@redacto.io/consent-sdk-react 9.5.0-beta.0 → 10.0.0-beta.0

package/dist/privacy-center.d.ts

@@ -31,9 +31,11 @@ type BaseRequest = {
 /**
  * Consent service client factory.
  * Creates a client instance with a specific base URL.
- * @param baseUrl - Consent server base URL
+ * @param baseUrl - Consent server base URL (Python service, e.g. http://host/consent)
+ * @param ledgerBaseUrl - Go ledger base URL (e.g. http://host:8090/consent-ledger).
+ *   Used for user-consents reads which are served from the ledger's `/public/...` paths.
  */
-declare function createConsentClient(baseUrl: string): {
+declare function createConsentClient(baseUrl: string, ledgerBaseUrl: string): {
     /**
      * Get form data (privacy center)
      */
@@ -92,9 +94,21 @@ declare function createConsentClient(baseUrl: string): {
         nominator_uuid?: string;
     }, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<unknown>;
     /**
-     * Manage consent (privacy center) - revoke, regrant, or renew
+     * Manage consent (privacy center) - revoke, regrant, or renew.
+     *
+     * The Go ledger has no manage-consent route, so this is expressed as a
+     * `partial` submit-consent on the ledger — mirroring the Python dual-write
+     * relay (`build_consent_management_payload`): the affected purpose is
+     * re-submitted with `selected: false` to revoke or `selected: true` to
+     * regrant/renew, and `partial: true` so the rest of the notice's purposes
+     * are left untouched. The principal is resolved from the JWT, so no
+     * `contact`/identifiers are sent in the body, and `consent_event_uuid` is
+     * omitted so the ledger mints a fresh event.
      */
-    manageConsent(baseRequest: BaseRequest, purposeId: string, contact: string, status: "revoke" | "regrant" | "renew", authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">, nominatorContact?: string, dataElementUuids?: string[], productUuid?: string): Promise<unknown>;
+    manageConsent(baseRequest: BaseRequest, purposeId: string, contact: string, status: "revoke" | "regrant" | "renew", authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">, nominatorContact?: string, dataElementUuids?: string[], productUuid?: string, noticeUuid?: string, dataElements?: Array<{
+        uuid: string;
+        selected: boolean;
+    }>): Promise<unknown>;
     /**
      * Get activities (privacy center)
      */
@@ -358,6 +372,7 @@ type PurposeItem = {
     method: string;
     data_elements: ConsentDataElement[];
     link_reason: string | null;
+    notice_uuid: string | null;
 };
 type ConsentGroup = {
     product_uuid: string;
@@ -609,6 +624,7 @@ declare const useInternalNavigation: () => NavigationContextType;
 
 interface RedactoPrivacyCenterProps {
     baseUrl: string;
+    ledgerBaseUrl: string;
     slug: string;
     accessToken: string;
     refreshToken: string;
@@ -616,7 +632,7 @@ interface RedactoPrivacyCenterProps {
     initialPage?: InternalPage;
     onBack?: 'back' | 'signout';
 }
-declare function RedactoPrivacyCenter({ baseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react_jsx_runtime.JSX.Element;
+declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react_jsx_runtime.JSX.Element;
 
 interface PrivacyCenterLayoutProps {
     children: ReactNode;
@@ -646,15 +662,18 @@ type AuthContextValue = Readonly<{
 }>;
 type BaseUrlContextValue = Readonly<{
     baseUrl: string;
+    ledgerBaseUrl: string;
     consentClient: ReturnType<typeof createConsentClient>;
 }>;
 
-declare const BaseUrlProvider: ({ children, baseUrl, }: {
+declare const BaseUrlProvider: ({ children, baseUrl, ledgerBaseUrl, }: {
     children: ReactNode;
     baseUrl: string;
+    ledgerBaseUrl: string;
 }) => react_jsx_runtime.JSX.Element;
 declare const useBaseUrl: () => Readonly<{
     baseUrl: string;
+    ledgerBaseUrl: string;
     consentClient: ReturnType<typeof createConsentClient>;
 }>;
 
@@ -801,7 +820,7 @@ type FetchGroupPurposesParams = {
     consentClient?: BaseUrlContextValue['consentClient'];
 };
 declare const fetchGroupPurposes: (params: FetchGroupPurposesParams) => Promise<GroupPurposesOut | null>;
-declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, dataElementUuids, productUuid, }: {
+declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements, }: {
     organizationId: string;
     workspaceId: string;
     purposeId: string;
@@ -812,6 +831,11 @@ declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact,
     nominatorContact?: string;
     dataElementUuids?: string[];
     productUuid?: string;
+    noticeUuid?: string;
+    dataElements?: Array<{
+        uuid: string;
+        selected: boolean;
+    }>;
 }) => Promise<boolean | null>;
 declare const fetchActivities: (organizationId: string, workspaceId: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<ActivityDetail | null>;
 declare const fetchCaseHistory: (organizationId: string, workspaceId: string, contact: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<CaseHistoryDetail | null>;

package/dist/privacy-center.js

@@ -8642,13 +8642,12 @@ async function fetchGroupPurposesServer(params) {
   }
 }
 async function manageConsentServer(params) {
-  var _a;
   try {
     if (!params.consentClient) {
       throw new Error("Consent client is required");
     }
     const baseRequest = buildBaseRequest(params.organizationId, params.workspaceId, params.authToken);
-    const result = await params.consentClient.manageConsent(
+    await params.consentClient.manageConsent(
       baseRequest,
       params.purposeId,
       params.contact,
@@ -8657,9 +8656,11 @@ async function manageConsentServer(params) {
       void 0,
       params.nominatorContact,
       params.dataElementUuids,
-      params.productUuid
+      params.productUuid,
+      params.noticeUuid,
+      params.dataElements
     );
-    return (_a = result == null ? void 0 : result.success) != null ? _a : null;
+    return true;
   } catch (error) {
     const errorMsg = (error == null ? void 0 : error.message) || "";
     if (errorMsg.includes("nominator_not_found")) {
@@ -9096,6 +9097,7 @@ var MIN_REFRESH_BACKOFF_MS = 3e4;
 var MAX_REFRESH_BACKOFF_MS = 3e5;
 var REFRESH_TOKEN_STORAGE_KEY = "redacto_pc_refresh_token";
 var LEGACY_REFRESH_TOKEN_COOKIE = "refresh_token";
+var FORM_PICKER_GROUP_LIMIT = 100;
 var POLL_INTERVAL = 3e4;
 var NOTIFICATION_PAGE_SIZE = 10;
 var NOTIFICATION_DROPDOWN_LIMIT = 5;
@@ -9759,7 +9761,9 @@ var manageConsent = async ({
   consentClient,
   nominatorContact,
   dataElementUuids,
-  productUuid
+  productUuid,
+  noticeUuid,
+  dataElements
 }) => {
   try {
     const accessToken = await ensureValidToken(organizationId, workspaceId, void 0, authContext, consentClient);
@@ -9776,7 +9780,9 @@ var manageConsent = async ({
       consentClient,
       nominatorContact,
       dataElementUuids,
-      productUuid
+      productUuid,
+      noticeUuid,
+      dataElements
     });
     return result;
   } catch (error) {
@@ -9796,7 +9802,9 @@ var manageConsent = async ({
         consentClient,
         nominatorContact,
         dataElementUuids,
-        productUuid
+        productUuid,
+        noticeUuid,
+        dataElements
       });
     }
     console.error(`Error ${action} consent:`, error);
@@ -10105,7 +10113,11 @@ var useAuth = () => {
 var import_react4 = require("react");
 
 // src/RedactoPrivacyCenter/api/client.ts
-function createConsentClient(baseUrl) {
+function createConsentClient(baseUrl, ledgerBaseUrl) {
+  if (!ledgerBaseUrl) {
+    throw new Error("ledgerBaseUrl is required to create the consent client");
+  }
+  const ledgerBase = ledgerBaseUrl.replace(/\/$/, "");
   async function privacyCenterApiFetch(url, options) {
     const { authToken, getAuthToken, headers = {}, ...fetchOptions } = options;
     const requestHeaders = new Headers();
@@ -10198,6 +10210,9 @@ function createConsentClient(baseUrl) {
   function privacyCenterUrl(baseRequest, path) {
     return `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${path}`;
   }
+  function ledgerUrl(baseRequest, path) {
+    return `${ledgerBase}/public/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}${path}`;
+  }
   function caseUrl(baseRequest, caseUuid, path = "") {
     return privacyCenterUrl(baseRequest, `/cases/${caseUuid}${path}`);
   }
@@ -10331,7 +10346,8 @@ function createConsentClient(baseUrl) {
       if (params.product_uuid) queryParams.append("product_uuid", params.product_uuid);
       if (params.language) queryParams.append("language", params.language);
       const queryString = queryParams.toString();
-      const url = privacyCenterUrl(baseRequest, `/user-consents${queryString ? `?${queryString}` : ""}`);
+      const suffix = `/user-consents${queryString ? `?${queryString}` : ""}`;
+      const url = ledgerUrl(baseRequest, suffix);
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10352,10 +10368,8 @@ function createConsentClient(baseUrl) {
       if (params.language) queryParams.append("language", params.language);
       if (params.nominator_uuid) queryParams.append("nominator_uuid", params.nominator_uuid);
       const queryString = queryParams.toString();
-      const url = privacyCenterUrl(
-        baseRequest,
-        `/user-consents/${productUuid}/purposes${queryString ? `?${queryString}` : ""}`
-      );
+      const suffix = `/user-consents/${productUuid}/purposes${queryString ? `?${queryString}` : ""}`;
+      const url = ledgerUrl(baseRequest, suffix);
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10364,20 +10378,48 @@ function createConsentClient(baseUrl) {
       });
     },
     /**
-     * Manage consent (privacy center) - revoke, regrant, or renew
+     * Manage consent (privacy center) - revoke, regrant, or renew.
+     *
+     * The Go ledger has no manage-consent route, so this is expressed as a
+     * `partial` submit-consent on the ledger — mirroring the Python dual-write
+     * relay (`build_consent_management_payload`): the affected purpose is
+     * re-submitted with `selected: false` to revoke or `selected: true` to
+     * regrant/renew, and `partial: true` so the rest of the notice's purposes
+     * are left untouched. The principal is resolved from the JWT, so no
+     * `contact`/identifiers are sent in the body, and `consent_event_uuid` is
+     * omitted so the ledger mints a fresh event.
      */
-    async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids, productUuid) {
-      const url = privacyCenterUrl(baseRequest, `/manage-consent?status=${status}`);
-      const body = { purpose_uuid: purposeId, contact };
-      if (nominatorContact) {
-        body.nominator_contact = nominatorContact;
-      }
-      if (Array.isArray(dataElementUuids) && dataElementUuids.length > 0) {
-        body.data_element_uuids = dataElementUuids;
-      }
-      if (productUuid) {
-        body.product_uuid = productUuid;
-      }
+    async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements) {
+      if (!noticeUuid) {
+        throw new Error("notice_uuid is required to manage consent via the ledger");
+      }
+      const purposeSelected = status !== "revoke";
+      const elements = (dataElements != null ? dataElements : []).map((de) => {
+        let selected;
+        if (status === "revoke") {
+          selected = false;
+        } else if (status === "regrant") {
+          selected = Array.isArray(dataElementUuids) ? dataElementUuids.includes(de.uuid) : de.selected;
+        } else {
+          selected = de.selected;
+        }
+        return { uuid: de.uuid, selected };
+      });
+      const body = {
+        notice_uuid: noticeUuid,
+        partial: true,
+        declined: false,
+        select_all_mandatory: false,
+        self_declared_adult: false,
+        purposes: [
+          {
+            purpose_uuid: purposeId,
+            selected: purposeSelected,
+            data_elements: elements
+          }
+        ]
+      };
+      const url = ledgerUrl(baseRequest, "/submit-consent");
       return privacyCenterApiFetch(url, {
         ...options,
         method: "POST",
@@ -10414,7 +10456,7 @@ function createConsentClient(baseUrl) {
       if (params.created_before) queryParams.append("created_before", params.created_before);
       if (params.language) queryParams.append("language", params.language);
       const queryString = queryParams.toString();
-      const url = privacyCenterUrl(baseRequest, `/receipts${queryString ? `?${queryString}` : ""}`);
+      const url = ledgerUrl(baseRequest, `/receipts${queryString ? `?${queryString}` : ""}`);
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10429,7 +10471,7 @@ function createConsentClient(baseUrl) {
      * and the Authorization header must be sent (anchor navigation wouldn't carry it).
      */
     async getReceiptPdf(baseRequest, receiptUuid, authToken) {
-      const url = privacyCenterUrl(baseRequest, `/receipts/${receiptUuid}/pdf`);
+      const url = ledgerUrl(baseRequest, `/receipts/${receiptUuid}/download`);
       const token = resolveAuthToken(authToken, baseRequest);
       const requestHeaders = new Headers();
       requestHeaders.set("Accept", "application/pdf");
@@ -10615,15 +10657,20 @@ var import_jsx_runtime4 = require("react/jsx-runtime");
 var BaseUrlContext = (0, import_react4.createContext)(null);
 var BaseUrlProvider = ({
   children,
-  baseUrl
+  baseUrl,
+  ledgerBaseUrl
 }) => {
-  const consentClient = (0, import_react4.useMemo)(() => createConsentClient(baseUrl), [baseUrl]);
+  const consentClient = (0, import_react4.useMemo)(
+    () => createConsentClient(baseUrl, ledgerBaseUrl),
+    [baseUrl, ledgerBaseUrl]
+  );
   const value = (0, import_react4.useMemo)(
     () => ({
       baseUrl,
+      ledgerBaseUrl,
       consentClient
     }),
-    [baseUrl, consentClient]
+    [baseUrl, ledgerBaseUrl, consentClient]
   );
   return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(BaseUrlContext.Provider, { value, children });
 };
@@ -18163,6 +18210,7 @@ function ConsentManager({ variant }) {
   );
   const handleManageConsent = (0, import_react37.useCallback)(
     async (purposeId, action, nominatorContact, dataElementUuids, productUuid) => {
+      var _a2, _b2;
       if (!organizationId || !workspaceId || !contact) {
         toast.error(t("missingInfoToManage"));
         return;
@@ -18179,6 +18227,11 @@ function ConsentManager({ variant }) {
         renew: t("unableToRenewConsent")
       };
       try {
+        const noticeUuid = (_a2 = selectedRecord == null ? void 0 : selectedRecord.notice_uuid) != null ? _a2 : void 0;
+        const dataElements = ((_b2 = selectedRecord == null ? void 0 : selectedRecord.data_elements) != null ? _b2 : []).map((el) => ({
+          uuid: el.uuid,
+          selected: el.selected
+        }));
         const response = await manageConsent({
           organizationId,
           workspaceId,
@@ -18189,7 +18242,9 @@ function ConsentManager({ variant }) {
           consentClient,
           nominatorContact,
           dataElementUuids,
-          productUuid
+          productUuid,
+          noticeUuid,
+          dataElements
         });
         if (response) {
           toast.success(successMessages[action]);
@@ -18211,7 +18266,7 @@ function ConsentManager({ variant }) {
         handleCloseModal();
       }
     },
-    [organizationId, workspaceId, contact, fetchData, handleCloseModal, t, authContext, consentClient]
+    [organizationId, workspaceId, contact, fetchData, handleCloseModal, t, authContext, consentClient, selectedRecord]
   );
   const getVar26 = (varName) => `var(${varName})`;
   const directBadge = (_c = (_b = consentDetail == null ? void 0 : consentDetail.status_summary) == null ? void 0 : _b.direct_purposes) != null ? _c : "";
@@ -18736,6 +18791,43 @@ var import_ai = require("react-icons/ai");
 var import_pi4 = require("react-icons/pi");
 
 // src/RedactoPrivacyCenter/components/groupHelpers.ts
+var consentGroupToFormProductGroup = (group) => {
+  var _a;
+  return {
+    product_uuid: group.product_uuid,
+    product_name: group.product_name,
+    product_description: group.product_description,
+    nominator: group.nominator,
+    purposes: ((_a = group.purposes) != null ? _a : []).map(purposeItemToFormPurpose)
+  };
+};
+var purposeItemToFormPurpose = (purpose) => {
+  var _a, _b;
+  return {
+    uuid: purpose.purpose_uuid,
+    purpose_uuid: purpose.purpose_uuid,
+    name: purpose.name,
+    description: (_a = purpose.description) != null ? _a : "",
+    industries: "",
+    selected: false,
+    given_consent: false,
+    status: purpose.status,
+    validity: null,
+    enabled: true,
+    data_elements: ((_b = purpose.data_elements) != null ? _b : []).map(
+      consentDataElementToFormDataElement
+    )
+  };
+};
+var consentDataElementToFormDataElement = (element) => ({
+  uuid: element.uuid,
+  name: element.name,
+  description: "",
+  enabled: element.enabled,
+  required: element.required,
+  given_consent: element.selected,
+  selected: element.selected
+});
 var buildGroupPurposes = (group) => group.purposes.filter((p) => p !== null && p !== void 0).map((p) => {
   const validDataElements = Array.isArray(p.data_elements) ? p.data_elements.filter((de) => de !== null && de !== void 0 && Boolean(de.uuid)).map((de) => ({ ...de, selected: false })) : [];
   return {
@@ -19964,6 +20056,44 @@ function Form({
     },
     []
   );
+  const withLedgerPickerGroups = (0, import_react41.useCallback)(
+    async (form, language) => {
+      var _a2, _b2;
+      if (isPopup || isCaseManagementContext || !organizationId || !workspaceId) {
+        return form;
+      }
+      const consents = await fetchUserConsents({
+        organizationId,
+        workspaceId,
+        authContext,
+        consentClient,
+        // No status filter: include every status (active / expired / withdrawn
+        // / declined), matching Python form/data, so a DSAR can target products
+        // the user no longer actively consents to.
+        limit: FORM_PICKER_GROUP_LIMIT,
+        nominatedLimit: FORM_PICKER_GROUP_LIMIT,
+        language
+      });
+      if (!consents) {
+        return form;
+      }
+      return {
+        ...form,
+        direct_groups: ((_a2 = consents.direct) != null ? _a2 : []).map(consentGroupToFormProductGroup),
+        nominated_groups: ((_b2 = consents.nominated) != null ? _b2 : []).map(
+          consentGroupToFormProductGroup
+        )
+      };
+    },
+    [
+      isPopup,
+      isCaseManagementContext,
+      organizationId,
+      workspaceId,
+      authContext,
+      consentClient
+    ]
+  );
   const fetchAndApplyTranslations = (0, import_react41.useCallback)(async (langValue) => {
     if (!organizationId || !workspaceId || !data) {
       return;
@@ -19992,7 +20122,7 @@ function Form({
         toast.info(t("translationNotAvailable"));
         return;
       }
-      setData(translatedFormData);
+      setData(await withLedgerPickerGroups(translatedFormData, langValue));
       if (translatedFormData.grievance_options) {
         const currentGrievanceSelections = { ...selectedGrievances };
         setGrievanceOptions(translatedFormData.grievance_options);
@@ -20008,7 +20138,7 @@ function Form({
     } finally {
       setIsTranslating(false);
     }
-  }, [organizationId, workspaceId, data, formData.contact, isPopup, isCaseManagementContext, authContext, consentClient, selectedGrievances, t]);
+  }, [organizationId, workspaceId, data, formData.contact, isPopup, isCaseManagementContext, authContext, consentClient, selectedGrievances, t, withLedgerPickerGroups]);
   (0, import_react41.useEffect)(() => {
     if (!skipProductStep) {
       setSelectedProductKey(null);
@@ -20114,7 +20244,11 @@ function Form({
             console.warn("No purposes with data elements found in API response");
           }
         }
-        setData(displayData);
+        const pickerData = await withLedgerPickerGroups(
+          displayData,
+          langParam || void 0
+        );
+        setData(pickerData);
         setGrievanceOptions(displayData.grievance_options || []);
         const initialGrievances = (displayData.grievance_options || []).reduce(
           (acc, option) => {
@@ -20134,7 +20268,7 @@ function Form({
       }
     };
     void initializePrivacyCenterForm();
-  }, [organizationId, workspaceId, isPopup, authContext, consentClient]);
+  }, [organizationId, workspaceId, isPopup, authContext, consentClient, withLedgerPickerGroups]);
   const getEnglishDataElementName = (0, import_react41.useCallback)((translatedName) => {
     var _a2, _b2, _c2;
     if (!((_a2 = englishDataRef.current) == null ? void 0 : _a2.purposes)) {
@@ -27538,6 +27672,7 @@ var import_jsx_runtime90 = require("react/jsx-runtime");
 injectPCStyles();
 function RedactoPrivacyCenter({
   baseUrl,
+  ledgerBaseUrl,
   slug,
   accessToken,
   refreshToken,
@@ -27545,7 +27680,7 @@ function RedactoPrivacyCenter({
   initialPage = "consent-manager",
   onBack
 }) {
-  return /* @__PURE__ */ (0, import_jsx_runtime90.jsx)(import_react_i18next52.I18nextProvider, { i18n: i18n_default, children: /* @__PURE__ */ (0, import_jsx_runtime90.jsx)(BrandingProvider, { slug, baseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime90.jsx)(BaseUrlProvider, { baseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime90.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime90.jsx)(import_react_i18next52.I18nextProvider, { i18n: i18n_default, children: /* @__PURE__ */ (0, import_jsx_runtime90.jsx)(BrandingProvider, { slug, baseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime90.jsx)(BaseUrlProvider, { baseUrl, ledgerBaseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime90.jsx)(
     AuthProvider,
     {
       accessToken,