@redacto.io/consent-sdk-react 10.0.0-beta.0 → 10.0.0-beta.1

package/.turbo/turbo-build.log

@@ -1,25 +1,22 @@
-
-> @redacto.io/consent-sdk-react@9.4.0-beta.0 build /Users/sadanmianredacto/Developer/redacto/consent-sdk/packages/consent-sdk-react
-> tsup
-
-CLI Building entry: {"index":"src/index.ts","privacy-center":"src/privacy-center.ts"}
-CLI Using tsconfig: tsconfig.json
-CLI tsup v8.5.1
-CLI Using tsup config: /Users/sadanmianredacto/Developer/redacto/consent-sdk/packages/consent-sdk-react/tsup.config.ts
-CLI Target: es2019
-CLI Cleaning output folder
-ESM Build start
-CJS Build start
-CJS dist/index.js          517.55 KB
-CJS dist/privacy-center.js 2.18 MB
-CJS ⚡️ Build success in 60ms
-ESM dist/chunk-6A665OPR.mjs 841.00 B
-ESM dist/index.mjs          503.10 KB
-ESM dist/privacy-center.mjs 2.15 MB
-ESM ⚡️ Build success in 66ms
-DTS Build start
-DTS ⚡️ Build success in 2580ms
-DTS dist/index.d.mts          8.03 KB
-DTS dist/privacy-center.d.mts 30.69 KB
-DTS dist/index.d.ts           8.03 KB
-DTS dist/privacy-center.d.ts  30.69 KB
+$ tsup
+CLI Building entry: {"index":"src/index.ts","privacy-center":"src/privacy-center.ts"}
+CLI Using tsconfig: tsconfig.json
+CLI tsup v8.5.1
+CLI Using tsup config: /Users/sadanmianredacto/Developer/redacto/consent-sdk/packages/consent-sdk-react/tsup.config.ts
+CLI Target: es2019
+CLI Cleaning output folder
+ESM Build start
+CJS Build start
+CJS dist/index.js          520.79 KB
+CJS dist/privacy-center.js 2.24 MB
+CJS ⚡️ Build success in 124ms
+ESM dist/index.mjs          506.34 KB
+ESM dist/chunk-6A665OPR.mjs 841.00 B
+ESM dist/privacy-center.mjs 2.20 MB
+ESM ⚡️ Build success in 124ms
+DTS Build start
+DTS ⚡️ Build success in 2664ms
+DTS dist/index.d.mts          8.27 KB
+DTS dist/privacy-center.d.mts 33.25 KB
+DTS dist/index.d.ts           8.27 KB
+DTS dist/privacy-center.d.ts  33.25 KB

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @redacto.io/consent-sdk-react
 
+## 10.0.0-beta.1
+
+### Major Changes
+
+- feat(privacy-center): shared-contact profile picker (OTP + embeddable SDK)
+
+### Minor Changes
+
+- 61d18e8: fix(privacy-center): resolve mobile/org_user_id as contact for mobile-only logins
+
+### Patch Changes
+
+- 8145b3d: Privacy Center: when `ledgerBaseUrl` is not provided, consent reads/writes (user-consents, group purposes, manage-consent, receipts list, receipt PDF) fall back to the legacy Python `/dsar/privacy-center` endpoints and payloads instead of 404ing against `${baseUrl}/public/...`, and the DSAR form's ledger picker overlay is skipped. Fixes the Privacy Center showing "No Data" for integrations without a deployed Go ledger.
+
 ## 10.0.0-beta.0
 
 ### Major Changes

package/dist/index.d.mts

@@ -1,4 +1,3 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as react from 'react';
 import react__default from 'react';
 
@@ -47,7 +46,7 @@ type Props$1 = Readonly<{
     accessToken: string;
     refreshToken: string;
     baseUrl?: string;
-    ledgerBaseUrl: string;
+    ledgerBaseUrl?: string;
     settings?: Partial<Settings$1>;
     language?: string;
     blockUI?: boolean;
@@ -62,6 +61,14 @@ type Props$1 = Readonly<{
     reviewModeButtonText?: string;
 }>;
 
+/**
+ * Redacto Notice Consent Component
+ *
+ * A comprehensive consent management component that handles both initial consent
+ * collection and reconsent flows with visual distinction between already-consented
+ * and needs-consent purposes.
+ */
+
 /**
  * RedactoNoticeConsent
  *
@@ -69,7 +76,7 @@ type Props$1 = Readonly<{
  * to view and manage their consent preferences. Supports both initial consent
  * collection and reconsent flows.
  */
-declare const RedactoNoticeConsent: ({ noticeId, accessToken, refreshToken, baseUrl, ledgerBaseUrl, language, blockUI, onAccept, onDecline, onError, settings, applicationId, validateAgainst, digilockerMode, digilockerCallbackUrl, includeFullyConsentedData, reviewModeButtonText, }: Props$1) => react_jsx_runtime.JSX.Element;
+declare const RedactoNoticeConsent: ({ noticeId, accessToken, refreshToken, baseUrl, ledgerBaseUrl, language, blockUI, onAccept, onDecline, onError, settings, applicationId, validateAgainst, digilockerMode, digilockerCallbackUrl, includeFullyConsentedData, reviewModeButtonText, }: Props$1) => react__default.JSX.Element;
 
 type Settings = {
     button: {
@@ -103,7 +110,7 @@ type Props = Readonly<{
     accessToken?: string;
     refreshToken?: string;
     baseUrl?: string;
-    ledgerBaseUrl: string;
+    ledgerBaseUrl?: string;
     settings?: Partial<Settings>;
     language?: string;
     onAccept?: () => void;
@@ -114,7 +121,7 @@ type Props = Readonly<{
 }>;
 
 declare const RedactoConsentInline: react.MemoExoticComponent<{
-    ({ org_uuid, workspace_uuid, notice_uuid, accessToken, baseUrl, ledgerBaseUrl, language, onAccept, onError, onValidationChange, settings, applicationId, }: Props): react_jsx_runtime.JSX.Element | null;
+    ({ org_uuid, workspace_uuid, notice_uuid, accessToken, baseUrl, ledgerBaseUrl, language, onAccept, onError, onValidationChange, settings, applicationId, }: Props): react.JSX.Element | null;
     displayName: string;
 }>;
 
@@ -152,7 +159,7 @@ type RedactoNoticeAssistedProps = {
  * submit, `onComplete` fires immediately with no confirmation screen (mirroring
  * RedactoNoticeConsent's `onAccept`). Steps: `notice` → `verify` (with `otpSent`).
  */
-declare const RedactoNoticeAssisted: ({ organisationUuid, workspaceUuid, noticeUuid, baseUrl, onDecline, onComplete, }: RedactoNoticeAssistedProps) => react_jsx_runtime.JSX.Element;
+declare const RedactoNoticeAssisted: ({ organisationUuid, workspaceUuid, noticeUuid, baseUrl, onDecline, onComplete, }: RedactoNoticeAssistedProps) => react.JSX.Element;
 
 /**
  * DigiLockerCallback Component

package/dist/index.d.ts

@@ -1,4 +1,3 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as react from 'react';
 import react__default from 'react';
 
@@ -47,7 +46,7 @@ type Props$1 = Readonly<{
     accessToken: string;
     refreshToken: string;
     baseUrl?: string;
-    ledgerBaseUrl: string;
+    ledgerBaseUrl?: string;
     settings?: Partial<Settings$1>;
     language?: string;
     blockUI?: boolean;
@@ -62,6 +61,14 @@ type Props$1 = Readonly<{
     reviewModeButtonText?: string;
 }>;
 
+/**
+ * Redacto Notice Consent Component
+ *
+ * A comprehensive consent management component that handles both initial consent
+ * collection and reconsent flows with visual distinction between already-consented
+ * and needs-consent purposes.
+ */
+
 /**
  * RedactoNoticeConsent
  *
@@ -69,7 +76,7 @@ type Props$1 = Readonly<{
  * to view and manage their consent preferences. Supports both initial consent
  * collection and reconsent flows.
  */
-declare const RedactoNoticeConsent: ({ noticeId, accessToken, refreshToken, baseUrl, ledgerBaseUrl, language, blockUI, onAccept, onDecline, onError, settings, applicationId, validateAgainst, digilockerMode, digilockerCallbackUrl, includeFullyConsentedData, reviewModeButtonText, }: Props$1) => react_jsx_runtime.JSX.Element;
+declare const RedactoNoticeConsent: ({ noticeId, accessToken, refreshToken, baseUrl, ledgerBaseUrl, language, blockUI, onAccept, onDecline, onError, settings, applicationId, validateAgainst, digilockerMode, digilockerCallbackUrl, includeFullyConsentedData, reviewModeButtonText, }: Props$1) => react__default.JSX.Element;
 
 type Settings = {
     button: {
@@ -103,7 +110,7 @@ type Props = Readonly<{
     accessToken?: string;
     refreshToken?: string;
     baseUrl?: string;
-    ledgerBaseUrl: string;
+    ledgerBaseUrl?: string;
     settings?: Partial<Settings>;
     language?: string;
     onAccept?: () => void;
@@ -114,7 +121,7 @@ type Props = Readonly<{
 }>;
 
 declare const RedactoConsentInline: react.MemoExoticComponent<{
-    ({ org_uuid, workspace_uuid, notice_uuid, accessToken, baseUrl, ledgerBaseUrl, language, onAccept, onError, onValidationChange, settings, applicationId, }: Props): react_jsx_runtime.JSX.Element | null;
+    ({ org_uuid, workspace_uuid, notice_uuid, accessToken, baseUrl, ledgerBaseUrl, language, onAccept, onError, onValidationChange, settings, applicationId, }: Props): react.JSX.Element | null;
     displayName: string;
 }>;
 
@@ -152,7 +159,7 @@ type RedactoNoticeAssistedProps = {
  * submit, `onComplete` fires immediately with no confirmation screen (mirroring
  * RedactoNoticeConsent's `onAccept`). Steps: `notice` → `verify` (with `otpSent`).
  */
-declare const RedactoNoticeAssisted: ({ organisationUuid, workspaceUuid, noticeUuid, baseUrl, onDecline, onComplete, }: RedactoNoticeAssistedProps) => react_jsx_runtime.JSX.Element;
+declare const RedactoNoticeAssisted: ({ organisationUuid, workspaceUuid, noticeUuid, baseUrl, onDecline, onComplete, }: RedactoNoticeAssistedProps) => react.JSX.Element;
 
 /**
  * DigiLockerCallback Component

package/dist/index.js

@@ -181,6 +181,7 @@ var fetchConsentContent = async ({
 };
 var submitConsentEvent = async ({
   accessToken,
+  baseUrl,
   ledgerBaseUrl,
   noticeUuid,
   purposes,
@@ -202,10 +203,7 @@ var submitConsentEvent = async ({
   if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
     throw new Error("Invalid token: missing organization or workspace UUID");
   }
-  if (!ledgerBaseUrl) {
-    throw new Error("ledgerBaseUrl is required to submit consent");
-  }
-  const apiBaseUrl = ledgerBaseUrl;
+  const apiBaseUrl = ledgerBaseUrl || baseUrl || BASE_URL;
   const validatedPurposes = purposes.map((purpose) => {
     if (!purpose.uuid) {
       throw new Error(`Invalid purpose data: missing uuid`);
@@ -2997,6 +2995,7 @@ var RedactoNoticeConsent = ({
       if (content) {
         await submitConsentEvent({
           accessToken,
+          baseUrl,
           ledgerBaseUrl,
           noticeUuid: content.notice_uuid,
           purposes: content.purposes.map((purpose) => {
@@ -4778,16 +4777,14 @@ var submitConsentEvent2 = async ({
   org_uuid,
   workspace_uuid,
   accessToken,
+  baseUrl,
   ledgerBaseUrl,
   noticeUuid,
   purposes,
   declined,
   meta_data
 }) => {
-  if (!ledgerBaseUrl) {
-    throw new Error("ledgerBaseUrl is required to submit consent");
-  }
-  const apiBaseUrl = ledgerBaseUrl;
+  const apiBaseUrl = ledgerBaseUrl || baseUrl || BASE_URL2;
   const payload = {
     notice_uuid: noticeUuid,
     purposes: purposes.map((purpose) => {
@@ -5472,6 +5469,7 @@ var RedactoConsentInlineComponent = ({
           org_uuid,
           workspace_uuid,
           accessToken: tokenToUse,
+          baseUrl,
           ledgerBaseUrl,
           noticeUuid: content.notice_uuid,
           purposes: content.purposes.map((purpose) => {

package/dist/index.mjs

@@ -155,6 +155,7 @@ var fetchConsentContent = async ({
 };
 var submitConsentEvent = async ({
   accessToken,
+  baseUrl,
   ledgerBaseUrl,
   noticeUuid,
   purposes,
@@ -176,10 +177,7 @@ var submitConsentEvent = async ({
   if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
     throw new Error("Invalid token: missing organization or workspace UUID");
   }
-  if (!ledgerBaseUrl) {
-    throw new Error("ledgerBaseUrl is required to submit consent");
-  }
-  const apiBaseUrl = ledgerBaseUrl;
+  const apiBaseUrl = ledgerBaseUrl || baseUrl || BASE_URL;
   const validatedPurposes = purposes.map((purpose) => {
     if (!purpose.uuid) {
       throw new Error(`Invalid purpose data: missing uuid`);
@@ -2944,6 +2942,7 @@ var RedactoNoticeConsent = ({
       if (content) {
         await submitConsentEvent({
           accessToken,
+          baseUrl,
           ledgerBaseUrl,
           noticeUuid: content.notice_uuid,
           purposes: content.purposes.map((purpose) => {
@@ -4725,16 +4724,14 @@ var submitConsentEvent2 = async ({
   org_uuid,
   workspace_uuid,
   accessToken,
+  baseUrl,
   ledgerBaseUrl,
   noticeUuid,
   purposes,
   declined,
   meta_data
 }) => {
-  if (!ledgerBaseUrl) {
-    throw new Error("ledgerBaseUrl is required to submit consent");
-  }
-  const apiBaseUrl = ledgerBaseUrl;
+  const apiBaseUrl = ledgerBaseUrl || baseUrl || BASE_URL2;
   const payload = {
     notice_uuid: noticeUuid,
     purposes: purposes.map((purpose) => {
@@ -5419,6 +5416,7 @@ var RedactoConsentInlineComponent = ({
           org_uuid,
           workspace_uuid,
           accessToken: tokenToUse,
+          baseUrl,
           ledgerBaseUrl,
           noticeUuid: content.notice_uuid,
           purposes: content.purposes.map((purpose) => {

package/dist/privacy-center.d.mts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ReactNode } from 'react';
 import * as _tanstack_react_query from '@tanstack/react-query';
 
@@ -33,9 +33,12 @@ type BaseRequest = {
  * Creates a client instance with a specific base URL.
  * @param baseUrl - Consent server base URL (Python service, e.g. http://host/consent)
  * @param ledgerBaseUrl - Go ledger base URL (e.g. http://host:8090/consent-ledger).
- *   Used for user-consents reads which are served from the ledger's `/public/...` paths.
+ *   Used for user-consents reads/writes served from the ledger's `/public/...` paths.
+ *   When omitted, those calls fall back to the legacy Python
+ *   `/dsar/privacy-center` endpoints and payloads (pre-ledger behavior), so
+ *   integrations without a deployed ledger keep working.
  */
-declare function createConsentClient(baseUrl: string, ledgerBaseUrl: string): {
+declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
     /**
      * Get form data (privacy center)
      */
@@ -96,14 +99,17 @@ declare function createConsentClient(baseUrl: string, ledgerBaseUrl: string): {
     /**
      * Manage consent (privacy center) - revoke, regrant, or renew.
      *
-     * The Go ledger has no manage-consent route, so this is expressed as a
-     * `partial` submit-consent on the ledger — mirroring the Python dual-write
-     * relay (`build_consent_management_payload`): the affected purpose is
-     * re-submitted with `selected: false` to revoke or `selected: true` to
-     * regrant/renew, and `partial: true` so the rest of the notice's purposes
-     * are left untouched. The principal is resolved from the JWT, so no
-     * `contact`/identifiers are sent in the body, and `consent_event_uuid` is
-     * omitted so the ledger mints a fresh event.
+     * The Go ledger has no manage-consent route, so with a ledger configured
+     * this is expressed as a `partial` submit-consent on the ledger — mirroring
+     * the Python dual-write relay (`build_consent_management_payload`): the
+     * affected purpose is re-submitted with `selected: false` to revoke or
+     * `selected: true` to regrant/renew, and `partial: true` so the rest of the
+     * notice's purposes are left untouched. The principal is resolved from the
+     * JWT, so no `contact`/identifiers are sent in the body, and
+     * `consent_event_uuid` is omitted so the ledger mints a fresh event.
+     *
+     * Without a ledger, the legacy Python `/manage-consent?status=` endpoint is
+     * used with its `{ purpose_uuid, contact, ... }` payload.
      */
     manageConsent(baseRequest: BaseRequest, purposeId: string, contact: string, status: "revoke" | "regrant" | "renew", authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">, nominatorContact?: string, dataElementUuids?: string[], productUuid?: string, noticeUuid?: string, dataElements?: Array<{
         uuid: string;
@@ -113,6 +119,18 @@ declare function createConsentClient(baseUrl: string, ledgerBaseUrl: string): {
      * Get activities (privacy center)
      */
     getActivities(baseRequest: BaseRequest, offset?: number, limit?: number, language?: string, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<unknown>;
+    /**
+     * List all data principals that share this session's contact
+     * (shared-contact profile picker). Identity is derived server-side from the
+     * JWT — the caller sends nothing but its bearer token.
+     */
+    listIdentities(baseRequest: BaseRequest, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<IdentityListResponse>;
+    /**
+     * Re-scope the session to a chosen principal uuid (must be one of the
+     * principals sharing this session's contact). Returns fresh access/refresh
+     * tokens scoped to that principal.
+     */
+    selectPrincipal(baseRequest: BaseRequest, principalUuid: string, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<SelectPrincipalResponse>;
     /**
      * Get receipts (privacy center) — consent receipts for the authenticated user
      */
@@ -607,6 +625,21 @@ type NotificationQueryParams = {
     include_summary?: boolean;
     language?: string;
 };
+type IdentityCandidate = Readonly<{
+    uuid: string;
+    org_user_id?: string | null;
+    primary_email?: string | null;
+    primary_mobile?: string | null;
+    created_at?: string | null;
+}>;
+type IdentityListResponse = Readonly<{
+    identities: IdentityCandidate[];
+}>;
+type SelectPrincipalResponse = Readonly<{
+    token: string;
+    refresh_token: string;
+    expires_at?: string;
+}>;
 
 type InternalPage = 'consent-manager' | 'form' | 'activity' | 'case-details' | 'notifications' | 'receipts';
 interface NavigationContextType {
@@ -619,12 +652,12 @@ interface NavigationContextType {
 declare const NavigationProvider: ({ children, initialPage }: {
     children: ReactNode;
     initialPage?: InternalPage;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 declare const useInternalNavigation: () => NavigationContextType;
 
 interface RedactoPrivacyCenterProps {
     baseUrl: string;
-    ledgerBaseUrl: string;
+    ledgerBaseUrl?: string;
     slug: string;
     accessToken: string;
     refreshToken: string;
@@ -632,26 +665,26 @@ interface RedactoPrivacyCenterProps {
     initialPage?: InternalPage;
     onBack?: 'back' | 'signout';
 }
-declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react_jsx_runtime.JSX.Element;
+declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react.JSX.Element;
 
 interface PrivacyCenterLayoutProps {
     children: ReactNode;
     slug: string;
     onBack?: 'back' | 'signout';
 }
-declare function PrivacyCenterLayout({ children, slug, onBack }: PrivacyCenterLayoutProps): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterLayout({ children, slug, onBack }: PrivacyCenterLayoutProps): react.JSX.Element;
 
-declare function PrivacyCenterHomePage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterHomePage(): react.JSX.Element;
 
-declare function PrivacyCenterConsentManagerPage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterConsentManagerPage(): react.JSX.Element;
 
-declare function PrivacyCenterFormPage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterFormPage(): react.JSX.Element;
 
-declare function PrivacyCenterActivityPage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterActivityPage(): react.JSX.Element;
 
-declare const PrivacyCenterCaseDetailsPage: () => react_jsx_runtime.JSX.Element | null;
+declare const PrivacyCenterCaseDetailsPage: () => react.JSX.Element | null;
 
-declare const NotificationsPage: () => react_jsx_runtime.JSX.Element;
+declare const NotificationsPage: () => react.JSX.Element;
 
 type AuthContextValue = Readonly<{
     accessToken: string;
@@ -662,18 +695,18 @@ type AuthContextValue = Readonly<{
 }>;
 type BaseUrlContextValue = Readonly<{
     baseUrl: string;
-    ledgerBaseUrl: string;
+    ledgerBaseUrl?: string;
     consentClient: ReturnType<typeof createConsentClient>;
 }>;
 
 declare const BaseUrlProvider: ({ children, baseUrl, ledgerBaseUrl, }: {
     children: ReactNode;
     baseUrl: string;
-    ledgerBaseUrl: string;
-}) => react_jsx_runtime.JSX.Element;
+    ledgerBaseUrl?: string;
+}) => react.JSX.Element;
 declare const useBaseUrl: () => Readonly<{
     baseUrl: string;
-    ledgerBaseUrl: string;
+    ledgerBaseUrl?: string;
     consentClient: ReturnType<typeof createConsentClient>;
 }>;
 
@@ -840,7 +873,7 @@ declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact,
 declare const fetchActivities: (organizationId: string, workspaceId: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<ActivityDetail | null>;
 declare const fetchCaseHistory: (organizationId: string, workspaceId: string, contact: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<CaseHistoryDetail | null>;
 
-declare const useCaseHistory: (organizationId: string | undefined, workspaceId: string | undefined, contact: string | undefined, authContext?: AuthContext) => _tanstack_react_query.UseQueryResult<CaseRequest[], Error>;
+declare const useCaseHistory: (organizationId: string | undefined, workspaceId: string | undefined, contact: string | undefined, authContext?: AuthContext) => _tanstack_react_query.UseQueryResult<NoInfer<CaseRequest[]>, Error>;
 
 interface AuthProviderProps {
     children: ReactNode;
@@ -848,7 +881,7 @@ interface AuthProviderProps {
     refreshToken: string;
     onError: (error: Error) => boolean;
 }
-declare const AuthProvider: ({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError, }: AuthProviderProps) => react_jsx_runtime.JSX.Element;
+declare const AuthProvider: ({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError, }: AuthProviderProps) => react.JSX.Element;
 declare const useAuth: () => AuthContextValue;
 
 /**

package/dist/privacy-center.d.ts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ReactNode } from 'react';
 import * as _tanstack_react_query from '@tanstack/react-query';
 
@@ -33,9 +33,12 @@ type BaseRequest = {
  * Creates a client instance with a specific base URL.
  * @param baseUrl - Consent server base URL (Python service, e.g. http://host/consent)
  * @param ledgerBaseUrl - Go ledger base URL (e.g. http://host:8090/consent-ledger).
- *   Used for user-consents reads which are served from the ledger's `/public/...` paths.
+ *   Used for user-consents reads/writes served from the ledger's `/public/...` paths.
+ *   When omitted, those calls fall back to the legacy Python
+ *   `/dsar/privacy-center` endpoints and payloads (pre-ledger behavior), so
+ *   integrations without a deployed ledger keep working.
  */
-declare function createConsentClient(baseUrl: string, ledgerBaseUrl: string): {
+declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
     /**
      * Get form data (privacy center)
      */
@@ -96,14 +99,17 @@ declare function createConsentClient(baseUrl: string, ledgerBaseUrl: string): {
     /**
      * Manage consent (privacy center) - revoke, regrant, or renew.
      *
-     * The Go ledger has no manage-consent route, so this is expressed as a
-     * `partial` submit-consent on the ledger — mirroring the Python dual-write
-     * relay (`build_consent_management_payload`): the affected purpose is
-     * re-submitted with `selected: false` to revoke or `selected: true` to
-     * regrant/renew, and `partial: true` so the rest of the notice's purposes
-     * are left untouched. The principal is resolved from the JWT, so no
-     * `contact`/identifiers are sent in the body, and `consent_event_uuid` is
-     * omitted so the ledger mints a fresh event.
+     * The Go ledger has no manage-consent route, so with a ledger configured
+     * this is expressed as a `partial` submit-consent on the ledger — mirroring
+     * the Python dual-write relay (`build_consent_management_payload`): the
+     * affected purpose is re-submitted with `selected: false` to revoke or
+     * `selected: true` to regrant/renew, and `partial: true` so the rest of the
+     * notice's purposes are left untouched. The principal is resolved from the
+     * JWT, so no `contact`/identifiers are sent in the body, and
+     * `consent_event_uuid` is omitted so the ledger mints a fresh event.
+     *
+     * Without a ledger, the legacy Python `/manage-consent?status=` endpoint is
+     * used with its `{ purpose_uuid, contact, ... }` payload.
      */
     manageConsent(baseRequest: BaseRequest, purposeId: string, contact: string, status: "revoke" | "regrant" | "renew", authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">, nominatorContact?: string, dataElementUuids?: string[], productUuid?: string, noticeUuid?: string, dataElements?: Array<{
         uuid: string;
@@ -113,6 +119,18 @@ declare function createConsentClient(baseUrl: string, ledgerBaseUrl: string): {
      * Get activities (privacy center)
      */
     getActivities(baseRequest: BaseRequest, offset?: number, limit?: number, language?: string, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<unknown>;
+    /**
+     * List all data principals that share this session's contact
+     * (shared-contact profile picker). Identity is derived server-side from the
+     * JWT — the caller sends nothing but its bearer token.
+     */
+    listIdentities(baseRequest: BaseRequest, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<IdentityListResponse>;
+    /**
+     * Re-scope the session to a chosen principal uuid (must be one of the
+     * principals sharing this session's contact). Returns fresh access/refresh
+     * tokens scoped to that principal.
+     */
+    selectPrincipal(baseRequest: BaseRequest, principalUuid: string, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<SelectPrincipalResponse>;
     /**
      * Get receipts (privacy center) — consent receipts for the authenticated user
      */
@@ -607,6 +625,21 @@ type NotificationQueryParams = {
     include_summary?: boolean;
     language?: string;
 };
+type IdentityCandidate = Readonly<{
+    uuid: string;
+    org_user_id?: string | null;
+    primary_email?: string | null;
+    primary_mobile?: string | null;
+    created_at?: string | null;
+}>;
+type IdentityListResponse = Readonly<{
+    identities: IdentityCandidate[];
+}>;
+type SelectPrincipalResponse = Readonly<{
+    token: string;
+    refresh_token: string;
+    expires_at?: string;
+}>;
 
 type InternalPage = 'consent-manager' | 'form' | 'activity' | 'case-details' | 'notifications' | 'receipts';
 interface NavigationContextType {
@@ -619,12 +652,12 @@ interface NavigationContextType {
 declare const NavigationProvider: ({ children, initialPage }: {
     children: ReactNode;
     initialPage?: InternalPage;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 declare const useInternalNavigation: () => NavigationContextType;
 
 interface RedactoPrivacyCenterProps {
     baseUrl: string;
-    ledgerBaseUrl: string;
+    ledgerBaseUrl?: string;
     slug: string;
     accessToken: string;
     refreshToken: string;
@@ -632,26 +665,26 @@ interface RedactoPrivacyCenterProps {
     initialPage?: InternalPage;
     onBack?: 'back' | 'signout';
 }
-declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react_jsx_runtime.JSX.Element;
+declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react.JSX.Element;
 
 interface PrivacyCenterLayoutProps {
     children: ReactNode;
     slug: string;
     onBack?: 'back' | 'signout';
 }
-declare function PrivacyCenterLayout({ children, slug, onBack }: PrivacyCenterLayoutProps): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterLayout({ children, slug, onBack }: PrivacyCenterLayoutProps): react.JSX.Element;
 
-declare function PrivacyCenterHomePage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterHomePage(): react.JSX.Element;
 
-declare function PrivacyCenterConsentManagerPage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterConsentManagerPage(): react.JSX.Element;
 
-declare function PrivacyCenterFormPage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterFormPage(): react.JSX.Element;
 
-declare function PrivacyCenterActivityPage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterActivityPage(): react.JSX.Element;
 
-declare const PrivacyCenterCaseDetailsPage: () => react_jsx_runtime.JSX.Element | null;
+declare const PrivacyCenterCaseDetailsPage: () => react.JSX.Element | null;
 
-declare const NotificationsPage: () => react_jsx_runtime.JSX.Element;
+declare const NotificationsPage: () => react.JSX.Element;
 
 type AuthContextValue = Readonly<{
     accessToken: string;
@@ -662,18 +695,18 @@ type AuthContextValue = Readonly<{
 }>;
 type BaseUrlContextValue = Readonly<{
     baseUrl: string;
-    ledgerBaseUrl: string;
+    ledgerBaseUrl?: string;
     consentClient: ReturnType<typeof createConsentClient>;
 }>;
 
 declare const BaseUrlProvider: ({ children, baseUrl, ledgerBaseUrl, }: {
     children: ReactNode;
     baseUrl: string;
-    ledgerBaseUrl: string;
-}) => react_jsx_runtime.JSX.Element;
+    ledgerBaseUrl?: string;
+}) => react.JSX.Element;
 declare const useBaseUrl: () => Readonly<{
     baseUrl: string;
-    ledgerBaseUrl: string;
+    ledgerBaseUrl?: string;
     consentClient: ReturnType<typeof createConsentClient>;
 }>;
 
@@ -840,7 +873,7 @@ declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact,
 declare const fetchActivities: (organizationId: string, workspaceId: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<ActivityDetail | null>;
 declare const fetchCaseHistory: (organizationId: string, workspaceId: string, contact: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<CaseHistoryDetail | null>;
 
-declare const useCaseHistory: (organizationId: string | undefined, workspaceId: string | undefined, contact: string | undefined, authContext?: AuthContext) => _tanstack_react_query.UseQueryResult<CaseRequest[], Error>;
+declare const useCaseHistory: (organizationId: string | undefined, workspaceId: string | undefined, contact: string | undefined, authContext?: AuthContext) => _tanstack_react_query.UseQueryResult<NoInfer<CaseRequest[]>, Error>;
 
 interface AuthProviderProps {
     children: ReactNode;
@@ -848,7 +881,7 @@ interface AuthProviderProps {
     refreshToken: string;
     onError: (error: Error) => boolean;
 }
-declare const AuthProvider: ({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError, }: AuthProviderProps) => react_jsx_runtime.JSX.Element;
+declare const AuthProvider: ({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError, }: AuthProviderProps) => react.JSX.Element;
 declare const useAuth: () => AuthContextValue;
 
 /**