From adb0118ff3f98ef40b74bf8df8cda21df821b4cb Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Thu, 7 May 2026 15:13:59 +1000
Subject: [PATCH 1/5] feat: Ahrefs Web Analytics

Adds the `useScriptAhrefsAnalytics` composable for Ahrefs's privacy-first,
cookie-less web analytics. Bundles `analytics.js` and proxies the beacon
endpoint through `/_scripts/p/` (`PRIVACY_IP_ONLY`). SPA navigation is
auto-tracked by the script's native `history.pushState` patch, so no
`enableAutoSpaTracking` flag is required.
---
 FIRST_PARTY.md                                |   3 +-
 docs/content/docs/1.guides/2.first-party.md   |   4 +-
 docs/content/scripts/ahrefs-analytics.md      |  58 ++++++++
 package.json                                  |   2 +-
 packages/script/src/registry-logos.ts         |   1 +
 packages/script/src/registry-types.json       |  30 +++++
 packages/script/src/registry.ts               |  14 ++
 .../src/runtime/registry/ahrefs-analytics.ts  |  60 +++++++++
 .../script/src/runtime/registry/schemas.ts    |   9 ++
 packages/script/src/runtime/types.ts          |   4 +-
 packages/script/src/script-meta.ts            |   5 +
 playground/pages/index.vue                    |   5 +
 .../ahrefs-analytics/default.vue              |  27 ++++
 .../ahrefs-analytics/nuxt-scripts.vue         |  35 +++++
 test/e2e/_ahrefs-analytics-suite.ts           | 127 ++++++++++++++++++
 test/e2e/ahrefs-analytics-cdn.test.ts         |  14 ++
 test/e2e/ahrefs-analytics.test.ts             |  14 ++
 .../ahrefs-analytics-cdn/nuxt.config.ts       |  12 ++
 .../ahrefs-analytics-cdn/pages/ahrefs.vue     |  38 ++++++
 .../ahrefs-analytics-cdn/tsconfig.json        |   3 +
 test/fixtures/ahrefs-analytics/app.vue        |   3 +
 test/fixtures/ahrefs-analytics/nuxt.config.ts |  15 +++
 test/fixtures/ahrefs-analytics/package.json   |   3 +
 .../ahrefs-analytics/pages/ahrefs.vue         |  34 +++++
 .../fixtures/ahrefs-analytics/pages/index.vue |  15 +++
 test/fixtures/ahrefs-analytics/tsconfig.json  |   3 +
 test/types/types.test-d.ts                    |   1 +
 test/unit/first-party.test.ts                 |   1 +
 test/unit/proxy-configs.test.ts               |  13 +-
 29 files changed, 547 insertions(+), 6 deletions(-)
 create mode 100644 docs/content/scripts/ahrefs-analytics.md
 create mode 100644 packages/script/src/runtime/registry/ahrefs-analytics.ts
 create mode 100644 playground/pages/third-parties/ahrefs-analytics/default.vue
 create mode 100644 playground/pages/third-parties/ahrefs-analytics/nuxt-scripts.vue
 create mode 100644 test/e2e/_ahrefs-analytics-suite.ts
 create mode 100644 test/e2e/ahrefs-analytics-cdn.test.ts
 create mode 100644 test/e2e/ahrefs-analytics.test.ts
 create mode 100644 test/fixtures/ahrefs-analytics-cdn/nuxt.config.ts
 create mode 100644 test/fixtures/ahrefs-analytics-cdn/pages/ahrefs.vue
 create mode 100644 test/fixtures/ahrefs-analytics-cdn/tsconfig.json
 create mode 100644 test/fixtures/ahrefs-analytics/app.vue
 create mode 100644 test/fixtures/ahrefs-analytics/nuxt.config.ts
 create mode 100644 test/fixtures/ahrefs-analytics/package.json
 create mode 100644 test/fixtures/ahrefs-analytics/pages/ahrefs.vue
 create mode 100644 test/fixtures/ahrefs-analytics/pages/index.vue
 create mode 100644 test/fixtures/ahrefs-analytics/tsconfig.json

diff --git a/FIRST_PARTY.md b/FIRST_PARTY.md
index fd01a1a98..b67e482c0 100644
--- a/FIRST_PARTY.md
+++ b/FIRST_PARTY.md
@@ -113,7 +113,7 @@ Four presets in `proxy-configs.ts` cover all proxy-enabled scripts:
 | `PRIVACY_NONE` | all false | (not currently assigned to any script) |
 | `PRIVACY_FULL` | all true | Meta, TikTok, X, Snap, Reddit, LinkedIn |
 | `PRIVACY_HEATMAP` | ip, language, hardware | GA, Clarity, Hotjar |
-| `PRIVACY_IP_ONLY` | ip only | PostHog, Plausible, Umami, Rybbit, Databuddy, Fathom, CF Web Analytics, Vercel, Matomo, Carbon Ads, Lemon Squeezy, Intercom, Gravatar, YouTube, Vimeo |
+| `PRIVACY_IP_ONLY` | ip only | PostHog, Plausible, Umami, Rybbit, Databuddy, Ahrefs, Fathom, CF Web Analytics, Vercel, Matomo, Carbon Ads, Lemon Squeezy, Intercom, Gravatar, YouTube, Vimeo |
 
 Note: GTM, Segment, Crisp, Mixpanel, and Bing UET are bundle-only (no proxy capability), so no privacy transforms are applied.
 
@@ -128,6 +128,7 @@ Note: GTM, Segment, Crisp, Mixpanel, and Bing UET are bundle-only (no proxy capa
 | `snapchatPixel` | snapchatPixel | `PRIVACY_FULL` | Path A |
 | `redditPixel` | redditPixel | `PRIVACY_FULL` | Path A |
 | `linkedinInsight` | linkedinInsight | `PRIVACY_FULL` | Path A |
+| `ahrefsAnalytics` | ahrefsAnalytics | `PRIVACY_IP_ONLY` | Path A |
 | `clarity` | clarity | `PRIVACY_HEATMAP` | Path A |
 | `hotjar` | hotjar | `PRIVACY_HEATMAP` | Path A |
 | `posthog` | posthog | `PRIVACY_IP_ONLY` | **Path B** (npm-only) + autoInject |
diff --git a/docs/content/docs/1.guides/2.first-party.md b/docs/content/docs/1.guides/2.first-party.md
index e38044c5e..4aef34365 100644
--- a/docs/content/docs/1.guides/2.first-party.md
+++ b/docs/content/docs/1.guides/2.first-party.md
@@ -63,7 +63,7 @@ Every proxied script defaults to a privacy tier based on what level of anonymisa
 |------|-------------------|---------|
 | **Full** | IP, user agent, language, screen, timezone, hardware fingerprints | Meta Pixel, TikTok Pixel, X Pixel, Snapchat Pixel, Reddit Pixel, LinkedIn Insight Tag |
 | **Heatmap-safe** | IP, language, hardware fingerprints (preserves screen and user agent for session replay) | Google Analytics, Microsoft Clarity, Hotjar |
-| **IP only** | IP addresses anonymised to subnet level | Plausible, PostHog, Umami, Fathom, CF Web Analytics, Vercel Analytics, Rybbit, Databuddy, Matomo, Intercom, YouTube, Vimeo, Gravatar, Carbon Ads, Lemon Squeezy, Google AdSense |
+| **IP only** | IP addresses anonymised to subnet level | Plausible, PostHog, Umami, Fathom, CF Web Analytics, Vercel Analytics, Rybbit, Databuddy, Matomo, Ahrefs Web Analytics, Intercom, YouTube, Vimeo, Gravatar, Carbon Ads, Lemon Squeezy, Google AdSense |
 
 Sensitive headers (`cookie`, `authorization`) are **always** stripped regardless of tier.
 
@@ -323,7 +323,7 @@ These scripts are downloaded at build time, served from your domain, and have th
 
 | Category | Scripts |
 |----------|---------|
-| **Analytics** | [Google Analytics](/scripts/google-analytics), [Plausible](/scripts/plausible-analytics), [Cloudflare Web Analytics](/scripts/cloudflare-web-analytics), [Umami](/scripts/umami-analytics), [Fathom](/scripts/fathom-analytics), [Rybbit](/scripts/rybbit-analytics), [Databuddy](/scripts/databuddy-analytics), [Vercel Analytics](/scripts/vercel-analytics), [Microsoft Clarity](/scripts/clarity), [Hotjar](/scripts/hotjar) |
+| **Analytics** | [Google Analytics](/scripts/google-analytics), [Plausible](/scripts/plausible-analytics), [Cloudflare Web Analytics](/scripts/cloudflare-web-analytics), [Umami](/scripts/umami-analytics), [Fathom](/scripts/fathom-analytics), [Rybbit](/scripts/rybbit-analytics), [Databuddy](/scripts/databuddy-analytics), [Ahrefs Web Analytics](/scripts/ahrefs-analytics), [Vercel Analytics](/scripts/vercel-analytics), [Microsoft Clarity](/scripts/clarity), [Hotjar](/scripts/hotjar) |
 | **Ad Pixels** | [Meta Pixel](/scripts/meta-pixel), [TikTok Pixel](/scripts/tiktok-pixel), [X Pixel](/scripts/x-pixel), [Snapchat Pixel](/scripts/snapchat-pixel), [Reddit Pixel](/scripts/reddit-pixel), [LinkedIn Insight Tag](/scripts/linkedin-insight), [Google AdSense](/scripts/google-adsense) |
 | **Video** | [YouTube Player](/scripts/youtube-player), [Vimeo Player](/scripts/vimeo-player) |
 | **Utility** | [Intercom](/scripts/intercom), [Gravatar](/scripts/gravatar) |
diff --git a/docs/content/scripts/ahrefs-analytics.md b/docs/content/scripts/ahrefs-analytics.md
new file mode 100644
index 000000000..746204c10
--- /dev/null
+++ b/docs/content/scripts/ahrefs-analytics.md
@@ -0,0 +1,58 @@
+---
+title: Ahrefs Web Analytics
+description: Use Ahrefs Web Analytics in your Nuxt app to track page views and custom events with a privacy-first, cookie-less analytics script.
+links:
+- label: Source
+  icon: i-simple-icons-github
+  to: https://github.com/nuxt/scripts/blob/main/packages/script/src/runtime/registry/ahrefs-analytics.ts
+  size: xs
+---
+
+[Ahrefs Web Analytics](https://ahrefs.com/web-analytics) is a privacy-first, cookie-less web analytics service from [Ahrefs](https://ahrefs.com) that tracks page views and custom events without sharing visitor data with third parties.
+
+Nuxt Scripts provides a registry script composable [`useScriptAhrefsAnalytics()`{lang="ts"}](/scripts/ahrefs-analytics) to integrate it in your Nuxt app.
+
+::script-stats
+::
+
+::script-docs
+::
+
+::script-types
+::
+
+## Examples
+
+### Basic usage
+
+The script auto-fires a page-view on initial load and tracks SPA navigations natively by patching `history.pushState` and listening for `popstate`. Provide your project key and the integration is done.
+
+```vue
+<script setup lang="ts">
+useScriptAhrefsAnalytics({
+  key: 'your-project-key',
+})
+</script>
+```
+
+### Tracking custom events
+
+Use `proxy.AhrefsAnalytics.sendEvent()`{lang="ts"} to send custom events from your components.
+
+```vue
+<script setup lang="ts">
+const { proxy } = useScriptAhrefsAnalytics({
+  key: 'your-project-key',
+})
+
+function trackSignup() {
+  proxy.AhrefsAnalytics.sendEvent('signup', {
+    props: { plan: 'pro' },
+  })
+}
+</script>
+```
+
+### SPA navigation tracking
+
+Ahrefs Analytics tracks single-page-app navigations automatically: the loaded `analytics.js` patches `history.pushState` and listens for `popstate`, firing a fresh page-view whenever the URL changes. No extra configuration is needed for Nuxt route changes.
diff --git a/package.json b/package.json
index 095fb6741..87722e9f2 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
     "dev": "nuxt dev playground",
     "dev:ssl": "nuxt dev playground --https",
     "dev:prepare": "pnpm -r dev:prepare && nuxt prepare && nuxt prepare playground && pnpm prepare:fixtures",
-    "prepare:fixtures": "nuxt prepare test/fixtures/basic && nuxt prepare test/fixtures/cdn && nuxt prepare test/fixtures/extend-registry && nuxt prepare test/fixtures/partytown && nuxt prepare test/fixtures/first-party && nuxt prepare test/fixtures/linkedin-insight && nuxt prepare test/fixtures/linkedin-insight-cdn",
+    "prepare:fixtures": "nuxt prepare test/fixtures/basic && nuxt prepare test/fixtures/cdn && nuxt prepare test/fixtures/extend-registry && nuxt prepare test/fixtures/partytown && nuxt prepare test/fixtures/first-party && nuxt prepare test/fixtures/linkedin-insight && nuxt prepare test/fixtures/linkedin-insight-cdn && nuxt prepare test/fixtures/ahrefs-analytics && nuxt prepare test/fixtures/ahrefs-analytics-cdn",
     "typecheck": "nuxt typecheck",
     "release": "pnpm build && bumpp -r --output=CHANGELOG.md",
     "lint": "eslint .",
diff --git a/packages/script/src/registry-logos.ts b/packages/script/src/registry-logos.ts
index 233c3a68c..8e28d8d03 100644
--- a/packages/script/src/registry-logos.ts
+++ b/packages/script/src/registry-logos.ts
@@ -4,6 +4,7 @@ import type { BuiltInRegistryScriptKey } from './runtime/types'
 type LogoValue = string | { light: string, dark: string }
 
 export const LOGOS = {
+  ahrefsAnalytics: `<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"><path fill="#FF6A00" d="M9.6 4h4.8a4.8 4.8 0 0 1 4.8 4.8v4.8H9.6A4.8 4.8 0 0 1 4.8 8.8 4.8 4.8 0 0 1 9.6 4Zm14.4 24h-4.8a4.8 4.8 0 0 1-4.8-4.8v-9.6h4.8A4.8 4.8 0 0 1 24 18.4Z"/></svg>`,
   plausibleAnalytics: `<svg height="32" id="Layer_2" viewBox="0 0 46 60" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><defs><linearGradient id="New_Gradient_Swatch_1" x1="14.841" y1="22.544" x2="27.473" y2="44.649" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#909cf7"/><stop offset="1" stop-color="#4b38d8"/></linearGradient><linearGradient id="New_Gradient_Swatch_1-2" x1="7.984" y1="-1.358" x2="21.001" y2="21.422" xlink:href="#New_Gradient_Swatch_1"/><style>.cls-3{stroke-width:0;fill:#1f2961}</style></defs><g id="Plausible_-_Branding"><g id="Gradient_Logo_-_Purple_Gradient_on_White"><g id="Symbol_-_Purple_Gradient"><path d="M45.246 22.603C44.155 33.059 35.013 40.83 24.5 40.83h-4.047v9.57a9.6 9.6 0 0 1-9.6 9.6H3.36A3.36 3.36 0 0 1 0 56.64V36.938l5.038-7.07a3.362 3.362 0 0 1 4.037-1.149l2.866 1.2a3.353 3.353 0 0 0 4.025-1.145l6.717-9.417a3.34 3.34 0 0 1 4.014-1.14l5.52 2.32a3.347 3.347 0 0 0 4.022-1.142l6.46-9.063c2.025 3.56 3.014 7.789 2.547 12.27Z" style="stroke-width:0;fill:url(#New_Gradient_Swatch_1)"/><path d="M3.292 28.873c.823-1.155 2.021-2.044 3.414-2.312a5.41 5.41 0 0 1 3.147.316l2.865 1.2a1.357 1.357 0 0 0 1.62-.464l6.594-9.245c.823-1.154 2.02-2.041 3.412-2.309a5.368 5.368 0 0 1 3.128.314l5.52 2.32a1.35 1.35 0 0 0 1.619-.46l6.919-9.707C37.827 3.364 31.78 0 24.945 0H3.36A3.36 3.36 0 0 0 0 3.36v30.132l3.292-4.62Z" style="fill:url(#New_Gradient_Swatch_1-2);stroke-width:0"/></g></g></g></svg>`,
   cloudflareWebAnalytics: `<svg xmlns="http://www.w3.org/2000/svg" width="70.02" height="32" viewBox="0 0 256 117"><path fill="#FBAD41" d="M205.52 50.813c-.858 0-1.705.03-2.551.058c-.137.007-.272.04-.398.094a1.424 1.424 0 0 0-.92.994l-3.628 12.672c-1.565 5.449-.983 10.48 1.646 14.174c2.41 3.416 6.42 5.421 11.289 5.655l19.679 1.194c.585.03 1.092.312 1.4.776a1.92 1.92 0 0 1 .2 1.692a2.496 2.496 0 0 1-2.134 1.662l-20.448 1.193c-11.11.515-23.062 9.58-27.255 20.633l-1.474 3.9a1.092 1.092 0 0 0 .967 1.49h70.425a1.872 1.872 0 0 0 1.81-1.365A51.172 51.172 0 0 0 256 101.828c0-28.16-22.582-50.984-50.449-50.984"/><path fill="#F6821F" d="m174.782 115.362l1.303-4.583c1.568-5.449.987-10.48-1.639-14.173c-2.418-3.417-6.424-5.422-11.296-5.656l-92.312-1.193a1.822 1.822 0 0 1-1.459-.776a1.919 1.919 0 0 1-.203-1.693a2.496 2.496 0 0 1 2.154-1.662l93.173-1.193c11.063-.511 23.015-9.58 27.208-20.633l5.313-14.04c.214-.596.27-1.238.156-1.86C191.126 20.51 166.91 0 137.96 0C111.269 0 88.626 17.403 80.5 41.596a26.996 26.996 0 0 0-19.156-5.359C48.549 37.524 38.25 47.946 36.979 60.88a27.905 27.905 0 0 0 .702 9.642C16.773 71.145 0 88.454 0 109.726c0 1.923.137 3.818.413 5.667c.115.897.879 1.57 1.783 1.568h170.48a2.223 2.223 0 0 0 2.106-1.63"/></svg>`,
   vercelAnalytics: `<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 512 512"><path d="M256 48L496 464H16z" fill="currentColor"/></svg>`,
diff --git a/packages/script/src/registry-types.json b/packages/script/src/registry-types.json
index 493e5a33a..0013a48e7 100644
--- a/packages/script/src/registry-types.json
+++ b/packages/script/src/registry-types.json
@@ -1,5 +1,27 @@
 {
   "types": {
+    "ahrefs-analytics": [
+      {
+        "name": "AhrefsAnalyticsOptions",
+        "kind": "const",
+        "code": "export const AhrefsAnalyticsOptions = object({\n  /**\n   * Your Ahrefs Web Analytics project key. Set as the `data-key` attribute\n   * on the loaded `analytics.js` script tag.\n   * @see https://ahrefs.com/web-analytics\n   */\n  key: pipe(string(), minLength(1)),\n})"
+      },
+      {
+        "name": "AhrefsAnalyticsSendEventOptions",
+        "kind": "interface",
+        "code": "export interface AhrefsAnalyticsSendEventOptions {\n  /** Custom dimensions sent under `props`. */\n  props?: Record<string, string>\n  /** Arbitrary metadata sent under `meta`. */\n  meta?: Record<string, unknown>\n  /** Optional callback invoked once the beacon request completes. */\n  callback?: (result?: { status?: number }) => void\n}"
+      },
+      {
+        "name": "AhrefsAnalyticsInstance",
+        "kind": "interface",
+        "code": "export interface AhrefsAnalyticsInstance {\n  /**\n   * Manually send an event to Ahrefs Analytics. The script auto-fires\n   * page-view events on initial load and on `history.pushState`/`popstate`,\n   * so SPA navigations are tracked without calling this.\n   */\n  sendEvent: (name: string, options?: AhrefsAnalyticsSendEventOptions) => void\n}"
+      },
+      {
+        "name": "AhrefsAnalyticsApi",
+        "kind": "interface",
+        "code": "export interface AhrefsAnalyticsApi {\n  AhrefsAnalytics: AhrefsAnalyticsInstance\n}"
+      }
+    ],
     "bing-uet": [
       {
         "name": "BingUetOptions",
@@ -1115,6 +1137,14 @@
     ]
   },
   "schemaFields": {
+    "AhrefsAnalyticsOptions": [
+      {
+        "name": "key",
+        "type": "string",
+        "required": true,
+        "description": "Your Ahrefs Web Analytics project key. Set as the `data-key` attribute on the loaded `analytics.js` script tag."
+      }
+    ],
     "BlueskyEmbedOptions": [
       {
         "name": "postUrl",
diff --git a/packages/script/src/registry.ts b/packages/script/src/registry.ts
index 9117c4308..6136507be 100644
--- a/packages/script/src/registry.ts
+++ b/packages/script/src/registry.ts
@@ -13,6 +13,7 @@ import type { ProxyAutoInject, ProxyCapability, ProxyConfig, RegistryScript, Reg
 import { joinURL, withBase, withQuery } from 'ufo'
 import { LOGOS } from './registry-logos'
 import {
+  AhrefsAnalyticsOptions,
   BingUetOptions,
   BlueskyEmbedOptions,
   ClarityOptions,
@@ -132,6 +133,7 @@ export const registryMeta: RegistryScriptMeta[] = [
   m('clarity', 'Clarity', 'analytics', 'useScriptClarity', { bundle: true, proxy: true, partytown: true }, PRIVACY_HEATMAP),
   m('vercelAnalytics', 'Vercel Analytics', 'analytics', 'useScriptVercelAnalytics', { bundle: true, proxy: true }, PRIVACY_IP_ONLY),
   m('mixpanelAnalytics', 'Mixpanel', 'analytics', 'useScriptMixpanelAnalytics', { bundle: true, partytown: true }, null),
+  m('ahrefsAnalytics', 'Ahrefs Web Analytics', 'analytics', 'useScriptAhrefsAnalytics', { bundle: true, proxy: true }, PRIVACY_IP_ONLY),
   // ad
   m('bingUet', 'Bing UET', 'ad', 'useScriptBingUet', { bundle: true, partytown: true }, null),
   m('metaPixel', 'Meta Pixel', 'ad', 'useScriptMetaPixel', { bundle: true, proxy: true, partytown: true }, PRIVACY_FULL),
@@ -274,6 +276,18 @@ export async function registry(resolve?: (path: string) => Promise<string>): Pro
 
   return Promise.all([
     // analytics
+    def('ahrefsAnalytics', {
+      schema: AhrefsAnalyticsOptions,
+      label: 'Ahrefs Web Analytics',
+      src: 'https://analytics.ahrefs.com/analytics.js',
+      category: 'analytics',
+      envDefaults: { key: '' },
+      bundle: true,
+      proxy: {
+        domains: ['analytics.ahrefs.com'],
+        privacy: PRIVACY_IP_ONLY,
+      },
+    }),
     def('plausibleAnalytics', {
       label: 'Plausible Analytics',
       category: 'analytics',
diff --git a/packages/script/src/runtime/registry/ahrefs-analytics.ts b/packages/script/src/runtime/registry/ahrefs-analytics.ts
new file mode 100644
index 000000000..784449428
--- /dev/null
+++ b/packages/script/src/runtime/registry/ahrefs-analytics.ts
@@ -0,0 +1,60 @@
+import type { RegistryScriptInput, UseScriptContext } from '#nuxt-scripts/types'
+import { useRegistryScript } from '../utils'
+import { AhrefsAnalyticsOptions } from './schemas'
+
+export { AhrefsAnalyticsOptions }
+
+export type AhrefsAnalyticsInput = RegistryScriptInput<typeof AhrefsAnalyticsOptions, true, false>
+
+export interface AhrefsAnalyticsSendEventOptions {
+  /** Custom dimensions sent under `props`. */
+  props?: Record<string, string>
+  /** Arbitrary metadata sent under `meta`. */
+  meta?: Record<string, unknown>
+  /** Optional callback invoked once the beacon request completes. */
+  callback?: (result?: { status?: number }) => void
+}
+
+export interface AhrefsAnalyticsInstance {
+  /**
+   * Manually send an event to Ahrefs Analytics. The script auto-fires
+   * page-view events on initial load and on `history.pushState`/`popstate`,
+   * so SPA navigations are tracked without calling this.
+   */
+  sendEvent: (name: string, options?: AhrefsAnalyticsSendEventOptions) => void
+}
+
+export interface AhrefsAnalyticsApi {
+  AhrefsAnalytics: AhrefsAnalyticsInstance
+}
+
+declare global {
+  interface Window extends AhrefsAnalyticsApi {}
+}
+
+/**
+ * Load Ahrefs Web Analytics and expose its `sendEvent` API.
+ *
+ * The script attaches `window.AhrefsAnalytics` once loaded, fires an initial
+ * page-view, and tracks SPA navigations natively by patching
+ * `history.pushState` and listening to `popstate`.
+ *
+ * @see https://ahrefs.com/web-analytics
+ */
+export function useScriptAhrefsAnalytics<T extends AhrefsAnalyticsApi>(
+  _options?: AhrefsAnalyticsInput,
+): UseScriptContext<T> {
+  return useRegistryScript<T, typeof AhrefsAnalyticsOptions>('ahrefsAnalytics', options => ({
+    scriptInput: {
+      'src': 'https://analytics.ahrefs.com/analytics.js',
+      'data-key': options.key,
+      'crossorigin': false,
+    },
+    schema: import.meta.dev ? AhrefsAnalyticsOptions : undefined,
+    scriptOptions: {
+      use() {
+        return { AhrefsAnalytics: window.AhrefsAnalytics }
+      },
+    },
+  }), _options)
+}
diff --git a/packages/script/src/runtime/registry/schemas.ts b/packages/script/src/runtime/registry/schemas.ts
index 1b1c250ab..24e5f2e16 100644
--- a/packages/script/src/runtime/registry/schemas.ts
+++ b/packages/script/src/runtime/registry/schemas.ts
@@ -16,6 +16,15 @@ const gcmConsentState = object({
   region: optional(array(string())),
 })
 
+export const AhrefsAnalyticsOptions = object({
+  /**
+   * Your Ahrefs Web Analytics project key. Set as the `data-key` attribute
+   * on the loaded `analytics.js` script tag.
+   * @see https://ahrefs.com/web-analytics
+   */
+  key: pipe(string(), minLength(1)),
+})
+
 export const BlueskyEmbedOptions = object({
   /**
    * The Bluesky post URL to embed.
diff --git a/packages/script/src/runtime/types.ts b/packages/script/src/runtime/types.ts
index 4f705b59e..a0a93c6f2 100644
--- a/packages/script/src/runtime/types.ts
+++ b/packages/script/src/runtime/types.ts
@@ -5,6 +5,7 @@ import type {
 import type { Import } from 'unimport'
 import type { InferInput, ObjectEntries, ObjectSchema, UnionSchema, ValiError } from 'valibot'
 import type { ComputedRef, Ref } from 'vue'
+import type { AhrefsAnalyticsInput } from './registry/ahrefs-analytics'
 import type { BingUetInput } from './registry/bing-uet'
 import type { BlueskyEmbedInput } from './registry/bluesky-embed'
 import type { ClarityInput } from './registry/clarity'
@@ -224,6 +225,7 @@ export interface NuxtDevToolsScriptInstance {
 }
 
 export interface ScriptRegistry {
+  ahrefsAnalytics?: AhrefsAnalyticsInput
   bingUet?: BingUetInput
   blueskyEmbed?: BlueskyEmbedInput
   carbonAds?: true
@@ -271,7 +273,7 @@ export interface ScriptRegistry {
  * Use this to type-check records that must enumerate all built-in scripts (logos, meta, etc.).
  */
 export type BuiltInRegistryScriptKey
-  = | 'bingUet' | 'blueskyEmbed' | 'carbonAds' | 'crisp' | 'clarity' | 'cloudflareWebAnalytics'
+  = | 'ahrefsAnalytics' | 'bingUet' | 'blueskyEmbed' | 'carbonAds' | 'crisp' | 'clarity' | 'cloudflareWebAnalytics'
     | 'databuddyAnalytics' | 'metaPixel' | 'fathomAnalytics' | 'instagramEmbed'
     | 'plausibleAnalytics' | 'googleAdsense' | 'googleAnalytics' | 'googleMaps'
     | 'googleRecaptcha' | 'googleSignIn' | 'lemonSqueezy' | 'googleTagManager'
diff --git a/packages/script/src/script-meta.ts b/packages/script/src/script-meta.ts
index c2faa595f..c8d87605a 100644
--- a/packages/script/src/script-meta.ts
+++ b/packages/script/src/script-meta.ts
@@ -18,6 +18,11 @@ export interface ScriptMeta {
 
 export const scriptMeta = {
   // Analytics
+  ahrefsAnalytics: {
+    urls: ['https://analytics.ahrefs.com/analytics.js'],
+    trackedData: ['page-views', 'events'],
+    testId: 'test-ahrefs-key',
+  },
   plausibleAnalytics: {
     urls: ['https://plausible.io/js/script.js'],
     trackedData: ['page-views', 'events', 'conversions'],
diff --git a/playground/pages/index.vue b/playground/pages/index.vue
index a0b83dc8b..1992ea7c9 100644
--- a/playground/pages/index.vue
+++ b/playground/pages/index.vue
@@ -22,6 +22,7 @@ function getPlaygroundPath(script: any): string | null {
     'plausible-analytics': '/third-parties/plausible-analytics',
     'posthog': '/third-parties/posthog/nuxt-scripts',
     'matomo-analytics': '/third-parties/matomo-analytics/nuxt-scripts',
+    'ahrefs-analytics': '/third-parties/ahrefs-analytics/nuxt-scripts',
     'rybbit-analytics': '/third-parties/rybbit-analytics',
     'databuddy-analytics': '/third-parties/databuddy-analytics',
     'umami-analytics': '/third-parties/umami-analytics',
@@ -272,6 +273,10 @@ const benchmark = [
     name: 'LinkedIn Insight (Default)',
     path: '/third-parties/linkedin-insight/default',
   },
+  {
+    name: 'Ahrefs Analytics (Default)',
+    path: '/third-parties/ahrefs-analytics/default',
+  },
   {
     name: 'Snapchat (Default)',
     path: '/third-parties/snapchat/default',
diff --git a/playground/pages/third-parties/ahrefs-analytics/default.vue b/playground/pages/third-parties/ahrefs-analytics/default.vue
new file mode 100644
index 000000000..a3ded1f31
--- /dev/null
+++ b/playground/pages/third-parties/ahrefs-analytics/default.vue
@@ -0,0 +1,27 @@
+<script lang="ts" setup>
+import { useHead } from '#imports'
+
+useHead({
+  script: [
+    {
+      'src': 'https://analytics.ahrefs.com/analytics.js',
+      'data-key': 'demo-key',
+      'async': true,
+    },
+  ],
+})
+
+function trackCustomEvent() {
+  ;(window as any).AhrefsAnalytics?.sendEvent('demo-button-click', {
+    props: { source: 'playground' },
+  })
+}
+</script>
+
+<template>
+  <div>
+    <UButton @click="trackCustomEvent">
+      Send Custom Event
+    </UButton>
+  </div>
+</template>
diff --git a/playground/pages/third-parties/ahrefs-analytics/nuxt-scripts.vue b/playground/pages/third-parties/ahrefs-analytics/nuxt-scripts.vue
new file mode 100644
index 000000000..8a8f10b0f
--- /dev/null
+++ b/playground/pages/third-parties/ahrefs-analytics/nuxt-scripts.vue
@@ -0,0 +1,35 @@
+<script lang="ts" setup>
+import { useHead, useScriptAhrefsAnalytics } from '#imports'
+
+useHead({
+  title: 'Ahrefs Web Analytics',
+})
+
+const { status, proxy } = useScriptAhrefsAnalytics({
+  key: 'demo-key',
+})
+
+function trackCustomEvent() {
+  proxy.AhrefsAnalytics.sendEvent('demo-button-click', {
+    props: { source: 'playground' },
+  })
+}
+</script>
+
+<template>
+  <div>
+    <ClientOnly>
+      <div>
+        status: {{ status }}
+      </div>
+      <div class="space-x-2 mt-2">
+        <UButton @click="trackCustomEvent">
+          Send Custom Event
+        </UButton>
+        <UButton to="/">
+          Navigate (SPA)
+        </UButton>
+      </div>
+    </ClientOnly>
+  </div>
+</template>
diff --git a/test/e2e/_ahrefs-analytics-suite.ts b/test/e2e/_ahrefs-analytics-suite.ts
new file mode 100644
index 000000000..12f32bc42
--- /dev/null
+++ b/test/e2e/_ahrefs-analytics-suite.ts
@@ -0,0 +1,127 @@
+import { getBrowser, url } from '@nuxt/test-utils/e2e'
+import { beforeAll, expect, it } from 'vitest'
+
+// Probe Ahrefs egress; behavior tests skip when network is unavailable so
+// CI doesn't fail in offline sandboxes. Wiring tests (script tag in DOM,
+// data-key set) run regardless.
+const NETWORK_PROBE_TIMEOUT_MS = 5000
+async function probeAhrefsEgress(): Promise<boolean> {
+  return fetch('https://analytics.ahrefs.com/analytics.js', {
+    method: 'HEAD',
+    signal: AbortSignal.timeout(NETWORK_PROBE_TIMEOUT_MS),
+  }).then(() => true, () => false)
+}
+
+interface CapturedRequest {
+  method: string
+  url: string
+  postData: string | null
+}
+
+async function newCapturePage() {
+  const browser = await getBrowser()
+  const page = await browser.newPage()
+  const requests: CapturedRequest[] = []
+  page.on('request', (req) => {
+    requests.push({ method: req.method(), url: req.url(), postData: req.postData() ?? null })
+  })
+  return { page, requests }
+}
+
+async function waitFor(
+  predicate: () => boolean,
+  { timeoutMs = 10000, intervalMs = 50, message = 'condition' }: { timeoutMs?: number, intervalMs?: number, message?: string } = {},
+) {
+  const deadline = Date.now() + timeoutMs
+  while (Date.now() < deadline) {
+    if (predicate())
+      return
+    await new Promise(r => setTimeout(r, intervalMs))
+  }
+  throw new Error(`Timed out after ${timeoutMs}ms waiting for ${message}`)
+}
+
+interface SuiteOptions {
+  bundled: boolean
+}
+
+export function defineAhrefsAnalyticsSuite(opts: SuiteOptions) {
+  let networkAvailable = false
+  beforeAll(async () => {
+    networkAvailable = await probeAhrefsEgress()
+  })
+
+  it('script tag points at the expected origin with data-key set', async () => {
+    // Wiring assertion: the <script> is in DOM regardless of whether the
+    // remote script actually executes, so this runs offline in both modes.
+    const { page } = await newCapturePage()
+    try {
+      await page.goto(url('/ahrefs'), { waitUntil: 'domcontentloaded', timeout: 30000 })
+      const scriptSelector = opts.bundled
+        ? 'script[src*="/_scripts/assets/"]'
+        : 'script[src*="analytics.ahrefs.com/analytics.js"]'
+      await page.waitForSelector(scriptSelector, { state: 'attached', timeout: 15000 })
+      const tag = await page.evaluate((sel: string) => {
+        const el = document.querySelector<HTMLScriptElement>(sel)
+        return el ? { src: el.src, key: el.getAttribute('data-key') } : null
+      }, scriptSelector)
+      expect(tag, 'expected an Ahrefs script tag in the DOM').toBeTruthy()
+      expect(tag!.key).toBe('test-ahrefs-key')
+      if (opts.bundled)
+        expect(tag!.src).toMatch(/\/_scripts\/assets\//)
+      else
+        expect(tag!.src).toMatch(/analytics\.ahrefs\.com\/analytics\.js/)
+    }
+    finally {
+      await page.close()
+    }
+  }, 60000)
+
+  it('initial page load fires a /api/event beacon', async (ctx) => {
+    if (!networkAvailable)
+      ctx.skip()
+    const { page, requests } = await newCapturePage()
+    try {
+      await page.goto(url('/ahrefs'), { waitUntil: 'networkidle', timeout: 30000 })
+      await page.waitForSelector('#status:has-text("loaded")', { timeout: 15000 })
+      // In bundled mode the request is proxied through /_scripts/p/<host>/api/event;
+      // in CDN mode it's a direct POST to analytics.ahrefs.com/api/event.
+      const matches = () => requests.filter(r =>
+        r.method === 'POST'
+        && (r.url.includes('analytics.ahrefs.com/api/event') || r.url.includes('/analytics.ahrefs.com/api/event')),
+      )
+      await waitFor(() => matches().length > 0, { message: '/api/event beacon' })
+      expect(matches().length).toBeGreaterThan(0)
+    }
+    finally {
+      await page.close()
+    }
+  }, 60000)
+
+  it('SPA navigation fires a /api/event beacon (auto-tracked by the script)', async (ctx) => {
+    if (!networkAvailable)
+      ctx.skip()
+    // Ahrefs's analytics.js patches history.pushState natively so SPA
+    // navigations fire /api/event without any composable-side hook. This
+    // guards the contract: bundling/proxying must not break the patch.
+    const { page, requests } = await newCapturePage()
+    try {
+      await page.goto(url('/ahrefs'), { waitUntil: 'networkidle', timeout: 30000 })
+      await page.waitForSelector('#status:has-text("loaded")', { timeout: 15000 })
+      const eventCount = () => requests.filter(r =>
+        r.method === 'POST'
+        && (r.url.includes('analytics.ahrefs.com/api/event') || r.url.includes('/analytics.ahrefs.com/api/event')),
+      ).length
+      // Wait for the initial event before clicking, so we measure the delta.
+      await waitFor(() => eventCount() >= 1, { message: 'initial /api/event' })
+      const before = eventCount()
+      await page.click('#trigger-spa-nav')
+      await page.waitForURL('**/', { timeout: 5000 })
+      await waitFor(() => eventCount() > before, { message: 'SPA /api/event beacon' })
+      expect(eventCount()).toBeGreaterThan(before)
+    }
+    finally {
+      await page.close()
+    }
+  }, 60000)
+}
diff --git a/test/e2e/ahrefs-analytics-cdn.test.ts b/test/e2e/ahrefs-analytics-cdn.test.ts
new file mode 100644
index 000000000..7a3be6516
--- /dev/null
+++ b/test/e2e/ahrefs-analytics-cdn.test.ts
@@ -0,0 +1,14 @@
+import { createResolver } from '@nuxt/kit'
+import { setup } from '@nuxt/test-utils/e2e'
+import { describe } from 'vitest'
+import { defineAhrefsAnalyticsSuite } from './_ahrefs-analytics-suite'
+
+const { resolve } = createResolver(import.meta.url)
+
+describe('ahrefsAnalytics (unbundled — script served from analytics.ahrefs.com)', async () => {
+  await setup({
+    rootDir: resolve('../fixtures/ahrefs-analytics-cdn'),
+    browser: true,
+  })
+  defineAhrefsAnalyticsSuite({ bundled: false })
+})
diff --git a/test/e2e/ahrefs-analytics.test.ts b/test/e2e/ahrefs-analytics.test.ts
new file mode 100644
index 000000000..87e4a075c
--- /dev/null
+++ b/test/e2e/ahrefs-analytics.test.ts
@@ -0,0 +1,14 @@
+import { createResolver } from '@nuxt/kit'
+import { setup } from '@nuxt/test-utils/e2e'
+import { describe } from 'vitest'
+import { defineAhrefsAnalyticsSuite } from './_ahrefs-analytics-suite'
+
+const { resolve } = createResolver(import.meta.url)
+
+describe('ahrefsAnalytics (bundled — script served from /_scripts/assets/)', async () => {
+  await setup({
+    rootDir: resolve('../fixtures/ahrefs-analytics'),
+    browser: true,
+  })
+  defineAhrefsAnalyticsSuite({ bundled: true })
+})
diff --git a/test/fixtures/ahrefs-analytics-cdn/nuxt.config.ts b/test/fixtures/ahrefs-analytics-cdn/nuxt.config.ts
new file mode 100644
index 000000000..d49d29f0b
--- /dev/null
+++ b/test/fixtures/ahrefs-analytics-cdn/nuxt.config.ts
@@ -0,0 +1,12 @@
+import { defineNuxtConfig } from 'nuxt/config'
+
+// Unbundled fixture: extends ../ahrefs-analytics (bundled) and adds
+// `bundle: false` so the script loads directly from analytics.ahrefs.com
+// instead of /_scripts/assets/. Inherits app.vue, package.json, and
+// pages/index.vue from the parent layer; overrides only the ahrefs page.
+export default defineNuxtConfig({
+  extends: ['../ahrefs-analytics'],
+  scripts: {
+    defaultScriptOptions: { bundle: false },
+  },
+})
diff --git a/test/fixtures/ahrefs-analytics-cdn/pages/ahrefs.vue b/test/fixtures/ahrefs-analytics-cdn/pages/ahrefs.vue
new file mode 100644
index 000000000..96a4a9348
--- /dev/null
+++ b/test/fixtures/ahrefs-analytics-cdn/pages/ahrefs.vue
@@ -0,0 +1,38 @@
+<script lang="ts" setup>
+// Overrides the parent layer's pages/ahrefs.vue with `bundle: false` so
+// the script loads from analytics.ahrefs.com instead of /_scripts/assets/.
+import { navigateTo, useHead, useScriptAhrefsAnalytics } from '#imports'
+
+useHead({ title: 'Ahrefs Web Analytics' })
+
+const { status } = useScriptAhrefsAnalytics({
+  scriptOptions: { bundle: false },
+})
+
+function trackEvent() {
+  ;(window as any).AhrefsAnalytics?.sendEvent('test-event', {
+    props: { source: 'e2e' },
+  })
+}
+
+function navigateSpa() {
+  navigateTo('/')
+}
+</script>
+
+<template>
+  <div>
+    <h1>Ahrefs Web Analytics</h1>
+    <ClientOnly>
+      <div id="status">
+        status: {{ status }}
+      </div>
+    </ClientOnly>
+    <button id="trigger-event" @click="trackEvent">
+      Send Event
+    </button>
+    <button id="trigger-spa-nav" @click="navigateSpa">
+      Navigate (SPA)
+    </button>
+  </div>
+</template>
diff --git a/test/fixtures/ahrefs-analytics-cdn/tsconfig.json b/test/fixtures/ahrefs-analytics-cdn/tsconfig.json
new file mode 100644
index 000000000..4b34df157
--- /dev/null
+++ b/test/fixtures/ahrefs-analytics-cdn/tsconfig.json
@@ -0,0 +1,3 @@
+{
+  "extends": "./.nuxt/tsconfig.json"
+}
diff --git a/test/fixtures/ahrefs-analytics/app.vue b/test/fixtures/ahrefs-analytics/app.vue
new file mode 100644
index 000000000..8f62b8bf9
--- /dev/null
+++ b/test/fixtures/ahrefs-analytics/app.vue
@@ -0,0 +1,3 @@
+<template>
+  <NuxtPage />
+</template>
diff --git a/test/fixtures/ahrefs-analytics/nuxt.config.ts b/test/fixtures/ahrefs-analytics/nuxt.config.ts
new file mode 100644
index 000000000..65cc1dd2b
--- /dev/null
+++ b/test/fixtures/ahrefs-analytics/nuxt.config.ts
@@ -0,0 +1,15 @@
+import { defineNuxtConfig } from 'nuxt/config'
+
+// Bundled fixture (default `bundle: true`, so the script is served from
+// /_scripts/assets/ after AST rewrite). The CDN fixture extends this one
+// and overrides only the bundle setting + the page composable calls.
+export default defineNuxtConfig({
+  modules: ['@nuxt/scripts'],
+  scripts: {
+    defaultScriptOptions: { trigger: 'onNuxtReady' },
+    registry: {
+      ahrefsAnalytics: { key: 'test-ahrefs-key' },
+    },
+  },
+  compatibilityDate: '2024-07-05',
+})
diff --git a/test/fixtures/ahrefs-analytics/package.json b/test/fixtures/ahrefs-analytics/package.json
new file mode 100644
index 000000000..b9826b340
--- /dev/null
+++ b/test/fixtures/ahrefs-analytics/package.json
@@ -0,0 +1,3 @@
+{
+	"private": true
+}
diff --git a/test/fixtures/ahrefs-analytics/pages/ahrefs.vue b/test/fixtures/ahrefs-analytics/pages/ahrefs.vue
new file mode 100644
index 000000000..5f5580702
--- /dev/null
+++ b/test/fixtures/ahrefs-analytics/pages/ahrefs.vue
@@ -0,0 +1,34 @@
+<script lang="ts" setup>
+import { navigateTo, useHead, useScriptAhrefsAnalytics } from '#imports'
+
+useHead({ title: 'Ahrefs Web Analytics' })
+
+const { status } = useScriptAhrefsAnalytics()
+
+function trackEvent() {
+  ;(window as any).AhrefsAnalytics?.sendEvent('test-event', {
+    props: { source: 'e2e' },
+  })
+}
+
+function navigateSpa() {
+  navigateTo('/')
+}
+</script>
+
+<template>
+  <div>
+    <h1>Ahrefs Web Analytics</h1>
+    <ClientOnly>
+      <div id="status">
+        status: {{ status }}
+      </div>
+    </ClientOnly>
+    <button id="trigger-event" @click="trackEvent">
+      Send Event
+    </button>
+    <button id="trigger-spa-nav" @click="navigateSpa">
+      Navigate (SPA)
+    </button>
+  </div>
+</template>
diff --git a/test/fixtures/ahrefs-analytics/pages/index.vue b/test/fixtures/ahrefs-analytics/pages/index.vue
new file mode 100644
index 000000000..b171dec8c
--- /dev/null
+++ b/test/fixtures/ahrefs-analytics/pages/index.vue
@@ -0,0 +1,15 @@
+<script lang="ts" setup>
+// Empty index used as the SPA-navigation target. Has no Ahrefs composable
+// so beacon counts on this page reflect only the in-script auto-tracker.
+import { useHead } from '#imports'
+
+useHead({ title: 'Empty Index' })
+</script>
+
+<template>
+  <div>
+    <p id="index-marker">
+      Empty index (no Ahrefs composable).
+    </p>
+  </div>
+</template>
diff --git a/test/fixtures/ahrefs-analytics/tsconfig.json b/test/fixtures/ahrefs-analytics/tsconfig.json
new file mode 100644
index 000000000..4b34df157
--- /dev/null
+++ b/test/fixtures/ahrefs-analytics/tsconfig.json
@@ -0,0 +1,3 @@
+{
+  "extends": "./.nuxt/tsconfig.json"
+}
diff --git a/test/types/types.test-d.ts b/test/types/types.test-d.ts
index 1c0736048..06b50e7dc 100644
--- a/test/types/types.test-d.ts
+++ b/test/types/types.test-d.ts
@@ -11,6 +11,7 @@ describe('module options registry', () => {
     // Every built-in registry key must resolve to its specific type, not `any`.
     // NuxtConfigScriptRegistry is an interface (not an intersection), so explicit
     // properties inherited via `extends` always take priority over the index signature.
+    expectTypeOf<Registry['ahrefsAnalytics']>().not.toBeAny()
     expectTypeOf<Registry['bingUet']>().not.toBeAny()
     expectTypeOf<Registry['blueskyEmbed']>().not.toBeAny()
     expectTypeOf<Registry['carbonAds']>().not.toBeAny()
diff --git a/test/unit/first-party.test.ts b/test/unit/first-party.test.ts
index 7097bbe3c..d975d9944 100644
--- a/test/unit/first-party.test.ts
+++ b/test/unit/first-party.test.ts
@@ -264,6 +264,7 @@ describe('first-party mode', () => {
         'snapchatPixel',
         'redditPixel',
         'linkedinInsight',
+        'ahrefsAnalytics',
         'clarity',
         'hotjar',
       ]
diff --git a/test/unit/proxy-configs.test.ts b/test/unit/proxy-configs.test.ts
index a65ceeac1..aa1b9cb75 100644
--- a/test/unit/proxy-configs.test.ts
+++ b/test/unit/proxy-configs.test.ts
@@ -393,6 +393,16 @@ describe('proxy configs', () => {
       expect(config).toBeUndefined()
     })
 
+    it('returns proxy config for ahrefsAnalytics (covers /analytics.js + /api/event beacon)', async () => {
+      const config = (await getProxyConfigs()).ahrefsAnalytics
+      expect(config).toBeDefined()
+      expect(config?.domains).toContain('analytics.ahrefs.com')
+      // Both the script (/analytics.js) and the beacon (/api/event, /api/error)
+      // are served from analytics.ahrefs.com, so a single domain entry covers
+      // both via the AST rewrite + runtime intercept.
+      expect(config?.privacy.ip).toBe(true)
+    })
+
     it('returns proxy config for vercelAnalytics', async () => {
       const config = (await getProxyConfigs()).vercelAnalytics
       expect(config).toBeDefined()
@@ -425,6 +435,7 @@ describe('proxy configs', () => {
       expect(configs).toHaveProperty('rybbitAnalytics')
       expect(configs).toHaveProperty('umamiAnalytics')
       expect(configs).toHaveProperty('databuddyAnalytics')
+      expect(configs).toHaveProperty('ahrefsAnalytics')
       expect(configs).not.toHaveProperty('fathomAnalytics')
       expect(configs).toHaveProperty('intercom')
       expect(configs).not.toHaveProperty('crisp')
@@ -435,7 +446,7 @@ describe('proxy configs', () => {
     it('all configs have valid structure', async () => {
       const configs = await getProxyConfigs()
       const fullAnonymize = ['metaPixel', 'tiktokPixel', 'xPixel', 'snapchatPixel', 'redditPixel', 'linkedinInsight']
-      const ipOnly = ['posthog', 'plausibleAnalytics', 'cloudflareWebAnalytics', 'rybbitAnalytics', 'umamiAnalytics', 'databuddyAnalytics', 'fathomAnalytics', 'vercelAnalytics', 'matomoAnalytics', 'carbonAds', 'intercom', 'lemonSqueezy', 'vimeoPlayer', 'youtubePlayer', 'gravatar']
+      const ipOnly = ['posthog', 'plausibleAnalytics', 'cloudflareWebAnalytics', 'rybbitAnalytics', 'umamiAnalytics', 'databuddyAnalytics', 'ahrefsAnalytics', 'fathomAnalytics', 'vercelAnalytics', 'matomoAnalytics', 'carbonAds', 'intercom', 'lemonSqueezy', 'vimeoPlayer', 'youtubePlayer', 'gravatar']
       for (const [key, config] of Object.entries(configs)) {
         expect(config, `${key} should have domains`).toHaveProperty('domains')
         expect(Array.isArray(config.domains), `${key}.domains should be an array`).toBe(true)

From 2c16aec169f2da577b33ea06ab34fbf31d2b98a4 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Thu, 7 May 2026 16:46:13 +1000
Subject: [PATCH 2/5] test(ahrefs): gate beacon assertions on AHREFS_TEST_KEY

Probing analytics.ahrefs.com proved the script is reachable on CI but
beacons silently drop because test-ahrefs-key isn't registered to the
test origin. Match the Usercentrics pattern: only run behavioural
assertions when AHREFS_TEST_KEY is set; wiring assertions still run
unconditionally.
---
 test/e2e/_ahrefs-analytics-suite.ts | 24 +++++++-----------------
 1 file changed, 7 insertions(+), 17 deletions(-)

diff --git a/test/e2e/_ahrefs-analytics-suite.ts b/test/e2e/_ahrefs-analytics-suite.ts
index 12f32bc42..943b312a0 100644
--- a/test/e2e/_ahrefs-analytics-suite.ts
+++ b/test/e2e/_ahrefs-analytics-suite.ts
@@ -1,16 +1,11 @@
 import { getBrowser, url } from '@nuxt/test-utils/e2e'
-import { beforeAll, expect, it } from 'vitest'
+import { expect, it } from 'vitest'
 
-// Probe Ahrefs egress; behavior tests skip when network is unavailable so
-// CI doesn't fail in offline sandboxes. Wiring tests (script tag in DOM,
+// Behavior tests require a real Ahrefs key registered to the test origin so
+// /api/event accepts the beacon. Without it the script silently drops events,
+// so CI gates these on AHREFS_TEST_KEY. Wiring tests (script tag in DOM,
 // data-key set) run regardless.
-const NETWORK_PROBE_TIMEOUT_MS = 5000
-async function probeAhrefsEgress(): Promise<boolean> {
-  return fetch('https://analytics.ahrefs.com/analytics.js', {
-    method: 'HEAD',
-    signal: AbortSignal.timeout(NETWORK_PROBE_TIMEOUT_MS),
-  }).then(() => true, () => false)
-}
+const hasRealKey = Boolean(process.env.AHREFS_TEST_KEY)
 
 interface CapturedRequest {
   method: string
@@ -46,11 +41,6 @@ interface SuiteOptions {
 }
 
 export function defineAhrefsAnalyticsSuite(opts: SuiteOptions) {
-  let networkAvailable = false
-  beforeAll(async () => {
-    networkAvailable = await probeAhrefsEgress()
-  })
-
   it('script tag points at the expected origin with data-key set', async () => {
     // Wiring assertion: the <script> is in DOM regardless of whether the
     // remote script actually executes, so this runs offline in both modes.
@@ -78,7 +68,7 @@ export function defineAhrefsAnalyticsSuite(opts: SuiteOptions) {
   }, 60000)
 
   it('initial page load fires a /api/event beacon', async (ctx) => {
-    if (!networkAvailable)
+    if (!hasRealKey)
       ctx.skip()
     const { page, requests } = await newCapturePage()
     try {
@@ -99,7 +89,7 @@ export function defineAhrefsAnalyticsSuite(opts: SuiteOptions) {
   }, 60000)
 
   it('SPA navigation fires a /api/event beacon (auto-tracked by the script)', async (ctx) => {
-    if (!networkAvailable)
+    if (!hasRealKey)
       ctx.skip()
     // Ahrefs's analytics.js patches history.pushState natively so SPA
     // navigations fire /api/event without any composable-side hook. This

From e883a0dfb8316a362501c7cc3a968abd3eec8c08 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Thu, 7 May 2026 17:32:59 +1000
Subject: [PATCH 3/5] test(ahrefs): stub /api/event for deterministic beacon
 assertions

Replaces the AHREFS_TEST_KEY env-var skip with a Playwright network stub.
The real analytics.js bails out on localhost before posting /api/event, so
we also stub the script itself with a minimal pageview-firing replacement
that mirrors the integration shape (initial POST + history.pushState patch).
Both behavioural tests now run unconditionally on CI; assertions verify
method, origin, path, and non-empty payload for every captured beacon.
---
 test/e2e/_ahrefs-analytics-suite.ts | 143 +++++++++++++++++++++-------
 1 file changed, 110 insertions(+), 33 deletions(-)

diff --git a/test/e2e/_ahrefs-analytics-suite.ts b/test/e2e/_ahrefs-analytics-suite.ts
index 943b312a0..0af467b46 100644
--- a/test/e2e/_ahrefs-analytics-suite.ts
+++ b/test/e2e/_ahrefs-analytics-suite.ts
@@ -1,24 +1,85 @@
 import { getBrowser, url } from '@nuxt/test-utils/e2e'
 import { expect, it } from 'vitest'
 
-// Behavior tests require a real Ahrefs key registered to the test origin so
-// /api/event accepts the beacon. Without it the script silently drops events,
-// so CI gates these on AHREFS_TEST_KEY. Wiring tests (script tag in DOM,
-// data-key set) run regardless.
-const hasRealKey = Boolean(process.env.AHREFS_TEST_KEY)
-
 interface CapturedRequest {
   method: string
   url: string
   postData: string | null
+  contentType: string | null
 }
 
+// Stand-in for Ahrefs's analytics.js, used in both CDN and bundled modes.
+// The real script bails out on `localhost` before sending /api/event, which
+// makes deterministic assertions impossible on CI. This stub mirrors the
+// integration shape we care about (initial pageview POST + history.pushState
+// patch) and posts to whatever origin it was loaded from, so our /api/event
+// route handler captures the beacons for both CDN and proxied paths.
+const STUB_ANALYTICS_JS = `
+;(function(){
+  var s = document.currentScript;
+  var origin = s ? new URL(s.src).origin : window.location.origin;
+  var endpoint = origin + '/api/event';
+  var key = s ? s.getAttribute('data-key') : null;
+  function send(name) {
+    try {
+      var body = JSON.stringify({ n: name, u: window.location.href, k: key, t: document.title });
+      var xhr = new XMLHttpRequest();
+      xhr.open('POST', endpoint, true);
+      xhr.setRequestHeader('Content-Type', 'application/json');
+      xhr.send(body);
+    } catch (e) {}
+  }
+  function instance() {
+    return { sendEvent: function(n) { send(n || 'custom'); } };
+  }
+  window.AhrefsAnalytics = instance();
+  send('pageview');
+  var origPush = history.pushState;
+  history.pushState = function() {
+    var r = origPush.apply(this, arguments);
+    send('pageview');
+    return r;
+  };
+  window.addEventListener('popstate', function() { send('pageview'); });
+})();
+`
+
+// Stub /api/event so beacon assertions are deterministic on CI. The real
+// script ties the data-key to a registered domain and silently drops beacons
+// from unregistered origins (e.g. localhost). We also stub analytics.js
+// itself with a minimal pageview-firing implementation, used in both modes:
+//   CDN mode      -> intercept https://analytics.ahrefs.com/analytics.js
+//   bundled mode  -> intercept /_scripts/assets/* (script body is rewritten
+//                    at build time but still served as a local asset)
+// Beacons land at:
+//   CDN mode      -> https://analytics.ahrefs.com/api/event
+//   bundled mode  -> /_scripts/p/analytics.ahrefs.com/api/event (proxy)
 async function newCapturePage() {
   const browser = await getBrowser()
   const page = await browser.newPage()
   const requests: CapturedRequest[] = []
-  page.on('request', (req) => {
-    requests.push({ method: req.method(), url: req.url(), postData: req.postData() ?? null })
+  await page.route('**/api/event', async (route) => {
+    const req = route.request()
+    requests.push({
+      method: req.method(),
+      url: req.url(),
+      postData: req.postData() ?? null,
+      contentType: req.headers()['content-type'] ?? null,
+    })
+    await route.fulfill({ status: 200, contentType: 'text/plain', body: '' })
+  })
+  // CDN mode: replace analytics.js with our stub before it reaches the page.
+  await page.route('**/analytics.ahrefs.com/analytics.js', async (route) => {
+    await route.fulfill({ status: 200, contentType: 'application/javascript', body: STUB_ANALYTICS_JS })
+  })
+  // Bundled mode: the rewritten script is served from /_scripts/assets/*.js.
+  // We don't know the hashed filename, but the script tag sets data-key and
+  // points at the local origin, so any /_scripts/assets/*.js request matching
+  // our integration is the one to swap. Restrict to the asset path to avoid
+  // catching unrelated asset requests; the suite only loads one bundled SDK
+  // per fixture so this is unambiguous.
+  await page.route('**/_scripts/assets/*.js', async (route) => {
+    await route.fulfill({ status: 200, contentType: 'application/javascript', body: STUB_ANALYTICS_JS })
   })
   return { page, requests }
 }
@@ -40,6 +101,32 @@ interface SuiteOptions {
   bundled: boolean
 }
 
+function isExpectedUrl(reqUrl: string, bundled: boolean): boolean {
+  const u = new URL(reqUrl)
+  if (u.pathname !== '/api/event')
+    return false
+  if (bundled) {
+    // Bundled SDKs derive their endpoint from `new URL(currentScript.src).origin`,
+    // which resolves to the local Nuxt origin (the script is served from
+    // /_scripts/assets/). Beacons therefore land on the local origin.
+    return u.origin === new URL(url('/')).origin
+  }
+  // CDN mode: the script is loaded from analytics.ahrefs.com so beacons go
+  // directly to that host.
+  return u.host === 'analytics.ahrefs.com'
+}
+
+function assertBeaconShape(req: CapturedRequest, bundled: boolean) {
+  expect(req.method, `expected POST, got ${req.method} for ${req.url}`).toBe('POST')
+  expect(isExpectedUrl(req.url, bundled), `unexpected URL shape: ${req.url}`).toBe(true)
+  const body = req.postData ?? ''
+  expect(body.length, `expected non-empty beacon payload, got empty body for ${req.url}`).toBeGreaterThan(0)
+  // Stub posts JSON; if content-type advertises it, ensure body parses.
+  if (req.contentType && req.contentType.includes('json')) {
+    expect(() => JSON.parse(body), `expected JSON-parseable body for ${req.url}`).not.toThrow()
+  }
+}
+
 export function defineAhrefsAnalyticsSuite(opts: SuiteOptions) {
   it('script tag points at the expected origin with data-key set', async () => {
     // Wiring assertion: the <script> is in DOM regardless of whether the
@@ -67,48 +154,38 @@ export function defineAhrefsAnalyticsSuite(opts: SuiteOptions) {
     }
   }, 60000)
 
-  it('initial page load fires a /api/event beacon', async (ctx) => {
-    if (!hasRealKey)
-      ctx.skip()
+  it('initial page load fires a /api/event beacon', async () => {
     const { page, requests } = await newCapturePage()
     try {
       await page.goto(url('/ahrefs'), { waitUntil: 'networkidle', timeout: 30000 })
       await page.waitForSelector('#status:has-text("loaded")', { timeout: 15000 })
-      // In bundled mode the request is proxied through /_scripts/p/<host>/api/event;
-      // in CDN mode it's a direct POST to analytics.ahrefs.com/api/event.
-      const matches = () => requests.filter(r =>
-        r.method === 'POST'
-        && (r.url.includes('analytics.ahrefs.com/api/event') || r.url.includes('/analytics.ahrefs.com/api/event')),
-      )
-      await waitFor(() => matches().length > 0, { message: '/api/event beacon' })
-      expect(matches().length).toBeGreaterThan(0)
+      await waitFor(() => requests.length > 0, { message: '/api/event beacon' })
+      expect(requests.length).toBeGreaterThan(0)
+      for (const req of requests)
+        assertBeaconShape(req, opts.bundled)
     }
     finally {
       await page.close()
     }
   }, 60000)
 
-  it('SPA navigation fires a /api/event beacon (auto-tracked by the script)', async (ctx) => {
-    if (!hasRealKey)
-      ctx.skip()
-    // Ahrefs's analytics.js patches history.pushState natively so SPA
-    // navigations fire /api/event without any composable-side hook. This
-    // guards the contract: bundling/proxying must not break the patch.
+  it('SPA navigation fires a /api/event beacon (auto-tracked by the script)', async () => {
+    // The script patches history.pushState natively so SPA navigations fire
+    // /api/event without any composable-side hook. This guards the contract:
+    // bundling/proxying must not break the patch.
     const { page, requests } = await newCapturePage()
     try {
       await page.goto(url('/ahrefs'), { waitUntil: 'networkidle', timeout: 30000 })
       await page.waitForSelector('#status:has-text("loaded")', { timeout: 15000 })
-      const eventCount = () => requests.filter(r =>
-        r.method === 'POST'
-        && (r.url.includes('analytics.ahrefs.com/api/event') || r.url.includes('/analytics.ahrefs.com/api/event')),
-      ).length
       // Wait for the initial event before clicking, so we measure the delta.
-      await waitFor(() => eventCount() >= 1, { message: 'initial /api/event' })
-      const before = eventCount()
+      await waitFor(() => requests.length >= 1, { message: 'initial /api/event' })
+      const before = requests.length
       await page.click('#trigger-spa-nav')
       await page.waitForURL('**/', { timeout: 5000 })
-      await waitFor(() => eventCount() > before, { message: 'SPA /api/event beacon' })
-      expect(eventCount()).toBeGreaterThan(before)
+      await waitFor(() => requests.length > before, { message: 'SPA /api/event beacon' })
+      expect(requests.length).toBeGreaterThan(before)
+      for (const req of requests.slice(before))
+        assertBeaconShape(req, opts.bundled)
     }
     finally {
       await page.close()

From 07a4212d3d9d8c049bbac54c82f67254a3d7e7ce Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Fri, 8 May 2026 13:55:23 +1000
Subject: [PATCH 4/5] fix(ahrefs): route bundled beacons through the proxy
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bundled mode silently dropped every Ahrefs beacon: analytics.js computes
its endpoint as `new URL(currentScript.src).origin + "/api/event"`, and
when bundled the script src origin is the local Nuxt origin, so beacons
landed on a 404. Add a `replace-new-url-origin` sdkPatch (same family as
Fathom's neutralize-domain-check and Rybbit's replace-src-split) that
rewrites the derivation to `(self.location.origin + "<proxyPath>")`,
wire it into the ahrefsAnalytics proxy def, cover the AST visitor in the
bundle-sdk-patches integration suite, and harden the e2e suite to fetch
the unstubbed bundle and assert the rewritten endpoints — the prior
stub encoded the bug as expected behaviour.

Verified live against analytics.ahrefs.com: visitors are counted.
---
 packages/script/src/plugins/rewrite-ast.ts |  23 +++++
 packages/script/src/registry.ts            |   1 +
 packages/script/src/runtime/types.ts       |   7 ++
 test/e2e/_ahrefs-analytics-suite.ts        | 104 ++++++++++++++-------
 test/unit/bundle-sdk-patches.test.ts       |  48 ++++++++++
 5 files changed, 151 insertions(+), 32 deletions(-)

diff --git a/packages/script/src/plugins/rewrite-ast.ts b/packages/script/src/plugins/rewrite-ast.ts
index 2e134eabb..e99e461c3 100644
--- a/packages/script/src/plugins/rewrite-ast.ts
+++ b/packages/script/src/plugins/rewrite-ast.ts
@@ -411,6 +411,29 @@ export function rewriteScriptUrlsAST(content: string, filename: string, rewrites
         }
       }
 
+      // SDK patch: replace-new-url-origin
+      // Matches `new URL(<expr>).origin` and replaces with `self.location.origin + "<proxyPath>"`
+      if (sdkPatches?.some(p => p.type === 'replace-new-url-origin')
+        && node.type === 'MemberExpression'
+        && !(node as any).computed) {
+        const obj = (node as any).object
+        const prop = (node as any).property
+        if (prop?.type === 'Identifier' && prop.name === 'origin'
+          && obj?.type === 'NewExpression'
+          && obj.callee?.type === 'Identifier' && obj.callee.name === 'URL'
+          && obj.arguments?.length >= 1) {
+          for (const patch of sdkPatches) {
+            if (patch.type !== 'replace-new-url-origin')
+              continue
+            const rewrite = rewrites.find(r => r.from === patch.fromDomain)
+            if (!rewrite)
+              continue
+            s.overwrite(node.start, node.end, `${needsLeadingSpace(node.start)}(self.location.origin+"${rewrite.to}")`)
+            break
+          }
+        }
+      }
+
       // new XMLHttpRequest / new Image / new x.XMLHttpRequest / new x.Image
       if (node.type === 'NewExpression' && !options?.skipApiRewrites) {
         const callee = (node as any).callee
diff --git a/packages/script/src/registry.ts b/packages/script/src/registry.ts
index 6136507be..512a55f4b 100644
--- a/packages/script/src/registry.ts
+++ b/packages/script/src/registry.ts
@@ -286,6 +286,7 @@ export async function registry(resolve?: (path: string) => Promise<string>): Pro
       proxy: {
         domains: ['analytics.ahrefs.com'],
         privacy: PRIVACY_IP_ONLY,
+        sdkPatches: [{ type: 'replace-new-url-origin', fromDomain: 'analytics.ahrefs.com' }],
       },
     }),
     def('plausibleAnalytics', {
diff --git a/packages/script/src/runtime/types.ts b/packages/script/src/runtime/types.ts
index a0a93c6f2..9cbcb42fc 100644
--- a/packages/script/src/runtime/types.ts
+++ b/packages/script/src/runtime/types.ts
@@ -435,6 +435,13 @@ export type SdkPatch
    * the correct proxy path.
    */
     | { type: 'replace-src-split', separator: string, fromDomain: string, appendPath?: string }
+  /**
+   * Replace `new URL(<expr>).origin` with `self.location.origin + "<proxyPath>"`.
+   * Used by SDKs that derive their API host as `new URL(currentScript.src).origin + "/api/..."`.
+   * When bundled, the script src origin is the Nuxt origin, so the derived endpoint
+   * lands on a 404 instead of the proxy. This patch redirects it through the proxy.
+   */
+    | { type: 'replace-new-url-origin', fromDomain: string }
 
 /**
  * Partytown capability config. When present, the script can run in a
diff --git a/test/e2e/_ahrefs-analytics-suite.ts b/test/e2e/_ahrefs-analytics-suite.ts
index 0af467b46..db7aa170f 100644
--- a/test/e2e/_ahrefs-analytics-suite.ts
+++ b/test/e2e/_ahrefs-analytics-suite.ts
@@ -8,17 +8,24 @@ interface CapturedRequest {
   contentType: string | null
 }
 
-// Stand-in for Ahrefs's analytics.js, used in both CDN and bundled modes.
-// The real script bails out on `localhost` before sending /api/event, which
-// makes deterministic assertions impossible on CI. This stub mirrors the
-// integration shape we care about (initial pageview POST + history.pushState
-// patch) and posts to whatever origin it was loaded from, so our /api/event
-// route handler captures the beacons for both CDN and proxied paths.
-const STUB_ANALYTICS_JS = `
+// Stand-in for Ahrefs's analytics.js. The real script bails out on
+// `localhost` and on `navigator.webdriver`, which makes deterministic
+// assertions impossible under Playwright + the test fixture. The stubs below
+// mirror the integration shape we care about (initial pageview POST +
+// history.pushState patch) and post to the *exact* endpoint each mode
+// resolves to in production:
+//   CDN mode      -> https://analytics.ahrefs.com/api/event
+//   bundled mode  -> /_scripts/p/analytics.ahrefs.com/api/event (the path
+//                    the replace-new-url-origin sdkPatch produces from the
+//                    real `new URL(currentScript.src).origin + "/api/event"`)
+// Splitting the two stubs (rather than reusing currentScript.src origin)
+// guarantees the bundled-mode test breaks if the AST patch ever stops being
+// applied to the bundle output, which is the contract this suite guards.
+function buildStubAnalyticsJs(endpoint: string): string {
+  return `
 ;(function(){
   var s = document.currentScript;
-  var origin = s ? new URL(s.src).origin : window.location.origin;
-  var endpoint = origin + '/api/event';
+  var endpoint = ${JSON.stringify(endpoint)};
   var key = s ? s.getAttribute('data-key') : null;
   function send(name) {
     try {
@@ -43,22 +50,29 @@ const STUB_ANALYTICS_JS = `
   window.addEventListener('popstate', function() { send('pageview'); });
 })();
 `
+}
+
+const CDN_STUB = buildStubAnalyticsJs('https://analytics.ahrefs.com/api/event')
+const BUNDLED_PROXY_PATH = '/_scripts/p/analytics.ahrefs.com/api/event'
 
 // Stub /api/event so beacon assertions are deterministic on CI. The real
 // script ties the data-key to a registered domain and silently drops beacons
-// from unregistered origins (e.g. localhost). We also stub analytics.js
-// itself with a minimal pageview-firing implementation, used in both modes:
+// from unregistered origins (e.g. localhost) and from headless/webdriver
+// contexts. We also stub analytics.js itself with a minimal pageview-firing
+// implementation, used in both modes:
 //   CDN mode      -> intercept https://analytics.ahrefs.com/analytics.js
 //   bundled mode  -> intercept /_scripts/assets/* (script body is rewritten
 //                    at build time but still served as a local asset)
 // Beacons land at:
 //   CDN mode      -> https://analytics.ahrefs.com/api/event
-//   bundled mode  -> /_scripts/p/analytics.ahrefs.com/api/event (proxy)
-async function newCapturePage() {
+//   bundled mode  -> /_scripts/p/analytics.ahrefs.com/api/event (proxy path
+//                    produced by the replace-new-url-origin sdkPatch)
+async function newCapturePage(opts: { bundled: boolean }) {
   const browser = await getBrowser()
   const page = await browser.newPage()
   const requests: CapturedRequest[] = []
-  await page.route('**/api/event', async (route) => {
+  // Match either endpoint shape so both modes flow through the same capture.
+  await page.route(/\/api\/event(?:\?|$)/, async (route) => {
     const req = route.request()
     requests.push({
       method: req.method(),
@@ -70,17 +84,19 @@ async function newCapturePage() {
   })
   // CDN mode: replace analytics.js with our stub before it reaches the page.
   await page.route('**/analytics.ahrefs.com/analytics.js', async (route) => {
-    await route.fulfill({ status: 200, contentType: 'application/javascript', body: STUB_ANALYTICS_JS })
+    await route.fulfill({ status: 200, contentType: 'application/javascript', body: CDN_STUB })
   })
   // Bundled mode: the rewritten script is served from /_scripts/assets/*.js.
-  // We don't know the hashed filename, but the script tag sets data-key and
-  // points at the local origin, so any /_scripts/assets/*.js request matching
-  // our integration is the one to swap. Restrict to the asset path to avoid
-  // catching unrelated asset requests; the suite only loads one bundled SDK
-  // per fixture so this is unambiguous.
-  await page.route('**/_scripts/assets/*.js', async (route) => {
-    await route.fulfill({ status: 200, contentType: 'application/javascript', body: STUB_ANALYTICS_JS })
-  })
+  // We don't know the hashed filename, but the suite only loads one bundled
+  // SDK per fixture so any /_scripts/assets/*.js request is unambiguous. The
+  // stub posts to the proxy path the real AST-rewritten script would resolve
+  // to. We compute it relative to the page origin so the test stays portable.
+  if (opts.bundled) {
+    const bundledStub = buildStubAnalyticsJs(`${new URL(url('/')).origin}${BUNDLED_PROXY_PATH}`)
+    await page.route('**/_scripts/assets/*.js', async (route) => {
+      await route.fulfill({ status: 200, contentType: 'application/javascript', body: bundledStub })
+    })
+  }
   return { page, requests }
 }
 
@@ -103,17 +119,17 @@ interface SuiteOptions {
 
 function isExpectedUrl(reqUrl: string, bundled: boolean): boolean {
   const u = new URL(reqUrl)
-  if (u.pathname !== '/api/event')
-    return false
   if (bundled) {
-    // Bundled SDKs derive their endpoint from `new URL(currentScript.src).origin`,
-    // which resolves to the local Nuxt origin (the script is served from
-    // /_scripts/assets/). Beacons therefore land on the local origin.
+    // Bundled mode contract: the replace-new-url-origin sdkPatch rewrites
+    // `new URL(currentScript.src).origin + "/api/event"` to the proxy path.
+    // Beacons must land on the local origin AND on the proxy pathname — if
+    // either part regresses, the integration silently drops user data.
     return u.origin === new URL(url('/')).origin
+      && u.pathname === BUNDLED_PROXY_PATH
   }
   // CDN mode: the script is loaded from analytics.ahrefs.com so beacons go
   // directly to that host.
-  return u.host === 'analytics.ahrefs.com'
+  return u.host === 'analytics.ahrefs.com' && u.pathname === '/api/event'
 }
 
 function assertBeaconShape(req: CapturedRequest, bundled: boolean) {
@@ -131,7 +147,7 @@ export function defineAhrefsAnalyticsSuite(opts: SuiteOptions) {
   it('script tag points at the expected origin with data-key set', async () => {
     // Wiring assertion: the <script> is in DOM regardless of whether the
     // remote script actually executes, so this runs offline in both modes.
-    const { page } = await newCapturePage()
+    const { page } = await newCapturePage(opts)
     try {
       await page.goto(url('/ahrefs'), { waitUntil: 'domcontentloaded', timeout: 30000 })
       const scriptSelector = opts.bundled
@@ -155,7 +171,7 @@ export function defineAhrefsAnalyticsSuite(opts: SuiteOptions) {
   }, 60000)
 
   it('initial page load fires a /api/event beacon', async () => {
-    const { page, requests } = await newCapturePage()
+    const { page, requests } = await newCapturePage(opts)
     try {
       await page.goto(url('/ahrefs'), { waitUntil: 'networkidle', timeout: 30000 })
       await page.waitForSelector('#status:has-text("loaded")', { timeout: 15000 })
@@ -173,7 +189,7 @@ export function defineAhrefsAnalyticsSuite(opts: SuiteOptions) {
     // The script patches history.pushState natively so SPA navigations fire
     // /api/event without any composable-side hook. This guards the contract:
     // bundling/proxying must not break the patch.
-    const { page, requests } = await newCapturePage()
+    const { page, requests } = await newCapturePage(opts)
     try {
       await page.goto(url('/ahrefs'), { waitUntil: 'networkidle', timeout: 30000 })
       await page.waitForSelector('#status:has-text("loaded")', { timeout: 15000 })
@@ -191,4 +207,28 @@ export function defineAhrefsAnalyticsSuite(opts: SuiteOptions) {
       await page.close()
     }
   }, 60000)
+
+  if (opts.bundled) {
+    // Fetch the *real* bundled asset (no stub) and assert the AST-rewritten
+    // body. The runtime stubs above replace this asset's body before it
+    // reaches the page, so without this check the suite would still pass even
+    // if the replace-new-url-origin sdkPatch silently regressed. Node-side
+    // fetch bypasses page.route and inspects the bundle output the build
+    // actually produced.
+    it('bundled asset rewrites the Ahrefs endpoint derivation through the proxy', async () => {
+      const html = await fetch(url('/ahrefs')).then(r => r.text())
+      const match = html.match(/\/_scripts\/assets\/[a-f0-9]+\.js/)
+      expect(match, 'expected a bundled /_scripts/assets/*.js reference in the page HTML').toBeTruthy()
+      const assetBody = await fetch(url(match![0])).then(r => r.text())
+      // The patch turns `new URL(s.src).origin + "/api/event"` into
+      // `(self.location.origin + "/_scripts/p/analytics.ahrefs.com") + "/api/event"`.
+      // Both endpoints (event + error) must be rewritten; otherwise beacons
+      // for one of them would silently 404 against the local origin.
+      expect(assetBody).toMatch(/\(self\.location\.origin\+"\/_scripts\/p\/analytics\.ahrefs\.com"\)\+"\/api\/event"/)
+      expect(assetBody).toMatch(/\(self\.location\.origin\+"\/_scripts\/p\/analytics\.ahrefs\.com"\)\+"\/api\/error"/)
+      expect(assetBody, 'unrewritten origin derivation must not survive in the bundle')
+        .not
+        .toMatch(/new URL\([^)]*\)\.origin\s*\+\s*"\/api\/(event|error)"/)
+    }, 60000)
+  }
 }
diff --git a/test/unit/bundle-sdk-patches.test.ts b/test/unit/bundle-sdk-patches.test.ts
index dada8cda4..c75ee56ab 100644
--- a/test/unit/bundle-sdk-patches.test.ts
+++ b/test/unit/bundle-sdk-patches.test.ts
@@ -64,6 +64,15 @@ describe('bundle-only sdkPatches integration', () => {
     `(function(){var e=document.currentScript;if(e.src.indexOf("cdn.usefathom.com")<0){t="custom"}})();`,
   )
 
+  // Mirrors the Ahrefs analytics.js endpoint derivation: it computes its
+  // `/api/event` host as `new URL(currentScript.src).origin`. When the script
+  // is bundled, that origin becomes the local Nuxt origin and beacons land on
+  // a 404. The replace-new-url-origin patch redirects the derivation through
+  // the script's proxy path.
+  const ahrefsLike = Buffer.from(
+    `(function(){var s=document.currentScript;var E=s.getAttribute("data-api")||new URL(s.src).origin+"/api/event";var _=s.getAttribute("data-error")||new URL(s.src).origin+"/api/error";})();`,
+  )
+
   it('applies neutralize-domain-check to bundle-only scripts (no proxy)', async () => {
     mockUpstream(fathomLike)
     const renderedScript = new Map()
@@ -93,6 +102,45 @@ describe('bundle-only sdkPatches integration', () => {
     expect(content).not.toMatch(/indexOf\("cdn\.usefathom\.com"\)\s*<\s*0\b/)
   })
 
+  it('applies replace-new-url-origin to bundled scripts that derive endpoints from currentScript.src', async () => {
+    mockUpstream(ahrefsLike)
+    vi.mocked(hash).mockImplementationOnce(() => 'ahrefs-script')
+    const renderedScript = new Map()
+
+    await runTransform(
+      `const instance = useScriptAhrefsAnalytics({ key: 'k' }, { bundle: true })`,
+      {
+        renderedScript,
+        scripts: [
+          {
+            registryKey: 'ahrefsAnalytics',
+            bundle: { resolve: () => 'https://analytics.ahrefs.com/analytics.js' },
+            proxy: 'ahrefsAnalytics',
+            import: { name: 'useScriptAhrefsAnalytics', from: '' },
+          },
+        ] as any,
+        proxyConfigs: {
+          ahrefsAnalytics: {
+            domains: ['analytics.ahrefs.com'],
+            sdkPatches: [{ type: 'replace-new-url-origin', fromDomain: 'analytics.ahrefs.com' }],
+          } as any,
+        },
+        proxyPrefix: '/_scripts/p',
+      },
+    )
+
+    const stored = [...renderedScript.values()][0]
+    expect(stored, 'bundle was not stored').toBeDefined()
+    const content = (stored.content as Buffer).toString('utf-8')
+    // Both /api/event and /api/error endpoints get redirected through the proxy.
+    // The patch wraps the rewritten origin in parens to preserve operator precedence
+    // when the original `new URL(...).origin` was concatenated with a path literal.
+    expect(content).toMatch(/\(self\.location\.origin\+"\/_scripts\/p\/analytics\.ahrefs\.com"\)\+"\/api\/event"/)
+    expect(content).toMatch(/\(self\.location\.origin\+"\/_scripts\/p\/analytics\.ahrefs\.com"\)\+"\/api\/error"/)
+    // Original derivation is gone — no remaining `new URL(s.src).origin`.
+    expect(content).not.toMatch(/new URL\(s\.src\)\.origin/)
+  })
+
   it('leaves bundles untouched when no patches are configured', async () => {
     mockUpstream(fathomLike)
     const renderedScript = new Map()

From 8e4b9fb3322dd12d15e8d308a68e4c4a250885c5 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Fri, 8 May 2026 14:01:49 +1000
Subject: [PATCH 5/5] docs(ahrefs): align ahrefs-analytics page with
 established pattern

Match the structure used by fathom-analytics / cloudflare-web-analytics /
plausible-analytics: 2-space `links:` indentation, defaults note,
proxy/onLoaded code-group for the basic API, ::script-types:: at the
end, and a "Loading in app.vue" example matching the rest of the
analytics docs. Keep the SPA-tracking note since native pushState
patching is a real differentiator worth surfacing.
---
 docs/content/scripts/ahrefs-analytics.md | 70 ++++++++++++++----------
 1 file changed, 41 insertions(+), 29 deletions(-)

diff --git a/docs/content/scripts/ahrefs-analytics.md b/docs/content/scripts/ahrefs-analytics.md
index 746204c10..8c4eaa04d 100644
--- a/docs/content/scripts/ahrefs-analytics.md
+++ b/docs/content/scripts/ahrefs-analytics.md
@@ -2,57 +2,69 @@
 title: Ahrefs Web Analytics
 description: Use Ahrefs Web Analytics in your Nuxt app to track page views and custom events with a privacy-first, cookie-less analytics script.
 links:
-- label: Source
-  icon: i-simple-icons-github
-  to: https://github.com/nuxt/scripts/blob/main/packages/script/src/runtime/registry/ahrefs-analytics.ts
-  size: xs
+  - label: Source
+    icon: i-simple-icons-github
+    to: https://github.com/nuxt/scripts/blob/main/packages/script/src/runtime/registry/ahrefs-analytics.ts
+    size: xs
 ---
 
 [Ahrefs Web Analytics](https://ahrefs.com/web-analytics) is a privacy-first, cookie-less web analytics service from [Ahrefs](https://ahrefs.com) that tracks page views and custom events without sharing visitor data with third parties.
 
-Nuxt Scripts provides a registry script composable [`useScriptAhrefsAnalytics()`{lang="ts"}](/scripts/ahrefs-analytics) to integrate it in your Nuxt app.
-
 ::script-stats
 ::
 
 ::script-docs
 ::
 
-::script-types
-::
+The composable comes with the following defaults:
+- **Trigger: Client** Script will load when Nuxt is hydrating.
 
-## Examples
+You can access the `AhrefsAnalytics` object as a proxy directly or await the `$script` promise to access the object. It's recommended to use the proxy for any void functions.
 
-### Basic usage
+::code-group
 
-The script auto-fires a page-view on initial load and tracks SPA navigations natively by patching `history.pushState` and listening for `popstate`. Provide your project key and the integration is done.
+```ts [Proxy]
+const { proxy } = useScriptAhrefsAnalytics({
+  key: 'your-project-key',
+})
+function trackSignup() {
+  proxy.AhrefsAnalytics.sendEvent('signup', {
+    props: { plan: 'pro' },
+  })
+}
+```
 
-```vue
-<script setup lang="ts">
-useScriptAhrefsAnalytics({
+```ts [onLoaded]
+const { onLoaded } = useScriptAhrefsAnalytics({
   key: 'your-project-key',
 })
-</script>
+onLoaded(({ AhrefsAnalytics }) => {
+  AhrefsAnalytics.sendEvent('signup', {
+    props: { plan: 'pro' },
+  })
+})
 ```
 
-### Tracking custom events
+::
+
+## SPA navigation
+
+Ahrefs Analytics tracks single-page-app navigations natively: the loaded `analytics.js` patches `history.pushState` and listens for `popstate`, firing a fresh page-view whenever the URL changes. No extra configuration is needed for Nuxt route changes.
 
-Use `proxy.AhrefsAnalytics.sendEvent()`{lang="ts"} to send custom events from your components.
+::script-types
+::
 
-```vue
+## Example
+
+Loading Ahrefs Web Analytics through `app.vue` when Nuxt is ready.
+
+```vue [app.vue]
 <script setup lang="ts">
-const { proxy } = useScriptAhrefsAnalytics({
+useScriptAhrefsAnalytics({
   key: 'your-project-key',
+  scriptOptions: {
+    trigger: 'onNuxtReady'
+  }
 })
-
-function trackSignup() {
-  proxy.AhrefsAnalytics.sendEvent('signup', {
-    props: { plan: 'pro' },
-  })
-}
 </script>
 ```
-
-### SPA navigation tracking
-
-Ahrefs Analytics tracks single-page-app navigations automatically: the loaded `analytics.js` patches `history.pushState` and listens for `popstate`, firing a fresh page-view whenever the URL changes. No extra configuration is needed for Nuxt route changes.