@redacto.io/consent-sdk-react 9.5.0-beta.0 → 10.0.0-beta.1

package/dist/privacy-center.d.mts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ReactNode } from 'react';
 import * as _tanstack_react_query from '@tanstack/react-query';
 
@@ -31,9 +31,14 @@ type BaseRequest = {
 /**
  * Consent service client factory.
  * Creates a client instance with a specific base URL.
- * @param baseUrl - Consent server base URL
+ * @param baseUrl - Consent server base URL (Python service, e.g. http://host/consent)
+ * @param ledgerBaseUrl - Go ledger base URL (e.g. http://host:8090/consent-ledger).
+ *   Used for user-consents reads/writes served from the ledger's `/public/...` paths.
+ *   When omitted, those calls fall back to the legacy Python
+ *   `/dsar/privacy-center` endpoints and payloads (pre-ledger behavior), so
+ *   integrations without a deployed ledger keep working.
  */
-declare function createConsentClient(baseUrl: string): {
+declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
     /**
      * Get form data (privacy center)
      */
@@ -92,13 +97,40 @@ declare function createConsentClient(baseUrl: string): {
         nominator_uuid?: string;
     }, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<unknown>;
     /**
-     * Manage consent (privacy center) - revoke, regrant, or renew
+     * Manage consent (privacy center) - revoke, regrant, or renew.
+     *
+     * The Go ledger has no manage-consent route, so with a ledger configured
+     * this is expressed as a `partial` submit-consent on the ledger — mirroring
+     * the Python dual-write relay (`build_consent_management_payload`): the
+     * affected purpose is re-submitted with `selected: false` to revoke or
+     * `selected: true` to regrant/renew, and `partial: true` so the rest of the
+     * notice's purposes are left untouched. The principal is resolved from the
+     * JWT, so no `contact`/identifiers are sent in the body, and
+     * `consent_event_uuid` is omitted so the ledger mints a fresh event.
+     *
+     * Without a ledger, the legacy Python `/manage-consent?status=` endpoint is
+     * used with its `{ purpose_uuid, contact, ... }` payload.
      */
-    manageConsent(baseRequest: BaseRequest, purposeId: string, contact: string, status: "revoke" | "regrant" | "renew", authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">, nominatorContact?: string, dataElementUuids?: string[], productUuid?: string): Promise<unknown>;
+    manageConsent(baseRequest: BaseRequest, purposeId: string, contact: string, status: "revoke" | "regrant" | "renew", authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">, nominatorContact?: string, dataElementUuids?: string[], productUuid?: string, noticeUuid?: string, dataElements?: Array<{
+        uuid: string;
+        selected: boolean;
+    }>): Promise<unknown>;
     /**
      * Get activities (privacy center)
      */
     getActivities(baseRequest: BaseRequest, offset?: number, limit?: number, language?: string, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<unknown>;
+    /**
+     * List all data principals that share this session's contact
+     * (shared-contact profile picker). Identity is derived server-side from the
+     * JWT — the caller sends nothing but its bearer token.
+     */
+    listIdentities(baseRequest: BaseRequest, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<IdentityListResponse>;
+    /**
+     * Re-scope the session to a chosen principal uuid (must be one of the
+     * principals sharing this session's contact). Returns fresh access/refresh
+     * tokens scoped to that principal.
+     */
+    selectPrincipal(baseRequest: BaseRequest, principalUuid: string, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<SelectPrincipalResponse>;
     /**
      * Get receipts (privacy center) — consent receipts for the authenticated user
      */
@@ -358,6 +390,7 @@ type PurposeItem = {
     method: string;
     data_elements: ConsentDataElement[];
     link_reason: string | null;
+    notice_uuid: string | null;
 };
 type ConsentGroup = {
     product_uuid: string;
@@ -592,6 +625,21 @@ type NotificationQueryParams = {
     include_summary?: boolean;
     language?: string;
 };
+type IdentityCandidate = Readonly<{
+    uuid: string;
+    org_user_id?: string | null;
+    primary_email?: string | null;
+    primary_mobile?: string | null;
+    created_at?: string | null;
+}>;
+type IdentityListResponse = Readonly<{
+    identities: IdentityCandidate[];
+}>;
+type SelectPrincipalResponse = Readonly<{
+    token: string;
+    refresh_token: string;
+    expires_at?: string;
+}>;
 
 type InternalPage = 'consent-manager' | 'form' | 'activity' | 'case-details' | 'notifications' | 'receipts';
 interface NavigationContextType {
@@ -604,11 +652,12 @@ interface NavigationContextType {
 declare const NavigationProvider: ({ children, initialPage }: {
     children: ReactNode;
     initialPage?: InternalPage;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 declare const useInternalNavigation: () => NavigationContextType;
 
 interface RedactoPrivacyCenterProps {
     baseUrl: string;
+    ledgerBaseUrl?: string;
     slug: string;
     accessToken: string;
     refreshToken: string;
@@ -616,26 +665,26 @@ interface RedactoPrivacyCenterProps {
     initialPage?: InternalPage;
     onBack?: 'back' | 'signout';
 }
-declare function RedactoPrivacyCenter({ baseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react_jsx_runtime.JSX.Element;
+declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react.JSX.Element;
 
 interface PrivacyCenterLayoutProps {
     children: ReactNode;
     slug: string;
     onBack?: 'back' | 'signout';
 }
-declare function PrivacyCenterLayout({ children, slug, onBack }: PrivacyCenterLayoutProps): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterLayout({ children, slug, onBack }: PrivacyCenterLayoutProps): react.JSX.Element;
 
-declare function PrivacyCenterHomePage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterHomePage(): react.JSX.Element;
 
-declare function PrivacyCenterConsentManagerPage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterConsentManagerPage(): react.JSX.Element;
 
-declare function PrivacyCenterFormPage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterFormPage(): react.JSX.Element;
 
-declare function PrivacyCenterActivityPage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterActivityPage(): react.JSX.Element;
 
-declare const PrivacyCenterCaseDetailsPage: () => react_jsx_runtime.JSX.Element | null;
+declare const PrivacyCenterCaseDetailsPage: () => react.JSX.Element | null;
 
-declare const NotificationsPage: () => react_jsx_runtime.JSX.Element;
+declare const NotificationsPage: () => react.JSX.Element;
 
 type AuthContextValue = Readonly<{
     accessToken: string;
@@ -646,15 +695,18 @@ type AuthContextValue = Readonly<{
 }>;
 type BaseUrlContextValue = Readonly<{
     baseUrl: string;
+    ledgerBaseUrl?: string;
     consentClient: ReturnType<typeof createConsentClient>;
 }>;
 
-declare const BaseUrlProvider: ({ children, baseUrl, }: {
+declare const BaseUrlProvider: ({ children, baseUrl, ledgerBaseUrl, }: {
     children: ReactNode;
     baseUrl: string;
-}) => react_jsx_runtime.JSX.Element;
+    ledgerBaseUrl?: string;
+}) => react.JSX.Element;
 declare const useBaseUrl: () => Readonly<{
     baseUrl: string;
+    ledgerBaseUrl?: string;
     consentClient: ReturnType<typeof createConsentClient>;
 }>;
 
@@ -801,7 +853,7 @@ type FetchGroupPurposesParams = {
     consentClient?: BaseUrlContextValue['consentClient'];
 };
 declare const fetchGroupPurposes: (params: FetchGroupPurposesParams) => Promise<GroupPurposesOut | null>;
-declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, dataElementUuids, productUuid, }: {
+declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements, }: {
     organizationId: string;
     workspaceId: string;
     purposeId: string;
@@ -812,11 +864,16 @@ declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact,
     nominatorContact?: string;
     dataElementUuids?: string[];
     productUuid?: string;
+    noticeUuid?: string;
+    dataElements?: Array<{
+        uuid: string;
+        selected: boolean;
+    }>;
 }) => Promise<boolean | null>;
 declare const fetchActivities: (organizationId: string, workspaceId: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<ActivityDetail | null>;
 declare const fetchCaseHistory: (organizationId: string, workspaceId: string, contact: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<CaseHistoryDetail | null>;
 
-declare const useCaseHistory: (organizationId: string | undefined, workspaceId: string | undefined, contact: string | undefined, authContext?: AuthContext) => _tanstack_react_query.UseQueryResult<CaseRequest[], Error>;
+declare const useCaseHistory: (organizationId: string | undefined, workspaceId: string | undefined, contact: string | undefined, authContext?: AuthContext) => _tanstack_react_query.UseQueryResult<NoInfer<CaseRequest[]>, Error>;
 
 interface AuthProviderProps {
     children: ReactNode;
@@ -824,7 +881,7 @@ interface AuthProviderProps {
     refreshToken: string;
     onError: (error: Error) => boolean;
 }
-declare const AuthProvider: ({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError, }: AuthProviderProps) => react_jsx_runtime.JSX.Element;
+declare const AuthProvider: ({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError, }: AuthProviderProps) => react.JSX.Element;
 declare const useAuth: () => AuthContextValue;
 
 /**

package/dist/privacy-center.d.ts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ReactNode } from 'react';
 import * as _tanstack_react_query from '@tanstack/react-query';
 
@@ -31,9 +31,14 @@ type BaseRequest = {
 /**
  * Consent service client factory.
  * Creates a client instance with a specific base URL.
- * @param baseUrl - Consent server base URL
+ * @param baseUrl - Consent server base URL (Python service, e.g. http://host/consent)
+ * @param ledgerBaseUrl - Go ledger base URL (e.g. http://host:8090/consent-ledger).
+ *   Used for user-consents reads/writes served from the ledger's `/public/...` paths.
+ *   When omitted, those calls fall back to the legacy Python
+ *   `/dsar/privacy-center` endpoints and payloads (pre-ledger behavior), so
+ *   integrations without a deployed ledger keep working.
  */
-declare function createConsentClient(baseUrl: string): {
+declare function createConsentClient(baseUrl: string, ledgerBaseUrl?: string): {
     /**
      * Get form data (privacy center)
      */
@@ -92,13 +97,40 @@ declare function createConsentClient(baseUrl: string): {
         nominator_uuid?: string;
     }, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<unknown>;
     /**
-     * Manage consent (privacy center) - revoke, regrant, or renew
+     * Manage consent (privacy center) - revoke, regrant, or renew.
+     *
+     * The Go ledger has no manage-consent route, so with a ledger configured
+     * this is expressed as a `partial` submit-consent on the ledger — mirroring
+     * the Python dual-write relay (`build_consent_management_payload`): the
+     * affected purpose is re-submitted with `selected: false` to revoke or
+     * `selected: true` to regrant/renew, and `partial: true` so the rest of the
+     * notice's purposes are left untouched. The principal is resolved from the
+     * JWT, so no `contact`/identifiers are sent in the body, and
+     * `consent_event_uuid` is omitted so the ledger mints a fresh event.
+     *
+     * Without a ledger, the legacy Python `/manage-consent?status=` endpoint is
+     * used with its `{ purpose_uuid, contact, ... }` payload.
      */
-    manageConsent(baseRequest: BaseRequest, purposeId: string, contact: string, status: "revoke" | "regrant" | "renew", authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">, nominatorContact?: string, dataElementUuids?: string[], productUuid?: string): Promise<unknown>;
+    manageConsent(baseRequest: BaseRequest, purposeId: string, contact: string, status: "revoke" | "regrant" | "renew", authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">, nominatorContact?: string, dataElementUuids?: string[], productUuid?: string, noticeUuid?: string, dataElements?: Array<{
+        uuid: string;
+        selected: boolean;
+    }>): Promise<unknown>;
     /**
      * Get activities (privacy center)
      */
     getActivities(baseRequest: BaseRequest, offset?: number, limit?: number, language?: string, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<unknown>;
+    /**
+     * List all data principals that share this session's contact
+     * (shared-contact profile picker). Identity is derived server-side from the
+     * JWT — the caller sends nothing but its bearer token.
+     */
+    listIdentities(baseRequest: BaseRequest, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<IdentityListResponse>;
+    /**
+     * Re-scope the session to a chosen principal uuid (must be one of the
+     * principals sharing this session's contact). Returns fresh access/refresh
+     * tokens scoped to that principal.
+     */
+    selectPrincipal(baseRequest: BaseRequest, principalUuid: string, authToken?: string, options?: Omit<ApiFetchOptions, "getAuthToken">): Promise<SelectPrincipalResponse>;
     /**
      * Get receipts (privacy center) — consent receipts for the authenticated user
      */
@@ -358,6 +390,7 @@ type PurposeItem = {
     method: string;
     data_elements: ConsentDataElement[];
     link_reason: string | null;
+    notice_uuid: string | null;
 };
 type ConsentGroup = {
     product_uuid: string;
@@ -592,6 +625,21 @@ type NotificationQueryParams = {
     include_summary?: boolean;
     language?: string;
 };
+type IdentityCandidate = Readonly<{
+    uuid: string;
+    org_user_id?: string | null;
+    primary_email?: string | null;
+    primary_mobile?: string | null;
+    created_at?: string | null;
+}>;
+type IdentityListResponse = Readonly<{
+    identities: IdentityCandidate[];
+}>;
+type SelectPrincipalResponse = Readonly<{
+    token: string;
+    refresh_token: string;
+    expires_at?: string;
+}>;
 
 type InternalPage = 'consent-manager' | 'form' | 'activity' | 'case-details' | 'notifications' | 'receipts';
 interface NavigationContextType {
@@ -604,11 +652,12 @@ interface NavigationContextType {
 declare const NavigationProvider: ({ children, initialPage }: {
     children: ReactNode;
     initialPage?: InternalPage;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 declare const useInternalNavigation: () => NavigationContextType;
 
 interface RedactoPrivacyCenterProps {
     baseUrl: string;
+    ledgerBaseUrl?: string;
     slug: string;
     accessToken: string;
     refreshToken: string;
@@ -616,26 +665,26 @@ interface RedactoPrivacyCenterProps {
     initialPage?: InternalPage;
     onBack?: 'back' | 'signout';
 }
-declare function RedactoPrivacyCenter({ baseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react_jsx_runtime.JSX.Element;
+declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react.JSX.Element;
 
 interface PrivacyCenterLayoutProps {
     children: ReactNode;
     slug: string;
     onBack?: 'back' | 'signout';
 }
-declare function PrivacyCenterLayout({ children, slug, onBack }: PrivacyCenterLayoutProps): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterLayout({ children, slug, onBack }: PrivacyCenterLayoutProps): react.JSX.Element;
 
-declare function PrivacyCenterHomePage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterHomePage(): react.JSX.Element;
 
-declare function PrivacyCenterConsentManagerPage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterConsentManagerPage(): react.JSX.Element;
 
-declare function PrivacyCenterFormPage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterFormPage(): react.JSX.Element;
 
-declare function PrivacyCenterActivityPage(): react_jsx_runtime.JSX.Element;
+declare function PrivacyCenterActivityPage(): react.JSX.Element;
 
-declare const PrivacyCenterCaseDetailsPage: () => react_jsx_runtime.JSX.Element | null;
+declare const PrivacyCenterCaseDetailsPage: () => react.JSX.Element | null;
 
-declare const NotificationsPage: () => react_jsx_runtime.JSX.Element;
+declare const NotificationsPage: () => react.JSX.Element;
 
 type AuthContextValue = Readonly<{
     accessToken: string;
@@ -646,15 +695,18 @@ type AuthContextValue = Readonly<{
 }>;
 type BaseUrlContextValue = Readonly<{
     baseUrl: string;
+    ledgerBaseUrl?: string;
     consentClient: ReturnType<typeof createConsentClient>;
 }>;
 
-declare const BaseUrlProvider: ({ children, baseUrl, }: {
+declare const BaseUrlProvider: ({ children, baseUrl, ledgerBaseUrl, }: {
     children: ReactNode;
     baseUrl: string;
-}) => react_jsx_runtime.JSX.Element;
+    ledgerBaseUrl?: string;
+}) => react.JSX.Element;
 declare const useBaseUrl: () => Readonly<{
     baseUrl: string;
+    ledgerBaseUrl?: string;
     consentClient: ReturnType<typeof createConsentClient>;
 }>;
 
@@ -801,7 +853,7 @@ type FetchGroupPurposesParams = {
     consentClient?: BaseUrlContextValue['consentClient'];
 };
 declare const fetchGroupPurposes: (params: FetchGroupPurposesParams) => Promise<GroupPurposesOut | null>;
-declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, dataElementUuids, productUuid, }: {
+declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact, action, authContext, consentClient, nominatorContact, dataElementUuids, productUuid, noticeUuid, dataElements, }: {
     organizationId: string;
     workspaceId: string;
     purposeId: string;
@@ -812,11 +864,16 @@ declare const manageConsent: ({ organizationId, workspaceId, purposeId, contact,
     nominatorContact?: string;
     dataElementUuids?: string[];
     productUuid?: string;
+    noticeUuid?: string;
+    dataElements?: Array<{
+        uuid: string;
+        selected: boolean;
+    }>;
 }) => Promise<boolean | null>;
 declare const fetchActivities: (organizationId: string, workspaceId: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<ActivityDetail | null>;
 declare const fetchCaseHistory: (organizationId: string, workspaceId: string, contact: string, offset?: number, limit?: number, authContext?: AuthContext, consentClient?: BaseUrlContextValue["consentClient"], language?: string) => Promise<CaseHistoryDetail | null>;
 
-declare const useCaseHistory: (organizationId: string | undefined, workspaceId: string | undefined, contact: string | undefined, authContext?: AuthContext) => _tanstack_react_query.UseQueryResult<CaseRequest[], Error>;
+declare const useCaseHistory: (organizationId: string | undefined, workspaceId: string | undefined, contact: string | undefined, authContext?: AuthContext) => _tanstack_react_query.UseQueryResult<NoInfer<CaseRequest[]>, Error>;
 
 interface AuthProviderProps {
     children: ReactNode;
@@ -824,7 +881,7 @@ interface AuthProviderProps {
     refreshToken: string;
     onError: (error: Error) => boolean;
 }
-declare const AuthProvider: ({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError, }: AuthProviderProps) => react_jsx_runtime.JSX.Element;
+declare const AuthProvider: ({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError, }: AuthProviderProps) => react.JSX.Element;
 declare const useAuth: () => AuthContextValue;
 
 /**