@shipeasy/sdk 5.1.0 → 5.2.0

package/dist/server/index.d.ts

@@ -170,7 +170,27 @@ interface Experiment {
     salt: string;
     groups: ExperimentGroup[];
     status: "draft" | "running" | "stopped" | "archived";
+    /** Attribute to bucket on (e.g. company_id); defaults to user_id/anonymous_id. */
+    bucketBy?: string | null;
 }
+/** One persisted sticky assignment: group + 8-char salt prefix (reshuffle key). */
+interface StickyEntry {
+    g: string;
+    s: string;
+}
+/**
+ * Pluggable sticky-bucketing store for the server (doc 20 §2). Keyed by the
+ * bucketing unit; the value is that unit's per-experiment assignments. Absent
+ * from {@link FlagsClientOptions} ⇒ today's deterministic behaviour. Use
+ * {@link createInMemoryStickyStore} or a cookie-bridge built from request
+ * cookies.
+ */
+interface StickyBucketStore {
+    get(unit: string): Record<string, StickyEntry> | undefined;
+    set(unit: string, exp: string, entry: StickyEntry): void;
+}
+/** A process-local sticky store (Map-backed). Handy for tests + single-process servers. */
+declare function createInMemoryStickyStore(seed?: Record<string, Record<string, StickyEntry>>): StickyBucketStore;
 interface Universe {
     holdout_range: [number, number] | null;
 }
@@ -223,6 +243,21 @@ interface FlagsClientOptions {
     disableTelemetry?: boolean;
     /** Override the telemetry beacon host. Defaults to {@link DEFAULT_TELEMETRY_URL}. */
     telemetryUrl?: string;
+    /**
+     * Attribute names usable for targeting but never persisted in analytics
+     * (LD/Statsig `privateAttributes`). The server evaluates locally so private
+     * attrs never leave for evaluation at all; the only egress is `/collect`, and
+     * the listed keys are stripped from every outbound `track()` payload.
+     */
+    privateAttributes?: string[];
+    /**
+     * Sticky-bucketing store (doc 20 §2). When provided, `getExperiment` locks a
+     * unit to its first-assigned variant — changing allocation % or weights won't
+     * re-bucket enrolled units (changing the experiment salt is the reshuffle
+     * lever). Absent ⇒ deterministic (fully backward compatible). Built-ins:
+     * {@link createInMemoryStickyStore}, or a cookie-bridge over `__se_sticky`.
+     */
+    stickyStore?: StickyBucketStore;
     /**
      * Test mode — no network at all. init()/initOnce() are no-ops (never fetch),
      * track() is a no-op, telemetry is forced off, and the client starts
@@ -235,6 +270,8 @@ declare class FlagsClient {
     private readonly apiKey;
     private readonly baseUrl;
     private readonly env;
+    private readonly privateAttributes;
+    private readonly stickyStore;
     private readonly telemetry;
     private readonly seeLimiter;
     private flagsBlob;
@@ -328,7 +365,18 @@ declare class FlagsClient {
     getConfig<T = unknown>(name: string, decode?: (raw: unknown) => T): T | undefined;
     getConfig<T = unknown>(name: string, opts: GetConfigOptions<T>): T;
     getExperiment<P extends Record<string, unknown>>(name: string, user: User, defaultParams: P, decode?: (raw: unknown) => P): ExperimentResult<P>;
+    /** Drop caller-marked private attributes from an outbound props bag. */
+    private stripPrivate;
     track(userId: string, eventName: string, props?: Record<string, unknown>): void;
+    /**
+     * Emit an exposure event for an experiment at the server-side decision point
+     * (parity with the browser's auto-exposure). The server is stateless and
+     * never auto-logs, so call this when you actually present the treatment.
+     * Re-evaluates the experiment for `user` (a bare `user_id` string is wrapped
+     * as `{ user_id }`); if the user is enrolled, POSTs a single exposure to
+     * `/collect`. No-op in test mode or when the user isn't enrolled.
+     */
+    logExposure(user: string | User, name: string): void;
     /**
      * Report a structured error into the errors primitive. Fire-and-forget —
      * never blocks or throws into the request path. Spam-guarded by a 30s
@@ -418,6 +466,12 @@ interface ShipeasyServerConfig {
      * that evaluate many flags per request. See {@link FlagsClientOptions.disableTelemetry}.
      */
     disableTelemetry?: boolean;
+    /**
+     * Attribute names usable for targeting but never persisted in analytics
+     * (LD/Statsig `privateAttributes`). Stripped from every outbound `track()`
+     * payload. See {@link FlagsClientOptions.privateAttributes}.
+     */
+    privateAttributes?: string[];
 }
 interface ShipeasyServerHandle {
     flags: Record<string, boolean>;
@@ -485,6 +539,9 @@ declare const flags: {
      */
     ks(name: string, switchKey?: string): boolean;
     track(userId: string, eventName: string, props?: Record<string, unknown>): void;
+    /** Emit an exposure for an enrolled experiment at the decision point. See
+     *  {@link FlagsClient.logExposure}. No-op before configure(). */
+    logExposure(user: string | User, name: string): void;
     /**
      * Evaluate all flags / configs / experiments for a user against the locally
      * cached blob. Pass the request URL to apply ?se_ks_* / ?se_cf_* / ?se_exp_*
@@ -543,4 +600,4 @@ interface SeeApi {
  */
 declare const see: SeeApi;
 
-export { ANON_ID_COOKIE, type BootstrapHtmlOptions, type BootstrapPayload, type Consequence, type ExperimentResult, type ExpsBlob, FLAG_REASONS, type FetchLabelsOptions, type FlagDetail, type FlagReason, type FlagsBlob, FlagsClient, type FlagsClientEnv, type FlagsClientOptions, type GetConfigOptions, type I18nForRequest, type LabelFile, type SeeApi, type SeeChain, type SeeControlFlowChain, type SeeErrorEvent, type SeeExtras, type SeeKind, type SeeViolationChain, type ShipeasyServerConfig, type ShipeasyServerHandle, type User, type Violation, _murmur3ForTests, _resetShipeasyServerForTests, configureShipeasyServer, fetchLabelsForSSR, flags, getBootstrapHtml, getShipeasyServerClient, i18n, isExpected, see, seeContext, shipeasy, version };
+export { ANON_ID_COOKIE, type BootstrapHtmlOptions, type BootstrapPayload, type Consequence, type ExperimentResult, type ExpsBlob, FLAG_REASONS, type FetchLabelsOptions, type FlagDetail, type FlagReason, type FlagsBlob, FlagsClient, type FlagsClientEnv, type FlagsClientOptions, type GetConfigOptions, type I18nForRequest, type LabelFile, type SeeApi, type SeeChain, type SeeControlFlowChain, type SeeErrorEvent, type SeeExtras, type SeeKind, type SeeViolationChain, type ShipeasyServerConfig, type ShipeasyServerHandle, type StickyBucketStore, type StickyEntry, type User, type Violation, _murmur3ForTests, _resetShipeasyServerForTests, configureShipeasyServer, createInMemoryStickyStore, fetchLabelsForSSR, flags, getBootstrapHtml, getShipeasyServerClient, i18n, isExpected, see, seeContext, shipeasy, version };

package/dist/server/index.js

@@ -36,6 +36,7 @@ __export(server_exports, {
   _murmur3ForTests: () => _murmur3ForTests,
   _resetShipeasyServerForTests: () => _resetShipeasyServerForTests,
   configureShipeasyServer: () => configureShipeasyServer,
+  createInMemoryStickyStore: () => createInMemoryStickyStore,
   fetchLabelsForSSR: () => fetchLabelsForSSR,
   flags: () => flags,
   getBootstrapHtml: () => getBootstrapHtml,
@@ -415,6 +416,17 @@ var FLAG_REASONS = [
   "RULE_MATCH",
   "DEFAULT"
 ];
+function createInMemoryStickyStore(seed) {
+  const m = new Map(Object.entries(seed ?? {}));
+  return {
+    get: (unit) => m.get(unit),
+    set: (unit, exp, entry) => {
+      const cur = m.get(unit) ?? {};
+      cur[exp] = entry;
+      m.set(unit, cur);
+    }
+  };
+}
 function isEnabled(v) {
   return v === 1 || v === true;
 }
@@ -467,6 +479,14 @@ var ANON_ID_RX = /^[A-Za-z0-9_-]{1,64}$/;
 function mintAnonId() {
   return typeof crypto !== "undefined" && typeof crypto.randomUUID === "function" ? crypto.randomUUID() : `anon_${Math.random().toString(36).slice(2)}`;
 }
+function pickIdentifier(user, bucketBy) {
+  if (bucketBy) {
+    const v = user[bucketBy];
+    if (typeof v === "string" && v.length > 0) return v;
+    if (typeof v === "number") return String(v);
+  }
+  return user.user_id ?? user.anonymous_id;
+}
 function evalGateInternal(gate, user) {
   if (isEnabled(gate.killswitch)) return false;
   if (!isEnabled(gate.enabled)) return false;
@@ -526,6 +546,8 @@ var FlagsClient = class _FlagsClient {
   apiKey;
   baseUrl;
   env;
+  privateAttributes;
+  stickyStore;
   telemetry;
   seeLimiter = new SeeLimiter();
   flagsBlob = null;
@@ -552,6 +574,8 @@ var FlagsClient = class _FlagsClient {
     this.apiKey = opts.apiKey;
     this.baseUrl = (opts.baseUrl ?? "https://cdn.shipeasy.ai").replace(/\/$/, "");
     this.env = opts.env ?? "prod";
+    this.privateAttributes = opts.privateAttributes ?? [];
+    this.stickyStore = opts.stickyStore;
     this.testMode = opts.testMode === true;
     this.telemetry = new Telemetry({
       endpoint: opts.telemetryUrl ?? DEFAULT_TELEMETRY_URL,
@@ -782,7 +806,7 @@ var FlagsClient = class _FlagsClient {
       const gate = this.flagsBlob.gates[exp.targetingGate];
       if (!gate || !evalGateInternal(gate, user)) return notIn;
     }
-    const uid = user.user_id ?? user.anonymous_id;
+    const uid = pickIdentifier(user, exp.bucketBy);
     if (!uid) return notIn;
     const universe = this.expsBlob.universes[exp.universe];
     const holdoutRange = universe?.holdout_range ?? null;
@@ -791,6 +815,23 @@ var FlagsClient = class _FlagsClient {
       const [lo, hi] = holdoutRange;
       if (seg >= lo && seg <= hi) return notIn;
     }
+    const asResult = (g) => {
+      if (!decode) return { inExperiment: true, group: g.name, params: g.params };
+      try {
+        return { inExperiment: true, group: g.name, params: decode(g.params) };
+      } catch (err) {
+        console.warn(`[shipeasy] getExperiment('${name}') decode failed:`, String(err));
+        return notIn;
+      }
+    };
+    const salt8 = exp.salt.slice(0, 8);
+    if (this.stickyStore) {
+      const entry = this.stickyStore.get(uid)?.[name];
+      if (entry && entry.s === salt8) {
+        const g = exp.groups.find((x) => x.name === entry.g);
+        if (g) return asResult(g);
+      }
+    }
     if (murmur3(`${exp.salt}:alloc:${uid}`) % 1e4 >= exp.allocationPct) return notIn;
     const groupHash = murmur3(`${exp.salt}:group:${uid}`) % 1e4;
     let cumulative = 0;
@@ -798,21 +839,24 @@ var FlagsClient = class _FlagsClient {
       const g = exp.groups[i];
       cumulative += g.weight;
       if (groupHash < cumulative || i === exp.groups.length - 1) {
-        if (!decode) {
-          return { inExperiment: true, group: g.name, params: g.params };
-        }
-        try {
-          return { inExperiment: true, group: g.name, params: decode(g.params) };
-        } catch (err) {
-          console.warn(`[shipeasy] getExperiment('${name}') decode failed:`, String(err));
-          return notIn;
-        }
+        this.stickyStore?.set(uid, name, { g: g.name, s: salt8 });
+        return asResult(g);
       }
     }
     return notIn;
   }
+  /** Drop caller-marked private attributes from an outbound props bag. */
+  stripPrivate(props) {
+    if (!props || this.privateAttributes.length === 0) return props;
+    const out = {};
+    for (const [k, v] of Object.entries(props)) {
+      if (!this.privateAttributes.includes(k)) out[k] = v;
+    }
+    return out;
+  }
   track(userId, eventName, props) {
     if (this.testMode) return;
+    const safeProps = this.stripPrivate(props);
     const body = JSON.stringify({
       events: [
         {
@@ -820,7 +864,7 @@ var FlagsClient = class _FlagsClient {
           event_name: eventName,
           user_id: userId,
           ts: Date.now(),
-          ...props !== void 0 ? { properties: props } : {}
+          ...safeProps !== void 0 ? { properties: safeProps } : {}
         }
       ]
     });
@@ -830,6 +874,37 @@ var FlagsClient = class _FlagsClient {
       body
     }).catch((err) => console.warn("[shipeasy] track failed:", String(err)));
   }
+  /**
+   * Emit an exposure event for an experiment at the server-side decision point
+   * (parity with the browser's auto-exposure). The server is stateless and
+   * never auto-logs, so call this when you actually present the treatment.
+   * Re-evaluates the experiment for `user` (a bare `user_id` string is wrapped
+   * as `{ user_id }`); if the user is enrolled, POSTs a single exposure to
+   * `/collect`. No-op in test mode or when the user isn't enrolled.
+   */
+  logExposure(user, name) {
+    if (this.testMode) return;
+    const u = typeof user === "string" ? { user_id: user } : user;
+    const result = this.getExperiment(name, u, {});
+    if (!result.inExperiment) return;
+    const body = JSON.stringify({
+      events: [
+        {
+          type: "exposure",
+          experiment: name,
+          group: result.group,
+          ...u.user_id !== void 0 ? { user_id: u.user_id } : {},
+          ...u.anonymous_id !== void 0 ? { anonymous_id: u.anonymous_id } : {},
+          ts: Date.now()
+        }
+      ]
+    });
+    globalThis.fetch(`${this.baseUrl}/collect`, {
+      method: "POST",
+      headers: { "X-SDK-Key": this.apiKey, "Content-Type": "text/plain" },
+      body
+    }).catch((err) => console.warn("[shipeasy] logExposure failed:", String(err)));
+  }
   /**
    * Report a structured error into the errors primitive. Fire-and-forget —
    * never blocks or throws into the request path. Spam-guarded by a 30s
@@ -1036,7 +1111,11 @@ async function shipeasy(opts) {
     );
   }
   const profile = opts.i18nDefaultProfile ?? "en:prod";
-  flags.configure({ apiKey: serverKey, disableTelemetry: opts.disableTelemetry });
+  flags.configure({
+    apiKey: serverKey,
+    disableTelemetry: opts.disableTelemetry,
+    privateAttributes: opts.privateAttributes
+  });
   let resolvedUrlOverrides = opts.urlOverrides;
   if (!resolvedUrlOverrides) {
     try {
@@ -1175,6 +1254,11 @@ var flags = {
   track(userId, eventName, props) {
     _server?.track(userId, eventName, props);
   },
+  /** Emit an exposure for an enrolled experiment at the decision point. See
+   *  {@link FlagsClient.logExposure}. No-op before configure(). */
+  logExposure(user, name) {
+    _server?.logExposure(user, name);
+  },
   /**
    * Evaluate all flags / configs / experiments for a user against the locally
    * cached blob. Pass the request URL to apply ?se_ks_* / ?se_cf_* / ?se_exp_*
@@ -1211,6 +1295,7 @@ var see = Object.assign(
   _murmur3ForTests,
   _resetShipeasyServerForTests,
   configureShipeasyServer,
+  createInMemoryStickyStore,
   fetchLabelsForSSR,
   flags,
   getBootstrapHtml,

package/dist/server/index.mjs

@@ -373,6 +373,17 @@ var FLAG_REASONS = [
   "RULE_MATCH",
   "DEFAULT"
 ];
+function createInMemoryStickyStore(seed) {
+  const m = new Map(Object.entries(seed ?? {}));
+  return {
+    get: (unit) => m.get(unit),
+    set: (unit, exp, entry) => {
+      const cur = m.get(unit) ?? {};
+      cur[exp] = entry;
+      m.set(unit, cur);
+    }
+  };
+}
 function isEnabled(v) {
   return v === 1 || v === true;
 }
@@ -425,6 +436,14 @@ var ANON_ID_RX = /^[A-Za-z0-9_-]{1,64}$/;
 function mintAnonId() {
   return typeof crypto !== "undefined" && typeof crypto.randomUUID === "function" ? crypto.randomUUID() : `anon_${Math.random().toString(36).slice(2)}`;
 }
+function pickIdentifier(user, bucketBy) {
+  if (bucketBy) {
+    const v = user[bucketBy];
+    if (typeof v === "string" && v.length > 0) return v;
+    if (typeof v === "number") return String(v);
+  }
+  return user.user_id ?? user.anonymous_id;
+}
 function evalGateInternal(gate, user) {
   if (isEnabled(gate.killswitch)) return false;
   if (!isEnabled(gate.enabled)) return false;
@@ -484,6 +503,8 @@ var FlagsClient = class _FlagsClient {
   apiKey;
   baseUrl;
   env;
+  privateAttributes;
+  stickyStore;
   telemetry;
   seeLimiter = new SeeLimiter();
   flagsBlob = null;
@@ -510,6 +531,8 @@ var FlagsClient = class _FlagsClient {
     this.apiKey = opts.apiKey;
     this.baseUrl = (opts.baseUrl ?? "https://cdn.shipeasy.ai").replace(/\/$/, "");
     this.env = opts.env ?? "prod";
+    this.privateAttributes = opts.privateAttributes ?? [];
+    this.stickyStore = opts.stickyStore;
     this.testMode = opts.testMode === true;
     this.telemetry = new Telemetry({
       endpoint: opts.telemetryUrl ?? DEFAULT_TELEMETRY_URL,
@@ -740,7 +763,7 @@ var FlagsClient = class _FlagsClient {
       const gate = this.flagsBlob.gates[exp.targetingGate];
       if (!gate || !evalGateInternal(gate, user)) return notIn;
     }
-    const uid = user.user_id ?? user.anonymous_id;
+    const uid = pickIdentifier(user, exp.bucketBy);
     if (!uid) return notIn;
     const universe = this.expsBlob.universes[exp.universe];
     const holdoutRange = universe?.holdout_range ?? null;
@@ -749,6 +772,23 @@ var FlagsClient = class _FlagsClient {
       const [lo, hi] = holdoutRange;
       if (seg >= lo && seg <= hi) return notIn;
     }
+    const asResult = (g) => {
+      if (!decode) return { inExperiment: true, group: g.name, params: g.params };
+      try {
+        return { inExperiment: true, group: g.name, params: decode(g.params) };
+      } catch (err) {
+        console.warn(`[shipeasy] getExperiment('${name}') decode failed:`, String(err));
+        return notIn;
+      }
+    };
+    const salt8 = exp.salt.slice(0, 8);
+    if (this.stickyStore) {
+      const entry = this.stickyStore.get(uid)?.[name];
+      if (entry && entry.s === salt8) {
+        const g = exp.groups.find((x) => x.name === entry.g);
+        if (g) return asResult(g);
+      }
+    }
     if (murmur3(`${exp.salt}:alloc:${uid}`) % 1e4 >= exp.allocationPct) return notIn;
     const groupHash = murmur3(`${exp.salt}:group:${uid}`) % 1e4;
     let cumulative = 0;
@@ -756,21 +796,24 @@ var FlagsClient = class _FlagsClient {
       const g = exp.groups[i];
       cumulative += g.weight;
       if (groupHash < cumulative || i === exp.groups.length - 1) {
-        if (!decode) {
-          return { inExperiment: true, group: g.name, params: g.params };
-        }
-        try {
-          return { inExperiment: true, group: g.name, params: decode(g.params) };
-        } catch (err) {
-          console.warn(`[shipeasy] getExperiment('${name}') decode failed:`, String(err));
-          return notIn;
-        }
+        this.stickyStore?.set(uid, name, { g: g.name, s: salt8 });
+        return asResult(g);
       }
     }
     return notIn;
   }
+  /** Drop caller-marked private attributes from an outbound props bag. */
+  stripPrivate(props) {
+    if (!props || this.privateAttributes.length === 0) return props;
+    const out = {};
+    for (const [k, v] of Object.entries(props)) {
+      if (!this.privateAttributes.includes(k)) out[k] = v;
+    }
+    return out;
+  }
   track(userId, eventName, props) {
     if (this.testMode) return;
+    const safeProps = this.stripPrivate(props);
     const body = JSON.stringify({
       events: [
         {
@@ -778,7 +821,7 @@ var FlagsClient = class _FlagsClient {
           event_name: eventName,
           user_id: userId,
           ts: Date.now(),
-          ...props !== void 0 ? { properties: props } : {}
+          ...safeProps !== void 0 ? { properties: safeProps } : {}
         }
       ]
     });
@@ -788,6 +831,37 @@ var FlagsClient = class _FlagsClient {
       body
     }).catch((err) => console.warn("[shipeasy] track failed:", String(err)));
   }
+  /**
+   * Emit an exposure event for an experiment at the server-side decision point
+   * (parity with the browser's auto-exposure). The server is stateless and
+   * never auto-logs, so call this when you actually present the treatment.
+   * Re-evaluates the experiment for `user` (a bare `user_id` string is wrapped
+   * as `{ user_id }`); if the user is enrolled, POSTs a single exposure to
+   * `/collect`. No-op in test mode or when the user isn't enrolled.
+   */
+  logExposure(user, name) {
+    if (this.testMode) return;
+    const u = typeof user === "string" ? { user_id: user } : user;
+    const result = this.getExperiment(name, u, {});
+    if (!result.inExperiment) return;
+    const body = JSON.stringify({
+      events: [
+        {
+          type: "exposure",
+          experiment: name,
+          group: result.group,
+          ...u.user_id !== void 0 ? { user_id: u.user_id } : {},
+          ...u.anonymous_id !== void 0 ? { anonymous_id: u.anonymous_id } : {},
+          ts: Date.now()
+        }
+      ]
+    });
+    globalThis.fetch(`${this.baseUrl}/collect`, {
+      method: "POST",
+      headers: { "X-SDK-Key": this.apiKey, "Content-Type": "text/plain" },
+      body
+    }).catch((err) => console.warn("[shipeasy] logExposure failed:", String(err)));
+  }
   /**
    * Report a structured error into the errors primitive. Fire-and-forget —
    * never blocks or throws into the request path. Spam-guarded by a 30s
@@ -994,7 +1068,11 @@ async function shipeasy(opts) {
     );
   }
   const profile = opts.i18nDefaultProfile ?? "en:prod";
-  flags.configure({ apiKey: serverKey, disableTelemetry: opts.disableTelemetry });
+  flags.configure({
+    apiKey: serverKey,
+    disableTelemetry: opts.disableTelemetry,
+    privateAttributes: opts.privateAttributes
+  });
   let resolvedUrlOverrides = opts.urlOverrides;
   if (!resolvedUrlOverrides) {
     try {
@@ -1133,6 +1211,11 @@ var flags = {
   track(userId, eventName, props) {
     _server?.track(userId, eventName, props);
   },
+  /** Emit an exposure for an enrolled experiment at the decision point. See
+   *  {@link FlagsClient.logExposure}. No-op before configure(). */
+  logExposure(user, name) {
+    _server?.logExposure(user, name);
+  },
   /**
    * Evaluate all flags / configs / experiments for a user against the locally
    * cached blob. Pass the request URL to apply ?se_ks_* / ?se_cf_* / ?se_exp_*
@@ -1168,6 +1251,7 @@ export {
   _murmur3ForTests,
   _resetShipeasyServerForTests,
   configureShipeasyServer,
+  createInMemoryStickyStore,
   fetchLabelsForSSR,
   flags,
   getBootstrapHtml,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shipeasy/sdk",
-  "version": "5.1.0",
+  "version": "5.2.0",
   "description": "Shipeasy SDK — feature gates, runtime configs, experiments, and metrics for the Shipeasy hosted service.",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://shipeasy.ai",
@@ -47,12 +47,24 @@
       "import": "./dist/next/index.mjs",
       "default": "./dist/next/index.js"
     },
+    "./openfeature-server": {
+      "types": "./dist/openfeature-server/index.d.ts",
+      "import": "./dist/openfeature-server/index.mjs",
+      "default": "./dist/openfeature-server/index.js"
+    },
+    "./openfeature-web": {
+      "types": "./dist/openfeature-web/index.d.ts",
+      "import": "./dist/openfeature-web/index.mjs",
+      "default": "./dist/openfeature-web/index.js"
+    },
     "./templates/*": "./templates/*.js"
   },
   "files": [
     "dist/server/",
     "dist/client/",
     "dist/next/",
+    "dist/openfeature-server/",
+    "dist/openfeature-web/",
     "templates/",
     "LICENSE",
     "README.md"
@@ -68,14 +80,24 @@
     "murmurhash-js": "^1.0.0"
   },
   "peerDependencies": {
+    "@openfeature/server-sdk": ">=1.13.0",
+    "@openfeature/web-sdk": ">=1.2.0",
     "next": ">=13"
   },
   "peerDependenciesMeta": {
+    "@openfeature/server-sdk": {
+      "optional": true
+    },
+    "@openfeature/web-sdk": {
+      "optional": true
+    },
     "next": {
       "optional": true
     }
   },
   "devDependencies": {
+    "@openfeature/server-sdk": "^1.22.0",
+    "@openfeature/web-sdk": "^1.9.0",
     "@types/murmurhash-js": "^1.0.6",
     "@types/node": "^20.0.0",
     "next": "^16.2.3",