@nodii/onboarding 0.1.0-dev.0 → 0.1.0

package/dist/dynamic/index.d.ts

@@ -1,7 +1,10 @@
 import { z } from 'zod/v3';
-import { c as SpecStep, S as SpecField, T as TerminalStage, a as OnboardingSpec } from '../model-IEyDI54w.js';
+import { c as SpecStep, S as SpecField, T as TerminalStage, a as OnboardingSpec } from '../model-ESLSEbi0.js';
+import { c as ConsentState, C as ConsentController, e as ConsentSubmitDocument } from '../controller-BQb62D0N.js';
+export { a as ConsentDocState, b as ConsentEvidence, d as ConsentStateListener, S as SCROLL_END_THRESHOLD, f as createConsentController, i as initialGateSatisfied } from '../controller-BQb62D0N.js';
 import { FieldError } from '../form/index.js';
-import '../schema-TfyBU6JW.js';
+import '../model-mnjAEtKe.js';
+import '../schema-BrXb9gnh.js';
 
 /**
  * Spec → Zod validator derivation (D540 §3).
@@ -88,7 +91,9 @@ interface SignupConsent {
 }
 interface SignupCredentials {
     email: string;
-    password: string;
+    displayName: string;
+    organisationName: string;
+    subdomain: string;
 }
 interface SignupStepperState {
     /** Zero-based index of the current step. */
@@ -113,6 +118,22 @@ interface SignupStepperState {
     specVersion: string;
     /** Set on success from the submit response. */
     terminalStage: TerminalStage | null;
+    /**
+     * D543 ConsentPack state (per-document acceptance + gates). Empty
+     * (documents:[]) when the spec serves no consentPack — the consent stage is
+     * then skipped and does not gate the submit.
+     */
+    consentState: ConsentState;
+    /**
+     * True after a 409 consent_stale swap until the user re-accepts the changed
+     * docs. Distinct from specStale — a doc-version bump does not necessarily
+     * change the form fields, and the banner copy differs.
+     */
+    consentStale: boolean;
+    /** Keys of the consent docs whose acceptance was reset by the last swap. */
+    staleConsentKeys: string[];
+    /** Consent-stage errors (submit-time; e.g. a required doc not accepted). */
+    consentErrors: FieldError[];
 }
 type SignupStepperListener = (state: SignupStepperState) => void;
 interface SignupStepperControl {
@@ -120,6 +141,14 @@ interface SignupStepperControl {
     setAnswer(key: string, value: unknown): void;
     setConsent(consent: Partial<SignupConsent>): void;
     setCredentials(credentials: Partial<SignupCredentials>): void;
+    /**
+     * The headless ConsentPack controller (D543 §5). Exposed so the default
+     * component layer AND fully custom tenant UIs drive the SAME state: mark
+     * scroll/open evidence, set acceptance, read per-doc gate status. The
+     * stepper subscribes to it internally so consent mutations re-emit stepper
+     * state (consentState/consentStale) to the widget.
+     */
+    readonly consent: ConsentController;
     /** Validate ONLY the current step. Returns true when clean. */
     validateStep(): boolean;
     /** Validate current step; advance when clean. Returns true if advanced. */
@@ -135,6 +164,11 @@ interface SignupStepperControl {
     /**
      * The submit payload body (minus botToken, which the transport attaches).
      * Call ONLY after validateAll() returns true.
+     *
+     * D543 §4: `consent.documents` is the per-doc consent array built from the
+     * ACTUAL consent state (omitted when the spec serves no consentPack). The
+     * booleans stay as the derived convenience. THROWS if any required consent
+     * doc is not accepted at its gate (never fabricates acceptance).
      */
     buildSubmitPayload(): {
         specVersion: string;
@@ -143,17 +177,34 @@ interface SignupStepperControl {
         consent: {
             tosAccepted: true;
             privacyAccepted: true;
+            documents?: ConsentSubmitDocument[];
+        };
+        credentials: {
+            email: string;
+            displayName?: string;
         };
-        credentials: SignupCredentials;
+        organisationName?: string;
+        subdomain: string;
     };
     /**
      * Swap in a refetched spec after 409 spec_stale. Drops answers for
      * removed fields, re-validates the rest, marks specStale, repositions
-     * to the first step with errors. NEVER auto-resubmits.
+     * to the first step with errors. ALSO swaps the consentPack (a spec bump
+     * may carry new doc versions) — changed docs require re-acceptance. NEVER
+     * auto-resubmits.
      */
     applyNewSpec(spec: OnboardingSpec): void;
     /** Clear the specStale flag once the user has re-confirmed. */
     acknowledgeSpecStale(): void;
+    /**
+     * Swap in the refetched spec's consentPack after 409 consent_stale (D543
+     * §4). Resets acceptance for docs whose version/hash changed (re-acceptance
+     * required — NEVER auto-accept a changed doc), marks consentStale, records
+     * which keys were reset. NEVER auto-resubmits.
+     */
+    applyNewConsentPack(spec: OnboardingSpec): void;
+    /** Clear the consentStale flag once the user has re-accepted. */
+    acknowledgeConsentStale(): void;
     setSubmitting(): void;
     setSuccess(terminalStage: TerminalStage): void;
     setError(message: string): void;
@@ -181,4 +232,4 @@ interface SignupStepperControl {
  */
 declare function createSignupStepper(spec: OnboardingSpec): SignupStepperControl;
 
-export { type SignupConsent, type SignupCredentials, type SignupStepperControl, type SignupStepperListener, type SignupStepperState, type StepperStatus, createSignupStepper, deriveAnswersSchema, deriveFieldSchema, deriveStepSchema, optionValue };
+export { ConsentController, ConsentState, ConsentSubmitDocument, type SignupConsent, type SignupCredentials, type SignupStepperControl, type SignupStepperListener, type SignupStepperState, type StepperStatus, createSignupStepper, deriveAnswersSchema, deriveFieldSchema, deriveStepSchema, optionValue };

package/dist/dynamic/index.js

@@ -1,4 +1,6 @@
-import '../chunk-ZDY2I6KY.js';
-export { createSignupStepper, deriveAnswersSchema, deriveFieldSchema, deriveStepSchema, optionValue } from '../chunk-4SWOVHZ2.js';
+import '../chunk-JFDQZ3AC.js';
+export { createSignupStepper, deriveAnswersSchema, deriveFieldSchema, deriveStepSchema, optionValue } from '../chunk-KQTS47FC.js';
+export { SCROLL_END_THRESHOLD, createConsentController, initialGateSatisfied } from '../chunk-AZE3NPSY.js';
+import '../chunk-U56GQITG.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/errors-vJkye4a0.d.ts

@@ -0,0 +1,110 @@
+/**
+ * Error taxonomy for the onboarding submit client.
+ *
+ * Maps HTTP status codes and server error bodies to typed errors:
+ *   403 bot_challenge_failed  → OnboardingBotChallengeError
+ *   409 spec_stale (SUBMIT)   → OnboardingSpecStaleError  (submit endpoint only,
+ *                               body { error:true, code:"spec_stale",
+ *                               currentSpecVersion })
+ *   409 (other / LEADS)       → OnboardingConflictError    (generic conflict)
+ *   429                       → OnboardingRateLimitError
+ *   5xx                       → OnboardingServerError (retryable)
+ *   network / timeout         → OnboardingNetworkError
+ */
+type OnboardingErrorKind = "bot_challenge_failed" | "spec_stale" | "spec_invalid" | "consent_stale" | "consent_incomplete" | "subdomain_taken" | "conflict" | "rate_limited" | "server_error" | "network_error" | "validation_error";
+declare class OnboardingError extends Error {
+    readonly kind: OnboardingErrorKind;
+    readonly statusCode: number | null;
+    constructor(kind: OnboardingErrorKind, message: string, statusCode?: number | null);
+}
+declare class OnboardingBotChallengeError extends OnboardingError {
+    constructor(message?: string);
+}
+/**
+ * A 409 that is NOT spec_stale. On the /leads path there is no spec_stale
+ * concept (the payload carries no specVersion); on /submit, a 409 that
+ * lacks `code:"spec_stale"` also lands here. Distinct from
+ * OnboardingSpecStaleError so headless consumers switching on `kind` get the
+ * correct diagnosis (a generic conflict, e.g. a D538 same-key concurrent
+ * race) rather than a "form has been updated, refresh" recovery message.
+ */
+declare class OnboardingConflictError extends OnboardingError {
+    constructor(statusCode?: number, message?: string);
+}
+declare class OnboardingSubdomainTakenError extends OnboardingError {
+    constructor();
+}
+declare class OnboardingRateLimitError extends OnboardingError {
+    readonly retryAfterSeconds: number | null;
+    constructor(retryAfterSeconds?: number | null);
+}
+/**
+ * A /submit 409 whose body carries `code:"spec_stale"` (D540 reject-stale).
+ * The PINNED body shape (confirmed against the crm intake) is exactly:
+ *   { error: true, code: "spec_stale", currentSpecVersion: string }
+ * The version is read ONLY from `currentSpecVersion` — no field hedging.
+ * Submit-endpoint only; /leads 409s are OnboardingConflictError.
+ */
+declare class OnboardingSpecStaleError extends OnboardingError {
+    readonly currentSpecVersion: string;
+    constructor(currentSpecVersion: string);
+}
+/**
+ * A /submit 409 whose body carries `code:"consent_stale"` (D543 §4 —
+ * SIBLING to spec_stale). Raised when a required legal document's live
+ * version/content_hash changed between spec-fetch and submit, so the echoed
+ * consent no longer matches the live version.
+ *
+ * PINNED body shape (D543 §4, mirroring spec_stale):
+ *   { error: true, code: "consent_stale", staleDocuments?: [...] }
+ * where each staleDocuments entry identifies a changed doc so the caller can
+ * tell the user WHICH docs changed. The caller refetches the spec and
+ * REQUIRES re-acceptance of the changed docs — the SDK NEVER auto-accepts a
+ * changed doc (D543 §4). Submit-endpoint only.
+ */
+interface StaleConsentDocument {
+    /** The server registry id of the changed doc (D543 §3 legal_documents.id). */
+    legalDocumentId?: string;
+    /** doc_type of the changed doc, when the server includes it. */
+    docType?: string;
+    /** The new live version_no, when the server includes it. */
+    currentVersionNo?: number;
+}
+declare class OnboardingConsentStaleError extends OnboardingError {
+    /**
+     * The documents the server reports as changed (may be empty when the
+     * server does not enumerate them — the caller then refetches + diffs).
+     */
+    readonly staleDocuments: StaleConsentDocument[];
+    constructor(staleDocuments?: StaleConsentDocument[]);
+}
+/**
+ * A /submit 400 whose body carries `code:"consent_incomplete"` (D543 §4).
+ * The server's authoritative re-validation found a required live document
+ * that was missing, not accepted, or whose evidence did not satisfy its
+ * acceptance_level gate. Distinct from a generic 422 so headless consumers
+ * switching on `kind` route the user back to the consent step specifically.
+ */
+declare class OnboardingConsentIncompleteError extends OnboardingError {
+    constructor(message?: string);
+}
+declare class OnboardingServerError extends OnboardingError {
+    constructor(statusCode: number, message?: string);
+}
+declare class OnboardingNetworkError extends OnboardingError {
+    constructor(cause?: unknown);
+}
+declare class OnboardingValidationError extends OnboardingError {
+    constructor(message: string);
+}
+/**
+ * The spec endpoint returned a body that does not conform to the LOCKED
+ * D540 §1 response shape. This is a server-side contract violation — the
+ * SDK refuses to render a form from a malformed spec (a half-parsed spec
+ * could silently drop required fields).
+ */
+declare class OnboardingSpecInvalidError extends OnboardingError {
+    constructor(detail: string);
+}
+
+export { OnboardingBotChallengeError as O, type StaleConsentDocument as S, OnboardingConflictError as a, OnboardingConsentIncompleteError as b, OnboardingConsentStaleError as c, OnboardingError as d, type OnboardingErrorKind as e, OnboardingNetworkError as f, OnboardingRateLimitError as g, OnboardingServerError as h, OnboardingSpecInvalidError as i, OnboardingSpecStaleError as j, OnboardingSubdomainTakenError as k, OnboardingValidationError as l };

package/dist/form/index.d.ts

@@ -1,5 +1,5 @@
-import { C as ContactFormValues } from '../schema-TfyBU6JW.js';
-export { L as LeadsWirePayload, c as contactFormSchema, l as leadsWireSchema, v as validateContactForm, a as validateLeadsPayload } from '../schema-TfyBU6JW.js';
+import { C as ContactFormValues } from '../schema-BrXb9gnh.js';
+export { L as LeadsWirePayload, c as contactFormSchema, l as leadsWireSchema, v as validateContactForm, a as validateLeadsPayload } from '../schema-BrXb9gnh.js';
 import 'zod/v3';
 
 /**

package/dist/form/index.js

@@ -1,5 +1,5 @@
 import '../chunk-JFIONONR.js';
-export { createContactFormState } from '../chunk-AFCJLUPK.js';
-export { contactFormSchema, leadsWireSchema, validateContactForm, validateLeadsPayload } from '../chunk-BIFANV7M.js';
+export { createContactFormState } from '../chunk-U6AXKGYQ.js';
+export { contactFormSchema, leadsWireSchema, validateContactForm, validateLeadsPayload } from '../chunk-SIMLMQPT.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/index-Dqfa890U.d.ts

@@ -0,0 +1,83 @@
+import { C as ConsentController } from './controller-BQb62D0N.js';
+import { b as ConsentDocument } from './model-mnjAEtKe.js';
+
+/**
+ * Default ConsentPack document viewer (D543 §5) — @nodii/onboarding/viewer.
+ *
+ * A SEPARATE, opt-in module built on STANDARD libraries so the base SDK stays
+ * lean: consumers only pay for the viewer if they render our default consent
+ * components. The headless controller (@nodii/onboarding/consent) knows nothing
+ * about this — it just receives reportScrollProgress / markScrolledToEnd /
+ * markOpened from whatever renders the doc.
+ *
+ * Renderers (per fetched artifact — NO IFRAME anywhere; everything is inline,
+ * same-origin, so `scroll_then_accept` scroll tracking is REAL):
+ *   - text/html  → sanitize with DOMPurify, inject into a scroll <div>.
+ *   - markdown   → marked → DOMPurify → inject into a scroll <div>.
+ *   - text/plain → escaped text (textContent) in a scroll <div>.
+ *   - application/pdf → PDF.js (pdfjs-dist), rendered to <canvas> + a text
+ *     layer, page by page, in a scroll <div>. PDF.js is LAZY-loaded via a
+ *     dynamic import() ONLY when a PDF doc is actually present, so it never
+ *     bloats the base bundle.
+ *
+ * The scroll container's scroll-to-end (and the PDF/open fallbacks) drive the
+ * consent controller so the gate works for real. A failed fetch/render
+ * degrades to an "open in a new tab" affordance (marks the doc opened /
+ * scrolled) so every doc stays consentable.
+ *
+ * Bundle discipline: DOMPurify + marked are imported at module top (this is
+ * the VIEWER entry, not the base SDK — the base `@nodii/onboarding` never
+ * statically imports this file). pdfjs-dist is imported ONLY via dynamic
+ * import() inside renderPdf, so even the viewer entry doesn't eagerly load it.
+ */
+
+interface ConsentDocumentViewerOptions {
+    /** Injectable fetch for the presigned artifact GET (defaults to global). */
+    fetch?: typeof globalThis.fetch;
+    /** Per-request timeout in ms (default from fetchDocumentContent). */
+    timeoutMs?: number;
+    /**
+     * The `key` the controller identifies this document by (doc_type |
+     * custom:<key>). The viewer reports scroll/open evidence under this key.
+     */
+    consentKey: string;
+}
+/** Result of rendering — lets the caller know how the doc was displayed. */
+interface ConsentDocumentViewerResult {
+    /**
+     * How the artifact was rendered.
+     *
+     * - html | markdown | text | pdf → rendered inline (gate is driven by real
+     *   scroll/open).
+     * - open-affordance → an `open_then_accept` doc that opens in a new tab (the
+     *   real-open IS its gate; satisfies ONLY `opened`).
+     * - unrenderable → a GATED doc (scroll_then_accept) that could NOT be
+     *   rendered inline. The gate stays UNSATISFIABLE — accept is disabled and a
+     *   clear error is shown. NO evidence is ever fabricated (COMPLIANCE, D543).
+     */
+    renderedAs: "html" | "markdown" | "text" | "pdf" | "open-affordance" | "unrenderable";
+}
+/**
+ * Fetch + render a consent document INLINE into `container`, wiring its scroll
+ * container (or the legitimate open-affordance) to the consent controller so
+ * `scroll_then_accept` / `open_then_accept` gates work for real. NO iframe.
+ *
+ * On ANY inline-render failure for a `scroll_then_accept` doc the gate stays
+ * UNSATISFIABLE (never fabricates scrolled_to_end, D543 §5 COMPLIANCE) — the
+ * caller's Retry re-invokes this.
+ *
+ * @returns how the doc was rendered (for the caller's telemetry/UX).
+ */
+declare function renderConsentDocument(container: HTMLElement, doc: ConsentDocument, control: ConsentController, options: ConsentDocumentViewerOptions): Promise<ConsentDocumentViewerResult>;
+/** Reset the module-level pdf-worker latch (tests). */
+declare function _resetPdfWorkerState(): void;
+
+type ___viewer_render_js_ConsentDocumentViewerOptions = ConsentDocumentViewerOptions;
+type ___viewer_render_js_ConsentDocumentViewerResult = ConsentDocumentViewerResult;
+declare const ___viewer_render_js__resetPdfWorkerState: typeof _resetPdfWorkerState;
+declare const ___viewer_render_js_renderConsentDocument: typeof renderConsentDocument;
+declare namespace ___viewer_render_js {
+  export { type ___viewer_render_js_ConsentDocumentViewerOptions as ConsentDocumentViewerOptions, type ___viewer_render_js_ConsentDocumentViewerResult as ConsentDocumentViewerResult, ___viewer_render_js__resetPdfWorkerState as _resetPdfWorkerState, ___viewer_render_js_renderConsentDocument as renderConsentDocument };
+}
+
+export { type ConsentDocumentViewerOptions as C, ___viewer_render_js as _, type ConsentDocumentViewerResult as a, _resetPdfWorkerState as b, renderConsentDocument as r };

package/dist/index.d.ts

@@ -1,10 +1,16 @@
-export { C as ContactFormValues, L as LeadsWirePayload, c as contactFormSchema, l as leadsWireSchema, v as validateContactForm, a as validateLeadsPayload } from './schema-TfyBU6JW.js';
+export { C as ContactFormValues, L as LeadsWirePayload, c as contactFormSchema, l as leadsWireSchema, v as validateContactForm, a as validateLeadsPayload } from './schema-BrXb9gnh.js';
 export { ContactFormControl, ContactFormState, ContactFormStateListener, FieldError, FormStatus, createContactFormState } from './form/index.js';
-export { F as FIELD_KEY_PATTERN, O as OnboarderTier, a as OnboardingSpec, P as PiiClass, S as SpecField, b as SpecStage, c as SpecStep, T as TerminalStage, o as onboardingSpecSchema, s as specFieldSchema, d as specStepSchema, v as validateOnboardingSpec } from './model-IEyDI54w.js';
-export { OnboardingSpecCache, SpecFetchOptions, SpecFieldDiff, defaultSpecCache, diffSpecFields, fetchOnboardingSpec } from './spec/index.js';
+export { F as FIELD_KEY_PATTERN, O as OnboarderTier, a as OnboardingSpec, P as PiiClass, S as SpecField, b as SpecStage, c as SpecStep, T as TerminalStage, o as onboardingSpecSchema, s as specFieldSchema, d as specStepSchema, v as validateOnboardingSpec } from './model-ESLSEbi0.js';
+export { A as ACCEPTANCE_LEVELS, a as AcceptanceLevel, C as ConsentDocType, b as ConsentDocument, c as ConsentPack, D as DOC_TYPES, d as acceptanceLevelSchema, e as consentDocKey, f as consentDocumentSchema, g as consentPackSchema } from './model-mnjAEtKe.js';
+export { O as OnboardingSpecCache, S as SpecFetchOptions, a as SpecFieldDiff, d as defaultSpecCache, b as diffSpecFields, f as fetchOnboardingSpec } from './client-CqE2dF9A.js';
+export { PinStateResult, fetchPinState } from './spec/index.js';
 export { SignupConsent, SignupCredentials, SignupStepperControl, SignupStepperListener, SignupStepperState, StepperStatus, createSignupStepper, deriveAnswersSchema, deriveFieldSchema, deriveStepSchema, optionValue } from './dynamic/index.js';
-export { B as BotTokenSource, L as LeadsSubmitOptions, a as LeadsSubmitResult, S as SignupSubmitBody, b as SignupSubmitOptions, c as SignupSubmitResult, d as SignupWirePayload, e as computePayloadFingerprint, f as computeSignupFingerprint, g as generateIdempotencyKey, r as resolveBotToken, s as signupWireSchema, h as submitLead, i as submitSignup } from './signup-client-Bl6eUrxR.js';
-export { DEFAULT_REQUEST_TIMEOUT_MS, OnboardingBotChallengeError, OnboardingConflictError, OnboardingError, OnboardingErrorKind, OnboardingNetworkError, OnboardingRateLimitError, OnboardingServerError, OnboardingSpecInvalidError, OnboardingSpecStaleError, OnboardingValidationError, fetchWithTimeout, withTimeout } from './submit/index.js';
+export { C as ConsentController, a as ConsentDocState, b as ConsentEvidence, c as ConsentState, d as ConsentStateListener, e as ConsentSubmitDocument, S as SCROLL_END_THRESHOLD, f as createConsentController, i as initialGateSatisfied } from './controller-BQb62D0N.js';
+export { ConsentDocumentKind, FetchDocumentContentOptions, FetchedConsentDocument, OnboardingDocumentFetchError, fetchDocumentContent } from './consent/index.js';
+export { B as BotTokenSource, L as LeadsSubmitOptions, a as LeadsSubmitResult, S as SignupSubmitBody, b as SignupSubmitOptions, c as SignupSubmitResult, d as SignupWirePayload, e as computePayloadFingerprint, f as computeSignupFingerprint, g as consentSubmitDocumentSchema, h as generateIdempotencyKey, r as resolveBotToken, s as signupWireSchema, i as submitLead, j as submitSignup } from './signup-client-BL5DfarJ.js';
+export { DEFAULT_REQUEST_TIMEOUT_MS, fetchWithTimeout, withTimeout } from './submit/index.js';
+export { O as OnboardingBotChallengeError, a as OnboardingConflictError, b as OnboardingConsentIncompleteError, c as OnboardingConsentStaleError, d as OnboardingError, e as OnboardingErrorKind, f as OnboardingNetworkError, g as OnboardingRateLimitError, h as OnboardingServerError, i as OnboardingSpecInvalidError, j as OnboardingSpecStaleError, k as OnboardingSubdomainTakenError, l as OnboardingValidationError, S as StaleConsentDocument } from './errors-vJkye4a0.js';
 export { RecaptchaError, RecaptchaErrorKind, RecaptchaLoadOptions, _resetRecaptchaState, executeRecaptcha, loadRecaptcha } from './recaptcha/index.js';
-export { ContactFormMountOptions, DEFAULT_WIDGET_CSS, MountedWidget, OnboardingWidget, SignupFormMountOptions, WidgetMountOptions, cssEscape, idSelector, injectWidgetStyles, mountContactForm, mountSignupForm } from './widget/index.js';
+export { ConsentStepRenderOptions, ContactFormMountOptions, DEFAULT_WIDGET_CSS, MountedWidget, OnboardingWidget, SignupFormMountOptions, WidgetMountOptions, consentDocElementId, cssEscape, idSelector, injectWidgetStyles, mountContactForm, mountSignupForm, renderConsentStep, updateConsentStep } from './widget/index.js';
 import 'zod/v3';
+import './index-Dqfa890U.js';

package/dist/index.js

@@ -1,14 +1,18 @@
+export { DEFAULT_WIDGET_CSS, OnboardingWidget, consentDocElementId, cssEscape, idSelector, injectWidgetStyles, mountContactForm, mountSignupForm, renderConsentStep, updateConsentStep } from './chunk-IPAKPLIF.js';
 import './chunk-JFIONONR.js';
-import './chunk-ZDY2I6KY.js';
+export { createContactFormState } from './chunk-U6AXKGYQ.js';
+export { FIELD_KEY_PATTERN, OnboardingSpecCache, defaultSpecCache, diffSpecFields, fetchOnboardingSpec, fetchPinState, onboardingSpecSchema, specFieldSchema, specStepSchema, validateOnboardingSpec } from './chunk-F75ZJERM.js';
+import './chunk-JFDQZ3AC.js';
+export { createSignupStepper, deriveAnswersSchema, deriveFieldSchema, deriveStepSchema, optionValue } from './chunk-KQTS47FC.js';
+import './chunk-FIRSA7EH.js';
+export { SCROLL_END_THRESHOLD, createConsentController, initialGateSatisfied } from './chunk-AZE3NPSY.js';
+export { ACCEPTANCE_LEVELS, DOC_TYPES, acceptanceLevelSchema, consentDocKey, consentDocumentSchema, consentPackSchema } from './chunk-U56GQITG.js';
+export { OnboardingDocumentFetchError, fetchDocumentContent } from './chunk-SEKNVHD3.js';
 import './chunk-Z4PA6C2Z.js';
+export { computePayloadFingerprint, computeSignupFingerprint, consentSubmitDocumentSchema, generateIdempotencyKey, resolveBotToken, signupWireSchema, submitLead, submitSignup } from './chunk-BMQINH6O.js';
+export { contactFormSchema, leadsWireSchema, validateContactForm, validateLeadsPayload } from './chunk-SIMLMQPT.js';
+export { DEFAULT_REQUEST_TIMEOUT_MS, OnboardingBotChallengeError, OnboardingConflictError, OnboardingConsentIncompleteError, OnboardingConsentStaleError, OnboardingError, OnboardingNetworkError, OnboardingRateLimitError, OnboardingServerError, OnboardingSpecInvalidError, OnboardingSpecStaleError, OnboardingSubdomainTakenError, OnboardingValidationError, fetchWithTimeout, withTimeout } from './chunk-XJTJPBJB.js';
 import './chunk-VH6FWDWI.js';
-export { DEFAULT_WIDGET_CSS, OnboardingWidget, cssEscape, idSelector, injectWidgetStyles, mountContactForm, mountSignupForm } from './chunk-SWMIIUXR.js';
-export { createContactFormState } from './chunk-AFCJLUPK.js';
-export { FIELD_KEY_PATTERN, OnboardingSpecCache, defaultSpecCache, diffSpecFields, fetchOnboardingSpec, onboardingSpecSchema, specFieldSchema, specStepSchema, validateOnboardingSpec } from './chunk-34BQX2KR.js';
-export { createSignupStepper, deriveAnswersSchema, deriveFieldSchema, deriveStepSchema, optionValue } from './chunk-4SWOVHZ2.js';
-export { computePayloadFingerprint, computeSignupFingerprint, generateIdempotencyKey, resolveBotToken, signupWireSchema, submitLead, submitSignup } from './chunk-BQCTDU5V.js';
-export { contactFormSchema, leadsWireSchema, validateContactForm, validateLeadsPayload } from './chunk-BIFANV7M.js';
-export { DEFAULT_REQUEST_TIMEOUT_MS, OnboardingBotChallengeError, OnboardingConflictError, OnboardingError, OnboardingNetworkError, OnboardingRateLimitError, OnboardingServerError, OnboardingSpecInvalidError, OnboardingSpecStaleError, OnboardingValidationError, fetchWithTimeout, withTimeout } from './chunk-AW7W3HAC.js';
 export { RecaptchaError, _resetRecaptchaState, executeRecaptcha, loadRecaptcha } from './chunk-7NS7ENJV.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map