@tantainnovative/ndpr-toolkit 3.5.0 → 3.5.5

package/dist/dsr.d.ts

@@ -199,7 +199,7 @@ export declare interface DSRRequest {
 }
 
 /**
- * Data Subject Request form component. Implements NDPA Part IV, Sections 29-36
+ * Data Subject Request form component. Implements NDPA Part VI (Sections 34-38)
  * covering data subject rights including access, rectification, erasure, and portability.
  */
 export declare const DSRRequestForm: React__default.FC<DSRRequestFormProps>;
@@ -438,20 +438,25 @@ declare interface DSRTrackerProps {
 }
 
 /**
- * Data Subject Rights types aligned with NDPA 2023 Part IV (Sections 29-36)
+ * Data Subject Rights types aligned with NDPA 2023 Part VI (Sections 34-38)
+ * and the related provisions in Part V (Section 27 — information to the data subject)
+ * and Part X (Section 46 — complaint to the Commission).
+ *
+ * Note: These are guidance labels — not legal advice. Verify with your DPO or counsel.
  */
 /**
- * Types of data subject requests per NDPA Part IV
- * - 'information': Right to be informed (Section 29)
- * - 'access': Right of access (Section 30)
- * - 'rectification': Right to rectification (Section 31)
- * - 'erasure': Right to erasure (Section 32)
- * - 'restriction': Right to restrict processing (Section 33)
- * - 'portability': Right to data portability (Section 34)
- * - 'objection': Right to object (Section 35)
- * - 'automated_decision_making': Rights related to automated decision-making (Section 36)
+ * Types of data subject requests per NDPA Part VI
+ * - 'information': Right to be informed (Section 27 — provision of information; Section 34(1)(a))
+ * - 'access': Right of access / confirmation + data copy (Section 34(1)(a)–(b))
+ * - 'rectification': Right to rectification (Section 34(1)(c))
+ * - 'erasure': Right to erasure (Section 34(1)(d), Section 34(2))
+ * - 'restriction': Right to restrict processing (Section 34(1)(e))
+ * - 'portability': Right to data portability (Section 38)
+ * - 'objection': Right to object (Section 36)
+ * - 'automated_decision_making': Rights re. automated decisions / profiling (Section 37)
+ * - 'withdraw_consent': Right to withdraw consent (Section 35)
  */
-export declare type DSRType = 'information' | 'access' | 'rectification' | 'erasure' | 'restriction' | 'portability' | 'objection' | 'automated_decision_making';
+export declare type DSRType = 'information' | 'access' | 'rectification' | 'erasure' | 'restriction' | 'portability' | 'objection' | 'automated_decision_making' | 'withdraw_consent';
 
 /**
  * Formats a DSR request for display or submission
@@ -481,7 +486,9 @@ export declare interface RequestType {
     /** Description of what this request type entails */
     description: string;
     /**
-     * NDPA section reference (e.g., "Section 30" for access requests)
+     * NDPA 2023 section reference for this right
+     * (e.g., "Section 34(1)(a)" for access, "Section 38" for portability).
+     * Used for display purposes only — verify the exact subsection with counsel.
      */
     ndpaSection?: string;
     /**
@@ -559,9 +566,10 @@ declare interface UseDSRReturn {
      */
     requests: DSRRequest[];
     /**
-     * Submit a new request
+     * Submit a new request. The hook assigns `id`, `status`, `createdAt`,
+     * `updatedAt`, and `dueDate` — pass everything else.
      */
-    submitRequest: (requestData: Omit<DSRRequest, 'id' | 'status' | 'submittedAt' | 'updatedAt' | 'estimatedCompletionDate'>) => DSRRequest;
+    submitRequest: (requestData: Omit<DSRRequest, 'id' | 'status' | 'createdAt' | 'updatedAt' | 'dueDate'>) => DSRRequest;
     /**
      * Update an existing request
      */
@@ -573,7 +581,12 @@ declare interface UseDSRReturn {
     /**
      * Get requests by status
      */
-    getRequestsByStatus: (status: RequestStatus) => DSRRequest[];
+    /**
+     * Filter requests by status. Accepts both the modern `DSRStatus` union and
+     * the deprecated `RequestStatus` for backward compatibility — pass the
+     * modern values (`'pending' | 'awaitingVerification' | 'inProgress' | ...`).
+     */
+    getRequestsByStatus: (status: DSRStatus | RequestStatus) => DSRRequest[];
     /**
      * Get requests by type
      */
@@ -646,7 +659,7 @@ export declare interface ValidateDsrSubmissionOptions {
     /**
      * Allowed request types. When provided, the payload's `requestType`
      * must be one of these — useful for locking the server to a specific
-     * set of supported NDPA Part IV §29-36 rights.
+     * set of supported NDPA Part VI §34-38 (plus §35, §36, §37) data-subject rights.
      */
     allowedRequestTypes?: string[];
 }

package/dist/dsr.js

@@ -1,3 +1,2 @@
 "use client";
-'use strict';var chunkVIQUXWJC_js=require('./chunk-VIQUXWJC.js'),chunkZPKVLTSX_js=require('./chunk-ZPKVLTSX.js'),chunkCKJAECGV_js=require('./chunk-CKJAECGV.js'),chunkJ5WCPZLW_js=require('./chunk-J5WCPZLW.js');require('./chunk-I54CDQGN.js'),require('./chunk-E64TU6IU.js'),require('./chunk-ELKB2AFZ.js');var chunkMQFZHA2D_js=require('./chunk-MQFZHA2D.js'),react=require('react'),jsxRuntime=require('react/jsx-runtime');var m=react.createContext(null);function P(){let e=react.useContext(m);if(!e)throw new Error("DSR compound components must be wrapped in <DSR.Provider>. Example: <DSR.Provider requestTypes={...}><DSR.Form /></DSR.Provider>");return e}var s=({requestTypes:e,adapter:S,storageKey:D,useLocalStorage:d,onSubmit:u,onUpdate:i,children:n})=>{let f=chunkCKJAECGV_js.a({requestTypes:e,adapter:S,storageKey:D,useLocalStorage:d,onSubmit:u,onUpdate:i}),x=chunkMQFZHA2D_js.b(chunkMQFZHA2D_js.a({},f),{requestTypes:e});return jsxRuntime.jsx(m.Provider,{value:x,children:n})};var C={Provider:s,Form:chunkZPKVLTSX_js.a,Dashboard:chunkVIQUXWJC_js.a,Tracker:chunkVIQUXWJC_js.b};Object.defineProperty(exports,"DSRDashboard",{enumerable:true,get:function(){return chunkVIQUXWJC_js.a}});Object.defineProperty(exports,"DSRTracker",{enumerable:true,get:function(){return chunkVIQUXWJC_js.b}});Object.defineProperty(exports,"DSRRequestForm",{enumerable:true,get:function(){return chunkZPKVLTSX_js.a}});Object.defineProperty(exports,"useDSR",{enumerable:true,get:function(){return chunkCKJAECGV_js.a}});Object.defineProperty(exports,"formatDSRRequest",{enumerable:true,get:function(){return chunkJ5WCPZLW_js.b}});Object.defineProperty(exports,"validateDsrSubmission",{enumerable:true,get:function(){return chunkJ5WCPZLW_js.a}});exports.DSR=C;exports.DSRProvider=s;exports.useDSRCompound=P;//# sourceMappingURL=dsr.js.map
-//# sourceMappingURL=dsr.js.map
+'use strict';var chunkCR2QZTGW_js=require('./chunk-CR2QZTGW.js'),chunkW47OSMT6_js=require('./chunk-W47OSMT6.js'),chunkHBLGN4SD_js=require('./chunk-HBLGN4SD.js'),chunkL2BRFMVS_js=require('./chunk-L2BRFMVS.js');require('./chunk-UXUMYP4L.js'),require('./chunk-AME4HJR4.js'),require('./chunk-VWED6UTN.js');var chunkRFPLZDIO_js=require('./chunk-RFPLZDIO.js'),react=require('react'),jsxRuntime=require('react/jsx-runtime');var p=react.createContext(null);function P(){let e=react.useContext(p);if(!e)throw new Error("DSR compound components must be wrapped in <DSR.Provider>. Example: <DSR.Provider requestTypes={...}><DSR.Form /></DSR.Provider>");return e}var m=({requestTypes:e,adapter:S,storageKey:D,useLocalStorage:d,onSubmit:u,onUpdate:i,children:n})=>{let f=chunkHBLGN4SD_js.a({requestTypes:e,adapter:S,storageKey:D,useLocalStorage:d,onSubmit:u,onUpdate:i}),x=chunkRFPLZDIO_js.b(chunkRFPLZDIO_js.a({},f),{requestTypes:e});return jsxRuntime.jsx(p.Provider,{value:x,children:n})};var C={Provider:m,Form:chunkW47OSMT6_js.a,Dashboard:chunkCR2QZTGW_js.a,Tracker:chunkCR2QZTGW_js.b};Object.defineProperty(exports,"DSRDashboard",{enumerable:true,get:function(){return chunkCR2QZTGW_js.a}});Object.defineProperty(exports,"DSRTracker",{enumerable:true,get:function(){return chunkCR2QZTGW_js.b}});Object.defineProperty(exports,"DSRRequestForm",{enumerable:true,get:function(){return chunkW47OSMT6_js.a}});Object.defineProperty(exports,"useDSR",{enumerable:true,get:function(){return chunkHBLGN4SD_js.a}});Object.defineProperty(exports,"formatDSRRequest",{enumerable:true,get:function(){return chunkL2BRFMVS_js.b}});Object.defineProperty(exports,"validateDsrSubmission",{enumerable:true,get:function(){return chunkL2BRFMVS_js.a}});exports.DSR=C;exports.DSRProvider=m;exports.useDSRCompound=P;

package/dist/dsr.mjs

@@ -1,3 +1,2 @@
 "use client";
-import {b,a}from'./chunk-SCWNM4PC.mjs';export{a as DSRDashboard,b as DSRTracker}from'./chunk-SCWNM4PC.mjs';import {a as a$1}from'./chunk-6HZL2WDU.mjs';export{a as DSRRequestForm}from'./chunk-6HZL2WDU.mjs';import {a as a$2}from'./chunk-CWHBCQGT.mjs';export{a as useDSR}from'./chunk-CWHBCQGT.mjs';export{b as formatDSRRequest,a as validateDsrSubmission}from'./chunk-B4Z5MBUC.mjs';import'./chunk-GKKAK6ES.mjs';import'./chunk-AYKLAEOU.mjs';import'./chunk-6WIP33TW.mjs';import {b as b$1,a as a$3}from'./chunk-WWT2ZSNU.mjs';import {createContext,useContext}from'react';import {jsx}from'react/jsx-runtime';var m=createContext(null);function P(){let e=useContext(m);if(!e)throw new Error("DSR compound components must be wrapped in <DSR.Provider>. Example: <DSR.Provider requestTypes={...}><DSR.Form /></DSR.Provider>");return e}var s=({requestTypes:e,adapter:S,storageKey:D,useLocalStorage:d,onSubmit:u,onUpdate:i,children:n})=>{let f=a$2({requestTypes:e,adapter:S,storageKey:D,useLocalStorage:d,onSubmit:u,onUpdate:i}),x=b$1(a$3({},f),{requestTypes:e});return jsx(m.Provider,{value:x,children:n})};var C={Provider:s,Form:a$1,Dashboard:a,Tracker:b};export{C as DSR,s as DSRProvider,P as useDSRCompound};//# sourceMappingURL=dsr.mjs.map
-//# sourceMappingURL=dsr.mjs.map
+import {b,a}from'./chunk-66NQ5CVY.mjs';export{a as DSRDashboard,b as DSRTracker}from'./chunk-66NQ5CVY.mjs';import {a as a$1}from'./chunk-XJO4DH3L.mjs';export{a as DSRRequestForm}from'./chunk-XJO4DH3L.mjs';import {a as a$2}from'./chunk-MPBPAEZC.mjs';export{a as useDSR}from'./chunk-MPBPAEZC.mjs';export{b as formatDSRRequest,a as validateDsrSubmission}from'./chunk-RZ6GC6WN.mjs';import'./chunk-EWVK45Z3.mjs';import'./chunk-SFGW37LE.mjs';import'./chunk-DBZSN4WP.mjs';import {b as b$1,a as a$3}from'./chunk-ZJYULEER.mjs';import {createContext,useContext}from'react';import {jsx}from'react/jsx-runtime';var p=createContext(null);function P(){let e=useContext(p);if(!e)throw new Error("DSR compound components must be wrapped in <DSR.Provider>. Example: <DSR.Provider requestTypes={...}><DSR.Form /></DSR.Provider>");return e}var m=({requestTypes:e,adapter:S,storageKey:D,useLocalStorage:d,onSubmit:u,onUpdate:i,children:n})=>{let f=a$2({requestTypes:e,adapter:S,storageKey:D,useLocalStorage:d,onSubmit:u,onUpdate:i}),x=b$1(a$3({},f),{requestTypes:e});return jsx(p.Provider,{value:x,children:n})};var C={Provider:m,Form:a$1,Dashboard:a,Tracker:b};export{C as DSR,m as DSRProvider,P as useDSRCompound};

package/dist/hooks.d.mts

@@ -1,3 +1,5 @@
+import { RefObject } from 'react';
+
 /**
  * Adequacy status of a destination country
  */
@@ -57,10 +59,51 @@ export declare interface BreachReport {
     affectedSystems: string[];
     /** Types of data involved in the breach */
     dataTypes: string[];
-    /** Whether sensitive personal data is involved (NDPA Section 27) */
+    /** Whether sensitive personal data is involved (NDPA Section 30) */
     involvesSensitiveData?: boolean;
     /** Estimated number of data subjects affected */
     estimatedAffectedSubjects?: number;
+    /**
+     * Approximate number of personal data RECORDS concerned (distinct from subject count).
+     * Required content under NDPA Section 40(1)(a) and Section 40(2).
+     */
+    approximateRecordCount?: number;
+    /**
+     * Categories of data subjects affected (e.g. customers, employees, minors, patients).
+     * Required content under NDPA Section 40(1)(a) and Section 40(2).
+     */
+    dataSubjectCategories?: string[];
+    /**
+     * Likely consequences of the breach for affected data subjects (e.g. identity theft,
+     * financial loss, reputational damage). Reported to the NDPC and, where applicable,
+     * communicated to data subjects under Section 40(3).
+     */
+    likelyConsequences?: string;
+    /**
+     * Measures taken or proposed to mitigate adverse effects of the breach.
+     * Required content for Section 40(3) communications to data subjects.
+     */
+    mitigationMeasures?: string;
+    /**
+     * Whether this is a phased / interim report submitted before full investigation
+     * is complete. The NDPC permits phased reporting where complete information is
+     * not available within 72 hours.
+     */
+    isPhasedReport?: boolean;
+    /**
+     * ID of the prior phased report this report supplements, if any.
+     */
+    supplementsReportId?: string;
+    /**
+     * Data Protection Officer contact details. The DPO is the named contact point
+     * for the NDPC per NDPA Section 32(3)(c). Required content in the regulatory
+     * report (Section 40(2)).
+     */
+    dpoContact?: {
+        name: string;
+        email: string;
+        phone?: string;
+    };
     /** Whether the breach is ongoing or contained */
     status: 'ongoing' | 'contained' | 'resolved';
     /** Initial actions taken to address the breach */
@@ -404,10 +447,10 @@ declare interface DOCXExportOptions {
 }
 
 /** A map of question IDs to their answer values */
-declare type DPIAAnswerMap = Record<string, DPIAAnswerValue>;
+export declare type DPIAAnswerMap = Record<string, DPIAAnswerValue>;
 
 /** Possible value types for a DPIA answer */
-declare type DPIAAnswerValue = string | number | boolean | string[];
+export declare type DPIAAnswerValue = string | number | boolean | string[];
 
 /**
  * Data Protection Impact Assessment types aligned with NDPA 2023 Sections 38-39
@@ -626,20 +669,25 @@ export declare interface DSRRequest {
 export declare type DSRStatus = 'pending' | 'awaitingVerification' | 'inProgress' | 'completed' | 'rejected';
 
 /**
- * Data Subject Rights types aligned with NDPA 2023 Part IV (Sections 29-36)
+ * Data Subject Rights types aligned with NDPA 2023 Part VI (Sections 34-38)
+ * and the related provisions in Part V (Section 27 — information to the data subject)
+ * and Part X (Section 46 — complaint to the Commission).
+ *
+ * Note: These are guidance labels — not legal advice. Verify with your DPO or counsel.
  */
 /**
- * Types of data subject requests per NDPA Part IV
- * - 'information': Right to be informed (Section 29)
- * - 'access': Right of access (Section 30)
- * - 'rectification': Right to rectification (Section 31)
- * - 'erasure': Right to erasure (Section 32)
- * - 'restriction': Right to restrict processing (Section 33)
- * - 'portability': Right to data portability (Section 34)
- * - 'objection': Right to object (Section 35)
- * - 'automated_decision_making': Rights related to automated decision-making (Section 36)
+ * Types of data subject requests per NDPA Part VI
+ * - 'information': Right to be informed (Section 27 — provision of information; Section 34(1)(a))
+ * - 'access': Right of access / confirmation + data copy (Section 34(1)(a)–(b))
+ * - 'rectification': Right to rectification (Section 34(1)(c))
+ * - 'erasure': Right to erasure (Section 34(1)(d), Section 34(2))
+ * - 'restriction': Right to restrict processing (Section 34(1)(e))
+ * - 'portability': Right to data portability (Section 38)
+ * - 'objection': Right to object (Section 36)
+ * - 'automated_decision_making': Rights re. automated decisions / profiling (Section 37)
+ * - 'withdraw_consent': Right to withdraw consent (Section 35)
  */
-export declare type DSRType = 'information' | 'access' | 'rectification' | 'erasure' | 'restriction' | 'portability' | 'objection' | 'automated_decision_making';
+export declare type DSRType = 'information' | 'access' | 'rectification' | 'erasure' | 'restriction' | 'portability' | 'objection' | 'automated_decision_making' | 'withdraw_consent';
 
 declare type EffortLevel = 'low' | 'medium' | 'high';
 
@@ -1181,7 +1229,9 @@ declare interface RequestType {
     /** Description of what this request type entails */
     description: string;
     /**
-     * NDPA section reference (e.g., "Section 30" for access requests)
+     * NDPA 2023 section reference for this right
+     * (e.g., "Section 34(1)(a)" for access, "Section 38" for portability).
+     * Used for display purposes only — verify the exact subsection with counsel.
      */
     ndpaSection?: string;
     /**
@@ -1330,8 +1380,11 @@ declare interface ThirdPartyProcessor {
 }
 
 /**
- * Cross-Border Data Transfer types aligned with NDPA 2023 Part VI (Sections 41-45)
- * Personal data may only be transferred outside Nigeria under specific conditions
+ * Cross-Border Data Transfer types aligned with NDPA 2023 Part VIII (Sections 41-43).
+ * Personal data may only be transferred outside Nigeria under the bases listed in
+ * Section 41(1), where Section 42 defines adequacy and Section 43 lists derogations.
+ *
+ * Note: These are guidance labels — not legal advice. Verify with your DPO or counsel.
  */
 /**
  * Transfer mechanisms recognized under the NDPA
@@ -1878,9 +1931,10 @@ declare interface UseDSRReturn {
      */
     requests: DSRRequest[];
     /**
-     * Submit a new request
+     * Submit a new request. The hook assigns `id`, `status`, `createdAt`,
+     * `updatedAt`, and `dueDate` — pass everything else.
      */
-    submitRequest: (requestData: Omit<DSRRequest, 'id' | 'status' | 'submittedAt' | 'updatedAt' | 'estimatedCompletionDate'>) => DSRRequest;
+    submitRequest: (requestData: Omit<DSRRequest, 'id' | 'status' | 'createdAt' | 'updatedAt' | 'dueDate'>) => DSRRequest;
     /**
      * Update an existing request
      */
@@ -1892,7 +1946,12 @@ declare interface UseDSRReturn {
     /**
      * Get requests by status
      */
-    getRequestsByStatus: (status: RequestStatus) => DSRRequest[];
+    /**
+     * Filter requests by status. Accepts both the modern `DSRStatus` union and
+     * the deprecated `RequestStatus` for backward compatibility — pass the
+     * modern values (`'pending' | 'awaitingVerification' | 'inProgress' | ...`).
+     */
+    getRequestsByStatus: (status: DSRStatus | RequestStatus) => DSRRequest[];
     /**
      * Get requests by type
      */
@@ -1915,6 +1974,40 @@ declare interface UseDSRReturn {
     isLoading: boolean;
 }
 
+/**
+ * Trap keyboard focus inside a container while it is active, and restore
+ * focus to the element that was active before activation when the container
+ * deactivates. Centralises the trap/restore logic that was previously
+ * duplicated (and broken — no restore) inside ConsentBanner.
+ *
+ * @example
+ * ```tsx
+ * const ref = useFocusTrap<HTMLDivElement>({ active: isOpen, onEscape: close });
+ * return <div ref={ref}>...</div>;
+ * ```
+ */
+export declare function useFocusTrap<T extends HTMLElement = HTMLElement>(options: UseFocusTrapOptions): RefObject<T | null>;
+
+export declare interface UseFocusTrapOptions {
+    /**
+     * Whether the focus trap is active. When transitioning from false → true,
+     * the hook captures `document.activeElement` and moves focus into the
+     * container; when transitioning back to false, the captured element is
+     * re-focused (WCAG 2.4.3 — focus order).
+     */
+    active: boolean;
+    /**
+     * Optional callback fired on Escape keydown while the trap is active.
+     * Typical use is to close the surrounding dialog.
+     */
+    onEscape?: () => void;
+    /**
+     * If false, do not auto-focus the first interactive element inside the
+     * container on activation. Defaults to true.
+     */
+    autoFocus?: boolean;
+}
+
 /**
  * Hook for managing lawful basis documentation for processing activities
  * in compliance with NDPA 2023 Section 25.

package/dist/hooks.d.ts

@@ -1,3 +1,5 @@
+import { RefObject } from 'react';
+
 /**
  * Adequacy status of a destination country
  */
@@ -57,10 +59,51 @@ export declare interface BreachReport {
     affectedSystems: string[];
     /** Types of data involved in the breach */
     dataTypes: string[];
-    /** Whether sensitive personal data is involved (NDPA Section 27) */
+    /** Whether sensitive personal data is involved (NDPA Section 30) */
     involvesSensitiveData?: boolean;
     /** Estimated number of data subjects affected */
     estimatedAffectedSubjects?: number;
+    /**
+     * Approximate number of personal data RECORDS concerned (distinct from subject count).
+     * Required content under NDPA Section 40(1)(a) and Section 40(2).
+     */
+    approximateRecordCount?: number;
+    /**
+     * Categories of data subjects affected (e.g. customers, employees, minors, patients).
+     * Required content under NDPA Section 40(1)(a) and Section 40(2).
+     */
+    dataSubjectCategories?: string[];
+    /**
+     * Likely consequences of the breach for affected data subjects (e.g. identity theft,
+     * financial loss, reputational damage). Reported to the NDPC and, where applicable,
+     * communicated to data subjects under Section 40(3).
+     */
+    likelyConsequences?: string;
+    /**
+     * Measures taken or proposed to mitigate adverse effects of the breach.
+     * Required content for Section 40(3) communications to data subjects.
+     */
+    mitigationMeasures?: string;
+    /**
+     * Whether this is a phased / interim report submitted before full investigation
+     * is complete. The NDPC permits phased reporting where complete information is
+     * not available within 72 hours.
+     */
+    isPhasedReport?: boolean;
+    /**
+     * ID of the prior phased report this report supplements, if any.
+     */
+    supplementsReportId?: string;
+    /**
+     * Data Protection Officer contact details. The DPO is the named contact point
+     * for the NDPC per NDPA Section 32(3)(c). Required content in the regulatory
+     * report (Section 40(2)).
+     */
+    dpoContact?: {
+        name: string;
+        email: string;
+        phone?: string;
+    };
     /** Whether the breach is ongoing or contained */
     status: 'ongoing' | 'contained' | 'resolved';
     /** Initial actions taken to address the breach */
@@ -404,10 +447,10 @@ declare interface DOCXExportOptions {
 }
 
 /** A map of question IDs to their answer values */
-declare type DPIAAnswerMap = Record<string, DPIAAnswerValue>;
+export declare type DPIAAnswerMap = Record<string, DPIAAnswerValue>;
 
 /** Possible value types for a DPIA answer */
-declare type DPIAAnswerValue = string | number | boolean | string[];
+export declare type DPIAAnswerValue = string | number | boolean | string[];
 
 /**
  * Data Protection Impact Assessment types aligned with NDPA 2023 Sections 38-39
@@ -626,20 +669,25 @@ export declare interface DSRRequest {
 export declare type DSRStatus = 'pending' | 'awaitingVerification' | 'inProgress' | 'completed' | 'rejected';
 
 /**
- * Data Subject Rights types aligned with NDPA 2023 Part IV (Sections 29-36)
+ * Data Subject Rights types aligned with NDPA 2023 Part VI (Sections 34-38)
+ * and the related provisions in Part V (Section 27 — information to the data subject)
+ * and Part X (Section 46 — complaint to the Commission).
+ *
+ * Note: These are guidance labels — not legal advice. Verify with your DPO or counsel.
  */
 /**
- * Types of data subject requests per NDPA Part IV
- * - 'information': Right to be informed (Section 29)
- * - 'access': Right of access (Section 30)
- * - 'rectification': Right to rectification (Section 31)
- * - 'erasure': Right to erasure (Section 32)
- * - 'restriction': Right to restrict processing (Section 33)
- * - 'portability': Right to data portability (Section 34)
- * - 'objection': Right to object (Section 35)
- * - 'automated_decision_making': Rights related to automated decision-making (Section 36)
+ * Types of data subject requests per NDPA Part VI
+ * - 'information': Right to be informed (Section 27 — provision of information; Section 34(1)(a))
+ * - 'access': Right of access / confirmation + data copy (Section 34(1)(a)–(b))
+ * - 'rectification': Right to rectification (Section 34(1)(c))
+ * - 'erasure': Right to erasure (Section 34(1)(d), Section 34(2))
+ * - 'restriction': Right to restrict processing (Section 34(1)(e))
+ * - 'portability': Right to data portability (Section 38)
+ * - 'objection': Right to object (Section 36)
+ * - 'automated_decision_making': Rights re. automated decisions / profiling (Section 37)
+ * - 'withdraw_consent': Right to withdraw consent (Section 35)
  */
-export declare type DSRType = 'information' | 'access' | 'rectification' | 'erasure' | 'restriction' | 'portability' | 'objection' | 'automated_decision_making';
+export declare type DSRType = 'information' | 'access' | 'rectification' | 'erasure' | 'restriction' | 'portability' | 'objection' | 'automated_decision_making' | 'withdraw_consent';
 
 declare type EffortLevel = 'low' | 'medium' | 'high';
 
@@ -1181,7 +1229,9 @@ declare interface RequestType {
     /** Description of what this request type entails */
     description: string;
     /**
-     * NDPA section reference (e.g., "Section 30" for access requests)
+     * NDPA 2023 section reference for this right
+     * (e.g., "Section 34(1)(a)" for access, "Section 38" for portability).
+     * Used for display purposes only — verify the exact subsection with counsel.
      */
     ndpaSection?: string;
     /**
@@ -1330,8 +1380,11 @@ declare interface ThirdPartyProcessor {
 }
 
 /**
- * Cross-Border Data Transfer types aligned with NDPA 2023 Part VI (Sections 41-45)
- * Personal data may only be transferred outside Nigeria under specific conditions
+ * Cross-Border Data Transfer types aligned with NDPA 2023 Part VIII (Sections 41-43).
+ * Personal data may only be transferred outside Nigeria under the bases listed in
+ * Section 41(1), where Section 42 defines adequacy and Section 43 lists derogations.
+ *
+ * Note: These are guidance labels — not legal advice. Verify with your DPO or counsel.
  */
 /**
  * Transfer mechanisms recognized under the NDPA
@@ -1878,9 +1931,10 @@ declare interface UseDSRReturn {
      */
     requests: DSRRequest[];
     /**
-     * Submit a new request
+     * Submit a new request. The hook assigns `id`, `status`, `createdAt`,
+     * `updatedAt`, and `dueDate` — pass everything else.
      */
-    submitRequest: (requestData: Omit<DSRRequest, 'id' | 'status' | 'submittedAt' | 'updatedAt' | 'estimatedCompletionDate'>) => DSRRequest;
+    submitRequest: (requestData: Omit<DSRRequest, 'id' | 'status' | 'createdAt' | 'updatedAt' | 'dueDate'>) => DSRRequest;
     /**
      * Update an existing request
      */
@@ -1892,7 +1946,12 @@ declare interface UseDSRReturn {
     /**
      * Get requests by status
      */
-    getRequestsByStatus: (status: RequestStatus) => DSRRequest[];
+    /**
+     * Filter requests by status. Accepts both the modern `DSRStatus` union and
+     * the deprecated `RequestStatus` for backward compatibility — pass the
+     * modern values (`'pending' | 'awaitingVerification' | 'inProgress' | ...`).
+     */
+    getRequestsByStatus: (status: DSRStatus | RequestStatus) => DSRRequest[];
     /**
      * Get requests by type
      */
@@ -1915,6 +1974,40 @@ declare interface UseDSRReturn {
     isLoading: boolean;
 }
 
+/**
+ * Trap keyboard focus inside a container while it is active, and restore
+ * focus to the element that was active before activation when the container
+ * deactivates. Centralises the trap/restore logic that was previously
+ * duplicated (and broken — no restore) inside ConsentBanner.
+ *
+ * @example
+ * ```tsx
+ * const ref = useFocusTrap<HTMLDivElement>({ active: isOpen, onEscape: close });
+ * return <div ref={ref}>...</div>;
+ * ```
+ */
+export declare function useFocusTrap<T extends HTMLElement = HTMLElement>(options: UseFocusTrapOptions): RefObject<T | null>;
+
+export declare interface UseFocusTrapOptions {
+    /**
+     * Whether the focus trap is active. When transitioning from false → true,
+     * the hook captures `document.activeElement` and moves focus into the
+     * container; when transitioning back to false, the captured element is
+     * re-focused (WCAG 2.4.3 — focus order).
+     */
+    active: boolean;
+    /**
+     * Optional callback fired on Escape keydown while the trap is active.
+     * Typical use is to close the surrounding dialog.
+     */
+    onEscape?: () => void;
+    /**
+     * If false, do not auto-focus the first interactive element inside the
+     * container on activation. Defaults to true.
+     */
+    autoFocus?: boolean;
+}
+
 /**
  * Hook for managing lawful basis documentation for processing activities
  * in compliance with NDPA 2023 Section 25.

package/dist/hooks.js

@@ -1,3 +1,2 @@
 "use client";
-'use strict';var chunkORFC66EA_js=require('./chunk-ORFC66EA.js'),chunkTV4U6AIS_js=require('./chunk-TV4U6AIS.js'),chunk7AVN424U_js=require('./chunk-7AVN424U.js'),chunkMCWV7S2G_js=require('./chunk-MCWV7S2G.js'),chunkM2TPT5GB_js=require('./chunk-M2TPT5GB.js');require('./chunk-Z73T6MWY.js'),require('./chunk-YPKUHSK4.js'),require('./chunk-LIM64IV2.js');var chunkS4GRSNB4_js=require('./chunk-S4GRSNB4.js');require('./chunk-CPK5D5FY.js'),require('./chunk-TDDAYVKK.js'),require('./chunk-C4YM4UMI.js'),require('./chunk-GOU6FU6Y.js');var chunk7SMLHZ4B_js=require('./chunk-7SMLHZ4B.js');require('./chunk-A4PK7JB2.js'),require('./chunk-HO5M7M4M.js');var chunkCKJAECGV_js=require('./chunk-CKJAECGV.js');require('./chunk-J5WCPZLW.js');var chunkOPYQIJKY_js=require('./chunk-OPYQIJKY.js');require('./chunk-P42Z5CFE.js');var chunkI4M2AA3N_js=require('./chunk-I4M2AA3N.js');require('./chunk-BKRETVJ6.js'),require('./chunk-ELKB2AFZ.js'),require('./chunk-MQFZHA2D.js');var react=require('react');function l({input:e}){let r=JSON.stringify(e);return react.useMemo(()=>chunkS4GRSNB4_js.a(e),[r])}Object.defineProperty(exports,"useAdaptivePolicyWizard",{enumerable:true,get:function(){return chunkORFC66EA_js.a}});Object.defineProperty(exports,"useDefaultPrivacyPolicy",{enumerable:true,get:function(){return chunkTV4U6AIS_js.b}});Object.defineProperty(exports,"usePrivacyPolicy",{enumerable:true,get:function(){return chunkTV4U6AIS_js.a}});Object.defineProperty(exports,"useLawfulBasis",{enumerable:true,get:function(){return chunk7AVN424U_js.a}});Object.defineProperty(exports,"useCrossBorderTransfer",{enumerable:true,get:function(){return chunkMCWV7S2G_js.a}});Object.defineProperty(exports,"useROPA",{enumerable:true,get:function(){return chunkM2TPT5GB_js.a}});Object.defineProperty(exports,"useConsent",{enumerable:true,get:function(){return chunk7SMLHZ4B_js.a}});Object.defineProperty(exports,"useDSR",{enumerable:true,get:function(){return chunkCKJAECGV_js.a}});Object.defineProperty(exports,"useDPIA",{enumerable:true,get:function(){return chunkOPYQIJKY_js.a}});Object.defineProperty(exports,"useBreach",{enumerable:true,get:function(){return chunkI4M2AA3N_js.a}});exports.useComplianceScore=l;//# sourceMappingURL=hooks.js.map
-//# sourceMappingURL=hooks.js.map
+'use strict';var chunkRYREGZVQ_js=require('./chunk-RYREGZVQ.js'),chunkZ763UI5U_js=require('./chunk-Z763UI5U.js'),chunkUTFBKL73_js=require('./chunk-UTFBKL73.js'),chunkHHK5LHEG_js=require('./chunk-HHK5LHEG.js'),chunk3JPDTXGC_js=require('./chunk-3JPDTXGC.js'),chunkUI536RU2_js=require('./chunk-UI536RU2.js');require('./chunk-N3MQQUQP.js'),require('./chunk-LVGT3DLT.js'),require('./chunk-QPRYXVH2.js'),require('./chunk-Q64735OC.js'),require('./chunk-WZYCBW2R.js'),require('./chunk-YFBDJ4FH.js'),require('./chunk-4CVBQC66.js');var chunkP4LNLCSF_js=require('./chunk-P4LNLCSF.js'),chunkL2VO3MEJ_js=require('./chunk-L2VO3MEJ.js');require('./chunk-7ZZO7GVB.js'),require('./chunk-B46SJB5V.js');var chunkHBLGN4SD_js=require('./chunk-HBLGN4SD.js');require('./chunk-L2BRFMVS.js');var chunkC7IDR2IV_js=require('./chunk-C7IDR2IV.js');require('./chunk-TQZWJGJ2.js');var chunkVJTQXVAF_js=require('./chunk-VJTQXVAF.js');require('./chunk-3YTAOT5O.js'),require('./chunk-ZVOIR4QH.js'),require('./chunk-VWED6UTN.js'),require('./chunk-RFPLZDIO.js');Object.defineProperty(exports,"useComplianceScore",{enumerable:true,get:function(){return chunkRYREGZVQ_js.a}});Object.defineProperty(exports,"useDefaultPrivacyPolicy",{enumerable:true,get:function(){return chunkZ763UI5U_js.b}});Object.defineProperty(exports,"usePrivacyPolicy",{enumerable:true,get:function(){return chunkZ763UI5U_js.a}});Object.defineProperty(exports,"useLawfulBasis",{enumerable:true,get:function(){return chunkUTFBKL73_js.a}});Object.defineProperty(exports,"useCrossBorderTransfer",{enumerable:true,get:function(){return chunkHHK5LHEG_js.a}});Object.defineProperty(exports,"useROPA",{enumerable:true,get:function(){return chunk3JPDTXGC_js.a}});Object.defineProperty(exports,"useAdaptivePolicyWizard",{enumerable:true,get:function(){return chunkUI536RU2_js.a}});Object.defineProperty(exports,"useConsent",{enumerable:true,get:function(){return chunkP4LNLCSF_js.a}});Object.defineProperty(exports,"useFocusTrap",{enumerable:true,get:function(){return chunkL2VO3MEJ_js.a}});Object.defineProperty(exports,"useDSR",{enumerable:true,get:function(){return chunkHBLGN4SD_js.a}});Object.defineProperty(exports,"useDPIA",{enumerable:true,get:function(){return chunkC7IDR2IV_js.a}});Object.defineProperty(exports,"useBreach",{enumerable:true,get:function(){return chunkVJTQXVAF_js.a}});

package/dist/hooks.mjs

@@ -1,3 +1,2 @@
 "use client";
-export{a as useAdaptivePolicyWizard}from'./chunk-F5TXUA4O.mjs';export{b as useDefaultPrivacyPolicy,a as usePrivacyPolicy}from'./chunk-LU7PKE7Y.mjs';export{a as useLawfulBasis}from'./chunk-E4NCJ7RD.mjs';export{a as useCrossBorderTransfer}from'./chunk-Z6IIMLZU.mjs';export{a as useROPA}from'./chunk-2AW7KAZO.mjs';import'./chunk-JFFOPHU3.mjs';import'./chunk-I557S566.mjs';import'./chunk-CKGJK4D7.mjs';import {a}from'./chunk-ABDB7LEV.mjs';import'./chunk-GRLIPT5V.mjs';import'./chunk-TXBZPCGF.mjs';import'./chunk-75TJPK2N.mjs';import'./chunk-SHMJNRHO.mjs';export{a as useConsent}from'./chunk-VWPGIES4.mjs';import'./chunk-R3OYAJI6.mjs';import'./chunk-U62QYKVG.mjs';export{a as useDSR}from'./chunk-CWHBCQGT.mjs';import'./chunk-B4Z5MBUC.mjs';export{a as useDPIA}from'./chunk-6FGCGLH5.mjs';import'./chunk-6TA2MVTU.mjs';export{a as useBreach}from'./chunk-PATONNTZ.mjs';import'./chunk-DJGS7SSN.mjs';import'./chunk-6WIP33TW.mjs';import'./chunk-WWT2ZSNU.mjs';import {useMemo}from'react';function l({input:e}){let r=JSON.stringify(e);return useMemo(()=>a(e),[r])}export{l as useComplianceScore};//# sourceMappingURL=hooks.mjs.map
-//# sourceMappingURL=hooks.mjs.map
+export{a as useComplianceScore}from'./chunk-W65ZWTLD.mjs';export{b as useDefaultPrivacyPolicy,a as usePrivacyPolicy}from'./chunk-VYAL2TGT.mjs';export{a as useLawfulBasis}from'./chunk-4G3SRVRI.mjs';export{a as useCrossBorderTransfer}from'./chunk-KDAZQO3N.mjs';export{a as useROPA}from'./chunk-RPXRPGHL.mjs';export{a as useAdaptivePolicyWizard}from'./chunk-O6CUBNXK.mjs';import'./chunk-AOHKVFAS.mjs';import'./chunk-Y3MKMAFQ.mjs';import'./chunk-EFIBHKQE.mjs';import'./chunk-RMQ7OLNY.mjs';import'./chunk-LWIKDDSU.mjs';import'./chunk-7BJXI2HI.mjs';import'./chunk-XP5PL6K7.mjs';export{a as useConsent}from'./chunk-PCU6GKBE.mjs';export{a as useFocusTrap}from'./chunk-YTU4FNM2.mjs';import'./chunk-UASG46LP.mjs';import'./chunk-PJNKQPQP.mjs';export{a as useDSR}from'./chunk-MPBPAEZC.mjs';import'./chunk-RZ6GC6WN.mjs';export{a as useDPIA}from'./chunk-H3XJV2IR.mjs';import'./chunk-LRRENTT5.mjs';export{a as useBreach}from'./chunk-3HOXQNCH.mjs';import'./chunk-WTGKZX7J.mjs';import'./chunk-ITCY2Z66.mjs';import'./chunk-DBZSN4WP.mjs';import'./chunk-ZJYULEER.mjs';