@apex-inc/capacitor-plugin 2.2.7 → 2.4.0

package/ios/Sources/ApexCapacitorPluginBridge/ApexCapacitorPlugin.swift

@@ -41,10 +41,13 @@ public class ApexCapacitorPlugin: CAPPlugin, CAPBridgedPlugin, UNUserNotificatio
         CAPPluginMethod(name: "endSession", returnType: CAPPluginReturnPromise),
         CAPPluginMethod(name: "getCurrentSession", returnType: CAPPluginReturnPromise),
         CAPPluginMethod(name: "captureVariantScreenshot", returnType: CAPPluginReturnPromise),
+        CAPPluginMethod(name: "getVariant", returnType: CAPPluginReturnPromise),
         CAPPluginMethod(name: "track", returnType: CAPPluginReturnPromise),
         CAPPluginMethod(name: "getQueueSize", returnType: CAPPluginReturnPromise),
         CAPPluginMethod(name: "flushQueue", returnType: CAPPluginReturnPromise),
         CAPPluginMethod(name: "setTestMode", returnType: CAPPluginReturnPromise),
+        CAPPluginMethod(name: "setConsent", returnType: CAPPluginReturnPromise),
+        CAPPluginMethod(name: "getConsent", returnType: CAPPluginReturnPromise),
     ]
 
     // MARK: - Dependencies (lazy; constructed after initialize())
@@ -94,6 +97,13 @@ public class ApexCapacitorPlugin: CAPPlugin, CAPBridgedPlugin, UNUserNotificatio
     private var releaseChannel: String = "unknown"
     private var releaseChannelSource: String = "auto"
     private var lastReleaseChannelDetectedAt: Date = Date(timeIntervalSince1970: 0)
+
+    // Phase 4a — consent gate. Defaults granted; set false by
+    // initialize({ requireConsent: true }) until setConsent({ granted:true }).
+    private var consentGranted = true
+    // Phase 3 — per-launch dedup so each (experiment, variant) exposure
+    // fires once, matching the JS/web fallback.
+    private var firedExposures = Set<String>()
     // MMP-207 — debounced flush. Without this, every `track()` call
     // kicked a POST, so 8 quick taps = 8 separate single-event HTTP
     // requests. With debounce, rapid-fire events coalesce into one
@@ -201,6 +211,8 @@ public class ApexCapacitorPlugin: CAPPlugin, CAPBridgedPlugin, UNUserNotificatio
         // authorize quarantine-mode auto-stitch.
         let rawKey = call.getString("apiKey") ?? ""
         apiKey = rawKey.isEmpty ? nil : rawKey
+        // Phase 4a — consent gate.
+        consentGranted = !(call.getBool("requireConsent") ?? false)
 
         // MMP-061 — release channel detection. iOS uses the receipt URL
         // + StoreKit 2 AppTransaction. Any JS-supplied override on iOS
@@ -535,6 +547,12 @@ public class ApexCapacitorPlugin: CAPPlugin, CAPBridgedPlugin, UNUserNotificatio
     /// guarantees than firing a track event, and merchants tend to
     /// wire identify behind a one-shot boundary.
     @objc public func identify(_ call: CAPPluginCall) {
+        // Phase 4a — identify sends PII; collect nothing until consent given.
+        if !consentGranted {
+            if debug { print("[apex-capacitor] consent not granted; skipping identify") }
+            call.resolve()
+            return
+        }
         guard let email = call.getString("email")?.trimmingCharacters(in: .whitespaces),
               !email.isEmpty else {
             call.reject("email is required")
@@ -795,6 +813,119 @@ public class ApexCapacitorPlugin: CAPPlugin, CAPBridgedPlugin, UNUserNotificatio
         }.resume()
     }
 
+    // MARK: - Experiments (Phase 3 — native getVariant)
+
+    /// Resolve an experiment variant for this device against
+    /// `${apiBaseUrl}/api/experiments/:id/assign?unified=true&source=sdk`,
+    /// passing the stable visitor id so assignment buckets on the SAME id the
+    /// exposure event carries. Fires `experiment_exposure` once per
+    /// (experiment, variant). Falls back to control on any error.
+    @objc public func getVariant(_ call: CAPPluginCall) {
+        guard let experimentId = call.getString("experimentId"), !experimentId.isEmpty else {
+            call.reject("experimentId is required")
+            return
+        }
+        // Phase 4a — without consent, resolve control and fire no exposure.
+        if !consentGranted {
+            call.resolve([
+                "experimentId": experimentId,
+                "variant": "control",
+                "payload": [String: Any](),
+                "eligible": false,
+                "reason": "no_consent",
+            ])
+            return
+        }
+        let fallback: [String: Any] = [
+            "experimentId": experimentId,
+            "variant": "control",
+            "payload": [String: Any](),
+            "eligible": false,
+            "reason": "not_found",
+        ]
+        guard let encodedId = experimentId.addingPercentEncoding(withAllowedCharacters: .urlPathAllowed),
+              let url = URL(string: "\(apiBaseUrl)/api/experiments/\(encodedId)/assign?unified=true&source=sdk") else {
+            call.resolve(fallback)
+            return
+        }
+        var request = URLRequest(url: url)
+        request.httpMethod = "GET"
+        request.setValue("sdk", forHTTPHeaderField: "x-apex-source")
+        request.setValue(visitorId, forHTTPHeaderField: "x-apex-visitor-id")
+        request.setValue(workspaceKey, forHTTPHeaderField: "x-apex-workspace")
+        if let key = apiKey {
+            request.setValue(key, forHTTPHeaderField: "x-apex-api-key")
+        }
+        URLSession.shared.dataTask(with: request) { [weak self] data, response, error in
+            guard let self = self else { return }
+            if error != nil {
+                call.resolve(fallback)
+                return
+            }
+            guard let http = response as? HTTPURLResponse,
+                  (200...299).contains(http.statusCode),
+                  let data = data,
+                  let json = try? JSONSerialization.jsonObject(with: data) as? [String: Any] else {
+                call.resolve(fallback)
+                return
+            }
+            let variant = (json["variant"] as? String) ?? "control"
+            let eligible = (json["eligible"] as? Bool) ?? false
+            let payload = (json["payload"] as? [String: Any]) ?? [:]
+            var result: [String: Any] = [
+                "experimentId": experimentId,
+                "variant": variant,
+                "payload": payload,
+                "eligible": eligible,
+            ]
+            if let reason = json["reason"] as? String {
+                result["reason"] = reason
+            }
+            // Fire one exposure per (experiment, variant) on a real assignment.
+            if eligible {
+                let key = "\(experimentId):\(variant)"
+                if !self.firedExposures.contains(key) {
+                    self.firedExposures.insert(key)
+                    self.enqueueExposure(experimentId: experimentId, variant: variant)
+                }
+            }
+            call.resolve(result)
+        }.resume()
+    }
+
+    /// Enqueue a canonical `experiment_exposure` event, stamped the same way
+    /// `track(_:)` stamps every event (platform / timestamp / visitorId /
+    /// mobile slot / testMode). Batched through the offline queue.
+    private func enqueueExposure(experimentId: String, variant: String) {
+        guard let queue = offlineQueue else { return }
+        var payload: [String: AnyCodable] = [:]
+        payload["type"] = AnyCodable("experiment_exposure")
+        payload["data"] = AnyCodable([
+            "experiment_id": experimentId,
+            "variant_key": variant,
+            "surface": "mobile",
+        ])
+        if testMode {
+            payload["testMode"] = AnyCodable(true)
+        }
+        payload["platform"] = AnyCodable("ios")
+        payload["timestamp"] = AnyCodable(ISO8601DateFormatter().string(from: Date()))
+        payload["visitorId"] = AnyCodable(visitorId)
+        let mobileSlot: [String: Any] = [
+            "releaseChannel": releaseChannel,
+            "releaseChannelSource": releaseChannelSource,
+        ]
+        payload["mobile"] = AnyCodable(mobileSlot)
+        let event = NativeQueuedEvent(
+            id: UUID().uuidString.lowercased(),
+            payload: payload,
+            attempts: 0,
+            enqueuedAt: Date()
+        )
+        try? queue.enqueue(event)
+        kickFlush(reason: "track")
+    }
+
     // MARK: - Events & Queue
 
     @objc public func track(_ call: CAPPluginCall) {
@@ -802,6 +933,12 @@ public class ApexCapacitorPlugin: CAPPlugin, CAPBridgedPlugin, UNUserNotificatio
             call.reject("Plugin not initialized — call initialize() first")
             return
         }
+        // Phase 4a — collect nothing until consent is granted.
+        if !consentGranted {
+            if debug { print("[apex-capacitor] consent not granted; dropping event") }
+            call.resolve()
+            return
+        }
 
         let id = call.getString("id") ?? UUID().uuidString.lowercased()
         let payloadDict = call.options.compactMapValues { $0 }
@@ -901,6 +1038,25 @@ public class ApexCapacitorPlugin: CAPPlugin, CAPBridgedPlugin, UNUserNotificatio
         testMode = call.getBool("enabled") ?? false
         call.resolve()
     }
+
+    // MARK: - Consent (Phase 4a)
+
+    @objc public func setConsent(_ call: CAPPluginCall) {
+        let granted = call.getBool("granted") ?? false
+        consentGranted = granted
+        if granted {
+            // Resume: flush anything captured before this point.
+            kickFlush(reason: "consent")
+        } else {
+            // Revoke: drop anything queued but not yet sent.
+            try? offlineQueue?.clear()
+        }
+        call.resolve()
+    }
+
+    @objc public func getConsent(_ call: CAPPluginCall) {
+        call.resolve(["granted": consentGranted])
+    }
 }
 
 // MARK: - Date ISO 8601 helper

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apex-inc/capacitor-plugin",
-  "version": "2.2.7",
+  "version": "2.4.0",
   "description": "Apex Capacitor plugin — iOS/Android attribution, events, deep linking, SKAN, and offline-tolerant tracking for Capacitor apps.",
   "main": "dist/index.js",
   "module": "dist/esm/index.js",