@eifi1/ui-kit 0.51.7 → 0.53.0

package/src/account/passkeys-setting.tsx

@@ -1,13 +1,17 @@
-import { useEffect, useRef, useState } from "react";
+import { useEffect, useMemo, useRef, useState } from "react";
 import type { KeyboardEvent, ReactNode } from "react";
 import { KeyRound } from "lucide-react";
 import { cn } from "../lib/cn";
-import { useKitLocale, type LabelOverride } from "../i18n/kit-labels";
+import { useDayFormatter } from "../lib/day-format";
+import { toDate } from "../lib/format";
+import type { LabelOverride } from "../i18n/kit-labels";
 import { Button } from "../components/button";
 import { Card } from "../components/card";
 import { EmptyState } from "../components/empty-state";
+import { InlineConfirm } from "../components/inline-confirm";
 import { Input } from "../components/input";
 import { Skeleton } from "../components/skeleton";
+import { COMMIT_EXCEPT_BILLING, useWriteLock } from "../components/write-lock";
 import { useAccountSettingsLabels } from "./account-settings-labels";
 import { SettingsCardTitle } from "../settings/settings-heading";
 import type { PasskeysSettingLabels } from "./account-settings-labels";
@@ -88,7 +92,9 @@ export interface PasskeysSettingProps<Id extends PasskeyId = PasskeyId> extends
    * app knows which of those it detected.
    */
   unavailable?: ReactNode;
-  /** A date for the "Added …" / "Last used …" lines. Default: the locale's medium date. */
+  /** A date for the "Added …" / "Last used …" lines. Default: the provider's `formatDate`
+   *  (the app's date preference), else a medium date in the provider's locale and
+   *  `timeZone`. */
   formatDate?: (date: Date) => string;
   /** Overrides the provider's locale for the default date format. */
   locale?: string;
@@ -117,6 +123,11 @@ export interface PasskeysSettingProps<Id extends PasskeyId = PasskeyId> extends
  * must work in an app without a `ConfirmProvider`, and the question belongs next to
  * the passkey it names. Focus moves to Cancel, as in every destructive confirm in the
  * kit, so the Enter that pressed Delete cannot also answer it.
+ *
+ * **Under a write lock** (0.52) Add, Rename, Delete and the confirm are `commit` controls
+ * exempt from billing — a lapsed plan still lets the account manage how it signs in, the
+ * demo does not. Until 0.52 the passkeys' confirm was the one inline confirm without it,
+ * so the demo could delete, rename and add (refactor audit 2026-10-30, DUP-10).
  */
 export function PasskeysSetting<Id extends PasskeyId = PasskeyId>({
   passkeys,
@@ -138,7 +149,21 @@ export function PasskeysSetting<Id extends PasskeyId = PasskeyId>({
   ...rest
 }: PasskeysSettingProps<Id>) {
   const labels = useAccountSettingsLabels("passkeys", labelsProp);
-  const locale = useKitLocale(localeProp);
+  // The prop, else the provider's `formatDate`, else the kit's in the provider's locale and
+  // `timeZone`; a bare "YYYY-MM-DD" is read on its calendar (refactor audit 2026-10-30,
+  // DUP-2: this card parsed with `new Date` and built its own `Intl` formatter).
+  // The raw value goes in, so a bare day keeps its calendar; the prop still gets a Date.
+  const own = useMemo(
+    () =>
+      formatDate &&
+      ((value: PasskeyItem["createdAt"]) => {
+        const date = toDate(value);
+        return date ? formatDate(date) : "";
+      }),
+    [formatDate],
+  );
+  const day = useDayFormatter(own, localeProp);
+  const lock = useWriteLock(COMMIT_EXCEPT_BILLING);
   const [name, setName] = useState("");
   // `beforeAdd` is running. State for the button, and a ref for the guard: two clicks
   // in one frame both read the state from before either set it.
@@ -146,14 +171,12 @@ export function PasskeysSetting<Id extends PasskeyId = PasskeyId>({
   const checkingRef = useRef(false);
 
   const date = (value: PasskeyItem["createdAt"]): string | null => {
-    if (value === null || value === undefined || value === "") return null;
-    const d = value instanceof Date ? value : new Date(value);
-    if (Number.isNaN(d.getTime())) return null;
-    return formatDate ? formatDate(d) : new Intl.DateTimeFormat(locale, { dateStyle: "medium" }).format(d);
+    return toDate(value) ? day(value) : null;
   };
 
   const add = () => {
-    if (adding || checkingRef.current) return;
+    // The name field's Enter reaches here too, past the locked button.
+    if (adding || checkingRef.current || lock.locked) return;
     const typed = name;
     const value = typed.trim();
     const send = () =>
@@ -211,6 +234,7 @@ export function PasskeysSetting<Id extends PasskeyId = PasskeyId>({
                 lastUsed={date(item.lastUsedAt)}
                 attributes={rowProps?.(item)}
                 busy={busyId !== undefined && busyId !== null && busyId === item.id}
+                locked={lock.locked}
                 onRename={onRename}
                 onDelete={onDelete}
                 labels={labels}
@@ -234,7 +258,7 @@ export function PasskeysSetting<Id extends PasskeyId = PasskeyId>({
               }}
             />
           )}
-          <Button onClick={add} disabled={busy} aria-busy={busy || undefined}>
+          <Button onClick={add} commit={COMMIT_EXCEPT_BILLING} disabled={busy} aria-busy={busy || undefined}>
             <KeyRound className="size-4" aria-hidden />
             {adding ? labels.adding : labels.add}
           </Button>
@@ -265,6 +289,7 @@ function PasskeyRow<Id extends PasskeyId>({
   lastUsed,
   attributes,
   busy,
+  locked,
   onRename,
   onDelete,
   labels,
@@ -274,24 +299,26 @@ function PasskeyRow<Id extends PasskeyId>({
   lastUsed: string | null;
   attributes?: { id?: string } & PasskeyDataAttributes;
   busy: boolean;
+  /** A write lock holds: the rename field's Enter saves nothing. */
+  locked: boolean;
   onRename?: PasskeysSettingProps<Id>["onRename"];
   onDelete?: PasskeysSettingProps<Id>["onDelete"];
   labels: PasskeysSettingLabels;
 }) {
   const [mode, setMode] = useState<RowMode>("view");
   const [draft, setDraft] = useState(item.name);
-  // Which button opened the sub-mode, so leaving it puts focus back there — the
-  // confirm or the field unmounts under the focus, which otherwise falls to <body>.
+  // Which button opened the sub-mode, so leaving it puts focus back there — the field or
+  // the confirm unmounts under the focus, which otherwise falls to <body>. InlineConfirm
+  // returns it on Cancel and Escape; this also covers a delete that succeeded while the
+  // row stayed (the list not refreshed yet) and a rename.
   const [returnTo, setReturnTo] = useState<"rename" | "delete" | null>(null);
-  const cancelDeleteRef = useRef<HTMLButtonElement>(null);
   const renameRef = useRef<HTMLInputElement>(null);
   const renameButtonRef = useRef<HTMLButtonElement>(null);
   const deleteButtonRef = useRef<HTMLButtonElement>(null);
 
   useEffect(() => {
-    if (mode === "delete") cancelDeleteRef.current?.focus();
-    else if (mode === "rename") renameRef.current?.select();
-    else if (returnTo) (returnTo === "rename" ? renameButtonRef : deleteButtonRef).current?.focus();
+    if (mode === "rename") renameRef.current?.select();
+    else if (mode === "view" && returnTo) (returnTo === "rename" ? renameButtonRef : deleteButtonRef).current?.focus();
   }, [mode, returnTo]);
 
   const open = (next: "rename" | "delete") => {
@@ -300,17 +327,10 @@ function PasskeyRow<Id extends PasskeyId>({
     setMode(next);
   };
   const leave = () => setMode("view");
-  const escapeLeaves = (e: KeyboardEvent<HTMLButtonElement>) => {
-    if (e.key === "Escape") {
-      e.preventDefault();
-      e.stopPropagation();
-      leave();
-    }
-  };
 
   const saveRename = () => {
     const next = draft.trim();
-    if (!onRename || !next || busy) return;
+    if (!onRename || !next || busy || locked) return;
     if (next === item.name) {
       leave();
       return;
@@ -356,7 +376,7 @@ function PasskeyRow<Id extends PasskeyId>({
             }
           }}
         />
-        <Button size="sm" onClick={saveRename} disabled={busy || !draft.trim()}>
+        <Button size="sm" onClick={saveRename} commit={COMMIT_EXCEPT_BILLING} disabled={busy || !draft.trim()}>
           {labels.save}
         </Button>
         <Button size="sm" variant="ghost" onClick={leave}>
@@ -368,19 +388,19 @@ function PasskeyRow<Id extends PasskeyId>({
 
   if (mode === "delete") {
     return (
-      <li {...li} className="space-y-2 py-2">
-        <p role="alert" className="text-sm">
-          {labels.deleteConfirm(item.name)}
-        </p>
-        <div className="flex flex-wrap gap-2">
-          <Button size="sm" variant="danger" onClick={confirmDelete} onKeyDown={escapeLeaves} disabled={busy}>
-            {labels.confirmDelete}
-          </Button>
-          <Button ref={cancelDeleteRef} size="sm" variant="ghost" onClick={leave} onKeyDown={escapeLeaves}>
-            {labels.cancel}
-          </Button>
-        </div>
-      </li>
+      <InlineConfirm
+        as="li"
+        {...li}
+        className="py-2"
+        prompt={labels.deleteConfirm(item.name)}
+        confirmLabel={labels.confirmDelete}
+        cancelLabel={labels.cancel}
+        onConfirm={confirmDelete}
+        onLeave={leave}
+        busy={busy}
+        commit={COMMIT_EXCEPT_BILLING}
+        returnFocusRef={deleteButtonRef}
+      />
     );
   }
 
@@ -398,6 +418,7 @@ function PasskeyRow<Id extends PasskeyId>({
           ref={renameButtonRef}
           size="sm"
           variant="ghost"
+          commit={COMMIT_EXCEPT_BILLING}
           disabled={busy}
           onClick={() => open("rename")}
           aria-label={labels.renameItem(item.name)}
@@ -411,6 +432,7 @@ function PasskeyRow<Id extends PasskeyId>({
           size="sm"
           variant="ghost"
           tone="danger"
+          commit={COMMIT_EXCEPT_BILLING}
           disabled={busy}
           onClick={() => open("delete")}
           aria-label={labels.deleteItem(item.name)}

package/src/account/sessions-setting.tsx

@@ -2,9 +2,11 @@ import { useState } from "react";
 import type { ComponentPropsWithRef, ReactNode } from "react";
 import { MonitorSmartphone } from "lucide-react";
 
-import { useKitLabels, useKitLocale, type LabelOverride } from "../i18n/kit-labels";
+import { useKitLabels, type LabelOverride } from "../i18n/kit-labels";
 import { cn } from "../lib/cn";
-import { formatRelativeTime, toDate } from "../lib/format";
+import { useDayFormatter } from "../lib/day-format";
+import { describeFailure } from "../lib/describe-failure";
+import { toDate, useKitFormat } from "../lib/format";
 import type { DateInput } from "../lib/format";
 import { AlertBanner } from "../components/alert-banner";
 import { Chip } from "../components/chip";
@@ -107,8 +109,9 @@ export interface SessionsSettingProps<Id extends SessionId = SessionId> extends
   onRevoke?: (id: Id) => Promise<unknown> | void;
   /** The app's own words for a failure, or `undefined` for the kit's `failed`. */
   describeError?: (error: unknown, action: SessionsAction) => ReactNode | undefined;
-  /** The "Last active" text. Default: how long ago, in the provider's locale, and the
-   *  date once it is more than a week back. */
+  /** The "Last active" text. Default: how long ago, in the provider's locale and
+   *  `timeZone`, and the date once it is more than a week back — through the provider's
+   *  `formatDate` (the app's date preference) when it has one. */
   formatLastActive?: (date: Date) => string;
   /** Overrides the provider's locale for the default format. */
   locale?: string;
@@ -152,22 +155,25 @@ export function SessionsSetting<Id extends SessionId = SessionId>({
   ...rest
 }: SessionsSettingProps<Id>) {
   const labels = useKitLabels("sessions", DEFAULT_SESSIONS_LABELS, labelsProp);
-  const locale = useKitLocale(localeProp);
+  // The provider's locale and `timeZone`; past a week the words are a date, and a date
+  // that names a day follows the app's preference (refactor audit 2026-10-30, DUP-2).
+  const { formatDate, formatRelativeTime } = useKitFormat(localeProp);
+  const day = useDayFormatter(null, localeProp);
   const [busyId, setBusyId] = useState<Id | null>(null);
   const [failure, setFailure] = useState<ReactNode>(null);
   const mounted = useMounted();
 
-  const describe = (error: unknown, action: SessionsAction): ReactNode => {
-    const own = describeError?.(error, action);
-    return hasContent(own) ? own : labels.failed;
-  };
+  const describe = (error: unknown, action: SessionsAction): ReactNode =>
+    describeFailure(describeError?.(error, action), labels.failed);
 
   const lastActive = (value: DateInput): string | null => {
     const date = toDate(value);
     if (!date) return null;
-    return formatLastActive
-      ? formatLastActive(date)
-      : formatRelativeTime(date, { locale, absoluteAfterDays: 7, absoluteStyle: "medium" });
+    if (formatLastActive) return formatLastActive(date);
+    const words = formatRelativeTime(date, { absoluteAfterDays: 7, absoluteStyle: "medium" });
+    // Past a week the words ARE the medium date ("5 weeks ago" makes a reader do sums);
+    // then the day as the app's preference writes it.
+    return words === formatDate(date, "medium") ? day(date) : words;
   };
 
   const signOutEverywhere = () => {

package/src/admin/admin-action-confirm.tsx

@@ -12,6 +12,7 @@ import { authErrorCode } from "../auth/auth-errors";
 import type { KitErrorCode } from "../auth/auth-errors";
 import { usePersonLabel } from "./admin-parts";
 import { hasContent } from "../lib/presence";
+import { isThenable } from "../lib/thenable";
 import type { AdminPerson, MaybePromise } from "./admin-parts";
 import { isGroupTarget } from "./admin-action-log";
 import type { AdminGroupTarget } from "./admin-action-log";
@@ -176,11 +177,6 @@ interface AdminActionConfirmCommonProps {
  *  and `acknowledge`. */
 export type AdminActionConfirmProps = AdminActionConfirmCommonProps & AdminActionConfirmTarget;
 
-/** Whether a callback answered a promise. */
-function isThenable(value: unknown): value is PromiseLike<unknown> {
-  return typeof value === "object" && value !== null && typeof (value as PromiseLike<unknown>).then === "function";
-}
-
 /** The refusal's words and code. */
 function refusalOf(
   error: unknown,

package/src/admin/admin-parts.ts

@@ -1,8 +1,8 @@
 import { useCallback } from "react";
-import { useKitDateFormatter, useKitLocale } from "../i18n/kit-labels";
-import { formatDate, toDate } from "../lib/format";
+import { useKitLocale } from "../i18n/kit-labels";
+import { useDayFormatter } from "../lib/day-format";
+import { toDate } from "../lib/format";
 import type { DateInput } from "../lib/format";
-import { toLocalIso } from "../lib/dates";
 import { formatPersonName } from "../lib/person-name";
 
 /**
@@ -54,29 +54,15 @@ export function usePersonLabel(localeProp?: string): (person: AdminPerson | null
 /**
  * A day as words in a sentence ("6 Nov 2026"): the provider's `formatDate` when the app
  * set one (keksdose K12), asked for no weekday — a date in a sentence carries none — else
- * `Intl`'s medium date. `""` for no date.
+ * `Intl`'s medium date, in the provider's locale and `timeZone` (0.52: the kit's one day
+ * ladder, `useDayFormatter` — refactor audit 2026-10-30, DUP-2). `""` for no date or one
+ * that does not parse: the caller leaves the sentence out.
  */
 export function useDayText(localeProp?: string): (value: DateInput) => string {
-  const locale = useKitLocale(localeProp);
-  const fromProvider = useKitDateFormatter();
-  return useCallback(
-    (value) => {
-      const date = toDate(value);
-      if (!date) return "";
-      const own = fromProvider
-        ? fromProvider(toLocalIso(date), { unit: "day", source: "dateMark", locale, weekday: false })
-        : "";
-      return own || formatDate(date, "medium", { locale });
-    },
-    [fromProvider, locale],
-  );
+  const day = useDayFormatter(undefined, localeProp);
+  return useCallback((value) => (toDate(value) ? day(value) : ""), [day]);
 }
 
-/** Call a callback that may throw or answer a promise, as a promise. */
-export function settle<T>(call: () => MaybePromise<T>): Promise<T | void> {
-  try {
-    return Promise.resolve(call());
-  } catch (error) {
-    return Promise.reject(error);
-  }
-}
+/** Call a callback that may throw or answer a promise, as a promise — the kit's one
+ *  (hooks/use-mounted), not a copy of it (0.52 code review, this file). */
+export { settle } from "../hooks/use-mounted";

package/src/admin/mail-test-card-labels.ts

@@ -2,7 +2,7 @@
 // catalogue (src/i18n/defaults.ts) imports them without the component, so `en` loads as one
 // chunk like the other languages (0.34, KS U8). ./mail-test-card re-exports them.
 
-import { englishRateLimited } from "../auth/auth-errors";
+import { englishRateLimited } from "../auth/auth-errors-labels";
 import type { MailTestCardLabels } from "./mail-test-card";
 
 /** docs/admin-harmonization.md §9.2.4, word for word. */

package/src/admin/plan-change-labels.ts

@@ -1,23 +1,5 @@
-// The English words of ./plan-change, in a module with no component code: the English
-// catalogue (src/i18n/defaults.ts) imports them without the component, so `en` loads as one
-// chunk like the other languages (0.34, KS U8). ./plan-change re-exports them.
-
-import type { PlanChangeLabels } from "./plan-change";
-
-export const DEFAULT_PLAN_CHANGE_LABELS: PlanChangeLabels = {
-  column: "Plan",
-  title: "Change plan",
-  confirm: "Change plan",
-  plan: "Plan",
-  current: (plan) => `Current plan: ${plan}`,
-  keepsItems: "A smaller plan only blocks creating more; nothing is deleted.",
-  until: "Free until",
-  untilHint: "Leave empty for no end. A running beta keeps its own end.",
-  needsChange: "Pick another plan or an end date.",
-  changed: (from, to) => `Plan changed from ${from} to ${to}.`,
-  set: (to) => `Plan set to ${to}.`,
-  keptBeta: "The beta keeps its end; only the plan changed.",
-  untilDone: (date) => `Free until ${date}.`,
-  overLimit: "Above the new plan’s limit: nothing is removed, new items are blocked.",
-  usageOf: (used, limit, dimension) => `${used} of ${limit} ${dimension}`,
-};
+// Moved to billing/plan-change-labels in 0.52 (refactor audit 2026-10-30, MOD-6): the
+// billing and admin folders imported each other through it. Kept so the old path still
+// answers; nothing in the kit imports it any more but the English catalogue.
+export { DEFAULT_PLAN_CHANGE_LABELS } from "../billing/plan-change-labels";
+export type { PlanChangeLabels } from "../billing/plan-change-labels";

package/src/admin/plan-change.tsx

@@ -18,7 +18,8 @@ import { AdminActionConfirm } from "./admin-action-confirm";
 import type { AdminActionConfirmValues } from "./admin-action-confirm";
 import { personLabel, useDayText } from "./admin-parts";
 import type { AdminPerson, MaybePromise } from "./admin-parts";
-import { DEFAULT_PLAN_CHANGE_LABELS } from "./plan-change-labels";
+import { DEFAULT_PLAN_CHANGE_LABELS } from "../billing/plan-change-labels";
+import type { PlanChangeLabels } from "../billing/plan-change-labels";
 
 /**
  * The operator's plan parts (docs/billing-harmonization.md §14.12, decision 27):
@@ -34,49 +35,11 @@ import { DEFAULT_PLAN_CHANGE_LABELS } from "./plan-change-labels";
  * whatever the billing switch says.
  */
 
-/** The `planChange` namespace: the column, the grant dialog and the result's lines. */
-export interface PlanChangeLabels {
-  /** The column's header: "Plan". */
-  column: string;
-  /** The dialog's title: "Change plan". */
-  title: string;
-  /** Its confirm button: "Change plan". */
-  confirm: string;
-  /** The plan select's label: "Plan". */
-  plan: string;
-  /** The line over the select: "Current plan: Free". */
-  current: (plan: string) => string;
-  /** Under the select — the fact that is not on the button. */
-  keepsItems: string;
-  /** The end of a free grant's field: "Free until". */
-  until: string;
-  /** Under it. */
-  untilHint: string;
-  /** Why the confirm is held while nothing would change. */
-  needsChange: string;
-  /** The result: the plan moved from one to another. */
-  changed: (from: string, to: string) => string;
-  /** The result: an account with no plan before, or the same plan again. */
-  set: (to: string) => string;
-  /** The result: a running beta kept its own end (§12.34); only the plan moved. */
-  keptBeta: string;
-  /** The result: the grant runs until `date` (formatted). */
-  untilDone: (date: string) => string;
-  /** The result: the account owns more than the new plan allows. */
-  overLimit: string;
-  /**
-   * The column's usage, spelled out (its tooltip): "1 of 5 budgets". Figures arrive
-   * formatted; `dimension` is the app's word, as `usage.label` gives it — since 0.33.1
-   * in the form the LIMIT takes when the label gives its plural forms ("1 of 1 budget",
-   * "1 of 5 budgets"): in every shipped language the word follows the limit, or heads
-   * the line in German, whose `von` would want a dative plural no app form carries
-   * ("Budgets: 1 von 5"). An override of yours gets the same word. Since 0.34 the grant
-   * dialog's usage line too, when `usage` comes as the column's shape.
-   */
-  usageOf: (used: string, limit: string, dimension: string) => string;
-}
-
-// Defined in ./plan-change-labels, which holds no component code (0.34, KS U8).
+// The words and their type live in billing/plan-change-labels, which holds no component
+// code (0.34, KS U8): PlanSwitchConfirm reads them too, and billing importing admin while
+// this module imports billing made the two folders import each other (refactor audit
+// 2026-10-30, MOD-6).
+export type { PlanChangeLabels };
 export { DEFAULT_PLAN_CHANGE_LABELS };
 
 /** A plan code as the parts compare it: lowercase (§12.16 — an older row's "FREE" is

package/src/admin/reviewer-scope-editor.tsx

@@ -8,6 +8,7 @@ import { CheckboxGroup } from "../components/checkbox-group";
 import type { CheckboxGroupOption } from "../components/checkbox-group";
 import { FormActions } from "../components/form-actions";
 import { Caption } from "../components/text";
+import { describeFailure } from "../lib/describe-failure";
 import { hasContent } from "../lib/presence";
 import type { MaybePromise } from "./admin-parts";
 import type { CommitScope } from "../components/write-lock";
@@ -165,7 +166,7 @@ export function ReviewerScopeEditor({
     try {
       result = onSave(scope);
     } catch (error) {
-      setFailure(describeError?.(error) ?? labels.failed);
+      setFailure(describeFailure(describeError?.(error), labels.failed));
       return;
     }
     if (!result || typeof result.then !== "function") return;
@@ -174,8 +175,7 @@ export function ReviewerScopeEditor({
       () => setPending(false),
       (error: unknown) => {
         setPending(false);
-        const own = describeError?.(error);
-        setFailure(hasContent(own) ? own : labels.failed);
+        setFailure(describeFailure(describeError?.(error), labels.failed));
       },
     );
   };

package/src/auth/auth-errors-labels.ts

@@ -0,0 +1,23 @@
+// The English of every `rateLimited` label, in a module with no component code and no
+// error probing: the English catalogue (src/i18n/defaults.ts) reaches it through nine
+// `*-labels.ts` modules, and until 0.52 that pulled `auth/auth-errors` — and since MOD-6
+// its `lib/http-status` — into the `en` chunk (refactor audit 2026-10-30, MOD-6).
+// auth/auth-errors re-exports both.
+
+/**
+ * The English of every `rateLimited` label (0.30.0): "Too many attempts. Try again in
+ * 30 s." with a wait under a minute, in whole minutes from one minute up (keksdose's
+ * reset throttle answers in hours, and "3600 s" is a number nobody reads), and "Wait a
+ * moment and try again." without one — or with a `0`.
+ *
+ * @internal The namespaces' English; not part of the barrel.
+ */
+export function englishRateLimited(seconds?: number): string {
+  if (!seconds || seconds <= 0) return "Too many attempts. Wait a moment and try again.";
+  return `Too many attempts. Try again in ${englishWait(seconds)}.`;
+}
+
+/** "30 s", "2 min" — a wait in English, rounded up. @internal */
+export function englishWait(seconds: number): string {
+  return seconds < 60 ? `${Math.ceil(seconds)} s` : `${Math.ceil(seconds / 60)} min`;
+}

package/src/auth/auth-errors.ts

@@ -1,3 +1,5 @@
+import { httpStatusOf } from "../lib/http-status";
+
 /**
  * The coded refusals of sign-in and sign-up (docs/auth-harmonization.md §5.2): every
  * refusal the auth routes answer carries a machine-readable `code`, and the pages
@@ -274,29 +276,13 @@ export function errorBodyWithCode(
   return undefined;
 }
 
-/** An HTTP status as a number, or undefined. */
-function statusOf(value: unknown): number | undefined {
-  return typeof value === "number" && Number.isInteger(value) ? value : undefined;
-}
-
 /**
- * The HTTP status a thrown error carries, wherever the apps' HTTP clients put it —
- * without depending on any of them:
- *
- *  1. `err.response.status` — axios (all three apps' clients);
- *  2. `err.status` — ofetch's `FetchError`, the generated OpenAPI clients' `ApiError`, and
- *     a `Response` thrown as it came;
- *  3. `err.statusCode` — ofetch's alias, and Node-style errors.
- *
- * `undefined` when none is a whole number. Package-private — not re-exported from the
- * barrel; {@link isRateLimited} and the session refresh's classifier read it (DUP-11,
- * refactor audit 2026-10: the refresh carried its own copy of this probe).
+ * The HTTP status a thrown error carries ({@link httpStatusOf}): axios'
+ * `response.status`, then `status`, then `statusCode`. Lives in `lib/http-status.ts`
+ * since 0.52 (refactor audit 2026-10-30, MOD-6); re-exported here for the modules that
+ * import it from auth. Package-private — not re-exported from the barrel.
  */
-export function httpStatusOf(err: unknown): number | undefined {
-  if (!isBag(err)) return undefined;
-  const response = err.response;
-  return (isBag(response) ? statusOf(response.status) : undefined) ?? statusOf(err.status) ?? statusOf(err.statusCode);
-}
+export { httpStatusOf };
 
 /**
  * Whether `err` is a throttled request — HTTP `429 Too Many Requests` (0.30.0, from the
@@ -378,20 +364,7 @@ export function retryAfterSeconds(err: unknown, now: number | Date = Date.now())
   return value === undefined ? undefined : parseRetryAfter(value, at);
 }
 
-/**
- * The English of every `rateLimited` label (0.30.0): "Too many attempts. Try again in
- * 30 s." with a wait under a minute, in whole minutes from one minute up (keksdose's
- * reset throttle answers in hours, and "3600 s" is a number nobody reads), and "Wait a
- * moment and try again." without one — or with a `0`.
- *
- * @internal The namespaces' English; not part of the barrel.
- */
-export function englishRateLimited(seconds?: number): string {
-  if (!seconds || seconds <= 0) return "Too many attempts. Wait a moment and try again.";
-  return `Too many attempts. Try again in ${englishWait(seconds)}.`;
-}
-
-/** "30 s", "2 min" — a wait in English, rounded up. @internal */
-export function englishWait(seconds: number): string {
-  return seconds < 60 ? `${Math.ceil(seconds)} s` : `${Math.ceil(seconds / 60)} min`;
-}
+// The English of the `rateLimited` labels, in auth-errors-labels since 0.52: the English
+// catalogue reached this module for them, and with it `lib/http-status` (refactor audit
+// 2026-10-30, MOD-6). Re-exported for the modules that import them from here.
+export { englishRateLimited, englishWait } from "./auth-errors-labels";

package/src/auth/complete-name-dialog.tsx

@@ -2,6 +2,7 @@ import { useContext, useEffect, useId, useRef, useState } from "react";
 import type { ReactNode } from "react";
 
 import { useKitLabels, type LabelOverride } from "../i18n/kit-labels";
+import { describeFailure } from "../lib/describe-failure";
 import { usePromisePending } from "../components/danger-confirm";
 import { DialogFrame } from "../components/dialog-frame";
 import { ModalCloseContext } from "../components/modal";
@@ -153,7 +154,9 @@ export function CompleteNameDialog({
     setFailed(false);
   };
 
-  const message = failed ? (error ?? labels.failed) : undefined;
+  // An app's `failed && words` before it has words is `false`, which `??` kept (refactor
+  // audit 2026-10-30, DUP-14): the kit's sentence unless the app's says something.
+  const message = failed ? describeFailure(error, labels.failed) : undefined;
 
   return (
     <DialogFrame

package/src/auth/forgot-password-form-labels.ts

@@ -3,7 +3,7 @@
 // loads as one chunk like the other languages (0.34, KS U8). ./forgot-password-form
 // re-exports them.
 
-import { englishRateLimited } from "./auth-errors";
+import { englishRateLimited } from "./auth-errors-labels";
 import type { ForgotPasswordLabels } from "./forgot-password-form";
 
 /** `Required`: every key, the 0.30 one included, has its English here. */

package/src/auth/forgot-password-form.tsx

@@ -2,13 +2,15 @@ import { useId, useRef, useState } from "react";
 import type { ComponentPropsWithRef, FormEvent, ReactNode } from "react";
 import { MailCheck } from "lucide-react";
 import { cn } from "../lib/cn";
+import { describeFailure } from "../lib/describe-failure";
 import { useKitLabels, type LabelOverride } from "../i18n/kit-labels";
 import { AlertBanner } from "../components/alert-banner";
 import { TextLink } from "../components/text-link";
 import { Button } from "../components/button";
 import { Input } from "../components/input";
 import { isRateLimited, retryAfterSeconds } from "./auth-errors";
-import { FORM_HEADING_CLASS, INTRO_CLASS, OutcomeMessage, isThenable, useFocusWhen } from "./status-parts";
+import { isThenable } from "../lib/thenable";
+import { FORM_HEADING_CLASS, INTRO_CLASS, OutcomeMessage, useFocusWhen } from "./status-parts";
 import type { AuthHeadingLevel } from "./status-parts";
 import { DEFAULT_FORGOT_PASSWORD_LABELS } from "./forgot-password-form-labels";
 
@@ -146,12 +148,15 @@ export function ForgotPasswordForm({
     );
   }
 
-  // The app's words first, then the throttle's, then the kit's catch-all.
+  // The app's words first, then the throttle's, then the kit's catch-all — an app's ""
+  // is no words (refactor audit 2026-10-30, DUP-14: `??` drew an empty alert).
   const failureFor = (error: unknown): ReactNode =>
-    describeError?.(error) ??
-    (isRateLimited(error)
-      ? (labels.rateLimited ?? DEFAULT_FORGOT_PASSWORD_LABELS.rateLimited)(retryAfterSeconds(error))
-      : labels.error);
+    describeFailure(
+      describeError?.(error),
+      isRateLimited(error)
+        ? (labels.rateLimited ?? DEFAULT_FORGOT_PASSWORD_LABELS.rateLimited)(retryAfterSeconds(error))
+        : labels.error,
+    );
 
   const submit = (e: FormEvent) => {
     e.preventDefault();