@redacto.io/consent-sdk-react 10.0.0-beta.0 → 10.0.0-beta.2

package/src/RedactoPrivacyCenter/locales/mni-Mtei/translation.json

@@ -330,5 +330,13 @@
   "casesCreatedCount_other": "{{count}} cases created",
   "someRequestsFailed": "Some requests failed",
   "retry": "Retry",
-  "retrying": "Retrying..."
+  "retrying": "Retrying...",
+  "switchProfile": "প্রোফাইল হোংদোক-উ",
+  "chooseYourProfile": "নহাক্কী প্রোফাইল খনবিয়ু",
+  "emailLinkedToMultipleProfiles": "{{email}} অসি প্রোফাইল অমদগী হেন্না লোইননবা লৈ। নহাক্না য়েংনিংবা অদু খনবিয়ু।",
+  "contactLinkedToMultipleProfiles": "মসি কন্টেক্ট অসি প্রোফাইল অমদগী হেন্না লোইননবা লৈ। নহাক্না য়েংনিংবা অদু খনবিয়ু।",
+  "signingInEllipsis": "সাইন ইন তৌরি…",
+  "couldNotSwitchProfile": "প্রোফাইল অদুদা হোংদোকপা ঙমদ্রে। চানবীদুনা অমুক হন্না হোৎনবিয়ু।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/mr/translation.json

@@ -330,5 +330,13 @@
   "casesCreatedCount_other": "{{count}} cases created",
   "someRequestsFailed": "Some requests failed",
   "retry": "Retry",
-  "retrying": "Retrying..."
+  "retrying": "Retrying...",
+  "switchProfile": "प्रोफाइल बदला",
+  "chooseYourProfile": "तुमची प्रोफाइल निवडा",
+  "emailLinkedToMultipleProfiles": "{{email}} एकापेक्षा जास्त प्रोफाइलशी जोडलेला आहे. तुम्हाला जी पाहायची आहे ती निवडा.",
+  "contactLinkedToMultipleProfiles": "हा संपर्क एकापेक्षा जास्त प्रोफाइलशी जोडलेला आहे. तुम्हाला जी पाहायची आहे ती निवडा.",
+  "signingInEllipsis": "साइन इन करत आहे…",
+  "couldNotSwitchProfile": "त्या प्रोफाइलवर स्विच करता आले नाही. कृपया पुन्हा प्रयत्न करा.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/ne/translation.json

@@ -330,5 +330,13 @@
   "casesCreatedCount_other": "{{count}} cases created",
   "someRequestsFailed": "Some requests failed",
   "retry": "Retry",
-  "retrying": "Retrying..."
+  "retrying": "Retrying...",
+  "switchProfile": "प्रोफाइल बदल्नुहोस्",
+  "chooseYourProfile": "आफ्नो प्रोफाइल छान्नुहोस्",
+  "emailLinkedToMultipleProfiles": "{{email}} एकभन्दा बढी प्रोफाइलसँग जोडिएको छ। तपाईंले हेर्न चाहनुभएको छान्नुहोस्।",
+  "contactLinkedToMultipleProfiles": "यो सम्पर्क एकभन्दा बढी प्रोफाइलसँग जोडिएको छ। तपाईंले हेर्न चाहनुभएको छान्नुहोस्।",
+  "signingInEllipsis": "साइन इन हुँदैछ…",
+  "couldNotSwitchProfile": "त्यो प्रोफाइलमा स्विच गर्न सकिएन। कृपया फेरि प्रयास गर्नुहोस्।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/or/translation.json

@@ -330,5 +330,13 @@
   "casesCreatedCount_other": "{{count}} cases created",
   "someRequestsFailed": "Some requests failed",
   "retry": "Retry",
-  "retrying": "Retrying..."
+  "retrying": "Retrying...",
+  "switchProfile": "ପ୍ରୋଫାଇଲ୍ ବଦଳାନ୍ତୁ",
+  "chooseYourProfile": "ଆପଣଙ୍କ ପ୍ରୋଫାଇଲ୍ ବାଛନ୍ତୁ",
+  "emailLinkedToMultipleProfiles": "{{email}} ଏକାଧିକ ପ୍ରୋଫାଇଲ୍ ସହିତ ଯୋଡ଼ାଯାଇଛି। ଆପଣ ଦେଖିବାକୁ ଚାହୁଁଥିବାଟି ବାଛନ୍ତୁ।",
+  "contactLinkedToMultipleProfiles": "ଏହି ଯୋଗାଯୋଗ ଏକାଧିକ ପ୍ରୋଫାଇଲ୍ ସହିତ ଯୋଡ଼ାଯାଇଛି। ଆପଣ ଦେଖିବାକୁ ଚାହୁଁଥିବାଟି ବାଛନ୍ତୁ।",
+  "signingInEllipsis": "ସାଇନ୍ ଇନ୍ ହେଉଛି…",
+  "couldNotSwitchProfile": "ସେହି ପ୍ରୋଫାଇଲକୁ ସ୍ୱିଚ୍ କରାଯାଇପାରିଲା ନାହିଁ। ଦୟାକରି ପୁନର୍ବାର ଚେଷ୍ଟା କରନ୍ତୁ।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/pa/translation.json

@@ -330,5 +330,13 @@
   "casesCreatedCount_other": "{{count}} cases created",
   "someRequestsFailed": "Some requests failed",
   "retry": "Retry",
-  "retrying": "Retrying..."
+  "retrying": "Retrying...",
+  "switchProfile": "ਪ੍ਰੋਫਾਈਲ ਬਦਲੋ",
+  "chooseYourProfile": "ਆਪਣੀ ਪ੍ਰੋਫਾਈਲ ਚੁਣੋ",
+  "emailLinkedToMultipleProfiles": "{{email}} ਇੱਕ ਤੋਂ ਵੱਧ ਪ੍ਰੋਫਾਈਲਾਂ ਨਾਲ ਜੁੜਿਆ ਹੋਇਆ ਹੈ। ਜੋ ਤੁਸੀਂ ਵੇਖਣਾ ਚਾਹੁੰਦੇ ਹੋ ਉਹ ਚੁਣੋ।",
+  "contactLinkedToMultipleProfiles": "ਇਹ ਸੰਪਰਕ ਇੱਕ ਤੋਂ ਵੱਧ ਪ੍ਰੋਫਾਈਲਾਂ ਨਾਲ ਜੁੜਿਆ ਹੋਇਆ ਹੈ। ਜੋ ਤੁਸੀਂ ਵੇਖਣਾ ਚਾਹੁੰਦੇ ਹੋ ਉਹ ਚੁਣੋ।",
+  "signingInEllipsis": "ਸਾਈਨ ਇਨ ਹੋ ਰਿਹਾ ਹੈ…",
+  "couldNotSwitchProfile": "ਉਸ ਪ੍ਰੋਫਾਈਲ 'ਤੇ ਸਵਿੱਚ ਨਹੀਂ ਕੀਤਾ ਜਾ ਸਕਿਆ। ਕਿਰਪਾ ਕਰਕੇ ਦੁਬਾਰਾ ਕੋਸ਼ਿਸ਼ ਕਰੋ।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/sa/translation.json

@@ -330,5 +330,13 @@
   "casesCreatedCount_other": "{{count}} cases created",
   "someRequestsFailed": "Some requests failed",
   "retry": "Retry",
-  "retrying": "Retrying..."
+  "retrying": "Retrying...",
+  "switchProfile": "प्रोफ़ाइलं परिवर्तयतु",
+  "chooseYourProfile": "स्वप्रोफ़ाइलं चिनोतु",
+  "emailLinkedToMultipleProfiles": "{{email}} एकाधिकैः प्रोफ़ाइलैः सह सम्बद्धः अस्ति। यत् द्रष्टुम् इच्छति तत् चिनोतु।",
+  "contactLinkedToMultipleProfiles": "अयं सम्पर्कः एकाधिकैः प्रोफ़ाइलैः सह सम्बद्धः अस्ति। यत् द्रष्टुम् इच्छति तत् चिनोतु।",
+  "signingInEllipsis": "प्रवेशः क्रियते…",
+  "couldNotSwitchProfile": "तां प्रोफ़ाइलं प्रति परिवर्तनं न शक्यते स्म। कृपया पुनः प्रयत्नं करोतु।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/sat/translation.json

@@ -330,5 +330,13 @@
   "casesCreatedCount_other": "{{count}} cases created",
   "someRequestsFailed": "Some requests failed",
   "retry": "Retry",
-  "retrying": "Retrying..."
+  "retrying": "Retrying...",
+  "switchProfile": "ᱯᱨᱳᱯᱷᱟᱭᱤᱞ ᱵᱚᱫᱚᱞ ᱢᱮ",
+  "chooseYourProfile": "ᱟᱢᱟᱜ ᱯᱨᱳᱯᱷᱟᱭᱤᱞ ᱵᱟᱪᱷᱟᱣ ᱢᱮ",
+  "emailLinkedToMultipleProfiles": "{{email}} ᱫᱚ ᱢᱤᱫ ᱠᱷᱚᱱ ᱰᱷᱮᱨ ᱯᱨᱳᱯᱷᱟᱭᱤᱞ ᱥᱟᱶ ᱡᱩᱰᱟᱹᱣ ᱟᱠᱟᱱᱟ᱾ ᱟᱢ ᱧᱮᱞ ᱥᱟᱱᱟᱢ ᱚᱱᱟ ᱵᱟᱪᱷᱟᱣ ᱢᱮ᱾",
+  "contactLinkedToMultipleProfiles": "ᱱᱳᱶᱟ ᱠᱚᱱᱴᱮᱠᱴ ᱫᱚ ᱢᱤᱫ ᱠᱷᱚᱱ ᱰᱷᱮᱨ ᱯᱨᱳᱯᱷᱟᱭᱤᱞ ᱥᱟᱶ ᱡᱩᱰᱟᱹᱣ ᱟᱠᱟᱱᱟ᱾ ᱟᱢ ᱧᱮᱞ ᱥᱟᱱᱟᱢ ᱚᱱᱟ ᱵᱟᱪᱷᱟᱣ ᱢᱮ᱾",
+  "signingInEllipsis": "ᱥᱟᱭᱤᱱ ᱤᱱ ᱮᱫᱟᱭ…",
+  "couldNotSwitchProfile": "ᱚᱱᱟ ᱯᱨᱳᱯᱷᱟᱭᱤᱞ ᱛᱮ ᱥᱩᱭᱪ ᱵᱟᱝ ᱦᱩᱭ ᱞᱮᱱᱟ᱾ ᱫᱟᱭᱟ ᱠᱟᱛᱮ ᱫᱩᱠᱟᱹᱛᱮ ᱠᱩᱨᱩᱢᱩᱴᱩ ᱢᱮ᱾",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/sd/translation.json

@@ -330,5 +330,13 @@
   "casesCreatedCount_other": "{{count}} cases created",
   "someRequestsFailed": "Some requests failed",
   "retry": "Retry",
-  "retrying": "Retrying..."
+  "retrying": "Retrying...",
+  "switchProfile": "پروفائل تبديل ڪريو",
+  "chooseYourProfile": "پنهنجو پروفائل چونڊيو",
+  "emailLinkedToMultipleProfiles": "{{email}} هڪ کان وڌيڪ پروفائلن سان ڳنڍيل آهي. جيڪو توهان ڏسڻ چاهيو ٿا اهو چونڊيو.",
+  "contactLinkedToMultipleProfiles": "هي رابطو هڪ کان وڌيڪ پروفائلن سان ڳنڍيل آهي. جيڪو توهان ڏسڻ چاهيو ٿا اهو چونڊيو.",
+  "signingInEllipsis": "سائن ان ٿي رهيو آهي…",
+  "couldNotSwitchProfile": "ان پروفائل تي سوئچ نه ٿي سگهيو. مهرباني ڪري ٻيهر ڪوشش ڪريو.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/ta/translation.json

@@ -330,5 +330,13 @@
   "casesCreatedCount_other": "{{count}} cases created",
   "someRequestsFailed": "Some requests failed",
   "retry": "Retry",
-  "retrying": "Retrying..."
+  "retrying": "Retrying...",
+  "switchProfile": "சுயவிவரத்தை மாற்று",
+  "chooseYourProfile": "உங்கள் சுயவிவரத்தைத் தேர்ந்தெடுக்கவும்",
+  "emailLinkedToMultipleProfiles": "{{email}} ஒன்றுக்கு மேற்பட்ட சுயவிவரங்களுடன் இணைக்கப்பட்டுள்ளது. நீங்கள் பார்க்க விரும்புவதைத் தேர்ந்தெடுக்கவும்.",
+  "contactLinkedToMultipleProfiles": "இந்தத் தொடர்பு ஒன்றுக்கு மேற்பட்ட சுயவிவரங்களுடன் இணைக்கப்பட்டுள்ளது. நீங்கள் பார்க்க விரும்புவதைத் தேர்ந்தெடுக்கவும்.",
+  "signingInEllipsis": "உள்நுழைகிறது…",
+  "couldNotSwitchProfile": "அந்தச் சுயவிவரத்திற்கு மாற முடியவில்லை. மீண்டும் முயற்சிக்கவும்.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/te/translation.json

@@ -330,5 +330,13 @@
   "casesCreatedCount_other": "{{count}} cases created",
   "someRequestsFailed": "Some requests failed",
   "retry": "Retry",
-  "retrying": "Retrying..."
+  "retrying": "Retrying...",
+  "switchProfile": "ప్రొఫైల్‌ను మార్చండి",
+  "chooseYourProfile": "మీ ప్రొఫైల్‌ను ఎంచుకోండి",
+  "emailLinkedToMultipleProfiles": "{{email}} ఒకటి కంటే ఎక్కువ ప్రొఫైల్‌లతో అనుసంధానించబడింది. మీరు చూడాలనుకుంటున్నదాన్ని ఎంచుకోండి.",
+  "contactLinkedToMultipleProfiles": "ఈ సంప్రదింపు ఒకటి కంటే ఎక్కువ ప్రొఫైల్‌లతో అనుసంధానించబడింది. మీరు చూడాలనుకుంటున్నదాన్ని ఎంచుకోండి.",
+  "signingInEllipsis": "సైన్ ఇన్ అవుతోంది…",
+  "couldNotSwitchProfile": "ఆ ప్రొఫైల్‌కు మారడం సాధ్యం కాలేదు. దయచేసి మళ్లీ ప్రయత్నించండి.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/ur/translation.json

@@ -330,5 +330,13 @@
   "casesCreatedCount_other": "{{count}} cases created",
   "someRequestsFailed": "Some requests failed",
   "retry": "Retry",
-  "retrying": "Retrying..."
+  "retrying": "Retrying...",
+  "switchProfile": "پروفائل تبدیل کریں",
+  "chooseYourProfile": "اپنی پروفائل منتخب کریں",
+  "emailLinkedToMultipleProfiles": "{{email}} ایک سے زیادہ پروفائلز سے منسلک ہے۔ جسے آپ دیکھنا چاہتے ہیں اسے منتخب کریں۔",
+  "contactLinkedToMultipleProfiles": "یہ رابطہ ایک سے زیادہ پروفائلز سے منسلک ہے۔ جسے آپ دیکھنا چاہتے ہیں اسے منتخب کریں۔",
+  "signingInEllipsis": "سائن ان ہو رہا ہے…",
+  "couldNotSwitchProfile": "اس پروفائل پر سوئچ نہیں کیا جا سکا۔ براہ کرم دوبارہ کوشش کریں۔",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/styles/injectStyles.ts

@@ -664,6 +664,111 @@ export const injectPCStyles = () => {
       color: var(--pc-text-secondary);
       line-height: 1.25;
     }
+    .pc-select-user {
+      display: flex;
+      flex-direction: column;
+      justify-content: center;
+      gap: var(--pc-spacing-xl);
+      width: 100%;
+      max-width: 460px;
+      margin: 0 auto;
+      min-height: min(62vh, 540px);
+      padding-top: var(--pc-spacing-2xl);
+      padding-bottom: var(--pc-spacing-2xl);
+    }
+    .pc-select-user__header {
+      display: flex;
+      flex-direction: column;
+      align-items: center;
+      text-align: center;
+      gap: var(--pc-spacing-sm);
+    }
+    .pc-select-user__header > * {
+      margin: 0;
+    }
+    .pc-select-user__list {
+      display: flex;
+      flex-direction: column;
+      gap: 0.625rem;
+    }
+    .pc-select-user__item {
+      display: flex;
+      align-items: center;
+      justify-content: space-between;
+      gap: 0.75rem;
+      width: 100%;
+      box-sizing: border-box;
+      padding: 0.75rem 1rem;
+      border: 1px solid var(--pc-border-color);
+      border-radius: 0.625rem;
+      background-color: var(--pc-bg-primary);
+      color: var(--pc-text-primary);
+      cursor: pointer;
+      text-align: left;
+      appearance: none;
+      -webkit-appearance: none;
+      font-family: inherit;
+      transition: border-color 0.2s ease, background-color 0.2s ease;
+    }
+    .pc-select-user__item:hover:not(:disabled) {
+      border-color: var(--pc-primary);
+      background-color: color-mix(in srgb, var(--pc-primary) 6%, var(--pc-bg-primary));
+    }
+    .pc-select-user__item:disabled {
+      cursor: default;
+      opacity: 0.7;
+    }
+    .pc-select-user__item:focus-visible {
+      outline: 2px solid var(--pc-border-color-focus);
+      outline-offset: 2px;
+    }
+    .pc-select-user__item-text {
+      display: flex;
+      flex-direction: column;
+      align-items: flex-start;
+      gap: 0.125rem;
+      min-width: 0;
+    }
+    .pc-select-user__item-primary {
+      font-size: 0.875rem;
+      font-weight: 600;
+      line-height: 1.25;
+      overflow: hidden;
+      text-overflow: ellipsis;
+      white-space: nowrap;
+      max-width: 100%;
+    }
+    .pc-select-user__item-secondary {
+      font-size: 0.75rem;
+      color: var(--pc-text-secondary);
+      line-height: 1.25;
+      overflow: hidden;
+      text-overflow: ellipsis;
+      white-space: nowrap;
+      max-width: 100%;
+    }
+    .pc-select-user__item-status {
+      font-size: 0.75rem;
+      font-weight: 600;
+      color: var(--pc-primary);
+      flex-shrink: 0;
+    }
+    .pc-select-user__item-chevron {
+      color: var(--pc-primary);
+      flex-shrink: 0;
+    }
+    .pc-select-user__error {
+      margin: 0.75rem 0 0;
+      font-size: 0.8125rem;
+      color: var(--pc-error);
+      text-align: center;
+    }
+    .pc-select-user-loading {
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      min-height: 60vh;
+    }
     .pc-product-purpose-panel {
       display: flex;
       flex-direction: column;

package/tests/Form.test.tsx

@@ -140,13 +140,16 @@ vi.mock('../src/RedactoPrivacyCenter/context/AuthContext', () => {
   return { useAuth: () => auth };
 });
 
-vi.mock('../src/RedactoPrivacyCenter/context/BaseUrlContext', () => {
-  const base = {
-    consentClient: { get: () => Promise.resolve(null), post: () => Promise.resolve(null) },
-    baseUrl: 'https://consent.test',
-  };
-  return { useBaseUrl: () => base };
-});
+// Mutable so individual tests can drop `ledgerBaseUrl` to exercise the legacy
+// (no-ledger) mode; beforeEach restores the ledger default.
+const baseUrlStub = vi.hoisted(() => ({
+  consentClient: { get: () => Promise.resolve(null), post: () => Promise.resolve(null) },
+  baseUrl: 'https://consent.test',
+  ledgerBaseUrl: 'https://ledger.test/consent-ledger' as string | undefined,
+}));
+vi.mock('../src/RedactoPrivacyCenter/context/BaseUrlContext', () => ({
+  useBaseUrl: () => baseUrlStub,
+}));
 
 vi.mock('../src/RedactoPrivacyCenter/context/OrganizationContext', () => {
   const org = {
@@ -481,6 +484,8 @@ describe('Form (P2-SDK-3)', () => {
   beforeEach(() => {
     createCaseRequest.mockReset();
     getFormData.mockReset();
+    fetchUserConsents.mockReset();
+    baseUrlStub.ledgerBaseUrl = 'https://ledger.test/consent-ledger';
     sessionStorage.clear();
   });
 
@@ -519,6 +524,47 @@ describe('Form (P2-SDK-3)', () => {
     expect(submitButton.disabled).toBe(true);
   });
 
+  it('skips the ledger picker overlay when no ledgerBaseUrl is configured', async () => {
+    // Without a ledger, consents still live in Python and the form/data
+    // groups are authoritative — the overlay must not fire a user-consents
+    // read (it would hit the legacy endpoint and mis-map its shape).
+    baseUrlStub.ledgerBaseUrl = undefined;
+    setupSession();
+    getFormData.mockResolvedValue(
+      makeFormData({
+        direct_groups: [
+          makeGroup(),
+          makeGroup({
+            product_uuid: 'prod-direct-2',
+            product_name: 'Acme Rewards',
+            purposes: [basePurpose('purp-2', 'Analytics')],
+          }),
+        ],
+      }),
+    );
+
+    render(<Form onCreateRequest={vi.fn()} />);
+    await waitFor(() => expect(getFormData).toHaveBeenCalled());
+
+    pickRequestType(RequestTypeEnum.ERASURE);
+    await waitFor(() => {
+      expect(screen.getByText('Acme Loyalty')).toBeInTheDocument();
+    });
+    expect(fetchUserConsents).not.toHaveBeenCalled();
+  });
+
+  it('runs the ledger picker overlay when ledgerBaseUrl is configured', async () => {
+    setupSession();
+    getFormData.mockResolvedValue(
+      makeFormData({ direct_groups: [makeGroup()] }),
+    );
+
+    render(<Form onCreateRequest={vi.fn()} />);
+    await waitFor(() => expect(getFormData).toHaveBeenCalled());
+
+    await waitFor(() => expect(fetchUserConsents).toHaveBeenCalled());
+  });
+
   it('renders the product step for DSAR types when direct_groups is present', async () => {
     setupSession();
     const direct = makeGroup({

package/tests/ManageConsentErrorMapping.test.tsx

@@ -0,0 +1,85 @@
+import { describe, it, expect } from 'vitest';
+
+import { manageConsentServer, ConsentApiError } from '../src/RedactoPrivacyCenter/api/actions';
+import { ApiError } from '../src/RedactoPrivacyCenter/api/fetcher';
+import type { createConsentClient } from '../src/RedactoPrivacyCenter/api/client';
+
+type ConsentClient = ReturnType<typeof createConsentClient>;
+
+// Build a mock consent client whose `manageConsent` rejects with the supplied
+// error. Only `manageConsent` is exercised by `manageConsentServer`, so the
+// rest of the surface is a cast-through stub.
+const makeClient = (error: unknown): ConsentClient =>
+  ({
+    manageConsent: () => Promise.reject(error),
+  } as unknown as ConsentClient);
+
+const baseParams = {
+  organizationId: 'org-1',
+  workspaceId: 'ws-1',
+  purposeId: 'purpose-1',
+  contact: 'user@example.com',
+  action: 'revoke' as const,
+  authToken: 'token-abc',
+};
+
+describe('manageConsentServer error mapping — purpose_not_revocable', () => {
+  // The consent-server 400 is rendered by a Ninja wrapper as
+  // { code: 400, status, detail: { message, code: 'purpose_not_revocable' } }.
+  // `privacyCenterApiFetch` preserves the parsed `detail` on the ApiError and
+  // sets ApiError.code only from the TOP-LEVEL string code — which here is the
+  // integer 400 (dropped, so ApiError.code is undefined). The app-level
+  // discriminator therefore lives in `error.detail.code`.
+  const realBackody400 = () =>
+    new ApiError(
+      `[400] ${JSON.stringify(
+        { message: 'This purpose cannot be revoked.', code: 'purpose_not_revocable' },
+        null,
+        2,
+      )}`,
+      { status: 400, code: undefined, detail: { message: 'This purpose cannot be revoked.', code: 'purpose_not_revocable' } },
+    );
+
+  it('maps the real backend 400 body (code nested in detail) to PURPOSE_NOT_REVOCABLE', async () => {
+    await expect(
+      manageConsentServer({ ...baseParams, consentClient: makeClient(realBackody400()) }),
+    ).rejects.toMatchObject({
+      name: 'ConsentApiError',
+      code: 'PURPOSE_NOT_REVOCABLE',
+    });
+  });
+
+  it('throws a ConsentApiError instance carrying the original message', async () => {
+    const error = realBackody400();
+    try {
+      await manageConsentServer({ ...baseParams, consentClient: makeClient(error) });
+      throw new Error('expected manageConsentServer to reject');
+    } catch (caught) {
+      expect(caught).toBeInstanceOf(ConsentApiError);
+      expect((caught as ConsentApiError).code).toBe('PURPOSE_NOT_REVOCABLE');
+      expect((caught as ConsentApiError).message).toContain('purpose_not_revocable');
+    }
+  });
+
+  it('still maps when the string code is surfaced at the top level (error.code)', async () => {
+    // Defensive: if a backend/wrapper ever exposes the string code at the top
+    // level, the original `error?.code === 'purpose_not_revocable'` arm must
+    // continue to fire.
+    const error = new ApiError('[400] purpose is not revocable', {
+      status: 400,
+      code: 'purpose_not_revocable',
+    });
+    await expect(
+      manageConsentServer({ ...baseParams, consentClient: makeClient(error) }),
+    ).rejects.toMatchObject({ code: 'PURPOSE_NOT_REVOCABLE' });
+  });
+
+  it('does not misclassify an unrelated error as PURPOSE_NOT_REVOCABLE', async () => {
+    const error = new ApiError('[500] internal server error', { status: 500 });
+    // Unrelated non-auth errors are swallowed to null by handleServerActionError,
+    // so the call resolves rather than throwing a ConsentApiError.
+    await expect(
+      manageConsentServer({ ...baseParams, consentClient: makeClient(error) }),
+    ).resolves.toBeNull();
+  });
+});

package/tests/RevocablePurpose.test.tsx

@@ -0,0 +1,146 @@
+import { render, screen, fireEvent } from '@testing-library/react';
+import { describe, it, expect, vi } from 'vitest';
+
+// react-i18next is an optional peer dep that is not installed in this
+// package's node_modules. Stub it with a minimal `useTranslation` that
+// resolves the keys used by the components under test, honouring the inline
+// English fallback passed as the 2nd argument (mirrors the real i18next
+// behaviour when a key is missing).
+vi.mock('react-i18next', () => {
+  const en: Record<string, string> = {
+    modifyButton: 'Modify',
+    modifyConsent: 'Modify Consent',
+    closeModal: 'Close',
+    cancel: 'Cancel',
+    revokeConsent: 'Revoke Consent',
+    revokeConsentWarning: 'If you revoke this consent, you may lose access.',
+    aboutToModifyConsent: 'You are about to modify this consent.',
+    noDataElementsAvailable: 'No data elements available',
+    purposeNotRevocable: "This purpose can't be withdrawn directly.",
+    noActionsAvailable: 'No actions available for this record.',
+  };
+  const interpolate = (template: string, vars?: Record<string, unknown>) =>
+    template.replace(/\{\{(\w+)\}\}/g, (_match, key: string) => {
+      const value = vars?.[key];
+      return value === undefined || value === null ? '' : String(value);
+    });
+  // Supports the `t(key, fallbackString)` and `t(key, opts)` call shapes used
+  // across the components. When the key is unknown, fall back to the inline
+  // English string if one was supplied, otherwise echo the key.
+  const t = (key: string, second?: unknown, opts?: Record<string, unknown>) => {
+    const fallback = typeof second === 'string' ? second : undefined;
+    const interpolationOpts =
+      typeof second === 'object' && second !== null
+        ? (second as Record<string, unknown>)
+        : opts;
+    const template = en[key] ?? fallback ?? key;
+    return interpolate(template, interpolationOpts);
+  };
+  return {
+    useTranslation: () => ({ t, i18n: { language: 'en' } }),
+  };
+});
+
+// Icon peer deps — stub the icons used by the modal.
+vi.mock('lucide-react', () => ({
+  ChevronDownIcon: () => null,
+  X: () => null,
+  Smartphone: () => null,
+  LaptopMinimal: () => null,
+}));
+
+vi.mock('react-icons/pi', () => ({
+  PiWarningCircleBold: () => null,
+}));
+
+import { renderModifyButton } from '../src/RedactoPrivacyCenter/components/ConsentManagerCells';
+import { ModifyConsentModal } from '../src/RedactoPrivacyCenter/components/ModifyConsentModal';
+import { NavigationProvider } from '../src/RedactoPrivacyCenter/context/NavigationContext';
+import { ConsentStatusEnum } from '../src/RedactoPrivacyCenter/lib/types';
+import type { ConsentModalRecord } from '../src/RedactoPrivacyCenter/lib/types';
+
+const makeRecord = (
+  overrides: Partial<ConsentModalRecord> = {},
+): ConsentModalRecord => ({
+  purpose_uuid: 'purpose-1',
+  name: 'Marketing analytics',
+  description: 'Improve product recommendations',
+  status: ConsentStatusEnum.ACTIVE,
+  given_date: '2026-01-01T00:00:00Z',
+  valid_till: null,
+  method: 'WEB',
+  data_elements: [],
+  link_reason: null,
+  product_uuid: 'prod-1',
+  product_name: 'Acme Loyalty',
+  product_description: null,
+  nominator: null,
+  ...overrides,
+});
+
+// A TFunction-compatible stub for the pure render helper (which receives `t`
+// directly rather than via the react-i18next mock). Resolves the handful of
+// keys it uses and honours the inline English fallback like real i18next.
+const tStubKeys: Record<string, string> = {
+  modifyButton: 'Modify',
+};
+const tStub = ((key: string, second?: unknown) =>
+  tStubKeys[key] ??
+  (typeof second === 'string' ? second : key)) as unknown as Parameters<
+  typeof renderModifyButton
+>[2];
+
+describe('non-revocable purpose', () => {
+  it('renders the modify/withdraw control disabled for a non-revocable ACTIVE purpose', () => {
+    const record = makeRecord({ revocable: false });
+    render(<>{renderModifyButton(record, vi.fn(), tStub)}</>);
+
+    const button = screen.getByRole('button', { name: 'Modify' });
+    expect(button).toBeDisabled();
+    expect(button).toHaveAttribute(
+      'title',
+      "This purpose can't be withdrawn directly.",
+    );
+  });
+
+  it('does not invoke onModify when the disabled non-revocable control is clicked', () => {
+    const onModify = vi.fn();
+    const record = makeRecord({ revocable: false });
+    render(<>{renderModifyButton(record, onModify, tStub)}</>);
+
+    fireEvent.click(screen.getByRole('button', { name: 'Modify' }));
+    expect(onModify).not.toHaveBeenCalled();
+  });
+});
+
+describe('revocable purpose (regression)', () => {
+  it('renders the modify control enabled when revocable is absent (older backends)', () => {
+    const record = makeRecord(); // no `revocable` field
+    const onModify = vi.fn();
+    render(<>{renderModifyButton(record, onModify, tStub)}</>);
+
+    const button = screen.getByRole('button', { name: 'Modify' });
+    expect(button).not.toBeDisabled();
+    fireEvent.click(button);
+    expect(onModify).toHaveBeenCalledTimes(1);
+  });
+
+  it('offers the revoke action in the modal for a revocable ACTIVE record', () => {
+    const record = makeRecord({ revocable: true });
+    render(
+      <NavigationProvider>
+        <ModifyConsentModal
+          isOpen
+          onClose={vi.fn()}
+          selectedRecord={record}
+          isLoading={false}
+          onManageConsent={vi.fn()}
+        />
+      </NavigationProvider>,
+    );
+
+    expect(
+      screen.getByRole('button', { name: 'Revoke Consent' }),
+    ).toBeInTheDocument();
+  });
+});