@eifi1/ui-kit 0.51.7 → 0.53.0

package/src/index.ts

@@ -16,12 +16,25 @@ export { logger, setStoreLog } from "./lib/logger";
 // Intl number / money / percent / date / relative-time formatting, and `useKitFormat()`
 // for the same bound to the provider's locale (kastlan's formatters.ts, English "5m ago").
 export * from "./lib/format";
-// localStorage that never throws (Safari private mode, blocked site data).
-export { readStored, writeStored } from "./lib/safe-storage";
+// localStorage that never throws (Safari private mode, blocked site data). 0.52 (DUP-8,
+// refactor audit 2026-10-30): the remove, the sessionStorage pair and a JSON pair with a
+// shape check — 16 files in the apps wrap storage by hand, a few of them with no guard.
+export {
+  readStored,
+  writeStored,
+  removeStored,
+  readSessionStored,
+  writeSessionStored,
+  readStoredJson,
+  writeStoredJson,
+} from "./lib/safe-storage";
+// 0.52 (DUP-8): `prefers-reduced-motion`, asked at the moment of the motion (KS copied it).
+export { prefersReducedMotion } from "./lib/reduced-motion";
 // Save a fetched Blob as a download, and read the name a Content-Disposition asks for
 // (`filename*` first) — 0.34, KS U5; the kit's own three downloads use them.
 export { saveBlob, filenameFromDisposition } from "./lib/download";
-// Date helpers are also available via the "@eifi1/ui-kit/dates" subpath.
+// The local-calendar ISO date helpers are the "@eifi1/ui-kit/dates" entry, standalone: none
+// of its names is in this barrel (public-surface.test.ts, STANDALONE).
 // One fold and one ranking for every list's search box (DUP-5), for an app's own lists;
 // and the pickers' every-word match (0.51.5), for an async `loadOptions` that filters itself.
 export { foldForSearch, rankMatch, searchWords, matchesSearch } from "./lib/text-match";
@@ -109,12 +122,11 @@ export type {
   TranslationReviewSwipeAction,
   TranslationReviewSwipeBinding,
 } from "./lib/translation-review";
-// 0.22.0, the inputs round: the country list and the IBAN, ISIN and phone helpers that
+// 0.22.0, the inputs round: the country list and the IBAN and phone helpers that
 // CountrySelect, IbanInput and PhoneInput are built on.
 export { COUNTRY_CODES, countryName } from "./lib/countries";
 export { IBAN_LENGTHS, compactIban, formatIban, ibanCheckDigits, ibanProblem, isValidIban, isQrIban } from "./lib/iban";
 export type { IbanKind, IbanProblem } from "./lib/iban";
-export { formatIsin, isinCheckDigit, isValidIsin } from "./lib/isin";
 export { PHONE_DIAL_CODES, PHONE_COUNTRIES, parsePhone, formatNationalPhone, formatPhone, isE164 } from "./lib/phone";
 export type { PhoneCountryCode, PhoneCountry, ParsedPhone } from "./lib/phone";
 // 0.23.0: ColumnMapper's pure half (Kurvenschmiede's columns input, keksdose's import map).
@@ -156,12 +168,16 @@ export type { UseAnnounceReturn, UseAnnounceOptions, AnnounceRegionProps } from
 export { useOverlayHistory } from "./hooks/use-overlay-history";
 export { useCloseTransition, OVERLAY_EXIT_MS } from "./hooks/use-close-transition";
 export { useRowSwipe } from "./hooks/use-row-swipe";
+// 0.52 (DUP-8): DataTable's press-and-hold, which keksdose wrote first and still keeps.
+export { useLongPress } from "./hooks/use-long-press";
+export type { LongPressOptions, LongPressResult } from "./hooks/use-long-press";
 // 0.28: keksdose's noindex marker, for the legal and auth pages of every app.
 export { useNoIndex } from "./hooks/use-noindex";
 // 0.49 KIT-9: the window's title from page, section and app, in the provider's format.
 export { useDocumentTitle } from "./hooks/use-document-title";
-// 0.49 KIT-1b: U+2212 before a number as "-", the copy handler's rule, for an app's text.
-export { asciiMinusInNumbers } from "./lib/clipboard-minus";
+// 0.53: the 55 names no app reads left the entry points (deprecated in 0.52, refactor audit
+// 2026-10-30, API-4, decision 4) — here 0.49 KIT-1b's `asciiMinusInNumbers`, the copy
+// handler's rule, among them. Their modules keep the ones the kit itself uses.
 export { DEFAULT_DOCUMENT_TITLE_FORMAT, formatDocumentTitle } from "./lib/document-title";
 export type { DocumentTitleParts } from "./lib/document-title";
 export type { SwipeStage, RowSwipeOptions, RowSwipeReturn } from "./hooks/use-row-swipe";
@@ -321,10 +337,6 @@ export * from "./components/multi-select";
 export * from "./components/tooltip";
 export * from "./components/user-avatar";
 export * from "./components/settings-fields";
-// Sync state for a database-backed field: the engine (`useFieldSync`) and the
-// affordance (`FieldSyncIndicator`), kept separate because the state is useful
-// without the dot — a form can gate its submit on any field being `pending`.
-export * from "./components/field-sync";
 export * from "./components/month-picker";
 export * from "./components/checkbox";
 export * from "./components/switch";
@@ -398,8 +410,6 @@ export * from "./components/alert-banner";
 export * from "./components/toggle-group";
 // A wrapping set of links/buttons marked `aria-current` — Tabs-like looks, not tabs.
 export * from "./components/nav-pills";
-// 0.49.0 (KIT-6): a section's pages on the phone, one scrolling row of pills.
-export * from "./components/section-nav";
 // A pill carrying one VALUE — inert, a link, or a toggle, depending on which prop it is
 // given — and the list field built from it. Distinct from Button on purpose: a row of
 // buttons reads as "choose an action", a row of chips as "here are the things".
@@ -416,7 +426,16 @@ export * from "./components/full-bleed-dialog";
 export * from "./components/grouped-picker";
 export * from "./components/file-dropzone";
 export * from "./components/mini-calendar";
-export * from "./components/calendar-heatmap";
+// Named, not `*`: `heatmapLevel` is CalendarHeatmap's own since 0.53 (API-4).
+export {
+  CalendarHeatmap,
+  DEFAULT_CALENDAR_HEATMAP_LABELS,
+  heatmapWindowEnd,
+  type CalendarHeatmapLabels,
+  type CalendarHeatmapDatum,
+  type CalendarHeatmapDay,
+  type CalendarHeatmapProps,
+} from "./components/calendar-heatmap";
 export * from "./components/date-picker";
 export * from "./components/tree-view";
 // 0.8.0 layout and feedback primitives the apps hand-rolled or took from shadcn/Radix.
@@ -436,8 +455,9 @@ export {
   COMMIT_EXCEPT_BILLING,
   DEFAULT_WRITE_LOCK_LABELS,
 } from "./components/write-lock";
-// 0.46 (kastlan K4): the offline lock kind, its scope and its source.
-export { OFFLINE_LOCK, COMMIT_EXCEPT_OFFLINE, useOfflineWriteLock } from "./components/write-lock";
+// 0.46 (kastlan K4): the offline lock's scope and its source (the kind, `OFFLINE_LOCK`, left
+// the surface in 0.53: it is the string "offline").
+export { COMMIT_EXCEPT_OFFLINE, useOfflineWriteLock } from "./components/write-lock";
 export type {
   WriteLock,
   WriteLockLabels,
@@ -501,7 +521,13 @@ export * from "./components/error-boundary";
 export * from "./components/copy-button";
 export { AuthedImage, DEFAULT_AUTHED_IMAGE_LABELS } from "./components/authed-image";
 export type { AuthedImageProps, AuthedImageLabels } from "./components/authed-image";
-export * from "./components/image-grid";
+// Named, not `*`: `splitFileName` is ImageGrid's own since 0.53 (API-4).
+export {
+  ImageGrid,
+  DEFAULT_IMAGE_GRID_LABELS,
+  type ImageGridLabels,
+  type ImageGridProps,
+} from "./components/image-grid";
 export * from "./components/lightbox";
 export * from "./components/button-group";
 export * from "./components/table";
@@ -529,14 +555,7 @@ export type {
 // The toast layer over sonner (an OPTIONAL peer, loaded lazily): `toast` mirrors sonner's
 // API so apps migrate by swapping the import; `<Toaster>` carries the placement, theme,
 // tones and z-index both apps had wired by hand.
-export {
-  toast,
-  Toaster,
-  DEFAULT_TOAST_LABELS,
-  TOAST_ACTION_DURATION,
-  TOASTER_OFFSET_TOP,
-  TOASTER_OFFSET_BOTTOM,
-} from "./components/toast";
+export { toast, Toaster, DEFAULT_TOAST_LABELS } from "./components/toast";
 export type {
   ToastId,
   ToastAction,
@@ -626,6 +645,8 @@ export {
   isDateFormatPreference,
   resolveDateFormat,
   formatDateWithPreference,
+  // 0.52 (refactor audit 2026-10-30, DUP-2): a timestamp, the preference's date and the language's clock.
+  formatDateTimeWithPreference,
   dateFormatSample,
   dateFormatterFor,
 } from "./lib/date-format";
@@ -639,7 +660,6 @@ export {
   // 0.47.0 (keksdose N17): a hand-built table's actions heading and cell.
   RowActionsHead,
   ROW_ACTIONS_CELL_CLASS,
-  ROW_ACTIONS_HEAD_CLASS,
 } from "./components/row-actions";
 export type {
   RowAction,
@@ -660,7 +680,6 @@ export * from "./components/one-time-code-input";
 export * from "./components/language-select";
 export * from "./components/tile-radio";
 export * from "./components/inline-edit-field";
-export * from "./components/sign-chip";
 export * from "./components/country-select";
 export * from "./components/iban-input";
 export * from "./components/phone-input";
@@ -814,11 +833,9 @@ export type { DataExportSettingProps, DataExportLabels, DataExportFile } from ".
 // 0.30.0 (docs/user-admin-harmonization.md): the admin user list and its actions, and the
 // invitations panel. Callbacks only; the confirmation level is the server's.
 export {
-  userRosterColumns,
   useUserRosterColumns,
   UserIdentityCell,
   UserRowActions,
-  adminUserStates,
   userRosterSort,
   USER_ROSTER_SORT_KEYS,
   DEFAULT_USER_ROSTER_LABELS,
@@ -898,7 +915,7 @@ export { adminSectionOrder } from "./admin/admin-sections";
 export type { AdminSectionPlace, AdminSectionOrderOptions, AdminKeptSection } from "./admin/admin-sections";
 export { AdminForbidden } from "./admin/admin-forbidden";
 export type { AdminForbiddenProps } from "./admin/admin-forbidden";
-export { AdminOverview, AttentionTile, adminWaitingCount, DEFAULT_ADMIN_ATTENTION_HREFS } from "./admin/admin-overview";
+export { AdminOverview, AttentionTile, adminWaitingCount } from "./admin/admin-overview";
 export type {
   AdminAttention,
   AdminAttentionTile,
@@ -913,16 +930,10 @@ export type {
 export { AdminToolLinks } from "./admin/admin-tool-links";
 export type { AdminToolLink, AdminToolLinksProps } from "./admin/admin-tool-links";
 // 0.45.0 (docs/admin-harmonization.md §9.2.4): "Send a test mail to me".
-export { MailTestCard, DEFAULT_MAIL_TEST_CARD_LABELS, MAIL_TEST_ANCHOR, maskMailAddress } from "./admin/mail-test-card";
+export { MailTestCard, DEFAULT_MAIL_TEST_CARD_LABELS, MAIL_TEST_ANCHOR } from "./admin/mail-test-card";
 export type { MailTestCardProps, MailTestCardLabels, MailTestAnswer } from "./admin/mail-test-card";
 // 0.33.0: the operator's plan parts (docs/billing-harmonization.md §14.12).
-export {
-  planColumn,
-  usePlanColumn,
-  PlanChangeConfirm,
-  usePlanChangeResult,
-  DEFAULT_PLAN_CHANGE_LABELS,
-} from "./admin/plan-change";
+export { usePlanColumn, PlanChangeConfirm, usePlanChangeResult, DEFAULT_PLAN_CHANGE_LABELS } from "./admin/plan-change";
 export type {
   PlanChangeLabels,
   PlanColumnOptions,
@@ -947,7 +958,7 @@ export type {
   PlanPrices,
   PlanPriceAnswer,
 } from "./billing/plan-price";
-export { PlanCard, PlanPicker, GrantWarningConfirm, planRelation } from "./billing/plan-card";
+export { PlanCard, PlanPicker, GrantWarningConfirm } from "./billing/plan-card";
 export type {
   BillingPlan,
   PlanRelation,
@@ -981,15 +992,10 @@ export {
   withoutCheckoutReturn,
   checkoutReturnUrl,
 } from "./billing/checkout-return";
-export {
-  checkoutFingerprint,
-  checkoutLanded,
-  noteCheckoutStarted,
-  useCheckoutProcessing,
-} from "./billing/checkout-processing";
+export { checkoutFingerprint, noteCheckoutStarted, useCheckoutProcessing } from "./billing/checkout-processing";
 export type { CheckoutOverview, CheckoutProcessingOptions } from "./billing/checkout-processing";
 // The link to the pay page and Paddle's locale (§14.4); the page itself ships as dist/pay/.
-export { PAY_PAGE_LANG_PARAM, paddleLocale, payPageUrl } from "./billing/pay-page";
+export { paddleLocale, payPageUrl } from "./billing/pay-page";
 export type { PaddleEnvironment } from "./billing/pay-page";
 // 0.39 (§15.2.6): the apps every pay page serves, by their `billing_app` tag.
 export { PAY_PAGE_APPS } from "./billing/pay-page";
@@ -1039,7 +1045,7 @@ export type {
   ResolveAccountLanguageInput,
   ResolvedAccountLanguage,
 } from "./settings/use-account-language";
-export { useAccountAppearance, resolveAccountAppearance } from "./settings/use-account-appearance";
+export { useAccountAppearance } from "./settings/use-account-appearance";
 export type {
   AppearanceSource,
   AccountAppearanceFields,
@@ -1090,6 +1096,8 @@ export {
   notifyPushSubscriptionChanged,
   pushSupported,
   PushDeviceError,
+  // 0.52 (§10.6, refactor audit 2026-10-30 FLW-2): an explicit sign-out releases this device's push.
+  releaseThisDevicePush,
 } from "./notifications/use-push-device";
 export type {
   PushDevice,
@@ -1114,7 +1122,7 @@ export type {
 } from "./notifications/push-worker";
 export { PushDeviceSetting } from "./notifications/push-device-setting";
 export type { PushDeviceSettingProps, PushDeviceAction } from "./notifications/push-device-setting";
-export { PushDevicesSetting, describeUserAgent } from "./notifications/push-devices-setting";
+export { PushDevicesSetting } from "./notifications/push-devices-setting";
 export type { PushDevicesSettingProps } from "./notifications/push-devices-setting";
 export { UnsubscribePanel, unsubscribeTokenType } from "./notifications/unsubscribe-panel";
 export type { UnsubscribePanelProps } from "./notifications/unsubscribe-panel";
@@ -1161,7 +1169,7 @@ export { DEFAULT_DEMO_LABELS, useDemoLabels } from "./demo/demo-labels";
 export type { DemoLabels } from "./demo/demo-labels";
 export { isDemoSession } from "./demo/demo-session";
 export type { DemoModel, DemoSessionUser } from "./demo/demo-session";
-export { useDemoCountdown, demoCountdown, DEMO_WARNING_MINUTES, DEMO_MINUTES_ONLY } from "./demo/demo-countdown";
+export { useDemoCountdown } from "./demo/demo-countdown";
 export type { DemoCountdown, DemoCountdownOptions, DemoExpiry } from "./demo/demo-countdown";
 export { DemoStart } from "./demo/demo-start";
 export type { DemoStartProps } from "./demo/demo-start";

package/src/landing/routing.tsx

@@ -2,6 +2,7 @@ import { useEffect } from "react";
 import type { ReactNode } from "react";
 import { Navigate, Outlet, useLocation } from "react-router";
 
+import { matchesPathPattern, routerPathname } from "../lib/path-pattern";
 import { readStored, removeStored, writeStored } from "../lib/safe-storage";
 import type { LandingSession } from "./landing-actions";
 import { LoadingState } from "../components/loading-state";
@@ -61,7 +62,9 @@ export function safeNextPath(raw: string | null | undefined): string | null {
 /* ── The last visited page (§3.2) ────────────────────────────────────────── */
 
 /** A path to leave out: a string is the path and everything under it (`/demo` is
- *  `/demo` and `/demo/ended`; `/` is only `/`), a RegExp is tested on the pathname. */
+ *  `/demo` and `/demo/ended`; `/` is only `/`), a RegExp is tested on the pathname. Both
+ *  as React Router matches a route: case-insensitive (a RegExp gets the `i` flag) and on
+ *  the percent-decoded path (0.52). */
 export type PathPattern = string | RegExp;
 
 /**
@@ -85,16 +88,17 @@ export const DEFAULT_LAST_VISITED_EXCLUDES: readonly PathPattern[] = Object.free
   "/terms",
 ]);
 
-function matchesPath(pathname: string, pattern: PathPattern): boolean {
-  if (typeof pattern !== "string") return new RegExp(pattern.source, pattern.flags.replace("g", "")).test(pathname);
-  if (pattern === "/") return pathname === "/";
-  const base = pattern.endsWith("/") ? pattern.slice(0, -1) : pattern;
-  return pathname === base || pathname.startsWith(`${base}/`);
-}
-
-/** Whether `pathname` is one of the defaults or the app's `exclude`. */
+/**
+ * Whether `pathname` is one of the defaults or the app's `exclude` — read as the ROUTER
+ * reads it, decoded and case-insensitive (lib/path-pattern). This module's own copy of the
+ * rule compared the raw pathname case-sensitively after the feedback guard's copy had
+ * learnt both, and `exclude: ["/banks/callback"]` recorded `/Banks/Callback?code=…` as the
+ * page the next launch resumes on (0.52 code review, lib/path-pattern.ts). One rule now.
+ */
 function isExcluded(pathname: string, exclude: readonly PathPattern[]): boolean {
-  return [...DEFAULT_LAST_VISITED_EXCLUDES, ...exclude].some((pattern) => matchesPath(pathname, pattern));
+  const path = routerPathname(pathname);
+  const named = (pattern: PathPattern) => matchesPathPattern(path, pattern);
+  return DEFAULT_LAST_VISITED_EXCLUDES.some(named) || exclude.some(named);
 }
 
 export interface LastVisitedPageOptions {

package/src/lib/broadcast.ts

@@ -0,0 +1,52 @@
+/*
+ * The cross-tab messages of the sync engine (the copy's new epoch after `forget()`) and of the
+ * query copy (`clear`), refactor audit 2026-10-30 FLW-1. 0.52 code review
+ * (src/sync/engine.ts, src/offline/query-persistence.ts): both wrote the open, the feature
+ * check, the try/catch and the close by hand, the listening side twice too — and the two
+ * listeners had drifted (only the query copy's let go of Node's worker).
+ */
+
+/**
+ * Tell this origin's other tabs one thing over a `BroadcastChannel`, and let go of the
+ * channel at once.
+ *
+ * Best-effort by design: the message makes another tab stop sooner, and each caller has a
+ * fallback that holds without it (the epoch in `meta`, the key deleted from storage).
+ *
+ * The message goes out on a channel of its own, so a caller that listens on `name` itself
+ * hears it too, like every other channel of that name in this tab: it ignores its own.
+ */
+export function postOnce(name: string, message: unknown): void {
+  // Older browsers and some test environments have none: nothing is posted.
+  if (typeof BroadcastChannel === "undefined") return;
+  try {
+    const channel = new BroadcastChannel(name);
+    try {
+      channel.postMessage(message);
+    } finally {
+      channel.close();
+    }
+  } catch {
+    /* best-effort: a message that cannot be cloned, a channel refused (an opaque origin) */
+  }
+}
+
+/**
+ * Hear what this origin's other tabs post on `name` until the returned function is called.
+ * Nothing is heard (and closing is a no-op) where there is no BroadcastChannel or none can be
+ * opened (an opaque origin): each caller has a fallback that holds without it.
+ */
+export function listenOn(name: string, onMessage: (data: unknown) => void): () => void {
+  if (typeof BroadcastChannel === "undefined") return () => undefined;
+  let channel: BroadcastChannel;
+  try {
+    channel = new BroadcastChannel(name);
+  } catch {
+    return () => undefined;
+  }
+  // Node's channel (an app's tests) holds its worker open while it listens, and a test that
+  // never stops the listener would keep it listening. Browsers have no `unref`.
+  (channel as BroadcastChannel & { unref?: () => void }).unref?.();
+  channel.onmessage = ({ data }: MessageEvent<unknown>) => onMessage(data);
+  return () => channel.close();
+}

package/src/lib/date-format.ts

@@ -1,5 +1,8 @@
 import { formatLocaleOf } from "../i18n/languages";
 import type { KitDateFormatter } from "../i18n/kit-labels";
+import { pad, toLocalIso } from "./dates";
+import { dateFormatter } from "./intl-cache";
+import { isBareIsoDay } from "./iso-day";
 
 /**
  * The date-format preference (0.46, lifted from keksdose's `date-format-store.ts`,
@@ -56,6 +59,15 @@ export interface DateFormatOptions {
   /** Name the day of the week too, in the interface language ("Mo., 01.08.2026"). A date
    *  in a COLUMN carries it; a date in a SENTENCE does not (keksdose dev#546). */
   weekday?: boolean;
+  /**
+   * 0.52: the IANA zone a TIMESTAMP's day and clock are read in ("Europe/Zurich") — pass
+   * the `<UiKitProvider timeZone>` (`useKitTimeZone()`), so an app's own column says what
+   * the kit's components say for the same instant. Left out: the device's. A bare
+   * "YYYY-MM-DD" ignores it: a calendar day is the day it names in every zone. A zone
+   * `Intl` refuses reads as the device's. The renderers read it; {@link resolveDateFormat}
+   * does not.
+   */
+  timeZone?: string;
 }
 
 /**
@@ -80,9 +92,6 @@ export function resolveDateFormat(
   return { locale: preference, options: { year: "numeric", month: "2-digit", day: "2-digit" }, ...weekday };
 }
 
-/** A bare calendar day: no time, no zone. */
-const DATE_ONLY = /^\d{4}-\d{2}-\d{2}$/;
-
 /**
  * `dateText`, already rendered under the preference, with the day's NAME around it in
  * `locale` (the language's). Not "weekday alone + comma": German says "So" alone and
@@ -93,7 +102,7 @@ const DATE_ONLY = /^\d{4}-\d{2}-\d{2}$/;
  */
 function withWeekday(date: Date, dateText: string, locale: string | undefined, options: Intl.DateTimeFormatOptions) {
   const isDatePart = (p: Intl.DateTimeFormatPart) => p.type === "day" || p.type === "month" || p.type === "year";
-  const parts = new Intl.DateTimeFormat(locale, { weekday: "short", ...options }).formatToParts(date);
+  const parts = dateFormatter(locale, { weekday: "short", ...options }).formatToParts(date);
   const first = parts.findIndex(isDatePart);
   if (first === -1) return dateText;
   let last = first;
@@ -108,8 +117,9 @@ function withWeekday(date: Date, dateText: string, locale: string | undefined, o
  * A date under the preference: `""` for no value, the input itself when it does not
  * parse. A bare "YYYY-MM-DD" is the calendar day it names in every zone (formatted in
  * UTC, undoing `new Date`'s UTC-midnight parse — west of Greenwich it read a day early);
- * a timestamp is an instant and stays in the reader's zone. The weekday, when asked for,
- * is rendered in the same zone, so a Sunday is never captioned Saturday.
+ * a timestamp is an instant, read in `options.timeZone`, else the reader's zone. The
+ * weekday, when asked for, is rendered in the same zone, so a Sunday is never captioned
+ * Saturday.
  */
 export function formatDateWithPreference(
   value: string | Date | null | undefined,
@@ -119,17 +129,83 @@ export function formatDateWithPreference(
 ): string {
   if (!value) return "";
   const resolved = resolveDateFormat(preference, language, options);
-  const dateOnly = typeof value === "string" && DATE_ONLY.test(value);
+  const dateOnly = isBareIsoDay(value);
   const date = typeof value === "string" ? new Date(value) : value;
   if (Number.isNaN(date.getTime())) return String(value);
-  const intl: Intl.DateTimeFormatOptions = dateOnly ? { ...resolved.options, timeZone: "UTC" } : resolved.options;
-  try {
-    const text = date.toLocaleDateString(resolved.locale, intl);
+  const render = (timeZone: string | undefined) => {
+    const intl: Intl.DateTimeFormatOptions = timeZone ? { ...resolved.options, timeZone } : resolved.options;
+    // Through the shared cache (refactor audit 2026-10-30, DUP-2): a `toLocaleDateString`
+    // builds a formatter per call, which is why keksdose kept its own copy of this
+    // renderer — 392 ms per click on a 270-row register (dev#632).
+    const text = dateFormatter(resolved.locale, intl).format(date);
     return resolved.weekday ? withWeekday(date, text, resolved.weekday.locale, intl) : text;
-  } catch {
-    // A language tag `Intl` refuses: the ISO day rather than nothing (keksdose's fallback).
-    return date.toISOString().slice(0, 10);
+  };
+  if (dateOnly) return firstAccepted([() => render("UTC")], () => value);
+  // A zone `Intl` refuses: the reader's own day, as `clockTime` reads the reader's own
+  // clock — never the UTC day `toISOString` gave, a day off around midnight (0.52 code
+  // review, this file).
+  return firstAccepted([() => render(options.timeZone), () => render(undefined)], () => toLocalIso(date));
+}
+
+/** The first of `renders` that `Intl` accepts — a language tag or a zone it refuses
+ *  throws — else `last()`: the ISO day or the clock rather than nothing (keksdose's
+ *  fallback). */
+function firstAccepted(renders: readonly (() => string)[], last: () => string): string {
+  for (const render of renders) {
+    try {
+      return render();
+    } catch {
+      // Refused: the next.
+    }
   }
+  return last();
+}
+
+/**
+ * The clock time of `date` as the language writes it ("14:05"), two digits each: rule 3,
+ * a clock follows the language, never the preference — `sv-SE` is a statement about the
+ * order of a date's digits, not about a 12- or 24-hour clock. `language` is read through
+ * `formatLocaleOf`, so English is the British 24-hour clock, not "02:05 PM" in a
+ * German household's app. In `timeZone` when given, else the reader's.
+ *
+ * @internal Shared with the kit's own day formatter; not part of the barrel.
+ */
+export function clockTime(date: Date, language: string | undefined, timeZone?: string): string {
+  const locale = language ? formatLocaleOf(language) : undefined;
+  const clock = (zone: string | undefined) =>
+    dateFormatter(locale, { hour: "2-digit", minute: "2-digit", ...(zone ? { timeZone: zone } : null) }).format(date);
+  // A zone `Intl` refuses: the reader's own clock, as `isoDayIn` reads the reader's own
+  // day — the UTC clock `toISOString` gave printed 13:05 for 14:05 in Zurich, an hour or
+  // more off with no error (0.52 code review, this file).
+  const reader = () => `${pad(date.getHours())}:${pad(date.getMinutes())}`;
+  return firstAccepted([() => clock(timeZone), () => clock(undefined)], reader);
+}
+
+/**
+ * A timestamp under the preference (0.52, keksdose's `formatDateTimeFor`, refactor audit
+ * 2026-10-30, DUP-2): the date as {@link formatDateWithPreference} writes it, weekday
+ * when asked for, then the clock time in the LANGUAGE ({@link clockTime}): "01.08.2026,
+ * 14:05", "Sa., 01.08.2026, 14:05". keksdose's notification inbox and admin scheduler
+ * were where an explicit ISO choice did nothing until it wrote this. `""` for no value,
+ * the input itself when it does not parse; a bare "YYYY-MM-DD" names no moment, so it
+ * prints as the date alone.
+ *
+ * Day and clock in `options.timeZone` — pass the provider's (`useKitTimeZone()`): without
+ * it they were the device's, and an app on Zurich time read from New York printed 09:05
+ * in its own column where the kit's inbox printed 14:05 for the same instant (0.52 code
+ * review, this file).
+ */
+export function formatDateTimeWithPreference(
+  value: string | Date | null | undefined,
+  preference: DateFormatPreference,
+  language: string | undefined,
+  options: DateFormatOptions = {},
+): string {
+  if (!value) return "";
+  if (isBareIsoDay(value)) return formatDateWithPreference(value, preference, language, options);
+  const date = typeof value === "string" ? new Date(value) : value;
+  if (Number.isNaN(date.getTime())) return String(value);
+  return `${formatDateWithPreference(date, preference, language, options)}, ${clockTime(date, language, options.timeZone)}`;
 }
 
 /** The sample an option is labelled with — 1 August 2026 in its shape, the shape being

package/src/lib/day-format.ts

@@ -0,0 +1,96 @@
+import { useCallback } from "react";
+import { useKitDateFormatter, useKitLocale, useKitTimeZone } from "../i18n/kit-labels";
+import { toLocalIso } from "./dates";
+import { clockTime } from "./date-format";
+import { EMPTY_FORMATTED_VALUE, formatDate, toDate, type DateInput, type FormatDateStyle } from "./format";
+import { dateFormatter } from "./intl-cache";
+import { isBareIsoDay } from "./iso-day";
+
+/**
+ * How a kit component prints a day — ONE ladder (refactor audit 2026-10-30, DUP-2):
+ *
+ *  1. the component's own prop (`formatDate`, `renderDate`), when the app gave one and it
+ *     answers;
+ *  2. else the `<UiKitProvider formatDate>` (keksdose K12: the app's date-format
+ *     preference), asked for the calendar day with `source: "dateMark"`;
+ *  3. else the kit's `formatDate` in the provider's locale AND `timeZone` (0.46).
+ *
+ * 0.46's rule — "a label that identifies a day follows the preference" — held only where
+ * a component wrote that ladder itself: four copies (admin's `useDayText`, AccountStateChip,
+ * DateMark, the feedback table), while about twelve components took their own prop or
+ * nothing and went straight to `lib/format`. keksdose set the provider's `formatDate` and
+ * still passed it into six components by hand; and the 10 that imported the raw
+ * `formatDate` ignored the provider's `timeZone`.
+ *
+ * @internal Not part of the barrel: the components' props are the public way in.
+ */
+
+/** What a {@link DayFormatter} call may ask for. */
+export interface DayTextOptions {
+  /**
+   * Name the day of the week — what the provider's formatter is told (its `weekday`).
+   * keksdose's rule: a date in a COLUMN carries it, a date in a SENTENCE does not
+   * (dev#546). Default `false`. The kit's own rendering follows `style`, not this.
+   */
+  weekday?: boolean;
+  /** Add the clock time, in the language (date-format rule 3): a timestamp. Default false. */
+  time?: boolean;
+  /** The kit's own rendering (step 3). Default `"medium"`, `"dateTime"` with `time`. */
+  style?: FormatDateStyle | Intl.DateTimeFormatOptions;
+  /** `false`: skip the provider (step 2) — a component's explicit style wins over it,
+   *  as `DateMark`'s `dateStyle` does. Default `true`. */
+  preference?: boolean;
+  /** Printed for no value. Default "—". */
+  empty?: string;
+}
+
+/** A component's day printer: a value in, its text out. */
+export type DayFormatter<V extends DateInput = DateInput> = (value: V, options?: DayTextOptions) => string;
+
+/** The calendar day `date` falls on in `timeZone`, as "YYYY-MM-DD" — so the day the
+ *  provider is asked for is the day the kit's own rendering would print. */
+function isoDayIn(date: Date, timeZone: string | undefined): string {
+  if (!timeZone) return toLocalIso(date);
+  try {
+    // `en-CA` writes YYYY-MM-DD with Latin digits.
+    const parts = dateFormatter("en-CA", { timeZone, year: "numeric", month: "2-digit", day: "2-digit" }).formatToParts(
+      date,
+    );
+    const part = (type: Intl.DateTimeFormatPartTypes) => parts.find((p) => p.type === type)?.value ?? "";
+    return `${part("year")}-${part("month")}-${part("day")}`;
+  } catch {
+    return toLocalIso(date);
+  }
+}
+
+/**
+ * The component's day printer, bound to its `prop`, the provider's `formatDate`, locale
+ * and `timeZone`. `prop` is called with the value as the component passed it, and wins
+ * whenever it answers non-empty. A value that does not parse is printed as it came
+ * (a bug upstream is better seen than hidden behind a dash).
+ */
+export function useDayFormatter<V extends DateInput = DateInput>(
+  prop?: ((value: V) => string) | null,
+  localeProp?: string,
+): DayFormatter<V> {
+  const locale = useKitLocale(localeProp);
+  const timeZone = useKitTimeZone();
+  const fromProvider = useKitDateFormatter();
+  return useCallback<DayFormatter<V>>(
+    (value, options = {}) => {
+      const own = prop?.(value);
+      if (own) return own;
+      if (value === null || value === undefined || value === "") return options.empty ?? EMPTY_FORMATTED_VALUE;
+      const date = toDate(value);
+      if (!date) return String(value);
+      const bareDay = isBareIsoDay(value);
+      if (fromProvider && options.preference !== false) {
+        const iso = bareDay ? value : isoDayIn(date, timeZone);
+        const day = fromProvider(iso, { unit: "day", source: "dateMark", locale, weekday: options.weekday ?? false });
+        if (day) return options.time && !bareDay ? `${day}, ${clockTime(date, locale, timeZone)}` : day;
+      }
+      return formatDate(value, options.style ?? (options.time ? "dateTime" : "medium"), { locale, timeZone });
+    },
+    [prop, fromProvider, locale, timeZone],
+  );
+}

package/src/lib/describe-failure.ts

@@ -0,0 +1,18 @@
+import type { ReactNode } from "react";
+import { hasContent } from "./presence";
+
+/**
+ * The failure ladder, once: the app's words for a failure when it has any, else the
+ * kit's `fallback`.
+ *
+ * "Any" is {@link hasContent}, so an app's `describeError` answering `""` (nothing to say
+ * about this one) gets the kit's sentence. Written as `own ?? fallback` in the auth forms,
+ * where `""` printed an empty alert, and both ways within one file in the reviewer scope
+ * editor; it lived in the notification cards' parts only (refactor audit 2026-10-30,
+ * DUP-14).
+ *
+ * @internal Package-private — not re-exported from the barrel.
+ */
+export function describeFailure(own: ReactNode | undefined, fallback: ReactNode): ReactNode {
+  return hasContent(own) ? own : fallback;
+}