@redacto.io/consent-sdk-react 10.4.0-beta.1 → 11.0.0-beta.3

package/dist/privacy-center.mjs

@@ -15,10 +15,14 @@ import {
   isSafeCustomCss,
   loadNoticeWebfont,
   resolveAppearance,
+  resolveEndpoints,
   useIsomorphicLayoutEffect,
   useMediaQuery,
+  useResolvedEndpoints,
+  warnEndpointUsage,
+  warnSlugDeprecated,
   withIdempotencyKey
-} from "./chunk-DGMUTOWJ.mjs";
+} from "./chunk-W45JQYDG.mjs";
 import {
   INHERIT_FONT_FAMILY,
   resolveNoticeFontFamily
@@ -9120,36 +9124,35 @@ var isJwtExpired = (token, bufferSeconds = 5 * 60) => {
     return true;
   }
 };
-var isUserAuthenticated = (expectedSlug) => {
+var isUserAuthenticated = (_expectedSlug) => {
   if (typeof window === "undefined") return false;
   const accessToken = sessionStorage.getItem("access_token");
   const email = sessionStorage.getItem("email");
-  const orgSlug = sessionStorage.getItem("pc_org_slug");
-  if (!accessToken || !email || !orgSlug) {
-    return false;
-  }
-  return orgSlug === expectedSlug;
+  return Boolean(accessToken && email);
 };
-var getInitialState = (slug) => {
+var getInitialState = (_slug) => {
   if (typeof window === "undefined") return true;
-  return !isUserAuthenticated(slug);
+  return !isUserAuthenticated();
 };
-var checkAndRefreshAuth = async (expectedSlug, organizationId, workspaceId, consentClient) => {
+var isSessionForOrganisation = (organizationId) => {
+  const storedOrgId = sessionStorage.getItem("pc_org_id");
+  return Boolean(storedOrgId) && (!organizationId || storedOrgId === organizationId);
+};
+var checkAndRefreshAuth = async (_expectedSlug, organizationId, workspaceId, consentClient) => {
   if (typeof window === "undefined") return false;
   if (getSandboxConfig()) {
     return true;
   }
   const accessToken = sessionStorage.getItem("access_token");
   const email = sessionStorage.getItem("email");
-  const orgSlug = sessionStorage.getItem("pc_org_slug");
-  if (orgSlug && orgSlug !== expectedSlug) {
+  if (!isSessionForOrganisation(organizationId)) {
     return false;
   }
   const needsRefresh = !accessToken || accessToken && isJwtExpired(accessToken, TOKEN_EXPIRY_BUFFER_SECONDS);
-  if (!needsRefresh && accessToken && email && orgSlug && orgSlug === expectedSlug) {
+  if (!needsRefresh && accessToken && email) {
     return true;
   }
-  if (needsRefresh && email && orgSlug === expectedSlug) {
+  if (needsRefresh && email) {
     const orgId = organizationId || sessionStorage.getItem("pc_org_id") || "";
     const wsId = workspaceId || sessionStorage.getItem("pc_workspace_id") || "";
     if (!orgId || !wsId) {
@@ -9248,7 +9251,7 @@ var signOutPrivacyCenter = () => {
   removeStorage(REFRESH_TOKEN_STORAGE_KEY);
   clearLegacyRefreshTokenCookie();
 };
-var ensureValidToken = async (organizationId, workspaceId, slug, authContext, consentClient) => {
+var ensureValidToken = async (organizationId, workspaceId, _slug, authContext, consentClient) => {
   if (typeof window === "undefined") return null;
   const sandbox = getSandboxConfig();
   if (sandbox) {
@@ -9273,7 +9276,7 @@ var ensureValidToken = async (organizationId, workspaceId, slug, authContext, co
     return newToken;
   }
   isRefreshing = true;
-  refreshPromise = performTokenRefresh(organizationId, workspaceId, slug, authContext, consentClient);
+  refreshPromise = performTokenRefresh(organizationId, workspaceId, authContext, consentClient);
   try {
     const newToken = await refreshPromise;
     return newToken;
@@ -9282,7 +9285,7 @@ var ensureValidToken = async (organizationId, workspaceId, slug, authContext, co
     refreshPromise = null;
   }
 };
-var performTokenRefresh = async (organizationId, workspaceId, _slug, authContext, consentClient) => {
+var performTokenRefresh = async (organizationId, workspaceId, authContext, consentClient) => {
   var _a, _b, _c, _d, _e, _f, _g;
   const orgId = organizationId || sessionStorage.getItem("pc_org_id") || "";
   const wsId = workspaceId || sessionStorage.getItem("pc_workspace_id") || "";
@@ -9886,13 +9889,15 @@ var seedSessionStorage = (data) => {
     return;
   }
   if (data.accessToken) sessionStorage.setItem("access_token", data.accessToken);
+  if (data.orgId && !data.workspaceId && sessionStorage.getItem("pc_org_id") !== data.orgId) {
+    sessionStorage.removeItem("pc_workspace_id");
+  }
   if (data.orgId) sessionStorage.setItem("pc_org_id", data.orgId);
   if (data.workspaceId) sessionStorage.setItem("pc_workspace_id", data.workspaceId);
-  if (data.slug) sessionStorage.setItem("pc_org_slug", data.slug);
   if (data.contact) sessionStorage.setItem("email", data.contact);
 };
 var configureSandbox = (props) => {
-  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m;
+  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k;
   const token = (_a = props.token) == null ? void 0 : _a.trim();
   if (!token) {
     setSandboxConfig(null);
@@ -9903,21 +9908,18 @@ var configureSandbox = (props) => {
   const ucic = (_g = (_f = props.sandboxUcic) == null ? void 0 : _f.trim()) != null ? _g : "";
   const email = (_i = (_h = props.sandboxEmail) == null ? void 0 : _h.trim()) != null ? _i : "";
   const mobile = (_k = (_j = props.sandboxMobile) == null ? void 0 : _j.trim()) != null ? _k : "";
-  const slug = (_m = (_l = props.slug) == null ? void 0 : _l.trim()) != null ? _m : "";
   setSandboxConfig({
     token,
     ucic: ucic || void 0,
     email: email || void 0,
     mobile: mobile || void 0,
     organisationUuid,
-    workspaceUuid,
-    slug
+    workspaceUuid
   });
   seedSessionStorage({
     accessToken: token,
     orgId: organisationUuid,
     workspaceId: workspaceUuid,
-    slug,
     // The principal precedence (UCIC > email > mobile) the server also applies.
     contact: ucic || email || mobile
   });
@@ -9933,7 +9935,6 @@ var syncJwtDataToSessionStorage = (accessToken) => {
   seedSessionStorage({
     orgId: typeof decoded.organisation_uuid === "string" ? decoded.organisation_uuid : void 0,
     workspaceId: typeof decoded.workspace_uuid === "string" ? decoded.workspace_uuid : void 0,
-    slug: typeof decoded.organisation_slug === "string" ? decoded.organisation_slug : void 0,
     contact: typeof contact === "string" ? contact : void 0
   });
 };
@@ -9948,7 +9949,6 @@ var AuthProvider = (props) => {
     sandboxMobile,
     organisationUuid,
     workspaceUuid,
-    slug,
     onError
   } = props;
   const [sandboxActive] = useState(() => configureSandbox(props));
@@ -10032,7 +10032,7 @@ var AuthProvider = (props) => {
     }
     configureSandbox(props);
     return () => setSandboxConfig(null);
-  }, [sandboxActive, sandboxToken, sandboxUcic, sandboxEmail, sandboxMobile, organisationUuid, workspaceUuid, slug]);
+  }, [sandboxActive, sandboxToken, sandboxUcic, sandboxEmail, sandboxMobile, organisationUuid, workspaceUuid]);
   const updateTokens = useCallback2((newAccessToken, newRefreshToken) => {
     setAccessToken(newAccessToken);
     if (newRefreshToken) {
@@ -10079,9 +10079,13 @@ import { createContext as createContext4, useContext as useContext4, useMemo as
 
 // src/RedactoPrivacyCenter/api/client.ts
 function createConsentClient(baseUrl, ledgerBaseUrl) {
-  const ledgerConfigured = Boolean(ledgerBaseUrl);
+  var _a;
+  warnEndpointUsage(baseUrl, ledgerBaseUrl, { hasBuiltInDefault: false });
+  const endpoints = resolveEndpoints(baseUrl, ledgerBaseUrl);
+  const consentBaseUrl = endpoints.baseUrl;
+  const ledgerConfigured = Boolean(endpoints.ledgerBaseUrl);
   const useLedger = () => ledgerConfigured;
-  const ledgerBase = (ledgerBaseUrl != null ? ledgerBaseUrl : "").replace(/\/$/, "");
+  const ledgerBase = ((_a = endpoints.ledgerBaseUrl) != null ? _a : "").replace(/\/$/, "");
   async function privacyCenterApiFetch(url, options) {
     const { authToken, getAuthToken, headers = {}, ...fetchOptions } = options;
     const requestHeaders = new Headers();
@@ -10179,7 +10183,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
     }
   }
   function privacyCenterUrl(baseRequest, path) {
-    return `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${path}`;
+    return `${consentBaseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${path}`;
   }
   function ledgerUrl(baseRequest, path) {
     if (!useLedger()) {
@@ -10281,7 +10285,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * `channel: "sms"`.
      */
     async createOtp(organisationId, workspaceId, email, options, channel = "email") {
-      const url = `${baseUrl}/public/organisations/${organisationId}/workspaces/${workspaceId}/otp/create`;
+      const url = `${consentBaseUrl}/public/organisations/${organisationId}/workspaces/${workspaceId}/otp/create`;
       return apiFetch(url, {
         ...options,
         method: "POST",
@@ -10299,7 +10303,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * then rejects it with 403 "Token scope is not permitted".
      */
     async verifyOtp(organisationId, workspaceId, otpId, otp, options, purpose = "login") {
-      const url = `${baseUrl}/public/organisations/${organisationId}/workspaces/${workspaceId}/otp/verify`;
+      const url = `${consentBaseUrl}/public/organisations/${organisationId}/workspaces/${workspaceId}/otp/verify`;
       return apiFetch(url, {
         ...options,
         method: "POST",
@@ -10310,7 +10314,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Exchange one-time token for JWT tokens (public)
      */
     async exchangeToken(token) {
-      const url = `${baseUrl}/public/tokens/token-exchange?token=${encodeURIComponent(token)}`;
+      const url = `${consentBaseUrl}/public/tokens/token-exchange?token=${encodeURIComponent(token)}`;
       const response = await fetch(url, {
         method: "GET",
         headers: { Accept: "application/json" }
@@ -10331,7 +10335,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Refresh OTP token (public)
      */
     async refreshOtpToken(organisationId, workspaceId, refreshToken, options) {
-      const url = `${baseUrl}/public/organisations/${organisationId}/workspaces/${workspaceId}/otp/refresh`;
+      const url = `${consentBaseUrl}/public/organisations/${organisationId}/workspaces/${workspaceId}/otp/refresh`;
       return apiFetch(url, {
         ...options,
         method: "POST",
@@ -10342,7 +10346,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * Get products
      */
     async getProducts(baseRequest, skip = 0, limit = 10, options) {
-      const url = `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/notice-management/products/?skip=${skip}&limit=${limit}`;
+      const url = `${consentBaseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/notice-management/products/?skip=${skip}&limit=${limit}`;
       return apiFetch(url, {
         ...options,
         getAuthToken: async () => baseRequest.authToken
@@ -10434,7 +10438,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
      * used with its `{ purpose_uuid, contact, ... }` payload.
      */
     async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements, language, nominatorUuid) {
-      var _a;
+      var _a2;
       if (!useLedger()) {
         const url2 = privacyCenterUrl(
           baseRequest,
@@ -10484,7 +10488,7 @@ function createConsentClient(baseUrl, ledgerBaseUrl) {
         notice_uuid: noticeUuid,
         // Sandbox has no JWT, so the ledger resolves the acting test principal
         // from this identity in the body; null (spread no-op) on the live JWT path.
-        ...(_a = sandboxBodyIdentity()) != null ? _a : {},
+        ...(_a2 = sandboxBodyIdentity()) != null ? _a2 : {},
         // Pins the action to the card the user acted on. Without it the ledger
         // scopes by the notice and applies the answer to every product the
         // notice covers, so revoking a purpose held on two products withdrew
@@ -10835,17 +10839,21 @@ var BaseUrlProvider = ({
   baseUrl,
   ledgerBaseUrl
 }) => {
+  const endpoints = useResolvedEndpoints(baseUrl, ledgerBaseUrl, {
+    hasBuiltInDefault: false
+  });
   const consentClient = useMemo3(
     () => createConsentClient(baseUrl, ledgerBaseUrl),
     [baseUrl, ledgerBaseUrl]
   );
   const value = useMemo3(
     () => ({
-      baseUrl,
-      ledgerBaseUrl,
-      consentClient
+      baseUrl: endpoints.baseUrl,
+      ledgerBaseUrl: endpoints.ledgerBaseUrl,
+      consentClient,
+      apiHost: endpoints.apiHost
     }),
-    [baseUrl, ledgerBaseUrl, consentClient]
+    [endpoints, consentClient]
   );
   return /* @__PURE__ */ jsx4(BaseUrlContext.Provider, { value, children });
 };
@@ -13900,11 +13908,15 @@ function originOf(url) {
   return match ? match[0] : "";
 }
 function userServiceBaseUrl(consentBaseUrl) {
+  const endpoints = resolveEndpoints(consentBaseUrl);
+  if (endpoints.mode === "host") {
+    return endpoints.apiHost + USER_SERVICE_PATH;
+  }
   const origin = originOf(consentBaseUrl) || originOf(DEFAULT_CONSENT_API_BASE_URL);
   return origin + USER_SERVICE_PATH;
 }
-async function fetchOrgBranding(slug, baseUrl) {
-  const url = `${userServiceBaseUrl(baseUrl)}/public/org-branding/by-slug/${encodeURIComponent(slug)}`;
+async function fetchOrgBrandingForOrganisation(organisationUuid, baseUrl) {
+  const url = `${userServiceBaseUrl(baseUrl)}/public/org-branding/${encodeURIComponent(organisationUuid)}`;
   return apiFetch(url, { method: "GET" });
 }
 
@@ -14120,6 +14132,7 @@ var LANGUAGE_CODES = [
 ];
 var RTL_LANGUAGES = /* @__PURE__ */ new Set(["ur", "sd", "ks"]);
 var COUNTRY_CODES = ["+91", "+971", "+65", "+44", "+1"];
+var LOGO_ALIGNMENTS = ["auto", "left", "center", "right"];
 var FONT_FAMILIES = [
   "Inter",
   "Montserrat",
@@ -14172,6 +14185,7 @@ var DEFAULT_PRIVACY_CENTER_SETTINGS = {
     display_name: null,
     logo_url: null,
     logo_height: null,
+    logo_align: "auto",
     inherit_colors: true,
     primary_color: null,
     accent_color: null,
@@ -14274,7 +14288,6 @@ var DEFAULT_CONTEXT = {
   status: "idle",
   isCustomised: false,
   organisation: { organisationUuid: null, workspaceUuid: null, status: "failed" },
-  slug: "",
   builtInSignIn: false,
   brandContact: EMPTY_BRAND_CONTACT
 };
@@ -14301,18 +14314,20 @@ var withIdentityOverride = (branding, settings) => {
 };
 var BrandingProvider = ({
   children,
-  slug,
   baseUrl
 }) => {
   var _a;
   const [branding, setBranding] = useState11(null);
-  const { branding: brandingSettings } = usePrivacyCenterSettings();
+  const { settings, organisation } = usePrivacyCenterSettingsContext();
+  const brandingSettings = settings.branding;
+  const organisationUuid = organisation.organisationUuid;
   const scope = usePrivacyCenterScope();
   const scopeId = (_a = scope == null ? void 0 : scope.id) != null ? _a : null;
   useEffect11(() => {
-    if (!slug) return;
+    setBranding(null);
+    if (!organisationUuid) return;
     let cancelled = false;
-    fetchOrgBranding(slug, baseUrl).then((data) => {
+    fetchOrgBrandingForOrganisation(organisationUuid, baseUrl).then((data) => {
       if (!cancelled) setBranding(data);
     }).catch((error) => {
       console.warn("[RedactoPrivacyCenter] org branding fetch failed:", error);
@@ -14320,7 +14335,7 @@ var BrandingProvider = ({
     return () => {
       cancelled = true;
     };
-  }, [slug, baseUrl]);
+  }, [organisationUuid, baseUrl]);
   const themeVars = useMemo5(
     () => ({
       ...(branding == null ? void 0 : branding.theme) ? brandingThemeVars(branding.theme) : {},
@@ -14380,13 +14395,12 @@ var resolvePlaceholders = (text2, context) => {
 };
 
 // src/RedactoPrivacyCenter/settings/copy.ts
-var nameFromSlug = (slug) => slug.split("-").filter(Boolean).map((word) => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase()).join(" ");
 var usePlaceholderContext = () => {
   var _a, _b;
   const branding = useBranding();
-  const { slug, brandContact } = usePrivacyCenterSettingsContext();
+  const { brandContact } = usePrivacyCenterSettingsContext();
   const organizationName = (_b = (_a = useContext10(OrganizationContext)) == null ? void 0 : _a.organization) == null ? void 0 : _b.name;
-  const brand = (branding == null ? void 0 : branding.brand_name) || organizationName || nameFromSlug(slug);
+  const brand = (branding == null ? void 0 : branding.brand_name) || organizationName || "";
   const legal = brandContact.legal_entity_name || (branding == null ? void 0 : branding.legal_name) || null;
   return useMemo6(() => ({ brand, legal }), [brand, legal]);
 };
@@ -15654,6 +15668,17 @@ function CompactLanguageMenu({ locale, options, onChange }) {
 
 // src/RedactoPrivacyCenter/components/AppShell/TopAppBar.tsx
 import { Fragment as Fragment3, jsx as jsx37, jsxs as jsxs16 } from "react/jsx-runtime";
+var LOGO_GROUP_PLACEMENT = {
+  // `left`, not `insetInlineStart`: the translation is physical, so a logical
+  // offset would measure from the right under RTL and land off centre.
+  center: {
+    position: "absolute",
+    left: "50%",
+    transform: "translateX(-50%)"
+  },
+  right: { order: 1 }
+};
+var hamburgerLeadsHeader = (logoAlign) => logoAlign === "center" || logoAlign === "right";
 var TOP_BAR_LOGO_HEIGHT = 32;
 var TOP_BAR_LOGO_MAX_HEIGHT = 40;
 var TopAppBar = forwardRef2(function TopAppBar2({ onOpenMobileNav, showHamburger, locale, onLocaleChange, onBack, showNotifications = true }, hamburgerRef) {
@@ -15716,6 +15741,22 @@ var TopAppBar = forwardRef2(function TopAppBar2({ onOpenMobileNav, showHamburger
     fontFamily: "inherit",
     flexShrink: 0
   };
+  const logoAlign = brandingSettings.logo_align;
+  const hamburgerIsOwnItem = hamburgerLeadsHeader(logoAlign);
+  const logoGroupStyle = {
+    display: "flex",
+    alignItems: "center",
+    gap: 8,
+    minWidth: 0,
+    ...LOGO_GROUP_PLACEMENT[logoAlign]
+  };
+  const actionsStyle = {
+    display: "flex",
+    alignItems: "center",
+    gap: 8,
+    flexShrink: 0,
+    ...logoAlign === "right" ? { order: 0 } : null
+  };
   return /* @__PURE__ */ jsxs16(Fragment3, { children: [
     /* @__PURE__ */ jsxs16(
       "header",
@@ -15725,8 +15766,16 @@ var TopAppBar = forwardRef2(function TopAppBar2({ onOpenMobileNav, showHamburger
         style: headerStyle,
         ...partAttribute("topbar"),
         children: [
-          /* @__PURE__ */ jsxs16("div", { style: { display: "flex", alignItems: "center", gap: 8, minWidth: 0 }, children: [
-            showHamburger && /* @__PURE__ */ jsx37(
+          showHamburger && hamburgerIsOwnItem && /* @__PURE__ */ jsx37(
+            HamburgerButton,
+            {
+              ref: hamburgerRef,
+              onClick: onOpenMobileNav,
+              label: t("openSidebarMenu")
+            }
+          ),
+          /* @__PURE__ */ jsxs16("div", { style: logoGroupStyle, children: [
+            showHamburger && !hamburgerIsOwnItem && /* @__PURE__ */ jsx37(
               HamburgerButton,
               {
                 ref: hamburgerRef,
@@ -15776,48 +15825,36 @@ var TopAppBar = forwardRef2(function TopAppBar2({ onOpenMobileNav, showHamburger
               }
             )
           ] }),
-          /* @__PURE__ */ jsxs16(
-            "div",
-            {
-              style: {
-                display: "flex",
-                alignItems: "center",
-                gap: 8,
-                flexShrink: 0
-              },
-              className: "pc-shell-topbar-actions",
-              children: [
-                !showSwitcher ? null : showHamburger ? /* @__PURE__ */ jsx37(
-                  CompactLanguageMenu,
-                  {
-                    locale,
-                    options: languageOptions2,
-                    onChange: changeLanguage
-                  }
-                ) : /* @__PURE__ */ jsx37(
-                  PCSelect,
-                  {
-                    size: "sm",
-                    searchable: true,
-                    prefix: /* @__PURE__ */ jsx37(Globe2, { size: 12, strokeWidth: 1.8 }),
-                    searchPlaceholder: t("searchPlaceholder"),
-                    noOptionsMessage: t("noOptionsFound"),
-                    style: {
-                      width: "auto",
-                      minWidth: 120,
-                      maxWidth: "min(60vw, 280px)",
-                      flexShrink: 0
-                    },
-                    options: [...languageOptions2],
-                    value: languageOptions2.find((opt) => opt.value === locale) || null,
-                    onChange: handleLanguageChange
-                  }
-                ),
-                showNotifications && isSectionEnabled("notifications") && /* @__PURE__ */ jsx37(NotificationBell, {}),
-                /* @__PURE__ */ jsx37(UserMenu, { onBack })
-              ]
-            }
-          )
+          /* @__PURE__ */ jsxs16("div", { style: actionsStyle, className: "pc-shell-topbar-actions", children: [
+            !showSwitcher ? null : showHamburger ? /* @__PURE__ */ jsx37(
+              CompactLanguageMenu,
+              {
+                locale,
+                options: languageOptions2,
+                onChange: changeLanguage
+              }
+            ) : /* @__PURE__ */ jsx37(
+              PCSelect,
+              {
+                size: "sm",
+                searchable: true,
+                prefix: /* @__PURE__ */ jsx37(Globe2, { size: 12, strokeWidth: 1.8 }),
+                searchPlaceholder: t("searchPlaceholder"),
+                noOptionsMessage: t("noOptionsFound"),
+                style: {
+                  width: "auto",
+                  minWidth: 120,
+                  maxWidth: "min(60vw, 280px)",
+                  flexShrink: 0
+                },
+                options: [...languageOptions2],
+                value: languageOptions2.find((opt) => opt.value === locale) || null,
+                onChange: handleLanguageChange
+              }
+            ),
+            showNotifications && isSectionEnabled("notifications") && /* @__PURE__ */ jsx37(NotificationBell, {}),
+            /* @__PURE__ */ jsx37(UserMenu, { onBack })
+          ] })
         ]
       }
     ),
@@ -17952,9 +17989,8 @@ var INVALID_CONTACT_KEYS = {
   email: "signInInvalidContactEmail",
   sms: "signInInvalidContactSms"
 };
-var seedSession = (slug, organisationUuid, workspaceUuid, sent) => {
+var seedSession = (organisationUuid, workspaceUuid, sent) => {
   try {
-    sessionStorage.setItem("pc_org_slug", slug);
     sessionStorage.setItem("pc_org_id", organisationUuid);
     sessionStorage.setItem("pc_workspace_id", workspaceUuid);
     if (sent.channel === "email") {
@@ -17963,7 +17999,7 @@ var seedSession = (slug, organisationUuid, workspaceUuid, sent) => {
   } catch {
   }
 };
-function PrivacyCenterSignIn({ slug }) {
+function PrivacyCenterSignIn() {
   var _a;
   const { t } = useTranslation22();
   const { settings, organisation } = usePrivacyCenterSettingsContext();
@@ -17978,7 +18014,6 @@ function PrivacyCenterSignIn({ slug }) {
   const countdown = useCountdown();
   const { organisationUuid, workspaceUuid } = organisation;
   const orgUnavailable = organisation.status === "failed";
-  const orgPending = organisation.status === "resolving";
   const sendCode = useCallback18(
     async (contact, channel) => {
       const response = await consentClient.createOtp(
@@ -18044,7 +18079,7 @@ function PrivacyCenterSignIn({ slug }) {
         setError(t("otpErrorFallback"));
         return;
       }
-      seedSession(slug, organisationUuid, workspaceUuid, sent);
+      seedSession(organisationUuid, workspaceUuid, sent);
       updateTokens(accessToken, (_a2 = result == null ? void 0 : result.refresh_token) != null ? _a2 : void 0);
     } catch (verifyError) {
       setError(t(otpErrorKey(verifyError)));
@@ -18101,7 +18136,7 @@ function PrivacyCenterSignIn({ slug }) {
     {
       initialValue: typedContact,
       initialCountryCode: (_a = sent == null ? void 0 : sent.countryCode) != null ? _a : null,
-      busy: busy || orgPending,
+      busy,
       disabled: orgUnavailable,
       error: error != null ? error : orgUnavailable ? t("signInOrgUnavailable") : null,
       onSubmit: (value, countryCode) => void handleContact(value, countryCode),
@@ -18209,7 +18244,7 @@ function PrivacyCenterLayout({ settings, ...props }) {
 }
 function PrivacyCenterLayoutContent({
   children,
-  slug,
+  slug = "",
   onBack
 }) {
   const { consentClient } = useBaseUrl();
@@ -18221,39 +18256,38 @@ function PrivacyCenterLayoutContent({
   const [isLoadingOrg, setIsLoadingOrg] = useState25(true);
   const hasRedirectedRef = useRef15(false);
   const authCheckInProgressRef = useRef15(false);
+  useEffect22(() => {
+    if (slug) warnSlugDeprecated();
+  }, [slug]);
   useEffect22(() => {
     if (typeof window === "undefined") return;
     let accessToken = sessionStorage.getItem("access_token");
     let orgId = sessionStorage.getItem("pc_org_id");
     let workspaceId = sessionStorage.getItem("pc_workspace_id");
-    let orgSlug = sessionStorage.getItem("pc_org_slug");
-    if (authAccessToken && (!accessToken || !orgId || !workspaceId || !orgSlug)) {
+    if (authAccessToken && (!accessToken || !orgId || !workspaceId)) {
       const decoded = decodeJwtToken(authAccessToken);
       if (decoded) {
         accessToken = accessToken || authAccessToken;
         orgId = orgId || (typeof decoded.organisation_uuid === "string" ? decoded.organisation_uuid : null);
         workspaceId = workspaceId || (typeof decoded.workspace_uuid === "string" ? decoded.workspace_uuid : null);
-        orgSlug = orgSlug || (typeof decoded.organisation_slug === "string" ? decoded.organisation_slug : null);
         if (accessToken) sessionStorage.setItem("access_token", accessToken);
         if (orgId) sessionStorage.setItem("pc_org_id", orgId);
         if (workspaceId) sessionStorage.setItem("pc_workspace_id", workspaceId);
-        if (orgSlug) sessionStorage.setItem("pc_org_slug", orgSlug);
         const contact = resolveContactFromJwt(decoded);
         if (contact) {
           sessionStorage.setItem("email", contact);
         }
       }
     }
-    const effectiveSlug = slug || orgSlug || "";
-    if (accessToken && orgId && workspaceId && effectiveSlug) {
+    if (accessToken && orgId && workspaceId) {
       const decoded = decodeJwtToken(accessToken);
       const orgNameFromJwt = decoded == null ? void 0 : decoded.organisation_name;
-      const orgName = typeof orgNameFromJwt === "string" && orgNameFromJwt.trim() !== "" ? orgNameFromJwt : effectiveSlug.split("-").map((word) => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase()).join(" ");
+      const orgName = typeof orgNameFromJwt === "string" && orgNameFromJwt.trim() !== "" ? orgNameFromJwt : "";
       setOrganization({
         uuid: orgId,
         suid: "",
         name: orgName,
-        slug: effectiveSlug,
+        slug: "",
         description: "",
         domain: "",
         workspaces: [{
@@ -18274,7 +18308,7 @@ function PrivacyCenterLayoutContent({
       setOrganization(null);
       setIsLoadingOrg(false);
     }
-  }, [slug, authAccessToken]);
+  }, [authAccessToken]);
   useEffect22(() => {
     if (isLoadingOrg || !organization) {
       return;
@@ -18287,7 +18321,7 @@ function PrivacyCenterLayoutContent({
       authCheckInProgressRef.current = true;
       try {
         await checkAndRefreshAuth(
-          organization.slug || slug,
+          "",
           organization == null ? void 0 : organization.uuid,
           (_a = organization == null ? void 0 : organization.workspaces[0]) == null ? void 0 : _a.uuid,
           consentClient
@@ -18301,7 +18335,7 @@ function PrivacyCenterLayoutContent({
       }
     };
     checkAuth();
-  }, [slug, organization, isLoadingOrg, consentClient, authAccessToken]);
+  }, [organization, isLoadingOrg, consentClient, authAccessToken]);
   const showSignIn = builtInSignIn && !isLoadingOrg && !organization;
   const showPortal = Boolean(organization) && !isLoadingOrg && !isCheckingAuth;
   useEffect22(() => {
@@ -18315,7 +18349,7 @@ function PrivacyCenterLayoutContent({
     () => expireSession("timeout")
   );
   if (showSignIn) {
-    return /* @__PURE__ */ jsx53(PrivacyCenterSignIn, { slug });
+    return /* @__PURE__ */ jsx53(PrivacyCenterSignIn, {});
   }
   if (isLoadingOrg || !organization || isCheckingAuth) {
     return /* @__PURE__ */ jsx53("div", { style: {
@@ -23056,7 +23090,6 @@ function Form({
   const queryClient = useQueryClient();
   const timePeriodOptions = useTimePeriodOptions();
   const { organization } = useOrganization();
-  const orgSlug = (organization == null ? void 0 : organization.slug) || (organization == null ? void 0 : organization.name) || "";
   const isCaseManagementContext = typeof window !== "undefined" && window.location.pathname.includes("/case-management");
   const [requestType, setRequestType] = useState30(null);
   const [timePeriod, setTimePeriod] = useState30("");
@@ -23647,7 +23680,7 @@ function Form({
       if (!organizationId || !workspaceId) {
         throw new Error("Organization ID and Workspace ID are required for file upload");
       }
-      const authToken = await ensureValidToken(organizationId, workspaceId, orgSlug, authContext, consentClient);
+      const authToken = await ensureValidToken(organizationId, workspaceId, void 0, authContext, consentClient);
       if (!authToken) {
         throw new Error("Authentication token is required for file upload");
       }
@@ -27863,45 +27896,21 @@ function PrivacyCenterHomePage() {
 // src/RedactoPrivacyCenter/context/PrivacyCenterSettingsContext.tsx
 import { useEffect as useEffect39, useMemo as useMemo30, useState as useState39 } from "react";
 
-// src/RedactoPrivacyCenter/api/organizationLookup.ts
-var cache = /* @__PURE__ */ new Map();
-var isOrganisation = (value) => typeof value === "object" && value !== null && typeof value.uuid === "string";
-var fetchOrganisationBySlug = (slug, consentBaseUrl) => {
-  const url = `${userServiceBaseUrl(consentBaseUrl)}/organizations/exists?slug=${encodeURIComponent(slug)}`;
-  const cached = cache.get(url);
-  if (cached) {
-    return cached;
-  }
-  const request = apiFetch(url, { method: "GET" }).then((body) => {
-    if (isOrganisation(body)) {
-      return body;
-    }
-    cache.delete(url);
-    return null;
-  }).catch((error) => {
-    cache.delete(url);
-    console.warn("[RedactoPrivacyCenter] organisation lookup failed:", error);
-    return null;
-  });
-  cache.set(url, request);
-  return request;
-};
-
 // src/RedactoPrivacyCenter/settings/api.ts
-var cache2 = /* @__PURE__ */ new Map();
+var cache = /* @__PURE__ */ new Map();
 var freshEntry = (url) => {
-  const entry = cache2.get(url);
+  const entry = cache.get(url);
   if (!entry) {
     return null;
   }
   if (Date.now() >= entry.expiresAt) {
-    cache2.delete(url);
+    cache.delete(url);
     return null;
   }
   return entry;
 };
 var trimTrailingSlash = (url) => url.replace(/\/+$/, "");
-var privacyCenterSettingsUrl = (baseUrl, organisationUuid, language) => `${trimTrailingSlash(baseUrl)}/public/organisations/${encodeURIComponent(
+var privacyCenterSettingsUrl = (baseUrl, organisationUuid, language) => `${trimTrailingSlash(resolveEndpoints(baseUrl).baseUrl)}/public/organisations/${encodeURIComponent(
   organisationUuid
 )}/privacy-center-settings/?${SETTINGS_LANG_PARAM}=${encodeURIComponent(language)}`;
 var isSettingsResponse = (value) => typeof value === "object" && value !== null && "settings" in value && typeof value.settings === "object" && value.settings !== null;
@@ -27913,8 +27922,8 @@ var fetchPublicPrivacyCenterSettings = (baseUrl, organisationUuid, language) =>
   }
   const forget = () => {
     var _a;
-    if (((_a = cache2.get(url)) == null ? void 0 : _a.request) === request) {
-      cache2.delete(url);
+    if (((_a = cache.get(url)) == null ? void 0 : _a.request) === request) {
+      cache.delete(url);
     }
   };
   const request = apiFetch(url, {
@@ -27932,7 +27941,7 @@ var fetchPublicPrivacyCenterSettings = (baseUrl, organisationUuid, language) =>
     }
     return null;
   });
-  cache2.set(url, { request, expiresAt: Date.now() + SETTINGS_CACHE_TTL_MS });
+  cache.set(url, { request, expiresAt: Date.now() + SETTINGS_CACHE_TTL_MS });
   return request;
 };
 var hasCachedPrivacyCenterSettings = (baseUrl, organisationUuid, language) => freshEntry(privacyCenterSettingsUrl(baseUrl, organisationUuid, language)) !== null;
@@ -27949,15 +27958,15 @@ var readSession = (key) => {
 var resolveOrganisationIds = ({
   organisationUuid,
   workspaceUuid,
-  accessToken,
-  slug
+  accessToken
 }) => {
   var _a, _b, _c, _d;
   const claims = accessToken ? decodeJwtToken(accessToken) : null;
-  const storedSlug = readSession("pc_org_slug");
-  const sessionMatches = !slug || !storedSlug || storedSlug === slug;
+  const storedOrganisation = readSession("pc_org_id");
+  const organisation = (_b = (_a = clean(organisationUuid)) != null ? _a : clean(claims == null ? void 0 : claims.organisation_uuid)) != null ? _b : storedOrganisation;
+  const sessionMatches = organisation !== null && organisation === storedOrganisation;
   return {
-    organisationUuid: (_b = (_a = clean(organisationUuid)) != null ? _a : clean(claims == null ? void 0 : claims.organisation_uuid)) != null ? _b : sessionMatches ? readSession("pc_org_id") : null,
+    organisationUuid: organisation,
     workspaceUuid: (_d = (_c = clean(workspaceUuid)) != null ? _c : clean(claims == null ? void 0 : claims.workspace_uuid)) != null ? _d : sessionMatches ? readSession("pc_workspace_id") : null
   };
 };
@@ -28042,7 +28051,7 @@ var orderedToggles = (raw, keys, defaults) => {
 };
 var stringList = (raw, max) => Array.isArray(raw) ? raw.filter((item) => typeof item === "string").map((item) => item.trim()).filter(Boolean).slice(0, max) : [];
 var resolveBranding = (raw) => {
-  var _a;
+  var _a, _b;
   const base = DEFAULT_PRIVACY_CENTER_SETTINGS.branding;
   const font = raw.font_family;
   return {
@@ -28050,11 +28059,12 @@ var resolveBranding = (raw) => {
     display_name: nullableText(raw.display_name, base.display_name),
     logo_url: nullableUrl(raw.logo_url, base.logo_url),
     logo_height: clampedInt(raw.logo_height, LOGO_HEIGHT_MIN, LOGO_HEIGHT_MAX, base.logo_height),
+    logo_align: (_a = LOGO_ALIGNMENTS.find((value) => value === raw.logo_align)) != null ? _a : base.logo_align,
     inherit_colors: bool(raw.inherit_colors, base.inherit_colors),
     primary_color: hex(raw.primary_color, base.primary_color),
     accent_color: hex(raw.accent_color, base.accent_color),
     inherit_font: bool(raw.inherit_font, base.inherit_font),
-    font_family: font === null ? null : (_a = FONT_FAMILIES.find((family) => family === font)) != null ? _a : base.font_family,
+    font_family: font === null ? null : (_b = FONT_FAMILIES.find((family) => family === font)) != null ? _b : base.font_family,
     style: raw.style === void 0 ? base.style : resolveAppearance(raw.style) === "glass" ? "glass" : "classic",
     corner_radius: clampedInt(raw.corner_radius, CORNER_RADIUS_MIN, CORNER_RADIUS_MAX, base.corner_radius)
   };
@@ -28216,55 +28226,9 @@ var resolveBrandContact = (raw) => {
 // src/RedactoPrivacyCenter/context/PrivacyCenterSettingsContext.tsx
 import { jsx as jsx101 } from "react/jsx-runtime";
 var requestLanguageFor = (language) => LANGUAGE_CODES.includes(language) ? language : "en";
-var useResolvedOrganisation = (baseUrl, slug, known, canLookUp) => {
-  const needsLookup = canLookUp && Boolean(slug) && (!known.organisationUuid || !known.workspaceUuid);
-  const lookupKey = `${baseUrl}|${slug}`;
-  const [lookup, setLookup] = useState39(null);
-  useEffect39(() => {
-    if (!needsLookup) {
-      return void 0;
-    }
-    let cancelled = false;
-    void fetchOrganisationBySlug(slug, baseUrl).then((organisation) => {
-      var _a, _b, _c;
-      if (cancelled) {
-        return;
-      }
-      setLookup({
-        key: lookupKey,
-        ids: organisation ? {
-          organisationUuid: organisation.uuid,
-          workspaceUuid: (_c = (_b = (_a = organisation.workspaces) == null ? void 0 : _a[0]) == null ? void 0 : _b.uuid) != null ? _c : null
-        } : null
-      });
-    });
-    return () => {
-      cancelled = true;
-    };
-  }, [needsLookup, slug, baseUrl, lookupKey]);
-  return useMemo30(() => {
-    var _a, _b, _c, _d;
-    if (!needsLookup) {
-      return { ...known, status: "resolved" };
-    }
-    if ((lookup == null ? void 0 : lookup.key) !== lookupKey) {
-      return { ...known, status: "resolving" };
-    }
-    const found = lookup.ids;
-    const sameOrganisation = !known.organisationUuid || known.organisationUuid === (found == null ? void 0 : found.organisationUuid);
-    const organisationUuid = (_b = (_a = known.organisationUuid) != null ? _a : found == null ? void 0 : found.organisationUuid) != null ? _b : null;
-    const workspaceUuid = (_d = known.workspaceUuid) != null ? _d : sameOrganisation ? (_c = found == null ? void 0 : found.workspaceUuid) != null ? _c : null : null;
-    return {
-      organisationUuid,
-      workspaceUuid,
-      status: organisationUuid && workspaceUuid ? "resolved" : "failed"
-    };
-  }, [needsLookup, known, lookup, lookupKey]);
-};
 var PrivacyCenterSettingsProvider = ({
   children,
   baseUrl,
-  slug,
   accessToken,
   organisationUuid,
   workspaceUuid,
@@ -28272,11 +28236,13 @@ var PrivacyCenterSettingsProvider = ({
   builtInSignIn = false
 }) => {
   const { currentLanguage } = useCurrentLanguage();
-  const known = useMemo30(
-    () => resolveOrganisationIds({ organisationUuid, workspaceUuid, accessToken, slug }),
-    [organisationUuid, workspaceUuid, accessToken, slug]
-  );
-  const organisation = useResolvedOrganisation(baseUrl, slug, known, builtInSignIn);
+  const organisation = useMemo30(() => {
+    const known = resolveOrganisationIds({ organisationUuid, workspaceUuid, accessToken });
+    return {
+      ...known,
+      status: known.organisationUuid && known.workspaceUuid ? "resolved" : "failed"
+    };
+  }, [organisationUuid, workspaceUuid, accessToken]);
   const orgUuid = organisation.organisationUuid;
   const requestLanguage = requestLanguageFor(currentLanguage);
   const [remote, setRemote] = useState39(null);
@@ -28321,8 +28287,8 @@ var PrivacyCenterSettingsProvider = ({
   const isCustomised = isPublished || hasHostOverrides(overrides);
   useLanguagePolicy(settings, isCustomised);
   const value = useMemo30(
-    () => ({ settings, status, isCustomised, organisation, slug, builtInSignIn, brandContact }),
-    [settings, status, isCustomised, organisation, slug, builtInSignIn, brandContact]
+    () => ({ settings, status, isCustomised, organisation, builtInSignIn, brandContact }),
+    [settings, status, isCustomised, organisation, builtInSignIn, brandContact]
   );
   return /* @__PURE__ */ jsx101(PrivacyCenterSettingsContext.Provider, { value, children });
 };
@@ -31519,7 +31485,7 @@ function SettingsAppearance({ children }) {
 function RedactoPrivacyCenter({
   baseUrl,
   ledgerBaseUrl,
-  slug,
+  slug = "",
   accessToken,
   refreshToken,
   token,
@@ -31546,13 +31512,12 @@ function RedactoPrivacyCenter({
         PrivacyCenterSettingsProvider,
         {
           baseUrl,
-          slug,
           accessToken,
           organisationUuid,
           workspaceUuid,
           overrides: settings,
           builtInSignIn: builtInSignIn && !token,
-          children: /* @__PURE__ */ jsx103(PrivacyCenterRoot, { children: /* @__PURE__ */ jsx103(SettingsAppearance, { children: /* @__PURE__ */ jsx103(BrandingProvider, { slug, baseUrl, children: /* @__PURE__ */ jsx103(BaseUrlProvider, { baseUrl, ledgerBaseUrl, children: /* @__PURE__ */ jsx103(
+          children: /* @__PURE__ */ jsx103(PrivacyCenterRoot, { children: /* @__PURE__ */ jsx103(SettingsAppearance, { children: /* @__PURE__ */ jsx103(BrandingProvider, { baseUrl, children: /* @__PURE__ */ jsx103(BaseUrlProvider, { baseUrl, ledgerBaseUrl, children: /* @__PURE__ */ jsx103(
             AuthProvider,
             {
               accessToken,
@@ -31563,7 +31528,6 @@ function RedactoPrivacyCenter({
               sandboxMobile: mobile,
               organisationUuid,
               workspaceUuid,
-              slug,
               onError,
               children: /* @__PURE__ */ jsx103(NavigationProvider, { initialPage, children: /* @__PURE__ */ jsx103(PageChromeProvider, { children: /* @__PURE__ */ jsx103(PrivacyCenterLayout, { slug, onBack, children: /* @__PURE__ */ jsx103(PrivacyCenterHomePage, {}) }) }) })
             }