@redacto.io/consent-sdk-react 10.0.0-beta.1 → 10.0.0-beta.2

package/src/RedactoPrivacyCenter/locales/ks/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} چھُ اکہ کھۄتہ زیادٕ پروفائلن سٟتؠ جوڑنہ آمُت۔ یُس توہہِ وُچھُن چھِو یژھان سُ ژارٕو۔",
   "contactLinkedToMultipleProfiles": "یہ رابطہ چھُ اکہ کھۄتہ زیادٕ پروفائلن سٟتؠ جوڑنہ آمُت۔ یُس توہہِ وُچھُن چھِو یژھان سُ ژارٕو۔",
   "signingInEllipsis": "سائن اِن گژھان چھُ…",
-  "couldNotSwitchProfile": "تہِ پروفائلس منٛز سوِچ کرُن آو نہ۔ مہربانی کرِتھ دوبارٕ کوشش کریو۔"
+  "couldNotSwitchProfile": "تہِ پروفائلس منٛز سوِچ کرُن آو نہ۔ مہربانی کرِتھ دوبارٕ کوشش کریو۔",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/mai/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} एकाधिक प्रोफाइलसँ जुड़ल अछि। जे अहाँ देखय चाहैत छी ओकरा चुनू।",
   "contactLinkedToMultipleProfiles": "ई संपर्क एकाधिक प्रोफाइलसँ जुड़ल अछि। जे अहाँ देखय चाहैत छी ओकरा चुनू।",
   "signingInEllipsis": "साइन इन भ' रहल अछि…",
-  "couldNotSwitchProfile": "ओ प्रोफाइल पर स्विच नहि भ' सकल। कृपया फेर सँ प्रयास करू।"
+  "couldNotSwitchProfile": "ओ प्रोफाइल पर स्विच नहि भ' सकल। कृपया फेर सँ प्रयास करू।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/ml/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} ഒന്നിലധികം പ്രൊഫൈലുകളുമായി ബന്ധിപ്പിച്ചിരിക്കുന്നു. നിങ്ങൾ കാണാൻ ആഗ്രഹിക്കുന്നത് തിരഞ്ഞെടുക്കുക.",
   "contactLinkedToMultipleProfiles": "ഈ കോൺടാക്റ്റ് ഒന്നിലധികം പ്രൊഫൈലുകളുമായി ബന്ധിപ്പിച്ചിരിക്കുന്നു. നിങ്ങൾ കാണാൻ ആഗ്രഹിക്കുന്നത് തിരഞ്ഞെടുക്കുക.",
   "signingInEllipsis": "സൈൻ ഇൻ ചെയ്യുന്നു…",
-  "couldNotSwitchProfile": "ആ പ്രൊഫൈലിലേക്ക് മാറാൻ കഴിഞ്ഞില്ല. വീണ്ടും ശ്രമിക്കുക."
+  "couldNotSwitchProfile": "ആ പ്രൊഫൈലിലേക്ക് മാറാൻ കഴിഞ്ഞില്ല. വീണ്ടും ശ്രമിക്കുക.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/mni-Mtei/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} অসি প্রোফাইল অমদগী হেন্না লোইননবা লৈ। নহাক্না য়েংনিংবা অদু খনবিয়ু।",
   "contactLinkedToMultipleProfiles": "মসি কন্টেক্ট অসি প্রোফাইল অমদগী হেন্না লোইননবা লৈ। নহাক্না য়েংনিংবা অদু খনবিয়ু।",
   "signingInEllipsis": "সাইন ইন তৌরি…",
-  "couldNotSwitchProfile": "প্রোফাইল অদুদা হোংদোকপা ঙমদ্রে। চানবীদুনা অমুক হন্না হোৎনবিয়ু।"
+  "couldNotSwitchProfile": "প্রোফাইল অদুদা হোংদোকপা ঙমদ্রে। চানবীদুনা অমুক হন্না হোৎনবিয়ু।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/mr/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} एकापेक्षा जास्त प्रोफाइलशी जोडलेला आहे. तुम्हाला जी पाहायची आहे ती निवडा.",
   "contactLinkedToMultipleProfiles": "हा संपर्क एकापेक्षा जास्त प्रोफाइलशी जोडलेला आहे. तुम्हाला जी पाहायची आहे ती निवडा.",
   "signingInEllipsis": "साइन इन करत आहे…",
-  "couldNotSwitchProfile": "त्या प्रोफाइलवर स्विच करता आले नाही. कृपया पुन्हा प्रयत्न करा."
+  "couldNotSwitchProfile": "त्या प्रोफाइलवर स्विच करता आले नाही. कृपया पुन्हा प्रयत्न करा.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/ne/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} एकभन्दा बढी प्रोफाइलसँग जोडिएको छ। तपाईंले हेर्न चाहनुभएको छान्नुहोस्।",
   "contactLinkedToMultipleProfiles": "यो सम्पर्क एकभन्दा बढी प्रोफाइलसँग जोडिएको छ। तपाईंले हेर्न चाहनुभएको छान्नुहोस्।",
   "signingInEllipsis": "साइन इन हुँदैछ…",
-  "couldNotSwitchProfile": "त्यो प्रोफाइलमा स्विच गर्न सकिएन। कृपया फेरि प्रयास गर्नुहोस्।"
+  "couldNotSwitchProfile": "त्यो प्रोफाइलमा स्विच गर्न सकिएन। कृपया फेरि प्रयास गर्नुहोस्।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/or/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} ଏକାଧିକ ପ୍ରୋଫାଇଲ୍ ସହିତ ଯୋଡ଼ାଯାଇଛି। ଆପଣ ଦେଖିବାକୁ ଚାହୁଁଥିବାଟି ବାଛନ୍ତୁ।",
   "contactLinkedToMultipleProfiles": "ଏହି ଯୋଗାଯୋଗ ଏକାଧିକ ପ୍ରୋଫାଇଲ୍ ସହିତ ଯୋଡ଼ାଯାଇଛି। ଆପଣ ଦେଖିବାକୁ ଚାହୁଁଥିବାଟି ବାଛନ୍ତୁ।",
   "signingInEllipsis": "ସାଇନ୍ ଇନ୍ ହେଉଛି…",
-  "couldNotSwitchProfile": "ସେହି ପ୍ରୋଫାଇଲକୁ ସ୍ୱିଚ୍ କରାଯାଇପାରିଲା ନାହିଁ। ଦୟାକରି ପୁନର୍ବାର ଚେଷ୍ଟା କରନ୍ତୁ।"
+  "couldNotSwitchProfile": "ସେହି ପ୍ରୋଫାଇଲକୁ ସ୍ୱିଚ୍ କରାଯାଇପାରିଲା ନାହିଁ। ଦୟାକରି ପୁନର୍ବାର ଚେଷ୍ଟା କରନ୍ତୁ।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/pa/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} ਇੱਕ ਤੋਂ ਵੱਧ ਪ੍ਰੋਫਾਈਲਾਂ ਨਾਲ ਜੁੜਿਆ ਹੋਇਆ ਹੈ। ਜੋ ਤੁਸੀਂ ਵੇਖਣਾ ਚਾਹੁੰਦੇ ਹੋ ਉਹ ਚੁਣੋ।",
   "contactLinkedToMultipleProfiles": "ਇਹ ਸੰਪਰਕ ਇੱਕ ਤੋਂ ਵੱਧ ਪ੍ਰੋਫਾਈਲਾਂ ਨਾਲ ਜੁੜਿਆ ਹੋਇਆ ਹੈ। ਜੋ ਤੁਸੀਂ ਵੇਖਣਾ ਚਾਹੁੰਦੇ ਹੋ ਉਹ ਚੁਣੋ।",
   "signingInEllipsis": "ਸਾਈਨ ਇਨ ਹੋ ਰਿਹਾ ਹੈ…",
-  "couldNotSwitchProfile": "ਉਸ ਪ੍ਰੋਫਾਈਲ 'ਤੇ ਸਵਿੱਚ ਨਹੀਂ ਕੀਤਾ ਜਾ ਸਕਿਆ। ਕਿਰਪਾ ਕਰਕੇ ਦੁਬਾਰਾ ਕੋਸ਼ਿਸ਼ ਕਰੋ।"
+  "couldNotSwitchProfile": "ਉਸ ਪ੍ਰੋਫਾਈਲ 'ਤੇ ਸਵਿੱਚ ਨਹੀਂ ਕੀਤਾ ਜਾ ਸਕਿਆ। ਕਿਰਪਾ ਕਰਕੇ ਦੁਬਾਰਾ ਕੋਸ਼ਿਸ਼ ਕਰੋ।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/sa/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} एकाधिकैः प्रोफ़ाइलैः सह सम्बद्धः अस्ति। यत् द्रष्टुम् इच्छति तत् चिनोतु।",
   "contactLinkedToMultipleProfiles": "अयं सम्पर्कः एकाधिकैः प्रोफ़ाइलैः सह सम्बद्धः अस्ति। यत् द्रष्टुम् इच्छति तत् चिनोतु।",
   "signingInEllipsis": "प्रवेशः क्रियते…",
-  "couldNotSwitchProfile": "तां प्रोफ़ाइलं प्रति परिवर्तनं न शक्यते स्म। कृपया पुनः प्रयत्नं करोतु।"
+  "couldNotSwitchProfile": "तां प्रोफ़ाइलं प्रति परिवर्तनं न शक्यते स्म। कृपया पुनः प्रयत्नं करोतु।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/sat/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} ᱫᱚ ᱢᱤᱫ ᱠᱷᱚᱱ ᱰᱷᱮᱨ ᱯᱨᱳᱯᱷᱟᱭᱤᱞ ᱥᱟᱶ ᱡᱩᱰᱟᱹᱣ ᱟᱠᱟᱱᱟ᱾ ᱟᱢ ᱧᱮᱞ ᱥᱟᱱᱟᱢ ᱚᱱᱟ ᱵᱟᱪᱷᱟᱣ ᱢᱮ᱾",
   "contactLinkedToMultipleProfiles": "ᱱᱳᱶᱟ ᱠᱚᱱᱴᱮᱠᱴ ᱫᱚ ᱢᱤᱫ ᱠᱷᱚᱱ ᱰᱷᱮᱨ ᱯᱨᱳᱯᱷᱟᱭᱤᱞ ᱥᱟᱶ ᱡᱩᱰᱟᱹᱣ ᱟᱠᱟᱱᱟ᱾ ᱟᱢ ᱧᱮᱞ ᱥᱟᱱᱟᱢ ᱚᱱᱟ ᱵᱟᱪᱷᱟᱣ ᱢᱮ᱾",
   "signingInEllipsis": "ᱥᱟᱭᱤᱱ ᱤᱱ ᱮᱫᱟᱭ…",
-  "couldNotSwitchProfile": "ᱚᱱᱟ ᱯᱨᱳᱯᱷᱟᱭᱤᱞ ᱛᱮ ᱥᱩᱭᱪ ᱵᱟᱝ ᱦᱩᱭ ᱞᱮᱱᱟ᱾ ᱫᱟᱭᱟ ᱠᱟᱛᱮ ᱫᱩᱠᱟᱹᱛᱮ ᱠᱩᱨᱩᱢᱩᱴᱩ ᱢᱮ᱾"
+  "couldNotSwitchProfile": "ᱚᱱᱟ ᱯᱨᱳᱯᱷᱟᱭᱤᱞ ᱛᱮ ᱥᱩᱭᱪ ᱵᱟᱝ ᱦᱩᱭ ᱞᱮᱱᱟ᱾ ᱫᱟᱭᱟ ᱠᱟᱛᱮ ᱫᱩᱠᱟᱹᱛᱮ ᱠᱩᱨᱩᱢᱩᱴᱩ ᱢᱮ᱾",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/sd/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} هڪ کان وڌيڪ پروفائلن سان ڳنڍيل آهي. جيڪو توهان ڏسڻ چاهيو ٿا اهو چونڊيو.",
   "contactLinkedToMultipleProfiles": "هي رابطو هڪ کان وڌيڪ پروفائلن سان ڳنڍيل آهي. جيڪو توهان ڏسڻ چاهيو ٿا اهو چونڊيو.",
   "signingInEllipsis": "سائن ان ٿي رهيو آهي…",
-  "couldNotSwitchProfile": "ان پروفائل تي سوئچ نه ٿي سگهيو. مهرباني ڪري ٻيهر ڪوشش ڪريو."
+  "couldNotSwitchProfile": "ان پروفائل تي سوئچ نه ٿي سگهيو. مهرباني ڪري ٻيهر ڪوشش ڪريو.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/ta/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} ஒன்றுக்கு மேற்பட்ட சுயவிவரங்களுடன் இணைக்கப்பட்டுள்ளது. நீங்கள் பார்க்க விரும்புவதைத் தேர்ந்தெடுக்கவும்.",
   "contactLinkedToMultipleProfiles": "இந்தத் தொடர்பு ஒன்றுக்கு மேற்பட்ட சுயவிவரங்களுடன் இணைக்கப்பட்டுள்ளது. நீங்கள் பார்க்க விரும்புவதைத் தேர்ந்தெடுக்கவும்.",
   "signingInEllipsis": "உள்நுழைகிறது…",
-  "couldNotSwitchProfile": "அந்தச் சுயவிவரத்திற்கு மாற முடியவில்லை. மீண்டும் முயற்சிக்கவும்."
+  "couldNotSwitchProfile": "அந்தச் சுயவிவரத்திற்கு மாற முடியவில்லை. மீண்டும் முயற்சிக்கவும்.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/te/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} ఒకటి కంటే ఎక్కువ ప్రొఫైల్‌లతో అనుసంధానించబడింది. మీరు చూడాలనుకుంటున్నదాన్ని ఎంచుకోండి.",
   "contactLinkedToMultipleProfiles": "ఈ సంప్రదింపు ఒకటి కంటే ఎక్కువ ప్రొఫైల్‌లతో అనుసంధానించబడింది. మీరు చూడాలనుకుంటున్నదాన్ని ఎంచుకోండి.",
   "signingInEllipsis": "సైన్ ఇన్ అవుతోంది…",
-  "couldNotSwitchProfile": "ఆ ప్రొఫైల్‌కు మారడం సాధ్యం కాలేదు. దయచేసి మళ్లీ ప్రయత్నించండి."
+  "couldNotSwitchProfile": "ఆ ప్రొఫైల్‌కు మారడం సాధ్యం కాలేదు. దయచేసి మళ్లీ ప్రయత్నించండి.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/src/RedactoPrivacyCenter/locales/ur/translation.json

@@ -336,5 +336,7 @@
   "emailLinkedToMultipleProfiles": "{{email}} ایک سے زیادہ پروفائلز سے منسلک ہے۔ جسے آپ دیکھنا چاہتے ہیں اسے منتخب کریں۔",
   "contactLinkedToMultipleProfiles": "یہ رابطہ ایک سے زیادہ پروفائلز سے منسلک ہے۔ جسے آپ دیکھنا چاہتے ہیں اسے منتخب کریں۔",
   "signingInEllipsis": "سائن ان ہو رہا ہے…",
-  "couldNotSwitchProfile": "اس پروفائل پر سوئچ نہیں کیا جا سکا۔ براہ کرم دوبارہ کوشش کریں۔"
+  "couldNotSwitchProfile": "اس پروفائل پر سوئچ نہیں کیا جا سکا۔ براہ کرم دوبارہ کوشش کریں۔",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it."
 }

package/tests/ManageConsentErrorMapping.test.tsx

@@ -0,0 +1,85 @@
+import { describe, it, expect } from 'vitest';
+
+import { manageConsentServer, ConsentApiError } from '../src/RedactoPrivacyCenter/api/actions';
+import { ApiError } from '../src/RedactoPrivacyCenter/api/fetcher';
+import type { createConsentClient } from '../src/RedactoPrivacyCenter/api/client';
+
+type ConsentClient = ReturnType<typeof createConsentClient>;
+
+// Build a mock consent client whose `manageConsent` rejects with the supplied
+// error. Only `manageConsent` is exercised by `manageConsentServer`, so the
+// rest of the surface is a cast-through stub.
+const makeClient = (error: unknown): ConsentClient =>
+  ({
+    manageConsent: () => Promise.reject(error),
+  } as unknown as ConsentClient);
+
+const baseParams = {
+  organizationId: 'org-1',
+  workspaceId: 'ws-1',
+  purposeId: 'purpose-1',
+  contact: 'user@example.com',
+  action: 'revoke' as const,
+  authToken: 'token-abc',
+};
+
+describe('manageConsentServer error mapping — purpose_not_revocable', () => {
+  // The consent-server 400 is rendered by a Ninja wrapper as
+  // { code: 400, status, detail: { message, code: 'purpose_not_revocable' } }.
+  // `privacyCenterApiFetch` preserves the parsed `detail` on the ApiError and
+  // sets ApiError.code only from the TOP-LEVEL string code — which here is the
+  // integer 400 (dropped, so ApiError.code is undefined). The app-level
+  // discriminator therefore lives in `error.detail.code`.
+  const realBackody400 = () =>
+    new ApiError(
+      `[400] ${JSON.stringify(
+        { message: 'This purpose cannot be revoked.', code: 'purpose_not_revocable' },
+        null,
+        2,
+      )}`,
+      { status: 400, code: undefined, detail: { message: 'This purpose cannot be revoked.', code: 'purpose_not_revocable' } },
+    );
+
+  it('maps the real backend 400 body (code nested in detail) to PURPOSE_NOT_REVOCABLE', async () => {
+    await expect(
+      manageConsentServer({ ...baseParams, consentClient: makeClient(realBackody400()) }),
+    ).rejects.toMatchObject({
+      name: 'ConsentApiError',
+      code: 'PURPOSE_NOT_REVOCABLE',
+    });
+  });
+
+  it('throws a ConsentApiError instance carrying the original message', async () => {
+    const error = realBackody400();
+    try {
+      await manageConsentServer({ ...baseParams, consentClient: makeClient(error) });
+      throw new Error('expected manageConsentServer to reject');
+    } catch (caught) {
+      expect(caught).toBeInstanceOf(ConsentApiError);
+      expect((caught as ConsentApiError).code).toBe('PURPOSE_NOT_REVOCABLE');
+      expect((caught as ConsentApiError).message).toContain('purpose_not_revocable');
+    }
+  });
+
+  it('still maps when the string code is surfaced at the top level (error.code)', async () => {
+    // Defensive: if a backend/wrapper ever exposes the string code at the top
+    // level, the original `error?.code === 'purpose_not_revocable'` arm must
+    // continue to fire.
+    const error = new ApiError('[400] purpose is not revocable', {
+      status: 400,
+      code: 'purpose_not_revocable',
+    });
+    await expect(
+      manageConsentServer({ ...baseParams, consentClient: makeClient(error) }),
+    ).rejects.toMatchObject({ code: 'PURPOSE_NOT_REVOCABLE' });
+  });
+
+  it('does not misclassify an unrelated error as PURPOSE_NOT_REVOCABLE', async () => {
+    const error = new ApiError('[500] internal server error', { status: 500 });
+    // Unrelated non-auth errors are swallowed to null by handleServerActionError,
+    // so the call resolves rather than throwing a ConsentApiError.
+    await expect(
+      manageConsentServer({ ...baseParams, consentClient: makeClient(error) }),
+    ).resolves.toBeNull();
+  });
+});

package/tests/RevocablePurpose.test.tsx

@@ -0,0 +1,146 @@
+import { render, screen, fireEvent } from '@testing-library/react';
+import { describe, it, expect, vi } from 'vitest';
+
+// react-i18next is an optional peer dep that is not installed in this
+// package's node_modules. Stub it with a minimal `useTranslation` that
+// resolves the keys used by the components under test, honouring the inline
+// English fallback passed as the 2nd argument (mirrors the real i18next
+// behaviour when a key is missing).
+vi.mock('react-i18next', () => {
+  const en: Record<string, string> = {
+    modifyButton: 'Modify',
+    modifyConsent: 'Modify Consent',
+    closeModal: 'Close',
+    cancel: 'Cancel',
+    revokeConsent: 'Revoke Consent',
+    revokeConsentWarning: 'If you revoke this consent, you may lose access.',
+    aboutToModifyConsent: 'You are about to modify this consent.',
+    noDataElementsAvailable: 'No data elements available',
+    purposeNotRevocable: "This purpose can't be withdrawn directly.",
+    noActionsAvailable: 'No actions available for this record.',
+  };
+  const interpolate = (template: string, vars?: Record<string, unknown>) =>
+    template.replace(/\{\{(\w+)\}\}/g, (_match, key: string) => {
+      const value = vars?.[key];
+      return value === undefined || value === null ? '' : String(value);
+    });
+  // Supports the `t(key, fallbackString)` and `t(key, opts)` call shapes used
+  // across the components. When the key is unknown, fall back to the inline
+  // English string if one was supplied, otherwise echo the key.
+  const t = (key: string, second?: unknown, opts?: Record<string, unknown>) => {
+    const fallback = typeof second === 'string' ? second : undefined;
+    const interpolationOpts =
+      typeof second === 'object' && second !== null
+        ? (second as Record<string, unknown>)
+        : opts;
+    const template = en[key] ?? fallback ?? key;
+    return interpolate(template, interpolationOpts);
+  };
+  return {
+    useTranslation: () => ({ t, i18n: { language: 'en' } }),
+  };
+});
+
+// Icon peer deps — stub the icons used by the modal.
+vi.mock('lucide-react', () => ({
+  ChevronDownIcon: () => null,
+  X: () => null,
+  Smartphone: () => null,
+  LaptopMinimal: () => null,
+}));
+
+vi.mock('react-icons/pi', () => ({
+  PiWarningCircleBold: () => null,
+}));
+
+import { renderModifyButton } from '../src/RedactoPrivacyCenter/components/ConsentManagerCells';
+import { ModifyConsentModal } from '../src/RedactoPrivacyCenter/components/ModifyConsentModal';
+import { NavigationProvider } from '../src/RedactoPrivacyCenter/context/NavigationContext';
+import { ConsentStatusEnum } from '../src/RedactoPrivacyCenter/lib/types';
+import type { ConsentModalRecord } from '../src/RedactoPrivacyCenter/lib/types';
+
+const makeRecord = (
+  overrides: Partial<ConsentModalRecord> = {},
+): ConsentModalRecord => ({
+  purpose_uuid: 'purpose-1',
+  name: 'Marketing analytics',
+  description: 'Improve product recommendations',
+  status: ConsentStatusEnum.ACTIVE,
+  given_date: '2026-01-01T00:00:00Z',
+  valid_till: null,
+  method: 'WEB',
+  data_elements: [],
+  link_reason: null,
+  product_uuid: 'prod-1',
+  product_name: 'Acme Loyalty',
+  product_description: null,
+  nominator: null,
+  ...overrides,
+});
+
+// A TFunction-compatible stub for the pure render helper (which receives `t`
+// directly rather than via the react-i18next mock). Resolves the handful of
+// keys it uses and honours the inline English fallback like real i18next.
+const tStubKeys: Record<string, string> = {
+  modifyButton: 'Modify',
+};
+const tStub = ((key: string, second?: unknown) =>
+  tStubKeys[key] ??
+  (typeof second === 'string' ? second : key)) as unknown as Parameters<
+  typeof renderModifyButton
+>[2];
+
+describe('non-revocable purpose', () => {
+  it('renders the modify/withdraw control disabled for a non-revocable ACTIVE purpose', () => {
+    const record = makeRecord({ revocable: false });
+    render(<>{renderModifyButton(record, vi.fn(), tStub)}</>);
+
+    const button = screen.getByRole('button', { name: 'Modify' });
+    expect(button).toBeDisabled();
+    expect(button).toHaveAttribute(
+      'title',
+      "This purpose can't be withdrawn directly.",
+    );
+  });
+
+  it('does not invoke onModify when the disabled non-revocable control is clicked', () => {
+    const onModify = vi.fn();
+    const record = makeRecord({ revocable: false });
+    render(<>{renderModifyButton(record, onModify, tStub)}</>);
+
+    fireEvent.click(screen.getByRole('button', { name: 'Modify' }));
+    expect(onModify).not.toHaveBeenCalled();
+  });
+});
+
+describe('revocable purpose (regression)', () => {
+  it('renders the modify control enabled when revocable is absent (older backends)', () => {
+    const record = makeRecord(); // no `revocable` field
+    const onModify = vi.fn();
+    render(<>{renderModifyButton(record, onModify, tStub)}</>);
+
+    const button = screen.getByRole('button', { name: 'Modify' });
+    expect(button).not.toBeDisabled();
+    fireEvent.click(button);
+    expect(onModify).toHaveBeenCalledTimes(1);
+  });
+
+  it('offers the revoke action in the modal for a revocable ACTIVE record', () => {
+    const record = makeRecord({ revocable: true });
+    render(
+      <NavigationProvider>
+        <ModifyConsentModal
+          isOpen
+          onClose={vi.fn()}
+          selectedRecord={record}
+          isLoading={false}
+          onManageConsent={vi.fn()}
+        />
+      </NavigationProvider>,
+    );
+
+    expect(
+      screen.getByRole('button', { name: 'Revoke Consent' }),
+    ).toBeInTheDocument();
+  });
+});

package/tests/RevokeWarningMessage.test.tsx

@@ -0,0 +1,151 @@
+import { render, screen } from '@testing-library/react';
+import { describe, it, expect, vi } from 'vitest';
+
+// react-i18next is an optional peer dep that is not installed in this
+// package's node_modules. Stub it with a minimal `useTranslation` that
+// resolves the keys used by the components under test, honouring the inline
+// English fallback passed as the 2nd argument (mirrors the real i18next
+// behaviour when a key is missing).
+vi.mock('react-i18next', () => {
+  const en: Record<string, string> = {
+    modifyConsent: 'Modify Consent',
+    closeModal: 'Close',
+    cancel: 'Cancel',
+    revokeConsent: 'Revoke Consent',
+    revokeConsentWarning: 'If you revoke this consent, you may lose access.',
+    regrantConsent: 'Regrant Consent',
+    regrantConsentWarning: 'Regranting will restore this consent.',
+    aboutToModifyConsent: 'You are about to modify this consent.',
+    aboutToRegrantConsent: 'You are about to regrant this consent.',
+    noDataElementsAvailable: 'No data elements available',
+    noActionsAvailable: 'No actions available for this record.',
+  };
+  const interpolate = (template: string, vars?: Record<string, unknown>) =>
+    template.replace(/\{\{(\w+)\}\}/g, (_match, key: string) => {
+      const value = vars?.[key];
+      return value === undefined || value === null ? '' : String(value);
+    });
+  // Supports the `t(key, fallbackString)` and `t(key, opts)` call shapes used
+  // across the components. When the key is unknown, fall back to the inline
+  // English string if one was supplied, otherwise echo the key.
+  const t = (key: string, second?: unknown, opts?: Record<string, unknown>) => {
+    const fallback = typeof second === 'string' ? second : undefined;
+    const interpolationOpts =
+      typeof second === 'object' && second !== null
+        ? (second as Record<string, unknown>)
+        : opts;
+    const template = en[key] ?? fallback ?? key;
+    return interpolate(template, interpolationOpts);
+  };
+  return {
+    useTranslation: () => ({ t, i18n: { language: 'en' } }),
+  };
+});
+
+// Icon peer deps — stub the icons used by the modal.
+vi.mock('lucide-react', () => ({
+  ChevronDownIcon: () => null,
+  X: () => null,
+  Smartphone: () => null,
+  LaptopMinimal: () => null,
+}));
+
+vi.mock('react-icons/pi', () => ({
+  PiWarningCircleBold: () => null,
+}));
+
+import { ModifyConsentModal } from '../src/RedactoPrivacyCenter/components/ModifyConsentModal';
+import { NavigationProvider } from '../src/RedactoPrivacyCenter/context/NavigationContext';
+import { ConsentStatusEnum } from '../src/RedactoPrivacyCenter/lib/types';
+import type { ConsentModalRecord } from '../src/RedactoPrivacyCenter/lib/types';
+
+const DEFAULT_WARNING = 'If you revoke this consent, you may lose access.';
+const CUSTOM_WARNING =
+  'Revoking marketing consent will stop all promotional emails immediately.';
+
+const makeRecord = (
+  overrides: Partial<ConsentModalRecord> = {},
+): ConsentModalRecord => ({
+  purpose_uuid: 'purpose-1',
+  name: 'Marketing analytics',
+  description: 'Improve product recommendations',
+  status: ConsentStatusEnum.ACTIVE,
+  given_date: '2026-01-01T00:00:00Z',
+  valid_till: null,
+  method: 'WEB',
+  data_elements: [],
+  link_reason: null,
+  product_uuid: 'prod-1',
+  product_name: 'Acme Loyalty',
+  product_description: null,
+  nominator: null,
+  ...overrides,
+});
+
+const renderModal = (record: ConsentModalRecord) =>
+  render(
+    <NavigationProvider>
+      <ModifyConsentModal
+        isOpen
+        onClose={vi.fn()}
+        selectedRecord={record}
+        isLoading={false}
+        onManageConsent={vi.fn()}
+      />
+    </NavigationProvider>,
+  );
+
+describe('per-purpose revoke warning message', () => {
+  it('shows the custom warning when revoke_warning_message is set on a revoke record', () => {
+    renderModal(makeRecord({ revoke_warning_message: CUSTOM_WARNING }));
+
+    expect(screen.getByText(CUSTOM_WARNING)).toBeInTheDocument();
+    // The localized default must be suppressed when a custom message exists.
+    expect(screen.queryByText(DEFAULT_WARNING)).not.toBeInTheDocument();
+    // Button label is untouched — still the default revoke copy.
+    expect(
+      screen.getByRole('button', { name: 'Revoke Consent' }),
+    ).toBeInTheDocument();
+  });
+
+  it('shows the localized default warning when revoke_warning_message is null', () => {
+    renderModal(makeRecord({ revoke_warning_message: null }));
+
+    expect(screen.getByText(DEFAULT_WARNING)).toBeInTheDocument();
+    expect(
+      screen.getByRole('button', { name: 'Revoke Consent' }),
+    ).toBeInTheDocument();
+  });
+
+  it('shows the localized default warning when revoke_warning_message is an empty string', () => {
+    renderModal(makeRecord({ revoke_warning_message: '' }));
+
+    expect(screen.getByText(DEFAULT_WARNING)).toBeInTheDocument();
+  });
+
+  it('shows the localized default warning when revoke_warning_message is absent (older backends)', () => {
+    renderModal(makeRecord()); // no `revoke_warning_message` field
+
+    expect(screen.getByText(DEFAULT_WARNING)).toBeInTheDocument();
+    expect(
+      screen.getByRole('button', { name: 'Revoke Consent' }),
+    ).toBeInTheDocument();
+  });
+
+  it('does not apply the custom revoke warning to the regrant branch', () => {
+    // A withdrawn record uses the regrant action; the per-purpose revoke
+    // message must never leak into the regrant warning.
+    renderModal(
+      makeRecord({
+        status: ConsentStatusEnum.WITHDRAWN,
+        revoke_warning_message: CUSTOM_WARNING,
+      }),
+    );
+
+    expect(screen.getByText('Regranting will restore this consent.')).toBeInTheDocument();
+    expect(screen.queryByText(CUSTOM_WARNING)).not.toBeInTheDocument();
+    expect(
+      screen.getByRole('button', { name: 'Regrant Consent' }),
+    ).toBeInTheDocument();
+  });
+});