@cxpinsight/react-native 0.2.0 → 0.4.0

package/CHANGELOG.md

@@ -0,0 +1,159 @@
+# Changelog
+
+## 0.4.0
+
+### ⚠️ New required dependency
+
+This release depends on **`@cxpinsight/survey-spec`**, which npm installs
+automatically. It holds the survey behaviour that must be identical whether a
+respondent answers on a link, a website or in your app — expression evaluation
+and variable resolution — so the three renderers cannot drift apart again.
+
+### Fixed
+- **`{{user.name}}` rendered the entire namespace object.** Text interpolation
+  fell back to the namespace when a dotted key missed, so
+  `"Hi {{user.name}}"` rendered `Hi {"plan":"pro","name":"Sam"}` — every field of
+  that namespace, on screen, to the respondent. Conditions had always resolved
+  the path correctly, so the same reference worked in a `showWhen` and not in
+  question text.
+- **`minLength` was ignored** unless expressed through the `rules[]` array, so a
+  length floor set in the builder was enforced on links and silently dropped
+  here.
+- **The builder's "Answer format" picker had no effect.** A text question with
+  `inputType: 'email'` got the default keyboard, no autofill and no validation.
+  Now maps to `keyboardType`, `textContentType`, `autoComplete` and
+  `secureTextEntry`.
+- Variable namespaces (`{{user.plan}}`, `{{session.*}}`) resolve consistently,
+  and an unparseable condition is ignored rather than hiding its question.
+
+### Added
+- **Automatic tap capture.** The babel plugin rewrites four component types in
+  your own source; anything inside a UI library was invisible, because it skips
+  `node_modules` by design. Taps are now captured wherever a touch component is
+  rendered from. `autoCaptureTaps: false` opts out.
+
+  **Expect event volume to rise** if you relied on the plugin alone — taps inside
+  UI-library components were previously not recorded at all.
+- **`sdk_diagnostic` events.** The SDK patches React Native internals for scroll,
+  tap and network capture. Those used to fail silently on an RN upgrade; a
+  failure is now reported as an event, so it appears in your dashboard rather
+  than only in a device log.
+
+### Removed
+- `TouchPatcher` — never called, and it patched `React.createElement`, which the
+  automatic JSX runtime bypasses. Not part of the public API.
+
+## Unreleased
+
+### Added
+- **Automatic tap capture.** The babel plugin rewrites four component types in
+  your own source, which leaves three gaps: `TouchableHighlight`,
+  `TouchableWithoutFeedback` and `Button` are not rewritten; anything inside
+  `node_modules` is skipped by design, so every tappable in a UI library was
+  invisible; and an app that skips the babel step got nothing. Taps are now
+  captured by patching the JSX factory, so a touch component is instrumented
+  wherever it is rendered from. `autoCaptureTaps: false` opts out.
+
+  Components the babel plugin already rewrote carry a marker and are skipped, so
+  a tap is never recorded twice.
+
+  **Expect event volume to rise** on apps that relied on the plugin alone —
+  taps inside UI-library components were previously not recorded at all.
+
+### Fixed
+- `showWhen` conditions now behave identically on web, links and mobile. An
+  expression that cannot be parsed is ignored rather than treated as false: a
+  hidden question is invisible in the response data, so a typo used to cause
+  silent data loss. Variable namespaces (`{{user.plan}}`, `{{session.*}}`) also
+  resolve consistently across all three renderers.
+
+## 0.3.0
+
+### Added
+- **Consent API** — `optIn()`, `optOut()`, `consent(granted)` and `getConsent()`,
+  with a `requireConsent` init flag. Same names and semantics as the web SDK, so
+  an app on both channels wires up one concept. With `requireConsent` on, events
+  are *held* in the queue while a decision is pending rather than dropped, so a
+  visitor who accepts a banner a few seconds in keeps the opening of their
+  session. Declining clears the buffer and stops recording and network capture.
+  The decision persists across launches.
+- `CHANGELOG.md`, shipped with the package.
+
+### Changed
+- **Network capture scrubs identifiers out of request paths.** Stripping the
+  query string was never enough: REST paths carry identity directly, so
+  `/customers/user@example.com/orders` merely moved the personal data one
+  delimiter left. Email, numeric-id, UUID, ObjectId and opaque-token segments now
+  collapse to `:id`.
+
+  This changes the shape of captured `api_call` data: routes that previously
+  appeared as thousands of distinct literal paths now aggregate as one. That is
+  the intent — per-user paths were never useful analytics — but it is visible in
+  the dashboard, so it is a deliberate break rather than a silent one.
+- Setup mode no longer writes to `console` outside debug builds.
+
+### Fixed
+- **Events tracked before `init()` resolved were dropped.** `init()` awaits a
+  network fetch and several AsyncStorage reads, so on a cold start there is a
+  real window in which an app's own startup tracking vanished with only a console
+  warning. Those calls are now held and replayed once initialization completes,
+  carrying their **original timestamp** so a replayed event lands where it
+  actually happened rather than bunching at the end of init. Bounded at 50.
+
+### Changed
+- **Replay screenshots are bandwidth-bounded.** The one-per-second capture
+  throttle is a rate limit, not a bandwidth limit, and screenshots are base64
+  JPEGs inside a JSON chunk — a busy screen could push multi-megabyte uploads
+  that the end user pays for on a metered connection. A single frame over ~400 KB
+  is now dropped rather than shrunk (quality belongs to the host app's capture
+  provider), and a ~8 MB per-recording budget applies, after which the timeline
+  continues *without* screenshots rather than the recording being abandoned.
+  Readable via `shotStats()`.
+- **The builder's "Answer format" picker now works.** A text question with
+  `inputType: 'email'` (or `tel`, `url`, `number`, `password`) was rendered with
+  the default keyboard, no autofill and no validation — the picker only worked on
+  the React renderer. Mobile now maps it to `keyboardType`, `textContentType`,
+  `autoComplete` and `secureTextEntry`, and forces single-line for a typed field.
+
+### Unchanged
+- `requireConsent` defaults to `false`. An app that does not set it behaves
+  exactly as before, and a test asserts that.
+
+## 0.2.0
+
+First published release.
+
+### Added
+- Compiled CommonJS + type declarations. Previously `main` and `types` pointed at
+  `src/index.ts`, so the package shipped raw TypeScript: consumers' Metro had to
+  transform it out of `node_modules`, their Jest needed a
+  `transformIgnorePatterns` entry, and the package's own type errors landed in
+  their build output.
+- README, LICENSE, and a stable deep-import path at
+  `@cxpinsight/react-native/instrumented/<Component>` for the Babel plugin and
+  Metro helper.
+
+### Fixed
+- **`app_foregrounded` never fired.** `lifecycle` imported a
+  `refreshNetworkState` that was never exported, so every foreground threw an
+  uncaught `TypeError` inside the `AppState` handler, before the event was
+  emitted.
+- **No dashboard setting reached the app.** The server SDK config was read one
+  level too shallow (`res.data` rather than `res.data.data`), so the recording
+  toggle, sample rate, session timeout and flush cadence all resolved to
+  `undefined`.
+- **Offline flushing spun.** A failed batch was re-queued and immediately
+  retried while the queue was over threshold — a tight loop against a dead
+  network. Now full-jitter exponential backoff, 1s base to a 5 min ceiling.
+- **The event backlog was unbounded.** `MAX_BATCH_SIZE` capped the request, not
+  the queue. Capped at 1000, oldest-first, with drops counted.
+- Failed replay chunks vanished silently — `sdkFetch` resolves with
+  `{ success: false }` rather than throwing, so the surrounding `catch` was
+  unreachable and the result was never checked.
+- A phantom `scanViewHierarchy` re-export (the real name is
+  `scanNativeViewHierarchy`).
+
+### Changed
+- Event-queue and session writes are coalesced instead of one AsyncStorage write
+  per event and per interaction. Backgrounding persists unconditionally, which is
+  how a session normally ends.

package/README.md

@@ -28,6 +28,8 @@ module.exports = function (api) {
 
 The plugin rewrites `TouchableOpacity`, `Pressable`, `TextInput` and `ScrollView` imports in **your** source only — never inside `node_modules`, and never inside the SDK itself.
 
+Taps on everything else — `TouchableHighlight`, `Button`, and any touchable inside a UI library such as React Native Paper or gluestack — are captured automatically by patching the JSX factory, so those need no imports changed either. Set `autoCaptureTaps: false` to rely on the plugin alone. A tap is never counted twice: components the plugin rewrote are marked and skipped.
+
 ### 2. Initialise at startup
 
 ```js
@@ -79,6 +81,24 @@ CXPinsight.identify({ id: user.id, email: user.email, name: user.name });
 
 Events recorded before `identify()` are re-attributed to the user automatically, so one visitor does not show up as two.
 
+### 5. Consent, if you show a banner
+
+```js
+CXPinsight.init({ /* ... */ requireConsent: true });
+
+// in your banner's handlers
+CXPinsight.optIn();          // or CXPinsight.consent(true)
+CXPinsight.optOut();         // or CXPinsight.consent(false)
+```
+
+With `requireConsent` on, nothing leaves the device until the visitor accepts.
+Events are *held* rather than dropped in the meantime, so someone who accepts a
+few seconds in keeps the opening of their session. Declining clears what was
+buffered and stops session recording and network capture. The decision persists,
+so the banner is not shown again on the next launch.
+
+Omit `requireConsent` and behaviour is unchanged — capture starts at `init()`.
+
 ## API
 
 | Method | Purpose |
@@ -91,6 +111,8 @@ Events recorded before `identify()` are re-attributed to the user automatically,
 | `showSurvey(surveyId)` | Present a survey immediately. |
 | `startRecording()` / `stopRecording()` | Session replay, for hosts that gate on their own consent UI. |
 | `enterSetupMode()` / `exitSetupMode()` | Visual element mapping — tap an element to make it trackable. |
+| `optIn()` / `optOut()` / `consent(bool)` | Grant or revoke consent from your banner. |
+| `getConsent()` | `'granted'`, `'denied'`, or `null` when undecided. |
 | `flush()` | Force-send queued events. |
 | `reset()` | Clear the stored identity, session and frequency caps. |
 
@@ -105,6 +127,8 @@ Events recorded before `identify()` are re-attributed to the user automatically,
 | `recordMaskInputs` | `true` | Never persist typed text. |
 | `captureScreen` | — | Screenshot provider; omit for a timeline-only replay. |
 | `captureNetwork` | `true` | Sanitised `api_call` events — method, host, path, status. Never bodies or headers. |
+| `requireConsent` | `false` | Hold all capture until `optIn()`. |
+| `autoCaptureTaps` | `true` | Capture taps on touch components the babel plugin cannot reach, including inside UI libraries. |
 | `sessionTimeout` | 30 min | Inactivity before a new session starts. |
 | `flushInterval` / `flushThreshold` | 30 s / 10 | Event batching. |
 | `theme` | OS | `'light'` / `'dark'` if your app has its own toggle. |
@@ -119,6 +143,7 @@ Values omitted here are filled from the application's dashboard settings at star
 - Network capture records method, host, path, status and duration only. Query strings are stripped; request and response bodies and headers are never read.
 - The SDK's own backend calls are excluded from network capture.
 - Events are queued locally and persist across launches, so nothing is lost offline.
+- With `requireConsent`, nothing is transmitted until the visitor accepts, and declining discards what was buffered.
 
 ## Requirements
 

package/lib/CXPinsight.d.ts

@@ -1,4 +1,5 @@
 import type { CXPinsightConfig, CXPinsightCallbacks, UserIdentity, FunnelStepOptions, ExperimentOptions, ConversionOptions } from './types';
+import { type ConsentState } from './core/consent';
 type SurveyPresenter = (surveyId: string) => void;
 type SetupPresenter = (show: boolean) => void;
 declare class CXPinsightSDK {
@@ -20,6 +21,9 @@ declare class CXPinsightSDK {
     private resumeEngagementClock;
     private getEngagementMs;
     private static errorHandlerInstalled;
+    private pending;
+    private static readonly MAX_PENDING;
+    private pendingDropped;
     /** Initialize the SDK. Call once at app startup. */
     init(config: CXPinsightConfig, callbacks?: CXPinsightCallbacks): Promise<void>;
     /**
@@ -32,6 +36,8 @@ declare class CXPinsightSDK {
     private applyServerSdkConfig;
     /** Roll the recording + engagement clock onto a freshly-started session. */
     private onSessionRollover;
+    /** Emit everything buffered before init() resolved, oldest first. */
+    private flushPending;
     /** Wire native signals → typed analytics events (shared taxonomy). */
     private startAutoEvents;
     /** Track a custom event */
@@ -41,7 +47,9 @@ declare class CXPinsightSDK {
      * gateway, or localhost on a physical device). Never throws or blocks init.
      */
     private verifyConnectivity;
-    track(eventName: string, data?: Record<string, unknown>, eventType?: string, teeToRecording?: boolean): void;
+    track(eventName: string, data?: Record<string, unknown>, eventType?: string, teeToRecording?: boolean, 
+    /** Internal: preserves the original time of a call buffered before init(). */
+    eventTimestamp?: string): void;
     /** Track a screen view (triggers remote page_view rules) */
     trackScreen(screenName: string, data?: Record<string, unknown>): void;
     /** Identify the current user */
@@ -73,6 +81,21 @@ declare class CXPinsightSDK {
     /** Stop mobile session recording and flush the final chunk. */
     stopRecording(): Promise<void>;
     /** Reset all SDK state (call on logout) */
+    /**
+     * Consent — the host drives these from its own banner. Same names and
+     * semantics as the web SDK's CXPinsight('optIn' | 'optOut' | 'consent').
+     *
+     * With requireConsent on, events accumulate in the queue while a decision is
+     * pending and are sent once granted, so accepting the banner a few seconds in
+     * keeps the opening of the session. Denial clears the buffer and stops capture.
+     */
+    optIn(): void;
+    optOut(): void;
+    consent(granted: boolean): void;
+    getConsent(): ConsentState;
+    isConsentRequired(): boolean;
+    /** Start or tear down capture when consent flips. */
+    private onConsentChange;
     reset(): Promise<void>;
     /** Manual flush for testing */
     flush(): Promise<void>;

package/lib/CXPinsight.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CXPinsight.d.ts","sourceRoot":"","sources":["../src/CXPinsight.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACnB,YAAY,EAGZ,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,SAAS,CAAC;AA+BjB,KAAK,eAAe,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;AAClD,KAAK,cAAc,GAAG,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;AAE9C,cAAM,aAAa;IACjB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAiC;IAC/C,OAAO,CAAC,SAAS,CAA2B;IAC5C,OAAO,CAAC,MAAM,CAAc;IAK5B,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,cAAc,CAA+B;IAErD,OAAO,CAAC,cAAc,CAA6B;IAEnD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAuB;IAG7C,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,gBAAgB,CAAS;IAEjC,OAAO,CAAC,oBAAoB;IAC5B,OAAO,CAAC,oBAAoB;IAC5B,OAAO,CAAC,qBAAqB;IAC7B,OAAO,CAAC,eAAe;IAEvB,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAS;IAE7C,oDAAoD;IAC9C,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,SAAS,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqHnF;IAED;;;;;;OAMG;YACW,oBAAoB;IAiDlC,4EAA4E;YAC9D,iBAAiB;IAqB/B,sEAAsE;IACtE,OAAO,CAAC,eAAe;IAmHvB,2BAA2B;IAC3B;;;;OAIG;YACW,kBAAkB;IA+BhC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,cAAc,UAAO,GAAG,IAAI,CAoExG;IAED,4DAA4D;IAC5D,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAmBpE;IAED,gCAAgC;IAC1B,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBhD;IAED,0BAA0B;IAC1B,eAAe,CACb,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,IAAI,CAqCN;IAED,qCAAqC;IACrC,eAAe,CACb,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,IAAI,CAmCN;IAED,+BAA+B;IAC/B,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAkDpE;IAID,uDAAuD;IACvD,cAAc,IAAI,IAAI,CAUrB;IAED,oCAAoC;IAC9B,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAKnC;IAED,+CAA+C;IAC/C,aAAa,IAAI,OAAO,CAEvB;IAED,2CAA2C;IAC3C,aAAa,+DAEZ;IAED,8DAA8D;IACxD,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAEnC;IAED,qCAAqC;IACrC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAMjC;IAED;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAapC;IAED,+DAA+D;IACzD,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAEnC;IAED,2CAA2C;IACrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CA0B3B;IAED,+BAA+B;IACzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3B;IAED,sEAAsE;IACtE,wBAAwB,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAEzD;IAED,gDAAgD;IAChD,0BAA0B,IAAI,IAAI,CAEjC;IAED,qEAAqE;IACrE,uBAAuB,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,CAEvD;IAED,+CAA+C;IAC/C,yBAAyB,IAAI,IAAI,CAEhC;IAED,8BAA8B;IAC9B,aAAa,IAAI,mBAAmB,CAEnC;IAED,2BAA2B;IAC3B,UAAU,IAAI,MAAM,CAEnB;IAED;;;;wEAIoE;IACpE,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAEjD;IAED,2BAA2B;IAC3B,UAAU,IAAI,gBAAgB,GAAG,IAAI,CAEpC;IAED;;mFAE+E;IAC/E,uBAAuB,IAAI;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,IAAI,CAOlG;IAED,qCAAqC;IACrC,cAAc,IAAI,OAAO,CAExB;IAED,OAAO,CAAC,GAAG;CAKZ;AAED,6BAA6B;AAC7B,eAAO,MAAM,UAAU,eAAsB,CAAC"}
+{"version":3,"file":"CXPinsight.d.ts","sourceRoot":"","sources":["../src/CXPinsight.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACnB,YAAY,EAGZ,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,SAAS,CAAC;AAiBjB,OAAO,EAAsH,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAgBvK,KAAK,eAAe,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;AAClD,KAAK,cAAc,GAAG,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;AAE9C,cAAM,aAAa;IACjB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAiC;IAC/C,OAAO,CAAC,SAAS,CAA2B;IAC5C,OAAO,CAAC,MAAM,CAAc;IAK5B,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,cAAc,CAA+B;IAErD,OAAO,CAAC,cAAc,CAA6B;IAEnD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAuB;IAG7C,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,gBAAgB,CAAS;IAEjC,OAAO,CAAC,oBAAoB;IAC5B,OAAO,CAAC,oBAAoB;IAC5B,OAAO,CAAC,qBAAqB;IAC7B,OAAO,CAAC,eAAe;IAEvB,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAS;IAY7C,OAAO,CAAC,OAAO,CAAwG;IACvH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAM;IACzC,OAAO,CAAC,cAAc,CAAK;IAE3B,oDAAoD;IAC9C,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,SAAS,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8HnF;IAED;;;;;;OAMG;YACW,oBAAoB;IAiDlC,4EAA4E;YAC9D,iBAAiB;IAqB/B,qEAAqE;IACrE,OAAO,CAAC,YAAY;IAgBpB,sEAAsE;IACtE,OAAO,CAAC,eAAe;IA8JvB,2BAA2B;IAC3B;;;;OAIG;YACW,kBAAkB;IA+BhC,KAAK,CACH,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,SAAS,CAAC,EAAE,MAAM,EAClB,cAAc,UAAO;IACrB,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,GACtB,IAAI,CAyEN;IAED,4DAA4D;IAC5D,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAmBpE;IAED,gCAAgC;IAC1B,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBhD;IAED,0BAA0B;IAC1B,eAAe,CACb,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,IAAI,CAqCN;IAED,qCAAqC;IACrC,eAAe,CACb,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,IAAI,CAmCN;IAED,+BAA+B;IAC/B,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAkDpE;IAID,uDAAuD;IACvD,cAAc,IAAI,IAAI,CAUrB;IAED,oCAAoC;IAC9B,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAKnC;IAED,+CAA+C;IAC/C,aAAa,IAAI,OAAO,CAEvB;IAED,2CAA2C;IAC3C,aAAa,+DAEZ;IAED,8DAA8D;IACxD,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAEnC;IAED,qCAAqC;IACrC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAMjC;IAED;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAapC;IAED,+DAA+D;IACzD,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAEnC;IAED,2CAA2C;IAC3C;;;;;;;OAOG;IACH,KAAK,IAAI,IAAI,CAAoB;IACjC,MAAM,IAAI,IAAI,CAAqB;IACnC,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAgD;IAC/E,UAAU,IAAI,YAAY,CAAyB;IACnD,iBAAiB,IAAI,OAAO,CAA8B;IAE1D,qDAAqD;YACvC,eAAe;IA+BvB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CA4B3B;IAED,+BAA+B;IACzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3B;IAED,sEAAsE;IACtE,wBAAwB,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAEzD;IAED,gDAAgD;IAChD,0BAA0B,IAAI,IAAI,CAEjC;IAED,qEAAqE;IACrE,uBAAuB,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,CAEvD;IAED,+CAA+C;IAC/C,yBAAyB,IAAI,IAAI,CAEhC;IAED,8BAA8B;IAC9B,aAAa,IAAI,mBAAmB,CAEnC;IAED,2BAA2B;IAC3B,UAAU,IAAI,MAAM,CAEnB;IAED;;;;wEAIoE;IACpE,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAEjD;IAED,2BAA2B;IAC3B,UAAU,IAAI,gBAAgB,GAAG,IAAI,CAEpC;IAED;;mFAE+E;IAC/E,uBAAuB,IAAI;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,IAAI,CAOlG;IAED,qCAAqC;IACrC,cAAc,IAAI,OAAO,CAExB;IAED,OAAO,CAAC,GAAG;CAKZ;AAED,6BAA6B;AAC7B,eAAO,MAAM,UAAU,eAAsB,CAAC"}

package/lib/CXPinsight.js

@@ -49,6 +49,8 @@ const interactionObserver_1 = require("./instrumented/interactionObserver");
 const lifecycle_1 = require("./core/lifecycle");
 const networkCapture_1 = require("./core/networkCapture");
 const scrollCapture_1 = require("./core/scrollCapture");
+const autoTapCapture_1 = require("./core/autoTapCapture");
+const consent_1 = require("./core/consent");
 // Canonical eventType per event name — keeps mobile events aligned with the shared
 // engagement taxonomy (docs/engagement-vocabulary-v1.md) instead of everything being
 // 'user_action'. Unknown names fall back to 'user_action'.
@@ -85,6 +87,18 @@ class CXPinsightSDK {
         this.engagementStartTs = 0;
         this.engagementAccumMs = 0;
         this.engagementActive = false;
+        // Calls made before init() resolves. init() awaits a network fetch and several
+        // AsyncStorage reads, so there is a real window — hundreds of milliseconds on a
+        // cold start — in which an app's own startup tracking is simply lost. These
+        // used to be dropped with a console warning; the web SDK has always buffered
+        // its pre-load calls through the CXPinsight.q command queue, and this is the
+        // mobile equivalent.
+        //
+        // The ORIGINAL timestamp is kept, so a replayed event lands where it actually
+        // happened rather than bunching at the end of init. Bounded, because an app
+        // that never calls init() must not grow this forever.
+        this.pending = [];
+        this.pendingDropped = 0;
     }
     startEngagementClock() { this.engagementStartTs = Date.now(); this.engagementAccumMs = 0; this.engagementActive = true; }
     pauseEngagementClock() { if (this.engagementActive) {
@@ -134,6 +148,9 @@ class CXPinsightSDK {
         const savedIdentity = await storage.get(types_1.STORAGE_KEYS.USER_IDENTITY);
         if (savedIdentity)
             this.userIdentity = savedIdentity;
+        // Restore any prior consent decision before a single capture path starts.
+        await (0, consent_1.initConsent)(config.requireConsent);
+        (0, consent_1.setConsentHandler)((granted) => { void this.onConsentChange(granted); });
         // Start session
         await (0, session_1.initSession)(config.sessionTimeout);
         // Start event queue
@@ -151,7 +168,7 @@ class CXPinsightSDK {
         // Start mobile session (timeline) recording when opted in via config. Hosts
         // that gate on their own consent UI should omit `record` and call
         // CXPinsight.startRecording() after consent instead.
-        if (config.record) {
+        if (config.record && (0, consent_1.mayCapture)()) {
             recorder.startRecording({
                 sessionId: (0, session_1.getSessionId)(),
                 userId: this.userId,
@@ -196,6 +213,10 @@ class CXPinsightSDK {
                 is_first_visit: isFirstVisit,
             }, 'navigation', false);
         }
+        // Replay anything the app tracked while init() was still resolving. After
+        // session_start, so the ordering a consumer sees matches what happened: the
+        // session begins, then the events that occurred during startup.
+        this.flushPending();
         // When an inactive session rolls over to a new one, start a fresh recording so a
         // session maps to one recording (prevents an ever-growing single recording).
         (0, session_1.setRolloverHandler)((newSessionId, prevSessionId) => {
@@ -281,6 +302,22 @@ class CXPinsightSDK {
         this.startEngagementClock(); // reset engagement time for the new session
         this.track('session_start', { sessionId: newSessionId }, 'navigation', false);
     }
+    /** Emit everything buffered before init() resolved, oldest first. */
+    flushPending() {
+        if (!this.pending.length && !this.pendingDropped)
+            return;
+        const held = this.pending;
+        this.pending = [];
+        this.log(`Replaying ${held.length} event(s) tracked before init completed`);
+        if (this.pendingDropped) {
+            console.warn(`[CXPinsight] ${this.pendingDropped} event(s) tracked before init() were dropped — ` +
+                `more than ${CXPinsightSDK.MAX_PENDING} arrived before initialization finished. ` +
+                `Call init() earlier in startup.`);
+            this.pendingDropped = 0;
+        }
+        for (const e of held)
+            this.track(e.name, e.data, e.type, e.tee, e.ts);
+    }
     /** Wire native signals → typed analytics events (shared taxonomy). */
     startAutoEvents() {
         // Scroll depth from the app's ORGANIC <ScrollView>s (and FlatList /
@@ -289,8 +326,32 @@ class CXPinsightSDK {
         // app-code restructuring the install snippet shouldn't demand. Without it
         // `percent_scrolled` was always 0, so scroll-depth definitions never fired.
         // Returns false if RN internals have moved; capture is simply off then.
-        if (!(0, scrollCapture_1.installScrollCapture)()) {
-            this.log('Scroll capture unavailable on this React Native version');
+        // Three patches reach into React Native internals: the ScrollView module
+        // getter, the JSX factory, and global fetch/XHR. Each is guarded and each
+        // degrades to a no-op if RN moves — which is the failure mode that goes
+        // unnoticed for weeks, because a customer losing scroll depth sees no error,
+        // just a chart that stopped moving.
+        //
+        // Report them as an EVENT, not only a console warning. A device log is not
+        // somewhere anyone looks; the dashboard is. `teeToRecording` is false — this
+        // is diagnostics about the SDK, not respondent behaviour.
+        const capture = {};
+        capture.scroll = (0, scrollCapture_1.installScrollCapture)();
+        if (!capture.scroll) {
+            console.warn('[CXPinsight] Scroll capture could not install on this React Native version. ' +
+                'Scroll-depth events and any definition that depends on percent_scrolled will not fire.');
+        }
+        // Taps on every touch component, wherever it is rendered from — including
+        // inside UI libraries, which the babel plugin cannot reach because it skips
+        // node_modules by design. Components the plugin already rewrote carry a
+        // marker and are skipped here, so a tap is never counted twice.
+        if (this.config?.autoCaptureTaps !== false) {
+            capture.tap = (0, autoTapCapture_1.installAutoTapCapture)(this.config?.debug);
+            if (!capture.tap) {
+                console.warn('[CXPinsight] Automatic tap capture could not install — no JSX factory was patchable. ' +
+                    'Taps are still captured for components the babel plugin rewrites; anything inside a ' +
+                    'UI library will not be. This usually means an unexpected React build.');
+            }
         }
         // Interactions → click / engagement / form events. tee=false: these are already
         // in the recording as interaction frames, so don't duplicate them there.
@@ -352,6 +413,19 @@ class CXPinsightSDK {
                 // value_change / blur → captured in the recording only, no analytics event
             }
         });
+        // One event carrying which internals patches took. Absent fields mean the
+        // capture was not requested; false means it was requested and FAILED, which
+        // is the case worth alerting on.
+        const failed = Object.keys(capture).filter((k) => capture[k] === false);
+        if (failed.length) {
+            this.track('sdk_diagnostic', {
+                issue: 'capture_patch_failed',
+                failed,
+                capture,
+                reactNativeVersion: (0, deviceInfo_1.getDeviceInfo)().osVersion,
+                sdk: 'react-native',
+            }, 'error', false);
+        }
         // App lifecycle → navigation events (app_opened / foregrounded / backgrounded).
         // Also pause/resume the engagement clock so time-on-app excludes backgrounded time.
         (0, lifecycle_1.startLifecycleTracking)((evt) => {
@@ -363,9 +437,9 @@ class CXPinsightSDK {
         });
         // Network capture → sanitized api_call events (method/host/path/status/duration).
         // On by default; set captureNetwork:false to disable.
-        if (this.config?.captureNetwork !== false) {
+        if (this.config?.captureNetwork !== false && (0, consent_1.mayCapture)()) {
             this.log('Network capture enabled');
-            (0, networkCapture_1.startNetworkCapture)(this.config.apiBase, (call) => {
+            capture.network = (0, networkCapture_1.startNetworkCapture)(this.config.apiBase, (call) => {
                 this.log('api_call captured:', call.method, call.path, call.status);
                 // Static eventName `api_call` (was `"${METHOD} ${PATH}"` — dynamic per URL,
                 // which exploded the observed-events catalog into thousands of unique
@@ -435,14 +509,22 @@ class CXPinsightSDK {
             console.warn(`[CXPinsight] Could not reach apiBase "${base}" (${msg}). It must be your CXPinsight gateway (usually :3000), reachable from the device — on a physical device use your machine's LAN IP, not localhost.`);
         }
     }
-    track(eventName, data, eventType, teeToRecording = true) {
+    track(eventName, data, eventType, teeToRecording = true, 
+    /** Internal: preserves the original time of a call buffered before init(). */
+    eventTimestamp) {
         if (!this.initialized || !this.config) {
-            console.warn('[CXPinsight] track() called but SDK not initialized — call ignored. Event:', eventName);
+            // Held, not dropped. Drained by flushPending() once init() completes.
+            if (this.pending.length < CXPinsightSDK.MAX_PENDING) {
+                this.pending.push({ name: eventName, data, type: eventType, tee: teeToRecording, ts: new Date().toISOString() });
+            }
+            else {
+                this.pendingDropped += 1;
+            }
             return;
         }
         (0, session_1.touchSession)();
         const device = (0, deviceInfo_1.getDeviceInfo)();
-        const now = new Date().toISOString();
+        const now = eventTimestamp ?? new Date().toISOString();
         // Explicit type wins; otherwise derive from the shared taxonomy by name.
         const resolvedType = eventType || EVENT_TYPE_BY_NAME[eventName] || 'user_action';
         // Identified user traits (from identify()) to stamp on EVERY event — including the
@@ -729,12 +811,57 @@ class CXPinsightSDK {
         await recorder.stopRecording();
     }
     /** Reset all SDK state (call on logout) */
+    /**
+     * Consent — the host drives these from its own banner. Same names and
+     * semantics as the web SDK's CXPinsight('optIn' | 'optOut' | 'consent').
+     *
+     * With requireConsent on, events accumulate in the queue while a decision is
+     * pending and are sent once granted, so accepting the banner a few seconds in
+     * keeps the opening of the session. Denial clears the buffer and stops capture.
+     */
+    optIn() { (0, consent_1.grantConsent)(); }
+    optOut() { (0, consent_1.revokeConsent)(); }
+    consent(granted) { granted ? (0, consent_1.grantConsent)() : (0, consent_1.revokeConsent)(); }
+    getConsent() { return (0, consent_1.getConsent)(); }
+    isConsentRequired() { return (0, consent_1.consentRequired)(); }
+    /** Start or tear down capture when consent flips. */
+    async onConsentChange(granted) {
+        this.log('Consent', granted ? 'granted' : 'revoked');
+        if (granted) {
+            // Send whatever accumulated while the banner was up.
+            await (0, eventQueue_1.flush)();
+            if (this.config?.record) {
+                recorder.startRecording({
+                    sessionId: (0, session_1.getSessionId)(),
+                    userId: this.userId,
+                    applicationId: this.config.applicationId,
+                    sampleRate: this.config.recordingSampleRate,
+                    maskInputs: this.config.recordMaskInputs,
+                    captureScreen: this.config.captureScreen,
+                }).catch((err) => this.log('Failed to start recording after consent:', err));
+            }
+            if (this.config && this.config.captureNetwork !== false) {
+                (0, networkCapture_1.startNetworkCapture)(this.config.apiBase, (call) => {
+                    this.track('api_call', {
+                        method: call.method, host: call.host, path: call.path,
+                        status: call.status, durationMs: call.durationMs, success: call.success,
+                    }, 'api_call', false);
+                });
+            }
+            return;
+        }
+        // Revoked: stop capturing and discard what was buffered rather than sending it.
+        (0, networkCapture_1.stopNetworkCapture)();
+        await recorder.stopRecording();
+        await (0, eventQueue_1.clearQueue)();
+    }
     async reset() {
         this.log('Resetting SDK state');
         if (this.autoEventUnsub) {
             this.autoEventUnsub();
             this.autoEventUnsub = null;
         }
+        (0, autoTapCapture_1.uninstallAutoTapCapture)();
         (0, session_1.setRolloverHandler)(null);
         (0, lifecycle_1.stopLifecycleTracking)();
         (0, networkCapture_1.stopNetworkCapture)();
@@ -747,6 +874,7 @@ class CXPinsightSDK {
         await (0, eventQueue_1.stopQueue)();
         await (0, session_1.destroySession)();
         await (0, frequencyCap_1.clearAllCaps)();
+        await (0, consent_1.clearConsent)();
         await (0, triggerEngine_1.clearTriggerState)();
         await (0, SetupController_1.clearSetupState)();
         await storage.multiRemove([
@@ -826,6 +954,7 @@ class CXPinsightSDK {
 }
 // The global JS error handler is installed once for the process lifetime.
 CXPinsightSDK.errorHandlerInstalled = false;
+CXPinsightSDK.MAX_PENDING = 50;
 /** Singleton SDK instance */
 exports.CXPinsight = new CXPinsightSDK();
 //# sourceMappingURL=CXPinsight.js.map