@redacto.io/consent-sdk-react 10.1.0 → 10.2.0-beta.1

package/dist/privacy-center.d.mts

@@ -113,7 +113,9 @@ declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
      * `selected: true` to regrant/renew, and `partial: true` so the rest of the
      * notice's purposes are left untouched. The principal is resolved from the
      * JWT, so no `contact`/identifiers are sent in the body, and
-     * `consent_event_uuid` is omitted so the ledger mints a fresh event.
+     * `consent_event_uuid` is omitted so the ledger mints a fresh event, and
+     * `product_uuid` pins it to one card -- unscoped, the ledger fans the
+     * answer out over every product the notice covers.
      *
      * Without a ledger, the legacy Python `/manage-consent?status=` endpoint is
      * used with its `{ purpose_uuid, contact, ... }` payload.

package/dist/privacy-center.d.ts

@@ -113,7 +113,9 @@ declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
      * `selected: true` to regrant/renew, and `partial: true` so the rest of the
      * notice's purposes are left untouched. The principal is resolved from the
      * JWT, so no `contact`/identifiers are sent in the body, and
-     * `consent_event_uuid` is omitted so the ledger mints a fresh event.
+     * `consent_event_uuid` is omitted so the ledger mints a fresh event, and
+     * `product_uuid` pins it to one card -- unscoped, the ledger fans the
+     * answer out over every product the notice covers.
      *
      * Without a ledger, the legacy Python `/manage-consent?status=` endpoint is
      * used with its `{ purpose_uuid, contact, ... }` payload.

package/dist/privacy-center.js

@@ -10032,6 +10032,64 @@ var useAuth = () => {
 // src/RedactoPrivacyCenter/context/BaseUrlContext.tsx
 var import_react4 = require("react");
 
+// src/shared/idempotency.ts
+var HEADER = "Idempotency-Key";
+var pending = /* @__PURE__ */ new Map();
+var MAX_PENDING = 16;
+var mintKey = () => {
+  if (typeof crypto !== "undefined" && typeof crypto.randomUUID === "function") {
+    return crypto.randomUUID();
+  }
+  return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 14)}-${Math.random().toString(36).slice(2, 14)}`;
+};
+var statusOf = (outcome) => {
+  if (typeof Response !== "undefined" && outcome instanceof Response) {
+    return outcome.status;
+  }
+  if (outcome && typeof outcome === "object" && "status" in outcome) {
+    const status = outcome.status;
+    if (typeof status === "number") return status;
+  }
+  return void 0;
+};
+var settledOnResolve = (result) => {
+  const status = statusOf(result);
+  return status === void 0 || status < 500;
+};
+var settledOnReject = (error) => {
+  const status = statusOf(error);
+  return status !== void 0 && status < 500;
+};
+var withIdempotencyKey = async (url, body, send) => {
+  const signature = `${url}
+${body}`;
+  let entry = pending.get(signature);
+  if (!entry) {
+    entry = { key: mintKey(), inFlight: 0, keep: false };
+    if (pending.size >= MAX_PENDING) {
+      const oldest = pending.keys().next().value;
+      if (oldest !== void 0) pending.delete(oldest);
+    }
+    pending.set(signature, entry);
+  } else if (entry.inFlight === 0) {
+    entry.keep = false;
+  }
+  entry.inFlight += 1;
+  const settle = (settled) => {
+    entry.inFlight -= 1;
+    if (!settled) entry.keep = true;
+    if (entry.inFlight === 0 && !entry.keep) pending.delete(signature);
+  };
+  try {
+    const result = await send({ [HEADER]: entry.key });
+    settle(settledOnResolve(result));
+    return result;
+  } catch (error) {
+    settle(settledOnReject(error));
+    throw error;
+  }
+};
+
 // src/RedactoPrivacyCenter/api/client.ts
 function createConsentClient(baseUrl, ledgerBaseUrl) {
   const ledgerConfigured = Boolean(ledgerBaseUrl);
@@ -10180,8 +10238,15 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       const queryParams = new URLSearchParams();
       if (language) queryParams.append("language", language);
       const queryString = queryParams.toString();
-      const url = privacyCenterUrl(baseRequest, `/form/data${queryString ? `?${queryString}` : ""}`);
-      const { useSessionAuth = false, getAuthToken, ...fetchOptions } = options || {};
+      const url = privacyCenterUrl(
+        baseRequest,
+        `/form/data${queryString ? `?${queryString}` : ""}`
+      );
+      const {
+        useSessionAuth = false,
+        getAuthToken,
+        ...fetchOptions
+      } = options || {};
       if (useSessionAuth) {
         return apiFetch(url, {
           ...fetchOptions,
@@ -10202,7 +10267,11 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      */
     async createCaseRequest(baseRequest, payload, authToken, options) {
       const url = privacyCenterUrl(baseRequest, "/case");
-      const { useSessionAuth = false, getAuthToken, ...fetchOptions } = options || {};
+      const {
+        useSessionAuth = false,
+        getAuthToken,
+        ...fetchOptions
+      } = options || {};
       const contact = sandboxContact();
       const requestPayload = contact && payload && typeof payload === "object" ? { ...payload, contact } : payload;
       if (useSessionAuth) {
@@ -10256,7 +10325,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       const url = `${baseUrl}/public/tokens/token-exchange?token=${encodeURIComponent(token)}`;
       const response = await fetch(url, {
         method: "GET",
-        headers: { "Accept": "application/json" }
+        headers: { Accept: "application/json" }
       });
       if (!response.ok) {
         const errorData = await response.json().catch(() => null);
@@ -10296,13 +10365,24 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      */
     async getUserConsents(baseRequest, params, authToken, options) {
       const queryParams = new URLSearchParams();
-      if (params.offset !== void 0) queryParams.append("offset", params.offset.toString());
-      if (params.limit !== void 0) queryParams.append("limit", params.limit.toString());
-      if (params.nominated_offset !== void 0) queryParams.append("nominated_offset", params.nominated_offset.toString());
-      if (params.nominated_limit !== void 0) queryParams.append("nominated_limit", params.nominated_limit.toString());
+      if (params.offset !== void 0)
+        queryParams.append("offset", params.offset.toString());
+      if (params.limit !== void 0)
+        queryParams.append("limit", params.limit.toString());
+      if (params.nominated_offset !== void 0)
+        queryParams.append(
+          "nominated_offset",
+          params.nominated_offset.toString()
+        );
+      if (params.nominated_limit !== void 0)
+        queryParams.append(
+          "nominated_limit",
+          params.nominated_limit.toString()
+        );
       if (params.search) queryParams.append("search", params.search);
       if (params.status) queryParams.append("status", params.status);
-      if (params.product_uuid) queryParams.append("product_uuid", params.product_uuid);
+      if (params.product_uuid)
+        queryParams.append("product_uuid", params.product_uuid);
       if (params.language) queryParams.append("language", params.language);
       appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
@@ -10321,12 +10401,15 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      */
     async getGroupPurposes(baseRequest, productUuid, params, authToken, options) {
       const queryParams = new URLSearchParams();
-      if (params.offset !== void 0) queryParams.append("offset", params.offset.toString());
-      if (params.limit !== void 0) queryParams.append("limit", params.limit.toString());
+      if (params.offset !== void 0)
+        queryParams.append("offset", params.offset.toString());
+      if (params.limit !== void 0)
+        queryParams.append("limit", params.limit.toString());
       if (params.status) queryParams.append("status", params.status);
       if (params.search) queryParams.append("search", params.search);
       if (params.language) queryParams.append("language", params.language);
-      if (params.nominator_uuid) queryParams.append("nominator_uuid", params.nominator_uuid);
+      if (params.nominator_uuid)
+        queryParams.append("nominator_uuid", params.nominator_uuid);
       appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const suffix = `/user-consents/${productUuid}/purposes${queryString ? `?${queryString}` : ""}`;
@@ -10348,7 +10431,9 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * `selected: true` to regrant/renew, and `partial: true` so the rest of the
      * notice's purposes are left untouched. The principal is resolved from the
      * JWT, so no `contact`/identifiers are sent in the body, and
-     * `consent_event_uuid` is omitted so the ledger mints a fresh event.
+     * `consent_event_uuid` is omitted so the ledger mints a fresh event, and
+     * `product_uuid` pins it to one card -- unscoped, the ledger fans the
+     * answer out over every product the notice covers.
      *
      * Without a ledger, the legacy Python `/manage-consent?status=` endpoint is
      * used with its `{ purpose_uuid, contact, ... }` payload.
@@ -10356,8 +10441,14 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
     async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements, language) {
       var _a;
       if (!useLedger()) {
-        const url2 = privacyCenterUrl(baseRequest, `/manage-consent?status=${status}`);
-        const body2 = { purpose_uuid: purposeId, contact };
+        const url2 = privacyCenterUrl(
+          baseRequest,
+          `/manage-consent?status=${status}`
+        );
+        const body2 = {
+          purpose_uuid: purposeId,
+          contact
+        };
         if (nominatorContact) {
           body2.nominator_contact = nominatorContact;
         }
@@ -10378,7 +10469,9 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         });
       }
       if (!noticeUuid) {
-        throw new Error("notice_uuid is required to manage consent via the ledger");
+        throw new Error(
+          "notice_uuid is required to manage consent via the ledger"
+        );
       }
       const purposeSelected = status !== "revoke";
       const elements = (dataElements != null ? dataElements : []).map((de) => {
@@ -10397,6 +10490,12 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         // Sandbox has no JWT, so the ledger resolves the acting test principal
         // from this identity in the body; null (spread no-op) on the live JWT path.
         ...(_a = sandboxBodyIdentity()) != null ? _a : {},
+        // Pins the action to the card the user acted on. Without it the ledger
+        // scopes by the notice and applies the answer to every product the
+        // notice covers, so revoking a purpose held on two products withdrew
+        // both. Stamped on the envelope and the selection, mirroring the Python
+        // relay this path was modelled on.
+        ...productUuid ? { product_uuid: productUuid } : {},
         partial: true,
         declined: false,
         select_all_mandatory: false,
@@ -10404,6 +10503,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         purposes: [
           {
             purpose_uuid: purposeId,
+            ...productUuid ? { product_uuid: productUuid } : {},
             selected: purposeSelected,
             data_elements: elements
           }
@@ -10411,11 +10511,19 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         ...language ? { language } : {}
       };
       const url = ledgerUrl(baseRequest, "/submit-consent");
-      return privacyCenterApiFetch(url, {
-        ...options,
-        method: "POST",
-        body: JSON.stringify(body),
-        authToken: resolveAuthToken(authToken, baseRequest)
+      const serialisedBody = JSON.stringify(body);
+      return withIdempotencyKey(url, serialisedBody, (idempotencyHeaders) => {
+        const headers = new Headers(options == null ? void 0 : options.headers);
+        Object.entries(idempotencyHeaders).forEach(
+          ([name, value]) => headers.set(name, value)
+        );
+        return privacyCenterApiFetch(url, {
+          ...options,
+          method: "POST",
+          body: serialisedBody,
+          headers,
+          authToken: resolveAuthToken(authToken, baseRequest)
+        });
       });
     },
     /**
@@ -10428,7 +10536,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if (language) queryParams.append("language", language);
       appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
-      const url = privacyCenterUrl(baseRequest, `/activities${queryString ? `?${queryString}` : ""}`);
+      const url = privacyCenterUrl(
+        baseRequest,
+        `/activities${queryString ? `?${queryString}` : ""}`
+      );
       return privacyCenterApiFetch(url, {
         ...options,
         authToken: resolveAuthToken(authToken, baseRequest)
@@ -10466,13 +10577,19 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      */
     async getReceipts(baseRequest, params, authToken, options) {
       const queryParams = new URLSearchParams();
-      if (params.skip !== void 0) queryParams.append("skip", params.skip.toString());
-      if (params.limit !== void 0) queryParams.append("limit", params.limit.toString());
-      if (params.notice_uuid) queryParams.append("notice_uuid", params.notice_uuid);
-      if (params.event_type) queryParams.append("event_type", params.event_type);
+      if (params.skip !== void 0)
+        queryParams.append("skip", params.skip.toString());
+      if (params.limit !== void 0)
+        queryParams.append("limit", params.limit.toString());
+      if (params.notice_uuid)
+        queryParams.append("notice_uuid", params.notice_uuid);
+      if (params.event_type)
+        queryParams.append("event_type", params.event_type);
       if (params.status) queryParams.append("status", params.status);
-      if (params.created_after) queryParams.append("created_after", params.created_after);
-      if (params.created_before) queryParams.append("created_before", params.created_before);
+      if (params.created_after)
+        queryParams.append("created_after", params.created_after);
+      if (params.created_before)
+        queryParams.append("created_before", params.created_before);
       if (params.language) queryParams.append("language", params.language);
       appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
@@ -10514,7 +10631,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
           trimmedToken.startsWith("Bearer ") ? trimmedToken : `Bearer ${trimmedToken}`
         );
       }
-      const response = await fetch(url, { method: "GET", headers: requestHeaders });
+      const response = await fetch(url, {
+        method: "GET",
+        headers: requestHeaders
+      });
       if (!response.ok) {
         let errorMessage = `Request failed with status ${response.status}`;
         try {
@@ -10551,7 +10671,11 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Get messages for a case (privacy center)
      */
     async getCaseMessages(baseRequest, caseUuid, authToken) {
-      const url = caseUrl(baseRequest, caseUuid, `/messages${sandboxIdentitySuffix()}`);
+      const url = caseUrl(
+        baseRequest,
+        caseUuid,
+        `/messages${sandboxIdentitySuffix()}`
+      );
       return privacyCenterApiFetch(url, {
         authToken: resolveAuthToken(authToken, baseRequest)
       });
@@ -10560,7 +10684,11 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Send a message on a case (privacy center)
      */
     async sendCaseMessage(baseRequest, caseUuid, body, documentUuids, authToken) {
-      const url = caseUrl(baseRequest, caseUuid, `/messages${sandboxIdentitySuffix()}`);
+      const url = caseUrl(
+        baseRequest,
+        caseUuid,
+        `/messages${sandboxIdentitySuffix()}`
+      );
       return privacyCenterApiFetch(url, {
         method: "POST",
         body: JSON.stringify({ body, document_uuids: documentUuids }),
@@ -10571,7 +10699,11 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Upload a document on a case (multipart/form-data, privacy center)
      */
     async uploadCaseDocument(baseRequest, caseUuid, file, authToken) {
-      const url = caseUrl(baseRequest, caseUuid, `/upload-document${sandboxIdentitySuffix()}`);
+      const url = caseUrl(
+        baseRequest,
+        caseUuid,
+        `/upload-document${sandboxIdentitySuffix()}`
+      );
       const formData = new FormData();
       formData.append("file", file, file.name);
       formData.append("payload", JSON.stringify({ metadata: null }));
@@ -10600,7 +10732,11 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Get document info/download URL for a case document (privacy center)
      */
     async getCaseDocument(baseRequest, caseUuid, documentUuid, authToken) {
-      const url = caseUrl(baseRequest, caseUuid, `/documents/${documentUuid}${sandboxIdentitySuffix()}`);
+      const url = caseUrl(
+        baseRequest,
+        caseUuid,
+        `/documents/${documentUuid}${sandboxIdentitySuffix()}`
+      );
       return privacyCenterApiFetch(url, {
         authToken: resolveAuthToken(authToken, baseRequest)
       });
@@ -10633,7 +10769,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         queryParams.append("language", params.language);
       }
       const queryString = queryParams.toString();
-      const url = notificationUrl(baseRequest, queryString ? `?${queryString}` : "");
+      const url = notificationUrl(
+        baseRequest,
+        queryString ? `?${queryString}` : ""
+      );
       return privacyCenterApiFetch(url, {
         authToken: resolveAuthToken(authToken, baseRequest)
       });
@@ -10680,7 +10819,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Acknowledge a notification (sets is_read and is_acknowledged to true)
      */
     async acknowledgeNotification(baseRequest, notificationUuid, authToken) {
-      const url = notificationUrl(baseRequest, `/${notificationUuid}/acknowledge`);
+      const url = notificationUrl(
+        baseRequest,
+        `/${notificationUuid}/acknowledge`
+      );
       return privacyCenterApiFetch(url, {
         method: "POST",
         authToken: resolveAuthToken(authToken, baseRequest)