@redacto.io/consent-sdk-react 10.0.0-beta.1 → 10.0.0-beta.11

package/dist/privacy-center.d.mts

@@ -114,7 +114,7 @@ declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
     manageConsent(baseRequest: BaseRequest, purposeId: string, contact: string, status: "revoke" | "regrant" | "renew", authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">, nominatorContact?: string, dataElementUuids?: string[], productUuid?: string, noticeUuid?: string, dataElements?: Array<{
         uuid: string;
         selected: boolean;
-    }>): Promise<unknown>;
+    }>, language?: string): Promise<unknown>;
     /**
      * Get activities (privacy center)
      */
@@ -382,6 +382,7 @@ type NominatorInfo = {
 };
 type PurposeItem = {
     purpose_uuid: string;
+    uuid?: string;
     name: string;
     description: string | null;
     status: ConsentStatusEnum | string;
@@ -390,6 +391,7 @@ type PurposeItem = {
     method: string;
     data_elements: ConsentDataElement[];
     link_reason: string | null;
+    revoke_warning_message?: string | null;
     notice_uuid: string | null;
 };
 type ConsentGroup = {
@@ -659,13 +661,36 @@ interface RedactoPrivacyCenterProps {
     baseUrl: string;
     ledgerBaseUrl?: string;
     slug: string;
-    accessToken: string;
-    refreshToken: string;
+    /** JWT access token. Optional so sandbox mode (see `token`) can omit it. */
+    accessToken?: string;
+    /** JWT refresh token. Optional; used by the OTP-refresh loop in the JWT flow. */
+    refreshToken?: string;
+    /**
+     * Sandbox PoC: a pasted static token. When set, the Privacy Center runs
+     * against the sandbox with no JWT — it sends the single `X-Consent-Token`
+     * header, carries the acting identity (`email` || `mobile`) in each request's
+     * own payload, takes org/workspace from `organisationUuid`/`workspaceUuid`,
+     * and never calls `/otp/refresh`.
+     */
+    token?: string;
+    /** Sandbox test subject email (carried in the request payload when set). */
+    email?: string;
+    /** Sandbox test subject mobile (fallback subject when `email` is absent). */
+    mobile?: string;
+    /**
+     * Sandbox UCIC: the client's own user id / org_user_id, e.g. a UUID or
+     * customer code; optional third identifier alongside email/mobile.
+     */
+    ucic?: string;
+    /** Sandbox org UUID (replaces the JWT-decoded org in sandbox mode). */
+    organisationUuid?: string;
+    /** Sandbox workspace UUID (replaces the JWT-decoded workspace in sandbox mode). */
+    workspaceUuid?: string;
     onError: (error: Error) => boolean;
     initialPage?: InternalPage;
     onBack?: 'back' | 'signout';
 }
-declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react.JSX.Element;
+declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, token, email, mobile, ucic, organisationUuid, workspaceUuid, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react.JSX.Element;
 
 interface PrivacyCenterLayoutProps {
     children: ReactNode;
@@ -686,6 +711,29 @@ declare const PrivacyCenterCaseDetailsPage: () => react.JSX.Element | null;
 
 declare const NotificationsPage: () => react.JSX.Element;
 
+type AuthProviderProps = Readonly<{
+    children: ReactNode;
+    accessToken?: string;
+    refreshToken?: string;
+    /**
+     * Sandbox PoC: when set, the Privacy Center skips the JWT entirely — it seeds
+     * org/workspace/subject from the props below, sends the single
+     * `X-Consent-Token` header, carries the acting identity in each request's own
+     * payload, and never calls `/otp/refresh`.
+     */
+    token?: string;
+    /** Sandbox UCIC — the client's own user id (`org_user_id`); takes precedence over the subject. */
+    sandboxUcic?: string;
+    /** Sandbox subject (email or mobile) — carried in the request payload. */
+    sandboxSubject?: string;
+    /** Sandbox org UUID (replaces the JWT-decoded org). */
+    organisationUuid?: string;
+    /** Sandbox workspace UUID (replaces the JWT-decoded workspace). */
+    workspaceUuid?: string;
+    /** Organisation slug — used to seed sandbox sessionStorage. */
+    slug?: string;
+    onError: (error: Error) => boolean;
+}>;
 type AuthContextValue = Readonly<{
     accessToken: string;
     refreshToken: string;
@@ -853,7 +901,7 @@ type FetchGroupPurposesParams = {
     consentClient?: BaseUrlContextValue['consentClient'];
 };
 declare const fetchGroupPurposes: (params: FetchGroupPurposesParams) => Promise<GroupPurposesOut | null>;
-declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements, }: {
+declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements, language, }: {
     organizationId: string;
     workspaceId: string;
     purposeId: string;
@@ -869,19 +917,14 @@ declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact,
         uuid: string;
         selected: boolean;
     }>;
+    language?: string;
 }) => Promise<boolean | null>;
 declare const fetchActivities: (organizationId: string, workspaceId: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<ActivityDetail | null>;
 declare const fetchCaseHistory: (organizationId: string, workspaceId: string, contact: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<CaseHistoryDetail | null>;
 
 declare const useCaseHistory: (organizationId: string | undefined, workspaceId: string | undefined, contact: string | undefined, authContext?: AuthContext) => _tanstack_react_query.UseQueryResult<NoInfer<CaseRequest[]>, Error>;
 
-interface AuthProviderProps {
-    children: ReactNode;
-    accessToken: string;
-    refreshToken: string;
-    onError: (error: Error) => boolean;
-}
-declare const AuthProvider: ({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError, }: AuthProviderProps) => react.JSX.Element;
+declare const AuthProvider: (props: AuthProviderProps) => react.JSX.Element;
 declare const useAuth: () => AuthContextValue;
 
 /**

package/dist/privacy-center.d.ts

@@ -114,7 +114,7 @@ declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
     manageConsent(baseRequest: BaseRequest, purposeId: string, contact: string, status: "revoke" | "regrant" | "renew", authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">, nominatorContact?: string, dataElementUuids?: string[], productUuid?: string, noticeUuid?: string, dataElements?: Array<{
         uuid: string;
         selected: boolean;
-    }>): Promise<unknown>;
+    }>, language?: string): Promise<unknown>;
     /**
      * Get activities (privacy center)
      */
@@ -382,6 +382,7 @@ type NominatorInfo = {
 };
 type PurposeItem = {
     purpose_uuid: string;
+    uuid?: string;
     name: string;
     description: string | null;
     status: ConsentStatusEnum | string;
@@ -390,6 +391,7 @@ type PurposeItem = {
     method: string;
     data_elements: ConsentDataElement[];
     link_reason: string | null;
+    revoke_warning_message?: string | null;
     notice_uuid: string | null;
 };
 type ConsentGroup = {
@@ -659,13 +661,36 @@ interface RedactoPrivacyCenterProps {
     baseUrl: string;
     ledgerBaseUrl?: string;
     slug: string;
-    accessToken: string;
-    refreshToken: string;
+    /** JWT access token. Optional so sandbox mode (see `token`) can omit it. */
+    accessToken?: string;
+    /** JWT refresh token. Optional; used by the OTP-refresh loop in the JWT flow. */
+    refreshToken?: string;
+    /**
+     * Sandbox PoC: a pasted static token. When set, the Privacy Center runs
+     * against the sandbox with no JWT — it sends the single `X-Consent-Token`
+     * header, carries the acting identity (`email` || `mobile`) in each request's
+     * own payload, takes org/workspace from `organisationUuid`/`workspaceUuid`,
+     * and never calls `/otp/refresh`.
+     */
+    token?: string;
+    /** Sandbox test subject email (carried in the request payload when set). */
+    email?: string;
+    /** Sandbox test subject mobile (fallback subject when `email` is absent). */
+    mobile?: string;
+    /**
+     * Sandbox UCIC: the client's own user id / org_user_id, e.g. a UUID or
+     * customer code; optional third identifier alongside email/mobile.
+     */
+    ucic?: string;
+    /** Sandbox org UUID (replaces the JWT-decoded org in sandbox mode). */
+    organisationUuid?: string;
+    /** Sandbox workspace UUID (replaces the JWT-decoded workspace in sandbox mode). */
+    workspaceUuid?: string;
     onError: (error: Error) => boolean;
     initialPage?: InternalPage;
     onBack?: 'back' | 'signout';
 }
-declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react.JSX.Element;
+declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, token, email, mobile, ucic, organisationUuid, workspaceUuid, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react.JSX.Element;
 
 interface PrivacyCenterLayoutProps {
     children: ReactNode;
@@ -686,6 +711,29 @@ declare const PrivacyCenterCaseDetailsPage: () => react.JSX.Element | null;
 
 declare const NotificationsPage: () => react.JSX.Element;
 
+type AuthProviderProps = Readonly<{
+    children: ReactNode;
+    accessToken?: string;
+    refreshToken?: string;
+    /**
+     * Sandbox PoC: when set, the Privacy Center skips the JWT entirely — it seeds
+     * org/workspace/subject from the props below, sends the single
+     * `X-Consent-Token` header, carries the acting identity in each request's own
+     * payload, and never calls `/otp/refresh`.
+     */
+    token?: string;
+    /** Sandbox UCIC — the client's own user id (`org_user_id`); takes precedence over the subject. */
+    sandboxUcic?: string;
+    /** Sandbox subject (email or mobile) — carried in the request payload. */
+    sandboxSubject?: string;
+    /** Sandbox org UUID (replaces the JWT-decoded org). */
+    organisationUuid?: string;
+    /** Sandbox workspace UUID (replaces the JWT-decoded workspace). */
+    workspaceUuid?: string;
+    /** Organisation slug — used to seed sandbox sessionStorage. */
+    slug?: string;
+    onError: (error: Error) => boolean;
+}>;
 type AuthContextValue = Readonly<{
     accessToken: string;
     refreshToken: string;
@@ -853,7 +901,7 @@ type FetchGroupPurposesParams = {
     consentClient?: BaseUrlContextValue['consentClient'];
 };
 declare const fetchGroupPurposes: (params: FetchGroupPurposesParams) => Promise<GroupPurposesOut | null>;
-declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements, }: {
+declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements, language, }: {
     organizationId: string;
     workspaceId: string;
     purposeId: string;
@@ -869,19 +917,14 @@ declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact,
         uuid: string;
         selected: boolean;
     }>;
+    language?: string;
 }) => Promise<boolean | null>;
 declare const fetchActivities: (organizationId: string, workspaceId: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<ActivityDetail | null>;
 declare const fetchCaseHistory: (organizationId: string, workspaceId: string, contact: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<CaseHistoryDetail | null>;
 
 declare const useCaseHistory: (organizationId: string | undefined, workspaceId: string | undefined, contact: string | undefined, authContext?: AuthContext) => _tanstack_react_query.UseQueryResult<NoInfer<CaseRequest[]>, Error>;
 
-interface AuthProviderProps {
-    children: ReactNode;
-    accessToken: string;
-    refreshToken: string;
-    onError: (error: Error) => boolean;
-}
-declare const AuthProvider: ({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError, }: AuthProviderProps) => react.JSX.Element;
+declare const AuthProvider: (props: AuthProviderProps) => react.JSX.Element;
 declare const useAuth: () => AuthContextValue;
 
 /**