@owlmeans/web-panel 0.1.18-rc.62 → 0.1.18-rc.63

package/README.md

@@ -11,7 +11,7 @@ but never started.
 ## Installation
 
 ```sh
-bun add @owlmeans/web-panel@^0.1.18-rc.62
+bun add @owlmeans/web-panel@^0.1.18-rc.63
 ```
 
 Peer requirements (the consuming app provides these): `react`, `react-dom`,
@@ -496,7 +496,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.39
+npx @owlmeans/agent-skills@^0.1.18-rc.40
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/web-panel",
-  "version": "0.1.18-rc.62",
-  "generatedAt": "2026-09-25T15:32:39.588Z",
+  "version": "0.1.18-rc.63",
+  "generatedAt": "2026-09-25T21:19:38.010Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/web-panel/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/web-panel
 
 **Layer:** Web (React)
-**Install:** `"@owlmeans/web-panel": "^0.1.18-rc.62"` in `dependencies`
+**Install:** `"@owlmeans/web-panel": "^0.1.18-rc.63"` in `dependencies`
 
 ## Key Exports
 
@@ -330,6 +330,11 @@ export const MainLayout: FC<PropsWithChildren> = ({ children }) => <>
 - `sonner` is a dependency of this package, so nothing is required of the consumer — but an app
   raising its own toasts should declare `sonner` too, at a range that resolves to the same copy.
 
+`appendPermissionDeniedToast(context)` plugs into the client entrypoint failure service and
+shows a localized access-denied toast for errors carrying the server IAM marker. Mount `Toaster`
+once as usual. The toast exposes the technical message and incident id in a separate details
+section. The app supplies its locale through its i18n context.
+
 ### Reload prompt — `SocketReloadDialog`
 
 `makeContext` calls `appendSocketStatus` from `@owlmeans/client-socket` unconditionally, and
@@ -499,9 +504,8 @@ menu has already mounted) and because React 18 StrictMode double-invokes mount/c
 | Job | Import from `@owlmeans/web-panel/consent` | Where it goes |
 |---|---|---|
 | The consent dialog (and its floating re-open button) | `PanelCookieConsent` | Beside the router — a `PanelApp` child — once |
-| Remember the language only while the visitor granted `functional` cookies | `installConsentLanguage()` | Once, in the bootstrap, BEFORE `prepareI18n` — wires `client-i18n`'s persistence guard, and applies a language that arrived with a link from another OwlMeans domain once the grant is saved |
 | The "Cookie settings" control in a footer or menu | `PanelConsentMenuWidget` (`label`, `className`, `onSelect?` — defaults to `openConsent('reopen')`) | Inside the host's own footer/menu |
-| Hiding the floating button while that control is reachable | `useConsentMenuPresence()` | Called by the always-mounted component that renders the control |
+| Hiding the floating button while that control is reachable | `useConsentMenuPresence()` | Called by the always-mounted component that renders the control — mounted ONLY while the control can actually be reached: a component that is merely hidden by CSS (`xl:hidden`) is still mounted and still claims presence, so the floating button vanishes with nothing else to open the dialog; render it conditionally instead (viable's header mounts its hamburger menu only below the full-row breakpoint) |
 | Registering the presence service | `appendConsentWidgetService(context)` | The app's `context.ts` |
 
 A footer is the simplest host, because it is always mounted — the control and the presence call

package/build/auth/entrypoints.d.ts

@@ -1,10 +1,2 @@
-export declare const entrypoints: (import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<import("@owlmeans/entrypoint").OpenRequest, import("@owlmeans/entrypoint").OpenValue>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
-    body: import("@owlmeans/auth").AllowanceRequest;
-}, import("@owlmeans/auth").AllowanceResponse>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
-    body: import("@owlmeans/auth").AuthCredentials;
-}, import("@owlmeans/auth").AuthToken>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
-    query: Partial<import("@owlmeans/auth").AuthToken>;
-}, undefined>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
-    query: import("@owlmeans/auth").AuthToken;
-}, undefined>>)[];
+export declare const entrypoints: (import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<any> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<import("@owlmeans/entrypoint").OpenRequest, import("@owlmeans/entrypoint").OpenValue>>)[];
 //# sourceMappingURL=entrypoints.d.ts.map

package/build/auth/entrypoints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../../src/auth/entrypoints.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW;;;;;;;;iBAAuC,CAAA"}
+{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../../src/auth/entrypoints.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW,mRAAuC,CAAA"}

package/build/consent/index.d.ts

@@ -5,6 +5,6 @@ export { installConsentLanguage } from './language.js';
 export { createConsentWidgetService, appendConsentWidgetService, CONSENT_WIDGET_STATE } from './service.js';
 export { CONSENT_WIDGET_SERVICE } from './consts.js';
 export type { ConsentWidgetPresenceRecord, ConsentWidgetService, ConsentWidgetServiceAppend } from './types.js';
-export { useConsent, useConsentCategory, consentStore, openConsent, isConsented, readConsent, writeConsent, clearConsent, DEFAULT_CONSENT_CATEGORIES, CONSENT_KEY, CONSENT_ESSENTIAL, CONSENT_FUNCTIONAL, CONSENT_ANALYTICS, CONSENT_MARKETING, CONSENT_EVENT, CONSENT_LANGUAGE_EVENT, functionalGranted, consentBootstrapScript, } from '@owlmeans/web-consent';
+export { useConsent, useConsentCategory, consentStore, openConsent, isConsented, readConsent, writeConsent, clearConsent, DEFAULT_CONSENT_CATEGORIES, CONSENT_KEY, CONSENT_ESSENTIAL, CONSENT_ANALYTICS, CONSENT_MARKETING, CONSENT_EVENT, consentBootstrapScript, } from '@owlmeans/web-consent';
 export type { ConsentCategory, ConsentMenuWidgetProps, ConsentOptions, ConsentRecord, ConsentSignal, ConsentState, CookieConsentProps, CookiePolicyProps, } from '@owlmeans/web-consent';
 //# sourceMappingURL=index.d.ts.map

package/build/consent/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/consent/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,YAAY,EACV,2BAA2B,EAAE,oBAAoB,EAAE,0BAA0B,EAC9E,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EACtE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,0BAA0B,EACnE,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EACxF,aAAa,EAAE,sBAAsB,EAAE,iBAAiB,EACxD,sBAAsB,GACvB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,eAAe,EAAE,sBAAsB,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EACrF,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,GACpD,MAAM,uBAAuB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/consent/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,YAAY,EACV,2BAA2B,EAAE,oBAAoB,EAAE,0BAA0B,EAC9E,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EACtE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,0BAA0B,EACnE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EACpE,aAAa,EACb,sBAAsB,GACvB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,eAAe,EAAE,sBAAsB,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EACrF,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,GACpD,MAAM,uBAAuB,CAAA"}

package/build/consent/index.js

@@ -4,5 +4,5 @@ export * from './presence.js';
 export { installConsentLanguage } from './language.js';
 export { createConsentWidgetService, appendConsentWidgetService, CONSENT_WIDGET_STATE } from './service.js';
 export { CONSENT_WIDGET_SERVICE } from './consts.js';
-export { useConsent, useConsentCategory, consentStore, openConsent, isConsented, readConsent, writeConsent, clearConsent, DEFAULT_CONSENT_CATEGORIES, CONSENT_KEY, CONSENT_ESSENTIAL, CONSENT_FUNCTIONAL, CONSENT_ANALYTICS, CONSENT_MARKETING, CONSENT_EVENT, CONSENT_LANGUAGE_EVENT, functionalGranted, consentBootstrapScript, } from '@owlmeans/web-consent';
+export { useConsent, useConsentCategory, consentStore, openConsent, isConsented, readConsent, writeConsent, clearConsent, DEFAULT_CONSENT_CATEGORIES, CONSENT_KEY, CONSENT_ESSENTIAL, CONSENT_ANALYTICS, CONSENT_MARKETING, CONSENT_EVENT, consentBootstrapScript, } from '@owlmeans/web-consent';
 //# sourceMappingURL=index.js.map

package/build/consent/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/consent/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAIpD,OAAO,EACL,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EACtE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,0BAA0B,EACnE,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EACxF,aAAa,EAAE,sBAAsB,EAAE,iBAAiB,EACxD,sBAAsB,GACvB,MAAM,uBAAuB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/consent/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAIpD,OAAO,EACL,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EACtE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,0BAA0B,EACnE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EACpE,aAAa,EACb,sBAAsB,GACvB,MAAM,uBAAuB,CAAA"}

package/build/consent/language.d.ts

@@ -1,22 +1,12 @@
 import type { ConsentOptions } from '@owlmeans/web-consent';
 /**
- * Bind the application's language to the visitor's cookie choice: a language is remembered on their
- * device only while they have granted `functional` storage.
+ * @deprecated The interface language is strictly necessary storage: `@owlmeans/client-i18n` writes
+ * it on every switch and reads it at every start, and `@owlmeans/consent` stores a language that
+ * arrives with a link — none of it waits for a cookie decision, so there is nothing left to bind.
  *
- * It does three things, and the order they take effect in is the point:
- *
- * 1. Installs the persistence guard in `@owlmeans/client-i18n` — so the language switcher (which
- *    calls `setLanguage`) stops writing `owlmeans-lng` until functional is granted, and a stored
- *    language counts as absent while it is not. **Call it BEFORE `prepareI18n`**: the initial
- *    language is resolved from storage right there.
- * 2. On every consent change (`CONSENT_EVENT`) writes the choice the visitor made while storage was
- *    refused, if it is allowed now — a person who picked a language, then answered the dialog with
- *    "accept all", keeps it.
- * 3. On `CONSENT_LANGUAGE_EVENT` — a language that arrived with a link and was waiting for the grant —
- *    switches to it now, unless the person has already picked one in this page's life: what they
- *    chose outranks what a link carried, and that choice is re-written over the store's own write.
- *
- * Returns a function that undoes all three. Safe on the server (only the guard is installed).
+ * Kept as a no-op (returning a no-op cleanup) only so an application written against the earlier,
+ * consent-gated API — a generated target that floats to a newer release — still builds. Remove the
+ * call.
  */
-export declare const installConsentLanguage: (opts?: ConsentOptions) => (() => void);
+export declare const installConsentLanguage: (_opts?: ConsentOptions) => (() => void);
 //# sourceMappingURL=language.d.ts.map

package/build/consent/language.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"language.d.ts","sourceRoot":"","sources":["../../src/consent/language.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAE3D;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,sBAAsB,UAAW,cAAc,KAAG,CAAC,MAAM,IAAI,CA6BzE,CAAA"}
+{"version":3,"file":"language.d.ts","sourceRoot":"","sources":["../../src/consent/language.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAE3D;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,WAAY,cAAc,KAAG,CAAC,MAAM,IAAI,CAAoB,CAAA"}

package/build/consent/language.js

@@ -1,49 +1,11 @@
-import { getExplicitLanguage, persistLanguage, setLanguage, setLanguagePersistence } from '@owlmeans/client-i18n';
-import { CONSENT_EVENT, CONSENT_LANGUAGE_EVENT, functionalGranted } from '@owlmeans/web-consent';
 /**
- * Bind the application's language to the visitor's cookie choice: a language is remembered on their
- * device only while they have granted `functional` storage.
+ * @deprecated The interface language is strictly necessary storage: `@owlmeans/client-i18n` writes
+ * it on every switch and reads it at every start, and `@owlmeans/consent` stores a language that
+ * arrives with a link — none of it waits for a cookie decision, so there is nothing left to bind.
  *
- * It does three things, and the order they take effect in is the point:
- *
- * 1. Installs the persistence guard in `@owlmeans/client-i18n` — so the language switcher (which
- *    calls `setLanguage`) stops writing `owlmeans-lng` until functional is granted, and a stored
- *    language counts as absent while it is not. **Call it BEFORE `prepareI18n`**: the initial
- *    language is resolved from storage right there.
- * 2. On every consent change (`CONSENT_EVENT`) writes the choice the visitor made while storage was
- *    refused, if it is allowed now — a person who picked a language, then answered the dialog with
- *    "accept all", keeps it.
- * 3. On `CONSENT_LANGUAGE_EVENT` — a language that arrived with a link and was waiting for the grant —
- *    switches to it now, unless the person has already picked one in this page's life: what they
- *    chose outranks what a link carried, and that choice is re-written over the store's own write.
- *
- * Returns a function that undoes all three. Safe on the server (only the guard is installed).
+ * Kept as a no-op (returning a no-op cleanup) only so an application written against the earlier,
+ * consent-gated API — a generated target that floats to a newer release — still builds. Remove the
+ * call.
  */
-export const installConsentLanguage = (opts) => {
-    setLanguagePersistence(() => functionalGranted(opts));
-    if (typeof window === 'undefined') {
-        return () => setLanguagePersistence(null);
-    }
-    const onConsent = () => {
-        persistLanguage();
-    };
-    const onLanguage = (event) => {
-        const carried = event.detail?.language;
-        const chosen = getExplicitLanguage();
-        const language = chosen ?? carried;
-        if (typeof language !== 'string' || language === '') {
-            return;
-        }
-        setLanguage(language).catch((error) => {
-            console.error('[i18n] could not apply the language that was waiting for consent', error);
-        });
-    };
-    window.addEventListener(CONSENT_EVENT, onConsent);
-    window.addEventListener(CONSENT_LANGUAGE_EVENT, onLanguage);
-    return () => {
-        window.removeEventListener(CONSENT_EVENT, onConsent);
-        window.removeEventListener(CONSENT_LANGUAGE_EVENT, onLanguage);
-        setLanguagePersistence(null);
-    };
-};
+export const installConsentLanguage = (_opts) => () => undefined;
 //# sourceMappingURL=language.js.map

package/build/consent/language.js.map

@@ -1 +1 @@
-{"version":3,"file":"language.js","sourceRoot":"","sources":["../../src/consent/language.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AACjH,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAGhG;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,IAAqB,EAAgB,EAAE;IAC5E,sBAAsB,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAA;IAErD,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,GAAG,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAA;IAC3C,CAAC;IAED,MAAM,SAAS,GAAG,GAAS,EAAE;QAC3B,eAAe,EAAE,CAAA;IACnB,CAAC,CAAA;IACD,MAAM,UAAU,GAAG,CAAC,KAAY,EAAQ,EAAE;QACxC,MAAM,OAAO,GAAI,KAA4C,CAAC,MAAM,EAAE,QAAQ,CAAA;QAC9E,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAA;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAA;QAClC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YACpD,OAAM;QACR,CAAC;QACD,WAAW,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC7C,OAAO,CAAC,KAAK,CAAC,kEAAkE,EAAE,KAAK,CAAC,CAAA;QAC1F,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IACD,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;IACjD,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAA;IAE3D,OAAO,GAAG,EAAE;QACV,MAAM,CAAC,mBAAmB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,CAAC,mBAAmB,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAA;QAC9D,sBAAsB,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC,CAAA;AACH,CAAC,CAAA"}
+{"version":3,"file":"language.js","sourceRoot":"","sources":["../../src/consent/language.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAsB,EAAgB,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAA"}

package/build/entrypoints.d.ts

@@ -1,8 +1,2 @@
-export declare const entrypoints: (import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<import("@owlmeans/entrypoint").OpenRequest, import("@owlmeans/entrypoint").OpenValue>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
-    query: import("@owlmeans/auth").AuthToken;
-}, undefined>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
-    query: import("@owlmeans/auth-common").SurrogateQuery;
-}, undefined>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
-    body: import("@owlmeans/auth").AuthToken;
-}, import("@owlmeans/auth").AuthToken>>)[];
+export declare const entrypoints: any[];
 //# sourceMappingURL=entrypoints.d.ts.map

package/build/entrypoints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW;;;;;;0CAA4C,CAAA"}
+{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW,OAA4C,CAAA"}

package/build/exports.d.ts

@@ -4,6 +4,7 @@ export { config } from '@owlmeans/client-context';
 export { service } from '@owlmeans/config';
 export { addWebService } from '@owlmeans/client-config';
 export { bind, bindAll, bindScreen, provideRequest, stab } from '@owlmeans/client-entrypoint';
+export { appendPermissionDeniedToast, PermissionDeniedToast } from './permission/index.js';
 export type { ClientEntrypoint as Module } from '@owlmeans/client-entrypoint';
 export { route as croute } from '@owlmeans/client-route';
 export { route, frontend } from '@owlmeans/route';

package/build/exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../src/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAC5G,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACxF,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAC7F,YAAY,EAAE,gBAAgB,IAAI,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAC7E,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,aAAa,IAAI,WAAW,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAA;AAEhG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEpE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAC/D,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnG,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACvE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,WAAW,IAAI,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACtF,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../src/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAC5G,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACxF,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAC7F,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC1F,YAAY,EAAE,gBAAgB,IAAI,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAC7E,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,aAAa,IAAI,WAAW,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAA;AAEhG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEpE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAC/D,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnG,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACvE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,WAAW,IAAI,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACtF,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA"}

package/build/exports.js

@@ -3,6 +3,7 @@ export { config } from '@owlmeans/client-context';
 export { service } from '@owlmeans/config';
 export { addWebService } from '@owlmeans/client-config';
 export { bind, bindAll, bindScreen, provideRequest, stab } from '@owlmeans/client-entrypoint';
+export { appendPermissionDeniedToast, PermissionDeniedToast } from './permission/index.js';
 export { route as croute } from '@owlmeans/client-route';
 export { route, frontend } from '@owlmeans/route';
 export { DEFAULT_ALIAS as DAUTH_GUARD, bindExternalAuthentication } from '@owlmeans/client-auth';

package/build/exports.js.map

@@ -1 +1 @@
-{"version":3,"file":"exports.js","sourceRoot":"","sources":["../src/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAE5G,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAE7F,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,aAAa,IAAI,WAAW,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAA;AAEhG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEpE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAG/D,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnG,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACvE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,WAAW,IAAI,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACtF,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"exports.js","sourceRoot":"","sources":["../src/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAE5G,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAC7F,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAE1F,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,aAAa,IAAI,WAAW,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAA;AAEhG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEpE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAG/D,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnG,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACvE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,WAAW,IAAI,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACtF,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA"}

package/build/permission/i18n/be.json

@@ -0,0 +1,13 @@
+{
+    "title": "Дзеянне адхілена",
+    "description": "Сервер адхіліў дзеянне паводле бягучых правіл доступу. Калі вы чакалі доступу, звярніцеся да адміністратара.",
+    "technical-details": "Тэхнічныя падрабязнасці",
+    "endpoint": "Канцавы пункт",
+    "status": "Статус",
+    "incident": "Ідэнтыфікатар інцыдэнту",
+    "area-title": "Доступ забаронены",
+    "area-description": "Ваш уліковы запіс не можа адкрыць гэты раздзел. Калі вы чакалі доступу, звярніцеся да адміністратара.",
+    "area": "Раздзел",
+    "required-permissions": "Патрэбныя дазволы",
+    "logout": "Выйсці"
+}

package/build/permission/i18n/de.json

@@ -0,0 +1,13 @@
+{
+    "title": "Aktion verweigert",
+    "description": "Der Server hat diese Aktion gemäß den aktuellen Berechtigungen verweigert. Wenn Sie Zugriff erwartet haben, fragen Sie eine Administratorin oder einen Administrator.",
+    "technical-details": "Technische Details",
+    "endpoint": "Endpunkt",
+    "status": "Status",
+    "incident": "Vorfall-ID",
+    "area-title": "Zugriff verweigert",
+    "area-description": "Ihr Konto kann diesen Bereich nicht öffnen. Wenn Sie Zugriff erwartet haben, wenden Sie sich an die Administration.",
+    "area": "Bereich",
+    "required-permissions": "Erforderliche Berechtigungen",
+    "logout": "Abmelden"
+}

package/build/permission/i18n/en.json

@@ -0,0 +1,13 @@
+{
+    "title": "Action denied",
+    "description": "The server denied this action under the current permission rules. If you expected access, ask an administrator.",
+    "technical-details": "Technical details",
+    "endpoint": "Endpoint",
+    "status": "Status",
+    "incident": "Incident ID",
+    "area-title": "Access denied",
+    "area-description": "Your account cannot open this area. Ask an administrator if you expected access.",
+    "area": "Area",
+    "required-permissions": "Required permissions",
+    "logout": "Log out"
+}

package/build/permission/i18n/es.json

@@ -0,0 +1,13 @@
+{
+    "title": "Acción denegada",
+    "description": "El servidor denegó esta acción según las reglas de permisos actuales. Si esperaba tener acceso, consulte a un administrador.",
+    "technical-details": "Detalles técnicos",
+    "endpoint": "Punto de acceso",
+    "status": "Estado",
+    "incident": "ID del incidente",
+    "area-title": "Acceso denegado",
+    "area-description": "Su cuenta no puede abrir esta sección. Si esperaba tener acceso, consulte a un administrador.",
+    "area": "Sección",
+    "required-permissions": "Permisos necesarios",
+    "logout": "Cerrar sesión"
+}

package/build/permission/i18n/fr.json

@@ -0,0 +1,13 @@
+{
+    "title": "Action refusée",
+    "description": "Le serveur a refusé cette action selon les autorisations actuelles. Si vous pensiez avoir accès, contactez un administrateur.",
+    "technical-details": "Détails techniques",
+    "endpoint": "Point de terminaison",
+    "status": "Statut",
+    "incident": "ID de l’incident",
+    "area-title": "Accès refusé",
+    "area-description": "Votre compte ne peut pas ouvrir cette section. Si vous pensiez avoir accès, contactez un administrateur.",
+    "area": "Section",
+    "required-permissions": "Autorisations requises",
+    "logout": "Se déconnecter"
+}

package/build/permission/i18n/pl.json

@@ -0,0 +1,13 @@
+{
+    "title": "Działanie odrzucone",
+    "description": "Serwer odrzucił to działanie zgodnie z obecnymi uprawnieniami. Jeśli oczekujesz dostępu, skontaktuj się z administratorem.",
+    "technical-details": "Szczegóły techniczne",
+    "endpoint": "Punkt końcowy",
+    "status": "Status",
+    "incident": "Identyfikator incydentu",
+    "area-title": "Odmowa dostępu",
+    "area-description": "Twoje konto nie może otworzyć tego obszaru. Jeśli oczekujesz dostępu, skontaktuj się z administratorem.",
+    "area": "Obszar",
+    "required-permissions": "Wymagane uprawnienia",
+    "logout": "Wyloguj się"
+}

package/build/permission/i18n/ru.json

@@ -0,0 +1,13 @@
+{
+    "title": "Действие отклонено",
+    "description": "Сервер отклонил действие согласно текущим правилам доступа. Если вам нужен доступ, обратитесь к администратору.",
+    "technical-details": "Технические подробности",
+    "endpoint": "Конечная точка",
+    "status": "Статус",
+    "incident": "Идентификатор инцидента",
+    "area-title": "Доступ запрещён",
+    "area-description": "Ваша учётная запись не может открыть этот раздел. Если вам нужен доступ, обратитесь к администратору.",
+    "area": "Раздел",
+    "required-permissions": "Необходимые разрешения",
+    "logout": "Выйти"
+}

package/build/permission/i18n/uk.json

@@ -0,0 +1,13 @@
+{
+    "title": "Дію відхилено",
+    "description": "Сервер відхилив цю дію згідно з поточними правилами доступу. Якщо ви очікували доступу, зверніться до адміністратора.",
+    "technical-details": "Технічні подробиці",
+    "endpoint": "Кінцева точка",
+    "status": "Статус",
+    "incident": "Ідентифікатор інциденту",
+    "area-title": "Доступ заборонено",
+    "area-description": "Ваш обліковий запис не може відкрити цей розділ. Якщо ви очікували доступу, зверніться до адміністратора.",
+    "area": "Розділ",
+    "required-permissions": "Потрібні дозволи",
+    "logout": "Вийти"
+}

package/build/permission/i18n.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=i18n.d.ts.map

package/build/permission/i18n.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../../src/permission/i18n.ts"],"names":[],"mappings":""}

package/build/permission/i18n.js

@@ -0,0 +1,13 @@
+import { addI18nLib } from '@owlmeans/i18n';
+import en from './i18n/en.json';
+import pl from './i18n/pl.json';
+import ru from './i18n/ru.json';
+import be from './i18n/be.json';
+import uk from './i18n/uk.json';
+import es from './i18n/es.json';
+import de from './i18n/de.json';
+import fr from './i18n/fr.json';
+for (const [language, chunk] of Object.entries({ en, pl, ru, be, uk, es, de, fr })) {
+    addI18nLib(language, 'permission-denied', chunk);
+}
+//# sourceMappingURL=i18n.js.map

package/build/permission/i18n.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.js","sourceRoot":"","sources":["../../src/permission/i18n.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAC/B,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAC/B,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAC/B,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAC/B,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAC/B,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAC/B,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAC/B,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAE/B,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;IACnF,UAAU,CAAC,QAAQ,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAA;AAClD,CAAC"}

package/build/permission/index.d.ts

@@ -0,0 +1,6 @@
+import './i18n.js';
+import type { BasicContext } from '@owlmeans/context';
+export { PermissionDeniedToast } from './toast.js';
+/** Opt-in adapter for the context's entrypoint failures; mount one Toaster in the app shell. */
+export declare const appendPermissionDeniedToast: <T extends BasicContext<any>>(context: T) => T;
+//# sourceMappingURL=index.d.ts.map

package/build/permission/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/permission/index.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,CAAA;AAGlB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAKrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAElD,gGAAgG;AAChG,eAAO,MAAM,2BAA2B,GAAI,CAAC,SAAS,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,KAAG,CAerF,CAAA"}

package/build/permission/index.js

@@ -0,0 +1,27 @@
+import './i18n.js';
+import { createElement } from 'react';
+import { toast } from 'sonner';
+import { ensureEntrypointFailureService } from '@owlmeans/client-entrypoint';
+import { httpStatusOf, incidentIdOf, isAccessDenied } from '@owlmeans/api/status';
+import { PermissionDeniedToast } from './toast.js';
+export { PermissionDeniedToast } from './toast.js';
+/** Opt-in adapter for the context's entrypoint failures; mount one Toaster in the app shell. */
+export const appendPermissionDeniedToast = (context) => {
+    const seen = new Map();
+    ensureEntrypointFailureService(context).registerPlugin({
+        alias: 'web-panel:permission-denied-toast',
+        onFailure: ({ alias, error }) => {
+            if (!isAccessDenied(error))
+                return;
+            const now = Date.now();
+            if (now - (seen.get(alias) ?? 0) < 2000)
+                return;
+            seen.set(alias, now);
+            toast.warning(createElement(PermissionDeniedToast, {
+                alias, status: httpStatusOf(error), incidentId: incidentIdOf(error),
+            }));
+        },
+    });
+    return context;
+};
+//# sourceMappingURL=index.js.map

package/build/permission/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/permission/index.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,CAAA;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAE9B,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAElD,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAElD,gGAAgG;AAChG,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAA8B,OAAU,EAAK,EAAE;IACxF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAA;IACtC,8BAA8B,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC;QACrD,KAAK,EAAE,mCAAmC;QAC1C,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;YAC9B,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;gBAAE,OAAM;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI;gBAAE,OAAM;YAC/C,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YACpB,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,qBAAqB,EAAE;gBACjD,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC;aACpE,CAAC,CAAC,CAAA;QACL,CAAC;KACF,CAAC,CAAA;IACF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/build/permission/toast.d.ts

@@ -0,0 +1,9 @@
+import type { FC } from 'react';
+export interface PermissionDeniedToastProps {
+    alias: string;
+    status: number | null;
+    incidentId: string | null;
+}
+/** A refusal is actionable context for the user, with diagnostics outside the explanation. */
+export declare const PermissionDeniedToast: FC<PermissionDeniedToastProps>;
+//# sourceMappingURL=toast.d.ts.map

package/build/permission/toast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toast.d.ts","sourceRoot":"","sources":["../../src/permission/toast.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAG/B,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,8FAA8F;AAC9F,eAAO,MAAM,qBAAqB,EAAE,EAAE,CAAC,0BAA0B,CAchE,CAAA"}

package/build/permission/toast.js

@@ -0,0 +1,8 @@
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useI18nLib } from '@owlmeans/client-i18n';
+/** A refusal is actionable context for the user, with diagnostics outside the explanation. */
+export const PermissionDeniedToast = ({ alias, status, incidentId }) => {
+    const t = useI18nLib('permission-denied');
+    return _jsxs("div", { className: "space-y-2 max-w-sm text-sm", children: [_jsx("p", { className: "font-semibold", children: t('title') }), _jsx("p", { children: t('description') }), _jsxs("details", { className: "text-xs", children: [_jsx("summary", { className: "cursor-pointer", children: t('technical-details') }), _jsxs("dl", { className: "mt-2 grid grid-cols-[auto_1fr] gap-x-2 break-all", children: [_jsx("dt", { children: t('endpoint') }), _jsx("dd", { children: alias }), status != null && _jsxs(_Fragment, { children: [_jsx("dt", { children: t('status') }), _jsx("dd", { children: status })] }), incidentId != null && _jsxs(_Fragment, { children: [_jsx("dt", { children: t('incident') }), _jsx("dd", { children: incidentId })] })] })] })] });
+};
+//# sourceMappingURL=toast.js.map

package/build/permission/toast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toast.js","sourceRoot":"","sources":["../../src/permission/toast.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAQlD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,qBAAqB,GAAmC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;IACrG,MAAM,CAAC,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAA;IACzC,OAAO,eAAK,SAAS,EAAC,4BAA4B,aAChD,YAAG,SAAS,EAAC,eAAe,YAAE,CAAC,CAAC,OAAO,CAAC,GAAK,EAC7C,sBAAI,CAAC,CAAC,aAAa,CAAC,GAAK,EACzB,mBAAS,SAAS,EAAC,SAAS,aAC1B,kBAAS,SAAS,EAAC,gBAAgB,YAAE,CAAC,CAAC,mBAAmB,CAAC,GAAW,EACtE,cAAI,SAAS,EAAC,kDAAkD,aAC9D,uBAAK,CAAC,CAAC,UAAU,CAAC,GAAM,EAAA,uBAAK,KAAK,GAAM,EACvC,MAAM,IAAI,IAAI,IAAI,8BAAE,uBAAK,CAAC,CAAC,QAAQ,CAAC,GAAM,EAAA,uBAAK,MAAM,GAAM,IAAG,EAC9D,UAAU,IAAI,IAAI,IAAI,8BAAE,uBAAK,CAAC,CAAC,UAAU,CAAC,GAAM,EAAA,uBAAK,UAAU,GAAM,IAAG,IACtE,IACG,IACN,CAAA;AACR,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/web-panel",
-  "version": "0.1.18-rc.62",
+  "version": "0.1.18-rc.63",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -51,20 +51,21 @@
   },
   "dependencies": {
     "@hookform/resolvers": "^5.2.2",
-    "@owlmeans/api-config-client": "^0.1.18-rc.36",
+    "@owlmeans/api-config-client": "^0.1.18-rc.37",
     "@owlmeans/auth": "^0.1.18-rc.36",
-    "@owlmeans/auth-common": "^0.1.18-rc.38",
-    "@owlmeans/basic-envelope": "^0.1.18-rc.37",
-    "@owlmeans/client": "^0.1.18-rc.42",
-    "@owlmeans/client-auth": "^0.1.18-rc.49",
+    "@owlmeans/auth-common": "^0.1.18-rc.39",
+    "@owlmeans/basic-envelope": "^0.1.18-rc.38",
+    "@owlmeans/client": "^0.1.18-rc.43",
+    "@owlmeans/client-auth": "^0.1.18-rc.50",
     "@owlmeans/client-config": "^0.1.18-rc.38",
-    "@owlmeans/client-context": "^0.1.18-rc.39",
-    "@owlmeans/client-entrypoint": "^0.1.18-rc.38",
-    "@owlmeans/client-flow": "^0.1.18-rc.45",
-    "@owlmeans/client-i18n": "^0.1.18-rc.41",
-    "@owlmeans/client-panel": "^0.1.18-rc.49",
-    "@owlmeans/client-route": "^0.1.18-rc.39",
-    "@owlmeans/client-socket": "^0.1.18-rc.40",
+    "@owlmeans/client-context": "^0.1.18-rc.40",
+    "@owlmeans/client-entrypoint": "^0.1.18-rc.39",
+    "@owlmeans/api": "^0.1.18-rc.39",
+    "@owlmeans/client-flow": "^0.1.18-rc.46",
+    "@owlmeans/client-i18n": "^0.1.18-rc.42",
+    "@owlmeans/client-panel": "^0.1.18-rc.50",
+    "@owlmeans/client-route": "^0.1.18-rc.40",
+    "@owlmeans/client-socket": "^0.1.18-rc.41",
     "@owlmeans/config": "^0.1.18-rc.38",
     "@owlmeans/context": "^0.1.18-rc.32",
     "@owlmeans/entrypoint": "^0.1.18-rc.37",
@@ -73,11 +74,11 @@
     "@owlmeans/i18n": "^0.1.18-rc.37",
     "@owlmeans/route": "^0.1.18-rc.33",
     "@owlmeans/state": "^0.1.18-rc.35",
-    "@owlmeans/web-client": "^0.1.18-rc.52",
-    "@owlmeans/web-consent": "^0.1.18-rc.33",
-    "@owlmeans/web-db": "^0.1.18-rc.39",
-    "@owlmeans/web-flow": "^0.1.18-rc.44",
-    "@owlmeans/web-router": "^0.1.18-rc.40",
+    "@owlmeans/web-client": "^0.1.18-rc.53",
+    "@owlmeans/web-consent": "^0.1.18-rc.34",
+    "@owlmeans/web-db": "^0.1.18-rc.40",
+    "@owlmeans/web-flow": "^0.1.18-rc.45",
+    "@owlmeans/web-router": "^0.1.18-rc.41",
     "i18next-browser-languagedetector": "^8.0.0",
     "qrcode.react": "^4.2.0",
     "react-google-recaptcha": "^3.1.0",
@@ -103,7 +104,7 @@
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",
-    "@owlmeans/test-ui": "^0.1.18-rc.40",
+    "@owlmeans/test-ui": "^0.1.18-rc.41",
     "@radix-ui/react-alert-dialog": "^1.1.15",
     "@radix-ui/react-dialog": "^1.1.15",
     "@radix-ui/react-label": "^2.1.0",

package/src/consent/index.ts

@@ -10,8 +10,8 @@ export type {
 export {
   useConsent, useConsentCategory, consentStore, openConsent, isConsented,
   readConsent, writeConsent, clearConsent, DEFAULT_CONSENT_CATEGORIES,
-  CONSENT_KEY, CONSENT_ESSENTIAL, CONSENT_FUNCTIONAL, CONSENT_ANALYTICS, CONSENT_MARKETING,
-  CONSENT_EVENT, CONSENT_LANGUAGE_EVENT, functionalGranted,
+  CONSENT_KEY, CONSENT_ESSENTIAL, CONSENT_ANALYTICS, CONSENT_MARKETING,
+  CONSENT_EVENT,
   consentBootstrapScript,
 } from '@owlmeans/web-consent'
 export type {

package/src/consent/language.ts

@@ -1,53 +1,12 @@
-import { getExplicitLanguage, persistLanguage, setLanguage, setLanguagePersistence } from '@owlmeans/client-i18n'
-import { CONSENT_EVENT, CONSENT_LANGUAGE_EVENT, functionalGranted } from '@owlmeans/web-consent'
 import type { ConsentOptions } from '@owlmeans/web-consent'
 
 /**
- * Bind the application's language to the visitor's cookie choice: a language is remembered on their
- * device only while they have granted `functional` storage.
+ * @deprecated The interface language is strictly necessary storage: `@owlmeans/client-i18n` writes
+ * it on every switch and reads it at every start, and `@owlmeans/consent` stores a language that
+ * arrives with a link — none of it waits for a cookie decision, so there is nothing left to bind.
  *
- * It does three things, and the order they take effect in is the point:
- *
- * 1. Installs the persistence guard in `@owlmeans/client-i18n` — so the language switcher (which
- *    calls `setLanguage`) stops writing `owlmeans-lng` until functional is granted, and a stored
- *    language counts as absent while it is not. **Call it BEFORE `prepareI18n`**: the initial
- *    language is resolved from storage right there.
- * 2. On every consent change (`CONSENT_EVENT`) writes the choice the visitor made while storage was
- *    refused, if it is allowed now — a person who picked a language, then answered the dialog with
- *    "accept all", keeps it.
- * 3. On `CONSENT_LANGUAGE_EVENT` — a language that arrived with a link and was waiting for the grant —
- *    switches to it now, unless the person has already picked one in this page's life: what they
- *    chose outranks what a link carried, and that choice is re-written over the store's own write.
- *
- * Returns a function that undoes all three. Safe on the server (only the guard is installed).
+ * Kept as a no-op (returning a no-op cleanup) only so an application written against the earlier,
+ * consent-gated API — a generated target that floats to a newer release — still builds. Remove the
+ * call.
  */
-export const installConsentLanguage = (opts?: ConsentOptions): (() => void) => {
-  setLanguagePersistence(() => functionalGranted(opts))
-
-  if (typeof window === 'undefined') {
-    return () => setLanguagePersistence(null)
-  }
-
-  const onConsent = (): void => {
-    persistLanguage()
-  }
-  const onLanguage = (event: Event): void => {
-    const carried = (event as CustomEvent<{ language?: string }>).detail?.language
-    const chosen = getExplicitLanguage()
-    const language = chosen ?? carried
-    if (typeof language !== 'string' || language === '') {
-      return
-    }
-    setLanguage(language).catch((error: unknown) => {
-      console.error('[i18n] could not apply the language that was waiting for consent', error)
-    })
-  }
-  window.addEventListener(CONSENT_EVENT, onConsent)
-  window.addEventListener(CONSENT_LANGUAGE_EVENT, onLanguage)
-
-  return () => {
-    window.removeEventListener(CONSENT_EVENT, onConsent)
-    window.removeEventListener(CONSENT_LANGUAGE_EVENT, onLanguage)
-    setLanguagePersistence(null)
-  }
-}
+export const installConsentLanguage = (_opts?: ConsentOptions): (() => void) => () => undefined

package/src/exports.ts

@@ -5,6 +5,7 @@ export { config } from '@owlmeans/client-context'
 export { service } from '@owlmeans/config'
 export { addWebService } from '@owlmeans/client-config'
 export { bind, bindAll, bindScreen, provideRequest, stab } from '@owlmeans/client-entrypoint'
+export { appendPermissionDeniedToast, PermissionDeniedToast } from './permission/index.js'
 export type { ClientEntrypoint as Module } from '@owlmeans/client-entrypoint'
 export { route as croute } from '@owlmeans/client-route'
 export { route, frontend } from '@owlmeans/route'

package/src/permission/i18n/be.json

@@ -0,0 +1,13 @@
+{
+  "title": "Дзеянне адхілена",
+  "description": "Сервер адхіліў дзеянне паводле бягучых правіл доступу. Калі вы чакалі доступу, звярніцеся да адміністратара.",
+  "technical-details": "Тэхнічныя падрабязнасці",
+  "endpoint": "Канцавы пункт",
+  "status": "Статус",
+  "incident": "Ідэнтыфікатар інцыдэнту",
+  "area-title": "Доступ забаронены",
+  "area-description": "Ваш уліковы запіс не можа адкрыць гэты раздзел. Калі вы чакалі доступу, звярніцеся да адміністратара.",
+  "area": "Раздзел",
+  "required-permissions": "Патрэбныя дазволы",
+  "logout": "Выйсці"
+}

package/src/permission/i18n/de.json

@@ -0,0 +1,13 @@
+{
+  "title": "Aktion verweigert",
+  "description": "Der Server hat diese Aktion gemäß den aktuellen Berechtigungen verweigert. Wenn Sie Zugriff erwartet haben, fragen Sie eine Administratorin oder einen Administrator.",
+  "technical-details": "Technische Details",
+  "endpoint": "Endpunkt",
+  "status": "Status",
+  "incident": "Vorfall-ID",
+  "area-title": "Zugriff verweigert",
+  "area-description": "Ihr Konto kann diesen Bereich nicht öffnen. Wenn Sie Zugriff erwartet haben, wenden Sie sich an die Administration.",
+  "area": "Bereich",
+  "required-permissions": "Erforderliche Berechtigungen",
+  "logout": "Abmelden"
+}

package/src/permission/i18n/en.json

@@ -0,0 +1,13 @@
+{
+  "title": "Action denied",
+  "description": "The server denied this action under the current permission rules. If you expected access, ask an administrator.",
+  "technical-details": "Technical details",
+  "endpoint": "Endpoint",
+  "status": "Status",
+  "incident": "Incident ID",
+  "area-title": "Access denied",
+  "area-description": "Your account cannot open this area. Ask an administrator if you expected access.",
+  "area": "Area",
+  "required-permissions": "Required permissions",
+  "logout": "Log out"
+}

package/src/permission/i18n/es.json

@@ -0,0 +1,13 @@
+{
+  "title": "Acción denegada",
+  "description": "El servidor denegó esta acción según las reglas de permisos actuales. Si esperaba tener acceso, consulte a un administrador.",
+  "technical-details": "Detalles técnicos",
+  "endpoint": "Punto de acceso",
+  "status": "Estado",
+  "incident": "ID del incidente",
+  "area-title": "Acceso denegado",
+  "area-description": "Su cuenta no puede abrir esta sección. Si esperaba tener acceso, consulte a un administrador.",
+  "area": "Sección",
+  "required-permissions": "Permisos necesarios",
+  "logout": "Cerrar sesión"
+}

package/src/permission/i18n/fr.json

@@ -0,0 +1,13 @@
+{
+  "title": "Action refusée",
+  "description": "Le serveur a refusé cette action selon les autorisations actuelles. Si vous pensiez avoir accès, contactez un administrateur.",
+  "technical-details": "Détails techniques",
+  "endpoint": "Point de terminaison",
+  "status": "Statut",
+  "incident": "ID de l’incident",
+  "area-title": "Accès refusé",
+  "area-description": "Votre compte ne peut pas ouvrir cette section. Si vous pensiez avoir accès, contactez un administrateur.",
+  "area": "Section",
+  "required-permissions": "Autorisations requises",
+  "logout": "Se déconnecter"
+}

package/src/permission/i18n/pl.json

@@ -0,0 +1,13 @@
+{
+  "title": "Działanie odrzucone",
+  "description": "Serwer odrzucił to działanie zgodnie z obecnymi uprawnieniami. Jeśli oczekujesz dostępu, skontaktuj się z administratorem.",
+  "technical-details": "Szczegóły techniczne",
+  "endpoint": "Punkt końcowy",
+  "status": "Status",
+  "incident": "Identyfikator incydentu",
+  "area-title": "Odmowa dostępu",
+  "area-description": "Twoje konto nie może otworzyć tego obszaru. Jeśli oczekujesz dostępu, skontaktuj się z administratorem.",
+  "area": "Obszar",
+  "required-permissions": "Wymagane uprawnienia",
+  "logout": "Wyloguj się"
+}

package/src/permission/i18n/ru.json

@@ -0,0 +1,13 @@
+{
+  "title": "Действие отклонено",
+  "description": "Сервер отклонил действие согласно текущим правилам доступа. Если вам нужен доступ, обратитесь к администратору.",
+  "technical-details": "Технические подробности",
+  "endpoint": "Конечная точка",
+  "status": "Статус",
+  "incident": "Идентификатор инцидента",
+  "area-title": "Доступ запрещён",
+  "area-description": "Ваша учётная запись не может открыть этот раздел. Если вам нужен доступ, обратитесь к администратору.",
+  "area": "Раздел",
+  "required-permissions": "Необходимые разрешения",
+  "logout": "Выйти"
+}

package/src/permission/i18n/uk.json

@@ -0,0 +1,13 @@
+{
+  "title": "Дію відхилено",
+  "description": "Сервер відхилив цю дію згідно з поточними правилами доступу. Якщо ви очікували доступу, зверніться до адміністратора.",
+  "technical-details": "Технічні подробиці",
+  "endpoint": "Кінцева точка",
+  "status": "Статус",
+  "incident": "Ідентифікатор інциденту",
+  "area-title": "Доступ заборонено",
+  "area-description": "Ваш обліковий запис не може відкрити цей розділ. Якщо ви очікували доступу, зверніться до адміністратора.",
+  "area": "Розділ",
+  "required-permissions": "Потрібні дозволи",
+  "logout": "Вийти"
+}

package/src/permission/i18n.ts

@@ -0,0 +1,13 @@
+import { addI18nLib } from '@owlmeans/i18n'
+import en from './i18n/en.json'
+import pl from './i18n/pl.json'
+import ru from './i18n/ru.json'
+import be from './i18n/be.json'
+import uk from './i18n/uk.json'
+import es from './i18n/es.json'
+import de from './i18n/de.json'
+import fr from './i18n/fr.json'
+
+for (const [language, chunk] of Object.entries({ en, pl, ru, be, uk, es, de, fr })) {
+  addI18nLib(language, 'permission-denied', chunk)
+}

package/src/permission/index.ts

@@ -0,0 +1,27 @@
+import './i18n.js'
+import { createElement } from 'react'
+import { toast } from 'sonner'
+import type { BasicContext } from '@owlmeans/context'
+import { ensureEntrypointFailureService } from '@owlmeans/client-entrypoint'
+import { httpStatusOf, incidentIdOf, isAccessDenied } from '@owlmeans/api/status'
+import { PermissionDeniedToast } from './toast.js'
+
+export { PermissionDeniedToast } from './toast.js'
+
+/** Opt-in adapter for the context's entrypoint failures; mount one Toaster in the app shell. */
+export const appendPermissionDeniedToast = <T extends BasicContext<any>>(context: T): T => {
+  const seen = new Map<string, number>()
+  ensureEntrypointFailureService(context).registerPlugin({
+    alias: 'web-panel:permission-denied-toast',
+    onFailure: ({ alias, error }) => {
+      if (!isAccessDenied(error)) return
+      const now = Date.now()
+      if (now - (seen.get(alias) ?? 0) < 2000) return
+      seen.set(alias, now)
+      toast.warning(createElement(PermissionDeniedToast, {
+        alias, status: httpStatusOf(error), incidentId: incidentIdOf(error),
+      }))
+    },
+  })
+  return context
+}

package/src/permission/toast.tsx

@@ -0,0 +1,25 @@
+import type { FC } from 'react'
+import { useI18nLib } from '@owlmeans/client-i18n'
+
+export interface PermissionDeniedToastProps {
+  alias: string
+  status: number | null
+  incidentId: string | null
+}
+
+/** A refusal is actionable context for the user, with diagnostics outside the explanation. */
+export const PermissionDeniedToast: FC<PermissionDeniedToastProps> = ({ alias, status, incidentId }) => {
+  const t = useI18nLib('permission-denied')
+  return <div className="space-y-2 max-w-sm text-sm">
+    <p className="font-semibold">{t('title')}</p>
+    <p>{t('description')}</p>
+    <details className="text-xs">
+      <summary className="cursor-pointer">{t('technical-details')}</summary>
+      <dl className="mt-2 grid grid-cols-[auto_1fr] gap-x-2 break-all">
+        <dt>{t('endpoint')}</dt><dd>{alias}</dd>
+        {status != null && <><dt>{t('status')}</dt><dd>{status}</dd></>}
+        {incidentId != null && <><dt>{t('incident')}</dt><dd>{incidentId}</dd></>}
+      </dl>
+    </details>
+  </div>
+}

package/tests/consent-language.spec.ts

@@ -1,82 +1,31 @@
-import { afterEach, beforeEach, describe, expect, test } from 'bun:test'
-import { persistLanguage, setLanguage, setLanguagePersistence } from '@owlmeans/client-i18n'
-import { CONSENT_EVENT, CONSENT_KEY, CONSENT_LANGUAGE_EVENT } from '@owlmeans/web-consent'
+import { beforeEach, describe, expect, test } from 'bun:test'
+import { setLanguage } from '@owlmeans/client-i18n'
 import { installConsentLanguage } from '../src/consent/language.js'
 
-/** A window that is just an event bus, and a localStorage that is a map: enough for the binding. */
-const env = () => {
+describe('installConsentLanguage — a deprecated no-op', () => {
   const store = new Map<string, string>()
-  const listeners = new Map<string, Set<(e: any) => void>>()
-  ;(globalThis as any).localStorage = {
-    getItem: (k: string) => store.get(k) ?? null,
-    setItem: (k: string, v: string) => { store.set(k, v) },
-    removeItem: (k: string) => { store.delete(k) },
-  }
-  ;(globalThis as any).window = {
-    addEventListener: (t: string, f: any) => { (listeners.get(t) ?? listeners.set(t, new Set()).get(t)!).add(f) },
-    removeEventListener: (t: string, f: any) => { listeners.get(t)?.delete(f) },
-    dispatchEvent: (e: any) => { listeners.get(e.type)?.forEach(f => f(e)) },
-  }
-  ;(globalThis as any).CustomEvent = class { constructor(public type: string, public init: any) {} get detail() { return this.init?.detail } }
 
-  return { store, listeners, emit: (type: string, detail?: unknown) => (globalThis as any).window.dispatchEvent(new (globalThis as any).CustomEvent(type, { detail })) }
-}
-
-describe('installConsentLanguage', () => {
-  let e: ReturnType<typeof env>
-  let off: () => void
-  const record = (functional: boolean) => e.store.set(CONSENT_KEY, JSON.stringify({ v: 2, essential: true, functional, analytics: false, marketing: false }))
-
-  beforeEach(() => { e = env(); off = installConsentLanguage() })
-  afterEach(() => { off(); setLanguagePersistence(null); delete (globalThis as any).window })
-
-  test('the switcher\'s choice is not remembered without a functional grant', async () => {
-    await setLanguage('pl')
-
-    expect(e.store.has('owlmeans-lng')).toBe(false)
+  beforeEach(() => {
+    store.clear()
+    ;(globalThis as any).localStorage = {
+      getItem: (k: string) => store.get(k) ?? null,
+      setItem: (k: string, v: string) => { store.set(k, v) },
+      removeItem: (k: string) => { store.delete(k) },
+    }
   })
 
-  test('…and is written when the visitor grants functional, on the consent event', async () => {
-    await setLanguage('pl')
-    record(true)
-    e.emit(CONSENT_EVENT, { record: {} })
+  test('returns a cleanup that can be called, more than once', () => {
+    const off = installConsentLanguage()
 
-    expect(e.store.get('owlmeans-lng')).toBe('pl')
+    expect(typeof off).toBe('function')
+    expect(off()).toBeUndefined()
+    expect(off()).toBeUndefined()
   })
 
-  test('a refusal writes nothing on the consent event', async () => {
+  test('changes nothing about the language: a choice is stored either way, whatever the decision', async () => {
+    installConsentLanguage()
     await setLanguage('pl')
-    record(false)
-    e.emit(CONSENT_EVENT, { record: {} })
-
-    expect(e.store.has('owlmeans-lng')).toBe(false)
-  })
-
-  test('a language that was waiting for the grant is applied and stored when it arrives', async () => {
-    record(true)
-    e.emit(CONSENT_LANGUAGE_EVENT, { language: 'de' })
-    await new Promise(resolve => setTimeout(resolve, 0))
-
-    expect(e.store.get('owlmeans-lng')).toBe('de')
-  })
-
-  test('what the person picked in this page life outranks the language the link carried', async () => {
-    await setLanguage('fr')
-    record(true)
-    e.emit(CONSENT_EVENT, { record: {} })
-    e.emit(CONSENT_LANGUAGE_EVENT, { language: 'de' })
-    await new Promise(resolve => setTimeout(resolve, 0))
-
-    expect(e.store.get('owlmeans-lng')).toBe('fr')
-  })
-
-  test('the returned function removes the listeners and the guard', async () => {
-    off()
-    expect(e.listeners.get(CONSENT_EVENT)?.size ?? 0).toBe(0)
-    expect(e.listeners.get(CONSENT_LANGUAGE_EVENT)?.size ?? 0).toBe(0)
 
-    await setLanguage('es')
-    expect(e.store.get('owlmeans-lng')).toBe('es')
-    expect(persistLanguage()).toBe(false)
+    expect(store.get('owlmeans-lng')).toBe('pl')
   })
 })