@redacto.io/consent-sdk-react 10.0.0-beta.1 → 10.0.0-beta.3

package/src/RedactoPrivacyCenter/components/AppShell/UserMenu.tsx

@@ -5,7 +5,8 @@ import { PCAvatar, PCPopover } from '../../ui';
 import { useBranding } from '../../context/BrandingContext';
 import { useOrganization } from '../../context/OrganizationContext';
 import { useProfileSwitch } from '../../context/ProfileSwitchContext';
-import { getVar } from '../../lib/utils';
+import { useAuth } from '../../context/AuthContext';
+import { decodeJwtToken, getVar } from '../../lib/utils';
 import { usePrivacyCenterExitAction } from './usePrivacyCenterExitAction';
 
 type UserMenuProps = {
@@ -35,6 +36,7 @@ export function UserMenu({ onBack }: UserMenuProps) {
   const { t } = useTranslation();
   const branding = useBranding();
   const { organization } = useOrganization();
+  const { accessToken } = useAuth();
   const [email, setEmail] = useState('');
 
   useEffect(() => {
@@ -45,6 +47,12 @@ export function UserMenu({ onBack }: UserMenuProps) {
     usePrivacyCenterExitAction(onBack);
   const { canSwitch, switchProfile } = useProfileSwitch();
 
+  // The signed-in principal's org_user_id — unique per profile, unlike the
+  // email a shared contact reuses across profiles — so the menu can show which
+  // profile is active. Read from the (live) token, which re-scopes on switch.
+  const orgUserId =
+    (decodeJwtToken(accessToken)?.user_data?.org_user_id as string) || '';
+
   const displayName = branding?.brand_name || organization?.name || '';
   const triggerAvatarName = email ? initialsFromEmail(email) : displayName || '?';
 
@@ -155,7 +163,7 @@ export function UserMenu({ onBack }: UserMenuProps) {
       </div>
 
       {/* Identity card */}
-      {email && (
+      {(email || orgUserId) && (
         <div
           style={{
             padding: '12px 16px',
@@ -168,22 +176,21 @@ export function UserMenu({ onBack }: UserMenuProps) {
                 : 'none',
           }}
         >
-          <PCAvatar name={initialsFromEmail(email)} size="sm" color="info" />
-          <div
-            title={email}
-            style={{
-              fontSize: 13,
-              fontWeight: 600,
-              color: getVar('--pc-text-primary'),
-              lineHeight: 1.3,
-              overflow: 'hidden',
-              textOverflow: 'ellipsis',
-              whiteSpace: 'nowrap',
-              minWidth: 0,
-              flex: 1,
-            }}
-          >
-            {email}
+          <PCAvatar name={triggerAvatarName} size="sm" color="info" />
+          <div className="pc-shell-user-menu-identity">
+            {email ? (
+              <div title={email} className="pc-shell-user-menu-identity-email">
+                {email}
+              </div>
+            ) : null}
+            {orgUserId ? (
+              <div
+                title={orgUserId}
+                className="pc-shell-user-menu-identity-id"
+              >
+                {t('userIdLabel', { id: orgUserId })}
+              </div>
+            ) : null}
           </div>
         </div>
       )}

package/src/RedactoPrivacyCenter/components/ConsentManager.tsx

@@ -790,6 +790,13 @@ export default function ConsentManager({ variant }: ConsentManagerProps) {
           toast.error(t('nominatorNotFound'));
         } else if (error?.code === 'NOMINEE_MUST_SPECIFY_NOMINATOR') {
           toast.error(t('nomineeMustSpecifyNominator'));
+        } else if (error?.code === 'PURPOSE_NOT_REVOCABLE') {
+          toast.error(
+            t(
+              'purposeNotRevocableError',
+              'This purpose can\'t be withdrawn directly. Please raise a request to remove it.'
+            )
+          );
         } else {
           toast.error(errorMessages[action]);
         }

package/src/RedactoPrivacyCenter/components/ConsentManagerCells.tsx

@@ -176,8 +176,14 @@ export const renderModifyButton = (
   onModify: (consent: ConsentModalRecord) => void,
   t: TFunction
 ) => {
-  const isDisabled = consent.status === ConsentStatusEnum.DECLINED;
-  return (
+  // An ACTIVE purpose flagged non-revocable can't be self-service withdrawn.
+  // Gate strictly on the explicit `false` so older responses (field absent)
+  // stay revocable.
+  const isNonRevocable =
+    consent.status === ConsentStatusEnum.ACTIVE && consent.revocable === false;
+  const isDisabled = consent.status === ConsentStatusEnum.DECLINED || isNonRevocable;
+  const nonRevocableMessage = t('purposeNotRevocable', "This purpose can't be withdrawn directly.");
+  const button = (
     <button
       type="button"
       style={{
@@ -194,8 +200,19 @@ export const renderModifyButton = (
         if (!isDisabled) onModify(consent);
       }}
       disabled={isDisabled}
+      title={isNonRevocable ? nonRevocableMessage : undefined}
     >
       {t('modifyButton')}
     </button>
   );
+
+  if (isNonRevocable) {
+    return (
+      <PCTooltip content={nonRevocableMessage} placement="top">
+        {button}
+      </PCTooltip>
+    );
+  }
+
+  return button;
 };

package/src/RedactoPrivacyCenter/components/ModifyConsentModal.tsx

@@ -32,7 +32,7 @@ export const ModifyConsentModal = ({
         action: 'revoke' as ConsentAction,
         buttonLabel: t('revokeConsent'),
         buttonVariant: 'danger' as const,
-        warningMessage: t('revokeConsentWarning'),
+        warningMessage: selectedRecord.revoke_warning_message || t('revokeConsentWarning'),
         description: nominatorLabel
           ? t('aboutToModifyConsentOnBehalf', { nominator: nominatorLabel })
           : t('aboutToModifyConsent'),

package/src/RedactoPrivacyCenter/components/SelectUser.tsx

@@ -40,8 +40,17 @@ export const SelectUser = ({
           const principalUuid = candidate.uuid || '';
           const primaryLabel =
             candidate.primary_email || candidate.primary_mobile || candidate.uuid;
-          const secondaryLabel =
+          const secondaryContact =
             candidate.primary_mobile || candidate.primary_email || '';
+          // Don't echo the same value on both lines — an email-only principal
+          // otherwise renders its email twice, which is exactly the "identical
+          // rows" problem. The org_user_id below is the real differentiator.
+          const secondaryLabel =
+            secondaryContact !== primaryLabel ? secondaryContact : '';
+          // org_user_id is unique per principal (ledger-enforced within the
+          // org/workspace), so it's the reliable way to tell shared-contact
+          // profiles apart when the email/mobile are identical.
+          const orgUserId = candidate.org_user_id || '';
           const isBusy = busyOrgUserId === principalUuid;
           return (
             <button
@@ -60,6 +69,11 @@ export const SelectUser = ({
                     {secondaryLabel}
                   </span>
                 ) : null}
+                {orgUserId ? (
+                  <span className="pc-select-user__item-id">
+                    {t('userIdLabel', { id: orgUserId })}
+                  </span>
+                ) : null}
               </span>
               {isBusy ? (
                 <span className="pc-select-user__item-status">

package/src/RedactoPrivacyCenter/lib/types.ts

@@ -256,6 +256,15 @@ export type PurposeItem = {
   method: string;
   data_elements: ConsentDataElement[];
   link_reason: string | null;
+  // When explicitly false, the purpose cannot be self-service withdrawn/revoked
+  // in the Privacy Center — the user must raise a data-subject request instead.
+  // Optional for backwards-compat: older backends omit it (treated as revocable).
+  revocable?: boolean;
+  // Per-purpose override for the revoke-confirmation warning message. When set,
+  // the revoke modal shows this text instead of the localized default; when
+  // null/empty/absent, the default `revokeConsentWarning` copy is used.
+  // Optional for backwards-compat: older backends omit it.
+  revoke_warning_message?: string | null;
   // UUID of the notice version this purpose was consented under. Served by the
   // Go ledger's user-consents response; required to revoke/regrant via the
   // ledger's submit-consent endpoint (which has no manage-consent route).

package/src/RedactoPrivacyCenter/locales/as/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} একাধিক প্ৰ'ফাইলৰ সৈতে সংযুক্ত। আপুনি চাব বিচৰাটো বাছনি কৰক।",
   "contactLinkedToMultipleProfiles": "এই যোগাযোগটো একাধিক প্ৰ'ফাইলৰ সৈতে সংযুক্ত। আপুনি চাব বিচৰাটো বাছনি কৰক।",
   "signingInEllipsis": "ছাইন ইন হৈ আছে…",
-  "couldNotSwitchProfile": "সেই প্ৰ'ফাইললৈ সলনি কৰিব পৰা নগ'ল। অনুগ্ৰহ কৰি পুনৰ চেষ্টা কৰক।"
+  "couldNotSwitchProfile": "সেই প্ৰ'ফাইললৈ সলনি কৰিব পৰা নগ'ল। অনুগ্ৰহ কৰি পুনৰ চেষ্টা কৰক।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "ব্যৱহাৰকাৰী আইডি: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/bho/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} एक से ढेर प्रोफाइल से जुड़ल बा। जवन रउआ देखल चाहत बानी ओकरा के चुनीं।",
   "contactLinkedToMultipleProfiles": "ई संपर्क एक से ढेर प्रोफाइल से जुड़ल बा। जवन रउआ देखल चाहत बानी ओकरा के चुनीं।",
   "signingInEllipsis": "साइन इन हो रहल बा…",
-  "couldNotSwitchProfile": "ओह प्रोफाइल पर स्विच ना हो सकल। कृपया फेर से कोसिस करीं।"
+  "couldNotSwitchProfile": "ओह प्रोफाइल पर स्विच ना हो सकल। कृपया फेर से कोसिस करीं।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "उपयोगकर्ता आईडी: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/bn/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} একাধিক প্রোফাইলের সাথে যুক্ত। আপনি যেটি দেখতে চান সেটি বেছে নিন।",
   "contactLinkedToMultipleProfiles": "এই যোগাযোগটি একাধিক প্রোফাইলের সাথে যুক্ত। আপনি যেটি দেখতে চান সেটি বেছে নিন।",
   "signingInEllipsis": "সাইন ইন হচ্ছে…",
-  "couldNotSwitchProfile": "সেই প্রোফাইলে স্যুইচ করা যায়নি। অনুগ্রহ করে আবার চেষ্টা করুন।"
+  "couldNotSwitchProfile": "সেই প্রোফাইলে স্যুইচ করা যায়নি। অনুগ্রহ করে আবার চেষ্টা করুন।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "ব্যবহারকারীর আইডি: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/brx/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} आ मोनसेनिख्रुइ बांसिन प्रफाइलजों नांजाब दं। नोंथाङा नायनो लुबैयोब्ला बेखौ सायख।",
   "contactLinkedToMultipleProfiles": "बे सोमोन्दोआ मोनसेनिख्रुइ बांसिन प्रफाइलजों नांजाब दं। नोंथाङा नायनो लुबैयोब्ला बेखौ सायख।",
   "signingInEllipsis": "साइन इन जायगासिनो दं…",
-  "couldNotSwitchProfile": "बै प्रफाइलआव स्विच खालामनो हायाखै। अननानै फिन नाजा।"
+  "couldNotSwitchProfile": "बै प्रफाइलआव स्विच खालामनो हायाखै। अननानै फिन नाजा।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "यूजर आईडी: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/doi/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} इक कोला मता प्रोफाइलें कन्नै जुड़्या दा ऐ। जेह्ड़ी तुसें दिक्खनी ऐ ओह् चुनो।",
   "contactLinkedToMultipleProfiles": "एह् संपर्क इक कोला मता प्रोफाइलें कन्नै जुड़्या दा ऐ। जेह्ड़ी तुसें दिक्खनी ऐ ओह् चुनो।",
   "signingInEllipsis": "साइन इन होआ करदा ऐ…",
-  "couldNotSwitchProfile": "ओह् प्रोफाइल पर स्विच नेईं होई सकेआ। कृपा करियै दुबारा कोशिश करो।"
+  "couldNotSwitchProfile": "ओह् प्रोफाइल पर स्विच नेईं होई सकेआ। कृपा करियै दुबारा कोशिश करो।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "प्रयोगकर्ता आईडी: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/en/translation.json

@@ -350,5 +350,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} is linked to more than one profile. Choose the one you want to view.",
   "contactLinkedToMultipleProfiles": "This contact is linked to more than one profile. Choose the one you want to view.",
   "signingInEllipsis": "Signing in…",
-  "couldNotSwitchProfile": "Could not switch to that profile. Please try again."
+  "couldNotSwitchProfile": "Could not switch to that profile. Please try again.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "User ID: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/gom/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} एकापरस चड प्रोफायलांक जोडलां. तुमकां जें पळोवपाक जाय तें निवडात.",
   "contactLinkedToMultipleProfiles": "हो संपर्क एकापरस चड प्रोफायलांक जोडला. तुमकां जें पळोवपाक जाय तें निवडात.",
   "signingInEllipsis": "साइन इन जावन आसा…",
-  "couldNotSwitchProfile": "त्या प्रोफायलाचेर स्विच करूंक जालें ना. उपकार करून परत यत्न करात."
+  "couldNotSwitchProfile": "त्या प्रोफायलाचेर स्विच करूंक जालें ना. उपकार करून परत यत्न करात.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "वापरपी आयडी: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/gu/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} એક કરતાં વધુ પ્રોફાઇલ સાથે જોડાયેલ છે. તમે જે જોવા માંગો છો તે પસંદ કરો.",
   "contactLinkedToMultipleProfiles": "આ સંપર્ક એક કરતાં વધુ પ્રોફાઇલ સાથે જોડાયેલ છે. તમે જે જોવા માંગો છો તે પસંદ કરો.",
   "signingInEllipsis": "સાઇન ઇન થઈ રહ્યું છે…",
-  "couldNotSwitchProfile": "તે પ્રોફાઇલ પર સ્વિચ કરી શકાયું નહીં. કૃપા કરીને ફરી પ્રયાસ કરો."
+  "couldNotSwitchProfile": "તે પ્રોફાઇલ પર સ્વિચ કરી શકાયું નહીં. કૃપા કરીને ફરી પ્રયાસ કરો.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "વપરાશકર્તા આઈડી: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/hi/translation.json

@@ -339,5 +339,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} एक से अधिक प्रोफ़ाइल से जुड़ा है। जिसे आप देखना चाहते हैं उसे चुनें।",
   "contactLinkedToMultipleProfiles": "यह संपर्क एक से अधिक प्रोफ़ाइल से जुड़ा है। जिसे आप देखना चाहते हैं उसे चुनें।",
   "signingInEllipsis": "साइन इन हो रहा है…",
-  "couldNotSwitchProfile": "उस प्रोफ़ाइल पर स्विच नहीं किया जा सका। कृपया पुनः प्रयास करें।"
+  "couldNotSwitchProfile": "उस प्रोफ़ाइल पर स्विच नहीं किया जा सका। कृपया पुनः प्रयास करें।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "उपयोगकर्ता आईडी: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/kn/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} ಒಂದಕ್ಕಿಂತ ಹೆಚ್ಚು ಪ್ರೊಫೈಲ್‌ಗಳಿಗೆ ಲಿಂಕ್ ಆಗಿದೆ. ನೀವು ವೀಕ್ಷಿಸಲು ಬಯಸುವುದನ್ನು ಆಯ್ಕೆಮಾಡಿ.",
   "contactLinkedToMultipleProfiles": "ಈ ಸಂಪರ್ಕವು ಒಂದಕ್ಕಿಂತ ಹೆಚ್ಚು ಪ್ರೊಫೈಲ್‌ಗಳಿಗೆ ಲಿಂಕ್ ಆಗಿದೆ. ನೀವು ವೀಕ್ಷಿಸಲು ಬಯಸುವುದನ್ನು ಆಯ್ಕೆಮಾಡಿ.",
   "signingInEllipsis": "ಸೈನ್ ಇನ್ ಆಗುತ್ತಿದೆ…",
-  "couldNotSwitchProfile": "ಆ ಪ್ರೊಫೈಲ್‌ಗೆ ಬದಲಾಯಿಸಲು ಸಾಧ್ಯವಾಗಲಿಲ್ಲ. ದಯವಿಟ್ಟು ಮತ್ತೆ ಪ್ರಯತ್ನಿಸಿ."
+  "couldNotSwitchProfile": "ಆ ಪ್ರೊಫೈಲ್‌ಗೆ ಬದಲಾಯಿಸಲು ಸಾಧ್ಯವಾಗಲಿಲ್ಲ. ದಯವಿಟ್ಟು ಮತ್ತೆ ಪ್ರಯತ್ನಿಸಿ.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "ಬಳಕೆದಾರ ಐಡಿ: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/ks/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} چھُ اکہ کھۄتہ زیادٕ پروفائلن سٟتؠ جوڑنہ آمُت۔ یُس توہہِ وُچھُن چھِو یژھان سُ ژارٕو۔",
   "contactLinkedToMultipleProfiles": "یہ رابطہ چھُ اکہ کھۄتہ زیادٕ پروفائلن سٟتؠ جوڑنہ آمُت۔ یُس توہہِ وُچھُن چھِو یژھان سُ ژارٕو۔",
   "signingInEllipsis": "سائن اِن گژھان چھُ…",
-  "couldNotSwitchProfile": "تہِ پروفائلس منٛز سوِچ کرُن آو نہ۔ مہربانی کرِتھ دوبارٕ کوشش کریو۔"
+  "couldNotSwitchProfile": "تہِ پروفائلس منٛز سوِچ کرُن آو نہ۔ مہربانی کرِتھ دوبارٕ کوشش کریو۔",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "صارف آئی ڈی: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/mai/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} एकाधिक प्रोफाइलसँ जुड़ल अछि। जे अहाँ देखय चाहैत छी ओकरा चुनू।",
   "contactLinkedToMultipleProfiles": "ई संपर्क एकाधिक प्रोफाइलसँ जुड़ल अछि। जे अहाँ देखय चाहैत छी ओकरा चुनू।",
   "signingInEllipsis": "साइन इन भ' रहल अछि…",
-  "couldNotSwitchProfile": "ओ प्रोफाइल पर स्विच नहि भ' सकल। कृपया फेर सँ प्रयास करू।"
+  "couldNotSwitchProfile": "ओ प्रोफाइल पर स्विच नहि भ' सकल। कृपया फेर सँ प्रयास करू।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "उपयोगकर्ता आइडी: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/ml/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} ഒന്നിലധികം പ്രൊഫൈലുകളുമായി ബന്ധിപ്പിച്ചിരിക്കുന്നു. നിങ്ങൾ കാണാൻ ആഗ്രഹിക്കുന്നത് തിരഞ്ഞെടുക്കുക.",
   "contactLinkedToMultipleProfiles": "ഈ കോൺടാക്റ്റ് ഒന്നിലധികം പ്രൊഫൈലുകളുമായി ബന്ധിപ്പിച്ചിരിക്കുന്നു. നിങ്ങൾ കാണാൻ ആഗ്രഹിക്കുന്നത് തിരഞ്ഞെടുക്കുക.",
   "signingInEllipsis": "സൈൻ ഇൻ ചെയ്യുന്നു…",
-  "couldNotSwitchProfile": "ആ പ്രൊഫൈലിലേക്ക് മാറാൻ കഴിഞ്ഞില്ല. വീണ്ടും ശ്രമിക്കുക."
+  "couldNotSwitchProfile": "ആ പ്രൊഫൈലിലേക്ക് മാറാൻ കഴിഞ്ഞില്ല. വീണ്ടും ശ്രമിക്കുക.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "ഉപയോക്തൃ ഐഡി: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/mni-Mtei/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} অসি প্রোফাইল অমদগী হেন্না লোইননবা লৈ। নহাক্না য়েংনিংবা অদু খনবিয়ু।",
   "contactLinkedToMultipleProfiles": "মসি কন্টেক্ট অসি প্রোফাইল অমদগী হেন্না লোইননবা লৈ। নহাক্না য়েংনিংবা অদু খনবিয়ু।",
   "signingInEllipsis": "সাইন ইন তৌরি…",
-  "couldNotSwitchProfile": "প্রোফাইল অদুদা হোংদোকপা ঙমদ্রে। চানবীদুনা অমুক হন্না হোৎনবিয়ু।"
+  "couldNotSwitchProfile": "প্রোফাইল অদুদা হোংদোকপা ঙমদ্রে। চানবীদুনা অমুক হন্না হোৎনবিয়ু।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "ꯃꯤꯑꯣꯏꯕ ꯑꯥꯏꯗꯤ: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/mr/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} एकापेक्षा जास्त प्रोफाइलशी जोडलेला आहे. तुम्हाला जी पाहायची आहे ती निवडा.",
   "contactLinkedToMultipleProfiles": "हा संपर्क एकापेक्षा जास्त प्रोफाइलशी जोडलेला आहे. तुम्हाला जी पाहायची आहे ती निवडा.",
   "signingInEllipsis": "साइन इन करत आहे…",
-  "couldNotSwitchProfile": "त्या प्रोफाइलवर स्विच करता आले नाही. कृपया पुन्हा प्रयत्न करा."
+  "couldNotSwitchProfile": "त्या प्रोफाइलवर स्विच करता आले नाही. कृपया पुन्हा प्रयत्न करा.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "वापरकर्ता आयडी: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/ne/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} एकभन्दा बढी प्रोफाइलसँग जोडिएको छ। तपाईंले हेर्न चाहनुभएको छान्नुहोस्।",
   "contactLinkedToMultipleProfiles": "यो सम्पर्क एकभन्दा बढी प्रोफाइलसँग जोडिएको छ। तपाईंले हेर्न चाहनुभएको छान्नुहोस्।",
   "signingInEllipsis": "साइन इन हुँदैछ…",
-  "couldNotSwitchProfile": "त्यो प्रोफाइलमा स्विच गर्न सकिएन। कृपया फेरि प्रयास गर्नुहोस्।"
+  "couldNotSwitchProfile": "त्यो प्रोफाइलमा स्विच गर्न सकिएन। कृपया फेरि प्रयास गर्नुहोस्।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "प्रयोगकर्ता आईडी: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/or/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} ଏକାଧିକ ପ୍ରୋଫାଇଲ୍ ସହିତ ଯୋଡ଼ାଯାଇଛି। ଆପଣ ଦେଖିବାକୁ ଚାହୁଁଥିବାଟି ବାଛନ୍ତୁ।",
   "contactLinkedToMultipleProfiles": "ଏହି ଯୋଗାଯୋଗ ଏକାଧିକ ପ୍ରୋଫାଇଲ୍ ସହିତ ଯୋଡ଼ାଯାଇଛି। ଆପଣ ଦେଖିବାକୁ ଚାହୁଁଥିବାଟି ବାଛନ୍ତୁ।",
   "signingInEllipsis": "ସାଇନ୍ ଇନ୍ ହେଉଛି…",
-  "couldNotSwitchProfile": "ସେହି ପ୍ରୋଫାଇଲକୁ ସ୍ୱିଚ୍ କରାଯାଇପାରିଲା ନାହିଁ। ଦୟାକରି ପୁନର୍ବାର ଚେଷ୍ଟା କରନ୍ତୁ।"
+  "couldNotSwitchProfile": "ସେହି ପ୍ରୋଫାଇଲକୁ ସ୍ୱିଚ୍ କରାଯାଇପାରିଲା ନାହିଁ। ଦୟାକରି ପୁନର୍ବାର ଚେଷ୍ଟା କରନ୍ତୁ।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "ବ୍ୟବହାରକାରୀ ଆଇଡି: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/pa/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} ਇੱਕ ਤੋਂ ਵੱਧ ਪ੍ਰੋਫਾਈਲਾਂ ਨਾਲ ਜੁੜਿਆ ਹੋਇਆ ਹੈ। ਜੋ ਤੁਸੀਂ ਵੇਖਣਾ ਚਾਹੁੰਦੇ ਹੋ ਉਹ ਚੁਣੋ।",
   "contactLinkedToMultipleProfiles": "ਇਹ ਸੰਪਰਕ ਇੱਕ ਤੋਂ ਵੱਧ ਪ੍ਰੋਫਾਈਲਾਂ ਨਾਲ ਜੁੜਿਆ ਹੋਇਆ ਹੈ। ਜੋ ਤੁਸੀਂ ਵੇਖਣਾ ਚਾਹੁੰਦੇ ਹੋ ਉਹ ਚੁਣੋ।",
   "signingInEllipsis": "ਸਾਈਨ ਇਨ ਹੋ ਰਿਹਾ ਹੈ…",
-  "couldNotSwitchProfile": "ਉਸ ਪ੍ਰੋਫਾਈਲ 'ਤੇ ਸਵਿੱਚ ਨਹੀਂ ਕੀਤਾ ਜਾ ਸਕਿਆ। ਕਿਰਪਾ ਕਰਕੇ ਦੁਬਾਰਾ ਕੋਸ਼ਿਸ਼ ਕਰੋ।"
+  "couldNotSwitchProfile": "ਉਸ ਪ੍ਰੋਫਾਈਲ 'ਤੇ ਸਵਿੱਚ ਨਹੀਂ ਕੀਤਾ ਜਾ ਸਕਿਆ। ਕਿਰਪਾ ਕਰਕੇ ਦੁਬਾਰਾ ਕੋਸ਼ਿਸ਼ ਕਰੋ।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "ਉਪਯੋਗਕਰਤਾ ਆਈਡੀ: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/sa/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} एकाधिकैः प्रोफ़ाइलैः सह सम्बद्धः अस्ति। यत् द्रष्टुम् इच्छति तत् चिनोतु।",
   "contactLinkedToMultipleProfiles": "अयं सम्पर्कः एकाधिकैः प्रोफ़ाइलैः सह सम्बद्धः अस्ति। यत् द्रष्टुम् इच्छति तत् चिनोतु।",
   "signingInEllipsis": "प्रवेशः क्रियते…",
-  "couldNotSwitchProfile": "तां प्रोफ़ाइलं प्रति परिवर्तनं न शक्यते स्म। कृपया पुनः प्रयत्नं करोतु।"
+  "couldNotSwitchProfile": "तां प्रोफ़ाइलं प्रति परिवर्तनं न शक्यते स्म। कृपया पुनः प्रयत्नं करोतु।",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "उपयोक्तृ-आयडी: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/sat/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} ᱫᱚ ᱢᱤᱫ ᱠᱷᱚᱱ ᱰᱷᱮᱨ ᱯᱨᱳᱯᱷᱟᱭᱤᱞ ᱥᱟᱶ ᱡᱩᱰᱟᱹᱣ ᱟᱠᱟᱱᱟ᱾ ᱟᱢ ᱧᱮᱞ ᱥᱟᱱᱟᱢ ᱚᱱᱟ ᱵᱟᱪᱷᱟᱣ ᱢᱮ᱾",
   "contactLinkedToMultipleProfiles": "ᱱᱳᱶᱟ ᱠᱚᱱᱴᱮᱠᱴ ᱫᱚ ᱢᱤᱫ ᱠᱷᱚᱱ ᱰᱷᱮᱨ ᱯᱨᱳᱯᱷᱟᱭᱤᱞ ᱥᱟᱶ ᱡᱩᱰᱟᱹᱣ ᱟᱠᱟᱱᱟ᱾ ᱟᱢ ᱧᱮᱞ ᱥᱟᱱᱟᱢ ᱚᱱᱟ ᱵᱟᱪᱷᱟᱣ ᱢᱮ᱾",
   "signingInEllipsis": "ᱥᱟᱭᱤᱱ ᱤᱱ ᱮᱫᱟᱭ…",
-  "couldNotSwitchProfile": "ᱚᱱᱟ ᱯᱨᱳᱯᱷᱟᱭᱤᱞ ᱛᱮ ᱥᱩᱭᱪ ᱵᱟᱝ ᱦᱩᱭ ᱞᱮᱱᱟ᱾ ᱫᱟᱭᱟ ᱠᱟᱛᱮ ᱫᱩᱠᱟᱹᱛᱮ ᱠᱩᱨᱩᱢᱩᱴᱩ ᱢᱮ᱾"
+  "couldNotSwitchProfile": "ᱚᱱᱟ ᱯᱨᱳᱯᱷᱟᱭᱤᱞ ᱛᱮ ᱥᱩᱭᱪ ᱵᱟᱝ ᱦᱩᱭ ᱞᱮᱱᱟ᱾ ᱫᱟᱭᱟ ᱠᱟᱛᱮ ᱫᱩᱠᱟᱹᱛᱮ ᱠᱩᱨᱩᱢᱩᱴᱩ ᱢᱮ᱾",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "ᱵᱮᱵᱷᱟᱨᱤᱭᱟᱹ ᱟᱭᱰᱤ: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/sd/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} هڪ کان وڌيڪ پروفائلن سان ڳنڍيل آهي. جيڪو توهان ڏسڻ چاهيو ٿا اهو چونڊيو.",
   "contactLinkedToMultipleProfiles": "هي رابطو هڪ کان وڌيڪ پروفائلن سان ڳنڍيل آهي. جيڪو توهان ڏسڻ چاهيو ٿا اهو چونڊيو.",
   "signingInEllipsis": "سائن ان ٿي رهيو آهي…",
-  "couldNotSwitchProfile": "ان پروفائل تي سوئچ نه ٿي سگهيو. مهرباني ڪري ٻيهر ڪوشش ڪريو."
+  "couldNotSwitchProfile": "ان پروفائل تي سوئچ نه ٿي سگهيو. مهرباني ڪري ٻيهر ڪوشش ڪريو.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "يوزر آئيڊي: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/ta/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} ஒன்றுக்கு மேற்பட்ட சுயவிவரங்களுடன் இணைக்கப்பட்டுள்ளது. நீங்கள் பார்க்க விரும்புவதைத் தேர்ந்தெடுக்கவும்.",
   "contactLinkedToMultipleProfiles": "இந்தத் தொடர்பு ஒன்றுக்கு மேற்பட்ட சுயவிவரங்களுடன் இணைக்கப்பட்டுள்ளது. நீங்கள் பார்க்க விரும்புவதைத் தேர்ந்தெடுக்கவும்.",
   "signingInEllipsis": "உள்நுழைகிறது…",
-  "couldNotSwitchProfile": "அந்தச் சுயவிவரத்திற்கு மாற முடியவில்லை. மீண்டும் முயற்சிக்கவும்."
+  "couldNotSwitchProfile": "அந்தச் சுயவிவரத்திற்கு மாற முடியவில்லை. மீண்டும் முயற்சிக்கவும்.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "பயனர் ஐடி: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/te/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} ఒకటి కంటే ఎక్కువ ప్రొఫైల్‌లతో అనుసంధానించబడింది. మీరు చూడాలనుకుంటున్నదాన్ని ఎంచుకోండి.",
   "contactLinkedToMultipleProfiles": "ఈ సంప్రదింపు ఒకటి కంటే ఎక్కువ ప్రొఫైల్‌లతో అనుసంధానించబడింది. మీరు చూడాలనుకుంటున్నదాన్ని ఎంచుకోండి.",
   "signingInEllipsis": "సైన్ ఇన్ అవుతోంది…",
-  "couldNotSwitchProfile": "ఆ ప్రొఫైల్‌కు మారడం సాధ్యం కాలేదు. దయచేసి మళ్లీ ప్రయత్నించండి."
+  "couldNotSwitchProfile": "ఆ ప్రొఫైల్‌కు మారడం సాధ్యం కాలేదు. దయచేసి మళ్లీ ప్రయత్నించండి.",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "వినియోగదారు ఐడి: {{id}}"
 }

package/src/RedactoPrivacyCenter/locales/ur/translation.json

@@ -336,5 +336,8 @@
   "emailLinkedToMultipleProfiles": "{{email}} ایک سے زیادہ پروفائلز سے منسلک ہے۔ جسے آپ دیکھنا چاہتے ہیں اسے منتخب کریں۔",
   "contactLinkedToMultipleProfiles": "یہ رابطہ ایک سے زیادہ پروفائلز سے منسلک ہے۔ جسے آپ دیکھنا چاہتے ہیں اسے منتخب کریں۔",
   "signingInEllipsis": "سائن ان ہو رہا ہے…",
-  "couldNotSwitchProfile": "اس پروفائل پر سوئچ نہیں کیا جا سکا۔ براہ کرم دوبارہ کوشش کریں۔"
+  "couldNotSwitchProfile": "اس پروفائل پر سوئچ نہیں کیا جا سکا۔ براہ کرم دوبارہ کوشش کریں۔",
+  "purposeNotRevocable": "This purpose can't be withdrawn directly.",
+  "purposeNotRevocableError": "This purpose can't be withdrawn directly. Please raise a request to remove it.",
+  "userIdLabel": "صارف آئی ڈی: {{id}}"
 }

package/src/RedactoPrivacyCenter/styles/injectStyles.ts

@@ -747,6 +747,17 @@ export const injectPCStyles = () => {
       white-space: nowrap;
       max-width: 100%;
     }
+    .pc-select-user__item-id {
+      margin-top: 0.125rem;
+      font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+      font-size: 0.6875rem;
+      color: var(--pc-text-secondary);
+      line-height: 1.25;
+      overflow: hidden;
+      text-overflow: ellipsis;
+      white-space: nowrap;
+      max-width: 100%;
+    }
     .pc-select-user__item-status {
       font-size: 0.75rem;
       font-weight: 600;

package/tests/ManageConsentErrorMapping.test.tsx

@@ -0,0 +1,85 @@
+import { describe, it, expect } from 'vitest';
+
+import { manageConsentServer, ConsentApiError } from '../src/RedactoPrivacyCenter/api/actions';
+import { ApiError } from '../src/RedactoPrivacyCenter/api/fetcher';
+import type { createConsentClient } from '../src/RedactoPrivacyCenter/api/client';
+
+type ConsentClient = ReturnType<typeof createConsentClient>;
+
+// Build a mock consent client whose `manageConsent` rejects with the supplied
+// error. Only `manageConsent` is exercised by `manageConsentServer`, so the
+// rest of the surface is a cast-through stub.
+const makeClient = (error: unknown): ConsentClient =>
+  ({
+    manageConsent: () => Promise.reject(error),
+  } as unknown as ConsentClient);
+
+const baseParams = {
+  organizationId: 'org-1',
+  workspaceId: 'ws-1',
+  purposeId: 'purpose-1',
+  contact: 'user@example.com',
+  action: 'revoke' as const,
+  authToken: 'token-abc',
+};
+
+describe('manageConsentServer error mapping — purpose_not_revocable', () => {
+  // The consent-server 400 is rendered by a Ninja wrapper as
+  // { code: 400, status, detail: { message, code: 'purpose_not_revocable' } }.
+  // `privacyCenterApiFetch` preserves the parsed `detail` on the ApiError and
+  // sets ApiError.code only from the TOP-LEVEL string code — which here is the
+  // integer 400 (dropped, so ApiError.code is undefined). The app-level
+  // discriminator therefore lives in `error.detail.code`.
+  const realBackody400 = () =>
+    new ApiError(
+      `[400] ${JSON.stringify(
+        { message: 'This purpose cannot be revoked.', code: 'purpose_not_revocable' },
+        null,
+        2,
+      )}`,
+      { status: 400, code: undefined, detail: { message: 'This purpose cannot be revoked.', code: 'purpose_not_revocable' } },
+    );
+
+  it('maps the real backend 400 body (code nested in detail) to PURPOSE_NOT_REVOCABLE', async () => {
+    await expect(
+      manageConsentServer({ ...baseParams, consentClient: makeClient(realBackody400()) }),
+    ).rejects.toMatchObject({
+      name: 'ConsentApiError',
+      code: 'PURPOSE_NOT_REVOCABLE',
+    });
+  });
+
+  it('throws a ConsentApiError instance carrying the original message', async () => {
+    const error = realBackody400();
+    try {
+      await manageConsentServer({ ...baseParams, consentClient: makeClient(error) });
+      throw new Error('expected manageConsentServer to reject');
+    } catch (caught) {
+      expect(caught).toBeInstanceOf(ConsentApiError);
+      expect((caught as ConsentApiError).code).toBe('PURPOSE_NOT_REVOCABLE');
+      expect((caught as ConsentApiError).message).toContain('purpose_not_revocable');
+    }
+  });
+
+  it('still maps when the string code is surfaced at the top level (error.code)', async () => {
+    // Defensive: if a backend/wrapper ever exposes the string code at the top
+    // level, the original `error?.code === 'purpose_not_revocable'` arm must
+    // continue to fire.
+    const error = new ApiError('[400] purpose is not revocable', {
+      status: 400,
+      code: 'purpose_not_revocable',
+    });
+    await expect(
+      manageConsentServer({ ...baseParams, consentClient: makeClient(error) }),
+    ).rejects.toMatchObject({ code: 'PURPOSE_NOT_REVOCABLE' });
+  });
+
+  it('does not misclassify an unrelated error as PURPOSE_NOT_REVOCABLE', async () => {
+    const error = new ApiError('[500] internal server error', { status: 500 });
+    // Unrelated non-auth errors are swallowed to null by handleServerActionError,
+    // so the call resolves rather than throwing a ConsentApiError.
+    await expect(
+      manageConsentServer({ ...baseParams, consentClient: makeClient(error) }),
+    ).resolves.toBeNull();
+  });
+});