@redacto.io/consent-sdk-react-native 5.0.0-beta.7 → 5.0.0-beta.8

package/dist/index.js

@@ -334,6 +334,7 @@ var submitConsentEvent = async ({
 var fetchTTSAudioUrls = async ({
   accessToken,
   baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   language,
   signal,
@@ -343,7 +344,7 @@ var fetchTTSAudioUrls = async ({
     throw new Error("accessToken (or token), noticeUuid, and language are required");
   }
   const { organisationUuid: ORGANISATION_UUID, workspaceUuid: WORKSPACE_UUID, sandbox } = resolveRequestAuth(accessToken, sandboxParams, decodeTokenSafely);
-  const apiBaseUrl = baseUrl || DEFAULT_CONSENT_API_BASE_URL;
+  const apiBaseUrl = (sandbox ? null : ledgerBaseUrl) || baseUrl || DEFAULT_CONSENT_API_BASE_URL;
   const normalizedLanguage = language === "en" || language === "EN" ? "English" : language;
   const url = new URL(
     `${apiBaseUrl}/public/organisations/${ORGANISATION_UUID}/workspaces/${WORKSPACE_UUID}/notices/${noticeUuid}/audio/${encodeURIComponent(normalizedLanguage)}`
@@ -1948,10 +1949,11 @@ var RedactoNoticeConsent = ({
     setIsLoading(true);
     setErrorMessage(null);
     try {
+      const noticeBaseUrl = ledgerBaseUrl && !applicationId && !token ? ledgerBaseUrl : baseUrl;
       const data = await fetchConsentContent({
         noticeId,
         accessToken,
-        baseUrl,
+        baseUrl: noticeBaseUrl,
         language: "English",
         validate_against: validateAgainst,
         include_fully_consented_data: includeFullyConsentedData,
@@ -2060,6 +2062,7 @@ var RedactoNoticeConsent = ({
       const data = await fetchTTSAudioUrls({
         accessToken,
         baseUrl,
+        ledgerBaseUrl,
         noticeUuid: content.detail.active_config.notice_uuid,
         language: selectedLanguage,
         ...sandboxParams
@@ -2116,7 +2119,7 @@ var RedactoNoticeConsent = ({
       setTtsAudioUrls({});
       setIsTTSAvailable(false);
     }
-  }, [content, accessToken, sandboxParams, baseUrl, selectedLanguage]);
+  }, [content, accessToken, sandboxParams, baseUrl, ledgerBaseUrl, selectedLanguage]);
   const clearPlaybackWatchers = (0, import_react2.useCallback)(() => {
     if (playbackSubscriptionRef.current) {
       playbackSubscriptionRef.current.remove();

package/dist/index.mjs

@@ -274,6 +274,7 @@ var submitConsentEvent = async ({
 var fetchTTSAudioUrls = async ({
   accessToken,
   baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   language,
   signal,
@@ -283,7 +284,7 @@ var fetchTTSAudioUrls = async ({
     throw new Error("accessToken (or token), noticeUuid, and language are required");
   }
   const { organisationUuid: ORGANISATION_UUID, workspaceUuid: WORKSPACE_UUID, sandbox } = resolveRequestAuth(accessToken, sandboxParams, decodeTokenSafely);
-  const apiBaseUrl = baseUrl || DEFAULT_CONSENT_API_BASE_URL;
+  const apiBaseUrl = (sandbox ? null : ledgerBaseUrl) || baseUrl || DEFAULT_CONSENT_API_BASE_URL;
   const normalizedLanguage = language === "en" || language === "EN" ? "English" : language;
   const url = new URL(
     `${apiBaseUrl}/public/organisations/${ORGANISATION_UUID}/workspaces/${WORKSPACE_UUID}/notices/${noticeUuid}/audio/${encodeURIComponent(normalizedLanguage)}`
@@ -1895,10 +1896,11 @@ var RedactoNoticeConsent = ({
     setIsLoading(true);
     setErrorMessage(null);
     try {
+      const noticeBaseUrl = ledgerBaseUrl && !applicationId && !token ? ledgerBaseUrl : baseUrl;
       const data = await fetchConsentContent({
         noticeId,
         accessToken,
-        baseUrl,
+        baseUrl: noticeBaseUrl,
         language: "English",
         validate_against: validateAgainst,
         include_fully_consented_data: includeFullyConsentedData,
@@ -2007,6 +2009,7 @@ var RedactoNoticeConsent = ({
       const data = await fetchTTSAudioUrls({
         accessToken,
         baseUrl,
+        ledgerBaseUrl,
         noticeUuid: content.detail.active_config.notice_uuid,
         language: selectedLanguage,
         ...sandboxParams
@@ -2063,7 +2066,7 @@ var RedactoNoticeConsent = ({
       setTtsAudioUrls({});
       setIsTTSAvailable(false);
     }
-  }, [content, accessToken, sandboxParams, baseUrl, selectedLanguage]);
+  }, [content, accessToken, sandboxParams, baseUrl, ledgerBaseUrl, selectedLanguage]);
   const clearPlaybackWatchers = useCallback(() => {
     if (playbackSubscriptionRef.current) {
       playbackSubscriptionRef.current.remove();

package/dist/privacy-center.d.mts

@@ -486,6 +486,29 @@ type CaseDetailsTab = Readonly<{
     id: TabId;
     label: string;
 }>;
+/**
+ * One data principal sharing this session's contact.
+ *
+ * `org_user_id` is unique per principal within the org/workspace, so it is the
+ * reliable way to tell profiles apart when the email and mobile are identical —
+ * which is the whole point of a shared contact.
+ */
+type IdentityCandidate = Readonly<{
+    uuid: string;
+    org_user_id?: string | null;
+    primary_email?: string | null;
+    primary_mobile?: string | null;
+    created_at?: string | null;
+}>;
+type IdentityListResponse = Readonly<{
+    identities: IdentityCandidate[];
+}>;
+/** Fresh tokens scoped to the chosen principal. */
+type SelectPrincipalResponse = Readonly<{
+    token: string;
+    refresh_token: string;
+    expires_at?: string;
+}>;
 
 type InternalPage = 'home' | 'consent-manager' | 'form' | 'activity' | 'receipts' | 'case-details' | 'notifications';
 interface NavigationContextType {
@@ -729,6 +752,18 @@ declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
      * Get activities (privacy center)
      */
     getActivities(baseRequest: BaseRequest, offset?: number, limit?: number, language?: string, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<unknown>;
+    /**
+     * List all data principals that share this session's contact
+     * (shared-contact profile picker). Identity is derived server-side from the
+     * JWT — the caller sends nothing but its bearer token.
+     */
+    listIdentities(baseRequest: BaseRequest, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<IdentityListResponse>;
+    /**
+     * Re-scope the session to a chosen principal uuid (must be one of the
+     * principals sharing this session's contact). Returns fresh access/refresh
+     * tokens scoped to that principal.
+     */
+    selectPrincipal(baseRequest: BaseRequest, principalUuid: string, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<SelectPrincipalResponse>;
     /**
      * Get receipts (privacy center)
      */

package/dist/privacy-center.d.ts

@@ -486,6 +486,29 @@ type CaseDetailsTab = Readonly<{
     id: TabId;
     label: string;
 }>;
+/**
+ * One data principal sharing this session's contact.
+ *
+ * `org_user_id` is unique per principal within the org/workspace, so it is the
+ * reliable way to tell profiles apart when the email and mobile are identical —
+ * which is the whole point of a shared contact.
+ */
+type IdentityCandidate = Readonly<{
+    uuid: string;
+    org_user_id?: string | null;
+    primary_email?: string | null;
+    primary_mobile?: string | null;
+    created_at?: string | null;
+}>;
+type IdentityListResponse = Readonly<{
+    identities: IdentityCandidate[];
+}>;
+/** Fresh tokens scoped to the chosen principal. */
+type SelectPrincipalResponse = Readonly<{
+    token: string;
+    refresh_token: string;
+    expires_at?: string;
+}>;
 
 type InternalPage = 'home' | 'consent-manager' | 'form' | 'activity' | 'receipts' | 'case-details' | 'notifications';
 interface NavigationContextType {
@@ -729,6 +752,18 @@ declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
      * Get activities (privacy center)
      */
     getActivities(baseRequest: BaseRequest, offset?: number, limit?: number, language?: string, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<unknown>;
+    /**
+     * List all data principals that share this session's contact
+     * (shared-contact profile picker). Identity is derived server-side from the
+     * JWT — the caller sends nothing but its bearer token.
+     */
+    listIdentities(baseRequest: BaseRequest, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<IdentityListResponse>;
+    /**
+     * Re-scope the session to a chosen principal uuid (must be one of the
+     * principals sharing this session's contact). Returns fresh access/refresh
+     * tokens scoped to that principal.
+     */
+    selectPrincipal(baseRequest: BaseRequest, principalUuid: string, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<SelectPrincipalResponse>;
     /**
      * Get receipts (privacy center)
      */