@redacto.io/consent-sdk-js 1.1.0 → 2.0.0

package/dist/redacto.d.mts

@@ -1,3 +1,28 @@
+/** How checkbox rows are drawn: native checkboxes, or switches. */
+declare const NOTICE_CONTROL_STYLES: readonly ["checkbox", "switch"];
+/** Phones: a centred modal, or a sheet docked to the bottom edge. */
+declare const NOTICE_MOBILE_LAYOUTS: readonly ["modal", "sheet"];
+/** Where the notice sits on wider screens. */
+declare const NOTICE_DESKTOP_POSITIONS: readonly ["center", "bottom-right", "bottom-left", "bottom-bar"];
+/** The page behind the notice: dimmed with `colors.overlay`, or left as is. */
+declare const NOTICE_BACKDROPS: readonly ["dim", "none"];
+/** Phone footer: three stacked buttons, or Accept All over the other two. */
+declare const NOTICE_PHONE_FOOTERS: readonly ["stacked", "paired"];
+declare const NOTICE_TEXT_SCALES: readonly ["sm", "md", "lg"];
+
+/**
+ * Surface and layout family a notice is drawn with, chosen in the Redacto
+ * console and served on `active_config.appearance.style`. Colours never come
+ * from the style: they come from the admin's palette, else the notice's brand.
+ */
+type AppearanceStyle = "classic" | "glass" | "minimal" | "soft";
+type NoticeControlStyle = (typeof NOTICE_CONTROL_STYLES)[number];
+type NoticeMobileLayout = (typeof NOTICE_MOBILE_LAYOUTS)[number];
+type NoticeDesktopPosition = (typeof NOTICE_DESKTOP_POSITIONS)[number];
+type NoticeBackdrop = (typeof NOTICE_BACKDROPS)[number];
+type NoticePhoneFooter = (typeof NOTICE_PHONE_FOOTERS)[number];
+type NoticeTextScale = (typeof NOTICE_TEXT_SCALES)[number];
+
 /**
  * Optional sandbox options shared by the SDK's public option shapes and the
  * internal API params. When `token` is set the call sends the single
@@ -22,35 +47,109 @@ type SandboxOptions = {
     organisationUuid?: string;
     workspaceUuid?: string;
 };
-type Settings = {
+type SelectionControlType = "checkbox" | "radio" | "dropdown";
+type SettingsButtonColors = {
+    backgroundColor?: string;
+    textColor?: string;
+};
+/**
+ * The colours `settings` can set: the top-level palette, and the dark palette
+ * under `settings.darkPalette`. Colours are any CSS colour and are used as given.
+ */
+type SettingsPalette = {
     button: {
-        /** Styles the "accept selected" button. */
-        accept: {
-            backgroundColor: string;
-            textColor: string;
+        /**
+         * The brand accent (checkboxes, switches, focus rings and Accept
+         * Selected's outline), and Accept All's colour when `acceptAll` is unset.
+         */
+        accept?: SettingsButtonColors;
+        /** The Accept All button; falls back to `accept`. */
+        acceptAll?: SettingsButtonColors;
+        /** The Accept Selected button itself. */
+        acceptSelected?: SettingsButtonColors;
+        decline?: SettingsButtonColors & {
+            borderColor?: string;
         };
-        /** Optional: the accept-all shortcut falls back to `accept` when unset. */
-        acceptAll?: {
-            backgroundColor: string;
-            textColor: string;
-        };
-        decline: {
-            backgroundColor: string;
-            textColor: string;
-        };
-        language: {
-            backgroundColor: string;
-            textColor: string;
+        language?: {
+            backgroundColor?: string;
+            textColor?: string;
             selectedBackgroundColor?: string;
             selectedTextColor?: string;
         };
     };
     link: string;
-    borderRadius?: string;
     backgroundColor?: string;
+    /** Raised surfaces: menus and panels, and the tint of the glass style. */
+    surfaceColor?: string;
     headingColor?: string;
     textColor?: string;
+    /** Descriptions and hints. */
+    mutedTextColor?: string;
     borderColor?: string;
+    /** The page dim behind the notice. */
+    overlayColor?: string;
+    toggle?: {
+        onColor?: string;
+        offColor?: string;
+        knobColor?: string;
+    };
+    /** The element being read aloud by text-to-speech. */
+    ttsHighlight?: {
+        backgroundColor?: string;
+        textColor?: string;
+    };
+};
+/**
+ * Code-side styling for the notice. Everything here is optional and overrides,
+ * key by key, the appearance set in the Redacto console
+ * (`active_config.appearance`): host settings, then the console, then the
+ * notice's brand colours and the SDK defaults.
+ */
+type Settings = SettingsPalette & {
+    /**
+     * Visual style: `"classic"`, `"glass"`, `"minimal"` or `"soft"`. Unknown
+     * values are ignored and the console's style (else classic) applies.
+     */
+    theme?: AppearanceStyle;
+    /** Defaults to "checkbox". Applies to purposes, product headings and data elements. */
+    selectionControl?: SelectionControlType;
+    /**
+     * How checkbox rows are drawn, in any style: `"checkbox"` or `"switch"`.
+     * Unset keeps checkboxes, in every style.
+     */
+    controlStyle?: NoticeControlStyle;
+    /**
+     * Asks "are you sure" before Accept All, Accept Selected or Decline submits
+     * (and before the inline embed auto-submits). Defaults to false.
+     */
+    confirmBeforeSubmit?: boolean;
+    borderRadius?: string;
+    /** Phones: `"modal"` (centred) or `"sheet"` (docked to the bottom edge). */
+    mobileLayout?: NoticeMobileLayout;
+    /** Wider screens: `"center"`, `"bottom-right"`, `"bottom-left"` or `"bottom-bar"`. */
+    desktopPosition?: NoticeDesktopPosition;
+    /** `"dim"` darkens the page behind the notice; `"none"` leaves it as is. */
+    backdrop?: NoticeBackdrop;
+    /** Collapse the notice text and the DPO block into disclosures. */
+    collapsibleSections?: boolean;
+    /** Phones: `"stacked"` buttons, or `"paired"` (Accept All over the other two). */
+    phoneFooter?: NoticePhoneFooter;
+    /** Follow the device's dark mode with `darkPalette` (else the console's). */
+    autoDark?: boolean;
+    darkPalette?: Partial<SettingsPalette>;
+    /** Desktop card width, any CSS length. */
+    maxWidth?: string;
+    /** Logo height, any CSS length. */
+    logoSize?: string;
+    /** `"sm"`, `"md"` or `"lg"`: scales every text size. */
+    textScale?: NoticeTextScale;
+    /** `false` turns entrances and transitions off. */
+    motion?: boolean;
+    /**
+     * CSS scoped to this notice. Target parts with `[data-redacto-part="…"]`;
+     * refused whole if it carries a disallowed token (`@import`, `javascript:`…).
+     */
+    customCss?: string;
     font?: string;
 };
 
@@ -73,8 +172,17 @@ type ModalOptions = SandboxOptions & {
      * customer code; optional third identifier alongside email/mobile.
      */
     ucic?: string;
+    /**
+     * The Redacto API host, e.g. `https://api.redacto.io` (recommended): the SDK
+     * reaches the consent server and the ledger under it. The consent server URL
+     * (`…/consent`) still works but is deprecated. Omit it and requests go to the
+     * production API.
+     */
     baseUrl?: string;
-    /** Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server. */
+    /**
+     * Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server.
+     * @deprecated Read only when `baseUrl` is the consent server URL (`…/consent`) or omitted, as in earlier releases. Ignored when `baseUrl` is the API host.
+     */
     ledgerBaseUrl?: string;
     language?: string;
     blockUI?: boolean;
@@ -88,6 +196,8 @@ type ModalOptions = SandboxOptions & {
     digilockerCallbackUrl?: string;
     includeFullyConsentedData?: boolean;
     reviewModeButtonText?: string;
+    defaultOpenProducts?: string[];
+    otpGate?: OtpGateOptions;
 };
 type InlineOptions = {
     target: string | HTMLElement;
@@ -96,8 +206,17 @@ type InlineOptions = {
     notice_uuid: string;
     accessToken?: string;
     refreshToken?: string;
+    /**
+     * The Redacto API host, e.g. `https://api.redacto.io` (recommended): the SDK
+     * reaches the consent server and the ledger under it. The consent server URL
+     * (`…/consent`) still works but is deprecated. Omit it and requests go to the
+     * production API.
+     */
     baseUrl?: string;
-    /** Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server. */
+    /**
+     * Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server.
+     * @deprecated Read only when `baseUrl` is the consent server URL (`…/consent`) or omitted, as in earlier releases. Ignored when `baseUrl` is the API host.
+     */
     ledgerBaseUrl?: string;
     language?: string;
     onAccept?: () => void;
@@ -109,10 +228,100 @@ type InlineOptions = {
 };
 type DigiLockerCallbackOptions = {
     accessToken: string;
+    /**
+     * The Redacto API host, e.g. `https://api.redacto.io`; the consent server URL
+     * (`…/consent`) still works but is deprecated. Omit it to use the one the
+     * notice stored before redirecting to DigiLocker.
+     */
     baseUrl?: string;
     onSuccess?: (verificationReference: string) => void;
     onError?: (error: Error, errorCode?: string) => void;
 };
+type OtpVerifyResult = {
+    ok: boolean;
+    message?: string;
+};
+type OtpGateOptions = {
+    required: boolean;
+    onVerify: (code: string) => Promise<OtpVerifyResult>;
+    title?: string;
+    description?: string;
+    submitLabel?: string;
+};
+
+type AssistedOptions = {
+    organisationUuid: string;
+    workspaceUuid: string;
+    noticeUuid: string;
+    /**
+     * The Redacto API host, e.g. `https://api.redacto.io` (recommended): the SDK
+     * reaches the consent server and the ledger under it. The consent server URL
+     * (`…/consent`) still works but is deprecated. Omit it and requests go to the
+     * production API.
+     */
+    baseUrl?: string;
+    /**
+     * Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server.
+     * @deprecated Read only when `baseUrl` is the consent server URL (`…/consent`) or omitted, as in earlier releases. Ignored when `baseUrl` is the API host.
+     */
+    ledgerBaseUrl?: string;
+    /**
+     * Optional code-side styling. The notice looks as set in the Redacto console
+     * (Display settings, Appearance); anything set here overrides the console
+     * for that key only. Display only: the submission and its verification are
+     * unchanged.
+     */
+    settings?: Partial<Settings>;
+    onDecline?: () => void;
+    onComplete?: () => void;
+    onError?: (error: Error) => void;
+};
+
+type PrivacyCenterOptions = {
+    /** Element, or CSS selector for it, that the Privacy Center is mounted in. */
+    target: string | HTMLElement;
+    /** The organisation's UUID. Required unless `url` is given. */
+    organisationUuid?: string;
+    /**
+     * @deprecated Pass `organisationUuid`. Still frames the hosted page for this
+     * slug when no `organisationUuid` is given, with a one-time console warning;
+     * will be removed in a future major release.
+     */
+    slug?: string;
+    /** Full URL of the hosted Privacy Center, e.g. on a custom domain. Wins over `organisationUuid`. */
+    url?: string;
+    /** Where the hosted Privacy Center lives. Defaults to Redacto's production console. */
+    origin?: string;
+    /** Language to open in (`en`, `hi`, …), sent as `?lang=`. */
+    language?: string;
+    /**
+     * A fixed height (`640` or `"80vh"`). Leave it out (or pass `"auto"`) to let
+     * the frame grow to fit the page, starting at 720px.
+     */
+    height?: number | string;
+    /** The frame's accessible title. Defaults to "Privacy Center". */
+    title?: string;
+};
+type PrivacyCenterHandle = {
+    iframe: HTMLIFrameElement;
+    /** Removes the frame and stops listening for its height. */
+    destroy: () => void;
+};
+
+type ApiErrorCode = "INVALID_TOKEN" | "TOKEN_TENANT_MISMATCH" | "UNAUTHORIZED" | "USER_NOT_FOUND" | "USER_EMAIL_MISMATCH" | "USER_MOBILE_MISMATCH" | "USER_CONTACT_MISMATCH" | "NO_IDENTIFIER_PROVIDED" | "INVALID_PAYLOAD" | "VALIDATION_ERROR" | "NOTICE_NOT_FOUND" | "NOTICE_CONFIGURATION_NOT_FOUND" | "NOTICE_STILL_IN_DRAFT" | "CONSENT_ALREADY_PROVIDED" | "PURPOSE_NOT_FOUND" | "INVALID_PURPOSE" | "INVALID_DATA_ELEMENTS" | "MISSING_PURPOSE" | "MISSING_DATA_ELEMENTS" | "REQUIRED_DATA_ELEMENT_NOT_ENABLED" | "AUDIO_NOT_FOUND" | "INVALID_LANGUAGE" | "VERIFICATION_FAILED" | "VERIFICATION_EXPIRED" | "GUARDIAN_INFO_NOT_FOUND" | "GUARDIAN_SESSION_INVALID" | "SESSION_EXPIRED" | "INTERNAL_ERROR";
+type ApiErrorCodeLike = ApiErrorCode | (string & {});
+
+declare class ApiError extends Error {
+    readonly status: number;
+    readonly code?: ApiErrorCodeLike;
+    readonly shouldRequestNew?: boolean;
+    constructor(opts: {
+        status: number;
+        code?: ApiErrorCodeLike;
+        message: string;
+        shouldRequestNew?: boolean;
+    });
+}
 
 /**
  * Initialize a modal consent dialog.
@@ -124,6 +333,13 @@ declare function init(options: ModalOptions): void;
  * Renders consent purposes inside a target container element.
  */
 declare function inline(options: InlineOptions): void;
+declare function updateToken(accessToken: string): void;
+declare function assisted(options: AssistedOptions): void;
+/**
+ * Mount the hosted Privacy Center in an iframe inside a target element.
+ * Returns a handle whose `destroy()` removes it.
+ */
+declare function privacyCenter(options: PrivacyCenterOptions): PrivacyCenterHandle;
 /**
  * Destroy all active consent instances.
  */
@@ -136,9 +352,12 @@ declare function digilockerCallback(options: DigiLockerCallbackOptions): void;
 declare const RedactoConsent: {
     init: typeof init;
     inline: typeof inline;
+    assisted: typeof assisted;
+    privacyCenter: typeof privacyCenter;
     destroy: typeof destroy;
     digilockerCallback: typeof digilockerCallback;
+    updateToken: typeof updateToken;
     version: string;
 };
 
-export { type DigiLockerCallbackOptions, type InlineOptions, type ModalOptions, type Settings, RedactoConsent as default, destroy, digilockerCallback, init, inline };
+export { ApiError, type ApiErrorCode, type AssistedOptions, type DigiLockerCallbackOptions, type InlineOptions, type ModalOptions, type OtpGateOptions, type OtpVerifyResult, type PrivacyCenterHandle, type PrivacyCenterOptions, type Settings, assisted, RedactoConsent as default, destroy, digilockerCallback, init, inline, privacyCenter, updateToken };

package/dist/redacto.d.ts

@@ -1,3 +1,28 @@
+/** How checkbox rows are drawn: native checkboxes, or switches. */
+declare const NOTICE_CONTROL_STYLES: readonly ["checkbox", "switch"];
+/** Phones: a centred modal, or a sheet docked to the bottom edge. */
+declare const NOTICE_MOBILE_LAYOUTS: readonly ["modal", "sheet"];
+/** Where the notice sits on wider screens. */
+declare const NOTICE_DESKTOP_POSITIONS: readonly ["center", "bottom-right", "bottom-left", "bottom-bar"];
+/** The page behind the notice: dimmed with `colors.overlay`, or left as is. */
+declare const NOTICE_BACKDROPS: readonly ["dim", "none"];
+/** Phone footer: three stacked buttons, or Accept All over the other two. */
+declare const NOTICE_PHONE_FOOTERS: readonly ["stacked", "paired"];
+declare const NOTICE_TEXT_SCALES: readonly ["sm", "md", "lg"];
+
+/**
+ * Surface and layout family a notice is drawn with, chosen in the Redacto
+ * console and served on `active_config.appearance.style`. Colours never come
+ * from the style: they come from the admin's palette, else the notice's brand.
+ */
+type AppearanceStyle = "classic" | "glass" | "minimal" | "soft";
+type NoticeControlStyle = (typeof NOTICE_CONTROL_STYLES)[number];
+type NoticeMobileLayout = (typeof NOTICE_MOBILE_LAYOUTS)[number];
+type NoticeDesktopPosition = (typeof NOTICE_DESKTOP_POSITIONS)[number];
+type NoticeBackdrop = (typeof NOTICE_BACKDROPS)[number];
+type NoticePhoneFooter = (typeof NOTICE_PHONE_FOOTERS)[number];
+type NoticeTextScale = (typeof NOTICE_TEXT_SCALES)[number];
+
 /**
  * Optional sandbox options shared by the SDK's public option shapes and the
  * internal API params. When `token` is set the call sends the single
@@ -22,35 +47,109 @@ type SandboxOptions = {
     organisationUuid?: string;
     workspaceUuid?: string;
 };
-type Settings = {
+type SelectionControlType = "checkbox" | "radio" | "dropdown";
+type SettingsButtonColors = {
+    backgroundColor?: string;
+    textColor?: string;
+};
+/**
+ * The colours `settings` can set: the top-level palette, and the dark palette
+ * under `settings.darkPalette`. Colours are any CSS colour and are used as given.
+ */
+type SettingsPalette = {
     button: {
-        /** Styles the "accept selected" button. */
-        accept: {
-            backgroundColor: string;
-            textColor: string;
+        /**
+         * The brand accent (checkboxes, switches, focus rings and Accept
+         * Selected's outline), and Accept All's colour when `acceptAll` is unset.
+         */
+        accept?: SettingsButtonColors;
+        /** The Accept All button; falls back to `accept`. */
+        acceptAll?: SettingsButtonColors;
+        /** The Accept Selected button itself. */
+        acceptSelected?: SettingsButtonColors;
+        decline?: SettingsButtonColors & {
+            borderColor?: string;
         };
-        /** Optional: the accept-all shortcut falls back to `accept` when unset. */
-        acceptAll?: {
-            backgroundColor: string;
-            textColor: string;
-        };
-        decline: {
-            backgroundColor: string;
-            textColor: string;
-        };
-        language: {
-            backgroundColor: string;
-            textColor: string;
+        language?: {
+            backgroundColor?: string;
+            textColor?: string;
             selectedBackgroundColor?: string;
             selectedTextColor?: string;
         };
     };
     link: string;
-    borderRadius?: string;
     backgroundColor?: string;
+    /** Raised surfaces: menus and panels, and the tint of the glass style. */
+    surfaceColor?: string;
     headingColor?: string;
     textColor?: string;
+    /** Descriptions and hints. */
+    mutedTextColor?: string;
     borderColor?: string;
+    /** The page dim behind the notice. */
+    overlayColor?: string;
+    toggle?: {
+        onColor?: string;
+        offColor?: string;
+        knobColor?: string;
+    };
+    /** The element being read aloud by text-to-speech. */
+    ttsHighlight?: {
+        backgroundColor?: string;
+        textColor?: string;
+    };
+};
+/**
+ * Code-side styling for the notice. Everything here is optional and overrides,
+ * key by key, the appearance set in the Redacto console
+ * (`active_config.appearance`): host settings, then the console, then the
+ * notice's brand colours and the SDK defaults.
+ */
+type Settings = SettingsPalette & {
+    /**
+     * Visual style: `"classic"`, `"glass"`, `"minimal"` or `"soft"`. Unknown
+     * values are ignored and the console's style (else classic) applies.
+     */
+    theme?: AppearanceStyle;
+    /** Defaults to "checkbox". Applies to purposes, product headings and data elements. */
+    selectionControl?: SelectionControlType;
+    /**
+     * How checkbox rows are drawn, in any style: `"checkbox"` or `"switch"`.
+     * Unset keeps checkboxes, in every style.
+     */
+    controlStyle?: NoticeControlStyle;
+    /**
+     * Asks "are you sure" before Accept All, Accept Selected or Decline submits
+     * (and before the inline embed auto-submits). Defaults to false.
+     */
+    confirmBeforeSubmit?: boolean;
+    borderRadius?: string;
+    /** Phones: `"modal"` (centred) or `"sheet"` (docked to the bottom edge). */
+    mobileLayout?: NoticeMobileLayout;
+    /** Wider screens: `"center"`, `"bottom-right"`, `"bottom-left"` or `"bottom-bar"`. */
+    desktopPosition?: NoticeDesktopPosition;
+    /** `"dim"` darkens the page behind the notice; `"none"` leaves it as is. */
+    backdrop?: NoticeBackdrop;
+    /** Collapse the notice text and the DPO block into disclosures. */
+    collapsibleSections?: boolean;
+    /** Phones: `"stacked"` buttons, or `"paired"` (Accept All over the other two). */
+    phoneFooter?: NoticePhoneFooter;
+    /** Follow the device's dark mode with `darkPalette` (else the console's). */
+    autoDark?: boolean;
+    darkPalette?: Partial<SettingsPalette>;
+    /** Desktop card width, any CSS length. */
+    maxWidth?: string;
+    /** Logo height, any CSS length. */
+    logoSize?: string;
+    /** `"sm"`, `"md"` or `"lg"`: scales every text size. */
+    textScale?: NoticeTextScale;
+    /** `false` turns entrances and transitions off. */
+    motion?: boolean;
+    /**
+     * CSS scoped to this notice. Target parts with `[data-redacto-part="…"]`;
+     * refused whole if it carries a disallowed token (`@import`, `javascript:`…).
+     */
+    customCss?: string;
     font?: string;
 };
 
@@ -73,8 +172,17 @@ type ModalOptions = SandboxOptions & {
      * customer code; optional third identifier alongside email/mobile.
      */
     ucic?: string;
+    /**
+     * The Redacto API host, e.g. `https://api.redacto.io` (recommended): the SDK
+     * reaches the consent server and the ledger under it. The consent server URL
+     * (`…/consent`) still works but is deprecated. Omit it and requests go to the
+     * production API.
+     */
     baseUrl?: string;
-    /** Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server. */
+    /**
+     * Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server.
+     * @deprecated Read only when `baseUrl` is the consent server URL (`…/consent`) or omitted, as in earlier releases. Ignored when `baseUrl` is the API host.
+     */
     ledgerBaseUrl?: string;
     language?: string;
     blockUI?: boolean;
@@ -88,6 +196,8 @@ type ModalOptions = SandboxOptions & {
     digilockerCallbackUrl?: string;
     includeFullyConsentedData?: boolean;
     reviewModeButtonText?: string;
+    defaultOpenProducts?: string[];
+    otpGate?: OtpGateOptions;
 };
 type InlineOptions = {
     target: string | HTMLElement;
@@ -96,8 +206,17 @@ type InlineOptions = {
     notice_uuid: string;
     accessToken?: string;
     refreshToken?: string;
+    /**
+     * The Redacto API host, e.g. `https://api.redacto.io` (recommended): the SDK
+     * reaches the consent server and the ledger under it. The consent server URL
+     * (`…/consent`) still works but is deprecated. Omit it and requests go to the
+     * production API.
+     */
     baseUrl?: string;
-    /** Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server. */
+    /**
+     * Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server.
+     * @deprecated Read only when `baseUrl` is the consent server URL (`…/consent`) or omitted, as in earlier releases. Ignored when `baseUrl` is the API host.
+     */
     ledgerBaseUrl?: string;
     language?: string;
     onAccept?: () => void;
@@ -109,10 +228,100 @@ type InlineOptions = {
 };
 type DigiLockerCallbackOptions = {
     accessToken: string;
+    /**
+     * The Redacto API host, e.g. `https://api.redacto.io`; the consent server URL
+     * (`…/consent`) still works but is deprecated. Omit it to use the one the
+     * notice stored before redirecting to DigiLocker.
+     */
     baseUrl?: string;
     onSuccess?: (verificationReference: string) => void;
     onError?: (error: Error, errorCode?: string) => void;
 };
+type OtpVerifyResult = {
+    ok: boolean;
+    message?: string;
+};
+type OtpGateOptions = {
+    required: boolean;
+    onVerify: (code: string) => Promise<OtpVerifyResult>;
+    title?: string;
+    description?: string;
+    submitLabel?: string;
+};
+
+type AssistedOptions = {
+    organisationUuid: string;
+    workspaceUuid: string;
+    noticeUuid: string;
+    /**
+     * The Redacto API host, e.g. `https://api.redacto.io` (recommended): the SDK
+     * reaches the consent server and the ledger under it. The consent server URL
+     * (`…/consent`) still works but is deprecated. Omit it and requests go to the
+     * production API.
+     */
+    baseUrl?: string;
+    /**
+     * Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server.
+     * @deprecated Read only when `baseUrl` is the consent server URL (`…/consent`) or omitted, as in earlier releases. Ignored when `baseUrl` is the API host.
+     */
+    ledgerBaseUrl?: string;
+    /**
+     * Optional code-side styling. The notice looks as set in the Redacto console
+     * (Display settings, Appearance); anything set here overrides the console
+     * for that key only. Display only: the submission and its verification are
+     * unchanged.
+     */
+    settings?: Partial<Settings>;
+    onDecline?: () => void;
+    onComplete?: () => void;
+    onError?: (error: Error) => void;
+};
+
+type PrivacyCenterOptions = {
+    /** Element, or CSS selector for it, that the Privacy Center is mounted in. */
+    target: string | HTMLElement;
+    /** The organisation's UUID. Required unless `url` is given. */
+    organisationUuid?: string;
+    /**
+     * @deprecated Pass `organisationUuid`. Still frames the hosted page for this
+     * slug when no `organisationUuid` is given, with a one-time console warning;
+     * will be removed in a future major release.
+     */
+    slug?: string;
+    /** Full URL of the hosted Privacy Center, e.g. on a custom domain. Wins over `organisationUuid`. */
+    url?: string;
+    /** Where the hosted Privacy Center lives. Defaults to Redacto's production console. */
+    origin?: string;
+    /** Language to open in (`en`, `hi`, …), sent as `?lang=`. */
+    language?: string;
+    /**
+     * A fixed height (`640` or `"80vh"`). Leave it out (or pass `"auto"`) to let
+     * the frame grow to fit the page, starting at 720px.
+     */
+    height?: number | string;
+    /** The frame's accessible title. Defaults to "Privacy Center". */
+    title?: string;
+};
+type PrivacyCenterHandle = {
+    iframe: HTMLIFrameElement;
+    /** Removes the frame and stops listening for its height. */
+    destroy: () => void;
+};
+
+type ApiErrorCode = "INVALID_TOKEN" | "TOKEN_TENANT_MISMATCH" | "UNAUTHORIZED" | "USER_NOT_FOUND" | "USER_EMAIL_MISMATCH" | "USER_MOBILE_MISMATCH" | "USER_CONTACT_MISMATCH" | "NO_IDENTIFIER_PROVIDED" | "INVALID_PAYLOAD" | "VALIDATION_ERROR" | "NOTICE_NOT_FOUND" | "NOTICE_CONFIGURATION_NOT_FOUND" | "NOTICE_STILL_IN_DRAFT" | "CONSENT_ALREADY_PROVIDED" | "PURPOSE_NOT_FOUND" | "INVALID_PURPOSE" | "INVALID_DATA_ELEMENTS" | "MISSING_PURPOSE" | "MISSING_DATA_ELEMENTS" | "REQUIRED_DATA_ELEMENT_NOT_ENABLED" | "AUDIO_NOT_FOUND" | "INVALID_LANGUAGE" | "VERIFICATION_FAILED" | "VERIFICATION_EXPIRED" | "GUARDIAN_INFO_NOT_FOUND" | "GUARDIAN_SESSION_INVALID" | "SESSION_EXPIRED" | "INTERNAL_ERROR";
+type ApiErrorCodeLike = ApiErrorCode | (string & {});
+
+declare class ApiError extends Error {
+    readonly status: number;
+    readonly code?: ApiErrorCodeLike;
+    readonly shouldRequestNew?: boolean;
+    constructor(opts: {
+        status: number;
+        code?: ApiErrorCodeLike;
+        message: string;
+        shouldRequestNew?: boolean;
+    });
+}
 
 /**
  * Initialize a modal consent dialog.
@@ -124,6 +333,13 @@ declare function init(options: ModalOptions): void;
  * Renders consent purposes inside a target container element.
  */
 declare function inline(options: InlineOptions): void;
+declare function updateToken(accessToken: string): void;
+declare function assisted(options: AssistedOptions): void;
+/**
+ * Mount the hosted Privacy Center in an iframe inside a target element.
+ * Returns a handle whose `destroy()` removes it.
+ */
+declare function privacyCenter(options: PrivacyCenterOptions): PrivacyCenterHandle;
 /**
  * Destroy all active consent instances.
  */
@@ -136,9 +352,12 @@ declare function digilockerCallback(options: DigiLockerCallbackOptions): void;
 declare const RedactoConsent: {
     init: typeof init;
     inline: typeof inline;
+    assisted: typeof assisted;
+    privacyCenter: typeof privacyCenter;
     destroy: typeof destroy;
     digilockerCallback: typeof digilockerCallback;
+    updateToken: typeof updateToken;
     version: string;
 };
 
-export { type DigiLockerCallbackOptions, type InlineOptions, type ModalOptions, type Settings, RedactoConsent as default, destroy, digilockerCallback, init, inline };
+export { ApiError, type ApiErrorCode, type AssistedOptions, type DigiLockerCallbackOptions, type InlineOptions, type ModalOptions, type OtpGateOptions, type OtpVerifyResult, type PrivacyCenterHandle, type PrivacyCenterOptions, type Settings, assisted, RedactoConsent as default, destroy, digilockerCallback, init, inline, privacyCenter, updateToken };