconds` |
+| `user_login` | First time `setUser()` is called with a userId | `userId`, `userEmail?`, `userName?` |
+
+Page tracking is SPA-compatible — it patches `history.pushState` and `history.replaceState` and listens to `popstate` so navigations in React, Next.js, Vue, and similar frameworks are captured automatically.
+
 ### Custom Poll Interval
 
 ```typescript
@@ -280,12 +296,12 @@ Initialize and start the site manager.
 await manager.init();
 ```
 
-#### `setUser(email: string, userId?: string)`
+#### `setUser(email: string, userId?: string, userName?: string)`
 
-Update user email and ID for whitelist and targeting.
+Update user context for whitelist, targeting, and analytics. If `userId` is provided for the first time, a `user_login` analytics event is fired automatically.
 
 ```typescript
-manager.setUser("user@example.com", "user_123");
+manager.setUser("user@example.com", "user_123", "Jane Doe");
 ```
 
 #### `refresh()`
@@ -464,56 +480,29 @@ const manager = new SiteManager({
 manager.init();
 ```
 
-## 🔧 Configuration
+## 🔒 Content Security Policy (CSP)
 
-### SiteManagerConfig
-
-| Option                  | Type            | Required | Default                   | Description                   |
-| ----------------------- | --------------- | -------- | ------------------------- | ----------------------------- |
-| `apiKey`                | `string`        | ✅       | -                         | Your Featurely API key        |
-| `projectId`             | `string`        | ✅       | -                         | Your Featurely project ID     |
-| `apiUrl`                | `string`        | ❌       | `'https://featurely.no'` | Custom API endpoint           |
-| `pollInterval`          | `number`        | ❌       | `60000`                   | Polling interval in ms        |
-| `userEmail`             | `string`        | ❌       | -                         | User email for whitelist      |
-| `bypassCheck`           | `() => boolean` | ❌       | -                         | Custom bypass function        |
-| `onMaintenanceEnabled`  | `function`      | ❌       | -                         | Maintenance enabled callback  |
-| `onMaintenanceDisabled` | `function`      | ❌       | -                         | Maintenance disabled callback |
-| `onMessageReceived`     | `function`      | ❌       | -                         | Message received callback     |
-| `onMessageDismissed`    | `function`      | ❌       | -                         | Message dismissed callback    |
-| `onError`               | `function`      | ❌       | -                         | Error callback                |
-
-## 🎯 API Methods
+If your site uses a `Content-Security-Policy` header, you must allow connections to `https://www.featurely.no`. Without this, all API calls (config polling, analytics, feature flags) will be silently blocked.
 
-### `init()`
+Add the following to your `connect-src` directive:
 
-Initialize and start the site manager.
-
-```typescript
-await manager.init();
 ```
-
-### `setUser(email: string)`
-
-Update user email for whitelist checks.
-
-```typescript
-manager.setUser("user@example.com");
+connect-src 'self' https://www.featurely.no;
 ```
 
-### `refresh()`
-
-Manually refresh configuration from server.
+**Next.js example** (`next.config.js`):
 
-```typescript
-await manager.refresh();
+```javascript
+const cspHeader = `
+  connect-src 'self' https://www.featurely.no;
+`.trim();
 ```
 
-### `destroy()`
-
-Stop the manager and clean up.
+If the SDK is being blocked by CSP, you will see a message like this in the browser console:
 
-```typescript
-manager.destroy();
+```
+[SiteManager] ⚠️ Connection to Featurely was blocked — check your Content-Security-Policy.
+Add "https://www.featurely.no" to your connect-src directive.
 ```
 
 ## 🎨 Maintenance Mode

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "featurely-site-manager",
-  "version": "1.1.5",
+  "version": "1.1.6",
   "description": "Complete site management SDK for maintenance mode, status messages, feature flags, version checking, and analytics",
   "main": "dist/index.js",
   "module": "dist/index.mjs",