@redacto.io/consent-sdk-react 9.4.0 → 10.0.0-beta.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @redacto.io/consent-sdk-react
 
+## 10.0.0-beta.0
+
+### Major Changes
+
+- route consent writes & Privacy Center reads through the Go ledger (ledgerBaseUrl)
+
 ## 9.4.0
 
 ### Minor Changes

package/dist/index.d.mts

@@ -47,6 +47,7 @@ type Props$1 = Readonly<{
     accessToken: string;
     refreshToken: string;
     baseUrl?: string;
+    ledgerBaseUrl: string;
     settings?: Partial<Settings$1>;
     language?: string;
     blockUI?: boolean;
@@ -68,7 +69,7 @@ type Props$1 = Readonly<{
  * to view and manage their consent preferences. Supports both initial consent
  * collection and reconsent flows.
  */
-declare const RedactoNoticeConsent: ({ noticeId, accessToken, refreshToken, baseUrl, language, blockUI, onAccept, onDecline, onError, settings, applicationId, validateAgainst, digilockerMode, digilockerCallbackUrl, includeFullyConsentedData, reviewModeButtonText, }: Props$1) => react_jsx_runtime.JSX.Element;
+declare const RedactoNoticeConsent: ({ noticeId, accessToken, refreshToken, baseUrl, ledgerBaseUrl, language, blockUI, onAccept, onDecline, onError, settings, applicationId, validateAgainst, digilockerMode, digilockerCallbackUrl, includeFullyConsentedData, reviewModeButtonText, }: Props$1) => react_jsx_runtime.JSX.Element;
 
 type Settings = {
     button: {
@@ -102,6 +103,7 @@ type Props = Readonly<{
     accessToken?: string;
     refreshToken?: string;
     baseUrl?: string;
+    ledgerBaseUrl: string;
     settings?: Partial<Settings>;
     language?: string;
     onAccept?: () => void;
@@ -112,7 +114,7 @@ type Props = Readonly<{
 }>;
 
 declare const RedactoConsentInline: react.MemoExoticComponent<{
-    ({ org_uuid, workspace_uuid, notice_uuid, accessToken, baseUrl, language, onAccept, onError, onValidationChange, settings, applicationId, }: Props): react_jsx_runtime.JSX.Element | null;
+    ({ org_uuid, workspace_uuid, notice_uuid, accessToken, baseUrl, ledgerBaseUrl, language, onAccept, onError, onValidationChange, settings, applicationId, }: Props): react_jsx_runtime.JSX.Element | null;
     displayName: string;
 }>;
 

package/dist/index.d.ts

@@ -47,6 +47,7 @@ type Props$1 = Readonly<{
     accessToken: string;
     refreshToken: string;
     baseUrl?: string;
+    ledgerBaseUrl: string;
     settings?: Partial<Settings$1>;
     language?: string;
     blockUI?: boolean;
@@ -68,7 +69,7 @@ type Props$1 = Readonly<{
  * to view and manage their consent preferences. Supports both initial consent
  * collection and reconsent flows.
  */
-declare const RedactoNoticeConsent: ({ noticeId, accessToken, refreshToken, baseUrl, language, blockUI, onAccept, onDecline, onError, settings, applicationId, validateAgainst, digilockerMode, digilockerCallbackUrl, includeFullyConsentedData, reviewModeButtonText, }: Props$1) => react_jsx_runtime.JSX.Element;
+declare const RedactoNoticeConsent: ({ noticeId, accessToken, refreshToken, baseUrl, ledgerBaseUrl, language, blockUI, onAccept, onDecline, onError, settings, applicationId, validateAgainst, digilockerMode, digilockerCallbackUrl, includeFullyConsentedData, reviewModeButtonText, }: Props$1) => react_jsx_runtime.JSX.Element;
 
 type Settings = {
     button: {
@@ -102,6 +103,7 @@ type Props = Readonly<{
     accessToken?: string;
     refreshToken?: string;
     baseUrl?: string;
+    ledgerBaseUrl: string;
     settings?: Partial<Settings>;
     language?: string;
     onAccept?: () => void;
@@ -112,7 +114,7 @@ type Props = Readonly<{
 }>;
 
 declare const RedactoConsentInline: react.MemoExoticComponent<{
-    ({ org_uuid, workspace_uuid, notice_uuid, accessToken, baseUrl, language, onAccept, onError, onValidationChange, settings, applicationId, }: Props): react_jsx_runtime.JSX.Element | null;
+    ({ org_uuid, workspace_uuid, notice_uuid, accessToken, baseUrl, ledgerBaseUrl, language, onAccept, onError, onValidationChange, settings, applicationId, }: Props): react_jsx_runtime.JSX.Element | null;
     displayName: string;
 }>;
 

package/dist/index.js

@@ -181,7 +181,7 @@ var fetchConsentContent = async ({
 };
 var submitConsentEvent = async ({
   accessToken,
-  baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   purposes,
   declined,
@@ -202,7 +202,10 @@ var submitConsentEvent = async ({
   if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
     throw new Error("Invalid token: missing organization or workspace UUID");
   }
-  const apiBaseUrl = baseUrl || BASE_URL;
+  if (!ledgerBaseUrl) {
+    throw new Error("ledgerBaseUrl is required to submit consent");
+  }
+  const apiBaseUrl = ledgerBaseUrl;
   const validatedPurposes = purposes.map((purpose) => {
     if (!purpose.uuid) {
       throw new Error(`Invalid purpose data: missing uuid`);
@@ -248,6 +251,88 @@ var submitConsentEvent = async ({
   }
   apiCache.clear();
 };
+var fetchNoticeConsentStatus = async ({
+  accessToken,
+  ledgerBaseUrl,
+  noticeUuid,
+  signal
+}) => {
+  if (!accessToken || !ledgerBaseUrl || !noticeUuid) {
+    return null;
+  }
+  const decodedToken = decodeTokenSafely(accessToken);
+  if (!decodedToken) {
+    return null;
+  }
+  const { organisation_uuid: ORGANISATION_UUID, workspace_uuid: WORKSPACE_UUID } = decodedToken;
+  if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
+    return null;
+  }
+  try {
+    const response = await fetch(
+      `${ledgerBaseUrl}/public/organisations/${ORGANISATION_UUID}/workspaces/${WORKSPACE_UUID}/notices/${noticeUuid}/check-consent`,
+      {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${accessToken}`,
+          "Content-Type": "application/json"
+        },
+        body: "{}",
+        signal
+      }
+    );
+    if (!response.ok) {
+      return null;
+    }
+    const data = await response.json();
+    const body = data && typeof data === "object" && "detail" in data && data.detail ? data.detail : data;
+    if (!body || !Array.isArray(body.purposes)) {
+      return null;
+    }
+    return body;
+  } catch {
+    return null;
+  }
+};
+var buildLedgerConsentOverlay = (status, configPurposes) => {
+  var _a, _b;
+  const byUuid = new Map(status.purposes.map((p) => [p.uuid, p]));
+  const hasHistory = status.purposes.some(
+    (p) => (p.status || "INACTIVE") !== "INACTIVE"
+  );
+  if (!hasHistory) {
+    return null;
+  }
+  const purpose_selections = {};
+  for (const cp of configPurposes) {
+    const lp = byUuid.get(cp.uuid);
+    const purposeStatus = (lp == null ? void 0 : lp.status) || "INACTIVE";
+    const selectedByUuid = new Map(
+      ((lp == null ? void 0 : lp.data_elements) || []).map((de) => [de.uuid, de.selected])
+    );
+    const data_elements = {};
+    for (const de of cp.data_elements) {
+      data_elements[de.uuid] = {
+        selected: (_a = selectedByUuid.get(de.uuid)) != null ? _a : false,
+        enabled: de.enabled,
+        required: de.required
+      };
+    }
+    purpose_selections[cp.uuid] = {
+      selected: (_b = lp == null ? void 0 : lp.selected) != null ? _b : false,
+      status: purposeStatus,
+      needs_reconsent: purposeStatus !== "ACTIVE",
+      data_elements
+    };
+  }
+  const reconsent_required = configPurposes.some(
+    (cp) => {
+      var _a2;
+      return (((_a2 = purpose_selections[cp.uuid]) == null ? void 0 : _a2.status) || "INACTIVE") !== "ACTIVE";
+    }
+  );
+  return { reconsent_required, purpose_selections };
+};
 var fetchTTSAudioUrls = async ({
   accessToken,
   baseUrl,
@@ -2294,6 +2379,7 @@ var RedactoNoticeConsent = ({
   accessToken,
   refreshToken,
   baseUrl,
+  ledgerBaseUrl,
   language = "en",
   blockUI = true,
   onAccept,
@@ -2648,7 +2734,7 @@ var RedactoNoticeConsent = ({
     return content.dpo_info[key] || defaultText;
   };
   const fetchNotice = async () => {
-    var _a2;
+    var _a2, _b2, _c2;
     if (isRequestInProgressRef.current) {
       return;
     }
@@ -2689,8 +2775,24 @@ var RedactoNoticeConsent = ({
         {}
       );
       setCollapsedPurposes(initialCollapsedState);
-      const isReconsentRequired = consentContentData.detail.reconsent_required;
-      const purposeSelections = consentContentData.detail.purpose_selections;
+      let isReconsentRequired = consentContentData.detail.reconsent_required;
+      let purposeSelections = consentContentData.detail.purpose_selections;
+      if (ledgerBaseUrl && !applicationId) {
+        const ledgerStatus = await fetchNoticeConsentStatus({
+          accessToken,
+          ledgerBaseUrl,
+          noticeUuid: noticeId,
+          signal: (_b2 = abortControllerRef.current) == null ? void 0 : _b2.signal
+        });
+        if (ledgerStatus) {
+          const overlay = buildLedgerConsentOverlay(
+            ledgerStatus,
+            activeConfig.purposes
+          );
+          isReconsentRequired = (_c2 = overlay == null ? void 0 : overlay.reconsent_required) != null ? _c2 : false;
+          purposeSelections = overlay == null ? void 0 : overlay.purpose_selections;
+        }
+      }
       const newCategorizedPurposes = isReconsentRequired ? {
         alreadyConsented: activeConfig.purposes.filter(
           (purpose) => {
@@ -2721,9 +2823,9 @@ var RedactoNoticeConsent = ({
       const initialDataElementState = activeConfig.purposes.reduce(
         (acc, purpose) => {
           purpose.data_elements.forEach((element) => {
-            var _a3, _b2;
+            var _a3, _b3;
             const combinedId = `${purpose.uuid}-${element.uuid}`;
-            if ((_b2 = (_a3 = purposeSelections == null ? void 0 : purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b2[element.uuid]) {
+            if ((_b3 = (_a3 = purposeSelections == null ? void 0 : purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b3[element.uuid]) {
               acc[combinedId] = purposeSelections[purpose.uuid].data_elements[element.uuid].selected;
             } else {
               acc[combinedId] = false;
@@ -2739,9 +2841,9 @@ var RedactoNoticeConsent = ({
         const initialSelections = {};
         newCategorizedPurposes.alreadyConsented.forEach((purpose) => {
           purpose.data_elements.forEach((element) => {
-            var _a3, _b2;
+            var _a3, _b3;
             const combinedId = `${purpose.uuid}-${element.uuid}`;
-            if ((_b2 = (_a3 = purposeSelections == null ? void 0 : purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b2[element.uuid]) {
+            if ((_b3 = (_a3 = purposeSelections == null ? void 0 : purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b3[element.uuid]) {
               initialSelections[combinedId] = purposeSelections[purpose.uuid].data_elements[element.uuid].selected;
             } else {
               initialSelections[combinedId] = false;
@@ -2762,9 +2864,9 @@ var RedactoNoticeConsent = ({
           activeConfig.purposes.forEach(
             (purpose) => {
               purpose.data_elements.forEach((element) => {
-                var _a3, _b2;
+                var _a3, _b3;
                 const combinedId = `${purpose.uuid}-${element.uuid}`;
-                if ((_b2 = (_a3 = purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b2[element.uuid]) {
+                if ((_b3 = (_a3 = purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b3[element.uuid]) {
                   initialSelections[combinedId] = purposeSelections[purpose.uuid].data_elements[element.uuid].selected;
                 } else {
                   initialSelections[combinedId] = false;
@@ -2895,7 +2997,7 @@ var RedactoNoticeConsent = ({
       if (content) {
         await submitConsentEvent({
           accessToken,
-          baseUrl,
+          ledgerBaseUrl,
           noticeUuid: content.notice_uuid,
           purposes: content.purposes.map((purpose) => {
             const isAlreadyConsented = (categorizedPurposes == null ? void 0 : categorizedPurposes.alreadyConsented.some(
@@ -4676,13 +4778,16 @@ var submitConsentEvent2 = async ({
   org_uuid,
   workspace_uuid,
   accessToken,
-  baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   purposes,
   declined,
   meta_data
 }) => {
-  const apiBaseUrl = baseUrl || BASE_URL2;
+  if (!ledgerBaseUrl) {
+    throw new Error("ledgerBaseUrl is required to submit consent");
+  }
+  const apiBaseUrl = ledgerBaseUrl;
   const payload = {
     notice_uuid: noticeUuid,
     purposes: purposes.map((purpose) => {
@@ -5133,6 +5238,7 @@ var RedactoConsentInlineComponent = ({
   notice_uuid,
   accessToken,
   baseUrl,
+  ledgerBaseUrl,
   language = "en",
   onAccept,
   onError,
@@ -5366,7 +5472,7 @@ var RedactoConsentInlineComponent = ({
           org_uuid,
           workspace_uuid,
           accessToken: tokenToUse,
-          baseUrl,
+          ledgerBaseUrl,
           noticeUuid: content.notice_uuid,
           purposes: content.purposes.map((purpose) => {
             const hasSelectedRequiredElement = purpose.data_elements.some(
@@ -5405,6 +5511,7 @@ var RedactoConsentInlineComponent = ({
       org_uuid,
       workspace_uuid,
       baseUrl,
+      ledgerBaseUrl,
       selectedDataElements,
       selectedPurposes,
       applicationId,

package/dist/index.mjs

@@ -155,7 +155,7 @@ var fetchConsentContent = async ({
 };
 var submitConsentEvent = async ({
   accessToken,
-  baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   purposes,
   declined,
@@ -176,7 +176,10 @@ var submitConsentEvent = async ({
   if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
     throw new Error("Invalid token: missing organization or workspace UUID");
   }
-  const apiBaseUrl = baseUrl || BASE_URL;
+  if (!ledgerBaseUrl) {
+    throw new Error("ledgerBaseUrl is required to submit consent");
+  }
+  const apiBaseUrl = ledgerBaseUrl;
   const validatedPurposes = purposes.map((purpose) => {
     if (!purpose.uuid) {
       throw new Error(`Invalid purpose data: missing uuid`);
@@ -222,6 +225,88 @@ var submitConsentEvent = async ({
   }
   apiCache.clear();
 };
+var fetchNoticeConsentStatus = async ({
+  accessToken,
+  ledgerBaseUrl,
+  noticeUuid,
+  signal
+}) => {
+  if (!accessToken || !ledgerBaseUrl || !noticeUuid) {
+    return null;
+  }
+  const decodedToken = decodeTokenSafely(accessToken);
+  if (!decodedToken) {
+    return null;
+  }
+  const { organisation_uuid: ORGANISATION_UUID, workspace_uuid: WORKSPACE_UUID } = decodedToken;
+  if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
+    return null;
+  }
+  try {
+    const response = await fetch(
+      `${ledgerBaseUrl}/public/organisations/${ORGANISATION_UUID}/workspaces/${WORKSPACE_UUID}/notices/${noticeUuid}/check-consent`,
+      {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${accessToken}`,
+          "Content-Type": "application/json"
+        },
+        body: "{}",
+        signal
+      }
+    );
+    if (!response.ok) {
+      return null;
+    }
+    const data = await response.json();
+    const body = data && typeof data === "object" && "detail" in data && data.detail ? data.detail : data;
+    if (!body || !Array.isArray(body.purposes)) {
+      return null;
+    }
+    return body;
+  } catch {
+    return null;
+  }
+};
+var buildLedgerConsentOverlay = (status, configPurposes) => {
+  var _a, _b;
+  const byUuid = new Map(status.purposes.map((p) => [p.uuid, p]));
+  const hasHistory = status.purposes.some(
+    (p) => (p.status || "INACTIVE") !== "INACTIVE"
+  );
+  if (!hasHistory) {
+    return null;
+  }
+  const purpose_selections = {};
+  for (const cp of configPurposes) {
+    const lp = byUuid.get(cp.uuid);
+    const purposeStatus = (lp == null ? void 0 : lp.status) || "INACTIVE";
+    const selectedByUuid = new Map(
+      ((lp == null ? void 0 : lp.data_elements) || []).map((de) => [de.uuid, de.selected])
+    );
+    const data_elements = {};
+    for (const de of cp.data_elements) {
+      data_elements[de.uuid] = {
+        selected: (_a = selectedByUuid.get(de.uuid)) != null ? _a : false,
+        enabled: de.enabled,
+        required: de.required
+      };
+    }
+    purpose_selections[cp.uuid] = {
+      selected: (_b = lp == null ? void 0 : lp.selected) != null ? _b : false,
+      status: purposeStatus,
+      needs_reconsent: purposeStatus !== "ACTIVE",
+      data_elements
+    };
+  }
+  const reconsent_required = configPurposes.some(
+    (cp) => {
+      var _a2;
+      return (((_a2 = purpose_selections[cp.uuid]) == null ? void 0 : _a2.status) || "INACTIVE") !== "ACTIVE";
+    }
+  );
+  return { reconsent_required, purpose_selections };
+};
 var fetchTTSAudioUrls = async ({
   accessToken,
   baseUrl,
@@ -2241,6 +2326,7 @@ var RedactoNoticeConsent = ({
   accessToken,
   refreshToken,
   baseUrl,
+  ledgerBaseUrl,
   language = "en",
   blockUI = true,
   onAccept,
@@ -2595,7 +2681,7 @@ var RedactoNoticeConsent = ({
     return content.dpo_info[key] || defaultText;
   };
   const fetchNotice = async () => {
-    var _a2;
+    var _a2, _b2, _c2;
     if (isRequestInProgressRef.current) {
       return;
     }
@@ -2636,8 +2722,24 @@ var RedactoNoticeConsent = ({
         {}
       );
       setCollapsedPurposes(initialCollapsedState);
-      const isReconsentRequired = consentContentData.detail.reconsent_required;
-      const purposeSelections = consentContentData.detail.purpose_selections;
+      let isReconsentRequired = consentContentData.detail.reconsent_required;
+      let purposeSelections = consentContentData.detail.purpose_selections;
+      if (ledgerBaseUrl && !applicationId) {
+        const ledgerStatus = await fetchNoticeConsentStatus({
+          accessToken,
+          ledgerBaseUrl,
+          noticeUuid: noticeId,
+          signal: (_b2 = abortControllerRef.current) == null ? void 0 : _b2.signal
+        });
+        if (ledgerStatus) {
+          const overlay = buildLedgerConsentOverlay(
+            ledgerStatus,
+            activeConfig.purposes
+          );
+          isReconsentRequired = (_c2 = overlay == null ? void 0 : overlay.reconsent_required) != null ? _c2 : false;
+          purposeSelections = overlay == null ? void 0 : overlay.purpose_selections;
+        }
+      }
       const newCategorizedPurposes = isReconsentRequired ? {
         alreadyConsented: activeConfig.purposes.filter(
           (purpose) => {
@@ -2668,9 +2770,9 @@ var RedactoNoticeConsent = ({
       const initialDataElementState = activeConfig.purposes.reduce(
         (acc, purpose) => {
           purpose.data_elements.forEach((element) => {
-            var _a3, _b2;
+            var _a3, _b3;
             const combinedId = `${purpose.uuid}-${element.uuid}`;
-            if ((_b2 = (_a3 = purposeSelections == null ? void 0 : purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b2[element.uuid]) {
+            if ((_b3 = (_a3 = purposeSelections == null ? void 0 : purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b3[element.uuid]) {
               acc[combinedId] = purposeSelections[purpose.uuid].data_elements[element.uuid].selected;
             } else {
               acc[combinedId] = false;
@@ -2686,9 +2788,9 @@ var RedactoNoticeConsent = ({
         const initialSelections = {};
         newCategorizedPurposes.alreadyConsented.forEach((purpose) => {
           purpose.data_elements.forEach((element) => {
-            var _a3, _b2;
+            var _a3, _b3;
             const combinedId = `${purpose.uuid}-${element.uuid}`;
-            if ((_b2 = (_a3 = purposeSelections == null ? void 0 : purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b2[element.uuid]) {
+            if ((_b3 = (_a3 = purposeSelections == null ? void 0 : purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b3[element.uuid]) {
               initialSelections[combinedId] = purposeSelections[purpose.uuid].data_elements[element.uuid].selected;
             } else {
               initialSelections[combinedId] = false;
@@ -2709,9 +2811,9 @@ var RedactoNoticeConsent = ({
           activeConfig.purposes.forEach(
             (purpose) => {
               purpose.data_elements.forEach((element) => {
-                var _a3, _b2;
+                var _a3, _b3;
                 const combinedId = `${purpose.uuid}-${element.uuid}`;
-                if ((_b2 = (_a3 = purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b2[element.uuid]) {
+                if ((_b3 = (_a3 = purposeSelections[purpose.uuid]) == null ? void 0 : _a3.data_elements) == null ? void 0 : _b3[element.uuid]) {
                   initialSelections[combinedId] = purposeSelections[purpose.uuid].data_elements[element.uuid].selected;
                 } else {
                   initialSelections[combinedId] = false;
@@ -2842,7 +2944,7 @@ var RedactoNoticeConsent = ({
       if (content) {
         await submitConsentEvent({
           accessToken,
-          baseUrl,
+          ledgerBaseUrl,
           noticeUuid: content.notice_uuid,
           purposes: content.purposes.map((purpose) => {
             const isAlreadyConsented = (categorizedPurposes == null ? void 0 : categorizedPurposes.alreadyConsented.some(
@@ -4623,13 +4725,16 @@ var submitConsentEvent2 = async ({
   org_uuid,
   workspace_uuid,
   accessToken,
-  baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   purposes,
   declined,
   meta_data
 }) => {
-  const apiBaseUrl = baseUrl || BASE_URL2;
+  if (!ledgerBaseUrl) {
+    throw new Error("ledgerBaseUrl is required to submit consent");
+  }
+  const apiBaseUrl = ledgerBaseUrl;
   const payload = {
     notice_uuid: noticeUuid,
     purposes: purposes.map((purpose) => {
@@ -5080,6 +5185,7 @@ var RedactoConsentInlineComponent = ({
   notice_uuid,
   accessToken,
   baseUrl,
+  ledgerBaseUrl,
   language = "en",
   onAccept,
   onError,
@@ -5313,7 +5419,7 @@ var RedactoConsentInlineComponent = ({
           org_uuid,
           workspace_uuid,
           accessToken: tokenToUse,
-          baseUrl,
+          ledgerBaseUrl,
           noticeUuid: content.notice_uuid,
           purposes: content.purposes.map((purpose) => {
             const hasSelectedRequiredElement = purpose.data_elements.some(
@@ -5352,6 +5458,7 @@ var RedactoConsentInlineComponent = ({
       org_uuid,
       workspace_uuid,
       baseUrl,
+      ledgerBaseUrl,
       selectedDataElements,
       selectedPurposes,
       applicationId,

package/dist/privacy-center.d.mts

@@ -31,9 +31,11 @@ type BaseRequest = {
 /**
  * Consent service client factory.
  * Creates a client instance with a specific base URL.
- * @param baseUrl - Consent server base URL
+ * @param baseUrl - Consent server base URL (Python service, e.g. http://host/consent)
+ * @param ledgerBaseUrl - Go ledger base URL (e.g. http://host:8090/consent-ledger).
+ *   Used for user-consents reads which are served from the ledger's `/public/...` paths.
  */
-declare function createConsentClient(baseUrl: string): {
+declare function createConsentClient(baseUrl: string, ledgerBaseUrl: string): {
     /**
      * Get form data (privacy center)
      */
@@ -92,9 +94,21 @@ declare function createConsentClient(baseUrl: string): {
         nominator_uuid?: string;
     }, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<unknown>;
     /**
-     * Manage consent (privacy center) - revoke, regrant, or renew
+     * Manage consent (privacy center) - revoke, regrant, or renew.
+     *
+     * The Go ledger has no manage-consent route, so this is expressed as a
+     * `partial` submit-consent on the ledger — mirroring the Python dual-write
+     * relay (`build_consent_management_payload`): the affected purpose is
+     * re-submitted with `selected: false` to revoke or `selected: true` to
+     * regrant/renew, and `partial: true` so the rest of the notice's purposes
+     * are left untouched. The principal is resolved from the JWT, so no
+     * `contact`/identifiers are sent in the body, and `consent_event_uuid` is
+     * omitted so the ledger mints a fresh event.
      */
-    manageConsent(baseRequest: BaseRequest, purposeId: string, contact: string, status: "revoke" | "regrant" | "renew", authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">, nominatorContact?: string, dataElementUuids?: string[], productUuid?: string): Promise<unknown>;
+    manageConsent(baseRequest: BaseRequest, purposeId: string, contact: string, status: "revoke" | "regrant" | "renew", authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">, nominatorContact?: string, dataElementUuids?: string[], productUuid?: string, noticeUuid?: string, dataElements?: Array<{
+        uuid: string;
+        selected: boolean;
+    }>): Promise<unknown>;
     /**
      * Get activities (privacy center)
      */
@@ -358,6 +372,7 @@ type PurposeItem = {
     method: string;
     data_elements: ConsentDataElement[];
     link_reason: string | null;
+    notice_uuid: string | null;
 };
 type ConsentGroup = {
     product_uuid: string;
@@ -609,6 +624,7 @@ declare const useInternalNavigation: () => NavigationContextType;
 
 interface RedactoPrivacyCenterProps {
     baseUrl: string;
+    ledgerBaseUrl: string;
     slug: string;
     accessToken: string;
     refreshToken: string;
@@ -616,7 +632,7 @@ interface RedactoPrivacyCenterProps {
     initialPage?: InternalPage;
     onBack?: 'back' | 'signout';
 }
-declare function RedactoPrivacyCenter({ baseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react_jsx_runtime.JSX.Element;
+declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react_jsx_runtime.JSX.Element;
 
 interface PrivacyCenterLayoutProps {
     children: ReactNode;
@@ -646,15 +662,18 @@ type AuthContextValue = Readonly<{
 }>;
 type BaseUrlContextValue = Readonly<{
     baseUrl: string;
+    ledgerBaseUrl: string;
     consentClient: ReturnType<typeof createConsentClient>;
 }>;
 
-declare const BaseUrlProvider: ({ children, baseUrl, }: {
+declare const BaseUrlProvider: ({ children, baseUrl, ledgerBaseUrl, }: {
     children: ReactNode;
     baseUrl: string;
+    ledgerBaseUrl: string;
 }) => react_jsx_runtime.JSX.Element;
 declare const useBaseUrl: () => Readonly<{
     baseUrl: string;
+    ledgerBaseUrl: string;
     consentClient: ReturnType<typeof createConsentClient>;
 }>;
 
@@ -801,7 +820,7 @@ type FetchGroupPurposesParams = {
     consentClient?: BaseUrlContextValue['consentClient'];
 };
 declare const fetchGroupPurposes: (params: FetchGroupPurposesParams) => Promise<GroupPurposesOut | null>;
-declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, dataElementUuids, productUuid, }: {
+declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements, }: {
     organizationId: string;
     workspaceId: string;
     purposeId: string;
@@ -812,6 +831,11 @@ declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact,
     nominatorContact?: string;
     dataElementUuids?: string[];
     productUuid?: string;
+    noticeUuid?: string;
+    dataElements?: Array<{
+        uuid: string;
+        selected: boolean;
+    }>;
 }) => Promise<boolean | null>;
 declare const fetchActivities: (organizationId: string, workspaceId: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<ActivityDetail | null>;
 declare const fetchCaseHistory: (organizationId: string, workspaceId: string, contact: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<CaseHistoryDetail | null>;