@hubpav/hwio-web-runtime 0.7.10 → 0.8.0

package/dist/attribution.d.ts

@@ -2,12 +2,20 @@ export declare const HWIO_ATTRIBUTION_KEY = "hwio_attribution";
 /** Click identifiers + UTM params; lowercase keys map onto HubSpot contact properties of the same name. */
 export declare const HWIO_ATTRIBUTION_PARAMS: readonly ["utm_source", "utm_medium", "utm_campaign", "utm_term", "utm_content", "gclid", "gbraid", "wbraid", "fbclid", "msclkid", "li_fat_id"];
 export type HWioAttribution = Record<string, string>;
-/** Pure: click identifiers present in a query string (read at submit time, never stored). */
+/** Pure: click identifiers present in a query string. */
 export declare function hwioAttributionFromSearch(search: string): HWioAttribution;
+/** Pure: first value per key wins, in the order the sources are given (earliest touch first). */
+export declare function hwioFirstTouch(...sources: (HWioAttribution | undefined)[]): HWioAttribution;
+/**
+ * Remembers the current URL's click ids and UTM parameters in memory (first touch). Call on every
+ * page load; the forms runtime does. No consent is needed because nothing is stored or sent.
+ */
+export declare function hwioRememberLandingAttribution(): void;
 /**
  * First-touch capture into sessionStorage (marketing storage: call only with marketing consent).
  * Keeps the first value seen in the session so later navigations cannot clobber the campaign.
  */
 export declare function hwioCaptureAttribution(): void;
 export declare function hwioGetAttribution(): HWioAttribution;
+/** Click ids and UTM parameters of this visit: the remembered landing values, then the current URL. */
 export declare function hwioGetPageAttribution(): HWioAttribution;

package/dist/attribution.js

@@ -3,7 +3,7 @@ const LEGACY_ATTRIBUTION_KEY = 'hw_attribution'; // legacy-ok
 const MAX_LEN = 512;
 /** Click identifiers + UTM params; lowercase keys map onto HubSpot contact properties of the same name. */
 export const HWIO_ATTRIBUTION_PARAMS = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'gclid', 'gbraid', 'wbraid', 'fbclid', 'msclkid', 'li_fat_id'];
-/** Pure: click identifiers present in a query string (read at submit time, never stored). */
+/** Pure: click identifiers present in a query string. */
 export function hwioAttributionFromSearch(search) {
     const out = {};
     const params = new URLSearchParams(search);
@@ -14,6 +14,28 @@ export function hwioAttributionFromSearch(search) {
     }
     return out;
 }
+/** Pure: first value per key wins, in the order the sources are given (earliest touch first). */
+export function hwioFirstTouch(...sources) {
+    const out = {};
+    for (const source of sources) {
+        for (const [key, value] of Object.entries(source ?? {}))
+            if (value && !out[key])
+                out[key] = value;
+    }
+    return out;
+}
+// The landing page's click ids and UTM parameters, held in memory only: nothing is written to the
+// device, and nothing leaves the browser unless a form is sent with marketing consent. The memory
+// lives as long as the page's JavaScript does, so it survives Astro ClientRouter navigations
+// (which drop the query string) and is gone after a full page load.
+let landing;
+/**
+ * Remembers the current URL's click ids and UTM parameters in memory (first touch). Call on every
+ * page load; the forms runtime does. No consent is needed because nothing is stored or sent.
+ */
+export function hwioRememberLandingAttribution() {
+    landing = hwioFirstTouch(landing, hwioAttributionFromSearch(window.location.search));
+}
 function read() {
     try {
         const raw = sessionStorage.getItem(HWIO_ATTRIBUTION_KEY) ?? sessionStorage.getItem(LEGACY_ATTRIBUTION_KEY);
@@ -30,7 +52,8 @@ function read() {
 export function hwioCaptureAttribution() {
     const stored = read();
     let changed = false;
-    for (const [key, value] of Object.entries(hwioAttributionFromSearch(window.location.search))) {
+    // The remembered landing values first: consent given on a later page keeps the ad click.
+    for (const [key, value] of Object.entries(hwioGetPageAttribution())) {
         if (!stored[key]) {
             stored[key] = value;
             changed = true;
@@ -60,6 +83,7 @@ export function hwioCaptureAttribution() {
 export function hwioGetAttribution() {
     return read();
 }
+/** Click ids and UTM parameters of this visit: the remembered landing values, then the current URL. */
 export function hwioGetPageAttribution() {
-    return hwioAttributionFromSearch(window.location.search);
+    return hwioFirstTouch(landing, hwioAttributionFromSearch(window.location.search));
 }

package/dist/forms.js

@@ -1,5 +1,5 @@
 import { hwioMount } from './mount.js';
-import { hwioGetAttribution, hwioGetPageAttribution } from './attribution.js';
+import { hwioGetAttribution, hwioGetPageAttribution, hwioRememberLandingAttribution } from './attribution.js';
 import { hwioBuildSubmitPayload, hwioFoldMessageContext, hwioFormEventPayload, hwioGaClientId, hwioPageUri, hwioSubmitAttribution } from './forms-core.js';
 import { hwioEnsureTurnstileToken, hwioResetTurnstile } from './turnstile.js';
 /**
@@ -9,7 +9,8 @@ import { hwioEnsureTurnstileToken, hwioResetTurnstile } from './turnstile.js';
  *         data-hs-sending-msg data-hs-success-msg data-hs-error-msg data-form-kind data-inquiry-source>
  *   inside: [data-hs-status] element, optional .cf-turnstile, optional [data-message-field data-message-label] controls.
  * `data-hs-enrich="true"` sends the HubSpot cookie, the stored attribution and the GA4 client id,
- * each gated on the matching consent category. Click ids and UTM parameters in the current URL
+ * each gated on the matching consent category. Click ids and UTM parameters of the visit (the
+ * landing page's, remembered in memory across ClientRouter navigations, then the current URL's)
  * are sent on every form, but only with marketing consent (owner decision 2026-10-08).
  */
 async function readHubspotCookie() {
@@ -80,6 +81,7 @@ function pushFormEvent(form) {
 }
 export function hwioFormsRuntime() {
     function bind() {
+        hwioRememberLandingAttribution();
         document.querySelectorAll('form[data-hs-form]').forEach((form) => {
             if (form.dataset.hsBound === 'true')
                 return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hubpav/hwio-web-runtime",
-  "version": "0.7.10",
+  "version": "0.8.0",
   "description": "Framework-free browser runtime for the HARDWARIO websites: consent (Consent Mode v2 + GTM), HubSpot forms with Turnstile, attribution, theme, CTA tracking and small behaviours. View-transition safe.",
   "license": "MIT",
   "type": "module",