@owlmeans/client-panel 0.1.18-rc.13 → 0.1.18-rc.16

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/client-panel",
-  "version": "0.1.18-rc.12",
-  "generatedAt": "2026-08-25T21:16:30.725Z",
+  "version": "0.1.18-rc.15",
+  "generatedAt": "2026-08-27T21:18:31.381Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/client-panel/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/client-panel
 
 **Layer:** Client
-**Install:** `"@owlmeans/client-panel": "^0.1.18-rc.12"` in `dependencies`
+**Install:** `"@owlmeans/client-panel": "^0.1.18-rc.15"` in `dependencies`
 
 ## Key Exports
 

package/build/auth/index.d.ts

@@ -1,2 +1,3 @@
 export * from './i18n.js';
+export * from './login/index.js';
 //# sourceMappingURL=index.d.ts.map

package/build/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AACA,cAAc,WAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,kBAAkB,CAAA"}

package/build/auth/index.js

@@ -1,2 +1,3 @@
 export * from './i18n.js';
+export * from './login/index.js';
 //# sourceMappingURL=index.js.map

package/build/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AACA,cAAc,WAAW,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,kBAAkB,CAAA"}

package/build/auth/login/index.d.ts

@@ -0,0 +1,3 @@
+export type * from './types.js';
+export * from './model.js';
+//# sourceMappingURL=index.d.ts.map

package/build/auth/login/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/login/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,YAAY,CAAA"}

package/build/auth/login/index.js

@@ -0,0 +1,2 @@
+export * from './model.js';
+//# sourceMappingURL=index.js.map

package/build/auth/login/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/login/index.ts"],"names":[],"mappings":"AACA,cAAc,YAAY,CAAA"}

package/build/auth/login/model.d.ts

@@ -0,0 +1,10 @@
+import type { LoginMethodsModel, UseLoginMethodsOptions } from './types.js';
+/**
+ * Everything a sign-in screen needs, with no opinion about how it looks.
+ *
+ * Headless and cross-platform, like `usePanelNav`: the rules about what may be offered, what must
+ * be confirmed first and what the credit line says are the same on every platform, and only the
+ * rendering differs. A renderer that re-derives any of them will drift from the one that does not.
+ */
+export declare const useLoginMethods: (opts?: UseLoginMethodsOptions) => LoginMethodsModel;
+//# sourceMappingURL=model.d.ts.map

package/build/auth/login/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../../src/auth/login/model.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAE3E;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,UAAW,sBAAsB,KAAG,iBAmF/D,CAAA"}

package/build/auth/login/model.js

@@ -0,0 +1,84 @@
+import { useCallback, useMemo, useState } from 'react';
+import { useContext, useNavigate } from '@owlmeans/client';
+import { acceptTerms, primaryLoginMethod, resolveCredit, resolveTerms, termsAccepted, LoginOutcome, LOGIN_SERVICE, } from '@owlmeans/client-auth/login';
+/**
+ * Everything a sign-in screen needs, with no opinion about how it looks.
+ *
+ * Headless and cross-platform, like `usePanelNav`: the rules about what may be offered, what must
+ * be confirmed first and what the credit line says are the same on every platform, and only the
+ * rendering differs. A renderer that re-derives any of them will drift from the one that does not.
+ */
+export const useLoginMethods = (opts) => {
+    const context = useContext();
+    const nav = useNavigate();
+    const login = context.service(LOGIN_SERVICE);
+    const cfg = opts?.config ?? context.cfg.security?.auth?.login;
+    const brand = context.cfg.brand;
+    const resolved = useMemo(() => resolveTerms(opts?.terms ?? cfg?.terms), [opts?.terms, cfg]);
+    const credit = useMemo(() => resolveCredit(cfg?.credit, brand, context.cfg.service), [cfg, brand, context]);
+    const [accepted, setAccepted] = useState(() => termsAccepted(resolved));
+    const [attempted, setAttempted] = useState(false);
+    const [busy, setBusy] = useState(null);
+    const [outcome, setOutcome] = useState(null);
+    const [error, setError] = useState(null);
+    const env = login.env();
+    const all = login.methods({
+        context, env,
+        navigate: (alias, params) => { nav.go(alias, params != null ? { params } : undefined); },
+    });
+    const methods = typeof opts?.methods === 'function'
+        ? opts.methods(all)
+        : opts?.methods ?? all;
+    const blocked = resolved != null && resolved.required && !accepted;
+    const select = useCallback((method) => {
+        if (blocked) {
+            // Nothing starts, and no window opens. The screen renders the reason instead — which is why
+            // a control must never be `disabled`: a disabled control swallows the click and says nothing.
+            setAttempted(true);
+            return;
+        }
+        setBusy(method.id);
+        setError(null);
+        void method.start({
+            context, env,
+            navigate: (alias, params) => { nav.go(alias, params != null ? { params } : undefined); },
+        }).then(result => {
+            setOutcome(result);
+            // `Redirected` means the browser is leaving; keeping the control busy is honest there.
+            if (result !== LoginOutcome.Redirected) {
+                setBusy(null);
+            }
+        }).catch((e) => {
+            setError(e.message);
+            setOutcome(LoginOutcome.Failed);
+            setBusy(null);
+        });
+    }, [blocked, context, env, nav]);
+    const accept = useCallback((value) => {
+        setAccepted(value);
+        setAttempted(false);
+        acceptTerms(resolved, value);
+    }, [resolved]);
+    return {
+        methods,
+        primary: primaryLoginMethod(methods),
+        terms: {
+            required: resolved?.required ?? false,
+            accepted: resolved == null ? true : accepted,
+            attempted,
+            urls: {
+                terms: resolved?.terms ?? '',
+                privacy: resolved?.privacy ?? '',
+                ...(resolved?.cookies != null ? { cookies: resolved.cookies } : {}),
+            },
+            accept,
+        },
+        credit,
+        blocked,
+        busy,
+        outcome,
+        error,
+        select,
+    };
+};
+//# sourceMappingURL=model.js.map

package/build/auth/login/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../../src/auth/login/model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE1D,OAAO,EACL,WAAW,EAAE,kBAAkB,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAC3E,YAAY,EAAE,aAAa,GAC5B,MAAM,6BAA6B,CAAA;AAIpC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAA6B,EAAqB,EAAE;IAClF,MAAM,OAAO,GAAG,UAAU,EAA6B,CAAA;IACvD,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAe,aAAa,CAAC,CAAA;IAE1D,MAAM,GAAG,GAAG,IAAI,EAAE,MAAM,IAAK,OAAO,CAAC,GAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAA;IAC/E,MAAM,KAAK,GAAI,OAAO,CAAC,GAAoB,CAAC,KAAK,CAAA;IAEjD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;IAC3F,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CACpF,CAAA;IAED,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAA;IACvE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IACjD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IACrD,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAsB,IAAI,CAAC,CAAA;IACjE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAEvD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAA;IACvB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;QACxB,OAAO,EAAE,GAAG;QACZ,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC;KACxF,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,OAAO,KAAK,UAAU;QACjD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QACnB,CAAC,CAAC,IAAI,EAAE,OAAO,IAAI,GAAG,CAAA;IAExB,MAAM,OAAO,GAAG,QAAQ,IAAI,IAAI,IAAI,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAA;IAElE,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,MAAmB,EAAE,EAAE;QACjD,IAAI,OAAO,EAAE,CAAC;YACZ,4FAA4F;YAC5F,8FAA8F;YAC9F,YAAY,CAAC,IAAI,CAAC,CAAA;YAElB,OAAM;QACR,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAClB,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,KAAK,MAAM,CAAC,KAAK,CAAC;YAChB,OAAO,EAAE,GAAG;YACZ,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC;SACxF,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YACf,UAAU,CAAC,MAAM,CAAC,CAAA;YAClB,uFAAuF;YACvF,IAAI,MAAM,KAAK,YAAY,CAAC,UAAU,EAAE,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,CAAA;YACf,CAAC;QACH,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAQ,EAAE,EAAE;YACpB,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;YACnB,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;YAC/B,OAAO,CAAC,IAAI,CAAC,CAAA;QACf,CAAC,CAAC,CAAA;IACJ,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAEhC,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,KAAc,EAAE,EAAE;QAC5C,WAAW,CAAC,KAAK,CAAC,CAAA;QAClB,YAAY,CAAC,KAAK,CAAC,CAAA;QACnB,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC9B,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;IAEd,OAAO;QACL,OAAO;QACP,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC;QACpC,KAAK,EAAE;YACL,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,KAAK;YACrC,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;YAC5C,SAAS;YACT,IAAI,EAAE;gBACJ,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;gBAC5B,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,EAAE;gBAChC,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE;YACD,MAAM;SACP;QACD,MAAM;QACN,OAAO;QACP,IAAI;QACJ,OAAO;QACP,KAAK;QACL,MAAM;KACP,CAAA;AACH,CAAC,CAAA"}

package/build/auth/login/types.d.ts

@@ -0,0 +1,46 @@
+import type { LoginMethod, LoginOutcome } from '@owlmeans/client-auth/login';
+import type { LoginScreenConfig, LoginTermsConfig } from '@owlmeans/config';
+export interface UseLoginMethodsOptions {
+    /** Overrides the configuration the context carries. */
+    config?: LoginScreenConfig;
+    terms?: LoginTermsConfig | false;
+    /** Replace or reorder what the resolver produced. */
+    methods?: LoginMethod[] | ((methods: LoginMethod[]) => LoginMethod[]);
+}
+export interface LoginTermsModel {
+    required: boolean;
+    accepted: boolean;
+    /** A blocked selection was attempted — render the explanation. */
+    attempted: boolean;
+    urls: {
+        terms: string;
+        privacy: string;
+        cookies?: string;
+    };
+    accept: (value: boolean) => void;
+}
+export interface LoginCreditModel {
+    poweredBy: boolean;
+    line: string | null;
+}
+export interface LoginMethodsModel {
+    methods: LoginMethod[];
+    /** The one a screen highlights and focuses. It is never started automatically. */
+    primary: LoginMethod | null;
+    terms: LoginTermsModel;
+    credit: LoginCreditModel;
+    /** True while the terms have not been confirmed and confirming them is required. */
+    blocked: boolean;
+    /** Id of the method currently starting. */
+    busy: string | null;
+    outcome: LoginOutcome | null;
+    error: string | null;
+    /**
+     * Start a method.
+     *
+     * NOT async, and it awaits nothing before delegating — the flow may need to open a window, and a
+     * window opened after the click has finished being handled is eaten by the popup blocker.
+     */
+    select: (method: LoginMethod) => void;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/auth/login/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/auth/login/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC5E,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAE3E,MAAM,WAAW,sBAAsB;IACrC,uDAAuD;IACvD,MAAM,CAAC,EAAE,iBAAiB,CAAA;IAC1B,KAAK,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAA;IAChC,qDAAqD;IACrD,OAAO,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC,CAAA;CACtE;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,OAAO,CAAA;IACjB,kEAAkE;IAClE,SAAS,EAAE,OAAO,CAAA;IAClB,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1D,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,OAAO,CAAA;IAClB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,WAAW,EAAE,CAAA;IACtB,kFAAkF;IAClF,OAAO,EAAE,WAAW,GAAG,IAAI,CAAA;IAC3B,KAAK,EAAE,eAAe,CAAA;IACtB,MAAM,EAAE,gBAAgB,CAAA;IACxB,oFAAoF;IACpF,OAAO,EAAE,OAAO,CAAA;IAChB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;IAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB;;;;;OAKG;IACH,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAA;CACtC"}

package/build/auth/login/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/auth/login/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/auth/login/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/client-panel",
-  "version": "0.1.18-rc.13",
+  "version": "0.1.18-rc.16",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -36,16 +36,17 @@
   },
   "dependencies": {
     "@hookform/resolvers": "^5.2.2",
-    "@owlmeans/client": "^0.1.18-rc.9",
-    "@owlmeans/client-i18n": "^0.1.18-rc.8",
-    "@owlmeans/client-entrypoint": "^0.1.18-rc.8",
-    "@owlmeans/client-route": "^0.1.18-rc.8",
+    "@owlmeans/client": "^0.1.18-rc.10",
+    "@owlmeans/client-i18n": "^0.1.18-rc.9",
+    "@owlmeans/client-entrypoint": "^0.1.18-rc.9",
+    "@owlmeans/client-route": "^0.1.18-rc.9",
     "@owlmeans/error": "^0.1.18-rc.6",
-    "@owlmeans/entrypoint": "^0.1.18-rc.7"
+    "@owlmeans/entrypoint": "^0.1.18-rc.8"
   },
   "peerDependencies": {
-    "@owlmeans/auth": "^0.1.18-rc.6",
-    "@owlmeans/client-auth": "^0.1.18-rc.10",
+    "@owlmeans/auth": "^0.1.18-rc.7",
+    "@owlmeans/client-auth": "^0.1.18-rc.13",
+    "@owlmeans/config": "^0.1.18-rc.8",
     "@owlmeans/i18n": "^0.1.18-rc.6",
     "@owlmeans/router": "^0.1.18-rc.6",
     "ajv": "*",
@@ -62,8 +63,8 @@
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",
-    "@owlmeans/auth": "^0.1.18-rc.6",
-    "@owlmeans/client-auth": "^0.1.18-rc.10",
+    "@owlmeans/auth": "^0.1.18-rc.7",
+    "@owlmeans/client-auth": "^0.1.18-rc.13",
     "@types/react": "^19.2.17",
     "nodemon": "^3.1.14",
     "react-hook-form": "^7.53.0",

package/src/auth/index.ts

@@ -1,2 +1,2 @@
-
 export * from './i18n.js'
+export * from './login/index.js'

package/src/auth/login/index.ts

@@ -0,0 +1,2 @@
+export type * from './types.js'
+export * from './model.js'

package/src/auth/login/model.ts

@@ -0,0 +1,101 @@
+import { useCallback, useMemo, useState } from 'react'
+import { useContext, useNavigate } from '@owlmeans/client'
+import type { CommonConfig } from '@owlmeans/config'
+import {
+  acceptTerms, primaryLoginMethod, resolveCredit, resolveTerms, termsAccepted,
+  LoginOutcome, LOGIN_SERVICE,
+} from '@owlmeans/client-auth/login'
+import type { LoginContext, LoginMethod, LoginService } from '@owlmeans/client-auth/login'
+import type { LoginMethodsModel, UseLoginMethodsOptions } from './types.js'
+
+/**
+ * Everything a sign-in screen needs, with no opinion about how it looks.
+ *
+ * Headless and cross-platform, like `usePanelNav`: the rules about what may be offered, what must
+ * be confirmed first and what the credit line says are the same on every platform, and only the
+ * rendering differs. A renderer that re-derives any of them will drift from the one that does not.
+ */
+export const useLoginMethods = (opts?: UseLoginMethodsOptions): LoginMethodsModel => {
+  const context = useContext() as unknown as LoginContext
+  const nav = useNavigate()
+  const login = context.service<LoginService>(LOGIN_SERVICE)
+
+  const cfg = opts?.config ?? (context.cfg as CommonConfig).security?.auth?.login
+  const brand = (context.cfg as CommonConfig).brand
+
+  const resolved = useMemo(() => resolveTerms(opts?.terms ?? cfg?.terms), [opts?.terms, cfg])
+  const credit = useMemo(
+    () => resolveCredit(cfg?.credit, brand, context.cfg.service), [cfg, brand, context]
+  )
+
+  const [accepted, setAccepted] = useState(() => termsAccepted(resolved))
+  const [attempted, setAttempted] = useState(false)
+  const [busy, setBusy] = useState<string | null>(null)
+  const [outcome, setOutcome] = useState<LoginOutcome | null>(null)
+  const [error, setError] = useState<string | null>(null)
+
+  const env = login.env()
+  const all = login.methods({
+    context, env,
+    navigate: (alias, params) => { nav.go(alias, params != null ? { params } : undefined) },
+  })
+  const methods = typeof opts?.methods === 'function'
+    ? opts.methods(all)
+    : opts?.methods ?? all
+
+  const blocked = resolved != null && resolved.required && !accepted
+
+  const select = useCallback((method: LoginMethod) => {
+    if (blocked) {
+      // Nothing starts, and no window opens. The screen renders the reason instead — which is why
+      // a control must never be `disabled`: a disabled control swallows the click and says nothing.
+      setAttempted(true)
+
+      return
+    }
+    setBusy(method.id)
+    setError(null)
+    void method.start({
+      context, env,
+      navigate: (alias, params) => { nav.go(alias, params != null ? { params } : undefined) },
+    }).then(result => {
+      setOutcome(result)
+      // `Redirected` means the browser is leaving; keeping the control busy is honest there.
+      if (result !== LoginOutcome.Redirected) {
+        setBusy(null)
+      }
+    }).catch((e: Error) => {
+      setError(e.message)
+      setOutcome(LoginOutcome.Failed)
+      setBusy(null)
+    })
+  }, [blocked, context, env, nav])
+
+  const accept = useCallback((value: boolean) => {
+    setAccepted(value)
+    setAttempted(false)
+    acceptTerms(resolved, value)
+  }, [resolved])
+
+  return {
+    methods,
+    primary: primaryLoginMethod(methods),
+    terms: {
+      required: resolved?.required ?? false,
+      accepted: resolved == null ? true : accepted,
+      attempted,
+      urls: {
+        terms: resolved?.terms ?? '',
+        privacy: resolved?.privacy ?? '',
+        ...(resolved?.cookies != null ? { cookies: resolved.cookies } : {}),
+      },
+      accept,
+    },
+    credit,
+    blocked,
+    busy,
+    outcome,
+    error,
+    select,
+  }
+}

package/src/auth/login/types.ts

@@ -0,0 +1,45 @@
+import type { LoginMethod, LoginOutcome } from '@owlmeans/client-auth/login'
+import type { LoginScreenConfig, LoginTermsConfig } from '@owlmeans/config'
+
+export interface UseLoginMethodsOptions {
+  /** Overrides the configuration the context carries. */
+  config?: LoginScreenConfig
+  terms?: LoginTermsConfig | false
+  /** Replace or reorder what the resolver produced. */
+  methods?: LoginMethod[] | ((methods: LoginMethod[]) => LoginMethod[])
+}
+
+export interface LoginTermsModel {
+  required: boolean
+  accepted: boolean
+  /** A blocked selection was attempted — render the explanation. */
+  attempted: boolean
+  urls: { terms: string, privacy: string, cookies?: string }
+  accept: (value: boolean) => void
+}
+
+export interface LoginCreditModel {
+  poweredBy: boolean
+  line: string | null
+}
+
+export interface LoginMethodsModel {
+  methods: LoginMethod[]
+  /** The one a screen highlights and focuses. It is never started automatically. */
+  primary: LoginMethod | null
+  terms: LoginTermsModel
+  credit: LoginCreditModel
+  /** True while the terms have not been confirmed and confirming them is required. */
+  blocked: boolean
+  /** Id of the method currently starting. */
+  busy: string | null
+  outcome: LoginOutcome | null
+  error: string | null
+  /**
+   * Start a method.
+   *
+   * NOT async, and it awaits nothing before delegating — the flow may need to open a window, and a
+   * window opened after the click has finished being handled is eaten by the popup blocker.
+   */
+  select: (method: LoginMethod) => void
+}