@owlmeans/web-panel 0.1.18-rc.72 → 0.1.18-rc.73

package/README.md

@@ -11,7 +11,7 @@ but never started.
 ## Installation
 
 ```sh
-bun add @owlmeans/web-panel@^0.1.18-rc.72
+bun add @owlmeans/web-panel@^0.1.18-rc.73
 ```
 
 Peer requirements (the consuming app provides these): `react`, `react-dom`,
@@ -413,7 +413,9 @@ consumer's CSS puts dark tokens under `.dark` AND under
 
 | Symbol | Kind | Purpose |
 |---|---|---|
-| `PanelCookieConsent`, `PanelCookiePolicy` | component | `@owlmeans/web-consent` components bound to the app's language and translations |
+| `PanelCookieConsent`, `PanelCookiePolicy` | component | `@owlmeans/web-consent` components bound to the app's language, translations and `cfg.cookieConsent` (`{ mode?, geo? }` — a prop wins) |
+| `appendConsentGeoPlugin(ctx, plugin)` | function | Register the app's own country locator (`ConsentGeoPlugin`) while the context is configured; turns the geo gate on |
+| `PanelCookieConsentConfig`, `ConsentGeoPluginAppend` | type | `cfg.cookieConsent`; the `context.consentGeo()` accessor |
 | `PanelConsentMenuWidget` | component | The cookie-preferences control for a host menu or footer ("Cookie settings" — pass `label` and `className`) |
 | `appendConsentWidgetService(ctx, alias?)`, `createConsentWidgetService` | function | Ref-counted presence service over a state resource |
 | `useConsentMenuPresence()`, `useConsentWidgetPresent()` | hook | Declare that a menu shows the row; read whether one does (hides the floating button) |
@@ -496,7 +498,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.51
+npx @owlmeans/agent-skills@^0.1.18-rc.52
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/web-panel",
-  "version": "0.1.18-rc.72",
-  "generatedAt": "2026-10-06T11:45:57.685Z",
+  "version": "0.1.18-rc.73",
+  "generatedAt": "2026-10-08T21:27:54.321Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/web-panel/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/web-panel
 
 **Layer:** Web (React)
-**Install:** `"@owlmeans/web-panel": "^0.1.18-rc.72"` in `dependencies`
+**Install:** `"@owlmeans/web-panel": "^0.1.18-rc.73"` in `dependencies`
 
 ## Key Exports
 
@@ -481,8 +481,29 @@ landmark.
 ## Subpath: `./consent`
 
 `PanelCookieConsent` and `PanelCookiePolicy` — `@owlmeans/web-consent`'s components bound to this
-app's language and translations, falling through to the package's own seven-language bundle for
-every key the app has not overridden. See the `consent` skill.
+app's language and translations, falling through to the package's own eight-language bundle for
+every key the app has not overridden — and to the app's cookie-consent configuration. See the
+`consent` and `web-consent` skills.
+
+**The configuration lives in `cfg.cookieConsent`** (`PanelCookieConsentConfig`, on `AppConfig`),
+set where the rest of the app's configuration is, before anything renders:
+
+```typescript
+cfg.cookieConsent = { geo: { cloudflare: true } }   // ask only in consent countries; mode: 'bar' default
+```
+
+- `mode` (`'bar'` | `'window'`) and `geo` (`ConsentGeoOptions`) feed both components; a prop of the
+  same name always wins. Not `cfg.consent` — "consent" also names the marketing-consent and sign-in
+  terms options.
+- A file restored into apps of every age (a generated target's `config.ts`) writes it as
+  `Object.assign(cfg, { cookieConsent: … })`, so a tree whose framework predates the key still
+  type-checks; an older package ignores it.
+- **A locator of the app's own** is code, not configuration: `appendConsentGeoPlugin(context,
+  plugin)` in `context.ts` registers a `ConsentGeoPlugin` (`{ alias, locate }` — resolve the country
+  or throw) ahead of Cloudflare's and installs `context.consentGeo()`. Appending one IS asking for
+  the gate: `PanelCookieConsent` turns it on (`geo: {}`) even where `cfg.cookieConsent.geo` says
+  nothing. `PanelCookiePolicy` reads the same, so the policy states the regional rule exactly when
+  the dialog applies it.
 
 A re-export does not move Tailwind class strings, so a consumer adds a second `@source` for
 `@owlmeans/web-consent` alongside this package's — pointing at **`src`**, for the reason spelled out
@@ -532,7 +553,8 @@ menu has already mounted) and because React 18 StrictMode double-invokes mount/c
 
 | Job | Import from `@owlmeans/web-panel/consent` | Where it goes |
 |---|---|---|
-| The consent dialog (and its floating re-open button) | `PanelCookieConsent` | Beside the router — a `PanelApp` child — once |
+| The consent UI — bar, window, spinner (and its floating re-open button) | `PanelCookieConsent` | Beside the router — a `PanelApp` child — once |
+| Asking only in consent countries | `cfg.cookieConsent.geo`, or `appendConsentGeoPlugin(context, plugin)` | The app's `config.ts` / `context.ts` |
 | The "Cookie settings" control in a footer or menu | `PanelConsentMenuWidget` (`label`, `className`, `onSelect?` — defaults to `consentStore.open('reopen')`) | Inside the host's own footer/menu |
 | Hiding the floating button while that control is reachable | `useConsentMenuPresence()` | Called by the always-mounted component that renders the control — mounted ONLY while the control can actually be reached: a component that is merely hidden by CSS (`xl:hidden`) is still mounted and still claims presence, so the floating button vanishes with nothing else to open the dialog; render it conditionally instead (viable's header mounts its hamburger menu only below the full-row breakpoint) |
 | Registering the presence service | `appendConsentWidgetService(context)` | The app's `context.ts` |
@@ -557,7 +579,8 @@ bound dialog with its floating button; `useConsentMenuPresence()` then has nothi
 does nothing. The presence read itself (`useConsentWidgetPresent`) still needs the service — its
 state resource is registered by it — so any other caller checks first. A dialog that read an
 unregistered state resource threw inside render ("Resource consent-widget-presence not found") and
-blanked the whole application. Pinned by `tests/consent.spec.ts` (`?consent=bare` / `?consent=menu`).
+blanked the whole application. Pinned by `tests/consent.spec.ts` (`?consent=bare` / `?consent=menu`;
+the configuration by `?consentCfg=window|bar`, `?modeProp=` and `?consentGeo=<CC>|fail`).
 
 ## Consumer setup — package boundary and Tailwind
 

package/build/auth/entrypoints.d.ts

@@ -6,5 +6,5 @@ export declare const entrypoints: (import("@owlmeans/client-entrypoint").ClientP
     query: Partial<import("@owlmeans/auth").AuthToken>;
 }, undefined>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
     query: import("@owlmeans/auth").AuthToken;
-}, undefined>>)[];
+}, unknown>>)[];
 //# sourceMappingURL=entrypoints.d.ts.map

package/build/auth/entrypoints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../../src/auth/entrypoints.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW;;;;;;;;iBAAuC,CAAA"}
+{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../../src/auth/entrypoints.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW;;;;;;;;eAAuC,CAAA"}

package/build/components/login/types.d.ts

@@ -15,7 +15,7 @@ export interface LoginCreditProps {
 export interface LoginTermsProps {
     model: LoginTermsModel;
     translate: (key: string, defaultValue: string) => string;
-    /** The current language, for `Intl.ListFormat` and a document's own locale-keyed label. */
+    /** The current language, for `Intl.ListFormat`, document labels and explicit translated hrefs. */
     locale?: string;
     className?: string;
 }

package/build/components/login/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/components/login/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAExG,MAAM,WAAW,gBAAiB,SAAQ,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC;IAC3E,0DAA0D;IAC1D,IAAI,CAAC,EAAE,aAAa,CAAC;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,SAAS,CAAA;CACzD;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,gBAAgB,CAAA;IACvB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACxD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,CAAA;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACxD,2FAA2F;IAC3F,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,MAAM,uBAAuB,GAAG,eAAe,CAAA;AAErD,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,kBAAkB,CAAA;IACzB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACxD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/components/login/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAExG,MAAM,WAAW,gBAAiB,SAAQ,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC;IAC3E,0DAA0D;IAC1D,IAAI,CAAC,EAAE,aAAa,CAAC;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,SAAS,CAAA;CACzD;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,gBAAgB,CAAA;IACvB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACxD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,CAAA;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACxD,kGAAkG;IAClG,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,MAAM,uBAAuB,GAAG,eAAe,CAAA;AAErD,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,kBAAkB,CAAA;IACzB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACxD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB"}

package/build/consent/component.d.ts

@@ -19,5 +19,9 @@ import { type CookieConsentProps, type CookiePolicyProps } from '@owlmeans/web-c
  * while the context is built, before anything renders.
  */
 export declare const PanelCookieConsent: FC<CookieConsentProps>;
+/**
+ * The cookie-policy page, bound like the dialog — and told about the geo gate the same way, so it
+ * states the regional rule exactly when the dialog applies it.
+ */
 export declare const PanelCookiePolicy: FC<CookiePolicyProps>;
 //# sourceMappingURL=component.d.ts.map

package/build/consent/component.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../src/consent/component.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAC/B,OAAO,EAA+B,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AA0BpH;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAMrD,CAAA;AAED,eAAO,MAAM,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAMnD,CAAA"}
+{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../src/consent/component.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAC/B,OAAO,EACgD,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,EACrG,MAAM,uBAAuB,CAAA;AAqC9B;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAWrD,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAQnD,CAAA"}

package/build/consent/component.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-import { CookieConsent, CookiePolicy } from '@owlmeans/web-consent';
+import { CookieConsent, CookiePolicy, } from '@owlmeans/web-consent';
 import { useLanguage } from '@owlmeans/client-i18n';
 import { useContext } from '../context.js';
 import { useConsentTranslate } from './translate.js';
@@ -12,6 +12,12 @@ const BoundCookieConsent = ({ menuPresent, ...props }) => {
     return _jsx(CookieConsent, { ...props, locale: locale, translate: translate, noReopenButton: props.noReopenButton ?? menuPresent });
 };
 const MenuAwareCookieConsent = props => _jsx(BoundCookieConsent, { ...props, menuPresent: useConsentWidgetPresent() });
+/**
+ * The geo gate in force: the prop, else `cfg.cookieConsent.geo`, else — when the application
+ * appended a locator of its own — the gate with nothing but that locator.
+ */
+const geoOf = (prop, context) => prop ?? context.cfg.cookieConsent?.geo ?? (typeof context.consentGeo === 'function' ? {} : undefined);
+void _localeParity;
 /**
  * The consent dialog, bound to this application's language and translations.
  *
@@ -32,15 +38,23 @@ const MenuAwareCookieConsent = props => _jsx(BoundCookieConsent, { ...props, men
  */
 export const PanelCookieConsent = props => {
     const context = useContext();
+    const mode = props.mode ?? context.cfg.cookieConsent?.mode;
+    const geo = geoOf(props.geo, context);
+    const bound = { ...props, ...(mode != null ? { mode } : {}), ...(geo != null ? { geo } : {}) };
     return typeof context.consentWidget === 'function'
-        ? _jsx(MenuAwareCookieConsent, { ...props })
-        : _jsx(BoundCookieConsent, { ...props });
+        ? _jsx(MenuAwareCookieConsent, { ...bound })
+        : _jsx(BoundCookieConsent, { ...bound });
 };
+/**
+ * The cookie-policy page, bound like the dialog — and told about the geo gate the same way, so it
+ * states the regional rule exactly when the dialog applies it.
+ */
 export const PanelCookiePolicy = props => {
+    const context = useContext();
     const [lng] = useLanguage();
     const locale = props.locale ?? lng;
     const translate = useConsentTranslate(locale, props.translate);
-    return _jsx(CookiePolicy, { ...props, locale: locale, translate: translate });
+    const geo = geoOf(props.geo, context);
+    return _jsx(CookiePolicy, { ...props, ...(geo != null ? { geo } : {}), locale: locale, translate: translate });
 };
-void _localeParity;
 //# sourceMappingURL=component.js.map

package/build/consent/component.js.map

@@ -1 +1 @@
-{"version":3,"file":"component.js","sourceRoot":"","sources":["../../src/consent/component.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAmD,MAAM,uBAAuB,CAAA;AACpH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAE1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEvD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAGjD,MAAM,kBAAkB,GAAgC,CAAC,EAAE,WAAW,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE;IACpF,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,EAAE,CAAA;IAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,CAAA;IAClC,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IAE9D,OAAO,KAAC,aAAa,OACf,KAAK,EACT,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,EACpB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,WAAW,GACnD,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,sBAAsB,GAA2B,KAAK,CAAC,EAAE,CAC7D,KAAC,kBAAkB,OAAK,KAAK,EAAE,WAAW,EAAE,uBAAuB,EAAE,GAAI,CAAA;AAE3E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA2B,KAAK,CAAC,EAAE;IAChE,MAAM,OAAO,GAAG,UAAU,EAA0E,CAAA;IAEpG,OAAO,OAAO,OAAO,CAAC,aAAa,KAAK,UAAU;QAChD,CAAC,CAAC,KAAC,sBAAsB,OAAK,KAAK,GAAI;QACvC,CAAC,CAAC,KAAC,kBAAkB,OAAK,KAAK,GAAI,CAAA;AACvC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAA0B,KAAK,CAAC,EAAE;IAC9D,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,EAAE,CAAA;IAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,CAAA;IAClC,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IAE9D,OAAO,KAAC,YAAY,OAAK,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAI,CAAA;AAC1E,CAAC,CAAA;AAED,KAAK,aAAa,CAAA"}
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../src/consent/component.tsx"],"names":[],"mappings":";AACA,OAAO,EACL,aAAa,EAAE,YAAY,GAC5B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAE1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEvD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAGjD,MAAM,kBAAkB,GAAgC,CAAC,EAAE,WAAW,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE;IACpF,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,EAAE,CAAA;IAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,CAAA;IAClC,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IAE9D,OAAO,KAAC,aAAa,OACf,KAAK,EACT,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,EACpB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,WAAW,GACnD,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,sBAAsB,GAA2B,KAAK,CAAC,EAAE,CAC7D,KAAC,kBAAkB,OAAK,KAAK,EAAE,WAAW,EAAE,uBAAuB,EAAE,GAAI,CAAA;AAE3E;;;GAGG;AACH,MAAM,KAAK,GAAG,CACZ,IAAmC,EAAE,OAAgE,EACtE,EAAE,CACjC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,OAAO,OAAO,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;AAEvG,KAAK,aAAa,CAAA;AAElB;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA2B,KAAK,CAAC,EAAE;IAChE,MAAM,OAAO,GAAG,UAAU,EAEvB,CAAA;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAA;IAC1D,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACrC,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IAE9F,OAAO,OAAO,OAAO,CAAC,aAAa,KAAK,UAAU;QAChD,CAAC,CAAC,KAAC,sBAAsB,OAAK,KAAK,GAAI;QACvC,CAAC,CAAC,KAAC,kBAAkB,OAAK,KAAK,GAAI,CAAA;AACvC,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA0B,KAAK,CAAC,EAAE;IAC9D,MAAM,OAAO,GAAG,UAAU,EAAsE,CAAA;IAChG,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,EAAE,CAAA;IAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,CAAA;IAClC,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAErC,OAAO,KAAC,YAAY,OAAK,KAAK,KAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAI,CAAA;AAC5G,CAAC,CAAA"}

package/build/consent/geo.d.ts

@@ -0,0 +1,17 @@
+import { type ConsentGeoPlugin } from '@owlmeans/web-consent';
+import type { ClientConfig } from '@owlmeans/client-context';
+import type { ClientContext } from '@owlmeans/client';
+import type { ConsentGeoPluginAppend } from './types.js';
+/**
+ * Add the application's own country locator while its context is configured — beside
+ * `appendConsentWidgetService`, before anything renders.
+ *
+ * A locator is one async method that resolves the visitor's country or throws
+ * (`ConsentGeoPlugin`). It is registered into `@owlmeans/consent`'s plugin registry, ahead of the
+ * built-in Cloudflare one, and `PanelCookieConsent` turns the geo gate on for it even where
+ * `cfg.cookieConsent.geo` says nothing — appending a locator IS asking for the gate. Its result
+ * decides as Cloudflare's would: a visitor in a consent country is asked, anyone else is decided for
+ * automatically, and a throw hands over to the next locator — with none left, the visitor is asked.
+ */
+export declare const appendConsentGeoPlugin: <C extends ClientConfig, T extends ClientContext<C>>(ctx: T, plugin: ConsentGeoPlugin) => T & ConsentGeoPluginAppend;
+//# sourceMappingURL=geo.d.ts.map

package/build/consent/geo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"geo.d.ts","sourceRoot":"","sources":["../../src/consent/geo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAExD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,sBAAsB,GAAI,CAAC,SAAS,YAAY,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,OAClF,CAAC,UAAU,gBAAgB,KAC/B,CAAC,GAAG,sBAON,CAAA"}

package/build/consent/geo.js

@@ -0,0 +1,19 @@
+import { consentPluginHelper } from '@owlmeans/web-consent';
+/**
+ * Add the application's own country locator while its context is configured — beside
+ * `appendConsentWidgetService`, before anything renders.
+ *
+ * A locator is one async method that resolves the visitor's country or throws
+ * (`ConsentGeoPlugin`). It is registered into `@owlmeans/consent`'s plugin registry, ahead of the
+ * built-in Cloudflare one, and `PanelCookieConsent` turns the geo gate on for it even where
+ * `cfg.cookieConsent.geo` says nothing — appending a locator IS asking for the gate. Its result
+ * decides as Cloudflare's would: a visitor in a consent country is asked, anyone else is decided for
+ * automatically, and a throw hands over to the next locator — with none left, the visitor is asked.
+ */
+export const appendConsentGeoPlugin = (ctx, plugin) => {
+    const _ctx = ctx;
+    consentPluginHelper.registerConsentPlugin(plugin);
+    _ctx.consentGeo = () => plugin;
+    return _ctx;
+};
+//# sourceMappingURL=geo.js.map

package/build/consent/geo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"geo.js","sourceRoot":"","sources":["../../src/consent/geo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAyB,MAAM,uBAAuB,CAAA;AAKlF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,GAAM,EAAE,MAAwB,EACJ,EAAE;IAC9B,MAAM,IAAI,GAAG,GAAiC,CAAA;IAE9C,mBAAmB,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAA;IACjD,IAAI,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,MAAM,CAAA;IAE9B,OAAO,IAAI,CAAA;AACb,CAAC,CAAA"}

package/build/consent/index.d.ts

@@ -3,8 +3,9 @@ export * from './menu-widget.js';
 export * from './presence.js';
 export { installConsentLanguage } from './language.js';
 export { createConsentWidgetService, appendConsentWidgetService, CONSENT_WIDGET_STATE } from './service.js';
+export { appendConsentGeoPlugin } from './geo.js';
 export { CONSENT_WIDGET_SERVICE } from './consts.js';
-export type { ConsentWidgetPresenceRecord, ConsentWidgetService, ConsentWidgetServiceAppend } from './types.js';
-export { useConsent, useConsentCategory, consentStore, openConsent, isConsented, readConsent, writeConsent, clearConsent, DEFAULT_CONSENT_CATEGORIES, CONSENT_KEY, CONSENT_ESSENTIAL, CONSENT_ANALYTICS, CONSENT_MARKETING, CONSENT_EVENT, consentBootstrapScript, } from '@owlmeans/web-consent';
-export type { ConsentCategory, ConsentMenuWidgetProps, ConsentOptions, ConsentRecord, ConsentSignal, ConsentState, CookieConsentProps, CookiePolicyProps, } from '@owlmeans/web-consent';
+export type { ConsentWidgetPresenceRecord, ConsentWidgetService, ConsentWidgetServiceAppend, PanelCookieConsentConfig, ConsentGeoPluginAppend, } from './types.js';
+export { useConsent, useConsentCategory, consentStore, openConsent, isConsented, readConsent, writeConsent, clearConsent, DEFAULT_CONSENT_CATEGORIES, CONSENT_KEY, CONSENT_ESSENTIAL, CONSENT_ANALYTICS, CONSENT_MARKETING, CONSENT_EVENT, consentBootstrapScript, CONSENT_REQUIRED_COUNTRIES, } from '@owlmeans/web-consent';
+export type { ConsentCategory, ConsentMenuWidgetProps, ConsentOptions, ConsentRecord, ConsentSignal, ConsentState, CookieConsentProps, CookiePolicyProps, ConsentDisplayMode, ConsentGeoOptions, ConsentGeoPlugin, ConsentGeoLocation, } from '@owlmeans/web-consent';
 //# sourceMappingURL=index.d.ts.map

package/build/consent/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/consent/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,YAAY,EACV,2BAA2B,EAAE,oBAAoB,EAAE,0BAA0B,EAC9E,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EACtE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,0BAA0B,EACnE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EACpE,aAAa,EACb,sBAAsB,GACvB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,eAAe,EAAE,sBAAsB,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EACrF,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,GACpD,MAAM,uBAAuB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/consent/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,YAAY,EACV,2BAA2B,EAAE,oBAAoB,EAAE,0BAA0B,EAC7E,wBAAwB,EAAE,sBAAsB,GACjD,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EACtE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,0BAA0B,EACnE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EACpE,aAAa,EACb,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,eAAe,EAAE,sBAAsB,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EACrF,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAC1F,gBAAgB,EAAE,kBAAkB,GACrC,MAAM,uBAAuB,CAAA"}

package/build/consent/index.js

@@ -3,6 +3,7 @@ export * from './menu-widget.js';
 export * from './presence.js';
 export { installConsentLanguage } from './language.js';
 export { createConsentWidgetService, appendConsentWidgetService, CONSENT_WIDGET_STATE } from './service.js';
+export { appendConsentGeoPlugin } from './geo.js';
 export { CONSENT_WIDGET_SERVICE } from './consts.js';
-export { useConsent, useConsentCategory, consentStore, openConsent, isConsented, readConsent, writeConsent, clearConsent, DEFAULT_CONSENT_CATEGORIES, CONSENT_KEY, CONSENT_ESSENTIAL, CONSENT_ANALYTICS, CONSENT_MARKETING, CONSENT_EVENT, consentBootstrapScript, } from '@owlmeans/web-consent';
+export { useConsent, useConsentCategory, consentStore, openConsent, isConsented, readConsent, writeConsent, clearConsent, DEFAULT_CONSENT_CATEGORIES, CONSENT_KEY, CONSENT_ESSENTIAL, CONSENT_ANALYTICS, CONSENT_MARKETING, CONSENT_EVENT, consentBootstrapScript, CONSENT_REQUIRED_COUNTRIES, } from '@owlmeans/web-consent';
 //# sourceMappingURL=index.js.map

package/build/consent/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/consent/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAIpD,OAAO,EACL,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EACtE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,0BAA0B,EACnE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EACpE,aAAa,EACb,sBAAsB,GACvB,MAAM,uBAAuB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/consent/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAKpD,OAAO,EACL,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EACtE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,0BAA0B,EACnE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EACpE,aAAa,EACb,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAA"}

package/build/consent/translate.js

@@ -1,6 +1,6 @@
 import { useCallback } from 'react';
 import { useI18nLib } from '@owlmeans/client-i18n';
-import { consentI18nHelper } from '@owlmeans/consent';
+import { consentI18nHelper } from '@owlmeans/web-consent';
 /**
  * Resolve consent copy through the application first, and the packaged bundle second.
  *

package/build/consent/translate.js.map

@@ -1 +1 @@
-{"version":3,"file":"translate.js","sourceRoot":"","sources":["../../src/consent/translate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAErD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,MAAc,EAAE,QAAwD,EACvB,EAAE;IACnD,MAAM,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;IAE/B,OAAO,WAAW,CAAC,CAAC,GAAW,EAAE,YAAoB,EAAE,EAAE;QACvD,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;QACpC,CAAC;QACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;QACrF,2FAA2F;QAC3F,2FAA2F;QAC3F,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC3C,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;AAC3B,CAAC,CAAA"}
+{"version":3,"file":"translate.js","sourceRoot":"","sources":["../../src/consent/translate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAEzD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,MAAc,EAAE,QAAwD,EACvB,EAAE;IACnD,MAAM,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;IAE/B,OAAO,WAAW,CAAC,CAAC,GAAW,EAAE,YAAoB,EAAE,EAAE;QACvD,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;QACpC,CAAC;QACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;QACrF,2FAA2F;QAC3F,2FAA2F;QAC3F,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC3C,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;AAC3B,CAAC,CAAA"}

package/build/consent/types.d.ts

@@ -1,5 +1,25 @@
 import type { ResourceRecord } from '@owlmeans/resource';
 import type { InitializedService } from '@owlmeans/context';
+import type { ConsentDisplayMode, ConsentGeoOptions, ConsentGeoPlugin } from '@owlmeans/web-consent';
+/**
+ * `cfg.cookieConsent` — how the application's cookie consent asks, set where the rest of its
+ * configuration is. A prop on `PanelCookieConsent` / `PanelCookiePolicy` always wins.
+ */
+export interface PanelCookieConsentConfig {
+    /** `bar` (the default) or `window` — see `ConsentDisplayMode`. */
+    mode?: ConsentDisplayMode;
+    /**
+     * Ask only where the law requires it. `{ cloudflare: true }` locates the visitor through the
+     * Cloudflare edge the application is served from; a locator of the application's own is added in
+     * code with `appendConsentGeoPlugin`. See `ConsentGeoOptions`.
+     */
+    geo?: ConsentGeoOptions;
+}
+/** What `appendConsentGeoPlugin` adds to the context. */
+export interface ConsentGeoPluginAppend {
+    /** The application's own locator, registered while the context was configured. */
+    consentGeo: () => ConsentGeoPlugin;
+}
 /** A `single`-store presence flag: one record, no id needed. */
 export interface ConsentWidgetPresenceRecord extends ResourceRecord {
     present: boolean;

package/build/consent/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/consent/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAE3D,gEAAgE;AAChE,MAAM,WAAW,2BAA4B,SAAQ,cAAc;IACjE,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D;;;OAGG;IACH,KAAK,EAAE,MAAM,MAAM,IAAI,CAAA;IACvB,yEAAyE;IACzE,OAAO,EAAE,MAAM,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,oBAAoB,CAAA;CAC1C"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/consent/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAEpG;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,kEAAkE;IAClE,IAAI,CAAC,EAAE,kBAAkB,CAAA;IACzB;;;;OAIG;IACH,GAAG,CAAC,EAAE,iBAAiB,CAAA;CACxB;AAED,yDAAyD;AACzD,MAAM,WAAW,sBAAsB;IACrC,kFAAkF;IAClF,UAAU,EAAE,MAAM,gBAAgB,CAAA;CACnC;AAED,gEAAgE;AAChE,MAAM,WAAW,2BAA4B,SAAQ,cAAc;IACjE,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D;;;OAGG;IACH,KAAK,EAAE,MAAM,MAAM,IAAI,CAAA;IACvB,yEAAyE;IACzE,OAAO,EAAE,MAAM,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,oBAAoB,CAAA;CAC1C"}

package/build/entrypoints.d.ts

@@ -1,8 +1,2 @@
-export declare const entrypoints: (import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<import("@owlmeans/entrypoint").OpenRequest, import("@owlmeans/entrypoint").OpenValue>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
-    query: import("@owlmeans/auth").AuthToken;
-}, unknown>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
-    query: import("@owlmeans/auth-common").SurrogateQuery;
-}, unknown>> | import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
-    body: import("@owlmeans/auth").AuthToken;
-}, import("@owlmeans/auth").AuthToken>>)[];
+export declare const entrypoints: import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<any>[];
 //# sourceMappingURL=entrypoints.d.ts.map

package/build/entrypoints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW;;;;;;0CAA4C,CAAA"}
+{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW,uEAA4C,CAAA"}

package/build/types.d.ts

@@ -2,6 +2,7 @@ import type { WithFlowConfig } from '@owlmeans/flow';
 import type { AppConfig as Config, AppContext as Context, RenderOptions } from '@owlmeans/web-client';
 import type { FlowService } from '@owlmeans/web-flow';
 import type { SocketClientSettings, SocketStatusServiceAppend } from '@owlmeans/client-socket';
+import type { PanelCookieConsentConfig } from './consent/types.js';
 export interface AppConfig extends Config, WithFlowConfig {
     socket?: SocketClientSettings & {
         /**
@@ -12,6 +13,8 @@ export interface AppConfig extends Config, WithFlowConfig {
          */
         reloadDialog?: boolean;
     };
+    /** How the cookie consent asks — the bar or the window, and where (`geo`). See `./consent`. */
+    cookieConsent?: PanelCookieConsentConfig;
 }
 export interface AppContext<C extends AppConfig = AppConfig> extends Context<C>, SocketStatusServiceAppend {
     flow: () => FlowService;

package/build/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,KAAK,EAAE,SAAS,IAAI,MAAM,EAAE,UAAU,IAAI,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACrG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAE9F,MAAM,WAAW,SAAU,SAAQ,MAAM,EAAE,cAAc;IACvD,MAAM,CAAC,EAAE,oBAAoB,GAAG;QAC9B;;;;;WAKG;QACH,YAAY,CAAC,EAAE,OAAO,CAAA;KACvB,CAAA;CACF;AAED,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,CAAE,SAAQ,OAAO,CAAC,CAAC,CAAC,EAAE,yBAAyB;IACxG,IAAI,EAAE,MAAM,WAAW,CAAA;CACxB;AAED,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACrD,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,KAAK,EAAE,SAAS,IAAI,MAAM,EAAE,UAAU,IAAI,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACrG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAC9F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAElE,MAAM,WAAW,SAAU,SAAQ,MAAM,EAAE,cAAc;IACvD,MAAM,CAAC,EAAE,oBAAoB,GAAG;QAC9B;;;;;WAKG;QACH,YAAY,CAAC,EAAE,OAAO,CAAA;KACvB,CAAA;IACD,+FAA+F;IAC/F,aAAa,CAAC,EAAE,wBAAwB,CAAA;CACzC;AAED,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,CAAE,SAAQ,OAAO,CAAC,CAAC,CAAC,EAAE,yBAAyB;IACxG,IAAI,EAAE,MAAM,WAAW,CAAA;CACxB;AAED,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACrD,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/web-panel",
-  "version": "0.1.18-rc.72",
+  "version": "0.1.18-rc.73",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -51,35 +51,35 @@
   },
   "dependencies": {
     "@hookform/resolvers": "^5.9.1",
-    "@owlmeans/api-config-client": "^0.1.18-rc.46",
-    "@owlmeans/auth": "^0.1.18-rc.40",
-    "@owlmeans/auth-common": "^0.1.18-rc.48",
-    "@owlmeans/basic-envelope": "^0.1.18-rc.47",
-    "@owlmeans/client": "^0.1.18-rc.52",
-    "@owlmeans/client-auth": "^0.1.18-rc.59",
-    "@owlmeans/client-config": "^0.1.18-rc.44",
-    "@owlmeans/client-context": "^0.1.18-rc.49",
-    "@owlmeans/client-entrypoint": "^0.1.18-rc.48",
-    "@owlmeans/api": "^0.1.18-rc.48",
-    "@owlmeans/client-flow": "^0.1.18-rc.55",
-    "@owlmeans/client-i18n": "^0.1.18-rc.51",
-    "@owlmeans/client-panel": "^0.1.18-rc.59",
-    "@owlmeans/client-route": "^0.1.18-rc.49",
-    "@owlmeans/client-socket": "^0.1.18-rc.50",
+    "@owlmeans/api-config-client": "^0.1.18-rc.47",
+    "@owlmeans/auth": "^0.1.18-rc.41",
+    "@owlmeans/auth-common": "^0.1.18-rc.49",
+    "@owlmeans/basic-envelope": "^0.1.18-rc.48",
+    "@owlmeans/client": "^0.1.18-rc.53",
+    "@owlmeans/client-auth": "^0.1.18-rc.60",
+    "@owlmeans/client-config": "^0.1.18-rc.45",
+    "@owlmeans/client-context": "^0.1.18-rc.50",
+    "@owlmeans/client-entrypoint": "^0.1.18-rc.49",
+    "@owlmeans/api": "^0.1.18-rc.49",
+    "@owlmeans/client-flow": "^0.1.18-rc.56",
+    "@owlmeans/client-i18n": "^0.1.18-rc.52",
+    "@owlmeans/client-panel": "^0.1.18-rc.60",
+    "@owlmeans/client-route": "^0.1.18-rc.50",
+    "@owlmeans/client-socket": "^0.1.18-rc.51",
     "@owlmeans/config": "^0.1.18-rc.44",
     "@owlmeans/context": "^0.1.18-rc.34",
     "@owlmeans/entrypoint": "^0.1.18-rc.41",
     "@owlmeans/error": "^0.1.18-rc.38",
     "@owlmeans/flow": "^0.1.18-rc.45",
     "@owlmeans/i18n": "^0.1.18-rc.39",
-    "@owlmeans/log": "^0.1.18-rc.2",
+    "@owlmeans/log": "^0.1.18-rc.3",
     "@owlmeans/route": "^0.1.18-rc.35",
     "@owlmeans/state": "^0.1.18-rc.39",
-    "@owlmeans/web-client": "^0.1.18-rc.62",
-    "@owlmeans/web-consent": "^0.1.18-rc.43",
-    "@owlmeans/web-db": "^0.1.18-rc.49",
-    "@owlmeans/web-flow": "^0.1.18-rc.54",
-    "@owlmeans/web-router": "^0.1.18-rc.50",
+    "@owlmeans/web-client": "^0.1.18-rc.63",
+    "@owlmeans/web-consent": "^0.1.18-rc.44",
+    "@owlmeans/web-db": "^0.1.18-rc.50",
+    "@owlmeans/web-flow": "^0.1.18-rc.55",
+    "@owlmeans/web-router": "^0.1.18-rc.51",
     "i18next-browser-languagedetector": "^8.2.1",
     "qrcode.react": "^4.2.0",
     "react-google-recaptcha": "^3.1.0",
@@ -105,7 +105,7 @@
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",
-    "@owlmeans/test-ui": "^0.1.18-rc.50",
+    "@owlmeans/test-ui": "^0.1.18-rc.51",
     "@radix-ui/react-alert-dialog": "^1.1.23",
     "@radix-ui/react-dialog": "^1.1.23",
     "@radix-ui/react-label": "^2.1.15",

package/src/components/login/types.ts

@@ -16,7 +16,7 @@ export interface LoginCreditProps {
 export interface LoginTermsProps {
   model: LoginTermsModel
   translate: (key: string, defaultValue: string) => string
-  /** The current language, for `Intl.ListFormat` and a document's own locale-keyed label. */
+  /** The current language, for `Intl.ListFormat`, document labels and explicit translated hrefs. */
   locale?: string
   className?: string
 }

package/src/consent/component.tsx

@@ -1,11 +1,13 @@
 import type { FC } from 'react'
-import { CookieConsent, CookiePolicy, type CookieConsentProps, type CookiePolicyProps } from '@owlmeans/web-consent'
+import {
+  CookieConsent, CookiePolicy, type ConsentGeoOptions, type CookieConsentProps, type CookiePolicyProps,
+} from '@owlmeans/web-consent'
 import { useLanguage } from '@owlmeans/client-i18n'
 import { useContext } from '../context.js'
 import type { AppConfig, AppContext } from '../types.js'
 import { useConsentTranslate } from './translate.js'
 import { useConsentWidgetPresent } from './presence.js'
-import type { ConsentWidgetServiceAppend } from './types.js'
+import type { ConsentGeoPluginAppend, ConsentWidgetServiceAppend } from './types.js'
 import { _localeParity } from './consts.local.js'
 import type { BoundCookieConsentProps } from './types.local.js'
 
@@ -25,6 +27,17 @@ const BoundCookieConsent: FC<BoundCookieConsentProps> = ({ menuPresent, ...props
 const MenuAwareCookieConsent: FC<CookieConsentProps> = props =>
   <BoundCookieConsent {...props} menuPresent={useConsentWidgetPresent()} />
 
+/**
+ * The geo gate in force: the prop, else `cfg.cookieConsent.geo`, else — when the application
+ * appended a locator of its own — the gate with nothing but that locator.
+ */
+const geoOf = (
+  prop: ConsentGeoOptions | undefined, context: AppContext<AppConfig> & Partial<ConsentGeoPluginAppend>
+): ConsentGeoOptions | undefined =>
+  prop ?? context.cfg.cookieConsent?.geo ?? (typeof context.consentGeo === 'function' ? {} : undefined)
+
+void _localeParity
+
 /**
  * The consent dialog, bound to this application's language and translations.
  *
@@ -44,19 +57,28 @@ const MenuAwareCookieConsent: FC<CookieConsentProps> = props =>
  * while the context is built, before anything renders.
  */
 export const PanelCookieConsent: FC<CookieConsentProps> = props => {
-  const context = useContext<AppConfig, AppContext<AppConfig> & Partial<ConsentWidgetServiceAppend>>()
+  const context = useContext<
+    AppConfig, AppContext<AppConfig> & Partial<ConsentWidgetServiceAppend & ConsentGeoPluginAppend>
+  >()
+  const mode = props.mode ?? context.cfg.cookieConsent?.mode
+  const geo = geoOf(props.geo, context)
+  const bound = { ...props, ...(mode != null ? { mode } : {}), ...(geo != null ? { geo } : {}) }
 
   return typeof context.consentWidget === 'function'
-    ? <MenuAwareCookieConsent {...props} />
-    : <BoundCookieConsent {...props} />
+    ? <MenuAwareCookieConsent {...bound} />
+    : <BoundCookieConsent {...bound} />
 }
 
+/**
+ * The cookie-policy page, bound like the dialog — and told about the geo gate the same way, so it
+ * states the regional rule exactly when the dialog applies it.
+ */
 export const PanelCookiePolicy: FC<CookiePolicyProps> = props => {
+  const context = useContext<AppConfig, AppContext<AppConfig> & Partial<ConsentGeoPluginAppend>>()
   const [lng] = useLanguage()
   const locale = props.locale ?? lng
   const translate = useConsentTranslate(locale, props.translate)
+  const geo = geoOf(props.geo, context)
 
-  return <CookiePolicy {...props} locale={locale} translate={translate} />
+  return <CookiePolicy {...props} {...(geo != null ? { geo } : {})} locale={locale} translate={translate} />
 }
-
-void _localeParity

package/src/consent/geo.ts

@@ -0,0 +1,26 @@
+import { consentPluginHelper, type ConsentGeoPlugin } from '@owlmeans/web-consent'
+import type { ClientConfig } from '@owlmeans/client-context'
+import type { ClientContext } from '@owlmeans/client'
+import type { ConsentGeoPluginAppend } from './types.js'
+
+/**
+ * Add the application's own country locator while its context is configured — beside
+ * `appendConsentWidgetService`, before anything renders.
+ *
+ * A locator is one async method that resolves the visitor's country or throws
+ * (`ConsentGeoPlugin`). It is registered into `@owlmeans/consent`'s plugin registry, ahead of the
+ * built-in Cloudflare one, and `PanelCookieConsent` turns the geo gate on for it even where
+ * `cfg.cookieConsent.geo` says nothing — appending a locator IS asking for the gate. Its result
+ * decides as Cloudflare's would: a visitor in a consent country is asked, anyone else is decided for
+ * automatically, and a throw hands over to the next locator — with none left, the visitor is asked.
+ */
+export const appendConsentGeoPlugin = <C extends ClientConfig, T extends ClientContext<C>>(
+  ctx: T, plugin: ConsentGeoPlugin
+): T & ConsentGeoPluginAppend => {
+  const _ctx = ctx as T & ConsentGeoPluginAppend
+
+  consentPluginHelper.registerConsentPlugin(plugin)
+  _ctx.consentGeo = () => plugin
+
+  return _ctx
+}

package/src/consent/index.ts

@@ -3,9 +3,11 @@ export * from './menu-widget.js'
 export * from './presence.js'
 export { installConsentLanguage } from './language.js'
 export { createConsentWidgetService, appendConsentWidgetService, CONSENT_WIDGET_STATE } from './service.js'
+export { appendConsentGeoPlugin } from './geo.js'
 export { CONSENT_WIDGET_SERVICE } from './consts.js'
 export type {
-  ConsentWidgetPresenceRecord, ConsentWidgetService, ConsentWidgetServiceAppend
+  ConsentWidgetPresenceRecord, ConsentWidgetService, ConsentWidgetServiceAppend,
+  PanelCookieConsentConfig, ConsentGeoPluginAppend,
 } from './types.js'
 export {
   useConsent, useConsentCategory, consentStore, openConsent, isConsented,
@@ -13,8 +15,10 @@ export {
   CONSENT_KEY, CONSENT_ESSENTIAL, CONSENT_ANALYTICS, CONSENT_MARKETING,
   CONSENT_EVENT,
   consentBootstrapScript,
+  CONSENT_REQUIRED_COUNTRIES,
 } from '@owlmeans/web-consent'
 export type {
   ConsentCategory, ConsentMenuWidgetProps, ConsentOptions, ConsentRecord, ConsentSignal,
-  ConsentState, CookieConsentProps, CookiePolicyProps,
+  ConsentState, CookieConsentProps, CookiePolicyProps, ConsentDisplayMode, ConsentGeoOptions,
+  ConsentGeoPlugin, ConsentGeoLocation,
 } from '@owlmeans/web-consent'

package/src/consent/translate.ts

@@ -1,6 +1,6 @@
 import { useCallback } from 'react'
 import { useI18nLib } from '@owlmeans/client-i18n'
-import { consentI18nHelper } from '@owlmeans/consent'
+import { consentI18nHelper } from '@owlmeans/web-consent'
 
 /**
  * Resolve consent copy through the application first, and the packaged bundle second.

package/src/consent/types.ts

@@ -1,5 +1,27 @@
 import type { ResourceRecord } from '@owlmeans/resource'
 import type { InitializedService } from '@owlmeans/context'
+import type { ConsentDisplayMode, ConsentGeoOptions, ConsentGeoPlugin } from '@owlmeans/web-consent'
+
+/**
+ * `cfg.cookieConsent` — how the application's cookie consent asks, set where the rest of its
+ * configuration is. A prop on `PanelCookieConsent` / `PanelCookiePolicy` always wins.
+ */
+export interface PanelCookieConsentConfig {
+  /** `bar` (the default) or `window` — see `ConsentDisplayMode`. */
+  mode?: ConsentDisplayMode
+  /**
+   * Ask only where the law requires it. `{ cloudflare: true }` locates the visitor through the
+   * Cloudflare edge the application is served from; a locator of the application's own is added in
+   * code with `appendConsentGeoPlugin`. See `ConsentGeoOptions`.
+   */
+  geo?: ConsentGeoOptions
+}
+
+/** What `appendConsentGeoPlugin` adds to the context. */
+export interface ConsentGeoPluginAppend {
+  /** The application's own locator, registered while the context was configured. */
+  consentGeo: () => ConsentGeoPlugin
+}
 
 /** A `single`-store presence flag: one record, no id needed. */
 export interface ConsentWidgetPresenceRecord extends ResourceRecord {

package/src/types.ts

@@ -3,6 +3,7 @@ import type { WithFlowConfig } from '@owlmeans/flow'
 import type { AppConfig as Config, AppContext as Context, RenderOptions } from '@owlmeans/web-client'
 import type { FlowService } from '@owlmeans/web-flow'
 import type { SocketClientSettings, SocketStatusServiceAppend } from '@owlmeans/client-socket'
+import type { PanelCookieConsentConfig } from './consent/types.js'
 
 export interface AppConfig extends Config, WithFlowConfig {
   socket?: SocketClientSettings & {
@@ -14,6 +15,8 @@ export interface AppConfig extends Config, WithFlowConfig {
      */
     reloadDialog?: boolean
   }
+  /** How the cookie consent asks — the bar or the window, and where (`geo`). See `./consent`. */
+  cookieConsent?: PanelCookieConsentConfig
 }
 
 export interface AppContext<C extends AppConfig = AppConfig> extends Context<C>, SocketStatusServiceAppend {

package/tests/consent.spec.ts

@@ -59,4 +59,54 @@ describe('@owlmeans/web-panel/consent — the dialog and the menu widget', () =>
       await close()
     }
   }, TIMEOUT)
+
+  test('a first-time visitor meets the bar by default', async () => {
+    const { page, close } = await open('/prefs?consent=bare')
+    try {
+      await page.locator('[data-consent-bar]').waitFor()
+      expect(await page.locator('[data-consent-dialog]').getAttribute('data-consent-mode')).toBe('bar')
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+
+  test('cfg.cookieConsent.mode picks the window, and a mode prop wins over it', async () => {
+    const configured = await open('/prefs?consent=bare&consentCfg=window')
+    try {
+      await configured.page.locator('[data-consent-dialog][data-consent-mode="window"]').waitFor()
+    } finally {
+      await configured.close()
+    }
+
+    const overridden = await open('/prefs?consent=bare&consentCfg=window&modeProp=bar')
+    try {
+      await overridden.page.locator('[data-consent-bar]').waitFor()
+    } finally {
+      await overridden.close()
+    }
+  }, TIMEOUT)
+
+  test('a locator appended to the context turns the geo gate on by itself', async () => {
+    const outside = await open('/prefs?consent=bare&consentGeo=US')
+    try {
+      await outside.page.waitForFunction(() => document.documentElement.getAttribute('data-consent') === 'decided')
+      expect(await outside.page.locator('[data-consent-dialog]').count()).toBe(0)
+    } finally {
+      await outside.close()
+    }
+
+    const inside = await open('/prefs?consent=bare&consentGeo=DE')
+    try {
+      await inside.page.locator('[data-consent-bar]').waitFor()
+    } finally {
+      await inside.close()
+    }
+
+    const unknown = await open('/prefs?consent=bare&consentGeo=fail')
+    try {
+      await unknown.page.locator('[data-consent-bar]').waitFor()
+    } finally {
+      await unknown.close()
+    }
+  }, TIMEOUT)
 })

package/tests/harness/mount.tsx

@@ -18,7 +18,8 @@ import {
 } from '../../src/index.js'
 import { LoginScreen } from '../../src/components/login/index.js'
 import {
-  PanelCookieConsent, PanelConsentMenuWidget, appendConsentWidgetService, useConsentMenuPresence
+  PanelCookieConsent, PanelConsentMenuWidget, appendConsentWidgetService, useConsentMenuPresence,
+  appendConsentGeoPlugin,
 } from '../../src/consent/index.js'
 import { LoginOutcome, ensureLoginService } from '@owlmeans/client-auth/login'
 import type { LoginMethod } from '@owlmeans/client-auth/login'
@@ -87,10 +88,18 @@ const method = (id: string, over?: Partial<LoginMethod>): LoginMethod => ({
 })
 
 /** The sign-in screen, with the terms confirmation the configuration requires. */
-const LoginHarness: FC = () => <LoginScreen
-  Logo={() => <span id="login-logo">logo</span>}
-  translate={(_key, defaultValue) => defaultValue}
-/>
+const LoginHarness: FC = () => {
+  const [locale, setLocale] = useState<string | undefined>(localizedTerms ? 'pl' : undefined)
+
+  return <>
+    {localizedTerms && <button id="login-language-fr" onClick={() => setLocale('fr')}>Français</button>}
+    <LoginScreen
+      Logo={() => <span id="login-logo">logo</span>}
+      translate={(_key, defaultValue) => defaultValue}
+      locale={locale}
+    />
+  </>
+}
 
 // `?header=broken` simulates the layout-restyle bug this harness pins: a `headerClassName`
 // carrying an invalid Tailwind v4 arbitrary-value background (v3 syntax, silently dropped) and a
@@ -110,6 +119,12 @@ const mobileMenu = new URLSearchParams(window.location.search).get('mobileMenu')
 // service — an application using the dialog on its own. `?consent=menu` appends the service, so
 // the footer's "Cookie settings" control takes over the floating button's job.
 const consentMode = new URLSearchParams(window.location.search).get('consent')
+// `?consentCfg=window|bar` sets `cfg.cookieConsent.mode`; `?modeProp=bar|window` passes `mode` as a
+// prop on top of it (the prop must win). `?consentGeo=<CC>|fail` appends a context-level locator
+// with `appendConsentGeoPlugin` — the gate turns on with no `geo` configured anywhere.
+const consentCfg = new URLSearchParams(window.location.search).get('consentCfg')
+const modeProp = new URLSearchParams(window.location.search).get('modeProp')
+const consentGeo = new URLSearchParams(window.location.search).get('consentGeo')
 // `?skip=off` passes `skipLinkLabel={false}` — an application that renders its own skip link.
 const skipOff = new URLSearchParams(window.location.search).get('skip') === 'off'
 // `?themeToggle=1` asks for the footer's light/dark switcher. Absent, the prop is not passed.
@@ -118,6 +133,8 @@ const themeToggle = new URLSearchParams(window.location.search).get('themeToggle
 // confirmation — the shape that pins the "still exactly one checkbox" and "documents render
 // outside the notice" rules even when there is more than terms+privacy to show.
 const extendedTerms = new URLSearchParams(window.location.search).get('terms') === 'extended'
+// `?terms=localized` selects known translated destinations using the live screen locale.
+const localizedTerms = new URLSearchParams(window.location.search).get('terms') === 'localized'
 // `?defer=bound` registers a step that CONFIRMS the terms, bound to a real screen — the sign-in
 // screen must then show no checkbox, only the privacy notice, and block nothing.
 // `?defer=unbound` registers the same step but never binds its entrypoint — the checkbox must
@@ -281,6 +298,16 @@ base.security = {
       // is given, and blocking must SAY so rather than swallow the click.
       terms: {
         required: true, terms: 'https://example.test/terms', privacy: 'https://example.test/privacy',
+        ...(localizedTerms ? {
+          billing: { href: 'https://example.test/billing', revisedAt: '2026-10-04' },
+          cookies: 'https://example.test/cookies', showRevision: true,
+          localizedHrefs: {
+            terms: { pl: 'https://example.test/pl/terms', fr: 'https://example.test/fr/terms' },
+            billing: { pl: 'https://example.test/pl/billing', fr: 'https://example.test/fr/billing' },
+            privacy: { pl: 'https://example.test/pl/privacy', fr: 'https://example.test/fr/privacy' },
+            cookies: { pl: 'https://example.test/pl/cookies', fr: 'https://example.test/fr/cookies' },
+          },
+        } : {}),
         ...(extendedTerms ? {
           billing: { href: 'https://example.test/billing', revisedAt: '2026-01-01' },
           product: { name: 'Harness', href: 'https://example.test/product' },
@@ -309,6 +336,9 @@ if (providerPlacement != null) {
 // test that needs the OFF case loads `?reloadDialog=0` — one harness process, both branches.
 const reloadDialogEnabled = new URLSearchParams(window.location.search).get('reloadDialog') !== '0'
 ;(base as { socket?: { reloadDialog?: boolean } }).socket = { reloadDialog: reloadDialogEnabled }
+if (consentCfg === 'window' || consentCfg === 'bar') {
+  ;(base as { cookieConsent?: { mode: 'window' | 'bar' } }).cookieConsent = { mode: consentCfg }
+}
 
 // `ready` stays false: the Router compiles the entrypoint tree into routes ONLY while the
 // context is un-initialized, so a pre-readied context renders a blank page.
@@ -319,6 +349,18 @@ context.serviceRoute(API, true)
 if (consentMode === 'menu') {
   appendConsentWidgetService(context as never)
 }
+if (consentGeo != null) {
+  appendConsentGeoPlugin(context as never, {
+    alias: 'harness-geo',
+    locate: async () => {
+      if (consentGeo === 'fail') {
+        throw new Error('the harness locator cannot tell')
+      }
+
+      return { country: consentGeo }
+    },
+  })
+}
 
 ensureLoginService(context as never).registerMethodSource({
   alias: 'harness',
@@ -390,5 +432,6 @@ createRoot(document.getElementById('root')!).render(<PanelApp context={context a
   {consentMode != null && <PanelCookieConsent
     policyHref="/cookies"
     {...(withDomains ? { linker: { domains: ['harness-partner.test'] } } : {})}
+    {...(modeProp === 'window' || modeProp === 'bar' ? { mode: modeProp } : {})}
   />}
 </PanelApp>)

package/tests/login.spec.ts

@@ -191,6 +191,28 @@ describe('@owlmeans/web-panel — the sign-in screen', () => {
     }
   }, TIMEOUT)
 
+  test('login documents and the separate privacy notice follow an explicit live PL/FR locale map', async () => {
+    const { page, close } = await open('?terms=localized')
+    try {
+      for (const key of ['terms', 'billing', 'privacy', 'cookies']) {
+        expect(await page.locator(`[data-login-document="${key}"]`).getAttribute('href'))
+          .toBe(`https://example.test/pl/${key}`)
+      }
+      expect(await page.locator('[data-login-privacy] a').count()).toBe(2)
+      expect(await page.locator('label:has([data-login-terms]) [data-login-privacy]').count()).toBe(0)
+      const revision = await page.locator('[data-login-revised]').textContent()
+      await page.locator('#login-language-fr').click()
+      for (const key of ['terms', 'billing', 'privacy', 'cookies']) {
+        expect(await page.locator(`[data-login-document="${key}"]`).getAttribute('href'))
+          .toBe(`https://example.test/fr/${key}`)
+      }
+      expect(await page.locator('[data-login-revised]').textContent()).toBe(revision)
+      expect(await page.locator('[data-login-terms]').count()).toBe(1)
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+
   test('[data-login-revised] is absent when the configuration never asked to show it', async () => {
     const { page, close } = await open()
     try {