@redacto.io/consent-sdk-react 10.0.0-beta.1 → 10.0.0-beta.11

package/dist/index.mjs

@@ -1,12 +1,13 @@
 import {
+  SANDBOX_TOKEN_HEADER,
   useMediaQuery
-} from "./chunk-6A665OPR.mjs";
+} from "./chunk-OGL6OC3A.mjs";
 
 // src/RedactoNoticeConsent/RedactoNoticeConsent.tsx
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 
 // src/RedactoNoticeConsent/api/index.ts
-import { jwtDecode } from "jwt-decode";
+import { jwtDecode as jwtDecode2 } from "jwt-decode";
 
 // src/shared/api-errors.ts
 var ApiError = class extends Error {
@@ -66,6 +67,141 @@ async function parseApiError(response, fallbackMessage) {
   });
 }
 
+// src/RedactoNoticeConsent/api/sandbox.ts
+var resolveSandboxAuth = (params) => {
+  var _a, _b, _c, _d, _e;
+  const token = (_a = params.token) == null ? void 0 : _a.trim();
+  if (!token) {
+    return null;
+  }
+  const organisationUuid = (_b = params.organisationUuid) == null ? void 0 : _b.trim();
+  const workspaceUuid = (_c = params.workspaceUuid) == null ? void 0 : _c.trim();
+  const ucic = (_d = params.sandboxUcic) == null ? void 0 : _d.trim();
+  const subject = (_e = params.sandboxSubject) == null ? void 0 : _e.trim();
+  if (!organisationUuid || !workspaceUuid) {
+    throw new Error(
+      "Sandbox mode requires organisationUuid and workspaceUuid props"
+    );
+  }
+  if (!ucic && !subject) {
+    throw new Error("Sandbox mode requires a UCIC, email, or mobile");
+  }
+  return { token, ucic, subject: subject != null ? subject : "", organisationUuid, workspaceUuid };
+};
+var resolveRequestAuth = (accessToken, sandboxParams, decodeTokenSafely2) => {
+  const sandbox = resolveSandboxAuth(sandboxParams);
+  if (sandbox) {
+    return {
+      organisationUuid: sandbox.organisationUuid,
+      workspaceUuid: sandbox.workspaceUuid,
+      sandbox
+    };
+  }
+  const decodedToken = accessToken ? decodeTokenSafely2(accessToken) : null;
+  if (!decodedToken) {
+    throw new Error("Invalid access token");
+  }
+  const { organisation_uuid, workspace_uuid } = decodedToken;
+  if (!organisation_uuid || !workspace_uuid) {
+    throw new Error("Invalid token: missing organization or workspace UUID");
+  }
+  return {
+    organisationUuid: organisation_uuid,
+    workspaceUuid: workspace_uuid,
+    sandbox: null
+  };
+};
+var buildAuthHeaders = (accessToken, sandbox) => {
+  if (sandbox) {
+    return { [SANDBOX_TOKEN_HEADER]: sandbox.token };
+  }
+  return { Authorization: `Bearer ${accessToken}` };
+};
+var sandboxBodyIdentity = (sandbox) => {
+  if (sandbox.ucic) {
+    return { org_user_id: sandbox.ucic };
+  }
+  return sandbox.subject.includes("@") ? { primary_email: sandbox.subject } : { primary_mobile: sandbox.subject };
+};
+var sandboxQueryIdentity = (sandbox) => sandboxBodyIdentity(sandbox);
+
+// src/shared/notice-consent-status.ts
+import { jwtDecode } from "jwt-decode";
+var decodeNoticeConsentToken = (token) => {
+  try {
+    return jwtDecode(token);
+  } catch {
+    return null;
+  }
+};
+var fetchNoticeConsentStatusForScope = async ({
+  accessToken,
+  ledgerBaseUrl,
+  organisationUuid,
+  workspaceUuid,
+  noticeUuid,
+  signal
+}) => {
+  if (!accessToken || !ledgerBaseUrl || !organisationUuid || !workspaceUuid || !noticeUuid) {
+    return null;
+  }
+  try {
+    const response = await fetch(
+      `${ledgerBaseUrl}/public/organisations/${organisationUuid}/workspaces/${workspaceUuid}/notices/${noticeUuid}/check-consent`,
+      {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${accessToken}`,
+          "Content-Type": "application/json"
+        },
+        body: "{}",
+        signal
+      }
+    );
+    if (!response.ok) {
+      return null;
+    }
+    const data = await response.json();
+    const body = data && typeof data === "object" && "detail" in data && data.detail ? data.detail : data;
+    if (!body || !Array.isArray(body.purposes)) {
+      return null;
+    }
+    return body;
+  } catch {
+    return null;
+  }
+};
+var fetchNoticeConsentStatus = async ({
+  accessToken,
+  ledgerBaseUrl,
+  noticeUuid,
+  signal
+}) => {
+  if (!accessToken || !ledgerBaseUrl || !noticeUuid) {
+    return null;
+  }
+  const decodedToken = decodeNoticeConsentToken(accessToken);
+  if (!decodedToken) {
+    return null;
+  }
+  const {
+    organisation_uuid: ORGANISATION_UUID,
+    workspace_uuid: WORKSPACE_UUID
+  } = decodedToken;
+  if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
+    return null;
+  }
+  return fetchNoticeConsentStatusForScope({
+    accessToken,
+    ledgerBaseUrl,
+    organisationUuid: ORGANISATION_UUID,
+    workspaceUuid: WORKSPACE_UUID,
+    noticeUuid,
+    signal
+  });
+};
+var isNoticeFullyConsented = (status) => status.consented && status.all_mandatory_active;
+
 // src/RedactoNoticeConsent/api/index.ts
 var BASE_URL = "https://api.redacto.io/consent";
 var apiCache = /* @__PURE__ */ new Map();
@@ -85,7 +221,7 @@ function setCachedData(key, data, ttl = CACHE_TTL) {
 }
 function decodeTokenSafely(token) {
   try {
-    return jwtDecode(token);
+    return jwtDecode2(token);
   } catch (error) {
     console.warn("Failed to decode JWT token:", error);
     return null;
@@ -102,21 +238,19 @@ var fetchConsentContent = async ({
   specific_uuid,
   validate_against = "all",
   include_fully_consented_data = false,
-  signal
+  signal,
+  ...sandboxParams
 }) => {
-  if (!noticeId || !accessToken || !validate_against) {
-    throw new Error("noticeId and accessToken are required");
-  }
-  const decodedToken = decodeTokenSafely(accessToken);
-  if (!decodedToken) {
-    throw new Error("Invalid access token");
+  if (!noticeId || !validate_against) {
+    throw new Error("noticeId is required");
   }
-  const { organisation_uuid: ORGANISATION_UUID, workspace_uuid: WORKSPACE_UUID } = decodedToken;
-  if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
-    throw new Error("Invalid token: missing organization or workspace UUID");
+  if (!accessToken && !sandboxParams.token) {
+    throw new Error("accessToken or token is required");
   }
+  const { organisationUuid: ORGANISATION_UUID, workspaceUuid: WORKSPACE_UUID, sandbox } = resolveRequestAuth(accessToken, sandboxParams, decodeTokenSafely);
   const apiBaseUrl = baseUrl || BASE_URL;
-  const cacheKey = `${accessToken}-${noticeId}-${validate_against}-${language}-${specific_uuid || ""}-${include_fully_consented_data}`;
+  const cacheIdentity = sandbox ? `sandbox:${sandbox.organisationUuid}:${sandbox.workspaceUuid}:${sandbox.ucic || sandbox.subject}` : accessToken;
+  const cacheKey = `${cacheIdentity}-${noticeId}-${validate_against}-${language}-${specific_uuid || ""}-${include_fully_consented_data}`;
   if (validate_against === "all" && !specific_uuid) {
     const cachedData = getCachedData(cacheKey);
     if (cachedData) {
@@ -133,10 +267,15 @@ var fetchConsentContent = async ({
   if (include_fully_consented_data) {
     url.searchParams.append("include_fully_consented_data", "true");
   }
+  if (sandbox) {
+    for (const [key, value] of Object.entries(sandboxQueryIdentity(sandbox))) {
+      url.searchParams.append(key, value);
+    }
+  }
   const response = await fetch(url.toString(), {
     method: "GET",
     headers: {
-      Authorization: `Bearer ${accessToken}`,
+      ...buildAuthHeaders(accessToken, sandbox),
       "Accept-Language": language
     },
     signal
@@ -164,20 +303,17 @@ var submitConsentEvent = async ({
   meta_data,
   guardianVerificationReference,
   selfDeclaredAdult,
-  signal
+  signal,
+  ...sandboxParams
 }) => {
-  if (!noticeUuid || !accessToken || !Array.isArray(purposes)) {
-    throw new Error("noticeUuid, accessToken, and purposes array are required");
-  }
-  const decodedToken = decodeTokenSafely(accessToken);
-  if (!decodedToken) {
-    throw new Error("Invalid access token");
+  if (!noticeUuid || !Array.isArray(purposes)) {
+    throw new Error("noticeUuid and purposes array are required");
   }
-  const { organisation_uuid: ORGANISATION_UUID, workspace_uuid: WORKSPACE_UUID } = decodedToken;
-  if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
-    throw new Error("Invalid token: missing organization or workspace UUID");
+  if (!accessToken && !sandboxParams.token) {
+    throw new Error("accessToken or token is required");
   }
-  const apiBaseUrl = ledgerBaseUrl || baseUrl || BASE_URL;
+  const { organisationUuid: ORGANISATION_UUID, workspaceUuid: WORKSPACE_UUID, sandbox } = resolveRequestAuth(accessToken, sandboxParams, decodeTokenSafely);
+  const apiBaseUrl = (sandbox ? null : ledgerBaseUrl) || baseUrl || BASE_URL;
   const validatedPurposes = purposes.map((purpose) => {
     if (!purpose.uuid) {
       throw new Error(`Invalid purpose data: missing uuid`);
@@ -203,15 +339,16 @@ var submitConsentEvent = async ({
     guardian_verification_reference: guardianVerificationReference,
     self_declared_adult: selfDeclaredAdult
   };
+  const requestBody = sandbox ? { ...payload, ...sandboxBodyIdentity(sandbox) } : payload;
   const response = await fetch(
     `${apiBaseUrl}/public/organisations/${ORGANISATION_UUID}/workspaces/${WORKSPACE_UUID}/submit-consent`,
     {
       method: "POST",
       headers: {
-        Authorization: `Bearer ${accessToken}`,
+        ...buildAuthHeaders(accessToken, sandbox),
         "Content-Type": "application/json"
       },
-      body: JSON.stringify(payload),
+      body: JSON.stringify(requestBody),
       signal
     }
   );
@@ -223,112 +360,32 @@ var submitConsentEvent = async ({
   }
   apiCache.clear();
 };
-var fetchNoticeConsentStatus = async ({
-  accessToken,
-  ledgerBaseUrl,
-  noticeUuid,
-  signal
-}) => {
-  if (!accessToken || !ledgerBaseUrl || !noticeUuid) {
-    return null;
-  }
-  const decodedToken = decodeTokenSafely(accessToken);
-  if (!decodedToken) {
-    return null;
-  }
-  const { organisation_uuid: ORGANISATION_UUID, workspace_uuid: WORKSPACE_UUID } = decodedToken;
-  if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
-    return null;
-  }
-  try {
-    const response = await fetch(
-      `${ledgerBaseUrl}/public/organisations/${ORGANISATION_UUID}/workspaces/${WORKSPACE_UUID}/notices/${noticeUuid}/check-consent`,
-      {
-        method: "POST",
-        headers: {
-          Authorization: `Bearer ${accessToken}`,
-          "Content-Type": "application/json"
-        },
-        body: "{}",
-        signal
-      }
-    );
-    if (!response.ok) {
-      return null;
-    }
-    const data = await response.json();
-    const body = data && typeof data === "object" && "detail" in data && data.detail ? data.detail : data;
-    if (!body || !Array.isArray(body.purposes)) {
-      return null;
-    }
-    return body;
-  } catch {
-    return null;
-  }
-};
-var buildLedgerConsentOverlay = (status, configPurposes) => {
-  var _a, _b;
-  const byUuid = new Map(status.purposes.map((p) => [p.uuid, p]));
-  const hasHistory = status.purposes.some(
-    (p) => (p.status || "INACTIVE") !== "INACTIVE"
-  );
-  if (!hasHistory) {
-    return null;
-  }
-  const purpose_selections = {};
-  for (const cp of configPurposes) {
-    const lp = byUuid.get(cp.uuid);
-    const purposeStatus = (lp == null ? void 0 : lp.status) || "INACTIVE";
-    const selectedByUuid = new Map(
-      ((lp == null ? void 0 : lp.data_elements) || []).map((de) => [de.uuid, de.selected])
-    );
-    const data_elements = {};
-    for (const de of cp.data_elements) {
-      data_elements[de.uuid] = {
-        selected: (_a = selectedByUuid.get(de.uuid)) != null ? _a : false,
-        enabled: de.enabled,
-        required: de.required
-      };
-    }
-    purpose_selections[cp.uuid] = {
-      selected: (_b = lp == null ? void 0 : lp.selected) != null ? _b : false,
-      status: purposeStatus,
-      needs_reconsent: purposeStatus !== "ACTIVE",
-      data_elements
-    };
-  }
-  const reconsent_required = configPurposes.some(
-    (cp) => {
-      var _a2;
-      return (((_a2 = purpose_selections[cp.uuid]) == null ? void 0 : _a2.status) || "INACTIVE") !== "ACTIVE";
-    }
-  );
-  return { reconsent_required, purpose_selections };
-};
 var fetchTTSAudioUrls = async ({
   accessToken,
   baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   language,
-  signal
+  signal,
+  ...sandboxParams
 }) => {
-  if (!accessToken || !noticeUuid || !language) {
-    throw new Error("accessToken, noticeUuid, and language are required");
-  }
-  const decodedToken = decodeTokenSafely(accessToken);
-  if (!decodedToken) {
-    throw new Error("Invalid access token");
+  if (!accessToken && !sandboxParams.token || !noticeUuid || !language) {
+    throw new Error("accessToken (or token), noticeUuid, and language are required");
   }
-  const { organisation_uuid: ORGANISATION_UUID, workspace_uuid: WORKSPACE_UUID } = decodedToken;
-  if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
-    throw new Error("Invalid token: missing organization or workspace UUID");
+  const { organisationUuid: ORGANISATION_UUID, workspaceUuid: WORKSPACE_UUID, sandbox } = resolveRequestAuth(accessToken, sandboxParams, decodeTokenSafely);
+  const apiBaseUrl = (sandbox ? null : ledgerBaseUrl) || baseUrl || BASE_URL;
+  const url = new URL(
+    `${apiBaseUrl}/public/organisations/${ORGANISATION_UUID}/workspaces/${WORKSPACE_UUID}/notices/${noticeUuid}/audio/${language}`
+  );
+  if (sandbox) {
+    for (const [key, value] of Object.entries(sandboxQueryIdentity(sandbox))) {
+      url.searchParams.append(key, value);
+    }
   }
-  const apiBaseUrl = baseUrl || BASE_URL;
-  const url = `${apiBaseUrl}/public/organisations/${ORGANISATION_UUID}/workspaces/${WORKSPACE_UUID}/notices/${noticeUuid}/audio/${language}`;
-  const response = await fetch(url, {
+  const response = await fetch(url.toString(), {
     method: "GET",
     headers: {
-      Authorization: `Bearer ${accessToken}`,
+      ...buildAuthHeaders(accessToken, sandbox),
       Accept: "application/json"
     },
     signal
@@ -370,7 +427,10 @@ var initiateGuardianVerification = async ({
     if (!decodedToken) {
       throw new Error("Invalid access token");
     }
-    const { organisation_uuid: ORGANISATION_UUID, workspace_uuid: WORKSPACE_UUID } = decodedToken;
+    const {
+      organisation_uuid: ORGANISATION_UUID,
+      workspace_uuid: WORKSPACE_UUID
+    } = decodedToken;
     if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
       throw new Error("Invalid token: missing organization or workspace UUID");
     }
@@ -444,7 +504,10 @@ var verifyGuardianStatus = async ({
   if (!decodedToken) {
     throw new Error("Invalid access token");
   }
-  const { organisation_uuid: ORGANISATION_UUID, workspace_uuid: WORKSPACE_UUID } = decodedToken;
+  const {
+    organisation_uuid: ORGANISATION_UUID,
+    workspace_uuid: WORKSPACE_UUID
+  } = decodedToken;
   if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
     throw new Error("Invalid token: missing organization or workspace UUID");
   }
@@ -457,9 +520,7 @@ var verifyGuardianStatus = async ({
         Authorization: `Bearer ${accessToken}`,
         "Content-Type": "application/json"
       },
-      body: JSON.stringify({
-        session_token: sessionToken
-      }),
+      body: JSON.stringify({ session_token: sessionToken }),
       signal
     }
   );
@@ -502,7 +563,6 @@ var LANGUAGE_NATIVE_LABELS = {
   English: "English",
   Assamese: "\u0985\u09B8\u09AE\u09C0\u09AF\u09BC\u09BE (Assamese)",
   Bengali: "\u09AC\u09BE\u0982\u09B2\u09BE (Bengali)",
-  Bhojpuri: "\u092D\u094B\u091C\u092A\u0941\u0930\u0940 (Bhojpuri)",
   Bodo: "\u092C\u0921\u093C\u094B (Bodo)",
   Dogri: "\u0921\u094B\u0917\u0930\u0940 (Dogri)",
   Gujarati: "\u0A97\u0AC1\u0A9C\u0AB0\u0ABE\u0AA4\u0AC0 (Gujarati)",
@@ -532,7 +592,6 @@ var LANGUAGE_NAME_TO_BCP47 = {
   English: "en",
   Assamese: "as",
   Bengali: "bn",
-  Bhojpuri: "bho",
   Bodo: "brx",
   Dogri: "doi",
   Gujarati: "gu",
@@ -2323,6 +2382,12 @@ var RedactoNoticeConsent = ({
   noticeId,
   accessToken,
   refreshToken,
+  token,
+  email,
+  mobile,
+  ucic,
+  organisationUuid,
+  workspaceUuid,
   baseUrl,
   ledgerBaseUrl,
   language = "en",
@@ -2341,15 +2406,43 @@ var RedactoNoticeConsent = ({
   reviewModeButtonText = "Continue"
 }) => {
   var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q;
+  const sandboxParams = useMemo(
+    () => ({
+      token,
+      sandboxUcic: ucic,
+      sandboxSubject: email || mobile,
+      organisationUuid,
+      workspaceUuid
+    }),
+    [token, ucic, email, mobile, organisationUuid, workspaceUuid]
+  );
   const propValidationError = useMemo(() => {
     if (!(noticeId == null ? void 0 : noticeId.trim())) {
       return "RedactoNoticeConsent: 'noticeId' prop is required and cannot be empty";
     }
+    if (token == null ? void 0 : token.trim()) {
+      if (!(organisationUuid == null ? void 0 : organisationUuid.trim()) || !(workspaceUuid == null ? void 0 : workspaceUuid.trim())) {
+        return "RedactoNoticeConsent: sandbox mode requires 'organisationUuid' and 'workspaceUuid'";
+      }
+      if (!(email == null ? void 0 : email.trim()) && !(mobile == null ? void 0 : mobile.trim()) && !(ucic == null ? void 0 : ucic.trim())) {
+        return "RedactoNoticeConsent: sandbox mode requires 'email', 'mobile', or 'ucic'";
+      }
+      return null;
+    }
     if (!(accessToken == null ? void 0 : accessToken.trim())) {
       return "RedactoNoticeConsent: 'accessToken' prop is required and cannot be empty";
     }
     return null;
-  }, [noticeId, accessToken]);
+  }, [
+    noticeId,
+    accessToken,
+    token,
+    organisationUuid,
+    workspaceUuid,
+    email,
+    mobile,
+    ucic
+  ]);
   if (propValidationError) {
     return /* @__PURE__ */ jsxs(
       "div",
@@ -2679,7 +2772,7 @@ var RedactoNoticeConsent = ({
     return content.dpo_info[key] || defaultText;
   };
   const fetchNotice = async () => {
-    var _a2, _b2, _c2;
+    var _a2;
     if (isRequestInProgressRef.current) {
       return;
     }
@@ -2693,16 +2786,18 @@ var RedactoNoticeConsent = ({
     setShowAgeVerification(false);
     setShowGuardianForm(false);
     try {
+      const noticeBaseUrl = ledgerBaseUrl && !applicationId && !token ? ledgerBaseUrl : baseUrl;
       const consentContentData = await fetchConsentContent({
         noticeId,
         accessToken,
         refreshToken,
-        baseUrl,
+        baseUrl: noticeBaseUrl,
         language,
         specific_uuid: applicationId,
         validate_against: validateAgainst,
         include_fully_consented_data: includeFullyConsentedData,
-        signal: (_a2 = abortControllerRef.current) == null ? void 0 : _a2.signal
+        signal: (_a2 = abortControllerRef.current) == null ? void 0 : _a2.signal,
+        ...sandboxParams
       });
       const activeConfig = consentContentData.detail.active_config;
       setContent(activeConfig);
@@ -2720,24 +2815,8 @@ var RedactoNoticeConsent = ({
         {}
       );
       setCollapsedPurposes(initialCollapsedState);
-      let isReconsentRequired = consentContentData.detail.reconsent_required;
-      let purposeSelections = consentContentData.detail.purpose_selections;
-      if (ledgerBaseUrl && !applicationId) {
-        const ledgerStatus = await fetchNoticeConsentStatus({
-          accessToken,
-          ledgerBaseUrl,
-          noticeUuid: noticeId,
-          signal: (_b2 = abortControllerRef.current) == null ? void 0 : _b2.signal
-        });
-        if (ledgerStatus) {
-          const overlay = buildLedgerConsentOverlay(
-            ledgerStatus,
-            activeConfig.purposes
-          );
-          isReconsentRequired = (_c2 = overlay == null ? void 0 : overlay.reconsent_required) != null ? _c2 : false;
-          purposeSelections = overlay == null ? void 0 : overlay.purpose_selections;
-        }
-      }
+      const isReconsentRequired = consentContentData.detail.reconsent_required;
+      const purposeSelections = consentContentData.detail.purpose_selections;
       const newCategorizedPurposes = isReconsentRequired ? {
         alreadyConsented: activeConfig.purposes.filter(
           (purpose) => {
@@ -2768,9 +2847,9 @@ var RedactoNoticeConsent = ({
       const initialDataElementState = activeConfig.purposes.reduce(
         (acc, purpose) => {
           purpose.data_elements.forEach((element) => {
-            var _a3, _b3;
+            var _a3, _b2;
             const combinedId = `${purpose.uuid}-${element.uuid}`;
-            if ((_b3 = (_a3 = purposeSelections == null ? void 0 : purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b3[element.uuid]) {
+            if ((_b2 = (_a3 = purposeSelections == null ? void 0 : purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b2[element.uuid]) {
               acc[combinedId] = purposeSelections[purpose.uuid].data_elements[element.uuid].selected;
             } else {
               acc[combinedId] = false;
@@ -2786,9 +2865,9 @@ var RedactoNoticeConsent = ({
         const initialSelections = {};
         newCategorizedPurposes.alreadyConsented.forEach((purpose) => {
           purpose.data_elements.forEach((element) => {
-            var _a3, _b3;
+            var _a3, _b2;
             const combinedId = `${purpose.uuid}-${element.uuid}`;
-            if ((_b3 = (_a3 = purposeSelections == null ? void 0 : purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b3[element.uuid]) {
+            if ((_b2 = (_a3 = purposeSelections == null ? void 0 : purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b2[element.uuid]) {
               initialSelections[combinedId] = purposeSelections[purpose.uuid].data_elements[element.uuid].selected;
             } else {
               initialSelections[combinedId] = false;
@@ -2809,9 +2888,9 @@ var RedactoNoticeConsent = ({
           activeConfig.purposes.forEach(
             (purpose) => {
               purpose.data_elements.forEach((element) => {
-                var _a3, _b3;
+                var _a3, _b2;
                 const combinedId = `${purpose.uuid}-${element.uuid}`;
-                if ((_b3 = (_a3 = purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b3[element.uuid]) {
+                if ((_b2 = (_a3 = purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b2[element.uuid]) {
                   initialSelections[combinedId] = purposeSelections[purpose.uuid].data_elements[element.uuid].selected;
                 } else {
                   initialSelections[combinedId] = false;
@@ -2859,8 +2938,10 @@ var RedactoNoticeConsent = ({
     noticeId,
     accessToken,
     refreshToken,
+    sandboxParams,
     language,
     applicationId,
+    ledgerBaseUrl,
     validateAgainst,
     includeFullyConsentedData
     // Removed onError and isRefreshingToken from dependencies to prevent duplicate API calls
@@ -2975,7 +3056,8 @@ var RedactoNoticeConsent = ({
           meta_data: applicationId ? { specific_uuid: applicationId } : void 0,
           guardianVerificationReference: verificationReference || void 0,
           selfDeclaredAdult: selfDeclaredAdult || void 0,
-          signal: submitController.signal
+          signal: submitController.signal,
+          ...sandboxParams
         });
       }
       onAccept == null ? void 0 : onAccept();
@@ -3158,7 +3240,7 @@ var RedactoNoticeConsent = ({
     } finally {
       setIsSubmittingGuardian(false);
     }
-  }, [accessToken, baseUrl, guardianFormData, digilockerMode, digilockerCallbackUrl, selectedPurposes, selectedDataElements, noticeId, onError]);
+  }, [accessToken, sandboxParams, baseUrl, guardianFormData, digilockerMode, digilockerCallbackUrl, selectedPurposes, selectedDataElements, noticeId, onError]);
   const handleAgeVerificationYes = useCallback(() => {
     setShowAgeVerification(false);
     setIsMinorFlow(false);
@@ -3215,7 +3297,7 @@ var RedactoNoticeConsent = ({
     setIsPollingStatus(false);
     isPollingStatusRef.current = false;
     setIsInitiatingVerification(false);
-  }, [accessToken, baseUrl]);
+  }, [accessToken, sandboxParams, baseUrl]);
   const startPopupMonitoring = useCallback((popup) => {
     popupCheckIntervalRef.current = window.setInterval(() => {
       if (popup.closed) {
@@ -3243,8 +3325,8 @@ var RedactoNoticeConsent = ({
     []
   );
   const startStatusPolling = useCallback(
-    (token) => {
-      verificationSessionTokenRef.current = token;
+    (token2) => {
+      verificationSessionTokenRef.current = token2;
       setIsPollingStatus(true);
       isPollingStatusRef.current = true;
       setVerificationError(null);
@@ -3296,7 +3378,7 @@ var RedactoNoticeConsent = ({
           const response = await verifyGuardianStatus({
             accessToken,
             baseUrl,
-            sessionToken: token
+            sessionToken: token2
           });
           consecutiveErrors = 0;
           if (response.status === "verified") {
@@ -3366,7 +3448,7 @@ var RedactoNoticeConsent = ({
       };
       statusPollIntervalRef.current = window.setTimeout(poll, POLL_INTERVAL);
     },
-    [accessToken, baseUrl, getVerificationErrorMessage]
+    [accessToken, sandboxParams, baseUrl, getVerificationErrorMessage]
   );
   const handleBackToGuardianForm = useCallback((clearName = false) => {
     var _a2, _b2;
@@ -3706,9 +3788,11 @@ var RedactoNoticeConsent = ({
     fetchTTSAudioUrls({
       accessToken,
       baseUrl,
+      ledgerBaseUrl,
       noticeUuid: content.notice_uuid,
       language: languageCode,
-      signal: ttsAbortController.signal
+      signal: ttsAbortController.signal,
+      ...sandboxParams
     }).then((response) => {
       setTtsAudioUrls(response.detail);
       setIsTTSAvailable(true);
@@ -3721,7 +3805,7 @@ var RedactoNoticeConsent = ({
     return () => {
       ttsAbortController.abort();
     };
-  }, [content, selectedLanguage, accessToken, baseUrl, getLanguageCode]);
+  }, [content, selectedLanguage, accessToken, sandboxParams, baseUrl, ledgerBaseUrl, getLanguageCode]);
   const modalStyle = {
     borderRadius: (settings == null ? void 0 : settings.borderRadius) || "8px",
     backgroundColor: (settings == null ? void 0 : settings.backgroundColor) || "#ffffff"
@@ -4695,12 +4779,16 @@ var fetchConsentContent2 = async ({
   org_uuid,
   workspace_uuid,
   notice_uuid,
+  accessToken,
   baseUrl,
-  specific_uuid
+  language,
+  specific_uuid,
+  signal
 }) => {
   const apiBaseUrl = baseUrl || BASE_URL2;
+  const noticesUrl = `${apiBaseUrl}/public/organisations/${org_uuid}/workspaces/${workspace_uuid}/notices`;
   const url = new URL(
-    `${apiBaseUrl}/public/organisations/${org_uuid}/workspaces/${workspace_uuid}/notices/get-notice/${notice_uuid}`
+    accessToken ? `${noticesUrl}/${notice_uuid}` : `${noticesUrl}/get-notice/${notice_uuid}`
   );
   if (specific_uuid) {
     url.searchParams.append("specific_uuid", specific_uuid);
@@ -4708,8 +4796,11 @@ var fetchConsentContent2 = async ({
   const response = await fetch(url.toString(), {
     method: "GET",
     headers: {
-      "Content-Type": "application/json"
-    }
+      "Content-Type": "application/json",
+      "Accept-Language": language || "en",
+      ...accessToken ? { Authorization: `Bearer ${accessToken}` } : {}
+    },
+    signal
   });
   if (!response.ok) {
     throw await parseApiError(
@@ -5199,6 +5290,9 @@ var RedactoConsentInlineComponent = ({
   const [selectedPurposes, setSelectedPurposes] = useState3({});
   const [selectedDataElements, setSelectedDataElements] = useState3({});
   const [hasAlreadyConsented, setHasAlreadyConsented] = useState3(false);
+  const [isCheckingConsent, setIsCheckingConsent] = useState3(
+    Boolean(ledgerBaseUrl) && !applicationId
+  );
   const [fetchError, setFetchError] = useState3(null);
   const [errorMessage, setErrorMessage] = useState3(null);
   const hasSubmittedRef = useRef2(false);
@@ -5280,18 +5374,24 @@ var RedactoConsentInlineComponent = ({
     }
     return defaultText;
   };
-  const fetchNotice = async () => {
+  const fetchNotice = async (signal) => {
     setIsLoading(true);
     setFetchError(null);
+    setHasAlreadyConsented(false);
     try {
       const consentContentData = await fetchConsentContent2({
         org_uuid,
         workspace_uuid,
         notice_uuid,
+        accessToken,
         baseUrl,
         language,
-        specific_uuid: applicationId
+        specific_uuid: applicationId,
+        signal
       });
+      if (signal == null ? void 0 : signal.aborted) {
+        return;
+      }
       const activeConfig = consentContentData.detail.active_config;
       setContent(activeConfig);
       if (activeConfig.default_language) {
@@ -5327,6 +5427,9 @@ var RedactoConsentInlineComponent = ({
       );
       setSelectedPurposes(initialPurposeState);
     } catch (err) {
+      if ((signal == null ? void 0 : signal.aborted) || err instanceof Error && err.name === "AbortError") {
+        return;
+      }
       const error = err;
       setFetchError(error);
       if (error.status === 409) {
@@ -5335,12 +5438,50 @@ var RedactoConsentInlineComponent = ({
         onError == null ? void 0 : onError(error);
       }
     } finally {
-      setIsLoading(false);
+      if (!(signal == null ? void 0 : signal.aborted)) {
+        setIsLoading(false);
+      }
     }
   };
   useEffect3(() => {
-    fetchNotice();
-  }, [org_uuid, workspace_uuid, notice_uuid, language, applicationId]);
+    const controller = new AbortController();
+    void fetchNotice(controller.signal);
+    return () => {
+      controller.abort();
+    };
+  }, [org_uuid, workspace_uuid, notice_uuid, language, applicationId, accessToken]);
+  useEffect3(() => {
+    if (!ledgerBaseUrl || applicationId) {
+      return;
+    }
+    if (!accessToken || !content) {
+      return;
+    }
+    let active = true;
+    const controller = new AbortController();
+    const checkLedgerConsent = async () => {
+      try {
+        const ledgerStatus = await fetchNoticeConsentStatus({
+          accessToken,
+          ledgerBaseUrl,
+          noticeUuid: notice_uuid,
+          signal: controller.signal
+        });
+        if (active && ledgerStatus && isNoticeFullyConsented(ledgerStatus)) {
+          setHasAlreadyConsented(true);
+        }
+      } finally {
+        if (active) {
+          setIsCheckingConsent(false);
+        }
+      }
+    };
+    checkLedgerConsent();
+    return () => {
+      active = false;
+      controller.abort();
+    };
+  }, [ledgerBaseUrl, applicationId, accessToken, content, notice_uuid]);
   const togglePurposeCollapse = (purposeUuid) => {
     setCollapsedPurposes((prev) => ({
       ...prev,
@@ -5464,7 +5605,7 @@ var RedactoConsentInlineComponent = ({
     ]
   );
   useEffect3(() => {
-    if (accessToken && content && areAllRequiredElementsChecked && !isSubmitting && !hasSubmittedRef.current) {
+    if (accessToken && content && areAllRequiredElementsChecked && !isSubmitting && !isCheckingConsent && !hasAlreadyConsented && !hasSubmittedRef.current) {
       hasSubmittedRef.current = true;
       const autoSubmit = async () => {
         try {
@@ -5481,6 +5622,8 @@ var RedactoConsentInlineComponent = ({
     content,
     areAllRequiredElementsChecked,
     isSubmitting,
+    isCheckingConsent,
+    hasAlreadyConsented,
     handleAcceptWithToken
   ]);
   useEffect3(() => {
@@ -6741,6 +6884,7 @@ var submitAssistedConsent = async ({
   organisationUuid,
   workspaceUuid,
   baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   purposes,
   language,
@@ -6771,7 +6915,7 @@ var submitAssistedConsent = async ({
     declined: false,
     language: language || void 0
   };
-  const url = `${publicScope(baseUrl, organisationUuid, workspaceUuid)}/submit-consent`;
+  const url = `${publicScope(ledgerBaseUrl || baseUrl, organisationUuid, workspaceUuid)}/submit-consent`;
   const response = await fetch(url, {
     method: "POST",
     headers: {
@@ -7898,57 +8042,6 @@ var as = {
   tryAgain: "\u0985\u09A8\u09C1\u0997\u09CD\u09F0\u09B9 \u0995\u09F0\u09BF \u09AA\u09C1\u09A8\u09F0 \u099A\u09C7\u09B7\u09CD\u099F\u09BE \u0995\u09F0\u0995\u0964",
   close: "\u09AC\u09A8\u09CD\u09A7 \u0995\u09F0\u0995"
 };
-var bho = {
-  useEmailInstead: "\u0908\u092E\u0947\u0932 \u0907\u0938\u094D\u0924\u0947\u092E\u093E\u0932 \u0915\u0930\u0940\u0902",
-  useMobileInstead: "\u092E\u094B\u092C\u093E\u0907\u0932 \u0907\u0938\u094D\u0924\u0947\u092E\u093E\u0932 \u0915\u0930\u0940\u0902",
-  emailAddress: "\u0908\u092E\u0947\u0932 \u092A\u0924\u093E",
-  otpHelperEmail: "\u0939\u092E\u0928\u0940 \u090F\u0939 \u0908\u092E\u0947\u0932 \u092A\u0930 \u090F\u0915 \u092C\u0947\u0930 \u0907\u0938\u094D\u0924\u0947\u092E\u093E\u0932 \u0939\u094B\u0916\u0947 \u0935\u093E\u0932\u093E \u092A\u093E\u0938\u0935\u0930\u094D\u0921 \u092D\u0947\u091C\u092C\u0964",
-  changeEmail: "\u0908\u092E\u0947\u0932 \u092C\u0926\u0932\u0940\u0902",
-  expandDetails: "{name} \u0915\u0947 \u0935\u093F\u0935\u0930\u0923 \u092B\u0948\u0932\u093E\u0908\u0902",
-  collapseDetails: "{name} \u0915\u0947 \u0935\u093F\u0935\u0930\u0923 \u0938\u092E\u0947\u091F\u0940\u0902",
-  selectAllFor: "{name} \u0916\u093E\u0924\u093F\u0930 \u0938\u092D \u0921\u0947\u091F\u093E \u0924\u0924\u094D\u0935 \u091A\u0941\u0928\u0940\u0902",
-  selectElement: "{name} \u091A\u0941\u0928\u0940\u0902",
-  selectElementRequired: "{name} \u091A\u0941\u0928\u0940\u0902 (\u091C\u0930\u0942\u0930\u0940)",
-  required: "\u091C\u0930\u0942\u0930\u0940",
-  logoAlt: "\u0932\u094B\u0917\u094B",
-  selectLanguage: "\u092D\u093E\u0937\u093E \u091A\u0941\u0928\u0940\u0902",
-  selectLanguageCurrent: "\u092D\u093E\u0937\u093E \u091A\u0941\u0928\u0940\u0902. \u092E\u094C\u091C\u0942\u0926\u093E \u092D\u093E\u0937\u093E: {lang}",
-  opensInNewTab: "\u0928\u092F\u093E \u091F\u0948\u092C \u092E\u0947\u0902 \u0916\u0941\u0932\u0947\u0932\u093E",
-  audioStart: "\u0911\u0921\u093F\u092F\u094B \u092A\u094D\u0932\u0947\u092C\u0948\u0915 \u0936\u0941\u0930\u0942 \u0915\u0930\u0940\u0902",
-  audioPause: "\u0911\u0921\u093F\u092F\u094B \u092A\u094D\u0932\u0947\u092C\u0948\u0915 \u0930\u094B\u0915\u0940\u0902",
-  talkbackStart: "\u091F\u0949\u0915\u092C\u0948\u0915 \u0936\u0941\u0930\u0942 \u0915\u0930\u0940\u0902",
-  talkbackPause: "\u091F\u0949\u0915\u092C\u0948\u0915 \u0930\u094B\u0915\u0940\u0902",
-  mobileNumber: "\u092E\u094B\u092C\u093E\u0907\u0932 \u0928\u0902\u092C\u0930",
-  otpHelper: "\u0939\u092E\u0928\u0940 \u090F\u0939 \u0928\u0902\u092C\u0930 \u092A\u0930 \u090F\u0915 \u092C\u0947\u0930 \u0907\u0938\u094D\u0924\u0947\u092E\u093E\u0932 \u0939\u094B\u0916\u0947 \u0935\u093E\u0932\u093E \u092A\u093E\u0938\u0935\u0930\u094D\u0921 \u092D\u0947\u091C\u092C\u0964",
-  otpSentTo: "\u0913\u091F\u0940\u092A\u0940 (OTP) \u092D\u0947\u091C\u0932 \u0917\u0907\u0932",
-  changeMobile: "\u092E\u094B\u092C\u093E\u0907\u0932 \u0928\u0902\u092C\u0930 \u092C\u0926\u0932\u0940\u0902",
-  enterNDigitOtp: "{count}-\u0905\u0902\u0915 \u0915\u0947 \u0913\u091F\u0940\u092A\u0940 (OTP) \u0921\u093E\u0932\u0940\u0902",
-  otpDigit: "\u0913\u091F\u0940\u092A\u0940 (OTP) \u0905\u0902\u0915 {index}",
-  resendIn: "{seconds} \u0938\u0947\u0915\u0902\u0921 \u092E\u0947\u0902 \u0913\u091F\u0940\u092A\u0940 (OTP) \u092B\u0947\u0930 \u0938\u0947 \u092D\u0947\u091C\u0940\u0902",
-  sending: "\u092D\u0947\u091C\u0932 \u091C\u093E \u0930\u0939\u0932 \u092C\u093E\u2026",
-  resendOtp: "\u0913\u091F\u0940\u092A\u0940 (OTP) \u092B\u0947\u0930 \u0938\u0947 \u092D\u0947\u091C\u0940\u0902",
-  getOtp: "\u0913\u091F\u0940\u092A\u0940 (OTP) \u092A\u093E\u0908\u0902",
-  verifying: "\u0938\u0924\u094D\u092F\u093E\u092A\u093F\u0924 \u0915\u0907\u0932 \u091C\u093E \u0930\u0939\u0932 \u092C\u093E\u2026",
-  verifyOtp: "\u0913\u091F\u0940\u092A\u0940 (OTP) \u0938\u0924\u094D\u092F\u093E\u092A\u093F\u0924 \u0915\u0930\u0940\u0902",
-  sendOtp: "\u0913\u091F\u0940\u092A\u0940 (OTP) \u092D\u0947\u091C\u0940\u0902",
-  confirmOtp: "\u0913\u091F\u0940\u092A\u0940 (OTP) \u0915\u0947 \u092A\u0941\u0937\u094D\u091F\u093F \u0915\u0930\u0940\u0902",
-  verifyWithOtp: "\u0913\u091F\u0940\u092A\u0940 (OTP) \u0938\u0947 \u0938\u0924\u094D\u092F\u093E\u092A\u093F\u0924 \u0915\u0930\u0940\u0902",
-  editSelections: "\u091A\u0941\u0928\u093E\u0935 \u092E\u0947\u0902 \u092C\u0926\u0932\u093E\u0935 \u0915\u0930\u0940\u0902",
-  otpIncorrect: "\u0930\u0909\u0930\u093E \u0921\u093E\u0932\u0932 \u0938\u0924\u094D\u092F\u093E\u092A\u0928 \u0915\u094B\u0921 \u0917\u0932\u0924 \u092C\u093E\u0964 \u0915\u0943\u092A\u092F\u093E \u091C\u093E\u0901\u091A \u0915\u0930\u0940\u0902 \u0906 \u092B\u0947\u0930 \u0938\u0947 \u0915\u094B\u0936\u093F\u0936 \u0915\u0930\u0940\u0902\u0964",
-  otpExpired: "\u0930\u0909\u0930\u093E \u0938\u0924\u094D\u092F\u093E\u092A\u0928 \u0915\u094B\u0921 \u0915\u0947 \u092E\u093F\u092F\u093E\u0926 \u0916\u0924\u092E \u0939\u094B \u0917\u0907\u0932 \u092C\u093E\u0964 \u0915\u0943\u092A\u092F\u093E \u0928\u092F\u093E \u0915\u094B\u0921 \u092E\u093E\u0902\u0917\u0940\u0902\u0964",
-  otpNotFound: "\u0938\u0924\u094D\u092F\u093E\u092A\u0928 \u0915\u094B\u0921 \u0928\u093E \u092E\u093F\u0932\u0932\u0964 \u0915\u0943\u092A\u092F\u093E \u0928\u092F\u093E \u0915\u094B\u0921 \u092E\u093E\u0902\u0917\u0940\u0902\u0964",
-  otpVerifyFailed: "\u0913\u091F\u0940\u092A\u0940 (OTP) \u0915\u0947 \u0938\u0924\u094D\u092F\u093E\u092A\u0928 \u0928\u093E \u0939\u094B \u0938\u0915\u0932\u0964 \u0915\u0943\u092A\u092F\u093E \u092B\u0947\u0930 \u0938\u0947 \u0915\u094B\u0936\u093F\u0936 \u0915\u0930\u0940\u0902\u0964",
-  otpSendFailed: "\u0913\u091F\u0940\u092A\u0940 (OTP) \u0928\u093E \u092D\u0947\u091C\u0932 \u091C\u093E \u0938\u0915\u0932\u0964 \u0915\u0943\u092A\u092F\u093E \u092B\u0947\u0930 \u0938\u0947 \u0915\u094B\u0936\u093F\u0936 \u0915\u0930\u0940\u0902\u0964",
-  consentConfirmed: "\u0938\u0939\u092E\u0924\u093F \u0915\u0947 \u092A\u0941\u0937\u094D\u091F\u093F \u092D\u0907\u0932",
-  recordedUnder: "\u0913\u091F\u0940\u092A\u0940 (OTP) \u0938\u0924\u094D\u092F\u093E\u092A\u093F\u0924 \xB7 {regulation} \u0915\u0947 \u0924\u0939\u0924 \u0926\u0930\u094D\u091C \u092D\u0907\u0932",
-  recordedUnderAt: "\u0913\u091F\u0940\u092A\u0940 (OTP) \u0938\u0924\u094D\u092F\u093E\u092A\u093F\u0924 \xB7 {regulation} \u0915\u0947 \u0924\u0939\u0924 {time} \u092C\u091C\u0947 \u0926\u0930\u094D\u091C \u092D\u0907\u0932",
-  consentReferenceId: "\u0938\u0939\u092E\u0924\u093F \u0938\u0902\u0926\u0930\u094D\u092D \u0906\u0908\u0921\u0940",
-  proceed: "\u0906\u0917\u0947 \u092C\u0922\u093C\u0940\u0902",
-  loadingNotice: "\u0928\u094B\u091F\u093F\u0938 \u0932\u094B\u0921 \u0939\u094B \u0930\u0939\u0932 \u092C\u093E",
-  loadFailedTitle: "\u0938\u0939\u092E\u0924\u093F \u0928\u094B\u091F\u093F\u0938 \u0932\u094B\u0921 \u0928\u093E \u0939\u094B \u0938\u0915\u0932",
-  tryAgain: "\u0915\u0943\u092A\u092F\u093E \u092B\u0947\u0930 \u0938\u0947 \u0915\u094B\u0938\u093F\u0938 \u0915\u0930\u0940\u0902\u0964",
-  close: "\u092C\u0902\u0926 \u0915\u0930\u0940\u0902"
-};
 var brx = {
   useEmailInstead: "\u0907\u092E\u0947\u0932 \u092C\u093E\u0939\u093E\u092F",
   useMobileInstead: "\u092E\u092C\u093E\u0907\u0932 \u092C\u093E\u0939\u093E\u092F",
@@ -8073,7 +8166,6 @@ var STATIC_STRINGS = {
   te,
   ur,
   as,
-  bho,
   brx,
   doi
 };
@@ -8258,6 +8350,7 @@ var RedactoNoticeAssisted = ({
   workspaceUuid,
   noticeUuid,
   baseUrl,
+  ledgerBaseUrl,
   onDecline,
   onComplete
 }) => {
@@ -8993,6 +9086,19 @@ var RedactoNoticeAssisted = ({
         return;
       }
       const token = verifyDetail.access_token;
+      if (ledgerBaseUrl) {
+        const ledgerStatus = await fetchNoticeConsentStatusForScope({
+          accessToken: token,
+          ledgerBaseUrl,
+          organisationUuid,
+          workspaceUuid,
+          noticeUuid: content.notice_uuid
+        });
+        if (ledgerStatus && isNoticeFullyConsented(ledgerStatus)) {
+          handleSuccess();
+          return;
+        }
+      }
       const submitPurposes = content.purposes.map((purpose) => ({
         ...purpose,
         selected: selectedPurposes[purpose.uuid] || false,
@@ -9006,6 +9112,7 @@ var RedactoNoticeAssisted = ({
         organisationUuid,
         workspaceUuid,
         baseUrl,
+        ledgerBaseUrl,
         noticeUuid: content.notice_uuid,
         purposes: submitPurposes,
         language: toBcp47Code(selectedLanguage)
@@ -9029,6 +9136,7 @@ var RedactoNoticeAssisted = ({
     otpUuid,
     otpValue,
     baseUrl,
+    ledgerBaseUrl,
     selectedPurposes,
     selectedDataElements,
     selectedLanguage,