@aglyn/aglyn 1.0.0-beta.218 → 1.0.0-beta.220

package/src/lib/app-utils/{campaign-forwarding.d.ts → utm-forwarding.d.ts}

@@ -15,9 +15,9 @@
  * limitations under the License.
  */
 /**
- * Carry the campaign across the domain hop (AGL-1731).
+ * Carry the visit's UTM labels across the domain hop (AGL-1731).
  *
- * `campaign-attribution.ts` is the READER half of this contract and it works.
+ * `utm-attribution.ts` is the READER half of this contract and it works.
  * This is the half that was missing, and without it the reader was fed
  * nothing: `aglyn.com` is a tenant published site and `app.aglyn.com` is the
  * console, a real cross-origin hop, and no code anywhere put a `utm_*`
@@ -95,7 +95,7 @@
  * it. There is no default, no inference from the referrer, and no
  * `utm_source=direct` — a signup with no campaign must reach the console with
  * no campaign, so that "arrived from nowhere" and "never asked" stay the
- * distinct facts `campaign-attribution.ts` keeps them.
+ * distinct facts `utm-attribution.ts` keeps them.
  *
  * Only links to OUR OWN console origin are touched, and the origin is supplied
  * by the caller rather than written here — a self-host install points
@@ -115,14 +115,14 @@
  * is the exact failure AGL-1731 is about, and it is worse than a few
  * mislabelled rows that GA's own Hostname dimension can already separate.
  */
-import { type CampaignAttribution } from './campaign-attribution';
+import { type UtmAttribution } from './utm-attribution';
 /**
  * Where the first touch of this visit is held. `sessionStorage`, so it dies
  * with the tab: a campaign is a fact about one visit, and a value that
  * outlived the visit would start attributing next week's organic return to
  * this week's ad.
  */
-export declare const CAMPAIGN_VISIT_STORAGE_KEY = "aglyn:campaign";
+export declare const UTM_VISIT_STORAGE_KEY = "aglyn:campaign";
 /**
  * What a read of the first-touch store produced.
  *
@@ -134,9 +134,9 @@ export declare const CAMPAIGN_VISIT_STORAGE_KEY = "aglyn:campaign";
  * treats it differently: it falls through to the live URL instead of
  * concluding anything.
  */
-export type VisitCampaignRead = {
+export type VisitUtmRead = {
     status: 'campaign';
-    campaign: CampaignAttribution;
+    campaign: UtmAttribution;
 } | {
     status: 'none';
 } | {
@@ -150,7 +150,7 @@ export type VisitCampaignRead = {
  * string can claim no more than an inbound URL could — three allowlisted keys,
  * trimmed, email shapes refused, capped.
  */
-export declare function readVisitCampaign(): VisitCampaignRead;
+export declare function readVisitUtm(): VisitUtmRead;
 /**
  * Remember the campaign on the current URL as this visit's first touch.
  *
@@ -161,7 +161,7 @@ export declare function readVisitCampaign(): VisitCampaignRead;
  *
  * Returns what is now remembered so a caller can assert on it.
  */
-export declare function rememberVisitCampaign(search?: string): CampaignAttribution | null;
+export declare function rememberVisitUtm(search?: string): UtmAttribution | null;
 /**
  * Tell this module what the visitor's analytics consent state is.
  *
@@ -171,7 +171,7 @@ export declare function rememberVisitCampaign(search?: string): CampaignAttribut
  * visitor who changes their mind mid-visit should not leave the thing they
  * withdrew consent for sitting on their device.
  */
-export declare function setCampaignForwardingConsent(allowed: boolean | null): void;
+export declare function setUtmForwardingConsent(allowed: boolean | null): void;
 /**
  * The campaign to forward, first touch preferred.
  *
@@ -179,7 +179,7 @@ export declare function setCampaignForwardingConsent(allowed: boolean | null): v
  * which is the point of carrying that state at all: a broken store degrades
  * this to tier 1 rather than to silence.
  */
-export declare function campaignToForward(search?: string): CampaignAttribution | null;
+export declare function utmToForward(search?: string): UtmAttribution | null;
 /**
  * The href a console-bound link should carry for this visitor, or null to
  * leave it exactly as authored.
@@ -194,7 +194,7 @@ export declare function campaignToForward(search?: string): CampaignAttribution
  * row describes an event that never happened. Everything else on the href —
  * `plan`, `interval`, the AGL-1535 intent — is preserved untouched.
  */
-export declare function decorateCampaignHref(href: string, baseHref: string, consoleOrigin: string, campaign: CampaignAttribution | null): string | null;
+export declare function decorateUtmHref(href: string, baseHref: string, consoleOrigin: string, campaign: UtmAttribution | null): string | null;
 /**
  * Start forwarding the campaign onto console-bound links on this page.
  *
@@ -213,8 +213,8 @@ export declare function decorateCampaignHref(href: string, baseHref: string, con
  * Returns an uninstall function for tests and for a caller that owns the page
  * lifecycle.
  */
-export declare function installCampaignForwarding(options: {
+export declare function installUtmForwarding(options: {
     consoleOrigin: string;
 }): () => void;
 /** Test seam — removes both listeners, forgets them, and forgets consent. */
-export declare function resetCampaignForwarding(): void;
+export declare function resetUtmForwarding(): void;

package/src/lib/app-utils/{campaign-forwarding.js → utm-forwarding.js}

@@ -14,9 +14,9 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */ /**
- * Carry the campaign across the domain hop (AGL-1731).
+ * Carry the visit's UTM labels across the domain hop (AGL-1731).
  *
- * `campaign-attribution.ts` is the READER half of this contract and it works.
+ * `utm-attribution.ts` is the READER half of this contract and it works.
  * This is the half that was missing, and without it the reader was fed
  * nothing: `aglyn.com` is a tenant published site and `app.aglyn.com` is the
  * console, a real cross-origin hop, and no code anywhere put a `utm_*`
@@ -94,7 +94,7 @@
  * it. There is no default, no inference from the referrer, and no
  * `utm_source=direct` — a signup with no campaign must reach the console with
  * no campaign, so that "arrived from nowhere" and "never asked" stay the
- * distinct facts `campaign-attribution.ts` keeps them.
+ * distinct facts `utm-attribution.ts` keeps them.
  *
  * Only links to OUR OWN console origin are touched, and the origin is supplied
  * by the caller rather than written here — a self-host install points
@@ -113,13 +113,13 @@
  * set it would forward NOTHING while looking perfectly healthy. A silent zero
  * is the exact failure AGL-1731 is about, and it is worse than a few
  * mislabelled rows that GA's own Hostname dimension can already separate.
- */ import { CAMPAIGN_QUERY_KEYS, campaignAttributionQuery, parseCampaignAttribution } from "./campaign-attribution.js";
+ */ import { UTM_QUERY_KEYS, utmAttributionQuery, parseUtmAttribution } from "./utm-attribution.js";
 /**
  * Where the first touch of this visit is held. `sessionStorage`, so it dies
  * with the tab: a campaign is a fact about one visit, and a value that
  * outlived the visit would start attributing next week's organic return to
  * this week's ad.
- */ export const CAMPAIGN_VISIT_STORAGE_KEY = 'aglyn:campaign';
+ */ export const UTM_VISIT_STORAGE_KEY = 'aglyn:campaign';
 /**
  * Whether the visitor has granted analytics storage.
  *
@@ -149,7 +149,7 @@ function sessionStore() {
  * `sessionStorage` is writable by anything running on the page, so the stored
  * string can claim no more than an inbound URL could — three allowlisted keys,
  * trimmed, email shapes refused, capped.
- */ export function readVisitCampaign() {
+ */ export function readVisitUtm() {
     if (storageConsent !== true) return {
         status: 'none'
     };
@@ -159,7 +159,7 @@ function sessionStore() {
     };
     let raw;
     try {
-        raw = store.getItem(CAMPAIGN_VISIT_STORAGE_KEY);
+        raw = store.getItem(UTM_VISIT_STORAGE_KEY);
     } catch (unused) {
         return {
             status: 'unreadable'
@@ -168,7 +168,7 @@ function sessionStore() {
     if (!raw) return {
         status: 'none'
     };
-    const campaign = parseCampaignAttribution(new URLSearchParams(raw));
+    const campaign = parseUtmAttribution(new URLSearchParams(raw));
     return campaign ? {
         status: 'campaign',
         campaign
@@ -185,17 +185,17 @@ function sessionStore() {
  * quietly turn this into last-touch.
  *
  * Returns what is now remembered so a caller can assert on it.
- */ export function rememberVisitCampaign(search) {
-    const existing = readVisitCampaign();
+ */ export function rememberVisitUtm(search) {
+    const existing = readVisitUtm();
     if (existing.status === 'campaign') return existing.campaign;
     if (storageConsent !== true) return null;
     const store = sessionStore();
     if (!store) return null;
     const source = typeof search === 'string' ? search : typeof window === 'undefined' ? '' : window.location.search;
-    const campaign = parseCampaignAttribution(new URLSearchParams(source));
+    const campaign = parseUtmAttribution(new URLSearchParams(source));
     if (!campaign) return null;
     try {
-        store.setItem(CAMPAIGN_VISIT_STORAGE_KEY, campaignAttributionQuery(campaign));
+        store.setItem(UTM_VISIT_STORAGE_KEY, utmAttributionQuery(campaign));
     } catch (unused) {
         // A store that refuses the write costs the walk from the landing page to
         // the pricing page, never the click itself — tier 1 still carries a
@@ -212,17 +212,17 @@ function sessionStore() {
  * effect immediately: the stored value is dropped, not merely ignored. A
  * visitor who changes their mind mid-visit should not leave the thing they
  * withdrew consent for sitting on their device.
- */ export function setCampaignForwardingConsent(allowed) {
+ */ export function setUtmForwardingConsent(allowed) {
     storageConsent = allowed === true ? true : allowed === false ? false : null;
     if (storageConsent === true) {
-        rememberVisitCampaign();
+        rememberVisitUtm();
         return;
     }
     if (storageConsent === false) {
         const store = sessionStore();
         if (!store) return;
         try {
-            store.removeItem(CAMPAIGN_VISIT_STORAGE_KEY);
+            store.removeItem(UTM_VISIT_STORAGE_KEY);
         } catch (unused) {
         // Nothing else to try, and a failed cleanup must not break the page.
         }
@@ -234,11 +234,11 @@ function sessionStore() {
  * The `unreadable` case falls through to the live URL rather than to nothing,
  * which is the point of carrying that state at all: a broken store degrades
  * this to tier 1 rather than to silence.
- */ export function campaignToForward(search) {
-    const stored = readVisitCampaign();
+ */ export function utmToForward(search) {
+    const stored = readVisitUtm();
     if (stored.status === 'campaign') return stored.campaign;
     const live = typeof search === 'string' ? search : typeof window === 'undefined' ? '' : window.location.search;
-    return parseCampaignAttribution(new URLSearchParams(live));
+    return parseUtmAttribution(new URLSearchParams(live));
 }
 function normalizeOrigin(value) {
     if (!value) return '';
@@ -261,7 +261,7 @@ function normalizeOrigin(value) {
  * three must not produce `source=hn` married to the author's `campaign=`: that
  * row describes an event that never happened. Everything else on the href —
  * `plan`, `interval`, the AGL-1535 intent — is preserved untouched.
- */ export function decorateCampaignHref(href, baseHref, consoleOrigin, campaign) {
+ */ export function decorateUtmHref(href, baseHref, consoleOrigin, campaign) {
     if (!campaign) return null;
     const origin = normalizeOrigin(consoleOrigin);
     if (!origin) return null;
@@ -272,8 +272,8 @@ function normalizeOrigin(value) {
         return null;
     }
     if (url.origin !== origin) return null;
-    for (const key of CAMPAIGN_QUERY_KEYS)url.searchParams.delete(key);
-    const query = new URLSearchParams(campaignAttributionQuery(campaign));
+    for (const key of UTM_QUERY_KEYS)url.searchParams.delete(key);
+    const query = new URLSearchParams(utmAttributionQuery(campaign));
     query.forEach((value, key)=>url.searchParams.set(key, value));
     const next = url.toString();
     return next === href ? null : next;
@@ -295,7 +295,7 @@ function normalizeOrigin(value) {
  *
  * Returns an uninstall function for tests and for a caller that owns the page
  * lifecycle.
- */ export function installCampaignForwarding(options) {
+ */ export function installUtmForwarding(options) {
     if (typeof document === 'undefined' || typeof window === 'undefined') {
         return ()=>undefined;
     }
@@ -308,7 +308,7 @@ function normalizeOrigin(value) {
             if (!target || typeof target.closest !== 'function') return;
             const anchor = target.closest('a[href]');
             if (!anchor) return;
-            const decorated = decorateCampaignHref(anchor.getAttribute('href') || '', window.location.href, origin, campaignToForward());
+            const decorated = decorateUtmHref(anchor.getAttribute('href') || '', window.location.href, origin, utmToForward());
             if (decorated) anchor.setAttribute('href', decorated);
         } catch (unused) {
         // Attribution never breaks a navigation. A link that throws here would
@@ -318,9 +318,9 @@ function normalizeOrigin(value) {
     installedHandler = onActivate;
     document.addEventListener('pointerdown', onActivate, true);
     document.addEventListener('click', onActivate, true);
-    return resetCampaignForwarding;
+    return resetUtmForwarding;
 }
-/** Test seam — removes both listeners, forgets them, and forgets consent. */ export function resetCampaignForwarding() {
+/** Test seam — removes both listeners, forgets them, and forgets consent. */ export function resetUtmForwarding() {
     if (installedHandler && typeof document !== 'undefined') {
         document.removeEventListener('pointerdown', installedHandler, true);
         document.removeEventListener('click', installedHandler, true);
@@ -329,4 +329,4 @@ function normalizeOrigin(value) {
     storageConsent = null;
 }
 
-//# sourceMappingURL=campaign-forwarding.js.map
+//# sourceMappingURL=utm-forwarding.js.map

package/src/lib/app-utils/utm-forwarding.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/utm-forwarding.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Carry the visit's UTM labels across the domain hop (AGL-1731).\n *\n * `utm-attribution.ts` is the READER half of this contract and it works.\n * This is the half that was missing, and without it the reader was fed\n * nothing: `aglyn.com` is a tenant published site and `app.aglyn.com` is the\n * console, a real cross-origin hop, and no code anywhere put a `utm_*`\n * parameter on a console-bound link. So `users/{uid}.signupCampaign` was\n * written for exactly one population — visitors whose CTA href had a campaign\n * typed into it by hand.\n *\n * A hand-typed one is worse than none. It is STATIC: `utm_source=google`\n * authored onto the pricing button attributes every clicker to Google whether\n * they arrived from Google, from Hacker News or from a bookmark. Confidently\n * wrong attribution reaches the same spend decisions as absent attribution and\n * is much harder to notice, because the report looks populated.\n *\n * What is needed instead is PER-VISITOR forwarding: the landing page copies\n * the campaign off its own inbound URL onto the console-bound href, at click\n * time, for that one visitor.\n *\n * ## Why a delegated listener and not `AppLink`\n *\n * The same reason `analytics-link-clicks.ts` gives, and it is the reason that\n * decides this file's shape. The CTAs on `aglyn.com` are authored besigner\n * content, not repo files; rich-text and Custom HTML anchors are written with\n * `dangerouslySetInnerHTML` and are plain DOM anchors with no React handler at\n * all. A prop on `AppLink` would miss them, and reaching them from `AppLink`\n * would mean `useSearchParams` in a component the console renders on every\n * page — a dynamic-rendering hazard on statically generated surfaces, paid on\n * every route to fix a link on one of them. A capture-phase listener on\n * `document` sees every anchor, costs one listener, and renders nothing.\n *\n * ## The two tiers, and why the storage tier is the SECOND one\n *\n * A visitor rarely signs up from the page the ad landed on. They land on\n * `/?utm_source=google&...`, read `/pricing`, then click. By then the campaign\n * is off the address bar, so reading the live URL at click time alone would\n * capture only the minority who convert without navigating.\n *\n * - **Tier 1 — the live URL.** Read `window.location.search` at click time.\n *   This touches NO storage: the parameters are already in the page the\n *   visitor asked for. Nothing is written to their device, so there is nothing\n *   here to consent to, and it works for every visitor including one who has\n *   declined analytics.\n * - **Tier 2 — the first touch of the visit**, in `sessionStorage`, which is\n *   what survives the walk from the landing page to the pricing page.\n *\n * Tier 2 WINS when both exist, because first touch is the question being\n * asked. Last touch — re-deriving the campaign from whatever URL happens to be\n * current at signup — answers a different question and would disagree with\n * GA4's own session attribution.\n *\n * ## Why tier 2 is gated on analytics consent, and tier 1 is not\n *\n * Tier 2 writes to the visitor's device for an analytics purpose, so it is\n * `analytics_storage` in the consent-mode sense and it waits for the same\n * grant the GA tag waits for (AGL-1498). The gate is not re-implemented here\n * and no consent record is read here: the caller already computes\n * `analyticsAllowed` for the tag and hands the same boolean down, so there is\n * one gate and it cannot drift from itself.\n *\n * It is deliberately NOT gated on advertising storage. Nothing here reads or\n * writes an advertising identifier, sets a cookie, or leaves anything that\n * outlives the tab, and AGL-1649 has advertising denied with no route for a\n * host to grant it — gating on a permission that cannot currently be given\n * would be a feature that is dead by construction rather than one that is off.\n *\n * **Consent unresolved is not consent denied, and both are falsy.** With\n * `strictNullChecks` off repo-wide that distinction is the sort that\n * evaporates, so it is carried as an explicit tri-state: until the caller has\n * actually resolved the visitor's state, tier 2 neither reads nor writes.\n * Failing closed here costs an attribution; failing open would write to a\n * device before the visitor answered.\n *\n * ## What is never done\n *\n * A value is only ever forwarded if this visitor literally arrived carrying\n * it. There is no default, no inference from the referrer, and no\n * `utm_source=direct` — a signup with no campaign must reach the console with\n * no campaign, so that \"arrived from nowhere\" and \"never asked\" stay the\n * distinct facts `utm-attribution.ts` keeps them.\n *\n * Only links to OUR OWN console origin are touched, and the origin is supplied\n * by the caller rather than written here — a self-host install points\n * `NEXT_PUBLIC_CONSOLE_URL` somewhere else entirely. Decorating any other host\n * would post our campaign labels to a third party, which is a data leak dressed\n * up as attribution.\n *\n * ## One accepted consequence\n *\n * The tenant runtime serves `aglyn.com` AND every customer's published site,\n * so a customer site that links to our signup forwards ITS OWN inbound\n * campaign — an agency partner's `utm_source=their-newsletter` would land in our\n * acquisition report describing their spend, not ours. It is not gated on\n * \"is this the operator's marketing host\" deliberately: that gate needs a\n * second configured origin to compare against, and a deployment that forgot to\n * set it would forward NOTHING while looking perfectly healthy. A silent zero\n * is the exact failure AGL-1731 is about, and it is worse than a few\n * mislabelled rows that GA's own Hostname dimension can already separate.\n */\n\nimport {\n  UTM_QUERY_KEYS,\n  utmAttributionQuery,\n  parseUtmAttribution,\n  type UtmAttribution,\n} from './utm-attribution'\n\n/**\n * Where the first touch of this visit is held. `sessionStorage`, so it dies\n * with the tab: a campaign is a fact about one visit, and a value that\n * outlived the visit would start attributing next week's organic return to\n * this week's ad.\n */\nexport const UTM_VISIT_STORAGE_KEY = 'aglyn:campaign'\n\n/**\n * What a read of the first-touch store produced.\n *\n * Three states rather than \"a campaign or null\", and the third is the whole\n * point. `sessionStorage` throws outright in some privacy modes, and a\n * `catch` that returned null would report \"this visitor named no campaign\" —\n * indistinguishable from an organic arrival, which is how an unreadable source\n * becomes a measured zero. `unreadable` is a different answer and the caller\n * treats it differently: it falls through to the live URL instead of\n * concluding anything.\n */\nexport type VisitUtmRead =\n  | { status: 'campaign'; campaign: UtmAttribution }\n  | { status: 'none' }\n  | { status: 'unreadable' }\n\n/**\n * Whether the visitor has granted analytics storage.\n *\n * `null` means NOT YET RESOLVED, and is not the same as `false`. The consent\n * state is settled client-side after hydration, so there is a window in every\n * pageview where the answer is genuinely unknown, and treating it as a denial\n * would be as wrong as treating it as a grant. Tier 2 does nothing in it.\n */\nlet storageConsent: boolean | null = null\n\n/** The one listener pair on `document`, or null. Held, not flagged — the same\n * reason `analytics-link-clicks.ts` holds its own: a boolean lets a caller\n * install over a listener that is still attached, and re-entrant decoration is\n * harder to see than a double-counted event. */\nlet installedHandler: ((event: Event) => void) | null = null\n\nfunction sessionStore(): Storage | null {\n  if (typeof window === 'undefined') return null\n  // Touching the property itself can throw, not just its methods.\n  try {\n    return window.sessionStorage ?? null\n  } catch {\n    return null\n  }\n}\n\n/**\n * The campaign this visit began with, as far as the store can say.\n *\n * Re-parsed through the same allowlist that wrote it rather than trusted:\n * `sessionStorage` is writable by anything running on the page, so the stored\n * string can claim no more than an inbound URL could — three allowlisted keys,\n * trimmed, email shapes refused, capped.\n */\nexport function readVisitUtm(): VisitUtmRead {\n  if (storageConsent !== true) return { status: 'none' }\n  const store = sessionStore()\n  if (!store) return { status: 'unreadable' }\n  let raw: string | null\n  try {\n    raw = store.getItem(UTM_VISIT_STORAGE_KEY)\n  } catch {\n    return { status: 'unreadable' }\n  }\n  if (!raw) return { status: 'none' }\n  const campaign = parseUtmAttribution(new URLSearchParams(raw))\n  return campaign ? { status: 'campaign', campaign } : { status: 'none' }\n}\n\n/**\n * Remember the campaign on the current URL as this visit's first touch.\n *\n * First touch means FIRST: an existing entry is never replaced. A second\n * campaign arriving later in the same visit is a link the visitor followed\n * after we already knew where they came from, and letting it overwrite would\n * quietly turn this into last-touch.\n *\n * Returns what is now remembered so a caller can assert on it.\n */\nexport function rememberVisitUtm(search?: string): UtmAttribution | null {\n  const existing = readVisitUtm()\n  if (existing.status === 'campaign') return existing.campaign\n  if (storageConsent !== true) return null\n  const store = sessionStore()\n  if (!store) return null\n  const source =\n    typeof search === 'string'\n      ? search\n      : typeof window === 'undefined'\n        ? ''\n        : window.location.search\n  const campaign = parseUtmAttribution(new URLSearchParams(source))\n  if (!campaign) return null\n  try {\n    store.setItem(UTM_VISIT_STORAGE_KEY, utmAttributionQuery(campaign))\n  } catch {\n    // A store that refuses the write costs the walk from the landing page to\n    // the pricing page, never the click itself — tier 1 still carries a\n    // visitor who converts without navigating.\n    return null\n  }\n  return campaign\n}\n\n/**\n * Tell this module what the visitor's analytics consent state is.\n *\n * Called by whoever already computed it for the tag, on every render, so a\n * grant seeds the first touch the moment it is given and a WITHDRAWAL takes\n * effect immediately: the stored value is dropped, not merely ignored. A\n * visitor who changes their mind mid-visit should not leave the thing they\n * withdrew consent for sitting on their device.\n */\nexport function setUtmForwardingConsent(allowed: boolean | null): void {\n  storageConsent = allowed === true ? true : allowed === false ? false : null\n  if (storageConsent === true) {\n    rememberVisitUtm()\n    return\n  }\n  if (storageConsent === false) {\n    const store = sessionStore()\n    if (!store) return\n    try {\n      store.removeItem(UTM_VISIT_STORAGE_KEY)\n    } catch {\n      // Nothing else to try, and a failed cleanup must not break the page.\n    }\n  }\n}\n\n/**\n * The campaign to forward, first touch preferred.\n *\n * The `unreadable` case falls through to the live URL rather than to nothing,\n * which is the point of carrying that state at all: a broken store degrades\n * this to tier 1 rather than to silence.\n */\nexport function utmToForward(search?: string): UtmAttribution | null {\n  const stored = readVisitUtm()\n  if (stored.status === 'campaign') return stored.campaign\n  const live =\n    typeof search === 'string'\n      ? search\n      : typeof window === 'undefined'\n        ? ''\n        : window.location.search\n  return parseUtmAttribution(new URLSearchParams(live))\n}\n\nfunction normalizeOrigin(value: string | null | undefined): string {\n  if (!value) return ''\n  try {\n    return new URL(value).origin\n  } catch {\n    return ''\n  }\n}\n\n/**\n * The href a console-bound link should carry for this visitor, or null to\n * leave it exactly as authored.\n *\n * Null — rather than \"the href unchanged\" — so that a caller cannot write back\n * a value it did not mean to change, and so a test can tell \"decided not to\n * touch this\" from \"touched it and produced the same string\".\n *\n * The three keys are replaced WHOLESALE, never merged key by key. A visitor\n * who arrived with only `utm_source=hn` clicking a button authored with all\n * three must not produce `source=hn` married to the author's `campaign=`: that\n * row describes an event that never happened. Everything else on the href —\n * `plan`, `interval`, the AGL-1535 intent — is preserved untouched.\n */\nexport function decorateUtmHref(\n  href: string,\n  baseHref: string,\n  consoleOrigin: string,\n  campaign: UtmAttribution | null,\n): string | null {\n  if (!campaign) return null\n  const origin = normalizeOrigin(consoleOrigin)\n  if (!origin) return null\n  let url: URL\n  try {\n    url = new URL(href, baseHref)\n  } catch {\n    return null\n  }\n  if (url.origin !== origin) return null\n  for (const key of UTM_QUERY_KEYS) url.searchParams.delete(key)\n  const query = new URLSearchParams(utmAttributionQuery(campaign))\n  query.forEach((value, key) => url.searchParams.set(key, value))\n  const next = url.toString()\n  return next === href ? null : next\n}\n\n/**\n * Start forwarding the campaign onto console-bound links on this page.\n *\n * Idempotent and safe to call during render, the same contract as\n * `installLinkClickTracking` and for the same AGL-1550 reason: an effect only\n * runs if React commits, and a page that renders without committing would\n * otherwise ship links with no campaign on them.\n *\n * Both `pointerdown` and `click` are listened for, in capture phase.\n * `pointerdown` is what covers a middle-click, a modifier-click into a new\n * tab, and \"Copy link address\" from the context menu — all of which read the\n * href without ever firing `click`. `click` is what covers keyboard\n * activation, which fires no pointer event at all. Decoration is idempotent,\n * so a plain left click doing both is not a problem.\n *\n * Returns an uninstall function for tests and for a caller that owns the page\n * lifecycle.\n */\nexport function installUtmForwarding(options: {\n  consoleOrigin: string\n}): () => void {\n  if (typeof document === 'undefined' || typeof window === 'undefined') {\n    return () => undefined\n  }\n  if (installedHandler) return () => undefined\n  const origin = normalizeOrigin(options?.consoleOrigin)\n  if (!origin) return () => undefined\n\n  const onActivate = (event: Event) => {\n    try {\n      const target = event.target as Element | null\n      if (!target || typeof target.closest !== 'function') return\n      const anchor = target.closest('a[href]')\n      if (!anchor) return\n      const decorated = decorateUtmHref(\n        anchor.getAttribute('href') || '',\n        window.location.href,\n        origin,\n        utmToForward(),\n      )\n      if (decorated) anchor.setAttribute('href', decorated)\n    } catch {\n      // Attribution never breaks a navigation. A link that throws here would\n      // be a link that does not work, which costs more than the campaign does.\n    }\n  }\n\n  installedHandler = onActivate\n  document.addEventListener('pointerdown', onActivate, true)\n  document.addEventListener('click', onActivate, true)\n  return resetUtmForwarding\n}\n\n/** Test seam — removes both listeners, forgets them, and forgets consent. */\nexport function resetUtmForwarding(): void {\n  if (installedHandler && typeof document !== 'undefined') {\n    document.removeEventListener('pointerdown', installedHandler, true)\n    document.removeEventListener('click', installedHandler, true)\n  }\n  installedHandler = null\n  storageConsent = null\n}\n"],"names":["UTM_QUERY_KEYS","utmAttributionQuery","parseUtmAttribution","UTM_VISIT_STORAGE_KEY","storageConsent","installedHandler","sessionStore","window","sessionStorage","readVisitUtm","status","store","raw","getItem","campaign","URLSearchParams","rememberVisitUtm","search","existing","source","location","setItem","setUtmForwardingConsent","allowed","removeItem","utmToForward","stored","live","normalizeOrigin","value","URL","origin","decorateUtmHref","href","baseHref","consoleOrigin","url","key","searchParams","delete","query","forEach","set","next","toString","installUtmForwarding","options","document","undefined","onActivate","event","target","closest","anchor","decorated","getAttribute","setAttribute","addEventListener","resetUtmForwarding","removeEventListener"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoGC,GAED,SACEA,cAAc,EACdC,mBAAmB,EACnBC,mBAAmB,QAEd,uBAAmB;AAE1B;;;;;CAKC,GACD,OAAO,MAAMC,wBAAwB,iBAAgB;AAkBrD;;;;;;;CAOC,GACD,IAAIC,iBAAiC;AAErC;;;8CAG8C,GAC9C,IAAIC,mBAAoD;AAExD,SAASC;IACP,IAAI,OAAOC,WAAW,aAAa,OAAO;IAC1C,gEAAgE;IAChE,IAAI;YACKA;QAAP,QAAOA,yBAAAA,OAAOC,cAAc,YAArBD,yBAAyB;IAClC,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA;;;;;;;CAOC,GACD,OAAO,SAASE;IACd,IAAIL,mBAAmB,MAAM,OAAO;QAAEM,QAAQ;IAAO;IACrD,MAAMC,QAAQL;IACd,IAAI,CAACK,OAAO,OAAO;QAAED,QAAQ;IAAa;IAC1C,IAAIE;IACJ,IAAI;QACFA,MAAMD,MAAME,OAAO,CAACV;IACtB,EAAE,eAAM;QACN,OAAO;YAAEO,QAAQ;QAAa;IAChC;IACA,IAAI,CAACE,KAAK,OAAO;QAAEF,QAAQ;IAAO;IAClC,MAAMI,WAAWZ,oBAAoB,IAAIa,gBAAgBH;IACzD,OAAOE,WAAW;QAAEJ,QAAQ;QAAYI;IAAS,IAAI;QAAEJ,QAAQ;IAAO;AACxE;AAEA;;;;;;;;;CASC,GACD,OAAO,SAASM,iBAAiBC,MAAe;IAC9C,MAAMC,WAAWT;IACjB,IAAIS,SAASR,MAAM,KAAK,YAAY,OAAOQ,SAASJ,QAAQ;IAC5D,IAAIV,mBAAmB,MAAM,OAAO;IACpC,MAAMO,QAAQL;IACd,IAAI,CAACK,OAAO,OAAO;IACnB,MAAMQ,SACJ,OAAOF,WAAW,WACdA,SACA,OAAOV,WAAW,cAChB,KACAA,OAAOa,QAAQ,CAACH,MAAM;IAC9B,MAAMH,WAAWZ,oBAAoB,IAAIa,gBAAgBI;IACzD,IAAI,CAACL,UAAU,OAAO;IACtB,IAAI;QACFH,MAAMU,OAAO,CAAClB,uBAAuBF,oBAAoBa;IAC3D,EAAE,eAAM;QACN,yEAAyE;QACzE,oEAAoE;QACpE,2CAA2C;QAC3C,OAAO;IACT;IACA,OAAOA;AACT;AAEA;;;;;;;;CAQC,GACD,OAAO,SAASQ,wBAAwBC,OAAuB;IAC7DnB,iBAAiBmB,YAAY,OAAO,OAAOA,YAAY,QAAQ,QAAQ;IACvE,IAAInB,mBAAmB,MAAM;QAC3BY;QACA;IACF;IACA,IAAIZ,mBAAmB,OAAO;QAC5B,MAAMO,QAAQL;QACd,IAAI,CAACK,OAAO;QACZ,IAAI;YACFA,MAAMa,UAAU,CAACrB;QACnB,EAAE,eAAM;QACN,qEAAqE;QACvE;IACF;AACF;AAEA;;;;;;CAMC,GACD,OAAO,SAASsB,aAAaR,MAAe;IAC1C,MAAMS,SAASjB;IACf,IAAIiB,OAAOhB,MAAM,KAAK,YAAY,OAAOgB,OAAOZ,QAAQ;IACxD,MAAMa,OACJ,OAAOV,WAAW,WACdA,SACA,OAAOV,WAAW,cAChB,KACAA,OAAOa,QAAQ,CAACH,MAAM;IAC9B,OAAOf,oBAAoB,IAAIa,gBAAgBY;AACjD;AAEA,SAASC,gBAAgBC,KAAgC;IACvD,IAAI,CAACA,OAAO,OAAO;IACnB,IAAI;QACF,OAAO,IAAIC,IAAID,OAAOE,MAAM;IAC9B,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASC,gBACdC,IAAY,EACZC,QAAgB,EAChBC,aAAqB,EACrBrB,QAA+B;IAE/B,IAAI,CAACA,UAAU,OAAO;IACtB,MAAMiB,SAASH,gBAAgBO;IAC/B,IAAI,CAACJ,QAAQ,OAAO;IACpB,IAAIK;IACJ,IAAI;QACFA,MAAM,IAAIN,IAAIG,MAAMC;IACtB,EAAE,eAAM;QACN,OAAO;IACT;IACA,IAAIE,IAAIL,MAAM,KAAKA,QAAQ,OAAO;IAClC,KAAK,MAAMM,OAAOrC,eAAgBoC,IAAIE,YAAY,CAACC,MAAM,CAACF;IAC1D,MAAMG,QAAQ,IAAIzB,gBAAgBd,oBAAoBa;IACtD0B,MAAMC,OAAO,CAAC,CAACZ,OAAOQ,MAAQD,IAAIE,YAAY,CAACI,GAAG,CAACL,KAAKR;IACxD,MAAMc,OAAOP,IAAIQ,QAAQ;IACzB,OAAOD,SAASV,OAAO,OAAOU;AAChC;AAEA;;;;;;;;;;;;;;;;;CAiBC,GACD,OAAO,SAASE,qBAAqBC,OAEpC;IACC,IAAI,OAAOC,aAAa,eAAe,OAAOxC,WAAW,aAAa;QACpE,OAAO,IAAMyC;IACf;IACA,IAAI3C,kBAAkB,OAAO,IAAM2C;IACnC,MAAMjB,SAASH,gBAAgBkB,2BAAAA,QAASX,aAAa;IACrD,IAAI,CAACJ,QAAQ,OAAO,IAAMiB;IAE1B,MAAMC,aAAa,CAACC;QAClB,IAAI;YACF,MAAMC,SAASD,MAAMC,MAAM;YAC3B,IAAI,CAACA,UAAU,OAAOA,OAAOC,OAAO,KAAK,YAAY;YACrD,MAAMC,SAASF,OAAOC,OAAO,CAAC;YAC9B,IAAI,CAACC,QAAQ;YACb,MAAMC,YAAYtB,gBAChBqB,OAAOE,YAAY,CAAC,WAAW,IAC/BhD,OAAOa,QAAQ,CAACa,IAAI,EACpBF,QACAN;YAEF,IAAI6B,WAAWD,OAAOG,YAAY,CAAC,QAAQF;QAC7C,EAAE,eAAM;QACN,uEAAuE;QACvE,yEAAyE;QAC3E;IACF;IAEAjD,mBAAmB4C;IACnBF,SAASU,gBAAgB,CAAC,eAAeR,YAAY;IACrDF,SAASU,gBAAgB,CAAC,SAASR,YAAY;IAC/C,OAAOS;AACT;AAEA,2EAA2E,GAC3E,OAAO,SAASA;IACd,IAAIrD,oBAAoB,OAAO0C,aAAa,aAAa;QACvDA,SAASY,mBAAmB,CAAC,eAAetD,kBAAkB;QAC9D0C,SAASY,mBAAmB,CAAC,SAAStD,kBAAkB;IAC1D;IACAA,mBAAmB;IACnBD,iBAAiB;AACnB"}

package/src/lib/app-utils/{campaign-touch.d.ts → utm-touch.d.ts}

@@ -15,8 +15,13 @@
  * limitations under the License.
  */
 /**
- * THE VISITOR'S HALF OF CAMPAIGN ATTRIBUTION — the touch that has to survive
- * the gap between arriving from a campaign and becoming somebody.
+ * THE VISITOR'S HALF OF ATTRIBUTION — the UTM touch that has to survive the
+ * gap between arriving from a labeled link and becoming somebody.
+ *
+ * The labels are the web's (`utm_source`/`utm_medium`/`utm_campaign`), not
+ * any plugin's model: every door that identifies a visitor — a form, a
+ * booking, a signup — attaches the touch, and whichever plugin credits its
+ * campaigns reads it on the server.
  *
  * ## The gap this exists to cross
  *
@@ -42,7 +47,7 @@
  *
  * `localStorage`, expiring at {@link ATTRIBUTION_WINDOW_DAYS}.
  *
- * `campaign-forwarding.ts` holds its own campaign in `sessionStorage` and
+ * `utm-forwarding.ts` holds its own campaign in `sessionStorage` and
  * argues for it: a first touch that outlived the visit would start
  * attributing next week's organic return to this week's ad. That argument is
  * correct for the question it answers — which campaign produced THIS SIGNUP,
@@ -64,7 +69,7 @@
  * The revenue join credits the LAST click, and a product where a lead and an
  * order attribute by different rules is worse than one that is uniformly
  * approximate. So a new campaign arrival OVERWRITES the stored one. This is
- * the deliberate opposite of {@link rememberVisitCampaign}, which keeps the
+ * the deliberate opposite of {@link rememberVisitUtm}, which keeps the
  * first — that one describes a single visit's origin and this one describes
  * which campaign most recently brought a person back.
  *
@@ -104,7 +109,7 @@
  * ## What is never carried
  *
  * Only the three allowlisted `utm_` labels, scrubbed by
- * {@link parseCampaignAttribution} — which refuses an email-shaped value
+ * {@link parseUtmAttribution} — which refuses an email-shaped value
  * outright. No address, no person's identifier, no click id, nothing that
  * names the visitor. A campaign link is exactly where putting a recipient in
  * a query string would be tempting, and the parser is what makes it
@@ -120,13 +125,16 @@
  * are the WEB channel's touch, and a campaign that carries none is joined by
  * address instead.
  */
-import { type CampaignAttribution } from './campaign-attribution';
+import { type UtmAttribution } from './utm-attribution';
 /** Days between a campaign touch and a conversion it may be credited with. */
 export declare const ATTRIBUTION_WINDOW_DAYS = 7;
 /** The same window in milliseconds. */
 export declare const ATTRIBUTION_WINDOW_MS: number;
-/** Where the touch is held. Namespaced like every other key this app sets. */
-export declare const CAMPAIGN_TOUCH_STORAGE_KEY = "aglyn:campaign-touch";
+/**
+ * Where the touch is held. Namespaced like every other key this app sets, and
+ * spelled as visitors' devices already hold it.
+ */
+export declare const UTM_TOUCH_STORAGE_KEY = "aglyn:campaign-touch";
 /**
  * The parameter the touch's instant rides under inside the wire form.
  *
@@ -135,17 +143,17 @@ export declare const CAMPAIGN_TOUCH_STORAGE_KEY = "aglyn:campaign-touch";
  * by it or have to widen it. `t` is outside the allowlist and read
  * separately.
  */
-export declare const CAMPAIGN_TOUCH_TIME_KEY = "t";
+export declare const UTM_TOUCH_TIME_KEY = "t";
 /** A campaign the visitor arrived from, and when they arrived from it. */
-export interface CampaignTouch extends CampaignAttribution {
+export interface UtmTouch extends UtmAttribution {
     /** When the visitor followed the campaign link, epoch ms. */
     atMs: number;
 }
 /**
  * The canonical stored form of a touch — the ONLY place it is written, so it
- * cannot drift from what {@link parseCampaignTouch} reads back.
+ * cannot drift from what {@link parseUtmTouch} reads back.
  */
-export declare function campaignTouchWire(touch: CampaignTouch | null | undefined): string;
+export declare function utmTouchWire(touch: UtmTouch | null | undefined): string;
 /**
  * Read a stored or transmitted touch back, or `null`.
  *
@@ -155,7 +163,7 @@ export declare function campaignTouchWire(touch: CampaignTouch | null | undefine
  * future is refused for the reason the revenue join refuses one: a click
  * after the conversion is the receipt, not the cause.
  */
-export declare function parseCampaignTouch(wire: unknown, nowMs?: number): CampaignTouch | null;
+export declare function parseUtmTouch(wire: unknown, nowMs?: number): UtmTouch | null;
 /**
  * Tell this module what the visitor's analytics consent state is.
  *
@@ -163,7 +171,7 @@ export declare function parseCampaignTouch(wire: unknown, nowMs?: number): Campa
  * grant remembers the arrival the moment it is given and a withdrawal drops
  * the stored touch immediately.
  */
-export declare function setCampaignTouchConsent(allowed: boolean | null): void;
+export declare function setUtmTouchConsent(allowed: boolean | null): void;
 /**
  * Remember the campaign on the current URL as this visitor's latest touch.
  *
@@ -174,7 +182,7 @@ export declare function setCampaignTouchConsent(allowed: boolean | null): void;
  *
  * @returns what is now remembered, or `null`.
  */
-export declare function rememberCampaignTouch(search?: string, nowMs?: number): CampaignTouch | null;
+export declare function rememberUtmTouch(search?: string, nowMs?: number): UtmTouch | null;
 /**
  * The touch to credit a conversion happening right now, or `null`.
  *
@@ -191,7 +199,7 @@ export declare function rememberCampaignTouch(search?: string, nowMs?: number):
  * device would be keeping a record of where somebody came from for no purpose
  * anything reads. The read that finds it removes it.
  */
-export declare function readCampaignTouch(nowMs?: number): CampaignTouch | null;
+export declare function readUtmTouch(nowMs?: number): UtmTouch | null;
 /**
  * The fragment a conversion request spreads into its body, or `{}`.
  *
@@ -201,6 +209,6 @@ export declare function readCampaignTouch(nowMs?: number): CampaignTouch | null;
  * never `campaignTouch: undefined`, so that "arrived from nowhere" and "this
  * door does not report" stay distinguishable on the wire.
  */
-export declare function campaignTouchField(nowMs?: number): {
+export declare function utmTouchField(nowMs?: number): {
     campaignTouch?: string;
 };

package/src/lib/app-utils/{campaign-touch.js → utm-touch.js}

@@ -15,8 +15,13 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */ /**
- * THE VISITOR'S HALF OF CAMPAIGN ATTRIBUTION — the touch that has to survive
- * the gap between arriving from a campaign and becoming somebody.
+ * THE VISITOR'S HALF OF ATTRIBUTION — the UTM touch that has to survive the
+ * gap between arriving from a labeled link and becoming somebody.
+ *
+ * The labels are the web's (`utm_source`/`utm_medium`/`utm_campaign`), not
+ * any plugin's model: every door that identifies a visitor — a form, a
+ * booking, a signup — attaches the touch, and whichever plugin credits its
+ * campaigns reads it on the server.
  *
  * ## The gap this exists to cross
  *
@@ -42,7 +47,7 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  *
  * `localStorage`, expiring at {@link ATTRIBUTION_WINDOW_DAYS}.
  *
- * `campaign-forwarding.ts` holds its own campaign in `sessionStorage` and
+ * `utm-forwarding.ts` holds its own campaign in `sessionStorage` and
  * argues for it: a first touch that outlived the visit would start
  * attributing next week's organic return to this week's ad. That argument is
  * correct for the question it answers — which campaign produced THIS SIGNUP,
@@ -64,7 +69,7 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * The revenue join credits the LAST click, and a product where a lead and an
  * order attribute by different rules is worse than one that is uniformly
  * approximate. So a new campaign arrival OVERWRITES the stored one. This is
- * the deliberate opposite of {@link rememberVisitCampaign}, which keeps the
+ * the deliberate opposite of {@link rememberVisitUtm}, which keeps the
  * first — that one describes a single visit's origin and this one describes
  * which campaign most recently brought a person back.
  *
@@ -104,7 +109,7 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * ## What is never carried
  *
  * Only the three allowlisted `utm_` labels, scrubbed by
- * {@link parseCampaignAttribution} — which refuses an email-shaped value
+ * {@link parseUtmAttribution} — which refuses an email-shaped value
  * outright. No address, no person's identifier, no click id, nothing that
  * names the visitor. A campaign link is exactly where putting a recipient in
  * a query string would be tempting, and the parser is what makes it
@@ -119,7 +124,7 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * recorded server-side against the recipient's address hash. The labels below
  * are the WEB channel's touch, and a campaign that carries none is joined by
  * address instead.
- */ import { campaignAttributionQuery, parseCampaignAttribution } from "./campaign-attribution.js";
+ */ import { utmAttributionQuery, parseUtmAttribution } from "./utm-attribution.js";
 /*==========================================
  * THE WINDOW, AND WHY THIS IS THE SECOND COPY OF A NUMBER.
  *
@@ -152,7 +157,10 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
     const age = convertedAtMs - touchedAtMs;
     return age >= 0 && age <= ATTRIBUTION_WINDOW_MS;
 }
-/** Where the touch is held. Namespaced like every other key this app sets. */ export const CAMPAIGN_TOUCH_STORAGE_KEY = 'aglyn:campaign-touch';
+/**
+ * Where the touch is held. Namespaced like every other key this app sets, and
+ * spelled as visitors' devices already hold it.
+ */ export const UTM_TOUCH_STORAGE_KEY = 'aglyn:campaign-touch';
 /**
  * The parameter the touch's instant rides under inside the wire form.
  *
@@ -160,7 +168,7 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * allowlist that reads a URL, and a fourth `utm_` key would either be dropped
  * by it or have to widen it. `t` is outside the allowlist and read
  * separately.
- */ export const CAMPAIGN_TOUCH_TIME_KEY = 't';
+ */ export const UTM_TOUCH_TIME_KEY = 't';
 /**
  * Whether the visitor has granted analytics storage.
  *
@@ -180,14 +188,14 @@ function localStore() {
 }
 /**
  * The canonical stored form of a touch — the ONLY place it is written, so it
- * cannot drift from what {@link parseCampaignTouch} reads back.
- */ export function campaignTouchWire(touch) {
+ * cannot drift from what {@link parseUtmTouch} reads back.
+ */ export function utmTouchWire(touch) {
     if (!touch) return '';
-    const labels = campaignAttributionQuery(touch);
+    const labels = utmAttributionQuery(touch);
     if (!labels) return '';
     const atMs = Math.round(Number(touch.atMs));
     if (!Number.isFinite(atMs) || atMs <= 0) return '';
-    return `${labels}&${CAMPAIGN_TOUCH_TIME_KEY}=${atMs}`;
+    return `${labels}&${UTM_TOUCH_TIME_KEY}=${atMs}`;
 }
 /**
  * Read a stored or transmitted touch back, or `null`.
@@ -197,7 +205,7 @@ function localStore() {
  * agrees about what an expired touch is: nothing at all. A touch dated in the
  * future is refused for the reason the revenue join refuses one: a click
  * after the conversion is the receipt, not the cause.
- */ export function parseCampaignTouch(wire, nowMs = Date.now()) {
+ */ export function parseUtmTouch(wire, nowMs = Date.now()) {
     if (typeof wire !== 'string' || !wire) return null;
     let params;
     try {
@@ -205,9 +213,9 @@ function localStore() {
     } catch (unused) {
         return null;
     }
-    const campaign = parseCampaignAttribution(params);
+    const campaign = parseUtmAttribution(params);
     if (!campaign) return null;
-    const atMs = Number(params.get(CAMPAIGN_TOUCH_TIME_KEY));
+    const atMs = Number(params.get(UTM_TOUCH_TIME_KEY));
     if (!touchIsInWindow(atMs, nowMs)) return null;
     return _extends({}, campaign, {
         atMs
@@ -219,17 +227,17 @@ function localStore() {
  * Called by whoever already computed it for the tag, on every render, so a
  * grant remembers the arrival the moment it is given and a withdrawal drops
  * the stored touch immediately.
- */ export function setCampaignTouchConsent(allowed) {
+ */ export function setUtmTouchConsent(allowed) {
     storageConsent = allowed === true ? true : allowed === false ? false : null;
     if (storageConsent === true) {
-        rememberCampaignTouch();
+        rememberUtmTouch();
         return;
     }
     if (storageConsent === false) {
         const store = localStore();
         if (!store) return;
         try {
-            store.removeItem(CAMPAIGN_TOUCH_STORAGE_KEY);
+            store.removeItem(UTM_TOUCH_STORAGE_KEY);
         } catch (unused) {
         // Nothing else to try, and a failed cleanup must not break the page.
         }
@@ -244,20 +252,20 @@ function localStore() {
  * second pageview.
  *
  * @returns what is now remembered, or `null`.
- */ export function rememberCampaignTouch(search, nowMs = Date.now()) {
+ */ export function rememberUtmTouch(search, nowMs = Date.now()) {
     if (storageConsent !== true) return null;
     const store = localStore();
     if (!store) return null;
     const source = typeof search === 'string' ? search : typeof window === 'undefined' ? '' : window.location.search;
-    const campaign = parseCampaignAttribution(new URLSearchParams(source));
+    const campaign = parseUtmAttribution(new URLSearchParams(source));
     if (!campaign) return null;
     const touch = _extends({}, campaign, {
         atMs: nowMs
     });
-    const wire = campaignTouchWire(touch);
+    const wire = utmTouchWire(touch);
     if (!wire) return null;
     try {
-        store.setItem(CAMPAIGN_TOUCH_STORAGE_KEY, wire);
+        store.setItem(UTM_TOUCH_STORAGE_KEY, wire);
     } catch (unused) {
         // A store that refuses the write costs the walk from the landing page to
         // the conversion, never a conversion on the landing page itself — the
@@ -281,8 +289,8 @@ function localStore() {
  * A touch past the window can never be credited again, so leaving it on the
  * device would be keeping a record of where somebody came from for no purpose
  * anything reads. The read that finds it removes it.
- */ export function readCampaignTouch(nowMs = Date.now()) {
-    const live = typeof window === 'undefined' ? null : parseCampaignAttribution(new URLSearchParams(window.location.search));
+ */ export function readUtmTouch(nowMs = Date.now()) {
+    const live = typeof window === 'undefined' ? null : parseUtmAttribution(new URLSearchParams(window.location.search));
     if (live) return _extends({}, live, {
         atMs: nowMs
     });
@@ -291,15 +299,15 @@ function localStore() {
     if (!store) return null;
     let raw;
     try {
-        raw = store.getItem(CAMPAIGN_TOUCH_STORAGE_KEY);
+        raw = store.getItem(UTM_TOUCH_STORAGE_KEY);
     } catch (unused) {
         return null;
     }
     if (!raw) return null;
-    const touch = parseCampaignTouch(raw, nowMs);
+    const touch = parseUtmTouch(raw, nowMs);
     if (!touch) {
         try {
-            store.removeItem(CAMPAIGN_TOUCH_STORAGE_KEY);
+            store.removeItem(UTM_TOUCH_STORAGE_KEY);
         } catch (unused) {
         // The entry stays until the next read finds it again; it is already
         // uncreditable, so nothing downstream is affected.
@@ -316,11 +324,11 @@ function localStore() {
  * that produced none. Empty when there is no touch — never a placeholder,
  * never `campaignTouch: undefined`, so that "arrived from nowhere" and "this
  * door does not report" stay distinguishable on the wire.
- */ export function campaignTouchField(nowMs = Date.now()) {
-    const wire = campaignTouchWire(readCampaignTouch(nowMs));
+ */ export function utmTouchField(nowMs = Date.now()) {
+    const wire = utmTouchWire(readUtmTouch(nowMs));
     return wire ? {
         campaignTouch: wire
     } : {};
 }
 
-//# sourceMappingURL=campaign-touch.js.map
+//# sourceMappingURL=utm-touch.js.map