@redacto.io/consent-sdk-react-native 4.0.1-beta.0 → 5.0.0-beta.0

package/dist/privacy-center.mjs

@@ -9868,7 +9868,15 @@ function arrayBufferToBase64(buffer) {
   }
   return result;
 }
-function createConsentClient(baseUrl) {
+function createConsentClient(baseUrl, ledgerBaseUrl) {
+  const useLedger = Boolean(ledgerBaseUrl);
+  const ledgerBase = (ledgerBaseUrl != null ? ledgerBaseUrl : "").replace(/\/$/, "");
+  function ledgerUrl(baseRequest, path) {
+    if (!useLedger) {
+      throw new Error("ledgerUrl called without a configured ledgerBaseUrl");
+    }
+    return `${ledgerBase}/public/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}${path}`;
+  }
   async function privacyCenterApiFetch(url, options) {
     const { authToken, getAuthToken, headers = {}, ...fetchOptions } = options;
     const requestHeaders = new Headers();
@@ -10070,7 +10078,8 @@ function createConsentClient(baseUrl) {
       if (params.product_uuid) queryParams.append("product_uuid", params.product_uuid);
       if (params.language) queryParams.append("language", params.language);
       const queryString = queryParams.toString();
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/user-consents${queryString ? `?${queryString}` : ""}`;
+      const consentsSuffix = `/user-consents${queryString ? `?${queryString}` : ""}`;
+      const url = useLedger ? ledgerUrl(baseRequest, consentsSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${consentsSuffix}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10090,7 +10099,8 @@ function createConsentClient(baseUrl) {
       if (params.language) queryParams.append("language", params.language);
       if (params.nominator_uuid) queryParams.append("nominator_uuid", params.nominator_uuid);
       const queryString = queryParams.toString();
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/user-consents/${productUuid}/purposes${queryString ? `?${queryString}` : ""}`;
+      const purposesSuffix = `/user-consents/${productUuid}/purposes${queryString ? `?${queryString}` : ""}`;
+      const url = useLedger ? ledgerUrl(baseRequest, purposesSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${purposesSuffix}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10098,17 +10108,66 @@ function createConsentClient(baseUrl) {
       });
     },
     /**
-     * Manage consent (privacy center) - revoke, regrant, or renew
+     * Manage consent (privacy center) - revoke, regrant, or renew.
+     *
+     * The Go ledger has no manage-consent route, so with a ledger configured
+     * this is expressed as a `partial` submit-consent on the ledger — mirroring
+     * the Python dual-write relay: the affected purpose is re-submitted with
+     * `selected: false` to revoke or `selected: true` to regrant/renew, and
+     * `partial: true` so the rest of the notice's purposes are left untouched.
+     * The principal is resolved from the JWT, so no `contact`/identifiers are
+     * sent in the body.
+     *
+     * Without a ledger, the legacy Python `/manage-consent?status=` endpoint is
+     * used with its `{ purpose_uuid, contact, ... }` payload.
      */
-    async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/manage-consent?status=${status}`;
-      const body = { purpose_uuid: purposeId, contact };
-      if (nominatorContact) {
-        body.nominator_contact = nominatorContact;
+    async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids, noticeUuid, dataElements) {
+      if (!useLedger) {
+        const url2 = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/manage-consent?status=${status}`;
+        const body2 = { purpose_uuid: purposeId, contact };
+        if (nominatorContact) {
+          body2.nominator_contact = nominatorContact;
+        }
+        if (Array.isArray(dataElementUuids) && dataElementUuids.length > 0) {
+          body2.data_element_uuids = dataElementUuids;
+        }
+        return privacyCenterApiFetch(url2, {
+          ...options,
+          method: "POST",
+          body: JSON.stringify(body2),
+          authToken: authToken || baseRequest.authToken
+        });
       }
-      if (Array.isArray(dataElementUuids) && dataElementUuids.length > 0) {
-        body.data_element_uuids = dataElementUuids;
+      if (!noticeUuid) {
+        throw new Error("notice_uuid is required to manage consent via the ledger");
       }
+      const purposeSelected = status !== "revoke";
+      const elements = (dataElements != null ? dataElements : []).map((de) => {
+        let selected;
+        if (status === "revoke") {
+          selected = false;
+        } else if (status === "regrant") {
+          selected = Array.isArray(dataElementUuids) ? dataElementUuids.includes(de.uuid) : de.selected;
+        } else {
+          selected = de.selected;
+        }
+        return { uuid: de.uuid, selected };
+      });
+      const body = {
+        notice_uuid: noticeUuid,
+        partial: true,
+        declined: false,
+        select_all_mandatory: false,
+        self_declared_adult: false,
+        purposes: [
+          {
+            purpose_uuid: purposeId,
+            selected: purposeSelected,
+            data_elements: elements
+          }
+        ]
+      };
+      const url = ledgerUrl(baseRequest, "/submit-consent");
       return privacyCenterApiFetch(url, {
         ...options,
         method: "POST",
@@ -10145,7 +10204,8 @@ function createConsentClient(baseUrl) {
       if (params.notice_uuid) queryParams.append("notice_uuid", params.notice_uuid);
       if (params.language) queryParams.append("language", params.language);
       const queryString = queryParams.toString();
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/receipts${queryString ? `?${queryString}` : ""}`;
+      const receiptsSuffix = `/receipts${queryString ? `?${queryString}` : ""}`;
+      const url = useLedger ? ledgerUrl(baseRequest, receiptsSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${receiptsSuffix}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10159,7 +10219,7 @@ function createConsentClient(baseUrl) {
      * the RN UI writes to a temp file to open/share. 404 => not found.
      */
     async getReceiptPdf(baseRequest, receiptUuid, authToken) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/receipts/${receiptUuid}/pdf`;
+      const url = useLedger ? ledgerUrl(baseRequest, `/receipts/${receiptUuid}/download`) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/receipts/${receiptUuid}/pdf`;
       const token = authToken || baseRequest.authToken;
       const requestHeaders = new Headers();
       requestHeaders.set("Accept", "application/pdf");
@@ -10318,11 +10378,16 @@ function createConsentClient(baseUrl) {
 // src/RedactoPrivacyCenter/context/BaseUrlContext.tsx
 import { jsx as jsx3 } from "react/jsx-runtime";
 var BaseUrlContext = createContext(null);
-function BaseUrlProvider({ children, baseUrl }) {
+function BaseUrlProvider({
+  children,
+  baseUrl,
+  ledgerBaseUrl
+}) {
   const value = useMemo(() => ({
     baseUrl,
-    consentClient: createConsentClient(baseUrl)
-  }), [baseUrl]);
+    ledgerBaseUrl,
+    consentClient: createConsentClient(baseUrl, ledgerBaseUrl)
+  }), [baseUrl, ledgerBaseUrl]);
   return /* @__PURE__ */ jsx3(BaseUrlContext.Provider, { value, children });
 }
 function useBaseUrl() {
@@ -10521,7 +10586,6 @@ async function fetchUserConsentsServer(params) {
   }
 }
 async function manageConsentServer(params) {
-  var _a3;
   try {
     if (!params.consentClient) {
       throw new Error("Consent client is required");
@@ -10539,9 +10603,14 @@ async function manageConsentServer(params) {
       params.authToken,
       void 0,
       params.nominatorContact,
-      params.dataElementUuids
+      params.dataElementUuids,
+      params.noticeUuid,
+      params.dataElements
     );
-    return (_a3 = result == null ? void 0 : result.success) != null ? _a3 : null;
+    if (result && typeof result === "object" && "success" in result) {
+      return Boolean(result.success);
+    }
+    return true;
   } catch (error) {
     if (isAuthError(error)) {
       throw error;
@@ -11025,7 +11094,9 @@ var manageConsent = async ({
   authContext,
   consentClient,
   nominatorContact,
-  dataElementUuids
+  dataElementUuids,
+  noticeUuid,
+  dataElements
 }) => {
   try {
     const accessToken = await ensureValidToken(organizationId, workspaceId, void 0, authContext, consentClient);
@@ -11041,7 +11112,9 @@ var manageConsent = async ({
       authToken: accessToken,
       consentClient,
       nominatorContact,
-      dataElementUuids
+      dataElementUuids,
+      noticeUuid,
+      dataElements
     });
     return result;
   } catch (error) {
@@ -11060,7 +11133,9 @@ var manageConsent = async ({
         authToken: newAccessToken || void 0,
         consentClient,
         nominatorContact,
-        dataElementUuids
+        dataElementUuids,
+        noticeUuid,
+        dataElements
       });
     }
     console.error(`Error ${action} consent:`, error);
@@ -15008,6 +15083,7 @@ function ConsentManager() {
   }, [fetchData]);
   const handleManageConsent = useCallback6(
     async (purposeId, action, nominatorContact, dataElementUuids) => {
+      var _a3, _b;
       if (!organizationId || !workspaceId || !email) return;
       setIsManageLoading(true);
       try {
@@ -15020,7 +15096,14 @@ function ConsentManager() {
           authContext,
           consentClient,
           nominatorContact,
-          dataElementUuids
+          dataElementUuids,
+          // Ledger mode: the partial submit-consent needs the notice and the
+          // purpose's data elements; both ride on the selected (ledger-served) row.
+          noticeUuid: (_a3 = selectedRecord == null ? void 0 : selectedRecord.notice_uuid) != null ? _a3 : void 0,
+          dataElements: (_b = selectedRecord == null ? void 0 : selectedRecord.data_elements) == null ? void 0 : _b.map((de) => ({
+            uuid: de.uuid,
+            selected: de.selected
+          }))
         });
         setIsModalOpen(false);
         setSelectedRecord(null);
@@ -15032,7 +15115,7 @@ function ConsentManager() {
         setIsManageLoading(false);
       }
     },
-    [organizationId, workspaceId, email, authContext, consentClient, fetchData, t]
+    [organizationId, workspaceId, email, authContext, consentClient, selectedRecord, fetchData, t]
   );
   const handleExport = useCallback6(async () => {
     if (!consentData.length) return;
@@ -20448,6 +20531,7 @@ function PrivacyCenterContent({ onBack }) {
 }
 function RedactoPrivacyCenter({
   baseUrl,
+  ledgerBaseUrl,
   slug,
   // `theme` is accepted for backwards compatibility but no longer used — the
   // Privacy Center themes itself from per-org branding.
@@ -20459,7 +20543,7 @@ function RedactoPrivacyCenter({
   initialCaseUuid,
   onBack
 }) {
-  return /* @__PURE__ */ jsx64(SafeAreaBoundary, { children: /* @__PURE__ */ jsx64(KeyboardProviderCompat, { children: /* @__PURE__ */ jsx64(QueryClientProvider, { client: privacyCenterQueryClient, children: /* @__PURE__ */ jsx64(I18nextProvider, { i18n: i18n_default, children: /* @__PURE__ */ jsx64(ThemeProvider, { slug, baseUrl, children: /* @__PURE__ */ jsx64(BaseUrlProvider, { baseUrl, children: /* @__PURE__ */ jsx64(
+  return /* @__PURE__ */ jsx64(SafeAreaBoundary, { children: /* @__PURE__ */ jsx64(KeyboardProviderCompat, { children: /* @__PURE__ */ jsx64(QueryClientProvider, { client: privacyCenterQueryClient, children: /* @__PURE__ */ jsx64(I18nextProvider, { i18n: i18n_default, children: /* @__PURE__ */ jsx64(ThemeProvider, { slug, baseUrl, children: /* @__PURE__ */ jsx64(BaseUrlProvider, { baseUrl, ledgerBaseUrl, children: /* @__PURE__ */ jsx64(
     AuthProvider,
     {
       accessToken,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@redacto.io/consent-sdk-react-native",
-  "version": "4.0.1-beta.0",
+  "version": "5.0.0-beta.0",
   "description": "React Native SDK for integrating Redacto consent notices and privacy center in mobile apps.",
   "keywords": [
     "consent",
@@ -101,12 +101,14 @@
     "react-native": "0.76.9",
     "react-native-svg": "^15.0.0",
     "tsup": "^8.4.0",
-    "typescript": "5.8.2"
+    "typescript": "5.8.2",
+    "vitest": "^4.1.8"
   },
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",
     "check:locales": "node scripts/check-locales.js",
-    "release": "pnpm run build"
+    "release": "pnpm run build",
+    "test": "vitest"
   }
 }