@datalyr/web 1.7.8 → 1.7.12

package/dist/attribution.d.ts

@@ -4,9 +4,13 @@
  */
 import type { Attribution, TouchPoint } from './types';
 export declare class AttributionManager {
+    private static readonly KLAVIYO_BINDING_KEY;
+    private static readonly KLAVIYO_BINDING_TTL_MS;
     private attributionWindow;
     private trackedParams;
     private queryParamsCache;
+    private pendingKlaviyoProfileId;
+    private replaceVisibleUrl?;
     private UTM_PARAMS;
     private CLICK_IDS;
     private CLICK_ID_ALIASES;
@@ -17,7 +21,17 @@ export declare class AttributionManager {
         attributionWindow?: number;
         trackedParams?: string[];
         marketingAllowed?: () => boolean;
+        replaceVisibleUrl?: (url: string) => void;
     });
+    private validKlaviyoProfileId;
+    /** Capture the dedicated Klaviyo identity parameter before URL redaction.
+     * It deliberately never enters the Attribution object or touch storage. */
+    private captureKlaviyoProfileBinding;
+    /** Called once encryption is ready. The short TTL only bridges async init or
+     * a reload before the landing event is queued; it is not a profile cache. */
+    hydrateKlaviyoProfileBinding(): Promise<void>;
+    /** One-shot binding for the next queued event. */
+    consumeKlaviyoProfileBinding(): string | null;
     private isMarketingAllowed;
     /**
      * Clear query params cache (called on page navigation)

package/dist/attribution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attribution.d.ts","sourceRoot":"","sources":["../src/attribution.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEvD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,aAAa,CAAW;IAChC,OAAO,CAAC,gBAAgB,CAAuC;IAC/D,OAAO,CAAC,UAAU,CAA2E;IAE7F,OAAO,CAAC,SAAS,CAsBf;IAMF,OAAO,CAAC,gBAAgB,CAOtB;IAEF,OAAO,CAAC,sBAAsB,CAO5B;IAKF,OAAO,CAAC,iBAAiB,CAAiG;IAI1H,OAAO,CAAC,kBAAkB,CAAC,CAAgB;gBAE/B,OAAO,GAAE;QACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC;KAC7B;IAQN,OAAO,CAAC,kBAAkB;IAI1B;;;OAGG;IACH,UAAU,IAAI,IAAI;IAIlB;;OAEG;IACH,kBAAkB,IAAI,WAAW;IA0FjC;;;;;OAKG;IACH,eAAe,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;IAwB/C;;;OAGG;IACH,aAAa,IAAI,WAAW,GAAG,IAAI;IASnC;;OAEG;IACH,cAAc,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;IAQ9C;;;OAGG;IACH,YAAY,IAAI,WAAW,GAAG,IAAI;IASlC;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,GAAG,IAAI;IAqBhE;;OAEG;IACH,UAAU,IAAI,UAAU,EAAE;IAI1B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAgGxB;;;OAGG;IACH,OAAO,CAAC,UAAU;IAKlB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAKxB;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAQ5B;;OAEG;IACH,kBAAkB,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAqHzC;;OAEG;IACH,OAAO,CAAC,eAAe;IA6DvB;;OAEG;IACH,OAAO,CAAC,eAAe;IA2BvB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;OAEG;IACH,OAAO,CAAC,eAAe;IAQvB;;OAEG;IACH,oBAAoB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO;IAKvD;;OAEG;IACH,uBAAuB,IAAI,IAAI;CAYhC"}
+{"version":3,"file":"attribution.d.ts","sourceRoot":"","sources":["../src/attribution.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEvD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAgC;IAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAkB;IAChE,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,aAAa,CAAW;IAChC,OAAO,CAAC,gBAAgB,CAAuC;IAC/D,OAAO,CAAC,uBAAuB,CAAuB;IACtD,OAAO,CAAC,iBAAiB,CAAC,CAAwB;IAClD,OAAO,CAAC,UAAU,CAAqF;IAEvG,OAAO,CAAC,SAAS,CAsBf;IAMF,OAAO,CAAC,gBAAgB,CAOtB;IAEF,OAAO,CAAC,sBAAsB,CAW5B;IAKF,OAAO,CAAC,iBAAiB,CAAiG;IAI1H,OAAO,CAAC,kBAAkB,CAAC,CAAgB;gBAE/B,OAAO,GAAE;QACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC;QACjC,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;KACtC;IAQN,OAAO,CAAC,qBAAqB;IAM7B;+EAC2E;IAC3E,OAAO,CAAC,4BAA4B;IAmBpC;iFAC6E;IACvE,4BAA4B,IAAI,OAAO,CAAC,IAAI,CAAC;IAmBnD,kDAAkD;IAClD,4BAA4B,IAAI,MAAM,GAAG,IAAI;IAS7C,OAAO,CAAC,kBAAkB;IAI1B;;;OAGG;IACH,UAAU,IAAI,IAAI;IAIlB;;OAEG;IACH,kBAAkB,IAAI,WAAW;IAwGjC;;;;;OAKG;IACH,eAAe,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;IAwB/C;;;OAGG;IACH,aAAa,IAAI,WAAW,GAAG,IAAI;IASnC;;OAEG;IACH,cAAc,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;IAQ9C;;;OAGG;IACH,YAAY,IAAI,WAAW,GAAG,IAAI;IASlC;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,GAAG,IAAI;IAqBhE;;OAEG;IACH,UAAU,IAAI,UAAU,EAAE;IAI1B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAgGxB;;;OAGG;IACH,OAAO,CAAC,UAAU;IAKlB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAKxB;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAQ5B;;OAEG;IACH,kBAAkB,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAoIzC;;OAEG;IACH,OAAO,CAAC,eAAe;IA6DvB;;OAEG;IACH,OAAO,CAAC,eAAe;IA2BvB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;OAEG;IACH,OAAO,CAAC,eAAe;IAQvB;;OAEG;IACH,oBAAoB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO;IAKvD;;OAEG;IACH,uBAAuB,IAAI,IAAI;CAYhC"}

package/dist/container.d.ts

@@ -52,6 +52,10 @@ export interface PixelConfig {
         enabled: boolean;
         pixel_id: string;
     };
+    whop?: {
+        enabled: boolean;
+        company_id: string;
+    };
 }
 export declare class ContainerManager {
     private scripts;
@@ -130,10 +134,10 @@ export declare class ContainerManager {
      * Load tracking pixel
      */
     private loadPixel;
-    /**
-     * Initialize third-party pixels (Meta, Google, TikTok)
-     */
+    /** Initialize configured third-party pixels in the merchant's page context. */
     private initializePixels;
+    /** Initialize Whop's official first-party attribution pixel. */
+    private initializeWhopPixel;
     /**
      * Initialize Meta (Facebook) Pixel
      *

package/dist/container.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../src/container.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEhD;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,WAAW,GAAG,WAAW,GAAG,aAAa,GAAG,QAAQ,CAAC;IAC9D,SAAS,EAAE,QAAQ,GAAG,eAAe,GAAG,kBAAkB,CAAC;IAC3D,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,GAAG,CAAC;KACZ,CAAC,CAAC;IACH,QAAQ,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE;QACL,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,oBAAoB,CAAC,EAAE,OAAO,CAAC;KAChC,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,oBAAoB,CAAC,EAAE,OAAO,CAAC;KAChC,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,oBAAoB,CAAqB;IACjD,OAAO,CAAC,MAAM,CAA4B;IAC1C;;yEAEqE;IACrE,OAAO,CAAC,YAAY,CAAC,CAAkB;IACvC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,gBAAgB,CAA2B;IACnD,OAAO,CAAC,qBAAqB,CAAwC;IACrE,OAAO,CAAC,cAAc,CAAgD;IAKtE,OAAO,CAAC,WAAW,CAAC,CAAkC;gBAE1C,OAAO,EAAE;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,aAAa,GAAG,SAAS,CAAC;KAC/C;IA+BD;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAyE3B;;;OAGG;IACH,eAAe,IAAI,eAAe,GAAG,SAAS;IAI9C;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAU5B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAkBxB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAyB/B;;OAEG;IACH,OAAO,CAAC,UAAU;IA8BlB;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IA+DxB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;;OAGG;IACI,iBAAiB,IAAI,IAAI;IAkBhC;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAqC1B;;OAEG;IACH,OAAO,CAAC,SAAS;IAQjB;;OAEG;YACW,gBAAgB;IAmB9B;;;;;;;;OAQG;YACW,mBAAmB;IAsDjC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAyB3B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA0C7B;;;;;OAKG;IACH,YAAY,IAAI,OAAO;IAIvB;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,GAAE,GAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAmG9E;;OAEG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAO3C;;OAEG;IACH,gBAAgB,IAAI,MAAM,EAAE;IAI5B;;;;;;;;;;;;;;;;;;;OAmBG;IAEH;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAoBxB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAQzB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAyB1B;;OAEG;IACH,OAAO,CAAC,aAAa;IA0BrB;;OAEG;IACH,OAAO,CAAC,GAAG;CAKZ"}
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../src/container.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEhD;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,WAAW,GAAG,WAAW,GAAG,aAAa,GAAG,QAAQ,CAAC;IAC9D,SAAS,EAAE,QAAQ,GAAG,eAAe,GAAG,kBAAkB,CAAC;IAC3D,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,GAAG,CAAC;KACZ,CAAC,CAAC;IACH,QAAQ,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE;QACL,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,oBAAoB,CAAC,EAAE,OAAO,CAAC;KAChC,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,oBAAoB,CAAC,EAAE,OAAO,CAAC;KAChC,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,IAAI,CAAC,EAAE;QACL,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,oBAAoB,CAAqB;IACjD,OAAO,CAAC,MAAM,CAA4B;IAC1C;;yEAEqE;IACrE,OAAO,CAAC,YAAY,CAAC,CAAkB;IACvC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,gBAAgB,CAA2B;IACnD,OAAO,CAAC,qBAAqB,CAAwC;IACrE,OAAO,CAAC,cAAc,CAAgD;IAKtE,OAAO,CAAC,WAAW,CAAC,CAAkC;gBAE1C,OAAO,EAAE;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,aAAa,GAAG,SAAS,CAAC;KAC/C;IA+BD;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAyE3B;;;OAGG;IACH,eAAe,IAAI,eAAe,GAAG,SAAS;IAI9C;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAU5B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAkBxB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAyB/B;;OAEG;IACH,OAAO,CAAC,UAAU;IA8BlB;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IA+DxB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;;OAGG;IACI,iBAAiB,IAAI,IAAI;IAkBhC;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAqC1B;;OAEG;IACH,OAAO,CAAC,SAAS;IAQjB,+EAA+E;YACjE,gBAAgB;IA0B9B,gEAAgE;IAChE,OAAO,CAAC,mBAAmB;IA0C3B;;;;;;;;OAQG;YACW,mBAAmB;IAsDjC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAyB3B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA0C7B;;;;;OAKG;IACH,YAAY,IAAI,OAAO;IAIvB;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,GAAE,GAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAiH9E;;OAEG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAO3C;;OAEG;IACH,gBAAgB,IAAI,MAAM,EAAE;IAI5B;;;;;;;;;;;;;;;;;;;OAmBG;IAEH;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAoBxB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAQzB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAyB1B;;OAEG;IACH,OAAO,CAAC,aAAa;IA0BrB;;OAEG;IACH,OAAO,CAAC,GAAG;CAKZ"}

package/dist/container.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=container.test.d.ts.map

package/dist/container.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container.test.d.ts","sourceRoot":"","sources":["../src/container.test.ts"],"names":[],"mappings":""}

package/dist/datalyr.cjs.js

@@ -1,5 +1,5 @@
 /**
- * @datalyr/web v1.7.8
+ * @datalyr/web v1.7.12
  * Datalyr Web SDK - Modern attribution tracking for web applications
  * (c) 2026 Datalyr Inc.
  * Released under the MIT License
@@ -819,7 +819,11 @@ const REDACTED_URL_PARAMS = new Set([
     'token', 'access_token', 'refresh_token', 'id_token', 'auth', 'authorization',
     'password', 'pass', 'pwd', 'secret', 'api_key', 'apikey', 'key',
     'session', 'session_id', 'sid', 'email', 'e', 'phone', 'tel',
-    'signature', 'sig', 'otp', 'reset', 'hash'
+    'signature', 'sig', 'otp', 'reset', 'hash',
+    // Klaviyo profile IDs are deterministic customer identifiers. Capture them
+    // through the dedicated identity envelope, but never retain them in URLs,
+    // referrers, first/last-touch records, or generic event properties.
+    'dl_kprofile_id'
 ]);
 // BATCH-2(e): `code` is CONDITIONAL, not in the always-redact set above. An OAuth
 // authorization code (account-takeover-grade if it leaks to ad platforms) ALWAYS travels
@@ -1764,7 +1768,8 @@ class SessionManager {
 class AttributionManager {
     constructor(options = {}) {
         this.queryParamsCache = null;
-        this.UTM_PARAMS = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content'];
+        this.pendingKlaviyoProfileId = null;
+        this.UTM_PARAMS = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'utm_id'];
         // Updated to match dl.js - includes ALL ad platform click IDs
         this.CLICK_IDS = [
             'fbclid', // Facebook/Meta
@@ -1809,7 +1814,11 @@ class AttributionManager {
             'source', // Generic source (non-UTM)
             'campaign', // Generic campaign (non-UTM)
             'medium', // Generic medium (non-UTM)
-            'gad_source' // Google Ads source parameter
+            'gad_source', // Google Ads source parameter
+            // Datalyr-owned Klaviyo parameters. These live beside merchant UTMs so
+            // account-level setup never replaces customer values.
+            'dl_ksource',
+            'dl_kmessage_id'
         ];
         // TR-03: ad-cookie fields (Meta/Google Ads/TikTok/Snap) that are MARKETING-scoped. When
         // marketing consent is declined these are neither synthesized/written nor shipped. Google
@@ -1819,6 +1828,69 @@ class AttributionManager {
         // Merge default tracked params with user-provided ones
         this.trackedParams = [...this.DEFAULT_TRACKED_PARAMS, ...(options.trackedParams || [])];
         this.marketingAllowedFn = options.marketingAllowed;
+        this.replaceVisibleUrl = options.replaceVisibleUrl;
+    }
+    validKlaviyoProfileId(value) {
+        const id = typeof value === 'string' ? value.trim() : '';
+        if (!id || id.length > 512 || /[\u0000-\u001f\u007f]/.test(id))
+            return null;
+        return id;
+    }
+    /** Capture the dedicated Klaviyo identity parameter before URL redaction.
+     * It deliberately never enters the Attribution object or touch storage. */
+    captureKlaviyoProfileBinding(params) {
+        if (!Object.prototype.hasOwnProperty.call(params, 'dl_kprofile_id'))
+            return;
+        const profileId = this.validKlaviyoProfileId(params.dl_kprofile_id);
+        delete params.dl_kprofile_id;
+        if (profileId && this.isMarketingAllowed())
+            this.pendingKlaviyoProfileId = profileId;
+        try {
+            const url = new URL(window.location.href);
+            if (url.searchParams.has('dl_kprofile_id')) {
+                url.searchParams.delete('dl_kprofile_id');
+                const clean = `${url.pathname}${url.search}${url.hash}`;
+                if (this.replaceVisibleUrl)
+                    this.replaceVisibleUrl(clean);
+                else
+                    window.history.replaceState(window.history.state, '', clean);
+            }
+        }
+        catch (_a) {
+            // Capture still succeeds when a synthetic test/browser URL cannot parse.
+        }
+    }
+    /** Called once encryption is ready. The short TTL only bridges async init or
+     * a reload before the landing event is queued; it is not a profile cache. */
+    hydrateKlaviyoProfileBinding() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const now = Date.now();
+            if (!this.pendingKlaviyoProfileId) {
+                const stored = yield storage.getEncrypted(AttributionManager.KLAVIYO_BINDING_KEY, null);
+                const restored = this.validKlaviyoProfileId(stored === null || stored === void 0 ? void 0 : stored.profileId);
+                if (restored && Number(stored === null || stored === void 0 ? void 0 : stored.expiresAt) > now && this.isMarketingAllowed()) {
+                    this.pendingKlaviyoProfileId = restored;
+                }
+                else {
+                    storage.remove(AttributionManager.KLAVIYO_BINDING_KEY);
+                }
+            }
+            if (this.pendingKlaviyoProfileId) {
+                yield storage.setEncrypted(AttributionManager.KLAVIYO_BINDING_KEY, {
+                    profileId: this.pendingKlaviyoProfileId,
+                    expiresAt: now + AttributionManager.KLAVIYO_BINDING_TTL_MS,
+                });
+            }
+        });
+    }
+    /** One-shot binding for the next queued event. */
+    consumeKlaviyoProfileBinding() {
+        if (!this.isMarketingAllowed())
+            this.pendingKlaviyoProfileId = null;
+        const profileId = this.pendingKlaviyoProfileId;
+        this.pendingKlaviyoProfileId = null;
+        storage.remove(AttributionManager.KLAVIYO_BINDING_KEY);
+        return profileId;
     }
     // TR-03: default (no predicate / no signal) = allowed → byte-identical to prior behavior.
     isMarketingAllowed() {
@@ -1841,6 +1913,7 @@ class AttributionManager {
         if (!this.queryParamsCache) {
             this.queryParamsCache = params;
         }
+        this.captureKlaviyoProfileBinding(params);
         const attribution = {
             timestamp: Date.now()
         };
@@ -1855,8 +1928,13 @@ class AttributionManager {
             const value = params[utm];
             if (value) {
                 attribution[utm] = value; // canonical: utm_source, utm_campaign, ...
-                const key = utm.replace('utm_', '');
-                attribution[key] = value; // alias: source, campaign, ...
+                // The five original UTM dimensions keep their legacy stripped aliases.
+                // `utm_id` is intentionally canonical-only: writing it to a generic `id`
+                // property would collide with event/customer identifiers downstream.
+                if (utm !== 'utm_id') {
+                    const key = utm.replace('utm_', '');
+                    attribution[key] = value; // alias: source, campaign, ...
+                }
             }
         }
         // Capture click IDs. The first present (by CLICK_IDS priority) is the primary
@@ -1893,6 +1971,12 @@ class AttributionManager {
                 attribution[param] = value;
             }
         }
+        // The namespaced source is Datalyr's routing authority. Keep any
+        // merchant-owned utm_source intact while still classifying this visit as
+        // Klaviyo everywhere source-level attribution is displayed.
+        if (attribution.dl_ksource === 'klaviyo') {
+            attribution.source = 'klaviyo';
+        }
         // Capture referrer. 9.A.4: redact secret/PII query-param values (reset tokens,
         // OAuth codes, emails) — this attribution object is stamped onto every event AND
         // persisted into dl_first_touch/dl_last_touch, so it must be clean at capture.
@@ -2156,6 +2240,21 @@ class AttributionManager {
                 current = Object.assign(Object.assign({}, fallback), { referrer: current.referrer, referrerHost: current.referrerHost, landingPage: current.landingPage, landingPath: current.landingPath });
             }
         }
+        // A real signal WITHOUT its own link tag must not erase the stored one. The
+        // creator/bio-link journey is click-link-today, return-from-instagram-next-week:
+        // that organic revisit scores hasRealAttribution (external referrer) with no
+        // `lyr`, and before this carry-forward storeLastTouch below replaced the tagged
+        // touch wholesale — every later event (and the Track page's conversion count,
+        // which keys on the event's own lyr) silently lost the link. Semantics = "last
+        // non-empty lyr within the window", the same answer the server's resolveLyr
+        // argMax gives webhook conversions; a NEW ?lyr= still wins because current.lyr
+        // is already set. source/medium/campaign still update — lyr is an independent
+        // dimension (which link), not a channel claim.
+        if (hasRealAttribution && !current.lyr) {
+            const storedLyr = (lastTouch === null || lastTouch === void 0 ? void 0 : lastTouch.lyr) || (firstTouch === null || firstTouch === void 0 ? void 0 : firstTouch.lyr);
+            if (storedLyr)
+                current.lyr = storedLyr;
+        }
         // Capture advertising cookies automatically
         const adCookies = this.captureAdCookies();
         // Only (re)write first/last touch when this pageview carried a REAL signal — never
@@ -2332,6 +2431,8 @@ class AttributionManager {
         }
     }
 }
+AttributionManager.KLAVIYO_BINDING_KEY = 'dl_klaviyo_profile_binding';
+AttributionManager.KLAVIYO_BINDING_TTL_MS = 10 * 60 * 1000;
 
 /**
  * Event Queue and Batching Module
@@ -3691,12 +3792,10 @@ class ContainerManager {
         img.dataset.datalyrPixel = script.id;
         document.body.appendChild(img);
     }
-    /**
-     * Initialize third-party pixels (Meta, Google, TikTok)
-     */
+    /** Initialize configured third-party pixels in the merchant's page context. */
     initializePixels() {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c;
+            var _a, _b, _c, _e;
             if (!this.pixels)
                 return;
             // Initialize Meta Pixel
@@ -3711,8 +3810,58 @@ class ContainerManager {
             if (((_c = this.pixels.tiktok) === null || _c === void 0 ? void 0 : _c.enabled) && this.pixels.tiktok.pixel_id) {
                 this.initializeTikTokPixel(this.pixels.tiktok);
             }
+            // The Whop Pixel needs only the merchant's public company ID. Loading it
+            // here lets Whop link this external-site visitor to a later hosted or
+            // embedded Whop checkout without a Datalyr visitor_id in checkout metadata.
+            if (((_e = this.pixels.whop) === null || _e === void 0 ? void 0 : _e.enabled) && this.pixels.whop.company_id) {
+                this.initializeWhopPixel(this.pixels.whop);
+            }
         });
     }
+    /** Initialize Whop's official first-party attribution pixel. */
+    initializeWhopPixel(config) {
+        var _a, _b;
+        try {
+            const host = window;
+            if (!host.whop) {
+                const queue = host.whop = {
+                    q: [],
+                    t: Date.now(),
+                    s: [],
+                    o: 'https://t.whop.tw',
+                    track: function (...args) {
+                        queue.q.push([Date.now(), ...args]);
+                    },
+                    setScope: function (...args) {
+                        queue.s = args.filter((value) => typeof value === 'string');
+                        queue.q.push([Date.now(), 'setScope', ...queue.s]);
+                    },
+                    scope: function (...scope) {
+                        return {
+                            track: function (...args) {
+                                queue.q.push([Date.now(), ...args, { __scope: scope }]);
+                            },
+                        };
+                    },
+                };
+                const script = document.createElement('script');
+                script.async = true;
+                script.src = 'https://t.whop.tw/s.js';
+                const firstScript = document.getElementsByTagName('script')[0];
+                (_a = firstScript === null || firstScript === void 0 ? void 0 : firstScript.parentNode) === null || _a === void 0 ? void 0 : _a.insertBefore(script, firstScript);
+                if (!firstScript)
+                    document.head.appendChild(script);
+            }
+            if (typeof ((_b = host.whop) === null || _b === void 0 ? void 0 : _b.setScope) !== 'function') {
+                throw new Error('Existing window.whop does not expose setScope');
+            }
+            host.whop.setScope(config.company_id);
+            this.log('Whop Pixel initialized:', config.company_id);
+        }
+        catch (error) {
+            this.log('Error initializing Whop Pixel:', error);
+        }
+    }
     /**
      * Initialize Meta (Facebook) Pixel
      *
@@ -3868,7 +4017,7 @@ class ContainerManager {
      * Track event to all initialized pixels
      */
     trackToPixels(eventName, properties = {}, eventId) {
-        var _a, _b, _c, _e, _f, _g, _h, _j, _k, _l;
+        var _a, _b, _c, _e, _f, _g, _h, _j, _k, _l, _m, _p;
         // Datalyr-internal events ($identify, $group, $alias, $auto_identify,
         // $app_download_click, …) are not conversions — never forward them to ad
         // pixels. (Previously they fired as noise custom events with the $ stripped.)
@@ -3965,6 +4114,18 @@ class ContainerManager {
                 this.log('Error tracking TikTok Pixel event:', error);
             }
         }
+        // Whop records checkout and payment events server-side. Datalyr only sends
+        // page views here, including SPA navigations, so purchases are never doubled.
+        if (((_p = (_m = this.pixels) === null || _m === void 0 ? void 0 : _m.whop) === null || _p === void 0 ? void 0 : _p.enabled) &&
+            window.whop &&
+            (eventName === 'pageview' || eventName === 'page_view')) {
+            try {
+                window.whop.track('page');
+            }
+            catch (error) {
+                this.log('Error tracking Whop Pixel page:', error);
+            }
+        }
     }
     /**
      * Manually trigger a custom script
@@ -4932,6 +5093,7 @@ class Datalyr {
         this.initialized = false;
         this.errors = [];
         this.MAX_ERRORS = 50;
+        this.shopifyConsentUnresolvable = false; // loadFeatures failed or never yielded customerPrivacy → stop fail-closing
         this.lastSpaPath = null; // dedups SPA pageviews (replaceState-on-mount double-fire)
         // Shopify loads Customer Privacy asynchronously. Keep the initial pageview
         // pending until initialization is complete and analytics consent is known,
@@ -5011,7 +5173,15 @@ class Datalyr {
             // TR-03: gate ad-signal synthesis + shipping on LIVE marketing consent. Returns true by
             // default (no consent signal) so behavior is unchanged for the common case; false only on
             // an explicit decline (Shopify marketing:false / setConsent marketing|sale=false).
-            marketingAllowed: () => this.consentAllowsMarketing()
+            marketingAllowed: () => this.consentAllowsMarketing(),
+            // Bypass our SPA wrapper when removing the one-time profile parameter,
+            // otherwise the privacy cleanup itself would manufacture a pageview.
+            replaceVisibleUrl: (url) => {
+                var _a;
+                const replace = (_a = this.originalReplaceState) !== null && _a !== void 0 ? _a : history.replaceState;
+                replace.call(history, history.state, '', url);
+                this.lastSpaPath = window.location.pathname + window.location.search + window.location.hash;
+            },
         });
         this.queue = new EventQueue(this.config);
         this.fingerprint = new FingerprintCollector({
@@ -5101,6 +5271,7 @@ class Datalyr {
                         // in the IdentityManager constructor. It never overwrites an id already
                         // set by an explicit identify() earlier in this page load.
                         yield this.identity.hydrateEncryptedUserId();
+                        yield this.attribution.hydrateKlaviyoProfileBinding();
                         this.log('Encryption initialized, user properties loaded');
                     }
                     catch (encErr) {
@@ -5364,6 +5535,14 @@ class Datalyr {
                     referrerParams.set('utm_content', lastTouch.content);
                 if (lastTouch === null || lastTouch === void 0 ? void 0 : lastTouch.term)
                     referrerParams.set('utm_term', lastTouch.term);
+                if (lastTouch === null || lastTouch === void 0 ? void 0 : lastTouch.utm_id)
+                    referrerParams.set('utm_id', lastTouch.utm_id);
+                // The trackable-link tag rides the referrer too — the edge worker's own
+                // server-side appendPlayReferrer packs it, and ingest parses it back out
+                // of install_referrer_url. Without it, interstitial-mode Android installs
+                // lose the deterministic link tag that a bare 302 would have carried.
+                if (lastTouch === null || lastTouch === void 0 ? void 0 : lastTouch.lyr)
+                    referrerParams.set('lyr', lastTouch.lyr);
                 try {
                     const url = new URL(options.appStoreUrl);
                     url.searchParams.set('referrer', referrerParams.toString());
@@ -6364,6 +6543,16 @@ class Datalyr {
         // Add attribution data (caller wins on collisions)
         const attributionData = this.attribution.getAttributionData();
         assignMissing(eventData, attributionData);
+        // A Klaviyo landing URL may carry the profile ID as a dedicated custom
+        // parameter. Emit it once through the deterministic external-id envelope;
+        // never copy it into generic attribution or user-visible URL fields.
+        const klaviyoProfileId = this.attribution.consumeKlaviyoProfileBinding();
+        if (klaviyoProfileId) {
+            const existingExternalIds = eventData.external_ids;
+            eventData.external_ids = Object.assign(Object.assign({}, (existingExternalIds && typeof existingExternalIds === 'object' && !Array.isArray(existingExternalIds)
+                ? existingExternalIds
+                : {})), { klaviyo: klaviyoProfileId });
+        }
         // Add session metrics (SDK-authoritative — session_id et al. must not be overridden)
         const sessionMetrics = this.session.getMetrics();
         Object.assign(eventData, sessionMetrics);
@@ -6431,7 +6620,7 @@ class Datalyr {
             // drift from the package again (it sat at 1.7.4 across the 1.7.5 release). The
             // build guard (scripts/check-bundle.js, run by build:check) still verifies the
             // deployable bundles carry the package.json version. (FSR-103)
-            sdk_version: '1.7.8',
+            sdk_version: '1.7.12',
             sdk_name: 'datalyr-web-sdk',
             // A3-25: versioned-envelope stamp. Every SDK emits schema_version so the ingest/contract
             // layer can key on ONE canonical envelope version (snake_case fields, event_name/event_data
@@ -6520,6 +6709,27 @@ class Datalyr {
             return false;
         }
     }
+    /**
+     * TR-15 refinement: fail closed ONLY while the Customer Privacy API can still
+     * arrive (Shopify.loadFeatures exists and hasn't failed). A storefront with no
+     * loadFeatures (headless installs, `platform:'shopify'` on a non-Shopify page)
+     * has NO path to a consent answer — blocking there is not a pre-load window,
+     * it is zero events forever, silently. No signal possible → null (fail open);
+     * false is reserved for an explicit decline from the API.
+     */
+    shopifyConsentPendingBlock() {
+        var _a;
+        if (!this.isShopifyStorefront())
+            return null;
+        if (this.shopifyConsentUnresolvable)
+            return null;
+        try {
+            return typeof ((_a = window.Shopify) === null || _a === void 0 ? void 0 : _a.loadFeatures) === 'function' ? false : null;
+        }
+        catch (_b) {
+            return null;
+        }
+    }
     /**
      * Shopify's analytics-consent signal: true/false when the Customer Privacy API is
      * present and answers, null when there's no signal (API absent / unexpected shape)
@@ -6529,7 +6739,7 @@ class Datalyr {
         try {
             const cp = this.getShopifyCustomerPrivacy();
             if (!cp)
-                return this.isShopifyStorefront() ? false : null;
+                return this.shopifyConsentPendingBlock();
             if (typeof cp.analyticsProcessingAllowed === 'function') {
                 const allowed = cp.analyticsProcessingAllowed();
                 return typeof allowed === 'boolean' ? allowed : null;
@@ -6539,10 +6749,10 @@ class Datalyr {
                 const allowed = cp.userCanBeTracked();
                 return typeof allowed === 'boolean' ? allowed : null;
             }
-            return this.isShopifyStorefront() ? false : null;
+            return this.shopifyConsentPendingBlock();
         }
         catch (_a) {
-            return this.isShopifyStorefront() ? false : null;
+            return this.shopifyConsentPendingBlock();
         }
     }
     /**
@@ -6554,15 +6764,15 @@ class Datalyr {
         try {
             const cp = this.getShopifyCustomerPrivacy();
             if (!cp || typeof cp.marketingAllowed !== 'function') {
-                return this.isShopifyStorefront() ? false : null;
+                return this.shopifyConsentPendingBlock();
             }
             const allowed = cp.marketingAllowed();
             return typeof allowed === 'boolean'
                 ? allowed
-                : (this.isShopifyStorefront() ? false : null);
+                : (this.shopifyConsentPendingBlock());
         }
         catch (_a) {
-            return this.isShopifyStorefront() ? false : null;
+            return this.shopifyConsentPendingBlock();
         }
     }
     /**
@@ -6598,18 +6808,31 @@ class Datalyr {
             // banner interaction. Guarded — a missing/changed loadFeatures must never break tracking.
             const shopify = window.Shopify;
             if (shopify && typeof shopify.loadFeatures === 'function') {
-                shopify.loadFeatures([{ name: 'consent-tracking-api', version: '0.1' }], (error) => {
-                    if (error) {
-                        this.log('Shopify loadFeatures(consent-tracking-api) failed:', error);
-                        return;
-                    }
-                    try {
-                        this.onShopifyConsentChanged();
-                    }
-                    catch (e) {
-                        this.log('Shopify post-load consent eval failed:', e);
-                    }
-                });
+                // One retry before declaring the API unreachable: a TRANSIENT loadFeatures
+                // failure must not fail-open the whole session for a previously-declined
+                // shopper. Only after the retry (or a success that still yields no
+                // customerPrivacy) is the pre-load window declared over — then the
+                // fail-closed gate releases and consent re-evaluates (a decline gates).
+                const attempt = (retriesLeft) => {
+                    shopify.loadFeatures([{ name: 'consent-tracking-api', version: '0.1' }], (error) => {
+                        if (error && retriesLeft > 0) {
+                            this.log('Shopify loadFeatures(consent-tracking-api) failed, retrying:', error);
+                            setTimeout(() => attempt(retriesLeft - 1), 1000);
+                            return;
+                        }
+                        if (error)
+                            this.log('Shopify loadFeatures(consent-tracking-api) failed:', error);
+                        if (error || !this.getShopifyCustomerPrivacy())
+                            this.shopifyConsentUnresolvable = true;
+                        try {
+                            this.onShopifyConsentChanged();
+                        }
+                        catch (e) {
+                            this.log('Shopify post-load consent eval failed:', e);
+                        }
+                    });
+                };
+                attempt(1);
             }
         }
         catch (error) {