@redacto.io/consent-sdk-react-native 5.0.0-beta.6 → 5.0.0-beta.7

package/dist/privacy-center.js

@@ -9863,6 +9863,36 @@ function useSafeInsets() {
 // src/RedactoPrivacyCenter/context/BaseUrlContext.tsx
 var import_react2 = require("react");
 
+// src/shared/sandbox.ts
+var SANDBOX_TOKEN_HEADER = "X-Consent-Token";
+
+// src/RedactoPrivacyCenter/lib/sandbox.ts
+var sandboxConfig = null;
+var setSandboxConfig = (config) => {
+  sandboxConfig = config;
+};
+var getSandboxConfig = () => sandboxConfig;
+var isSandboxMode = () => sandboxConfig !== null;
+var sandboxAuthHeaders = () => {
+  if (!sandboxConfig) {
+    return null;
+  }
+  return {
+    [SANDBOX_TOKEN_HEADER]: sandboxConfig.token
+  };
+};
+var sandboxBodyIdentity = () => {
+  if (!sandboxConfig) {
+    return null;
+  }
+  if (sandboxConfig.ucic) {
+    return { org_user_id: sandboxConfig.ucic };
+  }
+  return sandboxConfig.subject.includes("@") ? { primary_email: sandboxConfig.subject } : { primary_mobile: sandboxConfig.subject };
+};
+var sandboxQueryIdentity = () => sandboxBodyIdentity();
+var sandboxContact = () => sandboxConfig ? sandboxConfig.ucic || sandboxConfig.subject : null;
+
 // src/RedactoPrivacyCenter/api/fetcher.ts
 async function apiFetch(url, options = {}) {
   const { getAuthToken, headers = {}, ...fetchOptions } = options;
@@ -9888,11 +9918,18 @@ async function apiFetch(url, options = {}) {
     }
   }
   if (getAuthToken) {
-    const token = await getAuthToken();
-    if (token) {
-      const trimmedToken = token.trim();
-      requestHeaders.set("X-Auth-Token", trimmedToken);
-      requestHeaders.set("x-auth-token", trimmedToken);
+    const sandboxHeaders = sandboxAuthHeaders();
+    if (sandboxHeaders) {
+      Object.entries(sandboxHeaders).forEach(([key, value]) => {
+        requestHeaders.set(key, value);
+      });
+    } else {
+      const token = await getAuthToken();
+      if (token) {
+        const trimmedToken = token.trim();
+        requestHeaders.set("X-Auth-Token", trimmedToken);
+        requestHeaders.set("x-auth-token", trimmedToken);
+      }
     }
   }
   const fetchOptionsFinal = {
@@ -9983,14 +10020,29 @@ function arrayBufferToBase64(buffer) {
   return result;
 }
 function createConsentClient(baseUrl, ledgerBaseUrl) {
-  const useLedger = Boolean(ledgerBaseUrl);
+  const ledgerConfigured = Boolean(ledgerBaseUrl);
+  const useLedger = () => ledgerConfigured && !isSandboxMode();
   const ledgerBase = (ledgerBaseUrl != null ? ledgerBaseUrl : "").replace(/\/$/, "");
   function ledgerUrl(baseRequest, path) {
-    if (!useLedger) {
+    if (!useLedger()) {
       throw new Error("ledgerUrl called without a configured ledgerBaseUrl");
     }
     return `${ledgerBase}/public/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}${path}`;
   }
+  function appendSandboxIdentity(queryParams) {
+    const identity = sandboxQueryIdentity();
+    if (identity) {
+      Object.entries(identity).forEach(([key, value]) => {
+        queryParams.append(key, value);
+      });
+    }
+  }
+  function sandboxIdentitySuffix() {
+    const queryParams = new URLSearchParams();
+    appendSandboxIdentity(queryParams);
+    const queryString = queryParams.toString();
+    return queryString ? `?${queryString}` : "";
+  }
   async function privacyCenterApiFetch(url, options) {
     const { authToken, getAuthToken, headers = {}, ...fetchOptions } = options;
     const requestHeaders = new Headers();
@@ -10014,11 +10066,18 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         );
       }
     }
-    const token = authToken || (getAuthToken ? await getAuthToken() : null);
-    if (token) {
-      const trimmedToken = token.trim();
-      const bearerToken = trimmedToken.startsWith("Bearer ") ? trimmedToken : `Bearer ${trimmedToken}`;
-      requestHeaders.set("Authorization", bearerToken);
+    const sandboxHeaders = sandboxAuthHeaders();
+    if (sandboxHeaders) {
+      Object.entries(sandboxHeaders).forEach(([key, value]) => {
+        requestHeaders.set(key, value);
+      });
+    } else {
+      const token = authToken || (getAuthToken ? await getAuthToken() : null);
+      if (token) {
+        const trimmedToken = token.trim();
+        const bearerToken = trimmedToken.startsWith("Bearer ") ? trimmedToken : `Bearer ${trimmedToken}`;
+        requestHeaders.set("Authorization", bearerToken);
+      }
     }
     const fetchOptionsFinal = {
       ...fetchOptions,
@@ -10099,18 +10158,20 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
     async createCaseRequest(baseRequest, payload, authToken, options) {
       const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/case`;
       const { useSessionAuth = false, getAuthToken, ...fetchOptions } = options || {};
+      const contact = sandboxContact();
+      const requestPayload = contact && payload && typeof payload === "object" ? { ...payload, contact } : payload;
       if (useSessionAuth) {
         return apiFetch(url, {
           ...fetchOptions,
           method: "POST",
-          body: JSON.stringify(payload),
+          body: JSON.stringify(requestPayload),
           getAuthToken
         });
       }
       return privacyCenterApiFetch(url, {
         ...fetchOptions,
         method: "POST",
-        body: JSON.stringify(payload),
+        body: JSON.stringify(requestPayload),
         authToken: authToken || baseRequest.authToken
       });
     },
@@ -10191,9 +10252,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if (params.status) queryParams.append("status", params.status);
       if (params.product_uuid) queryParams.append("product_uuid", params.product_uuid);
       if (params.language) queryParams.append("language", params.language);
+      appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const consentsSuffix = `/user-consents${queryString ? `?${queryString}` : ""}`;
-      const url = useLedger ? ledgerUrl(baseRequest, consentsSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${consentsSuffix}`;
+      const url = useLedger() ? ledgerUrl(baseRequest, consentsSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${consentsSuffix}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10212,9 +10274,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if (params.search) queryParams.append("search", params.search);
       if (params.language) queryParams.append("language", params.language);
       if (params.nominator_uuid) queryParams.append("nominator_uuid", params.nominator_uuid);
+      appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const purposesSuffix = `/user-consents/${productUuid}/purposes${queryString ? `?${queryString}` : ""}`;
-      const url = useLedger ? ledgerUrl(baseRequest, purposesSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${purposesSuffix}`;
+      const url = useLedger() ? ledgerUrl(baseRequest, purposesSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${purposesSuffix}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10236,9 +10299,13 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * used with its `{ purpose_uuid, contact, ... }` payload.
      */
     async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids, noticeUuid, dataElements, language) {
-      if (!useLedger) {
+      if (!useLedger()) {
         const url2 = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/manage-consent?status=${status}`;
-        const body2 = { purpose_uuid: purposeId, contact };
+        const sandboxSingleContact = sandboxContact();
+        const body2 = {
+          purpose_uuid: purposeId,
+          contact: sandboxSingleContact != null ? sandboxSingleContact : contact
+        };
         if (nominatorContact) {
           body2.nominator_contact = nominatorContact;
         }
@@ -10301,6 +10368,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if (offset !== void 0) queryParams.append("offset", offset.toString());
       if (limit !== void 0) queryParams.append("limit", limit.toString());
       if (language) queryParams.append("language", language);
+      appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/activities${queryString ? `?${queryString}` : ""}`;
       return privacyCenterApiFetch(url, {
@@ -10321,9 +10389,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if (params.created_before) queryParams.append("created_before", params.created_before);
       if (params.notice_uuid) queryParams.append("notice_uuid", params.notice_uuid);
       if (params.language) queryParams.append("language", params.language);
+      appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const receiptsSuffix = `/receipts${queryString ? `?${queryString}` : ""}`;
-      const url = useLedger ? ledgerUrl(baseRequest, receiptsSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${receiptsSuffix}`;
+      const url = useLedger() ? ledgerUrl(baseRequest, receiptsSuffix) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${receiptsSuffix}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10337,11 +10406,16 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * the RN UI writes to a temp file to open/share. 404 => not found.
      */
     async getReceiptPdf(baseRequest, receiptUuid, authToken) {
-      const url = useLedger ? ledgerUrl(baseRequest, `/receipts/${receiptUuid}/download`) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/receipts/${receiptUuid}/pdf`;
+      const url = useLedger() ? ledgerUrl(baseRequest, `/receipts/${receiptUuid}/download`) : `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/receipts/${receiptUuid}/pdf`;
       const token = authToken || baseRequest.authToken;
       const requestHeaders = new Headers();
       requestHeaders.set("Accept", "application/pdf");
-      if (token) {
+      const sandboxHeaders = sandboxAuthHeaders();
+      if (sandboxHeaders) {
+        Object.entries(sandboxHeaders).forEach(([key, value]) => {
+          requestHeaders.set(key, value);
+        });
+      } else if (token) {
         const trimmedToken = token.trim();
         const bearerToken = trimmedToken.startsWith("Bearer ") ? trimmedToken : `Bearer ${trimmedToken}`;
         requestHeaders.set("Authorization", bearerToken);
@@ -10367,6 +10441,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if (offset !== void 0) queryParams.append("offset", offset.toString());
       if (limit !== void 0) queryParams.append("limit", limit.toString());
       if (language) queryParams.append("language", language);
+      appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases?${queryString}`;
       return privacyCenterApiFetch(url, {
@@ -10378,7 +10453,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Get case messages (privacy center)
      */
     async getCaseMessages(baseRequest, caseUuid, authToken, options) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases/${caseUuid}/messages`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases/${caseUuid}/messages${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         ...options,
         authToken: authToken || baseRequest.authToken
@@ -10388,7 +10463,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Send a message in a case (privacy center)
      */
     async sendCaseMessage(baseRequest, caseUuid, body, documentUuids, authToken, options) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases/${caseUuid}/messages`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases/${caseUuid}/messages${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "POST",
@@ -10400,7 +10475,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Upload a document for a case (privacy center)
      */
     async uploadCaseDocument(baseRequest, caseUuid, formData, authToken, options) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases/${caseUuid}/upload-document`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/cases/${caseUuid}/upload-document${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         ...options,
         method: "POST",
@@ -10433,6 +10508,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if ((params == null ? void 0 : params.limit) !== void 0) queryParams.append("limit", params.limit.toString());
       if (params == null ? void 0 : params.include_summary) queryParams.append("include_summary", "true");
       if (params == null ? void 0 : params.language) queryParams.append("language", params.language);
+      appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/${queryString ? `?${queryString}` : ""}`;
       return privacyCenterApiFetch(url, {
@@ -10444,7 +10520,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Get notification summary (aggregated counts only)
      */
     async getNotificationSummary(baseRequest, authToken) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/summary`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/summary${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         method: "GET",
         authToken: authToken || baseRequest.authToken
@@ -10454,7 +10530,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Get unread notification count (lightweight, for the header badge)
      */
     async getUnreadCount(baseRequest, authToken) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/unread-count`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/unread-count${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         method: "GET",
         authToken: authToken || baseRequest.authToken
@@ -10464,7 +10540,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Mark a single notification as read
      */
     async markNotificationRead(baseRequest, notificationUuid, authToken) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/${notificationUuid}/read`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/${notificationUuid}/read${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         method: "PATCH",
         authToken: authToken || baseRequest.authToken
@@ -10474,7 +10550,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Mark all notifications as read
      */
     async markAllNotificationsRead(baseRequest, authToken) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/mark-all-read`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/mark-all-read${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         method: "POST",
         authToken: authToken || baseRequest.authToken
@@ -10484,7 +10560,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Acknowledge a notification (sets is_read and is_acknowledged to true)
      */
     async acknowledgeNotification(baseRequest, notificationUuid, authToken) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/${notificationUuid}/acknowledge`;
+      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center/notifications/${notificationUuid}/acknowledge${sandboxIdentitySuffix()}`;
       return privacyCenterApiFetch(url, {
         method: "POST",
         authToken: authToken || baseRequest.authToken
@@ -11677,6 +11753,10 @@ var compareEmails = (email1, email2) => {
   return decodeURIComponent(email1.trim()).toLowerCase() === email2.trim().toLowerCase();
 };
 var ensureValidToken = async (organizationId, workspaceId, _slug, authContext, consentClient) => {
+  const sandbox = getSandboxConfig();
+  if (sandbox) {
+    return sandbox.token;
+  }
   const accessToken = (authContext == null ? void 0 : authContext.accessToken) || getStoredValue("access_token");
   if (accessToken && typeof accessToken === "string" && accessToken.trim() !== "" && !isJwtExpired(accessToken, TOKEN_EXPIRY_BUFFER_SECONDS)) {
     return accessToken;
@@ -11814,15 +11894,73 @@ function syncJwtDataToStore(token) {
   if (authData.workspaceId) setStoredValue("pc_workspace_id", authData.workspaceId);
   return authData;
 }
-function AuthProvider({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError }) {
-  const initialAuth = extractJwtAuthData(initialAccessToken);
+function configureSandbox(props) {
+  var _a3, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k;
+  const token = (_a3 = props.token) == null ? void 0 : _a3.trim();
+  if (!token) {
+    setSandboxConfig(null);
+    return null;
+  }
+  const organisationUuid = (_c = (_b = props.organisationUuid) == null ? void 0 : _b.trim()) != null ? _c : "";
+  const workspaceUuid = (_e = (_d = props.workspaceUuid) == null ? void 0 : _d.trim()) != null ? _e : "";
+  const ucic = (_g = (_f = props.sandboxUcic) == null ? void 0 : _f.trim()) != null ? _g : "";
+  const subject = (_i = (_h = props.sandboxSubject) == null ? void 0 : _h.trim()) != null ? _i : "";
+  const slug = (_k = (_j = props.slug) == null ? void 0 : _j.trim()) != null ? _k : "";
+  if (!organisationUuid || !workspaceUuid) {
+    throw new Error("Sandbox mode requires organisationUuid and workspaceUuid props");
+  }
+  if (!ucic && !subject) {
+    throw new Error("Sandbox mode requires a UCIC, email, or mobile");
+  }
+  setSandboxConfig({
+    token,
+    ucic: ucic || void 0,
+    subject,
+    organisationUuid,
+    workspaceUuid,
+    slug
+  });
+  const contact = ucic || subject;
+  setStoredValue("access_token", token);
+  if (organisationUuid) setStoredValue("pc_org_id", organisationUuid);
+  if (workspaceUuid) setStoredValue("pc_workspace_id", workspaceUuid);
+  if (contact) setStoredValue("email", contact);
+  return {
+    email: contact || null,
+    organizationId: organisationUuid || null,
+    workspaceId: workspaceUuid || null,
+    organizationName: null
+  };
+}
+function AuthProvider(props) {
+  const {
+    children,
+    accessToken: initialAccessToken,
+    refreshToken: initialRefreshToken,
+    token: sandboxToken,
+    sandboxUcic,
+    sandboxSubject,
+    organisationUuid,
+    workspaceUuid,
+    slug,
+    onError
+  } = props;
+  const [sandboxAuth] = (0, import_react3.useState)(() => configureSandbox(props));
+  const sandboxActive = sandboxAuth !== null;
+  const initialAuth = sandboxAuth != null ? sandboxAuth : extractJwtAuthData(initialAccessToken);
   const [accessToken, setAccessToken] = (0, import_react3.useState)(() => {
+    if (sandboxActive) {
+      return sandboxToken != null ? sandboxToken : "";
+    }
     if (initialAccessToken && initialAccessToken.trim() !== "") {
       syncJwtDataToStore(initialAccessToken);
     }
     return initialAccessToken;
   });
   const [refreshToken, setRefreshToken] = (0, import_react3.useState)(() => {
+    if (sandboxActive) {
+      return "";
+    }
     if (initialRefreshToken && initialRefreshToken.trim() !== "") {
       setStoredValue("refresh_token", initialRefreshToken);
     }
@@ -11833,6 +11971,20 @@ function AuthProvider({ children, accessToken: initialAccessToken, refreshToken:
   const [workspaceId, setWorkspaceId] = (0, import_react3.useState)(initialAuth.workspaceId);
   const [organizationName, setOrganizationName] = (0, import_react3.useState)(initialAuth.organizationName);
   (0, import_react3.useEffect)(() => {
+    if (!sandboxActive) {
+      return;
+    }
+    const seeded = configureSandbox(props);
+    if (seeded) {
+      setEmail(seeded.email);
+      setOrganizationId(seeded.organizationId);
+      setWorkspaceId(seeded.workspaceId);
+      setOrganizationName(seeded.organizationName);
+    }
+    return () => setSandboxConfig(null);
+  }, [sandboxActive, sandboxToken, sandboxUcic, sandboxSubject, organisationUuid, workspaceUuid, slug]);
+  (0, import_react3.useEffect)(() => {
+    if (sandboxActive) return;
     if (accessToken) {
       const authData = syncJwtDataToStore(accessToken);
       setEmail(authData.email);
@@ -11840,11 +11992,13 @@ function AuthProvider({ children, accessToken: initialAccessToken, refreshToken:
       setWorkspaceId(authData.workspaceId);
       setOrganizationName(authData.organizationName);
     }
-  }, [accessToken]);
+  }, [accessToken, sandboxActive]);
   (0, import_react3.useEffect)(() => {
+    if (sandboxActive) return;
     if (refreshToken) setStoredValue("refresh_token", refreshToken);
-  }, [refreshToken]);
+  }, [refreshToken, sandboxActive]);
   (0, import_react3.useEffect)(() => {
+    if (sandboxActive) return;
     setAccessToken(initialAccessToken);
     if (initialAccessToken && initialAccessToken.trim() !== "") {
       const authData = syncJwtDataToStore(initialAccessToken);
@@ -11853,10 +12007,11 @@ function AuthProvider({ children, accessToken: initialAccessToken, refreshToken:
       setWorkspaceId(authData.workspaceId);
       setOrganizationName(authData.organizationName);
     }
-  }, [initialAccessToken]);
+  }, [initialAccessToken, sandboxActive]);
   (0, import_react3.useEffect)(() => {
+    if (sandboxActive) return;
     setRefreshToken(initialRefreshToken);
-  }, [initialRefreshToken]);
+  }, [initialRefreshToken, sandboxActive]);
   const updateTokens = (0, import_react3.useCallback)((newAccessToken, newRefreshToken) => {
     setAccessToken(newAccessToken);
     if (newRefreshToken) setRefreshToken(newRefreshToken);
@@ -14128,7 +14283,7 @@ var import_react_i18next11 = require("react-i18next");
 
 // src/RedactoPrivacyCenter/lib/consentManagerUtils.ts
 function purposeItemToUserConsent(purpose, group) {
-  var _a3, _b, _c, _d;
+  var _a3, _b, _c, _d, _e;
   return {
     purpose_uuid: purpose.purpose_uuid,
     purpose: purpose.name,
@@ -14142,6 +14297,7 @@ function purposeItemToUserConsent(purpose, group) {
     product_name: group.product_name,
     product_description: group.product_description,
     nominator_info: (_d = group.nominator) != null ? _d : void 0,
+    revoke_warning_message: (_e = purpose.revoke_warning_message) != null ? _e : null,
     notice_uuid: purpose.notice_uuid
   };
 }
@@ -14439,7 +14595,7 @@ var ModifyConsentModal = ({
         action: "revoke",
         buttonLabel: t("revokeConsent"),
         buttonColor: colors.error,
-        warningMessage: t("revokeConsentWarning"),
+        warningMessage: selectedRecord.revoke_warning_message || t("revokeConsentWarning"),
         description: nominatorLabel ? t("aboutToModifyConsentOnBehalf", { nominator: nominatorLabel }) : t("aboutToModifyConsent")
       };
     }
@@ -20652,6 +20808,12 @@ function RedactoPrivacyCenter({
   theme: _theme,
   accessToken,
   refreshToken,
+  token,
+  email,
+  mobile,
+  ucic,
+  organisationUuid,
+  workspaceUuid,
   onError,
   initialPage = "home",
   initialCaseUuid,
@@ -20660,8 +20822,14 @@ function RedactoPrivacyCenter({
   return /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(SafeAreaBoundary, { children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(KeyboardProviderCompat, { children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(import_react_query2.QueryClientProvider, { client: privacyCenterQueryClient, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(import_react_i18next29.I18nextProvider, { i18n: i18n_default, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(ThemeProvider, { slug, baseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(BaseUrlProvider, { baseUrl, ledgerBaseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(
     AuthProvider,
     {
-      accessToken,
-      refreshToken,
+      accessToken: accessToken != null ? accessToken : "",
+      refreshToken: refreshToken != null ? refreshToken : "",
+      token,
+      sandboxUcic: ucic,
+      sandboxSubject: email || mobile,
+      organisationUuid,
+      workspaceUuid,
+      slug,
       onError,
       children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(NavigationProvider, { initialPage, initialPendingCaseUuid: initialCaseUuid != null ? initialCaseUuid : null, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(DataAvailabilityProvider, { children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(PageStatusProvider, { children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(PrivacyCenterContent, { onBack }) }) }) })
     }