@avsbhq/node 1.0.0 → 1.2.0

package/README.md

@@ -49,13 +49,13 @@ Instantiate `AvsbServer` once at app boot. The server holds the datafile in memo
 
 ## 3. SDK keys
 
-Use a **server** SDK key (prefix `sdk-server-`). Get it from your A vs B project's Environments page.
+Get the SDK key for the environment you want to target from your A vs B project's Environments page. The key format is `sdk_<environment>_<id>` (e.g. `sdk_production_clp1a2b3c4d5e6`).
 
 ```bash
-AVSB_SDK_KEY=sdk-server-...
+AVSB_SDK_KEY=sdk_production_...
 ```
 
-Server SDK keys grant full flag-read access. Store them in environment variables only — never in source code, client bundles, or browser-accessible config.
+When used server-side, the SDK key only ever needs to leave the server to hit the datafile CDN — it should never end up in client-rendered HTML, browser bundles, or browser-accessible config. Store it in environment variables only.
 
 Server SDK keys cannot be rotated without a process restart; the new key must be set in the environment before the server boots (or trigger a rolling restart in your orchestrator).
 

package/dist/index.cjs

@@ -29,7 +29,7 @@ __export(index_exports, {
   consoleTransport: () => import_core3.consoleTransport,
   createDecisionLog: () => createDecisionLog,
   createLogger: () => import_core3.createLogger,
-  createStreamingClient: () => createStreamingClient,
+  createStreamingClient: () => import_streaming.createStreamingClient,
   expressMiddleware: () => expressMiddleware,
   fastifyPlugin: () => fastifyPlugin,
   noopLogger: () => import_core3.noopLogger
@@ -46,6 +46,9 @@ function createDecisionLog() {
   return { entries };
 }
 
+// src/serverTracker.ts
+var import_node_crypto = require("crypto");
+
 // src/reconnectBackoff.ts
 var BASE_DELAY_MS = 1e3;
 var MAX_DELAY_MS = 6e4;
@@ -74,6 +77,12 @@ function parseRetryAfter(headerValue) {
 }
 
 // src/serverTracker.ts
+function stampExposure(event) {
+  return event.eventId ? event : { ...event, eventId: (0, import_node_crypto.randomUUID)() };
+}
+function stampMetric(event) {
+  return event.eventId ? event : { ...event, eventId: (0, import_node_crypto.randomUUID)() };
+}
 function createServerTracker(options) {
   const {
     sdkKey,
@@ -86,6 +95,7 @@ function createServerTracker(options) {
   } = options;
   const batchEndpoint = collectEndpoint.replace(/\/?$/, "/v1/collect/batch");
   const metricEndpoint = collectEndpoint.replace(/\/?$/, "/v1/collect/metric-batch");
+  const ordersEndpoint = collectEndpoint.replace(/\/?$/, "/v1/collect/orders");
   let exposureQueue = [];
   let metricQueue = [];
   let flushTimer = null;
@@ -97,7 +107,7 @@ function createServerTracker(options) {
   }, flushInterval);
   function queue(event) {
     if (destroyed) return;
-    exposureQueue.push(event);
+    exposureQueue.push(stampExposure(event));
     if (exposureQueue.length > maxQueueSize) {
       const dropped = exposureQueue.length - maxQueueSize;
       exposureQueue = exposureQueue.slice(-maxQueueSize);
@@ -111,7 +121,7 @@ function createServerTracker(options) {
   }
   function queueMetric(event) {
     if (destroyed) return;
-    metricQueue.push(event);
+    metricQueue.push(stampMetric(event));
     if (metricQueue.length > maxQueueSize) {
       const dropped = metricQueue.length - maxQueueSize;
       metricQueue = metricQueue.slice(-maxQueueSize);
@@ -173,6 +183,47 @@ function createServerTracker(options) {
       }
     }
   }
+  async function trackPurchase(visitorId, order) {
+    if (destroyed) return;
+    const payload = {
+      ...order,
+      eventId: (0, import_node_crypto.randomUUID)(),
+      visitorId,
+      timestamp: Date.now(),
+      pageUrl: ""
+    };
+    const body = JSON.stringify({ sdkKey, orders: [payload] });
+    let backoff = resetBackoff();
+    let pendingRetryAfterMs = void 0;
+    for (let attempt = 0; attempt <= retryAttempts; attempt++) {
+      try {
+        const response = await fetch(ordersEndpoint, {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body,
+          signal: AbortSignal.timeout(1e4)
+        });
+        if (!response.ok) {
+          const parsed = parseRetryAfter(response.headers.get("retry-after"));
+          if (parsed !== null) pendingRetryAfterMs = parsed;
+          throw new Error(`HTTP ${response.status}`);
+        }
+        logger.debug(`Purchase order ${order.orderId} sent for visitor ${visitorId}`);
+        return;
+      } catch (e) {
+        if (attempt < retryAttempts) {
+          backoff = nextBackoff(backoff, pendingRetryAfterMs);
+          pendingRetryAfterMs = void 0;
+          await new Promise((r) => setTimeout(r, backoff.delayMs));
+        } else {
+          logger.error(
+            `Failed to send purchase order ${order.orderId} after ${retryAttempts} retries`,
+            { endpoint: ordersEndpoint, error: String(e) }
+          );
+        }
+      }
+    }
+  }
   async function destroy() {
     destroyed = true;
     if (flushTimer) {
@@ -181,183 +232,11 @@ function createServerTracker(options) {
     }
     await flush();
   }
-  return { queue, queueMetric, flush, destroy };
+  return { queue, queueMetric, trackPurchase, flush, destroy };
 }
 
 // src/streaming.ts
-function createStreamingClient(options) {
-  const {
-    endpoint,
-    sdkKey,
-    onDatafileUpdated,
-    logger,
-    reconnectDelay
-  } = options;
-  let connected = false;
-  let abortController = null;
-  let reconnectTimer = null;
-  let backoff = resetBackoff();
-  let pendingRetryAfterMs = void 0;
-  function connect() {
-    if (connected) return;
-    void startConnection();
-  }
-  function disconnect() {
-    connected = false;
-    if (abortController) {
-      abortController.abort();
-      abortController = null;
-    }
-    if (reconnectTimer) {
-      clearTimeout(reconnectTimer);
-      reconnectTimer = null;
-    }
-  }
-  function isConnected() {
-    return connected;
-  }
-  async function fetchTicket(signal) {
-    const ticketUrl = `${endpoint}?sdkKey=${encodeURIComponent(sdkKey)}`;
-    try {
-      const res = await fetch(ticketUrl, { signal });
-      if (!res.ok) {
-        logger.warn("SSE ticket fetch failed", { status: res.status, url: ticketUrl });
-        return null;
-      }
-      const body = await res.json();
-      if (!body?.url || !body?.token) {
-        logger.warn("SSE ticket response missing fields");
-        return null;
-      }
-      return body;
-    } catch (e) {
-      if (signal.aborted) return null;
-      logger.warn("SSE ticket fetch error", { error: String(e) });
-      return null;
-    }
-  }
-  async function startConnection() {
-    abortController = new AbortController();
-    const signal = abortController.signal;
-    const ticket = await fetchTicket(signal);
-    if (!ticket || signal.aborted) {
-      if (!signal.aborted) scheduleReconnect();
-      return;
-    }
-    const streamUrl = `${ticket.url}?sdkKey=${encodeURIComponent(sdkKey)}&token=${encodeURIComponent(ticket.token)}`;
-    try {
-      const response = await fetch(streamUrl, {
-        headers: { Accept: "text/event-stream" },
-        signal
-      });
-      if (response.status === 401) {
-        logger.warn("SSE stream rejected token; refetching ticket");
-        const next = await fetchTicket(signal);
-        if (!next || signal.aborted) {
-          if (!signal.aborted) scheduleReconnect();
-          return;
-        }
-        const retryUrl = `${next.url}?sdkKey=${encodeURIComponent(sdkKey)}&token=${encodeURIComponent(next.token)}`;
-        const retry = await fetch(retryUrl, {
-          headers: { Accept: "text/event-stream" },
-          signal
-        });
-        if (!retry.ok || !retry.body) {
-          logger.warn("SSE retry failed", { status: retry.status });
-          recordRetryAfter(retry.headers.get("retry-after"));
-          scheduleReconnect();
-          return;
-        }
-        await pumpFrames(retry, signal);
-        return;
-      }
-      if (response.status === 429) {
-        recordRetryAfter(response.headers.get("retry-after"));
-        logger.warn("SSE rate-limited", { status: 429 });
-        scheduleReconnect();
-        return;
-      }
-      if (!response.ok) {
-        logger.warn("SSE connection failed", { status: response.status, url: streamUrl });
-        recordRetryAfter(response.headers.get("retry-after"));
-        scheduleReconnect();
-        return;
-      }
-      if (!response.body) {
-        logger.warn("SSE response has no body");
-        scheduleReconnect();
-        return;
-      }
-      await pumpFrames(response, signal);
-    } catch (e) {
-      if (signal.aborted) return;
-      logger.warn("SSE connection error", { error: String(e) });
-      connected = false;
-      scheduleReconnect();
-    }
-  }
-  function recordRetryAfter(headerValue) {
-    const parsed = parseRetryAfter(headerValue);
-    if (parsed !== null) pendingRetryAfterMs = parsed;
-  }
-  async function pumpFrames(response, signal) {
-    connected = true;
-    backoff = resetBackoff();
-    pendingRetryAfterMs = void 0;
-    logger.info(`SSE connected to ${endpoint}`);
-    const reader = response.body.getReader();
-    const decoder = new TextDecoder();
-    let buffer = "";
-    try {
-      while (true) {
-        const { done, value } = await reader.read();
-        if (done) break;
-        buffer += decoder.decode(value, { stream: true });
-        const lines = buffer.split("\n");
-        buffer = lines.pop() ?? "";
-        for (const line of lines) {
-          if (line.startsWith("data: ")) {
-            const data = line.slice(6).trim();
-            if (!data) continue;
-            try {
-              const parsed = JSON.parse(data);
-              if (parsed.type === "datafile_updated") {
-                onDatafileUpdated();
-              }
-            } catch {
-              logger.warn("Failed to parse SSE data", { data });
-            }
-          }
-        }
-      }
-    } catch (e) {
-      if (signal.aborted) return;
-      logger.warn("SSE stream read error", { error: String(e) });
-    }
-    connected = false;
-    scheduleReconnect();
-  }
-  function scheduleReconnect() {
-    if (reconnectTimer) return;
-    if (typeof reconnectDelay === "number") {
-      reconnectTimer = setTimeout(() => {
-        reconnectTimer = null;
-        void startConnection();
-      }, reconnectDelay);
-      return;
-    }
-    backoff = nextBackoff(backoff, pendingRetryAfterMs);
-    pendingRetryAfterMs = void 0;
-    logger.warn(
-      `SSE reconnect attempt ${backoff.attempt} in ${backoff.delayMs}ms`
-    );
-    reconnectTimer = setTimeout(() => {
-      reconnectTimer = null;
-      void startConnection();
-    }, backoff.delayMs);
-  }
-  return { connect, disconnect, isConnected };
-}
+var import_streaming = require("@avsbhq/utils/streaming");
 
 // src/version.ts
 var SDK_VERSION = "0.3.0";
@@ -720,6 +599,16 @@ var AvsbServer = class {
     return out;
   }
   // ---------------------------------------------------------------------------
+  // Purchase tracking — fires immediately to /v1/collect/orders
+  // ---------------------------------------------------------------------------
+  async trackPurchase(visitorId, order) {
+    if (!this.tracker) {
+      this.logger.warn("trackPurchase called before tracker is ready; order dropped");
+      return;
+    }
+    return this.tracker.trackPurchase(visitorId, order);
+  }
+  // ---------------------------------------------------------------------------
   // §5.6 Unified track — context required
   // ---------------------------------------------------------------------------
   track(eventKey, payload) {
@@ -1101,7 +990,7 @@ var AvsbServer = class {
   }
   startStreamingIfEnabled() {
     if (!this.streamingEnabled || this.streamingClient || this.destroyed) return;
-    this.streamingClient = createStreamingClient({
+    this.streamingClient = (0, import_streaming.createStreamingClient)({
       endpoint: this.streamingEndpoint,
       sdkKey: this.sdkKey,
       onDatafileUpdated: () => {

package/dist/index.d.cts

@@ -2,6 +2,7 @@ import { FlagDatafile, StickyBucketService, Logger, EvaluationSource, StickyAssi
 export { DecideOption, DecisionLog, DecisionLogEntry, EvalContext, EvaluationSource, ExposureEvent, Flag, FlagDatafile, FlagEvaluationDetails, InitResult, Logger, MetricEvent, MultiContext, RuleType, SingleContext, StickyAssignment, StickyBucketService, TrackPayload, consoleLogger, consoleTransport, createLogger, noopLogger } from '@avsbhq/core';
 import { AvsbUtils } from '@avsbhq/utils';
 export { AvsbUtils } from '@avsbhq/utils';
+export { StreamingClient, StreamingOptions, createStreamingClient } from '@avsbhq/utils/streaming';
 
 interface AvsbServerOptions {
     /** SDK key for the flag environment (e.g., "env_abc123") */
@@ -62,6 +63,32 @@ interface MiddlewareConfig {
     attributesFrom?: (req: unknown) => Record<string, unknown>;
 }
 
+/**
+ * Purchase order shape for server-side purchase tracking.
+ * Mirrors the client-side snippet PurchaseOrder interface.
+ * Decimal values are forwarded as-is — no server-side currency conversion.
+ */
+interface PurchaseOrder {
+    /** Required. Unique order/transaction identifier. */
+    orderId: string;
+    /** Required. Order total as a decimal (e.g. 99.95). */
+    total: number;
+    /** ISO 4217 currency code. */
+    currency?: string;
+    subtotal?: number;
+    shipping?: number;
+    tax?: number;
+    discount?: number;
+    coupon?: string;
+    items?: Array<{
+        sku: string;
+        name?: string;
+        price?: number;
+        quantity?: number;
+        category?: string;
+    }>;
+}
+
 /**
  * A per-request scoped client with a bound EvalContext.
  *
@@ -155,6 +182,7 @@ declare class AvsbServer {
     getNumberFlag(flagKey: string, defaultValue: NoInfer<number> | number, options?: GetFlagOptions): Flag<number>;
     getJsonFlag<T>(flagKey: string, defaultValue: NoInfer<T> | T, options?: GetFlagOptions): Flag<T>;
     getAllFlags(context: EvalContext, options?: GetAllFlagsOptions): Record<string, Flag>;
+    trackPurchase(visitorId: string, order: PurchaseOrder): Promise<void>;
     track(eventKey: string, payload: TrackPayload & {
         context: EvalContext;
     }): void;
@@ -230,22 +258,8 @@ declare class RedisStickyBucketService implements StickyBucketService {
     private evictIfNeeded;
 }
 
-interface StreamingClient {
-    connect(): void;
-    disconnect(): void;
-    isConnected(): boolean;
-}
-interface StreamingOptions {
-    endpoint: string;
-    sdkKey: string;
-    onDatafileUpdated: () => void;
-    logger: Logger;
-    reconnectDelay?: number;
-}
-declare function createStreamingClient(options: StreamingOptions): StreamingClient;
-
 declare function createDecisionLog(): DecisionLog;
 
 declare const SDK_VERSION = "0.3.0";
 
-export { AvsbServer, type AvsbServerOptions, type EventOptions, type GetAllFlagsOptions, type GetFlagOptions, InMemoryStickyBucketService, type MiddlewareConfig, type RedisLike, type RedisStickyBucketOptions, RedisStickyBucketService, SDK_VERSION, type StreamingClient, type StreamingOptions, type UserBoundClient, createDecisionLog, createStreamingClient, expressMiddleware, fastifyPlugin };
+export { AvsbServer, type AvsbServerOptions, type EventOptions, type GetAllFlagsOptions, type GetFlagOptions, InMemoryStickyBucketService, type MiddlewareConfig, type PurchaseOrder, type RedisLike, type RedisStickyBucketOptions, RedisStickyBucketService, SDK_VERSION, type UserBoundClient, createDecisionLog, expressMiddleware, fastifyPlugin };

package/dist/index.d.ts

@@ -2,6 +2,7 @@ import { FlagDatafile, StickyBucketService, Logger, EvaluationSource, StickyAssi
 export { DecideOption, DecisionLog, DecisionLogEntry, EvalContext, EvaluationSource, ExposureEvent, Flag, FlagDatafile, FlagEvaluationDetails, InitResult, Logger, MetricEvent, MultiContext, RuleType, SingleContext, StickyAssignment, StickyBucketService, TrackPayload, consoleLogger, consoleTransport, createLogger, noopLogger } from '@avsbhq/core';
 import { AvsbUtils } from '@avsbhq/utils';
 export { AvsbUtils } from '@avsbhq/utils';
+export { StreamingClient, StreamingOptions, createStreamingClient } from '@avsbhq/utils/streaming';
 
 interface AvsbServerOptions {
     /** SDK key for the flag environment (e.g., "env_abc123") */
@@ -62,6 +63,32 @@ interface MiddlewareConfig {
     attributesFrom?: (req: unknown) => Record<string, unknown>;
 }
 
+/**
+ * Purchase order shape for server-side purchase tracking.
+ * Mirrors the client-side snippet PurchaseOrder interface.
+ * Decimal values are forwarded as-is — no server-side currency conversion.
+ */
+interface PurchaseOrder {
+    /** Required. Unique order/transaction identifier. */
+    orderId: string;
+    /** Required. Order total as a decimal (e.g. 99.95). */
+    total: number;
+    /** ISO 4217 currency code. */
+    currency?: string;
+    subtotal?: number;
+    shipping?: number;
+    tax?: number;
+    discount?: number;
+    coupon?: string;
+    items?: Array<{
+        sku: string;
+        name?: string;
+        price?: number;
+        quantity?: number;
+        category?: string;
+    }>;
+}
+
 /**
  * A per-request scoped client with a bound EvalContext.
  *
@@ -155,6 +182,7 @@ declare class AvsbServer {
     getNumberFlag(flagKey: string, defaultValue: NoInfer<number> | number, options?: GetFlagOptions): Flag<number>;
     getJsonFlag<T>(flagKey: string, defaultValue: NoInfer<T> | T, options?: GetFlagOptions): Flag<T>;
     getAllFlags(context: EvalContext, options?: GetAllFlagsOptions): Record<string, Flag>;
+    trackPurchase(visitorId: string, order: PurchaseOrder): Promise<void>;
     track(eventKey: string, payload: TrackPayload & {
         context: EvalContext;
     }): void;
@@ -230,22 +258,8 @@ declare class RedisStickyBucketService implements StickyBucketService {
     private evictIfNeeded;
 }
 
-interface StreamingClient {
-    connect(): void;
-    disconnect(): void;
-    isConnected(): boolean;
-}
-interface StreamingOptions {
-    endpoint: string;
-    sdkKey: string;
-    onDatafileUpdated: () => void;
-    logger: Logger;
-    reconnectDelay?: number;
-}
-declare function createStreamingClient(options: StreamingOptions): StreamingClient;
-
 declare function createDecisionLog(): DecisionLog;
 
 declare const SDK_VERSION = "0.3.0";
 
-export { AvsbServer, type AvsbServerOptions, type EventOptions, type GetAllFlagsOptions, type GetFlagOptions, InMemoryStickyBucketService, type MiddlewareConfig, type RedisLike, type RedisStickyBucketOptions, RedisStickyBucketService, SDK_VERSION, type StreamingClient, type StreamingOptions, type UserBoundClient, createDecisionLog, createStreamingClient, expressMiddleware, fastifyPlugin };
+export { AvsbServer, type AvsbServerOptions, type EventOptions, type GetAllFlagsOptions, type GetFlagOptions, InMemoryStickyBucketService, type MiddlewareConfig, type PurchaseOrder, type RedisLike, type RedisStickyBucketOptions, RedisStickyBucketService, SDK_VERSION, type UserBoundClient, createDecisionLog, expressMiddleware, fastifyPlugin };

package/dist/index.js

@@ -19,6 +19,9 @@ function createDecisionLog() {
   return { entries };
 }
 
+// src/serverTracker.ts
+import { randomUUID } from "crypto";
+
 // src/reconnectBackoff.ts
 var BASE_DELAY_MS = 1e3;
 var MAX_DELAY_MS = 6e4;
@@ -47,6 +50,12 @@ function parseRetryAfter(headerValue) {
 }
 
 // src/serverTracker.ts
+function stampExposure(event) {
+  return event.eventId ? event : { ...event, eventId: randomUUID() };
+}
+function stampMetric(event) {
+  return event.eventId ? event : { ...event, eventId: randomUUID() };
+}
 function createServerTracker(options) {
   const {
     sdkKey,
@@ -59,6 +68,7 @@ function createServerTracker(options) {
   } = options;
   const batchEndpoint = collectEndpoint.replace(/\/?$/, "/v1/collect/batch");
   const metricEndpoint = collectEndpoint.replace(/\/?$/, "/v1/collect/metric-batch");
+  const ordersEndpoint = collectEndpoint.replace(/\/?$/, "/v1/collect/orders");
   let exposureQueue = [];
   let metricQueue = [];
   let flushTimer = null;
@@ -70,7 +80,7 @@ function createServerTracker(options) {
   }, flushInterval);
   function queue(event) {
     if (destroyed) return;
-    exposureQueue.push(event);
+    exposureQueue.push(stampExposure(event));
     if (exposureQueue.length > maxQueueSize) {
       const dropped = exposureQueue.length - maxQueueSize;
       exposureQueue = exposureQueue.slice(-maxQueueSize);
@@ -84,7 +94,7 @@ function createServerTracker(options) {
   }
   function queueMetric(event) {
     if (destroyed) return;
-    metricQueue.push(event);
+    metricQueue.push(stampMetric(event));
     if (metricQueue.length > maxQueueSize) {
       const dropped = metricQueue.length - maxQueueSize;
       metricQueue = metricQueue.slice(-maxQueueSize);
@@ -146,6 +156,47 @@ function createServerTracker(options) {
       }
     }
   }
+  async function trackPurchase(visitorId, order) {
+    if (destroyed) return;
+    const payload = {
+      ...order,
+      eventId: randomUUID(),
+      visitorId,
+      timestamp: Date.now(),
+      pageUrl: ""
+    };
+    const body = JSON.stringify({ sdkKey, orders: [payload] });
+    let backoff = resetBackoff();
+    let pendingRetryAfterMs = void 0;
+    for (let attempt = 0; attempt <= retryAttempts; attempt++) {
+      try {
+        const response = await fetch(ordersEndpoint, {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body,
+          signal: AbortSignal.timeout(1e4)
+        });
+        if (!response.ok) {
+          const parsed = parseRetryAfter(response.headers.get("retry-after"));
+          if (parsed !== null) pendingRetryAfterMs = parsed;
+          throw new Error(`HTTP ${response.status}`);
+        }
+        logger.debug(`Purchase order ${order.orderId} sent for visitor ${visitorId}`);
+        return;
+      } catch (e) {
+        if (attempt < retryAttempts) {
+          backoff = nextBackoff(backoff, pendingRetryAfterMs);
+          pendingRetryAfterMs = void 0;
+          await new Promise((r) => setTimeout(r, backoff.delayMs));
+        } else {
+          logger.error(
+            `Failed to send purchase order ${order.orderId} after ${retryAttempts} retries`,
+            { endpoint: ordersEndpoint, error: String(e) }
+          );
+        }
+      }
+    }
+  }
   async function destroy() {
     destroyed = true;
     if (flushTimer) {
@@ -154,183 +205,14 @@ function createServerTracker(options) {
     }
     await flush();
   }
-  return { queue, queueMetric, flush, destroy };
+  return { queue, queueMetric, trackPurchase, flush, destroy };
 }
 
 // src/streaming.ts
-function createStreamingClient(options) {
-  const {
-    endpoint,
-    sdkKey,
-    onDatafileUpdated,
-    logger,
-    reconnectDelay
-  } = options;
-  let connected = false;
-  let abortController = null;
-  let reconnectTimer = null;
-  let backoff = resetBackoff();
-  let pendingRetryAfterMs = void 0;
-  function connect() {
-    if (connected) return;
-    void startConnection();
-  }
-  function disconnect() {
-    connected = false;
-    if (abortController) {
-      abortController.abort();
-      abortController = null;
-    }
-    if (reconnectTimer) {
-      clearTimeout(reconnectTimer);
-      reconnectTimer = null;
-    }
-  }
-  function isConnected() {
-    return connected;
-  }
-  async function fetchTicket(signal) {
-    const ticketUrl = `${endpoint}?sdkKey=${encodeURIComponent(sdkKey)}`;
-    try {
-      const res = await fetch(ticketUrl, { signal });
-      if (!res.ok) {
-        logger.warn("SSE ticket fetch failed", { status: res.status, url: ticketUrl });
-        return null;
-      }
-      const body = await res.json();
-      if (!body?.url || !body?.token) {
-        logger.warn("SSE ticket response missing fields");
-        return null;
-      }
-      return body;
-    } catch (e) {
-      if (signal.aborted) return null;
-      logger.warn("SSE ticket fetch error", { error: String(e) });
-      return null;
-    }
-  }
-  async function startConnection() {
-    abortController = new AbortController();
-    const signal = abortController.signal;
-    const ticket = await fetchTicket(signal);
-    if (!ticket || signal.aborted) {
-      if (!signal.aborted) scheduleReconnect();
-      return;
-    }
-    const streamUrl = `${ticket.url}?sdkKey=${encodeURIComponent(sdkKey)}&token=${encodeURIComponent(ticket.token)}`;
-    try {
-      const response = await fetch(streamUrl, {
-        headers: { Accept: "text/event-stream" },
-        signal
-      });
-      if (response.status === 401) {
-        logger.warn("SSE stream rejected token; refetching ticket");
-        const next = await fetchTicket(signal);
-        if (!next || signal.aborted) {
-          if (!signal.aborted) scheduleReconnect();
-          return;
-        }
-        const retryUrl = `${next.url}?sdkKey=${encodeURIComponent(sdkKey)}&token=${encodeURIComponent(next.token)}`;
-        const retry = await fetch(retryUrl, {
-          headers: { Accept: "text/event-stream" },
-          signal
-        });
-        if (!retry.ok || !retry.body) {
-          logger.warn("SSE retry failed", { status: retry.status });
-          recordRetryAfter(retry.headers.get("retry-after"));
-          scheduleReconnect();
-          return;
-        }
-        await pumpFrames(retry, signal);
-        return;
-      }
-      if (response.status === 429) {
-        recordRetryAfter(response.headers.get("retry-after"));
-        logger.warn("SSE rate-limited", { status: 429 });
-        scheduleReconnect();
-        return;
-      }
-      if (!response.ok) {
-        logger.warn("SSE connection failed", { status: response.status, url: streamUrl });
-        recordRetryAfter(response.headers.get("retry-after"));
-        scheduleReconnect();
-        return;
-      }
-      if (!response.body) {
-        logger.warn("SSE response has no body");
-        scheduleReconnect();
-        return;
-      }
-      await pumpFrames(response, signal);
-    } catch (e) {
-      if (signal.aborted) return;
-      logger.warn("SSE connection error", { error: String(e) });
-      connected = false;
-      scheduleReconnect();
-    }
-  }
-  function recordRetryAfter(headerValue) {
-    const parsed = parseRetryAfter(headerValue);
-    if (parsed !== null) pendingRetryAfterMs = parsed;
-  }
-  async function pumpFrames(response, signal) {
-    connected = true;
-    backoff = resetBackoff();
-    pendingRetryAfterMs = void 0;
-    logger.info(`SSE connected to ${endpoint}`);
-    const reader = response.body.getReader();
-    const decoder = new TextDecoder();
-    let buffer = "";
-    try {
-      while (true) {
-        const { done, value } = await reader.read();
-        if (done) break;
-        buffer += decoder.decode(value, { stream: true });
-        const lines = buffer.split("\n");
-        buffer = lines.pop() ?? "";
-        for (const line of lines) {
-          if (line.startsWith("data: ")) {
-            const data = line.slice(6).trim();
-            if (!data) continue;
-            try {
-              const parsed = JSON.parse(data);
-              if (parsed.type === "datafile_updated") {
-                onDatafileUpdated();
-              }
-            } catch {
-              logger.warn("Failed to parse SSE data", { data });
-            }
-          }
-        }
-      }
-    } catch (e) {
-      if (signal.aborted) return;
-      logger.warn("SSE stream read error", { error: String(e) });
-    }
-    connected = false;
-    scheduleReconnect();
-  }
-  function scheduleReconnect() {
-    if (reconnectTimer) return;
-    if (typeof reconnectDelay === "number") {
-      reconnectTimer = setTimeout(() => {
-        reconnectTimer = null;
-        void startConnection();
-      }, reconnectDelay);
-      return;
-    }
-    backoff = nextBackoff(backoff, pendingRetryAfterMs);
-    pendingRetryAfterMs = void 0;
-    logger.warn(
-      `SSE reconnect attempt ${backoff.attempt} in ${backoff.delayMs}ms`
-    );
-    reconnectTimer = setTimeout(() => {
-      reconnectTimer = null;
-      void startConnection();
-    }, backoff.delayMs);
-  }
-  return { connect, disconnect, isConnected };
-}
+import {
+  createStreamingClient,
+  createBrowserStreamingClient
+} from "@avsbhq/utils/streaming";
 
 // src/version.ts
 var SDK_VERSION = "0.3.0";
@@ -693,6 +575,16 @@ var AvsbServer = class {
     return out;
   }
   // ---------------------------------------------------------------------------
+  // Purchase tracking — fires immediately to /v1/collect/orders
+  // ---------------------------------------------------------------------------
+  async trackPurchase(visitorId, order) {
+    if (!this.tracker) {
+      this.logger.warn("trackPurchase called before tracker is ready; order dropped");
+      return;
+    }
+    return this.tracker.trackPurchase(visitorId, order);
+  }
+  // ---------------------------------------------------------------------------
   // §5.6 Unified track — context required
   // ---------------------------------------------------------------------------
   track(eventKey, payload) {

package/package.json

@@ -1,14 +1,19 @@
 {
   "name": "@avsbhq/node",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {
-    ".": { "import": "./dist/index.js", "require": "./dist/index.cjs" }
+    ".": {
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
   },
-  "files": ["dist"],
+  "files": [
+    "dist"
+  ],
   "engines": {
     "node": ">=18.0.0"
   },
@@ -28,8 +33,8 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@avsbhq/core": "1.0.0",
-    "@avsbhq/utils": "1.0.0"
+    "@avsbhq/core": "1.1.0",
+    "@avsbhq/utils": "1.0.1"
   },
   "devDependencies": {
     "tsup": "^8.0.0",
@@ -37,4 +42,4 @@
     "vitest": "^3.0.0",
     "@types/node": "^20.0.0"
   }
-}
+}