@owlmeans/web-panel 0.1.18-rc.57 → 0.1.18-rc.58

package/README.md

@@ -11,7 +11,7 @@ but never started.
 ## Installation
 
 ```sh
-bun add @owlmeans/web-panel@^0.1.18-rc.57
+bun add @owlmeans/web-panel@^0.1.18-rc.58
 ```
 
 Peer requirements (the consuming app provides these): `react`, `react-dom`,
@@ -496,7 +496,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.34
+npx @owlmeans/agent-skills@^0.1.18-rc.35
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/web-panel",
-  "version": "0.1.18-rc.57",
-  "generatedAt": "2026-09-22T20:45:24.070Z",
+  "version": "0.1.18-rc.58",
+  "generatedAt": "2026-09-22T21:57:18.836Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/web-panel/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/web-panel
 
 **Layer:** Web (React)
-**Install:** `"@owlmeans/web-panel": "^0.1.18-rc.57"` in `dependencies`
+**Install:** `"@owlmeans/web-panel": "^0.1.18-rc.58"` in `dependencies`
 
 ## Key Exports
 
@@ -21,7 +21,7 @@ user-invocable: false
 | `ThemeToggle` / `useColorScheme` | The light/dark switcher (`ThemeToggleProps`, `ThemeToggleLabels`) and the hook behind it (`ColorSchemeModel`) — see *Light and dark* below |
 | `SocketReloadDialog` | The global "connection lost — try again / reload" prompt (opt in via `cfg.socket.reloadDialog`) `PanelApp` mounts automatically — see below. The hooks it reads, `useSocketStatus` and `useSocketRetry`, are imported from `@owlmeans/client-socket`, not from this package |
 | `Link` | An `<a>` addressing an entrypoint alias (or a literal `src`), with the label taken from i18n |
-| `LoginScreen` / `LocalizedLoginScreen` / `appendLoginScreen` | The identity-provider choice screen — see `login-methods` |
+| `LoginScreen` / `LocalizedLoginScreen` / `appendLoginScreen` | The identity-provider choice screen — see `login-methods`. `LoginScreen` is pure w.r.t. `locale` too, exactly like `translate`: it is a prop, defaulting to nothing, never an implicit `useLanguage()` read, because a component that reaches for i18n context directly crashes an app mounted without one. `LocalizedLoginScreen` supplies `useLanguage()`'s value when the caller does not pass its own |
 | `render(context, opts?)` | Mounts the tree inside `PanelApp`, with the browser language detector installed on the i18n instance. `opts` is `RenderOptions` plus `rootClassName` |
 | `PanelApp` | That wrapper on its own — the themed root `div` plus the i18n provider — for a host that mounts the tree itself |
 | `useContext<C, T>()` | The current context, from React. `AppContext` adds `context.flow()` over `@owlmeans/web-client`'s |
@@ -421,6 +421,21 @@ import { Form, TextInput, SubmitButton, Button } from '@owlmeans/web-panel'
   `contained` and the rest `outlined`, calling `onSelect(option)`. `name` prefixes each option's
   label key as `<name>.<option>`.
 
+### The terms confirmation — `LoginTerms`
+
+`components/login/terms.tsx` renders `LoginTermsModel` (`@owlmeans/client-panel/auth`) via
+`termsSentence` (`@owlmeans/client-auth/login`) rather than re-deriving link/label pairs itself.
+**`[data-login-terms]` marks exactly one checkbox, always** — an e2e suite elsewhere in the platform
+treats it as a strict locator, so a change here must never add a second one, whatever
+billing/product/custom documents a configuration adds. `[data-login-privacy]` is a SIBLING
+paragraph of the checkbox's `<label>`, never nested inside it — a privacy disclosure is not
+something the checkbox consents to. A linked document/notice fragment carries
+`data-login-document="<key>"`. `[data-login-revised]` renders only when the resolved terms carry a
+`revisedAt` (i.e. the configuration set `showRevision: true` and at least one document has its own
+revision date). `LoginTerms` takes `locale?: string` — from `LoginScreen`'s own `locale` prop, never
+read from context directly — for `Intl.ListFormat` and a custom document's locale-keyed `labelMap`.
+Pinned by `tests/login.spec.ts` → the "with billing, product and custom documents configured" block.
+
 ## Subpath: `./consent`
 
 `PanelCookieConsent` and `PanelCookiePolicy` — `@owlmeans/web-consent`'s components bound to this

package/build/components/login/screen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"screen.d.ts","sourceRoot":"","sources":["../../../src/components/login/screen.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAQ/B,OAAO,KAAK,EAAe,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAWhF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CA4F5C,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,EAAE,CAAC,gBAAgB,CAOrD,CAAA"}
+{"version":3,"file":"screen.d.ts","sourceRoot":"","sources":["../../../src/components/login/screen.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAQ/B,OAAO,KAAK,EAAe,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAWhF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CA4F5C,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,EAAE,CAAC,gBAAgB,CASrD,CAAA"}

package/build/components/login/screen.js

@@ -4,7 +4,7 @@ import { Loader2 } from 'lucide-react';
 import { Button } from '../../@/components/ui/button.js';
 import { Card, CardContent, CardHeader, CardTitle, CardDescription } from '../../@/components/ui/card.js';
 import { cn } from '../../@/lib/utils.js';
-import { useI18nLib } from '@owlmeans/client-i18n';
+import { useI18nLib, useLanguage } from '@owlmeans/client-i18n';
 import { useLoginMethods } from '@owlmeans/client-panel/auth';
 import { loginAttemptError } from '@owlmeans/client-auth/login';
 import { LoginMethodIcon } from './icons.js';
@@ -56,7 +56,7 @@ export const LoginScreen = props => {
                                     // visibly actionable independently of a consumer's shadcn setup.
                                     className: cn('w-full justify-center gap-2 cursor-pointer', model.blocked && 'opacity-60'), autoFocus: method.id === model.primary?.id, onClick: () => model.select(method), children: [model.busy === method.id
                                             ? _jsx(Loader2, { className: "size-4 animate-spin" })
-                                            : _jsx(LoginMethodIcon, { name: method.icon, className: "size-4" }), method.label ?? t(`login.method.${method.i18nKey ?? method.id}`, method.id)] }, method.id)) }), model.terms.required && _jsx(LoginTerms, { model: model.terms, translate: t }), (model.error ?? attemptError) != null
+                                            : _jsx(LoginMethodIcon, { name: method.icon, className: "size-4" }), method.label ?? t(`login.method.${method.i18nKey ?? method.id}`, method.id)] }, method.id)) }), model.terms.required && _jsx(LoginTerms, { model: model.terms, translate: t, locale: props.locale }), (model.error ?? attemptError) != null
                             && _jsx("p", { role: "alert", "data-login-error": true, className: "text-sm text-destructive text-center", children: model.error ?? t(attemptError, 'Sign-in did not complete. Please try again.') })] }), _jsx("div", { className: "px-6", children: props.footer ?? _jsx(LoginCredit, { model: model.credit, translate: t }) })] }) });
 };
 /**
@@ -68,6 +68,7 @@ export const LoginScreen = props => {
  */
 export const LocalizedLoginScreen = props => {
     const t = useI18nLib('auth');
-    return _jsx(LoginScreen, { ...props, translate: props.translate ?? ((key, defaultValue) => t(key, { defaultValue })) });
+    const [lng] = useLanguage();
+    return _jsx(LoginScreen, { ...props, translate: props.translate ?? ((key, defaultValue) => t(key, { defaultValue })), locale: props.locale ?? lng });
 };
 //# sourceMappingURL=screen.js.map

package/build/components/login/screen.js.map

@@ -1 +1 @@
-{"version":3,"file":"screen.js","sourceRoot":"","sources":["../../../src/components/login/screen.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAA;AAEtC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAA;AACxD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AACzG,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,MAAM,OAAO,GAAmD;IAC9D,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,MAAM;CACb,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAyB,KAAK,CAAC,EAAE;IACvD,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,IAAY,EAAE,YAAoB,EAAE,EAAE,CAAC,YAAY,CAAC,CAAA;IACnF,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IACvB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAEjF,uDAAuD;IACvD,EAAE;IACF,4FAA4F;IAC5F,gGAAgG;IAChG,+FAA+F;IAC/F,+FAA+F;IAC/F,4FAA4F;IAC5F,gGAAgG;IAChG,4FAA4F;IAC5F,6FAA6F;IAC7F,EAAE;IACF,0EAA0E;IAC1E,OAAO,yCAEL,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,EAC9C,SAAS,EAAE,EAAE,CAAC,6CAA6C,EAAE,KAAK,CAAC,SAAS,CAAC,YAE7E,MAAC,IAAI,IAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC,kBAAkB,CAAC,aAC9D,MAAC,UAAU,IAAC,SAAS,EAAC,gCAAgC,aACnD,IAAI,IAAI,IAAI,IAAI,cAAK,SAAS,EAAC,0BAA0B,YACvD,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,UAAU;gCACvD,CAAC,CAAC,KAAC,IAAI,IAAC,SAAS,EAAC,aAAa,GAAG,CAAC,CAAC,CAAC,IAAI,GACvC,EACN,KAAC,SAAS,IAAC,SAAS,EAAC,SAAS,YAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,GAAa,EACvF,KAAC,eAAe,cACb,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,gBAAgB,EAAE,wCAAwC,CAAC,GAChE,IACP,EAEb,MAAC,WAAW,IAAC,SAAS,EAAC,qBAAqB,aACzC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;4BACvB,CAAC,CAAC,YAAG,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,2CAA2C,YACrE,CAAC,CAAC,aAAa,EAAE,uDAAuD,CAAC,GACxE;4BACJ,CAAC,CAAC,cAAK,SAAS,EAAC,qBAAqB,YACnC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAmB,EAAE,EAAE,CAAC,MAAC,MAAM,IAEjD,IAAI,EAAC,QAAQ,uBACM,MAAM,CAAC,EAAE,EAC5B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,mBAK9C,KAAK,CAAC,OAAO,kBACd,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;oCAChD,oFAAoF;oCACpF,gFAAgF;oCAChF,iEAAiE;oCACjE,SAAS,EAAE,EAAE,CACX,4CAA4C,EAC5C,KAAK,CAAC,OAAO,IAAI,YAAY,CAC9B,EACD,SAAS,EAAE,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,EAC1C,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAElC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE;4CACvB,CAAC,CAAC,KAAC,OAAO,IAAC,SAAS,EAAC,qBAAqB,GAAG;4CAC7C,CAAC,CAAC,KAAC,eAAe,IAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAC,QAAQ,GAAG,EAC5D,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,KAvBvE,MAAM,CAAC,EAAE,CAwBP,CAAC,GACN,EAEP,KAAK,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAC,UAAU,IAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,GAAI,EAOxE,CAAC,KAAK,CAAC,KAAK,IAAI,YAAY,CAAC,IAAI,IAAI;+BACjC,YAAG,IAAI,EAAC,OAAO,4BAAkB,SAAS,EAAC,sCAAsC,YACjF,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,YAAsB,EAAE,6CAA6C,CAAC,GACtF,IACM,EAEd,cAAK,SAAS,EAAC,MAAM,YAClB,KAAK,CAAC,MAAM,IAAI,KAAC,WAAW,IAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,GAAI,GAC/D,IACD,GACH,CAAA;AACR,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAyB,KAAK,CAAC,EAAE;IAChE,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAE5B,OAAO,KAAC,WAAW,OACb,KAAK,EACT,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,GAC/E,CAAA;AACJ,CAAC,CAAA"}
+{"version":3,"file":"screen.js","sourceRoot":"","sources":["../../../src/components/login/screen.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAA;AAEtC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAA;AACxD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AACzG,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,MAAM,OAAO,GAAmD;IAC9D,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,MAAM;CACb,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAyB,KAAK,CAAC,EAAE;IACvD,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,IAAY,EAAE,YAAoB,EAAE,EAAE,CAAC,YAAY,CAAC,CAAA;IACnF,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IACvB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAEjF,uDAAuD;IACvD,EAAE;IACF,4FAA4F;IAC5F,gGAAgG;IAChG,+FAA+F;IAC/F,+FAA+F;IAC/F,4FAA4F;IAC5F,gGAAgG;IAChG,4FAA4F;IAC5F,6FAA6F;IAC7F,EAAE;IACF,0EAA0E;IAC1E,OAAO,yCAEL,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,EAC9C,SAAS,EAAE,EAAE,CAAC,6CAA6C,EAAE,KAAK,CAAC,SAAS,CAAC,YAE7E,MAAC,IAAI,IAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC,kBAAkB,CAAC,aAC9D,MAAC,UAAU,IAAC,SAAS,EAAC,gCAAgC,aACnD,IAAI,IAAI,IAAI,IAAI,cAAK,SAAS,EAAC,0BAA0B,YACvD,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,UAAU;gCACvD,CAAC,CAAC,KAAC,IAAI,IAAC,SAAS,EAAC,aAAa,GAAG,CAAC,CAAC,CAAC,IAAI,GACvC,EACN,KAAC,SAAS,IAAC,SAAS,EAAC,SAAS,YAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,GAAa,EACvF,KAAC,eAAe,cACb,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,gBAAgB,EAAE,wCAAwC,CAAC,GAChE,IACP,EAEb,MAAC,WAAW,IAAC,SAAS,EAAC,qBAAqB,aACzC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;4BACvB,CAAC,CAAC,YAAG,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,2CAA2C,YACrE,CAAC,CAAC,aAAa,EAAE,uDAAuD,CAAC,GACxE;4BACJ,CAAC,CAAC,cAAK,SAAS,EAAC,qBAAqB,YACnC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAmB,EAAE,EAAE,CAAC,MAAC,MAAM,IAEjD,IAAI,EAAC,QAAQ,uBACM,MAAM,CAAC,EAAE,EAC5B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,mBAK9C,KAAK,CAAC,OAAO,kBACd,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;oCAChD,oFAAoF;oCACpF,gFAAgF;oCAChF,iEAAiE;oCACjE,SAAS,EAAE,EAAE,CACX,4CAA4C,EAC5C,KAAK,CAAC,OAAO,IAAI,YAAY,CAC9B,EACD,SAAS,EAAE,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,EAC1C,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAElC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE;4CACvB,CAAC,CAAC,KAAC,OAAO,IAAC,SAAS,EAAC,qBAAqB,GAAG;4CAC7C,CAAC,CAAC,KAAC,eAAe,IAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAC,QAAQ,GAAG,EAC5D,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,KAvBvE,MAAM,CAAC,EAAE,CAwBP,CAAC,GACN,EAEP,KAAK,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAC,UAAU,IAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAI,EAO9F,CAAC,KAAK,CAAC,KAAK,IAAI,YAAY,CAAC,IAAI,IAAI;+BACjC,YAAG,IAAI,EAAC,OAAO,4BAAkB,SAAS,EAAC,sCAAsC,YACjF,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,YAAsB,EAAE,6CAA6C,CAAC,GACtF,IACM,EAEd,cAAK,SAAS,EAAC,MAAM,YAClB,KAAK,CAAC,MAAM,IAAI,KAAC,WAAW,IAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,GAAI,GAC/D,IACD,GACH,CAAA;AACR,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAyB,KAAK,CAAC,EAAE;IAChE,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,EAAE,CAAA;IAE3B,OAAO,KAAC,WAAW,OACb,KAAK,EACT,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,EAC/E,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,GAAG,GAC3B,CAAA;AACJ,CAAC,CAAA"}

package/build/components/login/terms.d.ts

@@ -3,7 +3,15 @@ import type { LoginTermsModel } from '@owlmeans/client-panel/auth';
 export interface LoginTermsProps {
     model: LoginTermsModel;
     translate: (key: string, defaultValue: string) => string;
+    /** The current language, for `Intl.ListFormat` and a document's own locale-keyed label. */
+    locale?: string;
     className?: string;
 }
+/**
+ * The sign-in screen's terms confirmation: one consented checkbox for `documents` (terms, plus
+ * billing/product/custom when configured), and a SEPARATE, non-consented disclosure line for
+ * `notices` (privacy, plus cookies per its own rule) — never nested inside the checkbox's label,
+ * because nothing is being agreed to there.
+ */
 export declare const LoginTerms: FC<LoginTermsProps>;
 //# sourceMappingURL=terms.d.ts.map

package/build/components/login/terms.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"terms.d.ts","sourceRoot":"","sources":["../../../src/components/login/terms.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAa,MAAM,OAAO,CAAA;AAE1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAElE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,CAAA;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACxD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAuBD,eAAO,MAAM,UAAU,EAAE,EAAE,CAAC,eAAe,CA0C1C,CAAA"}
+{"version":3,"file":"terms.d.ts","sourceRoot":"","sources":["../../../src/components/login/terms.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAa,MAAM,OAAO,CAAA;AAE1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAIlE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,CAAA;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACxD,2FAA2F;IAC3F,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AA+CD;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,EAAE,CAAC,eAAe,CAuD1C,CAAA"}

package/build/components/login/terms.js

@@ -1,33 +1,52 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { cn } from '../../@/lib/utils.js';
+import { termsSentence } from '@owlmeans/client-auth/login';
 /**
- * Split a translated sentence around its two link placeholders.
+ * English fallbacks for a document's own translated label, keyed by `ResolvedTermsDocument.key`.
  *
- * The sentence is translated as ONE string with `{{terms}}` and `{{privacy}}` in it, rather than
- * assembled from fragments, because word order differs between languages and an assembled sentence
- * forces every translator into English's. Splitting the already-translated string keeps that
- * freedom while keeping the i18n contract at `(key, defaultValue) => string` — no ReactNode ever
- * comes out of a translation, so an app with no i18n provider still renders a correct sentence.
+ * Only the keys this package's own resolver ever produces need one — a custom document always
+ * carries its own `label`/`labelMap`, or a caller's own `i18nKey` with its own bundle entry.
  */
-const interpolate = (sentence, slots) => sentence
-    .split(/(\{\{[a-z]+\}\})/i)
-    .map((part, index) => {
-    const match = /^\{\{([a-z]+)\}\}$/i.exec(part);
-    return match != null
-        ? _jsx("span", { children: slots[match[1]] ?? part }, index)
-        : _jsx("span", { children: part }, index);
-});
-export const LoginTerms = ({ model, translate, className }) => {
-    const link = (href, label) => _jsx("a", { href: href, target: "_blank", rel: "noreferrer noopener", className: "underline underline-offset-2 hover:text-foreground", children: label });
+const DEFAULT_LABEL = {
+    terms: 'Terms & Conditions',
+    privacy: 'Privacy Policy',
+    cookies: 'Cookie Policy',
+    billing: 'Billing Terms',
+    product: '{{product}} Product Terms',
+};
+/**
+ * A document's own label: a caller's literal `label`, else its `labelMap` for the current locale,
+ * else its `i18nKey` translated — each with `params` (e.g. `{ product: 'Acme' }`) interpolated
+ * afterwards, since the `translate` contract this whole package shares is a plain
+ * `(key, defaultValue) => string` with no interpolation option of its own.
+ */
+const resolveLabelFor = (translate, locale) => (doc) => {
+    const fromMap = doc.labelMap != null
+        ? (locale != null ? doc.labelMap[locale] : undefined) ?? Object.values(doc.labelMap)[0]
+        : undefined;
+    let label = doc.label ?? fromMap
+        ?? (doc.i18nKey != null ? translate(doc.i18nKey, DEFAULT_LABEL[doc.key] ?? doc.key) : doc.key);
+    if (doc.params != null) {
+        for (const [key, value] of Object.entries(doc.params)) {
+            label = label.split(`{{${key}}}`).join(value);
+        }
+    }
+    return label;
+};
+const renderParts = (parts) => parts.map((part, index) => part.href != null
+    ? _jsx("a", { href: part.href, target: "_blank", rel: "noreferrer noopener", "data-login-document": part.documentKey, className: "underline underline-offset-2 hover:text-foreground", children: part.text }, index)
+    : _jsx("span", { children: part.text }, index));
+/**
+ * The sign-in screen's terms confirmation: one consented checkbox for `documents` (terms, plus
+ * billing/product/custom when configured), and a SEPARATE, non-consented disclosure line for
+ * `notices` (privacy, plus cookies per its own rule) — never nested inside the checkbox's label,
+ * because nothing is being agreed to there.
+ */
+export const LoginTerms = ({ model, translate, locale, className }) => {
+    const resolveLabel = resolveLabelFor(translate, locale);
     // Centred, like every other row in the card. The checkbox stays at the start of the sentence
     // rather than above it, so `justify-center` centres the pair and `text-center` centres the
     // wrapped lines within it.
-    return _jsxs("div", { className: cn('flex flex-col items-center gap-1.5 text-center', className), children: [_jsxs("label", { className: "flex items-start justify-center gap-2 text-sm text-muted-foreground cursor-pointer", children: [_jsx("input", { type: "checkbox", "data-login-terms": true, className: "mt-0.5 size-4 shrink-0 accent-primary", checked: model.accepted, "aria-invalid": model.attempted && !model.accepted, onChange: event => model.accept(event.target.checked) }), _jsx("span", { children: interpolate(translate('login.terms.agreement', 'I have read and agree to the {{terms}} and the {{privacy}}.'), {
-                            terms: link(model.urls.terms, translate('login.terms.terms', 'Terms & Conditions')),
-                            privacy: link(model.urls.privacy, translate('login.terms.privacy', 'Privacy Policy')),
-                            cookies: model.urls.cookies != null
-                                ? link(model.urls.cookies, translate('login.terms.cookies', 'Cookie Policy'))
-                                : null,
-                        }) })] }), model.attempted && !model.accepted && _jsx("p", { role: "alert", className: "text-sm text-destructive", children: translate('login.terms.required', 'Please confirm the Terms & Conditions and the Privacy Policy to continue.') })] });
+    return _jsxs("div", { className: cn('flex flex-col items-center gap-1.5 text-center', className), children: [_jsxs("label", { className: "flex items-start justify-center gap-2 text-sm text-muted-foreground cursor-pointer", children: [_jsx("input", { type: "checkbox", "data-login-terms": true, className: "mt-0.5 size-4 shrink-0 accent-primary", checked: model.accepted, "aria-invalid": model.attempted && !model.accepted, onChange: event => model.accept(event.target.checked) }), _jsx("span", { children: renderParts(termsSentence(translate('login.terms.accept', 'I have read and agree to the {{documents}}.'), model, locale, resolveLabel)) })] }), model.revisedAt != null && _jsx("p", { "data-login-revised": true, className: "text-xs text-muted-foreground", children: translate('login.terms.revised', 'Last updated: {{date}}').split('{{date}}').join(model.revisedAt) }), _jsx("p", { "data-login-privacy": true, className: "text-xs text-muted-foreground", children: renderParts(termsSentence(translate('login.terms.notice', 'How we handle your personal data: {{notices}}.'), model, locale, resolveLabel)) }), model.attempted && !model.accepted && _jsx("p", { role: "alert", className: "text-sm text-destructive", children: renderParts(termsSentence(translate('login.terms.required', 'Please confirm the {{documents}} to continue.'), model, locale, resolveLabel)) })] });
 };
 //# sourceMappingURL=terms.js.map

package/build/components/login/terms.js.map

@@ -1 +1 @@
-{"version":3,"file":"terms.js","sourceRoot":"","sources":["../../../src/components/login/terms.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAA;AASzC;;;;;;;;GAQG;AACH,MAAM,WAAW,GAAG,CAClB,QAAgB,EAAE,KAAgC,EACrC,EAAE,CAAC,QAAQ;KACvB,KAAK,CAAC,mBAAmB,CAAC;KAC1B,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;IACnB,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAE9C,OAAO,KAAK,IAAI,IAAI;QAClB,CAAC,CAAC,yBAAmB,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAA/B,KAAK,CAAkC;QACpD,CAAC,CAAC,yBAAmB,IAAI,IAAZ,KAAK,CAAe,CAAA;AACrC,CAAC,CAAC,CAAA;AAEJ,MAAM,CAAC,MAAM,UAAU,GAAwB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;IACjF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAa,EAAa,EAAE,CACtD,YAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,EACtD,SAAS,EAAC,oDAAoD,YAAE,KAAK,GAAK,CAAA;IAE9E,6FAA6F;IAC7F,2FAA2F;IAC3F,2BAA2B;IAC3B,OAAO,eAAK,SAAS,EAAE,EAAE,CAAC,gDAAgD,EAAE,SAAS,CAAC,aACpF,iBAAO,SAAS,EAAC,oFAAoF,aAOnG,gBACE,IAAI,EAAC,UAAU,4BACf,SAAS,EAAC,uCAAuC,EACjD,OAAO,EAAE,KAAK,CAAC,QAAQ,kBACT,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,EAChD,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GACrD,EACF,yBACG,WAAW,CACV,SAAS,CAAC,uBAAuB,EAC/B,6DAA6D,CAAC,EAChE;4BACE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC;4BACnF,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;4BACrF,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI;gCACjC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC;gCAC7E,CAAC,CAAC,IAAI;yBACT,CACF,GACI,IACD,EACP,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,YAAG,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,0BAA0B,YACxF,SAAS,CAAC,sBAAsB,EAC/B,2EAA2E,CAAC,GAC5E,IACA,CAAA;AACR,CAAC,CAAA"}
+{"version":3,"file":"terms.js","sourceRoot":"","sources":["../../../src/components/login/terms.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAA;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAW3D;;;;;GAKG;AACH,MAAM,aAAa,GAA2B;IAC5C,KAAK,EAAE,oBAAoB;IAC3B,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,2BAA2B;CACrC,CAAA;AAED;;;;;GAKG;AACH,MAAM,eAAe,GAAG,CACtB,SAAwD,EAAE,MAA0B,EACpF,EAAE,CAAC,CAAC,GAA0B,EAAU,EAAE;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI;QAClC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,OAAO;WAC3B,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAEhG,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,KAA0B,EAAa,EAAE,CAC5D,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI;IAC1C,CAAC,CAAC,YAAe,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,yBACpD,IAAI,CAAC,WAAW,EACrC,SAAS,EAAC,oDAAoD,YAAE,IAAI,CAAC,IAAI,IAFjE,KAAK,CAEiE;IAChF,CAAC,CAAC,yBAAmB,IAAI,CAAC,IAAI,IAAjB,KAAK,CAAoB,CAAC,CAAA;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAwB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IACzF,MAAM,YAAY,GAAG,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAEvD,6FAA6F;IAC7F,2FAA2F;IAC3F,2BAA2B;IAC3B,OAAO,eAAK,SAAS,EAAE,EAAE,CAAC,gDAAgD,EAAE,SAAS,CAAC,aAKpF,iBAAO,SAAS,EAAC,oFAAoF,aAOnG,gBACE,IAAI,EAAC,UAAU,4BACf,SAAS,EAAC,uCAAuC,EACjD,OAAO,EAAE,KAAK,CAAC,QAAQ,kBACT,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,EAChD,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GACrD,EACF,yBACG,WAAW,CAAC,aAAa,CACxB,SAAS,CAAC,oBAAoB,EAAE,6CAA6C,CAAC,EAC9E,KAAK,EAAE,MAAM,EAAE,YAAY,CAC5B,CAAC,GACG,IACD,EAEP,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,wCAAsB,SAAS,EAAC,+BAA+B,YACxF,SAAS,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GACjG,EAMJ,wCAAsB,SAAS,EAAC,+BAA+B,YAC5D,WAAW,CAAC,aAAa,CACxB,SAAS,CAAC,oBAAoB,EAAE,gDAAgD,CAAC,EACjF,KAAK,EAAE,MAAM,EAAE,YAAY,CAC5B,CAAC,GACA,EAEH,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,YAAG,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,0BAA0B,YACxF,WAAW,CAAC,aAAa,CACxB,SAAS,CAAC,sBAAsB,EAAE,+CAA+C,CAAC,EAClF,KAAK,EAAE,MAAM,EAAE,YAAY,CAC5B,CAAC,GACA,IACA,CAAA;AACR,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/web-panel",
-  "version": "0.1.18-rc.57",
+  "version": "0.1.18-rc.58",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -51,33 +51,33 @@
   },
   "dependencies": {
     "@hookform/resolvers": "^5.2.2",
-    "@owlmeans/api-config-client": "^0.1.18-rc.32",
-    "@owlmeans/auth": "^0.1.18-rc.32",
-    "@owlmeans/auth-common": "^0.1.18-rc.34",
-    "@owlmeans/basic-envelope": "^0.1.18-rc.33",
-    "@owlmeans/client": "^0.1.18-rc.37",
-    "@owlmeans/client-auth": "^0.1.18-rc.44",
-    "@owlmeans/client-config": "^0.1.18-rc.34",
-    "@owlmeans/client-context": "^0.1.18-rc.35",
-    "@owlmeans/client-entrypoint": "^0.1.18-rc.34",
-    "@owlmeans/client-flow": "^0.1.18-rc.40",
-    "@owlmeans/client-i18n": "^0.1.18-rc.36",
-    "@owlmeans/client-panel": "^0.1.18-rc.44",
-    "@owlmeans/client-route": "^0.1.18-rc.35",
-    "@owlmeans/client-socket": "^0.1.18-rc.35",
-    "@owlmeans/config": "^0.1.18-rc.34",
-    "@owlmeans/context": "^0.1.18-rc.30",
-    "@owlmeans/entrypoint": "^0.1.18-rc.33",
-    "@owlmeans/error": "^0.1.18-rc.32",
-    "@owlmeans/flow": "^0.1.18-rc.35",
-    "@owlmeans/i18n": "^0.1.18-rc.33",
-    "@owlmeans/route": "^0.1.18-rc.31",
-    "@owlmeans/state": "^0.1.18-rc.31",
-    "@owlmeans/web-client": "^0.1.18-rc.47",
-    "@owlmeans/web-consent": "^0.1.18-rc.28",
-    "@owlmeans/web-db": "^0.1.18-rc.35",
-    "@owlmeans/web-flow": "^0.1.18-rc.39",
-    "@owlmeans/web-router": "^0.1.18-rc.35",
+    "@owlmeans/api-config-client": "^0.1.18-rc.33",
+    "@owlmeans/auth": "^0.1.18-rc.33",
+    "@owlmeans/auth-common": "^0.1.18-rc.35",
+    "@owlmeans/basic-envelope": "^0.1.18-rc.34",
+    "@owlmeans/client": "^0.1.18-rc.38",
+    "@owlmeans/client-auth": "^0.1.18-rc.45",
+    "@owlmeans/client-config": "^0.1.18-rc.35",
+    "@owlmeans/client-context": "^0.1.18-rc.36",
+    "@owlmeans/client-entrypoint": "^0.1.18-rc.35",
+    "@owlmeans/client-flow": "^0.1.18-rc.41",
+    "@owlmeans/client-i18n": "^0.1.18-rc.37",
+    "@owlmeans/client-panel": "^0.1.18-rc.45",
+    "@owlmeans/client-route": "^0.1.18-rc.36",
+    "@owlmeans/client-socket": "^0.1.18-rc.36",
+    "@owlmeans/config": "^0.1.18-rc.35",
+    "@owlmeans/context": "^0.1.18-rc.31",
+    "@owlmeans/entrypoint": "^0.1.18-rc.34",
+    "@owlmeans/error": "^0.1.18-rc.33",
+    "@owlmeans/flow": "^0.1.18-rc.36",
+    "@owlmeans/i18n": "^0.1.18-rc.34",
+    "@owlmeans/route": "^0.1.18-rc.32",
+    "@owlmeans/state": "^0.1.18-rc.32",
+    "@owlmeans/web-client": "^0.1.18-rc.48",
+    "@owlmeans/web-consent": "^0.1.18-rc.29",
+    "@owlmeans/web-db": "^0.1.18-rc.36",
+    "@owlmeans/web-flow": "^0.1.18-rc.40",
+    "@owlmeans/web-router": "^0.1.18-rc.36",
     "i18next-browser-languagedetector": "^8.0.0",
     "qrcode.react": "^4.2.0",
     "react-google-recaptcha": "^3.1.0",
@@ -103,7 +103,7 @@
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",
-    "@owlmeans/test-ui": "^0.1.18-rc.35",
+    "@owlmeans/test-ui": "^0.1.18-rc.36",
     "@radix-ui/react-alert-dialog": "^1.1.15",
     "@radix-ui/react-dialog": "^1.1.15",
     "@radix-ui/react-label": "^2.1.0",

package/src/components/login/screen.tsx

@@ -4,7 +4,7 @@ import { Loader2 } from 'lucide-react'
 import { Button } from '../../@/components/ui/button.js'
 import { Card, CardContent, CardHeader, CardTitle, CardDescription } from '../../@/components/ui/card.js'
 import { cn } from '../../@/lib/utils.js'
-import { useI18nLib } from '@owlmeans/client-i18n'
+import { useI18nLib, useLanguage } from '@owlmeans/client-i18n'
 import { useLoginMethods } from '@owlmeans/client-panel/auth'
 import { loginAttemptError } from '@owlmeans/client-auth/login'
 import type { LoginMethod, LoginScreenProps } from '@owlmeans/client-auth/login'
@@ -103,7 +103,7 @@ export const LoginScreen: FC<LoginScreenProps> = props => {
             </Button>)}
           </div>}
 
-        {model.terms.required && <LoginTerms model={model.terms} translate={t} />}
+        {model.terms.required && <LoginTerms model={model.terms} translate={t} locale={props.locale} />}
 
         {/*
           A thrown message first, because it names the actual fault; otherwise whatever the
@@ -132,9 +132,11 @@ export const LoginScreen: FC<LoginScreenProps> = props => {
  */
 export const LocalizedLoginScreen: FC<LoginScreenProps> = props => {
   const t = useI18nLib('auth')
+  const [lng] = useLanguage()
 
   return <LoginScreen
     {...props}
     translate={props.translate ?? ((key, defaultValue) => t(key, { defaultValue }))}
+    locale={props.locale ?? lng}
   />
 }

package/src/components/login/terms.tsx

@@ -1,43 +1,79 @@
 import type { FC, ReactNode } from 'react'
 import { cn } from '../../@/lib/utils.js'
 import type { LoginTermsModel } from '@owlmeans/client-panel/auth'
+import { termsSentence } from '@owlmeans/client-auth/login'
+import type { ResolvedTermsDocument, TermsSentencePart } from '@owlmeans/client-auth/login'
 
 export interface LoginTermsProps {
   model: LoginTermsModel
   translate: (key: string, defaultValue: string) => string
+  /** The current language, for `Intl.ListFormat` and a document's own locale-keyed label. */
+  locale?: string
   className?: string
 }
 
 /**
- * Split a translated sentence around its two link placeholders.
+ * English fallbacks for a document's own translated label, keyed by `ResolvedTermsDocument.key`.
  *
- * The sentence is translated as ONE string with `{{terms}}` and `{{privacy}}` in it, rather than
- * assembled from fragments, because word order differs between languages and an assembled sentence
- * forces every translator into English's. Splitting the already-translated string keeps that
- * freedom while keeping the i18n contract at `(key, defaultValue) => string` — no ReactNode ever
- * comes out of a translation, so an app with no i18n provider still renders a correct sentence.
+ * Only the keys this package's own resolver ever produces need one — a custom document always
+ * carries its own `label`/`labelMap`, or a caller's own `i18nKey` with its own bundle entry.
  */
-const interpolate = (
-  sentence: string, slots: Record<string, ReactNode>
-): ReactNode[] => sentence
-  .split(/(\{\{[a-z]+\}\})/i)
-  .map((part, index) => {
-    const match = /^\{\{([a-z]+)\}\}$/i.exec(part)
+const DEFAULT_LABEL: Record<string, string> = {
+  terms: 'Terms & Conditions',
+  privacy: 'Privacy Policy',
+  cookies: 'Cookie Policy',
+  billing: 'Billing Terms',
+  product: '{{product}} Product Terms',
+}
 
-    return match != null
-      ? <span key={index}>{slots[match[1]] ?? part}</span>
-      : <span key={index}>{part}</span>
-  })
+/**
+ * A document's own label: a caller's literal `label`, else its `labelMap` for the current locale,
+ * else its `i18nKey` translated — each with `params` (e.g. `{ product: 'Acme' }`) interpolated
+ * afterwards, since the `translate` contract this whole package shares is a plain
+ * `(key, defaultValue) => string` with no interpolation option of its own.
+ */
+const resolveLabelFor = (
+  translate: (key: string, defaultValue: string) => string, locale: string | undefined
+) => (doc: ResolvedTermsDocument): string => {
+  const fromMap = doc.labelMap != null
+    ? (locale != null ? doc.labelMap[locale] : undefined) ?? Object.values(doc.labelMap)[0]
+    : undefined
+  let label = doc.label ?? fromMap
+    ?? (doc.i18nKey != null ? translate(doc.i18nKey, DEFAULT_LABEL[doc.key] ?? doc.key) : doc.key)
 
-export const LoginTerms: FC<LoginTermsProps> = ({ model, translate, className }) => {
-  const link = (href: string, label: string): ReactNode =>
-    <a href={href} target="_blank" rel="noreferrer noopener"
-      className="underline underline-offset-2 hover:text-foreground">{label}</a>
+  if (doc.params != null) {
+    for (const [key, value] of Object.entries(doc.params)) {
+      label = label.split(`{{${key}}}`).join(value)
+    }
+  }
+
+  return label
+}
+
+const renderParts = (parts: TermsSentencePart[]): ReactNode =>
+  parts.map((part, index) => part.href != null
+    ? <a key={index} href={part.href} target="_blank" rel="noreferrer noopener"
+      data-login-document={part.documentKey}
+      className="underline underline-offset-2 hover:text-foreground">{part.text}</a>
+    : <span key={index}>{part.text}</span>)
+
+/**
+ * The sign-in screen's terms confirmation: one consented checkbox for `documents` (terms, plus
+ * billing/product/custom when configured), and a SEPARATE, non-consented disclosure line for
+ * `notices` (privacy, plus cookies per its own rule) — never nested inside the checkbox's label,
+ * because nothing is being agreed to there.
+ */
+export const LoginTerms: FC<LoginTermsProps> = ({ model, translate, locale, className }) => {
+  const resolveLabel = resolveLabelFor(translate, locale)
 
   // Centred, like every other row in the card. The checkbox stays at the start of the sentence
   // rather than above it, so `justify-center` centres the pair and `text-center` centres the
   // wrapped lines within it.
   return <div className={cn('flex flex-col items-center gap-1.5 text-center', className)}>
+    {/*
+      The ONLY place `data-login-terms` appears — an e2e suite in the consuming product treats it
+      as a strict (exactly-one-match) locator, so it must never be duplicated onto a second control.
+    */}
     <label className="flex items-start justify-center gap-2 text-sm text-muted-foreground cursor-pointer">
       {/*
         A NATIVE checkbox, deliberately. `web-panel` ships no `checkbox` primitive, and requiring
@@ -53,22 +89,33 @@ export const LoginTerms: FC<LoginTermsProps> = ({ model, translate, className })
         onChange={event => model.accept(event.target.checked)}
       />
       <span>
-        {interpolate(
-          translate('login.terms.agreement',
-            'I have read and agree to the {{terms}} and the {{privacy}}.'),
-          {
-            terms: link(model.urls.terms, translate('login.terms.terms', 'Terms & Conditions')),
-            privacy: link(model.urls.privacy, translate('login.terms.privacy', 'Privacy Policy')),
-            cookies: model.urls.cookies != null
-              ? link(model.urls.cookies, translate('login.terms.cookies', 'Cookie Policy'))
-              : null,
-          }
-        )}
+        {renderParts(termsSentence(
+          translate('login.terms.accept', 'I have read and agree to the {{documents}}.'),
+          model, locale, resolveLabel
+        ))}
       </span>
     </label>
+
+    {model.revisedAt != null && <p data-login-revised className="text-xs text-muted-foreground">
+      {translate('login.terms.revised', 'Last updated: {{date}}').split('{{date}}').join(model.revisedAt)}
+    </p>}
+
+    {/*
+      Outside the checkbox's `<label>` on purpose: a privacy disclosure is not something the
+      checkbox consents to, so it is a sibling paragraph rather than nested inside it.
+    */}
+    <p data-login-privacy className="text-xs text-muted-foreground">
+      {renderParts(termsSentence(
+        translate('login.terms.notice', 'How we handle your personal data: {{notices}}.'),
+        model, locale, resolveLabel
+      ))}
+    </p>
+
     {model.attempted && !model.accepted && <p role="alert" className="text-sm text-destructive">
-      {translate('login.terms.required',
-        'Please confirm the Terms & Conditions and the Privacy Policy to continue.')}
+      {renderParts(termsSentence(
+        translate('login.terms.required', 'Please confirm the {{documents}} to continue.'),
+        model, locale, resolveLabel
+      ))}
     </p>}
   </div>
 }

package/tests/harness/mount.tsx

@@ -111,6 +111,10 @@ const consentMode = new URLSearchParams(window.location.search).get('consent')
 const skipOff = new URLSearchParams(window.location.search).get('skip') === 'off'
 // `?themeToggle=1` asks for the footer's light/dark switcher. Absent, the prop is not passed.
 const themeToggle = new URLSearchParams(window.location.search).get('themeToggle') === '1'
+// `?terms=extended` adds billing/product/custom documents and a revision date to the terms
+// confirmation — the shape that pins the "still exactly one checkbox" and "documents render
+// outside the notice" rules even when there is more than terms+privacy to show.
+const extendedTerms = new URLSearchParams(window.location.search).get('terms') === 'extended'
 
 /**
  * The footer's "Cookie settings" control — the menu widget, rendered from an always-mounted
@@ -229,7 +233,18 @@ base.security = {
     login: {
       // Confirmation required, which is the case that matters: a method must be blocked until it
       // is given, and blocking must SAY so rather than swallow the click.
-      terms: { required: true, terms: 'https://example.test/terms', privacy: 'https://example.test/privacy' },
+      terms: {
+        required: true, terms: 'https://example.test/terms', privacy: 'https://example.test/privacy',
+        ...(extendedTerms ? {
+          billing: { href: 'https://example.test/billing', revisedAt: '2026-01-01' },
+          product: { name: 'Harness', href: 'https://example.test/product' },
+          documents: [
+            { key: 'custom-a', href: 'https://example.test/custom-a', label: 'Custom A' },
+            { key: 'custom-b', href: 'https://example.test/custom-b', label: 'Custom B' },
+          ],
+          showRevision: true,
+        } : {}),
+      },
       credit: { poweredBy: true, product: 'Harness', organization: 'Acme' },
     },
   },

package/tests/login.spec.ts

@@ -8,8 +8,8 @@ afterAll(async () => {
   await closeBrowser()
 })
 
-const open = async () => {
-  const mounted = await mountComponent({ url: `${HARNESS_URL}login` })
+const open = async (query?: string) => {
+  const mounted = await mountComponent({ url: `${HARNESS_URL}login${query ?? ''}` })
   await mounted.page.waitForSelector('[data-login-method]')
   // A fresh acceptance for every test: the confirmation is remembered per browser, and a test
   // that inherited the previous one would assert the unblocked path while claiming the other.
@@ -187,4 +187,76 @@ describe('@owlmeans/web-panel — the sign-in screen', () => {
       await close()
     }
   }, TIMEOUT)
+
+  test('[data-login-revised] is absent when the configuration never asked to show it', async () => {
+    const { page, close } = await open()
+    try {
+      expect(await page.locator('[data-login-revised]').count()).toBe(0)
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+
+  describe('with billing, product and custom documents configured', () => {
+    test('there is still exactly one [data-login-terms] checkbox', async () => {
+      const { page, close } = await open('?terms=extended')
+      try {
+        expect(await page.locator('[data-login-terms]').count()).toBe(1)
+      } finally {
+        await close()
+      }
+    }, TIMEOUT)
+
+    test('[data-login-privacy] renders OUTSIDE the checkbox\'s label', async () => {
+      const { page, close } = await open('?terms=extended')
+      try {
+        expect(await page.locator('label:has([data-login-terms]) [data-login-privacy]').count())
+          .toBe(0)
+        expect(await page.locator('[data-login-privacy]').count()).toBe(1)
+      } finally {
+        await close()
+      }
+    }, TIMEOUT)
+
+    test('[data-login-revised] shows the latest revision date', async () => {
+      const { page, close } = await open('?terms=extended')
+      try {
+        expect(await page.locator('[data-login-revised]').count()).toBe(1)
+        expect(await page.locator('[data-login-revised]').textContent()).toContain('2026-01-01')
+      } finally {
+        await close()
+      }
+    }, TIMEOUT)
+
+    test('every configured document renders its own [data-login-document] link', async () => {
+      const { page, close } = await open('?terms=extended')
+      try {
+        const hrefByKey = async (key: string) =>
+          await page.locator(`[data-login-document="${key}"]`).getAttribute('href')
+
+        expect(await hrefByKey('terms')).toBe('https://example.test/terms')
+        expect(await hrefByKey('billing')).toBe('https://example.test/billing')
+        expect(await hrefByKey('product')).toBe('https://example.test/product')
+        expect(await hrefByKey('custom-a')).toBe('https://example.test/custom-a')
+        expect(await hrefByKey('custom-b')).toBe('https://example.test/custom-b')
+        // The notice line, not the consented one.
+        expect(await hrefByKey('privacy')).toBe('https://example.test/privacy')
+      } finally {
+        await close()
+      }
+    }, TIMEOUT)
+
+    test('confirming the single checkbox still unblocks the methods', async () => {
+      const { page, close } = await open('?terms=extended')
+      try {
+        await page.locator('[data-login-terms]').check()
+        await page.locator('[data-login-method="primary"]').click()
+
+        expect(await page.evaluate(() => (window as never as { __loginStarted: string[] }).__loginStarted))
+          .toEqual(['primary'])
+      } finally {
+        await close()
+      }
+    }, TIMEOUT)
+  })
 })