@cosmicdrift/kumiko-bundled-features 0.207.0 → 0.208.0

package/src/auth-email-password/i18n.ts

@@ -1,145 +1,15 @@
 // @runtime client
-// Default-Bundles für die Feature-UI. Werden vom emailPasswordClient()
-// als Fallback-Bundle in den LocaleProvider gehängt — Apps können
-// einzelne Keys via `emailPasswordClient({ translations: { de: { ... } } })`
-// überschreiben, ohne das ganze Bundle kopieren zu müssen.
+// English UI copy for this feature. emailPasswordClient() mounts it as a
+// LocaleProvider fallback. Apps override keys via
+// `emailPasswordClient({ translations })`. German/Spanish ship in
+// localeDeClient() / localeEsClient(), not in this bundle.
 //
-// Keys folgen dem Schema `auth.<area>.<slug>` — `auth.login.*` für die
-// Formular-UI, `auth.errors.*` für Reason-Codes aus dem Login-Handler
-// (1:1 gespiegelt zu AuthErrors im server-side Feature).
+// Keys: `auth.<area>.<slug>` — `auth.login.*` for the form,
+// `auth.errors.*` for login-handler reason codes (mirrors AuthErrors).
 
 import type { TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
 
 export const defaultTranslations: TranslationsByLocale = {
-  de: {
-    "auth.login.title": "Anmelden",
-    "auth.login.email": "E-Mail",
-    "auth.login.password": "Passwort",
-    "auth.login.submit": "Einloggen",
-    "auth.login.submitting": "…",
-    "auth.login.forgotPassword": "Passwort vergessen?",
-    "auth.login.unlockAccount": "Konto entsperren?",
-    "auth.login.resendVerification": "Bestätigungs-Mail erneut senden",
-    "auth.login.resendSuccess": "Wir haben dir eine neue Bestätigungs-Mail geschickt.",
-    "auth.login.resendRateLimited": "Bitte warte kurz und versuche es erneut.",
-    "auth.login.resendError": "Konnte nicht senden. Bitte erneut versuchen.",
-    "auth.errors.invalidCredentials": "E-Mail oder Passwort falsch.",
-    "auth.errors.noMembership": "Dieses Konto hat keinen Tenant-Zugang.",
-    "auth.errors.accountLocked": "Konto vorübergehend gesperrt.",
-    "auth.errors.accountLockedRetry": "Konto gesperrt. Neuer Versuch in {minutes} Minuten.",
-    "auth.errors.emailNotVerified": "E-Mail-Adresse noch nicht bestätigt.",
-    "auth.errors.accountRestricted":
-      "Konto pausiert (Datenschutz Art. 18). Bitte Pause aufheben um wieder einzuloggen.",
-    "auth.errors.rateLimited": "Zu viele Login-Versuche. Bitte kurz warten.",
-    "auth.errors.invalidBody": "Ungültige Eingabe.",
-    "auth.errors.loginFailed": "Login fehlgeschlagen.",
-    "auth.errors.mfaNotSupported":
-      "Diese App unterstützt keine Zwei-Faktor-Bestätigung. Bitte an den Support wenden.",
-    "auth.errors.mfaSetupRequired":
-      "Zwei-Faktor-Authentifizierung erforderlich. Bitte an den Administrator wenden.",
-    "auth.errors.invalidResetToken":
-      "Der Link ist ungültig oder abgelaufen. Bitte fordere einen neuen an.",
-    "auth.errors.invalidVerificationToken": "Der Bestätigungs-Link ist ungültig oder abgelaufen.",
-    "auth.errors.invalidUnlockToken":
-      "Der Entsperren-Link ist ungültig oder abgelaufen. Bitte fordere einen neuen an.",
-    "auth.errors.invalidSignupToken":
-      "Der Aktivierungs-Link ist ungültig oder abgelaufen. Bitte fordere einen neuen an.",
-    "auth.errors.signupEmailAlreadyRegistered":
-      "Für diese E-Mail-Adresse existiert bereits ein Konto. Bitte logge dich ein oder setze dein Passwort zurück.",
-    "auth.errors.unknownError": "Etwas ist schief gegangen. Bitte erneut versuchen.",
-    "auth.errors.originNotAllowed": "Zugriff von dieser Herkunft ist nicht erlaubt.",
-    "auth.forgotPassword.title": "Passwort zurücksetzen",
-    "auth.forgotPassword.intro":
-      "Gib deine E-Mail-Adresse ein. Falls ein Konto existiert, schicken wir dir einen Reset-Link.",
-    "auth.forgotPassword.email": "E-Mail",
-    "auth.forgotPassword.submit": "Link anfordern",
-    "auth.forgotPassword.submitting": "…",
-    "auth.forgotPassword.successTitle": "Mail gesendet",
-    "auth.forgotPassword.successBody":
-      "Falls die E-Mail in unserem System existiert, ist eine Nachricht mit einem Reset-Link unterwegs. Bitte schau in deinen Posteingang.",
-    "auth.forgotPassword.backToLogin": "Zurück zum Login",
-    "auth.resetPassword.title": "Neues Passwort setzen",
-    "auth.resetPassword.intro": "Wähle ein neues Passwort (mindestens 8 Zeichen).",
-    "auth.resetPassword.newPassword": "Neues Passwort",
-    "auth.resetPassword.confirmPassword": "Passwort bestätigen",
-    "auth.resetPassword.mismatch": "Die Passwörter stimmen nicht überein.",
-    "auth.resetPassword.tooShort": "Passwort muss mindestens 8 Zeichen lang sein.",
-    "auth.resetPassword.submit": "Passwort speichern",
-    "auth.resetPassword.submitting": "…",
-    "auth.resetPassword.successTitle": "Passwort gesetzt",
-    "auth.resetPassword.successBody": "Du kannst dich jetzt mit deinem neuen Passwort anmelden.",
-    "auth.resetPassword.goToLogin": "Zum Login",
-    "auth.resetPassword.missingToken":
-      "Der Reset-Link enthält keinen Token. Bitte fordere einen neuen an.",
-    "auth.verifyEmail.verifying": "E-Mail wird bestätigt …",
-    "auth.verifyEmail.successTitle": "E-Mail bestätigt",
-    "auth.verifyEmail.successBody": "Danke! Du kannst dich jetzt anmelden.",
-    "auth.verifyEmail.errorTitle": "Bestätigung fehlgeschlagen",
-    "auth.verifyEmail.errorBody":
-      "Der Link ist ungültig oder abgelaufen. Bitte fordere eine neue Bestätigungs-Mail an.",
-    "auth.verifyEmail.goToLogin": "Zum Login",
-    "auth.verifyEmail.missingToken": "Der Bestätigungs-Link enthält keinen Token.",
-    "auth.requestUnlock.title": "Konto entsperren",
-    "auth.requestUnlock.intro":
-      "Gib deine E-Mail-Adresse ein. Falls dein Konto gesperrt ist, schicken wir dir einen Entsperren-Link.",
-    "auth.requestUnlock.email": "E-Mail",
-    "auth.requestUnlock.submit": "Link anfordern",
-    "auth.requestUnlock.submitting": "…",
-    "auth.requestUnlock.successTitle": "Mail gesendet",
-    "auth.requestUnlock.successBody":
-      "Falls die E-Mail in unserem System existiert und gesperrt ist, ist eine Nachricht mit einem Entsperren-Link unterwegs. Bitte schau in deinen Posteingang.",
-    "auth.requestUnlock.backToLogin": "Zurück zum Login",
-    "auth.requestUnlock.rateLimited": "Zu viele Anfragen. Neuer Versuch in {minutes} Minuten.",
-    "auth.unlockAccount.verifying": "Konto wird entsperrt …",
-    "auth.unlockAccount.successTitle": "Konto entsperrt",
-    "auth.unlockAccount.successBody":
-      "Dein Konto ist wieder entsperrt. Du kannst dich jetzt anmelden.",
-    "auth.unlockAccount.errorTitle": "Entsperren fehlgeschlagen",
-    "auth.unlockAccount.errorBody":
-      "Der Link ist ungültig oder abgelaufen. Bitte fordere einen neuen Entsperren-Link an.",
-    "auth.unlockAccount.goToLogin": "Zum Login",
-    "auth.unlockAccount.missingToken": "Der Entsperren-Link enthält keinen Token.",
-    "auth.signup.title": "Account erstellen",
-    "auth.signup.intro":
-      "Gib deine E-Mail-Adresse ein. Wir schicken dir einen Aktivierungs-Link, mit dem du dein Passwort setzt.",
-    "auth.signup.email": "E-Mail",
-    "auth.signup.submit": "Aktivierungs-Link senden",
-    "auth.signup.submitting": "…",
-    "auth.signup.successTitle": "Mail gesendet",
-    "auth.signup.successBody":
-      "Wir haben dir einen Aktivierungs-Link an deine E-Mail-Adresse geschickt. Klicke ihn an, um dein Passwort zu setzen und dich einzuloggen.",
-    "auth.signup.resend": "Mail erneut senden",
-    "auth.signup.haveAccount": "Bereits einen Account? Anmelden",
-    "auth.signupComplete.title": "Passwort setzen",
-    "auth.signupComplete.intro":
-      "Wähle ein Passwort (mindestens 8 Zeichen) für deinen neuen Account.",
-    "auth.signupComplete.password": "Passwort",
-    "auth.signupComplete.confirmPassword": "Passwort bestätigen",
-    "auth.signupComplete.tooShort": "Passwort muss mindestens 8 Zeichen lang sein.",
-    "auth.signupComplete.mismatch": "Die Passwörter stimmen nicht überein.",
-    "auth.signupComplete.submit": "Account aktivieren",
-    "auth.signupComplete.submitting": "…",
-    "auth.signupComplete.missingToken":
-      "Der Aktivierungs-Link enthält keinen Token. Bitte fordere einen neuen an.",
-    "auth.inviteAccept.title": "Einladung annehmen",
-    "auth.inviteAccept.intro":
-      "Du wurdest zu einem Workspace eingeladen. Klicke auf 'Annehmen' um Mitglied zu werden.",
-    "auth.inviteAccept.loggedInAs": "Du bist eingeloggt — klicke 'Annehmen' um Mitglied zu werden.",
-    "auth.inviteAccept.email": "E-Mail",
-    "auth.inviteAccept.password": "Passwort",
-    "auth.inviteAccept.acceptButton": "Annehmen",
-    "auth.inviteAccept.submit": "Annehmen + Anmelden",
-    "auth.inviteAccept.submitting": "…",
-    "auth.inviteAccept.useOtherAccount": "Mit anderem Account anmelden",
-    "auth.inviteAccept.toggleNew": "Ich habe noch keinen Account",
-    "auth.inviteAccept.toggleExisting": "Ich habe schon einen Account",
-    "auth.inviteAccept.missingToken": "Der Einladungs-Link enthält keinen Token oder ist ungültig.",
-    "auth.inviteAccept.goToLogin": "Zum Login",
-    "auth.user.menu.label": "Konto",
-    "auth.user.menu.logout": "Abmelden",
-    "auth.tenant.switcher.label": "Tenant",
-    "auth.tenant.switcher.none": "Kein Tenant",
-  },
   en: {
     "auth.login.title": "Sign in",
     "auth.login.email": "Email",
@@ -263,135 +133,6 @@ export const defaultTranslations: TranslationsByLocale = {
     "auth.tenant.switcher.label": "Tenant",
     "auth.tenant.switcher.none": "No tenant",
   },
-  es: {
-    "auth.login.title": "Iniciar sesión",
-    "auth.login.email": "Correo electrónico",
-    "auth.login.password": "Contraseña",
-    "auth.login.submit": "Iniciar sesión",
-    "auth.login.submitting": "…",
-    "auth.login.forgotPassword": "¿Olvidaste tu contraseña?",
-    "auth.login.unlockAccount": "¿Desbloquear cuenta?",
-    "auth.login.resendVerification": "Reenviar correo de confirmación",
-    "auth.login.resendSuccess": "Te hemos enviado un nuevo correo de confirmación.",
-    "auth.login.resendRateLimited": "Espera un momento e inténtalo de nuevo.",
-    "auth.login.resendError": "No se pudo enviar. Inténtalo de nuevo.",
-    "auth.errors.invalidCredentials": "Correo electrónico o contraseña incorrectos.",
-    "auth.errors.noMembership": "Esta cuenta no tiene acceso a ningún tenant.",
-    "auth.errors.accountLocked": "Cuenta bloqueada temporalmente.",
-    "auth.errors.accountLockedRetry": "Cuenta bloqueada. Vuelve a intentarlo en {minutes} minutos.",
-    "auth.errors.emailNotVerified": "El correo electrónico aún no está confirmado.",
-    "auth.errors.accountRestricted":
-      "Cuenta pausada (protección de datos, art. 18). Levanta la pausa para volver a iniciar sesión.",
-    "auth.errors.rateLimited": "Demasiados intentos de inicio de sesión. Espera un momento.",
-    "auth.errors.invalidBody": "Entrada no válida.",
-    "auth.errors.loginFailed": "Error al iniciar sesión.",
-    "auth.errors.mfaNotSupported":
-      "Esta aplicación no admite la verificación en dos pasos. Contacta con soporte.",
-    "auth.errors.mfaSetupRequired":
-      "Se requiere autenticación en dos pasos. Contacta con el administrador.",
-    "auth.errors.invalidResetToken": "El enlace no es válido o ha caducado. Solicita uno nuevo.",
-    "auth.errors.invalidVerificationToken": "El enlace de confirmación no es válido o ha caducado.",
-    "auth.errors.invalidUnlockToken":
-      "El enlace de desbloqueo no es válido o ha caducado. Solicita uno nuevo.",
-    "auth.errors.invalidSignupToken":
-      "El enlace de activación no es válido o ha caducado. Solicita uno nuevo.",
-    "auth.errors.signupEmailAlreadyRegistered":
-      "Ya existe una cuenta con este correo electrónico. Inicia sesión o restablece tu contraseña.",
-    "auth.errors.unknownError": "Algo salió mal. Inténtalo de nuevo.",
-    "auth.errors.originNotAllowed": "El acceso desde este origen no está permitido.",
-    "auth.forgotPassword.title": "Restablecer contraseña",
-    "auth.forgotPassword.intro":
-      "Introduce tu correo electrónico. Si existe una cuenta, te enviaremos un enlace para restablecer la contraseña.",
-    "auth.forgotPassword.email": "Correo electrónico",
-    "auth.forgotPassword.submit": "Solicitar enlace",
-    "auth.forgotPassword.submitting": "…",
-    "auth.forgotPassword.successTitle": "Correo enviado",
-    "auth.forgotPassword.successBody":
-      "Si el correo existe en nuestro sistema, te hemos enviado un mensaje con un enlace para restablecer la contraseña. Revisa tu bandeja de entrada.",
-    "auth.forgotPassword.backToLogin": "Volver al inicio de sesión",
-    "auth.resetPassword.title": "Establecer nueva contraseña",
-    "auth.resetPassword.intro": "Elige una nueva contraseña (al menos 8 caracteres).",
-    "auth.resetPassword.newPassword": "Nueva contraseña",
-    "auth.resetPassword.confirmPassword": "Confirmar contraseña",
-    "auth.resetPassword.mismatch": "Las contraseñas no coinciden.",
-    "auth.resetPassword.tooShort": "La contraseña debe tener al menos 8 caracteres.",
-    "auth.resetPassword.submit": "Guardar contraseña",
-    "auth.resetPassword.submitting": "…",
-    "auth.resetPassword.successTitle": "Contraseña establecida",
-    "auth.resetPassword.successBody": "Ya puedes iniciar sesión con tu nueva contraseña.",
-    "auth.resetPassword.goToLogin": "Ir a iniciar sesión",
-    "auth.resetPassword.missingToken":
-      "El enlace de restablecimiento no contiene ningún token. Solicita uno nuevo.",
-    "auth.verifyEmail.verifying": "Confirmando correo electrónico …",
-    "auth.verifyEmail.successTitle": "Correo confirmado",
-    "auth.verifyEmail.successBody": "¡Gracias! Ya puedes iniciar sesión.",
-    "auth.verifyEmail.errorTitle": "Error al confirmar",
-    "auth.verifyEmail.errorBody":
-      "El enlace no es válido o ha caducado. Solicita un nuevo correo de confirmación.",
-    "auth.verifyEmail.goToLogin": "Ir a iniciar sesión",
-    "auth.verifyEmail.missingToken": "El enlace de confirmación no contiene ningún token.",
-    "auth.requestUnlock.title": "Desbloquear cuenta",
-    "auth.requestUnlock.intro":
-      "Introduce tu correo electrónico. Si tu cuenta está bloqueada, te enviaremos un enlace de desbloqueo.",
-    "auth.requestUnlock.email": "Correo electrónico",
-    "auth.requestUnlock.submit": "Solicitar enlace",
-    "auth.requestUnlock.submitting": "…",
-    "auth.requestUnlock.successTitle": "Correo enviado",
-    "auth.requestUnlock.successBody":
-      "Si ese correo existe en nuestro sistema y está bloqueado, te hemos enviado un mensaje con un enlace de desbloqueo. Revisa tu bandeja de entrada.",
-    "auth.requestUnlock.backToLogin": "Volver al inicio de sesión",
-    "auth.requestUnlock.rateLimited":
-      "Demasiadas solicitudes. Vuelve a intentarlo en {minutes} minutos.",
-    "auth.unlockAccount.verifying": "Desbloqueando cuenta …",
-    "auth.unlockAccount.successTitle": "Cuenta desbloqueada",
-    "auth.unlockAccount.successBody": "Tu cuenta ha sido desbloqueada. Ya puedes iniciar sesión.",
-    "auth.unlockAccount.errorTitle": "Error al desbloquear",
-    "auth.unlockAccount.errorBody":
-      "El enlace no es válido o ha caducado. Solicita un nuevo enlace de desbloqueo.",
-    "auth.unlockAccount.goToLogin": "Ir a iniciar sesión",
-    "auth.unlockAccount.missingToken": "El enlace de desbloqueo no contiene ningún token.",
-    "auth.signup.title": "Crear cuenta",
-    "auth.signup.intro":
-      "Introduce tu correo electrónico. Te enviaremos un enlace de activación con el que podrás establecer tu contraseña.",
-    "auth.signup.email": "Correo electrónico",
-    "auth.signup.submit": "Enviar enlace de activación",
-    "auth.signup.submitting": "…",
-    "auth.signup.successTitle": "Correo enviado",
-    "auth.signup.successBody":
-      "Te hemos enviado un enlace de activación a tu correo electrónico. Haz clic en él para establecer tu contraseña e iniciar sesión.",
-    "auth.signup.resend": "Reenviar correo",
-    "auth.signup.haveAccount": "¿Ya tienes una cuenta? Inicia sesión",
-    "auth.signupComplete.title": "Establecer contraseña",
-    "auth.signupComplete.intro":
-      "Elige una contraseña (al menos 8 caracteres) para tu nueva cuenta.",
-    "auth.signupComplete.password": "Contraseña",
-    "auth.signupComplete.confirmPassword": "Confirmar contraseña",
-    "auth.signupComplete.tooShort": "La contraseña debe tener al menos 8 caracteres.",
-    "auth.signupComplete.mismatch": "Las contraseñas no coinciden.",
-    "auth.signupComplete.submit": "Activar cuenta",
-    "auth.signupComplete.submitting": "…",
-    "auth.signupComplete.missingToken":
-      "El enlace de activación no contiene ningún token. Solicita uno nuevo.",
-    "auth.inviteAccept.title": "Aceptar invitación",
-    "auth.inviteAccept.intro":
-      "Te han invitado a un espacio de trabajo. Haz clic en 'Aceptar' para unirte.",
-    "auth.inviteAccept.loggedInAs": "Has iniciado sesión — haz clic en 'Aceptar' para unirte.",
-    "auth.inviteAccept.email": "Correo electrónico",
-    "auth.inviteAccept.password": "Contraseña",
-    "auth.inviteAccept.acceptButton": "Aceptar",
-    "auth.inviteAccept.submit": "Aceptar e iniciar sesión",
-    "auth.inviteAccept.submitting": "…",
-    "auth.inviteAccept.useOtherAccount": "Iniciar sesión con otra cuenta",
-    "auth.inviteAccept.toggleNew": "Todavía no tengo una cuenta",
-    "auth.inviteAccept.toggleExisting": "Ya tengo una cuenta",
-    "auth.inviteAccept.missingToken":
-      "El enlace de invitación no contiene ningún token o no es válido.",
-    "auth.inviteAccept.goToLogin": "Ir a iniciar sesión",
-    "auth.user.menu.label": "Cuenta",
-    "auth.user.menu.logout": "Cerrar sesión",
-    "auth.tenant.switcher.label": "Tenant",
-    "auth.tenant.switcher.none": "Sin tenant",
-  },
 };
 
 // Kanonische Implementierung lebt jetzt im Renderer (neben

package/src/auth-email-password/web/__tests__/confirm-account-unlock-screen.test.tsx

@@ -9,8 +9,8 @@ installFetchMock();
 describe("ConfirmAccountUnlockScreen", () => {
   test("ohne Token → missing-token page", () => {
     renderWithProviders(<ConfirmAccountUnlockScreen />);
-    expect(screen.getByText(/enthält keinen Token/i)).toBeTruthy();
-    expect(screen.getByRole("link", { name: "Zum Login" }).getAttribute("href")).toBe("/login");
+    expect(screen.getByText(/missing a token/i)).toBeTruthy();
+    expect(screen.getByRole("link", { name: "Go to sign in" }).getAttribute("href")).toBe("/login");
   });
 
   test("mit Token + 200 → success after auto-submit", async () => {
@@ -29,9 +29,9 @@ describe("ConfirmAccountUnlockScreen", () => {
           body: JSON.stringify({ token: "unlock-tok" }),
         }),
       );
-      expect(screen.getByText("Konto entsperrt")).toBeTruthy();
+      expect(screen.getByText("Account unlocked")).toBeTruthy();
     });
-    expect(screen.getByRole("link", { name: "Zum Login" }).getAttribute("href")).toBe("/home");
+    expect(screen.getByRole("link", { name: "Go to sign in" }).getAttribute("href")).toBe("/home");
   });
 
   test("mit Token + 422 → error state", async () => {
@@ -43,14 +43,14 @@ describe("ConfirmAccountUnlockScreen", () => {
     renderWithProviders(<ConfirmAccountUnlockScreen token="bad" />);
 
     await waitFor(() => {
-      expect(screen.getByText("Entsperren fehlgeschlagen")).toBeTruthy();
+      expect(screen.getByText("Unlock failed")).toBeTruthy();
     });
-    expect(screen.getByRole("link", { name: "Zum Login" })).toBeTruthy();
+    expect(screen.getByRole("link", { name: "Go to sign in" })).toBeTruthy();
   });
 
   test("custom title on missing-token uses errorTitle slot only when set", () => {
     renderWithProviders(<ConfirmAccountUnlockScreen title="Unlock kaputt" />);
     expect(screen.getByText("Unlock kaputt")).toBeTruthy();
-    expect(screen.queryByText("Entsperren fehlgeschlagen")).toBeNull();
+    expect(screen.queryByText("Unlock failed")).toBeNull();
   });
 });

package/src/auth-email-password/web/__tests__/forgot-password-screen.test.tsx

@@ -9,9 +9,9 @@ installFetchMock();
 describe("ForgotPasswordScreen", () => {
   test("rendert title + email-input + submit-button (de)", () => {
     renderWithProviders(<ForgotPasswordScreen />);
-    expect(screen.getByText("Passwort zurücksetzen")).toBeTruthy();
-    expect(screen.getByLabelText(/^E-Mail/)).toBeTruthy();
-    expect(screen.getByRole("button", { name: "Link anfordern" })).toBeTruthy();
+    expect(screen.getByText("Reset password")).toBeTruthy();
+    expect(screen.getByLabelText(/^Email/)).toBeTruthy();
+    expect(screen.getByRole("button", { name: "Request link" })).toBeTruthy();
   });
 
   test("submit ruft /api/auth/request-password-reset mit der Email", async () => {
@@ -19,10 +19,10 @@ describe("ForgotPasswordScreen", () => {
     globalThis.fetch = fetchMock as unknown as typeof fetch;
 
     renderWithProviders(<ForgotPasswordScreen />);
-    fireEvent.change(screen.getByLabelText(/^E-Mail/), {
+    fireEvent.change(screen.getByLabelText(/^Email/), {
       target: { value: "user@example.com" },
     });
-    fireEvent.click(screen.getByRole("button", { name: "Link anfordern" }));
+    fireEvent.click(screen.getByRole("button", { name: "Request link" }));
 
     await waitFor(() => {
       expect(fetchMock).toHaveBeenCalledWith(
@@ -35,17 +35,17 @@ describe("ForgotPasswordScreen", () => {
     });
   });
 
-  test("nach erfolgreichem Submit: success-Banner + 'Zurück zum Login'-Link", async () => {
+  test("nach erfolgreichem Submit: success-Banner + 'Back to login'-Link", async () => {
     renderWithProviders(<ForgotPasswordScreen />);
-    fireEvent.change(screen.getByLabelText(/^E-Mail/), {
+    fireEvent.change(screen.getByLabelText(/^Email/), {
       target: { value: "user@example.com" },
     });
-    fireEvent.click(screen.getByRole("button", { name: "Link anfordern" }));
+    fireEvent.click(screen.getByRole("button", { name: "Request link" }));
 
     await waitFor(() => {
-      expect(screen.getByText("Mail gesendet")).toBeTruthy();
+      expect(screen.getByText("Email sent")).toBeTruthy();
     });
-    expect(screen.getByRole("link", { name: /Zurück zum Login/i })).toBeTruthy();
+    expect(screen.getByRole("link", { name: /Back to sign in/i })).toBeTruthy();
   });
 
   test("server 5xx → error-banner statt Success-State", async () => {
@@ -54,14 +54,14 @@ describe("ForgotPasswordScreen", () => {
     ) as unknown as typeof fetch;
 
     renderWithProviders(<ForgotPasswordScreen />);
-    fireEvent.change(screen.getByLabelText(/^E-Mail/), {
+    fireEvent.change(screen.getByLabelText(/^Email/), {
       target: { value: "user@example.com" },
     });
-    fireEvent.click(screen.getByRole("button", { name: "Link anfordern" }));
+    fireEvent.click(screen.getByRole("button", { name: "Request link" }));
 
     await waitFor(() => {
-      expect(screen.getByRole("alert").textContent).toContain("schief");
+      expect(screen.getByRole("alert").textContent).toContain("wrong");
     });
-    expect(screen.queryByText("Mail gesendet")).toBeNull();
+    expect(screen.queryByText("Email sent")).toBeNull();
   });
 });

package/src/auth-email-password/web/__tests__/invite-accept-screen.test.tsx

@@ -15,7 +15,7 @@ import { defaultTranslations } from "../../i18n";
 import { InviteAcceptScreen } from "../invite-accept-screen";
 import { makeSessionApi, renderWithProviders } from "./test-utils";
 
-const resolver = createStaticLocaleResolver({ locale: "de" });
+const resolver = createStaticLocaleResolver({ locale: "en" });
 
 function renderWithoutSessionProvider(token: string) {
   return render(
@@ -51,18 +51,16 @@ afterEach(() => {
 describe("InviteAcceptScreen — no <SessionProvider> ancestor (632/1)", () => {
   test("renders the anonymous accept-form instead of throwing", () => {
     renderWithoutSessionProvider("tok-123");
-    expect(screen.getByText("Einladung annehmen")).toBeTruthy();
-    expect(screen.getByLabelText(/^Passwort/)).toBeTruthy();
+    expect(screen.getByText("Accept invitation")).toBeTruthy();
+    expect(screen.getByLabelText(/^Password/)).toBeTruthy();
     // Anon default mode is "anon-existing" — email field is shown too.
-    expect(screen.getByLabelText(/^E-Mail/)).toBeTruthy();
+    expect(screen.getByLabelText(/^Email/)).toBeTruthy();
   });
 
   test("missing token still renders (no session access needed for that branch)", () => {
     renderWithoutSessionProvider("");
-    expect(
-      screen.getByText("Der Einladungs-Link enthält keinen Token oder ist ungültig."),
-    ).toBeTruthy();
-    expect(screen.getByRole("link", { name: "Zum Login" }).getAttribute("href")).toBe("/login");
+    expect(screen.getByText("The invitation link is missing or invalid.")).toBeTruthy();
+    expect(screen.getByRole("link", { name: "Go to sign in" }).getAttribute("href")).toBe("/login");
   });
 });
 
@@ -71,9 +69,9 @@ describe("InviteAcceptScreen — logged-in branch", () => {
     renderWithProviders(<InviteAcceptScreen token="tok-123" />, {
       session: makeSessionApi({ status: "authenticated" }),
     });
-    expect(screen.getByText(/Du bist eingeloggt/)).toBeTruthy();
-    expect(screen.getByRole("button", { name: "Annehmen" })).toBeTruthy();
-    expect(screen.queryByLabelText(/^E-Mail/)).toBeNull();
+    expect(screen.getByText(/user@example.com/)).toBeTruthy();
+    expect(screen.getByRole("button", { name: "Accept" })).toBeTruthy();
+    expect(screen.queryByLabelText(/^Email/)).toBeNull();
   });
 
   test("accept logged-in success redirects via loggedInHref function", async () => {
@@ -87,7 +85,7 @@ describe("InviteAcceptScreen — logged-in branch", () => {
       <InviteAcceptScreen token="tok-123" loggedInHref={({ tenantId }) => `/${tenantId}/home`} />,
       { session: makeSessionApi({ status: "authenticated" }) },
     );
-    fireEvent.click(screen.getByRole("button", { name: "Annehmen" }));
+    fireEvent.click(screen.getByRole("button", { name: "Accept" }));
     await waitFor(() => {
       expect(assign).toHaveBeenCalledWith("/tenant-new/home");
     });
@@ -100,7 +98,7 @@ describe("InviteAcceptScreen — logged-in branch", () => {
     renderWithProviders(<InviteAcceptScreen token="bad" />, {
       session: makeSessionApi({ status: "authenticated" }),
     });
-    fireEvent.click(screen.getByRole("button", { name: "Annehmen" }));
+    fireEvent.click(screen.getByRole("button", { name: "Accept" }));
     await waitFor(() => {
       expect(screen.getByRole("alert").textContent).toContain("auth.errors.invalidInviteToken");
     });
@@ -110,8 +108,8 @@ describe("InviteAcceptScreen — logged-in branch", () => {
     renderWithProviders(<InviteAcceptScreen token="tok-123" />, {
       session: makeSessionApi({ status: "authenticated" }),
     });
-    fireEvent.click(screen.getByRole("button", { name: "Mit anderem Account anmelden" }));
-    expect(screen.getByLabelText(/^E-Mail/)).toBeTruthy();
+    fireEvent.click(screen.getByRole("button", { name: "Sign in with a different account" }));
+    expect(screen.getByLabelText(/^Email/)).toBeTruthy();
   });
 });
 
@@ -122,9 +120,9 @@ describe("InviteAcceptScreen — anonymous branches", () => {
     );
     globalThis.fetch = fetchMock as unknown as typeof fetch;
     renderWithoutSessionProvider("tok-123");
-    fireEvent.change(screen.getByLabelText(/^E-Mail/), { target: { value: "a@example.com" } });
-    fireEvent.change(screen.getByLabelText(/^Passwort/), { target: { value: "secret123" } });
-    fireEvent.click(screen.getByRole("button", { name: "Annehmen + Anmelden" }));
+    fireEvent.change(screen.getByLabelText(/^Email/), { target: { value: "a@example.com" } });
+    fireEvent.change(screen.getByLabelText(/^Password/), { target: { value: "secret123" } });
+    fireEvent.click(screen.getByRole("button", { name: "Accept + sign in" }));
     await waitFor(() => {
       expect(fetchMock).toHaveBeenCalledWith(
         "/api/auth/invite-accept-with-login",
@@ -142,10 +140,10 @@ describe("InviteAcceptScreen — anonymous branches", () => {
     );
     globalThis.fetch = fetchMock as unknown as typeof fetch;
     renderWithoutSessionProvider("tok-123");
-    fireEvent.click(screen.getByRole("button", { name: "Ich habe noch keinen Account" }));
-    expect(screen.queryByLabelText(/^E-Mail/)).toBeNull();
-    fireEvent.change(screen.getByLabelText(/^Passwort/), { target: { value: "newpass123" } });
-    fireEvent.click(screen.getByRole("button", { name: "Annehmen + Anmelden" }));
+    fireEvent.click(screen.getByRole("button", { name: "I don't have an account yet" }));
+    expect(screen.queryByLabelText(/^Email/)).toBeNull();
+    fireEvent.change(screen.getByLabelText(/^Password/), { target: { value: "newpass123" } });
+    fireEvent.click(screen.getByRole("button", { name: "Accept + sign in" }));
     await waitFor(() => {
       expect(fetchMock).toHaveBeenCalledWith(
         "/api/auth/invite-signup-complete",
@@ -161,9 +159,9 @@ describe("InviteAcceptScreen — anonymous branches", () => {
       async () => new Response(null, { status: 422 }),
     ) as unknown as typeof fetch;
     renderWithoutSessionProvider("tok-123");
-    fireEvent.change(screen.getByLabelText(/^E-Mail/), { target: { value: "a@example.com" } });
-    fireEvent.change(screen.getByLabelText(/^Passwort/), { target: { value: "wrong" } });
-    fireEvent.click(screen.getByRole("button", { name: "Annehmen + Anmelden" }));
+    fireEvent.change(screen.getByLabelText(/^Email/), { target: { value: "a@example.com" } });
+    fireEvent.change(screen.getByLabelText(/^Password/), { target: { value: "wrong" } });
+    fireEvent.click(screen.getByRole("button", { name: "Accept + sign in" }));
     await waitFor(() => {
       expect(screen.getByRole("alert").textContent).toContain("auth.errors.invalidInviteToken");
     });