@cosmicdrift/kumiko-bundled-features 0.239.0 → 0.241.0

package/src/user-data-rights/web/__tests__/privacy-center-screen.test.tsx

@@ -1,8 +1,10 @@
-// Render-Test gegen echte i18n-Bundles (fängt fehlende Keys — der Screen
-// darf nie rohe "userDataRights.privacyCenter.*"-Keys zeigen) plus QN-Wiring
-// (die dispatchten Query-/Handler-Namen) und die status-getriebenen Branches.
-// Provider-Wrapper lokal (Dependency-Richtung renderer-web → bundled-features
-// verbietet test-utils-Import).
+// Render test against real i18n bundles (catches missing keys — the Section
+// must never show raw "userDataRights.privacyCenter.*" keys) plus QN wiring
+// (the dispatched query/handler names). Restriction/deletion (status-driven
+// branches) moved to declarative fields/actions with fw#2312 (feature.ts,
+// booted in inspector-screens.boot.test.ts) — only Export (ExportSection) is
+// still a React component. Provider wrapper is local (the renderer-web →
+// bundled-features dependency direction forbids importing test-utils).
 
 import { describe, expect, spyOn, test } from "bun:test";
 import { createStore, type Dispatcher, type DispatcherStatus } from "@cosmicdrift/kumiko-headless";
@@ -28,7 +30,7 @@ import {
 } from "../../constants";
 import { EXPORT_JOB_STATUS as SCHEMA_EXPORT_JOB_STATUS } from "../../schema/export-job";
 import { defaultTranslations } from "../i18n";
-import { formatDate, PrivacyCenterScreen } from "../privacy-center-screen";
+import { ExportSection, formatDate } from "../privacy-center-screen";
 
 const stubLiveEvents: LiveEventSubscriber = () => () => {};
 const stubTokens = {
@@ -40,7 +42,6 @@ const stubTokens = {
 const stubResolver = createStaticLocaleResolver();
 
 type QueryResponses = {
-  readonly me: Record<string, unknown>;
   readonly exportStatus?: unknown;
   readonly auditLog?: unknown;
   /** Signed URL returned by downloadByJob — drives postWithDownload navigation. */
@@ -55,7 +56,6 @@ function makeDispatcher(
   const statusStore = createStore<DispatcherStatus>("online");
   const query = (async (type: string, payload: unknown) => {
     queries.push({ type, payload });
-    if (type === USER_ME_QUERY) return { isSuccess: true, data: responses.me };
     if (type === UserDataRightsQueries.exportStatus) {
       return { isSuccess: true, data: responses.exportStatus ?? { hasJob: false } };
     }
@@ -85,10 +85,7 @@ function makeDispatcher(
   } as unknown as Dispatcher; // @cast-boundary test-stub
 }
 
-function renderCenter(
-  responses: QueryResponses,
-  opts: { readonly showDeletion?: boolean } = {},
-): {
+function renderExportSection(responses: QueryResponses): {
   view: ReturnType<typeof render>;
   writes: Array<{ type: string; payload: unknown }>;
   queries: Array<{ type: string; payload: unknown }>;
@@ -111,22 +108,21 @@ function renderCenter(
       </LocaleProvider>
     </TokensProvider>
   );
-  const view = render(<PrivacyCenterScreen showDeletion={opts.showDeletion ?? true} />, {
-    wrapper,
-  });
+  // ExportSection renders no Section/title of its own in production (the
+  // renderer's ExtensionSectionMount supplies that) — a plain testId wrapper
+  // here is test-only scaffolding to detect "mounted".
+  const view = render(
+    <div data-testid="export-section-root">
+      <ExportSection />
+    </div>,
+    { wrapper },
+  );
   return { view, writes, queries };
 }
 
-const activeMe = {
-  id: "00000000-0000-4000-8000-000000000042",
-  email: "marc@example.com",
-  status: "active",
-  gracePeriodEnd: null,
-};
-
 async function waitForMount(view: ReturnType<typeof render>): Promise<void> {
   await waitFor(() => {
-    if (view.queryByTestId("privacy-center-screen") === null) {
+    if (view.queryByTestId("export-section-root") === null) {
       throw new Error("not mounted yet");
     }
   });
@@ -151,22 +147,16 @@ async function waitForDownloadReady(view: ReturnType<typeof render>): Promise<vo
 // plus accumulated global DOM/event state across ~30 prior DOM test files corrupts
 // these in-flight renders (#457-class). A fresh process has no such accumulation.
 // The QN-Drift-Pins + formatDate describes below are pure-logic and CI-stable.
-describe("PrivacyCenterScreen", () => {
-  test("aktiver User: Export/Einschränken/Löschen-Sektionen, Texte übersetzt (keine rohen Keys)", async () => {
-    const { view } = renderCenter({ me: activeMe });
+describe("ExportSection", () => {
+  test("idle: Intro + Request-Button, Texte übersetzt (keine rohen Keys)", async () => {
+    const { view } = renderExportSection({});
     await waitForMount(view);
-    expect(view.getByTestId("privacy-export")).toBeTruthy();
-    expect(view.getByTestId("privacy-restriction")).toBeTruthy();
-    expect(view.getByTestId("privacy-deletion")).toBeTruthy();
     expect(view.getByTestId("privacy-export-request")).toBeTruthy();
-    expect(view.getByTestId("privacy-restriction-restrict")).toBeTruthy();
-    expect(view.getByTestId("privacy-deletion-delete")).toBeTruthy();
     expect(view.container.textContent).not.toContain("userDataRights.privacyCenter");
   });
 
   test("export done: Download-Button + Verfügbar-bis-Datum", async () => {
-    const { view } = renderCenter({
-      me: activeMe,
+    const { view } = renderExportSection({
       exportStatus: {
         hasJob: true,
         job: { id: "job-123", status: EXPORT_JOB_STATUS.Done, expiresAt: "2026-07-11T00:00:00Z" },
@@ -180,8 +170,7 @@ describe("PrivacyCenterScreen", () => {
   });
 
   test("export failed: Fehler-Banner + Re-Request möglich", async () => {
-    const { view } = renderCenter({
-      me: activeMe,
+    const { view } = renderExportSection({
       exportStatus: { hasJob: true, job: { id: "job-9", status: EXPORT_JOB_STATUS.Failed } },
     });
     await waitForTestId(view, "privacy-export-failed");
@@ -190,8 +179,7 @@ describe("PrivacyCenterScreen", () => {
   });
 
   test("export pending: in-progress Banner, kein Request-Button", async () => {
-    const { view } = renderCenter({
-      me: activeMe,
+    const { view } = renderExportSection({
       exportStatus: { hasJob: true, job: { id: "job-1", status: EXPORT_JOB_STATUS.Pending } },
     });
     await waitForTestId(view, "privacy-export-pending");
@@ -199,28 +187,8 @@ describe("PrivacyCenterScreen", () => {
     expect(view.queryByTestId("privacy-export-request")).toBeNull();
   });
 
-  test("deletionRequested: Frist-Banner + Abbrechen statt Lösch-Button", async () => {
-    const { view } = renderCenter({
-      me: { ...activeMe, status: "deletionRequested", gracePeriodEnd: "2026-07-11T00:00:00Z" },
-    });
-    await waitForMount(view);
-    const banner = view.getByTestId("privacy-deletion-requested");
-    expect(banner.textContent).toContain("2026-07-11");
-    expect(banner.textContent).not.toContain("{date}");
-    expect(banner.textContent).not.toContain("T00:00");
-    expect(view.queryByTestId("privacy-deletion-delete")).toBeNull();
-    expect(view.getByTestId("privacy-deletion-cancel")).toBeTruthy();
-  });
-
-  test("restricted: Info-Banner statt Einschränken-Button", async () => {
-    const { view } = renderCenter({ me: { ...activeMe, status: "restricted" } });
-    await waitForMount(view);
-    expect(view.getByTestId("privacy-restriction-active")).toBeTruthy();
-    expect(view.queryByTestId("privacy-restriction-restrict")).toBeNull();
-  });
-
   test("Export-Request dispatcht den korrekten Handler-QN", async () => {
-    const { view, writes } = renderCenter({ me: activeMe });
+    const { view, writes } = renderExportSection({});
     await waitForMount(view);
     fireEvent.click(view.getByTestId("privacy-export-request"));
     await waitFor(() => {
@@ -229,16 +197,8 @@ describe("PrivacyCenterScreen", () => {
     expect(writes[0]?.type).toBe(UserDataRightsHandlers.requestExport);
   });
 
-  test("showDeletion=false: keine Lösch-Sektion", async () => {
-    const { view } = renderCenter({ me: activeMe }, { showDeletion: false });
-    await waitForMount(view);
-    expect(view.queryByTestId("privacy-deletion")).toBeNull();
-    expect(view.queryByTestId("privacy-deletion-delete")).toBeNull();
-  });
-
   test("Download-Button dispatcht downloadByJob mit der korrekten jobId", async () => {
-    const { view, queries } = renderCenter({
-      me: activeMe,
+    const { view, queries } = renderExportSection({
       exportStatus: {
         hasJob: true,
         job: { id: "job-123", status: EXPORT_JOB_STATUS.Done, expiresAt: "2026-07-11T00:00:00Z" },
@@ -259,8 +219,7 @@ describe("PrivacyCenterScreen", () => {
     const signedUrl = "https://cdn.test/exports/job-123.zip?sig=abc";
     const assign = spyOn(window.location, "assign").mockImplementation(() => {});
     try {
-      const { view } = renderCenter({
-        me: activeMe,
+      const { view } = renderExportSection({
         downloadUrl: signedUrl,
         exportStatus: {
           hasJob: true,
@@ -281,8 +240,7 @@ describe("PrivacyCenterScreen", () => {
   test("Download-Button does not navigate when downloadByJob returns no url", async () => {
     const assign = spyOn(window.location, "assign").mockImplementation(() => {});
     try {
-      const { view } = renderCenter({
-        me: activeMe,
+      const { view } = renderExportSection({
         downloadUrl: undefined,
         exportStatus: {
           hasJob: true,

package/src/user-data-rights/web/client-plugin.tsx

@@ -1,16 +1,25 @@
 // @runtime client
-// Client-Feature-Factory für user-data-rights. Liefert den
-// PrivacyCenterScreen (gemappt auf die Screen-id "privacy-center") +
-// Default-Translations. Apps hängen es in
-// createKumikoApp({ clientFeatures: [userDataRightsClient()] }) ein; der
-// Screen wird server-seitig vom Feature dormant als custom-Screen
-// registriert (r.screen), die App platziert ihn via r.nav.
+// Client-feature factory for user-data-rights. Provides the ExportSection
+// extension component for the privacy-center screen (registered server-side
+// declaratively as `type: "projectionDetail"`, see feature.ts — restriction
+// and deletion are fields/actions on the screen itself and need no client
+// component) + default translations. Apps wire it in via
+// createKumikoApp({ clientFeatures: [userDataRightsClient()] }); the screen
+// has no own r.nav, the app places it via r.nav.
+//
+// fw#2312: the former `privacyCenter: { showDeletion }` option is gone — a
+// declarative screen is now registered server-side once for all apps, so a
+// client prop can no longer toggle its sections/actions per app. Its
+// replacement is the server-side
+// `UserDataRightsOptions.privacyCenterShowDeletion` (createUserDataRightsFeature,
+// ../feature.ts) — BREAKING, consumers with `showDeletion: false` (e.g.
+// money-horse) must carry the option over at feature setup.
 
 import { mergeTranslations, type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
 import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
-import { PRIVACY_CENTER_SCREEN_ID, USER_DATA_RIGHTS_FEATURE } from "../constants";
+import { EXPORT_SECTION_EXTENSION_NAME, USER_DATA_RIGHTS_FEATURE } from "../constants";
 import { defaultTranslations } from "./i18n";
-import { PrivacyCenterScreen } from "./privacy-center-screen";
+import { ExportSection } from "./privacy-center-screen";
 import { makePublicDeletionGate, type PublicDeletionRoutes } from "./public-deletion-gate";
 
 export type UserDataRightsClientOptions = {
@@ -21,27 +30,16 @@ export type UserDataRightsClientOptions = {
    *  privacy-center-Screen. Den Client VOR dem Auth-Client listen, sonst
    *  landet der anonyme Besucher auf der Login-Maske. */
   readonly publicDeletion?: PublicDeletionRoutes;
-  /** Konfiguration des eingeloggten privacy-center-Screens. */
-  readonly privacyCenter?: {
-    /** `false` blendet die Konto-Lösch-Sektion aus — für Apps, die die Löschung
-     *  schon woanders anbieten (z.B. Profil-DangerZone), gegen Doppelung.
-     *  Default `true`. */
-    readonly showDeletion?: boolean;
-  };
 };
 
 export function userDataRightsClient(
   options?: UserDataRightsClientOptions,
 ): ClientFeatureDefinition {
-  const showDeletion = options?.privacyCenter?.showDeletion ?? true;
-  const privacyCenter = showDeletion
-    ? PrivacyCenterScreen
-    : () => <PrivacyCenterScreen showDeletion={false} />;
   const base: ClientFeatureDefinition = {
     name: USER_DATA_RIGHTS_FEATURE,
     translations: mergeTranslations(defaultTranslations, options?.translations ?? {}),
-    components: {
-      [PRIVACY_CENTER_SCREEN_ID]: privacyCenter,
+    extensionSectionComponents: {
+      [EXPORT_SECTION_EXTENSION_NAME]: ExportSection,
     },
   };
   if (options?.publicDeletion === undefined) return base;

package/src/user-data-rights/web/i18n.ts

@@ -37,12 +37,13 @@ const apexTranslations: TranslationsByLocale = {
       "No token found in the link. Please open the link from the email again.",
     "userDataRights.deletion.confirm.error": "Something went wrong. Please try again.",
 
-    "userDataRights.privacyCenter.title": "Privacy",
-    "userDataRights.privacyCenter.intro":
-      "Manage your GDPR rights: access, export, restrict, and delete your account.",
-    "userDataRights.privacyCenter.loading": "Loading …",
-    "userDataRights.privacyCenter.loadError": "Your data could not be loaded.",
     "userDataRights.privacyCenter.errors.generic": "Something went wrong. Please try again.",
+    "userDataRights.privacyCenter.field.status": "Account status",
+    "userDataRights.privacyCenter.field.gracePeriodEnd": "Scheduled deletion date",
+    "userDataRights.privacyCenter.field.status.option.active": "Active",
+    "userDataRights.privacyCenter.field.status.option.restricted": "Restricted",
+    "userDataRights.privacyCenter.field.status.option.deletionRequested": "Deletion requested",
+    "userDataRights.privacyCenter.field.status.option.deleted": "Deleted",
 
     "userDataRights.privacyCenter.export.title": "Export your data (Art. 20)",
     "userDataRights.privacyCenter.export.intro":
@@ -62,20 +63,14 @@ const apexTranslations: TranslationsByLocale = {
     "userDataRights.privacyCenter.restriction.explainer":
       "Freeze your account: processing of your data is paused and you are signed out. Lifting the restriction afterwards is only possible via support.",
     "userDataRights.privacyCenter.restriction.restrict": "Restrict account",
-    "userDataRights.privacyCenter.restriction.dialogTitle": "Restrict your account?",
     "userDataRights.privacyCenter.restriction.dialogDescription":
       "You will be signed out immediately and cannot sign in again until support lifts the restriction.",
-    "userDataRights.privacyCenter.restriction.restricted":
-      "Your account is restricted. Contact support to lift the restriction.",
 
     "userDataRights.privacyCenter.deletion.title": "Delete account (Art. 17)",
     "userDataRights.privacyCenter.deletion.explainer":
       "Request deletion of your account. Until the grace period ends you can cancel the deletion.",
     "userDataRights.privacyCenter.deletion.delete": "Delete account",
-    "userDataRights.privacyCenter.deletion.requested": "Your account will be deleted on {date}.",
     "userDataRights.privacyCenter.deletion.cancel": "Cancel deletion",
-    "userDataRights.privacyCenter.deletion.cancelSuccess": "The deletion was cancelled.",
-    "userDataRights.privacyCenter.deletion.dialogTitle": "Delete your account?",
     "userDataRights.privacyCenter.deletion.dialogDescription":
       "Confirming starts the deletion grace period. You can cancel the deletion until it ends.",
 

package/src/user-data-rights/web/index.ts

@@ -9,7 +9,7 @@ export { type UserDataRightsClientOptions, userDataRightsClient } from "./client
 export type { ConfirmAccountDeletionScreenProps } from "./confirm-deletion-screen";
 export { ConfirmAccountDeletionScreen } from "./confirm-deletion-screen";
 export { defaultTranslations } from "./i18n";
-export { formatDate, PrivacyCenterScreen } from "./privacy-center-screen";
+export { formatDate } from "./privacy-center-screen";
 export { makePublicDeletionGate, type PublicDeletionRoutes } from "./public-deletion-gate";
 export type { RequestAccountDeletionScreenProps } from "./request-deletion-screen";
 export { RequestAccountDeletionScreen } from "./request-deletion-screen";

package/src/user-data-rights/web/privacy-center-screen.tsx

@@ -1,17 +1,14 @@
 // @runtime client
-// PrivacyCenterScreen — eingeloggte DSGVO-Self-Service-Seite: Datenexport
-// (Art. 20), Verarbeitung einschränken (Art. 18) und Konto löschen (Art. 17)
-// in einem Screen. Das Feature registriert ihn dormant als custom-Screen
-// (r.screen, kein r.nav); die App platziert ihn via r.nav im eingeloggten
-// Bereich.
+// Export section (Art. 20) — the one part of user-data-rights' privacy-center
+// screen that stays custom (fw#2312). Registered as an EditExtensionSection
+// component (see web/client-plugin.tsx); the projectionDetail screen
+// (feature.ts) supplies the surrounding Section chrome (title, testId), so
+// this component renders only its own body content.
 //
-// `showDeletion=false` blendet die Lösch-Sektion aus — für Apps, die die
-// Konto-Löschung bereits an anderer Stelle anbieten (z.B. Profil-DangerZone),
-// damit sie nicht doppelt erscheint.
-//
-// Art. 18 Lift ist hier bewusst NICHT actionbar: ein eingeschränktes Konto ist
-// vom Login geblockt und erreicht diesen Screen gar nicht erst — das Aufheben
-// läuft über Support / Magic-Link, nicht über die Self-Service-UI.
+// Export needs async-job polling (worker-Lane-Cron, ~1 Min) plus a
+// signed-URL download — logic a declarative field/action can't express.
+// Restriction (Art. 18) and Deletion (Art. 17) moved onto the screen's
+// declarative fields/actions instead (feature.ts).
 
 import {
   useDispatcher,
@@ -19,30 +16,20 @@ import {
   useQuery,
   useTranslation,
 } from "@cosmicdrift/kumiko-renderer";
-import { FormScreenShell, postWithDownload } from "@cosmicdrift/kumiko-renderer-web";
+import { postWithDownload } from "@cosmicdrift/kumiko-renderer-web";
 import { type ReactNode, useEffect, useState } from "react";
 import {
   EXPORT_JOB_STATUS,
   type ExportJobStatus,
-  USER_ME_QUERY,
   UserDataRightsHandlers,
   UserDataRightsQueries,
 } from "../constants";
 
-const STATUS_DELETION_REQUESTED = "deletionRequested";
-const STATUS_RESTRICTED = "restricted";
 // Export-Job läuft async (worker-Lane-Cron, ~1 Min). Solange er pending/running
 // ist, pollt der Screen den Status, damit der Download ohne manuellen Reload
 // erscheint.
 const EXPORT_POLL_MS = 4000;
 
-type MeRow = {
-  readonly id: string;
-  readonly email: string;
-  readonly status?: string;
-  readonly gracePeriodEnd?: string | null;
-};
-
 type ExportJob = {
   readonly id: string;
   readonly status: ExportJobStatus;
@@ -86,9 +73,14 @@ function StatusBanner({ status }: { readonly status: SectionStatus }): ReactNode
   return null;
 }
 
-function ExportSection(): ReactNode {
+// Mounted by the renderer's ExtensionSectionMount (already wrapped in
+// <Section title={...} testId="section-extension-...">) — takes no props of
+// its own, ExtensionSectionProps (entityName/entityId/...) are unused since
+// export status/actions are scoped to the current user session, not to a
+// host entity row.
+export function ExportSection(): ReactNode {
   const t = useTranslation();
-  const { Section, Button, Banner } = usePrimitives();
+  const { Button, Banner } = usePrimitives();
   const dispatcher = useDispatcher();
   const statusQuery = useQuery<ExportStatusResult | null>(UserDataRightsQueries.exportStatus, {});
   const [status, setStatus] = useState<SectionStatus>({ kind: "idle" });
@@ -131,26 +123,7 @@ function ExportSection(): ReactNode {
   }, [inProgress, refetch]);
 
   return (
-    <Section
-      title={t("userDataRights.privacyCenter.export.title")}
-      testId="privacy-export"
-      actions={
-        !inProgress ? (
-          <Button
-            onClick={() => void request()}
-            disabled={submitting}
-            loading={submitting}
-            testId="privacy-export-request"
-          >
-            {done
-              ? t("userDataRights.privacyCenter.export.requestNew")
-              : submitting
-                ? t("userDataRights.privacyCenter.export.requesting")
-                : t("userDataRights.privacyCenter.export.request")}
-          </Button>
-        ) : undefined
-      }
-    >
+    <>
       <p className="text-sm text-muted-foreground">
         {t("userDataRights.privacyCenter.export.intro")}
       </p>
@@ -190,209 +163,23 @@ function ExportSection(): ReactNode {
           </div>
         </Banner>
       )}
-      <StatusBanner status={status} />
-    </Section>
-  );
-}
-
-function RestrictionSection({
-  me,
-  onChanged,
-}: {
-  readonly me: MeRow;
-  readonly onChanged: () => void;
-}): ReactNode {
-  const t = useTranslation();
-  const { Section, Button, Banner, Dialog } = usePrimitives();
-  const dispatcher = useDispatcher();
-  const [dialogOpen, setDialogOpen] = useState(false);
-  const [status, setStatus] = useState<SectionStatus>({ kind: "idle" });
-  const restricted = me.status === STATUS_RESTRICTED;
-
-  // Erfolg ⇒ alle Sessions revoked, der User wird abgemeldet. onChanged ist
-  // best-effort (das anschließende Refetch läuft typisch in 401 + Logout-
-  // Redirect der App-Auth-Schicht).
-  const restrict = async (): Promise<void> => {
-    const res = await dispatcher.write(UserDataRightsHandlers.restrictAccount, {});
-    if (!res.isSuccess) {
-      setStatus({ kind: "error", messageKey: failureKey(res.error) });
-      return;
-    }
-    onChanged();
-  };
-
-  return (
-    <Section
-      title={t("userDataRights.privacyCenter.restriction.title")}
-      testId="privacy-restriction"
-      variant="destructive"
-      actions={
-        restricted ? undefined : (
+      {!inProgress && (
+        <div className="mt-2">
           <Button
-            variant="danger"
-            onClick={() => setDialogOpen(true)}
-            testId="privacy-restriction-restrict"
-          >
-            {t("userDataRights.privacyCenter.restriction.restrict")}
-          </Button>
-        )
-      }
-    >
-      {restricted ? (
-        <Banner variant="error" testId="privacy-restriction-active">
-          {t("userDataRights.privacyCenter.restriction.restricted")}
-        </Banner>
-      ) : (
-        <>
-          <p className="text-sm text-muted-foreground">
-            {t("userDataRights.privacyCenter.restriction.explainer")}
-          </p>
-          <StatusBanner status={status} />
-          <Dialog
-            open={dialogOpen}
-            onOpenChange={setDialogOpen}
-            title={t("userDataRights.privacyCenter.restriction.dialogTitle")}
-            description={t("userDataRights.privacyCenter.restriction.dialogDescription")}
-            variant="danger"
-            confirmLabel={t("userDataRights.privacyCenter.restriction.restrict")}
-            onConfirm={restrict}
-            testId="privacy-restriction-dialog"
-          />
-        </>
-      )}
-    </Section>
-  );
-}
-
-function DeletionSection({
-  me,
-  onChanged,
-}: {
-  readonly me: MeRow;
-  readonly onChanged: () => void;
-}): ReactNode {
-  const t = useTranslation();
-  const { Section, Button, Banner, Dialog } = usePrimitives();
-  const dispatcher = useDispatcher();
-  const [dialogOpen, setDialogOpen] = useState(false);
-  const [status, setStatus] = useState<SectionStatus>({ kind: "idle" });
-  const deletionRequested = me.status === STATUS_DELETION_REQUESTED;
-
-  const requestDeletion = async (): Promise<void> => {
-    const res = await dispatcher.write(UserDataRightsHandlers.requestDeletion, {});
-    if (!res.isSuccess) {
-      setStatus({ kind: "error", messageKey: failureKey(res.error) });
-      return;
-    }
-    setStatus({ kind: "idle" });
-    onChanged();
-  };
-
-  const cancelDeletion = async (): Promise<void> => {
-    const res = await dispatcher.write(UserDataRightsHandlers.cancelDeletion, {});
-    if (!res.isSuccess) {
-      setStatus({ kind: "error", messageKey: failureKey(res.error) });
-      return;
-    }
-    setStatus({
-      kind: "success",
-      messageKey: "userDataRights.privacyCenter.deletion.cancelSuccess",
-    });
-    onChanged();
-  };
-
-  return (
-    <Section
-      title={t("userDataRights.privacyCenter.deletion.title")}
-      testId="privacy-deletion"
-      variant="destructive"
-      actions={
-        deletionRequested ? (
-          <Button
-            variant="secondary"
-            onClick={() => void cancelDeletion()}
-            testId="privacy-deletion-cancel"
-          >
-            {t("userDataRights.privacyCenter.deletion.cancel")}
-          </Button>
-        ) : (
-          <Button
-            variant="danger"
-            onClick={() => setDialogOpen(true)}
-            testId="privacy-deletion-delete"
+            onClick={() => void request()}
+            disabled={submitting}
+            loading={submitting}
+            testId="privacy-export-request"
           >
-            {t("userDataRights.privacyCenter.deletion.delete")}
+            {done
+              ? t("userDataRights.privacyCenter.export.requestNew")
+              : submitting
+                ? t("userDataRights.privacyCenter.export.requesting")
+                : t("userDataRights.privacyCenter.export.request")}
           </Button>
-        )
-      }
-    >
-      {deletionRequested ? (
-        <>
-          <Banner variant="error" testId="privacy-deletion-requested">
-            {t("userDataRights.privacyCenter.deletion.requested", {
-              date: formatDate(me.gracePeriodEnd),
-            })}
-          </Banner>
-          <StatusBanner status={status} />
-        </>
-      ) : (
-        <>
-          <p className="text-sm text-muted-foreground">
-            {t("userDataRights.privacyCenter.deletion.explainer")}
-          </p>
-          <StatusBanner status={status} />
-          <Dialog
-            open={dialogOpen}
-            onOpenChange={setDialogOpen}
-            title={t("userDataRights.privacyCenter.deletion.dialogTitle")}
-            description={t("userDataRights.privacyCenter.deletion.dialogDescription")}
-            variant="danger"
-            confirmLabel={t("userDataRights.privacyCenter.deletion.delete")}
-            onConfirm={requestDeletion}
-            testId="privacy-deletion-dialog"
-          />
-        </>
+        </div>
       )}
-    </Section>
-  );
-}
-
-export function PrivacyCenterScreen({
-  showDeletion = true,
-}: {
-  readonly showDeletion?: boolean;
-} = {}): ReactNode {
-  const t = useTranslation();
-  const { Banner, Heading } = usePrimitives();
-  const meQuery = useQuery<MeRow | null>(USER_ME_QUERY, {});
-
-  if (meQuery.error) {
-    return (
-      <Banner padded variant="error" testId="privacy-error">
-        {t("userDataRights.privacyCenter.loadError")}
-      </Banner>
-    );
-  }
-  const me = meQuery.data;
-  if (me === null || me === undefined) {
-    return (
-      <Banner padded variant="loading" testId="privacy-loading">
-        {t("userDataRights.privacyCenter.loading")}
-      </Banner>
-    );
-  }
-
-  const refetch = (): void => {
-    void meQuery.refetch?.();
-  };
-
-  return (
-    <FormScreenShell className="flex flex-col gap-6" testId="privacy-center-screen">
-      <Heading variant="page">{t("userDataRights.privacyCenter.title")}</Heading>
-      <p className="text-sm text-muted-foreground">{t("userDataRights.privacyCenter.intro")}</p>
-      <ExportSection />
-      <RestrictionSection me={me} onChanged={refetch} />
-      {showDeletion && <DeletionSection me={me} onChanged={refetch} />}
-    </FormScreenShell>
+      <StatusBanner status={status} />
+    </>
   );
 }