@runbandit/sdk 3.0.0 → 3.1.1

package/dist/index.js

@@ -1,818 +1,886 @@
-// src/session.ts
-var SESSION_ID_KEY = "bandits_session_id";
-var SESSION_CREATED_AT_KEY = "bandits_session_created_at";
-var DEFAULT_SESSION_TTL_MS = 864e5;
-function generateId() {
-  if (typeof crypto !== "undefined" && crypto.randomUUID) {
-    return crypto.randomUUID();
-  }
-  return "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (c) => {
-    const r = Math.random() * 16 | 0;
-    return (c === "x" ? r : r & 3 | 8).toString(16);
-  });
+// ../shared/dist/types.js
+var ExperimentStatus;
+(function(ExperimentStatus2) {
+  ExperimentStatus2["DRAFT"] = "draft";
+  ExperimentStatus2["ACTIVE"] = "active";
+  ExperimentStatus2["PAUSED"] = "paused";
+  ExperimentStatus2["COMPLETED"] = "completed";
+  ExperimentStatus2["ARCHIVED"] = "archived";
+})(ExperimentStatus || (ExperimentStatus = {}));
+var BanditAlgorithm;
+(function(BanditAlgorithm2) {
+  BanditAlgorithm2["THOMPSON_SAMPLING"] = "thompson_sampling";
+  BanditAlgorithm2["CONTEXTUAL_LINEAR"] = "contextual_linear";
+})(BanditAlgorithm || (BanditAlgorithm = {}));
+var Posterior;
+(function(Posterior2) {
+  Posterior2["BETA"] = "beta";
+  Posterior2["NORMAL_GAMMA"] = "normal_gamma";
+})(Posterior || (Posterior = {}));
+function normalizePosterior(posterior) {
+  return posterior === Posterior.NORMAL_GAMMA ? Posterior.NORMAL_GAMMA : Posterior.BETA;
 }
-function getOrCreateSessionId(options = {}) {
-  const { storage, now = () => Date.now(), ttlMs = DEFAULT_SESSION_TTL_MS } = options;
-  if (!storage) return generateId();
-  try {
-    const stored = storage.getItem(SESSION_ID_KEY);
-    const storedAt = storage.getItem(SESSION_CREATED_AT_KEY);
-    if (stored && storedAt) {
-      const age = now() - parseInt(storedAt, 10);
-      if (age < ttlMs) return stored;
-    }
-    const id = generateId();
-    storage.setItem(SESSION_ID_KEY, id);
-    storage.setItem(SESSION_CREATED_AT_KEY, String(now()));
-    return id;
-  } catch {
-    return generateId();
+var ForgettingMode;
+(function(ForgettingMode2) {
+  ForgettingMode2["NONE"] = "none";
+  ForgettingMode2["DISCOUNTED"] = "discounted";
+  ForgettingMode2["SLIDING_WINDOW"] = "sliding_window";
+})(ForgettingMode || (ForgettingMode = {}));
+var DEFAULT_HALF_LIFE_MS = 7 * 24 * 60 * 60 * 1e3;
+var DEFAULT_WINDOW_MS = 14 * 24 * 60 * 60 * 1e3;
+var STATIONARY = { mode: ForgettingMode.NONE };
+function resolveForgetting(config) {
+  switch (config?.mode) {
+    case ForgettingMode.DISCOUNTED:
+      return {
+        mode: ForgettingMode.DISCOUNTED,
+        halfLifeMs: config.halfLifeMs && config.halfLifeMs > 0 ? config.halfLifeMs : DEFAULT_HALF_LIFE_MS
+      };
+    case ForgettingMode.SLIDING_WINDOW:
+      return {
+        mode: ForgettingMode.SLIDING_WINDOW,
+        windowMs: config.windowMs && config.windowMs > 0 ? config.windowMs : DEFAULT_WINDOW_MS
+      };
+    default:
+      return STATIONARY;
   }
 }
-function defaultSessionStorage() {
-  return typeof window !== "undefined" && window.localStorage ? window.localStorage : null;
+var LEGACY_ALGORITHM_ALIASES = {
+  epsilon_greedy: BanditAlgorithm.THOMPSON_SAMPLING,
+  ucb1: BanditAlgorithm.THOMPSON_SAMPLING,
+  contextual_neural: BanditAlgorithm.CONTEXTUAL_LINEAR
+};
+function normalizeAlgorithm(algorithm) {
+  if (algorithm === BanditAlgorithm.THOMPSON_SAMPLING)
+    return BanditAlgorithm.THOMPSON_SAMPLING;
+  if (algorithm === BanditAlgorithm.CONTEXTUAL_LINEAR)
+    return BanditAlgorithm.CONTEXTUAL_LINEAR;
+  return LEGACY_ALGORITHM_ALIASES[algorithm ?? ""] ?? BanditAlgorithm.THOMPSON_SAMPLING;
 }
-
-// src/client.ts
-function currentPageUrl() {
-  if (typeof location !== "undefined" && location.origin && location.pathname) {
-    return location.origin + location.pathname;
+var ContentType;
+(function(ContentType2) {
+  ContentType2["PLAIN_TEXT"] = "plain_text";
+  ContentType2["MARKDOWN"] = "markdown";
+  ContentType2["HTML"] = "html";
+  ContentType2["CSS"] = "css";
+  ContentType2["JAVASCRIPT"] = "javascript";
+  ContentType2["JSON"] = "json";
+  ContentType2["IMAGE"] = "image";
+  ContentType2["VIDEO"] = "video";
+  ContentType2["AUDIO"] = "audio";
+  ContentType2["DOCUMENT"] = "document";
+})(ContentType || (ContentType = {}));
+function getContentTypeCategory(contentType) {
+  switch (contentType) {
+    case ContentType.PLAIN_TEXT:
+    case ContentType.MARKDOWN:
+      return "text";
+    case ContentType.HTML:
+    case ContentType.CSS:
+    case ContentType.JAVASCRIPT:
+    case ContentType.JSON:
+      return "code";
+    case ContentType.IMAGE:
+    case ContentType.VIDEO:
+    case ContentType.AUDIO:
+    case ContentType.DOCUMENT:
+      return "file";
   }
-  return void 0;
 }
-var BanditsClient = class {
-  config;
-  namedEventQueue = [];
-  sessionId;
-  flushTimer;
-  constructor(config) {
-    this.config = {
-      timeout: 5e3,
-      batchSize: 100,
-      flushInterval: 1e4,
-      sessionTtl: 864e5,
-      ...config
-    };
-    this.sessionId = this.getOrCreateSessionId();
-    this.startBatchFlush();
-  }
-  async getAssignment(experimentId, userId, context) {
-    const request = {
-      experimentId,
-      userId,
-      context,
-      sessionId: this.sessionId
-    };
-    const pageUrl = currentPageUrl();
-    if (pageUrl) request.pageUrl = pageUrl;
-    const response = await this.makeRequest(
-      "/assignments",
-      "POST",
-      request
-    );
-    if (!response.success || !response.data) {
-      throw new Error(response.error || "Failed to get assignment");
-    }
-    const assignment = response.data?.data ?? response.data;
-    if (!assignment?.assignmentId) {
-      throw new Error("Invalid assignment response");
-    }
-    return {
-      assignmentId: assignment.assignmentId,
-      treatmentId: assignment.treatmentId,
-      experimentId,
-      userId,
-      config: assignment.treatment?.config || {},
-      funnelId: assignment.funnelId
-    };
-  }
-  trackNamedEvent(event, opts) {
-    const request = {
-      name: event.name,
-      category: event.category || "custom",
-      value: event.value,
-      metadata: event.metadata,
-      sessionId: this.sessionId
-    };
-    if (opts?.userId) request.userId = opts.userId;
-    if (opts?.assignmentId) request.assignmentId = opts.assignmentId;
-    if (opts?.immediate) {
-      const url = `${this.normalizeApiUrl()}/events`;
-      try {
-        void fetch(url, {
-          method: "POST",
-          headers: {
-            "Authorization": `Bearer ${this.config.apiKey}`,
-            "Content-Type": "application/json"
-          },
-          body: JSON.stringify(request),
-          keepalive: true
-        });
-      } catch {
-      }
-      return;
-    }
-    this.namedEventQueue.push(request);
-    if (this.namedEventQueue.length >= this.config.batchSize) {
-      this.flush();
-    }
-  }
-  async flush() {
-    const namedEvents = [...this.namedEventQueue];
-    this.namedEventQueue = [];
-    if (namedEvents.length === 0) return;
-    try {
-      await fetch(`${this.normalizeApiUrl()}/events/batch`, {
-        method: "POST",
-        headers: {
-          "Authorization": `Bearer ${this.config.apiKey}`,
-          "Content-Type": "application/json"
-        },
-        body: JSON.stringify({ events: namedEvents }),
-        keepalive: true
-      });
-    } catch (error) {
-      this.namedEventQueue.unshift(...namedEvents);
-      throw error;
+var FunnelStatus;
+(function(FunnelStatus2) {
+  FunnelStatus2["DRAFT"] = "draft";
+  FunnelStatus2["ACTIVE"] = "active";
+  FunnelStatus2["PAUSED"] = "paused";
+  FunnelStatus2["COMPLETED"] = "completed";
+})(FunnelStatus || (FunnelStatus = {}));
+
+// ../shared/dist/utils.js
+function validateTreatmentWeights(treatments) {
+  const totalWeight = treatments.reduce((sum, treatment) => sum + (treatment.weight || 1), 0);
+  return totalWeight > 0;
+}
+function normalizeTreatmentWeights(treatments) {
+  const totalWeight = treatments.reduce((sum, treatment) => sum + (treatment.weight || 1), 0);
+  return treatments.map((treatment) => ({
+    ...treatment,
+    weight: (treatment.weight || 1) / totalWeight
+  }));
+}
+function calculateConfidenceInterval(successes, trials, confidence = 0.95) {
+  if (trials === 0)
+    return { lower: 0, upper: 0 };
+  const z = confidence === 0.95 ? 1.96 : confidence === 0.99 ? 2.576 : 1.645;
+  const p = successes / trials;
+  const margin = z * Math.sqrt(p * (1 - p) / trials);
+  return {
+    lower: Math.max(0, p - margin),
+    upper: Math.min(1, p + margin)
+  };
+}
+function isValidEmail(email) {
+  const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+  return emailRegex.test(email);
+}
+function sanitizeMetadata(metadata) {
+  const sanitized = {};
+  for (const [key, value] of Object.entries(metadata)) {
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
+      sanitized[key] = value;
+    } else if (value !== null && value !== void 0) {
+      sanitized[key] = String(value);
     }
   }
-  async identify(anonymousId, identifiedUserId, mergeReason) {
-    const response = await this.makeRequest(
-      "/identify",
-      "POST",
-      {
-        anonymousId,
-        identifiedUserId,
-        mergeReason: mergeReason || "manual"
-      }
-    );
-    if (!response.success) {
-      throw new Error(response.error || "Failed to identify user");
-    }
+  return sanitized;
+}
+function generateSubdomain(name) {
+  return name.toLowerCase().replace(/[^a-z0-9\s-]/g, "").replace(/\s+/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "").substring(0, 63);
+}
+function isValidSubdomain(subdomain) {
+  if (!subdomain || subdomain.length === 0 || subdomain.length > 63) {
+    return false;
   }
-  async label(userId, labels) {
-    const response = await this.makeRequest("/labels", "POST", { userId, labels });
-    if (!response.success) {
-      throw new Error(response.error || "Failed to record labels");
-    }
+  const subdomainRegex = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;
+  const reserved = [
+    "www",
+    "api",
+    "app",
+    "admin",
+    "dashboard",
+    "mail",
+    "ftp",
+    "localhost",
+    "staging",
+    "dev",
+    "test",
+    "demo",
+    "blog",
+    "docs",
+    "status",
+    "help",
+    "support",
+    "cdn",
+    "static",
+    "assets",
+    "secure",
+    "payment",
+    "pay"
+  ];
+  return subdomainRegex.test(subdomain) && !reserved.includes(subdomain);
+}
+function extractSubdomain(hostname, baseDomain) {
+  if (!hostname || !baseDomain) {
+    return null;
   }
-  async trackFunnelReward(funnelId, userId, value) {
-    const response = await this.makeRequest(
-      `/funnels/${funnelId}/reward`,
-      "POST",
-      { userId, value }
-    );
-    if (!response.success) {
-      throw new Error(response.error || "Failed to record funnel reward");
-    }
+  const cleanHostname = hostname.split(":")[0];
+  if (!cleanHostname.endsWith(baseDomain)) {
+    return null;
   }
-  async getBundle(bundleId, userId, context) {
-    const request = {
-      bundleId,
-      userId,
-      context,
-      sessionId: this.sessionId
-    };
-    const pageUrl = currentPageUrl();
-    if (pageUrl) request.pageUrl = pageUrl;
-    const response = await this.makeRequest("/bundles/assignment", "POST", request);
-    if (!response.success || !response.data) {
-      throw new Error(response.error || "Failed to get bundle assignment");
-    }
-    const payload = response.data?.data ?? response.data;
-    if (!payload?.bundleAssignmentId || !payload?.slots) {
-      throw new Error("Invalid bundle assignment response");
-    }
-    return {
-      bundleAssignmentId: payload.bundleAssignmentId,
-      slots: payload.slots
-    };
+  const subdomain = cleanHostname.slice(0, -(baseDomain.length + 1));
+  if (!subdomain || subdomain === "www") {
+    return null;
   }
-  async trackBundleReward(bundleId, userId, value) {
-    const response = await this.makeRequest(`/bundles/${bundleId}/reward`, "POST", {
-      userId,
-      value
-    });
-    if (!response.success) {
-      throw new Error(response.error || "Failed to record bundle reward");
-    }
+  return subdomain;
+}
+function buildSubdomainUrl(subdomain, baseDomain, path = "", protocol = "https") {
+  const url = `${protocol}://${subdomain}.${baseDomain}`;
+  return path ? `${url}${path.startsWith("/") ? path : "/" + path}` : url;
+}
+
+// ../shared/dist/email-token.js
+var EMAIL_TOKEN_PARAM = "bt";
+var encoder = new TextEncoder();
+function base64UrlEncode(bytes) {
+  let binary = "";
+  for (const byte of bytes)
+    binary += String.fromCharCode(byte);
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function base64UrlDecode(value) {
+  const padded = value.replace(/-/g, "+").replace(/_/g, "/");
+  const binary = atob(padded + "=".repeat((4 - padded.length % 4) % 4));
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++)
+    bytes[i] = binary.charCodeAt(i);
+  return bytes;
+}
+async function hmac(secret, message) {
+  const key = await crypto.subtle.importKey("raw", encoder.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+  return new Uint8Array(await crypto.subtle.sign("HMAC", key, encoder.encode(message)));
+}
+function timingSafeEqual(a, b) {
+  if (a.length !== b.length)
+    return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++)
+    diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return diff === 0;
+}
+async function hashRecipient(recipientId, companySecret) {
+  const digest = await hmac(companySecret, `recipient:${recipientId}`);
+  return base64UrlEncode(digest.slice(0, 16));
+}
+async function mintEmailToken(payload, key) {
+  const body = base64UrlEncode(encoder.encode(JSON.stringify({
+    c: payload.c,
+    r: payload.r,
+    k: payload.k,
+    l: payload.l,
+    v: key.version
+  })));
+  const signature = base64UrlEncode(await hmac(key.secret, body));
+  return `${body}.${signature}`;
+}
+async function verifyEmailToken(token, keys) {
+  const parts = token.split(".");
+  if (parts.length !== 2 || !parts[0] || !parts[1]) {
+    return { valid: false, reason: "malformed" };
   }
-  generateId() {
-    return generateId();
+  const [body, signature] = parts;
+  let payload;
+  try {
+    payload = JSON.parse(new TextDecoder().decode(base64UrlDecode(body)));
+  } catch {
+    return { valid: false, reason: "malformed" };
   }
-  normalizeApiUrl() {
-    let baseUrl = this.config.apiUrl.replace(/\/$/, "");
-    if (!baseUrl.endsWith("/api")) {
-      baseUrl = `${baseUrl}/api`;
-    }
-    return baseUrl;
+  if (!payload || typeof payload.c !== "string" || typeof payload.r !== "string" || !Array.isArray(payload.k) || !payload.k.every((arm) => Number.isInteger(arm) && arm >= 0) || !Number.isInteger(payload.l) || payload.l < 0 || !Number.isInteger(payload.v)) {
+    return { valid: false, reason: "malformed" };
   }
-  getOrCreateSessionId() {
-    return getOrCreateSessionId({
-      storage: defaultSessionStorage(),
-      ttlMs: this.config.sessionTtl
-    });
+  const key = keys.find((candidate) => candidate.version === payload.v);
+  if (!key)
+    return { valid: false, reason: "unknown_key" };
+  const expected = base64UrlEncode(await hmac(key.secret, body));
+  if (!timingSafeEqual(expected, signature)) {
+    return { valid: false, reason: "bad_signature" };
   }
-  async makeRequest(endpoint, method, body, extraHeaders) {
-    const url = `${this.normalizeApiUrl()}${endpoint}`;
-    const headers = {
-      "Authorization": `Bearer ${this.config.apiKey}`,
-      "Content-Type": "application/json",
-      ...extraHeaders
-    };
-    const requestConfig = {
-      method,
-      headers,
-      signal: AbortSignal.timeout(this.config.timeout)
-    };
-    if (body && method !== "GET") {
-      requestConfig.body = JSON.stringify(body);
-    }
-    try {
-      const response = await fetch(url, requestConfig);
-      const data = await response.json();
-      return {
-        success: response.ok,
-        data: response.ok ? data : void 0,
-        error: response.ok ? void 0 : data?.message || "Request failed",
-        timestamp: /* @__PURE__ */ new Date()
-      };
-    } catch (error) {
-      return {
-        success: false,
-        error: error instanceof Error ? error.message : "Network error",
-        timestamp: /* @__PURE__ */ new Date()
-      };
-    }
+  return { valid: true, payload };
+}
+function appendEmailToken(url, token) {
+  const hashIndex = url.indexOf("#");
+  const fragment = hashIndex === -1 ? "" : url.slice(hashIndex);
+  const base = hashIndex === -1 ? url : url.slice(0, hashIndex);
+  const separator = base.includes("?") ? "&" : "?";
+  return `${base}${separator}${EMAIL_TOKEN_PARAM}=${encodeURIComponent(token)}${fragment}`;
+}
+
+// ../shared/dist/email-plan.js
+async function uniformFor(salt, recipientId, slotIndex) {
+  const key = await crypto.subtle.importKey("raw", new TextEncoder().encode(salt), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+  const mac = new Uint8Array(await crypto.subtle.sign("HMAC", key, new TextEncoder().encode(`${recipientId}:${slotIndex}`)));
+  let value = 0;
+  for (let i = 0; i < 6; i++)
+    value = value * 256 + mac[i];
+  return value / 2 ** 48;
+}
+function pickArm(probabilities, uniform) {
+  if (probabilities.length === 0)
+    return -1;
+  const total = probabilities.reduce((sum, p) => sum + Math.max(p, 0), 0);
+  if (total <= 0) {
+    return Math.min(probabilities.length - 1, Math.floor(uniform * probabilities.length));
   }
-  startBatchFlush() {
-    this.flushTimer = setInterval(() => {
-      this.flush().catch(console.error);
-    }, this.config.flushInterval);
+  const target = uniform * total;
+  let cumulative = 0;
+  for (let i = 0; i < probabilities.length; i++) {
+    cumulative += Math.max(probabilities[i], 0);
+    if (target < cumulative)
+      return i;
   }
-  destroy() {
-    if (this.flushTimer) {
-      clearInterval(this.flushTimer);
-    }
-    this.flush().catch(console.error);
-    if (typeof window !== "undefined" && window.localStorage) {
-      localStorage.removeItem("bandits_session_id");
-      localStorage.removeItem("bandits_session_created_at");
-    }
+  return probabilities.length - 1;
+}
+async function sampleCombination(plan, recipientId) {
+  const combination = [];
+  for (let i = 0; i < plan.slots.length; i++) {
+    const slot = plan.slots[i];
+    const uniform = await uniformFor(plan.salt, recipientId, i);
+    const chosen = pickArm(slot.probabilities, uniform);
+    combination.push(chosen === -1 ? 0 : slot.arms[chosen]?.armIndex ?? 0);
   }
-};
-
-// ../shared/dist/types.js
-var ExperimentStatus;
-(function(ExperimentStatus2) {
-  ExperimentStatus2["DRAFT"] = "draft";
-  ExperimentStatus2["ACTIVE"] = "active";
-  ExperimentStatus2["PAUSED"] = "paused";
-  ExperimentStatus2["COMPLETED"] = "completed";
-  ExperimentStatus2["ARCHIVED"] = "archived";
-})(ExperimentStatus || (ExperimentStatus = {}));
-var BanditAlgorithm;
-(function(BanditAlgorithm2) {
-  BanditAlgorithm2["THOMPSON_SAMPLING"] = "thompson_sampling";
-  BanditAlgorithm2["CONTEXTUAL_LINEAR"] = "contextual_linear";
-})(BanditAlgorithm || (BanditAlgorithm = {}));
-var Posterior;
-(function(Posterior2) {
-  Posterior2["BETA"] = "beta";
-  Posterior2["NORMAL_GAMMA"] = "normal_gamma";
-})(Posterior || (Posterior = {}));
-function normalizePosterior(posterior) {
-  return posterior === Posterior.NORMAL_GAMMA ? Posterior.NORMAL_GAMMA : Posterior.BETA;
+  return combination;
 }
-var ForgettingMode;
-(function(ForgettingMode2) {
-  ForgettingMode2["NONE"] = "none";
-  ForgettingMode2["DISCOUNTED"] = "discounted";
-  ForgettingMode2["SLIDING_WINDOW"] = "sliding_window";
-})(ForgettingMode || (ForgettingMode = {}));
-var DEFAULT_HALF_LIFE_MS = 7 * 24 * 60 * 60 * 1e3;
-var DEFAULT_WINDOW_MS = 14 * 24 * 60 * 60 * 1e3;
-var STATIONARY = { mode: ForgettingMode.NONE };
-function resolveForgetting(config) {
-  switch (config?.mode) {
-    case ForgettingMode.DISCOUNTED:
-      return {
-        mode: ForgettingMode.DISCOUNTED,
-        halfLifeMs: config.halfLifeMs && config.halfLifeMs > 0 ? config.halfLifeMs : DEFAULT_HALF_LIFE_MS
-      };
-    case ForgettingMode.SLIDING_WINDOW:
-      return {
-        mode: ForgettingMode.SLIDING_WINDOW,
-        windowMs: config.windowMs && config.windowMs > 0 ? config.windowMs : DEFAULT_WINDOW_MS
-      };
-    default:
-      return STATIONARY;
+async function impressionManifest(plan, recipientIds) {
+  const counts = /* @__PURE__ */ new Map();
+  for (const recipientId of recipientIds) {
+    for (let i = 0; i < plan.slots.length; i++) {
+      const slot = plan.slots[i];
+      const uniform = await uniformFor(plan.salt, recipientId, i);
+      const chosen = pickArm(slot.probabilities, uniform);
+      const arm = slot.arms[chosen === -1 ? 0 : chosen];
+      if (!arm)
+        continue;
+      const key = `${slot.experimentId}:${arm.treatmentId}`;
+      const entry = counts.get(key);
+      if (entry)
+        entry.count++;
+      else
+        counts.set(key, {
+          experimentId: slot.experimentId,
+          treatmentId: arm.treatmentId,
+          count: 1
+        });
+    }
   }
+  return Array.from(counts.values());
 }
-var LEGACY_ALGORITHM_ALIASES = {
-  epsilon_greedy: BanditAlgorithm.THOMPSON_SAMPLING,
-  ucb1: BanditAlgorithm.THOMPSON_SAMPLING,
-  contextual_neural: BanditAlgorithm.CONTEXTUAL_LINEAR
-};
-function normalizeAlgorithm(algorithm) {
-  if (algorithm === BanditAlgorithm.THOMPSON_SAMPLING)
-    return BanditAlgorithm.THOMPSON_SAMPLING;
-  if (algorithm === BanditAlgorithm.CONTEXTUAL_LINEAR)
-    return BanditAlgorithm.CONTEXTUAL_LINEAR;
-  return LEGACY_ALGORITHM_ALIASES[algorithm ?? ""] ?? BanditAlgorithm.THOMPSON_SAMPLING;
+
+// ../shared/dist/email-blocks.js
+function isSlotBinding(value) {
+  return typeof value === "object" && value !== null && typeof value.$slot === "string";
 }
-var ContentType;
-(function(ContentType2) {
-  ContentType2["PLAIN_TEXT"] = "plain_text";
-  ContentType2["MARKDOWN"] = "markdown";
-  ContentType2["HTML"] = "html";
-  ContentType2["CSS"] = "css";
-  ContentType2["JAVASCRIPT"] = "javascript";
-  ContentType2["JSON"] = "json";
-  ContentType2["IMAGE"] = "image";
-  ContentType2["VIDEO"] = "video";
-  ContentType2["AUDIO"] = "audio";
-  ContentType2["DOCUMENT"] = "document";
-})(ContentType || (ContentType = {}));
-function getContentTypeCategory(contentType) {
-  switch (contentType) {
-    case ContentType.PLAIN_TEXT:
-    case ContentType.MARKDOWN:
-      return "text";
-    case ContentType.HTML:
-    case ContentType.CSS:
-    case ContentType.JAVASCRIPT:
-    case ContentType.JSON:
-      return "code";
-    case ContentType.IMAGE:
-    case ContentType.VIDEO:
-    case ContentType.AUDIO:
-    case ContentType.DOCUMENT:
-      return "file";
+var CONTENT_WIDTH = 600;
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function resolve(value, slots, missing) {
+  if (value === void 0)
+    return "";
+  if (!isSlotBinding(value))
+    return value;
+  const resolved = slots[value.$slot];
+  if (resolved === void 0) {
+    missing.push(value.$slot);
+    return "";
   }
+  return resolved;
 }
-var FunnelStatus;
-(function(FunnelStatus2) {
-  FunnelStatus2["DRAFT"] = "draft";
-  FunnelStatus2["ACTIVE"] = "active";
-  FunnelStatus2["PAUSED"] = "paused";
-  FunnelStatus2["COMPLETED"] = "completed";
-})(FunnelStatus || (FunnelStatus = {}));
-
-// ../shared/dist/utils.js
-function generateId2() {
-  return Math.random().toString(36).substring(2) + Date.now().toString(36);
+function extractDocumentSlots(document) {
+  const names = [];
+  const seen = /* @__PURE__ */ new Set();
+  const visit = (value) => {
+    if (isSlotBinding(value)) {
+      if (!seen.has(value.$slot)) {
+        seen.add(value.$slot);
+        names.push(value.$slot);
+      }
+      return;
+    }
+    if (Array.isArray(value))
+      value.forEach(visit);
+    else if (typeof value === "object" && value !== null)
+      Object.values(value).forEach(visit);
+  };
+  visit(document.subject);
+  visit(document.preheader);
+  document.blocks.forEach(visit);
+  return names;
 }
-function validateTreatmentWeights(treatments) {
-  const totalWeight = treatments.reduce((sum, treatment) => sum + (treatment.weight || 1), 0);
-  return totalWeight > 0;
+function renderBlock(block, slots, missing) {
+  const align = block.align ?? "left";
+  switch (block.type) {
+    case "heading": {
+      const size = block.level === 3 ? 18 : block.level === 2 ? 22 : 28;
+      const color = escapeHtml(resolve(block.color, slots, missing) || "#111111");
+      return `<tr><td style="padding:12px 24px;text-align:${align};font-family:Arial,Helvetica,sans-serif;font-size:${size}px;line-height:1.3;font-weight:bold;color:${color}">${escapeHtml(resolve(block.text, slots, missing))}</td></tr>`;
+    }
+    case "text": {
+      const color = escapeHtml(resolve(block.color, slots, missing) || "#333333");
+      return `<tr><td style="padding:8px 24px;text-align:${align};font-family:Arial,Helvetica,sans-serif;font-size:16px;line-height:1.5;color:${color}">${escapeHtml(resolve(block.text, slots, missing))}</td></tr>`;
+    }
+    case "button": {
+      const href = escapeHtml(resolve(block.href, slots, missing));
+      const label = escapeHtml(resolve(block.text, slots, missing));
+      const bg = escapeHtml(resolve(block.backgroundColor, slots, missing) || "#1a73e8");
+      const fg = escapeHtml(resolve(block.textColor, slots, missing) || "#ffffff");
+      return `<tr><td style="padding:16px 24px;text-align:${align}">
+<!--[if mso]><v:roundrect xmlns:v="urn:schemas-microsoft-com:vml" xmlns:w="urn:schemas-microsoft-com:office:word" href="${href}" style="height:44px;v-text-anchor:middle;width:220px;" arcsize="12%" strokecolor="${bg}" fillcolor="${bg}"><w:anchorlock/><center style="color:${fg};font-family:Arial,sans-serif;font-size:16px;font-weight:bold;">${label}</center></v:roundrect><![endif]-->
+<!--[if !mso]><!--><a href="${href}" style="display:inline-block;padding:13px 28px;background-color:${bg};color:${fg};font-family:Arial,Helvetica,sans-serif;font-size:16px;font-weight:bold;text-decoration:none;border-radius:6px">${label}</a><!--<![endif]-->
+</td></tr>`;
+    }
+    case "image": {
+      const src = escapeHtml(resolve(block.src, slots, missing));
+      const alt = escapeHtml(resolve(block.alt, slots, missing));
+      const width = block.width ?? CONTENT_WIDTH;
+      const img = `<img src="${src}" alt="${alt}" width="${width}" style="display:block;border:0;outline:none;text-decoration:none;max-width:100%;height:auto" />`;
+      const href = block.href ? escapeHtml(resolve(block.href, slots, missing)) : "";
+      return `<tr><td style="padding:0;text-align:center">${href ? `<a href="${href}">${img}</a>` : img}</td></tr>`;
+    }
+    case "divider":
+      return `<tr><td style="padding:12px 24px"><table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0"><tr><td style="border-top:1px solid ${escapeHtml(block.color ?? "#e5e5e5")};font-size:0;line-height:0">&nbsp;</td></tr></table></td></tr>`;
+    case "spacer":
+      return `<tr><td style="height:${block.height ?? 24}px;font-size:0;line-height:0">&nbsp;</td></tr>`;
+    default:
+      return "";
+  }
 }
-function normalizeTreatmentWeights(treatments) {
-  const totalWeight = treatments.reduce((sum, treatment) => sum + (treatment.weight || 1), 0);
-  return treatments.map((treatment) => ({
-    ...treatment,
-    weight: (treatment.weight || 1) / totalWeight
-  }));
+function renderEmailDocument(document, slots) {
+  const missingSlots = [];
+  const width = document.contentWidth ?? CONTENT_WIDTH;
+  const background = escapeHtml(document.backgroundColor ?? "#f4f4f5");
+  const subject = resolve(document.subject, slots, missingSlots);
+  const preheader = resolve(document.preheader, slots, missingSlots);
+  const body = document.blocks.map((block) => renderBlock(block, slots, missingSlots)).join("\n");
+  const html = `<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">
+<head>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width,initial-scale=1" />
+<meta name="x-apple-disable-message-reformatting" />
+<title>${escapeHtml(subject)}</title>
+<!--[if mso]><xml><o:OfficeDocumentSettings><o:PixelsPerInch>96</o:PixelsPerInch></o:OfficeDocumentSettings></xml><![endif]-->
+</head>
+<body style="margin:0;padding:0;background-color:${background}">
+<div style="display:none;font-size:0;line-height:0;max-height:0;overflow:hidden;mso-hide:all">${escapeHtml(preheader)}</div>
+<table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0" style="background-color:${background}">
+<tr><td align="center" style="padding:24px 12px">
+<table role="presentation" width="${width}" cellpadding="0" cellspacing="0" border="0" style="width:${width}px;max-width:100%;background-color:#ffffff;border-radius:8px">
+${body}
+</table>
+</td></tr>
+</table>
+</body>
+</html>`;
+  return { subject, html, missingSlots };
 }
-function calculateConfidenceInterval(successes, trials, confidence = 0.95) {
-  if (trials === 0)
-    return { lower: 0, upper: 0 };
-  const z = confidence === 0.95 ? 1.96 : confidence === 0.99 ? 2.576 : 1.645;
-  const p = successes / trials;
-  const margin = z * Math.sqrt(p * (1 - p) / trials);
-  return {
-    lower: Math.max(0, p - margin),
-    upper: Math.min(1, p + margin)
-  };
+
+// ../shared/dist/storefront-content.js
+var STOREFRONT_KINDS = ["text", "image", "ordering", "offer"];
+var PLACEMENTS_BY_KIND = {
+  text: ["hero_headline", "hero_subhead", "cta_primary", "banner_text", "badge_text"],
+  image: ["hero_image", "banner_image", "feature_image"],
+  ordering: ["product_list_primary", "product_list_secondary"],
+  offer: ["offer_banner"]
+};
+var PLACEMENTS = STOREFRONT_KINDS.flatMap((kind) => PLACEMENTS_BY_KIND[kind]);
+function isPlacement(value) {
+  return typeof value === "string" && PLACEMENTS.includes(value);
 }
-function isValidEmail(email) {
-  const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-  return emailRegex.test(email);
+function kindOfPlacement(placement) {
+  const found = STOREFRONT_KINDS.find((kind) => PLACEMENTS_BY_KIND[kind].includes(placement));
+  if (!found)
+    throw new Error(`Unknown placement: ${placement}`);
+  return found;
 }
-function sanitizeMetadata(metadata) {
-  const sanitized = {};
-  for (const [key, value] of Object.entries(metadata)) {
-    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
-      sanitized[key] = value;
-    } else if (value !== null && value !== void 0) {
-      sanitized[key] = String(value);
-    }
+var CONTENT_TYPE_BY_KIND = {
+  text: { contentType: "TEXT", contentSubtype: "plain_text" },
+  image: { contentType: "FILE", contentSubtype: "image" },
+  ordering: { contentType: "CODE", contentSubtype: "json" },
+  offer: { contentType: "CODE", contentSubtype: "json" }
+};
+var MIN_ORDERING_ITEMS = 2;
+var MAX_ORDERING_ITEMS = 12;
+function isShopifyCdnUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    return false;
   }
-  return sanitized;
+  return url.protocol === "https:" && url.hostname === "cdn.shopify.com";
 }
-function generateSubdomain(name) {
-  return name.toLowerCase().replace(/[^a-z0-9\s-]/g, "").replace(/\s+/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "").substring(0, 63);
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function isValidSubdomain(subdomain) {
-  if (!subdomain || subdomain.length === 0 || subdomain.length > 63) {
-    return false;
-  }
-  const subdomainRegex = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;
-  const reserved = [
-    "www",
-    "api",
-    "app",
-    "admin",
-    "dashboard",
-    "mail",
-    "ftp",
-    "localhost",
-    "staging",
-    "dev",
-    "test",
-    "demo",
-    "blog",
-    "docs",
-    "status",
-    "help",
-    "support",
-    "cdn",
-    "static",
-    "assets",
-    "secure",
-    "payment",
-    "pay"
-  ];
-  return subdomainRegex.test(subdomain) && !reserved.includes(subdomain);
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.trim().length > 0;
 }
-function extractSubdomain(hostname, baseDomain) {
-  if (!hostname || !baseDomain) {
+function isPositiveInt(value) {
+  return typeof value === "number" && Number.isInteger(value) && value > 0;
+}
+function parseImage(raw) {
+  if (!isRecord(raw))
     return null;
-  }
-  const cleanHostname = hostname.split(":")[0];
-  if (!cleanHostname.endsWith(baseDomain)) {
+  const { url, alt, width, height, sourceId } = raw;
+  if (typeof url !== "string" || !isShopifyCdnUrl(url))
     return null;
-  }
-  const subdomain = cleanHostname.slice(0, -(baseDomain.length + 1));
-  if (!subdomain || subdomain === "www") {
+  if (typeof alt !== "string")
     return null;
-  }
-  return subdomain;
-}
-function buildSubdomainUrl(subdomain, baseDomain, path = "", protocol = "https") {
-  const url = `${protocol}://${subdomain}.${baseDomain}`;
-  return path ? `${url}${path.startsWith("/") ? path : "/" + path}` : url;
-}
-
-// ../shared/dist/email-token.js
-var EMAIL_TOKEN_PARAM = "bt";
-var encoder = new TextEncoder();
-function base64UrlEncode(bytes) {
-  let binary = "";
-  for (const byte of bytes)
-    binary += String.fromCharCode(byte);
-  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
-function base64UrlDecode(value) {
-  const padded = value.replace(/-/g, "+").replace(/_/g, "/");
-  const binary = atob(padded + "=".repeat((4 - padded.length % 4) % 4));
-  const bytes = new Uint8Array(binary.length);
-  for (let i = 0; i < binary.length; i++)
-    bytes[i] = binary.charCodeAt(i);
-  return bytes;
-}
-async function hmac(secret, message) {
-  const key = await crypto.subtle.importKey("raw", encoder.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
-  return new Uint8Array(await crypto.subtle.sign("HMAC", key, encoder.encode(message)));
-}
-function timingSafeEqual(a, b) {
-  if (a.length !== b.length)
-    return false;
-  let diff = 0;
-  for (let i = 0; i < a.length; i++)
-    diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
-  return diff === 0;
+  if (!isPositiveInt(width) || !isPositiveInt(height))
+    return null;
+  if (!isNonEmptyString(sourceId))
+    return null;
+  return { url, alt, width, height, sourceId };
 }
-async function hashRecipient(recipientId, companySecret) {
-  const digest = await hmac(companySecret, `recipient:${recipientId}`);
-  return base64UrlEncode(digest.slice(0, 16));
+function parseOrdering(raw) {
+  if (!Array.isArray(raw))
+    return null;
+  if (raw.length < MIN_ORDERING_ITEMS || raw.length > MAX_ORDERING_ITEMS)
+    return null;
+  if (!raw.every((id) => typeof id === "string" && /^\d+$/.test(id)))
+    return null;
+  if (new Set(raw).size !== raw.length)
+    return null;
+  return raw;
 }
-async function mintEmailToken(payload, key) {
-  const body = base64UrlEncode(encoder.encode(JSON.stringify({
-    c: payload.c,
-    r: payload.r,
-    k: payload.k,
-    l: payload.l,
-    v: key.version
-  })));
-  const signature = base64UrlEncode(await hmac(key.secret, body));
-  return `${body}.${signature}`;
+function parseOffer(raw) {
+  if (raw === null)
+    return null;
+  if (!isRecord(raw))
+    return void 0;
+  const { discountId, code, headline, subtext } = raw;
+  if (!isNonEmptyString(discountId) || !isNonEmptyString(code))
+    return void 0;
+  if (typeof headline !== "string" || typeof subtext !== "string")
+    return void 0;
+  return { discountId, code, headline, subtext };
 }
-async function verifyEmailToken(token, keys) {
-  const parts = token.split(".");
-  if (parts.length !== 2 || !parts[0] || !parts[1]) {
-    return { valid: false, reason: "malformed" };
-  }
-  const [body, signature] = parts;
-  let payload;
-  try {
-    payload = JSON.parse(new TextDecoder().decode(base64UrlDecode(body)));
-  } catch {
-    return { valid: false, reason: "malformed" };
-  }
-  if (!payload || typeof payload.c !== "string" || typeof payload.r !== "string" || !Array.isArray(payload.k) || !payload.k.every((arm) => Number.isInteger(arm) && arm >= 0) || !Number.isInteger(payload.l) || payload.l < 0 || !Number.isInteger(payload.v)) {
-    return { valid: false, reason: "malformed" };
-  }
-  const key = keys.find((candidate) => candidate.version === payload.v);
-  if (!key)
-    return { valid: false, reason: "unknown_key" };
-  const expected = base64UrlEncode(await hmac(key.secret, body));
-  if (!timingSafeEqual(expected, signature)) {
-    return { valid: false, reason: "bad_signature" };
+function parseTreatmentContent(kind, config) {
+  if (!isRecord(config))
+    return null;
+  const content = config.content;
+  switch (kind) {
+    case "text":
+      return isNonEmptyString(content) ? { kind, text: content } : null;
+    case "image": {
+      const image = parseImage(content);
+      return image ? { kind, image } : null;
+    }
+    case "ordering": {
+      const productIds = parseOrdering(content);
+      return productIds ? { kind, productIds } : null;
+    }
+    case "offer": {
+      const offer = parseOffer(content);
+      return offer === void 0 ? null : { kind, offer };
+    }
   }
-  return { valid: true, payload };
-}
-function appendEmailToken(url, token) {
-  const hashIndex = url.indexOf("#");
-  const fragment = hashIndex === -1 ? "" : url.slice(hashIndex);
-  const base = hashIndex === -1 ? url : url.slice(0, hashIndex);
-  const separator = base.includes("?") ? "&" : "?";
-  return `${base}${separator}${EMAIL_TOKEN_PARAM}=${encodeURIComponent(token)}${fragment}`;
 }
-
-// ../shared/dist/email-plan.js
-async function uniformFor(salt, recipientId, slotIndex) {
-  const key = await crypto.subtle.importKey("raw", new TextEncoder().encode(salt), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
-  const mac = new Uint8Array(await crypto.subtle.sign("HMAC", key, new TextEncoder().encode(`${recipientId}:${slotIndex}`)));
-  let value = 0;
-  for (let i = 0; i < 6; i++)
-    value = value * 256 + mac[i];
-  return value / 2 ** 48;
+function serializeTreatmentConfig(content) {
+  switch (content.kind) {
+    case "text":
+      return { content: content.text };
+    case "image":
+      return { content: content.image };
+    case "ordering":
+      return { content: content.productIds };
+    case "offer":
+      return { content: content.offer };
+  }
 }
-function pickArm(probabilities, uniform) {
-  if (probabilities.length === 0)
-    return -1;
-  const total = probabilities.reduce((sum, p) => sum + Math.max(p, 0), 0);
-  if (total <= 0) {
-    return Math.min(probabilities.length - 1, Math.floor(uniform * probabilities.length));
+
+// ../shared/dist/conversion-path.js
+var SCHEME = /^[a-z][a-z0-9+.-]*:\/\//i;
+var isWildcard = (segment) => segment === "*" || segment === "**";
+function segmentsOf(path) {
+  return path.split("/").filter(Boolean);
+}
+function normalizeConversionPath(input) {
+  const trimmed = input?.trim();
+  if (!trimmed)
+    return void 0;
+  if (/[?#]/.test(trimmed)) {
+    throw new Error("Leave out the query string: enter a path like /thank-you or /orders/*/thanks");
   }
-  const target = uniform * total;
-  let cumulative = 0;
-  for (let i = 0; i < probabilities.length; i++) {
-    cumulative += Math.max(probabilities[i], 0);
-    if (target < cumulative)
-      return i;
+  const withScheme = SCHEME.test(trimmed) ? trimmed : `https://placeholder.invalid/${trimmed.replace(/^\/+/, "")}`;
+  let pathname;
+  try {
+    pathname = new URL(withScheme).pathname;
+  } catch {
+    throw new Error("Enter the conversion page as a path like /thank-you");
   }
-  return probabilities.length - 1;
-}
-async function sampleCombination(plan, recipientId) {
-  const combination = [];
-  for (let i = 0; i < plan.slots.length; i++) {
-    const slot = plan.slots[i];
-    const uniform = await uniformFor(plan.salt, recipientId, i);
-    const chosen = pickArm(slot.probabilities, uniform);
-    combination.push(chosen === -1 ? 0 : slot.arms[chosen]?.armIndex ?? 0);
+  const segments = segmentsOf(pathname);
+  if (segments.some((segment) => segment.includes("*") && !isWildcard(segment))) {
+    throw new Error("Use * for a whole path segment, like /orders/*/thanks");
   }
-  return combination;
+  if (segments.length > 0 && segments.every(isWildcard)) {
+    throw new Error("That pattern matches every page. Add a fixed part, like /orders/*/thanks");
+  }
+  return pathname.length > 1 ? pathname.replace(/\/+$/, "") : pathname;
 }
-async function impressionManifest(plan, recipientIds) {
-  const counts = /* @__PURE__ */ new Map();
-  for (const recipientId of recipientIds) {
-    for (let i = 0; i < plan.slots.length; i++) {
-      const slot = plan.slots[i];
-      const uniform = await uniformFor(plan.salt, recipientId, i);
-      const chosen = pickArm(slot.probabilities, uniform);
-      const arm = slot.arms[chosen === -1 ? 0 : chosen];
-      if (!arm)
-        continue;
-      const key = `${slot.experimentId}:${arm.treatmentId}`;
-      const entry = counts.get(key);
-      if (entry)
-        entry.count++;
-      else
-        counts.set(key, {
-          experimentId: slot.experimentId,
-          treatmentId: arm.treatmentId,
-          count: 1
-        });
+function matchSegments(pattern, path) {
+  if (pattern.length === 0)
+    return path.length === 0;
+  const [head, ...rest] = pattern;
+  if (head === "**") {
+    for (let skip = 0; skip <= path.length; skip++) {
+      if (matchSegments(rest, path.slice(skip)))
+        return true;
     }
+    return false;
   }
-  return Array.from(counts.values());
+  if (path.length === 0)
+    return false;
+  return (head === "*" || head === path[0]) && matchSegments(rest, path.slice(1));
+}
+function matchesConversionPath(pattern, pathname) {
+  return matchSegments(segmentsOf(pattern), segmentsOf(pathname));
 }
 
-// ../shared/dist/email-blocks.js
-function isSlotBinding(value) {
-  return typeof value === "object" && value !== null && typeof value.$slot === "string";
+// src/session.ts
+var SESSION_ID_KEY = "bandits_session_id";
+var SESSION_CREATED_AT_KEY = "bandits_session_created_at";
+var VISITOR_ID_KEY = "bandits_visitor_id";
+var DEFAULT_SESSION_TTL_MS = 864e5;
+function generateId() {
+  if (typeof crypto !== "undefined" && crypto.randomUUID) {
+    return crypto.randomUUID();
+  }
+  return "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (c) => {
+    const r = Math.random() * 16 | 0;
+    return (c === "x" ? r : r & 3 | 8).toString(16);
+  });
 }
-var CONTENT_WIDTH = 600;
-function escapeHtml(value) {
-  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+function getOrCreateSessionId(options = {}) {
+  const { storage, now = () => Date.now(), ttlMs = DEFAULT_SESSION_TTL_MS } = options;
+  if (!storage) return generateId();
+  try {
+    const stored = storage.getItem(SESSION_ID_KEY);
+    const storedAt = storage.getItem(SESSION_CREATED_AT_KEY);
+    if (stored && storedAt) {
+      const age = now() - parseInt(storedAt, 10);
+      if (age < ttlMs) return stored;
+    }
+    const id = generateId();
+    storage.setItem(SESSION_ID_KEY, id);
+    storage.setItem(SESSION_CREATED_AT_KEY, String(now()));
+    return id;
+  } catch {
+    return generateId();
+  }
 }
-function resolve(value, slots, missing) {
-  if (value === void 0)
-    return "";
-  if (!isSlotBinding(value))
-    return value;
-  const resolved = slots[value.$slot];
-  if (resolved === void 0) {
-    missing.push(value.$slot);
-    return "";
+function getOrCreateVisitorId(storage) {
+  if (!storage) return generateId();
+  try {
+    const stored = storage.getItem(VISITOR_ID_KEY);
+    if (stored) return stored;
+    const id = generateId();
+    storage.setItem(VISITOR_ID_KEY, id);
+    return id;
+  } catch {
+    return generateId();
   }
-  return resolved;
 }
-function extractDocumentSlots(document) {
-  const names = [];
-  const seen = /* @__PURE__ */ new Set();
-  const visit = (value) => {
-    if (isSlotBinding(value)) {
-      if (!seen.has(value.$slot)) {
-        seen.add(value.$slot);
-        names.push(value.$slot);
+function defaultSessionStorage() {
+  return typeof window !== "undefined" && window.localStorage ? window.localStorage : null;
+}
+
+// src/client.ts
+function currentPageUrl() {
+  if (typeof location !== "undefined" && location.origin && location.pathname) {
+    return location.origin + location.pathname;
+  }
+  return void 0;
+}
+var BanditsClient = class {
+  config;
+  namedEventQueue = [];
+  sessionId;
+  visitorId;
+  flushTimer;
+  constructor(config) {
+    this.config = {
+      timeout: 5e3,
+      batchSize: 100,
+      flushInterval: 1e4,
+      sessionTtl: 864e5,
+      ...config
+    };
+    this.sessionId = this.getOrCreateSessionId();
+    this.visitorId = getOrCreateVisitorId(defaultSessionStorage());
+    this.startBatchFlush();
+  }
+  async getAssignment(experimentId, userId = this.visitorId, context) {
+    const request = {
+      experimentId,
+      userId,
+      context,
+      sessionId: this.sessionId
+    };
+    const pageUrl = currentPageUrl();
+    if (pageUrl) request.pageUrl = pageUrl;
+    const response = await this.makeRequest(
+      "/assignments",
+      "POST",
+      request
+    );
+    if (!response.success || !response.data) {
+      throw new Error(response.error || "Failed to get assignment");
+    }
+    const assignment = response.data?.data ?? response.data;
+    if (!assignment?.assignmentId) {
+      throw new Error("Invalid assignment response");
+    }
+    return {
+      assignmentId: assignment.assignmentId,
+      treatmentId: assignment.treatmentId,
+      experimentId,
+      userId,
+      config: assignment.treatment?.config || {},
+      funnelId: assignment.funnelId
+    };
+  }
+  trackNamedEvent(event, opts) {
+    const request = {
+      name: event.name,
+      category: event.category || "custom",
+      value: event.value,
+      metadata: event.metadata,
+      sessionId: this.sessionId
+    };
+    if (opts?.userId) request.userId = opts.userId;
+    if (opts?.assignmentId) request.assignmentId = opts.assignmentId;
+    if (opts?.immediate) {
+      const url = `${this.normalizeApiUrl()}/events`;
+      try {
+        void fetch(url, {
+          method: "POST",
+          headers: {
+            "Authorization": `Bearer ${this.config.apiKey}`,
+            "Content-Type": "application/json"
+          },
+          body: JSON.stringify(request),
+          keepalive: true
+        });
+      } catch {
       }
       return;
     }
-    if (Array.isArray(value))
-      value.forEach(visit);
-    else if (typeof value === "object" && value !== null)
-      Object.values(value).forEach(visit);
-  };
-  visit(document.subject);
-  visit(document.preheader);
-  document.blocks.forEach(visit);
-  return names;
-}
-function renderBlock(block, slots, missing) {
-  const align = block.align ?? "left";
-  switch (block.type) {
-    case "heading": {
-      const size = block.level === 3 ? 18 : block.level === 2 ? 22 : 28;
-      const color = escapeHtml(resolve(block.color, slots, missing) || "#111111");
-      return `<tr><td style="padding:12px 24px;text-align:${align};font-family:Arial,Helvetica,sans-serif;font-size:${size}px;line-height:1.3;font-weight:bold;color:${color}">${escapeHtml(resolve(block.text, slots, missing))}</td></tr>`;
+    this.namedEventQueue.push(request);
+    if (this.namedEventQueue.length >= this.config.batchSize) {
+      this.flush();
+    }
+  }
+  async flush() {
+    const namedEvents = [...this.namedEventQueue];
+    this.namedEventQueue = [];
+    if (namedEvents.length === 0) return;
+    try {
+      await fetch(`${this.normalizeApiUrl()}/events/batch`, {
+        method: "POST",
+        headers: {
+          "Authorization": `Bearer ${this.config.apiKey}`,
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify({ events: namedEvents }),
+        keepalive: true
+      });
+    } catch (error) {
+      this.namedEventQueue.unshift(...namedEvents);
+      throw error;
+    }
+  }
+  async identify(anonymousId, identifiedUserId, mergeReason) {
+    const response = await this.makeRequest(
+      "/identify",
+      "POST",
+      {
+        anonymousId,
+        identifiedUserId,
+        mergeReason: mergeReason || "manual"
+      }
+    );
+    if (!response.success) {
+      throw new Error(response.error || "Failed to identify user");
+    }
+  }
+  async label(userId, labels) {
+    const response = await this.makeRequest("/labels", "POST", { userId, labels });
+    if (!response.success) {
+      throw new Error(response.error || "Failed to record labels");
+    }
+  }
+  async trackFunnelReward(funnelId, userId, value) {
+    const response = await this.makeRequest(
+      `/funnels/${funnelId}/reward`,
+      "POST",
+      { userId, value }
+    );
+    if (!response.success) {
+      throw new Error(response.error || "Failed to record funnel reward");
     }
-    case "text": {
-      const color = escapeHtml(resolve(block.color, slots, missing) || "#333333");
-      return `<tr><td style="padding:8px 24px;text-align:${align};font-family:Arial,Helvetica,sans-serif;font-size:16px;line-height:1.5;color:${color}">${escapeHtml(resolve(block.text, slots, missing))}</td></tr>`;
+  }
+  convert(funnelId, value = 1) {
+    return this.trackFunnelReward(funnelId, this.visitorId, value);
+  }
+  async convertOn(funnelId, pathPattern, value = 1) {
+    if (typeof location === "undefined" || !matchesConversionPath(pathPattern, location.pathname)) return false;
+    await this.convert(funnelId, value);
+    return true;
+  }
+  async getBundle(bundleId, userId, context) {
+    const request = {
+      bundleId,
+      userId,
+      context,
+      sessionId: this.sessionId
+    };
+    const pageUrl = currentPageUrl();
+    if (pageUrl) request.pageUrl = pageUrl;
+    const response = await this.makeRequest("/bundles/assignment", "POST", request);
+    if (!response.success || !response.data) {
+      throw new Error(response.error || "Failed to get bundle assignment");
     }
-    case "button": {
-      const href = escapeHtml(resolve(block.href, slots, missing));
-      const label = escapeHtml(resolve(block.text, slots, missing));
-      const bg = escapeHtml(resolve(block.backgroundColor, slots, missing) || "#1a73e8");
-      const fg = escapeHtml(resolve(block.textColor, slots, missing) || "#ffffff");
-      return `<tr><td style="padding:16px 24px;text-align:${align}">
-<!--[if mso]><v:roundrect xmlns:v="urn:schemas-microsoft-com:vml" xmlns:w="urn:schemas-microsoft-com:office:word" href="${href}" style="height:44px;v-text-anchor:middle;width:220px;" arcsize="12%" strokecolor="${bg}" fillcolor="${bg}"><w:anchorlock/><center style="color:${fg};font-family:Arial,sans-serif;font-size:16px;font-weight:bold;">${label}</center></v:roundrect><![endif]-->
-<!--[if !mso]><!--><a href="${href}" style="display:inline-block;padding:13px 28px;background-color:${bg};color:${fg};font-family:Arial,Helvetica,sans-serif;font-size:16px;font-weight:bold;text-decoration:none;border-radius:6px">${label}</a><!--<![endif]-->
-</td></tr>`;
+    const payload = response.data?.data ?? response.data;
+    if (!payload?.bundleAssignmentId || !payload?.slots) {
+      throw new Error("Invalid bundle assignment response");
     }
-    case "image": {
-      const src = escapeHtml(resolve(block.src, slots, missing));
-      const alt = escapeHtml(resolve(block.alt, slots, missing));
-      const width = block.width ?? CONTENT_WIDTH;
-      const img = `<img src="${src}" alt="${alt}" width="${width}" style="display:block;border:0;outline:none;text-decoration:none;max-width:100%;height:auto" />`;
-      const href = block.href ? escapeHtml(resolve(block.href, slots, missing)) : "";
-      return `<tr><td style="padding:0;text-align:center">${href ? `<a href="${href}">${img}</a>` : img}</td></tr>`;
+    return {
+      bundleAssignmentId: payload.bundleAssignmentId,
+      slots: payload.slots
+    };
+  }
+  async trackBundleReward(bundleId, userId, value) {
+    const response = await this.makeRequest(`/bundles/${bundleId}/reward`, "POST", {
+      userId,
+      value
+    });
+    if (!response.success) {
+      throw new Error(response.error || "Failed to record bundle reward");
     }
-    case "divider":
-      return `<tr><td style="padding:12px 24px"><table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0"><tr><td style="border-top:1px solid ${escapeHtml(block.color ?? "#e5e5e5")};font-size:0;line-height:0">&nbsp;</td></tr></table></td></tr>`;
-    case "spacer":
-      return `<tr><td style="height:${block.height ?? 24}px;font-size:0;line-height:0">&nbsp;</td></tr>`;
-    default:
-      return "";
   }
-}
-function renderEmailDocument(document, slots) {
-  const missingSlots = [];
-  const width = document.contentWidth ?? CONTENT_WIDTH;
-  const background = escapeHtml(document.backgroundColor ?? "#f4f4f5");
-  const subject = resolve(document.subject, slots, missingSlots);
-  const preheader = resolve(document.preheader, slots, missingSlots);
-  const body = document.blocks.map((block) => renderBlock(block, slots, missingSlots)).join("\n");
-  const html = `<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">
-<head>
-<meta charset="utf-8" />
-<meta name="viewport" content="width=device-width,initial-scale=1" />
-<meta name="x-apple-disable-message-reformatting" />
-<title>${escapeHtml(subject)}</title>
-<!--[if mso]><xml><o:OfficeDocumentSettings><o:PixelsPerInch>96</o:PixelsPerInch></o:OfficeDocumentSettings></xml><![endif]-->
-</head>
-<body style="margin:0;padding:0;background-color:${background}">
-<div style="display:none;font-size:0;line-height:0;max-height:0;overflow:hidden;mso-hide:all">${escapeHtml(preheader)}</div>
-<table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0" style="background-color:${background}">
-<tr><td align="center" style="padding:24px 12px">
-<table role="presentation" width="${width}" cellpadding="0" cellspacing="0" border="0" style="width:${width}px;max-width:100%;background-color:#ffffff;border-radius:8px">
-${body}
-</table>
-</td></tr>
-</table>
-</body>
-</html>`;
-  return { subject, html, missingSlots };
-}
-
-// ../shared/dist/storefront-content.js
-var STOREFRONT_KINDS = ["text", "image", "ordering", "offer"];
-var PLACEMENTS_BY_KIND = {
-  text: ["hero_headline", "hero_subhead", "cta_primary", "banner_text", "badge_text"],
-  image: ["hero_image", "banner_image", "feature_image"],
-  ordering: ["product_list_primary", "product_list_secondary"],
-  offer: ["offer_banner"]
-};
-var PLACEMENTS = STOREFRONT_KINDS.flatMap((kind) => PLACEMENTS_BY_KIND[kind]);
-function isPlacement(value) {
-  return typeof value === "string" && PLACEMENTS.includes(value);
-}
-function kindOfPlacement(placement) {
-  const found = STOREFRONT_KINDS.find((kind) => PLACEMENTS_BY_KIND[kind].includes(placement));
-  if (!found)
-    throw new Error(`Unknown placement: ${placement}`);
-  return found;
-}
-var CONTENT_TYPE_BY_KIND = {
-  text: { contentType: "TEXT", contentSubtype: "plain_text" },
-  image: { contentType: "FILE", contentSubtype: "image" },
-  ordering: { contentType: "CODE", contentSubtype: "json" },
-  offer: { contentType: "CODE", contentSubtype: "json" }
-};
-var MIN_ORDERING_ITEMS = 2;
-var MAX_ORDERING_ITEMS = 12;
-function isShopifyCdnUrl(value) {
-  let url;
-  try {
-    url = new URL(value);
-  } catch {
-    return false;
+  generateId() {
+    return generateId();
   }
-  return url.protocol === "https:" && url.hostname === "cdn.shopify.com";
-}
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isNonEmptyString(value) {
-  return typeof value === "string" && value.trim().length > 0;
-}
-function isPositiveInt(value) {
-  return typeof value === "number" && Number.isInteger(value) && value > 0;
-}
-function parseImage(raw) {
-  if (!isRecord(raw))
-    return null;
-  const { url, alt, width, height, sourceId } = raw;
-  if (typeof url !== "string" || !isShopifyCdnUrl(url))
-    return null;
-  if (typeof alt !== "string")
-    return null;
-  if (!isPositiveInt(width) || !isPositiveInt(height))
-    return null;
-  if (!isNonEmptyString(sourceId))
-    return null;
-  return { url, alt, width, height, sourceId };
-}
-function parseOrdering(raw) {
-  if (!Array.isArray(raw))
-    return null;
-  if (raw.length < MIN_ORDERING_ITEMS || raw.length > MAX_ORDERING_ITEMS)
-    return null;
-  if (!raw.every((id) => typeof id === "string" && /^\d+$/.test(id)))
-    return null;
-  if (new Set(raw).size !== raw.length)
-    return null;
-  return raw;
-}
-function parseOffer(raw) {
-  if (raw === null)
-    return null;
-  if (!isRecord(raw))
-    return void 0;
-  const { discountId, code, headline, subtext } = raw;
-  if (!isNonEmptyString(discountId) || !isNonEmptyString(code))
-    return void 0;
-  if (typeof headline !== "string" || typeof subtext !== "string")
-    return void 0;
-  return { discountId, code, headline, subtext };
-}
-function parseTreatmentContent(kind, config) {
-  if (!isRecord(config))
-    return null;
-  const content = config.content;
-  switch (kind) {
-    case "text":
-      return isNonEmptyString(content) ? { kind, text: content } : null;
-    case "image": {
-      const image = parseImage(content);
-      return image ? { kind, image } : null;
+  normalizeApiUrl() {
+    let baseUrl = this.config.apiUrl.replace(/\/$/, "");
+    if (!baseUrl.endsWith("/api")) {
+      baseUrl = `${baseUrl}/api`;
     }
-    case "ordering": {
-      const productIds = parseOrdering(content);
-      return productIds ? { kind, productIds } : null;
+    return baseUrl;
+  }
+  getOrCreateSessionId() {
+    return getOrCreateSessionId({
+      storage: defaultSessionStorage(),
+      ttlMs: this.config.sessionTtl
+    });
+  }
+  async makeRequest(endpoint, method, body, extraHeaders) {
+    const url = `${this.normalizeApiUrl()}${endpoint}`;
+    const headers = {
+      "Authorization": `Bearer ${this.config.apiKey}`,
+      "Content-Type": "application/json",
+      ...extraHeaders
+    };
+    const requestConfig = {
+      method,
+      headers,
+      signal: AbortSignal.timeout(this.config.timeout)
+    };
+    if (body && method !== "GET") {
+      requestConfig.body = JSON.stringify(body);
     }
-    case "offer": {
-      const offer = parseOffer(content);
-      return offer === void 0 ? null : { kind, offer };
+    try {
+      const response = await fetch(url, requestConfig);
+      const data = await response.json();
+      return {
+        success: response.ok,
+        data: response.ok ? data : void 0,
+        error: response.ok ? void 0 : data?.message || "Request failed",
+        timestamp: /* @__PURE__ */ new Date()
+      };
+    } catch (error) {
+      return {
+        success: false,
+        error: error instanceof Error ? error.message : "Network error",
+        timestamp: /* @__PURE__ */ new Date()
+      };
     }
   }
-}
-function serializeTreatmentConfig(content) {
-  switch (content.kind) {
-    case "text":
-      return { content: content.text };
-    case "image":
-      return { content: content.image };
-    case "ordering":
-      return { content: content.productIds };
-    case "offer":
-      return { content: content.offer };
+  startBatchFlush() {
+    this.flushTimer = setInterval(() => {
+      this.flush().catch(console.error);
+    }, this.config.flushInterval);
   }
-}
+  destroy() {
+    if (this.flushTimer) {
+      clearInterval(this.flushTimer);
+    }
+    this.flush().catch(console.error);
+    if (typeof window !== "undefined" && window.localStorage) {
+      localStorage.removeItem("bandits_session_id");
+      localStorage.removeItem("bandits_session_created_at");
+    }
+  }
+};
 
 // src/snapshot-cache.ts
 var STORAGE_KEY = "bandits_snapshot";
@@ -1228,6 +1296,7 @@ export {
   STATIONARY,
   STOREFRONT_KINDS,
   SnapshotClient,
+  VISITOR_ID_KEY,
   appendEmailToken,
   buildSubdomainUrl,
   calculateConfidenceInterval,
@@ -1235,10 +1304,11 @@ export {
   extractEmailLinks,
   extractSlotNames,
   extractSubdomain,
-  generateId2 as generateId,
+  generateId,
   generateSubdomain,
   getContentTypeCategory,
   getOrCreateSessionId,
+  getOrCreateVisitorId,
   hashRecipient,
   impressionManifest,
   isPlacement,
@@ -1247,8 +1317,10 @@ export {
   isValidEmail,
   isValidSubdomain,
   kindOfPlacement,
+  matchesConversionPath,
   mintEmailToken,
   normalizeAlgorithm,
+  normalizeConversionPath,
   normalizePosterior,
   normalizeTreatmentWeights,
   parseTreatmentContent,