adservices/service-core/java/com/android/adservices/service/appsearch/AppSearchConsentWorker.java - platform/packages/modules/AdServices - Git at Google

 /*
  * Copyright (C) 2023 The Android Open Source Project
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
  *
  *      http://www.apache.org/licenses/LICENSE-2.0
  *
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */

 package com.android.adservices.service.appsearch;

 import android.annotation.NonNull;
 import android.content.Context;
 import android.content.Intent;
 import android.content.pm.PackageManager;
 import android.content.pm.ResolveInfo;
 import android.content.pm.ServiceInfo;
 import android.content.pm.Signature;
 import android.os.Binder;
 import android.os.Build;
 import android.os.UserHandle;

 import androidx.annotation.RequiresApi;
 import androidx.appsearch.app.AppSearchSession;
 import androidx.appsearch.app.GlobalSearchSession;
 import androidx.appsearch.app.PackageIdentifier;
 import androidx.appsearch.platformstorage.PlatformStorage;

 import com.android.adservices.AdServicesCommon;
 import com.android.adservices.LogUtil;
 import com.android.adservices.concurrency.AdServicesExecutors;
 import com.android.adservices.service.common.feature.PrivacySandboxFeatureType;
 import com.android.adservices.service.consent.ConsentConstants;
 import com.android.adservices.service.consent.ConsentManager;
 import com.android.internal.annotations.VisibleForTesting;

 import com.google.common.util.concurrent.ListenableFuture;

 import java.util.ArrayList;
 import java.util.List;
 import java.util.Objects;
 import java.util.concurrent.ExecutionException;
 import java.util.concurrent.Executor;
 import java.util.concurrent.TimeUnit;
 import java.util.concurrent.TimeoutException;
 import java.util.concurrent.locks.ReadWriteLock;
 import java.util.concurrent.locks.ReentrantReadWriteLock;
 import java.util.stream.Collectors;

 /**
  * This class provides an interface to read/write consent data to AppSearch. This is used as the
  * source of truth for S-. When a device upgrades from S- to T+, the consent is initialized from
  * AppSearch.
  */
 // TODO(b/269798827): Enable for R.
 @RequiresApi(Build.VERSION_CODES.S)
 public class AppSearchConsentWorker {
     // At the worker level, we ensure that writes do not conflict with any other writes/reads.
     private static final ReadWriteLock READ_WRITE_LOCK = new ReentrantReadWriteLock();

     // Timeout for AppSearch write query in milliseconds.
     private static final int TIMEOUT_MS = 2000;

     // This is used to convert the current package name belonging to AdExtServices to the
     // corresponding package name for AdServices.
     private static final String EXTSERVICES_PACKAGE_NAME_SUBSTRING = "ext.";
     private static final String CONSENT_DATABASE_NAME = "adservices_consent";
     private static final String APP_CONSENT_DATABASE_NAME = "adservices_app_consent";

     // Required for allowing AdServices apk access to read consent written by ExtServices module.
     private String mAdservicesPackageName;
     private static final String ADSERVICES_SHA =
             "686d5c450e00ebe600f979300a29234644eade42f24ede07a073f2bc6b94a3a2";
     private Context mContext;

     private ListenableFuture<AppSearchSession> mConsentSearchSession;
     private ListenableFuture<AppSearchSession> mAppConsentSearchSession;

     // When reading across APKs, a GlobalSearchSession is needed, hence we use it when reading.
     private ListenableFuture<GlobalSearchSession> mGlobalSearchSession;
     private Executor mExecutor = AdServicesExecutors.getBackgroundExecutor();

     private PackageIdentifier mPackageIdentifier;
     // There is a single user ID for a given process, so this class would not be instantiated
     // across two user IDs.
     private String mUid = getUserIdentifierFromBinderCallingUid();

     private AppSearchConsentWorker(@NonNull Context context) {
         Objects.requireNonNull(context);

         mContext = context;
         // We write with multiple schemas, so we need to initialize sessions per db.
         mConsentSearchSession =
                 PlatformStorage.createSearchSessionAsync(
                         new PlatformStorage.SearchContext.Builder(mContext, CONSENT_DATABASE_NAME)
                                 .build());
         mAppConsentSearchSession =
                 PlatformStorage.createSearchSessionAsync(
                         new PlatformStorage.SearchContext.Builder(
                                         mContext, APP_CONSENT_DATABASE_NAME)
                                 .build());

         // We use global session for reads since we may perform read on T+ AdServices package to
         // restore consent data post OTA.
         mGlobalSearchSession =
                 PlatformStorage.createGlobalSearchSessionAsync(
                         new PlatformStorage.GlobalSearchContext.Builder(mContext).build());

         // The package identifier of the AdServices package on T+ should always have access to read
         // data written by AdExtServices package on S-.
         mAdservicesPackageName = getAdServicesPackageName(mContext);
         mPackageIdentifier =
                 new PackageIdentifier(
                         mAdservicesPackageName, new Signature(ADSERVICES_SHA).toByteArray());
     }

     /** Get an instance of AppSearchConsentService. */
     public static AppSearchConsentWorker getInstance(@NonNull Context context) {
         Objects.requireNonNull(context);
         return new AppSearchConsentWorker(context);
     }

     /**
      * Get the consent for this user ID for this API type, as stored in AppSearch. Returns false if
      * the database doesn't exist in AppSearch.
      */
     public boolean getConsent(@NonNull String apiType) {
         Objects.requireNonNull(apiType);
         READ_WRITE_LOCK.readLock().lock();
         boolean result =
                 AppSearchConsentDao.readConsentData(mGlobalSearchSession, mExecutor, mUid, apiType);
         READ_WRITE_LOCK.readLock().unlock();
         return result;
     }

     /**
      * Sets the consent for this user ID for this API type in AppSearch. If we do not get
      * confirmation that the write was successful, then we throw an exception so that user does not
      * incorrectly think that the consent is updated.
      */
     public void setConsent(@NonNull String apiType, @NonNull Boolean consented) {
         Objects.requireNonNull(apiType);
         Objects.requireNonNull(consented);
         READ_WRITE_LOCK.writeLock().lock();
         // The ID of the row needs to unique per row. For a given user, we store multiple rows, one
         // per each apiType.
         AppSearchConsentDao dao =
                 new AppSearchConsentDao(
                         AppSearchConsentDao.getRowId(mUid, apiType),
                         mUid,
                         AppSearchConsentDao.NAMESPACE,
                         apiType,
                         consented.toString());
         try {
             dao.writeConsentData(mConsentSearchSession, mPackageIdentifier, mExecutor)
                     .get(TIMEOUT_MS, TimeUnit.MILLISECONDS);
         } catch (InterruptedException | TimeoutException | ExecutionException e) {
             LogUtil.e("Failed to write consent to AppSearch ", e);
             throw new RuntimeException(ConsentConstants.ERROR_MESSAGE_APPSEARCH_FAILURE);
         } finally {
             READ_WRITE_LOCK.writeLock().unlock();
         }
     }

     /**
      * Get the apps with consent as stored in AppSearch. If no such list was stored, empty list is
      * returned.
      */
     public List<String> getAppsWithConsent(@NonNull String consentType) {
         Objects.requireNonNull(consentType);
         READ_WRITE_LOCK.readLock().lock();
         AppSearchAppConsentDao dao =
                 AppSearchAppConsentDao.readConsentData(
                         mGlobalSearchSession, mExecutor, mUid, consentType);
         List result = (dao == null || dao.getApps() == null) ? List.of() : dao.getApps();
         READ_WRITE_LOCK.readLock().unlock();
         return result;
     }

     /** Clear app consent data for this user for the given type of consent. */
     public void clearAppsWithConsent(@NonNull String consentType) {
         Objects.requireNonNull(consentType);
         READ_WRITE_LOCK.writeLock().lock();
         try {
             AppSearchDao.deleteConsentData(
                             AppSearchAppConsentDao.class,
                             mAppConsentSearchSession,
                             mExecutor,
                             AppSearchAppConsentDao.getRowId(mUid, consentType),
                             AppSearchAppConsentDao.NAMESPACE)
                     .get(TIMEOUT_MS, TimeUnit.MILLISECONDS);
         } catch (InterruptedException | TimeoutException | ExecutionException e) {
             LogUtil.e("Failed to delete consent to AppSearch ", e);
             throw new RuntimeException(ConsentConstants.ERROR_MESSAGE_APPSEARCH_FAILURE);
         } finally {
             READ_WRITE_LOCK.writeLock().unlock();
         }
     }

     /** Adds an app to the list of apps with this consentType for this user. */
     public boolean addAppWithConsent(@NonNull String consentType, @NonNull String app) {
         Objects.requireNonNull(consentType);
         Objects.requireNonNull(app);
         READ_WRITE_LOCK.writeLock().lock();

         try {
             // Since AppSearch doesn't support PATCH api, we need to do a {read, modify, write}. See
             // b/274507022 for details.
             AppSearchAppConsentDao dao =
                     AppSearchAppConsentDao.readConsentData(
                             mGlobalSearchSession, mExecutor, mUid, consentType);
             // If there was no such row in the table, create one. Else, update existing one.
             if (dao == null) {
                 dao =
                         new AppSearchAppConsentDao(
                                 AppSearchAppConsentDao.getRowId(mUid, consentType),
                                 mUid,
                                 AppSearchAppConsentDao.NAMESPACE,
                                 consentType,
                                 List.of(app));
             } else {
                 // If this app was already present in the consent list, no need to rewrite.
                 if (dao.getApps() != null && dao.getApps().contains(app)) {
                     return true;
                 }
                 List<String> apps =
                         dao.getApps() != null ? new ArrayList<>(dao.getApps()) : new ArrayList<>();
                 apps.add(app);
                 dao.setApps(apps);
             }
             dao.writeConsentData(mAppConsentSearchSession, mPackageIdentifier, mExecutor)
                     .get(TIMEOUT_MS, TimeUnit.MILLISECONDS);
         } catch (InterruptedException | TimeoutException | ExecutionException e) {
             LogUtil.e("Failed to write consent to AppSearch ", e);
             return false;
         } finally {
             READ_WRITE_LOCK.writeLock().unlock();
         }
         return true;
     }

     /**
      * Removes an app from the list of apps with this consentType for this user. If we do not get
      * confirmation that the write was successful, then we throw an exception so that user does not
      * incorrectly think that the consent is updated.
      */
     public void removeAppWithConsent(@NonNull String consentType, @NonNull String app) {
         Objects.requireNonNull(consentType);
         Objects.requireNonNull(app);
         READ_WRITE_LOCK.readLock().lock();

         try {
             // Since AppSearch doesn't support PATCH api, we need to do a {read, modify, write}. See
             // b/274507022 for details.
             AppSearchAppConsentDao dao =
                     AppSearchAppConsentDao.readConsentData(
                             mGlobalSearchSession, mExecutor, mUid, consentType);
             // If there was no such row in the table, do nothing. Else, update existing one.
             if (dao == null || dao.getApps() == null || !dao.getApps().contains(app)) {
                 return;
             }
             dao.setApps(
                     dao.getApps().stream()
                             .filter(filterApp -> !filterApp.equals(app))
                             .collect(Collectors.toList()));
             dao.writeConsentData(mAppConsentSearchSession, mPackageIdentifier, mExecutor)
                     .get(TIMEOUT_MS, TimeUnit.MILLISECONDS);
         } catch (InterruptedException | TimeoutException | ExecutionException e) {
             LogUtil.e("Failed to write consent to AppSearch ", e);
             throw new RuntimeException(ConsentConstants.ERROR_MESSAGE_APPSEARCH_FAILURE);
         } finally {
             READ_WRITE_LOCK.readLock().unlock();
         }
     }

     /** Returns whether the beta UX notification was displayed to this user on this device. */
     public boolean wasNotificationDisplayed() {
         // TODO(b/263297331): Implement.
         return false;
     }

     /** Returns whether the GA UX notification was displayed to this user on this device. */
     public boolean wasGaUxNotificationDisplayed() {
         // TODO(b/263297331): Implement.
         return false;
     }

     /** Record having shown the beta UX notification to this user on this device. */
     public void recordNotificationDisplayed() {
         // TODO(b/263297331): Implement.
     }

     /** Record having shown the GA UX notification to this user on this device. */
     public void recordGaUxNotificationDisplayed() {
         // TODO(b/263297331): Implement.
     }

     /**
      * Returns the PrivacySandboxFeature recorded for this user on this device. Possible values are
      * UNKNOWN, FIRST_CONSENT and RECONSENT.
      */
     public PrivacySandboxFeatureType getPrivacySandboxFeature() {
         // TODO(b/263297331): Implement.
         return null;
     }

     /** Record the current privacy sandbox feature. */
     public void setCurrentPrivacySandboxFeature(PrivacySandboxFeatureType currentFeatureType) {
         // TODO(b/263297331): Implement.
     }

     /**
      * Returns information whether user interacted with consent manually.
      *
      * @return true if the user interacted with the consent manually, otherwise false.
      */
     public @ConsentManager.UserManualInteraction int getUserManualInteractionWithConsent() {
         // TODO(b/263297331): Implement.
         return ConsentManager.NO_MANUAL_INTERACTIONS_RECORDED;
     }

     /** Saves information to the storage that user interacted with consent manually. */
     public void recordUserManualInteractionWithConsent(
             @ConsentManager.UserManualInteraction int interaction) {
         // TODO(b/263297331): Implement.
     }

     /** Returns the User Identifier from the CallingUid. */
     @VisibleForTesting
     String getUserIdentifierFromBinderCallingUid() {
         return "" + UserHandle.getUserHandleForUid(Binder.getCallingUid()).getIdentifier();
     }

     /**
      * This method returns the package name of the AdServices APK from AdServices apex (T+). On an
      * S- device, it removes the "ext." substring from the package name.
      */
     @VisibleForTesting
     static String getAdServicesPackageName(Context context) {
         Intent serviceIntent = new Intent(AdServicesCommon.ACTION_TOPICS_SERVICE);
         List<ResolveInfo> resolveInfos =
                 context.getPackageManager()
                         .queryIntentServices(
                                 serviceIntent,
                                 PackageManager.GET_SERVICES
                                         | PackageManager.MATCH_SYSTEM_ONLY
                                         | PackageManager.MATCH_DIRECT_BOOT_AWARE
                                         | PackageManager.MATCH_DIRECT_BOOT_UNAWARE);
         final ServiceInfo serviceInfo =
                 AdServicesCommon.resolveAdServicesService(resolveInfos, serviceIntent.getAction());
         if (serviceInfo != null) {
             // Return the AdServices package name based on the current package name.
             String packageName = serviceInfo.packageName;
             if (packageName == null || packageName.isEmpty()) {
                 throw new RuntimeException(ConsentConstants.ERROR_MESSAGE_APPSEARCH_FAILURE);
             }
             return packageName.replace(EXTSERVICES_PACKAGE_NAME_SUBSTRING, "");
         }
         // If we don't know the AdServices package name, we can't do a write.
         throw new RuntimeException(ConsentConstants.ERROR_MESSAGE_APPSEARCH_FAILURE);
     }
 }
	/*
	* Copyright (C) 2023 The Android Open Source Project
	*
	* Licensed under the Apache License, Version 2.0 (the "License");
	* you may not use this file except in compliance with the License.
	* You may obtain a copy of the License at
	*
	* http://www.apache.org/licenses/LICENSE-2.0
	*
	* Unless required by applicable law or agreed to in writing, software
	* distributed under the License is distributed on an "AS IS" BASIS,
	* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	* See the License for the specific language governing permissions and
	* limitations under the License.
	*/

	package com.android.adservices.service.appsearch;

	import android.annotation.NonNull;
	import android.content.Context;
	import android.content.Intent;
	import android.content.pm.PackageManager;
	import android.content.pm.ResolveInfo;
	import android.content.pm.ServiceInfo;
	import android.content.pm.Signature;
	import android.os.Binder;
	import android.os.Build;
	import android.os.UserHandle;

	import androidx.annotation.RequiresApi;
	import androidx.appsearch.app.AppSearchSession;
	import androidx.appsearch.app.GlobalSearchSession;
	import androidx.appsearch.app.PackageIdentifier;
	import androidx.appsearch.platformstorage.PlatformStorage;

	import com.android.adservices.AdServicesCommon;
	import com.android.adservices.LogUtil;
	import com.android.adservices.concurrency.AdServicesExecutors;
	import com.android.adservices.service.common.feature.PrivacySandboxFeatureType;
	import com.android.adservices.service.consent.ConsentConstants;
	import com.android.adservices.service.consent.ConsentManager;
	import com.android.internal.annotations.VisibleForTesting;

	import com.google.common.util.concurrent.ListenableFuture;

	import java.util.ArrayList;
	import java.util.List;
	import java.util.Objects;
	import java.util.concurrent.ExecutionException;
	import java.util.concurrent.Executor;
	import java.util.concurrent.TimeUnit;
	import java.util.concurrent.TimeoutException;
	import java.util.concurrent.locks.ReadWriteLock;
	import java.util.concurrent.locks.ReentrantReadWriteLock;
	import java.util.stream.Collectors;

	/**
	* This class provides an interface to read/write consent data to AppSearch. This is used as the
	* source of truth for S-. When a device upgrades from S- to T+, the consent is initialized from
	* AppSearch.
	*/
	// TODO(b/269798827): Enable for R.
	@RequiresApi(Build.VERSION_CODES.S)
	public class AppSearchConsentWorker {
	// At the worker level, we ensure that writes do not conflict with any other writes/reads.
	private static final ReadWriteLock READ_WRITE_LOCK = new ReentrantReadWriteLock();

	// Timeout for AppSearch write query in milliseconds.
	private static final int TIMEOUT_MS = 2000;

	// This is used to convert the current package name belonging to AdExtServices to the
	// corresponding package name for AdServices.
	private static final String EXTSERVICES_PACKAGE_NAME_SUBSTRING = "ext.";
	private static final String CONSENT_DATABASE_NAME = "adservices_consent";
	private static final String APP_CONSENT_DATABASE_NAME = "adservices_app_consent";

	// Required for allowing AdServices apk access to read consent written by ExtServices module.
	private String mAdservicesPackageName;
	private static final String ADSERVICES_SHA =
	"686d5c450e00ebe600f979300a29234644eade42f24ede07a073f2bc6b94a3a2";
	private Context mContext;

	private ListenableFuture<AppSearchSession> mConsentSearchSession;
	private ListenableFuture<AppSearchSession> mAppConsentSearchSession;

	// When reading across APKs, a GlobalSearchSession is needed, hence we use it when reading.
	private ListenableFuture<GlobalSearchSession> mGlobalSearchSession;
	private Executor mExecutor = AdServicesExecutors.getBackgroundExecutor();

	private PackageIdentifier mPackageIdentifier;
	// There is a single user ID for a given process, so this class would not be instantiated
	// across two user IDs.
	private String mUid = getUserIdentifierFromBinderCallingUid();

	private AppSearchConsentWorker(@NonNull Context context) {
	Objects.requireNonNull(context);

	mContext = context;
	// We write with multiple schemas, so we need to initialize sessions per db.
	mConsentSearchSession =
	PlatformStorage.createSearchSessionAsync(
	new PlatformStorage.SearchContext.Builder(mContext, CONSENT_DATABASE_NAME)
	.build());
	mAppConsentSearchSession =
	PlatformStorage.createSearchSessionAsync(
	new PlatformStorage.SearchContext.Builder(
	mContext, APP_CONSENT_DATABASE_NAME)
	.build());

	// We use global session for reads since we may perform read on T+ AdServices package to
	// restore consent data post OTA.
	mGlobalSearchSession =
	PlatformStorage.createGlobalSearchSessionAsync(
	new PlatformStorage.GlobalSearchContext.Builder(mContext).build());

	// The package identifier of the AdServices package on T+ should always have access to read
	// data written by AdExtServices package on S-.
	mAdservicesPackageName = getAdServicesPackageName(mContext);
	mPackageIdentifier =
	new PackageIdentifier(
	mAdservicesPackageName, new Signature(ADSERVICES_SHA).toByteArray());
	}

	/** Get an instance of AppSearchConsentService. */
	public static AppSearchConsentWorker getInstance(@NonNull Context context) {
	Objects.requireNonNull(context);
	return new AppSearchConsentWorker(context);
	}

	/**
	* Get the consent for this user ID for this API type, as stored in AppSearch. Returns false if
	* the database doesn't exist in AppSearch.
	*/
	public boolean getConsent(@NonNull String apiType) {
	Objects.requireNonNull(apiType);
	READ_WRITE_LOCK.readLock().lock();
	boolean result =
	AppSearchConsentDao.readConsentData(mGlobalSearchSession, mExecutor, mUid, apiType);
	READ_WRITE_LOCK.readLock().unlock();
	return result;
	}

	/**
	* Sets the consent for this user ID for this API type in AppSearch. If we do not get
	* confirmation that the write was successful, then we throw an exception so that user does not
	* incorrectly think that the consent is updated.
	*/
	public void setConsent(@NonNull String apiType, @NonNull Boolean consented) {
	Objects.requireNonNull(apiType);
	Objects.requireNonNull(consented);
	READ_WRITE_LOCK.writeLock().lock();
	// The ID of the row needs to unique per row. For a given user, we store multiple rows, one
	// per each apiType.
	AppSearchConsentDao dao =
	new AppSearchConsentDao(
	AppSearchConsentDao.getRowId(mUid, apiType),
	mUid,
	AppSearchConsentDao.NAMESPACE,
	apiType,
	consented.toString());
	try {
	dao.writeConsentData(mConsentSearchSession, mPackageIdentifier, mExecutor)
	.get(TIMEOUT_MS, TimeUnit.MILLISECONDS);
	} catch (InterruptedException \| TimeoutException \| ExecutionException e) {
	LogUtil.e("Failed to write consent to AppSearch ", e);
	throw new RuntimeException(ConsentConstants.ERROR_MESSAGE_APPSEARCH_FAILURE);
	} finally {
	READ_WRITE_LOCK.writeLock().unlock();
	}
	}

	/**
	* Get the apps with consent as stored in AppSearch. If no such list was stored, empty list is
	* returned.
	*/
	public List<String> getAppsWithConsent(@NonNull String consentType) {
	Objects.requireNonNull(consentType);
	READ_WRITE_LOCK.readLock().lock();
	AppSearchAppConsentDao dao =
	AppSearchAppConsentDao.readConsentData(
	mGlobalSearchSession, mExecutor, mUid, consentType);
	List result = (dao == null \|\| dao.getApps() == null) ? List.of() : dao.getApps();
	READ_WRITE_LOCK.readLock().unlock();
	return result;
	}

	/** Clear app consent data for this user for the given type of consent. */
	public void clearAppsWithConsent(@NonNull String consentType) {
	Objects.requireNonNull(consentType);
	READ_WRITE_LOCK.writeLock().lock();
	try {
	AppSearchDao.deleteConsentData(
	AppSearchAppConsentDao.class,
	mAppConsentSearchSession,
	mExecutor,
	AppSearchAppConsentDao.getRowId(mUid, consentType),
	AppSearchAppConsentDao.NAMESPACE)
	.get(TIMEOUT_MS, TimeUnit.MILLISECONDS);
	} catch (InterruptedException \| TimeoutException \| ExecutionException e) {
	LogUtil.e("Failed to delete consent to AppSearch ", e);
	throw new RuntimeException(ConsentConstants.ERROR_MESSAGE_APPSEARCH_FAILURE);
	} finally {
	READ_WRITE_LOCK.writeLock().unlock();
	}
	}

	/** Adds an app to the list of apps with this consentType for this user. */
	public boolean addAppWithConsent(@NonNull String consentType, @NonNull String app) {
	Objects.requireNonNull(consentType);
	Objects.requireNonNull(app);
	READ_WRITE_LOCK.writeLock().lock();

	try {
	// Since AppSearch doesn't support PATCH api, we need to do a {read, modify, write}. See
	// b/274507022 for details.
	AppSearchAppConsentDao dao =
	AppSearchAppConsentDao.readConsentData(
	mGlobalSearchSession, mExecutor, mUid, consentType);
	// If there was no such row in the table, create one. Else, update existing one.
	if (dao == null) {
	dao =
	new AppSearchAppConsentDao(
	AppSearchAppConsentDao.getRowId(mUid, consentType),
	mUid,
	AppSearchAppConsentDao.NAMESPACE,
	consentType,
	List.of(app));
	} else {
	// If this app was already present in the consent list, no need to rewrite.
	if (dao.getApps() != null && dao.getApps().contains(app)) {
	return true;
	}
	List<String> apps =
	dao.getApps() != null ? new ArrayList<>(dao.getApps()) : new ArrayList<>();
	apps.add(app);
	dao.setApps(apps);
	}
	dao.writeConsentData(mAppConsentSearchSession, mPackageIdentifier, mExecutor)
	.get(TIMEOUT_MS, TimeUnit.MILLISECONDS);
	} catch (InterruptedException \| TimeoutException \| ExecutionException e) {
	LogUtil.e("Failed to write consent to AppSearch ", e);
	return false;
	} finally {
	READ_WRITE_LOCK.writeLock().unlock();
	}
	return true;
	}

	/**
	* Removes an app from the list of apps with this consentType for this user. If we do not get
	* confirmation that the write was successful, then we throw an exception so that user does not
	* incorrectly think that the consent is updated.
	*/
	public void removeAppWithConsent(@NonNull String consentType, @NonNull String app) {
	Objects.requireNonNull(consentType);
	Objects.requireNonNull(app);
	READ_WRITE_LOCK.readLock().lock();

	try {
	// Since AppSearch doesn't support PATCH api, we need to do a {read, modify, write}. See
	// b/274507022 for details.
	AppSearchAppConsentDao dao =
	AppSearchAppConsentDao.readConsentData(
	mGlobalSearchSession, mExecutor, mUid, consentType);
	// If there was no such row in the table, do nothing. Else, update existing one.
	if (dao == null \|\| dao.getApps() == null \|\| !dao.getApps().contains(app)) {
	return;
	}
	dao.setApps(
	dao.getApps().stream()
	.filter(filterApp -> !filterApp.equals(app))
	.collect(Collectors.toList()));
	dao.writeConsentData(mAppConsentSearchSession, mPackageIdentifier, mExecutor)
	.get(TIMEOUT_MS, TimeUnit.MILLISECONDS);
	} catch (InterruptedException \| TimeoutException \| ExecutionException e) {
	LogUtil.e("Failed to write consent to AppSearch ", e);
	throw new RuntimeException(ConsentConstants.ERROR_MESSAGE_APPSEARCH_FAILURE);
	} finally {
	READ_WRITE_LOCK.readLock().unlock();
	}
	}

	/** Returns whether the beta UX notification was displayed to this user on this device. */
	public boolean wasNotificationDisplayed() {
	// TODO(b/263297331): Implement.
	return false;
	}

	/** Returns whether the GA UX notification was displayed to this user on this device. */
	public boolean wasGaUxNotificationDisplayed() {
	// TODO(b/263297331): Implement.
	return false;
	}

	/** Record having shown the beta UX notification to this user on this device. */
	public void recordNotificationDisplayed() {
	// TODO(b/263297331): Implement.
	}

	/** Record having shown the GA UX notification to this user on this device. */
	public void recordGaUxNotificationDisplayed() {
	// TODO(b/263297331): Implement.
	}

	/**
	* Returns the PrivacySandboxFeature recorded for this user on this device. Possible values are
	* UNKNOWN, FIRST_CONSENT and RECONSENT.
	*/
	public PrivacySandboxFeatureType getPrivacySandboxFeature() {
	// TODO(b/263297331): Implement.
	return null;
	}

	/** Record the current privacy sandbox feature. */
	public void setCurrentPrivacySandboxFeature(PrivacySandboxFeatureType currentFeatureType) {
	// TODO(b/263297331): Implement.
	}

	/**
	* Returns information whether user interacted with consent manually.
	*
	* @return true if the user interacted with the consent manually, otherwise false.
	*/
	public @ConsentManager.UserManualInteraction int getUserManualInteractionWithConsent() {
	// TODO(b/263297331): Implement.
	return ConsentManager.NO_MANUAL_INTERACTIONS_RECORDED;
	}

	/** Saves information to the storage that user interacted with consent manually. */
	public void recordUserManualInteractionWithConsent(
	@ConsentManager.UserManualInteraction int interaction) {
	// TODO(b/263297331): Implement.
	}

	/** Returns the User Identifier from the CallingUid. */
	@VisibleForTesting
	String getUserIdentifierFromBinderCallingUid() {
	return "" + UserHandle.getUserHandleForUid(Binder.getCallingUid()).getIdentifier();
	}

	/**
	* This method returns the package name of the AdServices APK from AdServices apex (T+). On an
	* S- device, it removes the "ext." substring from the package name.
	*/
	@VisibleForTesting
	static String getAdServicesPackageName(Context context) {
	Intent serviceIntent = new Intent(AdServicesCommon.ACTION_TOPICS_SERVICE);
	List<ResolveInfo> resolveInfos =
	context.getPackageManager()
	.queryIntentServices(
	serviceIntent,
	PackageManager.GET_SERVICES
	\| PackageManager.MATCH_SYSTEM_ONLY
	\| PackageManager.MATCH_DIRECT_BOOT_AWARE
	\| PackageManager.MATCH_DIRECT_BOOT_UNAWARE);
	final ServiceInfo serviceInfo =
	AdServicesCommon.resolveAdServicesService(resolveInfos, serviceIntent.getAction());
	if (serviceInfo != null) {
	// Return the AdServices package name based on the current package name.
	String packageName = serviceInfo.packageName;
	if (packageName == null \|\| packageName.isEmpty()) {
	throw new RuntimeException(ConsentConstants.ERROR_MESSAGE_APPSEARCH_FAILURE);
	}
	return packageName.replace(EXTSERVICES_PACKAGE_NAME_SUBSTRING, "");
	}
	// If we don't know the AdServices package name, we can't do a write.
	throw new RuntimeException(ConsentConstants.ERROR_MESSAGE_APPSEARCH_FAILURE);
	}
	}