@redacto.io/consent-sdk-react-native 4.0.1-beta.0 → 5.0.0-beta.1

package/dist/privacy-center.js

@@ -9982,7 +9982,15 @@ function arrayBufferToBase64(buffer) {
   }
   return result;
 }
-function createConsentClient(baseUrl) {
+function createConsentClient(baseUrl, ledgerBaseUrl) {
+  const useLedger = Boolean(ledgerBaseUrl);
+  const ledgerBase = (ledgerBaseUrl != null ? ledgerBaseUrl : "").replace(/\/$/, "");
+  function ledgerUrl(baseRequest, path) {
+    if (!useLedger) {
+      throw new Error("ledgerUrl called without a configured ledgerBaseUrl");
+    }
+    return `${ledgerBase}/public/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}${path}`;
+  }
   async function privacyCenterApiFetch(url, options) {
     const { authToken, getAuthToken, headers = {}, ...fetchOptions } = options;
     const requestHeaders = new Headers();
@@ -10184,7 +10192,8 @@ function createConsentClient(baseUrl) {
       if (params.product_uuid) queryParams.append("product_uuid", params.product_uuid);
       if (params.language) queryParams.append("language", params.language);
       const queryString = queryParams.toString();
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/user-consents${queryString ? `?${queryString}` : ""}`;
+      const consentsSuffix = `/user-consents${queryString ? `?${queryString}` : ""}`;
+      const url = useLedger ? ledgerUrl(baseRequest, consentsSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${consentsSuffix}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10204,7 +10213,8 @@ function createConsentClient(baseUrl) {
       if (params.language) queryParams.append("language", params.language);
       if (params.nominator_uuid) queryParams.append("nominator_uuid", params.nominator_uuid);
       const queryString = queryParams.toString();
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/user-consents/${productUuid}/purposes${queryString ? `?${queryString}` : ""}`;
+      const purposesSuffix = `/user-consents/${productUuid}/purposes${queryString ? `?${queryString}` : ""}`;
+      const url = useLedger ? ledgerUrl(baseRequest, purposesSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${purposesSuffix}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10212,17 +10222,66 @@ function createConsentClient(baseUrl) {
       });
     },
     /**
-     * Manage consent (privacy center) - revoke, regrant, or renew
+     * Manage consent (privacy center) - revoke, regrant, or renew.
+     *
+     * The Go ledger has no manage-consent route, so with a ledger configured
+     * this is expressed as a `partial` submit-consent on the ledger — mirroring
+     * the Python dual-write relay: the affected purpose is re-submitted with
+     * `selected: false` to revoke or `selected: true` to regrant/renew, and
+     * `partial: true` so the rest of the notice's purposes are left untouched.
+     * The principal is resolved from the JWT, so no `contact`/identifiers are
+     * sent in the body.
+     *
+     * Without a ledger, the legacy Python `/manage-consent?status=` endpoint is
+     * used with its `{ purpose_uuid, contact, ... }` payload.
      */
-    async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/manage-consent?status=${status}`;
-      const body = { purpose_uuid: purposeId, contact };
-      if (nominatorContact) {
-        body.nominator_contact = nominatorContact;
+    async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids, noticeUuid, dataElements) {
+      if (!useLedger) {
+        const url2 = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/manage-consent?status=${status}`;
+        const body2 = { purpose_uuid: purposeId, contact };
+        if (nominatorContact) {
+          body2.nominator_contact = nominatorContact;
+        }
+        if (Array.isArray(dataElementUuids) && dataElementUuids.length > 0) {
+          body2.data_element_uuids = dataElementUuids;
+        }
+        return privacyCenterApiFetch(url2, {
+          ...options,
+          method: "POST",
+          body: JSON.stringify(body2),
+          authToken: authToken || baseRequest.authToken
+        });
       }
-      if (Array.isArray(dataElementUuids) && dataElementUuids.length > 0) {
-        body.data_element_uuids = dataElementUuids;
+      if (!noticeUuid) {
+        throw new Error("notice_uuid is required to manage consent via the ledger");
       }
+      const purposeSelected = status !== "revoke";
+      const elements = (dataElements != null ? dataElements : []).map((de) => {
+        let selected;
+        if (status === "revoke") {
+          selected = false;
+        } else if (status === "regrant") {
+          selected = Array.isArray(dataElementUuids) ? dataElementUuids.includes(de.uuid) : de.selected;
+        } else {
+          selected = de.selected;
+        }
+        return { uuid: de.uuid, selected };
+      });
+      const body = {
+        notice_uuid: noticeUuid,
+        partial: true,
+        declined: false,
+        select_all_mandatory: false,
+        self_declared_adult: false,
+        purposes: [
+          {
+            purpose_uuid: purposeId,
+            selected: purposeSelected,
+            data_elements: elements
+          }
+        ]
+      };
+      const url = ledgerUrl(baseRequest, "/submit-consent");
       return privacyCenterApiFetch(url, {
         ...options,
         method: "POST",
@@ -10259,7 +10318,8 @@ function createConsentClient(baseUrl) {
       if (params.notice_uuid) queryParams.append("notice_uuid", params.notice_uuid);
       if (params.language) queryParams.append("language", params.language);
       const queryString = queryParams.toString();
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/receipts${queryString ? `?${queryString}` : ""}`;
+      const receiptsSuffix = `/receipts${queryString ? `?${queryString}` : ""}`;
+      const url = useLedger ? ledgerUrl(baseRequest, receiptsSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${receiptsSuffix}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10273,7 +10333,7 @@ function createConsentClient(baseUrl) {
      * the RN UI writes to a temp file to open/share. 404 => not found.
      */
     async getReceiptPdf(baseRequest, receiptUuid, authToken) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/receipts/${receiptUuid}/pdf`;
+      const url = useLedger ? ledgerUrl(baseRequest, `/receipts/${receiptUuid}/download`) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/receipts/${receiptUuid}/pdf`;
       const token = authToken || baseRequest.authToken;
       const requestHeaders = new Headers();
       requestHeaders.set("Accept", "application/pdf");
@@ -10432,11 +10492,16 @@ function createConsentClient(baseUrl) {
 // src/RedactoPrivacyCenter/context/BaseUrlContext.tsx
 var import_jsx_runtime3 = require("react/jsx-runtime");
 var BaseUrlContext = (0, import_react2.createContext)(null);
-function BaseUrlProvider({ children, baseUrl }) {
+function BaseUrlProvider({
+  children,
+  baseUrl,
+  ledgerBaseUrl
+}) {
   const value = (0, import_react2.useMemo)(() => ({
     baseUrl,
-    consentClient: createConsentClient(baseUrl)
-  }), [baseUrl]);
+    ledgerBaseUrl,
+    consentClient: createConsentClient(baseUrl, ledgerBaseUrl)
+  }), [baseUrl, ledgerBaseUrl]);
   return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(BaseUrlContext.Provider, { value, children });
 }
 function useBaseUrl() {
@@ -10635,7 +10700,6 @@ async function fetchUserConsentsServer(params) {
   }
 }
 async function manageConsentServer(params) {
-  var _a3;
   try {
     if (!params.consentClient) {
       throw new Error("Consent client is required");
@@ -10653,9 +10717,14 @@ async function manageConsentServer(params) {
       params.authToken,
       void 0,
       params.nominatorContact,
-      params.dataElementUuids
+      params.dataElementUuids,
+      params.noticeUuid,
+      params.dataElements
     );
-    return (_a3 = result == null ? void 0 : result.success) != null ? _a3 : null;
+    if (result && typeof result === "object" && "success" in result) {
+      return Boolean(result.success);
+    }
+    return true;
   } catch (error) {
     if (isAuthError(error)) {
       throw error;
@@ -11139,7 +11208,9 @@ var manageConsent = async ({
   authContext,
   consentClient,
   nominatorContact,
-  dataElementUuids
+  dataElementUuids,
+  noticeUuid,
+  dataElements
 }) => {
   try {
     const accessToken = await ensureValidToken(organizationId, workspaceId, void 0, authContext, consentClient);
@@ -11155,7 +11226,9 @@ var manageConsent = async ({
       authToken: accessToken,
       consentClient,
       nominatorContact,
-      dataElementUuids
+      dataElementUuids,
+      noticeUuid,
+      dataElements
     });
     return result;
   } catch (error) {
@@ -11174,7 +11247,9 @@ var manageConsent = async ({
         authToken: newAccessToken || void 0,
         consentClient,
         nominatorContact,
-        dataElementUuids
+        dataElementUuids,
+        noticeUuid,
+        dataElements
       });
     }
     console.error(`Error ${action} consent:`, error);
@@ -14240,6 +14315,7 @@ var useTimePeriodOptions = () => {
 };
 var MAX_DISPLAYED_PURPOSE_NAMES_IN_ERASURE_MODAL = 3;
 var SEARCH_DEBOUNCE_DELAY = 500;
+var FORM_PICKER_GROUP_LIMIT = 100;
 var POLL_INTERVAL = 3e4;
 var NOTIFICATION_PAGE_SIZE = 10;
 var TAB_TO_CATEGORY = {
@@ -14993,6 +15069,7 @@ function ConsentManager() {
   }, [fetchData]);
   const handleManageConsent = (0, import_react25.useCallback)(
     async (purposeId, action, nominatorContact, dataElementUuids) => {
+      var _a3, _b;
       if (!organizationId || !workspaceId || !email) return;
       setIsManageLoading(true);
       try {
@@ -15005,7 +15082,14 @@ function ConsentManager() {
           authContext,
           consentClient,
           nominatorContact,
-          dataElementUuids
+          dataElementUuids,
+          // Ledger mode: the partial submit-consent needs the notice and the
+          // purpose's data elements; both ride on the selected (ledger-served) row.
+          noticeUuid: (_a3 = selectedRecord == null ? void 0 : selectedRecord.notice_uuid) != null ? _a3 : void 0,
+          dataElements: (_b = selectedRecord == null ? void 0 : selectedRecord.data_elements) == null ? void 0 : _b.map((de) => ({
+            uuid: de.uuid,
+            selected: de.selected
+          }))
         });
         setIsModalOpen(false);
         setSelectedRecord(null);
@@ -15017,7 +15101,7 @@ function ConsentManager() {
         setIsManageLoading(false);
       }
     },
-    [organizationId, workspaceId, email, authContext, consentClient, fetchData, t]
+    [organizationId, workspaceId, email, authContext, consentClient, selectedRecord, fetchData, t]
   );
   const handleExport = (0, import_react25.useCallback)(async () => {
     if (!consentData.length) return;
@@ -16188,6 +16272,41 @@ var styles32 = import_react_native43.StyleSheet.create({
 
 // src/RedactoPrivacyCenter/components/groupHelpers.ts
 var productGroupKey = (group) => group.nominator ? `${group.product_uuid}:${group.nominator.uuid}` : group.product_uuid;
+var consentGroupToFormProductGroup = (group) => {
+  var _a3;
+  return {
+    product_uuid: group.product_uuid,
+    product_name: group.product_name,
+    product_description: group.product_description,
+    nominator: group.nominator,
+    purposes: ((_a3 = group.purposes) != null ? _a3 : []).map(purposeItemToFormPurpose)
+  };
+};
+var purposeItemToFormPurpose = (purpose) => {
+  var _a3, _b;
+  return {
+    uuid: purpose.purpose_uuid,
+    purpose_uuid: purpose.purpose_uuid,
+    name: purpose.name,
+    description: (_a3 = purpose.description) != null ? _a3 : "",
+    industries: "",
+    selected: false,
+    given_consent: false,
+    status: purpose.status,
+    validity: null,
+    enabled: true,
+    data_elements: ((_b = purpose.data_elements) != null ? _b : []).map(consentDataElementToFormDataElement)
+  };
+};
+var consentDataElementToFormDataElement = (element) => ({
+  uuid: element.uuid,
+  name: element.name,
+  description: "",
+  enabled: element.enabled,
+  required: element.required,
+  given_consent: element.selected,
+  selected: element.selected
+});
 var buildGroupPurposes = (group) => group.purposes.filter((p) => p !== null && p !== void 0).map((p) => {
   const validDataElements = Array.isArray(p.data_elements) ? p.data_elements.filter((de) => de !== null && de !== void 0 && Boolean(de.uuid)).map((de) => ({ ...de, selected: false })) : [];
   return {
@@ -16222,7 +16341,7 @@ var isProductScopedRequestType = (rt) => PRODUCT_SCOPED_REQUEST_TYPES.has(rt);
 function Form({ onCreateRequest }) {
   const { t } = (0, import_react_i18next16.useTranslation)();
   const { accessToken, refreshToken, email, organizationId, workspaceId, updateTokens, onError } = useAuth();
-  const { consentClient, baseUrl } = useBaseUrl();
+  const { consentClient, baseUrl, ledgerBaseUrl } = useBaseUrl();
   const { colors } = useTheme();
   const requestTypeLabels = useRequestTypeLabels();
   const timePeriodOptions = useTimePeriodOptions();
@@ -16259,15 +16378,60 @@ function Form({ onCreateRequest }) {
   });
   const [uploadedDocs, setUploadedDocs] = (0, import_react29.useState)([]);
   const [isUploading, setIsUploading] = (0, import_react29.useState)(false);
+  const withLedgerPickerGroups = (0, import_react29.useCallback)(
+    async (form, language) => {
+      var _a3, _b;
+      if (!ledgerBaseUrl || !organizationId || !workspaceId) {
+        return form;
+      }
+      const consents = await fetchUserConsents({
+        organizationId,
+        workspaceId,
+        // No status filter: include every status (active / expired / withdrawn
+        // / declined), matching Python form/data, so a DSAR can target products
+        // the user no longer actively consents to.
+        limit: FORM_PICKER_GROUP_LIMIT,
+        nominatedLimit: FORM_PICKER_GROUP_LIMIT,
+        language,
+        authContext,
+        consentClient
+      });
+      if (!consents) {
+        return form;
+      }
+      return {
+        ...form,
+        direct_groups: ((_a3 = consents.direct) != null ? _a3 : []).map(consentGroupToFormProductGroup),
+        nominated_groups: ((_b = consents.nominated) != null ? _b : []).map(consentGroupToFormProductGroup)
+      };
+    },
+    [ledgerBaseUrl, organizationId, workspaceId, authContext, consentClient]
+  );
   (0, import_react29.useEffect)(() => {
     if (!organizationId || !workspaceId || !contact) return;
+    let isCancelled = false;
     setIsLoading(true);
-    getFormData(organizationId, workspaceId, contact, false, false, authContext, consentClient, langParam).then((data) => {
-      if (data) setFormDataResponse(data);
+    getFormData(organizationId, workspaceId, contact, false, false, authContext, consentClient, langParam).then(async (data) => {
+      if (!data) return;
+      const withGroups = await withLedgerPickerGroups(data, langParam);
+      if (!isCancelled) setFormDataResponse(withGroups);
     }).catch((error) => {
       console.warn("Error fetching form data:", error);
-    }).finally(() => setIsLoading(false));
-  }, [organizationId, workspaceId, contact, authContext, consentClient, langParam]);
+    }).finally(() => {
+      if (!isCancelled) setIsLoading(false);
+    });
+    return () => {
+      isCancelled = true;
+    };
+  }, [
+    organizationId,
+    workspaceId,
+    contact,
+    authContext,
+    consentClient,
+    langParam,
+    withLedgerPickerGroups
+  ]);
   const allGroups = (0, import_react29.useMemo)(() => {
     var _a3, _b;
     if (!formDataResponse) return [];
@@ -20407,6 +20571,7 @@ function PrivacyCenterContent({ onBack }) {
 }
 function RedactoPrivacyCenter({
   baseUrl,
+  ledgerBaseUrl,
   slug,
   // `theme` is accepted for backwards compatibility but no longer used — the
   // Privacy Center themes itself from per-org branding.
@@ -20418,7 +20583,7 @@ function RedactoPrivacyCenter({
   initialCaseUuid,
   onBack
 }) {
-  return /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(SafeAreaBoundary, { children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(KeyboardProviderCompat, { children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(import_react_query2.QueryClientProvider, { client: privacyCenterQueryClient, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(import_react_i18next29.I18nextProvider, { i18n: i18n_default, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(ThemeProvider, { slug, baseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(BaseUrlProvider, { baseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(SafeAreaBoundary, { children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(KeyboardProviderCompat, { children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(import_react_query2.QueryClientProvider, { client: privacyCenterQueryClient, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(import_react_i18next29.I18nextProvider, { i18n: i18n_default, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(ThemeProvider, { slug, baseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(BaseUrlProvider, { baseUrl, ledgerBaseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(
     AuthProvider,
     {
       accessToken,