@apex-inc/sdk 0.7.3 → 0.9.0

package/dist/esm/generated/event-payloads.js

@@ -0,0 +1,11 @@
+/**
+ * GENERATED FILE — DO NOT EDIT BY HAND.
+ *
+ * Typed Apex event payloads, generated from the Apex Spec registries by
+ * `app/scripts/generate-spec-types.ts`. Regenerate with:
+ *
+ *   npx tsx app/scripts/generate-spec-types.ts
+ *
+ * The `codegen.test.ts` stale gate fails CI if this drifts from the spec.
+ */
+export {};

package/dist/esm/index.js

@@ -4,6 +4,9 @@ let config = null;
 let queue = [];
 let flushTimer = null;
 let userId = null;
+// Consent gate. Defaults to granted (collect immediately); flipped to false
+// by `init({ requireConsent: true })` until `setConsent(true)` is called.
+let consentGranted = true;
 function log(...args) {
     if (config?.debug)
         console.log("[apex-sdk]", ...args);
@@ -66,6 +69,11 @@ function startFlushTimer() {
     }
 }
 function enqueue(event) {
+    // Consent gate — drop (don't even buffer) until consent is granted.
+    if (!consentGranted) {
+        log("Consent not granted; dropping event", event.type);
+        return;
+    }
     queue.push(event);
     const flushAt = config?.flushAt ?? 20;
     if (queue.length >= flushAt)
@@ -83,9 +91,33 @@ export function init(options) {
     }
     config = { ...options, workspaceKey };
     queue = [];
-    log("Initialized with workspace:", workspaceKey);
+    consentGranted = options.requireConsent ? false : true;
+    log("Initialized with workspace:", workspaceKey, "consent:", consentGranted);
     startFlushTimer();
 }
+/**
+ * Grant or revoke data-collection consent at runtime. Wire this to your
+ * cookie-banner / privacy-settings UI.
+ *
+ *   - `setConsent(true)`  → resume collection and flush anything queued
+ *     while waiting (there won't be any if `requireConsent` was set).
+ *   - `setConsent(false)` → stop collecting and drop anything queued but
+ *     not yet sent.
+ */
+export function setConsent(granted) {
+    consentGranted = granted;
+    log("Consent set:", granted);
+    if (granted) {
+        flush();
+    }
+    else {
+        queue = [];
+    }
+}
+/** Current consent state. */
+export function getConsent() {
+    return consentGranted;
+}
 /**
  * Track a custom event.
  */
@@ -142,6 +174,8 @@ export function identify(userId_, traits) {
 async function stitchIdentity(email, browserVisitorId, metadata, stableUserId) {
     if (!config)
         return;
+    if (!consentGranted)
+        return;
     const apiUrl = config.apiUrl ?? DEFAULT_API_URL;
     const url = `${apiUrl.replace(/\/$/, "")}/api/identity/stitch`;
     const effectiveVisitorId = browserVisitorId || `sdk-${config.workspaceKey}-${email}`;
@@ -236,6 +270,8 @@ export function trackForm(formData) {
  * Immediately flush all queued events to the server.
  */
 export function flush() {
+    if (!consentGranted)
+        return;
     if (queue.length === 0)
         return;
     const batch = queue.splice(0, queue.length);
@@ -371,6 +407,10 @@ function fireExperimentExposure(experimentId, variant, apiBase, workspaceKey) {
 export async function getVariant(experimentId, opts = {}) {
     if (!isBrowser)
         return "control";
+    // Consent gate — without consent we neither persist a visitor id nor fire
+    // an exposure, so everyone deterministically sees control until they opt in.
+    if (!consentGranted)
+        return "control";
     const apiBase = (opts.apiUrl ?? config?.apiUrl ?? DEFAULT_API_URL).replace(/\/$/, "");
     const workspaceKey = opts.workspaceKey ?? config?.workspaceKey;
     // 1. Preview mode — author previewing, not a real exposure.

package/dist/esm/management.js

@@ -28,6 +28,20 @@ export function createManagementClient(cfg) {
             }
             return res.json();
         },
+        /**
+         * "Is our growth real?" — per-goal cumulative lift (journeys + experiments)
+         * vs the do-nothing global holdout, with 95% CIs. Forward-only; goals still
+         * collecting are flagged `isDecisive: false`. (Is Our Growth Real, Phase 4.)
+         */
+        async getGrowthReality(opts) {
+            const days = opts?.days ?? "all";
+            const res = await fetch(`${root}/api/growth/reality?days=${days}`, { headers });
+            if (!res.ok) {
+                const text = await res.text().catch(() => "");
+                throw new Error(`Apex getGrowthReality failed (${res.status}): ${text}`);
+            }
+            return res.json();
+        },
         async assignVariant(experimentId, visitorId) {
             const cookie = [
                 `apex_vid=${encodeURIComponent(visitorId)}`,