@redacto.io/consent-sdk-react-native 4.0.1-beta.0 → 5.0.0-beta.1

package/README.md

@@ -136,6 +136,7 @@ import { RedactoNoticeConsent } from "@redacto.io/consent-sdk-react-native";
 | `accessToken`               | `string`                      | ✓        | JWT access token                                         |
 | `refreshToken`              | `string`                      | ✓        | JWT refresh token                                        |
 | `baseUrl`                   | `string`                      |          | Override API base URL                                    |
+| `ledgerBaseUrl`             | `string`                      |          | Go ledger base URL. When set, consent writes and prior-consent checks route through the ledger (falls back: ledger → baseUrl → default). Omit to keep the legacy consent-server path. |
 | `settings`                  | `Partial<Settings>`           |          | UI customisation (colours, border radius, fonts)         |
 | `language`                  | `string`                      |          | Initial language code (e.g. `"en"`)                      |
 | `blockUI`                   | `boolean`                     |          | Block the modal from being dismissed                     |
@@ -173,6 +174,7 @@ import { RedactoNoticeConsentInline } from "@redacto.io/consent-sdk-react-native
 | `notice_uuid`        | `string`                     | ✓        | Notice UUID                                       |
 | `accessToken`        | `string`                     |          | JWT access token (triggers auto-submit when set)  |
 | `baseUrl`            | `string`                     |          | Override API base URL                             |
+| `ledgerBaseUrl`      | `string`                     |          | Go ledger base URL. When set, consent writes and already-consented checks route through the ledger. Omit for legacy behavior. |
 | `language`           | `string`                     |          | Language code                                     |
 | `settings`           | `Partial<Settings>`          |          | UI customisation                                  |
 | `applicationId`      | `string`                     |          | Application-specific UUID                         |
@@ -217,6 +219,7 @@ import { RedactoPrivacyCenter } from "@redacto.io/consent-sdk-react-native/priva
 | Prop           | Type                                                                          | Required | Default              | Description                              |
 | -------------- | ----------------------------------------------------------------------------- | -------- | -------------------- | ---------------------------------------- |
 | `baseUrl`      | `string`                                                                      | ✓        | -                    | Consent server base URL                  |
+| `ledgerBaseUrl` | `string`                                                                     |          | -                    | Go ledger base URL. When set, user consents, group purposes, receipts, and manage-consent route through the ledger. Omit to use the legacy `/dsar/privacy-center/*` routes. See the note below on the DSAR form picker. |
 | `slug`         | `string`                                                                      | ✓        | -                    | Workspace slug                           |
 | `accessToken`  | `string`                                                                      | ✓        | -                    | JWT access token                         |
 | `refreshToken` | `string`                                                                      | ✓        | -                    | JWT refresh token                        |
@@ -274,6 +277,18 @@ For consumers who want fully custom UI, the headless core exposes the API client
 - Keep API keys and server secrets on your backend only.
 - In Expo apps, values read from `EXPO_PUBLIC_*` are bundled into the app and should only contain non-sensitive config like UUIDs and URLs.
 - If you do not pass `baseUrl`, the SDK defaults to `https://api.redacto.io/consent` for both notice and Privacy Center surfaces.
+- `ledgerBaseUrl` is optional and independent of `baseUrl` — pass both when routing consent through the Go ledger. Omitting it keeps the legacy consent-server behavior.
+
+## Ledger mode
+
+Passing `ledgerBaseUrl` routes consent-bearing reads and writes to the Go ledger:
+
+- **Notice components** — `submit-consent` goes to the ledger, and the already-consented check uses the ledger's `check-consent` endpoint instead of the legacy HTTP 409 signal. Notice content, tokens, and TTS always stay on `baseUrl`.
+- **Privacy Center** — user consents, group purposes, receipts (including the `/download` PDF path), and manage-consent (sent as a `partial: true` write) route to the ledger. DSAR form, cases, activities, OTP, and notifications stay on `baseUrl`.
+
+Every ledger read degrades to the legacy path on failure, so a ledger outage does not break the consent flow.
+
+> **Known limitation.** Unlike the React SDK, the DSAR form's product picker is **not** overlaid from ledger-served consents. Against a workspace cut over to the ledger — where the legacy `form/data` response carries no product groups — the picker renders empty. If your DSAR form depends on the product picker, stay on the legacy path until this is addressed.
 
 ## License
 

package/dist/index.d.mts

@@ -31,6 +31,8 @@ type Props$1 = Readonly<{
     accessToken: string;
     refreshToken: string;
     baseUrl?: string;
+    /** Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server. */
+    ledgerBaseUrl?: string;
     settings?: Partial<Settings$1>;
     language?: string;
     blockUI?: boolean;
@@ -77,6 +79,7 @@ declare const RedactoConsentInline: React__default.NamedExoticComponent<Readonly
     accessToken?: string;
     refreshToken?: string;
     baseUrl?: string;
+    ledgerBaseUrl?: string;
     settings?: Partial<Settings>;
     language?: string;
     onAccept?: () => void;
@@ -93,6 +96,8 @@ type Props = Readonly<{
     accessToken?: string;
     refreshToken?: string;
     baseUrl?: string;
+    /** Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server. */
+    ledgerBaseUrl?: string;
     settings?: Partial<Settings>;
     language?: string;
     onAccept?: () => void;

package/dist/index.d.ts

@@ -31,6 +31,8 @@ type Props$1 = Readonly<{
     accessToken: string;
     refreshToken: string;
     baseUrl?: string;
+    /** Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server. */
+    ledgerBaseUrl?: string;
     settings?: Partial<Settings$1>;
     language?: string;
     blockUI?: boolean;
@@ -77,6 +79,7 @@ declare const RedactoConsentInline: React__default.NamedExoticComponent<Readonly
     accessToken?: string;
     refreshToken?: string;
     baseUrl?: string;
+    ledgerBaseUrl?: string;
     settings?: Partial<Settings>;
     language?: string;
     onAccept?: () => void;
@@ -93,6 +96,8 @@ type Props = Readonly<{
     accessToken?: string;
     refreshToken?: string;
     baseUrl?: string;
+    /** Go ledger base URL — serves check-consent and the consent write; omit to use the legacy consent server. */
+    ledgerBaseUrl?: string;
     settings?: Partial<Settings>;
     language?: string;
     onAccept?: () => void;

package/dist/index.js

@@ -147,6 +147,7 @@ var fetchConsentContent = async ({
 var submitConsentEvent = async ({
   accessToken,
   baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   purposes,
   declined,
@@ -166,7 +167,7 @@ var submitConsentEvent = async ({
   if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
     throw new Error("Invalid token: missing organization or workspace UUID");
   }
-  const apiBaseUrl = baseUrl || DEFAULT_CONSENT_API_BASE_URL;
+  const apiBaseUrl = ledgerBaseUrl || baseUrl || DEFAULT_CONSENT_API_BASE_URL;
   const validatedPurposes = purposes.map((purpose) => {
     if (!purpose.uuid) {
       throw new Error("Invalid purpose data: missing uuid");
@@ -415,6 +416,122 @@ var verifyGuardianStatus = async ({
   };
 };
 
+// src/shared/notice-consent-status.ts
+var import_jwt_decode2 = require("jwt-decode");
+var decodeNoticeConsentToken = (token) => {
+  try {
+    return (0, import_jwt_decode2.jwtDecode)(token);
+  } catch {
+    return null;
+  }
+};
+var fetchNoticeConsentStatusForScope = async ({
+  accessToken,
+  ledgerBaseUrl,
+  organisationUuid,
+  workspaceUuid,
+  noticeUuid,
+  signal
+}) => {
+  if (!accessToken || !ledgerBaseUrl || !organisationUuid || !workspaceUuid || !noticeUuid) {
+    return null;
+  }
+  try {
+    const response = await fetch(
+      `${ledgerBaseUrl}/public/organisations/${organisationUuid}/workspaces/${workspaceUuid}/notices/${noticeUuid}/check-consent`,
+      {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${accessToken}`,
+          "Content-Type": "application/json"
+        },
+        body: "{}",
+        signal
+      }
+    );
+    if (!response.ok) {
+      return null;
+    }
+    const data = await response.json();
+    const body = data && typeof data === "object" && "detail" in data && data.detail ? data.detail : data;
+    if (!body || !Array.isArray(body.purposes)) {
+      return null;
+    }
+    return body;
+  } catch {
+    return null;
+  }
+};
+var fetchNoticeConsentStatus = async ({
+  accessToken,
+  ledgerBaseUrl,
+  noticeUuid,
+  signal
+}) => {
+  if (!accessToken || !ledgerBaseUrl || !noticeUuid) {
+    return null;
+  }
+  const decodedToken = decodeNoticeConsentToken(accessToken);
+  if (!decodedToken) {
+    return null;
+  }
+  const {
+    organisation_uuid: ORGANISATION_UUID,
+    workspace_uuid: WORKSPACE_UUID
+  } = decodedToken;
+  if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
+    return null;
+  }
+  return fetchNoticeConsentStatusForScope({
+    accessToken,
+    ledgerBaseUrl,
+    organisationUuid: ORGANISATION_UUID,
+    workspaceUuid: WORKSPACE_UUID,
+    noticeUuid,
+    signal
+  });
+};
+var isNoticeFullyConsented = (status) => status.consented && status.all_mandatory_active;
+var buildLedgerConsentOverlay = (status, configPurposes) => {
+  var _a, _b;
+  const byUuid = new Map(status.purposes.map((p) => [p.uuid, p]));
+  const hasHistory = status.purposes.some(
+    (p) => (p.status || "INACTIVE") !== "INACTIVE"
+  );
+  if (!hasHistory) {
+    return null;
+  }
+  const purpose_selections = {};
+  for (const cp of configPurposes) {
+    const lp = byUuid.get(cp.uuid);
+    const purposeStatus = (lp == null ? void 0 : lp.status) || "INACTIVE";
+    const selectedByUuid = new Map(
+      ((lp == null ? void 0 : lp.data_elements) || []).map((de) => [de.uuid, de.selected])
+    );
+    const data_elements = {};
+    for (const de of cp.data_elements) {
+      data_elements[de.uuid] = {
+        selected: (_a = selectedByUuid.get(de.uuid)) != null ? _a : false,
+        enabled: de.enabled,
+        required: de.required
+      };
+    }
+    purpose_selections[cp.uuid] = {
+      selected: (_b = lp == null ? void 0 : lp.selected) != null ? _b : false,
+      status: purposeStatus,
+      needs_reconsent: purposeStatus !== "ACTIVE",
+      data_elements
+    };
+  }
+  const reconsent_required = configPurposes.some(
+    (cp) => {
+      var _a2;
+      return (((_a2 = purpose_selections[cp.uuid]) == null ? void 0 : _a2.status) || "INACTIVE") !== "ACTIVE";
+    }
+  );
+  return { reconsent_required, purpose_selections };
+};
+
 // src/RedactoNoticeConsent/components/Checkbox.tsx
 var import_react_native = require("react-native");
 var import_react_native_svg = __toESM(require("react-native-svg"));
@@ -1638,6 +1755,7 @@ var RedactoNoticeConsent = ({
   accessToken,
   refreshToken: _refreshToken,
   baseUrl,
+  ledgerBaseUrl,
   settings,
   language = "en",
   blockUI = false,
@@ -1697,6 +1815,7 @@ var RedactoNoticeConsent = ({
   const abortControllerRef = (0, import_react2.useRef)(null);
   const hasBootstrappedLanguageRef = (0, import_react2.useRef)(false);
   const fetchContent = (0, import_react2.useCallback)(async () => {
+    var _a2, _b2;
     if (abortControllerRef.current) {
       abortControllerRef.current.abort();
     }
@@ -1715,8 +1834,23 @@ var RedactoNoticeConsent = ({
         signal: abortControllerRef.current.signal
       });
       const activeConfig2 = data.detail.active_config;
-      const purposeSelections = data.detail.purpose_selections;
-      const reconsentRequired = data.detail.reconsent_required || false;
+      let purposeSelections = data.detail.purpose_selections;
+      let reconsentRequired = data.detail.reconsent_required || false;
+      if (ledgerBaseUrl && !applicationId) {
+        const ledgerStatus = await fetchNoticeConsentStatus({
+          accessToken,
+          ledgerBaseUrl,
+          noticeUuid: noticeId,
+          signal: (_a2 = abortControllerRef.current) == null ? void 0 : _a2.signal
+        });
+        if (ledgerStatus) {
+          const overlay = buildLedgerConsentOverlay(ledgerStatus, activeConfig2.purposes);
+          reconsentRequired = (_b2 = overlay == null ? void 0 : overlay.reconsent_required) != null ? _b2 : false;
+          purposeSelections = overlay == null ? void 0 : overlay.purpose_selections;
+          data.detail.purpose_selections = purposeSelections;
+          data.detail.reconsent_required = reconsentRequired;
+        }
+      }
       const noticeIsMinor = data.detail.is_minor || false;
       setIsMinor(noticeIsMinor);
       const initialCollapsed = {};
@@ -1729,9 +1863,9 @@ var RedactoNoticeConsent = ({
         const purposeSelected = sel ? sel.selected : false;
         initialPurposeState[purpose.uuid] = purposeSelected;
         purpose.data_elements.forEach((el) => {
-          var _a2, _b2, _c2;
+          var _a3, _b3, _c2;
           const combinedId = `${purpose.uuid}-${el.uuid}`;
-          const elementSel = (_c2 = (_b2 = (_a2 = sel == null ? void 0 : sel.data_elements) == null ? void 0 : _a2[el.uuid]) == null ? void 0 : _b2.selected) != null ? _c2 : false;
+          const elementSel = (_c2 = (_b3 = (_a3 = sel == null ? void 0 : sel.data_elements) == null ? void 0 : _a3[el.uuid]) == null ? void 0 : _b3.selected) != null ? _c2 : false;
           initialDataElementState[combinedId] = elementSel;
           initialDataElementSelectionsMap[combinedId] = elementSel;
         });
@@ -1779,7 +1913,7 @@ var RedactoNoticeConsent = ({
     } finally {
       setIsLoading(false);
     }
-  }, [noticeId, accessToken, baseUrl, validateAgainst, includeFullyConsentedData, applicationId, onAccept, onError]);
+  }, [noticeId, accessToken, baseUrl, ledgerBaseUrl, validateAgainst, includeFullyConsentedData, applicationId, onAccept, onError]);
   (0, import_react2.useEffect)(() => {
     hasBootstrappedLanguageRef.current = false;
   }, [noticeId, accessToken]);
@@ -2182,6 +2316,7 @@ var RedactoNoticeConsent = ({
       await submitConsentEvent({
         accessToken,
         baseUrl,
+        ledgerBaseUrl,
         noticeUuid: activeConfig2.notice_uuid,
         purposes: activeConfig2.purposes.map((purpose) => ({
           ...purpose,
@@ -2209,7 +2344,7 @@ var RedactoNoticeConsent = ({
     } finally {
       setIsSubmitting(false);
     }
-  }, [content, accessToken, baseUrl, applicationId, selectedPurposes, selectedDataElements, stopAudio, onAccept, onError]);
+  }, [content, accessToken, baseUrl, ledgerBaseUrl, applicationId, selectedPurposes, selectedDataElements, stopAudio, onAccept, onError]);
   const handleDecline = (0, import_react2.useCallback)(() => {
     stopAudio();
     stopPolling();
@@ -2857,13 +2992,14 @@ var submitConsentEvent2 = async ({
   workspace_uuid,
   accessToken,
   baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   purposes,
   declined,
   meta_data
 }) => {
   var _a, _b;
-  const apiBaseUrl = baseUrl || DEFAULT_CONSENT_API_BASE_URL;
+  const apiBaseUrl = ledgerBaseUrl || baseUrl || DEFAULT_CONSENT_API_BASE_URL;
   const payload = {
     notice_uuid: noticeUuid,
     purposes: purposes.map((purpose) => {
@@ -3185,6 +3321,7 @@ var RedactoConsentInlineComponent = ({
   notice_uuid,
   accessToken,
   baseUrl,
+  ledgerBaseUrl,
   language = "en",
   onAccept,
   onDecline: _onDecline,
@@ -3203,6 +3340,9 @@ var RedactoConsentInlineComponent = ({
   const [selectedPurposes, setSelectedPurposes] = (0, import_react3.useState)({});
   const [selectedDataElements, setSelectedDataElements] = (0, import_react3.useState)({});
   const [hasAlreadyConsented, setHasAlreadyConsented] = (0, import_react3.useState)(false);
+  const [isCheckingConsent, setIsCheckingConsent] = (0, import_react3.useState)(
+    Boolean(ledgerBaseUrl) && !applicationId
+  );
   const [fetchError, setFetchError] = (0, import_react3.useState)(null);
   const [errorMessage, setErrorMessage] = (0, import_react3.useState)(null);
   const [isLanguageDropdownOpen, setIsLanguageDropdownOpen] = (0, import_react3.useState)(false);
@@ -3323,6 +3463,40 @@ var RedactoConsentInlineComponent = ({
       controller.abort();
     };
   }, [fetchNotice]);
+  (0, import_react3.useEffect)(() => {
+    if (!ledgerBaseUrl || applicationId) {
+      return;
+    }
+    if (!accessToken || !content) {
+      return;
+    }
+    let active = true;
+    const controller = new AbortController();
+    const checkLedgerConsent = async () => {
+      try {
+        const ledgerStatus = await fetchNoticeConsentStatusForScope({
+          accessToken,
+          ledgerBaseUrl,
+          organisationUuid: org_uuid,
+          workspaceUuid: workspace_uuid,
+          noticeUuid: notice_uuid,
+          signal: controller.signal
+        });
+        if (active && ledgerStatus && isNoticeFullyConsented(ledgerStatus)) {
+          setHasAlreadyConsented(true);
+        }
+      } finally {
+        if (active) {
+          setIsCheckingConsent(false);
+        }
+      }
+    };
+    void checkLedgerConsent();
+    return () => {
+      active = false;
+      controller.abort();
+    };
+  }, [ledgerBaseUrl, applicationId, accessToken, content, org_uuid, workspace_uuid, notice_uuid]);
   const togglePurposeCollapse = (0, import_react3.useCallback)((purposeUuid) => {
     setCollapsedPurposes((prev) => ({ ...prev, [purposeUuid]: !prev[purposeUuid] }));
   }, []);
@@ -3373,6 +3547,7 @@ var RedactoConsentInlineComponent = ({
           workspace_uuid,
           accessToken: tokenToUse,
           baseUrl,
+          ledgerBaseUrl,
           noticeUuid: content.notice_uuid,
           purposes: content.purposes.map((purpose) => {
             const hasSelectedRequiredElement = purpose.data_elements.some(
@@ -3411,6 +3586,7 @@ var RedactoConsentInlineComponent = ({
       org_uuid,
       workspace_uuid,
       baseUrl,
+      ledgerBaseUrl,
       selectedDataElements,
       selectedPurposes,
       applicationId,
@@ -3418,7 +3594,7 @@ var RedactoConsentInlineComponent = ({
     ]
   );
   (0, import_react3.useEffect)(() => {
-    if (accessToken && content && areAllRequiredElementsChecked && !isSubmitting && !hasSubmittedRef.current) {
+    if (accessToken && content && areAllRequiredElementsChecked && !isSubmitting && !isCheckingConsent && !hasAlreadyConsented && !hasSubmittedRef.current) {
       hasSubmittedRef.current = true;
       const autoSubmit = async () => {
         try {
@@ -3430,7 +3606,7 @@ var RedactoConsentInlineComponent = ({
       };
       autoSubmit();
     }
-  }, [accessToken, content, areAllRequiredElementsChecked, isSubmitting, handleAcceptWithToken, onError]);
+  }, [accessToken, content, areAllRequiredElementsChecked, isSubmitting, isCheckingConsent, hasAlreadyConsented, handleAcceptWithToken, onError]);
   (0, import_react3.useEffect)(() => {
     if (!accessToken) {
       hasSubmittedRef.current = false;