@tesouro/embedded-components-react 0.2.264 → 0.2.267

package/README.md

@@ -183,9 +183,11 @@ listed here.
 
 ### AcceptDisclosuresWidget
 
-A self-contained widget for reviewing and accepting required banking disclosures during the **pre-auth invite flow**. Renders an inline bordered card with disclosure links, an agreement checkbox, and an Accept action. You supply the four bank-issued document URLs via `disclosureLinks`; the provider attribution and agreement copy come from the widget init tenant identity.
+A self-contained widget for reviewing and accepting required banking disclosures. Renders an inline bordered card with disclosure links, an agreement checkbox, and an Accept action. You supply the four bank-issued document URLs via `disclosureLinks`; the provider attribution and agreement copy come from the widget init tenant identity.
 
-Accept posts `POST /api/widget-gateway/disclosure-acceptance` after reading the disclosure version in force from `GET /identity/v1/disclosures` (hosts rewrite that onto `/api/widget-gateway/proxy/identity/v1/disclosures` the same way as other identity calls — do not call the generated catch-all proxy helper, which percent-encodes path slashes and surfaces as a browser CORS error). `version` may be `null` when the org's requirement is `NOT_REQUIRED`; that value is posted through and ignored by the gateway so invitees in those orgs can still activate. Pass `invitationToken` and `userId` so the disclosures lookup can reject a revoked/expired invite before activation. The accept is one transaction: it activates the invitee and records disclosure acceptance together, so a failed second hop cannot leave an `ACTIVE` user with no acceptance on record. After accept succeeds, the widget awaits any async `onAccepted` continuation, then kicks a widget-init refresh so host gates keyed on `INVITED` can clear. Accept and `onAccepted` failures are handled separately — a rejected host continuation does not look like (or re-run) a failed gateway accept. The refresh is fire-and-forget and runs only after `onAccepted` settles — hosts that unmount this widget when status leaves `INVITED` would otherwise hide a rejected continuation. Auth uses the normal `widgetToken` provider contract — **never** pass an application (APP) / M2M bearer as `widgetToken`. The host must pass `invitationToken` and `userId` from the invite link — this widget does not read URL search params.
+**Two flows, one surface.** In the **pre-auth invite flow**, pass `invitationToken` and `userId` from the invite link. For an **already-active user who owes a re-acceptance** — a new disclosure version was published, so widget init reports `disclosuresRequired: 'REQUIRED'` with `disclosuresAccepted: false` — pass neither: they hold no invite, and the widget token identifies them on both calls. Read those two init fields rather than `status` to decide whether to mount this widget, because an active user can owe an acceptance while never being invited again.
+
+Accept posts `POST /api/widget-gateway/disclosure-acceptance` after reading the disclosure version in force from `GET /identity/v1/disclosures` (hosts rewrite that onto `/api/widget-gateway/proxy/identity/v1/disclosures` the same way as other identity calls — do not call the generated catch-all proxy helper, which percent-encodes path slashes and surfaces as a browser CORS error). `version` may be `null` when the org's requirement is `NOT_REQUIRED`; that value is posted through and ignored by the gateway so invitees in those orgs can still activate. When you pass the invite credential, the disclosures lookup can reject a revoked/expired invite before activation. The accept is one transaction: it activates the invitee and records disclosure acceptance together, so a failed second hop cannot leave an `ACTIVE` user with no acceptance on record. After accept succeeds, the widget awaits any async `onAccepted` continuation, then kicks a widget-init refresh so host gates keyed on `INVITED` — or on the disclosure flags — can clear. Accept and `onAccepted` failures are handled separately — a rejected host continuation does not look like (or re-run) a failed gateway accept. The refresh is fire-and-forget and runs only after `onAccepted` settles — hosts that unmount this widget when status leaves `INVITED` would otherwise hide a rejected continuation. Auth uses the normal `widgetToken` provider contract — **never** pass an application (APP) / M2M bearer as `widgetToken`. In the invite flow, the host passes `invitationToken` and `userId` from the invite link; this widget does not read URL search params.
 
 The widget carries no document URLs of its own — disclosures are bank-issued legal instruments whose hosting is yours to control, and an embeddable library must not depend on infrastructure your content-security policy cannot see. It renders nothing until `disclosureLinks` is supplied and init resolves a `bankName`; it never substitutes another tenant's legal copy. If init omits `vspName`, provider attribution falls back to the bank name so the sentence remains complete.
 
@@ -193,10 +195,10 @@ Once the atomic accept _and_ any async `onAccepted` continuation succeed, the ch
 
 #### Props
 
-| Prop              | Type     | Default | Description                                                                                                                    |
-| ----------------- | -------- | ------- | ------------------------------------------------------------------------------------------------------------------------------ |
-| `invitationToken` | `string` | —       | **Required.** Invitation token from the invite link (`code` query param). Bound into the disclosures lookup before activation. |
-| `userId`          | `string` | —       | **Required.** Invited user id from the invite link (`userId` query param). Paired with `invitationToken`.                      |
+| Prop              | Type     | Default     | Description                                                                                                      |
+| ----------------- | -------- | ----------- | ---------------------------------------------------------------------------------------------------------------- |
+| `invitationToken` | `string` | `undefined` | Invitation token from the invite link (`code` query param). Bound into the disclosures lookup before activation. |
+| `userId`          | `string` | `undefined` | Invited user id from the invite link (`userId` query param). Paired with `invitationToken`.                      |
 
 | Prop              | Type                                     | Default | Description                                                                                                                                             |
 | ----------------- | ---------------------------------------- | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- |

package/dist/experimental/WidgetSuite.d.ts

@@ -10,6 +10,11 @@ import { FallbackProps } from 'react-error-boundary';
 interface WidgetSuiteShellLabels {
     /** Names the section menu for assistive technology. */
     navAriaLabel: string;
+    /**
+     * Announces the placeholder shell while the caller resolves which sections
+     * exist. Read out in place of the menu, which has no items yet to name.
+     */
+    loadingAriaLabel: string;
     /** Shown in place of the menu when the caller supplies no sections. */
     emptyState: {
         title: string;
@@ -590,6 +595,23 @@ interface WidgetProviderProps extends WidgetProviderBaseProps {
     onError?: (error: unknown, info: ErrorInfo) => void;
 }
 
+/**
+ * The four disclosure documents a host supplies. Keyed rather than a free-form
+ * array because `agreementTextTemplate` names exactly these four instruments —
+ * an arbitrary-length list would let the rendered links and the text the user
+ * agrees to disagree with each other.
+ *
+ * URLs are host-supplied on purpose: they are bank-issued legal documents whose
+ * hosting is the integrator's concern, and a published package must not carry a
+ * Tesouro infrastructure URL a consumer's CSP can block (PLAT-1179).
+ */
+interface AcceptDisclosuresLinks {
+    termsOfUseUrl: string;
+    privacyPolicyUrl: string;
+    electronicCommunicationsAgreementUrl: string;
+    usaPatriotActUrl: string;
+}
+
 /**
  * The sections the suite can offer, declared in the default menu order
  * (EMBD-4875). Order here is documentation only — the suite renders whatever
@@ -663,10 +685,52 @@ interface WidgetSuiteContentLabels {
         expensesUnavailable: string;
     };
 }
+/**
+ * Copy for the states where the suite cannot prove it may show normal content.
+ *
+ * Both are places the gate cannot proceed, and neither is reachable by a correct
+ * integration against a healthy API.
+ */
+interface WidgetSuiteDisclosureLabels {
+    /**
+     * The first init fetch failed before the disclosure flags were known. The suite
+     * must fail closed here, because an unknown requirement is not permission to
+     * show ungated sections.
+     */
+    initFailedState: {
+        title: string;
+        body: string;
+        retryButton: string;
+    };
+    /**
+     * The acceptance was recorded and the init refresh that clears the gate
+     * failed, so only our view of it is stale.
+     *
+     * The failure is the title and the reassurance is the body, in that order on
+     * purpose: `ErrorState` puts a destructive-toned glyph above the title, so
+     * leading with "accepted" reads at a glance as the acceptance having failed —
+     * the one thing this state must not imply, since a user who believes that will
+     * try to accept again.
+     */
+    refreshFailedState: {
+        title: string;
+        body: string;
+        retryButton: string;
+    };
+    /**
+     * Acceptance is owed and the host supplied no documents to accept. A host
+     * misconfiguration, so it names no cause the user could act on.
+     */
+    unavailableState: {
+        title: string;
+        body: string;
+    };
+}
 /** Named as the shipped white-label header names them. */
 declare const WIDGET_SUITE_SECTION_LABELS_EN: WidgetSuiteSectionLabels;
 declare const WIDGET_SUITE_SECTION_TITLE_LABELS_EN: WidgetSuiteSectionTitleLabels;
 declare const WIDGET_SUITE_CONTENT_LABELS_EN: WidgetSuiteContentLabels;
+declare const WIDGET_SUITE_DISCLOSURE_LABELS_EN: WidgetSuiteDisclosureLabels;
 
 interface WidgetSuiteProps extends WidgetProviderProps {
     /**
@@ -682,6 +746,21 @@ interface WidgetSuiteProps extends WidgetProviderProps {
      * this is the host's ceiling rather than a promise of what renders.
      */
     sections: readonly WidgetSuiteSectionId[];
+    /**
+     * URLs of the bank-issued disclosure documents, for the acceptance state.
+     *
+     * Required only to *render* that state, and only reached when the session owes
+     * an acceptance — an organization whose requirement is `NOT_REQUIRED` never
+     * needs this. Host-supplied for the same reason `AcceptDisclosuresWidget` takes
+     * them: they are bank-issued legal instruments whose hosting is the
+     * integrator's to control, and a published package must not carry a URL a
+     * consumer's content-security policy can block (PLAT-1179).
+     *
+     * A session that owes an acceptance with none of these supplied gets the
+     * unavailable notice, not the suite — the gate is never dropped because the
+     * host under-configured it.
+     */
+    disclosureLinks?: AcceptDisclosuresLinks;
     /** Overrides for the shell's own copy — the nav landmark name, empty state. */
     labels?: PartialDeep<WidgetSuiteShellLabels>;
     /** Overrides for the section names in the menu. */
@@ -696,6 +775,11 @@ interface WidgetSuiteProps extends WidgetProviderProps {
      * and the Expenses placeholder.
      */
     contentLabels?: PartialDeep<WidgetSuiteContentLabels>;
+    /**
+     * Overrides for the copy the disclosure gate owns: its refresh-failure recovery
+     * and its unavailable notice. The acceptance surface carries its own labels.
+     */
+    disclosureLabels?: PartialDeep<WidgetSuiteDisclosureLabels>;
     /**
      * Shows a heading above each section, named as its menu item is.
      *
@@ -720,6 +804,13 @@ interface WidgetSuiteProps extends WidgetProviderProps {
  * pass-through mode. See `sections.tsx` for the two composition rules that
  * arrangement depends on.
  *
+ * That one response also decides which state the suite is in before the shell
+ * renders: placeholders while init has not settled, a closed retry state when
+ * init fails before answering the disclosure flags, the acceptance surface
+ * alone when the session owes the bank's disclosures, or the nav over its
+ * sections. States rather than an overlay over a mounted shell — see
+ * `WidgetSuiteInner` for why each boundary sits where it does.
+ *
  * The active section is held here rather than taken as a prop, matching
  * `BillPayWidgetNative` and `SettingsWidget`. A host-controlled
  * `selectedSectionId` / `onSectionChange` pair is the natural next step for
@@ -728,5 +819,5 @@ interface WidgetSuiteProps extends WidgetProviderProps {
  */
 declare function WidgetSuite({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: WidgetSuiteProps): React.JSX.Element;
 
-export { WIDGET_SUITE_CONTENT_LABELS_EN, WIDGET_SUITE_DEFAULT_SECTIONS, WIDGET_SUITE_SECTION_LABELS_EN, WIDGET_SUITE_SECTION_TITLE_LABELS_EN, WIDGET_SUITE_SHELL_LABELS_EN, WidgetSuite, WidgetSuiteSectionId };
-export type { PartialDeep, WidgetSuiteContentLabels, WidgetSuiteProps, WidgetSuiteSectionLabels, WidgetSuiteSectionTitleLabels, WidgetSuiteShellLabels };
+export { WIDGET_SUITE_CONTENT_LABELS_EN, WIDGET_SUITE_DEFAULT_SECTIONS, WIDGET_SUITE_DISCLOSURE_LABELS_EN, WIDGET_SUITE_SECTION_LABELS_EN, WIDGET_SUITE_SECTION_TITLE_LABELS_EN, WIDGET_SUITE_SHELL_LABELS_EN, WidgetSuite, WidgetSuiteSectionId };
+export type { AcceptDisclosuresLinks, PartialDeep, WidgetSuiteContentLabels, WidgetSuiteDisclosureLabels, WidgetSuiteProps, WidgetSuiteSectionLabels, WidgetSuiteSectionTitleLabels, WidgetSuiteShellLabels };

package/dist/experimental/WidgetSuite.js

@@ -1,6 +1,6 @@
-import { WIDGET_SUITE_CONTENT_LABELS_EN as e, WIDGET_SUITE_SECTION_LABELS_EN as t, WIDGET_SUITE_SECTION_TITLE_LABELS_EN as n } from "../libs/tesouro-embedded-components-react/widget-suite/feature/dist/index3.js";
-import { WIDGET_SUITE_DEFAULT_SECTIONS as r, WidgetSuiteSectionId as i } from "../libs/tesouro-embedded-components-react/widget-suite/feature/dist/index4.js";
-import { WIDGET_SUITE_SHELL_LABELS_EN as a } from "../libs/tesouro-embedded-components-react/widget-suite/ui/dist/index2.js";
-import { WidgetSuite as o } from "../libs/tesouro-embedded-components-react/widget-suite/feature/dist/index5.js";
+import { WIDGET_SUITE_CONTENT_LABELS_EN as e, WIDGET_SUITE_DISCLOSURE_LABELS_EN as t, WIDGET_SUITE_SECTION_LABELS_EN as n, WIDGET_SUITE_SECTION_TITLE_LABELS_EN as r } from "../libs/tesouro-embedded-components-react/widget-suite/feature/dist/index4.js";
+import { WIDGET_SUITE_DEFAULT_SECTIONS as i, WidgetSuiteSectionId as a } from "../libs/tesouro-embedded-components-react/widget-suite/feature/dist/index5.js";
+import { WIDGET_SUITE_SHELL_LABELS_EN as o } from "../libs/tesouro-embedded-components-react/widget-suite/ui/dist/index2.js";
+import { WidgetSuite as s } from "../libs/tesouro-embedded-components-react/widget-suite/feature/dist/index6.js";
 import "../libs/tesouro-embedded-components-react/widget-suite/feature/dist/index.js";
-export { e as WIDGET_SUITE_CONTENT_LABELS_EN, r as WIDGET_SUITE_DEFAULT_SECTIONS, t as WIDGET_SUITE_SECTION_LABELS_EN, n as WIDGET_SUITE_SECTION_TITLE_LABELS_EN, a as WIDGET_SUITE_SHELL_LABELS_EN, o as WidgetSuite, i as WidgetSuiteSectionId };
+export { e as WIDGET_SUITE_CONTENT_LABELS_EN, i as WIDGET_SUITE_DEFAULT_SECTIONS, t as WIDGET_SUITE_DISCLOSURE_LABELS_EN, n as WIDGET_SUITE_SECTION_LABELS_EN, r as WIDGET_SUITE_SECTION_TITLE_LABELS_EN, o as WIDGET_SUITE_SHELL_LABELS_EN, s as WidgetSuite, a as WidgetSuiteSectionId };

package/dist/experimental/index.d.ts

@@ -10,6 +10,11 @@ import { FallbackProps } from 'react-error-boundary';
 interface WidgetSuiteShellLabels {
     /** Names the section menu for assistive technology. */
     navAriaLabel: string;
+    /**
+     * Announces the placeholder shell while the caller resolves which sections
+     * exist. Read out in place of the menu, which has no items yet to name.
+     */
+    loadingAriaLabel: string;
     /** Shown in place of the menu when the caller supplies no sections. */
     emptyState: {
         title: string;
@@ -590,6 +595,23 @@ interface WidgetProviderProps extends WidgetProviderBaseProps {
     onError?: (error: unknown, info: ErrorInfo) => void;
 }
 
+/**
+ * The four disclosure documents a host supplies. Keyed rather than a free-form
+ * array because `agreementTextTemplate` names exactly these four instruments —
+ * an arbitrary-length list would let the rendered links and the text the user
+ * agrees to disagree with each other.
+ *
+ * URLs are host-supplied on purpose: they are bank-issued legal documents whose
+ * hosting is the integrator's concern, and a published package must not carry a
+ * Tesouro infrastructure URL a consumer's CSP can block (PLAT-1179).
+ */
+interface AcceptDisclosuresLinks {
+    termsOfUseUrl: string;
+    privacyPolicyUrl: string;
+    electronicCommunicationsAgreementUrl: string;
+    usaPatriotActUrl: string;
+}
+
 /**
  * The sections the suite can offer, declared in the default menu order
  * (EMBD-4875). Order here is documentation only — the suite renders whatever
@@ -663,10 +685,52 @@ interface WidgetSuiteContentLabels {
         expensesUnavailable: string;
     };
 }
+/**
+ * Copy for the states where the suite cannot prove it may show normal content.
+ *
+ * Both are places the gate cannot proceed, and neither is reachable by a correct
+ * integration against a healthy API.
+ */
+interface WidgetSuiteDisclosureLabels {
+    /**
+     * The first init fetch failed before the disclosure flags were known. The suite
+     * must fail closed here, because an unknown requirement is not permission to
+     * show ungated sections.
+     */
+    initFailedState: {
+        title: string;
+        body: string;
+        retryButton: string;
+    };
+    /**
+     * The acceptance was recorded and the init refresh that clears the gate
+     * failed, so only our view of it is stale.
+     *
+     * The failure is the title and the reassurance is the body, in that order on
+     * purpose: `ErrorState` puts a destructive-toned glyph above the title, so
+     * leading with "accepted" reads at a glance as the acceptance having failed —
+     * the one thing this state must not imply, since a user who believes that will
+     * try to accept again.
+     */
+    refreshFailedState: {
+        title: string;
+        body: string;
+        retryButton: string;
+    };
+    /**
+     * Acceptance is owed and the host supplied no documents to accept. A host
+     * misconfiguration, so it names no cause the user could act on.
+     */
+    unavailableState: {
+        title: string;
+        body: string;
+    };
+}
 /** Named as the shipped white-label header names them. */
 declare const WIDGET_SUITE_SECTION_LABELS_EN: WidgetSuiteSectionLabels;
 declare const WIDGET_SUITE_SECTION_TITLE_LABELS_EN: WidgetSuiteSectionTitleLabels;
 declare const WIDGET_SUITE_CONTENT_LABELS_EN: WidgetSuiteContentLabels;
+declare const WIDGET_SUITE_DISCLOSURE_LABELS_EN: WidgetSuiteDisclosureLabels;
 
 interface WidgetSuiteProps extends WidgetProviderProps {
     /**
@@ -682,6 +746,21 @@ interface WidgetSuiteProps extends WidgetProviderProps {
      * this is the host's ceiling rather than a promise of what renders.
      */
     sections: readonly WidgetSuiteSectionId[];
+    /**
+     * URLs of the bank-issued disclosure documents, for the acceptance state.
+     *
+     * Required only to *render* that state, and only reached when the session owes
+     * an acceptance — an organization whose requirement is `NOT_REQUIRED` never
+     * needs this. Host-supplied for the same reason `AcceptDisclosuresWidget` takes
+     * them: they are bank-issued legal instruments whose hosting is the
+     * integrator's to control, and a published package must not carry a URL a
+     * consumer's content-security policy can block (PLAT-1179).
+     *
+     * A session that owes an acceptance with none of these supplied gets the
+     * unavailable notice, not the suite — the gate is never dropped because the
+     * host under-configured it.
+     */
+    disclosureLinks?: AcceptDisclosuresLinks;
     /** Overrides for the shell's own copy — the nav landmark name, empty state. */
     labels?: PartialDeep<WidgetSuiteShellLabels>;
     /** Overrides for the section names in the menu. */
@@ -696,6 +775,11 @@ interface WidgetSuiteProps extends WidgetProviderProps {
      * and the Expenses placeholder.
      */
     contentLabels?: PartialDeep<WidgetSuiteContentLabels>;
+    /**
+     * Overrides for the copy the disclosure gate owns: its refresh-failure recovery
+     * and its unavailable notice. The acceptance surface carries its own labels.
+     */
+    disclosureLabels?: PartialDeep<WidgetSuiteDisclosureLabels>;
     /**
      * Shows a heading above each section, named as its menu item is.
      *
@@ -720,6 +804,13 @@ interface WidgetSuiteProps extends WidgetProviderProps {
  * pass-through mode. See `sections.tsx` for the two composition rules that
  * arrangement depends on.
  *
+ * That one response also decides which state the suite is in before the shell
+ * renders: placeholders while init has not settled, a closed retry state when
+ * init fails before answering the disclosure flags, the acceptance surface
+ * alone when the session owes the bank's disclosures, or the nav over its
+ * sections. States rather than an overlay over a mounted shell — see
+ * `WidgetSuiteInner` for why each boundary sits where it does.
+ *
  * The active section is held here rather than taken as a prop, matching
  * `BillPayWidgetNative` and `SettingsWidget`. A host-controlled
  * `selectedSectionId` / `onSectionChange` pair is the natural next step for
@@ -728,5 +819,5 @@ interface WidgetSuiteProps extends WidgetProviderProps {
  */
 declare function WidgetSuite({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: WidgetSuiteProps): React.JSX.Element;
 
-export { WIDGET_SUITE_CONTENT_LABELS_EN, WIDGET_SUITE_DEFAULT_SECTIONS, WIDGET_SUITE_SECTION_LABELS_EN, WIDGET_SUITE_SECTION_TITLE_LABELS_EN, WIDGET_SUITE_SHELL_LABELS_EN, WidgetSuite, WidgetSuiteSectionId };
-export type { PartialDeep, WidgetSuiteContentLabels, WidgetSuiteProps, WidgetSuiteSectionLabels, WidgetSuiteSectionTitleLabels, WidgetSuiteShellLabels };
+export { WIDGET_SUITE_CONTENT_LABELS_EN, WIDGET_SUITE_DEFAULT_SECTIONS, WIDGET_SUITE_DISCLOSURE_LABELS_EN, WIDGET_SUITE_SECTION_LABELS_EN, WIDGET_SUITE_SECTION_TITLE_LABELS_EN, WIDGET_SUITE_SHELL_LABELS_EN, WidgetSuite, WidgetSuiteSectionId };
+export type { AcceptDisclosuresLinks, PartialDeep, WidgetSuiteContentLabels, WidgetSuiteDisclosureLabels, WidgetSuiteProps, WidgetSuiteSectionLabels, WidgetSuiteSectionTitleLabels, WidgetSuiteShellLabels };

package/dist/experimental/index.js

@@ -1,6 +1,6 @@
-import { WIDGET_SUITE_CONTENT_LABELS_EN as e, WIDGET_SUITE_SECTION_LABELS_EN as t, WIDGET_SUITE_SECTION_TITLE_LABELS_EN as n } from "../libs/tesouro-embedded-components-react/widget-suite/feature/dist/index3.js";
-import { WIDGET_SUITE_DEFAULT_SECTIONS as r, WidgetSuiteSectionId as i } from "../libs/tesouro-embedded-components-react/widget-suite/feature/dist/index4.js";
-import { WIDGET_SUITE_SHELL_LABELS_EN as a } from "../libs/tesouro-embedded-components-react/widget-suite/ui/dist/index2.js";
-import { WidgetSuite as o } from "../libs/tesouro-embedded-components-react/widget-suite/feature/dist/index5.js";
+import { WIDGET_SUITE_CONTENT_LABELS_EN as e, WIDGET_SUITE_DISCLOSURE_LABELS_EN as t, WIDGET_SUITE_SECTION_LABELS_EN as n, WIDGET_SUITE_SECTION_TITLE_LABELS_EN as r } from "../libs/tesouro-embedded-components-react/widget-suite/feature/dist/index4.js";
+import { WIDGET_SUITE_DEFAULT_SECTIONS as i, WidgetSuiteSectionId as a } from "../libs/tesouro-embedded-components-react/widget-suite/feature/dist/index5.js";
+import { WIDGET_SUITE_SHELL_LABELS_EN as o } from "../libs/tesouro-embedded-components-react/widget-suite/ui/dist/index2.js";
+import { WidgetSuite as s } from "../libs/tesouro-embedded-components-react/widget-suite/feature/dist/index6.js";
 import "./WidgetSuite.js";
-export { e as WIDGET_SUITE_CONTENT_LABELS_EN, r as WIDGET_SUITE_DEFAULT_SECTIONS, t as WIDGET_SUITE_SECTION_LABELS_EN, n as WIDGET_SUITE_SECTION_TITLE_LABELS_EN, a as WIDGET_SUITE_SHELL_LABELS_EN, o as WidgetSuite, i as WidgetSuiteSectionId };
+export { e as WIDGET_SUITE_CONTENT_LABELS_EN, i as WIDGET_SUITE_DEFAULT_SECTIONS, t as WIDGET_SUITE_DISCLOSURE_LABELS_EN, n as WIDGET_SUITE_SECTION_LABELS_EN, r as WIDGET_SUITE_SECTION_TITLE_LABELS_EN, o as WIDGET_SUITE_SHELL_LABELS_EN, s as WidgetSuite, a as WidgetSuiteSectionId };

package/dist/index.css

@@ -155,6 +155,10 @@
     container-type: inline-size;
     container-name: field-group;
   }
+  .ttw\:\@container\/line-item {
+    container-type: inline-size;
+    container-name: line-item;
+  }
   .ttw\:\@container\/widget {
     container-type: inline-size;
     container-name: widget;
@@ -353,6 +357,12 @@
   .ttw\:order-last {
     order: 9999;
   }
+  .ttw\:col-span-1 {
+    grid-column: span 1 / span 1;
+  }
+  .ttw\:col-span-3 {
+    grid-column: span 3 / span 3;
+  }
   .ttw\:col-start-2 {
     grid-column-start: 2;
   }
@@ -1624,9 +1634,6 @@
   .ttw\:grid-cols-3 {
     grid-template-columns: repeat(3, minmax(0, 1fr));
   }
-  .ttw\:grid-cols-4 {
-    grid-template-columns: repeat(4, minmax(0, 1fr));
-  }
   .ttw\:grid-cols-\[0_1fr\] {
     grid-template-columns: 0 1fr;
   }
@@ -1958,6 +1965,10 @@
     border-top-left-radius: calc(var(--ttw-radius) - 2px);
     border-bottom-left-radius: calc(var(--ttw-radius) - 2px);
   }
+  .ttw\:rounded-l-none {
+    border-top-left-radius: 0;
+    border-bottom-left-radius: 0;
+  }
   .ttw\:rounded-tl-\[14px\] {
     border-top-left-radius: 14px;
   }
@@ -1968,6 +1979,10 @@
     border-top-right-radius: calc(var(--ttw-radius) - 2px);
     border-bottom-right-radius: calc(var(--ttw-radius) - 2px);
   }
+  .ttw\:rounded-r-none {
+    border-top-right-radius: 0;
+    border-bottom-right-radius: 0;
+  }
   .ttw\:rounded-tr-\[14px\] {
     border-top-right-radius: 14px;
   }
@@ -2817,9 +2832,6 @@
   .ttw\:pt-6 {
     padding-top: calc(var(--ttw-spacing) * 6);
   }
-  .ttw\:pt-7 {
-    padding-top: calc(var(--ttw-spacing) * 7);
-  }
   .ttw\:pt-8 {
     padding-top: calc(var(--ttw-spacing) * 8);
   }
@@ -2949,9 +2961,6 @@
   .ttw\:text-right {
     text-align: right;
   }
-  .ttw\:align-baseline {
-    vertical-align: baseline;
-  }
   .ttw\:align-middle {
     vertical-align: middle;
   }
@@ -4572,6 +4581,28 @@
   .ttw\:has-\[\:disabled\]\:opacity-60:has(:is(:disabled)) {
     opacity: 60%;
   }
+  .ttw\:has-\[\:focus-visible\]\:border-ring:has(:is(:focus-visible)) {
+    border-color: var(--ttw-ring);
+  }
+  .ttw\:has-\[\:focus-visible\]\:ring-\[3px\]:has(:is(:focus-visible)) {
+    --tw-ring-shadow: var(--tw-ring-inset,) 0 0 0 calc(3px + var(--tw-ring-offset-width)) var(--tw-ring-color, currentcolor);
+    box-shadow: var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);
+  }
+  .ttw\:has-\[\:focus-visible\]\:ring-ring\/50:has(:is(:focus-visible)) {
+    --tw-ring-color: var(--ttw-ring);
+    @supports (color: color-mix(in lab, red, red)) {
+      --tw-ring-color: color-mix(in oklab, var(--ttw-ring) 50%, transparent);
+    }
+  }
+  .ttw\:has-\[\[aria-invalid\=true\]\]\:border-destructive:has(:is([aria-invalid=true])) {
+    border-color: var(--ttw-destructive);
+  }
+  .ttw\:has-\[\[aria-invalid\=true\]\]\:ring-destructive\/20:has(:is([aria-invalid=true])) {
+    --tw-ring-color: var(--ttw-destructive);
+    @supports (color: color-mix(in lab, red, red)) {
+      --tw-ring-color: color-mix(in oklab, var(--ttw-destructive) 20%, transparent);
+    }
+  }
   .ttw\:has-\[\[data-slot\=input-group-control\]\:focus-visible\]\:border-ring:has(:is([data-slot=input-group-control]:focus-visible)) {
     border-color: var(--ttw-ring);
   }
@@ -5453,6 +5484,11 @@
       align-items: flex-start;
     }
   }
+  @container line-item (width >= 32rem) {
+    .ttw\:\@lg\/line-item\:grid-cols-6 {
+      grid-template-columns: repeat(6, minmax(0, 1fr));
+    }
+  }
   .ttw\:dark\:border-input:is(.dark *) {
     border-color: var(--ttw-input);
   }

package/dist/index.d.ts

@@ -1186,10 +1186,18 @@ declare function useOwnWidgetConfig(): WidgetConfigInput | null;
  * the correct fetch-owning ancestor regardless of nesting depth.
  *
  * Re-fetching keeps the current `initResponse` visible while the request is in
- * flight — the previous data is not cleared until the new response arrives (or the
- * fetch fails). This prevents a blank/loading flash during background refreshes.
- * If the re-fetch fails, `initResponse` is cleared and {@link useWidgetError}
- * returns the error.
+ * flight — the previous data is not cleared until the new response arrives. This
+ * prevents a blank/loading flash during background refreshes.
+ *
+ * **A failed re-fetch keeps it visible too**, and only sets
+ * {@link useWidgetError}. `useWidgetFetch` clears the retained response for a
+ * *client* change, which is an auth boundary; a re-fetch is not one, so the
+ * previous response is still valid for the active token. This line previously
+ * said the opposite, which matters: a consumer branching on `!initResponse`
+ * would conclude a failed refresh drops it back to its pre-init state, when in
+ * fact it keeps rendering the response it already had. Verified against the
+ * running provider (EMBD-4911) — a suite gating on a field of the init response
+ * holds that gate closed after a failed refresh rather than falling open.
  *
  * @returns A stable `() => void` function. Calling it increments an internal counter
  *   that re-triggers the fetch effect. Returns a no-op when called outside any provider.
@@ -1355,13 +1363,19 @@ type InnerProps = Omit<AcceptDisclosuresWidgetProps$1, UiOwnedProps> & {
      * Invitation token from the invite link. Bound into the disclosures lookup
      * before activation, and used to remount consent state when the invite
      * changes. This widget does not read URL search params.
+     *
+     * Supply it (with {@link userId}) for the invite flow. Omit both for an
+     * already-active user re-accepting a newly published version — they hold no
+     * invite, and the widget token identifies them on both calls. See
+     * `useAcceptWidgetDisclosures`.
      */
-    invitationToken: string;
+    invitationToken?: string;
     /**
-     * Invited user id from the invite link. Required with {@link invitationToken}
-     * for the disclosures lookup and remount identity.
+     * Invited user id from the invite link. Paired with {@link invitationToken}
+     * for the disclosures lookup and remount identity; omitted with it outside the
+     * invite flow.
      */
-    userId: string;
+    userId?: string;
     /**
      * URLs of the four bank-issued disclosure documents. Required to render along
      * with a bank name from widget init: the widget carries no document URLs of its
@@ -1379,13 +1393,19 @@ type InnerProps = Omit<AcceptDisclosuresWidgetProps$1, UiOwnedProps> & {
 };
 type AcceptDisclosuresWidgetProps = WidgetProviderProps & InnerProps;
 /**
- * Self-contained AcceptDisclosures widget for the pre-auth invite flow.
+ * Self-contained AcceptDisclosures widget.
  * Posts `POST /api/widget-gateway/disclosure-acceptance` (after reading the
  * disclosure version in force via the widget-gateway proxy), which activates
  * the invitee and records acceptance in one transaction, then awaits any
  * `onAccepted` continuation and kicks a widget-init refresh so host gates
  * keyed on `INVITED` can clear. Auth uses the normal WidgetToken provider
  * contract — never an APP/M2M bearer.
+ *
+ * Two flows, one surface: the pre-auth invite flow passes `invitationToken` +
+ * `userId`; an already-active user who owes a re-acceptance (widget init reports
+ * `disclosuresRequired: 'REQUIRED'` with `disclosuresAccepted: false`) passes
+ * neither, and the same init refresh clears the gate that mounted this. See
+ * `WidgetSuite`, which mounts it as its acceptance state.
  */
 declare function AcceptDisclosuresWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: AcceptDisclosuresWidgetProps): React.JSX.Element;
 

package/dist/index.js

@@ -1,4 +1,4 @@
-import { ACCEPT_DISCLOSURES_WIDGET_LABELS_EN as e } from "./libs/tesouro-embedded-components-react/accept-disclosures-widget/ui/dist/index2.js";
+import { ACCEPT_DISCLOSURES_WIDGET_LABELS_EN as e } from "./libs/tesouro-embedded-components-react/accept-disclosures-widget/ui/dist/lib/AcceptDisclosuresWidget/labels.js";
 import { cloneEmbeddedClient as t } from "./libs/tesouro-embedded-components-react/shared/data-access/dist/lib/createEmbeddedClient.js";
 import { Implementation as n } from "./libs/tesouro-embedded-components-react/shared/feature/dist/lib/WidgetProvider/types.js";
 import { getGlobalWidgetConfig as r, setGlobalWidgetConfig as i, updateGlobalWidgetConfig as a } from "./libs/tesouro-embedded-components-react/shared/feature/dist/lib/WidgetProvider/globalStore.js";
@@ -15,7 +15,7 @@ import "./lib/AcceptDisclosuresWidget.js";
 import { BankAccountsWidget as x } from "./libs/tesouro-embedded-components-react/bank-accounts-widget/feature/dist/index8.js";
 import "./lib/BankAccountsWidget.js";
 import { CounterpartsWidget as S } from "./libs/tesouro-embedded-components-react/counterparts-widget/feature/dist/index8.js";
-import { BillPayWidget as C } from "./libs/tesouro-embedded-components-react/bill-pay-widget/feature/dist/index28.js";
+import { BillPayWidget as C } from "./libs/tesouro-embedded-components-react/bill-pay-widget/feature/dist/index30.js";
 import "./lib/BillPayWidget.js";
 import { CardDetailsWidget as w } from "./libs/tesouro-embedded-components-react/card-details-widget/feature/dist/index6.js";
 import { CardFormatValue as T } from "./libs/tesouro-embedded-components-react/create-card-widget/feature/dist/index3.js";

package/dist/lib/AcceptDisclosuresWidget.d.ts

@@ -641,13 +641,19 @@ type InnerProps = Omit<AcceptDisclosuresWidgetProps$1, UiOwnedProps> & {
      * Invitation token from the invite link. Bound into the disclosures lookup
      * before activation, and used to remount consent state when the invite
      * changes. This widget does not read URL search params.
+     *
+     * Supply it (with {@link userId}) for the invite flow. Omit both for an
+     * already-active user re-accepting a newly published version — they hold no
+     * invite, and the widget token identifies them on both calls. See
+     * `useAcceptWidgetDisclosures`.
      */
-    invitationToken: string;
+    invitationToken?: string;
     /**
-     * Invited user id from the invite link. Required with {@link invitationToken}
-     * for the disclosures lookup and remount identity.
+     * Invited user id from the invite link. Paired with {@link invitationToken}
+     * for the disclosures lookup and remount identity; omitted with it outside the
+     * invite flow.
      */
-    userId: string;
+    userId?: string;
     /**
      * URLs of the four bank-issued disclosure documents. Required to render along
      * with a bank name from widget init: the widget carries no document URLs of its
@@ -665,13 +671,19 @@ type InnerProps = Omit<AcceptDisclosuresWidgetProps$1, UiOwnedProps> & {
 };
 type AcceptDisclosuresWidgetProps = WidgetProviderProps & InnerProps;
 /**
- * Self-contained AcceptDisclosures widget for the pre-auth invite flow.
+ * Self-contained AcceptDisclosures widget.
  * Posts `POST /api/widget-gateway/disclosure-acceptance` (after reading the
  * disclosure version in force via the widget-gateway proxy), which activates
  * the invitee and records acceptance in one transaction, then awaits any
  * `onAccepted` continuation and kicks a widget-init refresh so host gates
  * keyed on `INVITED` can clear. Auth uses the normal WidgetToken provider
  * contract — never an APP/M2M bearer.
+ *
+ * Two flows, one surface: the pre-auth invite flow passes `invitationToken` +
+ * `userId`; an already-active user who owes a re-acceptance (widget init reports
+ * `disclosuresRequired: 'REQUIRED'` with `disclosuresAccepted: false`) passes
+ * neither, and the same init refresh clears the gate that mounted this. See
+ * `WidgetSuite`, which mounts it as its acceptance state.
  */
 declare function AcceptDisclosuresWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: AcceptDisclosuresWidgetProps): React.JSX.Element;
 

package/dist/lib/AcceptDisclosuresWidget.js

@@ -1,4 +1,4 @@
-import { ACCEPT_DISCLOSURES_WIDGET_LABELS_EN as e } from "../libs/tesouro-embedded-components-react/accept-disclosures-widget/ui/dist/index2.js";
+import { ACCEPT_DISCLOSURES_WIDGET_LABELS_EN as e } from "../libs/tesouro-embedded-components-react/accept-disclosures-widget/ui/dist/lib/AcceptDisclosuresWidget/labels.js";
 import "../libs/tesouro-embedded-components-react/accept-disclosures-widget/ui/dist/index.js";
 import { AcceptDisclosuresWidget as t } from "../libs/tesouro-embedded-components-react/accept-disclosures-widget/feature/dist/index4.js";
 import "../libs/tesouro-embedded-components-react/accept-disclosures-widget/feature/dist/index.js";

package/dist/lib/BillPayWidget.js

@@ -1,3 +1,3 @@
-import { BillPayWidget as e } from "../libs/tesouro-embedded-components-react/bill-pay-widget/feature/dist/index28.js";
+import { BillPayWidget as e } from "../libs/tesouro-embedded-components-react/bill-pay-widget/feature/dist/index30.js";
 import "../libs/tesouro-embedded-components-react/bill-pay-widget/feature/dist/index.js";
 export { e as BillPayWidget };

package/dist/lib/WidgetProvider.d.ts

@@ -1070,10 +1070,18 @@ declare function useOwnWidgetConfig(): WidgetConfigInput | null;
  * the correct fetch-owning ancestor regardless of nesting depth.
  *
  * Re-fetching keeps the current `initResponse` visible while the request is in
- * flight — the previous data is not cleared until the new response arrives (or the
- * fetch fails). This prevents a blank/loading flash during background refreshes.
- * If the re-fetch fails, `initResponse` is cleared and {@link useWidgetError}
- * returns the error.
+ * flight — the previous data is not cleared until the new response arrives. This
+ * prevents a blank/loading flash during background refreshes.
+ *
+ * **A failed re-fetch keeps it visible too**, and only sets
+ * {@link useWidgetError}. `useWidgetFetch` clears the retained response for a
+ * *client* change, which is an auth boundary; a re-fetch is not one, so the
+ * previous response is still valid for the active token. This line previously
+ * said the opposite, which matters: a consumer branching on `!initResponse`
+ * would conclude a failed refresh drops it back to its pre-init state, when in
+ * fact it keeps rendering the response it already had. Verified against the
+ * running provider (EMBD-4911) — a suite gating on a field of the init response
+ * holds that gate closed after a failed refresh rather than falling open.
  *
  * @returns A stable `() => void` function. Calling it increments an internal counter
  *   that re-triggers the fetch effect. Returns a no-op when called outside any provider.