@redacto.io/consent-sdk-react 9.5.0-beta.0 → 10.0.0-beta.0

package/dist/privacy-center.mjs

@@ -8576,13 +8576,12 @@ async function fetchGroupPurposesServer(params) {
   }
 }
 async function manageConsentServer(params) {
-  var _a;
   try {
     if (!params.consentClient) {
       throw new Error("Consent client is required");
     }
     const baseRequest = buildBaseRequest(params.organizationId, params.workspaceId, params.authToken);
-    const result = await params.consentClient.manageConsent(
+    await params.consentClient.manageConsent(
       baseRequest,
       params.purposeId,
       params.contact,
@@ -8591,9 +8590,11 @@ async function manageConsentServer(params) {
       void 0,
       params.nominatorContact,
       params.dataElementUuids,
-      params.productUuid
+      params.productUuid,
+      params.noticeUuid,
+      params.dataElements
     );
-    return (_a = result == null ? void 0 : result.success) != null ? _a : null;
+    return true;
   } catch (error) {
     const errorMsg = (error == null ? void 0 : error.message) || "";
     if (errorMsg.includes("nominator_not_found")) {
@@ -9030,6 +9031,7 @@ var MIN_REFRESH_BACKOFF_MS = 3e4;
 var MAX_REFRESH_BACKOFF_MS = 3e5;
 var REFRESH_TOKEN_STORAGE_KEY = "redacto_pc_refresh_token";
 var LEGACY_REFRESH_TOKEN_COOKIE = "refresh_token";
+var FORM_PICKER_GROUP_LIMIT = 100;
 var POLL_INTERVAL = 3e4;
 var NOTIFICATION_PAGE_SIZE = 10;
 var NOTIFICATION_DROPDOWN_LIMIT = 5;
@@ -9693,7 +9695,9 @@ var manageConsent = async ({
   consentClient,
   nominatorContact,
   dataElementUuids,
-  productUuid
+  productUuid,
+  noticeUuid,
+  dataElements
 }) => {
   try {
     const accessToken = await ensureValidToken(organizationId, workspaceId, void 0, authContext, consentClient);
@@ -9710,7 +9714,9 @@ var manageConsent = async ({
       consentClient,
       nominatorContact,
       dataElementUuids,
-      productUuid
+      productUuid,
+      noticeUuid,
+      dataElements
     });
     return result;
   } catch (error) {
@@ -9730,7 +9736,9 @@ var manageConsent = async ({
         consentClient,
         nominatorContact,
         dataElementUuids,
-        productUuid
+        productUuid,
+        noticeUuid,
+        dataElements
       });
     }
     console.error(`Error ${action} consent:`, error);
@@ -10039,7 +10047,11 @@ var useAuth = () => {
 import { createContext as createContext3, useContext as useContext3, useMemo as useMemo2 } from "react";
 
 // src/RedactoPrivacyCenter/api/client.ts
-function createConsentClient(baseUrl) {
+function createConsentClient(baseUrl, ledgerBaseUrl) {
+  if (!ledgerBaseUrl) {
+    throw new Error("ledgerBaseUrl is required to create the consent client");
+  }
+  const ledgerBase = ledgerBaseUrl.replace(/\/$/, "");
   async function privacyCenterApiFetch(url, options) {
     const { authToken, getAuthToken, headers = {}, ...fetchOptions } = options;
     const requestHeaders = new Headers();
@@ -10132,6 +10144,9 @@ function createConsentClient(baseUrl) {
   function privacyCenterUrl(baseRequest, path) {
     return `${baseUrl}/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}/dsar/privacy-center${path}`;
   }
+  function ledgerUrl(baseRequest, path) {
+    return `${ledgerBase}/public/organisations/${baseRequest.organisationUuid}/workspaces/${baseRequest.workspaceUuid}${path}`;
+  }
   function caseUrl(baseRequest, caseUuid, path = "") {
     return privacyCenterUrl(baseRequest, `/cases/${caseUuid}${path}`);
   }
@@ -10265,7 +10280,8 @@ function createConsentClient(baseUrl) {
       if (params.product_uuid) queryParams.append("product_uuid", params.product_uuid);
       if (params.language) queryParams.append("language", params.language);
       const queryString = queryParams.toString();
-      const url = privacyCenterUrl(baseRequest, `/user-consents${queryString ? `?${queryString}` : ""}`);
+      const suffix = `/user-consents${queryString ? `?${queryString}` : ""}`;
+      const url = ledgerUrl(baseRequest, suffix);
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10286,10 +10302,8 @@ function createConsentClient(baseUrl) {
       if (params.language) queryParams.append("language", params.language);
       if (params.nominator_uuid) queryParams.append("nominator_uuid", params.nominator_uuid);
       const queryString = queryParams.toString();
-      const url = privacyCenterUrl(
-        baseRequest,
-        `/user-consents/${productUuid}/purposes${queryString ? `?${queryString}` : ""}`
-      );
+      const suffix = `/user-consents/${productUuid}/purposes${queryString ? `?${queryString}` : ""}`;
+      const url = ledgerUrl(baseRequest, suffix);
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10298,20 +10312,48 @@ function createConsentClient(baseUrl) {
       });
     },
     /**
-     * Manage consent (privacy center) - revoke, regrant, or renew
+     * Manage consent (privacy center) - revoke, regrant, or renew.
+     *
+     * The Go ledger has no manage-consent route, so this is expressed as a
+     * `partial` submit-consent on the ledger — mirroring the Python dual-write
+     * relay (`build_consent_management_payload`): the affected purpose is
+     * re-submitted with `selected: false` to revoke or `selected: true` to
+     * regrant/renew, and `partial: true` so the rest of the notice's purposes
+     * are left untouched. The principal is resolved from the JWT, so no
+     * `contact`/identifiers are sent in the body, and `consent_event_uuid` is
+     * omitted so the ledger mints a fresh event.
      */
-    async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids, productUuid) {
-      const url = privacyCenterUrl(baseRequest, `/manage-consent?status=${status}`);
-      const body = { purpose_uuid: purposeId, contact };
-      if (nominatorContact) {
-        body.nominator_contact = nominatorContact;
-      }
-      if (Array.isArray(dataElementUuids) && dataElementUuids.length > 0) {
-        body.data_element_uuids = dataElementUuids;
-      }
-      if (productUuid) {
-        body.product_uuid = productUuid;
-      }
+    async manageConsent(baseRequest, purposeId, contact, status, authToken, options, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements) {
+      if (!noticeUuid) {
+        throw new Error("notice_uuid is required to manage consent via the ledger");
+      }
+      const purposeSelected = status !== "revoke";
+      const elements = (dataElements != null ? dataElements : []).map((de) => {
+        let selected;
+        if (status === "revoke") {
+          selected = false;
+        } else if (status === "regrant") {
+          selected = Array.isArray(dataElementUuids) ? dataElementUuids.includes(de.uuid) : de.selected;
+        } else {
+          selected = de.selected;
+        }
+        return { uuid: de.uuid, selected };
+      });
+      const body = {
+        notice_uuid: noticeUuid,
+        partial: true,
+        declined: false,
+        select_all_mandatory: false,
+        self_declared_adult: false,
+        purposes: [
+          {
+            purpose_uuid: purposeId,
+            selected: purposeSelected,
+            data_elements: elements
+          }
+        ]
+      };
+      const url = ledgerUrl(baseRequest, "/submit-consent");
       return privacyCenterApiFetch(url, {
         ...options,
         method: "POST",
@@ -10348,7 +10390,7 @@ function createConsentClient(baseUrl) {
       if (params.created_before) queryParams.append("created_before", params.created_before);
       if (params.language) queryParams.append("language", params.language);
       const queryString = queryParams.toString();
-      const url = privacyCenterUrl(baseRequest, `/receipts${queryString ? `?${queryString}` : ""}`);
+      const url = ledgerUrl(baseRequest, `/receipts${queryString ? `?${queryString}` : ""}`);
       return privacyCenterApiFetch(url, {
         ...options,
         method: "GET",
@@ -10363,7 +10405,7 @@ function createConsentClient(baseUrl) {
      * and the Authorization header must be sent (anchor navigation wouldn't carry it).
      */
     async getReceiptPdf(baseRequest, receiptUuid, authToken) {
-      const url = privacyCenterUrl(baseRequest, `/receipts/${receiptUuid}/pdf`);
+      const url = ledgerUrl(baseRequest, `/receipts/${receiptUuid}/download`);
       const token = resolveAuthToken(authToken, baseRequest);
       const requestHeaders = new Headers();
       requestHeaders.set("Accept", "application/pdf");
@@ -10549,15 +10591,20 @@ import { jsx as jsx4 } from "react/jsx-runtime";
 var BaseUrlContext = createContext3(null);
 var BaseUrlProvider = ({
   children,
-  baseUrl
+  baseUrl,
+  ledgerBaseUrl
 }) => {
-  const consentClient = useMemo2(() => createConsentClient(baseUrl), [baseUrl]);
+  const consentClient = useMemo2(
+    () => createConsentClient(baseUrl, ledgerBaseUrl),
+    [baseUrl, ledgerBaseUrl]
+  );
   const value = useMemo2(
     () => ({
       baseUrl,
+      ledgerBaseUrl,
       consentClient
     }),
-    [baseUrl, consentClient]
+    [baseUrl, ledgerBaseUrl, consentClient]
   );
   return /* @__PURE__ */ jsx4(BaseUrlContext.Provider, { value, children });
 };
@@ -18112,6 +18159,7 @@ function ConsentManager({ variant }) {
   );
   const handleManageConsent = useCallback13(
     async (purposeId, action, nominatorContact, dataElementUuids, productUuid) => {
+      var _a2, _b2;
       if (!organizationId || !workspaceId || !contact) {
         toast.error(t("missingInfoToManage"));
         return;
@@ -18128,6 +18176,11 @@ function ConsentManager({ variant }) {
         renew: t("unableToRenewConsent")
       };
       try {
+        const noticeUuid = (_a2 = selectedRecord == null ? void 0 : selectedRecord.notice_uuid) != null ? _a2 : void 0;
+        const dataElements = ((_b2 = selectedRecord == null ? void 0 : selectedRecord.data_elements) != null ? _b2 : []).map((el) => ({
+          uuid: el.uuid,
+          selected: el.selected
+        }));
         const response = await manageConsent({
           organizationId,
           workspaceId,
@@ -18138,7 +18191,9 @@ function ConsentManager({ variant }) {
           consentClient,
           nominatorContact,
           dataElementUuids,
-          productUuid
+          productUuid,
+          noticeUuid,
+          dataElements
         });
         if (response) {
           toast.success(successMessages[action]);
@@ -18160,7 +18215,7 @@ function ConsentManager({ variant }) {
         handleCloseModal();
       }
     },
-    [organizationId, workspaceId, contact, fetchData, handleCloseModal, t, authContext, consentClient]
+    [organizationId, workspaceId, contact, fetchData, handleCloseModal, t, authContext, consentClient, selectedRecord]
   );
   const getVar26 = (varName) => `var(${varName})`;
   const directBadge = (_c = (_b = consentDetail == null ? void 0 : consentDetail.status_summary) == null ? void 0 : _b.direct_purposes) != null ? _c : "";
@@ -18685,6 +18740,43 @@ import { AiOutlineClose } from "react-icons/ai";
 import { PiUploadBold } from "react-icons/pi";
 
 // src/RedactoPrivacyCenter/components/groupHelpers.ts
+var consentGroupToFormProductGroup = (group) => {
+  var _a;
+  return {
+    product_uuid: group.product_uuid,
+    product_name: group.product_name,
+    product_description: group.product_description,
+    nominator: group.nominator,
+    purposes: ((_a = group.purposes) != null ? _a : []).map(purposeItemToFormPurpose)
+  };
+};
+var purposeItemToFormPurpose = (purpose) => {
+  var _a, _b;
+  return {
+    uuid: purpose.purpose_uuid,
+    purpose_uuid: purpose.purpose_uuid,
+    name: purpose.name,
+    description: (_a = purpose.description) != null ? _a : "",
+    industries: "",
+    selected: false,
+    given_consent: false,
+    status: purpose.status,
+    validity: null,
+    enabled: true,
+    data_elements: ((_b = purpose.data_elements) != null ? _b : []).map(
+      consentDataElementToFormDataElement
+    )
+  };
+};
+var consentDataElementToFormDataElement = (element) => ({
+  uuid: element.uuid,
+  name: element.name,
+  description: "",
+  enabled: element.enabled,
+  required: element.required,
+  given_consent: element.selected,
+  selected: element.selected
+});
 var buildGroupPurposes = (group) => group.purposes.filter((p) => p !== null && p !== void 0).map((p) => {
   const validDataElements = Array.isArray(p.data_elements) ? p.data_elements.filter((de) => de !== null && de !== void 0 && Boolean(de.uuid)).map((de) => ({ ...de, selected: false })) : [];
   return {
@@ -19913,6 +20005,44 @@ function Form({
     },
     []
   );
+  const withLedgerPickerGroups = useCallback14(
+    async (form, language) => {
+      var _a2, _b2;
+      if (isPopup || isCaseManagementContext || !organizationId || !workspaceId) {
+        return form;
+      }
+      const consents = await fetchUserConsents({
+        organizationId,
+        workspaceId,
+        authContext,
+        consentClient,
+        // No status filter: include every status (active / expired / withdrawn
+        // / declined), matching Python form/data, so a DSAR can target products
+        // the user no longer actively consents to.
+        limit: FORM_PICKER_GROUP_LIMIT,
+        nominatedLimit: FORM_PICKER_GROUP_LIMIT,
+        language
+      });
+      if (!consents) {
+        return form;
+      }
+      return {
+        ...form,
+        direct_groups: ((_a2 = consents.direct) != null ? _a2 : []).map(consentGroupToFormProductGroup),
+        nominated_groups: ((_b2 = consents.nominated) != null ? _b2 : []).map(
+          consentGroupToFormProductGroup
+        )
+      };
+    },
+    [
+      isPopup,
+      isCaseManagementContext,
+      organizationId,
+      workspaceId,
+      authContext,
+      consentClient
+    ]
+  );
   const fetchAndApplyTranslations = useCallback14(async (langValue) => {
     if (!organizationId || !workspaceId || !data) {
       return;
@@ -19941,7 +20071,7 @@ function Form({
         toast.info(t("translationNotAvailable"));
         return;
       }
-      setData(translatedFormData);
+      setData(await withLedgerPickerGroups(translatedFormData, langValue));
       if (translatedFormData.grievance_options) {
         const currentGrievanceSelections = { ...selectedGrievances };
         setGrievanceOptions(translatedFormData.grievance_options);
@@ -19957,7 +20087,7 @@ function Form({
     } finally {
       setIsTranslating(false);
     }
-  }, [organizationId, workspaceId, data, formData.contact, isPopup, isCaseManagementContext, authContext, consentClient, selectedGrievances, t]);
+  }, [organizationId, workspaceId, data, formData.contact, isPopup, isCaseManagementContext, authContext, consentClient, selectedGrievances, t, withLedgerPickerGroups]);
   useEffect22(() => {
     if (!skipProductStep) {
       setSelectedProductKey(null);
@@ -20063,7 +20193,11 @@ function Form({
             console.warn("No purposes with data elements found in API response");
           }
         }
-        setData(displayData);
+        const pickerData = await withLedgerPickerGroups(
+          displayData,
+          langParam || void 0
+        );
+        setData(pickerData);
         setGrievanceOptions(displayData.grievance_options || []);
         const initialGrievances = (displayData.grievance_options || []).reduce(
           (acc, option) => {
@@ -20083,7 +20217,7 @@ function Form({
       }
     };
     void initializePrivacyCenterForm();
-  }, [organizationId, workspaceId, isPopup, authContext, consentClient]);
+  }, [organizationId, workspaceId, isPopup, authContext, consentClient, withLedgerPickerGroups]);
   const getEnglishDataElementName = useCallback14((translatedName) => {
     var _a2, _b2, _c2;
     if (!((_a2 = englishDataRef.current) == null ? void 0 : _a2.purposes)) {
@@ -27502,6 +27636,7 @@ import { jsx as jsx90 } from "react/jsx-runtime";
 injectPCStyles();
 function RedactoPrivacyCenter({
   baseUrl,
+  ledgerBaseUrl,
   slug,
   accessToken,
   refreshToken,
@@ -27509,7 +27644,7 @@ function RedactoPrivacyCenter({
   initialPage = "consent-manager",
   onBack
 }) {
-  return /* @__PURE__ */ jsx90(I18nextProvider, { i18n: i18n_default, children: /* @__PURE__ */ jsx90(BrandingProvider, { slug, baseUrl, children: /* @__PURE__ */ jsx90(BaseUrlProvider, { baseUrl, children: /* @__PURE__ */ jsx90(
+  return /* @__PURE__ */ jsx90(I18nextProvider, { i18n: i18n_default, children: /* @__PURE__ */ jsx90(BrandingProvider, { slug, baseUrl, children: /* @__PURE__ */ jsx90(BaseUrlProvider, { baseUrl, ledgerBaseUrl, children: /* @__PURE__ */ jsx90(
     AuthProvider,
     {
       accessToken,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@redacto.io/consent-sdk-react",
-  "version": "9.5.0-beta.0",
+  "version": "10.0.0-beta.0",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
   "types": "dist/index.d.ts",

package/src/RedactoNoticeConsent/RedactoNoticeConsent.test.tsx

@@ -26,6 +26,11 @@ vi.mock("./api", () => ({
   fetchTTSAudioUrls: vi.fn(),
   initiateGuardianVerification: vi.fn(),
   verifyGuardianStatus: vi.fn(),
+  // Defaults to resolving undefined, so the ledger consent-state overlay is
+  // skipped and the banner falls back to the Python-provided values the
+  // existing tests assert on.
+  fetchNoticeConsentStatus: vi.fn(),
+  buildLedgerConsentOverlay: vi.fn(),
 }));
 
 // Mock jwt-decode

package/src/RedactoNoticeConsent/RedactoNoticeConsent.tsx

@@ -11,8 +11,10 @@ import React, { useCallback, useEffect, useMemo, useRef, useState } from "react"
 
 // API imports
 import {
+  buildLedgerConsentOverlay,
   clearApiCache,
   fetchConsentContent,
+  fetchNoticeConsentStatus,
   fetchTTSAudioUrls,
   initiateGuardianVerification,
   submitConsentEvent,
@@ -1296,6 +1298,7 @@ export const RedactoNoticeConsent = ({
   accessToken,
   refreshToken,
   baseUrl,
+  ledgerBaseUrl,
   language = "en",
   blockUI = true,
   onAccept,
@@ -1838,9 +1841,31 @@ export const RedactoNoticeConsent = ({
       );
       setCollapsedPurposes(initialCollapsedState);
 
-      // Initialize selected states - handle reconsent pre-population
-      const isReconsentRequired = consentContentData.detail.reconsent_required;
-      const purposeSelections = consentContentData.detail.purpose_selections;
+      // Initialize selected states - handle reconsent pre-population.
+      // Approach A: overlay the prior-consent / reconsent state from the Go
+      // ledger's check-consent. Consents live in the ledger post-cutover, so
+      // Python's notice-validation overlay is empty; the notice text/config
+      // still comes from Python (above). Falls back to the Python-provided
+      // values when the ledger is unavailable, and is skipped for the
+      // magic-link flow (specific_uuid), which pre-fills from a specific event.
+      let isReconsentRequired = consentContentData.detail.reconsent_required;
+      let purposeSelections = consentContentData.detail.purpose_selections;
+      if (ledgerBaseUrl && !applicationId) {
+        const ledgerStatus = await fetchNoticeConsentStatus({
+          accessToken,
+          ledgerBaseUrl,
+          noticeUuid: noticeId,
+          signal: abortControllerRef.current?.signal,
+        });
+        if (ledgerStatus) {
+          const overlay = buildLedgerConsentOverlay(
+            ledgerStatus,
+            activeConfig.purposes
+          );
+          isReconsentRequired = overlay?.reconsent_required ?? false;
+          purposeSelections = overlay?.purpose_selections;
+        }
+      }
 
       // Categorize purposes for reconsent UI
       const newCategorizedPurposes = isReconsentRequired
@@ -2120,7 +2145,7 @@ export const RedactoNoticeConsent = ({
       if (content) {
         await submitConsentEvent({
           accessToken,
-          baseUrl,
+          ledgerBaseUrl,
           noticeUuid: content.notice_uuid,
           purposes: content.purposes.map((purpose) => {
             // Check if this is an already-consented purpose that was modified

package/src/RedactoNoticeConsent/api/index.ts

@@ -3,10 +3,14 @@ import { parseApiError } from "../../shared/api-errors";
 import type {
   ConsentContent,
   ConsentEventPayload,
+  DataElementSelection,
   FetchConsentContentParams,
+  FetchNoticeConsentStatusParams,
   FetchTTSAudioUrlsParams,
   InitiateGuardianVerificationParams,
   InitiateGuardianVerificationResponse,
+  NoticeConsentStatusResponse,
+  PurposeSelection,
   RedactoJwtPayload,
   SubmitConsentEventParams,
   TTSAudioUrlsResponse,
@@ -127,7 +131,7 @@ export const fetchConsentContent = async ({
 
 export const submitConsentEvent = async ({
   accessToken,
-  baseUrl,
+  ledgerBaseUrl,
   noticeUuid,
   purposes,
   declined,
@@ -151,7 +155,10 @@ export const submitConsentEvent = async ({
     throw new Error("Invalid token: missing organization or workspace UUID");
   }
 
-  const apiBaseUrl = baseUrl || BASE_URL;
+  if (!ledgerBaseUrl) {
+    throw new Error("ledgerBaseUrl is required to submit consent");
+  }
+  const apiBaseUrl = ledgerBaseUrl;
 
   const validatedPurposes = purposes.map((purpose) => {
     if (!purpose.uuid) {
@@ -209,6 +216,128 @@ export const submitConsentEvent = async ({
   apiCache.clear();
 };
 
+/**
+ * Fetch the principal's current consent status for a notice from the Go
+ * ledger (`check-consent`). The principal resolves from the JWT, so the body
+ * is empty. Returns null on any failure so the caller can fall back to the
+ * Python-provided overlay (graceful degradation). This is how the banner
+ * learns prior-consent / reconsent state post-cutover, since Python's notice
+ * validation reads its own (now-empty) consent DB.
+ */
+export const fetchNoticeConsentStatus = async ({
+  accessToken,
+  ledgerBaseUrl,
+  noticeUuid,
+  signal,
+}: FetchNoticeConsentStatusParams): Promise<NoticeConsentStatusResponse | null> => {
+  if (!accessToken || !ledgerBaseUrl || !noticeUuid) {
+    return null;
+  }
+
+  const decodedToken = decodeTokenSafely(accessToken);
+  if (!decodedToken) {
+    return null;
+  }
+
+  const { organisation_uuid: ORGANISATION_UUID, workspace_uuid: WORKSPACE_UUID } = decodedToken;
+  if (!ORGANISATION_UUID || !WORKSPACE_UUID) {
+    return null;
+  }
+
+  try {
+    const response = await fetch(
+      `${ledgerBaseUrl}/public/organisations/${ORGANISATION_UUID}/workspaces/${WORKSPACE_UUID}/notices/${noticeUuid}/check-consent`,
+      {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${accessToken}`,
+          "Content-Type": "application/json",
+        },
+        body: "{}",
+        signal,
+      }
+    );
+
+    if (!response.ok) {
+      return null;
+    }
+
+    const data = (await response.json()) as
+      | NoticeConsentStatusResponse
+      | { detail?: NoticeConsentStatusResponse };
+    // The ledger returns the response directly; tolerate a {detail} envelope too.
+    const body =
+      data && typeof data === "object" && "detail" in data && data.detail
+        ? data.detail
+        : (data as NoticeConsentStatusResponse);
+
+    if (!body || !Array.isArray(body.purposes)) {
+      return null;
+    }
+    return body;
+  } catch {
+    // Network / abort / parse failure — degrade to the Python overlay.
+    return null;
+  }
+};
+
+/**
+ * Translate the ledger's notice consent status into the
+ * `{ purpose_selections, reconsent_required }` shape the banner already
+ * consumes, so prior-consent pre-fill and reconsent categorization work off
+ * the ledger. Returns null for a first-time principal (no consent record —
+ * every purpose INACTIVE), preserving the normal first-time consent flow.
+ *
+ * `needs_reconsent` is derived from `status` (anything not ACTIVE needs
+ * reconsent: expired / withdrawn / declined / inactive). NOTE: notice-version
+ * reconsent is NOT covered — the ledger's check-consent has no version
+ * awareness yet, so a republished-notice version bump won't re-prompt until
+ * that lands on the ledger (tracked fast-follow).
+ */
+export const buildLedgerConsentOverlay = (
+  status: NoticeConsentStatusResponse,
+  configPurposes: ConsentContent["detail"]["active_config"]["purposes"]
+): {
+  reconsent_required: boolean;
+  purpose_selections: Record<string, PurposeSelection>;
+} | null => {
+  const byUuid = new Map(status.purposes.map((p) => [p.uuid, p]));
+  const hasHistory = status.purposes.some(
+    (p) => (p.status || "INACTIVE") !== "INACTIVE"
+  );
+  if (!hasHistory) {
+    return null;
+  }
+
+  const purpose_selections: Record<string, PurposeSelection> = {};
+  for (const cp of configPurposes) {
+    const lp = byUuid.get(cp.uuid);
+    const purposeStatus = lp?.status || "INACTIVE";
+    const selectedByUuid = new Map(
+      (lp?.data_elements || []).map((de) => [de.uuid, de.selected])
+    );
+    const data_elements: Record<string, DataElementSelection> = {};
+    for (const de of cp.data_elements) {
+      data_elements[de.uuid] = {
+        selected: selectedByUuid.get(de.uuid) ?? false,
+        enabled: de.enabled,
+        required: de.required,
+      };
+    }
+    purpose_selections[cp.uuid] = {
+      selected: lp?.selected ?? false,
+      status: purposeStatus,
+      needs_reconsent: purposeStatus !== "ACTIVE",
+      data_elements,
+    };
+  }
+
+  const reconsent_required = configPurposes.some(
+    (cp) => (purpose_selections[cp.uuid]?.status || "INACTIVE") !== "ACTIVE"
+  );
+  return { reconsent_required, purpose_selections };
+};
+
 export const fetchTTSAudioUrls = async ({
   accessToken,
   baseUrl,