@redacto.io/consent-sdk-react 10.0.0-beta.1 → 10.0.0-beta.12

package/tests/ProductSelectionSection.test.tsx

@@ -1,328 +0,0 @@
-import { render, screen, fireEvent } from '@testing-library/react';
-import { describe, it, expect, vi } from 'vitest';
-
-vi.mock('react-i18next', () => {
-  const en: Record<string, string> = {
-    activePurposes_one: '{{count}} purpose',
-    activePurposes_other: '{{count}} purposes',
-    noProductsAvailable: 'No products available',
-    noProductsAvailableDescription: 'You have no consents to manage yet.',
-    nominationChipSuffix: '· {{nominator}}',
-    selectProductsForRequest:
-      'Select a product for your {{requestType}} request',
-    selectProductsForRequestGeneric: 'Select a product to continue',
-  };
-  const interpolate = (template: string, vars?: Record<string, unknown>) =>
-    template.replace(/\{\{(\w+)\}\}/g, (_match, key: string) => {
-      const value = vars?.[key];
-      return value === undefined || value === null ? '' : String(value);
-    });
-  const t = (key: string, opts?: Record<string, unknown>) => {
-    const count = typeof opts?.count === 'number' ? opts.count : undefined;
-    const pluralKey =
-      count !== undefined
-        ? count === 1
-          ? `${key}_one`
-          : `${key}_other`
-        : key;
-    const template = en[pluralKey] ?? en[key] ?? key;
-    return interpolate(template, opts);
-  };
-  return {
-    useTranslation: () => ({ t, i18n: { language: 'en' } }),
-  };
-});
-
-import {
-  ProductSelectionSection,
-  productGroupKey,
-} from '../src/RedactoPrivacyCenter/components/DataRequest/ProductSelectionSection';
-import type {
-  FormProductGroup,
-  NominatorInfo,
-} from '../src/RedactoPrivacyCenter/lib/types';
-
-const makeGroup = (
-  overrides: Partial<FormProductGroup> = {},
-): FormProductGroup => ({
-  product_uuid: 'prod-1',
-  product_name: 'Acme Loyalty',
-  product_description: null,
-  nominator: null,
-  purposes: [],
-  ...overrides,
-});
-
-const makeNominator = (overrides: Partial<NominatorInfo> = {}): NominatorInfo => ({
-  org_user_id: 'org-user-1',
-  name: 'Jane Doe',
-  uuid: 'nom-uuid-1',
-  email: 'jane@example.com',
-  ...overrides,
-});
-
-describe('ProductSelectionSection', () => {
-  it('renders direct groups as pill chips in a wrapping row', () => {
-    const direct = makeGroup({
-      product_uuid: 'prod-direct',
-      product_name: 'Acme Loyalty',
-      purposes: [
-        {
-          uuid: 'p1',
-          data_elements: [{ uuid: 'de1', selected: true }],
-        } as never,
-        {
-          uuid: 'p2',
-          data_elements: [{ uuid: 'de2', selected: true }],
-        } as never,
-      ],
-    });
-    const second = makeGroup({
-      product_uuid: 'prod-direct-2',
-      product_name: 'Acme Rewards',
-    });
-
-    render(
-      <ProductSelectionSection
-        directGroups={[direct, second]}
-        nominatedGroups={[]}
-        selectedProductKey={null}
-        onSelect={vi.fn()}
-      />,
-    );
-
-    expect(screen.getByText('Acme Loyalty')).toBeInTheDocument();
-    expect(screen.getByText('Acme Rewards')).toBeInTheDocument();
-    expect(screen.getByTestId('product-selection-chips')).toHaveClass(
-      'pc-product-select-chips',
-    );
-    expect(screen.getByText('2 purposes')).toBeInTheDocument();
-  });
-
-  it('chip count reflects total raisable purposes regardless of status', () => {
-    // Per TECH-4089, withdrawn purposes still appear in the picker (revoking
-    // consent is not deletion — DP must still be able to raise requests for
-    // them). The chip label is a plain count of raisable purposes — no
-    // active/withdrawn distinction is surfaced in the label.
-    const direct = makeGroup({
-      product_uuid: 'prod-mixed',
-      product_name: 'Acme Loyalty',
-      purposes: [
-        {
-          uuid: 'p-active',
-          data_elements: [{ uuid: 'de-a', selected: true }],
-          status: 'ACTIVE',
-        } as never,
-        {
-          uuid: 'p-withdrawn',
-          data_elements: [{ uuid: 'de-w', selected: false }],
-          status: 'WITHDRAW',
-        } as never,
-      ],
-    });
-
-    render(
-      <ProductSelectionSection
-        directGroups={[direct]}
-        nominatedGroups={[]}
-        selectedProductKey={null}
-        onSelect={vi.fn()}
-      />,
-    );
-
-    expect(screen.getByText('2 purposes')).toBeInTheDocument();
-    expect(screen.queryByText(/active/)).not.toBeInTheDocument();
-  });
-
-  it('marks the selected chip with aria-selected and selected style class', () => {
-    const direct = makeGroup({
-      product_uuid: 'prod-direct',
-      product_name: 'Acme Loyalty',
-    });
-
-    render(
-      <ProductSelectionSection
-        directGroups={[direct]}
-        nominatedGroups={[]}
-        selectedProductKey={productGroupKey(direct)}
-        onSelect={vi.fn()}
-      />,
-    );
-
-    const chip = screen.getByTestId('product-chip-prod-direct');
-    expect(chip).toHaveClass('pc-product-select-chip');
-    expect(chip).toHaveClass('pc-product-select-chip--selected');
-    expect(chip).toHaveAttribute('aria-selected', 'true');
-  });
-
-  it('renders nominated groups with an inline nominator suffix on the chip', () => {
-    const nominated = makeGroup({
-      product_uuid: 'prod-nom',
-      product_name: 'Partner Bank',
-      nominator: makeNominator({ name: 'Alice Johnson' }),
-      purposes: [
-        {
-          uuid: 'p1',
-          data_elements: [{ uuid: 'de1', selected: true }],
-        } as never,
-      ],
-    });
-    const otherDirect = makeGroup({
-      product_uuid: 'prod-direct',
-      product_name: 'Acme Loyalty',
-    });
-
-    render(
-      <ProductSelectionSection
-        directGroups={[otherDirect]}
-        nominatedGroups={[nominated]}
-        selectedProductKey={null}
-        onSelect={vi.fn()}
-      />,
-    );
-
-    expect(screen.getByText('Partner Bank')).toBeInTheDocument();
-    expect(screen.getByText('· Alice Johnson')).toBeInTheDocument();
-    expect(screen.getByText('1 purpose')).toBeInTheDocument();
-  });
-
-  it('falls back to nominator email in the chip suffix when name is null', () => {
-    const nominated = makeGroup({
-      product_uuid: 'prod-nom',
-      product_name: 'Partner Bank',
-      nominator: makeNominator({ name: null, email: 'fallback@example.com' }),
-    });
-    const otherDirect = makeGroup({ product_uuid: 'prod-direct' });
-
-    render(
-      <ProductSelectionSection
-        directGroups={[otherDirect]}
-        nominatedGroups={[nominated]}
-        selectedProductKey={null}
-        onSelect={vi.fn()}
-      />,
-    );
-
-    expect(screen.getByText('· fallback@example.com')).toBeInTheDocument();
-  });
-
-  it('invokes onSelect with the correct key when a chip is clicked', () => {
-    const direct = makeGroup({
-      product_uuid: 'prod-direct',
-      product_name: 'Acme Loyalty',
-    });
-    const nominated = makeGroup({
-      product_uuid: 'prod-nom',
-      product_name: 'Partner Bank',
-      nominator: makeNominator(),
-    });
-    const onSelect = vi.fn();
-
-    render(
-      <ProductSelectionSection
-        directGroups={[direct]}
-        nominatedGroups={[nominated]}
-        selectedProductKey={null}
-        onSelect={onSelect}
-      />,
-    );
-
-    fireEvent.click(screen.getByTestId('product-chip-prod-direct'));
-    fireEvent.click(screen.getByTestId(`product-chip-${productGroupKey(nominated)}`));
-
-    expect(onSelect).toHaveBeenCalledWith(
-      productGroupKey(direct),
-      expect.objectContaining({ product_uuid: 'prod-direct' }),
-    );
-    expect(onSelect).toHaveBeenCalledWith(
-      productGroupKey(nominated),
-      expect.objectContaining({ product_uuid: 'prod-nom' }),
-    );
-    expect(onSelect).toHaveBeenCalledTimes(2);
-  });
-
-  it('clears selection when the already-selected chip is clicked again', () => {
-    const direct = makeGroup({
-      product_uuid: 'prod-direct',
-      product_name: 'Acme Loyalty',
-    });
-    const second = makeGroup({
-      product_uuid: 'prod-direct-2',
-      product_name: 'Acme Rewards',
-    });
-    const onSelect = vi.fn();
-
-    render(
-      <ProductSelectionSection
-        directGroups={[direct, second]}
-        nominatedGroups={[]}
-        selectedProductKey={productGroupKey(direct)}
-        onSelect={onSelect}
-      />,
-    );
-
-    fireEvent.click(screen.getByTestId('product-chip-prod-direct'));
-
-    expect(onSelect).toHaveBeenCalledWith(null, null);
-  });
-
-  it('auto-selects and locks the only available group', () => {
-    const only = makeGroup({
-      product_uuid: 'prod-only',
-      product_name: 'Sole Product',
-    });
-    const onSelect = vi.fn();
-
-    render(
-      <ProductSelectionSection
-        directGroups={[only]}
-        nominatedGroups={[]}
-        selectedProductKey={null}
-        onSelect={onSelect}
-      />,
-    );
-
-    expect(onSelect).toHaveBeenCalledTimes(1);
-    expect(onSelect).toHaveBeenCalledWith(
-      productGroupKey(only),
-      expect.objectContaining({ product_uuid: 'prod-only' }),
-    );
-
-    const chip = screen.getByTestId('product-chip-prod-only') as HTMLButtonElement;
-    expect(chip).toHaveAttribute('aria-selected', 'true');
-    expect(chip.disabled).toBe(true);
-  });
-
-  it('renders an empty state when both arrays are empty', () => {
-    render(
-      <ProductSelectionSection
-        directGroups={[]}
-        nominatedGroups={[]}
-        selectedProductKey={null}
-        onSelect={vi.fn()}
-      />,
-    );
-
-    expect(screen.getByText('No products available')).toBeInTheDocument();
-    expect(
-      screen.getByText('You have no consents to manage yet.'),
-    ).toBeInTheDocument();
-    expect(screen.queryByRole('option')).not.toBeInTheDocument();
-  });
-
-  it('distinguishes direct vs nominated chips on the same product via key helper', () => {
-    const direct = makeGroup({
-      product_uuid: 'prod-shared',
-      product_name: 'Shared Product',
-    });
-    const nominated = makeGroup({
-      product_uuid: 'prod-shared',
-      product_name: 'Shared Product',
-      nominator: makeNominator({ uuid: 'nom-uuid-x' }),
-    });
-
-    expect(productGroupKey(direct)).toBe('prod-shared');
-    expect(productGroupKey(nominated)).toBe('prod-shared:nom-uuid-x');
-    expect(productGroupKey(direct)).not.toBe(productGroupKey(nominated));
-  });
-});

package/tests/RequestSubmit.test.tsx

@@ -1,135 +0,0 @@
-import { render, screen, fireEvent } from '@testing-library/react';
-import { describe, it, expect, vi } from 'vitest';
-
-// react-i18next is an optional peer dep that is not installed in this
-// package's node_modules. Stub it with a minimal `useTranslation` that
-// resolves the en/translation.json keys we use here, with interpolation
-// support.
-vi.mock('react-i18next', () => {
-  const en: Record<string, string> = {
-    requestSubmittedSuccessfully: 'Request Submitted Successfully',
-    thankYouForSubmittingYourRequest: 'Thank you for submitting your request',
-    caseID: 'Case ID',
-    saveThisID: 'Please save this ID for future reference',
-    confirmationSentTo: 'Confirmation sent to',
-    processRequest: 'We will process your request as per laws',
-    backToHome: 'Back to homepage',
-    yourDataIsSafeWithUs: 'Your data is safe with us',
-    erasureConsentRevokeNotice:
-      'Your consent for {{purposes}} will be revoked once fulfilled.',
-  };
-  const interpolate = (template: string, vars?: Record<string, unknown>) =>
-    template.replace(/\{\{(\w+)\}\}/g, (_match, key: string) => {
-      const value = vars?.[key];
-      return value === undefined || value === null ? '' : String(value);
-    });
-  const t = (key: string, opts?: Record<string, unknown>) => {
-    const template = en[key] ?? key;
-    return interpolate(template, opts);
-  };
-  return {
-    useTranslation: () => ({ t, i18n: { language: 'en' } }),
-  };
-});
-
-// `lucide-react` is also a peer dep — stub the icon used by RequestSubmit.
-vi.mock('lucide-react', () => ({
-  Mail: () => null,
-}));
-
-import RequestSubmit from '../src/RedactoPrivacyCenter/components/RequestSubmit';
-import type { RequestSubmitResult } from '../src/RedactoPrivacyCenter/components/types';
-
-const productScopedResult: RequestSubmitResult = {
-  case_id: 'CASE-PROD',
-  uuid: 'uuid-prod',
-  product_name: 'Acme Loyalty',
-  product_uuid: 'prod-1',
-};
-
-const orgLevelResult: RequestSubmitResult = {
-  case_id: 'CASE-ORG',
-  uuid: 'uuid-org',
-  product_name: '',
-  product_uuid: '',
-};
-
-describe('RequestSubmit', () => {
-  it('renders the case id and product label for a product-scoped result', () => {
-    render(
-      <RequestSubmit
-        result={productScopedResult}
-        contact="alice@example.com"
-        onCreateRequest={vi.fn()}
-      />,
-    );
-
-    expect(
-      screen.getByText('Request Submitted Successfully'),
-    ).toBeInTheDocument();
-    expect(screen.getByText(/Case ID:\s*CASE-PROD/)).toBeInTheDocument();
-    expect(screen.getByText('Acme Loyalty')).toBeInTheDocument();
-  });
-
-  it('omits the product label when the result has no product anchor', () => {
-    render(
-      <RequestSubmit
-        result={orgLevelResult}
-        contact="alice@example.com"
-        onCreateRequest={vi.fn()}
-      />,
-    );
-
-    expect(screen.getByText(/Case ID:\s*CASE-ORG/)).toBeInTheDocument();
-    // Empty product_name means the product line is not rendered.
-    expect(screen.queryByText('Acme Loyalty')).not.toBeInTheDocument();
-  });
-
-  it('shows the contact in the confirmation line', () => {
-    render(
-      <RequestSubmit
-        result={productScopedResult}
-        contact="alice@example.com"
-        onCreateRequest={vi.fn()}
-      />,
-    );
-
-    expect(
-      screen.getByText(/Confirmation sent to:\s*alice@example\.com/),
-    ).toBeInTheDocument();
-  });
-
-  it('invokes onCreateRequest when "Back to homepage" is clicked', () => {
-    const onCreateRequest = vi.fn();
-    render(
-      <RequestSubmit
-        result={productScopedResult}
-        contact="alice@example.com"
-        onCreateRequest={onCreateRequest}
-      />,
-    );
-
-    // Two rendered "Back to homepage" buttons exist for the responsive
-    // mobile/desktop variants. Clicking either should fire the handler.
-    const buttons = screen.getAllByRole('button', { name: 'Back to homepage' });
-    expect(buttons.length).toBeGreaterThanOrEqual(1);
-    fireEvent.click(buttons[0]);
-    expect(onCreateRequest).toHaveBeenCalledTimes(1);
-  });
-
-  it('renders the erasure-revoke notice when revokeConsentOnFulfilment is true', () => {
-    render(
-      <RequestSubmit
-        result={productScopedResult}
-        contact="alice@example.com"
-        onCreateRequest={vi.fn()}
-        revokeConsentOnFulfilment
-        revokedPurposeNames="Marketing, Analytics"
-      />,
-    );
-
-    expect(
-      screen.getByText(/Marketing, Analytics/),
-    ).toBeInTheDocument();
-  });
-});

package/tests/consentClient.test.ts

@@ -1,171 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
-
-import { createConsentClient } from '../src/RedactoPrivacyCenter/api/client';
-import type { BaseRequest } from '../src/RedactoPrivacyCenter/api/client';
-
-// URL routing contract for the five consent read/write methods that moved to
-// the Go ledger in PR #438. With a ledgerBaseUrl they must hit the ledger's
-// /public/... paths; without one they must fall back to the legacy Python
-// /dsar/privacy-center paths (prod has no ledger — see PR #438/#460 regression
-// where the silent baseUrl fallback 404'd the Privacy Center).
-
-const BASE_URL = 'https://consent.test';
-const LEDGER_URL = 'https://ledger.test/consent-ledger';
-const LEGACY_PREFIX =
-  'https://consent.test/organisations/org-1/workspaces/ws-1/dsar/privacy-center';
-const LEDGER_PREFIX =
-  'https://ledger.test/consent-ledger/public/organisations/org-1/workspaces/ws-1';
-
-const baseRequest: BaseRequest = {
-  organisationUuid: 'org-1',
-  workspaceUuid: 'ws-1',
-  authToken: 'jwt-token',
-};
-
-const jsonResponse = () =>
-  new Response(JSON.stringify({}), {
-    status: 200,
-    headers: { 'Content-Type': 'application/json' },
-  });
-
-const pdfResponse = () =>
-  new Response(new Blob(['%PDF'], { type: 'application/pdf' }), {
-    status: 200,
-    headers: { 'Content-Type': 'application/pdf' },
-  });
-
-const mockFetch = vi.fn();
-
-const fetchedUrl = (): string => String(mockFetch.mock.calls[0]?.[0]);
-
-const fetchedBody = (): Record<string, unknown> =>
-  JSON.parse(String(mockFetch.mock.calls[0]?.[1]?.body)) as Record<
-    string,
-    unknown
-  >;
-
-beforeEach(() => {
-  mockFetch.mockReset();
-  mockFetch.mockImplementation(() => Promise.resolve(jsonResponse()));
-  vi.stubGlobal('fetch', mockFetch);
-});
-
-afterEach(() => {
-  vi.unstubAllGlobals();
-});
-
-describe('createConsentClient — legacy mode (no ledgerBaseUrl)', () => {
-  const client = createConsentClient(BASE_URL);
-
-  it('routes getUserConsents to the legacy dsar/privacy-center path', async () => {
-    await client.getUserConsents(baseRequest, { offset: 0, limit: 10 });
-    expect(fetchedUrl()).toBe(
-      `${LEGACY_PREFIX}/user-consents?offset=0&limit=10`,
-    );
-  });
-
-  it('routes getGroupPurposes to the legacy dsar/privacy-center path', async () => {
-    await client.getGroupPurposes(baseRequest, 'prod-1', { limit: 5 });
-    expect(fetchedUrl()).toBe(
-      `${LEGACY_PREFIX}/user-consents/prod-1/purposes?limit=5`,
-    );
-  });
-
-  it('routes manageConsent to the legacy manage-consent endpoint with the legacy body and no noticeUuid requirement', async () => {
-    await client.manageConsent(
-      baseRequest,
-      'purp-1',
-      'jane@example.com',
-      'revoke',
-      undefined,
-      undefined,
-      'nominator@example.com',
-      ['de-1'],
-      'prod-1',
-    );
-    expect(fetchedUrl()).toBe(`${LEGACY_PREFIX}/manage-consent?status=revoke`);
-    expect(fetchedBody()).toEqual({
-      purpose_uuid: 'purp-1',
-      contact: 'jane@example.com',
-      nominator_contact: 'nominator@example.com',
-      data_element_uuids: ['de-1'],
-      product_uuid: 'prod-1',
-    });
-  });
-
-  it('routes getReceipts to the legacy dsar/privacy-center path', async () => {
-    await client.getReceipts(baseRequest, { skip: 0, limit: 10 });
-    expect(fetchedUrl()).toBe(`${LEGACY_PREFIX}/receipts?skip=0&limit=10`);
-  });
-
-  it('routes getReceiptPdf to the legacy /pdf path', async () => {
-    mockFetch.mockImplementation(() => Promise.resolve(pdfResponse()));
-    await client.getReceiptPdf(baseRequest, 'r-1');
-    expect(fetchedUrl()).toBe(`${LEGACY_PREFIX}/receipts/r-1/pdf`);
-  });
-});
-
-describe('createConsentClient — ledger mode (ledgerBaseUrl set)', () => {
-  // Trailing slash must be trimmed from the configured ledger base.
-  const client = createConsentClient(BASE_URL, `${LEDGER_URL}/`);
-
-  it('routes getUserConsents to the ledger public path', async () => {
-    await client.getUserConsents(baseRequest, { offset: 0, limit: 10 });
-    expect(fetchedUrl()).toBe(
-      `${LEDGER_PREFIX}/user-consents?offset=0&limit=10`,
-    );
-  });
-
-  it('routes getGroupPurposes to the ledger public path', async () => {
-    await client.getGroupPurposes(baseRequest, 'prod-1', { limit: 5 });
-    expect(fetchedUrl()).toBe(
-      `${LEDGER_PREFIX}/user-consents/prod-1/purposes?limit=5`,
-    );
-  });
-
-  it('routes manageConsent to the ledger submit-consent with a partial payload', async () => {
-    await client.manageConsent(
-      baseRequest,
-      'purp-1',
-      'jane@example.com',
-      'revoke',
-      undefined,
-      undefined,
-      undefined,
-      undefined,
-      undefined,
-      'notice-1',
-      [{ uuid: 'de-1', selected: true }],
-    );
-    expect(fetchedUrl()).toBe(`${LEDGER_PREFIX}/submit-consent`);
-    expect(fetchedBody()).toMatchObject({
-      notice_uuid: 'notice-1',
-      partial: true,
-      purposes: [
-        {
-          purpose_uuid: 'purp-1',
-          selected: false,
-          data_elements: [{ uuid: 'de-1', selected: false }],
-        },
-      ],
-    });
-  });
-
-  it('throws from manageConsent when noticeUuid is missing', async () => {
-    await expect(
-      client.manageConsent(baseRequest, 'purp-1', 'jane@example.com', 'revoke'),
-    ).rejects.toThrow('notice_uuid is required');
-    expect(mockFetch).not.toHaveBeenCalled();
-  });
-
-  it('routes getReceipts to the ledger public path', async () => {
-    await client.getReceipts(baseRequest, { skip: 0, limit: 10 });
-    expect(fetchedUrl()).toBe(`${LEDGER_PREFIX}/receipts?skip=0&limit=10`);
-  });
-
-  it('routes getReceiptPdf to the ledger /download path', async () => {
-    mockFetch.mockImplementation(() => Promise.resolve(pdfResponse()));
-    await client.getReceiptPdf(baseRequest, 'r-1');
-    expect(fetchedUrl()).toBe(`${LEDGER_PREFIX}/receipts/r-1/download`);
-  });
-});

package/tests/manageConsentServer.test.ts

@@ -1,38 +0,0 @@
-import { describe, expect, it, vi } from 'vitest';
-
-import { manageConsentServer } from '../src/RedactoPrivacyCenter/api/actions';
-import type { createConsentClient } from '../src/RedactoPrivacyCenter/api/client';
-
-// manageConsentServer must honor the legacy Python response's `success` flag
-// (a 200 with { success: false } is a failure) while still treating the Go
-// ledger's ConsentEventResponse (no `success` key) as resolved-on-2xx.
-
-type ConsentClient = ReturnType<typeof createConsentClient>;
-
-const makeParams = (result: unknown) => ({
-  organizationId: 'org-1',
-  workspaceId: 'ws-1',
-  purposeId: 'purp-1',
-  contact: 'jane@example.com',
-  action: 'revoke' as const,
-  authToken: 'jwt-token',
-  consentClient: {
-    manageConsent: vi.fn().mockResolvedValue(result),
-  } as unknown as ConsentClient,
-});
-
-describe('manageConsentServer success detection', () => {
-  it('returns false for a legacy { success: false } response', async () => {
-    await expect(manageConsentServer(makeParams({ success: false }))).resolves.toBe(false);
-  });
-
-  it('returns true for a legacy { success: true } response', async () => {
-    await expect(manageConsentServer(makeParams({ success: true }))).resolves.toBe(true);
-  });
-
-  it('returns true for a ledger ConsentEventResponse (no success flag)', async () => {
-    await expect(
-      manageConsentServer(makeParams({ consent_event_uuid: 'evt-1' })),
-    ).resolves.toBe(true);
-  });
-});