@redacto.io/consent-sdk-react 10.4.0-beta.1 → 11.0.0-beta.2

package/dist/privacy-center.mjs

@@ -15,10 +15,14 @@ import {
   isSafeCustomCss,
   loadNoticeWebfont,
   resolveAppearance,
+  resolveEndpoints,
   useIsomorphicLayoutEffect,
   useMediaQuery,
+  useResolvedEndpoints,
+  warnEndpointUsage,
+  warnSlugDeprecated,
   withIdempotencyKey
-} from "./chunk-DGMUTOWJ.mjs";
+} from "./chunk-W45JQYDG.mjs";
 import {
   INHERIT_FONT_FAMILY,
   resolveNoticeFontFamily
@@ -9120,36 +9124,35 @@ var isJwtExpired = (token, bufferSeconds = 5 * 60) => {
     return true;
   }
 };
-var isUserAuthenticated = (expectedSlug) => {
+var isUserAuthenticated = (_expectedSlug) => {
   if (typeof window === "undefined") return false;
   const accessToken = sessionStorage.getItem("access_token");
   const email = sessionStorage.getItem("email");
-  const orgSlug = sessionStorage.getItem("pc_org_slug");
-  if (!accessToken || !email || !orgSlug) {
-    return false;
-  }
-  return orgSlug === expectedSlug;
+  return Boolean(accessToken && email);
 };
-var getInitialState = (slug) => {
+var getInitialState = (_slug) => {
   if (typeof window === "undefined") return true;
-  return !isUserAuthenticated(slug);
+  return !isUserAuthenticated();
 };
-var checkAndRefreshAuth = async (expectedSlug, organizationId, workspaceId, consentClient) => {
+var isSessionForOrganisation = (organizationId) => {
+  const storedOrgId = sessionStorage.getItem("pc_org_id");
+  return Boolean(storedOrgId) && (!organizationId || storedOrgId === organizationId);
+};
+var checkAndRefreshAuth = async (_expectedSlug, organizationId, workspaceId, consentClient) => {
   if (typeof window === "undefined") return false;
   if (getSandboxConfig()) {
     return true;
   }
   const accessToken = sessionStorage.getItem("access_token");
   const email = sessionStorage.getItem("email");
-  const orgSlug = sessionStorage.getItem("pc_org_slug");
-  if (orgSlug && orgSlug !== expectedSlug) {
+  if (!isSessionForOrganisation(organizationId)) {
     return false;
   }
   const needsRefresh = !accessToken || accessToken && isJwtExpired(accessToken, TOKEN_EXPIRY_BUFFER_SECONDS);
-  if (!needsRefresh && accessToken && email && orgSlug && orgSlug === expectedSlug) {
+  if (!needsRefresh && accessToken && email) {
     return true;
   }
-  if (needsRefresh && email && orgSlug === expectedSlug) {
+  if (needsRefresh && email) {
     const orgId = organizationId || sessionStorage.getItem("pc_org_id") || "";
     const wsId = workspaceId || sessionStorage.getItem("pc_workspace_id") || "";
     if (!orgId || !wsId) {
@@ -9248,7 +9251,7 @@ var signOutPrivacyCenter = () => {
   removeStorage(REFRESH_TOKEN_STORAGE_KEY);
   clearLegacyRefreshTokenCookie();
 };
-var ensureValidToken = async (organizationId, workspaceId, slug, authContext, consentClient) => {
+var ensureValidToken = async (organizationId, workspaceId, _slug, authContext, consentClient) => {
   if (typeof window === "undefined") return null;
   const sandbox = getSandboxConfig();
   if (sandbox) {
@@ -9273,7 +9276,7 @@ var ensureValidToken = async (organizationId, workspaceId, slug, authContext, co
     return newToken;
   }
   isRefreshing = true;
-  refreshPromise = performTokenRefresh(organizationId, workspaceId, slug, authContext, consentClient);
+  refreshPromise = performTokenRefresh(organizationId, workspaceId, authContext, consentClient);
   try {
     const newToken = await refreshPromise;
     return newToken;
@@ -9282,7 +9285,7 @@ var ensureValidToken = async (organizationId, workspaceId, slug, authContext, co
     refreshPromise = null;
   }
 };
-var performTokenRefresh = async (organizationId, workspaceId, _slug, authContext, consentClient) => {
+var performTokenRefresh = async (organizationId, workspaceId, authContext, consentClient) => {
   var _a, _b, _c, _d, _e, _f, _g;
   const orgId = organizationId || sessionStorage.getItem("pc_org_id") || "";
   const wsId = workspaceId || sessionStorage.getItem("pc_workspace_id") || "";
@@ -9886,13 +9889,15 @@ var seedSessionStorage = (data) => {
     return;
   }
   if (data.accessToken) sessionStorage.setItem("access_token", data.accessToken);
+  if (data.orgId && !data.workspaceId && sessionStorage.getItem("pc_org_id") !== data.orgId) {
+    sessionStorage.removeItem("pc_workspace_id");
+  }
   if (data.orgId) sessionStorage.setItem("pc_org_id", data.orgId);
   if (data.workspaceId) sessionStorage.setItem("pc_workspace_id", data.workspaceId);
-  if (data.slug) sessionStorage.setItem("pc_org_slug", data.slug);
   if (data.contact) sessionStorage.setItem("email", data.contact);
 };
 var configureSandbox = (props) => {
-  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m;
+  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k;
   const token = (_a = props.token) == null ? void 0 : _a.trim();
   if (!token) {
     setSandboxConfig(null);
@@ -9903,21 +9908,18 @@ var configureSandbox = (props) => {
   const ucic = (_g = (_f = props.sandboxUcic) == null ? void 0 : _f.trim()) != null ? _g : "";
   const email = (_i = (_h = props.sandboxEmail) == null ? void 0 : _h.trim()) != null ? _i : "";
   const mobile = (_k = (_j = props.sandboxMobile) == null ? void 0 : _j.trim()) != null ? _k : "";
-  const slug = (_m = (_l = props.slug) == null ? void 0 : _l.trim()) != null ? _m : "";
   setSandboxConfig({
     token,
     ucic: ucic || void 0,
     email: email || void 0,
     mobile: mobile || void 0,
     organisationUuid,
-    workspaceUuid,
-    slug
+    workspaceUuid
   });
   seedSessionStorage({
     accessToken: token,
     orgId: organisationUuid,
     workspaceId: workspaceUuid,
-    slug,
     // The principal precedence (UCIC > email > mobile) the server also applies.
     contact: ucic || email || mobile
   });
@@ -9933,7 +9935,6 @@ var syncJwtDataToSessionStorage = (accessToken) => {
   seedSessionStorage({
     orgId: typeof decoded.organisation_uuid === "string" ? decoded.organisation_uuid : void 0,
     workspaceId: typeof decoded.workspace_uuid === "string" ? decoded.workspace_uuid : void 0,
-    slug: typeof decoded.organisation_slug === "string" ? decoded.organisation_slug : void 0,
     contact: typeof contact === "string" ? contact : void 0
   });
 };
@@ -9948,7 +9949,6 @@ var AuthProvider = (props) => {
     sandboxMobile,
     organisationUuid,
     workspaceUuid,
-    slug,
     onError
   } = props;
   const [sandboxActive] = useState(() => configureSandbox(props));
@@ -10032,7 +10032,7 @@ var AuthProvider = (props) => {
     }
     configureSandbox(props);
     return () => setSandboxConfig(null);
-  }, [sandboxActive, sandboxToken, sandboxUcic, sandboxEmail, sandboxMobile, organisationUuid, workspaceUuid, slug]);
+  }, [sandboxActive, sandboxToken, sandboxUcic, sandboxEmail, sandboxMobile, organisationUuid, workspaceUuid]);
   const updateTokens = useCallback2((newAccessToken, newRefreshToken) => {
     setAccessToken(newAccessToken);
     if (newRefreshToken) {
@@ -10079,9 +10079,13 @@ import { createContext as createContext4, useContext as useContext4, useMemo as
 
 // src/RedactoPrivacyCenter/api/client.ts
 function createConsentClient(baseUrl, ledgerBaseUrl) {
-  const ledgerConfigured = Boolean(ledgerBaseUrl);
+  var _a;
+  warnEndpointUsage(baseUrl, ledgerBaseUrl, { hasBuiltInDefault: false });
+  const endpoints = resolveEndpoints(baseUrl, ledgerBaseUrl);
+  const consentBaseUrl = endpoints.baseUrl;
+  const ledgerConfigured = Boolean(endpoints.ledgerBaseUrl);
   const useLedger = () => ledgerConfigured;
-  const ledgerBase = (ledgerBaseUrl != null ? ledgerBaseUrl : "").replace(/\/$/, "");
+  const ledgerBase = ((_a = endpoints.ledgerBaseUrl) != null ? _a : "").replace(/\/$/, "");
   async function privacyCenterApiFetch(url, options) {
     const { authToken, getAuthToken, headers = {}, ...fetchOptions } = options;
     const requestHeaders = new Headers();
@@ -10179,7 +10183,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
     }
   }
   function privacyCenterUrl(baseRequest, path) {
-    return `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${path}`;
+    return `${consentBaseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${path}`;
   }
   function ledgerUrl(baseRequest, path) {
     if (!useLedger()) {
@@ -10281,7 +10285,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * `channel: "sms"`.
      */
     async createOtp(organisationId, workspaceId, email, options, channel = "email") {
-      const url = `${baseUrl}/public/organisations/${organisationId}/workspaces/${workspaceId}/otp/create`;
+      const url = `${consentBaseUrl}/public/organisations/${organisationId}/workspaces/${workspaceId}/otp/create`;
       return apiFetch(url, {
         ...options,
         method: "POST",
@@ -10299,7 +10303,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * then rejects it with 403 "Token scope is not permitted".
      */
     async verifyOtp(organisationId, workspaceId, otpId, otp, options, purpose = "login") {
-      const url = `${baseUrl}/public/organisations/${organisationId}/workspaces/${workspaceId}/otp/verify`;
+      const url = `${consentBaseUrl}/public/organisations/${organisationId}/workspaces/${workspaceId}/otp/verify`;
       return apiFetch(url, {
         ...options,
         method: "POST",
@@ -10310,7 +10314,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Exchange one-time token for JWT tokens (public)
      */
     async exchangeToken(token) {
-      const url = `${baseUrl}/public/tokens/token-exchange?token=${encodeURIComponent(token)}`;
+      const url = `${consentBaseUrl}/public/tokens/token-exchange?token=${encodeURIComponent(token)}`;
       const response = await fetch(url, {
         method: "GET",
         headers: { Accept: "application/json" }
@@ -10331,7 +10335,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Refresh OTP token (public)
      */
     async refreshOtpToken(organisationId, workspaceId, refreshToken, options) {
-      const url = `${baseUrl}/public/organisations/${organisationId}/workspaces/${workspaceId}/otp/refresh`;
+      const url = `${consentBaseUrl}/public/organisations/${organisationId}/workspaces/${workspaceId}/otp/refresh`;
       return apiFetch(url, {
         ...options,
         method: "POST",
@@ -10342,7 +10346,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Get products
      */
     async getProducts(baseRequest, skip = 0, limit = 10, options) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/notice-management/products/?skip=${skip}&limit=${limit}`;
+      const url = `${consentBaseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/notice-management/products/?skip=${skip}&limit=${limit}`;
       return apiFetch(url, {
         ...options,
         getAuthToken: async () => baseRequest.authToken
@@ -10434,7 +10438,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * used with its `{ purpose_uuid, contact, ... }` payload.
      */
     async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements, language, nominatorUuid) {
-      var _a;
+      var _a2;
       if (!useLedger()) {
         const url2 = privacyCenterUrl(
           baseRequest,
@@ -10484,7 +10488,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         notice_uuid: noticeUuid,
         // Sandbox has no JWT, so the ledger resolves the acting test principal
         // from this identity in the body; null (spread no-op) on the live JWT path.
-        ...(_a = sandboxBodyIdentity()) != null ? _a : {},
+        ...(_a2 = sandboxBodyIdentity()) != null ? _a2 : {},
         // Pins the action to the card the user acted on. Without it the ledger
         // scopes by the notice and applies the answer to every product the
         // notice covers, so revoking a purpose held on two products withdrew
@@ -10835,17 +10839,21 @@ var BaseUrlProvider = ({
   baseUrl,
   ledgerBaseUrl
 }) => {
+  const endpoints = useResolvedEndpoints(baseUrl, ledgerBaseUrl, {
+    hasBuiltInDefault: false
+  });
   const consentClient = useMemo3(
     () => createConsentClient(baseUrl, ledgerBaseUrl),
     [baseUrl, ledgerBaseUrl]
   );
   const value = useMemo3(
     () => ({
-      baseUrl,
-      ledgerBaseUrl,
-      consentClient
+      baseUrl: endpoints.baseUrl,
+      ledgerBaseUrl: endpoints.ledgerBaseUrl,
+      consentClient,
+      apiHost: endpoints.apiHost
     }),
-    [baseUrl, ledgerBaseUrl, consentClient]
+    [endpoints, consentClient]
   );
   return /* @__PURE__ */ jsx4(BaseUrlContext.Provider, { value, children });
 };
@@ -13900,11 +13908,15 @@ function originOf(url) {
   return match ? match[0] : "";
 }
 function userServiceBaseUrl(consentBaseUrl) {
+  const endpoints = resolveEndpoints(consentBaseUrl);
+  if (endpoints.mode === "host") {
+    return endpoints.apiHost + USER_SERVICE_PATH;
+  }
   const origin = originOf(consentBaseUrl) || originOf(DEFAULT_CONSENT_API_BASE_URL);
   return origin + USER_SERVICE_PATH;
 }
-async function fetchOrgBranding(slug, baseUrl) {
-  const url = `${userServiceBaseUrl(baseUrl)}/public/org-branding/by-slug/${encodeURIComponent(slug)}`;
+async function fetchOrgBrandingForOrganisation(organisationUuid, baseUrl) {
+  const url = `${userServiceBaseUrl(baseUrl)}/public/org-branding/${encodeURIComponent(organisationUuid)}`;
   return apiFetch(url, { method: "GET" });
 }
 
@@ -14274,7 +14286,6 @@ var DEFAULT_CONTEXT = {
   status: "idle",
   isCustomised: false,
   organisation: { organisationUuid: null, workspaceUuid: null, status: "failed" },
-  slug: "",
   builtInSignIn: false,
   brandContact: EMPTY_BRAND_CONTACT
 };
@@ -14301,18 +14312,20 @@ var withIdentityOverride = (branding, settings) => {
 };
 var BrandingProvider = ({
   children,
-  slug,
   baseUrl
 }) => {
   var _a;
   const [branding, setBranding] = useState11(null);
-  const { branding: brandingSettings } = usePrivacyCenterSettings();
+  const { settings, organisation } = usePrivacyCenterSettingsContext();
+  const brandingSettings = settings.branding;
+  const organisationUuid = organisation.organisationUuid;
   const scope = usePrivacyCenterScope();
   const scopeId = (_a = scope == null ? void 0 : scope.id) != null ? _a : null;
   useEffect11(() => {
-    if (!slug) return;
+    setBranding(null);
+    if (!organisationUuid) return;
     let cancelled = false;
-    fetchOrgBranding(slug, baseUrl).then((data) => {
+    fetchOrgBrandingForOrganisation(organisationUuid, baseUrl).then((data) => {
       if (!cancelled) setBranding(data);
     }).catch((error) => {
       console.warn("[RedactoPrivacyCenter] org branding fetch failed:", error);
@@ -14320,7 +14333,7 @@ var BrandingProvider = ({
     return () => {
       cancelled = true;
     };
-  }, [slug, baseUrl]);
+  }, [organisationUuid, baseUrl]);
   const themeVars = useMemo5(
     () => ({
       ...(branding == null ? void 0 : branding.theme) ? brandingThemeVars(branding.theme) : {},
@@ -14380,13 +14393,12 @@ var resolvePlaceholders = (text2, context) => {
 };
 
 // src/RedactoPrivacyCenter/settings/copy.ts
-var nameFromSlug = (slug) => slug.split("-").filter(Boolean).map((word) => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase()).join(" ");
 var usePlaceholderContext = () => {
   var _a, _b;
   const branding = useBranding();
-  const { slug, brandContact } = usePrivacyCenterSettingsContext();
+  const { brandContact } = usePrivacyCenterSettingsContext();
   const organizationName = (_b = (_a = useContext10(OrganizationContext)) == null ? void 0 : _a.organization) == null ? void 0 : _b.name;
-  const brand = (branding == null ? void 0 : branding.brand_name) || organizationName || nameFromSlug(slug);
+  const brand = (branding == null ? void 0 : branding.brand_name) || organizationName || "";
   const legal = brandContact.legal_entity_name || (branding == null ? void 0 : branding.legal_name) || null;
   return useMemo6(() => ({ brand, legal }), [brand, legal]);
 };
@@ -17952,9 +17964,8 @@ var INVALID_CONTACT_KEYS = {
   email: "signInInvalidContactEmail",
   sms: "signInInvalidContactSms"
 };
-var seedSession = (slug, organisationUuid, workspaceUuid, sent) => {
+var seedSession = (organisationUuid, workspaceUuid, sent) => {
   try {
-    sessionStorage.setItem("pc_org_slug", slug);
     sessionStorage.setItem("pc_org_id", organisationUuid);
     sessionStorage.setItem("pc_workspace_id", workspaceUuid);
     if (sent.channel === "email") {
@@ -17963,7 +17974,7 @@ var seedSession = (slug, organisationUuid, workspaceUuid, sent) => {
   } catch {
   }
 };
-function PrivacyCenterSignIn({ slug }) {
+function PrivacyCenterSignIn() {
   var _a;
   const { t } = useTranslation22();
   const { settings, organisation } = usePrivacyCenterSettingsContext();
@@ -17978,7 +17989,6 @@ function PrivacyCenterSignIn({ slug }) {
   const countdown = useCountdown();
   const { organisationUuid, workspaceUuid } = organisation;
   const orgUnavailable = organisation.status === "failed";
-  const orgPending = organisation.status === "resolving";
   const sendCode = useCallback18(
     async (contact, channel) => {
       const response = await consentClient.createOtp(
@@ -18044,7 +18054,7 @@ function PrivacyCenterSignIn({ slug }) {
         setError(t("otpErrorFallback"));
         return;
       }
-      seedSession(slug, organisationUuid, workspaceUuid, sent);
+      seedSession(organisationUuid, workspaceUuid, sent);
       updateTokens(accessToken, (_a2 = result == null ? void 0 : result.refresh_token) != null ? _a2 : void 0);
     } catch (verifyError) {
       setError(t(otpErrorKey(verifyError)));
@@ -18101,7 +18111,7 @@ function PrivacyCenterSignIn({ slug }) {
     {
       initialValue: typedContact,
       initialCountryCode: (_a = sent == null ? void 0 : sent.countryCode) != null ? _a : null,
-      busy: busy || orgPending,
+      busy,
       disabled: orgUnavailable,
       error: error != null ? error : orgUnavailable ? t("signInOrgUnavailable") : null,
       onSubmit: (value, countryCode) => void handleContact(value, countryCode),
@@ -18209,7 +18219,7 @@ function PrivacyCenterLayout({ settings, ...props }) {
 }
 function PrivacyCenterLayoutContent({
   children,
-  slug,
+  slug = "",
   onBack
 }) {
   const { consentClient } = useBaseUrl();
@@ -18221,39 +18231,38 @@ function PrivacyCenterLayoutContent({
   const [isLoadingOrg, setIsLoadingOrg] = useState25(true);
   const hasRedirectedRef = useRef15(false);
   const authCheckInProgressRef = useRef15(false);
+  useEffect22(() => {
+    if (slug) warnSlugDeprecated();
+  }, [slug]);
   useEffect22(() => {
     if (typeof window === "undefined") return;
     let accessToken = sessionStorage.getItem("access_token");
     let orgId = sessionStorage.getItem("pc_org_id");
     let workspaceId = sessionStorage.getItem("pc_workspace_id");
-    let orgSlug = sessionStorage.getItem("pc_org_slug");
-    if (authAccessToken && (!accessToken || !orgId || !workspaceId || !orgSlug)) {
+    if (authAccessToken && (!accessToken || !orgId || !workspaceId)) {
       const decoded = decodeJwtToken(authAccessToken);
       if (decoded) {
         accessToken = accessToken || authAccessToken;
         orgId = orgId || (typeof decoded.organisation_uuid === "string" ? decoded.organisation_uuid : null);
         workspaceId = workspaceId || (typeof decoded.workspace_uuid === "string" ? decoded.workspace_uuid : null);
-        orgSlug = orgSlug || (typeof decoded.organisation_slug === "string" ? decoded.organisation_slug : null);
         if (accessToken) sessionStorage.setItem("access_token", accessToken);
         if (orgId) sessionStorage.setItem("pc_org_id", orgId);
         if (workspaceId) sessionStorage.setItem("pc_workspace_id", workspaceId);
-        if (orgSlug) sessionStorage.setItem("pc_org_slug", orgSlug);
         const contact = resolveContactFromJwt(decoded);
         if (contact) {
           sessionStorage.setItem("email", contact);
         }
       }
     }
-    const effectiveSlug = slug || orgSlug || "";
-    if (accessToken && orgId && workspaceId && effectiveSlug) {
+    if (accessToken && orgId && workspaceId) {
       const decoded = decodeJwtToken(accessToken);
       const orgNameFromJwt = decoded == null ? void 0 : decoded.organisation_name;
-      const orgName = typeof orgNameFromJwt === "string" && orgNameFromJwt.trim() !== "" ? orgNameFromJwt : effectiveSlug.split("-").map((word) => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase()).join(" ");
+      const orgName = typeof orgNameFromJwt === "string" && orgNameFromJwt.trim() !== "" ? orgNameFromJwt : "";
       setOrganization({
         uuid: orgId,
         suid: "",
         name: orgName,
-        slug: effectiveSlug,
+        slug: "",
         description: "",
         domain: "",
         workspaces: [{
@@ -18274,7 +18283,7 @@ function PrivacyCenterLayoutContent({
       setOrganization(null);
       setIsLoadingOrg(false);
     }
-  }, [slug, authAccessToken]);
+  }, [authAccessToken]);
   useEffect22(() => {
     if (isLoadingOrg || !organization) {
       return;
@@ -18287,7 +18296,7 @@ function PrivacyCenterLayoutContent({
       authCheckInProgressRef.current = true;
       try {
         await checkAndRefreshAuth(
-          organization.slug || slug,
+          "",
           organization == null ? void 0 : organization.uuid,
           (_a = organization == null ? void 0 : organization.workspaces[0]) == null ? void 0 : _a.uuid,
           consentClient
@@ -18301,7 +18310,7 @@ function PrivacyCenterLayoutContent({
       }
     };
     checkAuth();
-  }, [slug, organization, isLoadingOrg, consentClient, authAccessToken]);
+  }, [organization, isLoadingOrg, consentClient, authAccessToken]);
   const showSignIn = builtInSignIn && !isLoadingOrg && !organization;
   const showPortal = Boolean(organization) && !isLoadingOrg && !isCheckingAuth;
   useEffect22(() => {
@@ -18315,7 +18324,7 @@ function PrivacyCenterLayoutContent({
     () => expireSession("timeout")
   );
   if (showSignIn) {
-    return /* @__PURE__ */ jsx53(PrivacyCenterSignIn, { slug });
+    return /* @__PURE__ */ jsx53(PrivacyCenterSignIn, {});
   }
   if (isLoadingOrg || !organization || isCheckingAuth) {
     return /* @__PURE__ */ jsx53("div", { style: {
@@ -23056,7 +23065,6 @@ function Form({
   const queryClient = useQueryClient();
   const timePeriodOptions = useTimePeriodOptions();
   const { organization } = useOrganization();
-  const orgSlug = (organization == null ? void 0 : organization.slug) || (organization == null ? void 0 : organization.name) || "";
   const isCaseManagementContext = typeof window !== "undefined" && window.location.pathname.includes("/case-management");
   const [requestType, setRequestType] = useState30(null);
   const [timePeriod, setTimePeriod] = useState30("");
@@ -23647,7 +23655,7 @@ function Form({
       if (!organizationId || !workspaceId) {
         throw new Error("Organization ID and Workspace ID are required for file upload");
       }
-      const authToken = await ensureValidToken(organizationId, workspaceId, orgSlug, authContext, consentClient);
+      const authToken = await ensureValidToken(organizationId, workspaceId, void 0, authContext, consentClient);
       if (!authToken) {
         throw new Error("Authentication token is required for file upload");
       }
@@ -27863,45 +27871,21 @@ function PrivacyCenterHomePage() {
 // src/RedactoPrivacyCenter/context/PrivacyCenterSettingsContext.tsx
 import { useEffect as useEffect39, useMemo as useMemo30, useState as useState39 } from "react";
 
-// src/RedactoPrivacyCenter/api/organizationLookup.ts
-var cache = /* @__PURE__ */ new Map();
-var isOrganisation = (value) => typeof value === "object" && value !== null && typeof value.uuid === "string";
-var fetchOrganisationBySlug = (slug, consentBaseUrl) => {
-  const url = `${userServiceBaseUrl(consentBaseUrl)}/organizations/exists?slug=${encodeURIComponent(slug)}`;
-  const cached = cache.get(url);
-  if (cached) {
-    return cached;
-  }
-  const request = apiFetch(url, { method: "GET" }).then((body) => {
-    if (isOrganisation(body)) {
-      return body;
-    }
-    cache.delete(url);
-    return null;
-  }).catch((error) => {
-    cache.delete(url);
-    console.warn("[RedactoPrivacyCenter] organisation lookup failed:", error);
-    return null;
-  });
-  cache.set(url, request);
-  return request;
-};
-
 // src/RedactoPrivacyCenter/settings/api.ts
-var cache2 = /* @__PURE__ */ new Map();
+var cache = /* @__PURE__ */ new Map();
 var freshEntry = (url) => {
-  const entry = cache2.get(url);
+  const entry = cache.get(url);
   if (!entry) {
     return null;
   }
   if (Date.now() >= entry.expiresAt) {
-    cache2.delete(url);
+    cache.delete(url);
     return null;
   }
   return entry;
 };
 var trimTrailingSlash = (url) => url.replace(/\/+$/, "");
-var privacyCenterSettingsUrl = (baseUrl, organisationUuid, language) => `${trimTrailingSlash(baseUrl)}/public/organisations/${encodeURIComponent(
+var privacyCenterSettingsUrl = (baseUrl, organisationUuid, language) => `${trimTrailingSlash(resolveEndpoints(baseUrl).baseUrl)}/public/organisations/${encodeURIComponent(
   organisationUuid
 )}/privacy-center-settings/?${SETTINGS_LANG_PARAM}=${encodeURIComponent(language)}`;
 var isSettingsResponse = (value) => typeof value === "object" && value !== null && "settings" in value && typeof value.settings === "object" && value.settings !== null;
@@ -27913,8 +27897,8 @@ var fetchPublicPrivacyCenterSettings = (baseUrl, organisationUuid, language) =>
   }
   const forget = () => {
     var _a;
-    if (((_a = cache2.get(url)) == null ? void 0 : _a.request) === request) {
-      cache2.delete(url);
+    if (((_a = cache.get(url)) == null ? void 0 : _a.request) === request) {
+      cache.delete(url);
     }
   };
   const request = apiFetch(url, {
@@ -27932,7 +27916,7 @@ var fetchPublicPrivacyCenterSettings = (baseUrl, organisationUuid, language) =>
     }
     return null;
   });
-  cache2.set(url, { request, expiresAt: Date.now() + SETTINGS_CACHE_TTL_MS });
+  cache.set(url, { request, expiresAt: Date.now() + SETTINGS_CACHE_TTL_MS });
   return request;
 };
 var hasCachedPrivacyCenterSettings = (baseUrl, organisationUuid, language) => freshEntry(privacyCenterSettingsUrl(baseUrl, organisationUuid, language)) !== null;
@@ -27949,15 +27933,15 @@ var readSession = (key) => {
 var resolveOrganisationIds = ({
   organisationUuid,
   workspaceUuid,
-  accessToken,
-  slug
+  accessToken
 }) => {
   var _a, _b, _c, _d;
   const claims = accessToken ? decodeJwtToken(accessToken) : null;
-  const storedSlug = readSession("pc_org_slug");
-  const sessionMatches = !slug || !storedSlug || storedSlug === slug;
+  const storedOrganisation = readSession("pc_org_id");
+  const organisation = (_b = (_a = clean(organisationUuid)) != null ? _a : clean(claims == null ? void 0 : claims.organisation_uuid)) != null ? _b : storedOrganisation;
+  const sessionMatches = organisation !== null && organisation === storedOrganisation;
   return {
-    organisationUuid: (_b = (_a = clean(organisationUuid)) != null ? _a : clean(claims == null ? void 0 : claims.organisation_uuid)) != null ? _b : sessionMatches ? readSession("pc_org_id") : null,
+    organisationUuid: organisation,
     workspaceUuid: (_d = (_c = clean(workspaceUuid)) != null ? _c : clean(claims == null ? void 0 : claims.workspace_uuid)) != null ? _d : sessionMatches ? readSession("pc_workspace_id") : null
   };
 };
@@ -28216,55 +28200,9 @@ var resolveBrandContact = (raw) => {
 // src/RedactoPrivacyCenter/context/PrivacyCenterSettingsContext.tsx
 import { jsx as jsx101 } from "react/jsx-runtime";
 var requestLanguageFor = (language) => LANGUAGE_CODES.includes(language) ? language : "en";
-var useResolvedOrganisation = (baseUrl, slug, known, canLookUp) => {
-  const needsLookup = canLookUp && Boolean(slug) && (!known.organisationUuid || !known.workspaceUuid);
-  const lookupKey = `${baseUrl}|${slug}`;
-  const [lookup, setLookup] = useState39(null);
-  useEffect39(() => {
-    if (!needsLookup) {
-      return void 0;
-    }
-    let cancelled = false;
-    void fetchOrganisationBySlug(slug, baseUrl).then((organisation) => {
-      var _a, _b, _c;
-      if (cancelled) {
-        return;
-      }
-      setLookup({
-        key: lookupKey,
-        ids: organisation ? {
-          organisationUuid: organisation.uuid,
-          workspaceUuid: (_c = (_b = (_a = organisation.workspaces) == null ? void 0 : _a[0]) == null ? void 0 : _b.uuid) != null ? _c : null
-        } : null
-      });
-    });
-    return () => {
-      cancelled = true;
-    };
-  }, [needsLookup, slug, baseUrl, lookupKey]);
-  return useMemo30(() => {
-    var _a, _b, _c, _d;
-    if (!needsLookup) {
-      return { ...known, status: "resolved" };
-    }
-    if ((lookup == null ? void 0 : lookup.key) !== lookupKey) {
-      return { ...known, status: "resolving" };
-    }
-    const found = lookup.ids;
-    const sameOrganisation = !known.organisationUuid || known.organisationUuid === (found == null ? void 0 : found.organisationUuid);
-    const organisationUuid = (_b = (_a = known.organisationUuid) != null ? _a : found == null ? void 0 : found.organisationUuid) != null ? _b : null;
-    const workspaceUuid = (_d = known.workspaceUuid) != null ? _d : sameOrganisation ? (_c = found == null ? void 0 : found.workspaceUuid) != null ? _c : null : null;
-    return {
-      organisationUuid,
-      workspaceUuid,
-      status: organisationUuid && workspaceUuid ? "resolved" : "failed"
-    };
-  }, [needsLookup, known, lookup, lookupKey]);
-};
 var PrivacyCenterSettingsProvider = ({
   children,
   baseUrl,
-  slug,
   accessToken,
   organisationUuid,
   workspaceUuid,
@@ -28272,11 +28210,13 @@ var PrivacyCenterSettingsProvider = ({
   builtInSignIn = false
 }) => {
   const { currentLanguage } = useCurrentLanguage();
-  const known = useMemo30(
-    () => resolveOrganisationIds({ organisationUuid, workspaceUuid, accessToken, slug }),
-    [organisationUuid, workspaceUuid, accessToken, slug]
-  );
-  const organisation = useResolvedOrganisation(baseUrl, slug, known, builtInSignIn);
+  const organisation = useMemo30(() => {
+    const known = resolveOrganisationIds({ organisationUuid, workspaceUuid, accessToken });
+    return {
+      ...known,
+      status: known.organisationUuid && known.workspaceUuid ? "resolved" : "failed"
+    };
+  }, [organisationUuid, workspaceUuid, accessToken]);
   const orgUuid = organisation.organisationUuid;
   const requestLanguage = requestLanguageFor(currentLanguage);
   const [remote, setRemote] = useState39(null);
@@ -28321,8 +28261,8 @@ var PrivacyCenterSettingsProvider = ({
   const isCustomised = isPublished || hasHostOverrides(overrides);
   useLanguagePolicy(settings, isCustomised);
   const value = useMemo30(
-    () => ({ settings, status, isCustomised, organisation, slug, builtInSignIn, brandContact }),
-    [settings, status, isCustomised, organisation, slug, builtInSignIn, brandContact]
+    () => ({ settings, status, isCustomised, organisation, builtInSignIn, brandContact }),
+    [settings, status, isCustomised, organisation, builtInSignIn, brandContact]
   );
   return /* @__PURE__ */ jsx101(PrivacyCenterSettingsContext.Provider, { value, children });
 };
@@ -31519,7 +31459,7 @@ function SettingsAppearance({ children }) {
 function RedactoPrivacyCenter({
   baseUrl,
   ledgerBaseUrl,
-  slug,
+  slug = "",
   accessToken,
   refreshToken,
   token,
@@ -31546,13 +31486,12 @@ function RedactoPrivacyCenter({
         PrivacyCenterSettingsProvider,
         {
           baseUrl,
-          slug,
           accessToken,
           organisationUuid,
           workspaceUuid,
           overrides: settings,
           builtInSignIn: builtInSignIn && !token,
-          children: /* @__PURE__ */ jsx103(PrivacyCenterRoot, { children: /* @__PURE__ */ jsx103(SettingsAppearance, { children: /* @__PURE__ */ jsx103(BrandingProvider, { slug, baseUrl, children: /* @__PURE__ */ jsx103(BaseUrlProvider, { baseUrl, ledgerBaseUrl, children: /* @__PURE__ */ jsx103(
+          children: /* @__PURE__ */ jsx103(PrivacyCenterRoot, { children: /* @__PURE__ */ jsx103(SettingsAppearance, { children: /* @__PURE__ */ jsx103(BrandingProvider, { baseUrl, children: /* @__PURE__ */ jsx103(BaseUrlProvider, { baseUrl, ledgerBaseUrl, children: /* @__PURE__ */ jsx103(
             AuthProvider,
             {
               accessToken,
@@ -31563,7 +31502,6 @@ function RedactoPrivacyCenter({
               sandboxMobile: mobile,
               organisationUuid,
               workspaceUuid,
-              slug,
               onError,
               children: /* @__PURE__ */ jsx103(NavigationProvider, { initialPage, children: /* @__PURE__ */ jsx103(PageChromeProvider, { children: /* @__PURE__ */ jsx103(PrivacyCenterLayout, { slug, onBack, children: /* @__PURE__ */ jsx103(PrivacyCenterHomePage, {}) }) }) })
             }