@redacto.io/consent-sdk-js 1.0.0 → 1.1.0

package/dist/redacto.d.mts

@@ -1,24 +1,39 @@
 /**
  * Optional sandbox options shared by the SDK's public option shapes and the
  * internal API params. When `token` is set the call sends the single
- * `X-Consent-Token` header instead of `Authorization: Bearer`, injects the
- * subject into each request's own payload, and takes org/workspace from these
- * fields instead of decoding the JWT.
+ * `X-Consent-Token` header instead of `Authorization: Bearer`, carries every
+ * supplied identifier in each request's own payload, and takes org/workspace
+ * from these fields instead of decoding the JWT.
  */
 type SandboxOptions = {
     token?: string;
-    /** UCIC — the client's own user id (`org_user_id`); takes precedence over the subject. */
+    /** UCIC — the client's own user id (`org_user_id`); takes precedence for the principal. */
     sandboxUcic?: string;
+    /** Email — carried on every request like a live JWT's `user_data.primary_email`. */
+    sandboxEmail?: string;
+    /** Mobile — carried on every request like a live JWT's `user_data.primary_mobile`. */
+    sandboxMobile?: string;
+    /**
+     * @deprecated Use `sandboxEmail` / `sandboxMobile` (and/or `email` / `mobile`)
+     * instead. Still accepted for backward compatibility: a value containing "@"
+     * is treated as the email, otherwise the mobile.
+     */
     sandboxSubject?: string;
     organisationUuid?: string;
     workspaceUuid?: string;
 };
 type Settings = {
     button: {
+        /** Styles the "accept selected" button. */
         accept: {
             backgroundColor: string;
             textColor: string;
         };
+        /** Optional: the accept-all shortcut falls back to `accept` when unset. */
+        acceptAll?: {
+            backgroundColor: string;
+            textColor: string;
+        };
         decline: {
             backgroundColor: string;
             textColor: string;

package/dist/redacto.d.ts

@@ -1,24 +1,39 @@
 /**
  * Optional sandbox options shared by the SDK's public option shapes and the
  * internal API params. When `token` is set the call sends the single
- * `X-Consent-Token` header instead of `Authorization: Bearer`, injects the
- * subject into each request's own payload, and takes org/workspace from these
- * fields instead of decoding the JWT.
+ * `X-Consent-Token` header instead of `Authorization: Bearer`, carries every
+ * supplied identifier in each request's own payload, and takes org/workspace
+ * from these fields instead of decoding the JWT.
  */
 type SandboxOptions = {
     token?: string;
-    /** UCIC — the client's own user id (`org_user_id`); takes precedence over the subject. */
+    /** UCIC — the client's own user id (`org_user_id`); takes precedence for the principal. */
     sandboxUcic?: string;
+    /** Email — carried on every request like a live JWT's `user_data.primary_email`. */
+    sandboxEmail?: string;
+    /** Mobile — carried on every request like a live JWT's `user_data.primary_mobile`. */
+    sandboxMobile?: string;
+    /**
+     * @deprecated Use `sandboxEmail` / `sandboxMobile` (and/or `email` / `mobile`)
+     * instead. Still accepted for backward compatibility: a value containing "@"
+     * is treated as the email, otherwise the mobile.
+     */
     sandboxSubject?: string;
     organisationUuid?: string;
     workspaceUuid?: string;
 };
 type Settings = {
     button: {
+        /** Styles the "accept selected" button. */
         accept: {
             backgroundColor: string;
             textColor: string;
         };
+        /** Optional: the accept-all shortcut falls back to `accept` when unset. */
+        acceptAll?: {
+            backgroundColor: string;
+            textColor: string;
+        };
         decline: {
             backgroundColor: string;
             textColor: string;