@redacto.io/consent-sdk-react-native 5.0.1-beta.1 → 6.0.0

package/dist/privacy-center.d.mts

@@ -1,10 +1,330 @@
 import * as React from 'react';
 import React__default, { ReactNode } from 'react';
+import { P as PrivacyCenterTheme } from './types-BYp89x8C.mjs';
 import * as _tanstack_react_query from '@tanstack/react-query';
 import * as react_native from 'react-native';
-import { StyleProp, ViewStyle, TextStyle, KeyboardTypeOptions, DimensionValue, Animated } from 'react-native';
+import { ViewStyle, TextStyle, StyleProp, KeyboardTypeOptions, DimensionValue, Animated } from 'react-native';
 import * as lucide_react_native from 'lucide-react-native';
 
+/** Menu sections, keyed by the `InternalPage` each one opens. */
+type PrivacyCenterSectionKey = 'consent-manager' | 'form' | 'activity' | 'receipts' | 'notifications';
+/** Request types, keyed by the lower-case value a case is created with. */
+type PrivacyCenterRequestTypeKey = 'access' | 'correction' | 'erasure' | 'nomination' | 'grievance';
+type PrivacyCenterGrievanceCategory = 'consent_violation' | 'unlawful_processing' | 'data_breach';
+type PrivacyCenterSignInLayout = 'card' | 'split' | 'minimal';
+type PrivacyCenterSignInAlign = 'center' | 'left';
+type PrivacyCenterSignInBackground = 'gradient' | 'solid' | 'image';
+type PrivacyCenterSignInChannels = 'both' | 'email' | 'sms';
+type PrivacyCenterSection = Readonly<{
+    key: PrivacyCenterSectionKey;
+    /** `null` uses the built-in, translated label. */
+    label: string | null;
+    enabled: boolean;
+}>;
+type PrivacyCenterRequestType = Readonly<{
+    key: PrivacyCenterRequestTypeKey;
+    /** `null` uses the built-in, translated label. */
+    label: string | null;
+    enabled: boolean;
+}>;
+type PrivacyCenterFooterLink = Readonly<{
+    label: string;
+    url: string;
+}>;
+type PrivacyCenterBrandingSettings = Readonly<{
+    inherit_identity: boolean;
+    display_name: string | null;
+    logo_url: string | null;
+    /** 28–96 px; `null` keeps the built-in size. */
+    logo_height: number | null;
+    inherit_colors: boolean;
+    primary_color: string | null;
+    accent_color: string | null;
+    inherit_font: boolean;
+    font_family: string | null;
+    style: PrivacyCenterTheme;
+    /** 0–24 px; `null` keeps the built-in radii. */
+    corner_radius: number | null;
+}>;
+type PrivacyCenterSignInSettings = Readonly<{
+    layout: PrivacyCenterSignInLayout;
+    align: PrivacyCenterSignInAlign;
+    background_type: PrivacyCenterSignInBackground;
+    background_from: string;
+    background_to: string;
+    background_color: string;
+    background_image_url: string | null;
+    highlights: readonly string[];
+    show_logo: boolean;
+    title: string;
+    tagline: string | null;
+    heading: string;
+    description: string | null;
+    channels: PrivacyCenterSignInChannels;
+    default_country_code: string;
+    field_label: string | null;
+    placeholder: string | null;
+    help_text: string | null;
+    button_text: string;
+    show_notice_line: boolean;
+    notice_line: string | null;
+    show_support_link: boolean;
+    support_text: string;
+    support_link_text: string;
+    otp_heading: string;
+    otp_description: string | null;
+    otp_button_text: string;
+    otp_resend_text: string;
+}>;
+type PrivacyCenterPortalSettings = Readonly<{
+    sections: readonly PrivacyCenterSection[];
+    welcome_enabled: boolean;
+    welcome_title: string;
+    welcome_message: string;
+    request_types: readonly PrivacyCenterRequestType[];
+    grievance_categories: readonly PrivacyCenterGrievanceCategory[];
+    /** `null` asks the data principal, as today. */
+    revoke_consents_on_erasure: boolean | null;
+    /** `null` uses the built-in warning; a purpose's own message still wins. */
+    withdraw_warning: string | null;
+    /** `null` never signs out for inactivity. */
+    session_timeout_minutes: number | null;
+}>;
+type PrivacyCenterLanguageSettings = Readonly<{
+    enabled: readonly string[];
+    default: string;
+    auto_detect: boolean;
+    show_switcher: boolean;
+}>;
+type PrivacyCenterFooterSettings = Readonly<{
+    links: readonly PrivacyCenterFooterLink[];
+    show_privacy_policy: boolean;
+    show_contact: boolean;
+    copyright: string | null;
+    show_powered_by: boolean;
+}>;
+type PrivacyCenterSeoSettings = Readonly<{
+    page_title: string;
+    noindex: boolean;
+}>;
+type PrivacyCenterEmbedSettings = Readonly<{
+    allowed_origins: readonly string[];
+}>;
+/**
+ * The full Privacy Center settings, as published from the Redacto console and
+ * served by the public settings endpoint, with every field filled in. The
+ * published `custom_css` is web-only: React Native has no stylesheet to apply
+ * it to, so it is not read.
+ */
+type ResolvedPrivacyCenterSettings = Readonly<{
+    schema_version: number;
+    branding: PrivacyCenterBrandingSettings;
+    sign_in: PrivacyCenterSignInSettings;
+    portal: PrivacyCenterPortalSettings;
+    languages: PrivacyCenterLanguageSettings;
+    footer: PrivacyCenterFooterSettings;
+    seo: PrivacyCenterSeoSettings;
+    embed: PrivacyCenterEmbedSettings;
+}>;
+/**
+ * Host overrides for `RedactoPrivacyCenter`'s `settings` prop. Each group is
+ * merged field by field over the published settings, so a host can change one
+ * value and keep the rest of what the console published.
+ */
+type PrivacyCenterSettings = Readonly<{
+    /**
+     * Visual style, kept as an alias for `branding.style` so the same settings
+     * object works on the web SDK. The React Native Privacy Center has one look,
+     * so the style is read but changes nothing here.
+     */
+    theme?: PrivacyCenterTheme;
+    branding?: Partial<PrivacyCenterBrandingSettings>;
+    sign_in?: Partial<PrivacyCenterSignInSettings>;
+    portal?: Partial<PrivacyCenterPortalSettings>;
+    languages?: Partial<PrivacyCenterLanguageSettings>;
+    footer?: Partial<PrivacyCenterFooterSettings>;
+    seo?: Partial<PrivacyCenterSeoSettings>;
+}>;
+/**
+ * Brand Identity details the public settings carry only when the published
+ * settings use them (a `{legal}` placeholder, the footer's privacy policy or
+ * contact lines). Each is null otherwise.
+ */
+type PrivacyCenterBrandContact = Readonly<{
+    legal_entity_name: string | null;
+    privacy_policy_url: string | null;
+    grievance_email: string | null;
+    grievance_url: string | null;
+    dp_board_url: string | null;
+}>;
+/** `detail` of `GET /public/organisations/{org}/privacy-center-settings/`. */
+type PublicPrivacyCenterSettingsResponse = Readonly<{
+    settings: unknown;
+    version: number;
+    published_at: string | null;
+    language: string;
+    /** Absent on servers that predate it. */
+    brand_contact?: unknown;
+}>;
+/** Values the `{brand}`-style tokens in custom copy resolve to. */
+type PlaceholderContext = Readonly<{
+    brand: string;
+    legal?: string | null;
+    year?: number;
+    contact?: string | null;
+    name?: string | null;
+}>;
+
+declare const spacing: {
+    readonly xs: 4;
+    readonly sm: 8;
+    readonly md: 12;
+    readonly lg: 16;
+    readonly xl: 24;
+    readonly xxl: 32;
+    readonly xxxl: 40;
+    readonly huge: 56;
+};
+declare const section: {
+    readonly sm: 24;
+    readonly md: 32;
+    readonly lg: 40;
+    readonly xl: 56;
+};
+declare const listGap: {
+    readonly item: 16;
+    readonly section: 24;
+};
+declare const divider: {
+    readonly hairline: number;
+    readonly inset: 16;
+};
+declare const radii: {
+    readonly xs: 4;
+    readonly sm: 6;
+    readonly md: 8;
+    readonly lg: 12;
+    readonly xl: 16;
+    readonly xxl: 20;
+    readonly pill: 9999;
+};
+declare const typography: {
+    /** iOS-style large screen title. Big, bold, tight tracking. */
+    readonly largeTitle: {
+        readonly fontSize: 30;
+        readonly fontWeight: "700";
+        readonly lineHeight: 36;
+        readonly letterSpacing: -0.6;
+    };
+    readonly display: {
+        readonly fontSize: 28;
+        readonly fontWeight: "700";
+        readonly lineHeight: 36;
+        readonly letterSpacing: -0.4;
+    };
+    readonly title: {
+        readonly fontSize: 20;
+        readonly fontWeight: "700";
+        readonly lineHeight: 27;
+        readonly letterSpacing: -0.3;
+    };
+    readonly heading: {
+        readonly fontSize: 16;
+        readonly fontWeight: "600";
+        readonly lineHeight: 22;
+        readonly letterSpacing: -0.2;
+    };
+    readonly subtitle: {
+        readonly fontSize: 14;
+        readonly fontWeight: "400";
+        readonly lineHeight: 20;
+    };
+    readonly body: {
+        readonly fontSize: 15;
+        readonly fontWeight: "400";
+        readonly lineHeight: 22;
+    };
+    readonly label: {
+        readonly fontSize: 13;
+        readonly fontWeight: "600";
+        readonly lineHeight: 18;
+        readonly letterSpacing: -0.1;
+    };
+    readonly caption: {
+        readonly fontSize: 13;
+        readonly fontWeight: "400";
+        readonly lineHeight: 18;
+    };
+    readonly micro: {
+        readonly fontSize: 11;
+        readonly fontWeight: "500";
+        readonly lineHeight: 14;
+        readonly letterSpacing: 0.2;
+    };
+    readonly tabLabel: {
+        readonly fontSize: 11;
+        readonly fontWeight: "600";
+        readonly lineHeight: 14;
+        readonly letterSpacing: 0.1;
+    };
+    /** Small uppercase eyebrow that replaces big page titles. */
+    readonly overline: {
+        readonly fontSize: 11;
+        readonly fontWeight: "700";
+        readonly lineHeight: 14;
+        readonly letterSpacing: 0.8;
+        readonly textTransform: "uppercase";
+    };
+};
+/** Tabular figures for stats/counts so numbers don't jitter. */
+declare const numericText: {
+    fontVariant: TextStyle['fontVariant'];
+};
+declare const motion: {
+    readonly fast: 140;
+    readonly base: 220;
+    readonly slow: 320;
+    /** Shared easing curves (Material-ish). Use with Animated.timing({ easing }). */
+    readonly easing: {
+        readonly standard: react_native.EasingFunction;
+        readonly decelerate: react_native.EasingFunction;
+        readonly accelerate: react_native.EasingFunction;
+        readonly emphasized: react_native.EasingFunction;
+    };
+    /** Spring config for press/scale micro-interactions (Animated.spring). */
+    readonly spring: {
+        readonly friction: 7;
+        readonly tension: 120;
+    };
+};
+/** Standard icon sizes for the <Icon> component. */
+declare const iconSizes: {
+    readonly xs: 14;
+    readonly sm: 16;
+    readonly md: 20;
+    readonly lg: 24;
+    readonly xl: 32;
+};
+/** Square sizes for tinted IconTile accents (the core Soft Neutral motif). */
+declare const tile: {
+    readonly sm: 32;
+    readonly md: 40;
+    readonly lg: 48;
+};
+declare const MIN_TAP_TARGET = 44;
+declare const DEFAULT_HIT_SLOP: {
+    readonly top: 8;
+    readonly bottom: 8;
+    readonly left: 8;
+    readonly right: 8;
+};
+/**
+ * Soft Neutral elevation. Regular content cards stay quiet (`card`) — a single
+ * subtle tier — while sheets/modals lift further. `sm/md/lg` are preserved for
+ * backward compatibility (exported tokens / existing consumers).
+ */
+declare const elevation: Record<'sm' | 'md' | 'lg' | 'card' | 'raised' | 'sheet' | 'fab', ViewStyle>;
+
 interface ThemeColors {
     background: string;
     /** Page canvas. Flat mode keeps this equal to background. */
@@ -47,18 +367,37 @@ type BrandingMeta = {
     icon_url: string | null;
     brand_name: string;
     hide_platform_branding: boolean;
+    /** The DPO / grievance officer's public contact, when branding serves it. */
+    dpo_email?: string;
+    privacy_policy_url?: string | null;
+    legal_name?: string | null;
 };
+type RadiusToken = Exclude<keyof typeof radii, 'pill'>;
 interface ThemeContextType {
     colors: ThemeColors;
     /** Org branding metadata (logo, brand name). Null until/unless it resolves. */
     branding: BrandingMeta | null;
     /** True while org branding is being fetched (used to gate first paint). */
     isLoading: boolean;
+    /**
+     * The organisation's font, resolved through the font catalogue the notice
+     * uses; undefined keeps the Privacy Center's own font.
+     */
+    fontFamily: string | undefined;
+    /**
+     * A corner radius from the design tokens, scaled to the published corner
+     * radius when the settings set one; the token itself otherwise.
+     */
+    radius: (token: RadiusToken) => number;
+    /** The published logo height (28–96), or null for each screen's own size. */
+    logoHeight: number | null;
 }
-declare function ThemeProvider({ children, slug, baseUrl, }: {
+declare function ThemeProvider({ children, slug, baseUrl, organisationUuid: organisationUuidProp, }: {
     children: ReactNode;
+    /** @deprecated Ignored; will be removed in a future major release. Passing it logs a one-time warning. */
     slug?: string;
     baseUrl?: string;
+    organisationUuid?: string;
 }): React.JSX.Element;
 declare function useTheme(): ThemeContextType;
 
@@ -95,6 +434,8 @@ type OrgBrandingTheme = {
     success: string;
     warning: string;
     danger: string;
+    /** The organisation's font as chosen in the console; absent or blank when unset. */
+    font_family?: string | null;
 };
 type OrgBrandingDetail = {
     logo_url: string | null;
@@ -102,6 +443,12 @@ type OrgBrandingDetail = {
     brand_name: string;
     theme: OrgBrandingTheme;
     hide_platform_branding: boolean;
+    /** The DPO / grievance officer's public contact; empty when unset. */
+    dpo_email?: string;
+    /** Absent on a user service that does not serve it publicly. */
+    privacy_policy_url?: string | null;
+    /** Absent on a user service that does not serve it publicly. */
+    legal_name?: string | null;
 };
 type NotificationType = 'guardian_verification_request' | 'consent_expiry_warning' | 'new_consent_notice' | 'consent_withdrawal_confirmation' | 'data_request_status_update' | 'case_message' | 'grievance_status_update' | 'consent_regrant_prompt';
 type NotificationCategory = 'consent' | 'request' | 'system';
@@ -204,6 +551,7 @@ type FormData$1 = {
     purposes: RawPurposeWrapper[];
     direct_groups?: FormProductGroup[];
     nominated_groups?: FormProductGroup[];
+    enabled_request_types?: string[] | null;
 };
 declare enum RequestTypeEnum {
     ACCESS = "ACCESS",
@@ -511,6 +859,46 @@ type SelectPrincipalResponse = Readonly<{
     refresh_token: string;
     expires_at?: string;
 }>;
+/** Passed to `onReady` once the first screen is on show. */
+type PrivacyCenterReadyEvent = Readonly<{
+    /** False when the built-in sign-in screen is what the visitor sees. */
+    signedIn: boolean;
+}>;
+/** Passed to `onConsentChange` after a consent was changed successfully. */
+type PrivacyCenterConsentChange = Readonly<{
+    /** `revoke` withdraws consent; `regrant` and `renew` give it again. */
+    action: ConsentAction;
+    purposeUuid: string;
+    productUuid: string | null;
+    /** The data elements the change covered; empty when it covered the whole purpose. */
+    dataElementUuids: readonly string[];
+    /** Set when the visitor acted on behalf of someone who nominated them. */
+    nominatorUuid: string | null;
+}>;
+/** Passed to `onRequestSubmit` after a data request (case) was created. */
+type PrivacyCenterRequestSubmission = Readonly<{
+    /** The human-readable case id shown to the visitor. */
+    caseId: string;
+    caseUuid: string;
+    requestType: PrivacyCenterRequestTypeKey;
+    /** The product the request is about; null for nomination and grievance. */
+    productUuid: string | null;
+}>;
+/**
+ * Why the visitor was signed out: they chose to (`user`), they were idle for
+ * the configured session timeout (`timeout`), or their session could no longer
+ * be refreshed (`session-expired`).
+ */
+type PrivacyCenterSignOutReason = 'user' | 'timeout' | 'session-expired';
+type PrivacyCenterSignOutEvent = Readonly<{
+    reason: PrivacyCenterSignOutReason;
+}>;
+type PrivacyCenterEventHandlers = Readonly<{
+    onReady?: (event: PrivacyCenterReadyEvent) => void;
+    onConsentChange?: (change: PrivacyCenterConsentChange) => void;
+    onRequestSubmit?: (request: PrivacyCenterRequestSubmission) => void;
+    onSignOut?: (event: PrivacyCenterSignOutEvent) => void;
+}>;
 
 type InternalPage = 'home' | 'consent-manager' | 'form' | 'activity' | 'receipts' | 'case-details' | 'notifications';
 interface NavigationContextType {
@@ -530,10 +918,26 @@ declare function NavigationProvider({ children, initialPage, initialPendingCaseU
 declare function useInternalNavigation(): NavigationContextType;
 
 interface RedactoPrivacyCenterProps {
+    /**
+     * API host, e.g. `https://api.redacto.io` (recommended). The SDK calls the
+     * consent server at `{host}/consent`, the ledger at `{host}/consent-ledger`
+     * and the user service at `{host}/user/api/0`. The consent server URL
+     * (`…/consent`) still works but is deprecated.
+     */
     baseUrl: string;
-    /** Go ledger base URL — serves user-consents; omit to use the legacy Python privacy-center consent endpoints. */
+    /**
+     * @deprecated Read only when `baseUrl` is the consent server URL
+     * (`…/consent`), as in earlier releases: it is then the Go ledger base URL
+     * that serves user-consents, and leaving it out uses the legacy Python
+     * privacy-center consent endpoints. Ignored when `baseUrl` is the API host.
+     */
     ledgerBaseUrl?: string;
-    slug: string;
+    /**
+     * @deprecated Ignored; will be removed in a future major release. Passing it
+     * logs a one-time warning. The organisation comes from the access token, or
+     * from `organisationUuid` and `workspaceUuid`.
+     */
+    slug?: string;
     /**
      * @deprecated The Privacy Center now themes itself from per-org branding.
      * Accepted for backwards compatibility but ignored.
@@ -569,8 +973,27 @@ interface RedactoPrivacyCenterProps {
     /** Optional deep-link: open a specific case (use with initialPage='case-details'). */
     initialCaseUuid?: string;
     onBack?: 'back' | 'signout';
+    /**
+     * Overrides for the settings published from the Redacto console, merged
+     * field by field over them per group; see `PrivacyCenterSettings`.
+     */
+    settings?: PrivacyCenterSettings;
+    /**
+     * With no token, show the built-in OTP sign-in screen. Off by default: with
+     * no token the Privacy Center keeps its loading state until the host passes
+     * one, so a token that arrives a moment late never flashes a sign-in.
+     */
+    builtInSignIn?: boolean;
+    /** Called once, when the first screen (sign-in or the Privacy Center) is on show. */
+    onReady?: (event: PrivacyCenterReadyEvent) => void;
+    /** Called after the visitor withdrew, re-granted or renewed a consent. */
+    onConsentChange?: (change: PrivacyCenterConsentChange) => void;
+    /** Called after the visitor submitted a data request. */
+    onRequestSubmit?: (request: PrivacyCenterRequestSubmission) => void;
+    /** Called when the visitor is signed out, with the reason. */
+    onSignOut?: (event: PrivacyCenterSignOutEvent) => void;
 }
-declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, theme: _theme, accessToken, refreshToken, token, email, mobile, ucic, organisationUuid, workspaceUuid, onError, initialPage, initialCaseUuid, onBack, }: RedactoPrivacyCenterProps): React.JSX.Element;
+declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, theme: _theme, accessToken, refreshToken, token, email, mobile, ucic, organisationUuid, workspaceUuid, onError, initialPage, initialCaseUuid, onBack, settings, onReady, onConsentChange, onRequestSubmit, onSignOut, builtInSignIn, }: RedactoPrivacyCenterProps): React.JSX.Element;
 
 declare function ConsentManager(): React__default.JSX.Element;
 
@@ -627,9 +1050,9 @@ type FooterProps = {
     inline?: boolean;
 };
 /**
- * "Powered by Redacto" platform attribution. Hidden when the org has opted out
- * via branding.hide_platform_branding. Renders the Redacto logo (raster) next to
- * the localized "Powered by" label, mirroring the web Privacy Center footer.
+ * "Powered by Redacto" platform attribution, shown unless the org opted out
+ * (branding.hide_platform_branding) or the settings turned it off, with the
+ * links, contact lines and copyright the published settings add above it.
  */
 declare function Footer({ inline }: FooterProps): React__default.JSX.Element | null;
 
@@ -667,12 +1090,15 @@ type BaseRequest = {
 /**
  * Consent service client factory.
  * Creates a client instance with a specific base URL.
- * @param baseUrl - Consent server base URL (Python service, e.g. http://host/consent)
- * @param ledgerBaseUrl - Go ledger base URL (e.g. http://host:8090/consent-ledger).
- *   Used for user-consents reads/writes served from the ledger's `/public/...` paths.
- *   When omitted, those calls fall back to the legacy Python
- *   `/dsar/privacy-center` endpoints and payloads (pre-ledger behavior), so
- *   integrations without a deployed ledger keep working.
+ * @param baseUrl - API host, e.g. `https://api.redacto.io` (recommended): the
+ *   consent server is `{host}/consent` and the ledger `{host}/consent-ledger`.
+ *   The consent server URL (`.../consent`) still works but is deprecated.
+ * @param ledgerBaseUrl - Deprecated. Read only when `baseUrl` is the consent
+ *   server URL, as in earlier releases: it is then the Go ledger (e.g.
+ *   http://host:8090/consent-ledger), used for user-consents reads/writes
+ *   served from the ledger's `/public/...` paths; when omitted, those calls
+ *   fall back to the legacy Python `/dsar/privacy-center` endpoints and
+ *   payloads (pre-ledger behavior). Ignored when `baseUrl` is the API host.
  */
 declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
     /**
@@ -688,9 +1114,10 @@ declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
         useSessionAuth?: boolean;
     }): Promise<unknown>;
     /**
-     * Create OTP (public)
+     * Create OTP (public). `to` is an email, or an E.164 number with
+     * `channel: "sms"`.
      */
-    createOtp(organisationId: string, workspaceId: string, email: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<unknown>;
+    createOtp(organisationId: string, workspaceId: string, email: string, options?: Omit<ApiFetchOptions, "getAuthToken">, channel?: "email" | "sms"): Promise<unknown>;
     /**
      * Verify OTP (public)
      *
@@ -750,13 +1177,20 @@ declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
      * The principal is resolved from the JWT, so no `contact`/identifiers are
      * sent in the body.
      *
+     * A nominee acting on a nominator's consent sends `nominator_uuid`: the
+     * ledger re-checks the nomination edge and records the consent against the
+     * nominator. Without it the principal resolves to the caller, so a
+     * nominee's revoke opened a declined consent of their own and left the
+     * nominator's granted. The legacy Python endpoint expresses the same thing
+     * as `nominator_contact`.
+     *
      * Without a ledger, the legacy Python `/manage-consent?status=` endpoint is
      * used with its `{ purpose_uuid, contact, ... }` payload.
      */
     manageConsent(baseRequest: BaseRequest, purposeId: string, contact: string, status: "revoke" | "regrant" | "renew", authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">, nominatorContact?: string, dataElementUuids?: string[], noticeUuid?: string, dataElements?: Array<{
         uuid: string;
         selected: boolean;
-    }>, language?: string): Promise<unknown>;
+    }>, language?: string, nominatorUuid?: string, productUuid?: string): Promise<unknown>;
     /**
      * Get activities (privacy center)
      */
@@ -840,14 +1274,20 @@ declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
 };
 
 interface BaseUrlContextValue {
+    /** The consent server URL: `{host}/consent` when the provider was given the API host. */
     baseUrl: string;
-    /** Go ledger base URL — serves user-consents; omit to use the legacy Python privacy-center consent endpoints. */
+    /** Go ledger base URL — serves user-consents: `{host}/consent-ledger` when the provider was given the API host. Absent only for a legacy consent server URL with no ledger, which uses the legacy Python privacy-center consent endpoints. */
     ledgerBaseUrl?: string;
     consentClient: ReturnType<typeof createConsentClient>;
 }
 declare function BaseUrlProvider({ children, baseUrl, ledgerBaseUrl, }: {
     children: ReactNode;
+    /**
+     * API host, e.g. `https://api.redacto.io` (recommended). The consent server
+     * URL (`…/consent`) still works but is deprecated.
+     */
     baseUrl: string;
+    /** @deprecated Read only when `baseUrl` is the consent server URL (`…/consent`), as in earlier releases. Ignored when `baseUrl` is the API host. */
     ledgerBaseUrl?: string;
 }): React.JSX.Element;
 declare function useBaseUrl(): BaseUrlContextValue;
@@ -904,7 +1344,7 @@ type FetchUserConsentsParams = {
     consentClient?: BaseUrlContextValue['consentClient'];
 };
 declare const fetchUserConsents: (params: FetchUserConsentsParams) => Promise<UserConsentDetail | null>;
-declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, dataElementUuids, noticeUuid, dataElements, language, }: {
+declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, nominatorUuid, dataElementUuids, noticeUuid, dataElements, language, productUuid, }: {
     organizationId: string;
     workspaceId: string;
     purposeId: string;
@@ -913,6 +1353,7 @@ declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact,
     authContext?: AuthContext;
     consentClient?: BaseUrlContextValue["consentClient"];
     nominatorContact?: string;
+    nominatorUuid?: string;
     dataElementUuids?: string[];
     noticeUuid?: string;
     dataElements?: Array<{
@@ -920,6 +1361,7 @@ declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact,
         selected: boolean;
     }>;
     language?: string;
+    productUuid?: string;
 }) => Promise<boolean | null>;
 declare const fetchActivities: (organizationId: string, workspaceId: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<ActivityDetail | null>;
 declare const fetchCaseHistory: (organizationId: string, workspaceId: string, contact: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<CaseHistoryDetail | null>;
@@ -940,6 +1382,18 @@ interface AuthContextType {
     organizationName: string | null;
     updateTokens: (accessToken: string, refreshToken?: string) => void;
     onError: (error: Error) => boolean;
+    /**
+     * True once the session ended: the refresh token is expired or invalid, or
+     * the visitor was signed out for inactivity. Drives the session-expired
+     * screen and gates further fetching.
+     */
+    sessionExpired: boolean;
+    /** Records that the session can no longer be refreshed. */
+    markSessionExpired: () => void;
+    /** Signs the visitor out (e.g. after inactivity) and shows the session-expired screen. */
+    expireSession: (reason: PrivacyCenterSignOutReason) => void;
+    /** Drops the session so the built-in sign-in screen shows again. */
+    restartSignIn: () => void;
 }
 interface AuthProviderProps {
     children: ReactNode;
@@ -962,7 +1416,7 @@ interface AuthProviderProps {
     organisationUuid?: string;
     /** Sandbox workspace UUID (replaces the JWT-decoded workspace). */
     workspaceUuid?: string;
-    /** Organisation slug — used to seed the sandbox config. */
+    /** @deprecated Ignored; will be removed in a future major release. */
     slug?: string;
     onError: (error: Error) => boolean;
 }
@@ -1351,154 +1805,36 @@ type LayoutAnimationPreset = 'expandCollapse' | 'listReorder';
  */
 declare function animateNextLayout(preset?: LayoutAnimationPreset): void;
 
-declare const spacing: {
-    readonly xs: 4;
-    readonly sm: 8;
-    readonly md: 12;
-    readonly lg: 16;
-    readonly xl: 24;
-    readonly xxl: 32;
-    readonly xxxl: 40;
-    readonly huge: 56;
-};
-declare const section: {
-    readonly sm: 24;
-    readonly md: 32;
-    readonly lg: 40;
-    readonly xl: 56;
-};
-declare const listGap: {
-    readonly item: 16;
-    readonly section: 24;
-};
-declare const divider: {
-    readonly hairline: number;
-    readonly inset: 16;
-};
-declare const radii: {
-    readonly xs: 4;
-    readonly sm: 6;
-    readonly md: 8;
-    readonly lg: 12;
-    readonly xl: 16;
-    readonly xxl: 20;
-    readonly pill: 9999;
-};
-declare const typography: {
-    /** iOS-style large screen title. Big, bold, tight tracking. */
-    readonly largeTitle: {
-        readonly fontSize: 30;
-        readonly fontWeight: "700";
-        readonly lineHeight: 36;
-        readonly letterSpacing: -0.6;
-    };
-    readonly display: {
-        readonly fontSize: 28;
-        readonly fontWeight: "700";
-        readonly lineHeight: 36;
-        readonly letterSpacing: -0.4;
-    };
-    readonly title: {
-        readonly fontSize: 20;
-        readonly fontWeight: "700";
-        readonly lineHeight: 27;
-        readonly letterSpacing: -0.3;
-    };
-    readonly heading: {
-        readonly fontSize: 16;
-        readonly fontWeight: "600";
-        readonly lineHeight: 22;
-        readonly letterSpacing: -0.2;
-    };
-    readonly subtitle: {
-        readonly fontSize: 14;
-        readonly fontWeight: "400";
-        readonly lineHeight: 20;
-    };
-    readonly body: {
-        readonly fontSize: 15;
-        readonly fontWeight: "400";
-        readonly lineHeight: 22;
-    };
-    readonly label: {
-        readonly fontSize: 13;
-        readonly fontWeight: "600";
-        readonly lineHeight: 18;
-        readonly letterSpacing: -0.1;
-    };
-    readonly caption: {
-        readonly fontSize: 13;
-        readonly fontWeight: "400";
-        readonly lineHeight: 18;
-    };
-    readonly micro: {
-        readonly fontSize: 11;
-        readonly fontWeight: "500";
-        readonly lineHeight: 14;
-        readonly letterSpacing: 0.2;
-    };
-    readonly tabLabel: {
-        readonly fontSize: 11;
-        readonly fontWeight: "600";
-        readonly lineHeight: 14;
-        readonly letterSpacing: 0.1;
-    };
-    /** Small uppercase eyebrow that replaces big page titles. */
-    readonly overline: {
-        readonly fontSize: 11;
-        readonly fontWeight: "700";
-        readonly lineHeight: 14;
-        readonly letterSpacing: 0.8;
-        readonly textTransform: "uppercase";
-    };
-};
-/** Tabular figures for stats/counts so numbers don't jitter. */
-declare const numericText: {
-    fontVariant: TextStyle['fontVariant'];
-};
-declare const motion: {
-    readonly fast: 140;
-    readonly base: 220;
-    readonly slow: 320;
-    /** Shared easing curves (Material-ish). Use with Animated.timing({ easing }). */
-    readonly easing: {
-        readonly standard: react_native.EasingFunction;
-        readonly decelerate: react_native.EasingFunction;
-        readonly accelerate: react_native.EasingFunction;
-        readonly emphasized: react_native.EasingFunction;
-    };
-    /** Spring config for press/scale micro-interactions (Animated.spring). */
-    readonly spring: {
-        readonly friction: 7;
-        readonly tension: 120;
-    };
-};
-/** Standard icon sizes for the <Icon> component. */
-declare const iconSizes: {
-    readonly xs: 14;
-    readonly sm: 16;
-    readonly md: 20;
-    readonly lg: 24;
-    readonly xl: 32;
-};
-/** Square sizes for tinted IconTile accents (the core Soft Neutral motif). */
-declare const tile: {
-    readonly sm: 32;
-    readonly md: 40;
-    readonly lg: 48;
-};
-declare const MIN_TAP_TARGET = 44;
-declare const DEFAULT_HIT_SLOP: {
-    readonly top: 8;
-    readonly bottom: 8;
-    readonly left: 8;
-    readonly right: 8;
-};
 /**
- * Soft Neutral elevation. Regular content cards stay quiet (`card`) — a single
- * subtle tier — while sheets/modals lift further. `sm/md/lg` are preserved for
- * backward compatibility (exported tokens / existing consumers).
+ * Reproduces today's Privacy Center: with nothing published, every value here
+ * renders exactly what the SDK rendered before settings existed.
  */
-declare const elevation: Record<'sm' | 'md' | 'lg' | 'card' | 'raised' | 'sheet' | 'fab', ViewStyle>;
+declare const DEFAULT_PRIVACY_CENTER_SETTINGS: ResolvedPrivacyCenterSettings;
+
+/**
+ * The settings the Privacy Center renders with: the published payload (or
+ * nothing, when none was fetched) validated field by field, with the host's
+ * `settings` prop merged over each group. Anything missing or malformed takes
+ * the default, so a bad payload can never break the page or change it from
+ * today's look by accident.
+ */
+declare const resolvePrivacyCenterSettings: (published: unknown, overrides?: PrivacyCenterSettings | null) => ResolvedPrivacyCenterSettings;
+
+/**
+ * Fills `{brand}`, `{legal}`, `{year}`, `{contact}` and `{name}` in custom
+ * copy. `{legal}` falls back to the brand, and an empty value (no name known)
+ * collapses cleanly: "Welcome back, {name}!" reads "Welcome back!".
+ */
+declare const resolvePlaceholders: (text: string | null | undefined, context: PlaceholderContext) => string;
+
+/**
+ * The organisation's published Privacy Center settings, localised to
+ * `language`. Public and unauthenticated. Resolves to `null` on any failure
+ * (network, 4xx/5xx, an unexpected body) so callers keep today's defaults;
+ * never rejects. One request per organisation and language is shared for
+ * `SETTINGS_CACHE_TTL_MS`, so a later mount or language switch picks up a new
+ * publish; a failed one is forgotten so the next mount retries.
+ */
+declare const fetchPublicPrivacyCenterSettings: (baseUrl: string, organisationUuid: string, language: string) => Promise<PublicPrivacyCenterSettingsResponse | null>;
 
-export { ActivitiesList, type Activity, type ActivityDetail, type ApiFetchOptions, type ApiResponse, type AuthContext, AuthProvider, type BaseRequest, BaseUrlProvider, BottomSheet, BottomTabBar, CaseDetailsPage, type CaseDetailsTab, CaseHistory, type CaseHistoryDetail, type CaseMessage, type CaseRequest, type CaseStatusVariant, type ConsentAction, type ConsentDataElement, type ConsentHistoryStatusSummary, ConsentManager, ConsentStatusEnum, type CreateCaseResponse, DEFAULT_HIT_SLOP, DETAIL_PAGES, type DataElement, type DocumentRequestMetadata, type DocumentRequestStatus, type FilterTab, Footer, Form, type FormData$1 as FormData, FormPage, type GrievanceTypeElement, GrievanceTypeEnum, Icon, type IconName, type IconProps, IconTile, type IconTileSize, type IconTileTone, type InternalPage, MIN_TAP_TARGET, type ManageConsentParams, type MessageDocument, type MessageType, Navbar, NavigationProvider, type NominatedPurposesGroup, type NominationData, type NominatorInfo, type Notification, type NotificationCTA, type NotificationCategory, type NotificationListResponse, type NotificationSummary, type NotificationType, type OrgBrandingDetail, type OrgBrandingTheme, type OrganizationDetail, type OtpResponse, type OtpVerificationResponse, PCAvatar, PCBadge, PCButton, PCCheckbox, PCDivider, PCEmpty, PCInput, PCListRow, PCListSection, PCLoader, PCModal, PCPageTitle, PCSelect, type PageChromeMode, type Pagination, type PendingUpload, type ProductConsentHistoryGroup, type Purpose, RedactoPrivacyCenter, RequestTypeEnum, SectionHeader, SideMenu, Skeleton, SkeletonRow, StatPill, type TabId, ThemeProvider, type TokenExchangeResponse, type UpdateCorrectionDataItem, type UpdatePurpose, type UploadDocumentResponse, type UserConsent, type UserConsentDetail, type UserDataRequest, type Workspace, animateNextLayout, compareEmails, createCaseRequest, createConsentClient, createOtpServer as createOtp, decodeJwtToken, divider, elevation, ensureValidToken, exchangeTokenServer as exchangeToken, fetchActivities, fetchCaseHistory, fetchProducts, fetchUserConsents, formatActivityType, getActivityTypeStatus, getCaseMessages, getFormData, getListBottomInset, getPageChromeMode, iconSizes, isJwtExpired, listGap, manageConsent, motion, numericText, radii, section, sendCaseMessage, signOutPrivacyCenter, spacing, submitDocumentForRequest, tile, typography, uploadCaseDocument, useAnimatedTabIndicator, useAuth, useBaseUrl, useCaseHistory, useCaseMessages, useFadeIn, useInternalNavigation, usePressScale, usePrivacyCenterInsets, useTheme, verifyOtpServer as verifyOtp };
+export { ActivitiesList, type Activity, type ActivityDetail, type ApiFetchOptions, type ApiResponse, type AuthContext, AuthProvider, type BaseRequest, BaseUrlProvider, BottomSheet, BottomTabBar, CaseDetailsPage, type CaseDetailsTab, CaseHistory, type CaseHistoryDetail, type CaseMessage, type CaseRequest, type CaseStatusVariant, type ConsentAction, type ConsentDataElement, type ConsentHistoryStatusSummary, ConsentManager, ConsentStatusEnum, type CreateCaseResponse, DEFAULT_HIT_SLOP, DEFAULT_PRIVACY_CENTER_SETTINGS, DETAIL_PAGES, type DataElement, type DocumentRequestMetadata, type DocumentRequestStatus, type FilterTab, Footer, Form, type FormData$1 as FormData, FormPage, type GrievanceTypeElement, GrievanceTypeEnum, Icon, type IconName, type IconProps, IconTile, type IconTileSize, type IconTileTone, type InternalPage, MIN_TAP_TARGET, type ManageConsentParams, type MessageDocument, type MessageType, Navbar, NavigationProvider, type NominatedPurposesGroup, type NominationData, type NominatorInfo, type Notification, type NotificationCTA, type NotificationCategory, type NotificationListResponse, type NotificationSummary, type NotificationType, type OrgBrandingDetail, type OrgBrandingTheme, type OrganizationDetail, type OtpResponse, type OtpVerificationResponse, PCAvatar, PCBadge, PCButton, PCCheckbox, PCDivider, PCEmpty, PCInput, PCListRow, PCListSection, PCLoader, PCModal, PCPageTitle, PCSelect, type PageChromeMode, type Pagination, type PendingUpload, type PlaceholderContext, type PrivacyCenterBrandContact, type PrivacyCenterBrandingSettings, type PrivacyCenterConsentChange, type PrivacyCenterEmbedSettings, type PrivacyCenterEventHandlers, type PrivacyCenterFooterLink, type PrivacyCenterFooterSettings, type PrivacyCenterGrievanceCategory, type PrivacyCenterLanguageSettings, type PrivacyCenterPortalSettings, type PrivacyCenterReadyEvent, type PrivacyCenterRequestSubmission, type PrivacyCenterRequestType, type PrivacyCenterRequestTypeKey, type PrivacyCenterSection, type PrivacyCenterSectionKey, type PrivacyCenterSeoSettings, type PrivacyCenterSettings, type PrivacyCenterSignInChannels, type PrivacyCenterSignInLayout, type PrivacyCenterSignInSettings, type PrivacyCenterSignOutEvent, type PrivacyCenterSignOutReason, type ProductConsentHistoryGroup, type PublicPrivacyCenterSettingsResponse, type Purpose, RedactoPrivacyCenter, RequestTypeEnum, type ResolvedPrivacyCenterSettings, SectionHeader, SideMenu, Skeleton, SkeletonRow, StatPill, type TabId, ThemeProvider, type TokenExchangeResponse, type UpdateCorrectionDataItem, type UpdatePurpose, type UploadDocumentResponse, type UserConsent, type UserConsentDetail, type UserDataRequest, type Workspace, animateNextLayout, compareEmails, createCaseRequest, createConsentClient, createOtpServer as createOtp, decodeJwtToken, divider, elevation, ensureValidToken, exchangeTokenServer as exchangeToken, fetchActivities, fetchCaseHistory, fetchProducts, fetchPublicPrivacyCenterSettings, fetchUserConsents, formatActivityType, getActivityTypeStatus, getCaseMessages, getFormData, getListBottomInset, getPageChromeMode, iconSizes, isJwtExpired, listGap, manageConsent, motion, numericText, radii, resolvePlaceholders, resolvePrivacyCenterSettings, section, sendCaseMessage, signOutPrivacyCenter, spacing, submitDocumentForRequest, tile, typography, uploadCaseDocument, useAnimatedTabIndicator, useAuth, useBaseUrl, useCaseHistory, useCaseMessages, useFadeIn, useInternalNavigation, usePressScale, usePrivacyCenterInsets, useTheme, verifyOtpServer as verifyOtp };