@redacto.io/consent-sdk-js 1.0.0-beta.0 → 1.0.0

package/dist/redacto.d.mts

@@ -1,3 +1,18 @@
+/**
+ * Optional sandbox options shared by the SDK's public option shapes and the
+ * internal API params. When `token` is set the call sends the single
+ * `X-Consent-Token` header instead of `Authorization: Bearer`, injects the
+ * subject into each request's own payload, and takes org/workspace from these
+ * fields instead of decoding the JWT.
+ */
+type SandboxOptions = {
+    token?: string;
+    /** UCIC — the client's own user id (`org_user_id`); takes precedence over the subject. */
+    sandboxUcic?: string;
+    sandboxSubject?: string;
+    organisationUuid?: string;
+    workspaceUuid?: string;
+};
 type Settings = {
     button: {
         accept: {
@@ -24,10 +39,25 @@ type Settings = {
     font?: string;
 };
 
-type ModalOptions = {
+type ModalOptions = SandboxOptions & {
     noticeId: string;
-    accessToken: string;
-    refreshToken: string;
+    /** JWT access token. Optional so sandbox mode (see `token`) can omit it. */
+    accessToken?: string;
+    /** JWT refresh token. Optional; accepted for source-compat, currently unused. */
+    refreshToken?: string;
+    /**
+     * Sandbox test subject email. The static `token` carries no identity, so the
+     * acting principal is read from `email` (or `mobile`) -- both optional, supply
+     * whichever you have. Mirrors the React SDK props.
+     */
+    email?: string;
+    /** Sandbox test subject mobile (used when `email` is absent). */
+    mobile?: string;
+    /**
+     * Sandbox UCIC: the client's own user id / org_user_id, e.g. a UUID or
+     * customer code; optional third identifier alongside email/mobile.
+     */
+    ucic?: string;
     baseUrl?: string;
     /** Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server. */
     ledgerBaseUrl?: string;

package/dist/redacto.d.ts

@@ -1,3 +1,18 @@
+/**
+ * Optional sandbox options shared by the SDK's public option shapes and the
+ * internal API params. When `token` is set the call sends the single
+ * `X-Consent-Token` header instead of `Authorization: Bearer`, injects the
+ * subject into each request's own payload, and takes org/workspace from these
+ * fields instead of decoding the JWT.
+ */
+type SandboxOptions = {
+    token?: string;
+    /** UCIC — the client's own user id (`org_user_id`); takes precedence over the subject. */
+    sandboxUcic?: string;
+    sandboxSubject?: string;
+    organisationUuid?: string;
+    workspaceUuid?: string;
+};
 type Settings = {
     button: {
         accept: {
@@ -24,10 +39,25 @@ type Settings = {
     font?: string;
 };
 
-type ModalOptions = {
+type ModalOptions = SandboxOptions & {
     noticeId: string;
-    accessToken: string;
-    refreshToken: string;
+    /** JWT access token. Optional so sandbox mode (see `token`) can omit it. */
+    accessToken?: string;
+    /** JWT refresh token. Optional; accepted for source-compat, currently unused. */
+    refreshToken?: string;
+    /**
+     * Sandbox test subject email. The static `token` carries no identity, so the
+     * acting principal is read from `email` (or `mobile`) -- both optional, supply
+     * whichever you have. Mirrors the React SDK props.
+     */
+    email?: string;
+    /** Sandbox test subject mobile (used when `email` is absent). */
+    mobile?: string;
+    /**
+     * Sandbox UCIC: the client's own user id / org_user_id, e.g. a UUID or
+     * customer code; optional third identifier alongside email/mobile.
+     */
+    ucic?: string;
     baseUrl?: string;
     /** Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server. */
     ledgerBaseUrl?: string;