Collect feedback from your iOS app

import Foundation

/// Sends feedback to feedback.latentedge.io from a native app.
///
/// The ingest key (ik_...) is publishable by design: it can only submit
/// feedback to your site and can never read anything, so a plain string in
/// your app is fine. Keychain or obfuscation adds nothing here — the real
/// protections (scoping, rate limits, rotation) live on the server.
public struct FeedbackClient {
    public enum FeedbackType: String { case feedback, bug, featureRequest = "feature_request" }

    public enum FeedbackError: Error { case badResponse, rejected(status: Int) }

    let ingestKey: String
    let baseURL: URL

    public init(ingestKey: String,
                baseURL: URL = URL(string: "https://feedback.latentedge.io/api/v1")!) {
        self.ingestKey = ingestKey
        self.baseURL = baseURL
    }

    /// Submits one feedback item. Fetches a single-use challenge, waits the
    /// required human-speed dwell, then posts the feedback.
    public func submit(_ message: String,
                       type: FeedbackType = .feedback,
                       rating: Int? = nil,
                       source: String? = nil) async throws {
        let challenge = try await fetchChallenge()
        // The server rejects submissions that arrive under 1s after the
        // challenge was issued; 1.2s leaves margin for clock skew.
        try await Task.sleep(nanoseconds: 1_200_000_000)

        var request = URLRequest(url: baseURL.appendingPathComponent("widget/feedback"))
        request.httpMethod = "POST"
        request.setValue("application/json", forHTTPHeaderField: "Content-Type")
        request.setValue(ingestKey, forHTTPHeaderField: "X-API-Key")
        var body: [String: Any] = [
            "type": type.rawValue,
            "message": message,
            "challengeToken": challenge,
        ]
        if let rating { body["rating"] = rating }
        if let source { body["source"] = source }
        request.httpBody = try JSONSerialization.data(withJSONObject: body)

        let (_, response) = try await URLSession.shared.data(for: request)
        guard let http = response as? HTTPURLResponse else { throw FeedbackError.badResponse }
        guard http.statusCode == 201 else { throw FeedbackError.rejected(status: http.statusCode) }
    }

    private func fetchChallenge() async throws -> String {
        var components = URLComponents(
            url: baseURL.appendingPathComponent("widget/challenge"),
            resolvingAgainstBaseURL: false
        )!
        components.queryItems = [URLQueryItem(name: "key", value: ingestKey)]
        let (data, _) = try await URLSession.shared.data(from: components.url!)
        let json = try JSONSerialization.jsonObject(with: data) as? [String: Any]
        guard let payload = json?["data"] as? [String: Any],
              let challenge = payload["challenge"] as? String else {
            throw FeedbackError.badResponse
        }
        return challenge
    }
}

let feedback = FeedbackClient(ingestKey: "ik_your_key_here")

// From any async context — a settings screen, a shake gesture, a form sheet:
try await feedback.submit(
    "The export button crashes on iPad",
    type: .bug,
    rating: 4,
    source: "ExportView"   // shows up like a page URL in your dashboard
)

GET https://feedback.latentedge.io/api/v1/widget/config?key=ik_your_key_here

{ "success": true, "data": { "enabledTypes": ["feedback", "feature_request", "bug"],
                             "showRating": true } }