@eifi1/ui-kit 0.54.0 → 0.55.0

package/src/account/data-export-setting-labels.ts

@@ -1,20 +0,0 @@
-// The English words of ./data-export-setting, in a module with no component code: the
-// English catalogue (src/i18n/defaults.ts) imports them without the component, so `en`
-// loads as one chunk like the other languages (0.34, KS U8). ./data-export-setting
-// re-exports them.
-
-import { englishWait } from "../auth/auth-errors-labels";
-import type { DataExportLabels } from "./data-export-setting";
-
-export const DEFAULT_DATA_EXPORT_LABELS: DataExportLabels = {
-  title: "Export your data",
-  description: "Download a copy of your account’s data as a JSON file.",
-  download: "Download my data",
-  started: "Your download has started.",
-  saveAgain: "Didn’t start? Save the file",
-  rateLimited: (seconds) =>
-    seconds && seconds > 0
-      ? `You exported your data a moment ago. Try again in ${englishWait(seconds)}.`
-      : "You exported your data a moment ago. Please try again in a minute.",
-  failed: "The export failed. Please try again.",
-};

package/src/account/data-export-setting.tsx

@@ -1,200 +0,0 @@
-import { useEffect, useState } from "react";
-import type { ComponentPropsWithRef, ReactNode } from "react";
-import { Download } from "lucide-react";
-
-import { useKitLabels, type LabelOverride } from "../i18n/kit-labels";
-import { cn } from "../lib/cn";
-import { clickDownload } from "../lib/download";
-import { AlertBanner } from "../components/alert-banner";
-import { hasContent } from "../lib/presence";
-import { TextLink } from "../components/text-link";
-import { Button } from "../components/button";
-import { Card } from "../components/card";
-import { isRateLimited, retryAfterSeconds } from "../auth/auth-errors";
-import { CARD_DESCRIPTION_CLASS, settle, useMounted } from "./account-parts";
-import { SettingsCardTitle } from "../settings/settings-heading";
-import { DEFAULT_DATA_EXPORT_LABELS } from "./data-export-setting-labels";
-
-/* ── Labels ──────────────────────────────────────────────────────────────── */
-
-/** Every string {@link DataExportSetting} renders — the `dataExport` namespace of
- *  `<UiKitProvider labels>`, overridable per instance through `labels`. */
-export interface DataExportLabels {
-  /** The card's title. */
-  title: string;
-  /** What the download is. The app's own sentence (`description`) follows it. */
-  description: string;
-  /** The button. */
-  download: string;
-  /** Said once the file was handed to the browser. */
-  started: string;
-  /** The link under it that saves the same file again, for a browser that held the
-   *  download back. */
-  saveAgain: string;
-  /** The export was throttled — HTTP 429 (§6.5: once a minute) — given its
-   *  `Retry-After` wait in seconds, or `undefined` without one. */
-  rateLimited: (seconds?: number) => string;
-  /** Any other failure. */
-  failed: string;
-}
-
-// Defined in ./data-export-setting-labels, which holds no component code (0.34, KS U8).
-export { DEFAULT_DATA_EXPORT_LABELS };
-
-/* ── Props ───────────────────────────────────────────────────────────────── */
-
-/**
- * What {@link DataExportSettingProps.onExport} resolves with: the file itself — a `Blob`
- * (axios' `responseType: "blob"`, `await res.blob()`) — or a URL the browser fetches
- * itself (a signed link), with the file name to save it under.
- */
-export type DataExportFile = Blob | { url: string; filename?: string };
-
-export interface DataExportSettingProps extends Omit<ComponentPropsWithRef<"div">, "children"> {
-  /**
-   * Fetch the export (`GET /auth/me/export`, §6.5). Resolve with the file — the card
-   * saves it under `filename` — or reject with the client's error: a 429 (the export is
-   * throttled to once a minute) says `rateLimited`, anything else (a demo account's 403)
-   * goes through `describeError`, else `failed`.
-   */
-  onExport: () => Promise<DataExportFile>;
-  /**
-   * The app's sentence under the kit's — what the export holds and what it doesn't.
-   * kastlan's: "Your account; your company's records are your company's, ask them."
-   */
-  description?: ReactNode;
-  /** The name the file is saved under. Default `account-export-YYYY-MM-DD.json` (the
-   *  local day); a `{ url, filename }` answer's own name wins. */
-  filename?: string;
-  /** The app's own words for a failure, or `undefined` for the kit's. Asked first. */
-  describeError?: (error: unknown) => ReactNode | undefined;
-  labels?: LabelOverride<DataExportLabels>;
-}
-
-interface Saved {
-  href: string;
-  filename: string;
-  /** An object URL of ours, revoked when it is replaced or the card goes. */
-  owned: boolean;
-}
-
-/** `account-export-2026-10-07.json`, the local day — the one a person looks for. */
-function defaultFilename(now = new Date()): string {
-  const pad = (n: number) => String(n).padStart(2, "0");
-  return `account-export-${now.getFullYear()}-${pad(now.getMonth() + 1)}-${pad(now.getDate())}.json`;
-}
-
-/** A `{ url }` answer, as opposed to a Blob or anything else. */
-function isUrlAnswer(value: unknown): value is { url: string; filename?: string } {
-  return typeof value === "object" && value !== null && typeof (value as { url?: unknown }).url === "string";
-}
-
-/**
- * The account's data as a download (docs/user-admin-harmonization.md §6.5, §2.2): what it
- * is, the app's sentence on what it holds, and one button.
- *
- * **The kit saves the file.** `onExport` fetches it — the request is the app's, with its
- * auth (auth §8) — and resolves with a `Blob` or a `{ url }`; the card hands it to the
- * browser through a link with a `download` name, so it lands as `account-export-….json`
- * rather than opening as a page of JSON. A `Blob` becomes an object URL, revoked when
- * the next export replaces it or the card unmounts.
- *
- * The click comes after an `await`, which some browsers count as no longer the
- * person's: "Didn't start? Save the file" stays under the confirmation, a real link to
- * the same file that the person clicks themselves.
- *
- * **The throttle** (once a minute, §6.5) is a 429, said as such; the app's
- * `describeError` comes first (keksdose's demo account answers 403).
- */
-export function DataExportSetting({
-  onExport,
-  description,
-  filename,
-  describeError,
-  labels: labelsProp,
-  className,
-  ...rest
-}: DataExportSettingProps) {
-  const labels = useKitLabels("dataExport", DEFAULT_DATA_EXPORT_LABELS, labelsProp);
-  const [busy, setBusy] = useState(false);
-  const [saved, setSaved] = useState<Saved | null>(null);
-  const [failure, setFailure] = useState<ReactNode>(null);
-  const mounted = useMounted();
-
-  // Our object URL lives as long as the "Save the file" link that points at it.
-  useEffect(() => {
-    if (!saved?.owned) return;
-    const href = saved.href;
-    return () => URL.revokeObjectURL(href);
-  }, [saved]);
-
-  const run = () => {
-    if (busy) return;
-    setBusy(true);
-    setFailure(null);
-    // The last file's link goes (and its object URL with it): it would sit beside this
-    // export's answer as if it were it.
-    setSaved(null);
-    settle(onExport).then(
-      (answer) => {
-        if (!mounted.current) return;
-        setBusy(false);
-        let next: Saved;
-        if (answer instanceof Blob) {
-          next = { href: URL.createObjectURL(answer), filename: filename ?? defaultFilename(), owned: true };
-        } else if (isUrlAnswer(answer)) {
-          next = { href: answer.url, filename: answer.filename ?? filename ?? defaultFilename(), owned: false };
-        } else {
-          // Nothing to save: an app that resolved with its response object, say.
-          setFailure(labels.failed);
-          return;
-        }
-        setSaved(next);
-        // The click alone, not `saveBlob`: the object URL is the card's to revoke, since
-        // the "Save the file" link below points at it for as long as it is shown.
-        clickDownload(next.href, next.filename);
-      },
-      (error: unknown) => {
-        if (!mounted.current) return;
-        setBusy(false);
-        const own = describeError?.(error);
-        setFailure(
-          hasContent(own) ? own : isRateLimited(error) ? labels.rateLimited(retryAfterSeconds(error)) : labels.failed,
-        );
-      },
-    );
-  };
-
-  return (
-    <Card {...rest} className={cn("p-4 space-y-3", className)}>
-      <div className="space-y-1">
-        <SettingsCardTitle>{labels.title}</SettingsCardTitle>
-        <div className={CARD_DESCRIPTION_CLASS}>{labels.description}</div>
-        {hasContent(description) && <div className={CARD_DESCRIPTION_CLASS}>{description}</div>}
-      </div>
-      <div className="flex flex-wrap items-center gap-x-3 gap-y-2">
-        <Button type="button" variant="secondary" pending={busy} onClick={run}>
-          <Download aria-hidden className="size-4" />
-          {labels.download}
-        </Button>
-        {/* Always in the tree, so the confirmation that appears in it is announced; in
-            the button's row, so an empty one takes no line of its own. */}
-        <span role="status" className="text-xs text-secondary">
-          {saved && (
-            <>
-              {labels.started}{" "}
-              <TextLink href={saved.href} download={saved.filename} reloadDocument tone="secondary">
-                {labels.saveAgain}
-              </TextLink>
-            </>
-          )}
-        </span>
-      </div>
-      {hasContent(failure) && (
-        <AlertBanner tone="danger" size="sm" role="alert">
-          {failure}
-        </AlertBanner>
-      )}
-    </Card>
-  );
-}

package/src/account/delete-account-setting-labels.ts

@@ -1,33 +0,0 @@
-// The English words of ./delete-account-setting, in a module with no component code: the
-// English catalogue (src/i18n/defaults.ts) imports them without the component, so `en`
-// loads as one chunk like the other languages (0.34, KS U8). ./delete-account-setting
-// re-exports them.
-
-import { englishRateLimited } from "../auth/auth-errors-labels";
-import type { DeleteAccountLabels } from "./delete-account-setting";
-
-export const DEFAULT_DELETE_ACCOUNT_LABELS: DeleteAccountLabels = {
-  title: "Delete account",
-  afterDays: (days) =>
-    days === 1
-      ? "Your account is deactivated at once and erased for good 1 day later."
-      : `Your account is deactivated at once and erased for good ${days} days later.`,
-  operator: "Your account is deactivated at once, and an operator will erase it for good.",
-  arm: "Delete account…",
-  prompt: "You will be signed out on every device, and your account can no longer be used.",
-  handOver: (count) =>
-    count === 1
-      ? "1 item others can see will pass to an administrator."
-      : `${count} items others can see will pass to an administrator.`,
-  confirm: "Delete my account",
-  done: "Your account is deactivated. You are being signed out.",
-  wrongPassword: "The password is incorrect.",
-  confirmationMismatch: "This is not your account’s address.",
-  lastAdmin: "You are the last administrator. Make someone else an administrator first.",
-  lastAdminOf: (companies) =>
-    `You are the last administrator of ${companies}. Make someone else an administrator there first.`,
-  householdHasMembers:
-    "Your household has other members, so the account can’t be deleted here. Please write to the operator.",
-  rateLimited: englishRateLimited,
-  failed: "Your account could not be deleted. Please try again.",
-};

package/src/account/delete-account-setting.tsx

@@ -1,342 +0,0 @@
-import { isValidElement, useRef, useState } from "react";
-import type { ComponentPropsWithRef, ReactNode } from "react";
-import { UserX } from "lucide-react";
-
-import { useKitLabels, useKitLocale, type LabelOverride } from "../i18n/kit-labels";
-import { cn } from "../lib/cn";
-import { AlertBanner } from "../components/alert-banner";
-import { hasContent } from "../lib/presence";
-import {
-  CurrentPasswordInput,
-  DangerConfirm,
-  DEFAULT_DANGER_CONFIRM_LABELS,
-  TypedConfirmField,
-  typedMatches,
-} from "../components/danger-confirm";
-import type { DangerConsequence } from "../components/danger-confirm";
-import { Card } from "../components/card";
-import { authErrorCode, isRateLimited, retryAfterSeconds } from "../auth/auth-errors";
-import { useFocusWhen } from "../auth/status-parts";
-import { CARD_DESCRIPTION_CLASS, refusalCompanies, settle, useMounted } from "./account-parts";
-import { SettingsCardTitle } from "../settings/settings-heading";
-import { COMMIT_EXCEPT_BILLING } from "../components/write-lock";
-import { DEFAULT_DELETE_ACCOUNT_LABELS } from "./delete-account-setting-labels";
-
-/* ── Labels ──────────────────────────────────────────────────────────────── */
-
-/**
- * Every string {@link DeleteAccountSetting} renders — the `deleteAccount` namespace of
- * `<UiKitProvider labels>`, overridable per instance through `labels`. The confirm's
- * Cancel, "Password" and "Type … to confirm" are `dangerConfirm`'s.
- */
-export interface DeleteAccountLabels {
-  /** The card's title. */
-  title: string;
-  /** Mode `after_days`, given the days: what happens and when. */
-  afterDays: (days: number) => string;
-  /** Mode `operator`: what happens, and who erases it. */
-  operator: string;
-  /** The button that opens the confirm. */
-  arm: string;
-  /** The confirm's warning, over the consequences. */
-  prompt: string;
-  /** The line in the consequences when `handOverCount` is given (Kurvenschmiede, §2.7),
-   *  given the count. */
-  handOver: (count: number) => string;
-  /** The button that sends it. */
-  confirm: string;
-  /** Said once the request is accepted — the app signs out next. */
-  done: string;
-  /** `password_incorrect` (server-kit's `400` for a wrong current password), under the
-   *  password field. */
-  wrongPassword: string;
-  /** `confirmation_mismatch` — the server did not take the typed address as the
-   *  account's — under the address field. */
-  confirmationMismatch: string;
-  /** `last_admin` — the account is the last active admin. */
-  lastAdmin: string;
-  /** `last_admin` naming the companies (kastlan checks per company), given them as one
-   *  list in the reader's language ("Example AG and Sample GmbH"). */
-  lastAdminOf: (companies: string) => string;
-  /** `household_has_members` — keksdose's guard (§6.4). */
-  householdHasMembers: string;
-  /** A request was throttled — HTTP 429 — given its `Retry-After` wait in seconds, or
-   *  `undefined` without one. */
-  rateLimited: (seconds?: number) => string;
-  /** Any other failure. */
-  failed: string;
-}
-
-// Defined in ./delete-account-setting-labels, which holds no component code (0.34, KS U8).
-export { DEFAULT_DELETE_ACCOUNT_LABELS };
-
-/* ── Props ───────────────────────────────────────────────────────────────── */
-
-/** What happens after the deactivation (§2.1, §6.4) — the app's setting. */
-export type DeletionMode = "after_days" | "operator";
-
-/** What {@link DeleteAccountSettingProps.onRequest} gets: the `POST /auth/me/deletion`
- *  body. */
-export interface DeleteAccountValues {
-  /** As typed. */
-  password: string;
-  /** The address as TYPED, trimmed — the server re-checks it against the account
-   *  (server-kit's `confirm_email_matches`), as keksdose's admin actions do. */
-  confirmEmail: string;
-}
-
-/** One line of the consequences: a node of the app's, or a {@link DangerConsequence}
- *  for a key of its own and the `severe` mark. */
-export type DeleteAccountConsequence = ReactNode | DangerConsequence;
-
-export interface DeleteAccountSettingProps extends Omit<ComponentPropsWithRef<"div">, "children"> {
-  /** The account's address — the text to type. */
-  email: string;
-  /** `"after_days"` (keksdose, Kurvenschmiede: erased by a scheduled job) or
-   *  `"operator"` (kastlan: company data is involved, an operator erases it). */
-  mode: DeletionMode;
-  /** With `after_days`: how many. Default 30 (§2.1). */
-  days?: number;
-  /**
-   * What goes, in the app's words (§6.4: "the app's own list") — derived from the
-   * account's own facts where it can be: keksdose's "Budget X will be deleted; its 2
-   * guests are told", rather than the worst case for everybody.
-   */
-  consequences?: readonly DeleteAccountConsequence[];
-  /** Kurvenschmiede (§2.7): how many owned items others can see — they pass to the
-   *  first active admin at erasure. A line of its own in the consequences; 0 or left
-   *  out, none. */
-  handOverCount?: number;
-  /**
-   * The confirm was answered: send `POST /auth/me/deletion {password, confirm_email}`.
-   * Resolve once it is accepted — the card says "You are being signed out" — and then
-   * sign the user out: the server ended every session with the deactivation. Reject
-   * with the client's error: `password_incorrect` under the password,
-   * `confirmation_mismatch` under the address, `last_admin` (with kastlan's
-   * `companies`) and `household_has_members` above the buttons, a 429 as
-   * `rateLimited`, anything else (a demo account's 403, an app's own code) through
-   * `describeError`, else `failed`. The confirm stays open with what was typed, for a
-   * retry.
-   */
-  onRequest: (values: DeleteAccountValues) => Promise<unknown> | void;
-  /** The app's own words for a failure, or `undefined` for the kit's. Asked first, for
-   *  every failure — kastlan's `last_admin` names the companies. */
-  describeError?: (error: unknown) => ReactNode | undefined;
-  labels?: LabelOverride<DeleteAccountLabels>;
-}
-
-/** Whether an item is a `{ text }` line rather than a node — a React element is an
- *  object too, and so would a `{ text }` lookalike be, so the element test comes first. */
-function isConsequence(item: DeleteAccountConsequence): item is DangerConsequence {
-  return typeof item === "object" && item !== null && !isValidElement(item) && "text" in item;
-}
-
-/**
- * Deleting one's own account (docs/user-admin-harmonization.md §6.4, §2.1): what it does,
- * the password, the typed address — then the app signs out.
- *
- * **Two stages, said before the button.** The request DEACTIVATES the account at once
- * (no sign-in, every session ended, marked for deletion); the erasure follows per the
- * app's `mode` — "erased for good 30 days later" (`after_days`, a scheduled job) or "an
- * operator will erase it" (`operator`, kastlan, where company records are involved).
- * The sentence is under the title, so it is read before anything is pressed.
- *
- * **The confirm is a {@link DangerConfirm}** with the two guards of every "type the
- * address" rule in the apps: the address typed (compared caseless, as in all of them)
- * and the password. They are the tile's own {@link TypedConfirmField} and
- * {@link CurrentPasswordInput}, drawn in its fields slot and held by
- * `confirmDisabledReason` with the tile's own sentences, rather than its built-in
- * `phrase` / `requirePassword` — those share ONE `error` (0.54, under the password), and
- * this card's refusals go to two fields: a wrong password under the password, a
- * mismatched address under the address. Its consequences are the app's list, plus
- * Kurvenschmiede's hand-over line (`handOverCount`, §2.7: shared work goes to an
- * administrator, never a refusal). The typed address goes to `onRequest` as typed, so
- * the server re-checks it (`confirm_email_matches`).
- *
- * **Refusals** (§6.4) are read by code ({@link authErrorCode}): `password_incorrect` (a
- * `400`, so an app's 401 handling never signs the person out over a typo) under the
- * password, `confirmation_mismatch` under the address, `last_admin` — naming kastlan's
- * companies when the answer lists them — and keksdose's `household_has_members` guard
- * above the buttons; a 429; and the rest in the app's words. The confirm stays open with
- * what was typed, for a retry; Cancel wipes it.
- *
- * **After success** the card says the account is deactivated and the person is being
- * signed out — the app's to do, since the kit sends nothing (auth §8).
- *
- * **Under a write lock** the confirm is a `commit` exempt from billing
- * (`COMMIT_EXCEPT_BILLING`, 0.33): leaving never depends on paying
- * (docs/billing-harmonization.md decision 14, §12.36); a demo's lock still holds it.
- */
-export function DeleteAccountSetting({
-  email,
-  mode,
-  days = 30,
-  consequences,
-  handOverCount,
-  onRequest,
-  describeError,
-  labels: labelsProp,
-  className,
-  ...rest
-}: DeleteAccountSettingProps) {
-  const labels = useKitLabels("deleteAccount", DEFAULT_DELETE_ACCOUNT_LABELS, labelsProp);
-  // The guards speak the tile's words, so "Type “…” to confirm" and "Enter your password
-  // to confirm" are translated once, in `dangerConfirm`.
-  const guardLabels = useKitLabels("dangerConfirm", DEFAULT_DANGER_CONFIRM_LABELS);
-  const locale = useKitLocale();
-  const [typed, setTyped] = useState("");
-  const [password, setPassword] = useState("");
-  const [busy, setBusy] = useState(false);
-  const [fieldError, setFieldError] = useState<"email" | "password" | null>(null);
-  const [failure, setFailure] = useState<ReactNode>(null);
-  const [done, setDone] = useState(false);
-  const mounted = useMounted();
-  const typedRef = useRef<HTMLInputElement>(null);
-  const passwordRef = useRef<HTMLInputElement>(null);
-  const doneRef = useRef<HTMLDivElement>(null);
-  // The tile went with the press; the answer takes the focus, so it is read out.
-  useFocusWhen(done, doneRef);
-
-  const modeSentence = mode === "operator" ? labels.operator : labels.afterDays(days);
-
-  const lines: (string | DangerConsequence)[] = (consequences ?? [])
-    // `{cond && "…"}` lines that came out empty are no lines.
-    .filter((item) => item !== null && item !== undefined && item !== false && item !== "")
-    .map((item, index) => (isConsequence(item) ? item : { key: `app-${index}`, text: item }));
-  if (handOverCount !== undefined && handOverCount > 0) {
-    lines.push({ key: "hand-over", text: labels.handOver(handOverCount) });
-  }
-
-  // The first guard still open, in the order the fields are drawn — DangerConfirm's rule.
-  const held = !typedMatches(typed, email, "caseless")
-    ? typeof guardLabels.needsPhrase === "function"
-      ? guardLabels.needsPhrase(email)
-      : guardLabels.needsPhrase
-    : password === ""
-      ? guardLabels.needsPassword
-      : undefined;
-
-  const present = (error: unknown) => {
-    const own = describeError?.(error);
-    if (hasContent(own)) {
-      setFailure(own);
-      return;
-    }
-    if (isRateLimited(error)) {
-      setFailure(labels.rateLimited(retryAfterSeconds(error)));
-      return;
-    }
-    const code = authErrorCode(error);
-    // `invalid_credentials` too, for a server that answered a wrong password so before
-    // server-kit 0.4.0 named `password_incorrect`.
-    if (code === "password_incorrect" || code === "invalid_credentials") {
-      setFieldError("password");
-      passwordRef.current?.focus();
-      return;
-    }
-    if (code === "confirmation_mismatch" || code === "confirmation_required") {
-      setFieldError("email");
-      typedRef.current?.focus();
-      return;
-    }
-    if (code === "last_admin") {
-      const companies = refusalCompanies(error);
-      setFailure(
-        companies
-          ? labels.lastAdminOf(new Intl.ListFormat(locale, { type: "conjunction" }).format(companies))
-          : labels.lastAdmin,
-      );
-      return;
-    }
-    setFailure(code === "household_has_members" ? labels.householdHasMembers : labels.failed);
-  };
-
-  const confirm = () => {
-    setFailure(null);
-    setFieldError(null);
-    setBusy(true);
-    const values: DeleteAccountValues = { password, confirmEmail: typed.trim() };
-    return settle(() => onRequest(values)).then(
-      () => {
-        if (!mounted.current) return;
-        setBusy(false);
-        setDone(true);
-      },
-      (error: unknown) => {
-        if (mounted.current) {
-          setBusy(false);
-          present(error);
-        }
-        // Rejected again, so DangerConfirm stays armed with what was typed.
-        throw error;
-      },
-    );
-  };
-
-  // A disarmed tile holds no password — DangerConfirm's own rule, for the fields it
-  // does not own here.
-  const disarmed = (armed: boolean) => {
-    if (armed) return;
-    setTyped("");
-    setPassword("");
-    setFieldError(null);
-    setFailure(null);
-  };
-
-  return (
-    <Card {...rest} data-state={done ? "done" : "form"} tone="danger" className={cn("p-4 space-y-3", className)}>
-      <div>
-        <SettingsCardTitle>{labels.title}</SettingsCardTitle>
-        <div className={CARD_DESCRIPTION_CLASS}>{modeSentence}</div>
-      </div>
-      {done ? (
-        <div ref={doneRef} tabIndex={-1} role="status" className="flex items-start gap-2 text-sm outline-none">
-          <UserX aria-hidden className="mt-0.5 size-4 shrink-0 text-muted" />
-          <span>{labels.done}</span>
-        </div>
-      ) : (
-        <>
-          <DangerConfirm
-            commit={COMMIT_EXCEPT_BILLING}
-            armLabel={labels.arm}
-            prompt={labels.prompt}
-            consequences={lines}
-            confirmLabel={labels.confirm}
-            confirmDisabledReason={held}
-            busy={busy}
-            onArmedChange={disarmed}
-            onConfirm={confirm}
-          >
-            <TypedConfirmField
-              ref={typedRef}
-              target={email}
-              match="caseless"
-              value={typed}
-              onValueChange={(next) => {
-                setTyped(next);
-                if (fieldError === "email") setFieldError(null);
-              }}
-              error={fieldError === "email" ? labels.confirmationMismatch : undefined}
-              busy={busy}
-            />
-            <CurrentPasswordInput
-              ref={passwordRef}
-              value={password}
-              onValueChange={(next) => {
-                setPassword(next);
-                if (fieldError === "password") setFieldError(null);
-              }}
-              error={fieldError === "password" ? labels.wrongPassword : undefined}
-              busy={busy}
-            />
-          </DangerConfirm>
-          {hasContent(failure) && (
-            <AlertBanner tone="danger" size="sm" role="alert">
-              {failure}
-            </AlertBanner>
-          )}
-        </>
-      )}
-    </Card>
-  );
-}

package/src/account/email-change-setting-labels.ts

@@ -1,31 +0,0 @@
-// The English words of ./email-change-setting, in a module with no component code: the
-// English catalogue (src/i18n/defaults.ts) imports them without the component, so `en`
-// loads as one chunk like the other languages (0.34, KS U8). ./email-change-setting
-// re-exports them.
-
-import { englishRateLimited } from "../auth/auth-errors-labels";
-import type { EmailChangeLabels } from "./email-change-setting";
-
-export const DEFAULT_EMAIL_CHANGE_LABELS: EmailChangeLabels = {
-  title: "Email address",
-  current: "Current address",
-  newEmail: "New email address",
-  password: "Current password",
-  passwordHint: "Your address is how you sign in, so changing it takes your password.",
-  emailTagUse: (address) => `Use ${address}`,
-  emailTagHint:
-    "Many providers deliver name+tag@… to the same inbox, so mail from this app is easy to filter and trace. Check yours does before you rely on it: you would sign in with the tagged address.",
-  submit: "Change email address",
-  sameAsCurrent: "This is already your address.",
-  emailTaken: "An account with this email address already exists.",
-  wrongPassword: "The password is incorrect.",
-  pending: (newEmail) => `Confirm the link we sent to ${newEmail}.`,
-  pendingHint: (currentEmail) => `Until you do, you keep signing in with ${currentEmail}. Check your spam folder too.`,
-  resend: "Send the link again",
-  resent: "We sent the link again.",
-  cancel: "Cancel the change",
-  confirmed: (email) => `Your email address is now ${email}.`,
-  passkeyNote: "Your passkeys keep working. Your device may still list them under your old address.",
-  rateLimited: englishRateLimited,
-  failed: "That didn’t work. Please try again.",
-};