Changelog

v0.8.1 — 2026-07-18

/report — the live dashboard: the full report rendered per request, per-site read key, zero-JS period links; vigie report --site X prints the URL

Entry/exit pages aggregate breakdowns (stats entry-pages|exit-pages)
Traffic heatmap (stats heatmap, weekday × hour) — colored grid in the report
Event properties aggregation (stats event-props, SQLite JSON1)
Report now has 22 sections; see the fully-populated demo report

The snapshot is now the full report — every captured metric in one hart-publishable page (channels, regions/cities, OS/screens/languages, vitals, goals, errors, journeys…); empty sections auto-omit.

Geo depth: a pure-MFL MaxMind-DB reader — country/region/city/lat,lon from a local .mmdb (DB-IP City Lite, CC BY 4.0, or GeoLite2). New dims regions, cities.
City dots on the globe — real coordinates, sized by visitors, pulsing when active.
Fix: VIGIE_TRUST_PROXY=1 — proxied deployments previously hashed every visitor under the proxy IP.

User journeys: stats journeys — per-session path edges + top 3-step sequences (the sankey, as JSON)
Channels: stats channels — direct/organic/social/paid/campaign/referral from ref+UTM
Browser versions: stats browser-versions
User profiles: users list/show + GET /api/users

New captures: OS (+major version), screen size, language — dims stats os|screens|languages
Choropleth globe: country-tagged 1.5° dot grid (1.8× denser) tints green by 24h visitors + atmosphere glow — still zero external assets

The war-room: GET /globe?site=&key= — vigie serves the live globe itself, polling its own live feed every 5s (same-origin). Sub-10s pulse latency.
Per-site read keys: site_key is now a scoped, revocable read credential (live aggregates on one site only); vigie site key / site rotate-key.

Globe: drag to pan (mouse/touch) — grabbing the planet stops the auto-rotation, double-click resumes the spin
snapshot --publish gains --title

Rybbit core-feature alignment, the agent-first way.

Realtime: vigie stats live + GET /api/stats/live — last-5-min actives, pages, countries, latest hits
Real geo: the hosted ingest rides the Cloudflare proxy → CF-IPCountry on every event
The globe: vigie snapshot --globe --publish --live — a self-contained rotating world map that becomes a living hart artifact: hart pulls the live feed and the globe repaints while you watch (see it live)
Session explorer: vigie sessions list/show — per-session rollups + the full ordered event trail
Retention cohorts: weekly cohorts over identified users (window.vigie.identify()); the daily-rotating hash can't follow people across days — by design
Web vitals: auto-collected LCP/FCP/CLS/INP/TTFB → vigie stats vitals (p50/p75/p90)
Error tracking: auto-captured JS errors → vigie stats errors grouped with counts + last seen

Fix (important): vigie update resolved its own path via a child process's /proc/self/exe — where "self" is the child, so the atomic swap could target the wrong binary. Now resolves argv[0] via PATH lookup + readlink -f. The v0.3.0 release was pulled.

First public release. Everything below shipped in one day, built and verified end-to-end by an agent.

HTTP stats API mirroring every stats verb: GET /api/stats/<dim> (overview, timeseries, goals + 9 breakdowns) with query-param filters
GET /api/snapshot?site= — the HTML dashboard over HTTP
POST /api/sites?domain= — remote site registration
All gated by VIGIE_ADMIN_TOKEN (Bearer); ingest + snippet always open
Hosted instance: vigie.intrane.fr

Goals: --kind event|path, /path* prefix matching, per-session conversion rates
Ordered funnels: per-session step progression with drop-off percentages
vigie snapshot: self-contained dark-mode HTML report (SVG charts, zero external assets); --publish POSTs it to a hart instance → live shareable URL

stats timeseries (hour/day buckets) + 9 breakdown dimensions (pages, referrers, countries, devices, browsers, events, utm-*)
Dimension filters (--path --country --device --browser --ref --utm-source) on every query
cli-specs compliance: guide, help-json, feedback (dual-write relay), update (sha256-verified, smoke-tested, atomic swap with .bak rollback), semantic exit codes 80–119
vigie prune — retention

Cookieless ingest: visitor = sha256(secret + day + site + ip + ua)[0:16], daily salt rotation, raw IP never stored
Sessions (30-min inactivity window), bounce rate, referrer cleaning, UTM capture
<1 KB JS snippet with SPA pushState tracking + window.vigie(name, props)
Server-side events: vigie track — agents/backends as first-class tracked users
Country from CF-IPCountry, device/browser from UA, SQLite (WAL) storage