@avsbhq/node 1.2.0 → 1.5.0

package/README.md

@@ -93,6 +93,35 @@ const flag = server.getBoolFlag('checkout-v2', false, {
 })
 ```
 
+### Commerce targeting attributes
+
+Audiences built with the commerce condition types (cart value, products viewed, purchase history) evaluate from attributes you supply on the context. The attribute names are fixed:
+
+```ts
+const flag = server.getBoolFlag('big-cart-banner', false, {
+  context: {
+    kind: 'user',
+    key: 'u_123',
+    cartValue: 120.5, // decimal MAJOR units of the project currency
+    viewedSkus: ['SKU-1', 'SKU-2'], // for "products viewed" matching on SKU
+    viewedCategories: ['trainers'], // for "products viewed" matching on category
+    purchaseHistory: {
+      // PurchaseHistoryAttribute — exported for your own declarations
+      hasPurchased: true,
+      lastPurchaseAt: 1765500000000, // epoch milliseconds (optional)
+      lifetimeSpend: 540.0, // decimal MAJOR units (optional)
+      orderCount: 7, // optional
+    },
+  },
+})
+```
+
+Server-side semantics to be aware of:
+
+- **All money is decimal major units.** Condition values are stored in minor units and converted using the project currency exponent from the datafile (default 2) — you never pass minor units.
+- **Missing or mistyped attributes evaluate the condition to `false`.** A completely absent `purchaseHistory` makes ALL purchase-history operators false — including `has_not_purchased`. On the server, absence means "not provided", not "never purchased" (this deliberately diverges from the browser snippet, where a profile miss is authoritative).
+- **Dataset-backed "products viewed" conditions evaluate `false` on the server.** Dataset view windows live in the browser; server callers use literal SKU/category lists. The session/30-day window distinction is also browser-only — supply whatever view list you consider current.
+
 ### `alias(previousContext, newContext)`
 
 Send an alias event linking two identities in the analytics pipeline. Typically called server-side when a user signs up or links an anonymous session to an account:
@@ -104,6 +133,10 @@ await server.alias(
 )
 ```
 
+### Sharing identity with the web snippet
+
+To measure one metric across both the A vs B web snippet and this SDK (the setup behind cross-project metrics), the context `key` must equal the browser snippet's visitor id — the `_avsb_visitor` cookie UUID returned by `avsb.getVisitorId()`. Results join on raw id equality, so a different key means the two surfaces never line up. Forward the snippet id from the browser and use it as the key here, or link an internal account id to it with `alias()`. Full guide: [Shared Visitor Identity](https://avsb.cloud/docs/developer-reference/shared-visitor-identity).
+
 ---
 
 ## 5. Multi-context

package/dist/index.cjs

@@ -40,6 +40,257 @@ module.exports = __toCommonJS(index_exports);
 var import_engine = require("@avsbhq/core/engine");
 var import_core2 = require("@avsbhq/core");
 
+// src/datasets.ts
+var DEFAULT_REQUEST_TIMEOUT = 1e4;
+function miss(slug, version) {
+  return { found: false, meta: { slug, version } };
+}
+function createDatasetsClient(options) {
+  const { sdkKey, getDatafile, logger } = options;
+  const requestTimeout = options.requestTimeout ?? DEFAULT_REQUEST_TIMEOUT;
+  async function get(slug, key) {
+    if (!slug || !key) {
+      logger.warn("datasets.get called with an empty slug or key \u2014 returning not found");
+      return miss(slug, null);
+    }
+    const datafile = getDatafile();
+    if (!datafile) {
+      logger.debug(`SDK not ready, returning not found for dataset "${slug}"`);
+      return miss(slug, null);
+    }
+    const dataset = datafile.datasets?.find((d) => d.slug === slug);
+    if (!dataset) {
+      logger.debug(`Dataset "${slug}" not present in datafile \u2014 returning not found`);
+      return miss(slug, null);
+    }
+    if (!dataset.liveVersion) {
+      logger.debug(`Dataset "${slug}" has no live version \u2014 returning not found`);
+      return miss(slug, null);
+    }
+    const base = datafile.collectEndpoint.replace(/\/+$/, "");
+    const url = `${base}/v1/ds/${encodeURIComponent(sdkKey)}/${encodeURIComponent(slug)}/${dataset.liveVersion}/${encodeURIComponent(key)}`;
+    try {
+      const res = await fetch(url, { signal: AbortSignal.timeout(requestTimeout) });
+      if (!res.ok) {
+        logger.warn("Dataset lookup failed", { slug, key, status: res.status });
+        return miss(slug, dataset.liveVersion);
+      }
+      const body = await res.json();
+      if (!body || body.found !== true) {
+        return miss(slug, dataset.liveVersion);
+      }
+      return {
+        found: true,
+        value: body.value,
+        meta: { slug, version: dataset.liveVersion }
+      };
+    } catch (e) {
+      logger.warn("Dataset lookup error", { slug, key, error: String(e) });
+      return miss(slug, dataset.liveVersion);
+    }
+  }
+  return { get };
+}
+
+// src/recs.ts
+var DEFAULT_REQUEST_TIMEOUT2 = 1e4;
+var MAX_SEED_CHARS = 256;
+var MAX_SEEDS = 3;
+var MAX_ITEMS_CAP = 24;
+var DEFAULT_MAX_ITEMS = 8;
+var MAX_ID_CHARS = 64;
+var MAX_ATTR_VALUE_CHARS = 512;
+var GLOBAL_SEED = "_global";
+function clampMaxItems(value) {
+  if (typeof value !== "number" || !Number.isFinite(value) || value < 1) return DEFAULT_MAX_ITEMS;
+  return Math.min(Math.floor(value), MAX_ITEMS_CAP);
+}
+function asText(value) {
+  if (typeof value === "string") return value;
+  if (typeof value === "number" && Number.isFinite(value)) return String(value);
+  return "";
+}
+function joinIds(ids) {
+  let out = "";
+  for (const id of ids) {
+    const next = out === "" ? id : `${out},${id}`;
+    if (next.length > MAX_ATTR_VALUE_CHARS) break;
+    out = next;
+  }
+  return out;
+}
+function toRecProducts(items, cap) {
+  const out = [];
+  for (const item of items) {
+    if (out.length >= cap) break;
+    if (item === null || typeof item !== "object") continue;
+    const fields = item;
+    const id = (asText(fields.id) || asText(fields.sku)).slice(0, MAX_ID_CHARS);
+    if (id === "") continue;
+    const product = { id };
+    const title = asText(fields.title);
+    if (title) product.title = title;
+    const image = asText(fields.image);
+    if (image) product.image = image;
+    const href = asText(fields.href) || asText(fields.url);
+    if (href && !/^\s*javascript:/i.test(href)) product.href = href;
+    const category = asText(fields.category);
+    if (category) product.category = category;
+    if (typeof fields.price === "number" && Number.isFinite(fields.price)) {
+      product.price = Math.round(fields.price);
+    }
+    if (typeof fields.compareAtPrice === "number" && Number.isFinite(fields.compareAtPrice)) {
+      product.compareAtPrice = Math.round(fields.compareAtPrice);
+    }
+    if (typeof fields.currency === "string" && fields.currency !== "") {
+      product.currency = fields.currency;
+    }
+    const availability = fields.availability;
+    if (availability === "in_stock" || availability === "out_of_stock" || availability === "removed") {
+      product.availability = availability;
+    }
+    out.push(product);
+  }
+  return out;
+}
+function miss2(recipe, degraded) {
+  return { items: [], served: false, recipe, source: null, fallbackStep: null, degraded };
+}
+function createRecsClient(options) {
+  const { sdkKey, getDatafile, getTracker, logger } = options;
+  const requestTimeout = options.requestTimeout ?? DEFAULT_REQUEST_TIMEOUT2;
+  function resolveSeeds(context) {
+    const clip = (s) => s.slice(0, MAX_SEED_CHARS);
+    if (Array.isArray(context?.seeds)) {
+      const seeds = context.seeds.filter((s) => typeof s === "string" && s !== "").slice(0, MAX_SEEDS).map(clip);
+      if (seeds.length > 0) return seeds;
+    }
+    if (typeof context?.seed === "string" && context.seed !== "") return [clip(context.seed)];
+    return [GLOBAL_SEED];
+  }
+  async function get(req) {
+    try {
+      const recipeHandle = typeof req?.recipe === "string" ? req.recipe : "";
+      if (recipeHandle === "") {
+        logger.warn("recs.get called with an empty recipe \u2014 returning served:false");
+        return miss2("", false);
+      }
+      const datafile = getDatafile();
+      if (!datafile) {
+        logger.debug(`SDK not ready, returning served:false for recipe "${recipeHandle}"`);
+        return miss2(recipeHandle, false);
+      }
+      const recipes = datafile.recipes;
+      const entry = recipes?.find((r) => r.recipe === recipeHandle) ?? null;
+      if (!entry) {
+        logger.debug(`Recipe "${recipeHandle}" not present in datafile \u2014 returning served:false`);
+        return miss2(recipeHandle, false);
+      }
+      const seeds = resolveSeeds(req.context);
+      const maxItems = clampMaxItems(req.maxItems);
+      const excludeOutOfStock = typeof req.excludeOutOfStock === "boolean" ? req.excludeOutOfStock : entry.excludeOutOfStock;
+      const body = {
+        snippetKey: sdkKey,
+        assigned: 0,
+        sources: [{ chain: entry.chain }],
+        maxItems,
+        excludeOutOfStock,
+        merch: entry.merch ?? [],
+        sessionAffinity: entry.sessionAffinity
+      };
+      if (seeds.length === 1) body.seedKey = seeds[0];
+      else body.seedKeys = seeds;
+      const base = datafile.collectEndpoint.replace(/\/+$/, "").replace("/v1/collect/batch", "");
+      const res = await fetch(`${base}/v1/recs/resolve`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+        signal: AbortSignal.timeout(requestTimeout)
+      });
+      if (!res.ok) {
+        logger.warn("Recs resolve failed", { recipe: recipeHandle, status: res.status });
+        return miss2(recipeHandle, true);
+      }
+      const parsed = await res.json();
+      const data = parsed?.data;
+      if (!data || typeof data !== "object") return miss2(recipeHandle, true);
+      const items = toRecProducts(Array.isArray(data.items) ? data.items : [], maxItems);
+      const servedStep = data.served ?? null;
+      const served = servedStep !== null && items.length > 0;
+      if (req.attribution) {
+        const tracker = getTracker();
+        if (tracker) {
+          tracker.queue({
+            visitorId: req.attribution.visitorId,
+            experimentId: req.attribution.experimentId,
+            variationId: req.attribution.variationId,
+            eventName: "rec:impression",
+            revenue: null,
+            timestamp: Date.now(),
+            pageUrl: "",
+            attributes: {
+              recipe: entry.recipe,
+              seed: joinIds(seeds),
+              slug: servedStep?.slug ?? "",
+              version: servedStep ? String(servedStep.version) : "",
+              step: servedStep ? String(servedStep.step) : "",
+              served: served ? "true" : "false",
+              items: joinIds(items.map((i) => i.id))
+            }
+          });
+        } else {
+          logger.warn("recs.get attribution supplied before tracker is ready; impression dropped");
+        }
+      }
+      return {
+        items,
+        served,
+        recipe: entry.recipe,
+        source: servedStep?.slug ?? null,
+        fallbackStep: servedStep?.step ?? null,
+        degraded: false
+      };
+    } catch (e) {
+      logger.warn("Recs resolve error", {
+        recipe: typeof req?.recipe === "string" ? req.recipe : "",
+        error: String(e)
+      });
+      return miss2(typeof req?.recipe === "string" ? req.recipe : "", true);
+    }
+  }
+  function trackClick(productId, opts) {
+    if (typeof productId !== "string" || productId === "") {
+      logger.warn("recs.trackClick called with an empty productId \u2014 dropped");
+      return;
+    }
+    if (!opts || !opts.visitorId || !opts.experimentId || !opts.variationId) {
+      logger.warn("recs.trackClick requires visitorId/experimentId/variationId \u2014 dropped");
+      return;
+    }
+    const tracker = getTracker();
+    if (!tracker) {
+      logger.warn("recs.trackClick called before tracker is ready; click dropped");
+      return;
+    }
+    const position = typeof opts.position === "number" && Number.isInteger(opts.position) && opts.position >= 1 ? String(opts.position) : "";
+    tracker.queue({
+      visitorId: opts.visitorId,
+      experimentId: opts.experimentId,
+      variationId: opts.variationId,
+      eventName: "rec:click",
+      revenue: null,
+      timestamp: Date.now(),
+      pageUrl: "",
+      attributes: {
+        recipe: typeof opts.recipe === "string" ? opts.recipe : "",
+        item: productId.slice(0, MAX_ID_CHARS),
+        position
+      }
+    });
+  }
+  return { get, trackClick };
+}
+
 // src/decisionLog.ts
 function createDecisionLog() {
   const entries = [];
@@ -239,7 +490,7 @@ function createServerTracker(options) {
 var import_streaming = require("@avsbhq/utils/streaming");
 
 // src/version.ts
-var SDK_VERSION = "0.3.0";
+var SDK_VERSION = "0.4.0";
 
 // src/UserBoundClient.ts
 function createUserBoundClient(server, context) {
@@ -415,6 +666,42 @@ var AvsbServer = class {
     }
     return this._utils;
   }
+  /**
+   * Server-side datasets read surface (e-commerce suite Phase 2).
+   * Constructed lazily on first access, mirroring the `utils` getter.
+   * `client.datasets.get(slug, key)` resolves the live version from the
+   * current datafile and never throws — see ./datasets.ts.
+   */
+  _datasets = null;
+  get datasets() {
+    if (!this._datasets) {
+      this._datasets = createDatasetsClient({
+        sdkKey: this.sdkKey,
+        getDatafile: () => this.datafile,
+        logger: this.logger
+      });
+    }
+    return this._datasets;
+  }
+  /**
+   * Server-side recommendations surface (e-commerce suite overhaul, C3).
+   * Constructed lazily on first access, mirroring the `datasets` getter.
+   * `client.recs.get({ recipe, … })` resolves the recipe registry from the
+   * current datafile and never throws; impressions/clicks ride the server
+   * tracker's queue and revenue attaches via the existing `trackPurchase`.
+   */
+  _recs = null;
+  get recs() {
+    if (!this._recs) {
+      this._recs = createRecsClient({
+        sdkKey: this.sdkKey,
+        getDatafile: () => this.datafile,
+        getTracker: () => this.tracker,
+        logger: this.logger
+      });
+    }
+    return this._recs;
+  }
   constructor(options) {
     this.sdkKey = options.sdkKey;
     this.pollingInterval = Math.max(options.pollingInterval ?? 6e4, 5e3);

package/dist/index.d.cts

@@ -1,5 +1,5 @@
 import { FlagDatafile, StickyBucketService, Logger, EvaluationSource, StickyAssignment, DecideOption, Flag, TrackPayload, DecisionLog, InitResult, EvalContext } from '@avsbhq/core';
-export { DecideOption, DecisionLog, DecisionLogEntry, EvalContext, EvaluationSource, ExposureEvent, Flag, FlagDatafile, FlagEvaluationDetails, InitResult, Logger, MetricEvent, MultiContext, RuleType, SingleContext, StickyAssignment, StickyBucketService, TrackPayload, consoleLogger, consoleTransport, createLogger, noopLogger } from '@avsbhq/core';
+export { DatafileDataset, DatafileDatasetType, DecideOption, DecisionLog, DecisionLogEntry, EvalContext, EvaluationSource, ExposureEvent, Flag, FlagDatafile, FlagEvaluationDetails, InitResult, Logger, MetricEvent, MultiContext, PurchaseHistoryAttribute, RuleType, SingleContext, StickyAssignment, StickyBucketService, TrackPayload, consoleLogger, consoleTransport, createLogger, noopLogger } from '@avsbhq/core';
 import { AvsbUtils } from '@avsbhq/utils';
 export { AvsbUtils } from '@avsbhq/utils';
 export { StreamingClient, StreamingOptions, createStreamingClient } from '@avsbhq/utils/streaming';
@@ -82,6 +82,13 @@ interface PurchaseOrder {
     coupon?: string;
     items?: Array<{
         sku: string;
+        /**
+         * Canonical product-grain key (e-commerce suite overhaul, contract C1).
+         * Pass when known so order items join catalog/recommendation analytics
+         * without alias resolution; the ingestion worker derives it from `sku`
+         * otherwise.
+         */
+        productKey?: string;
         name?: string;
         price?: number;
         quantity?: number;
@@ -89,6 +96,130 @@ interface PurchaseOrder {
     }>;
 }
 
+/**
+ * Server-side datasets read client (e-commerce suite Phase 2).
+ *
+ * Resolves the live version of a dataset from the SDK's datafile
+ * (`datasets` field) and fetches a single key from the edge worker:
+ *
+ *   GET {ingestionHost}/v1/ds/{sdkKey}/{slug}/{versionShortId}/{key}
+ *
+ * The ingestion host is derived from the datafile's `collectEndpoint`,
+ * exactly like the server tracker derives `/v1/collect/*`. The worker's
+ * key cache resolves SDK keys as well as snippet keys in the first path
+ * segment.
+ *
+ * Error posture matches flag evaluation: this client NEVER throws.
+ * Unknown slug, missing live version, SDK not ready, HTTP errors and
+ * network failures all degrade to `{ found: false }`.
+ */
+interface DatasetGetResult {
+    found: boolean;
+    /** Parsed row for TABLE/FEED datasets; `true` for LIST membership hits. */
+    value?: unknown;
+    meta: {
+        slug: string;
+        /** Live version short id used for the lookup; null when unresolvable. */
+        version: number | null;
+    };
+}
+interface DatasetsClient {
+    /**
+     * Look up `key` in the live version of dataset `slug`.
+     * Resolves the version from the current datafile and never throws.
+     */
+    get(slug: string, key: string): Promise<DatasetGetResult>;
+}
+
+/**
+ * Server-side recommendations client (e-commerce suite overhaul, contract C3).
+ *
+ * Mirrors ./datasets.ts: resolves a recipe handle against the datafile's
+ * recipe registry (`datafile.recipes`, additive) and POSTs the standard
+ * resolve body to the edge worker:
+ *
+ *   POST {ingestionHost}/v1/recs/resolve
+ *
+ * The ingestion host is derived from the datafile's `collectEndpoint`. The
+ * worker's key cache resolves SDK keys as well as snippet keys, so the body's
+ * key field simply carries the SDK key.
+ *
+ * Attribution is OPT-IN server-side: `get()` fires a `rec:impression` (via
+ * the server tracker) only when the caller passes `attribution` — a server
+ * has no ambient variation context the way a browser harness does.
+ *
+ * Error posture matches datasets/flag evaluation: this client NEVER throws.
+ * Unknown recipe, SDK not ready, HTTP errors, timeouts and network failures
+ * all degrade to `{ items: [], served: false }`.
+ */
+interface RecProduct {
+    id: string;
+    title?: string;
+    image?: string;
+    href?: string;
+    category?: string;
+    /** MINOR units (ISO-4217). */
+    price?: number;
+    /** MINOR units. */
+    compareAtPrice?: number;
+    currency?: string;
+    availability?: 'in_stock' | 'out_of_stock' | 'removed';
+}
+interface RecsAttribution {
+    visitorId: string;
+    experimentId: string;
+    variationId: string;
+}
+interface RecsGetRequest {
+    recipe: string;
+    context?: {
+        /** Single seed product key (product page). */
+        seed?: string;
+        /** Up to 3 seed product keys (cart page). */
+        seeds?: string[];
+    };
+    maxItems?: number;
+    excludeOutOfStock?: boolean;
+    /** When present, a rec:impression is queued with these ids on success. */
+    attribution?: RecsAttribution;
+}
+interface RecsResult {
+    items: RecProduct[];
+    served: boolean;
+    recipe: string;
+    /** Slug of the chain step that served, null on a miss. */
+    source: string | null;
+    fallbackStep: number | null;
+    /** True when the resolve failed (timeout / network / HTTP / parse). */
+    degraded: boolean;
+}
+interface RecsClient {
+    /** Resolve items for a recipe. Never throws. */
+    get(req: RecsGetRequest): Promise<RecsResult>;
+    /**
+     * Queue a rec:click for a product the shopper clicked. Pass `recipe` when
+     * known — results group click-through by (variation, recipe).
+     */
+    trackClick(productId: string, opts: RecsAttribution & {
+        position?: number;
+        recipe?: string;
+    }): void;
+}
+/**
+ * One entry of the datafile recipe registry (contract C3). Additive on
+ * FlagDatafile — SDKs on older datafiles see it absent.
+ */
+interface DatafileRecipe {
+    recipe: string;
+    chain: Array<{
+        slug: string;
+        version: number;
+    }>;
+    excludeOutOfStock: boolean;
+    sessionAffinity: boolean;
+    merch?: unknown[];
+}
+
 /**
  * A per-request scoped client with a bound EvalContext.
  *
@@ -170,6 +301,23 @@ declare class AvsbServer {
      */
     private _utils;
     get utils(): AvsbUtils;
+    /**
+     * Server-side datasets read surface (e-commerce suite Phase 2).
+     * Constructed lazily on first access, mirroring the `utils` getter.
+     * `client.datasets.get(slug, key)` resolves the live version from the
+     * current datafile and never throws — see ./datasets.ts.
+     */
+    private _datasets;
+    get datasets(): DatasetsClient;
+    /**
+     * Server-side recommendations surface (e-commerce suite overhaul, C3).
+     * Constructed lazily on first access, mirroring the `datasets` getter.
+     * `client.recs.get({ recipe, … })` resolves the recipe registry from the
+     * current datafile and never throws; impressions/clicks ride the server
+     * tracker's queue and revenue attaches via the existing `trackPurchase`.
+     */
+    private _recs;
+    get recs(): RecsClient;
     constructor(options: AvsbServerOptions);
     onReady(): Promise<InitResult>;
     private initializeAndReady;
@@ -260,6 +408,6 @@ declare class RedisStickyBucketService implements StickyBucketService {
 
 declare function createDecisionLog(): DecisionLog;
 
-declare const SDK_VERSION = "0.3.0";
+declare const SDK_VERSION = "0.4.0";
 
-export { AvsbServer, type AvsbServerOptions, type EventOptions, type GetAllFlagsOptions, type GetFlagOptions, InMemoryStickyBucketService, type MiddlewareConfig, type PurchaseOrder, type RedisLike, type RedisStickyBucketOptions, RedisStickyBucketService, SDK_VERSION, type UserBoundClient, createDecisionLog, expressMiddleware, fastifyPlugin };
+export { AvsbServer, type AvsbServerOptions, type DatafileRecipe, type DatasetGetResult, type DatasetsClient, type EventOptions, type GetAllFlagsOptions, type GetFlagOptions, InMemoryStickyBucketService, type MiddlewareConfig, type PurchaseOrder, type RecProduct, type RecsAttribution, type RecsClient, type RecsGetRequest, type RecsResult, type RedisLike, type RedisStickyBucketOptions, RedisStickyBucketService, SDK_VERSION, type UserBoundClient, createDecisionLog, expressMiddleware, fastifyPlugin };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { FlagDatafile, StickyBucketService, Logger, EvaluationSource, StickyAssignment, DecideOption, Flag, TrackPayload, DecisionLog, InitResult, EvalContext } from '@avsbhq/core';
-export { DecideOption, DecisionLog, DecisionLogEntry, EvalContext, EvaluationSource, ExposureEvent, Flag, FlagDatafile, FlagEvaluationDetails, InitResult, Logger, MetricEvent, MultiContext, RuleType, SingleContext, StickyAssignment, StickyBucketService, TrackPayload, consoleLogger, consoleTransport, createLogger, noopLogger } from '@avsbhq/core';
+export { DatafileDataset, DatafileDatasetType, DecideOption, DecisionLog, DecisionLogEntry, EvalContext, EvaluationSource, ExposureEvent, Flag, FlagDatafile, FlagEvaluationDetails, InitResult, Logger, MetricEvent, MultiContext, PurchaseHistoryAttribute, RuleType, SingleContext, StickyAssignment, StickyBucketService, TrackPayload, consoleLogger, consoleTransport, createLogger, noopLogger } from '@avsbhq/core';
 import { AvsbUtils } from '@avsbhq/utils';
 export { AvsbUtils } from '@avsbhq/utils';
 export { StreamingClient, StreamingOptions, createStreamingClient } from '@avsbhq/utils/streaming';
@@ -82,6 +82,13 @@ interface PurchaseOrder {
     coupon?: string;
     items?: Array<{
         sku: string;
+        /**
+         * Canonical product-grain key (e-commerce suite overhaul, contract C1).
+         * Pass when known so order items join catalog/recommendation analytics
+         * without alias resolution; the ingestion worker derives it from `sku`
+         * otherwise.
+         */
+        productKey?: string;
         name?: string;
         price?: number;
         quantity?: number;
@@ -89,6 +96,130 @@ interface PurchaseOrder {
     }>;
 }
 
+/**
+ * Server-side datasets read client (e-commerce suite Phase 2).
+ *
+ * Resolves the live version of a dataset from the SDK's datafile
+ * (`datasets` field) and fetches a single key from the edge worker:
+ *
+ *   GET {ingestionHost}/v1/ds/{sdkKey}/{slug}/{versionShortId}/{key}
+ *
+ * The ingestion host is derived from the datafile's `collectEndpoint`,
+ * exactly like the server tracker derives `/v1/collect/*`. The worker's
+ * key cache resolves SDK keys as well as snippet keys in the first path
+ * segment.
+ *
+ * Error posture matches flag evaluation: this client NEVER throws.
+ * Unknown slug, missing live version, SDK not ready, HTTP errors and
+ * network failures all degrade to `{ found: false }`.
+ */
+interface DatasetGetResult {
+    found: boolean;
+    /** Parsed row for TABLE/FEED datasets; `true` for LIST membership hits. */
+    value?: unknown;
+    meta: {
+        slug: string;
+        /** Live version short id used for the lookup; null when unresolvable. */
+        version: number | null;
+    };
+}
+interface DatasetsClient {
+    /**
+     * Look up `key` in the live version of dataset `slug`.
+     * Resolves the version from the current datafile and never throws.
+     */
+    get(slug: string, key: string): Promise<DatasetGetResult>;
+}
+
+/**
+ * Server-side recommendations client (e-commerce suite overhaul, contract C3).
+ *
+ * Mirrors ./datasets.ts: resolves a recipe handle against the datafile's
+ * recipe registry (`datafile.recipes`, additive) and POSTs the standard
+ * resolve body to the edge worker:
+ *
+ *   POST {ingestionHost}/v1/recs/resolve
+ *
+ * The ingestion host is derived from the datafile's `collectEndpoint`. The
+ * worker's key cache resolves SDK keys as well as snippet keys, so the body's
+ * key field simply carries the SDK key.
+ *
+ * Attribution is OPT-IN server-side: `get()` fires a `rec:impression` (via
+ * the server tracker) only when the caller passes `attribution` — a server
+ * has no ambient variation context the way a browser harness does.
+ *
+ * Error posture matches datasets/flag evaluation: this client NEVER throws.
+ * Unknown recipe, SDK not ready, HTTP errors, timeouts and network failures
+ * all degrade to `{ items: [], served: false }`.
+ */
+interface RecProduct {
+    id: string;
+    title?: string;
+    image?: string;
+    href?: string;
+    category?: string;
+    /** MINOR units (ISO-4217). */
+    price?: number;
+    /** MINOR units. */
+    compareAtPrice?: number;
+    currency?: string;
+    availability?: 'in_stock' | 'out_of_stock' | 'removed';
+}
+interface RecsAttribution {
+    visitorId: string;
+    experimentId: string;
+    variationId: string;
+}
+interface RecsGetRequest {
+    recipe: string;
+    context?: {
+        /** Single seed product key (product page). */
+        seed?: string;
+        /** Up to 3 seed product keys (cart page). */
+        seeds?: string[];
+    };
+    maxItems?: number;
+    excludeOutOfStock?: boolean;
+    /** When present, a rec:impression is queued with these ids on success. */
+    attribution?: RecsAttribution;
+}
+interface RecsResult {
+    items: RecProduct[];
+    served: boolean;
+    recipe: string;
+    /** Slug of the chain step that served, null on a miss. */
+    source: string | null;
+    fallbackStep: number | null;
+    /** True when the resolve failed (timeout / network / HTTP / parse). */
+    degraded: boolean;
+}
+interface RecsClient {
+    /** Resolve items for a recipe. Never throws. */
+    get(req: RecsGetRequest): Promise<RecsResult>;
+    /**
+     * Queue a rec:click for a product the shopper clicked. Pass `recipe` when
+     * known — results group click-through by (variation, recipe).
+     */
+    trackClick(productId: string, opts: RecsAttribution & {
+        position?: number;
+        recipe?: string;
+    }): void;
+}
+/**
+ * One entry of the datafile recipe registry (contract C3). Additive on
+ * FlagDatafile — SDKs on older datafiles see it absent.
+ */
+interface DatafileRecipe {
+    recipe: string;
+    chain: Array<{
+        slug: string;
+        version: number;
+    }>;
+    excludeOutOfStock: boolean;
+    sessionAffinity: boolean;
+    merch?: unknown[];
+}
+
 /**
  * A per-request scoped client with a bound EvalContext.
  *
@@ -170,6 +301,23 @@ declare class AvsbServer {
      */
     private _utils;
     get utils(): AvsbUtils;
+    /**
+     * Server-side datasets read surface (e-commerce suite Phase 2).
+     * Constructed lazily on first access, mirroring the `utils` getter.
+     * `client.datasets.get(slug, key)` resolves the live version from the
+     * current datafile and never throws — see ./datasets.ts.
+     */
+    private _datasets;
+    get datasets(): DatasetsClient;
+    /**
+     * Server-side recommendations surface (e-commerce suite overhaul, C3).
+     * Constructed lazily on first access, mirroring the `datasets` getter.
+     * `client.recs.get({ recipe, … })` resolves the recipe registry from the
+     * current datafile and never throws; impressions/clicks ride the server
+     * tracker's queue and revenue attaches via the existing `trackPurchase`.
+     */
+    private _recs;
+    get recs(): RecsClient;
     constructor(options: AvsbServerOptions);
     onReady(): Promise<InitResult>;
     private initializeAndReady;
@@ -260,6 +408,6 @@ declare class RedisStickyBucketService implements StickyBucketService {
 
 declare function createDecisionLog(): DecisionLog;
 
-declare const SDK_VERSION = "0.3.0";
+declare const SDK_VERSION = "0.4.0";
 
-export { AvsbServer, type AvsbServerOptions, type EventOptions, type GetAllFlagsOptions, type GetFlagOptions, InMemoryStickyBucketService, type MiddlewareConfig, type PurchaseOrder, type RedisLike, type RedisStickyBucketOptions, RedisStickyBucketService, SDK_VERSION, type UserBoundClient, createDecisionLog, expressMiddleware, fastifyPlugin };
+export { AvsbServer, type AvsbServerOptions, type DatafileRecipe, type DatasetGetResult, type DatasetsClient, type EventOptions, type GetAllFlagsOptions, type GetFlagOptions, InMemoryStickyBucketService, type MiddlewareConfig, type PurchaseOrder, type RecProduct, type RecsAttribution, type RecsClient, type RecsGetRequest, type RecsResult, type RedisLike, type RedisStickyBucketOptions, RedisStickyBucketService, SDK_VERSION, type UserBoundClient, createDecisionLog, expressMiddleware, fastifyPlugin };

package/dist/index.js

@@ -13,6 +13,257 @@ import {
   noopLogger
 } from "@avsbhq/core";
 
+// src/datasets.ts
+var DEFAULT_REQUEST_TIMEOUT = 1e4;
+function miss(slug, version) {
+  return { found: false, meta: { slug, version } };
+}
+function createDatasetsClient(options) {
+  const { sdkKey, getDatafile, logger } = options;
+  const requestTimeout = options.requestTimeout ?? DEFAULT_REQUEST_TIMEOUT;
+  async function get(slug, key) {
+    if (!slug || !key) {
+      logger.warn("datasets.get called with an empty slug or key \u2014 returning not found");
+      return miss(slug, null);
+    }
+    const datafile = getDatafile();
+    if (!datafile) {
+      logger.debug(`SDK not ready, returning not found for dataset "${slug}"`);
+      return miss(slug, null);
+    }
+    const dataset = datafile.datasets?.find((d) => d.slug === slug);
+    if (!dataset) {
+      logger.debug(`Dataset "${slug}" not present in datafile \u2014 returning not found`);
+      return miss(slug, null);
+    }
+    if (!dataset.liveVersion) {
+      logger.debug(`Dataset "${slug}" has no live version \u2014 returning not found`);
+      return miss(slug, null);
+    }
+    const base = datafile.collectEndpoint.replace(/\/+$/, "");
+    const url = `${base}/v1/ds/${encodeURIComponent(sdkKey)}/${encodeURIComponent(slug)}/${dataset.liveVersion}/${encodeURIComponent(key)}`;
+    try {
+      const res = await fetch(url, { signal: AbortSignal.timeout(requestTimeout) });
+      if (!res.ok) {
+        logger.warn("Dataset lookup failed", { slug, key, status: res.status });
+        return miss(slug, dataset.liveVersion);
+      }
+      const body = await res.json();
+      if (!body || body.found !== true) {
+        return miss(slug, dataset.liveVersion);
+      }
+      return {
+        found: true,
+        value: body.value,
+        meta: { slug, version: dataset.liveVersion }
+      };
+    } catch (e) {
+      logger.warn("Dataset lookup error", { slug, key, error: String(e) });
+      return miss(slug, dataset.liveVersion);
+    }
+  }
+  return { get };
+}
+
+// src/recs.ts
+var DEFAULT_REQUEST_TIMEOUT2 = 1e4;
+var MAX_SEED_CHARS = 256;
+var MAX_SEEDS = 3;
+var MAX_ITEMS_CAP = 24;
+var DEFAULT_MAX_ITEMS = 8;
+var MAX_ID_CHARS = 64;
+var MAX_ATTR_VALUE_CHARS = 512;
+var GLOBAL_SEED = "_global";
+function clampMaxItems(value) {
+  if (typeof value !== "number" || !Number.isFinite(value) || value < 1) return DEFAULT_MAX_ITEMS;
+  return Math.min(Math.floor(value), MAX_ITEMS_CAP);
+}
+function asText(value) {
+  if (typeof value === "string") return value;
+  if (typeof value === "number" && Number.isFinite(value)) return String(value);
+  return "";
+}
+function joinIds(ids) {
+  let out = "";
+  for (const id of ids) {
+    const next = out === "" ? id : `${out},${id}`;
+    if (next.length > MAX_ATTR_VALUE_CHARS) break;
+    out = next;
+  }
+  return out;
+}
+function toRecProducts(items, cap) {
+  const out = [];
+  for (const item of items) {
+    if (out.length >= cap) break;
+    if (item === null || typeof item !== "object") continue;
+    const fields = item;
+    const id = (asText(fields.id) || asText(fields.sku)).slice(0, MAX_ID_CHARS);
+    if (id === "") continue;
+    const product = { id };
+    const title = asText(fields.title);
+    if (title) product.title = title;
+    const image = asText(fields.image);
+    if (image) product.image = image;
+    const href = asText(fields.href) || asText(fields.url);
+    if (href && !/^\s*javascript:/i.test(href)) product.href = href;
+    const category = asText(fields.category);
+    if (category) product.category = category;
+    if (typeof fields.price === "number" && Number.isFinite(fields.price)) {
+      product.price = Math.round(fields.price);
+    }
+    if (typeof fields.compareAtPrice === "number" && Number.isFinite(fields.compareAtPrice)) {
+      product.compareAtPrice = Math.round(fields.compareAtPrice);
+    }
+    if (typeof fields.currency === "string" && fields.currency !== "") {
+      product.currency = fields.currency;
+    }
+    const availability = fields.availability;
+    if (availability === "in_stock" || availability === "out_of_stock" || availability === "removed") {
+      product.availability = availability;
+    }
+    out.push(product);
+  }
+  return out;
+}
+function miss2(recipe, degraded) {
+  return { items: [], served: false, recipe, source: null, fallbackStep: null, degraded };
+}
+function createRecsClient(options) {
+  const { sdkKey, getDatafile, getTracker, logger } = options;
+  const requestTimeout = options.requestTimeout ?? DEFAULT_REQUEST_TIMEOUT2;
+  function resolveSeeds(context) {
+    const clip = (s) => s.slice(0, MAX_SEED_CHARS);
+    if (Array.isArray(context?.seeds)) {
+      const seeds = context.seeds.filter((s) => typeof s === "string" && s !== "").slice(0, MAX_SEEDS).map(clip);
+      if (seeds.length > 0) return seeds;
+    }
+    if (typeof context?.seed === "string" && context.seed !== "") return [clip(context.seed)];
+    return [GLOBAL_SEED];
+  }
+  async function get(req) {
+    try {
+      const recipeHandle = typeof req?.recipe === "string" ? req.recipe : "";
+      if (recipeHandle === "") {
+        logger.warn("recs.get called with an empty recipe \u2014 returning served:false");
+        return miss2("", false);
+      }
+      const datafile = getDatafile();
+      if (!datafile) {
+        logger.debug(`SDK not ready, returning served:false for recipe "${recipeHandle}"`);
+        return miss2(recipeHandle, false);
+      }
+      const recipes = datafile.recipes;
+      const entry = recipes?.find((r) => r.recipe === recipeHandle) ?? null;
+      if (!entry) {
+        logger.debug(`Recipe "${recipeHandle}" not present in datafile \u2014 returning served:false`);
+        return miss2(recipeHandle, false);
+      }
+      const seeds = resolveSeeds(req.context);
+      const maxItems = clampMaxItems(req.maxItems);
+      const excludeOutOfStock = typeof req.excludeOutOfStock === "boolean" ? req.excludeOutOfStock : entry.excludeOutOfStock;
+      const body = {
+        snippetKey: sdkKey,
+        assigned: 0,
+        sources: [{ chain: entry.chain }],
+        maxItems,
+        excludeOutOfStock,
+        merch: entry.merch ?? [],
+        sessionAffinity: entry.sessionAffinity
+      };
+      if (seeds.length === 1) body.seedKey = seeds[0];
+      else body.seedKeys = seeds;
+      const base = datafile.collectEndpoint.replace(/\/+$/, "").replace("/v1/collect/batch", "");
+      const res = await fetch(`${base}/v1/recs/resolve`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+        signal: AbortSignal.timeout(requestTimeout)
+      });
+      if (!res.ok) {
+        logger.warn("Recs resolve failed", { recipe: recipeHandle, status: res.status });
+        return miss2(recipeHandle, true);
+      }
+      const parsed = await res.json();
+      const data = parsed?.data;
+      if (!data || typeof data !== "object") return miss2(recipeHandle, true);
+      const items = toRecProducts(Array.isArray(data.items) ? data.items : [], maxItems);
+      const servedStep = data.served ?? null;
+      const served = servedStep !== null && items.length > 0;
+      if (req.attribution) {
+        const tracker = getTracker();
+        if (tracker) {
+          tracker.queue({
+            visitorId: req.attribution.visitorId,
+            experimentId: req.attribution.experimentId,
+            variationId: req.attribution.variationId,
+            eventName: "rec:impression",
+            revenue: null,
+            timestamp: Date.now(),
+            pageUrl: "",
+            attributes: {
+              recipe: entry.recipe,
+              seed: joinIds(seeds),
+              slug: servedStep?.slug ?? "",
+              version: servedStep ? String(servedStep.version) : "",
+              step: servedStep ? String(servedStep.step) : "",
+              served: served ? "true" : "false",
+              items: joinIds(items.map((i) => i.id))
+            }
+          });
+        } else {
+          logger.warn("recs.get attribution supplied before tracker is ready; impression dropped");
+        }
+      }
+      return {
+        items,
+        served,
+        recipe: entry.recipe,
+        source: servedStep?.slug ?? null,
+        fallbackStep: servedStep?.step ?? null,
+        degraded: false
+      };
+    } catch (e) {
+      logger.warn("Recs resolve error", {
+        recipe: typeof req?.recipe === "string" ? req.recipe : "",
+        error: String(e)
+      });
+      return miss2(typeof req?.recipe === "string" ? req.recipe : "", true);
+    }
+  }
+  function trackClick(productId, opts) {
+    if (typeof productId !== "string" || productId === "") {
+      logger.warn("recs.trackClick called with an empty productId \u2014 dropped");
+      return;
+    }
+    if (!opts || !opts.visitorId || !opts.experimentId || !opts.variationId) {
+      logger.warn("recs.trackClick requires visitorId/experimentId/variationId \u2014 dropped");
+      return;
+    }
+    const tracker = getTracker();
+    if (!tracker) {
+      logger.warn("recs.trackClick called before tracker is ready; click dropped");
+      return;
+    }
+    const position = typeof opts.position === "number" && Number.isInteger(opts.position) && opts.position >= 1 ? String(opts.position) : "";
+    tracker.queue({
+      visitorId: opts.visitorId,
+      experimentId: opts.experimentId,
+      variationId: opts.variationId,
+      eventName: "rec:click",
+      revenue: null,
+      timestamp: Date.now(),
+      pageUrl: "",
+      attributes: {
+        recipe: typeof opts.recipe === "string" ? opts.recipe : "",
+        item: productId.slice(0, MAX_ID_CHARS),
+        position
+      }
+    });
+  }
+  return { get, trackClick };
+}
+
 // src/decisionLog.ts
 function createDecisionLog() {
   const entries = [];
@@ -215,7 +466,7 @@ import {
 } from "@avsbhq/utils/streaming";
 
 // src/version.ts
-var SDK_VERSION = "0.3.0";
+var SDK_VERSION = "0.4.0";
 
 // src/UserBoundClient.ts
 function createUserBoundClient(server, context) {
@@ -391,6 +642,42 @@ var AvsbServer = class {
     }
     return this._utils;
   }
+  /**
+   * Server-side datasets read surface (e-commerce suite Phase 2).
+   * Constructed lazily on first access, mirroring the `utils` getter.
+   * `client.datasets.get(slug, key)` resolves the live version from the
+   * current datafile and never throws — see ./datasets.ts.
+   */
+  _datasets = null;
+  get datasets() {
+    if (!this._datasets) {
+      this._datasets = createDatasetsClient({
+        sdkKey: this.sdkKey,
+        getDatafile: () => this.datafile,
+        logger: this.logger
+      });
+    }
+    return this._datasets;
+  }
+  /**
+   * Server-side recommendations surface (e-commerce suite overhaul, C3).
+   * Constructed lazily on first access, mirroring the `datasets` getter.
+   * `client.recs.get({ recipe, … })` resolves the recipe registry from the
+   * current datafile and never throws; impressions/clicks ride the server
+   * tracker's queue and revenue attaches via the existing `trackPurchase`.
+   */
+  _recs = null;
+  get recs() {
+    if (!this._recs) {
+      this._recs = createRecsClient({
+        sdkKey: this.sdkKey,
+        getDatafile: () => this.datafile,
+        getTracker: () => this.tracker,
+        logger: this.logger
+      });
+    }
+    return this._recs;
+  }
   constructor(options) {
     this.sdkKey = options.sdkKey;
     this.pollingInterval = Math.max(options.pollingInterval ?? 6e4, 5e3);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@avsbhq/node",
-  "version": "1.2.0",
+  "version": "1.5.0",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",
@@ -33,7 +33,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@avsbhq/core": "1.1.0",
+    "@avsbhq/core": "1.3.0",
     "@avsbhq/utils": "1.0.1"
   },
   "devDependencies": {