@redacto.io/consent-sdk-js 0.1.2-beta.0 → 1.0.0-beta.1

package/dist/redacto.js

@@ -303,6 +303,7 @@ var fetchConsentContentPublic = async ({
 var submitConsentEvent = async ({
   accessToken,
   baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   purposes,
   declined,
@@ -318,7 +319,7 @@ var submitConsentEvent = async ({
   if (!decodedToken) throw new Error("Invalid access token");
   const { organisation_uuid: ORG, workspace_uuid: WS } = decodedToken;
   if (!ORG || !WS) throw new Error("Invalid token: missing organization or workspace UUID");
-  const apiBaseUrl = baseUrl || BASE_URL;
+  const apiBaseUrl = ledgerBaseUrl || baseUrl || BASE_URL;
   const validatedPurposes = purposes.map((purpose) => {
     if (!purpose.uuid) throw new Error("Invalid purpose data: missing uuid");
     const dataElements = (purpose.data_elements || []).filter((element) => element.enabled).map((element) => ({
@@ -377,13 +378,14 @@ var submitConsentEventPublic = async ({
   workspace_uuid,
   accessToken,
   baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   purposes,
   declined,
   meta_data
 }) => {
   var _a, _b;
-  const apiBaseUrl = baseUrl || BASE_URL_PUBLIC;
+  const apiBaseUrl = ledgerBaseUrl || baseUrl || BASE_URL_PUBLIC;
   const payload = {
     notice_uuid: noticeUuid,
     purposes: purposes.map((purpose) => {
@@ -616,6 +618,95 @@ var verifyGuardianStatus = async ({
   };
 };
 
+// src/api/notice-consent-status.ts
+var fetchNoticeConsentStatusForScope = async ({
+  accessToken,
+  ledgerBaseUrl,
+  organisationUuid,
+  workspaceUuid,
+  noticeUuid,
+  signal
+}) => {
+  if (!accessToken || !ledgerBaseUrl || !organisationUuid || !workspaceUuid || !noticeUuid) {
+    return null;
+  }
+  try {
+    const response = await fetch(
+      `${ledgerBaseUrl}/public/organisations/${organisationUuid}/workspaces/${workspaceUuid}/notices/${noticeUuid}/check-consent`,
+      {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${accessToken}`,
+          "Content-Type": "application/json"
+        },
+        body: "{}",
+        signal
+      }
+    );
+    if (!response.ok) return null;
+    const data = await response.json();
+    const body = data && typeof data === "object" && "detail" in data && data.detail ? data.detail : data;
+    if (!body || !Array.isArray(body.purposes)) return null;
+    return body;
+  } catch {
+    return null;
+  }
+};
+var fetchNoticeConsentStatus = async ({
+  accessToken,
+  ledgerBaseUrl,
+  noticeUuid,
+  signal
+}) => {
+  if (!accessToken || !ledgerBaseUrl || !noticeUuid) return null;
+  const decodedToken = decodeTokenSafely(accessToken);
+  if (!decodedToken) return null;
+  const { organisation_uuid: ORG, workspace_uuid: WS } = decodedToken;
+  if (!ORG || !WS) return null;
+  return fetchNoticeConsentStatusForScope({
+    accessToken,
+    ledgerBaseUrl,
+    organisationUuid: ORG,
+    workspaceUuid: WS,
+    noticeUuid,
+    signal
+  });
+};
+var isNoticeFullyConsented = (status) => status.consented && status.all_mandatory_active;
+var buildLedgerConsentOverlay = (status, configPurposes) => {
+  var _a, _b;
+  const byUuid = new Map(status.purposes.map((p) => [p.uuid, p]));
+  const hasHistory = status.purposes.some((p) => (p.status || "INACTIVE") !== "INACTIVE");
+  if (!hasHistory) return null;
+  const purpose_selections = {};
+  for (const cp of configPurposes) {
+    const lp = byUuid.get(cp.uuid);
+    const purposeStatus = (lp == null ? void 0 : lp.status) || "INACTIVE";
+    const selectedByUuid = new Map(((lp == null ? void 0 : lp.data_elements) || []).map((de) => [de.uuid, de.selected]));
+    const data_elements = {};
+    for (const de of cp.data_elements) {
+      data_elements[de.uuid] = {
+        selected: (_a = selectedByUuid.get(de.uuid)) != null ? _a : false,
+        enabled: de.enabled,
+        required: de.required
+      };
+    }
+    purpose_selections[cp.uuid] = {
+      selected: (_b = lp == null ? void 0 : lp.selected) != null ? _b : false,
+      status: purposeStatus,
+      needs_reconsent: purposeStatus !== "ACTIVE",
+      data_elements
+    };
+  }
+  const reconsent_required = configPurposes.some(
+    (cp) => {
+      var _a2;
+      return (((_a2 = purpose_selections[cp.uuid]) == null ? void 0 : _a2.status) || "INACTIVE") !== "ACTIVE";
+    }
+  );
+  return { reconsent_required, purpose_selections };
+};
+
 // src/styles/inject.ts
 var STYLE_ID = "redacto-consent-checkbox-styles";
 var STYLE_CONTENT = `
@@ -2757,7 +2848,7 @@ var ModalController = class {
   }
   // ─── Private ───
   async fetchNotice() {
-    var _a, _b, _c;
+    var _a, _b, _c, _d;
     this.abortController = new AbortController();
     this.store.setState({ isLoading: true, fetchError: null });
     try {
@@ -2773,7 +2864,23 @@ var ModalController = class {
         signal: this.abortController.signal
       });
       const activeConfig = data.detail.active_config;
-      const purposeSelections = data.detail.purpose_selections;
+      let purposeSelections = data.detail.purpose_selections;
+      let reconsentRequired = data.detail.reconsent_required;
+      let ledgerOverlayApplied = false;
+      if (this.options.ledgerBaseUrl && !this.options.applicationId) {
+        const ledgerStatus = await fetchNoticeConsentStatus({
+          accessToken: this.options.accessToken,
+          ledgerBaseUrl: this.options.ledgerBaseUrl,
+          noticeUuid: this.options.noticeId,
+          signal: this.abortController.signal
+        });
+        if (ledgerStatus) {
+          const overlay = buildLedgerConsentOverlay(ledgerStatus, activeConfig.purposes);
+          reconsentRequired = (_a = overlay == null ? void 0 : overlay.reconsent_required) != null ? _a : false;
+          purposeSelections = overlay == null ? void 0 : overlay.purpose_selections;
+          ledgerOverlayApplied = Boolean(overlay);
+        }
+      }
       const initialCollapsed = {};
       const initialPurposes = {};
       const initialElements = {};
@@ -2781,7 +2888,7 @@ var ModalController = class {
       let needsConsentPurposes = [];
       let alreadyConsentedPurposes = [];
       let isFullyConsentedReviewMode = false;
-      if (purposeSelections && data.detail.reconsent_required) {
+      if (purposeSelections && (reconsentRequired || ledgerOverlayApplied)) {
         for (const purpose of activeConfig.purposes) {
           const selection = purposeSelections[purpose.uuid];
           initialCollapsed[purpose.uuid] = true;
@@ -2790,7 +2897,7 @@ var ModalController = class {
             initialPurposes[purpose.uuid] = true;
             for (const de of purpose.data_elements) {
               const combinedId = `${purpose.uuid}-${de.uuid}`;
-              const deSelection = (_a = selection.data_elements) == null ? void 0 : _a[de.uuid];
+              const deSelection = (_b = selection.data_elements) == null ? void 0 : _b[de.uuid];
               const wasSelected = (deSelection == null ? void 0 : deSelection.selected) || false;
               initialElements[combinedId] = wasSelected;
               initialDataElementSelections[combinedId] = wasSelected;
@@ -2879,7 +2986,7 @@ var ModalController = class {
         this.options.onAccept();
       } else {
         this.store.setState({ fetchError: error, isLoading: false });
-        (_c = (_b = this.options).onError) == null ? void 0 : _c.call(_b, error);
+        (_d = (_c = this.options).onError) == null ? void 0 : _d.call(_c, error);
       }
     }
   }
@@ -3587,6 +3694,7 @@ var ModalController = class {
       await submitConsentEvent({
         accessToken: this.options.accessToken,
         baseUrl: this.options.baseUrl,
+        ledgerBaseUrl: this.options.ledgerBaseUrl,
         noticeUuid: state.content.detail.uuid,
         purposes,
         declined: false,
@@ -4337,7 +4445,9 @@ var InlineController = class {
     this.purposeRefs = null;
     this.errorEl = null;
     this.hasSubmitted = false;
+    this.hasCheckedLedgerConsent = false;
     this.unsubscribe = null;
+    this.abortController = null;
     this.options = options;
     this.store = new Store({
       content: null,
@@ -4348,12 +4458,14 @@ var InlineController = class {
       selectedPurposes: {},
       selectedDataElements: {},
       hasAlreadyConsented: false,
+      isCheckingConsent: false,
       fetchError: null,
       errorMessage: null
     });
     this.mediaQuery = createMediaQuery("(max-width: 768px)");
   }
   async init() {
+    this.abortController = new AbortController();
     if (typeof this.options.target === "string") {
       this.targetEl = document.querySelector(this.options.target);
       if (!this.targetEl) {
@@ -4376,8 +4488,9 @@ var InlineController = class {
     await this.fetchNotice();
   }
   destroy() {
-    var _a;
-    (_a = this.unsubscribe) == null ? void 0 : _a.call(this);
+    var _a, _b;
+    (_a = this.abortController) == null ? void 0 : _a.abort();
+    (_b = this.unsubscribe) == null ? void 0 : _b.call(this);
     this.mediaQuery.destroy();
     this.store.destroy();
     if (this.hostEl && this.hostEl.parentNode) {
@@ -4390,9 +4503,19 @@ var InlineController = class {
   }
   updateToken(accessToken) {
     this.options = { ...this.options, accessToken };
+    if (this.shouldCheckLedgerConsent()) {
+      void this.checkLedgerConsent();
+      return;
+    }
     this.tryAutoSubmit();
   }
   // ─── Private ───
+  // destroy() aborts the controller, so an aborted signal is the marker that
+  // teardown has happened and async continuations must not touch the host.
+  isDestroyed() {
+    var _a;
+    return Boolean((_a = this.abortController) == null ? void 0 : _a.signal.aborted);
+  }
   async fetchNotice() {
     var _a, _b, _c, _d;
     this.store.setState({ isLoading: true, fetchError: null });
@@ -4405,6 +4528,9 @@ var InlineController = class {
         language: this.options.language,
         specific_uuid: this.options.applicationId
       });
+      if (this.isDestroyed()) {
+        return;
+      }
       const activeConfig = data.detail.active_config;
       const initialCollapsed = {};
       const initialPurposes = {};
@@ -4416,6 +4542,7 @@ var InlineController = class {
           initialElements[`${purpose.uuid}-${de.uuid}`] = false;
         }
       }
+      void this.checkLedgerConsent();
       this.store.setState({
         content: activeConfig,
         isLoading: false,
@@ -4425,6 +4552,9 @@ var InlineController = class {
         selectedDataElements: initialElements
       });
     } catch (err) {
+      if (this.isDestroyed()) {
+        return;
+      }
       const error = err;
       if (error.status === 409) {
         this.store.setState({ hasAlreadyConsented: true, isLoading: false });
@@ -4435,6 +4565,41 @@ var InlineController = class {
       }
     }
   }
+  shouldCheckLedgerConsent() {
+    return Boolean(this.options.ledgerBaseUrl) && !this.options.applicationId && Boolean(this.options.accessToken) && !this.hasCheckedLedgerConsent;
+  }
+  // Ask the Go ledger whether this principal has already fully consented —
+  // the ledger equivalent of the legacy Python 409. Skipped without a ledger
+  // (the 409 path governs) and for the magic-link applicationId flow. Any
+  // failure returns null and falls through to the normal flow.
+  async checkLedgerConsent() {
+    var _a, _b, _c;
+    if (!this.shouldCheckLedgerConsent()) return;
+    this.hasCheckedLedgerConsent = true;
+    this.store.setState({ isCheckingConsent: true });
+    try {
+      const status = await fetchNoticeConsentStatusForScope({
+        accessToken: this.options.accessToken,
+        ledgerBaseUrl: this.options.ledgerBaseUrl,
+        organisationUuid: this.options.org_uuid,
+        workspaceUuid: this.options.workspace_uuid,
+        noticeUuid: this.options.notice_uuid,
+        signal: (_a = this.abortController) == null ? void 0 : _a.signal
+      });
+      if (this.isDestroyed()) {
+        return;
+      }
+      if (status && isNoticeFullyConsented(status)) {
+        this.store.setState({ hasAlreadyConsented: true });
+        (_c = (_b = this.options).onAccept) == null ? void 0 : _c.call(_b);
+      }
+    } finally {
+      if (!this.isDestroyed()) {
+        this.store.setState({ isCheckingConsent: false });
+        this.tryAutoSubmit();
+      }
+    }
+  }
   handleStateChange(state, prevState) {
     if (prevState.isLoading && !state.isLoading && state.content) {
       this.rebuildUI();
@@ -4654,9 +4819,12 @@ var InlineController = class {
   }
   async tryAutoSubmit() {
     var _a, _b;
+    if (this.isDestroyed()) {
+      return;
+    }
     const state = this.store.getState();
     const accessToken = this.options.accessToken;
-    if (accessToken && state.content && this.areAllRequiredElementsChecked() && !state.isSubmitting && !this.hasSubmitted) {
+    if (accessToken && state.content && this.areAllRequiredElementsChecked() && !state.isSubmitting && !state.isCheckingConsent && !state.hasAlreadyConsented && !this.hasSubmitted) {
       this.hasSubmitted = true;
       try {
         await this.handleSubmit(accessToken);
@@ -4681,6 +4849,7 @@ var InlineController = class {
         workspace_uuid: this.options.workspace_uuid,
         accessToken: tokenToUse,
         baseUrl: this.options.baseUrl,
+        ledgerBaseUrl: this.options.ledgerBaseUrl,
         noticeUuid: content.notice_uuid,
         purposes: content.purposes.map((purpose) => {
           const hasSelectedRequired = purpose.data_elements.some(

package/dist/redacto.mjs

@@ -273,6 +273,7 @@ var fetchConsentContentPublic = async ({
 var submitConsentEvent = async ({
   accessToken,
   baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   purposes,
   declined,
@@ -288,7 +289,7 @@ var submitConsentEvent = async ({
   if (!decodedToken) throw new Error("Invalid access token");
   const { organisation_uuid: ORG, workspace_uuid: WS } = decodedToken;
   if (!ORG || !WS) throw new Error("Invalid token: missing organization or workspace UUID");
-  const apiBaseUrl = baseUrl || BASE_URL;
+  const apiBaseUrl = ledgerBaseUrl || baseUrl || BASE_URL;
   const validatedPurposes = purposes.map((purpose) => {
     if (!purpose.uuid) throw new Error("Invalid purpose data: missing uuid");
     const dataElements = (purpose.data_elements || []).filter((element) => element.enabled).map((element) => ({
@@ -347,13 +348,14 @@ var submitConsentEventPublic = async ({
   workspace_uuid,
   accessToken,
   baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   purposes,
   declined,
   meta_data
 }) => {
   var _a, _b;
-  const apiBaseUrl = baseUrl || BASE_URL_PUBLIC;
+  const apiBaseUrl = ledgerBaseUrl || baseUrl || BASE_URL_PUBLIC;
   const payload = {
     notice_uuid: noticeUuid,
     purposes: purposes.map((purpose) => {
@@ -586,6 +588,95 @@ var verifyGuardianStatus = async ({
   };
 };
 
+// src/api/notice-consent-status.ts
+var fetchNoticeConsentStatusForScope = async ({
+  accessToken,
+  ledgerBaseUrl,
+  organisationUuid,
+  workspaceUuid,
+  noticeUuid,
+  signal
+}) => {
+  if (!accessToken || !ledgerBaseUrl || !organisationUuid || !workspaceUuid || !noticeUuid) {
+    return null;
+  }
+  try {
+    const response = await fetch(
+      `${ledgerBaseUrl}/public/organisations/${organisationUuid}/workspaces/${workspaceUuid}/notices/${noticeUuid}/check-consent`,
+      {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${accessToken}`,
+          "Content-Type": "application/json"
+        },
+        body: "{}",
+        signal
+      }
+    );
+    if (!response.ok) return null;
+    const data = await response.json();
+    const body = data && typeof data === "object" && "detail" in data && data.detail ? data.detail : data;
+    if (!body || !Array.isArray(body.purposes)) return null;
+    return body;
+  } catch {
+    return null;
+  }
+};
+var fetchNoticeConsentStatus = async ({
+  accessToken,
+  ledgerBaseUrl,
+  noticeUuid,
+  signal
+}) => {
+  if (!accessToken || !ledgerBaseUrl || !noticeUuid) return null;
+  const decodedToken = decodeTokenSafely(accessToken);
+  if (!decodedToken) return null;
+  const { organisation_uuid: ORG, workspace_uuid: WS } = decodedToken;
+  if (!ORG || !WS) return null;
+  return fetchNoticeConsentStatusForScope({
+    accessToken,
+    ledgerBaseUrl,
+    organisationUuid: ORG,
+    workspaceUuid: WS,
+    noticeUuid,
+    signal
+  });
+};
+var isNoticeFullyConsented = (status) => status.consented && status.all_mandatory_active;
+var buildLedgerConsentOverlay = (status, configPurposes) => {
+  var _a, _b;
+  const byUuid = new Map(status.purposes.map((p) => [p.uuid, p]));
+  const hasHistory = status.purposes.some((p) => (p.status || "INACTIVE") !== "INACTIVE");
+  if (!hasHistory) return null;
+  const purpose_selections = {};
+  for (const cp of configPurposes) {
+    const lp = byUuid.get(cp.uuid);
+    const purposeStatus = (lp == null ? void 0 : lp.status) || "INACTIVE";
+    const selectedByUuid = new Map(((lp == null ? void 0 : lp.data_elements) || []).map((de) => [de.uuid, de.selected]));
+    const data_elements = {};
+    for (const de of cp.data_elements) {
+      data_elements[de.uuid] = {
+        selected: (_a = selectedByUuid.get(de.uuid)) != null ? _a : false,
+        enabled: de.enabled,
+        required: de.required
+      };
+    }
+    purpose_selections[cp.uuid] = {
+      selected: (_b = lp == null ? void 0 : lp.selected) != null ? _b : false,
+      status: purposeStatus,
+      needs_reconsent: purposeStatus !== "ACTIVE",
+      data_elements
+    };
+  }
+  const reconsent_required = configPurposes.some(
+    (cp) => {
+      var _a2;
+      return (((_a2 = purpose_selections[cp.uuid]) == null ? void 0 : _a2.status) || "INACTIVE") !== "ACTIVE";
+    }
+  );
+  return { reconsent_required, purpose_selections };
+};
+
 // src/styles/inject.ts
 var STYLE_ID = "redacto-consent-checkbox-styles";
 var STYLE_CONTENT = `
@@ -2727,7 +2818,7 @@ var ModalController = class {
   }
   // ─── Private ───
   async fetchNotice() {
-    var _a, _b, _c;
+    var _a, _b, _c, _d;
     this.abortController = new AbortController();
     this.store.setState({ isLoading: true, fetchError: null });
     try {
@@ -2743,7 +2834,23 @@ var ModalController = class {
         signal: this.abortController.signal
       });
       const activeConfig = data.detail.active_config;
-      const purposeSelections = data.detail.purpose_selections;
+      let purposeSelections = data.detail.purpose_selections;
+      let reconsentRequired = data.detail.reconsent_required;
+      let ledgerOverlayApplied = false;
+      if (this.options.ledgerBaseUrl && !this.options.applicationId) {
+        const ledgerStatus = await fetchNoticeConsentStatus({
+          accessToken: this.options.accessToken,
+          ledgerBaseUrl: this.options.ledgerBaseUrl,
+          noticeUuid: this.options.noticeId,
+          signal: this.abortController.signal
+        });
+        if (ledgerStatus) {
+          const overlay = buildLedgerConsentOverlay(ledgerStatus, activeConfig.purposes);
+          reconsentRequired = (_a = overlay == null ? void 0 : overlay.reconsent_required) != null ? _a : false;
+          purposeSelections = overlay == null ? void 0 : overlay.purpose_selections;
+          ledgerOverlayApplied = Boolean(overlay);
+        }
+      }
       const initialCollapsed = {};
       const initialPurposes = {};
       const initialElements = {};
@@ -2751,7 +2858,7 @@ var ModalController = class {
       let needsConsentPurposes = [];
       let alreadyConsentedPurposes = [];
       let isFullyConsentedReviewMode = false;
-      if (purposeSelections && data.detail.reconsent_required) {
+      if (purposeSelections && (reconsentRequired || ledgerOverlayApplied)) {
         for (const purpose of activeConfig.purposes) {
           const selection = purposeSelections[purpose.uuid];
           initialCollapsed[purpose.uuid] = true;
@@ -2760,7 +2867,7 @@ var ModalController = class {
             initialPurposes[purpose.uuid] = true;
             for (const de of purpose.data_elements) {
               const combinedId = `${purpose.uuid}-${de.uuid}`;
-              const deSelection = (_a = selection.data_elements) == null ? void 0 : _a[de.uuid];
+              const deSelection = (_b = selection.data_elements) == null ? void 0 : _b[de.uuid];
               const wasSelected = (deSelection == null ? void 0 : deSelection.selected) || false;
               initialElements[combinedId] = wasSelected;
               initialDataElementSelections[combinedId] = wasSelected;
@@ -2849,7 +2956,7 @@ var ModalController = class {
         this.options.onAccept();
       } else {
         this.store.setState({ fetchError: error, isLoading: false });
-        (_c = (_b = this.options).onError) == null ? void 0 : _c.call(_b, error);
+        (_d = (_c = this.options).onError) == null ? void 0 : _d.call(_c, error);
       }
     }
   }
@@ -3557,6 +3664,7 @@ var ModalController = class {
       await submitConsentEvent({
         accessToken: this.options.accessToken,
         baseUrl: this.options.baseUrl,
+        ledgerBaseUrl: this.options.ledgerBaseUrl,
         noticeUuid: state.content.detail.uuid,
         purposes,
         declined: false,
@@ -4307,7 +4415,9 @@ var InlineController = class {
     this.purposeRefs = null;
     this.errorEl = null;
     this.hasSubmitted = false;
+    this.hasCheckedLedgerConsent = false;
     this.unsubscribe = null;
+    this.abortController = null;
     this.options = options;
     this.store = new Store({
       content: null,
@@ -4318,12 +4428,14 @@ var InlineController = class {
       selectedPurposes: {},
       selectedDataElements: {},
       hasAlreadyConsented: false,
+      isCheckingConsent: false,
       fetchError: null,
       errorMessage: null
     });
     this.mediaQuery = createMediaQuery("(max-width: 768px)");
   }
   async init() {
+    this.abortController = new AbortController();
     if (typeof this.options.target === "string") {
       this.targetEl = document.querySelector(this.options.target);
       if (!this.targetEl) {
@@ -4346,8 +4458,9 @@ var InlineController = class {
     await this.fetchNotice();
   }
   destroy() {
-    var _a;
-    (_a = this.unsubscribe) == null ? void 0 : _a.call(this);
+    var _a, _b;
+    (_a = this.abortController) == null ? void 0 : _a.abort();
+    (_b = this.unsubscribe) == null ? void 0 : _b.call(this);
     this.mediaQuery.destroy();
     this.store.destroy();
     if (this.hostEl && this.hostEl.parentNode) {
@@ -4360,9 +4473,19 @@ var InlineController = class {
   }
   updateToken(accessToken) {
     this.options = { ...this.options, accessToken };
+    if (this.shouldCheckLedgerConsent()) {
+      void this.checkLedgerConsent();
+      return;
+    }
     this.tryAutoSubmit();
   }
   // ─── Private ───
+  // destroy() aborts the controller, so an aborted signal is the marker that
+  // teardown has happened and async continuations must not touch the host.
+  isDestroyed() {
+    var _a;
+    return Boolean((_a = this.abortController) == null ? void 0 : _a.signal.aborted);
+  }
   async fetchNotice() {
     var _a, _b, _c, _d;
     this.store.setState({ isLoading: true, fetchError: null });
@@ -4375,6 +4498,9 @@ var InlineController = class {
         language: this.options.language,
         specific_uuid: this.options.applicationId
       });
+      if (this.isDestroyed()) {
+        return;
+      }
       const activeConfig = data.detail.active_config;
       const initialCollapsed = {};
       const initialPurposes = {};
@@ -4386,6 +4512,7 @@ var InlineController = class {
           initialElements[`${purpose.uuid}-${de.uuid}`] = false;
         }
       }
+      void this.checkLedgerConsent();
       this.store.setState({
         content: activeConfig,
         isLoading: false,
@@ -4395,6 +4522,9 @@ var InlineController = class {
         selectedDataElements: initialElements
       });
     } catch (err) {
+      if (this.isDestroyed()) {
+        return;
+      }
       const error = err;
       if (error.status === 409) {
         this.store.setState({ hasAlreadyConsented: true, isLoading: false });
@@ -4405,6 +4535,41 @@ var InlineController = class {
       }
     }
   }
+  shouldCheckLedgerConsent() {
+    return Boolean(this.options.ledgerBaseUrl) && !this.options.applicationId && Boolean(this.options.accessToken) && !this.hasCheckedLedgerConsent;
+  }
+  // Ask the Go ledger whether this principal has already fully consented —
+  // the ledger equivalent of the legacy Python 409. Skipped without a ledger
+  // (the 409 path governs) and for the magic-link applicationId flow. Any
+  // failure returns null and falls through to the normal flow.
+  async checkLedgerConsent() {
+    var _a, _b, _c;
+    if (!this.shouldCheckLedgerConsent()) return;
+    this.hasCheckedLedgerConsent = true;
+    this.store.setState({ isCheckingConsent: true });
+    try {
+      const status = await fetchNoticeConsentStatusForScope({
+        accessToken: this.options.accessToken,
+        ledgerBaseUrl: this.options.ledgerBaseUrl,
+        organisationUuid: this.options.org_uuid,
+        workspaceUuid: this.options.workspace_uuid,
+        noticeUuid: this.options.notice_uuid,
+        signal: (_a = this.abortController) == null ? void 0 : _a.signal
+      });
+      if (this.isDestroyed()) {
+        return;
+      }
+      if (status && isNoticeFullyConsented(status)) {
+        this.store.setState({ hasAlreadyConsented: true });
+        (_c = (_b = this.options).onAccept) == null ? void 0 : _c.call(_b);
+      }
+    } finally {
+      if (!this.isDestroyed()) {
+        this.store.setState({ isCheckingConsent: false });
+        this.tryAutoSubmit();
+      }
+    }
+  }
   handleStateChange(state, prevState) {
     if (prevState.isLoading && !state.isLoading && state.content) {
       this.rebuildUI();
@@ -4624,9 +4789,12 @@ var InlineController = class {
   }
   async tryAutoSubmit() {
     var _a, _b;
+    if (this.isDestroyed()) {
+      return;
+    }
     const state = this.store.getState();
     const accessToken = this.options.accessToken;
-    if (accessToken && state.content && this.areAllRequiredElementsChecked() && !state.isSubmitting && !this.hasSubmitted) {
+    if (accessToken && state.content && this.areAllRequiredElementsChecked() && !state.isSubmitting && !state.isCheckingConsent && !state.hasAlreadyConsented && !this.hasSubmitted) {
       this.hasSubmitted = true;
       try {
         await this.handleSubmit(accessToken);
@@ -4651,6 +4819,7 @@ var InlineController = class {
         workspace_uuid: this.options.workspace_uuid,
         accessToken: tokenToUse,
         baseUrl: this.options.baseUrl,
+        ledgerBaseUrl: this.options.ledgerBaseUrl,
         noticeUuid: content.notice_uuid,
         purposes: content.purposes.map((purpose) => {
           const hasSelectedRequired = purpose.data_elements.some(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@redacto.io/consent-sdk-js",
-  "version": "0.1.2-beta.0",
+  "version": "1.0.0-beta.1",
   "main": "dist/redacto.js",
   "module": "dist/redacto.mjs",
   "types": "dist/redacto.d.ts",