@redacto.io/consent-sdk-react-native 5.0.0-beta.5 → 5.0.0-beta.7

package/dist/privacy-center.js

@@ -9863,6 +9863,36 @@ function useSafeInsets() {
 // src/RedactoPrivacyCenter/context/BaseUrlContext.tsx
 var import_react2 = require("react");
 
+// src/shared/sandbox.ts
+var SANDBOX_TOKEN_HEADER = "X-Consent-Token";
+
+// src/RedactoPrivacyCenter/lib/sandbox.ts
+var sandboxConfig = null;
+var setSandboxConfig = (config) => {
+  sandboxConfig = config;
+};
+var getSandboxConfig = () => sandboxConfig;
+var isSandboxMode = () => sandboxConfig !== null;
+var sandboxAuthHeaders = () => {
+  if (!sandboxConfig) {
+    return null;
+  }
+  return {
+    [SANDBOX_TOKEN_HEADER]: sandboxConfig.token
+  };
+};
+var sandboxBodyIdentity = () => {
+  if (!sandboxConfig) {
+    return null;
+  }
+  if (sandboxConfig.ucic) {
+    return { org_user_id: sandboxConfig.ucic };
+  }
+  return sandboxConfig.subject.includes("@") ? { primary_email: sandboxConfig.subject } : { primary_mobile: sandboxConfig.subject };
+};
+var sandboxQueryIdentity = () => sandboxBodyIdentity();
+var sandboxContact = () => sandboxConfig ? sandboxConfig.ucic || sandboxConfig.subject : null;
+
 // src/RedactoPrivacyCenter/api/fetcher.ts
 async function apiFetch(url, options = {}) {
   const { getAuthToken, headers = {}, ...fetchOptions } = options;
@@ -9888,11 +9918,18 @@ async function apiFetch(url, options = {}) {
     }
   }
   if (getAuthToken) {
-    const token = await getAuthToken();
-    if (token) {
-      const trimmedToken = token.trim();
-      requestHeaders.set("X-Auth-Token", trimmedToken);
-      requestHeaders.set("x-auth-token", trimmedToken);
+    const sandboxHeaders = sandboxAuthHeaders();
+    if (sandboxHeaders) {
+      Object.entries(sandboxHeaders).forEach(([key, value]) => {
+        requestHeaders.set(key, value);
+      });
+    } else {
+      const token = await getAuthToken();
+      if (token) {
+        const trimmedToken = token.trim();
+        requestHeaders.set("X-Auth-Token", trimmedToken);
+        requestHeaders.set("x-auth-token", trimmedToken);
+      }
     }
   }
   const fetchOptionsFinal = {
@@ -9983,14 +10020,29 @@ function arrayBufferToBase64(buffer) {
   return result;
 }
 function createConsentClient(baseUrl, ledgerBaseUrl) {
-  const useLedger = Boolean(ledgerBaseUrl);
+  const ledgerConfigured = Boolean(ledgerBaseUrl);
+  const useLedger = () => ledgerConfigured && !isSandboxMode();
   const ledgerBase = (ledgerBaseUrl != null ? ledgerBaseUrl : "").replace(/\/$/, "");
   function ledgerUrl(baseRequest, path) {
-    if (!useLedger) {
+    if (!useLedger()) {
       throw new Error("ledgerUrl called without a configured ledgerBaseUrl");
     }
     return `${ledgerBase}/public/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}${path}`;
   }
+  function appendSandboxIdentity(queryParams) {
+    const identity = sandboxQueryIdentity();
+    if (identity) {
+      Object.entries(identity).forEach(([key, value]) => {
+        queryParams.append(key, value);
+      });
+    }
+  }
+  function sandboxIdentitySuffix() {
+    const queryParams = new URLSearchParams();
+    appendSandboxIdentity(queryParams);
+    const queryString = queryParams.toString();
+    return queryString ? `?${queryString}` : "";
+  }
   async function privacyCenterApiFetch(url, options) {
     const { authToken, getAuthToken, headers = {}, ...fetchOptions } = options;
     const requestHeaders = new Headers();
@@ -10014,11 +10066,18 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         );
       }
     }
-    const token = authToken || (getAuthToken ? await getAuthToken() : null);
-    if (token) {
-      const trimmedToken = token.trim();
-      const bearerToken = trimmedToken.startsWith("Bearer ") ? trimmedToken : `Bearer ${trimmedToken}`;
-      requestHeaders.set("Authorization", bearerToken);
+    const sandboxHeaders = sandboxAuthHeaders();
+    if (sandboxHeaders) {
+      Object.entries(sandboxHeaders).forEach(([key, value]) => {
+        requestHeaders.set(key, value);
+      });
+    } else {
+      const token = authToken || (getAuthToken ? await getAuthToken() : null);
+      if (token) {
+        const trimmedToken = token.trim();
+        const bearerToken = trimmedToken.startsWith("Bearer ") ? trimmedToken : `Bearer ${trimmedToken}`;
+        requestHeaders.set("Authorization", bearerToken);
+      }
     }
     const fetchOptionsFinal = {
       ...fetchOptions,
@@ -10099,18 +10158,20 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
     async createCaseRequest(baseRequest, payload, authToken, options) {
       const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/case`;
       const { useSessionAuth = false, getAuthToken, ...fetchOptions } = options || {};
+      const contact = sandboxContact();
+      const requestPayload = contact && payload && typeof payload === "object" ? { ...payload, contact } : payload;
       if (useSessionAuth) {
         return apiFetch(url, {
           ...fetchOptions,
           method: "POST",
-          body: JSON.stringify(payload),
+          body: JSON.stringify(requestPayload),
           getAuthToken
         });
       }
       return privacyCenterApiFetch(url, {
         ...fetchOptions,
         method: "POST",
-        body: JSON.stringify(payload),
+        body: JSON.stringify(requestPayload),
         authToken: authToken || baseRequest.authToken
       });
     },
@@ -10191,9 +10252,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if (params.status) queryParams.append("status", params.status);
       if (params.product_uuid) queryParams.append("product_uuid", params.product_uuid);
       if (params.language) queryParams.append("language", params.language);
+      appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const consentsSuffix = `/user-consents${queryString ? `?${queryString}` : ""}`;
-      const url = useLedger ? ledgerUrl(baseRequest, consentsSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${consentsSuffix}`;
+      const url = useLedger() ? ledgerUrl(baseRequest, consentsSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${consentsSuffix}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10212,9 +10274,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if (params.search) queryParams.append("search", params.search);
       if (params.language) queryParams.append("language", params.language);
       if (params.nominator_uuid) queryParams.append("nominator_uuid", params.nominator_uuid);
+      appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const purposesSuffix = `/user-consents/${productUuid}/purposes${queryString ? `?${queryString}` : ""}`;
-      const url = useLedger ? ledgerUrl(baseRequest, purposesSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${purposesSuffix}`;
+      const url = useLedger() ? ledgerUrl(baseRequest, purposesSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${purposesSuffix}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10236,9 +10299,13 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * used with its `{ purpose_uuid, contact, ... }` payload.
      */
     async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids, noticeUuid, dataElements, language) {
-      if (!useLedger) {
+      if (!useLedger()) {
         const url2 = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/manage-consent?status=${status}`;
-        const body2 = { purpose_uuid: purposeId, contact };
+        const sandboxSingleContact = sandboxContact();
+        const body2 = {
+          purpose_uuid: purposeId,
+          contact: sandboxSingleContact != null ? sandboxSingleContact : contact
+        };
         if (nominatorContact) {
           body2.nominator_contact = nominatorContact;
         }
@@ -10301,6 +10368,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if (offset !== void 0) queryParams.append("offset", offset.toString());
       if (limit !== void 0) queryParams.append("limit", limit.toString());
       if (language) queryParams.append("language", language);
+      appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/activities${queryString ? `?${queryString}` : ""}`;
       return privacyCenterApiFetch(url, {
@@ -10321,9 +10389,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if (params.created_before) queryParams.append("created_before", params.created_before);
       if (params.notice_uuid) queryParams.append("notice_uuid", params.notice_uuid);
       if (params.language) queryParams.append("language", params.language);
+      appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const receiptsSuffix = `/receipts${queryString ? `?${queryString}` : ""}`;
-      const url = useLedger ? ledgerUrl(baseRequest, receiptsSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${receiptsSuffix}`;
+      const url = useLedger() ? ledgerUrl(baseRequest, receiptsSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${receiptsSuffix}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10337,11 +10406,16 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * the RN UI writes to a temp file to open/share. 404 => not found.
      */
     async getReceiptPdf(baseRequest, receiptUuid, authToken) {
-      const url = useLedger ? ledgerUrl(baseRequest, `/receipts/${receiptUuid}/download`) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/receipts/${receiptUuid}/pdf`;
+      const url = useLedger() ? ledgerUrl(baseRequest, `/receipts/${receiptUuid}/download`) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/receipts/${receiptUuid}/pdf`;
       const token = authToken || baseRequest.authToken;
       const requestHeaders = new Headers();
       requestHeaders.set("Accept", "application/pdf");
-      if (token) {
+      const sandboxHeaders = sandboxAuthHeaders();
+      if (sandboxHeaders) {
+        Object.entries(sandboxHeaders).forEach(([key, value]) => {
+          requestHeaders.set(key, value);
+        });
+      } else if (token) {
         const trimmedToken = token.trim();
         const bearerToken = trimmedToken.startsWith("Bearer ") ? trimmedToken : `Bearer ${trimmedToken}`;
         requestHeaders.set("Authorization", bearerToken);
@@ -10367,6 +10441,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if (offset !== void 0) queryParams.append("offset", offset.toString());
       if (limit !== void 0) queryParams.append("limit", limit.toString());
       if (language) queryParams.append("language", language);
+      appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases?${queryString}`;
       return privacyCenterApiFetch(url, {
@@ -10378,7 +10453,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Get case messages (privacy center)
      */
     async getCaseMessages(baseRequest, caseUuid, authToken, options) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases/${caseUuid}/messages`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases/${caseUuid}/messages${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         ...options,
         authToken: authToken || baseRequest.authToken
@@ -10388,7 +10463,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Send a message in a case (privacy center)
      */
     async sendCaseMessage(baseRequest, caseUuid, body, documentUuids, authToken, options) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases/${caseUuid}/messages`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases/${caseUuid}/messages${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "POST",
@@ -10400,7 +10475,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Upload a document for a case (privacy center)
      */
     async uploadCaseDocument(baseRequest, caseUuid, formData, authToken, options) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases/${caseUuid}/upload-document`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases/${caseUuid}/upload-document${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "POST",
@@ -10433,6 +10508,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if ((params == null ? void 0 : params.limit) !== void 0) queryParams.append("limit", params.limit.toString());
       if (params == null ? void 0 : params.include_summary) queryParams.append("include_summary", "true");
       if (params == null ? void 0 : params.language) queryParams.append("language", params.language);
+      appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/${queryString ? `?${queryString}` : ""}`;
       return privacyCenterApiFetch(url, {
@@ -10444,7 +10520,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Get notification summary (aggregated counts only)
      */
     async getNotificationSummary(baseRequest, authToken) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/summary`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/summary${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         method: "GET",
         authToken: authToken || baseRequest.authToken
@@ -10454,7 +10530,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Get unread notification count (lightweight, for the header badge)
      */
     async getUnreadCount(baseRequest, authToken) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/unread-count`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/unread-count${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         method: "GET",
         authToken: authToken || baseRequest.authToken
@@ -10464,7 +10540,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Mark a single notification as read
      */
     async markNotificationRead(baseRequest, notificationUuid, authToken) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/${notificationUuid}/read`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/${notificationUuid}/read${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         method: "PATCH",
         authToken: authToken || baseRequest.authToken
@@ -10474,7 +10550,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Mark all notifications as read
      */
     async markAllNotificationsRead(baseRequest, authToken) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/mark-all-read`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/mark-all-read${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         method: "POST",
         authToken: authToken || baseRequest.authToken
@@ -10484,7 +10560,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Acknowledge a notification (sets is_read and is_acknowledged to true)
      */
     async acknowledgeNotification(baseRequest, notificationUuid, authToken) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/${notificationUuid}/acknowledge`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/${notificationUuid}/acknowledge${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         method: "POST",
         authToken: authToken || baseRequest.authToken
@@ -11677,6 +11753,10 @@ var compareEmails = (email1, email2) => {
   return decodeURIComponent(email1.trim()).toLowerCase() === email2.trim().toLowerCase();
 };
 var ensureValidToken = async (organizationId, workspaceId, _slug, authContext, consentClient) => {
+  const sandbox = getSandboxConfig();
+  if (sandbox) {
+    return sandbox.token;
+  }
   const accessToken = (authContext == null ? void 0 : authContext.accessToken) || getStoredValue("access_token");
   if (accessToken && typeof accessToken === "string" && accessToken.trim() !== "" && !isJwtExpired(accessToken, TOKEN_EXPIRY_BUFFER_SECONDS)) {
     return accessToken;
@@ -11814,15 +11894,73 @@ function syncJwtDataToStore(token) {
   if (authData.workspaceId) setStoredValue("pc_workspace_id", authData.workspaceId);
   return authData;
 }
-function AuthProvider({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError }) {
-  const initialAuth = extractJwtAuthData(initialAccessToken);
+function configureSandbox(props) {
+  var _a3, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k;
+  const token = (_a3 = props.token) == null ? void 0 : _a3.trim();
+  if (!token) {
+    setSandboxConfig(null);
+    return null;
+  }
+  const organisationUuid = (_c = (_b = props.organisationUuid) == null ? void 0 : _b.trim()) != null ? _c : "";
+  const workspaceUuid = (_e = (_d = props.workspaceUuid) == null ? void 0 : _d.trim()) != null ? _e : "";
+  const ucic = (_g = (_f = props.sandboxUcic) == null ? void 0 : _f.trim()) != null ? _g : "";
+  const subject = (_i = (_h = props.sandboxSubject) == null ? void 0 : _h.trim()) != null ? _i : "";
+  const slug = (_k = (_j = props.slug) == null ? void 0 : _j.trim()) != null ? _k : "";
+  if (!organisationUuid || !workspaceUuid) {
+    throw new Error("Sandbox mode requires organisationUuid and workspaceUuid props");
+  }
+  if (!ucic && !subject) {
+    throw new Error("Sandbox mode requires a UCIC, email, or mobile");
+  }
+  setSandboxConfig({
+    token,
+    ucic: ucic || void 0,
+    subject,
+    organisationUuid,
+    workspaceUuid,
+    slug
+  });
+  const contact = ucic || subject;
+  setStoredValue("access_token", token);
+  if (organisationUuid) setStoredValue("pc_org_id", organisationUuid);
+  if (workspaceUuid) setStoredValue("pc_workspace_id", workspaceUuid);
+  if (contact) setStoredValue("email", contact);
+  return {
+    email: contact || null,
+    organizationId: organisationUuid || null,
+    workspaceId: workspaceUuid || null,
+    organizationName: null
+  };
+}
+function AuthProvider(props) {
+  const {
+    children,
+    accessToken: initialAccessToken,
+    refreshToken: initialRefreshToken,
+    token: sandboxToken,
+    sandboxUcic,
+    sandboxSubject,
+    organisationUuid,
+    workspaceUuid,
+    slug,
+    onError
+  } = props;
+  const [sandboxAuth] = (0, import_react3.useState)(() => configureSandbox(props));
+  const sandboxActive = sandboxAuth !== null;
+  const initialAuth = sandboxAuth != null ? sandboxAuth : extractJwtAuthData(initialAccessToken);
   const [accessToken, setAccessToken] = (0, import_react3.useState)(() => {
+    if (sandboxActive) {
+      return sandboxToken != null ? sandboxToken : "";
+    }
     if (initialAccessToken && initialAccessToken.trim() !== "") {
       syncJwtDataToStore(initialAccessToken);
     }
     return initialAccessToken;
   });
   const [refreshToken, setRefreshToken] = (0, import_react3.useState)(() => {
+    if (sandboxActive) {
+      return "";
+    }
     if (initialRefreshToken && initialRefreshToken.trim() !== "") {
       setStoredValue("refresh_token", initialRefreshToken);
     }
@@ -11833,6 +11971,20 @@ function AuthProvider({ children, accessToken: initialAccessToken, refreshToken:
   const [workspaceId, setWorkspaceId] = (0, import_react3.useState)(initialAuth.workspaceId);
   const [organizationName, setOrganizationName] = (0, import_react3.useState)(initialAuth.organizationName);
   (0, import_react3.useEffect)(() => {
+    if (!sandboxActive) {
+      return;
+    }
+    const seeded = configureSandbox(props);
+    if (seeded) {
+      setEmail(seeded.email);
+      setOrganizationId(seeded.organizationId);
+      setWorkspaceId(seeded.workspaceId);
+      setOrganizationName(seeded.organizationName);
+    }
+    return () => setSandboxConfig(null);
+  }, [sandboxActive, sandboxToken, sandboxUcic, sandboxSubject, organisationUuid, workspaceUuid, slug]);
+  (0, import_react3.useEffect)(() => {
+    if (sandboxActive) return;
     if (accessToken) {
       const authData = syncJwtDataToStore(accessToken);
       setEmail(authData.email);
@@ -11840,11 +11992,13 @@ function AuthProvider({ children, accessToken: initialAccessToken, refreshToken:
       setWorkspaceId(authData.workspaceId);
       setOrganizationName(authData.organizationName);
     }
-  }, [accessToken]);
+  }, [accessToken, sandboxActive]);
   (0, import_react3.useEffect)(() => {
+    if (sandboxActive) return;
     if (refreshToken) setStoredValue("refresh_token", refreshToken);
-  }, [refreshToken]);
+  }, [refreshToken, sandboxActive]);
   (0, import_react3.useEffect)(() => {
+    if (sandboxActive) return;
     setAccessToken(initialAccessToken);
     if (initialAccessToken && initialAccessToken.trim() !== "") {
       const authData = syncJwtDataToStore(initialAccessToken);
@@ -11853,10 +12007,11 @@ function AuthProvider({ children, accessToken: initialAccessToken, refreshToken:
       setWorkspaceId(authData.workspaceId);
       setOrganizationName(authData.organizationName);
     }
-  }, [initialAccessToken]);
+  }, [initialAccessToken, sandboxActive]);
   (0, import_react3.useEffect)(() => {
+    if (sandboxActive) return;
     setRefreshToken(initialRefreshToken);
-  }, [initialRefreshToken]);
+  }, [initialRefreshToken, sandboxActive]);
   const updateTokens = (0, import_react3.useCallback)((newAccessToken, newRefreshToken) => {
     setAccessToken(newAccessToken);
     if (newRefreshToken) setRefreshToken(newRefreshToken);
@@ -14128,7 +14283,7 @@ var import_react_i18next11 = require("react-i18next");
 
 // src/RedactoPrivacyCenter/lib/consentManagerUtils.ts
 function purposeItemToUserConsent(purpose, group) {
-  var _a3, _b, _c, _d;
+  var _a3, _b, _c, _d, _e;
   return {
     purpose_uuid: purpose.purpose_uuid,
     purpose: purpose.name,
@@ -14142,6 +14297,7 @@ function purposeItemToUserConsent(purpose, group) {
     product_name: group.product_name,
     product_description: group.product_description,
     nominator_info: (_d = group.nominator) != null ? _d : void 0,
+    revoke_warning_message: (_e = purpose.revoke_warning_message) != null ? _e : null,
     notice_uuid: purpose.notice_uuid
   };
 }
@@ -14336,6 +14492,7 @@ var useTimePeriodOptions = () => {
 var MAX_DISPLAYED_PURPOSE_NAMES_IN_ERASURE_MODAL = 3;
 var SEARCH_DEBOUNCE_DELAY = 500;
 var FORM_PICKER_GROUP_LIMIT = 100;
+var LEGACY_PRODUCT_GROUP_UUID = "__legacy_flat_purposes__";
 var POLL_INTERVAL = 3e4;
 var NOTIFICATION_PAGE_SIZE = 10;
 var TAB_TO_CATEGORY = {
@@ -14438,7 +14595,7 @@ var ModifyConsentModal = ({
         action: "revoke",
         buttonLabel: t("revokeConsent"),
         buttonColor: colors.error,
-        warningMessage: t("revokeConsentWarning"),
+        warningMessage: selectedRecord.revoke_warning_message || t("revokeConsentWarning"),
         description: nominatorLabel ? t("aboutToModifyConsentOnBehalf", { nominator: nominatorLabel }) : t("aboutToModifyConsent")
       };
     }
@@ -16327,19 +16484,32 @@ var consentGroupToFormProductGroup = (group) => {
   };
 };
 var purposeItemToFormPurpose = (purpose) => {
-  var _a3, _b;
+  var _a3, _b, _c, _d, _e, _f;
   return {
-    uuid: purpose.purpose_uuid,
-    purpose_uuid: purpose.purpose_uuid,
+    // The ledger keys purposes as `purpose_uuid`; the legacy Python
+    // user-consents payload keys some of them as `uuid`. Accept either so the
+    // picker and the submitted `purpose_uuid` resolve on both backends.
+    uuid: (_b = (_a3 = purpose.purpose_uuid) != null ? _a3 : purpose.uuid) != null ? _b : "",
+    purpose_uuid: (_d = (_c = purpose.purpose_uuid) != null ? _c : purpose.uuid) != null ? _d : "",
     name: purpose.name,
-    description: (_a3 = purpose.description) != null ? _a3 : "",
+    description: (_e = purpose.description) != null ? _e : "",
     industries: "",
     selected: false,
     given_consent: false,
     status: purpose.status,
     validity: null,
     enabled: true,
-    data_elements: ((_b = purpose.data_elements) != null ? _b : []).map(consentDataElementToFormDataElement)
+    data_elements: ((_f = purpose.data_elements) != null ? _f : []).map(consentDataElementToFormDataElement)
+  };
+};
+var legacyFlatGroup = (form, label) => {
+  var _a3;
+  return {
+    product_uuid: LEGACY_PRODUCT_GROUP_UUID,
+    product_name: label,
+    product_description: null,
+    nominator: null,
+    purposes: ((_a3 = form.purposes) != null ? _a3 : []).map((wrapper) => wrapper == null ? void 0 : wrapper.purpose).filter((purpose) => Boolean(purpose))
   };
 };
 var consentDataElementToFormDataElement = (element) => ({
@@ -16385,7 +16555,7 @@ var isProductScopedRequestType = (rt) => PRODUCT_SCOPED_REQUEST_TYPES.has(rt);
 function Form({ onCreateRequest }) {
   const { t } = (0, import_react_i18next16.useTranslation)();
   const { accessToken, refreshToken, email, organizationId, workspaceId, updateTokens, onError } = useAuth();
-  const { consentClient, baseUrl, ledgerBaseUrl } = useBaseUrl();
+  const { consentClient, baseUrl } = useBaseUrl();
   const { colors } = useTheme();
   const requestTypeLabels = useRequestTypeLabels();
   const timePeriodOptions = useTimePeriodOptions();
@@ -16422,10 +16592,10 @@ function Form({ onCreateRequest }) {
   });
   const [uploadedDocs, setUploadedDocs] = (0, import_react29.useState)([]);
   const [isUploading, setIsUploading] = (0, import_react29.useState)(false);
-  const withLedgerPickerGroups = (0, import_react29.useCallback)(
+  const withUserConsentPickerGroups = (0, import_react29.useCallback)(
     async (form, language) => {
       var _a3, _b;
-      if (!ledgerBaseUrl || !organizationId || !workspaceId) {
+      if (!organizationId || !workspaceId) {
         return form;
       }
       const consents = await fetchUserConsents({
@@ -16440,16 +16610,18 @@ function Form({ onCreateRequest }) {
         authContext,
         consentClient
       });
-      if (!consents) {
+      const direct = (_a3 = consents == null ? void 0 : consents.direct) != null ? _a3 : [];
+      const nominated = (_b = consents == null ? void 0 : consents.nominated) != null ? _b : [];
+      if (direct.length === 0 && nominated.length === 0) {
         return form;
       }
       return {
         ...form,
-        direct_groups: ((_a3 = consents.direct) != null ? _a3 : []).map(consentGroupToFormProductGroup),
-        nominated_groups: ((_b = consents.nominated) != null ? _b : []).map(consentGroupToFormProductGroup)
+        direct_groups: direct.map(consentGroupToFormProductGroup),
+        nominated_groups: nominated.map(consentGroupToFormProductGroup)
       };
     },
-    [ledgerBaseUrl, organizationId, workspaceId, authContext, consentClient]
+    [organizationId, workspaceId, authContext, consentClient]
   );
   (0, import_react29.useEffect)(() => {
     if (!organizationId || !workspaceId || !contact) return;
@@ -16457,7 +16629,7 @@ function Form({ onCreateRequest }) {
     setIsLoading(true);
     getFormData(organizationId, workspaceId, contact, false, false, authContext, consentClient, langParam).then(async (data) => {
       if (!data) return;
-      const withGroups = await withLedgerPickerGroups(data, langParam);
+      const withGroups = await withUserConsentPickerGroups(data, langParam);
       if (!isCancelled) setFormDataResponse(withGroups);
     }).catch((error) => {
       console.warn("Error fetching form data:", error);
@@ -16474,16 +16646,24 @@ function Form({ onCreateRequest }) {
     authContext,
     consentClient,
     langParam,
-    withLedgerPickerGroups
+    withUserConsentPickerGroups
   ]);
   const allGroups = (0, import_react29.useMemo)(() => {
     var _a3, _b;
     if (!formDataResponse) return [];
-    return [
+    const groups = [
       ...(_a3 = formDataResponse.direct_groups) != null ? _a3 : [],
       ...(_b = formDataResponse.nominated_groups) != null ? _b : []
     ];
-  }, [formDataResponse]);
+    if (groups.length > 0) {
+      return groups;
+    }
+    const flatGroup = legacyFlatGroup(formDataResponse, t("yourData"));
+    if (buildGroupPurposes(flatGroup).length === 0) {
+      return [];
+    }
+    return [flatGroup];
+  }, [formDataResponse, t]);
   const skipProductStep = allGroups.length === 1;
   const selectedGroup = (0, import_react29.useMemo)(() => {
     var _a3, _b;
@@ -16745,7 +16925,8 @@ function Form({ onCreateRequest }) {
     setIsSubmitting(true);
     try {
       const isProductScoped = isProductScopedRequestType(requestType);
-      const anchorGroup = isProductScoped ? selectedGroup : null;
+      const isLegacyFlatSelection = (selectedGroup == null ? void 0 : selectedGroup.product_uuid) === LEGACY_PRODUCT_GROUP_UUID;
+      const anchorGroup = isProductScoped && !isLegacyFlatSelection ? selectedGroup : null;
       const updatePurposes = Array.from(selectedPurposes).map((uuid) => ({
         purpose_uuid: uuid,
         data_element_uuids: Array.from(selectedDataElements.get(uuid) || [])
@@ -20627,6 +20808,12 @@ function RedactoPrivacyCenter({
   theme: _theme,
   accessToken,
   refreshToken,
+  token,
+  email,
+  mobile,
+  ucic,
+  organisationUuid,
+  workspaceUuid,
   onError,
   initialPage = "home",
   initialCaseUuid,
@@ -20635,8 +20822,14 @@ function RedactoPrivacyCenter({
   return /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(SafeAreaBoundary, { children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(KeyboardProviderCompat, { children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(import_react_query2.QueryClientProvider, { client: privacyCenterQueryClient, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(import_react_i18next29.I18nextProvider, { i18n: i18n_default, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(ThemeProvider, { slug, baseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(BaseUrlProvider, { baseUrl, ledgerBaseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(
     AuthProvider,
     {
-      accessToken,
-      refreshToken,
+      accessToken: accessToken != null ? accessToken : "",
+      refreshToken: refreshToken != null ? refreshToken : "",
+      token,
+      sandboxUcic: ucic,
+      sandboxSubject: email || mobile,
+      organisationUuid,
+      workspaceUuid,
+      slug,
       onError,
       children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(NavigationProvider, { initialPage, initialPendingCaseUuid: initialCaseUuid != null ? initialCaseUuid : null, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(DataAvailabilityProvider, { children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(PageStatusProvider, { children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(PrivacyCenterContent, { onBack }) }) }) })
     }