@redacto.io/consent-sdk-react-native 5.0.0-beta.0 → 5.0.0-beta.1

package/README.md

@@ -136,6 +136,7 @@ import { RedactoNoticeConsent } from "@redacto.io/consent-sdk-react-native";
 | `accessToken`               | `string`                      | ✓        | JWT access token                                         |
 | `refreshToken`              | `string`                      | ✓        | JWT refresh token                                        |
 | `baseUrl`                   | `string`                      |          | Override API base URL                                    |
+| `ledgerBaseUrl`             | `string`                      |          | Go ledger base URL. When set, consent writes and prior-consent checks route through the ledger (falls back: ledger → baseUrl → default). Omit to keep the legacy consent-server path. |
 | `settings`                  | `Partial<Settings>`           |          | UI customisation (colours, border radius, fonts)         |
 | `language`                  | `string`                      |          | Initial language code (e.g. `"en"`)                      |
 | `blockUI`                   | `boolean`                     |          | Block the modal from being dismissed                     |
@@ -173,6 +174,7 @@ import { RedactoNoticeConsentInline } from "@redacto.io/consent-sdk-react-native
 | `notice_uuid`        | `string`                     | ✓        | Notice UUID                                       |
 | `accessToken`        | `string`                     |          | JWT access token (triggers auto-submit when set)  |
 | `baseUrl`            | `string`                     |          | Override API base URL                             |
+| `ledgerBaseUrl`      | `string`                     |          | Go ledger base URL. When set, consent writes and already-consented checks route through the ledger. Omit for legacy behavior. |
 | `language`           | `string`                     |          | Language code                                     |
 | `settings`           | `Partial<Settings>`          |          | UI customisation                                  |
 | `applicationId`      | `string`                     |          | Application-specific UUID                         |
@@ -217,6 +219,7 @@ import { RedactoPrivacyCenter } from "@redacto.io/consent-sdk-react-native/priva
 | Prop           | Type                                                                          | Required | Default              | Description                              |
 | -------------- | ----------------------------------------------------------------------------- | -------- | -------------------- | ---------------------------------------- |
 | `baseUrl`      | `string`                                                                      | ✓        | -                    | Consent server base URL                  |
+| `ledgerBaseUrl` | `string`                                                                     |          | -                    | Go ledger base URL. When set, user consents, group purposes, receipts, and manage-consent route through the ledger. Omit to use the legacy `/dsar/privacy-center/*` routes. See the note below on the DSAR form picker. |
 | `slug`         | `string`                                                                      | ✓        | -                    | Workspace slug                           |
 | `accessToken`  | `string`                                                                      | ✓        | -                    | JWT access token                         |
 | `refreshToken` | `string`                                                                      | ✓        | -                    | JWT refresh token                        |
@@ -274,6 +277,18 @@ For consumers who want fully custom UI, the headless core exposes the API client
 - Keep API keys and server secrets on your backend only.
 - In Expo apps, values read from `EXPO_PUBLIC_*` are bundled into the app and should only contain non-sensitive config like UUIDs and URLs.
 - If you do not pass `baseUrl`, the SDK defaults to `https://api.redacto.io/consent` for both notice and Privacy Center surfaces.
+- `ledgerBaseUrl` is optional and independent of `baseUrl` — pass both when routing consent through the Go ledger. Omitting it keeps the legacy consent-server behavior.
+
+## Ledger mode
+
+Passing `ledgerBaseUrl` routes consent-bearing reads and writes to the Go ledger:
+
+- **Notice components** — `submit-consent` goes to the ledger, and the already-consented check uses the ledger's `check-consent` endpoint instead of the legacy HTTP 409 signal. Notice content, tokens, and TTS always stay on `baseUrl`.
+- **Privacy Center** — user consents, group purposes, receipts (including the `/download` PDF path), and manage-consent (sent as a `partial: true` write) route to the ledger. DSAR form, cases, activities, OTP, and notifications stay on `baseUrl`.
+
+Every ledger read degrades to the legacy path on failure, so a ledger outage does not break the consent flow.
+
+> **Known limitation.** Unlike the React SDK, the DSAR form's product picker is **not** overlaid from ledger-served consents. Against a workspace cut over to the ledger — where the legacy `form/data` response carries no product groups — the picker renders empty. If your DSAR form depends on the product picker, stay on the legacy path until this is addressed.
 
 ## License
 

package/dist/privacy-center.js

@@ -14315,6 +14315,7 @@ var useTimePeriodOptions = () => {
 };
 var MAX_DISPLAYED_PURPOSE_NAMES_IN_ERASURE_MODAL = 3;
 var SEARCH_DEBOUNCE_DELAY = 500;
+var FORM_PICKER_GROUP_LIMIT = 100;
 var POLL_INTERVAL = 3e4;
 var NOTIFICATION_PAGE_SIZE = 10;
 var TAB_TO_CATEGORY = {
@@ -16271,6 +16272,41 @@ var styles32 = import_react_native43.StyleSheet.create({
 
 // src/RedactoPrivacyCenter/components/groupHelpers.ts
 var productGroupKey = (group) => group.nominator ? `${group.product_uuid}:${group.nominator.uuid}` : group.product_uuid;
+var consentGroupToFormProductGroup = (group) => {
+  var _a3;
+  return {
+    product_uuid: group.product_uuid,
+    product_name: group.product_name,
+    product_description: group.product_description,
+    nominator: group.nominator,
+    purposes: ((_a3 = group.purposes) != null ? _a3 : []).map(purposeItemToFormPurpose)
+  };
+};
+var purposeItemToFormPurpose = (purpose) => {
+  var _a3, _b;
+  return {
+    uuid: purpose.purpose_uuid,
+    purpose_uuid: purpose.purpose_uuid,
+    name: purpose.name,
+    description: (_a3 = purpose.description) != null ? _a3 : "",
+    industries: "",
+    selected: false,
+    given_consent: false,
+    status: purpose.status,
+    validity: null,
+    enabled: true,
+    data_elements: ((_b = purpose.data_elements) != null ? _b : []).map(consentDataElementToFormDataElement)
+  };
+};
+var consentDataElementToFormDataElement = (element) => ({
+  uuid: element.uuid,
+  name: element.name,
+  description: "",
+  enabled: element.enabled,
+  required: element.required,
+  given_consent: element.selected,
+  selected: element.selected
+});
 var buildGroupPurposes = (group) => group.purposes.filter((p) => p !== null && p !== void 0).map((p) => {
   const validDataElements = Array.isArray(p.data_elements) ? p.data_elements.filter((de) => de !== null && de !== void 0 && Boolean(de.uuid)).map((de) => ({ ...de, selected: false })) : [];
   return {
@@ -16305,7 +16341,7 @@ var isProductScopedRequestType = (rt) => PRODUCT_SCOPED_REQUEST_TYPES.has(rt);
 function Form({ onCreateRequest }) {
   const { t } = (0, import_react_i18next16.useTranslation)();
   const { accessToken, refreshToken, email, organizationId, workspaceId, updateTokens, onError } = useAuth();
-  const { consentClient, baseUrl } = useBaseUrl();
+  const { consentClient, baseUrl, ledgerBaseUrl } = useBaseUrl();
   const { colors } = useTheme();
   const requestTypeLabels = useRequestTypeLabels();
   const timePeriodOptions = useTimePeriodOptions();
@@ -16342,15 +16378,60 @@ function Form({ onCreateRequest }) {
   });
   const [uploadedDocs, setUploadedDocs] = (0, import_react29.useState)([]);
   const [isUploading, setIsUploading] = (0, import_react29.useState)(false);
+  const withLedgerPickerGroups = (0, import_react29.useCallback)(
+    async (form, language) => {
+      var _a3, _b;
+      if (!ledgerBaseUrl || !organizationId || !workspaceId) {
+        return form;
+      }
+      const consents = await fetchUserConsents({
+        organizationId,
+        workspaceId,
+        // No status filter: include every status (active / expired / withdrawn
+        // / declined), matching Python form/data, so a DSAR can target products
+        // the user no longer actively consents to.
+        limit: FORM_PICKER_GROUP_LIMIT,
+        nominatedLimit: FORM_PICKER_GROUP_LIMIT,
+        language,
+        authContext,
+        consentClient
+      });
+      if (!consents) {
+        return form;
+      }
+      return {
+        ...form,
+        direct_groups: ((_a3 = consents.direct) != null ? _a3 : []).map(consentGroupToFormProductGroup),
+        nominated_groups: ((_b = consents.nominated) != null ? _b : []).map(consentGroupToFormProductGroup)
+      };
+    },
+    [ledgerBaseUrl, organizationId, workspaceId, authContext, consentClient]
+  );
   (0, import_react29.useEffect)(() => {
     if (!organizationId || !workspaceId || !contact) return;
+    let isCancelled = false;
     setIsLoading(true);
-    getFormData(organizationId, workspaceId, contact, false, false, authContext, consentClient, langParam).then((data) => {
-      if (data) setFormDataResponse(data);
+    getFormData(organizationId, workspaceId, contact, false, false, authContext, consentClient, langParam).then(async (data) => {
+      if (!data) return;
+      const withGroups = await withLedgerPickerGroups(data, langParam);
+      if (!isCancelled) setFormDataResponse(withGroups);
     }).catch((error) => {
       console.warn("Error fetching form data:", error);
-    }).finally(() => setIsLoading(false));
-  }, [organizationId, workspaceId, contact, authContext, consentClient, langParam]);
+    }).finally(() => {
+      if (!isCancelled) setIsLoading(false);
+    });
+    return () => {
+      isCancelled = true;
+    };
+  }, [
+    organizationId,
+    workspaceId,
+    contact,
+    authContext,
+    consentClient,
+    langParam,
+    withLedgerPickerGroups
+  ]);
   const allGroups = (0, import_react29.useMemo)(() => {
     var _a3, _b;
     if (!formDataResponse) return [];

package/dist/privacy-center.mjs

@@ -14324,6 +14324,7 @@ var useTimePeriodOptions = () => {
 };
 var MAX_DISPLAYED_PURPOSE_NAMES_IN_ERASURE_MODAL = 3;
 var SEARCH_DEBOUNCE_DELAY = 500;
+var FORM_PICKER_GROUP_LIMIT = 100;
 var POLL_INTERVAL = 3e4;
 var NOTIFICATION_PAGE_SIZE = 10;
 var TAB_TO_CATEGORY = {
@@ -16303,6 +16304,41 @@ var styles32 = StyleSheet33.create({
 
 // src/RedactoPrivacyCenter/components/groupHelpers.ts
 var productGroupKey = (group) => group.nominator ? `${group.product_uuid}:${group.nominator.uuid}` : group.product_uuid;
+var consentGroupToFormProductGroup = (group) => {
+  var _a3;
+  return {
+    product_uuid: group.product_uuid,
+    product_name: group.product_name,
+    product_description: group.product_description,
+    nominator: group.nominator,
+    purposes: ((_a3 = group.purposes) != null ? _a3 : []).map(purposeItemToFormPurpose)
+  };
+};
+var purposeItemToFormPurpose = (purpose) => {
+  var _a3, _b;
+  return {
+    uuid: purpose.purpose_uuid,
+    purpose_uuid: purpose.purpose_uuid,
+    name: purpose.name,
+    description: (_a3 = purpose.description) != null ? _a3 : "",
+    industries: "",
+    selected: false,
+    given_consent: false,
+    status: purpose.status,
+    validity: null,
+    enabled: true,
+    data_elements: ((_b = purpose.data_elements) != null ? _b : []).map(consentDataElementToFormDataElement)
+  };
+};
+var consentDataElementToFormDataElement = (element) => ({
+  uuid: element.uuid,
+  name: element.name,
+  description: "",
+  enabled: element.enabled,
+  required: element.required,
+  given_consent: element.selected,
+  selected: element.selected
+});
 var buildGroupPurposes = (group) => group.purposes.filter((p) => p !== null && p !== void 0).map((p) => {
   const validDataElements = Array.isArray(p.data_elements) ? p.data_elements.filter((de) => de !== null && de !== void 0 && Boolean(de.uuid)).map((de) => ({ ...de, selected: false })) : [];
   return {
@@ -16337,7 +16373,7 @@ var isProductScopedRequestType = (rt) => PRODUCT_SCOPED_REQUEST_TYPES.has(rt);
 function Form({ onCreateRequest }) {
   const { t } = useTranslation15();
   const { accessToken, refreshToken, email, organizationId, workspaceId, updateTokens, onError } = useAuth();
-  const { consentClient, baseUrl } = useBaseUrl();
+  const { consentClient, baseUrl, ledgerBaseUrl } = useBaseUrl();
   const { colors } = useTheme();
   const requestTypeLabels = useRequestTypeLabels();
   const timePeriodOptions = useTimePeriodOptions();
@@ -16374,15 +16410,60 @@ function Form({ onCreateRequest }) {
   });
   const [uploadedDocs, setUploadedDocs] = useState16([]);
   const [isUploading, setIsUploading] = useState16(false);
+  const withLedgerPickerGroups = useCallback10(
+    async (form, language) => {
+      var _a3, _b;
+      if (!ledgerBaseUrl || !organizationId || !workspaceId) {
+        return form;
+      }
+      const consents = await fetchUserConsents({
+        organizationId,
+        workspaceId,
+        // No status filter: include every status (active / expired / withdrawn
+        // / declined), matching Python form/data, so a DSAR can target products
+        // the user no longer actively consents to.
+        limit: FORM_PICKER_GROUP_LIMIT,
+        nominatedLimit: FORM_PICKER_GROUP_LIMIT,
+        language,
+        authContext,
+        consentClient
+      });
+      if (!consents) {
+        return form;
+      }
+      return {
+        ...form,
+        direct_groups: ((_a3 = consents.direct) != null ? _a3 : []).map(consentGroupToFormProductGroup),
+        nominated_groups: ((_b = consents.nominated) != null ? _b : []).map(consentGroupToFormProductGroup)
+      };
+    },
+    [ledgerBaseUrl, organizationId, workspaceId, authContext, consentClient]
+  );
   useEffect14(() => {
     if (!organizationId || !workspaceId || !contact) return;
+    let isCancelled = false;
     setIsLoading(true);
-    getFormData(organizationId, workspaceId, contact, false, false, authContext, consentClient, langParam).then((data) => {
-      if (data) setFormDataResponse(data);
+    getFormData(organizationId, workspaceId, contact, false, false, authContext, consentClient, langParam).then(async (data) => {
+      if (!data) return;
+      const withGroups = await withLedgerPickerGroups(data, langParam);
+      if (!isCancelled) setFormDataResponse(withGroups);
     }).catch((error) => {
       console.warn("Error fetching form data:", error);
-    }).finally(() => setIsLoading(false));
-  }, [organizationId, workspaceId, contact, authContext, consentClient, langParam]);
+    }).finally(() => {
+      if (!isCancelled) setIsLoading(false);
+    });
+    return () => {
+      isCancelled = true;
+    };
+  }, [
+    organizationId,
+    workspaceId,
+    contact,
+    authContext,
+    consentClient,
+    langParam,
+    withLedgerPickerGroups
+  ]);
   const allGroups = useMemo14(() => {
     var _a3, _b;
     if (!formDataResponse) return [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@redacto.io/consent-sdk-react-native",
-  "version": "5.0.0-beta.0",
+  "version": "5.0.0-beta.1",
   "description": "React Native SDK for integrating Redacto consent notices and privacy center in mobile apps.",
   "keywords": [
     "consent",