@tesouro/embedded-components-react 0.2.267 → 0.2.269

package/dist/lib/CardsWidget.d.ts

@@ -566,6 +566,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -1127,7 +1151,7 @@ interface CardsWidgetProps extends WidgetProviderProps {
  * inside `WidgetProvider`'s subtree, which is what the data-access hooks read
  * their client, org and token from.
  */
-declare function CardsWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: CardsWidgetProps): React.JSX.Element;
+declare function CardsWidget({ baseUrl, widgetToken, organizationId, configClient, gatewayRouting, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: CardsWidgetProps): React.JSX.Element;
 
 export { CardsWidget };
 export type { CardsFeatureLabels as CardsWidgetFeatureLabels, CardsListLabels as CardsWidgetLabels, CardsWidgetPagination, CardsWidgetProps };

package/dist/lib/ChartOfAccountsWidget.d.ts

@@ -724,6 +724,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -895,7 +919,7 @@ type ChartOfAccountsWidgetProps = WidgetProviderProps & TableProps & ChartOfAcco
  * />
  * ```
  */
-declare function ChartOfAccountsWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, analytics, errorFallback, onError, ...tableProps }: ChartOfAccountsWidgetProps): React.JSX.Element;
+declare function ChartOfAccountsWidget({ baseUrl, widgetToken, organizationId, configClient, gatewayRouting, linkComponent, implementation, uiFramework, analytics, errorFallback, onError, ...tableProps }: ChartOfAccountsWidgetProps): React.JSX.Element;
 
 export { ACCOUNT_DELETE_DIALOG_LABELS_EN, ACCOUNT_FORM_SHEET_LABELS_EN, AccountDeleteDialog, AccountFormSheet, CHART_OF_ACCOUNTS_LABELS_EN, CHART_OF_ACCOUNTS_MESSAGE_LABELS_EN, ChartOfAccountsTable, ChartOfAccountsWidget };
 export type { AccountDeleteDialogLabels, AccountDeleteDialogProps, AccountFormErrors, AccountFormMode, AccountFormSheetLabels, AccountFormSheetProps, AccountFormValues, ChartOfAccountsLabels, ChartOfAccountsMessageLabels, ChartOfAccountsTableProps, ChartOfAccountsWidgetLabelProps, ChartOfAccountsWidgetProps, LedgerAccountRow };

package/dist/lib/CounterpartsWidget.d.ts

@@ -477,6 +477,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -835,7 +859,7 @@ type CounterpartsWidgetProps = WidgetProviderProps & CounterpartsWidgetOwnProps;
  * />
  * ```
  */
-declare function CounterpartsWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: CounterpartsWidgetProps): React.JSX.Element;
+declare function CounterpartsWidget({ baseUrl, widgetToken, organizationId, configClient, gatewayRouting, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: CounterpartsWidgetProps): React.JSX.Element;
 
 export { CounterpartsWidget };
 export type { AddressFormSheetLabels, BankAccountFormSheetLabels, ConfirmDeleteDialogLabels, CounterpartDetailsSheetLabels, CounterpartFormSheetLabels, CounterpartMessageLabels, CounterpartMode, CounterpartsScreenLabels, CounterpartsWidgetProps };

package/dist/lib/CreateCardWidget.d.ts

@@ -539,6 +539,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -673,7 +697,7 @@ type CreateCardWidgetProps = WidgetProviderProps & {
  * Self-contained Create Card widget. Issues a debit card via the Embed API and
  * drives setup → preparing → success with sonner toasts for the mutation.
  */
-declare function CreateCardWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: CreateCardWidgetProps): React.JSX.Element;
+declare function CreateCardWidget({ baseUrl, widgetToken, organizationId, configClient, gatewayRouting, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: CreateCardWidgetProps): React.JSX.Element;
 
 /** Opaque UI format values — mapped to API `DebitCardType` in the feature. */
 declare const CardFormatValue: {

package/dist/lib/ExpenseApprovalPoliciesWidget.d.ts

@@ -477,6 +477,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -572,7 +596,7 @@ type ExpenseApprovalPoliciesWidgetProps = WidgetProviderProps & {
     /** @deprecated Use `organizationId` instead */
     orgId?: string | null;
 };
-declare function ExpenseApprovalPoliciesWidget({ token, orgId, widgetToken, organizationId, baseUrl, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, }?: ExpenseApprovalPoliciesWidgetProps): React.JSX.Element;
+declare function ExpenseApprovalPoliciesWidget({ token, orgId, widgetToken, organizationId, baseUrl, configClient, gatewayRouting, linkComponent, implementation, uiFramework, errorFallback, onError, }?: ExpenseApprovalPoliciesWidgetProps): React.JSX.Element;
 
 export { ExpenseApprovalPoliciesWidget };
 export type { ExpenseApprovalPoliciesWidgetProps };

package/dist/lib/ExpenseManagementWidget.d.ts

@@ -510,6 +510,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -607,7 +631,7 @@ interface ExpenseManagementWidgetProps extends WidgetProviderProps {
     policiesContent?: ReactNode;
     requirementsContent?: ReactNode;
 }
-declare function ExpenseManagementWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: ExpenseManagementWidgetProps): React.JSX.Element;
+declare function ExpenseManagementWidget({ baseUrl, widgetToken, organizationId, configClient, gatewayRouting, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: ExpenseManagementWidgetProps): React.JSX.Element;
 
 export { ExpenseManagementWidget };
 export type { Labels as ExpenseManagementWidgetLabels, ExpenseManagementWidgetProps };

package/dist/lib/ExpenseRequirementsWidget.d.ts

@@ -477,6 +477,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -572,7 +596,7 @@ type ExpenseRequirementsWidgetProps = WidgetProviderProps & {
     /** @deprecated Use `organizationId` instead */
     orgId?: string | null;
 };
-declare function ExpenseRequirementsWidget({ token, orgId, widgetToken, organizationId, baseUrl, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, }?: ExpenseRequirementsWidgetProps): React.JSX.Element;
+declare function ExpenseRequirementsWidget({ token, orgId, widgetToken, organizationId, baseUrl, configClient, gatewayRouting, linkComponent, implementation, uiFramework, errorFallback, onError, }?: ExpenseRequirementsWidgetProps): React.JSX.Element;
 
 export { ExpenseRequirementsWidget };
 export type { ExpenseRequirementsWidgetProps };

package/dist/lib/HelpWidget.d.ts

@@ -561,6 +561,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -672,7 +696,7 @@ type HelpWidgetProps = WidgetProviderProps & HelpContentProps;
  * <HelpWidget bankName="Acme Bank" contactUrl="https://acme.example/support" />
  * ```
  */
-declare function HelpWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...contentProps }: HelpWidgetProps): React.JSX.Element;
+declare function HelpWidget({ baseUrl, widgetToken, organizationId, configClient, gatewayRouting, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...contentProps }: HelpWidgetProps): React.JSX.Element;
 
 export { HELP_FAQ_EN, HELP_WIDGET_LABELS_EN, HelpWidget };
 export type { HelpFaqAnswer, HelpFaqBullet, HelpFaqBulletType, HelpFaqItem, HelpFaqSection, HelpWidgetLabels, HelpWidgetProps };

package/dist/lib/InsightsWidget.d.ts

@@ -513,6 +513,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *

package/dist/lib/InvoicingWidget.d.ts

@@ -507,6 +507,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -601,7 +625,7 @@ type MoniteRegionProviderProps = WidgetProviderProps & MoniteWrapperProps;
 type ReceivablesWidgetMoniteProps = MoniteRegionProviderProps & Omit<ReceivablesProps, 'pageTitleComponent' | 'initialView' | 'initialCounterpartId'> & {
     pageTitleComponent?: ReceivablesProps['pageTitleComponent'];
 };
-declare function ReceivablesWidgetMonite({ baseUrl, widgetToken, organizationId, configClient, linkComponent, errorFallback, onError, finopsThemeColors, analytics, pageTitleComponent, uiFramework, ...receivablesProps }: ReceivablesWidgetMoniteProps): React.JSX.Element;
+declare function ReceivablesWidgetMonite({ baseUrl, widgetToken, organizationId, configClient, gatewayRouting, linkComponent, errorFallback, onError, finopsThemeColors, analytics, pageTitleComponent, uiFramework, ...receivablesProps }: ReceivablesWidgetMoniteProps): React.JSX.Element;
 
 export { ReceivablesWidgetMonite as InvoicingWidget };
 export type { ReceivablesWidgetMoniteProps as InvoicingWidgetProps };

package/dist/lib/LinkedAccountsWidget.d.ts

@@ -545,6 +545,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -646,7 +670,7 @@ interface LinkedAccountsWidgetProps extends WidgetProviderProps {
     labels?: Partial<Labels>;
     featureLabels?: Partial<FeatureLabels>;
 }
-declare function LinkedAccountsWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: LinkedAccountsWidgetProps): React.JSX.Element;
+declare function LinkedAccountsWidget({ baseUrl, widgetToken, organizationId, configClient, gatewayRouting, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: LinkedAccountsWidgetProps): React.JSX.Element;
 
 export { LinkedAccountsWidget };
 export type { FeatureLabels as LinkedAccountsWidgetFeatureLabels, Labels as LinkedAccountsWidgetLabels, LinkedAccountsWidgetProps };

package/dist/lib/ProductsWidget.d.ts

@@ -477,6 +477,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -749,7 +773,7 @@ type ProductsWidgetProps = WidgetProviderProps & ProductsWidgetOwnProps;
  * <ProductsWidget baseUrl="https://api.tesouro.com" widgetToken="wt_..." organizationId="org_..." />
  * ```
  */
-declare function ProductsWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: ProductsWidgetProps): React.JSX.Element;
+declare function ProductsWidget({ baseUrl, widgetToken, organizationId, configClient, gatewayRouting, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: ProductsWidgetProps): React.JSX.Element;
 
 export { ProductsWidget };
 export type { MeasureUnitDeleteDialogLabels, MeasureUnitsManagerLabels, ProductDeleteDialogLabels, ProductDetailsSheetLabels, ProductFormSheetLabels, ProductMessageLabels, ProductsScreenLabels, ProductsWidgetProps };

package/dist/lib/ProfileWidget.d.ts

@@ -490,6 +490,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -605,7 +629,7 @@ interface ProfileWidgetProps extends WidgetProviderProps {
      */
     contactUrl?: string;
 }
-declare function ProfileWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: ProfileWidgetProps): React.JSX.Element;
+declare function ProfileWidget({ baseUrl, widgetToken, organizationId, configClient, gatewayRouting, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: ProfileWidgetProps): React.JSX.Element;
 
 export { ProfileWidget };
 export type { FeatureLabels as ProfileWidgetFeatureLabels, Labels as ProfileWidgetLabels, ProfileWidgetProps };

package/dist/lib/ReceiptMatchWidget.d.ts

@@ -477,6 +477,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -573,7 +597,7 @@ type ReceiptMatchWidgetProps = WidgetProviderProps & {
     targetTransactionId?: string;
     onSingleTransactionUpdate?: () => void;
 };
-declare function ReceiptMatchWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, isOpen, preSelectedReceiptIds, onClose, targetTransactionId, onSingleTransactionUpdate, }: ReceiptMatchWidgetProps): React.JSX.Element;
+declare function ReceiptMatchWidget({ baseUrl, widgetToken, organizationId, configClient, gatewayRouting, linkComponent, implementation, uiFramework, errorFallback, onError, isOpen, preSelectedReceiptIds, onClose, targetTransactionId, onSingleTransactionUpdate, }: ReceiptMatchWidgetProps): React.JSX.Element;
 
 export { ReceiptMatchWidget };
 export type { ReceiptMatchWidgetProps };

package/dist/lib/ReceivablesWidget.d.ts

@@ -484,6 +484,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -979,7 +1003,7 @@ interface ReceivablesWidgetOwnProps {
 }
 type ReceivablesWidgetProps = WidgetProviderProps & ReceivablesWidgetOwnProps;
 
-declare function ReceivablesWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: ReceivablesWidgetProps): React.JSX.Element;
+declare function ReceivablesWidget({ baseUrl, widgetToken, organizationId, configClient, gatewayRouting, linkComponent, implementation, uiFramework, errorFallback, onError, analytics, ...innerProps }: ReceivablesWidgetProps): React.JSX.Element;
 
 export { ReceivablesWidget };
 export type { CounterpartFormSheetLabels, CounterpartMessageLabels, MeasureUnitDeleteDialogLabels, MeasureUnitsManagerLabels, ProductFormSheetLabels, ProductMessageLabels, ReceivableActionDialogLabels, ReceivableDetailsSheetLabelOverrides, ReceivableDetailsSheetLabels, ReceivableDocumentType, ReceivableFormSheetLabels, ReceivableMessageLabels, ReceivablePaymentDialogLabels, ReceivableSendDialogLabels, ReceivableStatusBadgeLabels, ReceivablesScreenLabelOverrides, ReceivablesScreenLabels, ReceivablesWidgetProps, ReceivablesWidgetTab };

package/dist/lib/SettingsWidget.d.ts

@@ -496,6 +496,30 @@ interface WidgetConfigInput {
      * ```
      */
     configClient?: (client: EmbeddedClient) => EmbeddedClient;
+    /**
+     * Overrides the widget-gateway routing decision for the scoped HTTP client.
+     *
+     * Any caller reaching the Tesouro API with a widget token must route data
+     * requests through the widget gateway: prefix the path with
+     * `/api/widget-gateway/proxy` and carry the token as `X-Widget-Token`. The
+     * provider applies both automatically per request when the request origin is
+     * a known Tesouro API host (`WIDGET_GATEWAY_HOSTS`, derived from the
+     * generated `ClientOptions['baseUrl']`); `/api/widget-gateway/*` paths (the
+     * init round-trip) always pass through untouched.
+     *
+     * - `undefined` — decide from the request origin, as above. Inherits from
+     *   the nearest ancestor or global store like every other config field.
+     * - `true` — always apply the rewrite, even for an unlisted base URL (e.g. a
+     *   custom domain in front of the gateway).
+     * - `false` — never apply it. For hosts that route widget requests their own
+     *   way, such as a same-origin BFF whose `configClient` retargets every
+     *   request.
+     *
+     * Independent of {@link configClient}: a host that only adds a header keeps
+     * the built-in routing, and the built-in interceptor runs before any
+     * `configClient` interceptor.
+     */
+    gatewayRouting?: boolean;
     /**
      * Component the embedded widgets should render in place of plain `<a>` tags.
      *
@@ -680,7 +704,7 @@ interface SettingsWidgetProps extends MoniteRegionProviderProps {
     tagsContent?: ReactNode;
     invoiceContent?: ReactNode;
 }
-declare function SettingsWidget({ baseUrl, widgetToken, organizationId, configClient, linkComponent, implementation, uiFramework, errorFallback, onError, finopsThemeColors, analytics, ...innerProps }: SettingsWidgetProps): React.JSX.Element;
+declare function SettingsWidget({ baseUrl, widgetToken, organizationId, configClient, gatewayRouting, linkComponent, implementation, uiFramework, errorFallback, onError, finopsThemeColors, analytics, ...innerProps }: SettingsWidgetProps): React.JSX.Element;
 
 export { SettingsSection, SettingsWidget };
 export type { SettingsWidgetAdditionalSection, FeatureLabels as SettingsWidgetFeatureLabels, Labels as SettingsWidgetLabels, SettingsWidgetProps, SettingsWidgetSection, SettingsWidgetSectionId };