@eifi1/ui-kit 0.51.7 → 0.53.0

package/src/components/use-table-state.ts

@@ -16,7 +16,7 @@ import type { DataTableColumn, FilterState, ServerPagination } from "./data-tabl
 interface PersistedState {
   // Multi-sort array; blobs from before the upgrade hold a single {key, dir}
   // object (or null) — read back through normalizeSorts.
-  sort: SortState[] | { key: string; dir: string } | null;
+  sort: readonly SortState[] | { key: string; dir: string } | null;
   filters: FilterState;
   pageSize: number | "all";
   widths?: Record<string, number>;
@@ -190,7 +190,7 @@ export interface TableUrlState {
  */
 export function readTableUrlState<T>(
   sp: URLSearchParams,
-  columns: DataTableColumn<T>[],
+  columns: readonly DataTableColumn<T>[],
   prefix?: string,
 ): TableUrlState {
   const keys = urlKeys(prefix);
@@ -232,8 +232,8 @@ export function readTableUrlState<T>(
  * produces a different one.
  */
 function urlSignature<T>(
-  columns: DataTableColumn<T>[],
-  sorts: SortState[],
+  columns: readonly DataTableColumn<T>[],
+  sorts: readonly SortState[],
   filters: FilterState,
   pageSize: number,
   page: number,
@@ -257,8 +257,8 @@ function urlSignature<T>(
 
 function writeUrlState<T>(
   setSearchParams: ReturnType<typeof useSearchParams>[1],
-  columns: DataTableColumn<T>[],
-  sorts: SortState[],
+  columns: readonly DataTableColumn<T>[],
+  sorts: readonly SortState[],
   filters: FilterState,
   pageSize: number,
   page: number,
@@ -334,12 +334,12 @@ export function useTableState<T>({
   filtersProp,
   pageSizeProp,
 }: {
-  columns: DataTableColumn<T>[];
+  columns: readonly DataTableColumn<T>[];
   storageKey?: string;
   storageKeyPrefix: string;
   urlSync?: TableUrlSync;
   defaultPageSize: number;
-  sortsProp?: SortState[];
+  sortsProp?: readonly SortState[];
   filtersProp?: FilterState;
   pageSizeProp?: number;
 }) {
@@ -574,6 +574,9 @@ export function useSharedTableView({
       pageSize: next.pageSize === Infinity ? "all" : next.pageSize,
       widths: stored.widths,
       hidden: stored.hidden,
+      // The `defaultHidden` columns the single table's user ticked back on (0.48): left
+      // out, a sort changed here hid them again there (refactor audit 2026-10-30, DSP-23 c).
+      ...(stored.shown ? { shown: stored.shown } : {}),
     };
     writeStored(prefix + storageKey, serializePersisted(blob));
   };
@@ -589,7 +592,7 @@ export function useSharedTableView({
 
 export interface UseTableUrlStateOptions<T> {
   /** The table's columns — read for their keys and filter types only. */
-  columns: DataTableColumn<T>[];
+  columns: readonly DataTableColumn<T>[];
   /** Default 25. A page size equal to it is left out of the URL. */
   defaultPageSize?: number;
   /** Mirror the state into the URL and seed it from there on mount. Default true.

package/src/data-table.ts

@@ -27,15 +27,12 @@ export type {
   DataTableRowAction,
   DataTableDesktopSwipeActions,
 } from "./components/data-table";
-// 0.46.1 (keksdose N3): a swipe plan as `RowActions`' actions — the desktop column's own
-// derivation, for an app's hand-built actions column.
-export { swipePlanRowActions } from "./components/data-table-row-actions";
 // 0.48 (keksdose dev #605): a `groupBy` level (also `mobileGroupBy`'s) and the `loadMore` footer.
 export type { DataTableGroupBy, DataTableLoadMore } from "./components/data-table-groups";
 // 0.48.2 (keksdose dev #632): `virtualize`'s options.
 export type { DataTableVirtualize } from "./components/data-table-virtual";
 export * from "./components/data-table-cells";
-export { useTableUrlState, readTableUrlState } from "./components/use-table-state";
+export { useTableUrlState } from "./components/use-table-state";
 export type {
   TableUrlState,
   TableUrlSync,

package/src/demo/demo-countdown.ts

@@ -50,14 +50,9 @@ function minutesAt(expiry: number, now: number): number | null {
   return Math.max(0, Math.ceil((expiry - now) / MINUTE));
 }
 
-/**
- * The countdown at `now` — pure, for a test or a server-rendered value. See
- * {@link DemoCountdown} for the rounding and the thresholds.
- */
-export function demoCountdown(expiresAt: DemoExpiry | null | undefined, now: number): DemoCountdown {
-  return countdownOf(minutesAt(expiryMs(expiresAt), now));
-}
-
+/** The countdown for `minutesLeft` — see {@link DemoCountdown} for the rounding and the
+ *  thresholds. (Public as `demoCountdown(expiresAt, now)` until 0.53, deprecated in 0.52,
+ *  API-4: `useDemoCountdown` with its `now` option is the same countdown.) */
 function countdownOf(minutesLeft: number | null): DemoCountdown {
   if (minutesLeft === null) {
     return { minutesLeft, hours: 0, minutes: 0, lastHour: false, warning: false, ended: false };

package/src/eslint/role-utilities.ts

@@ -63,9 +63,12 @@ export interface ThemeInlineDeclaration {
 
 /** The `@theme inline` block: where it stands, and every declaration in it in block order. */
 export interface ThemeInlineBlock {
-  /** Its first and one-past-last offset in `stripCssComments(css)`, not in `css`. */
+  /** Its first and one-past-last offset in `stripCssComments(css)`, not in `css`. With
+   *  several `@theme inline` blocks, the first one's; `ranges` holds each. */
   start: number;
   end: number;
+  ranges: { start: number; end: number }[];
+  /** Every block's, in stylesheet order. */
   declarations: ThemeInlineDeclaration[];
 }
 
@@ -74,19 +77,60 @@ export function stripCssComments(css: string): string {
   return css.replace(/\/\*[\s\S]*?\*\//g, "");
 }
 
+/** One `@theme … { … }` block: its first and one-past-last offset, and what its braces hold. */
+export interface ThemeBlock {
+  start: number;
+  end: number;
+  body: string;
+}
+
+/**
+ * Every `@theme` block of `css` (comments already stripped) whose prelude names `inline`
+ * (`@theme inline`, `@theme inline reference`) — or, with `inline: false`, every other
+ * one (`@theme {`, Tailwind's `@theme default {`). Counted brace by brace, so a nested
+ * block does not end it early.
+ *
+ * The one block finder (refactor audit 2026-10-30, DUP-13): this parser read only the
+ * first `@theme inline {…}` up to its first `}`, the testing guard's
+ * `declaredCustomProperties` every inline block brace-aware, and the README's inventory a
+ * plain `@theme {` by a regex of its own — three readers that disagreed on what one block
+ * is. It lives here because this module imports nothing, so the scripts load it from
+ * source under Node.
+ */
+export function themeBlocks(css: string, { inline }: { inline: boolean }): ThemeBlock[] {
+  const blocks: ThemeBlock[] = [];
+  for (const m of css.matchAll(/@theme\b([^{;]*)\{/g)) {
+    if (/\binline\b/.test(m[1]) !== inline) continue;
+    const open = m.index + m[0].length - 1;
+    let depth = 0;
+    let close = open;
+    for (; close < css.length; close++) {
+      if (css[close] === "{") depth++;
+      else if (css[close] === "}" && --depth === 0) break;
+    }
+    blocks.push({ start: m.index, end: close + 1, body: css.slice(open + 1, close) });
+  }
+  return blocks;
+}
+
 const PROPERTIES = Object.keys(ROLE_NAMESPACES) as RoleProperty[];
 
 /**
- * tokens.css's `@theme inline` block, read once for every reader: the table below, and
- * the README's (scripts/gen-styling-inventory.mjs), which fails on a `property: null`
- * where the table leaves it out. `null` when there is no such block — the role utilities
- * are gone, or this parser is. Theme blocks hold only declarations, so the first `}`
- * closes it; no namespace is another's prefix, so the first that fits is the one.
+ * tokens.css's `@theme inline` block (every one, should there be several), read once for
+ * every reader: the table below, and the README's (scripts/gen-styling-inventory.mjs),
+ * which fails on a `property: null` where the table leaves it out. `null` when there is
+ * no such block — the role utilities are gone, or this parser is. No namespace is
+ * another's prefix, so the first that fits is the one.
  */
 export function parseThemeInline(css: string): ThemeInlineBlock | null {
-  const block = /@theme\s+inline\s*\{([^}]*)\}/.exec(stripCssComments(css));
-  if (!block) return null;
-  const declarations = [...block[1].matchAll(/--([a-z0-9-]+)\s*:\s*([^;]+);/g)].map(([, variable, raw]) => {
+  const blocks = themeBlocks(stripCssComments(css), { inline: true });
+  if (blocks.length === 0) return null;
+  const declarations = [
+    ...blocks
+      .map((b) => b.body)
+      .join("\n")
+      .matchAll(/--([a-z0-9-]+)\s*:\s*([^;]+);/g),
+  ].map(([, variable, raw]) => {
     const value = raw.trim();
     const property = PROPERTIES.find((p) => variable.startsWith(`${ROLE_NAMESPACES[p]}-`)) ?? null;
     const name = property && variable.slice(ROLE_NAMESPACES[property].length + 1);
@@ -99,7 +143,8 @@ export function parseThemeInline(css: string): ThemeInlineBlock | null {
       value,
     };
   });
-  return { start: block.index, end: block.index + block[0].length, declarations };
+  const ranges = blocks.map(({ start, end }) => ({ start, end }));
+  return { start: ranges[0].start, end: ranges[0].end, ranges, declarations };
 }
 
 /**
@@ -120,12 +165,36 @@ export function roleUtilitiesFromCss(css: string): RoleUtilityTable | null {
 /**
  * `text-[var(--text-muted)]`, `hover:bg-[var(--bg-hover)]`, `border-t-[var(--border)]`,
  * `focus-visible:ring-[var(--brand)]/40`, `ring-offset-[var(--bg-surface)]`,
- * `ring-[length:var(--focus-ring-width)]`. Preceded by a start, a space, a quote or a
- * variant's colon, which the match does not include — nor the variants before it or an
- * opacity or `!` after it — so replacing the match keeps all of them.
+ * `ring-[length:var(--focus-ring-width)]` — and, since 0.52, Tailwind v4's own spellings
+ * of the same: the shorthand `text-(--text-muted)`, a type hint `text-[color:var(--x)]` /
+ * `text-(color:--x)` / `ring-(length:--x)`, and the arbitrary property
+ * `[color:var(--text-muted)]`, which is `text-muted` (refactor audit 2026-10-30, DOC-1:
+ * all of them passed the check and every app's lint). Preceded by a start, a space, a
+ * quote or a variant's colon, which the match does not include — nor the variants before
+ * it or an opacity or `!` after it — so replacing the match keeps all of them.
+ *
+ * Groups: 1 the property; then 2 the hint and 3 the token of `-[…var()]`, or 4 and 5 of
+ * `-(…)`; or 6 the CSS property and 7 the token of `[property:var()]`.
  */
-const ROLE_CLASS =
-  /(?<=^|[\s"'`:])(text|bg|border(?:-[xytrblse])?|divide|ring-offset|ring|outline|fill|stroke)-\[(length:)?var\((--[a-zA-Z0-9-]+)\)\]/g;
+const TOKEN = "(--[a-zA-Z0-9-]+)";
+const ROLE_CLASS = new RegExp(
+  "(?<=^|[\\s\"'`:])(?:" +
+    "(text|bg|border(?:-[xytrblse])?|divide|ring-offset|ring|outline|fill|stroke)-" +
+    `(?:\\[(?:(length|color):)?var\\(${TOKEN}\\)\\]|\\((?:(length|color):)?${TOKEN}\\))` +
+    `|\\[(color|background-color|border-color|outline-color|fill|stroke):var\\(${TOKEN}\\)\\]` +
+    ")",
+  "g",
+);
+
+/** The utility prefix an arbitrary property `[property:var(--x)]` is written as. */
+const ARBITRARY_PROPERTY: Record<string, string> = {
+  color: "text",
+  "background-color": "bg",
+  "border-color": "border",
+  "outline-color": "outline",
+  fill: "fill",
+  stroke: "stroke",
+};
 
 export interface RoleClassHit {
   /** Where the class starts in the scanned text, after its variants. */
@@ -137,17 +206,26 @@ export interface RoleClassHit {
 }
 
 /**
- * Every `[var(--token)]` class in `text` whose token has a role utility on that property.
+ * Every `[var(--token)]` class in `text` (or one of v4's spellings of it, above) whose
+ * token has a role utility on that property.
  * A token with no utility there (`text-[var(--chart-1)]`, `--status-*`,
  * `bg-[var(--border)]` as a divider's fill) is not a hit: `[var(--…)]` is right for it.
  */
 export function findRoleClasses(text: string, table: RoleUtilityTable): RoleClassHit[] {
-  if (!text.includes("var(--")) return [];
+  // Every form names a token: `var(--x)`, or `(--x)` in v4's shorthand.
+  if (!text.includes("--")) return [];
   const hits: RoleClassHit[] = [];
   for (const m of text.matchAll(ROLE_CLASS)) {
-    const [found, prop, length, token] = m;
+    const [found, utility, bracketHint, bracketToken, parenHint, parenToken, cssProperty, propertyToken] = m;
+    const prop = utility ?? ARBITRARY_PROPERTY[cssProperty];
+    const token = bracketToken ?? parenToken ?? propertyToken;
     // `border-t` and `divide` read `border`'s names; a `length:` hint reads the widths.
-    const key = length ? `${prop}-width` : prop.startsWith("border-") || prop === "divide" ? "border" : prop;
+    const key =
+      (bracketHint ?? parenHint) === "length"
+        ? `${prop}-width`
+        : prop.startsWith("border-") || prop === "divide"
+          ? "border"
+          : prop;
     const names = (table as Partial<Record<string, Readonly<Record<string, readonly string[]>>>>)[key]?.[token];
     if (names?.length) hits.push({ index: m.index, found, utilities: names.map((name) => `${prop}-${name}`) });
   }

package/src/feedback/feedback-dialog.tsx

@@ -9,6 +9,7 @@ import { Modal } from "../components/modal";
 import { isApplePlatform } from "../hooks/use-hotkey";
 import { usePhoneLayout } from "../hooks/use-breakpoint";
 import { useKitLabels, type LabelOverride } from "../i18n/kit-labels";
+import { hasContent } from "../lib/presence";
 import {
   DEFAULT_ATTACHMENT_ACCEPT,
   DEFAULT_FEEDBACK_ATTACHMENT_LABELS,
@@ -19,8 +20,10 @@ import {
 } from "./feedback-attachment";
 import { DEFAULT_FEEDBACK_DIALOG_LABELS } from "./feedback-dialog-labels";
 
-export interface FeedbackCategoryOption {
-  value: string;
+/** One category the dialog offers. `C` (0.52): the app's category type — the kit's
+ *  `FeedbackCategory`, or `string` (the default) for a vocabulary of the app's own. */
+export interface FeedbackCategoryOption<C extends string = string> {
+  value: C;
   label: string;
 }
 
@@ -103,10 +106,10 @@ export interface FeedbackDialogTextLabels {
 // Defined in ./feedback-dialog-labels, which holds no component code (0.34, KS U8).
 export { DEFAULT_FEEDBACK_DIALOG_LABELS };
 
-export interface FeedbackSubmission {
+export interface FeedbackSubmission<C extends string = string> {
   title: string;
   body: string;
-  category: string;
+  category: C;
   attachment: File | null;
 }
 
@@ -116,22 +119,29 @@ export interface FeedbackSubmission {
  * attaches the screenshot to the report and the photos as its evidence list. No
  * `attachment`: there is no one file it could name.
  */
-export interface FeedbackMultipleSubmission {
+export interface FeedbackMultipleSubmission<C extends string = string> {
   title: string;
   body: string;
-  category: string;
+  category: C;
   /** What `onCaptureScreenshot` returned, or `null` — at most one. */
   screenshot: File | null;
   /** Picked and pasted files, in the order they were added; at most `maxAttachments`. */
   attachments: File[];
 }
 
-interface FeedbackDialogBaseProps {
+/**
+ * `C` (0.52, refactor audit 2026-10-30, API-7): the category type, inferred from
+ * `categories` and `category` — `FeedbackCategory` hands `onCategoryChange` and
+ * `onSubmit` a `FeedbackCategory` back, where a plain `string` had to be cast (the kit's
+ * own `useFeedbackSubmit` did). `string` by default, so an app's own vocabulary fits.
+ */
+interface FeedbackDialogBaseProps<C extends string = string> {
   open: boolean;
   onClose: () => void;
-  categories: FeedbackCategoryOption[];
-  category: string;
-  onCategoryChange: (value: string) => void;
+  /** `readonly` since 0.52: the dialog never changes it. */
+  categories: readonly FeedbackCategoryOption<C>[];
+  category: C;
+  onCategoryChange: (value: C) => void;
   /** Prop > `<UiKitProvider labels={{ feedbackDialog, feedbackAttachment }}>` >
    *  English. Optional since 0.12.0; a whole `FeedbackDialogLabels` still fits. */
   labels?: LabelOverride<FeedbackDialogLabels>;
@@ -178,9 +188,9 @@ interface FeedbackDialogBaseProps {
 
 /** One attachment — a screenshot, a picked or a pasted image; a second replaces
  *  nothing, it has to wait for the first to be removed. The default. */
-export interface FeedbackDialogSingleProps extends FeedbackDialogBaseProps {
+export interface FeedbackDialogSingleProps<C extends string = string> extends FeedbackDialogBaseProps<C> {
   attachments?: "single";
-  onSubmit: (data: FeedbackSubmission) => void | Promise<void>;
+  onSubmit: (data: FeedbackSubmission<C>) => void | Promise<void>;
   /** `info` (0.23.0) names the refused file and the limit — see
    *  {@link FeedbackAttachmentErrorInfo}. */
   onAttachmentError?: (kind: "type" | "size", info: FeedbackAttachmentErrorInfo) => void;
@@ -193,17 +203,18 @@ export interface FeedbackDialogSingleProps extends FeedbackDialogBaseProps {
  * dev#578: "pasted two photos, the second overwrote the first"). The capture button is
  * offered while there is no screenshot yet; the add button while there is room.
  */
-export interface FeedbackDialogMultipleProps extends FeedbackDialogBaseProps {
+export interface FeedbackDialogMultipleProps<C extends string = string> extends FeedbackDialogBaseProps<C> {
   attachments: "multiple";
   /** Default `DEFAULT_MAX_ATTACHMENTS` (5). The screenshot does not count. */
   maxAttachments?: number;
-  onSubmit: (data: FeedbackMultipleSubmission) => void | Promise<void>;
+  onSubmit: (data: FeedbackMultipleSubmission<C>) => void | Promise<void>;
   /** `"count"`: more files arrived at once than there was room for; the surplus was
    *  dropped. `info` (0.23.0) names the refused file(s) and the limit. */
   onAttachmentError?: (kind: FeedbackAttachmentError, info: FeedbackAttachmentErrorInfo) => void;
 }
 
-export type FeedbackDialogProps = FeedbackDialogSingleProps | FeedbackDialogMultipleProps;
+export type FeedbackDialogProps<C extends string = string> =
+  FeedbackDialogSingleProps<C> | FeedbackDialogMultipleProps<C>;
 
 /**
  * The generic feedback form dialog: category + subject + body + an optional image
@@ -225,7 +236,7 @@ export type FeedbackDialogProps = FeedbackDialogSingleProps | FeedbackDialogMult
  * FeedbackMultipleSubmission}) instead of `attachment`. Opt-in, so a caller typed
  * against the one-file submission keeps compiling and behaving as before.
  */
-export function FeedbackDialog(props: FeedbackDialogProps) {
+export function FeedbackDialog<C extends string = string>(props: FeedbackDialogProps<C>) {
   const {
     open,
     onClose,
@@ -251,8 +262,7 @@ export function FeedbackDialog(props: FeedbackDialogProps) {
   const [files, setFiles] = useState<File[]>([]);
   const isMobile = usePhoneLayout();
   const noticeId = useId();
-  const hasNotice =
-    publicNotice !== undefined && publicNotice !== null && publicNotice !== false && publicNotice !== "";
+  const hasNotice = hasContent(publicNotice);
   const labels = useKitLabels("feedbackDialog", DEFAULT_FEEDBACK_DIALOG_LABELS, labelsProp);
   const attachmentText = useKitLabels("feedbackAttachment", DEFAULT_FEEDBACK_ATTACHMENT_LABELS, labelsProp);
   // Under `multiple` the heading is `attachmentList` — a screenshot AND photos — which
@@ -296,7 +306,8 @@ export function FeedbackDialog(props: FeedbackDialogProps) {
   if (!open) return null;
 
   const categoryField = (
-    <Select label={labels.category} value={category} onChange={(e) => onCategoryChange(e.target.value)}>
+    // The select offers exactly `categories`' values, so what it answers is one of them.
+    <Select label={labels.category} value={category} onChange={(e) => onCategoryChange(e.target.value as C)}>
       {categories.map((c) => (
         <option key={c.value} value={c.value}>
           {c.label}

package/src/feedback/feedback-mutation.ts

@@ -0,0 +1,20 @@
+/**
+ * A page's mutation, run once (refactor audit 2026-10-30, FLW-3): TanStack Query's
+ * `mutateAsync`, or any `(patch) => Promise` that resolves once the PATCH has landed.
+ *
+ * The parts took TanStack Query's `mutate` with a per-call `onSuccess` until 0.53
+ * (deprecated in 0.52). TanStack v5 calls per-call callbacks for the LATEST `mutate()` on
+ * an observer only — it overwrites the options and detaches from the earlier mutation —
+ * so a second change sent before the first PATCH answered (another swipe, another pill,
+ * the Undo itself) lost the first change's Undo toast, and the detail's editor stayed
+ * open. The promise `mutateAsync` returns settles for every call, whatever the observer
+ * does next.
+ *
+ * A rejected promise is the mutation's own to report (its `onError`), so it is caught here
+ * and nothing more happens.
+ *
+ * @internal Not part of `/feedback` or the barrel.
+ */
+export function runMutation<P>(call: (patch: P) => Promise<unknown>, patch: P, landed: () => void): void {
+  call(patch).then(landed, () => undefined);
+}

package/src/feedback/feedback-page-link.ts

@@ -0,0 +1,90 @@
+import type { PathPattern } from "../landing/routing";
+import { matchesPathPattern, routerPathname } from "../lib/path-pattern";
+import type { FeedbackContext } from "./feedback-record";
+
+/**
+ * The page a report was filed on, and which of it the feedback parts link (refactor audit
+ * 2026-10-30, FLW-7).
+ *
+ * The page comes from the REPORTER's client context: its origin is always this app's
+ * (only the path is ever linked), but its path and query are whatever the row says. A
+ * signed-in user could file a report whose link takes the admin to a route that acts on
+ * load — keksdose's `/join?token=` accepts an invitation through `AcceptInvitation`,
+ * kastlan's and Kurvenschmiede's `/register?invite=` likewise.
+ *
+ * **Only the PATH is linked** (0.52 code review, this file). The tokens and the forward
+ * targets travel in the query: a guard on the path alone let `/login?next=%2Fjoin%3Ftoken%3D…`
+ * through as a link, and `RedirectIfAuthed` sent the signed-in admin on to the invitation —
+ * as `/forgot-password`, `/demo` and `/welcome` would, and whatever forwarder an app adds
+ * next (`?returnTo=`, a share target). No list of forwarders can know them all; a link
+ * without a query reaches none. The query and hash are shown as text beside it, and "Copy
+ * URL" copies the whole address, for whoever wants that exact state and opens it knowingly.
+ *
+ * **A one-shot PATH is not linked at all** — the kit's `/join`, `/register`,
+ * `/verify-email`, `/reset-password` (`/reset-password/<token>` carries it in the path),
+ * and the app's `pageLinkExclude` on top: shown as text with Copy.
+ *
+ * @internal Not part of `/feedback` or the barrel.
+ */
+
+/** The kit's one-shot routes: the invitation accepts and the two token pages. */
+export const FEEDBACK_ONE_SHOT_PAGES: readonly PathPattern[] = Object.freeze([
+  "/join",
+  "/register",
+  "/verify-email",
+  "/reset-password",
+]);
+
+/** Whether `href` (a path, with or without its query) names a one-shot route — the kit's,
+ *  or one of the app's `exclude` on top. Read as the ROUTER reads it, decoded and
+ *  case-insensitive: `/Join?token=` and `/j%6Fin?token=` render `/join` too (0.52 code
+ *  review, this file). */
+export function isOneShotPage(href: string, exclude: readonly PathPattern[] = []): boolean {
+  const pathname = routerPathname(href);
+  const named = (pattern: PathPattern) => matchesPathPattern(pathname, pattern);
+  return FEEDBACK_ONE_SHOT_PAGES.some(named) || exclude.some(named);
+}
+
+/** The page a report was filed on, read once — the URL cell and the detail each parsed it
+ *  three times, once per part (0.52 code review, feedback-table.tsx: 810 `URL`s per render
+ *  of a 270-row inbox, for one column). */
+export interface FeedbackPage {
+  /** The path: what the URL column shows, and the only part ever linked. */
+  path: string;
+  /** Path + query + hash: the page as the reporter had it (keksdose `localHref`: the query
+   *  and hash carry the state, `?tab=import`, a drill-down) — shown, never followed. */
+  href: string;
+  /** What "Copy URL" copies: the FULL `context.url` as the reporter's browser had it —
+   *  origin included, the one part that says which copy of the app it was (feedback
+   *  #278) — else `context.route`. */
+  url: string;
+}
+
+/** Collapses a leading `//` run: `/\/\/evil.example/` as a path would be a
+ *  protocol-relative link off the app. */
+const localPath = (pathname: string) => pathname.replace(/^\/{2,}/, "/");
+
+/** `context.url`, else `context.route`, parsed — or null when neither is set or the value
+ *  is no http(s) address or path (a `javascript:` value is not a page). */
+export function feedbackPage(context: FeedbackContext | null | undefined): FeedbackPage | null {
+  const raw = (context?.url || context?.route || "").trim();
+  if (!raw) return null;
+  let url: URL;
+  try {
+    // A base, so a PATH-ONLY value parses too: Kurvenschmiede backfills its old rows
+    // with `url = page_path + search` (§3.2), and keksdose's `new URL(raw)` threw on
+    // those and dropped the section.
+    url = new URL(raw, "http://localhost");
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") return null;
+  const path = localPath(url.pathname);
+  return { path, href: `${path}${url.search}${url.hash}`, url: raw };
+}
+
+/** Where a click on the page goes: its path, or `null` — show it as text — when that path
+ *  is one-shot. */
+export function feedbackPageLinkTarget(page: FeedbackPage, exclude: readonly PathPattern[] = []): string | null {
+  return isOneShotPage(page.path, exclude) ? null : page.path;
+}

package/src/feedback/feedback-public-list.tsx

@@ -143,8 +143,9 @@ function PublicPager({
 /* ── The list ─────────────────────────────────────────────────────────────── */
 
 export interface FeedbackPublicListProps<T extends FeedbackPublicListItem = FeedbackPublicListItem> {
-  /** `GET /feedback/public?sort=&q=` — the server's page, in the server's order. */
-  rows: T[];
+  /** `GET /feedback/public?sort=&q=` — the server's page, in the server's order.
+   *  `readonly` since 0.52 (refactor audit 2026-10-30, API-7): the list never changes it. */
+  rows: readonly T[];
   /** How many the query has in all — the line beside the sort. Left out, no line. */
   total?: number;
   /** The server sorts (§9.6): the toggle only says which way. */
@@ -169,7 +170,10 @@ export interface FeedbackPublicListProps<T extends FeedbackPublicListItem = Feed
   /** The opened row's id, when the app keeps it (a `?row=` param). Left out, the list
    *  keeps it itself. */
   openId?: number | null;
-  onOpenChange?: (id: number | null) => void;
+  /** 0.52: a row was opened (its id) or closed (`null`) — `openId`'s pair. Named for
+   *  what it carries: every other `onOpenChange` in the kit is a boolean (refactor audit
+   *  2026-10-30, API-5). */
+  onOpenIdChange?: (id: number | null) => void;
   /**
    * 0.38.1: the opened report when it is NOT on this page — a `?row=` link to an older
    * one (Kurvenschmiede). The app fetches it (`GET /feedback/public/{id}`, a list item's
@@ -239,7 +243,7 @@ export function FeedbackPublicList<T extends FeedbackPublicListItem = FeedbackPu
   onVote,
   loading = false,
   openId: openIdProp,
-  onOpenChange,
+  onOpenIdChange,
   openRow,
   page: pageIndex = 0,
   hasMore = false,
@@ -259,12 +263,14 @@ export function FeedbackPublicList<T extends FeedbackPublicListItem = FeedbackPu
   const openId = openIdProp !== undefined ? openIdProp : ownOpenId;
   const setOpen = (id: number | null) => {
     if (openIdProp === undefined) setOwnOpenId(id);
-    onOpenChange?.(id);
+    onOpenIdChange?.(id);
   };
   // A `?row=` report from another page: first, while it is the open one, and only when
   // the page does not have it itself.
-  const shownRows =
-    openRow && openId === openRow.id && !rows.some((row) => row.id === openRow.id) ? [openRow, ...rows] : rows;
+  // `as T[]`: DataTable's `rows` is still mutable in its type (API-7), and never mutated.
+  const shownRows = (
+    openRow && openId === openRow.id && !rows.some((row) => row.id === openRow.id) ? [openRow, ...rows] : rows
+  ) as T[];
 
   const columns = useMemo<DataTableColumn<T>[]>(
     () => [

package/src/feedback/feedback-replies.tsx

@@ -4,9 +4,9 @@ import { BellOff } from "lucide-react";
 import { Select } from "../components/select";
 import type { CommitScope } from "../components/write-lock";
 import type { AuthedFetcher } from "../hooks/use-authed-src";
-import { useKitLabels, useKitLocale, type LabelOverride } from "../i18n/kit-labels";
+import { useKitLabels, type LabelOverride } from "../i18n/kit-labels";
 import { cn } from "../lib/cn";
-import { formatDate } from "../lib/format";
+import { useDayFormatter } from "../lib/day-format";
 import { FeedbackStatusBadge, selectableFeedbackStatuses, type FeedbackStatus } from "./feedback-inbox";
 import { useFeedbackStatusLabels } from "./feedback-labels";
 import type { FeedbackReply } from "./feedback-public-types";
@@ -77,10 +77,15 @@ export function feedbackReplyNudge(row: {
 
 /* ── The timeline ─────────────────────────────────────────────────────────── */
 
+/** A reply's time, the kit's own: the medium date and the short clock. */
+const REPLY_TIME_STYLE: Intl.DateTimeFormatOptions = { dateStyle: "medium", timeStyle: "short" };
+
 export interface FeedbackReplyTimelineProps {
   /** Oldest first, as the server sends them. */
   replies: readonly FeedbackReply[];
-  /** How a reply's time reads. Default: the date and time in the provider's locale. */
+  /** How a reply's time reads. Default (0.52): the `<UiKitProvider formatDate>`'s day
+   *  with the language's clock when the app set one, else the date and time in the
+   *  provider's locale and time zone. */
   renderDate?: (iso: string) => string;
   /** Tag bodies and names `data-private` (a host's screen-share blur). Default true. */
   redact?: boolean;
@@ -142,13 +147,15 @@ export function FeedbackReplyTimeline({
 }: FeedbackReplyTimelineProps) {
   const labels = useFeedbackRepliesLabels(labelsProp);
   const anonymous = useKitLabels("feedbackPublic", DEFAULT_FEEDBACK_PUBLIC_LABELS).anonymous;
-  const locale = useKitLocale();
+  // `renderDate` when it answers, else the provider's `formatDate` for the day with the
+  // language's clock, else the kit's date and time in the provider's locale and time zone
+  // (0.52, refactor audit 2026-10-30, DUP-2: the provider never reached this one).
+  const day = useDayFormatter<string>(renderDate);
   const priv = redact ? "" : undefined;
   if (replies.length === 0) {
     return <p className={cn("text-sm text-placeholder", className)}>{labels.empty}</p>;
   }
-  const dateText = (iso: string) =>
-    renderDate ? renderDate(iso) : formatDate(iso, { dateStyle: "medium", timeStyle: "short" }, { locale });
+  const dateText = (iso: string) => day(iso, { time: true, style: REPLY_TIME_STYLE });
   return (
     <ol aria-label={labels.replies} className={cn("space-y-3 border-s-2 border-subtle ps-3", className)}>
       {replies.map((reply) => {

package/src/feedback/feedback-row-detail-labels.ts

@@ -20,9 +20,6 @@ export const DEFAULT_FEEDBACK_DETAIL_LABELS: FeedbackDetailLabels = {
   outcome: "Outcome",
   replies: "Replies",
   resolvedAt: (date) => `Resolved: ${date}`,
-  outcomeAdd: "Add outcome",
-  outcomeUpdate: "Update",
-  outcomePlaceholder: "What was done, decided, or why this won't be addressed.",
   rework: "Rework",
   reworkTitle: "Send for rework",
   reworkSend: "Send rework",