@redacto.io/consent-sdk-react 10.1.0 → 10.2.0-beta.1

package/dist/privacy-center.mjs

@@ -1,7 +1,8 @@
 import {
   SANDBOX_TOKEN_HEADER,
-  useMediaQuery
-} from "./chunk-OGL6OC3A.mjs";
+  useMediaQuery,
+  withIdempotencyKey
+} from "./chunk-6EET4YOY.mjs";
 
 // src/RedactoPrivacyCenter/RedactoPrivacyCenter.tsx
 import { I18nextProvider } from "react-i18next";
@@ -10112,8 +10113,15 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       const queryParams = new URLSearchParams();
       if (language) queryParams.append("language", language);
       const queryString = queryParams.toString();
-      const url = privacyCenterUrl(baseRequest, `/form/data${queryString ? `?${queryString}` : ""}`);
-      const { useSessionAuth = false, getAuthToken, ...fetchOptions } = options || {};
+      const url = privacyCenterUrl(
+        baseRequest,
+        `/form/data${queryString ? `?${queryString}` : ""}`
+      );
+      const {
+        useSessionAuth = false,
+        getAuthToken,
+        ...fetchOptions
+      } = options || {};
       if (useSessionAuth) {
         return apiFetch(url, {
           ...fetchOptions,
@@ -10134,7 +10142,11 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      */
     async createCaseRequest(baseRequest, payload, authToken, options) {
       const url = privacyCenterUrl(baseRequest, "/case");
-      const { useSessionAuth = false, getAuthToken, ...fetchOptions } = options || {};
+      const {
+        useSessionAuth = false,
+        getAuthToken,
+        ...fetchOptions
+      } = options || {};
       const contact = sandboxContact();
       const requestPayload = contact && payload && typeof payload === "object" ? { ...payload, contact } : payload;
       if (useSessionAuth) {
@@ -10188,7 +10200,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       const url = `${baseUrl}/public/tokens/token-exchange?token=${encodeURIComponent(token)}`;
       const response = await fetch(url, {
         method: "GET",
-        headers: { "Accept": "application/json" }
+        headers: { Accept: "application/json" }
       });
       if (!response.ok) {
         const errorData = await response.json().catch(() => null);
@@ -10228,13 +10240,24 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      */
     async getUserConsents(baseRequest, params, authToken, options) {
       const queryParams = new URLSearchParams();
-      if (params.offset !== void 0) queryParams.append("offset", params.offset.toString());
-      if (params.limit !== void 0) queryParams.append("limit", params.limit.toString());
-      if (params.nominated_offset !== void 0) queryParams.append("nominated_offset", params.nominated_offset.toString());
-      if (params.nominated_limit !== void 0) queryParams.append("nominated_limit", params.nominated_limit.toString());
+      if (params.offset !== void 0)
+        queryParams.append("offset", params.offset.toString());
+      if (params.limit !== void 0)
+        queryParams.append("limit", params.limit.toString());
+      if (params.nominated_offset !== void 0)
+        queryParams.append(
+          "nominated_offset",
+          params.nominated_offset.toString()
+        );
+      if (params.nominated_limit !== void 0)
+        queryParams.append(
+          "nominated_limit",
+          params.nominated_limit.toString()
+        );
       if (params.search) queryParams.append("search", params.search);
       if (params.status) queryParams.append("status", params.status);
-      if (params.product_uuid) queryParams.append("product_uuid", params.product_uuid);
+      if (params.product_uuid)
+        queryParams.append("product_uuid", params.product_uuid);
       if (params.language) queryParams.append("language", params.language);
       appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
@@ -10253,12 +10276,15 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      */
     async getGroupPurposes(baseRequest, productUuid, params, authToken, options) {
       const queryParams = new URLSearchParams();
-      if (params.offset !== void 0) queryParams.append("offset", params.offset.toString());
-      if (params.limit !== void 0) queryParams.append("limit", params.limit.toString());
+      if (params.offset !== void 0)
+        queryParams.append("offset", params.offset.toString());
+      if (params.limit !== void 0)
+        queryParams.append("limit", params.limit.toString());
       if (params.status) queryParams.append("status", params.status);
       if (params.search) queryParams.append("search", params.search);
       if (params.language) queryParams.append("language", params.language);
-      if (params.nominator_uuid) queryParams.append("nominator_uuid", params.nominator_uuid);
+      if (params.nominator_uuid)
+        queryParams.append("nominator_uuid", params.nominator_uuid);
       appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
       const suffix = `/user-consents/${productUuid}/purposes${queryString ? `?${queryString}` : ""}`;
@@ -10280,7 +10306,9 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * `selected: true` to regrant/renew, and `partial: true` so the rest of the
      * notice's purposes are left untouched. The principal is resolved from the
      * JWT, so no `contact`/identifiers are sent in the body, and
-     * `consent_event_uuid` is omitted so the ledger mints a fresh event.
+     * `consent_event_uuid` is omitted so the ledger mints a fresh event, and
+     * `product_uuid` pins it to one card -- unscoped, the ledger fans the
+     * answer out over every product the notice covers.
      *
      * Without a ledger, the legacy Python `/manage-consent?status=` endpoint is
      * used with its `{ purpose_uuid, contact, ... }` payload.
@@ -10288,8 +10316,14 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
     async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements, language) {
       var _a;
       if (!useLedger()) {
-        const url2 = privacyCenterUrl(baseRequest, `/manage-consent?status=${status}`);
-        const body2 = { purpose_uuid: purposeId, contact };
+        const url2 = privacyCenterUrl(
+          baseRequest,
+          `/manage-consent?status=${status}`
+        );
+        const body2 = {
+          purpose_uuid: purposeId,
+          contact
+        };
         if (nominatorContact) {
           body2.nominator_contact = nominatorContact;
         }
@@ -10310,7 +10344,9 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         });
       }
       if (!noticeUuid) {
-        throw new Error("notice_uuid is required to manage consent via the ledger");
+        throw new Error(
+          "notice_uuid is required to manage consent via the ledger"
+        );
       }
       const purposeSelected = status !== "revoke";
       const elements = (dataElements != null ? dataElements : []).map((de) => {
@@ -10329,6 +10365,12 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         // Sandbox has no JWT, so the ledger resolves the acting test principal
         // from this identity in the body; null (spread no-op) on the live JWT path.
         ...(_a = sandboxBodyIdentity()) != null ? _a : {},
+        // Pins the action to the card the user acted on. Without it the ledger
+        // scopes by the notice and applies the answer to every product the
+        // notice covers, so revoking a purpose held on two products withdrew
+        // both. Stamped on the envelope and the selection, mirroring the Python
+        // relay this path was modelled on.
+        ...productUuid ? { product_uuid: productUuid } : {},
         partial: true,
         declined: false,
         select_all_mandatory: false,
@@ -10336,6 +10378,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         purposes: [
           {
             purpose_uuid: purposeId,
+            ...productUuid ? { product_uuid: productUuid } : {},
             selected: purposeSelected,
             data_elements: elements
           }
@@ -10343,11 +10386,19 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         ...language ? { language } : {}
       };
       const url = ledgerUrl(baseRequest, "/submit-consent");
-      return privacyCenterApiFetch(url, {
-        ...options,
-        method: "POST",
-        body: JSON.stringify(body),
-        authToken: resolveAuthToken(authToken, baseRequest)
+      const serialisedBody = JSON.stringify(body);
+      return withIdempotencyKey(url, serialisedBody, (idempotencyHeaders) => {
+        const headers = new Headers(options == null ? void 0 : options.headers);
+        Object.entries(idempotencyHeaders).forEach(
+          ([name, value]) => headers.set(name, value)
+        );
+        return privacyCenterApiFetch(url, {
+          ...options,
+          method: "POST",
+          body: serialisedBody,
+          headers,
+          authToken: resolveAuthToken(authToken, baseRequest)
+        });
       });
     },
     /**
@@ -10360,7 +10411,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
       if (language) queryParams.append("language", language);
       appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
-      const url = privacyCenterUrl(baseRequest, `/activities${queryString ? `?${queryString}` : ""}`);
+      const url = privacyCenterUrl(
+        baseRequest,
+        `/activities${queryString ? `?${queryString}` : ""}`
+      );
       return privacyCenterApiFetch(url, {
         ...options,
         authToken: resolveAuthToken(authToken, baseRequest)
@@ -10398,13 +10452,19 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      */
     async getReceipts(baseRequest, params, authToken, options) {
       const queryParams = new URLSearchParams();
-      if (params.skip !== void 0) queryParams.append("skip", params.skip.toString());
-      if (params.limit !== void 0) queryParams.append("limit", params.limit.toString());
-      if (params.notice_uuid) queryParams.append("notice_uuid", params.notice_uuid);
-      if (params.event_type) queryParams.append("event_type", params.event_type);
+      if (params.skip !== void 0)
+        queryParams.append("skip", params.skip.toString());
+      if (params.limit !== void 0)
+        queryParams.append("limit", params.limit.toString());
+      if (params.notice_uuid)
+        queryParams.append("notice_uuid", params.notice_uuid);
+      if (params.event_type)
+        queryParams.append("event_type", params.event_type);
       if (params.status) queryParams.append("status", params.status);
-      if (params.created_after) queryParams.append("created_after", params.created_after);
-      if (params.created_before) queryParams.append("created_before", params.created_before);
+      if (params.created_after)
+        queryParams.append("created_after", params.created_after);
+      if (params.created_before)
+        queryParams.append("created_before", params.created_before);
       if (params.language) queryParams.append("language", params.language);
       appendSandboxIdentity(queryParams);
       const queryString = queryParams.toString();
@@ -10446,7 +10506,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
           trimmedToken.startsWith("Bearer ") ? trimmedToken : `Bearer ${trimmedToken}`
         );
       }
-      const response = await fetch(url, { method: "GET", headers: requestHeaders });
+      const response = await fetch(url, {
+        method: "GET",
+        headers: requestHeaders
+      });
       if (!response.ok) {
         let errorMessage = `Request failed with status ${response.status}`;
         try {
@@ -10483,7 +10546,11 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Get messages for a case (privacy center)
      */
     async getCaseMessages(baseRequest, caseUuid, authToken) {
-      const url = caseUrl(baseRequest, caseUuid, `/messages${sandboxIdentitySuffix()}`);
+      const url = caseUrl(
+        baseRequest,
+        caseUuid,
+        `/messages${sandboxIdentitySuffix()}`
+      );
       return privacyCenterApiFetch(url, {
         authToken: resolveAuthToken(authToken, baseRequest)
       });
@@ -10492,7 +10559,11 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Send a message on a case (privacy center)
      */
     async sendCaseMessage(baseRequest, caseUuid, body, documentUuids, authToken) {
-      const url = caseUrl(baseRequest, caseUuid, `/messages${sandboxIdentitySuffix()}`);
+      const url = caseUrl(
+        baseRequest,
+        caseUuid,
+        `/messages${sandboxIdentitySuffix()}`
+      );
       return privacyCenterApiFetch(url, {
         method: "POST",
         body: JSON.stringify({ body, document_uuids: documentUuids }),
@@ -10503,7 +10574,11 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Upload a document on a case (multipart/form-data, privacy center)
      */
     async uploadCaseDocument(baseRequest, caseUuid, file, authToken) {
-      const url = caseUrl(baseRequest, caseUuid, `/upload-document${sandboxIdentitySuffix()}`);
+      const url = caseUrl(
+        baseRequest,
+        caseUuid,
+        `/upload-document${sandboxIdentitySuffix()}`
+      );
       const formData = new FormData();
       formData.append("file", file, file.name);
       formData.append("payload", JSON.stringify({ metadata: null }));
@@ -10532,7 +10607,11 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Get document info/download URL for a case document (privacy center)
      */
     async getCaseDocument(baseRequest, caseUuid, documentUuid, authToken) {
-      const url = caseUrl(baseRequest, caseUuid, `/documents/${documentUuid}${sandboxIdentitySuffix()}`);
+      const url = caseUrl(
+        baseRequest,
+        caseUuid,
+        `/documents/${documentUuid}${sandboxIdentitySuffix()}`
+      );
       return privacyCenterApiFetch(url, {
         authToken: resolveAuthToken(authToken, baseRequest)
       });
@@ -10565,7 +10644,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         queryParams.append("language", params.language);
       }
       const queryString = queryParams.toString();
-      const url = notificationUrl(baseRequest, queryString ? `?${queryString}` : "");
+      const url = notificationUrl(
+        baseRequest,
+        queryString ? `?${queryString}` : ""
+      );
       return privacyCenterApiFetch(url, {
         authToken: resolveAuthToken(authToken, baseRequest)
       });
@@ -10612,7 +10694,10 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Acknowledge a notification (sets is_read and is_acknowledged to true)
      */
     async acknowledgeNotification(baseRequest, notificationUuid, authToken) {
-      const url = notificationUrl(baseRequest, `/${notificationUuid}/acknowledge`);
+      const url = notificationUrl(
+        baseRequest,
+        `/${notificationUuid}/acknowledge`
+      );
       return privacyCenterApiFetch(url, {
         method: "POST",
         authToken: resolveAuthToken(authToken, baseRequest)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@redacto.io/consent-sdk-react",
-  "version": "10.1.0",
+  "version": "10.2.0-beta.1",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
   "types": "dist/index.d.ts",

package/dist/chunk-OGL6OC3A.mjs

@@ -1,34 +0,0 @@
-// src/RedactoNoticeConsent/useMediaQuery.ts
-import { useState, useEffect } from "react";
-var useMediaQuery = (query) => {
-  const getMatches = () => typeof window !== "undefined" ? window.matchMedia(query).matches : false;
-  const [matches, setMatches] = useState(getMatches);
-  useEffect(() => {
-    if (typeof window === "undefined") return;
-    const media = window.matchMedia(query);
-    const listener = (e) => {
-      setMatches(e.matches);
-    };
-    if (media.addEventListener) {
-      media.addEventListener("change", listener);
-    } else {
-      media.addListener(listener);
-    }
-    return () => {
-      if (media.removeEventListener) {
-        media.removeEventListener("change", listener);
-      } else {
-        media.removeListener(listener);
-      }
-    };
-  }, [query]);
-  return matches;
-};
-
-// src/shared/sandbox.ts
-var SANDBOX_TOKEN_HEADER = "X-Consent-Token";
-
-export {
-  SANDBOX_TOKEN_HEADER,
-  useMediaQuery
-};