luchy 0.2.0 → 1.0.1

package/dist/script/luchy.js

@@ -62,9 +62,58 @@ var __async = (__this, __arguments, generator) => {
       language: navigator.language || ((_a = navigator.languages) == null ? void 0 : _a[0]) || "en"
     };
   }
+  function parseProps(raw) {
+    if (!raw) return void 0;
+    try {
+      const value = JSON.parse(raw);
+      if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return void 0;
+      }
+      return value;
+    } catch (e) {
+      return void 0;
+    }
+  }
   function luchy(options) {
     const endpoint = options.endpoint || "https://api.luchy.app/ingest";
-    const { apiKey, trackLocalhost = false } = options;
+    const { apiKey, trackLocalhost = false, script } = options;
+    let identity = options.identity;
+    let props = options.props;
+    function currentIdentity() {
+      if (!script) return identity;
+      return script.getAttribute("data-identity") || void 0;
+    }
+    function currentProps() {
+      if (!script) return props;
+      return parseProps(script.getAttribute("data-props"));
+    }
+    function identify(token, nextProps) {
+      if (!script) {
+        identity = token;
+        props = nextProps;
+        return;
+      }
+      script.setAttribute("data-identity", token);
+      if (nextProps) {
+        script.setAttribute("data-props", JSON.stringify(nextProps));
+      } else {
+        script.removeAttribute("data-props");
+      }
+    }
+    function reset() {
+      if (!script) {
+        identity = void 0;
+        props = void 0;
+        return;
+      }
+      script.removeAttribute("data-identity");
+      script.removeAttribute("data-props");
+    }
+    function withProps(payload) {
+      const global = currentProps();
+      if (!global) return payload;
+      return __spreadValues(__spreadValues({}, global), payload);
+    }
     const shouldTrack = () => {
       if (trackLocalhost) return true;
       return location.hostname !== "localhost" && location.hostname !== "127.0.0.1";
@@ -80,7 +129,9 @@ var __async = (__this, __arguments, generator) => {
           apiKey,
           data: __spreadValues({
             pathname,
-            referrer
+            referrer,
+            payload: withProps(data == null ? void 0 : data.payload),
+            identity: currentIdentity()
           }, browserData)
         });
       });
@@ -100,7 +151,8 @@ var __async = (__this, __arguments, generator) => {
             // `payload`, NOT `props`. The ingest endpoint validates with a
             // non-passthrough zod object, so an unknown key is stripped and the
             // event is stored with no properties at all — 200, success, no data.
-            payload
+            payload: withProps(payload),
+            identity: currentIdentity()
           }, browserData)
         });
       });
@@ -264,11 +316,9 @@ var __async = (__this, __arguments, generator) => {
           const key = attr.name.slice(prefix.length).replace(/-/g, "_");
           payload[key] = attr.value;
         }
-        trackEvent(
-          name,
-          Object.keys(payload).length > 0 ? payload : void 0,
-          { type: "click" }
-        );
+        trackEvent(name, Object.keys(payload).length > 0 ? payload : void 0, {
+          type: "click"
+        });
       };
       document.addEventListener("click", dataEventClickListener);
     }
@@ -313,6 +363,8 @@ var __async = (__this, __arguments, generator) => {
     return {
       trackPageview,
       trackEvent,
+      identify,
+      reset,
       setOptions
     };
   }
@@ -325,7 +377,8 @@ var __async = (__this, __arguments, generator) => {
       const tracker = luchy({
         apiKey,
         endpoint,
-        trackLocalhost
+        trackLocalhost,
+        script
       });
       const autoPageviewsAttr = script.getAttribute("data-auto-pageviews");
       const autoOutboundAttr = script.getAttribute("data-auto-outbound");

package/dist/script/luchy.min.js

@@ -62,9 +62,58 @@ var __async = (__this, __arguments, generator) => {
       language: navigator.language || ((_a = navigator.languages) == null ? void 0 : _a[0]) || "en"
     };
   }
+  function parseProps(raw) {
+    if (!raw) return void 0;
+    try {
+      const value = JSON.parse(raw);
+      if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return void 0;
+      }
+      return value;
+    } catch (e) {
+      return void 0;
+    }
+  }
   function luchy(options) {
     const endpoint = options.endpoint || "https://api.luchy.app/ingest";
-    const { apiKey, trackLocalhost = false } = options;
+    const { apiKey, trackLocalhost = false, script } = options;
+    let identity = options.identity;
+    let props = options.props;
+    function currentIdentity() {
+      if (!script) return identity;
+      return script.getAttribute("data-identity") || void 0;
+    }
+    function currentProps() {
+      if (!script) return props;
+      return parseProps(script.getAttribute("data-props"));
+    }
+    function identify(token, nextProps) {
+      if (!script) {
+        identity = token;
+        props = nextProps;
+        return;
+      }
+      script.setAttribute("data-identity", token);
+      if (nextProps) {
+        script.setAttribute("data-props", JSON.stringify(nextProps));
+      } else {
+        script.removeAttribute("data-props");
+      }
+    }
+    function reset() {
+      if (!script) {
+        identity = void 0;
+        props = void 0;
+        return;
+      }
+      script.removeAttribute("data-identity");
+      script.removeAttribute("data-props");
+    }
+    function withProps(payload) {
+      const global = currentProps();
+      if (!global) return payload;
+      return __spreadValues(__spreadValues({}, global), payload);
+    }
     const shouldTrack = () => {
       if (trackLocalhost) return true;
       return location.hostname !== "localhost" && location.hostname !== "127.0.0.1";
@@ -80,7 +129,9 @@ var __async = (__this, __arguments, generator) => {
           apiKey,
           data: __spreadValues({
             pathname,
-            referrer
+            referrer,
+            payload: withProps(data == null ? void 0 : data.payload),
+            identity: currentIdentity()
           }, browserData)
         });
       });
@@ -100,7 +151,8 @@ var __async = (__this, __arguments, generator) => {
             // `payload`, NOT `props`. The ingest endpoint validates with a
             // non-passthrough zod object, so an unknown key is stripped and the
             // event is stored with no properties at all — 200, success, no data.
-            payload
+            payload: withProps(payload),
+            identity: currentIdentity()
           }, browserData)
         });
       });
@@ -264,11 +316,9 @@ var __async = (__this, __arguments, generator) => {
           const key = attr.name.slice(prefix.length).replace(/-/g, "_");
           payload[key] = attr.value;
         }
-        trackEvent(
-          name,
-          Object.keys(payload).length > 0 ? payload : void 0,
-          { type: "click" }
-        );
+        trackEvent(name, Object.keys(payload).length > 0 ? payload : void 0, {
+          type: "click"
+        });
       };
       document.addEventListener("click", dataEventClickListener);
     }
@@ -313,6 +363,8 @@ var __async = (__this, __arguments, generator) => {
     return {
       trackPageview,
       trackEvent,
+      identify,
+      reset,
       setOptions
     };
   }
@@ -325,7 +377,8 @@ var __async = (__this, __arguments, generator) => {
       const tracker = luchy({
         apiKey,
         endpoint,
-        trackLocalhost
+        trackLocalhost,
+        script
       });
       const autoPageviewsAttr = script.getAttribute("data-auto-pageviews");
       const autoOutboundAttr = script.getAttribute("data-auto-outbound");

package/dist/server.d.ts

@@ -1,35 +1,61 @@
+import { signIdentity, LuchyIdentity } from './identity.js';
 /**
  * Server-side tracking.
  *
- * The browser tracker (`./index.ts`) can only see what happens in a page. A
- * server sees what the application actually *did* — an order placed, a payment
- * recorded, a webhook processed — and those are usually the events worth
- * having. This entry point carries no browser globals (`window`, `document`,
- * `location`, `navigator`), so it runs in Node, Bun, Deno and Cloudflare
- * Workers.
+ * The browser script only sees what happens in a page. A server sees what the
+ * application actually *did* — an order placed, a payment recorded, a webhook
+ * processed — and those are usually the events worth having. No browser
+ * globals here, so it runs in Node, Bun, Deno and Cloudflare Workers.
  *
- * It exists mostly so that callers stop hand-rolling `fetch` against the
- * ingest API: doing that is how the `props`/`payload` field-name split shipped
- * unnoticed, since nothing typed the wire format for a non-browser sender.
+ * The wire format lives in `./api` (generated from the API's OpenAPI
+ * document); this module is the ergonomic face of it plus identity signing
+ * and person profiles (`identify`).
  *
- * The transport now lives in `./api`, generated from the API's own OpenAPI
- * document, so the wire format is no longer restated here at all. This module
- * is the ergonomic face of it: two methods, no client object to hold.
+ * @module
  */
-export type LuchyServerOptions = {
+export { signIdentity, type LuchyIdentity };
+/** A property bag. Nested objects are not supported by the ingest API. */
+export type LuchyPayload = Record<string, string | number | boolean>;
+/**
+ * Person profile traits. Merged into the stored profile; `null` deletes a
+ * trait. The dashboard labels a person by `name`, else `email`, else the id.
+ */
+export type LuchyTraits = Record<string, string | number | boolean | null>;
+export type LuchyOptions = {
     apiKey: string;
-    /** Defaults to the hosted ingest API. */
+    /**
+     * The project's secret key (`lsk_…`, from the dashboard settings).
+     * Without it identities passed to `track`/`pageview` are not sent (ingest
+     * drops unsigned identities anyway, so sending one would only look like it
+     * worked) and `identify` is a no-op. Server-side only: never ship it.
+     */
+    secret?: string;
+    /** The ingest base, without a trailing slash. Defaults to the hosted API. */
     endpoint?: string;
     /**
-     * Called when an event fails to reach the ingest API. Analytics must never
-     * break the request it is describing, so failures are swallowed by default —
-     * pass this to log them.
+     * Defaults to `true`. When false every call is a no-op, so apps can pass
+     * `env.APP_ENV === 'production'` and leave the wiring in place.
+     */
+    enabled?: boolean;
+    /**
+     * Called when a hit fails to reach ingest. Analytics must never break the
+     * request it describes, so failures are swallowed unless you log them here.
      */
     onError?: (error: unknown) => void;
+    /** Transport override, for tests and scoped runtimes (service bindings). */
+    fetch?: typeof globalThis.fetch;
 };
-/** A property bag. Nested objects are not supported by the ingest API. */
-export type LuchyPayload = Record<string, string | number | boolean>;
-export type LuchyServerEvent = {
+/** What the end user's request looked like, for hits caused by one. */
+export type LuchyRequestInfo = {
+    /** Forward the end user's UA so the hit joins their browser session. */
+    userAgent?: string;
+    /** The end user's IP. Only used for the visitor hash, never stored. */
+    ip?: string;
+    /** ISO country code. Wins over the sender's own `cf-ipcountry`. */
+    country?: string;
+    language?: string;
+};
+export type LuchyServerEvent = LuchyRequestInfo & {
     /** The event name, e.g. `order:placed`. */
     name: string;
     /** Where it happened — a route, not a raw URL with ids in it. */
@@ -37,35 +63,41 @@ export type LuchyServerEvent = {
     /** Free-form category, e.g. `server`, `webhook`, `cron`. */
     type?: string;
     payload?: LuchyPayload;
-    /** Forward the end user's UA when the event was caused by a request. */
-    userAgent?: string;
-    language?: string;
-    /** ISO country code. Cloudflare deployments can leave this to the server. */
-    country?: string;
 };
-export type LuchyServerPageview = {
+export type LuchyServerPageview = LuchyRequestInfo & {
     pathname: string;
     referrer?: string;
-    userAgent?: string;
-    language?: string;
-    country?: string;
+    payload?: LuchyPayload;
 };
-export type LuchyServerTracker = {
-    trackEvent(event: LuchyServerEvent): Promise<void>;
-    trackPageview(pageview: LuchyServerPageview): Promise<void>;
+/**
+ * An identity to sign, or a token that is already signed (e.g. one rendered
+ * into the page and posted back).
+ */
+export type LuchyIdentityInput = LuchyIdentity | string;
+export type Luchy = {
+    track(event: LuchyServerEvent, identity?: LuchyIdentityInput): Promise<void>;
+    pageview(pageview: LuchyServerPageview, identity?: LuchyIdentityInput): Promise<void>;
+    /**
+     * Stores profile traits for a user (`POST /ingest/identify`, authenticated
+     * with the secret key). Idempotent: traits merge, `null` deletes one.
+     */
+    identify(user: string, traits: LuchyTraits): Promise<void>;
 };
+/** The hosted ingest base. */
+export declare const DEFAULT_ENDPOINT = "https://dash.luchy.app/api/ingest";
 /**
  * Creates a server-side tracker. Every method resolves rather than rejects —
  * see `onError`.
  *
  * ```ts
- * const luchy = createServerTracker({ apiKey: process.env.LUCHY_API_KEY! });
- * await luchy.trackEvent({
- *   name: 'order:placed',
- *   pathname: '/checkout',
- *   payload: { plan: 'pro', amount: 29 }
- * });
+ * const luchy = createLuchy({ apiKey: env.LUCHY_API_KEY, secret: env.LUCHY_SECRET });
+ * ctx.waitUntil(
+ *   luchy.track(
+ *     { name: 'order:placed', pathname: '/checkout', payload: { plan: 'pro' } },
+ *     { user: user.id, tenant: String(workspace.id) }
+ *   )
+ * );
  * ```
  */
-export declare function createServerTracker(options: LuchyServerOptions): LuchyServerTracker;
+export declare function createLuchy(options: LuchyOptions): Luchy;
 //# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;AAErE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,UAAU,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,aAAa,CAAC,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D,CAAC;AAcF;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,kBAAkB,GAC1B,kBAAkB,CAkCpB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAEjE;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,CAAC;AAE5C,0EAA0E;AAC1E,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;AAErE;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;AAE3E,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,4EAA4E;IAC5E,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACjC,CAAC;AAEF,uEAAuE;AACvE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,GAAG;IAChD,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAAG,MAAM,CAAC;AAExD,MAAM,MAAM,KAAK,GAAG;IAClB,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,QAAQ,CACN,QAAQ,EAAE,mBAAmB,EAC7B,QAAQ,CAAC,EAAE,kBAAkB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D,CAAC;AAEF,8BAA8B;AAC9B,eAAO,MAAM,gBAAgB,sCAAsC,CAAC;AAWpE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,KAAK,CAiHxD"}

package/dist/server.js

@@ -1,40 +1,128 @@
-import { createLuchyClient } from "./api/index.js";
-const DEFAULT_ENDPOINT = "https://api.luchy.app/ingest";
+import { createLuchyClient, LuchyApiError } from "./api/index.js";
+const encoder = new TextEncoder();
+function base64url(bytes) {
+  let binary = "";
+  for (const byte of bytes) {
+    binary += String.fromCharCode(byte);
+  }
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+async function signIdentity(identity, secret) {
+  const claims = { u: identity.user, a: identity.actor, t: identity.tenant };
+  const body = base64url(encoder.encode(JSON.stringify(claims)));
+  const key = await crypto.subtle.importKey(
+    "raw",
+    encoder.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const signature = await crypto.subtle.sign("HMAC", key, encoder.encode(body));
+  return `${body}.${base64url(new Uint8Array(signature))}`;
+}
+const DEFAULT_ENDPOINT = "https://dash.luchy.app/api/ingest";
 function apiBaseFrom(endpoint) {
-  const withoutSlash = endpoint.replace(/\/+$/, "");
-  return withoutSlash.replace(/\/ingest$/, "");
+  return endpoint.replace(/\/+$/, "").replace(/\/ingest$/, "");
 }
-function createServerTracker(options) {
+function createLuchy(options) {
+  const enabled = options.enabled ?? true;
   const client = createLuchyClient({
     apiKey: options.apiKey,
     endpoint: apiBaseFrom(options.endpoint || DEFAULT_ENDPOINT),
+    fetch: options.fetch,
     onError: options.onError
   });
+  const secretApi = options.secret ? createLuchyClient({
+    apiKey: options.secret,
+    endpoint: apiBaseFrom(options.endpoint || DEFAULT_ENDPOINT),
+    fetch: options.fetch
+  }).api : void 0;
+  let reportedMissingSecret = false;
+  async function tokenFor(identity) {
+    if (!identity) {
+      return void 0;
+    }
+    if (typeof identity === "string") {
+      return identity;
+    }
+    if (!options.secret) {
+      return void 0;
+    }
+    return signIdentity(identity, options.secret);
+  }
   return {
-    async trackEvent(event) {
-      const body = {
-        name: event.name,
-        type: event.type,
-        pathname: event.pathname,
-        payload: event.payload,
-        userAgent: event.userAgent,
-        language: event.language,
-        country: event.country
-      };
-      await client.trackEvent(body);
+    async track(event, identity) {
+      if (!enabled) {
+        return;
+      }
+      try {
+        await client.trackEvent({
+          name: event.name,
+          type: event.type,
+          pathname: event.pathname,
+          payload: event.payload,
+          identity: await tokenFor(identity),
+          userAgent: event.userAgent,
+          ip: event.ip,
+          country: event.country,
+          language: event.language
+        });
+      } catch (error) {
+        options.onError?.(error);
+      }
+    },
+    async pageview(pageview, identity) {
+      if (!enabled) {
+        return;
+      }
+      try {
+        await client.trackPageview({
+          pathname: pageview.pathname,
+          referrer: pageview.referrer,
+          payload: pageview.payload,
+          identity: await tokenFor(identity),
+          userAgent: pageview.userAgent,
+          ip: pageview.ip,
+          country: pageview.country,
+          language: pageview.language
+        });
+      } catch (error) {
+        options.onError?.(error);
+      }
     },
-    async trackPageview(pageview) {
-      const body = {
-        pathname: pageview.pathname,
-        referrer: pageview.referrer,
-        userAgent: pageview.userAgent,
-        language: pageview.language,
-        country: pageview.country
-      };
-      await client.trackPageview(body);
+    async identify(user, traits) {
+      if (!enabled) {
+        return;
+      }
+      if (!secretApi) {
+        if (!reportedMissingSecret) {
+          reportedMissingSecret = true;
+          options.onError?.(
+            new Error("luchy: identify needs the `secret` option; skipped")
+          );
+        }
+        return;
+      }
+      try {
+        const { error, response } = await secretApi.POST("/ingest/identify", {
+          body: { user, traits }
+        });
+        if (error || !response.ok) {
+          options.onError?.(
+            new LuchyApiError(
+              `Luchy identify failed with ${response.status}`,
+              response.status
+            )
+          );
+        }
+      } catch (error) {
+        options.onError?.(error);
+      }
     }
   };
 }
 export {
-  createServerTracker
+  DEFAULT_ENDPOINT,
+  createLuchy,
+  signIdentity
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "luchy",
-  "version": "0.2.0",
-  "description": "Luchy tracking - browser script + server-side tracker",
+  "version": "1.0.1",
+  "description": "Luchy tracking - browser script, server tracker and React Router middleware",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -55,8 +55,11 @@
   },
   "devDependencies": {
     "@types/node": "^24.7.0",
+    "@types/react": "^19.2.2",
     "jsdom": "^25.0.1",
     "openapi-typescript": "^7.13.0",
+    "react": "^19.2.0",
+    "react-router": "^7.14.0",
     "terser": "^5.37.0",
     "tsx": "^4.20.6",
     "typescript": "^5.9.3",
@@ -68,5 +71,17 @@
   },
   "dependencies": {
     "openapi-fetch": "^0.17.0"
+  },
+  "peerDependencies": {
+    "react": ">=18",
+    "react-router": ">=7.9.0"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    },
+    "react-router": {
+      "optional": true
+    }
   }
 }