feat(statsig): integrate @statsig/statsig-node-core and update depend…

[eldadfux]

…encies

• Added @statsig/statsig-node-core as a dependency for improved server-side functionality.
• Updated Statsig client initialization to utilize the new core library.
• Refactored user handling to support custom user fields and ensure compatibility with the new SDK.
• Updated package versions in bun.lock, package.json, and pnpm-lock.yaml for consistency.

Made-with: Cursor

What does this PR do?

(Provide a description of what this PR does.)

Test Plan

(Write your test plan here. If you changed any code, please provide us with clear instructions on how you verified your changes work.)

Related PRs and Issues

(If this PR is related to any other PR or resolves any issue or related to any issue link all related PR and issues here.)

Have you read the Contributing Guidelines on issues?

(Write your answer here.)

[greptile-apps]

Greptile Summary

This PR migrates the server-side Statsig integration from the legacy statsig-node package to @statsig/statsig-node-core, switching from a static class API to an instance-based client with matching Vite SSR externalization. The refactoring also introduces StatsigServerUserInput for type-safe user construction and correctly removes the now-unnecessary JSON.stringify around the bootstrap payload (which the new SDK returns as a pre-serialized string).

Confidence Score: 4/5

Safe to merge after confirming disableExposureLogging is supported by the new SDK

The migration is clean and well-structured. The only open question is whether the new SDK's getExperiment honours the disableExposureLogging option the same way the old dedicated method did; all other changes are straightforward API shape adaptations.

src/lib/statsig/hero-statsig.server.ts — specifically the getExperiment call with disableExposureLogging

Important Files Changed

Filename	Overview
src/lib/statsig/hero-statsig.server.ts	Core migration from statsig-node static class to @statsig/statsig-node-core instance-based client; introduces StatsigServerUserInput type, instance-level init caching, and adjusted API calls for getExperiment/getClientInitializeResponse
vite.config.ts	Correctly externalizes @statsig/statsig-node-core from Vite SSR bundling to support its native N-API binary
package.json	Replaces statsig-node ^6.5.1 with @statsig/statsig-node-core ^0.19.3

_{Reviews (1): Last reviewed commit: "feat(statsig): integrate @statsig/statsi..." | Re-trigger Greptile}

[greptile-apps]

Verify disableExposureLogging option is honoured by new SDK

The old code used the explicitly named getExperimentWithExposureLoggingDisabledSync, which made the no-logging contract unambiguous. The new call relies on { disableExposureLogging: true } being a recognised option in @statsig/statsig-node-core. If the option is silently ignored, the server will log an exposure for every SSR request, double-counting assignments in the Statsig dashboard and skewing experiment data. Worth confirming against the Node Core changelog or type definitions before shipping to production traffic.