@redacto.io/consent-sdk-react 10.4.0-beta.1 → 11.0.0-beta.2

package/dist/index.mjs

@@ -27,14 +27,16 @@ import {
   opaqueOver,
   paintableColor,
   prefersReducedMotion,
+  resolveEndpoints,
   resolveNoticeAppearance,
   resolveNoticeLayout,
   useIsomorphicLayoutEffect,
   useMediaQuery,
+  useResolvedEndpoints,
   withAlpha,
   withColorScheme,
   withIdempotencyKey
-} from "./chunk-DGMUTOWJ.mjs";
+} from "./chunk-W45JQYDG.mjs";
 import {
   NOTICE_FONT_ROOT_PROPS,
   REQUIRED_MARKER_ARIA_LABEL,
@@ -5437,8 +5439,8 @@ var NoticeConsentView = ({
   ucic,
   organisationUuid,
   workspaceUuid,
-  baseUrl,
-  ledgerBaseUrl,
+  baseUrl: baseUrlProp,
+  ledgerBaseUrl: ledgerBaseUrlProp,
   language = "en",
   blockUI = true,
   onAccept,
@@ -5460,6 +5462,10 @@ var NoticeConsentView = ({
   forceColorScheme
 }) => {
   var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _A, _B, _C, _D, _E, _F, _G, _H, _I, _J, _K, _L;
+  const endpoints = useResolvedEndpoints(baseUrlProp, ledgerBaseUrlProp, {
+    warn: !previewContent
+  });
+  const { baseUrl, ledgerBaseUrl } = endpoints;
   const sandboxParams = useMemo3(
     () => ({
       token,
@@ -7479,7 +7485,7 @@ var NoticeConsentView = ({
     const ttsAbortController = new AbortController();
     fetchTTSAudioUrls({
       accessToken,
-      baseUrl,
+      baseUrl: endpoints.mode === "host" ? ledgerBaseUrl : baseUrl,
       ledgerBaseUrl,
       noticeUuid: content.notice_uuid,
       language: languageCode,
@@ -7504,6 +7510,7 @@ var NoticeConsentView = ({
     sandboxParams,
     baseUrl,
     ledgerBaseUrl,
+    endpoints.mode,
     getLanguageCode
   ]);
   const hostRadius = noticeSettings == null ? void 0 : noticeSettings.borderRadius;
@@ -9409,8 +9416,8 @@ var RedactoConsentInlineComponent = ({
   workspace_uuid,
   notice_uuid,
   accessToken,
-  baseUrl,
-  ledgerBaseUrl,
+  baseUrl: baseUrlProp,
+  ledgerBaseUrl: ledgerBaseUrlProp,
   language = "en",
   onAccept,
   onError,
@@ -9419,6 +9426,8 @@ var RedactoConsentInlineComponent = ({
   applicationId
 }) => {
   var _a, _b, _c;
+  const endpoints = useResolvedEndpoints(baseUrlProp, ledgerBaseUrlProp);
+  const { baseUrl, ledgerBaseUrl } = endpoints;
   const [content, setContent] = useState3(null);
   const [isLoading, setIsLoading] = useState3(true);
   const [isSubmitting, setIsSubmitting] = useState3(false);
@@ -9436,6 +9445,31 @@ var RedactoConsentInlineComponent = ({
   const [awaitingConfirm, setAwaitingConfirm] = useState3(false);
   const refusedSelectionRef = useRef4(null);
   const confirmedSelectionRef = useRef4(null);
+  const endpointsKey = JSON.stringify([endpoints.mode, baseUrl != null ? baseUrl : "", ledgerBaseUrl != null ? ledgerBaseUrl : ""]);
+  const [loadedEndpointsKey, setLoadedEndpointsKey] = useState3(endpointsKey);
+  if (loadedEndpointsKey !== endpointsKey) {
+    setLoadedEndpointsKey(endpointsKey);
+    setContent(null);
+    setIsLoading(true);
+    setFetchError(null);
+    setErrorMessage(null);
+    setHasAlreadyConsented(false);
+    setIsCheckingConsent(Boolean(ledgerBaseUrl) && !applicationId);
+    setIsSubmitting(false);
+    setAwaitingConfirm(false);
+  }
+  const endpointsGenerationRef = useRef4(0);
+  const committedEndpointsKeyRef = useRef4(endpointsKey);
+  useIsomorphicLayoutEffect(() => {
+    if (committedEndpointsKeyRef.current === endpointsKey) {
+      return;
+    }
+    committedEndpointsKeyRef.current = endpointsKey;
+    endpointsGenerationRef.current += 1;
+    hasSubmittedRef.current = false;
+    refusedSelectionRef.current = null;
+    confirmedSelectionRef.current = null;
+  }, [endpointsKey]);
   useEffect7(() => {
     injectSpinnerAnimation();
     injectCheckboxStyles();
@@ -9555,12 +9589,13 @@ var RedactoConsentInlineComponent = ({
     setFetchError(null);
     setHasAlreadyConsented(false);
     try {
+      const noticeBaseUrl = endpoints.mode === "host" && accessToken && !applicationId ? ledgerBaseUrl : baseUrl;
       const consentContentData = await fetchConsentContent2({
         org_uuid,
         workspace_uuid,
         notice_uuid,
         accessToken,
-        baseUrl,
+        baseUrl: noticeBaseUrl,
         language,
         specific_uuid: applicationId,
         signal
@@ -9624,7 +9659,8 @@ var RedactoConsentInlineComponent = ({
     notice_uuid,
     language,
     applicationId,
-    accessToken
+    accessToken,
+    endpointsKey
   ]);
   useEffect7(() => {
     if (!ledgerBaseUrl || applicationId) {
@@ -9729,6 +9765,8 @@ var RedactoConsentInlineComponent = ({
         setErrorMessage("Unable to submit consent. Please try again.");
         throw new Error("Access token or content not available");
       }
+      const generation = endpointsGenerationRef.current;
+      const isCurrent = () => endpointsGenerationRef.current === generation;
       try {
         setIsSubmitting(true);
         setErrorMessage(null);
@@ -9764,16 +9802,24 @@ var RedactoConsentInlineComponent = ({
           declined: false,
           meta_data: applicationId ? { specific_uuid: applicationId } : void 0
         });
+        if (!isCurrent()) {
+          return;
+        }
         onAccept == null ? void 0 : onAccept();
         hasSubmittedRef.current = false;
       } catch (error) {
+        if (!isCurrent()) {
+          return;
+        }
         const err = error;
         const message = err.message || "Failed to submit consent. Please try again.";
         setErrorMessage(message);
         hasSubmittedRef.current = false;
         throw error;
       } finally {
-        setIsSubmitting(false);
+        if (isCurrent()) {
+          setIsSubmitting(false);
+        }
       }
     },
     [
@@ -12716,13 +12762,17 @@ var RedactoNoticeAssisted = ({
   organisationUuid,
   workspaceUuid,
   noticeUuid,
-  baseUrl,
-  ledgerBaseUrl,
+  baseUrl: baseUrlProp,
+  ledgerBaseUrl: ledgerBaseUrlProp,
   onDecline,
   onComplete,
   settings
 }) => {
   var _a, _b, _c, _d;
+  const { baseUrl, ledgerBaseUrl } = useResolvedEndpoints(
+    baseUrlProp,
+    ledgerBaseUrlProp
+  );
   const isMobile = useMediaQuery3("(max-width: 768px)");
   const [content, setContent] = useState5(null);
   const [isLoading, setIsLoading] = useState5(true);
@@ -14509,6 +14559,15 @@ var RedactoNoticePreview = ({
 // src/RedactoNoticeConsent/components/DigiLockerCallback.tsx
 import { useCallback as useCallback6, useEffect as useEffect10, useRef as useRef6, useState as useState6 } from "react";
 import { Fragment as Fragment5, jsx as jsx10, jsxs as jsxs8 } from "react/jsx-runtime";
+var sameOriginUrlOrRoot = (candidate) => {
+  if (!candidate) return "/";
+  try {
+    const url = new URL(candidate, window.location.origin);
+    return url.origin === window.location.origin ? url.href : "/";
+  } catch {
+    return "/";
+  }
+};
 var DigiLockerCallback = ({
   accessToken: propAccessToken,
   baseUrl,
@@ -14545,7 +14604,7 @@ var DigiLockerCallback = ({
         flowState: verificationResult === "verified" ? "consent-form" : "error"
       });
       redirectTimeoutRef.current = setTimeout(() => {
-        window.location.href = originalUrl;
+        window.location.href = sameOriginUrlOrRoot(originalUrl);
       }, 1500);
     },
     []
@@ -14617,7 +14676,7 @@ var DigiLockerCallback = ({
         return;
       }
       setMessage("Processing verification...");
-      const apiBaseUrl = baseUrl || storedBaseUrl;
+      const apiBaseUrl = resolveEndpoints(baseUrl || storedBaseUrl).baseUrl;
       const response = await verifyGuardianStatus({
         accessToken,
         baseUrl: apiBaseUrl,
@@ -14778,7 +14837,7 @@ var DigiLockerCallback = ({
     const persistedState = getConsentState();
     if (persistedState == null ? void 0 : persistedState.originalUrl) {
       clearConsentState();
-      window.location.href = persistedState.originalUrl;
+      window.location.href = sameOriginUrlOrRoot(persistedState.originalUrl);
     } else {
       window.location.href = "/";
     }

package/dist/privacy-center.d.mts

@@ -32,12 +32,18 @@ type BaseRequest = {
 /**
  * Consent service client factory.
  * Creates a client instance with a specific base URL.
- * @param baseUrl - Consent server base URL (Python service, e.g. http://host/consent)
- * @param ledgerBaseUrl - Go ledger base URL (e.g. http://host:8090/consent-ledger).
- *   Used for user-consents reads/writes served from the ledger's `/public/...` paths.
- *   When omitted, those calls fall back to the legacy Python
- *   `/dsar/privacy-center` endpoints and payloads (pre-ledger behavior), so
- *   integrations without a deployed ledger keep working.
+ * @param baseUrl - API host, e.g. https://api.redacto.io (recommended): the
+ *   client reaches the consent server at `{baseUrl}/consent` and the ledger at
+ *   `{baseUrl}/consent-ledger`. The consent server URL (`…/consent`) still
+ *   works but is deprecated.
+ * @param ledgerBaseUrl - Deprecated. Go ledger base URL (e.g.
+ *   http://host:8090/consent-ledger). Read only when `baseUrl` is the
+ *   consent server URL, as in earlier releases; ignored when `baseUrl` is
+ *   the API host. There it is the ledger used for user-consents reads/writes
+ *   served from the ledger's `/public/...` paths; when omitted, those calls
+ *   fall back to the legacy Python `/dsar/privacy-center` endpoints and
+ *   payloads (pre-ledger behavior), so integrations without a deployed
+ *   ledger keep working.
  */
 declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
     /**
@@ -887,9 +893,25 @@ type PrivacyCenterEventHandlers = Readonly<{
     onSignOut?: (event: PrivacyCenterSignOutEvent) => void;
 }>;
 type RedactoPrivacyCenterProps = Readonly<{
+    /**
+     * API host, e.g. https://api.redacto.io (recommended). The consent server
+     * URL (…/consent) still works but is deprecated.
+     */
     baseUrl: string;
+    /**
+     * @deprecated Read only when `baseUrl` is the consent server URL
+     * (`…/consent`) or omitted, as in earlier releases. Ignored when `baseUrl`
+     * is the API host. With the consent server URL, it is the ledger that serves
+     * user-consents; omit it there to use the legacy Python privacy-center
+     * consent endpoints.
+     */
     ledgerBaseUrl?: string;
-    slug: string;
+    /**
+     * @deprecated Ignored; will be removed in a future major release. Passing it
+     * logs a one-time warning. The organisation comes from the access token, or
+     * from `organisationUuid` and `workspaceUuid`.
+     */
+    slug?: string;
     /** JWT access token. Optional so sandbox mode (see `token`) can omit it. */
     accessToken?: string;
     /** JWT refresh token. Optional; used by the OTP-refresh loop in the JWT flow. */
@@ -913,13 +935,13 @@ type RedactoPrivacyCenterProps = Readonly<{
     ucic?: string;
     /**
      * Organisation UUID. Replaces the JWT-decoded org in sandbox mode; without a
-     * token it also addresses the built-in sign-in and the published settings
-     * (otherwise looked up from `slug`).
+     * token it also addresses the built-in sign-in, the published settings and
+     * the branding.
      */
     organisationUuid?: string;
     /**
      * Workspace UUID. Replaces the JWT-decoded workspace in sandbox mode; without
-     * a token it addresses the built-in sign-in (otherwise looked up from `slug`).
+     * a token it addresses the built-in sign-in, which needs it with `organisationUuid`.
      */
     workspaceUuid?: string;
     onError: (error: Error) => boolean;
@@ -947,7 +969,11 @@ type RedactoPrivacyCenterProps = Readonly<{
 }>;
 type PrivacyCenterLayoutProps = Readonly<{
     children: ReactNode;
-    slug: string;
+    /**
+     * @deprecated Ignored; will be removed in a future major release. Passing it
+     * logs a one-time warning. The organisation comes from the access token.
+     */
+    slug?: string;
     onBack?: 'back' | 'signout';
     /**
      * For custom compositions that render this layout directly. Omit it to
@@ -993,7 +1019,7 @@ type AuthProviderProps = Readonly<{
     organisationUuid?: string;
     /** Sandbox workspace UUID (replaces the JWT-decoded workspace). */
     workspaceUuid?: string;
-    /** Organisation slug — used to seed sandbox sessionStorage. */
+    /** @deprecated Ignored; will be removed in a future major release. */
     slug?: string;
     onError: (error: Error) => boolean;
 }>;
@@ -1009,20 +1035,34 @@ type AuthContextValue = Readonly<{
     restartSignIn: () => void;
 }>;
 type BaseUrlContextValue = Readonly<{
+    /** The consent server URL: `{apiHost}/consent` when given the API host, else `baseUrl` as passed. */
     baseUrl: string;
+    /** The ledger URL: `{apiHost}/consent-ledger` when given the API host, else `ledgerBaseUrl` as passed. */
     ledgerBaseUrl?: string;
     consentClient: ReturnType<typeof createConsentClient>;
+    /** The API host, when `baseUrl` was passed as one; undefined for the deprecated consent server URL. */
+    apiHost?: string;
 }>;
 
 declare const BaseUrlProvider: ({ children, baseUrl, ledgerBaseUrl, }: {
     children: ReactNode;
+    /**
+     * API host, e.g. https://api.redacto.io (recommended). The consent server
+     * URL (…/consent) still works but is deprecated.
+     */
     baseUrl: string;
+    /**
+     * @deprecated Read only when `baseUrl` is the consent server URL
+     * (`…/consent`) or omitted, as in earlier releases. Ignored when `baseUrl`
+     * is the API host.
+     */
     ledgerBaseUrl?: string;
 }) => React.JSX.Element;
 declare const useBaseUrl: () => Readonly<{
     baseUrl: string;
     ledgerBaseUrl?: string;
     consentClient: ReturnType<typeof createConsentClient>;
+    apiHost?: string;
 }>;
 
 declare function createOtpServer(email: string, organizationId: string, workspaceId: string, consentClient?: ReturnType<typeof createConsentClient>): Promise<OtpResponse>;
@@ -1059,25 +1099,26 @@ declare const isJwtExpired: (token: string, bufferSeconds?: number) => boolean;
 /**
  * Check if user is authenticated in privacy center
  * User is considered authenticated if both access_token and email exist in sessionStorage
+ * @deprecated The slug is ignored; the parameter will be removed in a future major release.
  */
-declare const isUserAuthenticated: (expectedSlug: string) => boolean;
+declare const isUserAuthenticated: (_expectedSlug?: string) => boolean;
 /**
  * Get initial state for sign-in form visibility
  * Returns true if window is undefined (SSR) or user is not authenticated
- * @param slug - The organization slug to check authentication against
  * @returns true if sign-in form should be shown, false otherwise
+ * @deprecated The slug is ignored; the parameter will be removed in a future major release.
  */
-declare const getInitialState: (slug: string) => boolean;
+declare const getInitialState: (_slug?: string) => boolean;
 /**
  * Check authentication status and attempt token refresh if needed
  * This function checks if the user is authenticated, validates JWT expiration,
  * and attempts to refresh using the refresh token cookie if the token is expired or missing.
- * @param expectedSlug - The organization slug to verify against
+ * @param _expectedSlug - Deprecated and ignored: the session is scoped by `organizationId`.
  * @param organizationId - Optional organization ID (will be read from sessionStorage if not provided)
  * @param workspaceId - Optional workspace ID (will be read from sessionStorage if not provided)
  * @returns Promise<boolean> - true if authenticated with valid non-expired token, false otherwise
  */
-declare const checkAndRefreshAuth: (expectedSlug: string, organizationId?: string, workspaceId?: string, consentClient?: BaseUrlContextValue["consentClient"]) => Promise<boolean>;
+declare const checkAndRefreshAuth: (_expectedSlug: string, organizationId?: string, workspaceId?: string, consentClient?: BaseUrlContextValue["consentClient"]) => Promise<boolean>;
 /**
  * Compare two email addresses (case-insensitive, handles URL encoding)
  * @param email1 - First email (can be URL-encoded)
@@ -1098,11 +1139,11 @@ declare const signOutPrivacyCenter: () => void;
  *
  * @param organizationId - The organization UUID
  * @param workspaceId - The workspace UUID
- * @param slug - The organization slug for redirect
+ * @param _slug - Ignored; kept for call-site compatibility
  * @param authContext - Optional auth context values (accessToken, refreshToken, onError, updateTokens)
  * @returns Promise<string | null> - Valid access token or null if auth failed
  */
-declare const ensureValidToken: (organizationId?: string, workspaceId?: string, slug?: string, authContext?: {
+declare const ensureValidToken: (organizationId?: string, workspaceId?: string, _slug?: string, authContext?: {
     accessToken?: string;
     refreshToken?: string;
     onError?: (error: Error) => boolean;
@@ -1247,7 +1288,8 @@ declare const usePrivacyCenterSettings: () => ResolvedPrivacyCenterSettings;
 type PrivacyCenterSettingsProviderProps = Readonly<{
     children: ReactNode;
     baseUrl: string;
-    slug: string;
+    /** @deprecated Ignored; will be removed in a future major release. */
+    slug?: string;
     accessToken?: string;
     organisationUuid?: string;
     workspaceUuid?: string;
@@ -1260,6 +1302,6 @@ type PrivacyCenterSettingsProviderProps = Readonly<{
  * defaults (which reproduce the Privacy Center as it was before settings)
  * until the published copy arrives, and keep them when the fetch fails.
  */
-declare const PrivacyCenterSettingsProvider: ({ children, baseUrl, slug, accessToken, organisationUuid, workspaceUuid, overrides, builtInSignIn, }: PrivacyCenterSettingsProviderProps) => React.JSX.Element;
+declare const PrivacyCenterSettingsProvider: ({ children, baseUrl, accessToken, organisationUuid, workspaceUuid, overrides, builtInSignIn, }: PrivacyCenterSettingsProviderProps) => React.JSX.Element;
 
 export { type Activity, type ActivityBadgeStatus$1 as ActivityBadgeStatus, type ActivityDetail, type ActivityResponse, type ApiFetchOptions, type ApiResponse, type AuthContext, AuthProvider, type BaseRequest, BaseUrlProvider, type CaseHistoryDetail, type CaseHistoryResponse, type CaseRequest, type ConsentAction, type ConsentDataElement, type ConsentGroup, type ConsentHistoryStatusSummary, type ConsentModalRecord, ConsentStatusEnum, type CreateCaseResponse, DEFAULT_PRIVACY_CENTER_SETTINGS, type DataElement, type DisplayPurposeRow, type FetchOrgParams, type FormData, type FormDataResponse, type GrievanceOptions, type GrievanceTypeElement, GrievanceTypeEnum, type GrievanceValue, type GroupPurposesOut, type InternalPage, type ManageConsentParams, type ManageConsentResponse, NavigationProvider, type NominationData, type NominatorInfo, NotificationsPage, type OrganizationDetail, type OrganizationResponse, type OtpResponse, type OtpVerificationResponse, PRIVACY_CENTER_PARTS, type Pagination, type PaginationMeta, type PlaceholderContext, PrivacyCenterActivityPage, type PrivacyCenterBrandContact, type PrivacyCenterBrandingSettings, PrivacyCenterCaseDetailsPage, type PrivacyCenterConsentChange, PrivacyCenterConsentManagerPage, type PrivacyCenterEmbedSettings, type PrivacyCenterEventHandlers, type PrivacyCenterFooterLink, type PrivacyCenterFooterSettings, PrivacyCenterFormPage, type PrivacyCenterGrievanceCategory, PrivacyCenterHomePage, type PrivacyCenterLanguageSettings, PrivacyCenterLayout, type PrivacyCenterPart, type PrivacyCenterPortalSettings, type PrivacyCenterReadyEvent, type PrivacyCenterRequestSubmission, type PrivacyCenterRequestType, type PrivacyCenterRequestTypeKey, type PrivacyCenterSection, type PrivacyCenterSectionKey, type PrivacyCenterSeoSettings, type PrivacyCenterSettings, PrivacyCenterSettingsProvider, type PrivacyCenterSignInChannels, type PrivacyCenterSignInLayout, type PrivacyCenterSignInSettings, type PrivacyCenterSignOutEvent, type PrivacyCenterSignOutReason, PrivacyCenterTheme, type PublicPrivacyCenterSettingsResponse, type Purpose, type PurposeItem, type RawPurposeWrapper, RedactoPrivacyCenter, type RedactoPrivacyCenterProps, RequestTypeEnum, type ResolvedPrivacyCenterSettings, type TokenExchangeResponse, type UpdateCorrectionDataItem, type UpdatePurpose, type UpdateRequestDetails, type UserConsentDetail, type UserConsentResponse, type UserDataRequest, type Workspace, checkAndRefreshAuth, compareEmails, createCaseRequest, createConsentClient, createOtpServer as createOtp, decodeJwtToken, ensureValidToken, exchangeTokenServer as exchangeToken, fetchActivities, fetchCaseHistory, fetchGroupPurposes, fetchProducts, fetchPublicPrivacyCenterSettings, fetchUserConsents, formatActivityType, getActivityTypeStatus, getCookieValue, getFormData, getInitialState, injectPCStyles, isJwtExpired, isUserAuthenticated, manageConsent, resolvePlaceholders, resolvePrivacyCenterSettings, setRefreshTokenCookie, signOutPrivacyCenter, useAuth, useBaseUrl, useCaseHistory, useInternalNavigation, usePrivacyCenterSettings, verifyOtpServer as verifyOtp };

package/dist/privacy-center.d.ts

@@ -32,12 +32,18 @@ type BaseRequest = {
 /**
  * Consent service client factory.
  * Creates a client instance with a specific base URL.
- * @param baseUrl - Consent server base URL (Python service, e.g. http://host/consent)
- * @param ledgerBaseUrl - Go ledger base URL (e.g. http://host:8090/consent-ledger).
- *   Used for user-consents reads/writes served from the ledger's `/public/...` paths.
- *   When omitted, those calls fall back to the legacy Python
- *   `/dsar/privacy-center` endpoints and payloads (pre-ledger behavior), so
- *   integrations without a deployed ledger keep working.
+ * @param baseUrl - API host, e.g. https://api.redacto.io (recommended): the
+ *   client reaches the consent server at `{baseUrl}/consent` and the ledger at
+ *   `{baseUrl}/consent-ledger`. The consent server URL (`…/consent`) still
+ *   works but is deprecated.
+ * @param ledgerBaseUrl - Deprecated. Go ledger base URL (e.g.
+ *   http://host:8090/consent-ledger). Read only when `baseUrl` is the
+ *   consent server URL, as in earlier releases; ignored when `baseUrl` is
+ *   the API host. There it is the ledger used for user-consents reads/writes
+ *   served from the ledger's `/public/...` paths; when omitted, those calls
+ *   fall back to the legacy Python `/dsar/privacy-center` endpoints and
+ *   payloads (pre-ledger behavior), so integrations without a deployed
+ *   ledger keep working.
  */
 declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
     /**
@@ -887,9 +893,25 @@ type PrivacyCenterEventHandlers = Readonly<{
     onSignOut?: (event: PrivacyCenterSignOutEvent) => void;
 }>;
 type RedactoPrivacyCenterProps = Readonly<{
+    /**
+     * API host, e.g. https://api.redacto.io (recommended). The consent server
+     * URL (…/consent) still works but is deprecated.
+     */
     baseUrl: string;
+    /**
+     * @deprecated Read only when `baseUrl` is the consent server URL
+     * (`…/consent`) or omitted, as in earlier releases. Ignored when `baseUrl`
+     * is the API host. With the consent server URL, it is the ledger that serves
+     * user-consents; omit it there to use the legacy Python privacy-center
+     * consent endpoints.
+     */
     ledgerBaseUrl?: string;
-    slug: string;
+    /**
+     * @deprecated Ignored; will be removed in a future major release. Passing it
+     * logs a one-time warning. The organisation comes from the access token, or
+     * from `organisationUuid` and `workspaceUuid`.
+     */
+    slug?: string;
     /** JWT access token. Optional so sandbox mode (see `token`) can omit it. */
     accessToken?: string;
     /** JWT refresh token. Optional; used by the OTP-refresh loop in the JWT flow. */
@@ -913,13 +935,13 @@ type RedactoPrivacyCenterProps = Readonly<{
     ucic?: string;
     /**
      * Organisation UUID. Replaces the JWT-decoded org in sandbox mode; without a
-     * token it also addresses the built-in sign-in and the published settings
-     * (otherwise looked up from `slug`).
+     * token it also addresses the built-in sign-in, the published settings and
+     * the branding.
      */
     organisationUuid?: string;
     /**
      * Workspace UUID. Replaces the JWT-decoded workspace in sandbox mode; without
-     * a token it addresses the built-in sign-in (otherwise looked up from `slug`).
+     * a token it addresses the built-in sign-in, which needs it with `organisationUuid`.
      */
     workspaceUuid?: string;
     onError: (error: Error) => boolean;
@@ -947,7 +969,11 @@ type RedactoPrivacyCenterProps = Readonly<{
 }>;
 type PrivacyCenterLayoutProps = Readonly<{
     children: ReactNode;
-    slug: string;
+    /**
+     * @deprecated Ignored; will be removed in a future major release. Passing it
+     * logs a one-time warning. The organisation comes from the access token.
+     */
+    slug?: string;
     onBack?: 'back' | 'signout';
     /**
      * For custom compositions that render this layout directly. Omit it to
@@ -993,7 +1019,7 @@ type AuthProviderProps = Readonly<{
     organisationUuid?: string;
     /** Sandbox workspace UUID (replaces the JWT-decoded workspace). */
     workspaceUuid?: string;
-    /** Organisation slug — used to seed sandbox sessionStorage. */
+    /** @deprecated Ignored; will be removed in a future major release. */
     slug?: string;
     onError: (error: Error) => boolean;
 }>;
@@ -1009,20 +1035,34 @@ type AuthContextValue = Readonly<{
     restartSignIn: () => void;
 }>;
 type BaseUrlContextValue = Readonly<{
+    /** The consent server URL: `{apiHost}/consent` when given the API host, else `baseUrl` as passed. */
     baseUrl: string;
+    /** The ledger URL: `{apiHost}/consent-ledger` when given the API host, else `ledgerBaseUrl` as passed. */
     ledgerBaseUrl?: string;
     consentClient: ReturnType<typeof createConsentClient>;
+    /** The API host, when `baseUrl` was passed as one; undefined for the deprecated consent server URL. */
+    apiHost?: string;
 }>;
 
 declare const BaseUrlProvider: ({ children, baseUrl, ledgerBaseUrl, }: {
     children: ReactNode;
+    /**
+     * API host, e.g. https://api.redacto.io (recommended). The consent server
+     * URL (…/consent) still works but is deprecated.
+     */
     baseUrl: string;
+    /**
+     * @deprecated Read only when `baseUrl` is the consent server URL
+     * (`…/consent`) or omitted, as in earlier releases. Ignored when `baseUrl`
+     * is the API host.
+     */
     ledgerBaseUrl?: string;
 }) => React.JSX.Element;
 declare const useBaseUrl: () => Readonly<{
     baseUrl: string;
     ledgerBaseUrl?: string;
     consentClient: ReturnType<typeof createConsentClient>;
+    apiHost?: string;
 }>;
 
 declare function createOtpServer(email: string, organizationId: string, workspaceId: string, consentClient?: ReturnType<typeof createConsentClient>): Promise<OtpResponse>;
@@ -1059,25 +1099,26 @@ declare const isJwtExpired: (token: string, bufferSeconds?: number) => boolean;
 /**
  * Check if user is authenticated in privacy center
  * User is considered authenticated if both access_token and email exist in sessionStorage
+ * @deprecated The slug is ignored; the parameter will be removed in a future major release.
  */
-declare const isUserAuthenticated: (expectedSlug: string) => boolean;
+declare const isUserAuthenticated: (_expectedSlug?: string) => boolean;
 /**
  * Get initial state for sign-in form visibility
  * Returns true if window is undefined (SSR) or user is not authenticated
- * @param slug - The organization slug to check authentication against
  * @returns true if sign-in form should be shown, false otherwise
+ * @deprecated The slug is ignored; the parameter will be removed in a future major release.
  */
-declare const getInitialState: (slug: string) => boolean;
+declare const getInitialState: (_slug?: string) => boolean;
 /**
  * Check authentication status and attempt token refresh if needed
  * This function checks if the user is authenticated, validates JWT expiration,
  * and attempts to refresh using the refresh token cookie if the token is expired or missing.
- * @param expectedSlug - The organization slug to verify against
+ * @param _expectedSlug - Deprecated and ignored: the session is scoped by `organizationId`.
  * @param organizationId - Optional organization ID (will be read from sessionStorage if not provided)
  * @param workspaceId - Optional workspace ID (will be read from sessionStorage if not provided)
  * @returns Promise<boolean> - true if authenticated with valid non-expired token, false otherwise
  */
-declare const checkAndRefreshAuth: (expectedSlug: string, organizationId?: string, workspaceId?: string, consentClient?: BaseUrlContextValue["consentClient"]) => Promise<boolean>;
+declare const checkAndRefreshAuth: (_expectedSlug: string, organizationId?: string, workspaceId?: string, consentClient?: BaseUrlContextValue["consentClient"]) => Promise<boolean>;
 /**
  * Compare two email addresses (case-insensitive, handles URL encoding)
  * @param email1 - First email (can be URL-encoded)
@@ -1098,11 +1139,11 @@ declare const signOutPrivacyCenter: () => void;
  *
  * @param organizationId - The organization UUID
  * @param workspaceId - The workspace UUID
- * @param slug - The organization slug for redirect
+ * @param _slug - Ignored; kept for call-site compatibility
  * @param authContext - Optional auth context values (accessToken, refreshToken, onError, updateTokens)
  * @returns Promise<string | null> - Valid access token or null if auth failed
  */
-declare const ensureValidToken: (organizationId?: string, workspaceId?: string, slug?: string, authContext?: {
+declare const ensureValidToken: (organizationId?: string, workspaceId?: string, _slug?: string, authContext?: {
     accessToken?: string;
     refreshToken?: string;
     onError?: (error: Error) => boolean;
@@ -1247,7 +1288,8 @@ declare const usePrivacyCenterSettings: () => ResolvedPrivacyCenterSettings;
 type PrivacyCenterSettingsProviderProps = Readonly<{
     children: ReactNode;
     baseUrl: string;
-    slug: string;
+    /** @deprecated Ignored; will be removed in a future major release. */
+    slug?: string;
     accessToken?: string;
     organisationUuid?: string;
     workspaceUuid?: string;
@@ -1260,6 +1302,6 @@ type PrivacyCenterSettingsProviderProps = Readonly<{
  * defaults (which reproduce the Privacy Center as it was before settings)
  * until the published copy arrives, and keep them when the fetch fails.
  */
-declare const PrivacyCenterSettingsProvider: ({ children, baseUrl, slug, accessToken, organisationUuid, workspaceUuid, overrides, builtInSignIn, }: PrivacyCenterSettingsProviderProps) => React.JSX.Element;
+declare const PrivacyCenterSettingsProvider: ({ children, baseUrl, accessToken, organisationUuid, workspaceUuid, overrides, builtInSignIn, }: PrivacyCenterSettingsProviderProps) => React.JSX.Element;
 
 export { type Activity, type ActivityBadgeStatus$1 as ActivityBadgeStatus, type ActivityDetail, type ActivityResponse, type ApiFetchOptions, type ApiResponse, type AuthContext, AuthProvider, type BaseRequest, BaseUrlProvider, type CaseHistoryDetail, type CaseHistoryResponse, type CaseRequest, type ConsentAction, type ConsentDataElement, type ConsentGroup, type ConsentHistoryStatusSummary, type ConsentModalRecord, ConsentStatusEnum, type CreateCaseResponse, DEFAULT_PRIVACY_CENTER_SETTINGS, type DataElement, type DisplayPurposeRow, type FetchOrgParams, type FormData, type FormDataResponse, type GrievanceOptions, type GrievanceTypeElement, GrievanceTypeEnum, type GrievanceValue, type GroupPurposesOut, type InternalPage, type ManageConsentParams, type ManageConsentResponse, NavigationProvider, type NominationData, type NominatorInfo, NotificationsPage, type OrganizationDetail, type OrganizationResponse, type OtpResponse, type OtpVerificationResponse, PRIVACY_CENTER_PARTS, type Pagination, type PaginationMeta, type PlaceholderContext, PrivacyCenterActivityPage, type PrivacyCenterBrandContact, type PrivacyCenterBrandingSettings, PrivacyCenterCaseDetailsPage, type PrivacyCenterConsentChange, PrivacyCenterConsentManagerPage, type PrivacyCenterEmbedSettings, type PrivacyCenterEventHandlers, type PrivacyCenterFooterLink, type PrivacyCenterFooterSettings, PrivacyCenterFormPage, type PrivacyCenterGrievanceCategory, PrivacyCenterHomePage, type PrivacyCenterLanguageSettings, PrivacyCenterLayout, type PrivacyCenterPart, type PrivacyCenterPortalSettings, type PrivacyCenterReadyEvent, type PrivacyCenterRequestSubmission, type PrivacyCenterRequestType, type PrivacyCenterRequestTypeKey, type PrivacyCenterSection, type PrivacyCenterSectionKey, type PrivacyCenterSeoSettings, type PrivacyCenterSettings, PrivacyCenterSettingsProvider, type PrivacyCenterSignInChannels, type PrivacyCenterSignInLayout, type PrivacyCenterSignInSettings, type PrivacyCenterSignOutEvent, type PrivacyCenterSignOutReason, PrivacyCenterTheme, type PublicPrivacyCenterSettingsResponse, type Purpose, type PurposeItem, type RawPurposeWrapper, RedactoPrivacyCenter, type RedactoPrivacyCenterProps, RequestTypeEnum, type ResolvedPrivacyCenterSettings, type TokenExchangeResponse, type UpdateCorrectionDataItem, type UpdatePurpose, type UpdateRequestDetails, type UserConsentDetail, type UserConsentResponse, type UserDataRequest, type Workspace, checkAndRefreshAuth, compareEmails, createCaseRequest, createConsentClient, createOtpServer as createOtp, decodeJwtToken, ensureValidToken, exchangeTokenServer as exchangeToken, fetchActivities, fetchCaseHistory, fetchGroupPurposes, fetchProducts, fetchPublicPrivacyCenterSettings, fetchUserConsents, formatActivityType, getActivityTypeStatus, getCookieValue, getFormData, getInitialState, injectPCStyles, isJwtExpired, isUserAuthenticated, manageConsent, resolvePlaceholders, resolvePrivacyCenterSettings, setRefreshTokenCookie, signOutPrivacyCenter, useAuth, useBaseUrl, useCaseHistory, useInternalNavigation, usePrivacyCenterSettings, verifyOtpServer as verifyOtp };