@owlmeans/web-panel 0.1.18-rc.60 → 0.1.18-rc.61

package/README.md

@@ -11,7 +11,7 @@ but never started.
 ## Installation
 
 ```sh
-bun add @owlmeans/web-panel@^0.1.18-rc.60
+bun add @owlmeans/web-panel@^0.1.18-rc.61
 ```
 
 Peer requirements (the consuming app provides these): `react`, `react-dom`,
@@ -351,8 +351,8 @@ The dialog's strings are the lib-tier `socket` namespace (`reload.title`, `reloa
 | `SocketReloadDialog` | component | Blocking reload prompt for `'lost'` sockets |
 | `LoginScreen`, `LocalizedLoginScreen` | component | Identity-provider choice screen; the localized one binds `translate` to the app's resources |
 | `appendLoginScreen(ctx, setup?)`, `LoginScreenSetup` | function, type | Register the screen on the login service, with `Logo` and other `LoginScreenProps` |
-| `LoginTerms`, `LoginCredit`, `LoginMethodIcon` | component | The screen's terms sentence, credit line and method icons |
-| `LoginTermsProps`, `LoginCreditProps` | type | Their props |
+| `LoginTerms`, `LoginPrivacyNotice`, `LoginCredit`, `LoginMethodIcon` | component | The screen's terms confirmation, its privacy-only disclosure (rendered alone once `termsDeferred` moves the checkbox to a post-login step — see `@owlmeans/client-auth/login`), the credit line and method icons |
+| `LoginTermsProps`, `LoginPrivacyNoticeProps`, `LoginCreditProps` | type | Their props |
 | `scalingToStyles(horizontal?, vertical?)` | function | `BlockScaling` to Tailwind width/height classes |
 | `useBreakPoint()` | hook | The current Tailwind breakpoint name |
 | `useMapBreakpoint(map, def?, breakpoint?)` | hook | The map entry for the current breakpoint; throws `SyntaxError` when nothing matches and no `def` is given |
@@ -496,7 +496,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.38
+npx @owlmeans/agent-skills@^0.1.18-rc.39
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/web-panel",
-  "version": "0.1.18-rc.60",
-  "generatedAt": "2026-09-23T19:57:40.709Z",
+  "version": "0.1.18-rc.61",
+  "generatedAt": "2026-09-24T14:00:35.085Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/web-panel/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/web-panel
 
 **Layer:** Web (React)
-**Install:** `"@owlmeans/web-panel": "^0.1.18-rc.60"` in `dependencies`
+**Install:** `"@owlmeans/web-panel": "^0.1.18-rc.61"` in `dependencies`
 
 ## Key Exports
 
@@ -33,7 +33,7 @@ user-invocable: false
 | `useBreakPoint()` | The current Tailwind breakpoint name, tracked on `resize` (`lg` when there is no `window`) |
 | `useMapBreakpoint(map, def?, breakpoint?)` | The `map` entry for the current breakpoint (or for the `breakpoint` passed), falling back to `def`. It **throws a `SyntaxError`** when neither yields a value, so give it a `def` or cover every breakpoint |
 | Re-exports from `@owlmeans/client-panel` | Cross-platform panel primitives, incl. `usePanelNav` and the `PanelNav*` types |
-| Re-exports from `@owlmeans/client` / `@owlmeans/client-entrypoint` / `@owlmeans/route` | `bind`, `bindAll`, `bindScreen`, `handler`, `provideRequest`, `stab`, `route`, `croute`, `frontend`, `useNavigate`, `useEntrypoint`, `useValue` |
+| Re-exports from `@owlmeans/client` / `@owlmeans/client-entrypoint` / `@owlmeans/route` | `bind`, `bindAll`, `bindScreen`, `handler`, `lazyHandler` / `lazyComponent` (+ `LazyHandler` / `LazyComponent` / `LazyComponentOptions` types — see the `client` skill), `provideRequest`, `stab`, `route`, `croute`, `frontend`, `useNavigate`, `useEntrypoint`, `useValue` |
 | Re-exports from the surrounding layers | `config`, `service`, `addWebService`, `AppType` / `HOME` / `ROOT` / `BASE` / `GUEST`, `DISPATCHER`, `CAUTHEN_FLOW_ENTER`, `DAUTH_GUARD`, `bindExternalAuthentication`, `Dispatcher`, `appendWebAuthService`, `flow` / `configureFlows` / `useFlow` / `FLOW_PARAM` / `SERVICE_PARAM`, `useI18n*` / `useLanguage` / `composePrefix`, `addI18nApp` / `addI18nLib` / `SUPPORTED_LNGS` |
 
 ## Subpath Exports
@@ -421,20 +421,28 @@ import { Form, TextInput, SubmitButton, Button } from '@owlmeans/web-panel'
   `contained` and the rest `outlined`, calling `onSelect(option)`. `name` prefixes each option's
   label key as `<name>.<option>`.
 
-### The terms confirmation — `LoginTerms`
+### The terms confirmation — `LoginTerms`, `LoginPrivacyNotice`
 
 `components/login/terms.tsx` renders `LoginTermsModel` (`@owlmeans/client-panel/auth`) via
-`termsSentence` (`@owlmeans/client-auth/login`) rather than re-deriving link/label pairs itself.
-**`[data-login-terms]` marks exactly one checkbox, always** — an e2e suite elsewhere in the platform
-treats it as a strict locator, so a change here must never add a second one, whatever
+`termsSentence` + `termsLabelResolver` (`@owlmeans/client-auth/login`) rather than re-deriving
+link/label pairs itself. **`[data-login-terms]` marks exactly one checkbox — or NONE, once
+`model.terms.deferred` is true** (`LoginScreen` renders `LoginTerms` when not deferred,
+`LoginPrivacyNotice` when it is): an e2e suite elsewhere in the platform treats the checkbox as a
+strict, at-most-one-match locator, so a change here must never add a second one, whatever
 billing/product/custom documents a configuration adds. `[data-login-privacy]` is a SIBLING
 paragraph of the checkbox's `<label>`, never nested inside it — a privacy disclosure is not
-something the checkbox consents to. A linked document/notice fragment carries
-`data-login-document="<key>"`. `[data-login-revised]` renders only when the resolved terms carry a
-`revisedAt` (i.e. the configuration set `showRevision: true` and at least one document has its own
-revision date). `LoginTerms` takes `locale?: string` — from `LoginScreen`'s own `locale` prop, never
-read from context directly — for `Intl.ListFormat` and a custom document's locale-keyed `labelMap`.
-Pinned by `tests/login.spec.ts` → the "with billing, product and custom documents configured" block.
+something the checkbox consents to — and it is exported ON ITS OWN as `LoginPrivacyNotice`: it
+still renders while deferred, since the disclosure was never the checkbox's to remove. A linked
+document/notice fragment carries `data-login-document="<key>"`. `[data-login-revised]` renders only
+when NOT deferred and the resolved terms carry a `revisedAt` (i.e. the configuration set
+`showRevision: true` and at least one document has its own revision date) — deferred, that date
+belongs to the document the checkbox agreed to, and there is no checkbox on this screen to attach it
+to. `LoginTerms`/`LoginPrivacyNotice` take `locale?: string` — from `LoginScreen`'s own `locale`
+prop, never read from context directly — for `Intl.ListFormat` and a custom document's locale-keyed
+`labelMap`. Method buttons carry `aria-disabled={model.blocked || undefined}`, never a literal
+`"false"` — a deferred screen (which never sets `blocked`) then renders identically to an unblocked
+ordinary one, with no special case. Pinned by `tests/login.spec.ts` → the "with billing, product and
+custom documents configured" and "the Terms confirmation deferred to a step" blocks.
 
 ## Subpath: `./consent`
 

package/build/auth/exports.d.ts

@@ -1,5 +1,5 @@
-export { handler, useEntrypoint, useValue, useNavigate } from '@owlmeans/client';
-export type { Navigator } from '@owlmeans/client';
+export { handler, lazyHandler, lazyComponent, useEntrypoint, useValue, useNavigate } from '@owlmeans/client';
+export type { Navigator, LazyComponent, LazyComponentOptions, LazyHandler } from '@owlmeans/client';
 export { config } from '@owlmeans/client-context';
 export { service } from '@owlmeans/config';
 export { EntrypointOutcome } from '@owlmeans/entrypoint';

package/build/auth/exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../src/auth/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAChF,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAC7F,YAAY,EAAE,gBAAgB,IAAI,MAAM,EAAE,aAAa,IAAI,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACvG,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC9D,YAAY,EAAE,oBAAoB,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC3E,OAAO,EAAE,aAAa,IAAI,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAExC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEpE,cAAc,6BAA6B,CAAA;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAEnC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAC/D,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C,OAAO,EAAE,aAAa,IAAI,UAAU,EAAE,MAAM,uBAAuB,CAAA;AACnE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,WAAW,IAAI,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC7E,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../src/auth/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC5G,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnG,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAC7F,YAAY,EAAE,gBAAgB,IAAI,MAAM,EAAE,aAAa,IAAI,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACvG,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC9D,YAAY,EAAE,oBAAoB,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC3E,OAAO,EAAE,aAAa,IAAI,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAExC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEpE,cAAc,6BAA6B,CAAA;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAEnC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAC/D,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C,OAAO,EAAE,aAAa,IAAI,UAAU,EAAE,MAAM,uBAAuB,CAAA;AACnE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,WAAW,IAAI,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC7E,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA"}

package/build/auth/exports.js

@@ -1,4 +1,4 @@
-export { handler, useEntrypoint, useValue, useNavigate } from '@owlmeans/client';
+export { handler, lazyHandler, lazyComponent, useEntrypoint, useValue, useNavigate } from '@owlmeans/client';
 export { config } from '@owlmeans/client-context';
 export { service } from '@owlmeans/config';
 export { EntrypointOutcome } from '@owlmeans/entrypoint';

package/build/auth/exports.js.map

@@ -1 +1 @@
-{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../src/auth/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAEhF,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAE7F,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAE9D,OAAO,EAAE,aAAa,IAAI,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAExC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEpE,cAAc,6BAA6B,CAAA;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAEnC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAG/D,OAAO,EAAE,aAAa,IAAI,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAEnE,OAAO,EAAE,WAAW,IAAI,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC7E,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../src/auth/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE5G,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAE7F,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAE9D,OAAO,EAAE,aAAa,IAAI,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAExC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEpE,cAAc,6BAA6B,CAAA;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAEnC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAG/D,OAAO,EAAE,aAAa,IAAI,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAEnE,OAAO,EAAE,WAAW,IAAI,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC7E,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA"}

package/build/components/login/screen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"screen.d.ts","sourceRoot":"","sources":["../../../src/components/login/screen.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAQ/B,OAAO,KAAK,EAAe,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAWhF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CA4F5C,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,EAAE,CAAC,gBAAgB,CASrD,CAAA"}
+{"version":3,"file":"screen.d.ts","sourceRoot":"","sources":["../../../src/components/login/screen.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAQ/B,OAAO,KAAK,EAAe,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAWhF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAgG5C,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,EAAE,CAAC,gBAAgB,CASrD,CAAA"}

package/build/components/login/screen.js

@@ -8,7 +8,7 @@ import { useI18nLib, useLanguage } from '@owlmeans/client-i18n';
 import { useLoginMethods } from '@owlmeans/client-panel/auth';
 import { loginAttemptError } from '@owlmeans/client-auth/login';
 import { LoginMethodIcon } from './icons.js';
-import { LoginTerms } from './terms.js';
+import { LoginPrivacyNotice, LoginTerms } from './terms.js';
 import { LoginCredit } from './credit.js';
 const VARIANT = {
     primary: 'default',
@@ -50,13 +50,15 @@ export const LoginScreen = props => {
     return _jsx("div", { "data-login-screen": true, style: { minHeight: '100dvh', ...props.style }, className: cn('flex w-full items-center justify-center p-4', props.className), children: _jsxs(Card, { className: cn('w-full max-w-sm', props.containerClassName), children: [_jsxs(CardHeader, { className: "items-center gap-2 text-center", children: [Logo != null && _jsx("div", { className: "flex justify-center pb-2", children: isValidElement(Logo) ? Logo : typeof Logo === 'function'
                                 ? _jsx(Logo, { className: "h-10 w-auto" }) : Logo }), _jsx(CardTitle, { className: "text-xl", children: props.title ?? t('login.title', 'Sign in') }), _jsx(CardDescription, { children: props.subtitle ?? t('login.subtitle', 'Choose how you would like to continue.') })] }), _jsxs(CardContent, { className: "flex flex-col gap-4", children: [model.methods.length < 1
                             ? _jsx("p", { role: "status", className: "text-sm text-muted-foreground text-center", children: t('login.empty', 'No sign-in method is configured for this application.') })
-                            : _jsx("div", { className: "flex flex-col gap-2", children: model.methods.map((method) => _jsxs(Button, { type: "button", "data-login-method": method.id, variant: VARIANT[method.emphasis ?? 'secondary'] ?? 'outline', "aria-disabled": model.blocked, "data-blocked": model.blocked ? 'true' : undefined, 
+                            : _jsx("div", { className: "flex flex-col gap-2", children: model.methods.map((method) => _jsxs(Button, { type: "button", "data-login-method": method.id, variant: VARIANT[method.emphasis ?? 'secondary'] ?? 'outline', "aria-disabled": model.blocked || undefined, "data-blocked": model.blocked ? 'true' : undefined, 
                                     // `cursor-pointer` explicitly: the package's private shadcn button stays compatible
                                     // with the older primitive style too. Stating it here keeps the sign-in control
                                     // visibly actionable independently of a consumer's shadcn setup.
                                     className: cn('w-full justify-center gap-2 cursor-pointer', model.blocked && 'opacity-60'), autoFocus: method.id === model.primary?.id, onClick: () => model.select(method), children: [model.busy === method.id
                                             ? _jsx(Loader2, { className: "size-4 animate-spin" })
-                                            : _jsx(LoginMethodIcon, { name: method.icon, className: "size-4" }), method.label ?? t(`login.method.${method.i18nKey ?? method.id}`, method.id)] }, method.id)) }), model.terms.required && _jsx(LoginTerms, { model: model.terms, translate: t, locale: props.locale }), (model.error ?? attemptError) != null
+                                            : _jsx(LoginMethodIcon, { name: method.icon, className: "size-4" }), method.label ?? t(`login.method.${method.i18nKey ?? method.id}`, method.id)] }, method.id)) }), model.terms.required && (model.terms.deferred
+                            ? _jsx(LoginPrivacyNotice, { model: model.terms, translate: t, locale: props.locale })
+                            : _jsx(LoginTerms, { model: model.terms, translate: t, locale: props.locale })), (model.error ?? attemptError) != null
                             && _jsx("p", { role: "alert", "data-login-error": true, className: "text-sm text-destructive text-center", children: model.error ?? t(attemptError, 'Sign-in did not complete. Please try again.') })] }), _jsx("div", { className: "px-6", children: props.footer ?? _jsx(LoginCredit, { model: model.credit, translate: t }) })] }) });
 };
 /**

package/build/components/login/screen.js.map

@@ -1 +1 @@
-{"version":3,"file":"screen.js","sourceRoot":"","sources":["../../../src/components/login/screen.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAA;AAEtC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAA;AACxD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AACzG,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,MAAM,OAAO,GAAmD;IAC9D,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,MAAM;CACb,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAyB,KAAK,CAAC,EAAE;IACvD,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,IAAY,EAAE,YAAoB,EAAE,EAAE,CAAC,YAAY,CAAC,CAAA;IACnF,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IACvB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAEjF,uDAAuD;IACvD,EAAE;IACF,4FAA4F;IAC5F,gGAAgG;IAChG,+FAA+F;IAC/F,+FAA+F;IAC/F,4FAA4F;IAC5F,gGAAgG;IAChG,4FAA4F;IAC5F,6FAA6F;IAC7F,EAAE;IACF,0EAA0E;IAC1E,OAAO,yCAEL,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,EAC9C,SAAS,EAAE,EAAE,CAAC,6CAA6C,EAAE,KAAK,CAAC,SAAS,CAAC,YAE7E,MAAC,IAAI,IAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC,kBAAkB,CAAC,aAC9D,MAAC,UAAU,IAAC,SAAS,EAAC,gCAAgC,aACnD,IAAI,IAAI,IAAI,IAAI,cAAK,SAAS,EAAC,0BAA0B,YACvD,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,UAAU;gCACvD,CAAC,CAAC,KAAC,IAAI,IAAC,SAAS,EAAC,aAAa,GAAG,CAAC,CAAC,CAAC,IAAI,GACvC,EACN,KAAC,SAAS,IAAC,SAAS,EAAC,SAAS,YAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,GAAa,EACvF,KAAC,eAAe,cACb,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,gBAAgB,EAAE,wCAAwC,CAAC,GAChE,IACP,EAEb,MAAC,WAAW,IAAC,SAAS,EAAC,qBAAqB,aACzC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;4BACvB,CAAC,CAAC,YAAG,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,2CAA2C,YACrE,CAAC,CAAC,aAAa,EAAE,uDAAuD,CAAC,GACxE;4BACJ,CAAC,CAAC,cAAK,SAAS,EAAC,qBAAqB,YACnC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAmB,EAAE,EAAE,CAAC,MAAC,MAAM,IAEjD,IAAI,EAAC,QAAQ,uBACM,MAAM,CAAC,EAAE,EAC5B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,mBAK9C,KAAK,CAAC,OAAO,kBACd,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;oCAChD,oFAAoF;oCACpF,gFAAgF;oCAChF,iEAAiE;oCACjE,SAAS,EAAE,EAAE,CACX,4CAA4C,EAC5C,KAAK,CAAC,OAAO,IAAI,YAAY,CAC9B,EACD,SAAS,EAAE,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,EAC1C,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAElC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE;4CACvB,CAAC,CAAC,KAAC,OAAO,IAAC,SAAS,EAAC,qBAAqB,GAAG;4CAC7C,CAAC,CAAC,KAAC,eAAe,IAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAC,QAAQ,GAAG,EAC5D,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,KAvBvE,MAAM,CAAC,EAAE,CAwBP,CAAC,GACN,EAEP,KAAK,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAC,UAAU,IAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAI,EAO9F,CAAC,KAAK,CAAC,KAAK,IAAI,YAAY,CAAC,IAAI,IAAI;+BACjC,YAAG,IAAI,EAAC,OAAO,4BAAkB,SAAS,EAAC,sCAAsC,YACjF,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,YAAsB,EAAE,6CAA6C,CAAC,GACtF,IACM,EAEd,cAAK,SAAS,EAAC,MAAM,YAClB,KAAK,CAAC,MAAM,IAAI,KAAC,WAAW,IAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,GAAI,GAC/D,IACD,GACH,CAAA;AACR,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAyB,KAAK,CAAC,EAAE;IAChE,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,EAAE,CAAA;IAE3B,OAAO,KAAC,WAAW,OACb,KAAK,EACT,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,EAC/E,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,GAAG,GAC3B,CAAA;AACJ,CAAC,CAAA"}
+{"version":3,"file":"screen.js","sourceRoot":"","sources":["../../../src/components/login/screen.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAA;AAEtC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAA;AACxD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AACzG,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,MAAM,OAAO,GAAmD;IAC9D,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,MAAM;CACb,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAyB,KAAK,CAAC,EAAE;IACvD,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,IAAY,EAAE,YAAoB,EAAE,EAAE,CAAC,YAAY,CAAC,CAAA;IACnF,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IACvB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAEjF,uDAAuD;IACvD,EAAE;IACF,4FAA4F;IAC5F,gGAAgG;IAChG,+FAA+F;IAC/F,+FAA+F;IAC/F,4FAA4F;IAC5F,gGAAgG;IAChG,4FAA4F;IAC5F,6FAA6F;IAC7F,EAAE;IACF,0EAA0E;IAC1E,OAAO,yCAEL,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,EAC9C,SAAS,EAAE,EAAE,CAAC,6CAA6C,EAAE,KAAK,CAAC,SAAS,CAAC,YAE7E,MAAC,IAAI,IAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC,kBAAkB,CAAC,aAC9D,MAAC,UAAU,IAAC,SAAS,EAAC,gCAAgC,aACnD,IAAI,IAAI,IAAI,IAAI,cAAK,SAAS,EAAC,0BAA0B,YACvD,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,UAAU;gCACvD,CAAC,CAAC,KAAC,IAAI,IAAC,SAAS,EAAC,aAAa,GAAG,CAAC,CAAC,CAAC,IAAI,GACvC,EACN,KAAC,SAAS,IAAC,SAAS,EAAC,SAAS,YAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,GAAa,EACvF,KAAC,eAAe,cACb,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,gBAAgB,EAAE,wCAAwC,CAAC,GAChE,IACP,EAEb,MAAC,WAAW,IAAC,SAAS,EAAC,qBAAqB,aACzC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;4BACvB,CAAC,CAAC,YAAG,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,2CAA2C,YACrE,CAAC,CAAC,aAAa,EAAE,uDAAuD,CAAC,GACxE;4BACJ,CAAC,CAAC,cAAK,SAAS,EAAC,qBAAqB,YACnC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAmB,EAAE,EAAE,CAAC,MAAC,MAAM,IAEjD,IAAI,EAAC,QAAQ,uBACM,MAAM,CAAC,EAAE,EAC5B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,mBAK9C,KAAK,CAAC,OAAO,IAAI,SAAS,kBAC3B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;oCAChD,oFAAoF;oCACpF,gFAAgF;oCAChF,iEAAiE;oCACjE,SAAS,EAAE,EAAE,CACX,4CAA4C,EAC5C,KAAK,CAAC,OAAO,IAAI,YAAY,CAC9B,EACD,SAAS,EAAE,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,EAC1C,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAElC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE;4CACvB,CAAC,CAAC,KAAC,OAAO,IAAC,SAAS,EAAC,qBAAqB,GAAG;4CAC7C,CAAC,CAAC,KAAC,eAAe,IAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAC,QAAQ,GAAG,EAC5D,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,KAvBvE,MAAM,CAAC,EAAE,CAwBP,CAAC,GACN,EAIP,KAAK,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ;4BAC5C,CAAC,CAAC,KAAC,kBAAkB,IAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAI;4BAChF,CAAC,CAAC,KAAC,UAAU,IAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAI,CAAC,EAO1E,CAAC,KAAK,CAAC,KAAK,IAAI,YAAY,CAAC,IAAI,IAAI;+BACjC,YAAG,IAAI,EAAC,OAAO,4BAAkB,SAAS,EAAC,sCAAsC,YACjF,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,YAAsB,EAAE,6CAA6C,CAAC,GACtF,IACM,EAEd,cAAK,SAAS,EAAC,MAAM,YAClB,KAAK,CAAC,MAAM,IAAI,KAAC,WAAW,IAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,GAAI,GAC/D,IACD,GACH,CAAA;AACR,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAyB,KAAK,CAAC,EAAE;IAChE,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,EAAE,CAAA;IAE3B,OAAO,KAAC,WAAW,OACb,KAAK,EACT,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,EAC/E,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,GAAG,GAC3B,CAAA;AACJ,CAAC,CAAA"}

package/build/components/login/terms.d.ts

@@ -7,6 +7,16 @@ export interface LoginTermsProps {
     locale?: string;
     className?: string;
 }
+export type LoginPrivacyNoticeProps = LoginTermsProps;
+/**
+ * The privacy disclosure alone — `notices` (privacy, plus cookies per its own rule), never
+ * consented to and never nested inside a checkbox's `<label>`.
+ *
+ * Split out of {@link LoginTerms} so a sign-in screen whose Terms confirmation has moved to a
+ * post-login step (`termsDeferred`, `@owlmeans/client-auth/login`) can still show this line on its
+ * own — the disclosure does not move just because the confirmation did.
+ */
+export declare const LoginPrivacyNotice: FC<LoginPrivacyNoticeProps>;
 /**
  * The sign-in screen's terms confirmation: one consented checkbox for `documents` (terms, plus
  * billing/product/custom when configured), and a SEPARATE, non-consented disclosure line for

package/build/components/login/terms.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"terms.d.ts","sourceRoot":"","sources":["../../../src/components/login/terms.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAa,MAAM,OAAO,CAAA;AAE1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAIlE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,CAAA;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACxD,2FAA2F;IAC3F,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AA+CD;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,EAAE,CAAC,eAAe,CAuD1C,CAAA"}
+{"version":3,"file":"terms.d.ts","sourceRoot":"","sources":["../../../src/components/login/terms.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAa,MAAM,OAAO,CAAA;AAE1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAIlE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,CAAA;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACxD,2FAA2F;IAC3F,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,MAAM,uBAAuB,GAAG,eAAe,CAAA;AASrD;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,EAAE,EAAE,CAAC,uBAAuB,CAS1D,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,EAAE,CAAC,eAAe,CA8C1C,CAAA"}

package/build/components/login/terms.js

@@ -1,41 +1,21 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { cn } from '../../@/lib/utils.js';
-import { termsSentence } from '@owlmeans/client-auth/login';
+import { termsLabelResolver, termsSentence } from '@owlmeans/client-auth/login';
+const renderParts = (parts) => parts.map((part, index) => part.href != null
+    ? _jsx("a", { href: part.href, target: "_blank", rel: "noreferrer noopener", "data-login-document": part.documentKey, className: "underline underline-offset-2 hover:text-foreground", children: part.text }, index)
+    : _jsx("span", { children: part.text }, index));
 /**
- * English fallbacks for a document's own translated label, keyed by `ResolvedTermsDocument.key`.
+ * The privacy disclosure alone — `notices` (privacy, plus cookies per its own rule), never
+ * consented to and never nested inside a checkbox's `<label>`.
  *
- * Only the keys this package's own resolver ever produces need one — a custom document always
- * carries its own `label`/`labelMap`, or a caller's own `i18nKey` with its own bundle entry.
+ * Split out of {@link LoginTerms} so a sign-in screen whose Terms confirmation has moved to a
+ * post-login step (`termsDeferred`, `@owlmeans/client-auth/login`) can still show this line on its
+ * own — the disclosure does not move just because the confirmation did.
  */
-const DEFAULT_LABEL = {
-    terms: 'Terms & Conditions',
-    privacy: 'Privacy Policy',
-    cookies: 'Cookie Policy',
-    billing: 'Billing Terms',
-    product: '{{product}} Product Terms',
+export const LoginPrivacyNotice = ({ model, translate, locale, className }) => {
+    const resolveLabel = termsLabelResolver(translate, locale);
+    return _jsx("p", { "data-login-privacy": true, className: cn('text-xs text-muted-foreground', className), children: renderParts(termsSentence(translate('login.terms.notice', 'How we handle your personal data: {{notices}}.'), model, locale, resolveLabel)) });
 };
-/**
- * A document's own label: a caller's literal `label`, else its `labelMap` for the current locale,
- * else its `i18nKey` translated — each with `params` (e.g. `{ product: 'Acme' }`) interpolated
- * afterwards, since the `translate` contract this whole package shares is a plain
- * `(key, defaultValue) => string` with no interpolation option of its own.
- */
-const resolveLabelFor = (translate, locale) => (doc) => {
-    const fromMap = doc.labelMap != null
-        ? (locale != null ? doc.labelMap[locale] : undefined) ?? Object.values(doc.labelMap)[0]
-        : undefined;
-    let label = doc.label ?? fromMap
-        ?? (doc.i18nKey != null ? translate(doc.i18nKey, DEFAULT_LABEL[doc.key] ?? doc.key) : doc.key);
-    if (doc.params != null) {
-        for (const [key, value] of Object.entries(doc.params)) {
-            label = label.split(`{{${key}}}`).join(value);
-        }
-    }
-    return label;
-};
-const renderParts = (parts) => parts.map((part, index) => part.href != null
-    ? _jsx("a", { href: part.href, target: "_blank", rel: "noreferrer noopener", "data-login-document": part.documentKey, className: "underline underline-offset-2 hover:text-foreground", children: part.text }, index)
-    : _jsx("span", { children: part.text }, index));
 /**
  * The sign-in screen's terms confirmation: one consented checkbox for `documents` (terms, plus
  * billing/product/custom when configured), and a SEPARATE, non-consented disclosure line for
@@ -43,10 +23,10 @@ const renderParts = (parts) => parts.map((part, index) => part.href != null
  * because nothing is being agreed to there.
  */
 export const LoginTerms = ({ model, translate, locale, className }) => {
-    const resolveLabel = resolveLabelFor(translate, locale);
+    const resolveLabel = termsLabelResolver(translate, locale);
     // Centred, like every other row in the card. The checkbox stays at the start of the sentence
     // rather than above it, so `justify-center` centres the pair and `text-center` centres the
     // wrapped lines within it.
-    return _jsxs("div", { className: cn('flex flex-col items-center gap-1.5 text-center', className), children: [_jsxs("label", { className: "flex items-start justify-center gap-2 text-sm text-muted-foreground cursor-pointer", children: [_jsx("input", { type: "checkbox", "data-login-terms": true, className: "mt-0.5 size-4 shrink-0 accent-primary", checked: model.accepted, "aria-invalid": model.attempted && !model.accepted, onChange: event => model.accept(event.target.checked) }), _jsx("span", { children: renderParts(termsSentence(translate('login.terms.accept', 'I have read and agree to the {{documents}}.'), model, locale, resolveLabel)) })] }), model.revisedAt != null && _jsx("p", { "data-login-revised": true, className: "text-xs text-muted-foreground", children: translate('login.terms.revised', 'Last updated: {{date}}').split('{{date}}').join(model.revisedAt) }), _jsx("p", { "data-login-privacy": true, className: "text-xs text-muted-foreground", children: renderParts(termsSentence(translate('login.terms.notice', 'How we handle your personal data: {{notices}}.'), model, locale, resolveLabel)) }), model.attempted && !model.accepted && _jsx("p", { role: "alert", className: "text-sm text-destructive", children: renderParts(termsSentence(translate('login.terms.required', 'Please confirm the {{documents}} to continue.'), model, locale, resolveLabel)) })] });
+    return _jsxs("div", { className: cn('flex flex-col items-center gap-1.5 text-center', className), children: [_jsxs("label", { className: "flex items-start justify-center gap-2 text-sm text-muted-foreground cursor-pointer", children: [_jsx("input", { type: "checkbox", "data-login-terms": true, className: "mt-0.5 size-4 shrink-0 accent-primary", checked: model.accepted, "aria-invalid": model.attempted && !model.accepted, onChange: event => model.accept(event.target.checked) }), _jsx("span", { children: renderParts(termsSentence(translate('login.terms.accept', 'I have read and agree to the {{documents}}.'), model, locale, resolveLabel)) })] }), model.revisedAt != null && _jsx("p", { "data-login-revised": true, className: "text-xs text-muted-foreground", children: translate('login.terms.revised', 'Last updated: {{date}}').split('{{date}}').join(model.revisedAt) }), _jsx(LoginPrivacyNotice, { model: model, translate: translate, locale: locale }), model.attempted && !model.accepted && _jsx("p", { role: "alert", className: "text-sm text-destructive", children: renderParts(termsSentence(translate('login.terms.required', 'Please confirm the {{documents}} to continue.'), model, locale, resolveLabel)) })] });
 };
 //# sourceMappingURL=terms.js.map

package/build/components/login/terms.js.map

@@ -1 +1 @@
-{"version":3,"file":"terms.js","sourceRoot":"","sources":["../../../src/components/login/terms.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAA;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAW3D;;;;;GAKG;AACH,MAAM,aAAa,GAA2B;IAC5C,KAAK,EAAE,oBAAoB;IAC3B,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,2BAA2B;CACrC,CAAA;AAED;;;;;GAKG;AACH,MAAM,eAAe,GAAG,CACtB,SAAwD,EAAE,MAA0B,EACpF,EAAE,CAAC,CAAC,GAA0B,EAAU,EAAE;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI;QAClC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,OAAO;WAC3B,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAEhG,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,KAA0B,EAAa,EAAE,CAC5D,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI;IAC1C,CAAC,CAAC,YAAe,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,yBACpD,IAAI,CAAC,WAAW,EACrC,SAAS,EAAC,oDAAoD,YAAE,IAAI,CAAC,IAAI,IAFjE,KAAK,CAEiE;IAChF,CAAC,CAAC,yBAAmB,IAAI,CAAC,IAAI,IAAjB,KAAK,CAAoB,CAAC,CAAA;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAwB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IACzF,MAAM,YAAY,GAAG,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAEvD,6FAA6F;IAC7F,2FAA2F;IAC3F,2BAA2B;IAC3B,OAAO,eAAK,SAAS,EAAE,EAAE,CAAC,gDAAgD,EAAE,SAAS,CAAC,aAKpF,iBAAO,SAAS,EAAC,oFAAoF,aAOnG,gBACE,IAAI,EAAC,UAAU,4BACf,SAAS,EAAC,uCAAuC,EACjD,OAAO,EAAE,KAAK,CAAC,QAAQ,kBACT,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,EAChD,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GACrD,EACF,yBACG,WAAW,CAAC,aAAa,CACxB,SAAS,CAAC,oBAAoB,EAAE,6CAA6C,CAAC,EAC9E,KAAK,EAAE,MAAM,EAAE,YAAY,CAC5B,CAAC,GACG,IACD,EAEP,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,wCAAsB,SAAS,EAAC,+BAA+B,YACxF,SAAS,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GACjG,EAMJ,wCAAsB,SAAS,EAAC,+BAA+B,YAC5D,WAAW,CAAC,aAAa,CACxB,SAAS,CAAC,oBAAoB,EAAE,gDAAgD,CAAC,EACjF,KAAK,EAAE,MAAM,EAAE,YAAY,CAC5B,CAAC,GACA,EAEH,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,YAAG,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,0BAA0B,YACxF,WAAW,CAAC,aAAa,CACxB,SAAS,CAAC,sBAAsB,EAAE,+CAA+C,CAAC,EAClF,KAAK,EAAE,MAAM,EAAE,YAAY,CAC5B,CAAC,GACA,IACA,CAAA;AACR,CAAC,CAAA"}
+{"version":3,"file":"terms.js","sourceRoot":"","sources":["../../../src/components/login/terms.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAA;AAEzC,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAa/E,MAAM,WAAW,GAAG,CAAC,KAA0B,EAAa,EAAE,CAC5D,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI;IAC1C,CAAC,CAAC,YAAe,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,yBACpD,IAAI,CAAC,WAAW,EACrC,SAAS,EAAC,oDAAoD,YAAE,IAAI,CAAC,IAAI,IAFjE,KAAK,CAEiE;IAChF,CAAC,CAAC,yBAAmB,IAAI,CAAC,IAAI,IAAjB,KAAK,CAAoB,CAAC,CAAA;AAE3C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAgC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IACzG,MAAM,YAAY,GAAG,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAE1D,OAAO,wCAAsB,SAAS,EAAE,EAAE,CAAC,+BAA+B,EAAE,SAAS,CAAC,YACnF,WAAW,CAAC,aAAa,CACxB,SAAS,CAAC,oBAAoB,EAAE,gDAAgD,CAAC,EACjF,KAAK,EAAE,MAAM,EAAE,YAAY,CAC5B,CAAC,GACA,CAAA;AACN,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAwB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IACzF,MAAM,YAAY,GAAG,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAE1D,6FAA6F;IAC7F,2FAA2F;IAC3F,2BAA2B;IAC3B,OAAO,eAAK,SAAS,EAAE,EAAE,CAAC,gDAAgD,EAAE,SAAS,CAAC,aAKpF,iBAAO,SAAS,EAAC,oFAAoF,aAOnG,gBACE,IAAI,EAAC,UAAU,4BACf,SAAS,EAAC,uCAAuC,EACjD,OAAO,EAAE,KAAK,CAAC,QAAQ,kBACT,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,EAChD,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GACrD,EACF,yBACG,WAAW,CAAC,aAAa,CACxB,SAAS,CAAC,oBAAoB,EAAE,6CAA6C,CAAC,EAC9E,KAAK,EAAE,MAAM,EAAE,YAAY,CAC5B,CAAC,GACG,IACD,EAEP,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,wCAAsB,SAAS,EAAC,+BAA+B,YACxF,SAAS,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GACjG,EAEJ,KAAC,kBAAkB,IAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAI,EAEzE,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,YAAG,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,0BAA0B,YACxF,WAAW,CAAC,aAAa,CACxB,SAAS,CAAC,sBAAsB,EAAE,+CAA+C,CAAC,EAClF,KAAK,EAAE,MAAM,EAAE,YAAY,CAC5B,CAAC,GACA,IACA,CAAA;AACR,CAAC,CAAA"}

package/build/entrypoints.d.ts

@@ -1,6 +1,8 @@
-export declare const entrypoints: (import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<any> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<import("@owlmeans/entrypoint").OpenRequest, import("@owlmeans/entrypoint").OpenValue>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
+export declare const entrypoints: (import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<import("@owlmeans/entrypoint").OpenRequest, import("@owlmeans/entrypoint").OpenValue>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
     query: import("@owlmeans/auth").AuthToken;
 }, undefined>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
     query: import("@owlmeans/auth-common").SurrogateQuery;
-}, undefined>>)[];
+}, undefined>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    body: import("@owlmeans/auth").AuthToken;
+}, import("@owlmeans/auth").AuthToken>>)[];
 //# sourceMappingURL=entrypoints.d.ts.map

package/build/entrypoints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW;;;;iBAA4C,CAAA"}
+{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW;;;;;;0CAA4C,CAAA"}

package/build/exports.d.ts

@@ -1,4 +1,5 @@
-export { handler, useNavigate, useValue, useEntrypoint } from '@owlmeans/client';
+export { handler, lazyHandler, lazyComponent, useNavigate, useValue, useEntrypoint } from '@owlmeans/client';
+export type { LazyComponent, LazyComponentOptions, LazyHandler } from '@owlmeans/client';
 export { config } from '@owlmeans/client-context';
 export { service } from '@owlmeans/config';
 export { addWebService } from '@owlmeans/client-config';

package/build/exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../src/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChF,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAC7F,YAAY,EAAE,gBAAgB,IAAI,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAC7E,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,aAAa,IAAI,WAAW,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAA;AAEhG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEpE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAC/D,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnG,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACvE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,WAAW,IAAI,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACtF,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../src/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAC5G,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACxF,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAC7F,YAAY,EAAE,gBAAgB,IAAI,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAC7E,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,aAAa,IAAI,WAAW,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAA;AAEhG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEpE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAC/D,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnG,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACvE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,WAAW,IAAI,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACtF,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA"}

package/build/exports.js

@@ -1,4 +1,4 @@
-export { handler, useNavigate, useValue, useEntrypoint } from '@owlmeans/client';
+export { handler, lazyHandler, lazyComponent, useNavigate, useValue, useEntrypoint } from '@owlmeans/client';
 export { config } from '@owlmeans/client-context';
 export { service } from '@owlmeans/config';
 export { addWebService } from '@owlmeans/client-config';

package/build/exports.js.map

@@ -1 +1 @@
-{"version":3,"file":"exports.js","sourceRoot":"","sources":["../src/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChF,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAE7F,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,aAAa,IAAI,WAAW,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAA;AAEhG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEpE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAG/D,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnG,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACvE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,WAAW,IAAI,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACtF,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"exports.js","sourceRoot":"","sources":["../src/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAE5G,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAE7F,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,aAAa,IAAI,WAAW,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAA;AAEhG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEpE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAG/D,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnG,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACvE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,WAAW,IAAI,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACtF,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/web-panel",
-  "version": "0.1.18-rc.60",
+  "version": "0.1.18-rc.61",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -51,33 +51,33 @@
   },
   "dependencies": {
     "@hookform/resolvers": "^5.2.2",
-    "@owlmeans/api-config-client": "^0.1.18-rc.35",
-    "@owlmeans/auth": "^0.1.18-rc.35",
-    "@owlmeans/auth-common": "^0.1.18-rc.37",
-    "@owlmeans/basic-envelope": "^0.1.18-rc.36",
-    "@owlmeans/client": "^0.1.18-rc.40",
-    "@owlmeans/client-auth": "^0.1.18-rc.47",
-    "@owlmeans/client-config": "^0.1.18-rc.37",
-    "@owlmeans/client-context": "^0.1.18-rc.38",
-    "@owlmeans/client-entrypoint": "^0.1.18-rc.37",
-    "@owlmeans/client-flow": "^0.1.18-rc.43",
-    "@owlmeans/client-i18n": "^0.1.18-rc.39",
-    "@owlmeans/client-panel": "^0.1.18-rc.47",
-    "@owlmeans/client-route": "^0.1.18-rc.38",
-    "@owlmeans/client-socket": "^0.1.18-rc.38",
-    "@owlmeans/config": "^0.1.18-rc.37",
+    "@owlmeans/api-config-client": "^0.1.18-rc.36",
+    "@owlmeans/auth": "^0.1.18-rc.36",
+    "@owlmeans/auth-common": "^0.1.18-rc.38",
+    "@owlmeans/basic-envelope": "^0.1.18-rc.37",
+    "@owlmeans/client": "^0.1.18-rc.41",
+    "@owlmeans/client-auth": "^0.1.18-rc.48",
+    "@owlmeans/client-config": "^0.1.18-rc.38",
+    "@owlmeans/client-context": "^0.1.18-rc.39",
+    "@owlmeans/client-entrypoint": "^0.1.18-rc.38",
+    "@owlmeans/client-flow": "^0.1.18-rc.44",
+    "@owlmeans/client-i18n": "^0.1.18-rc.40",
+    "@owlmeans/client-panel": "^0.1.18-rc.48",
+    "@owlmeans/client-route": "^0.1.18-rc.39",
+    "@owlmeans/client-socket": "^0.1.18-rc.39",
+    "@owlmeans/config": "^0.1.18-rc.38",
     "@owlmeans/context": "^0.1.18-rc.32",
-    "@owlmeans/entrypoint": "^0.1.18-rc.36",
-    "@owlmeans/error": "^0.1.18-rc.35",
-    "@owlmeans/flow": "^0.1.18-rc.38",
-    "@owlmeans/i18n": "^0.1.18-rc.36",
+    "@owlmeans/entrypoint": "^0.1.18-rc.37",
+    "@owlmeans/error": "^0.1.18-rc.36",
+    "@owlmeans/flow": "^0.1.18-rc.39",
+    "@owlmeans/i18n": "^0.1.18-rc.37",
     "@owlmeans/route": "^0.1.18-rc.33",
-    "@owlmeans/state": "^0.1.18-rc.34",
-    "@owlmeans/web-client": "^0.1.18-rc.50",
-    "@owlmeans/web-consent": "^0.1.18-rc.31",
-    "@owlmeans/web-db": "^0.1.18-rc.38",
-    "@owlmeans/web-flow": "^0.1.18-rc.42",
-    "@owlmeans/web-router": "^0.1.18-rc.38",
+    "@owlmeans/state": "^0.1.18-rc.35",
+    "@owlmeans/web-client": "^0.1.18-rc.51",
+    "@owlmeans/web-consent": "^0.1.18-rc.32",
+    "@owlmeans/web-db": "^0.1.18-rc.39",
+    "@owlmeans/web-flow": "^0.1.18-rc.43",
+    "@owlmeans/web-router": "^0.1.18-rc.39",
     "i18next-browser-languagedetector": "^8.0.0",
     "qrcode.react": "^4.2.0",
     "react-google-recaptcha": "^3.1.0",
@@ -103,7 +103,7 @@
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",
-    "@owlmeans/test-ui": "^0.1.18-rc.38",
+    "@owlmeans/test-ui": "^0.1.18-rc.39",
     "@radix-ui/react-alert-dialog": "^1.1.15",
     "@radix-ui/react-dialog": "^1.1.15",
     "@radix-ui/react-label": "^2.1.0",

package/src/auth/exports.ts

@@ -1,6 +1,6 @@
 
-export { handler, useEntrypoint, useValue, useNavigate } from '@owlmeans/client'
-export type { Navigator } from '@owlmeans/client'
+export { handler, lazyHandler, lazyComponent, useEntrypoint, useValue, useNavigate } from '@owlmeans/client'
+export type { Navigator, LazyComponent, LazyComponentOptions, LazyHandler } from '@owlmeans/client'
 export { config } from '@owlmeans/client-context'
 export { service } from '@owlmeans/config'
 export { EntrypointOutcome } from '@owlmeans/entrypoint'

package/src/components/login/screen.tsx

@@ -9,7 +9,7 @@ import { useLoginMethods } from '@owlmeans/client-panel/auth'
 import { loginAttemptError } from '@owlmeans/client-auth/login'
 import type { LoginMethod, LoginScreenProps } from '@owlmeans/client-auth/login'
 import { LoginMethodIcon } from './icons.js'
-import { LoginTerms } from './terms.js'
+import { LoginPrivacyNotice, LoginTerms } from './terms.js'
 import { LoginCredit } from './credit.js'
 
 const VARIANT: Record<string, 'default' | 'outline' | 'link'> = {
@@ -84,7 +84,7 @@ export const LoginScreen: FC<LoginScreenProps> = props => {
               // who has not confirmed the terms would press it and be told nothing at all — the
               // screen would simply seem broken. Blocking happens in the handler, which then says
               // why.
-              aria-disabled={model.blocked}
+              aria-disabled={model.blocked || undefined}
               data-blocked={model.blocked ? 'true' : undefined}
               // `cursor-pointer` explicitly: the package's private shadcn button stays compatible
               // with the older primitive style too. Stating it here keeps the sign-in control
@@ -103,7 +103,11 @@ export const LoginScreen: FC<LoginScreenProps> = props => {
             </Button>)}
           </div>}
 
-        {model.terms.required && <LoginTerms model={model.terms} translate={t} locale={props.locale} />}
+        {/* Terms mode: the checkbox lives on a post-login step instead (`termsDeferred`) — this
+            screen shows the privacy disclosure alone and blocks nothing on it. */}
+        {model.terms.required && (model.terms.deferred
+          ? <LoginPrivacyNotice model={model.terms} translate={t} locale={props.locale} />
+          : <LoginTerms model={model.terms} translate={t} locale={props.locale} />)}
 
         {/*
           A thrown message first, because it names the actual fault; otherwise whatever the

package/src/components/login/terms.tsx

@@ -1,8 +1,8 @@
 import type { FC, ReactNode } from 'react'
 import { cn } from '../../@/lib/utils.js'
 import type { LoginTermsModel } from '@owlmeans/client-panel/auth'
-import { termsSentence } from '@owlmeans/client-auth/login'
-import type { ResolvedTermsDocument, TermsSentencePart } from '@owlmeans/client-auth/login'
+import { termsLabelResolver, termsSentence } from '@owlmeans/client-auth/login'
+import type { TermsSentencePart } from '@owlmeans/client-auth/login'
 
 export interface LoginTermsProps {
   model: LoginTermsModel
@@ -12,43 +12,7 @@ export interface LoginTermsProps {
   className?: string
 }
 
-/**
- * English fallbacks for a document's own translated label, keyed by `ResolvedTermsDocument.key`.
- *
- * Only the keys this package's own resolver ever produces need one — a custom document always
- * carries its own `label`/`labelMap`, or a caller's own `i18nKey` with its own bundle entry.
- */
-const DEFAULT_LABEL: Record<string, string> = {
-  terms: 'Terms & Conditions',
-  privacy: 'Privacy Policy',
-  cookies: 'Cookie Policy',
-  billing: 'Billing Terms',
-  product: '{{product}} Product Terms',
-}
-
-/**
- * A document's own label: a caller's literal `label`, else its `labelMap` for the current locale,
- * else its `i18nKey` translated — each with `params` (e.g. `{ product: 'Acme' }`) interpolated
- * afterwards, since the `translate` contract this whole package shares is a plain
- * `(key, defaultValue) => string` with no interpolation option of its own.
- */
-const resolveLabelFor = (
-  translate: (key: string, defaultValue: string) => string, locale: string | undefined
-) => (doc: ResolvedTermsDocument): string => {
-  const fromMap = doc.labelMap != null
-    ? (locale != null ? doc.labelMap[locale] : undefined) ?? Object.values(doc.labelMap)[0]
-    : undefined
-  let label = doc.label ?? fromMap
-    ?? (doc.i18nKey != null ? translate(doc.i18nKey, DEFAULT_LABEL[doc.key] ?? doc.key) : doc.key)
-
-  if (doc.params != null) {
-    for (const [key, value] of Object.entries(doc.params)) {
-      label = label.split(`{{${key}}}`).join(value)
-    }
-  }
-
-  return label
-}
+export type LoginPrivacyNoticeProps = LoginTermsProps
 
 const renderParts = (parts: TermsSentencePart[]): ReactNode =>
   parts.map((part, index) => part.href != null
@@ -57,6 +21,25 @@ const renderParts = (parts: TermsSentencePart[]): ReactNode =>
       className="underline underline-offset-2 hover:text-foreground">{part.text}</a>
     : <span key={index}>{part.text}</span>)
 
+/**
+ * The privacy disclosure alone — `notices` (privacy, plus cookies per its own rule), never
+ * consented to and never nested inside a checkbox's `<label>`.
+ *
+ * Split out of {@link LoginTerms} so a sign-in screen whose Terms confirmation has moved to a
+ * post-login step (`termsDeferred`, `@owlmeans/client-auth/login`) can still show this line on its
+ * own — the disclosure does not move just because the confirmation did.
+ */
+export const LoginPrivacyNotice: FC<LoginPrivacyNoticeProps> = ({ model, translate, locale, className }) => {
+  const resolveLabel = termsLabelResolver(translate, locale)
+
+  return <p data-login-privacy className={cn('text-xs text-muted-foreground', className)}>
+    {renderParts(termsSentence(
+      translate('login.terms.notice', 'How we handle your personal data: {{notices}}.'),
+      model, locale, resolveLabel
+    ))}
+  </p>
+}
+
 /**
  * The sign-in screen's terms confirmation: one consented checkbox for `documents` (terms, plus
  * billing/product/custom when configured), and a SEPARATE, non-consented disclosure line for
@@ -64,7 +47,7 @@ const renderParts = (parts: TermsSentencePart[]): ReactNode =>
  * because nothing is being agreed to there.
  */
 export const LoginTerms: FC<LoginTermsProps> = ({ model, translate, locale, className }) => {
-  const resolveLabel = resolveLabelFor(translate, locale)
+  const resolveLabel = termsLabelResolver(translate, locale)
 
   // Centred, like every other row in the card. The checkbox stays at the start of the sentence
   // rather than above it, so `justify-center` centres the pair and `text-center` centres the
@@ -100,16 +83,7 @@ export const LoginTerms: FC<LoginTermsProps> = ({ model, translate, locale, clas
       {translate('login.terms.revised', 'Last updated: {{date}}').split('{{date}}').join(model.revisedAt)}
     </p>}
 
-    {/*
-      Outside the checkbox's `<label>` on purpose: a privacy disclosure is not something the
-      checkbox consents to, so it is a sibling paragraph rather than nested inside it.
-    */}
-    <p data-login-privacy className="text-xs text-muted-foreground">
-      {renderParts(termsSentence(
-        translate('login.terms.notice', 'How we handle your personal data: {{notices}}.'),
-        model, locale, resolveLabel
-      ))}
-    </p>
+    <LoginPrivacyNotice model={model} translate={translate} locale={locale} />
 
     {model.attempted && !model.accepted && <p role="alert" className="text-sm text-destructive">
       {renderParts(termsSentence(

package/src/exports.ts

@@ -1,5 +1,6 @@
 
-export { handler, useNavigate, useValue, useEntrypoint } from '@owlmeans/client'
+export { handler, lazyHandler, lazyComponent, useNavigate, useValue, useEntrypoint } from '@owlmeans/client'
+export type { LazyComponent, LazyComponentOptions, LazyHandler } from '@owlmeans/client'
 export { config } from '@owlmeans/client-context'
 export { service } from '@owlmeans/config'
 export { addWebService } from '@owlmeans/client-config'

package/tests/consent.spec.ts

@@ -44,4 +44,19 @@ describe('@owlmeans/web-panel/consent — the dialog and the menu widget', () =>
       await close()
     }
   }, TIMEOUT)
+
+  test('linker passes through to the underlying dialog unchanged', async () => {
+    // `?domains=1` hands `PanelCookieConsent` a `linker` — nothing here re-derives it, so seeing
+    // the domain line pins that `{...props}` still carries it all the way to `CookieConsent`.
+    const { page, close } = await open('/prefs?consent=bare&footer=node&domains=1')
+    try {
+      await page.waitForSelector('#prefs')
+      await page.locator('[data-consent-dialog]').waitFor()
+      const domains = page.locator('[data-consent-domains]')
+      await domains.waitFor()
+      expect(await domains.textContent()).toContain('harness-partner.test')
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
 })

package/tests/harness/lazy-screen.tsx

@@ -0,0 +1,9 @@
+import type { FC } from 'react'
+import { useEntrypoint } from '@owlmeans/client'
+
+/** The screen `mount.tsx` loads lazily — a separate module, so it is a separate request. */
+export const LazyScreen: FC = () => {
+  const { alias } = useEntrypoint()
+
+  return <div id="lazy-screen" data-alias={alias}>lazy-screen</div>
+}

package/tests/harness/mount.tsx

@@ -13,7 +13,8 @@ import { handler, useNavigate } from '@owlmeans/client'
 import { toast } from 'sonner'
 import type { PanelNavConfig, PanelNavLink } from '../../src/index.js'
 import {
-  makeContext, useContext, entrypoints as baseEntrypoints, NavLayout, PanelApp, Toaster
+  makeContext, useContext, entrypoints as baseEntrypoints, NavLayout, PanelApp, Toaster,
+  lazyHandler, lazyComponent,
 } from '../../src/index.js'
 import { LoginScreen } from '../../src/components/login/index.js'
 import {
@@ -36,6 +37,8 @@ const alias = {
   prefs: `${SERVICE}:web:prefs`,
   login: `${SERVICE}:web:login`,
   socket: `${SERVICE}:web:socket`,
+  lazy: `${SERVICE}:web:lazy`,
+  lazyEntry: `${SERVICE}:web:lazy-entry`,
 }
 
 /** A harness id for the ONE tracked connection this screen simulates — a real `ws()`/`useWs()`
@@ -115,6 +118,15 @@ const themeToggle = new URLSearchParams(window.location.search).get('themeToggle
 // confirmation — the shape that pins the "still exactly one checkbox" and "documents render
 // outside the notice" rules even when there is more than terms+privacy to show.
 const extendedTerms = new URLSearchParams(window.location.search).get('terms') === 'extended'
+// `?defer=bound` registers a step that CONFIRMS the terms, bound to a real screen — the sign-in
+// screen must then show no checkbox, only the privacy notice, and block nothing.
+// `?defer=unbound` registers the same step but never binds its entrypoint — the checkbox must
+// stay (fail-closed): a step nobody can reach must never silently remove the confirmation.
+const defer = new URLSearchParams(window.location.search).get('defer')
+// `?domains=1` passes `linker` through to `PanelCookieConsent` — proving the prop reaches
+// `@owlmeans/web-consent`'s `CookieConsent` with nothing lost in between (the props already just
+// spread through; this is what pins that they keep doing so).
+const withDomains = new URLSearchParams(window.location.search).get('domains') === '1'
 
 /**
  * The footer's "Cookie settings" control — the menu widget, rendered from an always-mounted
@@ -222,6 +234,37 @@ const ReportsIndex: FC = () => {
   </div>
 }
 
+/**
+ * Lazily-loaded screens, declared at MODULE SCOPE as the helpers require — the route renderer
+ * remounts a screen on every navigation, so a lazy object made during render would re-suspend
+ * each time. Both go through the package root, which is what an application imports.
+ *
+ * `flakyScreen` fails its first load on purpose: a rejected load must be retried, never cached.
+ * The globals let a spec drive `preload()` without a screen of its own.
+ */
+let flakyLoads = 0
+const lazyScreen = lazyHandler(
+  () => import('./lazy-screen.js'), 'LazyScreen', { fallback: <div id="lazy-fallback">loading</div> }
+)
+const flakyScreen = lazyComponent(async () => {
+  if (++flakyLoads === 1) throw new Error('first-load-fails')
+  return import('./lazy-screen.js')
+}, 'LazyScreen')
+;(globalThis as unknown as { __lazyPreload: () => Promise<boolean> }).__lazyPreload =
+  async () => typeof await lazyScreen.preload() === 'function'
+;(globalThis as unknown as { __flakyPreload: () => Promise<string> }).__flakyPreload =
+  () => flakyScreen.preload().then(() => 'loaded', (e: Error) => e.message)
+
+/** The lazy screen's way in: an in-app navigation, so the layout around it is already mounted. */
+const LazyEntry: FC = () => {
+  const nav = useNavigate()
+
+  return <div id="lazy-entry">
+    lazy-entry-screen
+    <button id="to-lazy" onClick={nav.press(alias.lazy)}>lazy</button>
+  </div>
+}
+
 // The panel context registers the api-config middleware, which resolves the advertise
 // entrypoint during init — that entrypoint needs a declared backend service route, so both
 // sides are declared here exactly as a real app declares them.
@@ -280,6 +323,19 @@ ensureLoginService(context as never).registerMethodSource({
   ],
 })
 
+if (defer != null) {
+  ensureLoginService(context as never).registerStep({
+    alias: 'harness-terms-step',
+    // "bound" points at a real screen of this harness (`/prefs`, already registered below) —
+    // `termsDeferred` only reads `ctx.hasEntrypoint`, so any bound alias proves the point.
+    // "unbound" points nowhere: `hasEntrypoint` answers false and the step stays unreachable.
+    entrypoint: defer === 'bound' ? alias.prefs : 'harness-terms-step-nowhere',
+    confirmsTerms: true,
+    required: true,
+    pending: async () => false,
+  })
+}
+
 const protocols = {
   base: openProtocol(route(BASE, '/', frontend())),
   home: openProtocol(route(HOME, '/', frontend({ default: true, parent: BASE }))),
@@ -290,6 +346,8 @@ const protocols = {
   prefs: openProtocol(route(alias.prefs, '/prefs', frontend({ parent: BASE }))),
   login: openProtocol(route(alias.login, '/login', frontend({ parent: BASE }))),
   socket: openProtocol(route(alias.socket, '/socket', frontend({ parent: BASE }))),
+  lazy: openProtocol(route(alias.lazy, '/lazy', frontend({ parent: BASE }))),
+  lazyEntry: openProtocol(route(alias.lazyEntry, '/lazy-entry', frontend({ parent: BASE }))),
 }
 
 const entrypoints = [
@@ -308,6 +366,8 @@ const entrypoints = [
   bindScreen(protocols.prefs, handler(PrefsScreen)),
   bindScreen(protocols.login, handler(LoginHarness)),
   bindScreen(protocols.socket, handler(SocketStatusScreen)),
+  bindScreen(protocols.lazy, lazyScreen),
+  bindScreen(protocols.lazyEntry, handler(LazyEntry)),
 ]
 
 context.registerEntrypoints(entrypoints)
@@ -315,5 +375,8 @@ context.registerEntrypoints(entrypoints)
 // The consent dialog is a sibling of the Router, as in an application — and only on the consent
 // branches, since its first-visit overlay covers the page every other test clicks through.
 createRoot(document.getElementById('root')!).render(<PanelApp context={context as never}>
-  {consentMode != null && <PanelCookieConsent policyHref="/cookies" />}
+  {consentMode != null && <PanelCookieConsent
+    policyHref="/cookies"
+    {...(withDomains ? { linker: { domains: ['harness-partner.test'] } } : {})}
+  />}
 </PanelApp>)

package/tests/lazy.spec.ts

@@ -0,0 +1,104 @@
+import { afterAll, describe, expect, test } from 'bun:test'
+import { closeBrowser, mountComponent } from '@owlmeans/test-ui'
+import { HARNESS_URL } from './context.js'
+
+// Browser work does not fit the 5s default: a cold harness compiles the app on first request.
+const TIMEOUT = 30_000
+
+// The lazy screen's alias as the harness declares it (`${SERVICE}:web:lazy`).
+const LAZY_ALIAS = 'web-panel-test:web:lazy'
+// The request the lazy screen's chunk arrives by — the harness's own module, served by Vite.
+const LAZY_MODULE = '**/lazy-screen.tsx*'
+
+afterAll(async () => {
+  await closeBrowser()
+})
+
+const open = async (path: string) => mountComponent({ url: `${HARNESS_URL.replace(/\/$/, '')}${path}` })
+
+describe('@owlmeans/web-panel — lazily-loaded screens', () => {
+  test('the fallback renders inside the layout, and the layout survives the load', async () => {
+    const { page, close } = await open('/lazy-entry')
+    try {
+      await page.waitForSelector('#lazy-entry')
+
+      // Hold the chunk's request open, so the fallback is observable for as long as the test needs.
+      let release!: () => void
+      const held = new Promise<void>(resolve => { release = resolve })
+      await page.route(LAZY_MODULE, async route => {
+        await held
+        await route.continue()
+      })
+
+      await page.locator('#to-lazy').click()
+      await page.waitForSelector('#lazy-fallback')
+      // The boundary is the lazy screen's own: the shell stays up and the fallback sits in it.
+      expect(await page.locator('header nav').first().isVisible()).toBe(true)
+      expect(await page.locator('main #lazy-fallback').count()).toBe(1)
+
+      // Keep the layout's header node itself — a remount would replace it with a fresh one.
+      await page.evaluate(() => {
+        const header = document.querySelector('header')!
+        header.setAttribute('data-lazy-mark', '1')
+        ;(window as unknown as { __header: Element }).__header = header
+      })
+
+      release()
+      await page.waitForSelector('#lazy-screen')
+
+      expect(await page.locator('#lazy-fallback').count()).toBe(0)
+      expect(await page.locator('header[data-lazy-mark]').count()).toBe(1)
+      expect(await page.evaluate(() => {
+        const kept = (window as unknown as { __header: Element }).__header
+        return kept.isConnected && document.querySelector('header') === kept
+      })).toBe(true)
+      expect(await page.locator('#lazy-screen').getAttribute('data-alias')).toBe(LAZY_ALIAS)
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+
+  test('a preloaded screen renders without its fallback', async () => {
+    const { page, close } = await open('/lazy-entry')
+    try {
+      await page.waitForSelector('#lazy-entry')
+      expect(await page.evaluate(() => (window as unknown as { __lazyPreload: () => Promise<boolean> }).__lazyPreload())).toBe(true)
+
+      // Records every node ever added, so a fallback that is mounted and replaced in the same
+      // task still counts — reading the DOM afterwards would miss it.
+      await page.evaluate(() => {
+        const flags = window as unknown as { __fallbackSeen: boolean }
+        flags.__fallbackSeen = false
+        new MutationObserver(records => {
+          for (const record of records) {
+            for (const node of Array.from(record.addedNodes)) {
+              if (node instanceof Element && (node.id === 'lazy-fallback' || node.querySelector('#lazy-fallback') != null)) {
+                flags.__fallbackSeen = true
+              }
+            }
+          }
+        }).observe(document.body, { childList: true, subtree: true })
+      })
+
+      await page.locator('#to-lazy').click()
+      await page.waitForSelector('#lazy-screen')
+      expect(await page.evaluate(() => (window as unknown as { __fallbackSeen: boolean }).__fallbackSeen)).toBe(false)
+      expect(await page.locator('#lazy-screen').getAttribute('data-alias')).toBe(LAZY_ALIAS)
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+
+  test('a failed load is retried, not cached', async () => {
+    const { page, close } = await open('/lazy-entry')
+    try {
+      await page.waitForSelector('#lazy-entry')
+      const preload = () => page.evaluate(() => (window as unknown as { __flakyPreload: () => Promise<string> }).__flakyPreload())
+
+      expect(await preload()).toBe('first-load-fails')
+      expect(await preload()).toBe('loaded')
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+})

package/tests/login.spec.ts

@@ -168,8 +168,11 @@ describe('@owlmeans/web-panel — the sign-in screen', () => {
       await page.waitForSelector('[data-login-method]')
 
       expect(await page.locator('[data-login-terms]').isChecked()).toBe(true)
+      // Omitted rather than `"false"`: `aria-disabled={blocked || undefined}` drops the attribute
+      // entirely once unblocked, which is what lets a deferred screen (no `blocked` state at all)
+      // render the same way with no special case.
       expect(await page.locator('[data-login-method="primary"]').getAttribute('aria-disabled'))
-        .toBe('false')
+        .toBeNull()
     } finally {
       await close()
     }
@@ -259,4 +262,49 @@ describe('@owlmeans/web-panel — the sign-in screen', () => {
       }
     }, TIMEOUT)
   })
+
+  describe('the Terms confirmation deferred to a step', () => {
+    test('bound: no checkbox, the privacy notice still renders, and methods are never blocked', async () => {
+      const { page, close } = await open('?defer=bound')
+      try {
+        expect(await page.locator('[data-login-terms]').count()).toBe(0)
+        expect(await page.locator('[data-login-privacy]').count()).toBe(1)
+        expect(await page.locator('[role="alert"]').count()).toBe(0)
+
+        const disabled = await page.locator('[data-login-method="primary"]').getAttribute('aria-disabled')
+        expect(disabled).not.toBe('true')
+
+        await page.locator('[data-login-method="primary"]').click()
+        expect(await page.evaluate(() => (window as never as { __loginStarted: string[] }).__loginStarted))
+          .toEqual(['primary'])
+      } finally {
+        await close()
+      }
+    }, TIMEOUT)
+
+    test('bound + extended documents: still no checkbox, still no blocking', async () => {
+      const { page, close } = await open('?defer=bound&terms=extended')
+      try {
+        expect(await page.locator('[data-login-terms]').count()).toBe(0)
+        expect(await page.locator('[data-login-privacy]').count()).toBe(1)
+
+        await page.locator('[data-login-method="primary"]').click()
+        expect(await page.evaluate(() => (window as never as { __loginStarted: string[] }).__loginStarted))
+          .toEqual(['primary'])
+      } finally {
+        await close()
+      }
+    }, TIMEOUT)
+
+    test('unbound: the checkbox stays — a step nobody can reach never removes the confirmation', async () => {
+      const { page, close } = await open('?defer=unbound')
+      try {
+        expect(await page.locator('[data-login-terms]').count()).toBe(1)
+        expect(await page.locator('[data-login-method="primary"]').getAttribute('aria-disabled'))
+          .toBe('true')
+      } finally {
+        await close()
+      }
+    }, TIMEOUT)
+  })
 })