chore(release): 0.2.2

fix: update Nexus registry host
chore(release): 0.2.1
2026-09-19 15:04:33 +03:00 · 2026-09-19 14:51:25 +03:00 · 2026-09-18 08:12:21 +03:00 · 2026-09-17 20:53:03 +03:00 · 2026-09-17 20:41:12 +03:00 · 2026-09-16 20:08:51 +03:00
129 changed files with 15003 additions and 1645 deletions
@@ -1,23 +0,0 @@
-# Frontend router
-
-Читай строки, которые активирует задача, затронутый путь **или** обнаруженная
-граница. Объединяй совпадения; якорь разрешает чтение только нужного раздела.
-Не загружай все conventions из-за одного frontend-файла.
-
-| Решение / сигнал | Читать до решения |
-| --- | --- |
-| Создать/перенести module/component/slice; выбрать page/entity/feature/shared; cross-slice imports | [Architecture](conventions/frontend-architecture.md) |
-| Component/props, container/VM/view, form, local state/effect, loading/error/retry, Mantine/UI | [UI](conventions/frontend-ui.md) |
-| Только продуктовая строка или Zod message | [Строки](conventions/frontend-ui.md#строки-и-валидация) |
-| Только TS declaration/import/export | [Код](conventions/frontend-ui.md#код-и-components) |
-| query/mutation, shared/api, server state/cache, generated types, Bearer/refresh | [Data](conventions/frontend-data.md) |
-| Тесты или behavior с testing risk | [Testing](conventions/frontend-testing.md) |
-| Новый abstraction/dependency, refactor или неоднозначный scope | [Общий выбор реализации](../../docs/development/engineering-governance.md#выбор-реализации) |
-| Request/response field, route/status/error shape, OpenAPI snapshot/generated type | [Общий contract workflow](../../docs/development/runtime-openapi-verification.md) |
-| Login/refresh/logout, token/cookie, auth ownership | Data + [security](../../backend/.ai/conventions/security-auth.md) + Testing |
-| Storybook/theme/tokens/shared UI | UI + точные [источники](SOURCES.md) дизайн-системы/каталога |
-
-UI-only props/presentation требуют UI, без API/structure/testing при отсутствии
-их triggers. Показ query state не означает изменение data fetching.
-Изменение тестов активирует Testing и без production diff. Нужные project facts
-выбирай через SOURCES. Повтори routing при новой границе и по итоговому diff.
@@ -1,18 +0,0 @@
-# Источники frontend
-
-| Что нужно установить | Владелец |
-| --- | --- |
-| Какое implementation-решение принять | [CONVENTIONS](CONVENTIONS.md) |
-| HTTP wire contract и направление генерации | Backend runtime OpenAPI → [snapshot/types workflow](../../docs/development/runtime-openapi-verification.md) |
-| Error codes/validation/error envelope | [docs: HTTP API](../../docs/AI_INDEX.md#http-api) |
-| Auth/session, token storage и refresh | [docs: Security](../../docs/AI_INDEX.md#security) |
-| Значение Money, cached snapshot, account/position/income | [docs: Domain](../../docs/AI_INDEX.md#domain) |
-| Mantine/theme/tokens и существующие stories | [docs: UI](../../docs/AI_INDEX.md#ui) |
-| As-built behavior нужной feature | [docs: Features](../../docs/AI_INDEX.md#features) |
-| Существующие behavioral requirements, если нужны по задаче | [specs index](../../specs/AI_INDEX.md) |
-| Действующие versions/scripts/check scope | package.json, lockfile, Biome/TS/dependency configs |
-
-Открывай точный source только по возникшему вопросу. Code examples показывают
-pattern, но не переопределяют контракт. Specs не являются editable OpenAPI;
-SDD-процедура для обычной работы не нужна. При конфликте источников сначала
-установи факты, не меняй generated types или security policy по догадке.
@@ -0,0 +1,81 @@
+# Frontend architecture
+
+## Устройство и data flow
+
+React + TypeScript + Vite SPA. Router задаёт navigation; providers в `app`
+подключают auth, TanStack Query, i18n и Mantine. Vite использует React Compiler;
+Vitest — отдельную JSDOM конфигурацию. Точные versions/scripts — в
+[package.json](../package.json), реализация — source of truth.
+
+```text
+app → pages → features → entities → shared
+page container → page VM → entity/feature query → shared/api → backend /api/v1
+                         ↓
+                 props → state/section views
+```
+
+Server state и lifecycle запроса принадлежат TanStack Query; VM собирает данные
+для view. Transport — `openapi-fetch`/`openapi-react-query`, типизированные из
+предоставленного snapshot через `openapi-typescript`. Backend владеет wire
+contract; frontend не читает его checkout для генерации и не вызывает T-Bank.
+[Data convention](conventions/data.md) задаёт auth/cache границы.
+
+## Выбор владельца
+
+Сначала найди владельца поведения и ближайший пример. Расширяй existing slice,
+если ответственность остаётся связной. Размер файла или возможный будущий reuse
+не создают новую архитектурную границу.
+
+| Ответственность | Размещение |
+| --- | --- |
+| Bootstrap, глобальные providers, routes | `app` |
+| Композиция маршрута и поведение, нужное только этому экрану | `pages/<page>` |
+| Самостоятельная пользовательская возможность с собственным смыслом | `features/<capability>` |
+| Представление/поведение бизнес-сущности | `entities/<entity>` |
+| Переиспользуемый код без WealthLedger domain meaning | `shared` |
+
+Локальный FSD profile: `app → pages → features → entities → shared`, без `widgets`.
+Крупный уникальный блок остаётся в своей page. Form, mutation или click handler
+сами по себе не требуют feature. Два callers не делают domain helper generic shared.
+Slice именуется по ответственности, а не `helpers`, `hooks` или `types`.
+
+**Безопасный путь:** при сомнении оставь код у ближайшего допустимого owner.
+Извлекай его, когда появилась самостоятельная ответственность или реальный reuse.
+Не вводи новый layer и не обходи public API, чтобы устранить неудобный import.
+
+## Imports и public API
+
+Cross-slice consumer использует `@/` и `index.ts` владельца, например
+`@/entities/portfolio`. Alias Vite и TypeScript согласован. Другой slice не
+импортирует внутренний файл напрямую. Slices `pages`, `features`, `entities` не зависят от соседнего slice своего слоя;
+композиция принадлежит вышележащему owner. Existing меж-slice исключения
+не являются разрешением добавлять новые.
+
+Направление зависимостей и public imports частично проверяет
+`npm run deps`; Knip проверяет использование exports, а не смысл placement.
+
+## UI foundation
+
+`shared/theme/tokens.json` — переносимый source design tokens; `theme.ts`
+адаптирует доверенный JSON к Mantine без runtime schema. App и Storybook читают
+public API `shared/theme`. Storybook показывает synthetic presentation states,
+не использует application API. RTL/MSW проверяют поведение приложения отдельно.
+
+Existing route-aware AppShell расположен в shared/ui; это legacy placement,
+а не образец нового shared primitive. При изменении foundation прочитай
+[UI](conventions/ui.md#визуальная-основа) и [Storybook](conventions/storybook.md).
+
+## Примеры
+
+- Общая busy-область: существующий [LoadingSkeleton](../src/shared/ui/LoadingSkeleton.tsx), а не domain widget в shared.
+- Account-income state views: [страница](../src/pages/account-income/ui/AccountIncomePage.tsx) и её flat `components/*.view.tsx`; новый page-local filter остаётся здесь.
+- Portfolio query: [entity public API](../src/entities/portfolio/index.ts); новая UI-сводка с бизнес-смыслом не становится shared только из-за нескольких экранов.
+
+## Проверка
+
+После placement/import change: `npm run deps`, `npm run typecheck`, `npm run knip`;
+после собственного behavior — применимые tests. Финальный gate указан в AGENTS.
+Existing dependency config не запрещает все same-layer imports: их и смысл
+owner проверяет review. Не объявляй Steiger установленным; graph проверяет
+текущий dependency-cruiser. Review отдельно проверяет смысл owner: разрешённый dependency graph не доказывает
+правильный выбор слоя.
@@ -0,0 +1,85 @@
+# Frontend data
+
+## Выбор owner
+
+Server state принадлежит TanStack Query, form state — React Hook Form, локальное
+UI — React state. Не копируй успешный query result в useState/context для второго
+кэша. Domain-specific queries, keys и policies принадлежат вызывающему slice;
+общий transport — `shared/api`. Page VM выбирает inputs и собирает presentation data.
+
+Используй `apiClient`/`apiQueryClient` из shared public API. Прямой fetch в
+pages/features/entities и прямой T-Bank call запрещены. Сначала найди
+существующий query того же endpoint; расширяй его owner, не создавай второй key
+или глобальную query policy для одной страницы.
+
+## Типы и contract
+
+Backend-owned OpenAPI contract поступает во frontend как предоставленный
+актуальный snapshot; generated `schema.d.ts` производен от него. Тип
+request/response бери из generated `paths`, например:
+
+```ts
+type User = paths["/api/v1/auth/me"]["get"]["responses"][200]["content"]["application/json"];
+```
+
+Domain/UI type допустим, когда он отличается по смыслу, а не копирует transport DTO.
+Generated TS вручную не исправляется. Не добавляй параллельный fetch/axios
+client, runtime schema, hash/checksum registry или дополнительный drift checker
+без отдельной текущей потребности; existing OpenAPI flow уже владеет генерацией. Frontend-команды не читают соседний
+backend checkout и не проверяют backend runtime OpenAPI; изменение wire
+shape/status/route сохраняет
+публичный контракт предоставленного snapshot.
+Одна UI-модель не требует менять API. `openapi:generate` работает offline от snapshot;
+`openapi:check` генерирует во временный каталог и сравнивает, не меняя tracked files.
+
+## Auth и invalidation
+
+Bearer header принадлежит shared authenticated fetch; query/mutation не задают
+Authorization. Auth endpoints исключены из Bearer/retry middleware. Refresh
+координируется single-flight; после `401` с `UNAUTHORIZED` возможен один retry.
+Не добавляй собственный refresh/retry loop в caller.
+
+Protected queries используют existing session-aware boundary; logout очищает
+session-scoped cache. Access token хранится только в памяти, refresh передаётся
+httpOnly cookie с `credentials: include`. Не сохраняй tokens в localStorage,
+URL, логах или fixtures. Logout очищает локальную session/cache и при ошибке
+сети; до окончания auth bootstrap показывай neutral state. Перед auth change
+прочитай shared client, session owner и их tests.
+Успешная connection mutation коммитит подтверждённый status и сбрасывает financial
+GET subtree; ошибка mutation не меняет generation/cache. Это отдельная граница
+от обычного фонового refetch. Даже повторное сохранение того же token начинает
+новую generation; поздний ответ прежней generation не попадает в новый кэш.
+
+Mutations используют существующий generated client и query-key owner;
+после успеха обновляй/invalidируй только связанные данные. Optimistic update
+нужен конкретному UX и обязан иметь rollback/error behavior.
+
+Default focus refetch выключен; freshness и retry задаются существующими
+query options у entity/feature owner. После `staleTime` повторное открытие
+экрана может запустить background refetch; focus сам по себе его не запускает.
+При обычном refetch сохраняй Client Cached Snapshot, при session/connection
+смене не показывай данные прежнего владельца. UI presentation — в UI convention.
+
+## Errors
+
+Извлекай code через existing `apiErrorCode` из shared/api. Backend Problem
+Details code задаёт machine behavior; user-facing текст принадлежит i18n.
+Network/unknown error получает безопасное локальное сообщение и retry,
+не raw exception text. Input/domain failure сохраняет ввод и показывает
+ошибку у ответственного form/section owner; не маскируй её успешным результатом.
+
+Если одна группа API codes требует одинакового recovery в нескольких views,
+сведи классификацию у ближайшего общего owner. Не размножай magic comparisons
+и не объявляй закрытый frontend error enum: generated `code` пока `string`.
+Неизвестный новый code должен сохранять fallback. Рефакторинг существующих
+разных recovery paths требует behavior proof, а не общей обработки всех ошибок.
+
+## Примеры и проверка
+
+[usePortfolio](../../src/entities/portfolio/api/usePortfolio.ts) — entity query;
+[shared client](../../src/shared/api/client.ts) — transport/auth boundary.
+Изменяя header/retry/invalidation, проверяй наблюдаемое поведение через MSW и
+[Testing](testing.md); не обращайся к реальному T-Bank.
+`npm run openapi:check`, `npm run typecheck` и targeted tests проверяют разные
+части решения. Для поведения API-клиента используй сценарии MSW на публичной
+HTTP-границе; реализация сервера не является входом frontend-проверок.
@@ -0,0 +1,76 @@
+# Работа в репозитории
+
+## Граница и порядок работы
+
+Репозиторий сам содержит инструкции, исходники, конфигурацию и входы своих
+проверок. Сборка, CI и обязательный маршрут чтения работают без соседних
+checkout. Внешний API задаётся предоставленным публичным контрактом;
+исходники или инструкции его реализации не являются зависимостью разработки.
+При нехватке требования сообщи, какое решение не определено, до его реализации.
+
+Начни с результата и affected areas. До edits проследи flow/invariants, найди
+owner и 1–3 примера. Код показывает механизм; случайный аналог не меняет контракт.
+Работай напрямую; OpenSpec/SDD lifecycle — только по явному запросу.
+Перед Node-командами активируй местную `.nvmrc`: `nvm use --silent`.
+Сохраняй чужие staged/unstaged/untracked изменения и read-only архивы.
+
+## Change scope
+
+Сначала расширь существующего владельца. Иначе используй standard library,
+платформу или установленную dependency; небольшая новая реализация допустима
+при собственной ответственности. Не создавай helper/interface/wrapper ради
+возможного reuse. Общее имя не означает общую бизнес-ответственность.
+Сохраняй validation, authorization, atomicity, accessibility и migration safety.
+
+После diff выполни Boy Scout review: проверь новое дублирование, owner, callers,
+небольшие связанные legacy issues и соответствие local conventions. Исправляй
+непосредственно связанные low-risk проблемы; широкий cleanup — отдельная задача.
+
+## Domain values
+
+Finite business vocabulary принадлежит одному domain/module/entity owner.
+Переиспользуй его symbols; для нового словаря без аналога — `as const` + union.
+Сохраняй wire values; generated/external enums не переписывай вручную.
+Numeric policy называй по смыслу и единицам. Индексы, `Math.max(value, 0)` и
+обычные labels не выноси в constants без semantic benefit.
+Локальный TypeScript/lint профиль определяет дополнительные ограничения.
+
+## Dependencies
+
+Проверь аналоги и direct dependencies в местном manifest до добавления пакета.
+Новая dependency оправдана текущей потребностью и меньшей общей сложностью;
+оцени compatibility, runtime/bundle и maintenance/security. Импортируемый пакет
+объявляется напрямую; транзитивная установка не является контрактом.
+Сохраняй exact versions и lockfile; воспроизводимая установка — `npm ci`.
+Peer-конфликт решай совместимыми версиями без `--force`/`--legacy-peer-deps`.
+Используй существующий analyzer; не добавляй второй для той же проверки.
+
+## Test Intent
+
+Перед нетривиальным тестом кратко определи наблюдаемый исход, regression risk,
+значимые edge/error/concurrency cases и самую дешёвую надёжную boundary.
+Отдельный artifact не нужен. Проверяй результат, а не private call order,
+декларации, тривиальные wrappers или поведение framework.
+При bug сначала воспроизведи исход. Mock race не доказывает DB atomicity.
+Уровни и runnable commands выбирай по местной testing convention.
+
+## Проверки и завершение
+
+Code/dependency change: `npm ci`, полный `npm run verify` и дополнительные
+risk checks из местной testing convention. Targeted tests ускоряют итерацию,
+но не заменяют финальный gate. `lint:fix`/format — edits, не proof.
+Markdown-only: проверь новые/изменённые тексты, локальные ссылки/якоря, маршруты
+чтения и `git diff --check`; application build ради текста не нужен.
+Повтори routing по staged/unstaged/new files. Запиши краткие команды, результаты
+и ограничения. Зелёный lint не заменяет semantic/security review.
+
+## Git и релизы
+
+Работа — в `codex/<task>` от актуального `develop`, затем PR в `develop`.
+Сохраняй чужие изменения; перед commit просмотри staged paths и diff.
+Commits и PR titles — Conventional Commits; допустим `spec:`. Каждый commit
+содержит одну связанную задачу. При связанной issue добавь её номер в конец
+заголовка (`fix: … #12`); без issue номер не нужен. Root другого checkout
+не управляет этим repo.
+Прямой push в `main`, force-push и перенос опубликованных тегов не входят в
+обычную работу. Перед release/hotfix прочитай местный README, раздел «Релизы».
@@ -1,56 +0,0 @@
-# Frontend architecture
-
-## Выбор владельца
-
-Сначала найди владельца поведения и ближайший пример. Расширяй existing slice,
-если ответственность остаётся связной. Размер файла или возможный будущий reuse
-не создают новую архитектурную границу.
-
-| Ответственность | Размещение |
-| --- | --- |
-| Bootstrap, глобальные providers, routes | `app` |
-| Композиция маршрута и поведение, нужное только этому экрану | `pages/<page>` |
-| Самостоятельная пользовательская возможность с собственным смыслом | `features/<capability>` |
-| Представление/поведение бизнес-сущности | `entities/<entity>` |
-| Переиспользуемый код без WealthLedger domain meaning | `shared` |
-
-Локальный FSD profile: `app → pages → features → entities → shared`, без `widgets`.
-Крупный уникальный блок остаётся в своей page. Form, mutation или click handler
-сами по себе не требуют feature. Два callers не делают domain helper generic shared.
-Slice именуется по ответственности, а не `helpers`, `hooks` или `types`.
-
-**Безопасный путь:** при сомнении оставь код у ближайшего допустимого owner.
-Извлекай его, когда появилась самостоятельная ответственность или реальный reuse.
-Не вводи новый layer и не обходи public API, чтобы устранить неудобный import.
-
-## Imports и public API
-
-Cross-slice consumer использует `@/` и `index.ts` владельца, например
-`@/entities/portfolio`. Alias Vite и TypeScript согласован. Другой slice не
-импортирует внутренний файл напрямую. Направление зависимостей проверяет
-`npm run deps`; Knip проверяет использование exports, а не смысл placement.
-
-## UI foundation
-
-Общий visual foundation принадлежит `shared/theme`. `tokens.json` — переносимый
-WealthLedger v1 source; `theme.ts` адаптирует доверенный JSON в Mantine без runtime
-schema. App и Storybook используют public API `shared/theme/index.ts`: theme,
-designTokens, color roles, CSSVariablesResolver и base styles. Внешний consumer
-читает JSON напрямую. Mantine defaults и локальные domain styles остаются у владельцев.
-`shared/ui` содержит StateView/LoadingSkeleton. Existing route-aware AppShell также
-лежит в shared/ui, но не является общим catalog primitive; его расположение не
-служит основанием переносить новую domain/navigation логику в shared.
-Изменяя foundation, прочитай [design system](../../../docs/development/design-system.md).
-
-## Примеры
-
- Общая busy-область: существующий [LoadingSkeleton](../../src/shared/ui/LoadingSkeleton.tsx), а не domain widget в shared.
- Account-income state views: [страница](../../src/pages/account-income/ui/AccountIncomePage.tsx) и её flat `components/*.view.tsx`; новый page-local filter остаётся здесь.
- Portfolio query: [entity public API](../../src/entities/portfolio/index.ts); новая UI-сводка с бизнес-смыслом не становится shared только из-за нескольких экранов.
-
-## Проверка
-
-После placement/import change: `npm run deps`, `npm run typecheck`, `npm run knip`;
-после собственного behavior — применимые tests. Финальный gate указан в AGENTS.
-Review отдельно проверяет смысл owner: разрешённый dependency graph не доказывает
-правильный выбор слоя.
@@ -1,56 +0,0 @@
-# Frontend data
-
-## Выбор owner
-
-Server state принадлежит TanStack Query, form state — React Hook Form, локальное
-UI — React state. Не копируй успешный query result в useState/context для второго
-кэша. Domain-specific queries, keys и policies принадлежат вызывающему slice;
-общий transport — `shared/api`. Page VM выбирает inputs и собирает presentation data.
-
-Используй `apiClient`/`apiQueryClient` из shared public API. Прямой fetch в
-pages/features/entities и прямой T-Bank call запрещены. Сначала найди
-существующий query того же endpoint; расширяй его owner, не создавай второй key
-или глобальную query policy для одной страницы.
-
-## Типы и contract
-
-Backend runtime OpenAPI — source; committed frontend snapshot и generated
-`schema.d.ts` производны. Тип request/response бери из generated `paths`, например:
-
-```ts
-type User = paths["/api/v1/auth/me"]["get"]["responses"][200]["content"]["application/json"];
-```
-
-Domain/UI type допустим, когда он отличается по смыслу, а не копирует transport DTO.
-Generated TS вручную не исправляется. Изменение wire shape/status/route проходит
-[общий contract workflow](../../../docs/development/runtime-openapi-verification.md).
-Одна UI-модель не требует менять API. `openapi:generate` работает offline от snapshot;
-`openapi:check` генерирует во временный каталог и сравнивает, не меняя tracked files.
-
-## Auth и invalidation
-
-Bearer header принадлежит shared authenticated fetch; query/mutation не задают
-Authorization. Auth endpoints исключены из Bearer/retry middleware. Refresh
-координируется single-flight; после `401` с `UNAUTHORIZED` возможен один retry.
-Не добавляй собственный refresh/retry loop в caller.
-
-Protected queries используют existing session-aware boundary; logout очищает
-session-scoped cache. При auth/token change читай [security](../../../backend/.ai/conventions/security-auth.md)
-и [authentication](../../../docs/features/authentication.md).
-Успешная connection mutation коммитит подтверждённый status и сбрасывает financial
-GET subtree; ошибка mutation не меняет generation/cache. Это отдельная граница
-от обычного фонового refetch: [connection policy](../../../docs/features/tbank-connection.md#граница-финансового-кэша).
-
-Default focus refetch выключен; freshness и retry определяются существующей
-[query policy](../../../docs/adr/007-react-query-fetch-policy.md) и feature source.
-При обычном refetch сохраняй Client Cached Snapshot, при session/connection
-смене не показывай данные прежнего владельца. UI presentation — в UI convention.
-
-## Примеры и проверка
-
-[usePortfolio](../../src/entities/portfolio/api/usePortfolio.ts) — entity query;
-[shared client](../../src/shared/api/client.ts) — transport/auth boundary.
-Изменяя header/retry/invalidation, проверяй наблюдаемое поведение через MSW и
-[Testing](frontend-testing.md); не обращайся к реальному T-Bank.
-`npm run openapi:check`, `npm run typecheck` и targeted tests проверяют разные
-части решения. Для API semantics нужны также exact docs и contract gate.
@@ -0,0 +1,33 @@
+# Storybook
+
+## Когда нужна story
+
+- Shared UI/theme: показывай принятые visual roles и переиспользуемое поведение.
+- Domain/page presentation: добавляй story, когда независимый visual state
+  нужен для разработки/review или является устойчивым UI pattern.
+- Выбирай значимые состояния: default, loading, disabled, error, empty,
+  длинный контент и смысловые variants по применимости. Не строй декартово
+  произведение props и story для каждого trivial wrapper/helper.
+- Fetch/auth/router container и VM проверяй application tests; story получает
+  synthetic props presentation component. Каталог не нужен каждому файлу.
+
+## Изоляция и interaction
+
+Используй CSF, `Meta`/`StoryObj`, `satisfies Meta`, локальные fixtures и actions.
+Общие Mantine/theme/i18n/Dates providers уже есть в
+[preview](../../.storybook/preview.tsx); не создавай второй theme source.
+Stories не достигают application API, auth, VM и query providers даже транзитивно;
+границу проверяет `deps:storybook`. Не добавляй MSW worker ради каталога.
+
+`play` через `storybook/test` нужен, когда interaction иллюстрирует собственный
+контракт: keyboard activation, доступность действия, local callback. Не повторяй
+RTL suite и не тестируй внутренности Mantine. Существующий
+[Button](../../src/shared/ui/Button.stories.tsx) показывает themed control
+без production wrapper; [LoadingSkeleton](../../src/shared/ui/LoadingSkeleton.stories.tsx)
+— значимые busy states.
+
+`npm run typecheck`, `npm run deps:storybook`, `npm run build:catalog` проверяют
+типы, изоляцию и сборку. Build не выполняет `play` как CI interaction suite;
+для проверки interaction открой story в браузере, для regression используй
+существующий [Testing](testing.md). Визуальное соответствие задаче,
+keyboard и узкий viewport проверяются отдельно от успешной сборки.
@@ -1,8 +1,13 @@
 # Frontend testing

+Перед нетривиальными тестами сформулируй
+[общий Test Intent](engineering.md#test-intent); отдельный документ
+не требуется. Trivial low-risk изменения обходятся без него.
+
 ## Выбор проверки

-Читай при изменении тестов или behavior с [testing risk](../../../docs/development/engineering-governance.md#risk-based-testing).
+Читай при изменении тестов, доступа, денежных расчётов, восстановления
+интерфейса или исправлении подтверждённой регрессии.
 Выбирай boundary по наблюдаемому исходу, а не внутреннему helper/component state.

 | Изменение | Дешёвая надёжная проверка |
@@ -10,6 +15,7 @@
 | Чистое domain преобразование/денежный расчёт | Unit case с граничными значениями |
 | Форма, route access, recovery, UI-state selection | RTL component/route test через видимое поведение |
 | Headers, refresh/retry, query invalidation | MSW на transport boundary |
+| Критический browser flow, который JSDOM не доказывает | Browser/e2e proof существующими доступными средствами; отдельный frontend e2e runner пока не принят |
 | Только declarative props/Storybook fixture | Type/build + semantic/visual review; unit test без собственной логики не нужен |

 Tests colocated с source (`*.test.tsx` для UI, существующий `*.test.ts` для pure code).
@@ -28,6 +34,8 @@ MSW запускается только Vitest setup в `src/test/`, без brow
 Независимый case получает свой `createTestQueryClient`; rerender сохраняет
 экземпляр и seeded cache. Providers выбирай явно. Existing teardown выполняет
 RTL cleanup, auth reset и MSW reset: [test client](../../src/test/query.tsx).
+Тестовый клиент отключает retries запросов и мутаций для предсказуемого исхода;
+это не меняет [политику обновления приложения](data.md#auth-и-invalidation).

 ## Важные случаи

@@ -0,0 +1,53 @@
+# TypeScript и React
+
+## Types и components
+
+- Сохраняй strict TS profile и `import type`. Для недоверенного значения используй
+  `unknown` с narrowing; `any` не заменяет DTO/validation. Локальное исключение
+  на нетипизированной boundary должно быть узким и объяснённым.
+- `enum` и `namespace` не используются: frontend имеет `erasableSyntaxOnly`.
+  Для состояния с разными payload выбирай discriminated union; не добавляй
+  необязательные поля, допускающие невозможные комбинации.
+- Named components — const-valued `FC<Props>`; named props находятся рядом или
+  в types-файле. Принимай `props`, destructure в body, без inline props typing.
+  Только children — `FC<PropsWithChildren>`; дополнительные props — named type
+  на основе `PropsWithChildren<{ … }>`; без props — `FC`.
+- Обычные exports — нижний named block; barrel делает прямой re-export.
+  CSF сохраняет default meta и прямые story exports; configuration exceptions
+  заданы в [Biome](../../biome.json). Не распространяй их на application code.
+
+## Hooks и derived state
+
+Hooks вызываются без условий и ранних выходов перед ними; custom hook нужен
+связному поведению, а не новому имени над одним вызовом. Derived value вычисляй
+при render/в VM. Пользовательское действие обрабатывай handler; `useEffect`
+оставляй синхронизации с внешней системой с корректным cleanup/dependencies.
+
+`useMemo`, `useCallback`, `memo` нужны измеренной стоимости или конкретному
+контракту стабильной identity; не добавляй их ко всем значениям/handlers.
+React Compiler включён в Vite, но не доказывает выигрыш и не заменяет effect
+correctness. Не удаляй существующую memoization без понимания её consumers.
+Container/VM/view и state owners — в [UI](ui.md).
+
+## Domain literals and magic values
+
+Общее правило ownership и символических значений —
+[Domain values](engineering.md#domain-values).
+Backend vocabulary бери из generated `paths`, не создавай ручную копию enum.
+Текущий `schema.d.ts` содержит только types: typed wire literals допустимы,
+когда generator не предоставляет runtime values.
+
+`ProblemDetailsDto.code` сейчас `string`. Не объявляй закрытый frontend error
+enum и не превращай неизвестный code в известный через cast. Повторяющуюся
+обработку своди у ответственного owner; [errors](data.md#errors).
+
+`noMagicNumbers` в Biome — error; fixtures/tests/stories исключены только
+из этого правила. Policy получает имя и единицы; подавление допустимо для
+incidental value с объяснением. Обычный UI-текст не превращай в constant:
+его owner — [i18n](ui.md#строки-и-валидация).
+Semantic magic strings и props profile требуют review.
+
+## Проверка
+
+`npm run typecheck` и `npm run lint`; behavior проверяй по
+[Testing](testing.md), placement — по [FSD](../architecture.md).
@@ -11,21 +11,28 @@ Mantine component и общую тему. Для выпадающего выбо
 ограничения JSDOM решай в test setup, сохраняя production UI.
 Семантический HTML для структуры страницы остаётся уместным.

+Icons ищи у существующего owner (например,
+[BankOperationIcon](../../src/entities/bank-card/ui/BankOperationIcon.tsx));
+общая icon library сейчас не принята. Не добавляй пакет ради одного символа. Business/domain
+components живут у feature/entity/page, даже при повторном использовании.
+
 Wrapper нужен для проектной ответственности, а не ради нового имени
 для Button. Локальный CSS module принадлежит component; общий token вводи для
-реально общей роли через [design system](../../../docs/development/design-system.md).
+реально общей роли в [визуальной основе](#визуальная-основа).

 | Состояние | Владелец |
 | --- | --- |
-| Ответ сервера / query lifecycle | TanStack Query, [data rules](frontend-data.md) |
+| Ответ сервера / query lifecycle | TanStack Query, [data rules](data.md) |
 | Ввод и ошибки формы | React Hook Form + Zod, container/VM |
 | Параметр навигации, который должен переживать переход/ссылку | Router/URL |
 | Локальное открытие, focus, rendering fallback | React UI state |
 | Значение, вычисляемое из уже доступных inputs | Вычисление при render/в VM, без копирования через effect в state |

-Effect нужен для синхронизации с внешней системой; действие пользователя
-обрабатывай в handler. Не добавляй store, memoization или abstraction без текущей
-потребности. Inspect ближайший component до создания нового pattern.
+State, который нужен в ссылке, back/forward или после navigation, хранится в URL
+через existing router search params. Остальной UI state остаётся у ближайшего
+owner. Shared client store нужен только нескольким consumers без подходящего
+общего owner; наличие двух компонентов само по себе его не требует.
+Hooks/effects/derived state — по [TypeScript/React](typescript-react.md#hooks-и-derived-state).

 ## Container, VM и view

@@ -76,20 +83,12 @@ Button loading при mutation и компактный cached-snapshot progress

 ## Код и components

-Style/type automation задают configs. Используй `import type`; `enum` и
-`namespace` в frontend не применяются. Named components — const-valued; Biome
-проверяет declarations, no-default-export и exports-last в своём scope.
+Types, props, hooks и memoization — в [TypeScript/React](typescript-react.md).

-Обязательный review: `FC<Props>` и named props рядом/в types-файле; без inline
-props typing и destructuring в параметрах. Принимай `props`, destructure в body.
-Только children — `FC<PropsWithChildren>`; дополнительные props — named type
-на основе `PropsWithChildren<{ ... }>`. Без props — `FC`.
-Своди обычные exports к читаемому нижнему named block; barrel делает прямой
-re-export без промежуточного import.
+## Domain literals and magic values

-CSF `*.stories.tsx` сохраняют default meta и прямые story exports для indexer.
-Vite/Vitest configs и `.storybook/main.ts`/`preview.tsx` имеют только
-конфигурационное default-export exception. Scope исключений принадлежит biome.json.
+Правило и generated API exception — в
+[TypeScript/React](typescript-react.md#domain-literals-and-magic-values).

 ## Строки и валидация

@@ -102,6 +101,16 @@ Vite/Vitest configs и `.storybook/main.ts`/`preview.tsx` имеют тольк
 ## Проверка

 Type/style: `npm run typecheck`, `npm run lint`. Для risk behavior/изменения тестов
-используй [Testing](frontend-testing.md). UI: keyboard, narrow viewport,
-loading/error/empty/loaded и recovery по применимости. [Storybook](../../../docs/development/ui-catalog.md)
-уже установлен; используй его как reference, но сверяй UI с задачей отдельно от build.
+используй [Testing](testing.md). UI: keyboard, narrow viewport,
+loading/error/empty/loaded и recovery по применимости. [Storybook](storybook.md) задаёт выбор stories и изоляцию каталога;
+сверяй UI с задачей отдельно от build.
+
+## Визуальная основа
+
+Общая тема живёт в `src/shared/theme`: `tokens.json` задаёт переносимые значения,
+`theme.ts` адаптирует их к Mantine. Используй public API темы и её semantic roles,
+без отдельной палитры в page/component. Поддерживается светлая схема.
+Цвет дополняет подпись или знак; проверяй контраст конкретной пары text/background.
+Warning не используй для мелкого текста на белом. Деньги сохраняют валюту, знак
+и различие между нулём и неизвестной суммой. Общие состояния демонстрирует
+Storybook; presentation stories используют synthetic data без application API.
@@ -0,0 +1,15 @@
+**
+!package.json
+!package-lock.json
+!.nvmrc
+!index.html
+!tsconfig*.json
+!vite.config.ts
+!.storybook/
+!.storybook/**
+!src/
+!src/**
+!public/
+!public/**
+!docker/
+!docker/**
@@ -0,0 +1,26 @@
+name: Conventional commits
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, edited]
+
+jobs:
+  commits:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: https://github.com/actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          fetch-depth: 0
+      - uses: https://github.com/actions/setup-node@v4
+        with:
+          node-version-file: .nvmrc
+      - run: npm ci --ignore-scripts
+      - name: Check PR title and commits
+        env:
+          PR_TITLE: ${{ github.event.pull_request.title }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
+        run: |
+          printf '%s\n' "$PR_TITLE" | npm run commitlint -- --strict
+          npm run commitlint -- --strict --from "$BASE_SHA" --to "$HEAD_SHA"
@@ -0,0 +1,61 @@
+name: Frontend image
+
+on:
+  push:
+    tags: ['v*']
+
+concurrency:
+  group: frontend-image-publication
+  cancel-in-progress: false
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    env:
+      IMAGE: nexus.personal.ksv741.ru/wealthledger/frontend
+      RELEASE_TAG: ${{ gitea.ref_name }}
+      REVISION: ${{ gitea.sha }}
+      DOCKER_CONFIG: ${{ runner.temp }}/wealthledger-frontend-docker
+    steps:
+      - uses: https://github.com/actions/checkout@v4
+      - uses: https://github.com/actions/setup-node@v4
+        with:
+          node-version-file: .nvmrc
+      - name: Validate release version
+        run: |
+          node --input-type=commonjs -e 'const p = require("./package.json"); const l = require("./package-lock.json"); if (!/^v\d+\.\d+\.\d+$/.test(process.env.RELEASE_TAG) || process.env.RELEASE_TAG !== `v${p.version}` || l.version !== p.version || l.packages[""].version !== p.version) process.exit(1)'
+          test "$(git rev-parse HEAD)" = "$REVISION"
+          docker version
+          docker buildx version
+      - run: npm ci
+        env:
+          HUSKY: '0'
+      - run: npm run verify
+        env:
+          KNIP_DISABLE_RAW_TRANSFER: '1'
+      - name: Login with dedicated Nexus writer
+        env:
+          REGISTRY_USERNAME: ${{ secrets.NEXUS_USERNAME }}
+          REGISTRY_TOKEN: ${{ secrets.NEXUS_PASSWORD }}
+        run: |
+          test -n "$REGISTRY_USERNAME" && test -n "$REGISTRY_TOKEN"
+          install -d -m 700 "$DOCKER_CONFIG"
+          printf '%s' "$REGISTRY_TOKEN" | docker login nexus.personal.ksv741.ru --username "$REGISTRY_USERNAME" --password-stdin
+      - name: Publish immutable release tag
+        run: |
+          VERSION="${RELEASE_TAG#v}"
+          if docker manifest inspect "$IMAGE:$VERSION" >/dev/null 2>manifest-error.log; then
+            echo 'Refusing to overwrite an existing release tag'; exit 1
+          fi
+          if ! grep -Eq 'manifest unknown|no such manifest' manifest-error.log; then
+            echo 'Cannot prove tag absence; refusing publication'; exit 1
+          fi
+          docker buildx build --target production --build-arg VERSION="$VERSION" --build-arg REVISION="$REVISION" --tag "$IMAGE:$VERSION" --metadata-file image-metadata.json --push .
+          DIGEST="$(node --input-type=commonjs -p 'require("./image-metadata.json")["containerimage.digest"]')"
+          docker pull "$IMAGE@$DIGEST"
+          test "$(docker image inspect "$IMAGE@$DIGEST" --format '{{index .Config.Labels "org.opencontainers.image.revision"}}')" = "$REVISION"
+          docker run --rm --entrypoint sh "$IMAGE@$DIGEST" -c 'test -s /usr/share/nginx/html/index.html && nginx -t && nginx && wget -q -O /dev/null http://127.0.0.1:8080/'
+          printf 'Frontend image: %s@%s\n' "$IMAGE" "$DIGEST"
+      - name: Remove registry session
+        if: always()
+        run: rm -rf "$DOCKER_CONFIG"
@@ -0,0 +1,33 @@
+name: Frontend security
+
+on:
+  push:
+    branches:
+      - '**'
+  pull_request:
+  schedule:
+    - cron: '17 5 * * *'
+
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: https://github.com/actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Record checked revision
+        run: git rev-parse HEAD
+      - name: Scan history with Gitleaks 8.30.1
+        run: |
+          curl --fail --location --silent --show-error https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz -o /tmp/gitleaks.tar.gz
+          echo '551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb  /tmp/gitleaks.tar.gz' | sha256sum --check
+          mkdir -p /tmp/gitleaks-bin
+          tar -xzf /tmp/gitleaks.tar.gz -C /tmp/gitleaks-bin gitleaks
+          /tmp/gitleaks-bin/gitleaks git --log-opts=--all --redact=100 --no-banner
+      - uses: https://github.com/actions/setup-node@v4
+        with:
+          node-version-file: .nvmrc
+      - name: Verify pre-commit secret blocking and redaction
+        run: PATH=/tmp/gitleaks-bin:$PATH node --test scripts/test-pre-commit.mjs
+      - name: Audit runtime and development dependencies
+        run: npm audit --include=dev --audit-level=low
@@ -0,0 +1,36 @@
+name: Frontend verify
+
+on:
+  push:
+    branches:
+      - '**'
+  pull_request:
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: https://github.com/actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Record checked revision
+        run: git rev-parse HEAD
+      - uses: https://github.com/actions/setup-node@v4
+        with:
+          node-version-file: .nvmrc
+      - run: npm ci
+        env:
+          HUSKY: '0'
+      - name: Run all frontend gates
+        run: npm run verify
+        env:
+          # OXC raw transfer allocates a ~6 GiB buffer; use the standard parser in CI.
+          KNIP_DISABLE_RAW_TRANSFER: '1'
+      - name: Analyze develop with SonarQube
+        if: gitea.event_name == 'push' && gitea.ref == 'refs/heads/develop'
+        # v2.3.0: Docker-based scanner for the SonarQube 9.9 server.
+        uses: https://github.com/SonarSource/sonarqube-scan-action@aecaf43ae57e412bd97d70ef9ce6076e672fe0a9
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        with:
+          args: -Dsonar.qualitygate.wait=true
@@ -12,6 +12,7 @@ dist
 storybook-static
 dist-ssr
 coverage
+.scannerwork
 *.local

 # Local runtime configuration
@@ -1,2 +1,3 @@
+gitleaks git --pre-commit --staged --redact=100 --no-banner || exit $?
 npx lint-staged
 npm run deps
@@ -1 +1 @@
-22
+24.21.0
@@ -0,0 +1,106 @@
+{
+	"git": {
+		"requireBranch": "release/*",
+		"requireCleanWorkingDir": true,
+		"requireUpstream": false,
+		"requireCommits": true,
+		"commitMessage": "chore(release): ${version}",
+		"tagName": "v${version}",
+		"tag": false,
+		"push": false
+	},
+	"npm": {
+		"publish": false
+	},
+	"github": {
+		"release": false
+	},
+	"gitlab": {
+		"release": false
+	},
+	"hooks": {
+		"after:git:init": "node scripts/check-release.cjs"
+	},
+	"plugins": {
+		"@release-it/conventional-changelog": {
+			"infile": "CHANGELOG.md",
+			"preset": {
+				"name": "conventionalcommits",
+				"types": [
+					{
+						"type": "chore",
+						"scope": "release",
+						"effect": "hidden"
+					},
+					{
+						"type": "feat",
+						"section": "Features",
+						"effect": "bump"
+					},
+					{
+						"type": "fix",
+						"section": "Bug Fixes",
+						"effect": "bump"
+					},
+					{
+						"type": "perf",
+						"section": "Performance",
+						"effect": "bump"
+					},
+					{
+						"type": "docs",
+						"section": "Documentation",
+						"effect": "bump"
+					},
+					{
+						"type": "spec",
+						"section": "Specifications",
+						"effect": "bump"
+					},
+					{
+						"type": "refactor",
+						"section": "Refactoring",
+						"effect": "bump"
+					},
+					{
+						"type": "build",
+						"section": "Build",
+						"effect": "bump"
+					},
+					{
+						"type": "ci",
+						"section": "CI",
+						"effect": "bump"
+					},
+					{
+						"type": "test",
+						"section": "Tests",
+						"effect": "bump"
+					},
+					{
+						"type": "style",
+						"section": "Styles",
+						"effect": "bump"
+					},
+					{
+						"type": "chore",
+						"section": "Maintenance",
+						"effect": "bump"
+					},
+					{
+						"type": "revert",
+						"section": "Reverts",
+						"effect": "bump"
+					}
+				]
+			},
+			"context": {
+				"host": "https://git.personal.ksv741.ru",
+				"owner": "WealthLedger",
+				"repository": "frontend",
+				"linkReferences": true,
+				"commit": "commit"
+			}
+		}
+	}
+}
@@ -4,6 +4,7 @@ import "@mantine/dates/styles.css";
 import "dayjs/locale/ru";
 import "../src/shared/i18n";
 import { MantineProvider } from "@mantine/core";
+import { DatesProvider } from "@mantine/dates";
 import type { Preview } from "@storybook/react-vite";
 import { cssVariablesResolver, theme } from "@/shared/theme";

@@ -33,7 +34,9 @@ const preview: Preview = {
 				forceColorScheme="light"
 				colorSchemeManager={colorSchemeManager}
 			>
-				<Story />
+				<DatesProvider settings={{ locale: "ru" }}>
+					<Story />
+				</DatesProvider>
 			</MantineProvider>
 		),
 	],
@@ -1,24 +1,37 @@
-# Frontend
+# Frontend router

-React/Vite-клиент; общие правила работы — в root `AGENTS.md`.
-До frontend-решения прочитай [router](.ai/CONVENTIONS.md) и
-[sources](.ai/SOURCES.md), затем только применимые документы/разделы.
+Репозиторий самостоятельный: обязательные инструкции и проверки используют
+только его файлы и предоставленные публичные контракты. Перед работой прочитай
+[порядок работы](.ai/conventions/engineering.md#граница-и-порядок-работы), затем
+объединяй triggers задачи и путей; читай активированные темы до решения.

-## Проверка
+| Решение / сигнал | Читать |
+| --- | --- |
+| Устройство/data flow, component/module/slice, owner/FSD, cross-slice imports | [Architecture](.ai/architecture.md) |
+| TS types/props/imports/exports, hooks/effects, derived state, memoization, domain literals | [TypeScript/React](.ai/conventions/typescript-react.md) |
+| UI/Mantine, form, container/VM/view, state owner, loading/error/recovery | [UI](.ai/conventions/ui.md) |
+| Только продуктовая строка / Zod message | [Строки](.ai/conventions/ui.md#строки-и-валидация) |
+| Query/mutation, server cache, shared/api, generated types | [Data](.ai/conventions/data.md) |
+| API/network/application errors, codes и сообщения | [Errors](.ai/conventions/data.md#errors) |
+| Login/refresh/logout, token/cookie, session ownership | [Data/auth](.ai/conventions/data.md#auth-и-invalidation) + [Testing](.ai/conventions/testing.md) |
+| Request/response field, route/status/error shape, OpenAPI | [Data/contract](.ai/conventions/data.md#типы-и-contract) |
+| Tests или behavior с regression risk | [Testing](.ai/conventions/testing.md) |
+| Storybook/stories/play, theme/tokens/shared UI | [Storybook](.ai/conventions/storybook.md), UI; design facts — в разделе Источники |
+| Helper/dependency/новый pattern, refactor/scope | [Change scope](.ai/conventions/engineering.md#change-scope), для пакета — [Dependencies](.ai/conventions/engineering.md#dependencies) |
+| Выбор gate, tooling, завершение | [Проверки](.ai/conventions/engineering.md#проверки-и-завершение) |

-Перед Node-командами: `nvm use --silent` по `.nvmrc`.
-После lockfile install `npm ci` полный gate — `npm run verify`.
-Он проверяет OpenAPI drift, TypeScript, Biome, Vitest/coverage, Knip,
-dependency boundaries и сборки приложения/Storybook без backend.
-Точные scripts принадлежат `package.json`; targeted checks — у выбранного convention.
+Показ query state не означает изменение fetching. Изменение тестов активирует
+Testing и без production diff. Перед завершением повтори routing по новым и
+изменённым файлам. Для Git/release прочитай
+[Git и релизы](.ai/conventions/engineering.md#git-и-релизы).

-HTTP contract changes дополнительно проходят общий
-[contract workflow](../docs/development/runtime-openapi-verification.md).
-Generated types редактируются через их source; T-Bank доступен только через backend.
-Frontend dependencies используют exact versions. Pre-commit запускает staged
-formatting и FSD checks; сообщения commits — Conventional Commits.
+## Источники

-Code/style checks автоматические только в scope конфигурации. i18n, props,
-semantic placement и выбор полезных тестов обязательны при review.
-Storybook уже доступен как reference; ожидаемый UI и его состояния определяет
-задача, а визуальное соответствие проверяется отдельно от сборки.
+| Вопрос | Локальный источник |
+| --- | --- |
+| HTTP request/response/errors | [OpenAPI snapshot](src/shared/api/spec/openapi.json), generated types и [Data](.ai/conventions/data.md) |
+| Auth/session/refresh/cache | [Data](.ai/conventions/data.md#auth-и-invalidation), source и colocated tests владельца |
+| Money, account/position/income | Entity types, API snapshot, formatters и tests соответствующего slice |
+| Theme/tokens, UI-каталог | [UI](.ai/conventions/ui.md), [Storybook](README.md#ui-каталог-storybook) |
+| Поведение области | Source и tests её page/entity/feature; неясное ожидание уточни до изменения |
+| Versions/scripts/check scope | Manifest/lockfile, Biome/TypeScript/dependency configs |
@@ -0,0 +1,147 @@
+# Changelog
+
+## [0.2.2](https://git.personal.ksv741.ru/WealthLedger/frontend/compare/v0.2.1...v0.2.2) (2026-09-19)
+
+### Bug Fixes
+
+* update Nexus registry host ([bac95eb](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/bac95ebb392febb667a9fc2f1fa4f06fa110d685))
+
+## [0.2.1](https://git.personal.ksv741.ru/WealthLedger/frontend/compare/v0.2.0...v0.2.1) (2026-09-18)
+
+### Documentation
+
+* use shared Nexus account [#21](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/21) ([1ad578f](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/1ad578fb37b8dd6161dc362541d9c0cd0b008b75))
+
+### CI
+
+* add frontend SonarQube analysis [#19](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/19) ([3f19b36](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3f19b3643f88e36d10e7c374262351f61947ed47))
+* publish frontend images to Nexus [#21](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/21) ([999b859](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/999b8590ecd0a551da628c349d005ebb9b318883))
+
+## [0.2.0](https://git.personal.ksv741.ru/WealthLedger/frontend/compare/v0.1.0...v0.2.0) (2026-09-16)
+
+### Features
+
+* add frontend container delivery ([e31ab35](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/e31ab35a5ac51b7dbd1509e35c4ce8e9f8fd4e92))
+
+### Documentation
+
+* make frontend instructions self-contained ([d9ada27](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/d9ada2762169b3347a0dc4b7e7ce6c7cd207af76))
+* refine frontend conventions and routing ([718365c](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/718365cd5ab51e7c696c777b71095f7ee41b471d))
+* simplify conventions layout ([9f7e342](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/9f7e342333b80bfacfd5bc394a2dcd0613d33ff3))
+
+## 0.1.0 (2026-09-14)
+
+### Features
+
+* **account-operations:** require explicit ledger filters ([7d748a6](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/7d748a65d384e76220e234aa37a21b05b81e442a))
+* **accounts:** enrich brokerage account list ([fd93133](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/fd93133cfcdfd9372b2630cacaa7f5195f1beb58))
+* **account:** wrap portfolio sections in Mantine Accordion ([c1a8674](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/c1a8674f164117018236bf461bd457208ac9ad00))
+* add all-accounts portfolio pages ([daf1dca](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/daf1dca6666035cbca3ba020d8ae0b2a8789dc3a))
+* add authorization ([3448fea](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3448fea1407f246e0b093e64edd7b672ae8992a9))
+* add bond pages and portfolio navigation ([232d7f9](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/232d7f999040e4c91c27d5b382f2fcdfc4542d5a))
+* add breadcrumbs ([719a6ed](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/719a6ed8b73f8a552778a1b78f65776f02d4127c))
+* add brocker account list ([6e89c1a](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/6e89c1a8f765025bd7be37b59c696d092fd4bbe4))
+* add manual bank card screens ([ff4e88e](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/ff4e88edbeb9de244c2a6094ab70d9e48a4768a7))
+* add operations page ([4f3ee7d](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/4f3ee7ddb289284f8a6a0677438f270e8756a3fb))
+* add portfolio ([9156f29](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/9156f297073fefa2fe1c5cb9659495e2d532ac89))
+* add stock pages and ticker navigation ([561222e](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/561222e4686bde1dc98454a4216025c4cbc02d65))
+* add Storybook for WealthLedger components ([e63fd89](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/e63fd89a3922cd4dd7f194e33b320b4178985a5f))
+* add tbank tokens ([32e21de](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/32e21de17d00de5b3a4b074a2300e6a29a81e3ae))
+* add агегку events ([da55de5](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/da55de5b5008cce0ea24def664e13f3239174324))
+* animate page transitions with Motion ([c906dfa](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/c906dfa2e290164e6b089764be18edc99f10e775))
+* **broker-operation:** show operation type label in ledger entries ([d53ce50](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/d53ce50e2842e8d69a709b92417888ba851774b4))
+* **card:** refine header and inline actions ([cf21a5b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/cf21a5bd178a18753321811b6d8ac81ff848d676))
+* **cards:** filter operations by date range ([9bb385b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/9bb385b9f02cc780e27d9da8f30fae374ab0f08c))
+* **cards:** refine controls and modal transitions ([aba4cf1](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/aba4cf1ce83ea62082f35be358c2081d797f6645))
+* **cards:** show operation icons on hover ([dedfec1](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/dedfec10d1e94b76a21e0d9ee90b6cf7fea5a4a9))
+* compact portfolio currency totals ([47fbc21](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/47fbc212831058f1a0f1226dd262bf5c37870e34))
+* consume money projected event amounts ([1fd9a3a](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/1fd9a3a861a8b915b6c64861a018db39e2598a83))
+* enforce frontend quality guardrails ([1fc269a](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/1fc269adec9f0cfeacdc365c6e59a30c4620dba7))
+* establish frontend foundation ([1e13ada](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/1e13adabd32412de9707f452e42d2c65e73c106f))
+* **events:** add date filters to upcoming events ([9469dd2](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/9469dd2fdc03df47c202da2afdcdadb49dbb2748))
+* improve bank card expenses summary ([d3ac8c2](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/d3ac8c242de1d30cd3c4ca8e5850700192c2c259))
+* improve card operations pagination and scroll behavior ([9a65687](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/9a65687d3875d264b6de088d6886e6cb916d3426))
+* improve ledger event rows ([488ccad](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/488ccad540c771e862fb795edf2df6c6cea315af))
+* **income:** add account income analytics ([9364568](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/93645682028947d3fbd212bc9929dd2195715c69))
+* initial commit ([3331b7f](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3331b7f684f2ccc6d3934436d0326d877d1c3899))
+* polish bank operation cards and dates ([6b310db](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/6b310db0b8c37cb4cffe54acf3b7e9799f9f3ea0))
+* polish stock position cards ([273778c](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/273778c4cfa6ef8bd3ab421e03c57b6e31f7d925))
+* **portfolio:** add expanded layout for bond position cards ([bcf9369](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/bcf93691aa874114faf75cb9c36d1426dd7b8903))
+* **portfolio:** extend instrument logo rendering to bonds ([c04025a](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/c04025a3924ad76ae06e9bbbd32df4d18c85b34a))
+* **portfolio:** show stock tickers ([8f9caa9](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/8f9caa946ee99e2db2b495a384b17a0ce90ddcfd))
+* **portfolio:** visualize asset allocation ([0306526](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/0306526d3330d508d817aedecf74f0b74583dea7))
+* redesign portfolio position cards ([5168870](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/5168870cf2d5ac19a6d08ad8fee35f2952cdda87))
+* redesign year-over-year income comparison ([91eaeb5](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/91eaeb5661706f30171f5f15bf22e419fe2ee57c))
+* render stock logos with signed returns on account page ([a6d3051](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/a6d305127057bf6413825ffddba1c15b53e65a73))
+* replace loading spinners with skeletons ([71a214d](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/71a214d7adfcf5fc57cd5518fb008021d50e7723))
+* replace paired date inputs with range pickers ([24d332e](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/24d332e06341ccfb0d0d7046793ca145669cec44))
+* show page context in browser tab titles ([2580134](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/2580134683cbe036bb07b635aab6262d3702f270))
+* simplify income page filters and payments ([26f229b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/26f229ba3e0f8335dde297bf6c4575f7014e9f28))
+* **ui:** animate navigation and operation icons ([8e58c01](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/8e58c016d2dccfbdc6089480f6ccc113b6719850))
+* **ui:** animate sidebar icons on hover ([ebba6ab](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/ebba6ab25dc968c278d525fd2fd4194c8422d8d1))
+* **ui:** establish shared design system foundations ([d762ba5](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/d762ba50342cd96e4387a51bac12a0c4c43c648c))
+* unify upcoming event cards across pages ([451400b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/451400b63be0011a7a3b4dfd77e9365f7bcca467))
+
+### Bug Fixes
+
+* **frontend:** complete audit remediation ([9e42148](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/9e42148f6a9ad620b4fc9f6aef9ee2d80d73702b))
+* harden frontend dependency and env hygiene ([826936c](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/826936c6a4a7160b07224f0fa94b6d2d941bc6dc))
+* little fixes ([2e32d22](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/2e32d226d321f2d51653f1823ade8bace17fc5e5))
+* preserve cached data during refresh failures ([6d892da](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/6d892da9cec9d8522520cec3c26d343e81f4a51d))
+* remove income analytics period limit ([ab1b536](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/ab1b53680d811e5b5f91e8e14a7f219274e57313))
+* separate portfolio cash presentation ([3017fc8](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3017fc810ee10f2790dbc04902ad4e2f2cbadbd4))
+* stabilize frontend query cache contracts ([1250581](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/1250581ee3336e901bd01f757328ae4c4dd091c8))
+* **tbank:** reset connection-derived query cache ([175727b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/175727bc93876f950280d0ad35515a6d4acffbaf))
+* **ui:** align page layouts and add navigation icons ([d7e8963](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/d7e8963d1cfabd0900051e30e33ec30284282a7c))
+
+### Documentation
+
+* **agents:** link audit remediation registry ([b285719](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/b285719c1bcea32e490f9d960d7893bd21ba9e81))
+* **agents:** restore openspec authority ([fd72fb2](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/fd72fb2239849cb87d441c552b194b6358c9dc8a))
+* **ai:** route frontend conventions by task ([bcc034f](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/bcc034f19839a1aefadad978c5bb3a89d81ebe63))
+* align OpenAPI workflow guidance [#3](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/3) ([7a89356](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/7a89356f8783a14d6dde752358ee995d0dcadd66))
+* define canonical OpenSpec store ([d870d53](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/d870d535d7090aa3051de6f1b0fd979eaf6d7154))
+* document runtime OpenAPI verification ([7a3048c](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/7a3048c3476675528203fbe74338131723354e1d))
+* refresh frontend onboarding ([be80ef2](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/be80ef2f1bffc01867ee97f5f78c0cba7764a24e))
+* remove useless ([7ab043d](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/7ab043dce63a3fbacbfc9ac7d15b00dd714a541f))
+* update routes to system documentation ([a42f104](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/a42f104bed4daf982f2a72f0634887e4ea067dec))
+* update system documentation references ([dc3434c](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/dc3434c3716f09cfb1ef4aa3006e9db12f6b3bcf))
+
+### Refactoring
+
+* **account-operations:** split page state views into components ([695cda0](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/695cda0456970fe3a46d09dcec718c741ee6b18d))
+* align frontend ownership boundaries ([c97f62b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/c97f62bd983d6b5327132f4ec42e767118720913))
+* centralize frontend auth query gating ([268acdf](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/268acdf2e1057ed0f6c19384bfb6477aff773d1d))
+* enforce account page view model boundary ([fff36f2](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/fff36f252aa1a7bb18042c8fc2d06262b687b0b1))
+* enforce semantic values and numeric lint rules ([53c852b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/53c852b437ee1174843a4f959722239132e9150a))
+* little structure refactor ([2cca503](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/2cca503519888762067c770c188ed2d977979cbb))
+* refactor foundation ([da585b1](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/da585b157a5350753a91abb7f10aa00c7e9cf2c3))
+* simplify local design token consumption ([8b29cdf](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/8b29cdfd98790cb3316f1db0f8933c8b6bc4b335))
+* source shared design tokens from JSON ([0f50f15](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/0f50f156584b6b0bf3e473d047c3960284cf0cdd))
+* use Mantine Breadcrumbs for app navigation ([3c459e6](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3c459e66cc640cad58267cbaac2be4fbcaee4fdf))
+
+### CI
+
+* configure Renovate dependency updates [#5](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/5) ([4b97395](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/4b973953853785660b5c34ef96c90d518ab6c561))
+* disable memory-heavy Knip raw transfer [#1](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/1) ([2f26e4f](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/2f26e4fe0d8aa4e693c3ca425db04b04afbba75f))
+* run Biome on branch pushes in Gitea ([ccff422](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/ccff422f367bbcf5e19f510119dbe8b63de9b87a))
+* run full frontend verification [#1](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/1) ([22e331e](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/22e331e2ff4c5f68b3273de89fe9968029a1343d))
+
+### Tests
+
+* allow UI scenarios more time in CI [#1](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/1) ([942ed3d](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/942ed3d453d71547dc8883924a9bb2f76f7e997f))
+* keep portfolio metadata authoritative in cards ([427ca23](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/427ca23a433a20be25b1f4373f32c9e1f6f8c400))
+
+### Maintenance
+
+* align SDD routing and instruction commits ([3669832](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/36698322b7273b3a9eae1d078bcc9cddf2c8295b))
+* codify frontend local verification ([11be786](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/11be786943024699a4eccf91a8d1ad32a6d29e5f))
+* codify React component style ([d10e1dd](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/d10e1dd1827094e6e52768f0ccd2ea060aef95a1))
+* configure releases and develop workflow ([53b18c6](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/53b18c6e86f433bcb967721232c150fba4f7cc9f))
+* **deps:** update non-major dependencies ([0c6bac8](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/0c6bac8b902b88dc0b447b9198968e938db72c82))
+* make issue references optional and use chore for dependency updates [#5](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/5) ([82b9043](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/82b904393dcf65d9876fd06d1864dddef7d70bdb))
+* save pending changes ([ae06f6e](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/ae06f6e6e0f98a2be208d66105ca53ecf2d86bfd))
+* secure hooks and update dependencies [#4](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/4) [#9](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/9) ([3be6e61](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3be6e61b8fc85d4b16199dbe9910b38894159cb8))
+* simplify frontend verification ([f09baa6](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/f09baa68fcecfd210f95a7bfe8a67dc3741abce8))
+* simplify frontend verification ([3d9b619](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3d9b6194c60b373996a590c4bd56653e0935e8c6))
+* upgrade Node to 24 LTS ([117e74c](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/117e74cdfc29cbf63f549ea88e8106ab25300541))
@@ -0,0 +1,30 @@
+FROM node:24.21.0-bookworm-slim AS dependencies
+WORKDIR /app
+ENV HUSKY=0
+COPY package.json package-lock.json ./
+RUN npm ci
+
+FROM dependencies AS development
+COPY . .
+ENV VITE_API_BASE_URL="" API_PROXY_TARGET=http://backend:3000
+EXPOSE 8080
+CMD ["npm", "run", "dev", "--", "--host", "0.0.0.0", "--port", "8080", "--strictPort"]
+
+FROM dependencies AS build
+COPY . .
+ENV VITE_API_BASE_URL=""
+RUN npm run build
+
+FROM nginx:1.28.0-alpine AS production
+ARG VERSION
+ARG REVISION
+LABEL org.opencontainers.image.version=$VERSION \
+      org.opencontainers.image.revision=$REVISION
+COPY docker/nginx.conf /etc/nginx/nginx.conf
+COPY --from=build /app/dist /usr/share/nginx/html
+USER nginx
+EXPOSE 8080
+ENTRYPOINT ["nginx"]
+CMD ["-g", "daemon off;"]
+HEALTHCHECK --interval=10s --timeout=3s --start-period=10s --retries=6 \
+  CMD wget -q -O /dev/null http://127.0.0.1:8080/ || exit 1
@@ -5,7 +5,7 @@ backend; прямые вызовы T-Bank из frontend не допускают

 ## Быстрый старт

-Требуется Node 22 (`.nvmrc`). Создайте `.env` из примера и установите
+Требуется Node 24 (`.nvmrc`). Создайте `.env` из примера и установите
 зависимости строго из lockfile:

 ```bash
@@ -17,6 +17,40 @@ npm run dev

 `VITE_API_BASE_URL` по умолчанию указывает на `http://localhost:3000`.

+Для commits установите [Gitleaks](https://github.com/gitleaks/gitleaks/releases/tag/v8.30.1)
+8.30.1 в `PATH` (macOS: `brew install gitleaks`). Pre-commit сначала проверяет
+staged diff с полной редакцией секретов, затем запускает formatting и FSD checks.
+Находка или отсутствие Gitleaks блокирует commit.
+Проверка этого поведения: `node --test scripts/test-pre-commit.mjs`.
+
+## Контейнерный image
+
+`Dockerfile` имеет targets `development` (Vite HMR и proxy `/api/` во внутренний backend)
+и `production` (nginx на 8080, SPA fallback и same-origin API proxy). Node соответствует `.nvmrc`.
+Build context ограничен `.dockerignore`; `.env`, local DB и host node_modules
+не попадают в image.
+
+```bash
+docker build --target development -t wealthledger-frontend:development .
+docker build --target production -t wealthledger-frontend:production .
+```
+
+Gitea `image.yml` запускается на защищённом release tag `vX.Y.Z`, проверяет
+package/lock version и canonical gates. Runner `ubuntu-latest` должен иметь
+Docker/buildx. Образы хранятся в Nexus:
+`nexus.personal.ksv741.ru/wealthledger/frontend`. Пользователь `wealthledger-ci`
+задаётся Actions secrets `NEXUS_USERNAME`/`NEXUS_PASSWORD`; эта же учётная
+запись используется сервером для загрузки образов. Docker endpoint и token realm должны использовать
+HTTPS; в `docker-hosted` включается запрет redeploy. Прежние Gitea secrets
+сохраняются на время перехода и не передаются в Nexus.
+Публикуются semver tags, без `latest`; существующие release tags не перезаписываются. Production выбирает опубликованный version tag.
+
+Compose topology принадлежит workspace, эксплуатационная последовательность —
+[документация](https://git.personal.ksv741.ru/WealthLedger/docs),
+страница `architecture/deployment.md`.
+Проверка публикации требует настроенного registry/runner; локальный build
+не доказывает package permissions.
+
 ## Проверка

 ```bash
@@ -27,26 +61,117 @@ npm run verify
 Команда проверяет, что generated OpenAPI types соответствуют committed snapshot,
 затем запускает strict TypeScript, Biome, один coverage-backed запуск Vitest,
 Knip, dependency rules приложения и stories, сборки приложения и Storybook.
+Отдельный CI workflow `Frontend security` на push, pull request и ежедневно
+проверяет полную доступную историю Gitleaks 8.30.1 и выполняет
+`npm audit --include=dev --audit-level=low`. Любой advisory блокирует security job;
+исключений frontend нет. Локально можно выполнить те же команды:
+`gitleaks git --log-opts=--all --redact=100 --no-banner` и
+`npm audit --include=dev --audit-level=low`. Audit требует доступа к npm registry;
+проверка секретов выполняется локально и не выводит их значения.
+
+TypeScript остаётся на 5.9.3: `openapi-typescript@7.13.0` требует peer `^5.x`.
+Обновление до TypeScript 7 из Renovate dashboard откладывается до совместимого
+релиза генератора; `--force`/`--legacy-peer-deps` для обхода этого ограничения
+не используются.
 Если backend-контракт изменился,
 обновите `src/shared/api/spec/openapi.json` копированием backend OpenAPI
 document и затем выполните `npm run openapi:generate`.

+## SonarQube
+
+Проект `wealthledger-frontend` использует настройки из
+`sonar-project.properties`. Анализируются исходники `src`; тесты учитываются
+отдельно, а Storybook fixtures, test helpers, generated API types и OpenAPI
+snapshot исключены. `npm run test:coverage` (также входит в `npm run verify`)
+создаёт `coverage/lcov.info` для импорта покрытия.
+
+Для первого анализа установите SonarScanner CLI, совместимый с версией сервера,
+и выполните из корня frontend:
+
+```bash
+nvm use --silent
+npm ci
+npm run test:coverage
+# SONAR_TOKEN передайте через окружение; не сохраняйте токен в репозитории.
+sonar-scanner
+```
+
+В Gitea откройте frontend → Settings → Actions → Secrets и добавьте
+`SONAR_TOKEN` с токеном анализа проекта. Переименовывать основную ветку в
+SonarQube не требуется; `sonar.branch.name` не задаётся.
+Используется Community Edition 9.9.8: CI отправляет только
+push в `develop`, после успешного `verify`, и ожидает результат Quality Gate.
+PR и остальные ветки проходят обычные проверки без отправки в SonarQube.
+Отрицательный Quality Gate или ошибка scanner завершает `verify` с ошибкой.
+
+Runner должен поддерживать Docker actions и иметь HTTPS-доступ к
+`https://sonarqube.ksv741.keenetic.pro`, GitHub и Docker Hub. Docker action
+SonarSource закреплён на commit версии 2.3.0; scanner запускается отдельно от
+Node 24, используемого для сборки. `tsconfig.sonar.json` содержит совместимые
+со старым анализатором TS настройки; приложение проверяется штатным TypeScript
+5.9 через `npm run verify`. После обновления сервера пересмотрите scanner и
+возможность использовать основной tsconfig. Успешный локальный `verify` не
+доказывает доступность сервера и успешность анализа в CI.
+
+## UI-каталог Storybook
+
+После `nvm use --silent` выполните `npm run dev:catalog`; статическая сборка —
+`npm run build:catalog`. Каталог использует общую тему приложения, вымышленные
+данные и локальные действия без application API. Примеры не доказывают
+восстановление реального запроса. Визуальные роли описаны в
+[UI convention](.ai/conventions/ui.md#визуальная-основа).
+
 ## Документация

- [Router conventions](.ai/CONVENTIONS.md) и [источники](.ai/SOURCES.md)
- [Выбор owner/FSD](.ai/conventions/frontend-architecture.md)
- [UI, state, формы и компоненты](.ai/conventions/frontend-ui.md)
- [Data/API/cache](.ai/conventions/frontend-data.md)
- [Testing](.ai/conventions/frontend-testing.md)
- [Поставленный UI-каталог Storybook](../docs/development/ui-catalog.md)
- [Обзор поставленной системы](../docs/architecture/system-overview.md)
- [Engineering governance и risk-based testing](../docs/development/engineering-governance.md)
- [Карта проектных фактов](../docs/AI_INDEX.md)
- [Frontend workflow](../docs/development/frontend-workflow.md)
- [Remediation registry](../docs/development/audit-remediation.md)
+- [AGENTS: правила и источники](AGENTS.md)
+- [Выбор owner/FSD](.ai/architecture.md)
+- [UI, state, формы и компоненты](.ai/conventions/ui.md)
+- [Data/API/cache](.ai/conventions/data.md)
+- [Testing](.ai/conventions/testing.md)
+- [UI-каталог Storybook](#ui-каталог-storybook)

-Runtime OpenAPI backend сверяется с frontend snapshot отдельной read-only
-backend командой `npm run test:openapi-contract`.
-Разработка идёт напрямую по задаче пользователя. Каждый affected repo проходит
-свой verify; при изменении wire contract дополнительно выполняется contract check.
-Обязательного OpenSpec/SDD lifecycle нет.
+Checkout frontend содержит все входы сборки и проверок. Публичная схема API
+поступает как отдельный artifact; команды frontend используют только её
+локальную копию и не обращаются к исходникам или CI сервера. Доставка новой
+схемы — явное обновление snapshot с review и `npm run openapi:generate`.
+Runtime URL API задаётся окружением, а не расположением другого репозитория.
+Разработка идёт напрямую по задаче пользователя; OpenSpec/SDD — по явному запросу.
+
+Knip исключает `conventional-changelog-conventionalcommits`: release-it загружает
+preset по имени из `.release-it.json`. Версия preset закреплена напрямую.
+
+## Релизы
+
+Репозиторий выпускается независимо. `develop` — интеграция, `main` — принятые
+релизы. Работа: `codex/<task>` от актуального `develop`, PR в `develop`.
+Обычные PR допускают squash; release и обратная синхронизация сохраняют историю.
+Commits и PR titles — Conventional Commits, включая `spec:`. Версии вручную не повышай.
+
+1. Получи `main`, `develop` и теги: `git fetch origin --tags`. Убедись, что
+   `develop` содержит последний релиз. Создай `release/<name>` от проверенного
+   `develop`; `nvm use --silent`, `npm ci`. Hotfix начинается от `main` в
+   `release/hotfix-<name>` и проходит тот же процесс.
+2. На чистой ветке выполни `npm run release:preview`, просмотри версию/changelog,
+   затем `npm run release:prepare`. Команда создаёт `chore(release): X.Y.Z`,
+   обновляет manifest/lockfile/CHANGELOG; тег и push не выполняет. Не обходи
+   guards ветки, чистого дерева, отсутствующих тегов или уже подготовленной версии.
+3. Проверь diff и штатные gates этого репозитория. Отправь только release-ветку,
+   открой PR в `main` с заголовком `chore(release): X.Y.Z`. После зелёных
+   `verify`, `security`, `commits` выполни fast-forward-only merge. Если `main`
+   изменился, согласуй историю и повтори проверки кандидата.
+4. Получи удалённый `main`, сравни его HEAD с проверенным release SHA и версией
+   manifest/lockfile. Создай аннотированный `vX.Y.Z` именно на этом SHA:
+   `git tag -a vX.Y.Z <release-sha> -m "Release X.Y.Z"`, затем отправь только
+   `git push origin refs/tags/vX.Y.Z`. Не запускай release-it повторно на `main`.
+5. Верни release-коммит через PR `main → develop` без squash/rebase; проверь,
+   что `develop` содержит тег. Опубликованные теги не перемещай. При сбое после
+   merge создай отсутствующий тег без нового bump; до merge исправь и проверь
+   существующий кандидат без повторного повышения версии.
+
+`feat:` повышает minor, `fix:`/`perf:` и прочие разрешённые типы — patch;
+`!`/`BREAKING CHANGE:` — major, включая версии до 1.0. `chore(release):`
+исключён из рекомендации и changelog. Конфигурация — `.release-it.json`.
+В Gitea для `main`/`develop` должны быть запрещены прямой/force push и обход
+администратором, обязательны `verify`, `security`, `commits`; теги `v*` защищены.
+Workflow сам не включает эти настройки. Отдельное review approval для одного
+владельца не требуется. Npm publishing, deploy и Gitea Releases не включены.
@@ -27,7 +27,8 @@
 			},
 			"style": {
 				"noDefaultExport": "error",
-				"useExportsLast": "error"
+				"useExportsLast": "error",
+				"noMagicNumbers": "error"
 			}
 		}
 	},
@@ -57,6 +58,21 @@
 					}
 				}
 			}
+		},
+		{
+			"includes": [
+				"**/*.test.ts",
+				"**/*.test.tsx",
+				"**/*.stories.tsx",
+				"src/test/**"
+			],
+			"linter": {
+				"rules": {
+					"style": {
+						"noMagicNumbers": "off"
+					}
+				}
+			}
 		}
 	]
 }
@@ -1 +1,23 @@
-module.exports = { extends: ["@commitlint/config-conventional"] };
+module.exports = {
+	extends: ["@commitlint/config-conventional"],
+	rules: {
+		"type-enum": [
+			2,
+			"always",
+			[
+				"feat",
+				"fix",
+				"perf",
+				"docs",
+				"spec",
+				"refactor",
+				"build",
+				"ci",
+				"test",
+				"style",
+				"chore",
+				"revert",
+			],
+		],
+	},
+};
@@ -0,0 +1,43 @@
+worker_processes auto;
+pid /tmp/nginx.pid;
+error_log /dev/stderr warn;
+events { worker_connections 1024; }
+http {
+    include /etc/nginx/mime.types;
+    default_type application/octet-stream;
+    # Do not log query strings, cookies, authorization or bodies.
+    log_format safe '$request_method $uri $status';
+    access_log /dev/stdout safe;
+    client_body_temp_path /tmp/client_temp;
+    proxy_temp_path /tmp/proxy_temp;
+    fastcgi_temp_path /tmp/fastcgi_temp;
+    uwsgi_temp_path /tmp/uwsgi_temp;
+    scgi_temp_path /tmp/scgi_temp;
+    map $http_x_forwarded_proto $forwarded_proto {
+        default $http_x_forwarded_proto;
+        '' $scheme;
+    }
+    server {
+        listen 8080;
+        server_name _;
+        root /usr/share/nginx/html;
+        resolver 127.0.0.11 valid=5s ipv6=off;
+        location /api/ {
+            set $backend http://backend:3000;
+            proxy_pass $backend$request_uri;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Forwarded-Host $http_host;
+            proxy_set_header X-Forwarded-Proto $forwarded_proto;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Request-ID $http_x_request_id;
+        }
+        location /assets/ {
+            try_files $uri =404;
+            add_header Cache-Control "public, max-age=31536000, immutable";
+        }
+        location / {
+            try_files $uri $uri/ /index.html;
+            add_header Cache-Control "no-cache" always;
+        }
+    }
+}
@@ -1,3 +1,4 @@
 {
-	"project": ["src/**/*.{ts,tsx}", "!src/shared/api/generated/**"]
+	"project": ["src/**/*.{ts,tsx}", "!src/shared/api/generated/**"],
+	"ignoreDependencies": ["conventional-changelog-conventionalcommits"]
 }
@@ -1,10 +1,10 @@
 {
 	"name": "wealth-ledger-frontend",
 	"private": true,
-	"version": "0.0.0",
+	"version": "0.2.2",
 	"type": "module",
 	"engines": {
-		"node": "22.x"
+		"node": "24.21.0"
 	},
 	"scripts": {
 		"dev": "vite",
@@ -24,58 +24,68 @@
 		"verify": "npm run openapi:check && npm run typecheck && npm run lint && npm run test:coverage && npm run knip && npm run deps && npm run deps:storybook && npm run build && npm run build:catalog",
 		"prepare": "husky",
 		"preview": "vite preview",
-		"deps:storybook": "depcruise src .storybook/preview.tsx --config .storybook/dependency-cruiser.cjs --output-type err-long"
+		"deps:storybook": "depcruise src .storybook/preview.tsx --config .storybook/dependency-cruiser.cjs --output-type err-long",
+		"release:preview": "release-it --dry-run --ci",
+		"release:prepare": "release-it --ci",
+		"commitlint": "commitlint"
 	},
 	"lint-staged": {
 		"*.{css,html,json,md,ts,tsx}": "biome format --write --no-errors-on-unmatched"
 	},
 	"dependencies": {
-		"@hookform/resolvers": "5.7.1",
-		"@mantine/charts": "9.5.1",
-		"@mantine/core": "9.5.1",
-		"@mantine/dates": "9.5.1",
-		"@mantine/hooks": "9.5.1",
-		"@tanstack/react-query": "5.101.4",
+		"@hookform/resolvers": "5.9.1",
+		"@mantine/charts": "9.6.1",
+		"@mantine/core": "9.6.1",
+		"@mantine/dates": "9.6.1",
+		"@mantine/hooks": "9.6.1",
+		"@tanstack/react-query": "5.102.8",
 		"dayjs": "1.11.23",
-		"i18next": "26.0.2",
+		"i18next": "26.4.2",
 		"motion": "13.2.0",
 		"openapi-fetch": "0.17.0",
 		"openapi-react-query": "0.5.4",
-		"react": "19.2.8",
-		"react-dom": "19.2.8",
-		"react-hook-form": "7.85.0",
-		"react-i18next": "16.3.5",
-		"react-is": "19.2.8",
-		"react-router": "7.18.2",
+		"react": "19.3.0",
+		"react-dom": "19.3.0",
+		"react-hook-form": "7.88.0",
+		"react-i18next": "17.0.14",
+		"react-is": "19.3.0",
+		"react-router": "8.3.1",
 		"recharts": "3.10.1",
-		"zod": "3.25.76"
+		"zod": "4.6.4"
 	},
 	"devDependencies": {
-		"@babel/core": "7.29.7",
-		"@biomejs/biome": "2.5.8",
+		"@babel/core": "8.0.5",
+		"@biomejs/biome": "2.5.13",
 		"@commitlint/cli": "21.2.2",
 		"@commitlint/config-conventional": "21.2.2",
-		"@rolldown/plugin-babel": "0.2.3",
+		"@release-it/conventional-changelog": "12.0.0",
+		"@rolldown/plugin-babel": "0.2.4",
 		"@storybook/addon-docs": "10.6.0",
 		"@storybook/react-vite": "10.6.0",
-		"@testing-library/jest-dom": "6.9.1",
-		"@testing-library/react": "16.3.0",
-		"@types/node": "24.13.3",
-		"@types/react": "19.2.17",
-		"@types/react-dom": "19.2.3",
-		"@vitejs/plugin-react": "6.0.4",
-		"@vitest/coverage-v8": "4.1.10",
+		"@testing-library/jest-dom": "7.0.1",
+		"@testing-library/react": "16.3.3",
+		"@types/node": "24.13.4",
+		"@types/react": "19.3.0",
+		"@types/react-dom": "19.3.0",
+		"@vitejs/plugin-react": "6.1.1",
+		"@vitest/coverage-v8": "5.0.0",
 		"babel-plugin-react-compiler": "1.0.0",
+		"conventional-changelog-conventionalcommits": "10.4.0",
 		"dependency-cruiser": "18.2.0",
 		"husky": "9.1.7",
-		"jsdom": "27.4.0",
-		"knip": "6.32.2",
-		"lint-staged": "16.2.7",
+		"jsdom": "30.0.1",
+		"knip": "6.35.1",
+		"lint-staged": "17.5.1",
 		"msw": "2.15.0",
 		"openapi-typescript": "7.13.0",
+		"release-it": "21.0.2",
 		"storybook": "10.6.0",
 		"typescript": "5.9.3",
-		"vite": "8.2.0",
-		"vitest": "4.1.10"
+		"vite": "8.3.0",
+		"vitest": "5.0.0"
+	},
+	"allowScripts": {
+		"esbuild@0.28.2": true,
+		"fsevents@2.3.3": true
 	}
 }
@@ -0,0 +1,19 @@
+{
+	"$schema": "https://docs.renovatebot.com/renovate-schema.json",
+	"extends": ["config:recommended", ":semanticCommitTypeAll(chore)"],
+	"timezone": "Europe/Moscow",
+	"labels": ["dependencies"],
+	"dependencyDashboard": true,
+	"rangeStrategy": "pin",
+	"packageRules": [
+		{
+			"matchUpdateTypes": ["minor", "patch"],
+			"groupName": "non-major dependencies"
+		},
+		{
+			"matchUpdateTypes": ["major"],
+			"dependencyDashboardApproval": true
+		}
+	],
+	"baseBranchPatterns": ["develop"]
+}
@@ -0,0 +1,25 @@
+const assert = require("node:assert/strict");
+const { execFileSync } = require("node:child_process");
+const { version } = require("../package.json");
+const git = (...args) => execFileSync("git", args, { encoding: "utf8" }).trim();
+
+assert.equal(
+	git("status", "--porcelain"),
+	"",
+	"Commit all changes before preparing a release",
+);
+const tags = git(
+	"tag",
+	"--merged",
+	"HEAD",
+	"--list",
+	"v[0-9]*",
+	"--sort=-version:refname",
+)
+	.split("\n")
+	.filter((tag) => /^v\d+\.\d+\.\d+$/.test(tag));
+assert.equal(
+	version,
+	tags[0]?.slice(1) ?? "0.0.0",
+	"Version is already prepared or release tags are missing. Fetch tags; finish the existing release before preparing another.",
+);
@@ -0,0 +1,61 @@
+import assert from "node:assert/strict";
+import { execFileSync, spawnSync } from "node:child_process";
+import { randomBytes } from "node:crypto";
+import {
+	existsSync,
+	mkdirSync,
+	mkdtempSync,
+	rmSync,
+	writeFileSync,
+} from "node:fs";
+import { tmpdir } from "node:os";
+import { delimiter, join, resolve } from "node:path";
+import { test } from "node:test";
+
+const GITHUB_TOKEN_RANDOM_BYTES = 18;
+
+test("pre-commit scans the index, redacts findings and fails closed", () => {
+	const hook = resolve(".husky/pre-commit");
+	const cwd = mkdtempSync(join(tmpdir(), "frontend-hook-"));
+	const bin = join(cwd, "bin");
+	const marker = join(cwd, "downstream");
+	const token = `ghp_${randomBytes(GITHUB_TOKEN_RANDOM_BYTES).toString("hex")}`;
+	const git = (...args) => execFileSync("git", args, { cwd, stdio: "pipe" });
+	const run = (path = `${bin}${delimiter}${process.env.PATH}`) =>
+		spawnSync("/bin/sh", ["-e", hook], {
+			cwd,
+			env: { ...process.env, PATH: path },
+			encoding: "utf8",
+		});
+	try {
+		mkdirSync(bin);
+		for (const command of ["npx", "npm"]) {
+			writeFileSync(join(bin, command), "#!/bin/sh\necho ran >> downstream\n", {
+				mode: 0o755,
+			});
+		}
+		git("init", "--quiet");
+		writeFileSync(join(cwd, "sample.txt"), "safe staged content\n");
+		git("add", "sample.txt");
+		// An unstaged secret must not be mistaken for the index being committed.
+		writeFileSync(join(cwd, "sample.txt"), `token=${token}\n`);
+		let result = run();
+		assert.equal(
+			result.status,
+			0,
+			"clean index must pass; install Gitleaks first",
+		);
+		assert.ok(existsSync(marker));
+		rmSync(marker);
+		git("add", "sample.txt");
+		result = run();
+		assert.equal(result.status, 1, "staged secret must block commit");
+		assert.ok(!`${result.stdout}${result.stderr}`.includes(token));
+		assert.ok(!existsSync(marker), "formatting/dependency checks must not run");
+		result = run(bin);
+		assert.notEqual(result.status, 0, "missing Gitleaks must block commit");
+		assert.ok(!existsSync(marker));
+	} finally {
+		rmSync(cwd, { recursive: true, force: true });
+	}
+});
@@ -0,0 +1,12 @@
+sonar.projectKey=wealthledger-frontend
+sonar.projectName=WealthLedger frontend
+sonar.host.url=https://sonarqube.ksv741.keenetic.pro
+sonar.sourceEncoding=UTF-8
+
+sonar.sources=src
+sonar.tests=src
+sonar.test.inclusions=src/**/*.test.ts,src/**/*.test.tsx
+sonar.exclusions=src/**/*.test.ts,src/**/*.test.tsx,src/**/*.stories.tsx,src/test/**,src/shared/api/generated/**,src/shared/api/spec/**
+sonar.javascript.lcov.reportPaths=coverage/lcov.info
+# SonarQube 9.9 embeds an older TypeScript analyzer than the application compiler.
+sonar.typescript.tsconfigPaths=tsconfig.sonar.json
@@ -37,6 +37,7 @@ describe("AppRoutes", () => {
 		["/accounts/demo", "Вход"],
 		["/accounts/demo/operations", "Вход"],
 		["/settings", "Вход"],
+		["/cards?month=2026-08", "Вход"],
 		["/unknown", "Страница не найдена"],
 	])("renders %s with its page title", async (path, title) => {
 		renderRoutes(path);
@@ -94,6 +95,43 @@ describe("AppRoutes", () => {
 		});
 	});

+	it("returns after login to cards with the selected month without T-Bank", async () => {
+		server.use(
+			http.get("*/api/v1/bank-cards/categories", () => HttpResponse.json([])),
+			http.post("*/api/v1/auth/login", () =>
+				HttpResponse.json({
+					accessToken: "test",
+					user: { id: "user-1", email: "user@example.com" },
+				}),
+			),
+			http.get("*/api/v1/bank-cards", () => HttpResponse.json([])),
+			http.get("*/api/v1/bank-cards/summary", () =>
+				HttpResponse.json({
+					month: "2026-08",
+					cardId: null,
+					expenses: { currency: "RUB", value: "0" },
+					refunds: { currency: "RUB", value: "0" },
+					net: { currency: "RUB", value: "0" },
+					categories: [],
+				}),
+			),
+		);
+		renderRoutes("/cards?month=2026-08");
+		await screen.findByRole("heading", { name: "Вход" });
+		fireEvent.change(screen.getByLabelText("Email"), {
+			target: { value: "user@example.com" },
+		});
+		fireEvent.change(screen.getByLabelText("Пароль"), {
+			target: { value: "a secure password" },
+		});
+		fireEvent.click(screen.getByRole("button", { name: "Вход" }));
+		await screen.findByRole("heading", { name: "Добавьте первую карту" });
+		expect(screen.getByLabelText("Период")).toHaveTextContent(
+			"01.08.2026 – 31.08.2026",
+		);
+		expect(document.title).toBe("Карты — WealthLedger");
+	});
+
 	it("lazy-loads the protected shell for an authenticated accounts route", async () => {
 		server.use(
 			http.post("*/api/v1/auth/refresh", () =>
@@ -4,6 +4,14 @@ import { Navigate, Route, Routes } from "react-router";
 import { LazyPage } from "./RouteFallback";
 import { Protected, Public } from "./RouteGuards";

+const CardPage = lazy(async () => {
+	const { CardPage } = await import("@/pages/card");
+	return { default: CardPage };
+});
+const CardsPage = lazy(async () => {
+	const { CardsPage } = await import("@/pages/cards");
+	return { default: CardsPage };
+});
 const BondPage = lazy(async () => {
 	const { BondPage } = await import("@/pages/bond");
 	return { default: BondPage };
@@ -93,6 +101,22 @@ const AppRoutes: FC = () => (
 				</Protected>
 			}
 		>
+			<Route
+				path="/cards/:cardId"
+				element={
+					<LazyPage variant="content">
+						<CardPage />
+					</LazyPage>
+				}
+			/>
+			<Route
+				path="/cards"
+				element={
+					<LazyPage variant="content">
+						<CardsPage />
+					</LazyPage>
+				}
+			/>
 			<Route
 				path="/bonds"
 				element={
@@ -2,6 +2,7 @@ import { useDocumentTitle } from "@mantine/hooks";
 import type { FC } from "react";
 import { useTranslation } from "react-i18next";
 import { useMatch } from "react-router";
+import { useBankCard } from "@/entities/bank-card";
 import { useBond } from "@/entities/bond";
 import { useBrokerageAccounts } from "@/entities/brokerage-account";
 import { useStock } from "@/entities/stock";
@@ -52,14 +53,23 @@ const StockDocumentTitle: FC<InstrumentDocumentTitleProps> = (props) => {
 	return <DocumentTitle title={data?.name ?? t("stock.share")} />;
 };

+const CardDocumentTitle: FC<InstrumentDocumentTitleProps> = (props) => {
+	const { t } = useTranslation();
+	const { data } = useBankCard(props.identifier);
+	return <DocumentTitle title={data?.name ?? t("bank.card")} />;
+};
+
 const ProtectedDocumentTitle: FC = () => {
 	const { t } = useTranslation();
 	const account = useMatch("/accounts/:accountId/:section?");
 	const bond = useMatch("/bonds/:bondId");
 	const stock = useMatch("/stocks/:stockId");
+	const card = useMatch("/cards/:cardId");
+	const cards = useMatch("/cards");
 	const bonds = useMatch("/bonds");
 	const stocks = useMatch("/stocks");
 	const settings = useMatch("/settings");
+	if (card) return <CardDocumentTitle identifier={card.params.cardId ?? ""} />;
 	if (account)
 		return (
 			<AccountDocumentTitle
@@ -73,13 +83,15 @@ const ProtectedDocumentTitle: FC = () => {
 	return (
 		<DocumentTitle
 			title={t(
-				bonds
-					? "navigation.bonds"
-					: stocks
-						? "navigation.stocks"
-						: settings
-							? "navigation.settings"
-							: "navigation.accounts",
+				cards
+					? "navigation.cards"
+					: bonds
+						? "navigation.bonds"
+						: stocks
+							? "navigation.stocks"
+							: settings
+								? "navigation.settings"
+								: "navigation.accounts",
 			)}
 		/>
 	);
@@ -22,8 +22,16 @@ const Protected: FC<PropsWithChildren> = (props) => {
 const Public: FC<PropsWithChildren> = (props) => {
 	const { children } = props;
 	const { user, ready } = useAuth();
+	const location = useLocation();
+	const requested = (location.state as { returnTo?: string } | null)?.returnTo;
+	const returnTo =
+		typeof requested === "string" &&
+		requested.startsWith("/") &&
+		!requested.startsWith("//")
+			? requested
+			: "/accounts";
 	if (!ready) return <RouteSkeleton variant="shell" />;
-	return user ? <Navigate to="/accounts" replace /> : children;
+	return user ? <Navigate to={returnTo} replace /> : children;
 };

 export { Protected, Public };
@@ -3,6 +3,8 @@ import * as m from "motion/react-m";
 import type { FC, PropsWithChildren } from "react";
 import { useLocation } from "react-router";

+const TRANSITION_DURATION_SECONDS = 0.2;
+
 const RouteTransition: FC<PropsWithChildren> = (props) => {
 	const { children } = props;
 	const { pathname } = useLocation();
@@ -14,7 +16,10 @@ const RouteTransition: FC<PropsWithChildren> = (props) => {
 				key={pathname}
 				initial={reduceMotion ? false : { opacity: 0 }}
 				animate={{ opacity: 1 }}
-				transition={{ duration: reduceMotion ? 0 : 0.2, ease: "easeOut" }}
+				transition={{
+					duration: reduceMotion ? 0 : TRANSITION_DURATION_SECONDS,
+					ease: "easeOut",
+				}}
 			>
 				{children}
 			</m.div>
@@ -6,6 +6,7 @@ import { AccountBreadcrumbs } from "./AccountBreadcrumbs";
 import { AccountScopeSwitch } from "./AccountScopeSwitch";
 import { BondBreadcrumbs } from "./BondBreadcrumbs";
 import { BreadcrumbTrail } from "./BreadcrumbTrail";
+import { CardBreadcrumbs } from "./CardBreadcrumbs";
 import { StockBreadcrumbs } from "./StockBreadcrumbs";

 const AppBreadcrumbs: FC = () => {
@@ -17,6 +18,8 @@ const AppBreadcrumbs: FC = () => {
 	const events = useMatch({ path: "/accounts/:accountId/events", end: true });
 	const income = useMatch({ path: "/accounts/:accountId/income", end: true });
 	const account = useMatch({ path: "/accounts/:accountId", end: true });
+	const card = useMatch("/cards/:cardId");
+	const cards = useMatch("/cards");
 	const accounts = useMatch({ path: "/accounts", end: true });
 	const settings = useMatch({ path: "/settings", end: true });

@@ -71,6 +74,8 @@ const AppBreadcrumbs: FC = () => {
 				<AccountScopeSwitch accountId={account.params.accountId ?? ""} />
 			</Stack>
 		);
+	if (card) return <CardBreadcrumbs identifier={card.params.cardId ?? ""} />;
+	if (cards) return <BreadcrumbTrail items={[{ label: t("bank.title") }]} />;
 	if (accounts)
 		return <BreadcrumbTrail items={[{ label: t("breadcrumbs.accounts") }]} />;
 	if (settings)
@@ -0,0 +1,20 @@
+import type { FC } from "react";
+import { useTranslation } from "react-i18next";
+import { useBankCard } from "@/entities/bank-card";
+import { BreadcrumbTrail } from "./BreadcrumbTrail";
+
+type CardBreadcrumbsProps = { identifier: string };
+const CardBreadcrumbs: FC<CardBreadcrumbsProps> = (props) => {
+	const { data } = useBankCard(props.identifier);
+	const { t } = useTranslation();
+	return (
+		<BreadcrumbTrail
+			items={[
+				{ label: t("bank.title"), to: "/cards" },
+				{ label: data?.name ?? t("bank.card") },
+			]}
+		/>
+	);
+};
+
+export { CardBreadcrumbs };
@@ -0,0 +1,424 @@
+import { act, renderHook, waitFor } from "@testing-library/react";
+import { HttpResponse, http } from "msw";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { apiClient, configureAuthClient } from "@/shared/api";
+import { createQueryWrapper } from "@/test/query";
+import { server } from "@/test/server";
+import { useBankMutations } from "./mutations";
+import {
+	type BankCard,
+	type CreateBankOperation,
+	useBankCard,
+	useBankCards,
+	useBankCategories,
+	useBankExpenses,
+	useBankOperation,
+	useBankOperations,
+	useBankSummary,
+} from "./queries";
+
+const card: BankCard = {
+	id: "a",
+	name: "Daily",
+	bankName: null,
+	lastFour: null,
+	paymentSystem: null,
+	openingBalance: { currency: "RUB", value: "100" },
+	openingDate: "2026-09-01",
+	balance: { currency: "RUB", value: "100" },
+	archivedAt: null,
+	version: 1,
+};
+const transfer: CreateBankOperation = {
+	id: "4e6caa65-dd52-4629-81e2-ce8a139a0612",
+	kind: "transfer",
+	cardId: "a",
+	targetCardId: "b",
+	amount: { currency: "RUB", value: "90071992547409.93" },
+	date: "2026-09-12",
+};
+
+function authenticate() {
+	configureAuthClient({
+		accessToken: () => "token",
+		refresh: async () => true,
+		clear: vi.fn(),
+	});
+}
+
+function readHandlers(counts: Map<string, number>, categoryName = "Food") {
+	return [
+		http.get("*/api/v1/bank-cards", ({ request }) => {
+			const key = new URL(request.url).pathname + new URL(request.url).search;
+			counts.set(key, (counts.get(key) ?? 0) + 1);
+			return HttpResponse.json([card]);
+		}),
+		http.get("*/api/v1/bank-cards/*", ({ request }) => {
+			const url = new URL(request.url);
+			const key = url.pathname + url.search;
+			counts.set(key, (counts.get(key) ?? 0) + 1);
+			if (url.pathname.endsWith("/categories"))
+				return HttpResponse.json([
+					{ id: "food", name: categoryName, isDefault: true, version: 1 },
+				]);
+			if (url.pathname.endsWith("/summary"))
+				return HttpResponse.json({
+					month: url.searchParams.get("month"),
+					cardId: url.searchParams.get("cardId"),
+					expenses: { currency: "RUB", value: "0" },
+					refunds: { currency: "RUB", value: "0" },
+					net: { currency: "RUB", value: "0" },
+					categories: [],
+				});
+			if (
+				url.pathname.endsWith("/operations") ||
+				url.pathname.endsWith("/expenses")
+			)
+				return HttpResponse.json({
+					items: [],
+					page: 1,
+					total: 0,
+					hasNext: false,
+				});
+			if (url.pathname.includes("/operations/"))
+				return HttpResponse.json({ ...transfer, version: 1 });
+			return HttpResponse.json({ ...card, id: url.pathname.split("/").at(-1) });
+		}),
+	];
+}
+
+function useReadModels() {
+	const cards = useBankCards(true);
+	const a = useBankCard("a");
+	const b = useBankCard("b");
+	const categories = useBankCategories();
+	const history = useBankOperations("a", {
+		month: "2026-09",
+		page: 2,
+		limit: 20,
+	});
+	const expenses = useBankExpenses("a", { page: 1 });
+	const september = useBankSummary("2026-09");
+	const august = useBankSummary("2026-08", "b");
+	const original = useBankOperation("original");
+	return {
+		reads: [
+			cards,
+			a,
+			b,
+			categories,
+			history,
+			expenses,
+			september,
+			august,
+			original,
+		],
+		mutations: useBankMutations(),
+	};
+}
+
+describe("banking API", () => {
+	beforeEach(authenticate);
+
+	it("loads every page for all mode and fails without exposing partial results", async () => {
+		const pages: number[] = [];
+		let fail = false;
+		server.use(
+			http.get("*/api/v1/bank-cards/a/operations", ({ request }) => {
+				const url = new URL(request.url);
+				const page = Number(url.searchParams.get("page"));
+				pages.push(page);
+				expect(url.searchParams.get("limit")).toBe("100");
+				expect(url.searchParams.get("month")).toBe("2026-09");
+				if (fail && page === 2)
+					return HttpResponse.json({ code: "FAILED" }, { status: 500 });
+				return HttpResponse.json({
+					items: [{ ...transfer, id: String(page) }],
+					total: 2,
+					page,
+					hasNext: page === 1,
+				});
+			}),
+		);
+		const { result } = renderHook(
+			() => useBankOperations("a", { month: "2026-09", page: 1, limit: "all" }),
+			{ wrapper: createQueryWrapper().wrapper },
+		);
+		await waitFor(() => expect(result.current.isSuccess).toBe(true));
+		expect(pages).toEqual([1, 2]);
+		expect(result.current.data?.items.map((item) => item.id)).toEqual([
+			"1",
+			"2",
+		]);
+		fail = true;
+		const failed = renderHook(
+			() => useBankOperations("a", { month: "2026-09", page: 1, limit: "all" }),
+			{ wrapper: createQueryWrapper().wrapper },
+		);
+		await waitFor(() => expect(failed.result.current.isError).toBe(true));
+		expect(failed.result.current.data).toBeUndefined();
+	});
+
+	it("uses session-aware banking endpoints and explicit month/page without T-Bank", async () => {
+		const counts = new Map<string, number>();
+		server.use(...readHandlers(counts));
+		const { result } = renderHook(useReadModels, {
+			wrapper: createQueryWrapper().wrapper,
+		});
+		await waitFor(() =>
+			expect(result.current.reads.every((read) => read.isSuccess)).toBe(true),
+		);
+		expect([...counts.keys()]).toContain(
+			"/api/v1/bank-cards?includeArchived=true",
+		);
+		expect([...counts.keys()]).toContain(
+			"/api/v1/bank-cards/a/operations?month=2026-09&page=2&limit=20",
+		);
+		expect([...counts.keys()]).toContain(
+			"/api/v1/bank-cards/summary?month=2026-08&cardId=b",
+		);
+		expect(counts.size).toBe(9);
+	});
+
+	it("replays the exact UUID and large Money string once across shared auth refresh", async () => {
+		let token = "expired";
+		const refresh = vi.fn(async () => {
+			token = "renewed";
+			return true;
+		});
+		configureAuthClient({ accessToken: () => token, refresh, clear: vi.fn() });
+		const bodies: unknown[] = [];
+		const headers: (string | null)[] = [];
+		server.use(
+			http.post("*/api/v1/bank-cards/operations", async ({ request }) => {
+				bodies.push(await request.json());
+				headers.push(request.headers.get("Authorization"));
+				return bodies.length === 1
+					? HttpResponse.json({ code: "UNAUTHORIZED" }, { status: 401 })
+					: HttpResponse.json({ ...transfer, version: 1 });
+			}),
+		);
+		const { result } = renderHook(useBankMutations, {
+			wrapper: createQueryWrapper().wrapper,
+		});
+		await act(() => result.current.createOperation.mutateAsync(transfer));
+		expect(bodies).toEqual([transfer, transfer]);
+		expect(headers).toEqual(["Bearer expired", "Bearer renewed"]);
+		expect(refresh).toHaveBeenCalledTimes(1);
+	});
+
+	it("does not automatically retry a network failure and preserves the form-supplied intent on repeat", async () => {
+		const bodies: unknown[] = [];
+		server.use(
+			http.post("*/api/v1/bank-cards/operations", async ({ request }) => {
+				bodies.push(await request.json());
+				return bodies.length === 1
+					? HttpResponse.error()
+					: HttpResponse.json({ ...transfer, version: 1 });
+			}),
+		);
+		const { result } = renderHook(useBankMutations, {
+			wrapper: createQueryWrapper().wrapper,
+		});
+		await act(async () => {
+			await expect(
+				result.current.createOperation.mutateAsync(transfer),
+			).rejects.toThrow();
+		});
+		expect(bodies).toEqual([transfer]);
+		await act(() => result.current.createOperation.mutateAsync(transfer));
+		expect(bodies).toEqual([transfer, transfer]);
+	});
+
+	it("keeps the confirmed balance while a mutation is pending or fails, and on refetch failure", async () => {
+		server.use(...readHandlers(new Map()));
+		let finish: () => void = () => {};
+		const pending = new Promise<void>((resolve) => {
+			finish = resolve;
+		});
+		server.use(
+			http.post("*/api/v1/bank-cards/operations", async () => {
+				await pending;
+				return HttpResponse.json({ code: "INTERNAL_ERROR" }, { status: 500 });
+			}),
+		);
+		const { result } = renderHook(
+			() => ({ query: useBankCard("a"), mutations: useBankMutations() }),
+			{ wrapper: createQueryWrapper().wrapper },
+		);
+		await waitFor(() => expect(result.current.query.isSuccess).toBe(true));
+		let saving: Promise<unknown>;
+		act(() => {
+			saving = result.current.mutations.createOperation
+				.mutateAsync(transfer)
+				.catch(() => undefined);
+		});
+		await waitFor(() =>
+			expect(result.current.mutations.createOperation.isPending).toBe(true),
+		);
+		expect(result.current.query.data?.balance.value).toBe("100");
+		await act(async () => {
+			finish();
+			await saving;
+		});
+		expect(result.current.query.data?.balance.value).toBe("100");
+		server.use(
+			http.get("*/api/v1/bank-cards/a", () =>
+				HttpResponse.json({ code: "INTERNAL_ERROR" }, { status: 500 }),
+			),
+		);
+		await act(() => result.current.query.refetch());
+		expect(result.current.query.isError).toBe(true);
+		expect(result.current.query.data?.balance.value).toBe("100");
+	});
+
+	it("refetches both cards, every month, categories, journal and source expenses after a transfer without invalidating brokerage", async () => {
+		const counts = new Map<string, number>();
+		server.use(
+			...readHandlers(counts),
+			http.post("*/api/v1/bank-cards/operations", () =>
+				HttpResponse.json({ ...transfer, version: 1 }),
+			),
+		);
+		const { wrapper, queryClient } = createQueryWrapper();
+		const brokerKey = ["get", "/api/v1/brokerage-accounts"];
+		queryClient.setQueryData(brokerKey, []);
+		const { result } = renderHook(useReadModels, { wrapper });
+		await waitFor(() =>
+			expect(result.current.reads.every((read) => read.isSuccess)).toBe(true),
+		);
+		await act(() =>
+			result.current.mutations.createOperation.mutateAsync(transfer),
+		);
+		expect([...counts.values()]).toEqual(Array(9).fill(2));
+		expect(queryClient.getQueryState(brokerKey)?.isInvalidated).toBe(false);
+	});
+
+	it.each([
+		"BANK_VERSION_CONFLICT",
+		"BANK_INTENT_CONFLICT",
+		"BANK_REFUND_LIMIT",
+	])("fetches current state after %s", async (code) => {
+		let reads = 0;
+		server.use(
+			http.get("*/api/v1/bank-cards/a", () =>
+				HttpResponse.json({ ...card, version: ++reads }),
+			),
+			http.patch("*/api/v1/bank-cards/a", () =>
+				HttpResponse.json({ code }, { status: 409 }),
+			),
+		);
+		const { result } = renderHook(
+			() => ({ card: useBankCard("a"), mutations: useBankMutations() }),
+			{ wrapper: createQueryWrapper().wrapper },
+		);
+		await waitFor(() => expect(result.current.card.data?.version).toBe(1));
+		await act(async () => {
+			await expect(
+				result.current.mutations.updateCard.mutateAsync({
+					id: "a",
+					body: { name: "changed", version: 1 },
+				}),
+			).rejects.toEqual({ code });
+		});
+		await waitFor(() => expect(result.current.card.data?.version).toBe(2));
+	});
+
+	it("sends edit/delete versions and refreshes category names without optimistic updates", async () => {
+		const requests: unknown[] = [];
+		let name = "Food";
+		server.use(
+			http.get("*/api/v1/bank-cards/categories", () =>
+				HttpResponse.json([{ id: "food", name, isDefault: true, version: 1 }]),
+			),
+			http.patch("*/api/v1/bank-cards/categories/food", async ({ request }) => {
+				const body = await request.json();
+				requests.push(body);
+				name = "Groceries";
+				return HttpResponse.json({
+					id: "food",
+					name,
+					isDefault: true,
+					version: 2,
+				});
+			}),
+			http.patch(
+				"*/api/v1/bank-cards/operations/original",
+				async ({ request }) => {
+					requests.push(await request.json());
+					return HttpResponse.json({ ...transfer, version: 2 });
+				},
+			),
+			http.delete("*/api/v1/bank-cards/operations/original", ({ request }) => {
+				requests.push(new URL(request.url).searchParams.get("version"));
+				return new HttpResponse(null, { status: 204 });
+			}),
+		);
+		const { result } = renderHook(
+			() => ({
+				categories: useBankCategories(),
+				mutations: useBankMutations(),
+			}),
+			{ wrapper: createQueryWrapper().wrapper },
+		);
+		await waitFor(() =>
+			expect(result.current.categories.data?.[0].name).toBe("Food"),
+		);
+		await act(() =>
+			result.current.mutations.updateCategory.mutateAsync({
+				id: "food",
+				body: { name: "Groceries", version: 1 },
+			}),
+		);
+		await waitFor(() =>
+			expect(result.current.categories.data?.[0].name).toBe("Groceries"),
+		);
+		await act(() =>
+			result.current.mutations.updateOperation.mutateAsync({
+				id: "original",
+				body: { description: "corrected", version: 1 },
+			}),
+		);
+		await act(() =>
+			result.current.mutations.deleteOperation.mutateAsync({
+				id: "original",
+				version: 2,
+			}),
+		);
+		expect(requests).toEqual([
+			{ name: "Groceries", version: 1 },
+			{ description: "corrected", version: 1 },
+			"2",
+		]);
+	});
+
+	it("disables reads after session removal and retains banking data across a T-Bank API mutation", async () => {
+		const counts = new Map<string, number>();
+		server.use(
+			...readHandlers(counts),
+			http.put("*/api/v1/tbank-connection", () =>
+				HttpResponse.json({
+					connected: true,
+					connectedAt: "2026-09-12T00:00:00Z",
+				}),
+			),
+		);
+		const { wrapper, queryClient } = createQueryWrapper();
+		const { result, rerender } = renderHook(() => useBankCard("a"), {
+			wrapper,
+		});
+		await waitFor(() => expect(result.current.data?.balance.value).toBe("100"));
+		await apiClient.PUT("/api/v1/tbank-connection", {
+			body: { token: "synthetic" },
+		});
+		expect(result.current.data?.balance.value).toBe("100");
+		act(() => {
+			configureAuthClient(null);
+			queryClient.clear();
+		});
+		rerender();
+		await waitFor(() => expect(result.current.fetchStatus).toBe("idle"));
+		expect(result.current.data).toBeUndefined();
+		expect(counts.get("/api/v1/bank-cards/a")).toBe(1);
+	});
+});
@@ -0,0 +1,111 @@
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { apiClient, apiErrorCode } from "@/shared/api";
+import type {
+	CreateBankCard,
+	CreateBankOperation,
+	CreateExpenseCategory,
+	UpdateBankCard,
+	UpdateBankOperation,
+	UpdateExpenseCategory,
+} from "./queries";
+
+async function mutationData<T>(
+	request: Promise<{ data?: T; error?: unknown }>,
+) {
+	const { data, error } = await request;
+	if (error) throw error;
+	return data;
+}
+
+function useBankMutations() {
+	const queryClient = useQueryClient();
+	const invalidate = () =>
+		queryClient.invalidateQueries({
+			predicate: ({ queryKey: [method, path] }) =>
+				method === "get" &&
+				typeof path === "string" &&
+				(path === "/api/v1/bank-cards" ||
+					path.startsWith("/api/v1/bank-cards/")),
+		});
+	const options = {
+		retry: false,
+		onSuccess: invalidate,
+		onError: (error: unknown) => {
+			if (
+				[
+					"BANK_VERSION_CONFLICT",
+					"BANK_WRITE_CONFLICT",
+					"BANK_INTENT_CONFLICT",
+					"BANK_REFUND_LIMIT",
+					"BANK_DEPENDENT_REFUNDS",
+				].includes(apiErrorCode(error) ?? "")
+			)
+				return invalidate();
+		},
+	} as const;
+	const createCard = useMutation({
+		...options,
+		mutationFn: (body: CreateBankCard) =>
+			mutationData(apiClient.POST("/api/v1/bank-cards", { body })),
+	});
+	const updateCard = useMutation({
+		...options,
+		mutationFn: ({ id, body }: { id: string; body: UpdateBankCard }) =>
+			mutationData(
+				apiClient.PATCH("/api/v1/bank-cards/{id}", {
+					params: { path: { id } },
+					body,
+				}),
+			),
+	});
+	const createOperation = useMutation({
+		...options,
+		mutationFn: (body: CreateBankOperation) =>
+			mutationData(apiClient.POST("/api/v1/bank-cards/operations", { body })),
+	});
+	const updateOperation = useMutation({
+		...options,
+		mutationFn: ({ id, body }: { id: string; body: UpdateBankOperation }) =>
+			mutationData(
+				apiClient.PATCH("/api/v1/bank-cards/operations/{id}", {
+					params: { path: { id } },
+					body,
+				}),
+			),
+	});
+	const deleteOperation = useMutation({
+		...options,
+		mutationFn: ({ id, version }: { id: string; version: number }) =>
+			mutationData(
+				apiClient.DELETE("/api/v1/bank-cards/operations/{id}", {
+					params: { path: { id }, query: { version } },
+				}),
+			),
+	});
+	const createCategory = useMutation({
+		...options,
+		mutationFn: (body: CreateExpenseCategory) =>
+			mutationData(apiClient.POST("/api/v1/bank-cards/categories", { body })),
+	});
+	const updateCategory = useMutation({
+		...options,
+		mutationFn: ({ id, body }: { id: string; body: UpdateExpenseCategory }) =>
+			mutationData(
+				apiClient.PATCH("/api/v1/bank-cards/categories/{id}", {
+					params: { path: { id } },
+					body,
+				}),
+			),
+	});
+	return {
+		createCard,
+		updateCard,
+		createOperation,
+		updateOperation,
+		deleteOperation,
+		createCategory,
+		updateCategory,
+	};
+}
+
+export { useBankMutations };
@@ -0,0 +1,194 @@
+import {
+	apiClient,
+	apiQueryClient,
+	type paths,
+	useAuthenticatedQuery,
+} from "@/shared/api";
+
+import { moneyCents } from "../model/form-validation";
+
+type BankCard =
+	paths["/api/v1/bank-cards/{id}"]["get"]["responses"][200]["content"]["application/json"];
+type BankOperation =
+	paths["/api/v1/bank-cards/operations/{id}"]["get"]["responses"][200]["content"]["application/json"];
+type BankOperations =
+	paths["/api/v1/bank-cards/{id}/operations"]["get"]["responses"][200]["content"]["application/json"];
+type BankSummary =
+	paths["/api/v1/bank-cards/summary"]["get"]["responses"][200]["content"]["application/json"];
+type ExpenseCategory =
+	paths["/api/v1/bank-cards/categories"]["get"]["responses"][200]["content"]["application/json"][number];
+type CreateBankCard =
+	paths["/api/v1/bank-cards"]["post"]["requestBody"]["content"]["application/json"];
+type UpdateBankCard =
+	paths["/api/v1/bank-cards/{id}"]["patch"]["requestBody"]["content"]["application/json"];
+type CreateBankOperation =
+	paths["/api/v1/bank-cards/operations"]["post"]["requestBody"]["content"]["application/json"];
+type UpdateBankOperation =
+	paths["/api/v1/bank-cards/operations/{id}"]["patch"]["requestBody"]["content"]["application/json"];
+type CreateExpenseCategory =
+	paths["/api/v1/bank-cards/categories"]["post"]["requestBody"]["content"]["application/json"];
+type UpdateExpenseCategory =
+	paths["/api/v1/bank-cards/categories/{id}"]["patch"]["requestBody"]["content"]["application/json"];
+
+const OPERATIONS_PAGE_SIZE = 100;
+
+function useBankCards(includeArchived = false) {
+	return useAuthenticatedQuery(
+		apiQueryClient.queryOptions("get", "/api/v1/bank-cards", {
+			params: {
+				query: { includeArchived: includeArchived ? "true" : "false" },
+			},
+		}),
+	);
+}
+
+function useBankCard(id: string | undefined) {
+	return useAuthenticatedQuery({
+		...apiQueryClient.queryOptions("get", "/api/v1/bank-cards/{id}", {
+			params: { path: { id: id ?? "" } },
+		}),
+		enabled: Boolean(id),
+	});
+}
+
+function useBankCategories() {
+	return useAuthenticatedQuery(
+		apiQueryClient.queryOptions("get", "/api/v1/bank-cards/categories"),
+	);
+}
+
+function useBankOperations(
+	id: string | undefined,
+	query: {
+		month?: string;
+		from?: string;
+		to?: string;
+		page: number;
+		limit?: number | "all";
+	},
+) {
+	const all = query.limit === "all";
+	const params = {
+		path: { id: id ?? "" },
+		query: {
+			...query,
+			page: all ? 1 : query.page,
+			limit: query.limit === "all" ? OPERATIONS_PAGE_SIZE : query.limit,
+		},
+	};
+	const options = apiQueryClient.queryOptions(
+		"get",
+		"/api/v1/bank-cards/{id}/operations",
+		{ params },
+	);
+	return useAuthenticatedQuery({
+		queryKey: all ? ([...options.queryKey, "all"] as const) : options.queryKey,
+		placeholderData: (
+			previousData: BankOperations | undefined,
+			previousQuery,
+		) => {
+			const previous = previousQuery?.queryKey[2]?.params;
+			return !all &&
+				previousQuery?.queryKey.length === options.queryKey.length &&
+				previous?.path?.id === id &&
+				previous?.query?.month === query.month &&
+				previous?.query?.from === query.from &&
+				previous?.query?.to === query.to &&
+				previous?.query?.limit === query.limit
+				? previousData
+				: undefined;
+		},
+		queryFn: async ({ signal }) => {
+			const items: BankOperation[] = [];
+			for (let page = params.query.page; ; page++) {
+				const { data, error } = await apiClient.GET(
+					"/api/v1/bank-cards/{id}/operations",
+					{
+						params: { ...params, query: { ...params.query, page } },
+						signal,
+					},
+				);
+				if (error) throw error;
+				if (!data) throw new Error("Missing bank operations response");
+				if (!all) return data;
+				items.push(...data.items);
+				if (!data.hasNext) return { ...data, items, page: 1, hasNext: false };
+			}
+		},
+		enabled: Boolean(id && (query.month || (query.from && query.to))),
+	});
+}
+
+function useBankExpenses(
+	id: string | undefined,
+	query: { page: number; limit?: number },
+) {
+	return useAuthenticatedQuery({
+		...apiQueryClient.queryOptions("get", "/api/v1/bank-cards/{id}/expenses", {
+			params: { path: { id: id ?? "" }, query },
+		}),
+		enabled: Boolean(id),
+	});
+}
+
+function sortBankSummary(data: BankSummary): BankSummary {
+	return {
+		...data,
+		categories: data.categories.toSorted((a, b) => {
+			const left = moneyCents(a.net.value);
+			const right = moneyCents(b.net.value);
+			if (left === null || right === null)
+				throw new Error("Invalid bank summary amount");
+			return left > right ? -1 : left < right ? 1 : 0;
+		}),
+	};
+}
+
+function useBankSummary(
+	period: string | { from: string; to: string },
+	cardId?: string,
+) {
+	const query =
+		typeof period === "string"
+			? { month: period, cardId }
+			: { ...period, cardId };
+	return useAuthenticatedQuery({
+		...apiQueryClient.queryOptions("get", "/api/v1/bank-cards/summary", {
+			params: { query },
+		}),
+		select: sortBankSummary,
+		enabled: Boolean(period),
+	});
+}
+
+function useBankOperation(id: string | undefined) {
+	return useAuthenticatedQuery({
+		...apiQueryClient.queryOptions(
+			"get",
+			"/api/v1/bank-cards/operations/{id}",
+			{ params: { path: { id: id ?? "" } } },
+		),
+		enabled: Boolean(id),
+	});
+}
+
+export {
+	type BankCard,
+	type BankOperation,
+	type BankSummary,
+	type CreateBankCard,
+	type CreateBankOperation,
+	type CreateExpenseCategory,
+	type ExpenseCategory,
+	sortBankSummary,
+	type UpdateBankCard,
+	type UpdateBankOperation,
+	type UpdateExpenseCategory,
+	useBankCard,
+	useBankCards,
+	useBankCategories,
+	useBankExpenses,
+	useBankOperation,
+	useBankOperations,
+	useBankSummary,
+};
@@ -0,0 +1,32 @@
+import { expect, it } from "vitest";
+import { type BankSummary, sortBankSummary } from "./queries";
+
+it("orders displayed expenses descending, preserving cents, ties and source data", () => {
+	const values = [
+		"-10",
+		"9007199254740992.01",
+		"0",
+		"9007199254740992.02",
+		"-2",
+		"0",
+	];
+	const money = (value: string) => ({ currency: "RUB", value });
+	const data: BankSummary = {
+		month: "2026-09",
+		cardId: "a",
+		expenses: money("0"),
+		refunds: money("0"),
+		net: money("0"),
+		categories: values.map((value, index) => ({
+			categoryId: String(index),
+			categoryName: String(index),
+			expenses: money("100"),
+			refunds: money("0"),
+			net: money(value),
+		})),
+	};
+	expect(sortBankSummary(data).categories.map((row) => row.categoryId)).toEqual(
+		["3", "1", "2", "5", "4", "0"],
+	);
+	expect(data.categories.map((row) => row.net.value)).toEqual(values);
+});
@@ -0,0 +1,29 @@
+export { useBankMutations } from "./api/mutations";
+export {
+	type BankCard,
+	type BankOperation,
+	useBankCard,
+	useBankCards,
+	useBankCategories,
+	useBankExpenses,
+	useBankOperation,
+	useBankOperations,
+	useBankSummary,
+} from "./api/queries";
+export {
+	bankDateInputValue,
+	bankDateSchema,
+	bankMoneyValue,
+	bankToday,
+	moneyCents,
+	positiveMoneySchema,
+} from "./model/form-validation";
+export { bankPeriod } from "./model/period";
+export { BankCardFace } from "./ui/BankCardFace";
+export { BankCardForm } from "./ui/BankCardForm";
+export { BankFeedback } from "./ui/BankFeedback";
+export { BankOperationIcon } from "./ui/BankOperationIcon";
+export { BankPeriodPicker } from "./ui/BankPeriodPicker";
+export { BankSummaryView } from "./ui/BankSummary.view";
+export { CategoryManager } from "./ui/CategoryManager";
+export { useBankFormFocus } from "./ui/useBankFormFocus";
@@ -0,0 +1,69 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import {
+	bankCardSchema,
+	bankDateInputValue,
+	bankDateSchema,
+	bankMoneyValue,
+	bankMonth,
+	bankToday,
+	positiveMoneySchema,
+} from "./form-validation";
+
+afterEach(() => vi.useRealTimers());
+describe("bank form input", () => {
+	it("keeps input bounds exact without rounding and canonicalizes leading zeros", () => {
+		expect(positiveMoneySchema.safeParse("92233720368547758.07").success).toBe(
+			true,
+		);
+		for (const invalid of [
+			"92233720368547758.08",
+			"1.001",
+			"0",
+			"-1",
+			"abc",
+			"1e3",
+		]) {
+			expect(positiveMoneySchema.safeParse(invalid).success).toBe(false);
+		}
+		expect(bankMoneyValue(" -00010,20 ")).toBe("-10.20");
+		const values = {
+			name: "A",
+			bankName: "",
+			lastFour: "",
+			openingBalance: "-92233720368547758.08",
+			openingDate: "2026-01-01",
+		};
+		expect(bankCardSchema.safeParse(values).success).toBe(true);
+		expect(
+			bankCardSchema.safeParse({
+				...values,
+				openingBalance: "-92233720368547758.09",
+			}).success,
+		).toBe(false);
+		expect(
+			bankCardSchema.safeParse({ ...values, lastFour: "123" }).success,
+		).toBe(false);
+	});
+	it("uses Moscow date and refuses nonexistent or future calendar days", () => {
+		vi.useFakeTimers();
+		vi.setSystemTime(new Date("2026-08-31T21:30:00Z"));
+		expect(bankToday()).toBe("2026-09-01");
+		expect(bankMonth(null)).toBe("2026-09");
+		expect(bankMonth("2026-13")).toBe("2026-09");
+		expect(bankDateSchema.safeParse("2026-09-01").success).toBe(true);
+		expect(bankDateSchema.safeParse("2026-09-02").success).toBe(false);
+		expect(bankDateSchema.safeParse("2026-02-30").success).toBe(false);
+	});
+});
+
+it("converts local date input without accepting impossible or unfinished dates", () => {
+	expect(bankDateInputValue("07.08.2026")).toBe("2026-08-07");
+	expect(
+		bankDateSchema.safeParse(bankDateInputValue("29.02.2024")).success,
+	).toBe(true);
+	for (const value of ["31.02.2026", "07.08.", ""]) {
+		expect(bankDateSchema.safeParse(bankDateInputValue(value)).success).toBe(
+			false,
+		);
+	}
+});
@@ -0,0 +1,109 @@
+import { z } from "zod";
+import { validationMessage } from "@/shared/i18n";
+
+const ISO_MONTH_LENGTH = 7;
+const MAX_CARD_NAME_LENGTH = 100;
+
+function bankToday() {
+	return new Intl.DateTimeFormat("en-CA", {
+		timeZone: "Europe/Moscow",
+		year: "numeric",
+		month: "2-digit",
+		day: "2-digit",
+	}).format(new Date());
+}
+function bankDateInputValue(value: string) {
+	return value.replace(/^(\d{2})\.(\d{2})\.(\d{4})$/, "$3-$2-$1");
+}
+function bankMonth(value: string | null) {
+	return value && /^\d{4}-(0[1-9]|1[0-2])$/.test(value)
+		? value
+		: bankToday().slice(0, ISO_MONTH_LENGTH);
+}
+function bankMoneyValue(value: string) {
+	return value
+		.trim()
+		.replace(",", ".")
+		.replace(/^(-?)0+(?=\d)/, "$1");
+}
+function moneyCents(value: string): bigint | null {
+	const normalized = value.trim().replace(",", ".");
+	if (!/^-?\d+(\.\d{1,2})?$/.test(normalized)) return null;
+	const [whole, fraction = ""] = normalized.replace("-", "").split(".");
+	return (
+		BigInt(`${whole}${fraction.padEnd(2, "0")}`) *
+		(normalized.startsWith("-") ? -1n : 1n)
+	);
+}
+const MIN_BALANCE_KOPECKS = -9_223_372_036_854_775_808n;
+const MAX_BALANCE_KOPECKS = 9_223_372_036_854_775_807n;
+
+const moneySchema = z.string().refine(
+	(value) => {
+		const cents = moneyCents(value);
+		return (
+			cents !== null &&
+			cents >= MIN_BALANCE_KOPECKS &&
+			cents <= MAX_BALANCE_KOPECKS
+		);
+	},
+	{ error: validationMessage("bank.validation.money") },
+);
+const positiveMoneySchema = moneySchema.refine(
+	(value) => {
+		const cents = moneyCents(value);
+		return cents === null || cents > 0n;
+	},
+	{ error: validationMessage("bank.validation.positive") },
+);
+const bankDateSchema = z
+	.string()
+	.refine(
+		(value) =>
+			/^\d{4}-\d{2}-\d{2}$/.test(value) &&
+			value >= "0001-01-01" &&
+			!Number.isNaN(Date.parse(`${value}T00:00:00Z`)) &&
+			new Date(`${value}T00:00:00Z`).toISOString().slice(0, 10) === value &&
+			value <= bankToday(),
+		{ error: validationMessage("bank.validation.date") },
+	);
+const bankCardSchema = z.object({
+	name: z
+		.string()
+		.trim()
+		.min(1, validationMessage("bank.validation.name")(undefined))
+		.max(
+			MAX_CARD_NAME_LENGTH,
+			validationMessage("bank.validation.name")(undefined),
+		),
+	bankName: z
+		.string()
+		.trim()
+		.max(
+			MAX_CARD_NAME_LENGTH,
+			validationMessage("bank.validation.bankName")(undefined),
+		),
+	lastFour: z.string().refine((value) => !value || /^\d{4}$/.test(value), {
+		error: validationMessage("bank.validation.lastFour"),
+	}),
+	paymentSystem: z
+		.enum(["", "mir", "visa", "mastercard"], {
+			error: validationMessage("bank.validation.paymentSystem"),
+		})
+		.optional(),
+	openingBalance: moneySchema,
+	openingDate: bankDateSchema,
+});
+type BankCardValues = z.infer<typeof bankCardSchema>;
+
+export {
+	type BankCardValues,
+	bankCardSchema,
+	bankDateInputValue,
+	bankDateSchema,
+	bankMoneyValue,
+	bankMonth,
+	bankToday,
+	moneyCents,
+	positiveMoneySchema,
+};
@@ -0,0 +1,140 @@
+import type { BankOperation } from "../api/queries";
+
+type OperationIcon = { path: string; color: string; animation?: string };
+
+const categoryIcons: Record<string, OperationIcon> = {
+	алкоголь: {
+		animation: "wine",
+		path: "M7 3h10v5a5 5 0 0 1-10 0V3Z M7 7h10v1a5 5 0 0 1-10 0V7Z M12 13v8 M8 21h8",
+		color: "grape",
+	},
+	вклады: {
+		animation: "deposit",
+		path: "M6 9a6 6 0 1 0 12 0a6 6 0 1 0-12 0 M10.5 12V6h2a1.5 1.5 0 0 1 0 3h-3m0 1.5h3 M4 16c0 4 16 4 16 0 M4 19c0 4 16 4 16 0",
+		color: "green",
+	},
+	"инвестиции и накопления": {
+		animation: "growth",
+		path: "M3 3v18h18 M6 15l5-5 4 3 6-8 M16 5h5v5",
+		color: "green",
+	},
+	образование: {
+		path: "M2 8l10-5 10 5-10 5L2 8Z M6 10v7c4 3 8 3 12 0v-7 M22 8v9",
+		color: "blue",
+	},
+	переводы: {
+		animation: "transfer",
+		path: "M3 7h18l-4-4 M21 17H3l4 4",
+		color: "blue",
+	},
+	"погашение кредита": {
+		animation: "repayment",
+		path: "M3 5h18v14H3V5Z M3 9h18 M10 18v-7h3a2 2 0 0 1 0 4H9m0 1.5h4",
+		color: "orange",
+	},
+	подписки: {
+		path: "M4 10a8 8 0 0 1 13-6l3 3 M20 3v4h-4 M20 14a8 8 0 0 1-13 6l-3-3 M4 21v-4h4",
+		color: "grape",
+	},
+	путешествия: {
+		path: "M10 3h4v7l7 5v3l-7-3v5l2 1v1l-4-1-4 1v-1l2-1v-5l-7 3v-3l7-5V3Z",
+		color: "blue",
+	},
+	"связь и интернет": {
+		animation: "wifi",
+		path: "M3 7a14 14 0 0 1 18 0 M6 11a9 9 0 0 1 12 0 M9 15a4 4 0 0 1 6 0 M12 19h.01",
+		color: "blue",
+	},
+	"снятие наличных": {
+		path: "M4 10V3h16v7 M7 7h10v14H7V7Z M7 11h10 M10 16h4",
+		color: "green",
+	},
+	ставки: {
+		path: "M5 3h14a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2Z M7 7h.01 M17 7h.01 M12 12h.01 M7 17h.01 M17 17h.01",
+		color: "grape",
+	},
+	страхование: {
+		path: "M12 2l8 4v6c0 5-8 10-8 10S4 17 4 12V6l8-4Z M8 12l3 3 5-6",
+		color: "green",
+	},
+	табак: {
+		path: "M3 14h18v5H3v-5Z M16 14v5 M8 10V8c0-2 3-2 3-4V2 M15 10V8c0-2 3-2 3-4",
+		color: "orange",
+	},
+	"хостинг и ии-сервисы": {
+		animation: "server",
+		path: "M3 3h18v7H3V3Z M3 14h18v7H3v-7Z M7 6.5h.01 M7 17.5h.01 M15 6.5h3 M15 17.5h3",
+		color: "grape",
+	},
+	"цифровые покупки": {
+		path: "M3 3h18v13H3V3Z M8 21h8 M12 16v5 M12 6v7 M9 10l3 3 3-3",
+		color: "blue",
+	},
+	продукты: {
+		animation: "basket",
+		path: "M3 9h18l-2 11H5L3 9Z M8 9l4-6 4 6 M9 13v3 M15 13v3 M10 6a2 2 0 1 0 4 0a2 2 0 1 0-4 0",
+		color: "green",
+	},
+	кафе: {
+		animation: "coffee",
+		path: "M4 8h12v7a4 4 0 0 1-4 4H8a4 4 0 0 1-4-4V8Z M16 9h2a3 3 0 0 1 0 6h-2 M8 6c-2-1 2-2 0-4 M12 6c-2-1 2-2 0-4 M3 22h15",
+		color: "orange",
+	},
+	такси: {
+		path: "M4 10l2-6h12l2 6 M3 10h18v8H3v-8Z M6 18v3 M18 18v3 M6 14h2 M16 14h2 M10 4V2h4v2",
+		color: "yellow",
+	},
+	транспорт: {
+		animation: "car",
+		path: "M4 16H2v-4l3-1 3-4h6l4 4 4 1v4h-2 M8 16h8 M6 11h12m-6-4v4 M4 16a2 2 0 1 0 4 0a2 2 0 1 0-4 0m2-2v4m-2-2h4 M16 16a2 2 0 1 0 4 0a2 2 0 1 0-4 0m2-2v4m-2-2h4",
+		color: "blue",
+	},
+	жилье: { path: "M3 11l9-8 9 8 M5 10v11h14V10 M9 21v-8h6v8", color: "orange" },
+	здоровье: { path: "M9 3h6v6h6v6h-6v6H9v-6H3V9h6V3Z", color: "red" },
+	покупки: {
+		path: "M5 7h14l2 14H3L5 7Z M8 8V6a4 4 0 0 1 8 0v2",
+		color: "grape",
+	},
+	развлечения: {
+		path: "M9 5v14a3 3 0 1 1-3-3h3 M9 5l11-2v14a3 3 0 1 1-3-3h3 M9 9l11-2",
+		color: "grape",
+	},
+};
+const otherIcon: OperationIcon = {
+	animation: "grid",
+	path: "M4 4h6v6H4V4Z M14 4h6v6h-6V4Z M4 14h6v6H4v-6Z M14 14h6v6h-6v-6Z",
+	color: "gray",
+};
+const operationIcons: Record<
+	Exclude<BankOperation["kind"], "expense">,
+	OperationIcon
+> = {
+	topup: {
+		animation: "topup",
+		path: "M20 8V5H5a2 2 0 0 1 0-4h13v4 M3 3v16a2 2 0 0 0 2 2h15V8H5 M16 12v5m-2.5-2.5h5",
+		color: "green",
+	},
+	transfer: {
+		animation: "transfer",
+		path: "M3 7h18l-4-4 M21 17H3l4 4",
+		color: "blue",
+	},
+	refund: { path: "M8 4L3 9l5 5 M3 9h11a7 7 0 0 1 0 14", color: "teal" },
+};
+
+function bankOperationAppearance(
+	kind: BankOperation["kind"],
+	categoryName?: string | null,
+) {
+	const name = categoryName
+		?.trim()
+		.toLocaleLowerCase("ru-RU")
+		.replaceAll("ё", "е");
+	return kind === "expense"
+		? name && Object.hasOwn(categoryIcons, name)
+			? categoryIcons[name]
+			: otherIcon
+		: operationIcons[kind];
+}
+
+export { bankOperationAppearance };
@@ -0,0 +1,23 @@
+import dayjs from "dayjs";
+import { z } from "zod";
+import { bankMonth } from "./form-validation";
+
+const calendarDate = z.string().date();
+function bankPeriod(params: URLSearchParams) {
+	const month = bankMonth(params.get("month"));
+	const from = params.get("from");
+	const to = params.get("to");
+	return from &&
+		to &&
+		calendarDate.safeParse(from).success &&
+		calendarDate.safeParse(to).success &&
+		from >= "0001-01-01" &&
+		from <= to
+		? { from, to }
+		: {
+				from: `${month}-01`,
+				to: dayjs(`${month}-01`).endOf("month").format("YYYY-MM-DD"),
+			};
+}
+
+export { bankPeriod };
@@ -0,0 +1,160 @@
+.face {
+	--card-base: #242b35;
+	--card-light: #485666;
+	position: relative;
+	isolation: isolate;
+	overflow: hidden;
+	box-sizing: border-box;
+	width: 100%;
+	max-width: 28rem;
+	min-height: 15rem;
+	padding: clamp(1.1rem, 3vw, 1.6rem);
+	border-radius: 1.25rem;
+	color: #fff;
+	background: linear-gradient(125deg, var(--card-light), var(--card-base) 75%);
+	box-shadow:
+		inset 0 1px 0 #ffffff40,
+		0 8px 18px #18233118;
+}
+.face::before {
+	content: "";
+	position: absolute;
+	z-index: -1;
+	width: 24rem;
+	height: 24rem;
+	border: 1px solid #ffffff20;
+	border-radius: 50%;
+	right: -13rem;
+	top: -9rem;
+	box-shadow:
+		0 0 0 2.5rem #ffffff08,
+		0 0 0 5rem #ffffff06;
+}
+.face[data-tone="green"] {
+	--card-base: #07543c;
+	--card-light: #21844a;
+}
+.face[data-tone="yellow"] {
+	--card-base: #edbe26;
+	--card-light: #ffe478;
+	color: #252316;
+}
+.face[data-tone="red"] {
+	--card-base: #980f28;
+	--card-light: #d63244;
+}
+.face[data-tone="blue"] {
+	--card-base: #073f86;
+	--card-light: #226db8;
+}
+.top,
+.bottom {
+	display: flex;
+	justify-content: space-between;
+	align-items: center;
+	gap: 0.75rem;
+}
+.bank {
+	font-size: 1.05rem;
+	font-weight: 750;
+	overflow-wrap: anywhere;
+}
+.archive {
+	font-size: 0.7rem;
+	border: 1px solid currentColor;
+	border-radius: 2rem;
+	padding: 0.2rem 0.5rem;
+	flex-shrink: 0;
+}
+.hardware {
+	display: flex;
+	align-items: center;
+	gap: 0.7rem;
+	margin: 1.4rem 0 1.1rem;
+}
+.chip {
+	display: block;
+	width: 2.5rem;
+	height: 1.9rem;
+	border: 1px solid #a99054;
+	border-radius: 0.4rem;
+	background:
+		linear-gradient(
+			90deg,
+			transparent 30%,
+			#9b875a 31%,
+			transparent 33%,
+			transparent 66%,
+			#9b875a 67%,
+			transparent 69%
+		),
+		linear-gradient(
+			0deg,
+			transparent 32%,
+			#9b875a 33%,
+			transparent 36%,
+			transparent 65%,
+			#9b875a 66%,
+			transparent 69%
+		),
+		linear-gradient(135deg, #e5d6a6, #bfaa75 50%, #f1e6c4);
+}
+.number {
+	font-family: var(--mantine-font-family-monospace);
+	font-size: clamp(1rem, 2.3vw, 1.35rem);
+	letter-spacing: 0.06em;
+	white-space: nowrap;
+	margin-bottom: 1.25rem;
+}
+.details {
+	min-width: 0;
+}
+.name {
+	font-size: 0.8rem;
+	opacity: 0.9;
+	overflow-wrap: anywhere;
+}
+.balance {
+	font-size: clamp(1.2rem, 2.5vw, 1.55rem);
+	font-weight: 650;
+	overflow-wrap: anywhere;
+	margin-top: 0.2rem;
+}
+
+.network {
+	flex-shrink: 0;
+	font-weight: 850;
+	font-style: italic;
+	font-size: 1.35rem;
+}
+.network[data-network="mastercard"] {
+	font-size: 0.65rem;
+	font-weight: 600;
+	font-style: normal;
+	text-align: center;
+}
+.circles {
+	display: block;
+	width: 3.3rem;
+	height: 2rem;
+	margin: 0 auto 0.15rem;
+	position: relative;
+}
+.circles::before,
+.circles::after {
+	content: "";
+	position: absolute;
+	top: 0;
+	width: 2rem;
+	height: 2rem;
+	border-radius: 50%;
+}
+.circles::before {
+	left: 0;
+	background: #eb302b;
+}
+.circles::after {
+	right: 0;
+	background: #ffad19;
+	opacity: 0.9;
+}
@@ -0,0 +1,67 @@
+import { SimpleGrid } from "@mantine/core";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { BankCardFace } from "./BankCardFace";
+
+const meta = {
+	title: "Product/BankCards/CardAppearance",
+	component: BankCardFace,
+	tags: ["autodocs"],
+	args: {
+		card: {
+			id: "fictional",
+			name: "Для повседневных покупок",
+			bankName: "Сбербанк",
+			lastFour: "4829",
+			paymentSystem: "mir",
+			openingBalance: { value: "0", currency: "RUB" },
+			openingDate: "2026-01-01",
+			balance: { value: "128450.75", currency: "RUB" },
+			archivedAt: null,
+			version: 1,
+		},
+	},
+} satisfies Meta<typeof BankCardFace>;
+export default meta;
+type Story = StoryObj<typeof meta>;
+export const Banks: Story = {
+	render: (args) => (
+		<SimpleGrid cols={{ base: 1, sm: 2 }} maw={920}>
+			{["Сбербанк", "Т-Банк", "Альфа-Банк", "ВТБ", null].map(
+				(bankName, index) => (
+					<BankCardFace
+						key={bankName ?? "unknown"}
+						card={{
+							...args.card,
+							bankName,
+							paymentSystem:
+								(["mir", "mastercard", "visa", "mir", null] as const)[index] ??
+								null,
+						}}
+					/>
+				),
+			)}
+		</SimpleGrid>
+	),
+};
+export const MissingDetails: Story = {
+	args: {
+		card: {
+			...meta.args.card,
+			bankName: null,
+			lastFour: null,
+			paymentSystem: null,
+		},
+	},
+};
+export const LongArchived: Story = {
+	args: {
+		card: {
+			...meta.args.card,
+			name: "Карта с очень длинным пользовательским названием для повседневных покупок",
+			bankName: "Банк с очень длинным названием без пробелов".repeat(2),
+			archivedAt: "2026-09-12",
+			paymentSystem: "mastercard",
+			balance: { value: "184467440737095516.14", currency: "RUB" },
+		},
+	},
+};
@@ -0,0 +1,67 @@
+import type { FC } from "react";
+import { useTranslation } from "react-i18next";
+import { formatMoney } from "@/shared/lib";
+import type { BankCard } from "../api/queries";
+import classes from "./BankCardFace.module.css";
+
+type BankCardFaceProps = { card: BankCard };
+const BankCardFace: FC<BankCardFaceProps> = (props) => {
+	const { card } = props;
+	const { t } = useTranslation();
+	const bank = card.bankName?.toLocaleLowerCase("ru") ?? "";
+	const tone = /сбер|sber/.test(bank)
+		? "green"
+		: /тинькофф|т[ -]?банк|t[ -]?bank|tinkoff/.test(bank)
+			? "yellow"
+			: /альфа|alfa/.test(bank)
+				? "red"
+				: /втб|vtb|газпром|gazprom/.test(bank)
+					? "blue"
+					: "graphite";
+	return (
+		<div className={classes.face} data-tone={tone}>
+			<div className={classes.top}>
+				<span className={classes.bank}>{card.bankName || t("bank.card")}</span>
+				{card.archivedAt && (
+					<span className={classes.archive}>{t("bank.archived")}</span>
+				)}
+			</div>
+			<div className={classes.hardware} aria-hidden="true">
+				<span className={classes.chip} />
+				<svg
+					aria-hidden="true"
+					width="24"
+					height="30"
+					viewBox="0 0 24 30"
+					fill="none"
+				>
+					<path
+						d="M7 11a8 8 0 0 1 0 8m5-12a15 15 0 0 1 0 16m5-20a23 23 0 0 1 0 24"
+						stroke="currentColor"
+						strokeWidth="2"
+						strokeLinecap="round"
+					/>
+				</svg>
+			</div>
+			<div
+				className={classes.number}
+			>{`•••• •••• •••• ${card.lastFour || "••••"}`}</div>
+			<div className={classes.bottom}>
+				<div className={classes.details}>
+					<div className={classes.name}>{card.name}</div>
+					<div className={classes.balance}>{formatMoney(card.balance)}</div>
+				</div>
+				{card.paymentSystem && (
+					<span className={classes.network} data-network={card.paymentSystem}>
+						{card.paymentSystem === "mastercard" && (
+							<span className={classes.circles} aria-hidden="true" />
+						)}
+						{t(`bank.paymentSystems.${card.paymentSystem}`)}
+					</span>
+				)}
+			</div>
+		</div>
+	);
+};
+
+export { BankCardFace };
@@ -0,0 +1,44 @@
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { FormProvider, useForm } from "react-hook-form";
+import type { BankCardValues } from "../model/form-validation";
+import { BankCardFields } from "./BankCardForm.view";
+
+const meta = {
+	title: "Product/BankCards/CardFields",
+	component: BankCardFields,
+	tags: ["autodocs"],
+	args: { archived: false },
+	decorators: [
+		(Story) => {
+			const methods = useForm<BankCardValues>({
+				defaultValues: {
+					name: "Учебная повседневная карта",
+					bankName: "Вымышленный банк",
+					lastFour: "1234",
+					openingBalance: "-92233720368547758.08",
+					openingDate: "2026-08-01",
+				},
+			});
+			return (
+				<FormProvider {...methods}>
+					<Story />
+				</FormProvider>
+			);
+		},
+	],
+	parameters: {
+		docs: {
+			description: {
+				component:
+					"Поля ручной дебетовой карты на вымышленных данных. Сохранения и обращения к API нет. Архив оставляет описательные сведения доступными, а финансовые поля — только для чтения.",
+			},
+		},
+	},
+} satisfies Meta<typeof BankCardFields>;
+export default meta;
+type Story = StoryObj<typeof meta>;
+export const Active: Story = { name: "Независимая карта в рублях" };
+export const Archived: Story = {
+	name: "Финансовые поля архивной карты",
+	args: { archived: true },
+};
@@ -0,0 +1,151 @@
+import { MantineProvider } from "@mantine/core";
+import { QueryClientProvider } from "@tanstack/react-query";
+import { fireEvent, render, screen, waitFor } from "@testing-library/react";
+import { HttpResponse, http } from "msw";
+import { describe, expect, it, vi } from "vitest";
+import { configureAuthClient } from "@/shared/api";
+import { createTestQueryClient } from "@/test/query";
+import { server } from "@/test/server";
+import type { BankCard } from "../api/queries";
+import { BankCardForm } from "./BankCardForm";
+
+const card: BankCard = {
+	id: "a",
+	name: "Основная",
+	bankName: "Банк",
+	lastFour: "1234",
+	paymentSystem: null,
+	openingBalance: { currency: "RUB", value: "100" },
+	balance: { currency: "RUB", value: "50" },
+	openingDate: "2026-01-01",
+	archivedAt: null,
+	version: 1,
+};
+function setup(value: BankCard) {
+	configureAuthClient({
+		accessToken: () => "test",
+		refresh: async () => false,
+		clear: () => {},
+	});
+	server.use(http.get("*/api/v1/bank-cards/a", () => HttpResponse.json(value)));
+	const close = vi.fn();
+	render(
+		<QueryClientProvider client={createTestQueryClient()}>
+			<MantineProvider env="test">
+				<BankCardForm card={value} onClose={close} />
+			</MantineProvider>
+		</QueryClientProvider>,
+	);
+	return close;
+}
+describe("BankCardForm", () => {
+	it("waits for the exit transition before notifying the parent", async () => {
+		const close = setup(card);
+		fireEvent.click(screen.getByRole("button", { name: "Отмена" }));
+		expect(close).not.toHaveBeenCalled();
+		await waitFor(() => expect(close).toHaveBeenCalledTimes(1));
+	});
+	it("clears optional metadata on archive while omitting protected financial fields", async () => {
+		const close = setup({ ...card, archivedAt: "2026-09-01" });
+		expect(screen.getByLabelText(/Начальный остаток/)).toHaveAttribute(
+			"readonly",
+		);
+		expect(screen.getByLabelText(/Дата начала/)).toHaveAttribute("readonly");
+		fireEvent.change(screen.getByLabelText(/Банк/), { target: { value: "" } });
+		fireEvent.change(screen.getByLabelText(/Последние четыре/), {
+			target: { value: "" },
+		});
+		let body: unknown;
+		server.use(
+			http.patch("*/api/v1/bank-cards/a", async ({ request }) => {
+				body = await request.json();
+				return HttpResponse.json(card);
+			}),
+		);
+		fireEvent.click(screen.getByRole("button", { name: "Сохранить" }));
+		await waitFor(() => expect(close).toHaveBeenCalled());
+		expect(body).toEqual({
+			version: 1,
+			name: "Основная",
+			bankName: null,
+			lastFour: null,
+			paymentSystem: null,
+		});
+	});
+	it("loads and saves the selected payment system", async () => {
+		const close = setup({ ...card, paymentSystem: "mir" });
+		expect(
+			screen.getByRole("combobox", { name: /Платёжная система/ }),
+		).toHaveValue("МИР");
+		fireEvent.click(
+			screen.getByRole("combobox", { name: /Платёжная система/ }),
+		);
+		fireEvent.click(await screen.findByRole("option", { name: "Visa" }));
+		let body: unknown;
+		server.use(
+			http.patch("*/api/v1/bank-cards/a", async ({ request }) => {
+				body = await request.json();
+				return HttpResponse.json({ ...card, paymentSystem: "visa" });
+			}),
+		);
+		fireEvent.click(screen.getByRole("button", { name: "Сохранить" }));
+		await waitFor(() => expect(close).toHaveBeenCalled());
+		expect(body).toMatchObject({ paymentSystem: "visa" });
+	});
+
+	it("retains an invalid opening date draft and explains conflict with saved history", async () => {
+		const close = setup(card);
+		fireEvent.change(screen.getByLabelText(/Дата начала/), {
+			target: { value: "01.08.2026" },
+		});
+		server.use(
+			http.patch("*/api/v1/bank-cards/a", () =>
+				HttpResponse.json(
+					{ code: "BANK_OPENING_DATE_CONFLICT" },
+					{ status: 400 },
+				),
+			),
+		);
+		fireEvent.click(screen.getByRole("button", { name: "Сохранить" }));
+		await screen.findByText(
+			"Дата начала противоречит сохранённой истории карты.",
+		);
+		expect(screen.getByLabelText(/Дата начала/)).toHaveValue("01.08.2026");
+		expect(close).not.toHaveBeenCalled();
+	});
+	it("keeps card edit version until explicit refresh adoption", async () => {
+		const close = setup(card);
+		let version = 1;
+		const bodies: Record<string, unknown>[] = [];
+		server.use(
+			http.get("*/api/v1/bank-cards/a", () =>
+				HttpResponse.json({ ...card, version }),
+			),
+			http.patch("*/api/v1/bank-cards/a", async ({ request }) => {
+				const body = (await request.json()) as Record<string, unknown>;
+				bodies.push(body);
+				version = 2;
+				return body.version === 1
+					? HttpResponse.json(
+							{ code: "BANK_VERSION_CONFLICT" },
+							{ status: 409 },
+						)
+					: HttpResponse.json(card);
+			}),
+		);
+		fireEvent.change(screen.getByLabelText(/Название карты/), {
+			target: { value: "Мой черновик" },
+		});
+		fireEvent.click(screen.getByRole("button", { name: "Сохранить" }));
+		await screen.findByText(/Запись уже изменена/);
+		fireEvent.click(screen.getByRole("button", { name: "Перечитать запись" }));
+		const adopt = await screen.findByRole("button", {
+			name: "Использовать актуальную версию 2",
+		});
+		expect(screen.getByLabelText(/Название карты/)).toHaveValue("Мой черновик");
+		fireEvent.click(adopt);
+		fireEvent.click(screen.getByRole("button", { name: "Сохранить" }));
+		await waitFor(() => expect(close).toHaveBeenCalled());
+		expect(bodies.map((b) => b.version)).toEqual([1, 2]);
+	});
+});
@@ -0,0 +1,151 @@
+import { zodResolver } from "@hookform/resolvers/zod";
+import { Button, Group, Modal, Stack, Text } from "@mantine/core";
+import { type FC, useState } from "react";
+import { FormProvider, useForm } from "react-hook-form";
+import { useTranslation } from "react-i18next";
+import { formatDate } from "@/shared/lib";
+import { useBankMutations } from "../api/mutations";
+import { type BankCard, useBankCard } from "../api/queries";
+import {
+	type BankCardValues,
+	bankCardSchema,
+	bankMoneyValue,
+	bankToday,
+} from "../model/form-validation";
+import { BankCardFields } from "./BankCardForm.view";
+import { BankFeedback } from "./BankFeedback";
+import classes from "./BankForms.module.css";
+import { useBankFormFocus } from "./useBankFormFocus";
+
+type BankCardFormProps = { card?: BankCard; onClose: () => void };
+const BankCardForm: FC<BankCardFormProps> = (props) => {
+	useBankFormFocus();
+	const [opened, setOpened] = useState(true);
+	const { t } = useTranslation();
+	const [intent] = useState(() => crypto.randomUUID());
+	const [version, setVersion] = useState(props.card?.version ?? 1);
+	const [error, setError] = useState<unknown>();
+	const [latest, setLatest] = useState<BankCard>();
+	const fresh = useBankCard(props.card?.id);
+	const mutation = useBankMutations();
+	const methods = useForm<BankCardValues>({
+		resolver: zodResolver(bankCardSchema),
+		defaultValues: {
+			name: props.card?.name ?? "",
+			bankName: props.card?.bankName ?? "",
+			lastFour: props.card?.lastFour ?? "",
+			paymentSystem: props.card?.paymentSystem ?? "",
+			openingBalance: props.card?.openingBalance.value ?? "0",
+			openingDate: props.card?.openingDate ?? bankToday(),
+		},
+	});
+	const pending =
+		!opened ||
+		methods.formState.isSubmitting ||
+		(fresh.isFetching && Boolean(error));
+	return (
+		<Modal
+			opened={opened}
+			onExitTransitionEnd={props.onClose}
+			onClose={() => !pending && setOpened(false)}
+			title={t(props.card ? "bank.editCard" : "bank.addCard")}
+			closeButtonProps={{ "aria-label": t("bank.close"), disabled: pending }}
+			closeOnClickOutside={!pending}
+			closeOnEscape={!pending}
+		>
+			<FormProvider {...methods}>
+				<form
+					onSubmit={methods.handleSubmit(async (values) => {
+						setError(undefined);
+						try {
+							const metadata = {
+								name: values.name,
+								bankName: values.bankName || null,
+								lastFour: values.lastFour || null,
+								paymentSystem: values.paymentSystem || null,
+							};
+							const financial = {
+								openingBalance: {
+									currency: "RUB" as const,
+									value: bankMoneyValue(values.openingBalance),
+								},
+								openingDate: values.openingDate,
+							};
+							if (props.card)
+								await mutation.updateCard.mutateAsync({
+									id: props.card.id,
+									body: {
+										...metadata,
+										...(!props.card.archivedAt ? financial : {}),
+										version,
+									},
+								});
+							else
+								await mutation.createCard.mutateAsync({
+									id: intent,
+									...metadata,
+									...financial,
+								});
+							setOpened(false);
+						} catch (failure) {
+							setError(failure);
+						}
+					})}
+				>
+					<fieldset className={classes.fieldset} disabled={pending}>
+						<Stack>
+							<BankCardFields archived={Boolean(props.card?.archivedAt)} />
+							{error ? (
+								<>
+									<BankFeedback error={error} />
+									{props.card && (
+										<Button
+											variant="default"
+											onClick={async () => {
+												const response = await fresh.refetch();
+												if (response.data && !response.error)
+													setLatest(response.data);
+												else setError(response.error);
+											}}
+										>
+											{t("bank.reloadRecord")}
+										</Button>
+									)}
+								</>
+							) : null}
+							{latest && (
+								<>
+									<Text>
+										{t("bank.versionHint", {
+											details: `${latest.name} · ${latest.openingBalance.value} RUB · ${formatDate(latest.openingDate)}`,
+										})}
+									</Text>
+									<Button
+										variant="default"
+										onClick={() => {
+											setVersion(latest.version);
+											setLatest(undefined);
+											setError(undefined);
+										}}
+									>
+										{t("bank.adoptVersion", { version: latest.version })}
+									</Button>
+								</>
+							)}
+							<Group>
+								<Button type="submit" loading={pending}>
+									{t("bank.save")}
+								</Button>
+								<Button variant="default" onClick={() => setOpened(false)}>
+									{t("bank.cancel")}
+								</Button>
+							</Group>
+						</Stack>
+					</fieldset>
+				</form>
+			</FormProvider>
+		</Modal>
+	);
+};
+
+export { BankCardForm };
@@ -0,0 +1,112 @@
+import { Select, Stack, Text, TextInput } from "@mantine/core";
+import { DateInput } from "@mantine/dates";
+import type { FC } from "react";
+import { Controller, useFormContext } from "react-hook-form";
+import { useTranslation } from "react-i18next";
+import {
+	type BankCardValues,
+	bankDateInputValue,
+	bankDateSchema,
+	bankToday,
+} from "../model/form-validation";
+
+type BankCardFieldsProps = { archived: boolean };
+const BankCardFields: FC<BankCardFieldsProps> = (props) => {
+	const {
+		control,
+		register,
+		formState: { errors },
+	} = useFormContext<BankCardValues>();
+	const { t } = useTranslation();
+	return (
+		<Stack>
+			<TextInput
+				label={t("bank.name")}
+				required
+				{...register("name")}
+				error={errors.name?.message}
+			/>
+			<TextInput
+				label={t("bank.bankName")}
+				{...register("bankName")}
+				error={errors.bankName?.message}
+			/>
+			<TextInput
+				label={t("bank.lastFour")}
+				inputMode="numeric"
+				{...register("lastFour")}
+				error={errors.lastFour?.message}
+			/>
+			<Controller
+				control={control}
+				name="paymentSystem"
+				render={({ field }) => (
+					<Select
+						{...field}
+						value={field.value || null}
+						onChange={(value) => field.onChange(value ?? "")}
+						label={t("bank.paymentSystem")}
+						placeholder={t("bank.paymentSystemUnknown")}
+						clearable
+						data={["mir", "visa", "mastercard"].map((value) => ({
+							value,
+							label: t(`bank.paymentSystems.${value}`),
+						}))}
+						comboboxProps={{ withinPortal: false }}
+						error={errors.paymentSystem?.message}
+					/>
+				)}
+			/>
+			<TextInput
+				label={t("bank.openingBalance")}
+				required
+				inputMode="decimal"
+				readOnly={props.archived}
+				{...register("openingBalance")}
+				error={errors.openingBalance?.message}
+			/>
+			<Controller
+				control={control}
+				name="openingDate"
+				render={({ field }) => (
+					<DateInput
+						{...field}
+						label={t("bank.openingDate")}
+						required
+						valueFormat="DD.MM.YYYY"
+						value={
+							bankDateSchema.safeParse(field.value).success ? field.value : null
+						}
+						dateParser={(value) =>
+							bankDateSchema.safeParse(bankDateInputValue(value)).success
+								? bankDateInputValue(value)
+								: null
+						}
+						fixOnBlur={false}
+						onInput={(event) =>
+							field.onChange(bankDateInputValue(event.currentTarget.value))
+						}
+						onChange={(value) => field.onChange(value ?? "")}
+						onBlur={(event) => {
+							field.onChange(bankDateInputValue(event.currentTarget.value));
+							field.onBlur();
+						}}
+						maxDate={bankToday()}
+						popoverProps={{
+							withinPortal: false,
+							middlewares: { shift: { crossAxis: true } },
+						}}
+						readOnly={props.archived}
+						error={errors.openingDate?.message}
+					/>
+				)}
+			/>
+			<Text size="sm" c="dimmed">
+				{t("bank.openingHint")}
+			</Text>
+			{props.archived && <Text>{t("bank.archiveHint")}</Text>}
+		</Stack>
+	);
+};
+
+export { BankCardFields };
@@ -0,0 +1,37 @@
+import { Alert, Button, Group, Text } from "@mantine/core";
+import type { FC } from "react";
+import { useTranslation } from "react-i18next";
+import { apiErrorCode } from "@/shared/api";
+
+type BankFeedbackProps = {
+	error: unknown;
+	retry?: () => void;
+	cached?: boolean;
+	loadingError?: boolean;
+};
+const BankFeedback: FC<BankFeedbackProps> = (props) => {
+	const { t } = useTranslation();
+	const code = apiErrorCode(props.error);
+	return (
+		<Alert color="orange" role="alert">
+			<Group>
+				<Text>
+					{props.cached
+						? t("bank.refreshError")
+						: t(`bank.errors.${code}` as "bank.errors.BANK_INVALID_INPUT", {
+								defaultValue: t(
+									props.loadingError ? "bank.error" : "bank.requestError",
+								),
+							})}
+				</Text>
+				{props.retry && (
+					<Button variant="default" onClick={props.retry}>
+						{t("bank.retry")}
+					</Button>
+				)}
+			</Group>
+		</Alert>
+	);
+};
+
+export { BankFeedback };
@@ -0,0 +1,6 @@
+.fieldset {
+	border: 0;
+	padding: 0;
+	margin: 0;
+	min-width: 0;
+}
@@ -0,0 +1,365 @@
+.icon {
+	overflow: visible;
+
+	& path {
+		--motion: none;
+		transform-box: fill-box;
+		transform-origin: center;
+	}
+}
+
+.deposit path:nth-child(-n + 2) {
+	transform-box: view-box;
+	transform-origin: 12px 9px;
+	--motion: bank-operation-coin-turn 1000ms ease-in-out both;
+}
+
+.repayment path:last-child {
+	--motion: bank-operation-ruble-in 1000ms ease-out both;
+}
+
+.topup path:last-child {
+	--motion: bank-operation-plus-in 900ms ease-out both;
+}
+
+.transfer path {
+	--shift: 3px;
+	--motion: bank-operation-exchange 700ms ease-in-out both;
+	&:last-child {
+		--shift: -3px;
+	}
+}
+
+.growth {
+	& path:nth-child(2) {
+		stroke-dasharray: 1;
+		--motion: bank-operation-draw 450ms ease-out both;
+	}
+	& path:last-child {
+		--motion: bank-operation-arrow-rise 350ms ease-out 400ms both;
+	}
+}
+
+.server {
+	& path:nth-child(3) {
+		--motion: bank-operation-blink 500ms ease-in-out both;
+	}
+	& path:nth-child(4) {
+		--motion: bank-operation-blink 500ms ease-in-out 220ms both;
+	}
+}
+
+.basket {
+	& path:not(:last-child) {
+		--motion: bank-operation-settle 850ms ease-in-out both;
+	}
+	& path:last-child {
+		opacity: 0;
+		fill: currentColor;
+		--motion: bank-operation-grocery-drop 850ms ease-out both;
+	}
+}
+
+.wine {
+	--motion: bank-operation-cheers 1100ms ease-in-out both;
+	transform-origin: 12px 21px;
+	& path:nth-child(2) {
+		fill: currentColor;
+		fill-opacity: 0.2;
+		transform-origin: bottom;
+		--motion: bank-operation-fill-glass 1100ms ease-out both;
+	}
+}
+
+.coffee {
+	& path:nth-child(3),
+	& path:nth-child(4) {
+		--motion: bank-operation-steam 1000ms ease-out var(--delay, 0ms) both;
+	}
+	& path:nth-child(4) {
+		--delay: 180ms;
+	}
+}
+
+.grid path {
+	--x: -1.5px;
+	--y: -1.5px;
+	--turn: 0deg;
+	--motion: bank-operation-rearrange 850ms ease-in-out both;
+	&:nth-child(2) {
+		--x: 1.5px;
+		--turn: 90deg;
+	}
+	&:nth-child(3) {
+		--y: 1.5px;
+	}
+	&:nth-child(4) {
+		--x: 1.5px;
+		--y: 1.5px;
+	}
+}
+
+.wifi path {
+	--motion: bank-operation-signal 450ms ease-out var(--delay, 0ms) both;
+	&:nth-child(1) {
+		--delay: 360ms;
+	}
+	&:nth-child(2) {
+		--delay: 240ms;
+	}
+	&:nth-child(3) {
+		--delay: 120ms;
+	}
+}
+
+.car {
+	--motion: bank-operation-drive 1100ms ease-in-out both;
+	& path:nth-child(-n + 3) {
+		--motion: bank-operation-suspension 275ms ease-in-out 4 both;
+	}
+	& path:nth-last-child(-n + 2) {
+		--motion: bank-operation-wheel-roll 1100ms ease-in-out both;
+	}
+}
+
+@media (prefers-reduced-motion: no-preference) {
+	.icon[data-icon-animating] {
+		animation: var(--motion, none);
+		& path {
+			animation: var(--motion, none);
+		}
+	}
+}
+
+@keyframes :global(bank-operation-coin-turn) {
+	0%,
+	100% {
+		transform: scaleX(1);
+	}
+	35%,
+	65% {
+		transform: scaleX(0.12);
+	}
+	50% {
+		transform: scaleX(-1);
+	}
+}
+
+@keyframes :global(bank-operation-settle) {
+	0%,
+	30%,
+	100% {
+		transform: translateY(0);
+	}
+	45% {
+		transform: translateY(1.5px);
+	}
+	65% {
+		transform: translateY(-0.5px);
+	}
+}
+
+@keyframes :global(bank-operation-ruble-in) {
+	0% {
+		opacity: 0;
+		transform: translateY(-9px) scale(0.7);
+	}
+	25% {
+		opacity: 1;
+	}
+	65% {
+		transform: translateY(0) scale(1.15);
+	}
+	80% {
+		transform: scale(0.95);
+	}
+	100% {
+		opacity: 1;
+		transform: scale(1);
+	}
+}
+
+@keyframes :global(bank-operation-plus-in) {
+	0% {
+		opacity: 0;
+		transform: translateY(-5px) scale(0.5);
+	}
+	55% {
+		opacity: 1;
+		transform: translateY(0) scale(1.3);
+	}
+	75% {
+		transform: scale(0.9);
+	}
+	100% {
+		opacity: 1;
+		transform: scale(1);
+	}
+}
+
+@keyframes :global(bank-operation-exchange) {
+	0%,
+	100% {
+		transform: translateX(0);
+	}
+	45% {
+		transform: translateX(var(--shift));
+	}
+}
+
+@keyframes :global(bank-operation-draw) {
+	from {
+		stroke-dashoffset: 1;
+	}
+	to {
+		stroke-dashoffset: 0;
+	}
+}
+
+@keyframes :global(bank-operation-arrow-rise) {
+	0%,
+	100% {
+		transform: translateY(0);
+	}
+	45% {
+		transform: translateY(-2px);
+	}
+}
+
+@keyframes :global(bank-operation-blink) {
+	0%,
+	100% {
+		stroke-width: 1.6;
+	}
+	45% {
+		stroke: var(--mantine-color-green-6);
+		stroke-width: 3;
+	}
+}
+
+@keyframes :global(bank-operation-grocery-drop) {
+	0% {
+		opacity: 0;
+		transform: translateY(-5px);
+	}
+	20% {
+		opacity: 1;
+	}
+	55% {
+		opacity: 1;
+		transform: translateY(7px);
+	}
+	80%,
+	100% {
+		opacity: 0;
+		transform: translateY(7px);
+	}
+}
+
+@keyframes :global(bank-operation-fill-glass) {
+	0% {
+		transform: scaleY(0.05);
+	}
+	45%,
+	75% {
+		transform: scaleY(1);
+		fill-opacity: 0.5;
+	}
+	100% {
+		transform: scaleY(1);
+		fill-opacity: 0.2;
+	}
+}
+
+@keyframes :global(bank-operation-cheers) {
+	0%,
+	40%,
+	100% {
+		transform: rotate(0);
+	}
+	65% {
+		transform: rotate(8deg);
+	}
+}
+
+@keyframes :global(bank-operation-steam) {
+	0% {
+		opacity: 0;
+		transform: translateY(2px);
+	}
+	25% {
+		opacity: 1;
+	}
+	70% {
+		opacity: 0;
+		transform: translateY(-3px);
+	}
+	100% {
+		opacity: 1;
+		transform: translateY(0);
+	}
+}
+
+@keyframes :global(bank-operation-rearrange) {
+	0%,
+	100% {
+		transform: translate(0, 0) rotate(0);
+	}
+	50% {
+		transform: translate(var(--x), var(--y)) rotate(var(--turn));
+	}
+}
+
+@keyframes :global(bank-operation-signal) {
+	0% {
+		opacity: 0.1;
+	}
+	100% {
+		opacity: 1;
+	}
+}
+
+@keyframes :global(bank-operation-drive) {
+	0% {
+		opacity: 0;
+		transform: translateX(-4px);
+	}
+	20% {
+		opacity: 1;
+	}
+	80% {
+		opacity: 1;
+		transform: translateX(3px);
+	}
+	90% {
+		opacity: 0;
+		transform: translateX(4px);
+	}
+	91% {
+		opacity: 0;
+		transform: translateX(0);
+	}
+	100% {
+		opacity: 1;
+		transform: translateX(0);
+	}
+}
+
+@keyframes :global(bank-operation-suspension) {
+	0%,
+	100% {
+		transform: translateY(0);
+	}
+	50% {
+		transform: translateY(-0.5px);
+	}
+}
+
+@keyframes :global(bank-operation-wheel-roll) {
+	from {
+		transform: rotate(0);
+	}
+	to {
+		transform: rotate(360deg);
+	}
+}
@@ -0,0 +1,68 @@
+import { Stack } from "@mantine/core";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { EntryCard } from "@/shared/ui";
+import { BankOperationIcon } from "./BankOperationIcon";
+
+const meta = {
+	title: "Product/BankCards/OperationIcons",
+	component: BankOperationIcon,
+	tags: ["autodocs"],
+	args: { kind: "expense", categoryName: "Продукты" },
+} satisfies Meta<typeof BankOperationIcon>;
+export default meta;
+type Story = StoryObj<typeof meta>;
+export const Categories: Story = {
+	render: () => (
+		<Stack maw={640}>
+			{[
+				"Алкоголь",
+				"Вклады",
+				"Другое",
+				"Жильё",
+				"Здоровье",
+				"Инвестиции и накопления",
+				"Кафе",
+				"Образование",
+				"Переводы",
+				"Погашение кредита",
+				"Подписки",
+				"Покупки",
+				"Продукты",
+				"Путешествия",
+				"Развлечения",
+				"Связь и интернет",
+				"Снятие наличных",
+				"Ставки",
+				"Страхование",
+				"Табак",
+				"Такси",
+				"Транспорт",
+				"Хостинг и ИИ-сервисы",
+				"Цифровые покупки",
+				"Моя категория",
+			].map((name) => (
+				<EntryCard
+					key={name}
+					title="Расход"
+					metadata={`12.09.2026 · ${name}`}
+					initial="Р"
+					color="red"
+					icon={<BankOperationIcon kind="expense" categoryName={name} />}
+					value="−1 250,00 ₽"
+					valueLabel="Расход"
+					tone="negative"
+				/>
+			))}
+			<EntryCard
+				title="Пополнение"
+				metadata="12.09.2026"
+				initial="П"
+				color="green"
+				icon={<BankOperationIcon kind="topup" />}
+				value="+15 000,00 ₽"
+				valueLabel="Пополнение"
+				tone="positive"
+			/>
+		</Stack>
+	),
+};
@@ -0,0 +1,66 @@
+import { render } from "@testing-library/react";
+import { expect, it } from "vitest";
+import { BankOperationIcon } from "./BankOperationIcon";
+
+it("matches normalized category names, falls back after renaming and distinguishes operation kinds", () => {
+	const { container, rerender } = render(
+		<BankOperationIcon kind="expense" categoryName="Жильё" />,
+	);
+	const path = () => container.querySelector("path")?.getAttribute("d");
+	const housing = path();
+	rerender(<BankOperationIcon kind="expense" categoryName="  ЖИЛЬЕ  " />);
+	expect(path()).toBe(housing);
+	rerender(<BankOperationIcon kind="expense" categoryName="Другое" />);
+	const fallback = path();
+	expect(fallback).not.toBe(housing);
+	for (const categoryName of ["Моя категория", "constructor", null]) {
+		rerender(<BankOperationIcon kind="expense" categoryName={categoryName} />);
+		expect(path()).toBe(fallback);
+	}
+	const paths = [fallback, housing];
+	for (const kind of ["topup", "transfer", "refund"] as const) {
+		rerender(<BankOperationIcon kind={kind} categoryName="Жильё" />);
+		expect(path()).toBeTruthy();
+		paths.push(path());
+	}
+	expect(new Set(paths).size).toBe(5);
+	expect(container.querySelector("svg")).toHaveAttribute("aria-hidden", "true");
+});
+
+it("provides a distinct icon for every existing named category", () => {
+	const { container, rerender } = render(
+		<BankOperationIcon kind="expense" categoryName="Другое" />,
+	);
+	const paths = new Set([container.querySelector("path")?.getAttribute("d")]);
+	for (const categoryName of [
+		"Алкоголь",
+		"Вклады",
+		"Жильё",
+		"Здоровье",
+		"Инвестиции и накопления",
+		"Кафе",
+		"Образование",
+		"Переводы",
+		"Погашение кредита",
+		"Подписки",
+		"Покупки",
+		"Продукты",
+		"Путешествия",
+		"Развлечения",
+		"Связь и интернет",
+		"Снятие наличных",
+		"Ставки",
+		"Страхование",
+		"Табак",
+		"Такси",
+		"Транспорт",
+		"Хостинг и ИИ-сервисы",
+		"Цифровые покупки",
+	]) {
+		rerender(<BankOperationIcon kind="expense" categoryName={categoryName} />);
+		const path = container.querySelector("path")?.getAttribute("d");
+		expect(path).toBeTruthy();
+		expect(paths.has(path), categoryName).toBe(false);
+		paths.add(path);
+	}
+});
@@ -0,0 +1,37 @@
+import type { FC } from "react";
+import { bindIconAnimation } from "@/shared/lib";
+import type { BankOperation } from "../api/queries";
+
+import { bankOperationAppearance } from "../model/operation-appearance";
+import classes from "./BankOperationIcon.module.css";
+
+type BankOperationIconProps = {
+	kind: BankOperation["kind"];
+	categoryName?: string | null;
+};
+const BankOperationIcon: FC<BankOperationIconProps> = (props) => {
+	const icon = bankOperationAppearance(props.kind, props.categoryName);
+	return (
+		<svg
+			ref={bindIconAnimation}
+			className={`${classes.icon} ${icon.animation ? classes[icon.animation] : ""}`}
+			width="24"
+			height="24"
+			viewBox="0 0 24 24"
+			fill="none"
+			stroke="currentColor"
+			strokeWidth="1.6"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			aria-hidden="true"
+			focusable="false"
+			style={{ flexShrink: 0, color: `var(--mantine-color-${icon.color}-7)` }}
+		>
+			{icon.path.split(" M").map((part, index) => (
+				<path key={part} d={index ? `M${part}` : part} pathLength={1} />
+			))}
+		</svg>
+	);
+};
+
+export { BankOperationIcon };
@@ -0,0 +1,38 @@
+import { DatePickerInput } from "@mantine/dates";
+import { type FC, useState } from "react";
+import { useTranslation } from "react-i18next";
+
+type BankPeriodPickerProps = {
+	period: { from: string; to: string };
+	onChange: (value: [string | null, string | null]) => void;
+};
+const BankPeriodPicker: FC<BankPeriodPickerProps> = (props) => {
+	const { period, onChange } = props;
+	const { t } = useTranslation();
+	const scope = `${period.from}-${period.to}`;
+	const [draft, setDraft] = useState<{
+		scope: string;
+		value: [string | null, string | null];
+	}>();
+	const value: [string | null, string | null] =
+		draft?.scope === scope ? draft.value : [period.from, period.to];
+	return (
+		<DatePickerInput
+			type="range"
+			allowSingleDateInRange
+			label={t("bank.period")}
+			valueFormat="DD.MM.YYYY"
+			value={value}
+			onChange={(next) => {
+				setDraft({ scope, value: next });
+				onChange(next);
+			}}
+			popoverProps={{
+				returnFocus: true,
+				middlewares: { shift: { crossAxis: true } },
+			}}
+		/>
+	);
+};
+
+export { BankPeriodPicker };
@@ -0,0 +1,64 @@
+.header {
+	display: flex;
+	align-items: center;
+	justify-content: space-between;
+	flex-wrap: wrap;
+	gap: var(--mantine-spacing-xs) var(--mantine-spacing-lg);
+}
+
+.total {
+	font-size: var(--mantine-font-size-xl);
+	font-weight: 650;
+	letter-spacing: -0.025em;
+	font-variant-numeric: tabular-nums;
+	overflow-wrap: anywhere;
+	min-width: 0;
+}
+
+.categories {
+	display: grid;
+	grid-template-columns: repeat(2, minmax(0, 1fr));
+	grid-template-rows: repeat(var(--category-rows), auto);
+	grid-auto-flow: column;
+	column-gap: var(--mantine-spacing-xl);
+	margin: 0;
+}
+
+.category {
+	display: flex;
+	align-items: center;
+	justify-content: space-between;
+	gap: var(--mantine-spacing-md);
+	padding-block: var(--mantine-spacing-sm);
+	border-top: 1px solid var(--mantine-color-gray-3);
+	min-width: 0;
+}
+
+.label {
+	display: flex;
+	align-items: center;
+	gap: var(--mantine-spacing-xs);
+	min-width: 0;
+	font-size: var(--mantine-font-size-sm);
+	overflow-wrap: anywhere;
+}
+
+.amount {
+	flex-shrink: 0;
+	max-width: 60%;
+	margin: 0;
+	font-size: var(--mantine-font-size-sm);
+	font-weight: 600;
+	font-variant-numeric: tabular-nums;
+	text-align: right;
+	min-width: 0;
+	overflow-wrap: anywhere;
+}
+
+@media (max-width: 48em) {
+	.categories {
+		grid-template-columns: minmax(0, 1fr);
+		grid-template-rows: none;
+		grid-auto-flow: row;
+	}
+}
@@ -0,0 +1,131 @@
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { BankSummaryView } from "./BankSummary.view";
+
+const money = (value: string) => ({ currency: "RUB", value });
+const meta = {
+	title: "Product/BankCards/Summary",
+	component: BankSummaryView,
+	tags: ["autodocs"],
+	parameters: {
+		docs: {
+			description: {
+				component:
+					"Месячные расходы ручного учёта. Вымышленные суммы, без API и сохранения. Один итог с учётом возвратов и компактные строки категорий. Отрицательные суммы сохраняют знак.",
+			},
+		},
+	},
+	args: {
+		loading: false,
+		error: false,
+		fetching: false,
+		retry: () => {},
+		data: {
+			month: "2026-09",
+			cardId: null,
+			expenses: money("8500"),
+			refunds: money("1000"),
+			net: money("7500"),
+			categories: [
+				{
+					categoryId: "food",
+					categoryName: "Продукты",
+					expenses: money("3500"),
+					refunds: money("1000"),
+					net: money("2500"),
+				},
+				{
+					categoryId: "cafe",
+					categoryName: "Кафе",
+					expenses: money("2200"),
+					refunds: money("0"),
+					net: money("2200"),
+				},
+				{
+					categoryId: "taxi",
+					categoryName: "Такси",
+					expenses: money("1800"),
+					refunds: money("0"),
+					net: money("1800"),
+				},
+				{
+					categoryId: "health",
+					categoryName: "Здоровье",
+					expenses: money("1000"),
+					refunds: money("0"),
+					net: money("1000"),
+				},
+			],
+		},
+	},
+} satisfies Meta<typeof BankSummaryView>;
+export default meta;
+type Story = StoryObj<typeof meta>;
+export const Loaded: Story = { name: "Расходы по категориям" };
+export const RefundMonth: Story = {
+	name: "Возврат покупки прошлого месяца",
+	args: {
+		data: {
+			month: "2026-09",
+			cardId: null,
+			expenses: money("0"),
+			refunds: money("600"),
+			net: money("-600"),
+			categories: [
+				{
+					categoryId: "shopping",
+					categoryName:
+						"Покупки с длинным пользовательским названием категории",
+					expenses: money("0"),
+					refunds: money("600"),
+					net: money("-600"),
+				},
+			],
+		},
+	},
+};
+export const Empty: Story = {
+	name: "Известные нули",
+	args: {
+		data: {
+			month: "2026-09",
+			cardId: null,
+			expenses: money("0"),
+			refunds: money("0"),
+			net: money("0"),
+			categories: [],
+		},
+	},
+};
+export const Loading: Story = {
+	name: "Начальная загрузка",
+	args: { data: undefined, loading: true },
+};
+export const Failed: Story = {
+	name: "Ошибка без данных",
+	args: { data: undefined, error: true },
+};
+export const CachedError: Story = {
+	name: "Сохранённые суммы при ошибке обновления",
+	args: { error: true },
+};
+export const LongAmounts: Story = {
+	name: "Точный итог длиннее предела отдельного ввода",
+	args: {
+		data: {
+			month: "2026-09",
+			cardId: null,
+			expenses: money("184467440737095516.14"),
+			refunds: money("0"),
+			net: money("184467440737095516.14"),
+			categories: [
+				{
+					categoryId: "shopping",
+					categoryName: "Покупки",
+					expenses: money("184467440737095516.14"),
+					refunds: money("0"),
+					net: money("184467440737095516.14"),
+				},
+			],
+		},
+	},
+};
@@ -0,0 +1,86 @@
+import { Button, Group, Skeleton, Stack, Text, Title } from "@mantine/core";
+import type { CSSProperties, FC } from "react";
+import { useTranslation } from "react-i18next";
+import { formatMoney } from "@/shared/lib";
+import { LoadingSkeleton } from "@/shared/ui";
+import type { BankSummary } from "../api/queries";
+import { BankOperationIcon } from "./BankOperationIcon";
+import classes from "./BankSummary.module.css";
+
+type BankSummaryViewProps = {
+	data?: BankSummary;
+	loading: boolean;
+	error: boolean;
+	fetching: boolean;
+	retry: () => void;
+	all?: boolean;
+};
+const BankSummaryView: FC<BankSummaryViewProps> = (props) => {
+	const { t } = useTranslation();
+	return (
+		<Stack gap="md" aria-busy={props.loading || props.fetching}>
+			<div className={classes.header}>
+				<Title order={2}>
+					{t(props.all ? "bank.allSummary" : "bank.summary")}
+				</Title>
+				{props.data && (
+					<Text className={classes.total}>
+						{formatMoney(props.data.net, { withZeroCents: true })}
+					</Text>
+				)}
+			</div>
+			{props.data ? (
+				props.data.categories.length ? (
+					<dl
+						className={classes.categories}
+						style={
+							{
+								"--category-rows": Math.ceil(props.data.categories.length / 2),
+							} as CSSProperties
+						}
+					>
+						{props.data.categories.map((category) => (
+							<div className={classes.category} key={category.categoryId}>
+								<dt className={classes.label}>
+									<BankOperationIcon
+										kind="expense"
+										categoryName={category.categoryName}
+									/>
+									<span>{category.categoryName}</span>
+								</dt>
+								<dd className={classes.amount}>
+									{formatMoney(category.net, { withZeroCents: true })}
+								</dd>
+							</div>
+						))}
+					</dl>
+				) : (
+					<Text size="sm" c="dimmed">
+						{t("bank.noExpenses")}
+					</Text>
+				)
+			) : props.loading ? (
+				<LoadingSkeleton label={t("bank.loading")}>
+					<Stack gap="sm">
+						<Skeleton h={32} w="35%" />
+						<Skeleton h={40} />
+						<Skeleton h={40} />
+					</Stack>
+				</LoadingSkeleton>
+			) : null}
+			{props.error && (
+				<Group role="alert">
+					<Text>{t(props.data ? "bank.refreshError" : "bank.error")}</Text>
+					<Button variant="default" onClick={props.retry}>
+						{t("bank.retry")}
+					</Button>
+				</Group>
+			)}
+			{props.data && props.fetching && (
+				<Text role="status">{t("bank.refreshing")}</Text>
+			)}
+		</Stack>
+	);
+};
+
+export { BankSummaryView };
@@ -0,0 +1,74 @@
+import { MantineProvider } from "@mantine/core";
+import { QueryClientProvider } from "@tanstack/react-query";
+import { fireEvent, render, screen, waitFor } from "@testing-library/react";
+import { HttpResponse, http } from "msw";
+import { describe, expect, it } from "vitest";
+import { configureAuthClient } from "@/shared/api";
+import { createTestQueryClient } from "@/test/query";
+import { server } from "@/test/server";
+import { CategoryManager } from "./CategoryManager";
+
+describe("CategoryManager", () => {
+	it("rejects duplicate case-insensitive and too long names then renames default identity", async () => {
+		configureAuthClient({
+			accessToken: () => "test",
+			refresh: async () => false,
+			clear: () => {},
+		});
+		let category = {
+			id: "default",
+			name: "Другое",
+			isDefault: true,
+			version: 1,
+		};
+		let creates = 0;
+		let body: unknown;
+		server.use(
+			http.get("*/api/v1/bank-cards/categories", () =>
+				HttpResponse.json([category]),
+			),
+			http.post("*/api/v1/bank-cards/categories", () => {
+				creates++;
+				return HttpResponse.json({});
+			}),
+			http.patch(
+				"*/api/v1/bank-cards/categories/default",
+				async ({ request }) => {
+					body = await request.json();
+					category = { ...category, name: "Остальное", version: 2 };
+					return HttpResponse.json(category);
+				},
+			),
+		);
+		render(
+			<QueryClientProvider client={createTestQueryClient()}>
+				<MantineProvider env="test">
+					<CategoryManager onClose={() => {}} />
+				</MantineProvider>
+			</QueryClientProvider>,
+		);
+		await screen.findByText("Другое");
+		fireEvent.change(screen.getByLabelText(/Название категории/), {
+			target: { value: " другое " },
+		});
+		fireEvent.click(screen.getByRole("button", { name: "Добавить категорию" }));
+		await screen.findByText("Категория с таким названием уже есть.");
+		fireEvent.change(screen.getByLabelText(/Название категории/), {
+			target: { value: "a".repeat(81) },
+		});
+		fireEvent.click(screen.getByRole("button", { name: "Добавить категорию" }));
+		await screen.findByText("Введите название от 1 до 80 символов.");
+		expect(creates).toBe(0);
+		fireEvent.click(screen.getByRole("button", { name: "Переименовать" }));
+		fireEvent.input(screen.getByLabelText(/Название категории/), {
+			target: { value: "Остальное" },
+		});
+		fireEvent.blur(screen.getByLabelText(/Название категории/));
+		fireEvent.click(screen.getByRole("button", { name: "Сохранить" }));
+		await screen.findByText("Остальное");
+		await waitFor(() =>
+			expect(body).toEqual({ name: "Остальное", version: 1 }),
+		);
+		expect(screen.getByText("По умолчанию")).toBeInTheDocument();
+	});
+});
@@ -0,0 +1,225 @@
+import { zodResolver } from "@hookform/resolvers/zod";
+import {
+	Badge,
+	Button,
+	Group,
+	Modal,
+	Stack,
+	Text,
+	TextInput,
+} from "@mantine/core";
+import { type FC, useState } from "react";
+import {
+	Controller,
+	FormProvider,
+	useForm,
+	useFormContext,
+} from "react-hook-form";
+import { useTranslation } from "react-i18next";
+import { z } from "zod";
+import { validationMessage } from "@/shared/i18n";
+import { useBankMutations } from "../api/mutations";
+import { type ExpenseCategory, useBankCategories } from "../api/queries";
+import { BankFeedback } from "./BankFeedback";
+import classes from "./BankForms.module.css";
+import { BankOperationIcon } from "./BankOperationIcon";
+import { useBankFormFocus } from "./useBankFormFocus";
+
+const MAX_CATEGORY_NAME_LENGTH = 80;
+
+type CategoryManagerProps = {
+	onClose: () => void;
+	onCreated?: (id: string) => void;
+};
+type CategoryValues = { name: string };
+const CategoryFields: FC = () => {
+	const { t } = useTranslation();
+	const {
+		control,
+		formState: { errors },
+	} = useFormContext<CategoryValues>();
+	return (
+		<Controller
+			control={control}
+			name="name"
+			render={({ field }) => (
+				<TextInput
+					label={t("bank.categoryName")}
+					required
+					{...field}
+					error={errors.name?.message}
+				/>
+			)}
+		/>
+	);
+};
+const CategoryManager: FC<CategoryManagerProps> = (props) => {
+	useBankFormFocus();
+	const [opened, setOpened] = useState(true);
+	const { t } = useTranslation();
+	const categories = useBankCategories();
+	const mutation = useBankMutations();
+	const [editing, setEditing] = useState<ExpenseCategory>();
+	const [error, setError] = useState<unknown>();
+	const [latest, setLatest] = useState<ExpenseCategory>();
+	const methods = useForm<CategoryValues>({
+		resolver: zodResolver(
+			z.object({
+				name: z
+					.string()
+					.trim()
+					.refine(
+						(value) =>
+							value.length > 0 && value.length <= MAX_CATEGORY_NAME_LENGTH,
+						{ error: validationMessage("bank.validation.category") },
+					)
+					.refine(
+						(value) =>
+							!categories.data?.some(
+								(c) =>
+									c.id !== editing?.id &&
+									c.name.toLocaleLowerCase("ru-RU") ===
+										value.toLocaleLowerCase("ru-RU"),
+							),
+						{ error: validationMessage("bank.validation.duplicate") },
+					),
+			}),
+		),
+		defaultValues: { name: "" },
+	});
+	const pending = !opened || methods.formState.isSubmitting;
+	return (
+		<Modal
+			opened={opened}
+			onExitTransitionEnd={props.onClose}
+			onClose={() => !pending && setOpened(false)}
+			title={t("bank.categories")}
+			closeOnClickOutside={!pending}
+			closeOnEscape={!pending}
+			closeButtonProps={{ "aria-label": t("bank.close"), disabled: pending }}
+		>
+			<FormProvider {...methods}>
+				<form
+					onSubmit={methods.handleSubmit(async (values) => {
+						setError(undefined);
+						try {
+							if (editing)
+								await mutation.updateCategory.mutateAsync({
+									id: editing.id,
+									body: { name: values.name, version: editing.version },
+								});
+							else {
+								const result = await mutation.createCategory.mutateAsync({
+									name: values.name,
+								});
+								if (result) props.onCreated?.(result.id);
+							}
+							setEditing(undefined);
+							methods.reset({ name: "" });
+						} catch (failure) {
+							setError(failure);
+						}
+					})}
+				>
+					<fieldset disabled={pending} className={classes.fieldset}>
+						<Stack>
+							{categories.data?.map((category) => (
+								<Group justify="space-between" key={category.id}>
+									<Group gap="xs">
+										<BankOperationIcon
+											kind="expense"
+											categoryName={category.name}
+										/>
+										<Text>{category.name}</Text>
+										{category.isDefault && (
+											<Badge>{t("bank.defaultCategory")}</Badge>
+										)}
+									</Group>
+									<Button
+										variant="subtle"
+										onClick={() => {
+											setEditing(category);
+											methods.reset({ name: category.name });
+											setError(undefined);
+											setLatest(undefined);
+										}}
+									>
+										{t("bank.rename")}
+									</Button>
+								</Group>
+							))}
+							{categories.isLoading && (
+								<Text role="status">{t("bank.loading")}</Text>
+							)}
+							{categories.isError && (
+								<BankFeedback
+									loadingError
+									error={categories.error}
+									cached={Boolean(categories.data)}
+									retry={() => void categories.refetch()}
+								/>
+							)}
+							<CategoryFields />
+							{error ? (
+								<>
+									<BankFeedback error={error} />
+									{editing && (
+										<Button
+											variant="default"
+											onClick={async () => {
+												const response = await categories.refetch();
+												if (response.error) setError(response.error);
+												else
+													setLatest(
+														response.data?.find((c) => c.id === editing.id),
+													);
+											}}
+										>
+											{t("bank.reloadRecord")}
+										</Button>
+									)}
+								</>
+							) : null}
+							{latest && (
+								<>
+									<Text>{t("bank.versionHint", { details: latest.name })}</Text>
+									<Button
+										onClick={() => {
+											setEditing(latest);
+											setLatest(undefined);
+											setError(undefined);
+										}}
+									>
+										{t("bank.adoptVersion", { version: latest.version })}
+									</Button>
+								</>
+							)}
+							<Group>
+								<Button type="submit" loading={pending}>
+									{t(editing ? "bank.save" : "bank.addCategory")}
+								</Button>
+								{editing && (
+									<Button
+										variant="default"
+										onClick={() => {
+											setEditing(undefined);
+											methods.reset({ name: "" });
+											setError(undefined);
+										}}
+									>
+										{t("bank.cancel")}
+									</Button>
+								)}
+								<Button variant="default" onClick={() => setOpened(false)}>
+									{t("bank.close")}
+								</Button>
+							</Group>
+						</Stack>
+					</fieldset>
+				</form>
+			</FormProvider>
+		</Modal>
+	);
+};
+
+export { CategoryManager };
@@ -0,0 +1,16 @@
+import { useEffect, useState } from "react";
+
+function useBankFormFocus() {
+	const [trigger] = useState(() => document.activeElement);
+	useEffect(
+		() => () => {
+			queueMicrotask(() => {
+				if (trigger instanceof HTMLElement && trigger.isConnected)
+					trigger.focus();
+			});
+		},
+		[trigger],
+	);
+}
+
+export { useBankFormFocus };
@@ -1,6 +1,16 @@
-import { apiQueryClient, useAuthenticatedQuery } from "@/shared/api";
+import {
+	apiQueryClient,
+	type paths,
+	useAuthenticatedQuery,
+} from "@/shared/api";

-type BondPeriod = "month" | "halfYear" | "year" | "all";
+type BondPeriod = NonNullable<
+	NonNullable<
+		paths["/api/v1/bonds/{uid}/candles"]["get"]["parameters"]["query"]
+	>["period"]
+>;
+
+const BOND_STALE_TIME_MS = 30_000;

 function useBondSearch(query: string) {
 	return useAuthenticatedQuery({
@@ -8,7 +18,7 @@ function useBondSearch(query: string) {
 			params: { query: { query } },
 		}),
 		enabled: query.length >= 2,
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 }
 function bondQueryOptions(uid: string) {
@@ -16,7 +26,7 @@ function bondQueryOptions(uid: string) {
 		...apiQueryClient.queryOptions("get", "/api/v1/bonds/{uid}", {
 			params: { path: { uid } },
 		}),
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	};
 }

@@ -35,7 +45,7 @@ function useBond(identifier: string) {
 			params: { path: { ticker: identifier } },
 		}),
 		enabled: Boolean(identifier) && !isUid,
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 	return isUid ? byUid : byTicker;
 }
@@ -45,7 +55,7 @@ function useBondMetrics(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 }
 function useBondQuote(uid: string) {
@@ -54,7 +64,7 @@ function useBondQuote(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 }
 function useBondCandles(uid: string, period: BondPeriod) {
@@ -63,7 +73,7 @@ function useBondCandles(uid: string, period: BondPeriod) {
 			params: { path: { uid }, query: { period } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 }
 function useBondPosition(uid: string) {
@@ -72,7 +82,7 @@ function useBondPosition(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 }
 function useBondCoupons(uid: string) {
@@ -81,7 +91,7 @@ function useBondCoupons(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 }

@@ -9,6 +9,7 @@ function formatShare(
 	if (!numerator || !denominator) return null;
 	const total = Number(denominator.value);
 	if (!Number.isFinite(total) || total <= 0) return null;
+	// biome-ignore lint/style/noMagicNumbers: obvious conversion of a ratio to percent.
 	const percent = (Number(numerator.value) / total) * 100;
 	if (!Number.isFinite(percent)) return null;
 	const rounded = new Intl.NumberFormat("ru-RU", {
@@ -1,10 +1,17 @@
 import {
 	apiQueryClient,
+	type paths,
 	useAuthenticatedQueries,
 	useAuthenticatedQuery,
 } from "@/shared/api";

-type StockPeriod = "month" | "halfYear" | "year" | "all";
+type StockPeriod = NonNullable<
+	NonNullable<
+		paths["/api/v1/stocks/{uid}/candles"]["get"]["parameters"]["query"]
+	>["period"]
+>;
+
+const STOCK_STALE_TIME_MS = 30_000;

 function useStockSearch(query: string) {
 	return useAuthenticatedQuery({
@@ -12,7 +19,7 @@ function useStockSearch(query: string) {
 			params: { query: { query } },
 		}),
 		enabled: query.length >= 2,
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 }
 function stockQueryOptions(uid: string) {
@@ -20,7 +27,7 @@ function stockQueryOptions(uid: string) {
 		...apiQueryClient.queryOptions("get", "/api/v1/stocks/{uid}", {
 			params: { path: { uid } },
 		}),
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	};
 }

@@ -47,7 +54,7 @@ function useStock(identifier: string) {
 			params: { path: { ticker: identifier } },
 		}),
 		enabled: Boolean(identifier) && !isUid,
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 	return isUid ? byUid : byTicker;
 }
@@ -57,7 +64,7 @@ function useStockQuote(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 }
 function useStockCandles(uid: string, period: StockPeriod) {
@@ -66,7 +73,7 @@ function useStockCandles(uid: string, period: StockPeriod) {
 			params: { path: { uid }, query: { period } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 }
 function useStockPosition(uid: string) {
@@ -75,7 +82,7 @@ function useStockPosition(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 }
 function useStockCompany(uid: string) {
@@ -84,7 +91,7 @@ function useStockCompany(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 }
 function useStockDividends(uid: string) {
@@ -93,7 +100,7 @@ function useStockDividends(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 }

@@ -8,6 +8,10 @@ import { createTestQueryClient } from "@/test/query";
 import { server } from "@/test/server";
 import { AuthProvider, useAuth } from "./auth";

+const bankCardsKey = apiQueryClient.queryOptions("get", "/api/v1/bank-cards", {
+	params: { query: { includeArchived: "false" } },
+}).queryKey;
+
 describe("AuthProvider", () => {
 	it("authorizes requests after restoring the initial session", async () => {
 		let authorization: string | null = null;
@@ -54,6 +58,7 @@ describe("AuthProvider", () => {
 		server.use(http.post("*/api/v1/auth/refresh", () => HttpResponse.error()));
 		const queryClient = createTestQueryClient();
 		queryClient.setQueryData(["cached-query"], { value: "stale" });
+		queryClient.setQueryData(bankCardsKey, [{ id: "bank-card-1" }]);
 		const wrapper: FC<PropsWithChildren> = (props) => {
 			const { children } = props;

@@ -70,6 +75,7 @@ describe("AuthProvider", () => {
 		expect(result.current.user).toBeNull();
 		expect(result.current.accessToken).toBeNull();
 		expect(queryClient.getQueryData(["cached-query"])).toBeUndefined();
+		expect(queryClient.getQueryData(bankCardsKey)).toBeUndefined();
 	});

 	it("keeps the original protected 401 when serialized refresh has a transport error", async () => {
@@ -90,6 +96,7 @@ describe("AuthProvider", () => {
 		);
 		const queryClient = createTestQueryClient();
 		queryClient.setQueryData(["cached-query"], { value: "stale" });
+		queryClient.setQueryData(bankCardsKey, [{ id: "bank-card-1" }]);
 		const wrapper: FC<PropsWithChildren> = (props) => {
 			const { children } = props;

@@ -110,6 +117,7 @@ describe("AuthProvider", () => {
 		await waitFor(() => expect(result.current.user).toBeNull());
 		expect(result.current.accessToken).toBeNull();
 		expect(queryClient.getQueryData(["cached-query"])).toBeUndefined();
+		expect(queryClient.getQueryData(bankCardsKey)).toBeUndefined();
 	});

 	it("clears connection status and financial cache independently on logout", async () => {
@@ -136,6 +144,7 @@ describe("AuthProvider", () => {
 			connectedAt: "2026-08-14T00:00:00Z",
 		});
 		queryClient.setQueryData(portfolioKey, { source: "current-connection" });
+		queryClient.setQueryData(bankCardsKey, [{ id: "bank-card-1" }]);
 		const wrapper: FC<PropsWithChildren> = (props) => {
 			const { children } = props;
 			return (
@@ -147,11 +156,15 @@ describe("AuthProvider", () => {
 		const { result } = renderHook(() => useAuth(), { wrapper });
 		await waitFor(() => expect(result.current.accessToken).toBe("test-token"));

+		expect(queryClient.getQueryData(bankCardsKey)).toEqual([
+			{ id: "bank-card-1" },
+		]);
 		await act(() => result.current.logout());

 		expect(result.current.user).toBeNull();
 		expect(result.current.accessToken).toBeNull();
 		expect(queryClient.getQueryData(statusKey)).toBeUndefined();
 		expect(queryClient.getQueryData(portfolioKey)).toBeUndefined();
+		expect(queryClient.getQueryData(bankCardsKey)).toBeUndefined();
 	});
 });
@@ -1,11 +1,17 @@
 import { z } from "zod";
 import { validationMessage } from "@/shared/i18n";

+const ASCII_SPACE = 32;
+const ASCII_DELETE = 127;
+const MAX_EMAIL_LENGTH = 254;
+const MIN_PASSWORD_BYTES = 12;
+const MAX_PASSWORD_BYTES = 72;
+
 function isEmailCharacterInvalid(character: string): boolean {
 	return (
 		/\s/.test(character) ||
-		character.charCodeAt(0) < 32 ||
-		character.charCodeAt(0) === 127
+		character.charCodeAt(0) < ASCII_SPACE ||
+		character.charCodeAt(0) === ASCII_DELETE
 	);
 }

@@ -13,21 +19,21 @@ const email = z
 	.string()
 	.trim()
 	.toLowerCase()
-	.max(254)
+	.max(MAX_EMAIL_LENGTH)
 	.refine(
 		(value) =>
 			value.split("@").length === 2 &&
 			value.split("@").every(Boolean) &&
 			!value.split("").some(isEmailCharacterInvalid),
-		validationMessage("auth.validation.invalidEmail"),
+		{ error: validationMessage("auth.validation.invalidEmail") },
 	);
 const password = z
 	.string()
 	.refine(
 		(value) =>
-			new TextEncoder().encode(value).length >= 12 &&
-			new TextEncoder().encode(value).length <= 72,
-		validationMessage("auth.validation.invalidPasswordLength"),
+			new TextEncoder().encode(value).length >= MIN_PASSWORD_BYTES &&
+			new TextEncoder().encode(value).length <= MAX_PASSWORD_BYTES,
+		{ error: validationMessage("auth.validation.invalidPasswordLength") },
 	);

 const loginSchema = z.object({
@@ -37,10 +43,10 @@ const loginSchema = z.object({
 });
 const registerSchema = loginSchema.refine(
 	(value) => value.password === value.passwordConfirmation,
-	(value) => ({
+	{
 		path: ["passwordConfirmation"],
-		...validationMessage("auth.validation.passwordsDoNotMatch")(value),
-	}),
+		error: validationMessage("auth.validation.passwordsDoNotMatch"),
+	},
 );

 type AuthFormValues = z.input<typeof loginSchema>;
@@ -14,6 +14,9 @@ import { LoadingSkeleton } from "@/shared/ui";
 import type { SectionState } from "../model/section";
 import classes from "./InstrumentDetails.module.css";

+const CHART_SKELETON_HEIGHT_PX = 280;
+const SECTION_SKELETON_HEIGHT_PX = 65;
+
 type InstrumentSectionProps = PropsWithChildren<{
 	title: string;
 	state: SectionState;
@@ -59,7 +62,13 @@ const InstrumentSection: FC<InstrumentSectionProps> = (props) => {
 					label={t("stock.loadingSection", { section: props.title })}
 				>
 					<Stack>
-						<Skeleton h={props.large ? 280 : 65} />
+						<Skeleton
+							h={
+								props.large
+									? CHART_SKELETON_HEIGHT_PX
+									: SECTION_SKELETON_HEIGHT_PX
+							}
+						/>
 						<Skeleton h={14} w="60%" />
 					</Stack>
 				</LoadingSkeleton>
@@ -32,6 +32,13 @@ const bondQueryKey = apiQueryClient.queryOptions(
 	"/api/v1/bonds/{uid}/position",
 	{ params: { path: { uid: "e6123145-9665-43e0-8413-cd61b8aa9b13" } } },
 ).queryKey;
+const bankCardsQueryKey = apiQueryClient.queryOptions(
+	"get",
+	"/api/v1/bank-cards",
+	{
+		params: { query: { includeArchived: "false" } },
+	},
+).queryKey;
 const unrelatedQueryKey = apiQueryClient.queryOptions(
 	"get",
 	"/api/v1/auth/me",
@@ -66,6 +73,7 @@ function seededClient() {
 	client.setQueryData(stockQueryKey, { source: "previous-connection" });
 	client.setQueryData(bondQueryKey, { source: "previous-connection" });
 	client.setQueryData(unrelatedQueryKey, { id: "user-1" });
+	client.setQueryData(bankCardsQueryKey, [{ id: "bank-card-1" }]);
 	return client;
 }

@@ -86,6 +94,10 @@ describe("TbankConnectionSection", () => {
 			).toBeInTheDocument(),
 		);
 		expect(client.getQueryData(brokerageAccountsQueryKey)).toBeUndefined();
+		expect(client.getQueryData(bankCardsQueryKey)).toEqual([
+			{ id: "bank-card-1" },
+		]);
+		expect(client.getQueryState(bankCardsQueryKey)?.isInvalidated).toBe(false);
 		expect(client.getQueryData(portfolioQueryKey)).toBeUndefined();
 		expect(client.getQueryData(stockQueryKey)).toBeUndefined();
 		expect(client.getQueryData(bondQueryKey)).toBeUndefined();
@@ -114,6 +126,10 @@ describe("TbankConnectionSection", () => {
 			expect(client.getQueryData(portfolioQueryKey)).toBeUndefined(),
 		);
 		expect(client.getQueryData(brokerageAccountsQueryKey)).toBeUndefined();
+		expect(client.getQueryData(bankCardsQueryKey)).toEqual([
+			{ id: "bank-card-1" },
+		]);
+		expect(client.getQueryState(bankCardsQueryKey)?.isInvalidated).toBe(false);
 	});

 	it("commits disconnected status and resets financial queries after deleting", async () => {
@@ -139,6 +155,10 @@ describe("TbankConnectionSection", () => {
 			).toBeInTheDocument(),
 		);
 		expect(client.getQueryData(brokerageAccountsQueryKey)).toBeUndefined();
+		expect(client.getQueryData(bankCardsQueryKey)).toEqual([
+			{ id: "bank-card-1" },
+		]);
+		expect(client.getQueryState(bankCardsQueryKey)?.isInvalidated).toBe(false);
 		expect(client.getQueryData(portfolioQueryKey)).toBeUndefined();
 		expect(client.getQueryData(stockQueryKey)).toBeUndefined();
 		expect(client.getQueryData(bondQueryKey)).toBeUndefined();
@@ -55,7 +55,7 @@ describe("Upcoming event date filters", () => {
 			);
 			render(
 				<QueryClientProvider client={createTestQueryClient()}>
-					<MantineProvider>
+					<MantineProvider env="test">
 						<MemoryRouter
 							initialEntries={[
 								`/accounts/${accountId}/events?from=2099-02-01&to=2099-02-28`,
@@ -72,31 +72,37 @@ describe("Upcoming event date filters", () => {
 					</MantineProvider>
 				</QueryClientProvider>,
 			);
-			const from = await screen.findByLabelText("С");
-			const to = screen.getByLabelText("По");
-			expect(from).toHaveValue("01.02.2099");
-			expect(to).toHaveValue("28.02.2099");
+			const from = await screen.findByLabelText("Период");
+			expect(from).toHaveTextContent("01.02.2099 – 28.02.2099");
 			expect(screen.getByRole("button", { name: "Применить" })).toBeDisabled();
 			expect(searches).toEqual(["?from=2099-02-01&to=2099-02-28"]);
-			fireEvent.change(from, { target: { value: "10.02.2099" } });
-			fireEvent.blur(from);
+			fireEvent.click(from);
+			fireEvent.click(
+				await screen.findByRole("button", { name: /10 February 2099/i }),
+			);
+			fireEvent.click(
+				await screen.findByRole("button", { name: /28 February 2099/i }),
+			);
 			expect(searches).toHaveLength(1);
 			fireEvent.click(screen.getByRole("button", { name: "Применить" }));
 			await waitFor(() =>
 				expect(searches.at(-1)).toBe("?from=2099-02-10&to=2099-02-28"),
 			);
-			expect(await screen.findByLabelText("С")).toHaveValue("10.02.2099");
+			expect(await screen.findByLabelText("Период")).toHaveTextContent(
+				"10.02.2099 – 28.02.2099",
+			);
 			fireEvent.click(screen.getByRole("button", { name: "History back" }));
 			await waitFor(() =>
-				expect(screen.getByLabelText("С")).toHaveValue("01.02.2099"),
+				expect(screen.getByLabelText("Период")).toHaveTextContent(
+					"01.02.2099 – 28.02.2099",
+				),
 			);
 			expect(screen.getByLabelText("URL")).toHaveTextContent(
 				"?from=2099-02-01&to=2099-02-28",
 			);
 			fireEvent.click(screen.getByRole("button", { name: "Сбросить" }));
 			await waitFor(() => expect(searches.at(-1)).toBe(""));
-			expect(await screen.findByLabelText("С")).toHaveValue("");
-			expect(screen.getByLabelText("По")).toHaveValue("");
+			expect(await screen.findByLabelText("Период")).toHaveTextContent("");
 			expect(screen.getByRole("button", { name: "Применить" })).toBeDisabled();
 			expect(
 				screen.getByText("За выбранный период событий не найдено"),
@@ -7,22 +7,13 @@ import {
 	Text,
 	Title,
 } from "@mantine/core";
-import { DateInput } from "@mantine/dates";
-import dayjs from "dayjs";
-import customParseFormat from "dayjs/plugin/customParseFormat";
+import { DatePickerInput } from "@mantine/dates";
 import type { FC } from "react";
 import { useTranslation } from "react-i18next";
 import { BrokerageEventCard } from "@/entities/brokerage-event";
 import type { AccountEventsPageViewModel } from "../AccountEventsPage.vm";
 import { AccountEventsPageEmpty } from "./AccountEventsPageEmpty.view";

-dayjs.extend(customParseFormat);
-
-const parseDate = (value: string) => {
-	const date = dayjs(value, "DD.MM.YYYY", true);
-	return date.isValid() ? date.format("YYYY-MM-DD") : null;
-};
-
 type AccountEventsPageLoadedProps = Extract<
 	AccountEventsPageViewModel,
 	{ state: "loaded" }
@@ -46,25 +37,22 @@ const AccountEventsPageLoaded: FC<AccountEventsPageLoadedProps> = (props) => {
 			) : null}
 			<Text c="dimmed">{t("events.hint")}</Text>
 			<Group align="end">
-				<DateInput
-					label={t("ledger.from")}
-					value={props.draftFrom}
-					onChange={props.onDraftFromChange}
-					maxDate={props.draftTo ?? undefined}
+				<DatePickerInput
+					type="range"
+					allowSingleDateInRange
+					clearable
+					clearButtonProps={{ "aria-label": t("ledger.clearPeriod") }}
+					label={t("ledger.period")}
+					value={[props.draftFrom, props.draftTo]}
+					onChange={([from, to]) => {
+						props.onDraftFromChange(from);
+						props.onDraftToChange(to);
+					}}
 					valueFormat="DD.MM.YYYY"
-					dateParser={parseDate}
-					allowDeselect
-					popoverProps={{ middlewares: { shift: { crossAxis: true } } }}
-				/>
-				<DateInput
-					label={t("ledger.to")}
-					value={props.draftTo}
-					onChange={props.onDraftToChange}
-					minDate={props.draftFrom ?? undefined}
-					valueFormat="DD.MM.YYYY"
-					dateParser={parseDate}
-					allowDeselect
-					popoverProps={{ middlewares: { shift: { crossAxis: true } } }}
+					popoverProps={{
+						returnFocus: true,
+						middlewares: { shift: { crossAxis: true } },
+					}}
 				/>
 			</Group>
 			<Group>
@@ -3,6 +3,8 @@ import type { FC } from "react";
 import { useTranslation } from "react-i18next";
 import { LoadingSkeleton } from "@/shared/ui";

+const skeletonRowIds = ["first", "second", "third", "fourth"];
+
 const AccountEventsPageLoading: FC = () => {
 	const { t } = useTranslation();
 	return (
@@ -17,8 +19,8 @@ const AccountEventsPageLoading: FC = () => {
 				<Skeleton height={36} width={116} />
 				<Skeleton height={36} width={108} />
 			</Group>
-			{[0, 1, 2, 3].map((index) => (
-				<Skeleton key={index} height={82} radius="md" />
+			{skeletonRowIds.map((id) => (
+				<Skeleton key={id} height={82} radius="md" />
 			))}
 		</LoadingSkeleton>
 	);
@@ -5,7 +5,7 @@

 .fields {
 	display: grid;
-	grid-template-columns: repeat(2, minmax(0, 1fr));
+	grid-template-columns: minmax(0, 1fr);
 	gap: var(--mantine-spacing-sm);
 }

@@ -523,12 +523,10 @@ const LocationProbe: FC = () => {
 	);
 };

-function inputDate(label: string, value: string) {
-	const field = screen.getByLabelText(label);
-	fireEvent.focus(field);
-	fireEvent.input(field, { target: { value } });
-	fireEvent.blur(field);
-	return field;
+function selectPeriod() {
+	fireEvent.click(screen.getByLabelText("Период"));
+	fireEvent.click(screen.getByRole("button", { name: /^2 августа 2026$/i }));
+	fireEvent.click(screen.getByRole("button", { name: /^27 августа 2026$/i }));
 }

 function respondWithRequestedPeriod(requests: string[]) {
@@ -557,9 +555,10 @@ describe("income period and snapshot boundary", () => {
 		const requests: string[] = [];
 		respondWithRequestedPeriod(requests);
 		renderPage();
-		expect(await screen.findByLabelText("С")).toHaveValue("01.08.2026");
-		expect(screen.getByLabelText("По")).toHaveValue("27.08.2026");
-		inputDate("С", "02.08.2026");
+		expect(await screen.findByLabelText("Период")).toHaveTextContent(
+			"01.08.2026 – 27.08.2026",
+		);
+		selectPeriod();
 		expect(requests).toHaveLength(1);
 		expect(
 			screen.queryByText("2026-08-01 — 2026-08-27"),
@@ -573,66 +572,37 @@ describe("income period and snapshot boundary", () => {
 				.closest("form") as HTMLFormElement,
 		);
 		await waitFor(() => expect(requests).toHaveLength(2));
-		expect(await screen.findByLabelText("С")).toHaveValue("02.08.2026");
+		expect(await screen.findByLabelText("Период")).toHaveTextContent(
+			"02.08.2026 – 27.08.2026",
+		);
 		expect(screen.getByTestId("location")).toHaveTextContent(
 			"from=2026-08-02&to=2026-08-27",
 		);
 		fireEvent.click(screen.getByRole("button", { name: "Back" }));
 		await waitFor(() =>
-			expect(screen.getByLabelText("С")).toHaveValue("01.08.2026"),
+			expect(screen.getByLabelText("Период")).toHaveTextContent(
+				"01.08.2026 – 27.08.2026",
+			),
 		);
 	});

-	it.each([
-		["С", "", "Введите существующую дату"],
-		["С", "31.02.2026", "Введите существующую дату"],
-		["По", "29.02.2026", "Введите существующую дату"],
-		["По", "2026-08-02", "Введите существующую дату"],
-		["С", "01.01.2099", "Дата не может быть позже"],
-		["По", "01.01.2099", "Дата не может быть позже"],
-		["По", "31.07.2026", "Укажите корректный период"],
-	])(
-		"rejects visible %s=%s without replacing data or URL",
-		async (label, value, error) => {
-			const requests: string[] = [];
-			respondWithRequestedPeriod(requests);
-			renderPage();
-			await screen.findByLabelText("С");
-			const field = inputDate(label, value);
-			fireEvent.click(screen.getByRole("button", { name: "Применить" }));
-			expect(await screen.findByText(new RegExp(error))).toBeInTheDocument();
-			expect(field).toHaveValue(value);
-			expect(field).toHaveAttribute("aria-invalid", "true");
-			await waitFor(() => expect(field).toHaveFocus());
-			expect(requests).toHaveLength(1);
-			expect(screen.getByTestId("location")).toHaveTextContent(
-				"from=2026-08-01&to=2026-08-27",
-			);
-			expect(
-				screen.queryByText("2026-08-01 — 2026-08-27"),
-			).not.toBeInTheDocument();
-			expect(screen.getByRole("region", { name: "Выплаты" })).toBeVisible();
-		},
-	);
-
-	it("replaces invalid raw text with a calendar choice and closes the calendar with Escape", async () => {
-		respondWithRequestedPeriod([]);
+	it("rejects an incomplete range without replacing the URL and allows a single day", async () => {
+		const requests: string[] = [];
+		respondWithRequestedPeriod(requests);
 		renderPage();
-		const from = await screen.findByLabelText("С");
-		act(() => from.focus());
-		fireEvent.input(from, { target: { value: "invalid" } });
-		// The selected month stays available even when the visible draft is invalid.
-		const day = await screen.findByRole("button", {
-			name: /^2 августа 2026$/i,
-		});
-		fireEvent.click(day);
-		expect(from).toHaveValue("02.08.2026");
-		act(() => from.focus());
-		fireEvent.keyDown(from, { key: "Escape" });
+		const period = await screen.findByLabelText("Период");
+		fireEvent.click(period);
+		fireEvent.click(screen.getByRole("button", { name: /^2 августа 2026$/i }));
+		fireEvent.keyDown(period, { key: "Escape" });
+		fireEvent.click(screen.getByRole("button", { name: "Применить" }));
+		expect(await screen.findByText(/Введите существующую дату/)).toBeVisible();
+		expect(requests).toHaveLength(1);
+		if (period.getAttribute("aria-expanded") !== "true")
+			fireEvent.click(period);
+		fireEvent.click(screen.getByRole("button", { name: /^2 августа 2026$/i }));
+		fireEvent.click(screen.getByRole("button", { name: "Применить" }));
 		await waitFor(() =>
-			expect(
-				screen.queryByRole("button", { name: /^2 августа 2026$/i }),
-			).not.toBeInTheDocument(),
+			expect(requests.at(-1)).toBe("?from=2026-08-02&to=2026-08-02"),
 		);
 	});

@@ -642,19 +612,23 @@ describe("income period and snapshot boundary", () => {
 		const requests: string[] = [];
 		respondWithRequestedPeriod(requests);
 		renderPage("");
-		expect(await screen.findByLabelText("С")).toHaveValue("01.09.2026");
-		expect(screen.getByLabelText("По")).toHaveValue("01.09.2026");
-		inputDate("С", "wrong");
+		expect(await screen.findByLabelText("Период")).toHaveTextContent(
+			"01.09.2026 – 01.09.2026",
+		);
+		fireEvent.click(screen.getByLabelText("Период"));
+		fireEvent.click(screen.getByRole("button", { name: /^1 сентября 2026$/i }));
+		fireEvent.keyDown(screen.getByLabelText("Период"), { key: "Escape" });
 		fireEvent.click(screen.getByRole("button", { name: "Применить" }));
 		await screen.findByText(/Введите существующую дату/);
 		fireEvent.click(screen.getByRole("button", { name: "Сбросить" }));
 		await waitFor(() =>
-			expect(screen.getByLabelText("С")).toHaveValue("01.09.2026"),
+			expect(screen.getByLabelText("Период")).toHaveTextContent(
+				"01.09.2026 – 01.09.2026",
+			),
 		);
 		expect(
 			screen.queryByText(/Введите существующую дату/),
 		).not.toBeInTheDocument();
-		expect(screen.getByLabelText("По")).toHaveValue("01.09.2026");
 		expect(screen.getByTestId("location")).toHaveTextContent(
 			"from=2026-09-01&to=2026-09-01",
 		);
@@ -664,8 +638,8 @@ describe("income period and snapshot boundary", () => {
 	it("keeps valid data and draft during refetch, warns on failure and retries", async () => {
 		respondWithRequestedPeriod([]);
 		const { queryClient } = renderPage();
-		await screen.findByLabelText("С");
-		inputDate("С", "02.08.2026");
+		await screen.findByLabelText("Период");
+		selectPeriod();
 		let release!: () => void;
 		const pending = new Promise<void>((resolve) => {
 			release = resolve;
@@ -686,7 +660,9 @@ describe("income period and snapshot boundary", () => {
 			await screen.findByRole("status", { name: "Обновляем пассивный доход" }),
 		).toBeInTheDocument();
 		expect(screen.getByRole("region", { name: "Выплаты" })).toBeVisible();
-		expect(screen.getByLabelText("С")).toHaveValue("02.08.2026");
+		expect(screen.getByLabelText("Период")).toHaveTextContent(
+			"02.08.2026 – 27.08.2026",
+		);
 		release();
 		expect(
 			await screen.findByText(/Показан последний загруженный результат/),
@@ -699,13 +675,15 @@ describe("income period and snapshot boundary", () => {
 				screen.queryByText(/Показан последний загруженный результат/),
 			).not.toBeInTheDocument(),
 		);
-		expect(screen.getByLabelText("С")).toHaveValue("02.08.2026");
+		expect(screen.getByLabelText("Период")).toHaveTextContent(
+			"02.08.2026 – 27.08.2026",
+		);
 	});

 	it("shows busy skeleton for a new uncached period without relabeling the previous result", async () => {
 		respondWithRequestedPeriod([]);
 		renderPage();
-		await screen.findByLabelText("С");
+		await screen.findByLabelText("Период");
 		let release!: () => void;
 		const pending = new Promise<void>((resolve) => {
 			release = resolve;
@@ -722,7 +700,7 @@ describe("income period and snapshot boundary", () => {
 				},
 			),
 		);
-		inputDate("С", "02.08.2026");
+		selectPeriod();
 		fireEvent.click(screen.getByRole("button", { name: "Применить" }));
 		expect(
 			await screen.findByRole("status", { name: "Загрузка" }),
@@ -734,7 +712,9 @@ describe("income period and snapshot boundary", () => {
 			screen.queryByText("2026-08-02 — 2026-08-27"),
 		).not.toBeInTheDocument();
 		release();
-		expect(await screen.findByLabelText("С")).toHaveValue("02.08.2026");
+		expect(await screen.findByLabelText("Период")).toHaveTextContent(
+			"02.08.2026 – 27.08.2026",
+		);
 	});

 	it("shows one flat payment card per entry in server order without currency or instrument groups", () => {
@@ -7,6 +7,8 @@ import { type IncomeAnalytics, useIncomeAnalytics } from "@/entities/income";
 import { validationMessage } from "@/shared/i18n";
 import { formatDate } from "@/shared/lib";

+const ISO_MONTH_LENGTH = 7;
+
 type IncomePeriod = { from: string; to: string };
 type IncomeForm = IncomePeriod;

@@ -42,14 +44,16 @@ type AccountIncomePageViewModel =
 const datePattern = /^\d{4}-\d{2}-\d{2}$/;
 const draftDate = z
 	.string()
+	.refine((value) => parseDraftDate(value) !== null, {
+		error: validationMessage("income.validation.date"),
+	})
 	.refine(
-		(value) => parseDraftDate(value) !== null,
-		validationMessage("income.validation.date"),
-	)
-	.refine((value) => {
-		const date = parseDraftDate(value);
-		return !date || date <= moscowDate(new Date());
-	}, validationMessage("income.validation.future"));
+		(value) => {
+			const date = parseDraftDate(value);
+			return !date || date <= moscowDate(new Date());
+		},
+		{ error: validationMessage("income.validation.future") },
+	);
 const incomeFormSchema = z.object({ from: draftDate, to: draftDate }).refine(
 	({ from, to }) => {
 		const start = parseDraftDate(from);
@@ -99,7 +103,7 @@ const useAccountIncomePageViewModel = (
 	const onReset = () => {
 		const next = defaultPeriod();
 		form.reset(draftPeriod(next));
-		// DateInput retains raw text while its calendar is open; reset that UI state too.
+		// Reset the open calendar along with the form.
 		setFormRevision((revision) => revision + 1);
 		setSearchParams(next, { replace: true });
 	};
@@ -143,7 +147,7 @@ function draftPeriod(period: IncomePeriod): IncomeForm {

 function defaultPeriod(): IncomePeriod {
 	const today = moscowDate(new Date());
-	return { from: `${today.slice(0, 7)}-01`, to: today };
+	return { from: `${today.slice(0, ISO_MONTH_LENGTH)}-01`, to: today };
 }

 function validPeriod(period: IncomePeriod): period is IncomePeriod {
@@ -1,7 +1,7 @@
 import { Button, Paper, Stack, Text } from "@mantine/core";
-import { DateInput } from "@mantine/dates";
+import { DatePickerInput } from "@mantine/dates";
 import type { FC, FormEventHandler } from "react";
-import { Controller, useFormContext, useWatch } from "react-hook-form";
+import { useController, useFormContext, useWatch } from "react-hook-form";
 import { useTranslation } from "react-i18next";
 import classes from "../AccountIncomePage.module.css";
 import {
@@ -22,6 +22,8 @@ const IncomePeriodForm: FC<IncomePeriodFormProps> = (props) => {
 		control,
 		formState: { isSubmitting },
 	} = useFormContext<IncomeForm>();
+	const fromField = useController({ control, name: "from" });
+	const toField = useController({ control, name: "to" });
 	const [from, to] = useWatch({ control, name: ["from", "to"] });
 	const today = moscowDate(new Date());
 	const start = parseDraftDate(from);
@@ -37,39 +39,34 @@ const IncomePeriodForm: FC<IncomePeriodFormProps> = (props) => {
 			<Stack gap="sm">
 				<Text fw={700}>{t("income.period")}</Text>
 				<div className={classes.fields}>
-					{(["from", "to"] as const).map((name) => (
-						<Controller
-							key={name}
-							name={name}
-							control={control}
-							render={({ field, fieldState }) => (
-								<DateInput
-									ref={field.ref}
-									label={t(`income.${name}`)}
-									placeholder={t("income.datePlaceholder")}
-									valueFormat="DD.MM.YYYY"
-									value={parseDraftDate(field.value)}
-									dateParser={parseDraftDate}
-									fixOnBlur={false}
-									popoverProps={{ middlewares: { shift: { crossAxis: true } } }}
-									onInput={(event) => field.onChange(event.currentTarget.value)}
-									onChange={(value) =>
-										field.onChange(value ? formatDraftDate(value) : "")
-									}
-									onBlur={(event) => {
-										field.onChange(event.currentTarget.value);
-										field.onBlur();
-									}}
-									minDate={
-										name === "to" && start && start <= today ? start : undefined
-									}
-									maxDate={name === "from" && end && end <= today ? end : today}
-									error={fieldState.error?.message}
-									disabled={isSubmitting}
-								/>
-							)}
-						/>
-					))}
+					<DatePickerInput
+						type="range"
+						allowSingleDateInRange
+						clearable
+						clearButtonProps={{ "aria-label": t("ledger.clearPeriod") }}
+						ref={fromField.field.ref}
+						label={t("income.period")}
+						valueFormat="DD.MM.YYYY"
+						value={[start, end]}
+						onChange={([from, to]) => {
+							fromField.field.onChange(from ? formatDraftDate(from) : "");
+							toField.field.onChange(to ? formatDraftDate(to) : "");
+						}}
+						onBlur={() => {
+							fromField.field.onBlur();
+							toField.field.onBlur();
+						}}
+						maxDate={today}
+						error={
+							fromField.fieldState.error?.message ??
+							toField.fieldState.error?.message
+						}
+						disabled={isSubmitting}
+						popoverProps={{
+							returnFocus: true,
+							middlewares: { shift: { crossAxis: true } },
+						}}
+					/>
 				</div>
 				<div className={classes.actions}>
 					<Button type="submit" loading={isSubmitting}>
@@ -7,7 +7,7 @@ import {
 	Stack,
 	Title,
 } from "@mantine/core";
-import { DateInput } from "@mantine/dates";
+import { DatePickerInput } from "@mantine/dates";
 import type { FC } from "react";
 import { useTranslation } from "react-i18next";
 import {
@@ -25,21 +25,6 @@ type AccountOperationsPageLoadedProps = Extract<

 const operationCategorySet = new Set<string>(operationCategories);

-function toDateValue(value: string | null): Date | null {
-	if (!value) return null;
-	const [year, month, day] = value.split("-").map(Number);
-	return new Date(year, month - 1, day);
-}
-
-function fromDateValue(value: Date | string | null): string | null {
-	if (!value) return null;
-	if (typeof value === "string") return value;
-	const year = value.getFullYear();
-	const month = String(value.getMonth() + 1).padStart(2, "0");
-	const day = String(value.getDate()).padStart(2, "0");
-	return `${year}-${month}-${day}`;
-}
-
 function fromMultiSelectValue(value: string[]) {
 	return value.filter((item): item is OperationCategory =>
 		operationCategorySet.has(item),
@@ -87,19 +72,22 @@ const AccountOperationsPageLoaded: FC<AccountOperationsPageLoadedProps> = (
 				</Alert>
 			) : null}
 			<Group align="end">
-				<DateInput
-					label={t("ledger.from")}
-					value={toDateValue(draftFrom)}
-					onChange={(value) => onDraftFromChange(fromDateValue(value))}
-					maxDate={toDateValue(draftTo) ?? undefined}
-					valueFormat="DD.MM.YYYY"
-				/>
-				<DateInput
-					label={t("ledger.to")}
-					value={toDateValue(draftTo)}
-					onChange={(value) => onDraftToChange(fromDateValue(value))}
-					minDate={toDateValue(draftFrom) ?? undefined}
+				<DatePickerInput
+					type="range"
+					allowSingleDateInRange
+					clearable
+					clearButtonProps={{ "aria-label": t("ledger.clearPeriod") }}
+					label={t("ledger.period")}
+					value={[draftFrom, draftTo]}
+					onChange={([from, to]) => {
+						onDraftFromChange(from);
+						onDraftToChange(to);
+					}}
 					valueFormat="DD.MM.YYYY"
+					popoverProps={{
+						returnFocus: true,
+						middlewares: { shift: { crossAxis: true } },
+					}}
 				/>
 			</Group>
 			<MultiSelect
@@ -111,6 +99,7 @@ const AccountOperationsPageLoaded: FC<AccountOperationsPageLoadedProps> = (
 					onDraftCategoriesChange(fromMultiSelectValue(value))
 				}
 				clearable
+				clearButtonProps={{ "aria-label": t("ledger.clearPeriod") }}
 			/>
 			<Group>
 				<Button onClick={onApply} disabled={!canApply}>
@@ -3,6 +3,8 @@ import type { FC } from "react";
 import { useTranslation } from "react-i18next";
 import { LoadingSkeleton } from "@/shared/ui";

+const skeletonRowIds = ["first", "second", "third", "fourth"];
+
 const AccountOperationsPageLoading: FC = () => {
 	const { t } = useTranslation();

@@ -19,8 +21,8 @@ const AccountOperationsPageLoading: FC = () => {
 				<Skeleton height={36} width={110} radius="sm" />
 			</Group>
 			<Stack gap="xs">
-				{[0, 1, 2, 3].map((index) => (
-					<Skeleton key={index} height={64} radius="md" />
+				{skeletonRowIds.map((id) => (
+					<Skeleton key={id} height={64} radius="md" />
 				))}
 			</Stack>
 		</LoadingSkeleton>
@@ -123,11 +123,13 @@ function emptyProps() {
 describe("AccountPage states", () => {
 	it.each(
 		["account-1", "all"].flatMap((accountId) =>
-			["STOCK", "BOND"].map((type) => ({ accountId, type })),
+			["STOCK", "BOND"].flatMap((type) =>
+				[true, false].map((hasMetadata) => ({ accountId, type, hasMetadata })),
+			),
 		),
 	)(
-		"links name and logo to the exact issue in $accountId for $type",
-		async ({ accountId, type }) => {
+		"keeps portfolio metadata authoritative and links the exact issue in $accountId for $type (metadata: $hasMetadata)",
+		async ({ accountId, type, hasMetadata }) => {
 			const collection = type === "STOCK" ? "stocks" : "bonds";
 			const slug = type === "STOCK" ? "SBERP" : "SU26238RMFS4";
 			const uid = "c190ff1f-1447-4227-b543-316332699ca5";
@@ -136,8 +138,9 @@ describe("AccountPage states", () => {
 				...portfolio.positions[0],
 				type,
 				instrumentUid: uid,
-				ticker: slug,
-				displayName: "Сбербанк привилегированные",
+				ticker: hasMetadata ? slug : null,
+				displayName: hasMetadata ? "Сбербанк привилегированные" : "FIGI-2",
+				logoName: hasMetadata ? "vtoraya.png" : null,
 			};
 			server.use(
 				http.get("*/api/v1/brokerage-accounts/:accountId/portfolio", () =>
@@ -154,7 +157,14 @@ describe("AccountPage states", () => {
 				),
 				http.get(`*/api/v1/${collection}/:uid`, () => {
 					requests();
-					return HttpResponse.json({ instrumentUid: uid, slug });
+					return HttpResponse.json({
+						instrumentUid: uid,
+						slug,
+						name: "Название из карточки инструмента",
+						ticker: "OTHER-TICKER",
+						isin: "OTHER-ISIN",
+						logoName: "other.png",
+					});
 				}),
 			);
 			configureTestAuth();
@@ -171,6 +181,19 @@ describe("AccountPage states", () => {
 					);
 			});
 			expect(requests).toHaveBeenCalledTimes(type === "STOCK" ? 1 : 0);
+			expect(
+				screen.queryByText("Название из карточки инструмента"),
+			).not.toBeInTheDocument();
+			expect(
+				screen.queryByText(/OTHER-TICKER|OTHER-ISIN/),
+			).not.toBeInTheDocument();
+			const logo = screen.queryByRole("img", { name: position.displayName });
+			if (hasMetadata)
+				expect(logo).toHaveAttribute(
+					"src",
+					"https://invest-brands.cdn-tinkoff.ru/vtorayax160.png",
+				);
+			else expect(logo).not.toBeInTheDocument();
 		},
 	);

@@ -17,6 +17,8 @@ import { useStocks } from "@/entities/stock";
 import { apiErrorCode } from "@/shared/api";
 import { formatMoney, instrumentLogoUrl } from "@/shared/lib";

+const RECENT_EVENTS_LIMIT = 5;
+
 type PositionSectionKind = "stocks" | "bonds" | "other";
 type AccountPageReturnTone = "positive" | "negative";

@@ -176,7 +178,7 @@ function toRecentEvents(
 	const to = `/accounts/${accountId}/events`;
 	if (events.isLoading) return { state: "loading", to };
 	if (events.isError) return { state: "error", to };
-	const items = events.data?.events.slice(0, 5) ?? [];
+	const items = events.data?.events.slice(0, RECENT_EVENTS_LIMIT) ?? [];
 	if (!items.length) return { state: "empty", to };
 	return { state: "loaded", to, items };
 }
@@ -4,6 +4,8 @@ import type { Portfolio } from "@/entities/portfolio";
 import { formatMoney } from "@/shared/lib";
 import { PortfolioStructureView } from "./PortfolioStructure.view";

+const MIN_VISIBLE_SHARE_PERCENT = 0.01;
+
 // A cached snapshot or an older running server can predate this response field.
 type PortfolioStructureProps = { structure?: Portfolio["structure"] | null };

@@ -45,7 +47,7 @@ const PortfolioStructure: FC<PortfolioStructureProps> = (props) => {
 					share:
 						percentage === null
 							? t("portfolio.structure.shareUnavailable")
-							: percentage > 0 && percentage < 0.01
+							: percentage > 0 && percentage < MIN_VISIBLE_SHARE_PERCENT
 								? t("portfolio.structure.smallShare")
 								: `${new Intl.NumberFormat("ru-RU", { maximumFractionDigits: 2 }).format(percentage)} %`,
 					value: percentage ?? 0,
@@ -4,10 +4,12 @@ import { useBondSearch } from "@/entities/bond";
 import { apiErrorCode } from "@/shared/api";
 import { instrumentLogoUrl } from "@/shared/lib";

+const SEARCH_DEBOUNCE_MS = 300;
+
 function useBondsPageVm() {
 	const [params, setParams] = useSearchParams();
 	const query = params.get("q") ?? "";
-	const [debounced] = useDebouncedValue(query.trim(), 300);
+	const [debounced] = useDebouncedValue(query.trim(), SEARCH_DEBOUNCE_MS);
 	const result = useBondSearch(debounced);
 	const waiting = query.trim() !== debounced;
 	return {
@@ -0,0 +1 @@
+export { CardPage } from "./ui/CardPage";
@@ -0,0 +1,80 @@
+.card {
+	position: relative;
+	width: 100%;
+	max-width: 28rem;
+}
+.cardActions {
+	position: absolute;
+	top: 4.5rem;
+	right: clamp(1.1rem, 3vw, 1.6rem);
+	padding: 4px;
+	border: 1px solid var(--mantine-color-gray-3);
+	border-radius: var(--mantine-radius-lg);
+	background: var(--mantine-color-white);
+	box-shadow: 0 3px 12px #0000001a;
+}
+@media (hover: hover) and (pointer: fine) {
+	.cardActions {
+		opacity: 0;
+		pointer-events: none;
+	}
+	.card:hover .cardActions,
+	.card:focus-within .cardActions {
+		opacity: 1;
+		pointer-events: auto;
+	}
+}
+
+.wrap {
+	overflow-wrap: anywhere;
+	min-width: 0;
+}
+.operation {
+	min-width: 0;
+}
+.operation p {
+	white-space: normal;
+	overflow-wrap: anywhere;
+}
+.operation > div > div {
+	min-width: 0;
+}
+@media (min-width: 36em) {
+	.operation > div:first-child {
+		grid-template-columns: auto minmax(0, 1fr) minmax(0, 40%);
+	}
+}
+
+.operations[data-pending] {
+	opacity: 0.55;
+}
+@media (pointer: coarse) {
+	.cardActions button {
+		min-width: 36px;
+		min-height: 36px;
+	}
+}
+@media (prefers-reduced-motion: no-preference) {
+	.cardActions {
+		transition: opacity 180ms ease;
+	}
+	.page button {
+		transition:
+			background-color 180ms ease,
+			color 180ms ease;
+	}
+	.operations {
+		animation: operations-appear 200ms ease-out;
+		transition: opacity 150ms ease;
+	}
+	@keyframes operations-appear {
+		from {
+			opacity: 0;
+			transform: translateY(4px);
+		}
+		to {
+			opacity: 1;
+			transform: translateY(0);
+		}
+	}
+}
@@ -0,0 +1,349 @@
+import { MantineProvider } from "@mantine/core";
+import { QueryClientProvider } from "@tanstack/react-query";
+import {
+	fireEvent,
+	render,
+	screen,
+	waitFor,
+	within,
+} from "@testing-library/react";
+import { HttpResponse, http } from "msw";
+import { MemoryRouter, Route, Routes } from "react-router";
+import { describe, expect, it, vi } from "vitest";
+import { configureAuthClient } from "@/shared/api";
+import { createTestQueryClient } from "@/test/query";
+import { server } from "@/test/server";
+import { CardPage } from "./CardPage";
+
+const money = (value: string) => ({ currency: "RUB", value });
+const card = {
+	id: "a",
+	name: "Повседневная",
+	bankName: null,
+	lastFour: null,
+	balance: money("10000"),
+	openingBalance: money("10000"),
+	openingDate: "2026-01-01",
+	archivedAt: null,
+	version: 1,
+};
+const operation = {
+	id: "transfer",
+	kind: "transfer",
+	cardId: "a",
+	cardName: "Повседневная",
+	targetCardId: "b",
+	targetCardName: "Запасная",
+	categoryId: null,
+	categoryName: null,
+	originalExpenseId: null,
+	amount: money("50.01"),
+	availableRefund: null,
+	date: "2026-08-03",
+	description: null,
+	version: 1,
+	createdAt: "2026-08-03T00:00:00Z",
+};
+function setup(
+	options: {
+		missing?: boolean;
+		summaryError?: boolean;
+		cardsError?: boolean;
+	} = {},
+) {
+	configureAuthClient({
+		accessToken: () => "test",
+		refresh: async () => false,
+		clear: () => {},
+	});
+	const requests: string[] = [];
+	const summaryRequests: string[] = [];
+	server.use(
+		http.get("*/api/v1/bank-cards/a", () =>
+			options.missing
+				? HttpResponse.json({ code: "BANK_NOT_FOUND" }, { status: 404 })
+				: HttpResponse.json(card),
+		),
+		http.get("*/api/v1/bank-cards", () =>
+			options.cardsError
+				? HttpResponse.error()
+				: HttpResponse.json([card, { ...card, id: "b", name: "Запасная" }]),
+		),
+		http.get("*/api/v1/bank-cards/a/operations", ({ request }) => {
+			requests.push(new URL(request.url).search);
+			return HttpResponse.json({
+				items: [
+					{
+						...operation,
+						id: `operation-${new URL(request.url).searchParams.get("page")}`,
+					},
+				],
+				page: Number(new URL(request.url).searchParams.get("page")),
+				total: 30,
+				hasNext: Number(new URL(request.url).searchParams.get("page")) < 3,
+			});
+		}),
+		http.get("*/api/v1/bank-cards/summary", ({ request }) => {
+			summaryRequests.push(new URL(request.url).search);
+			return options.summaryError
+				? HttpResponse.error()
+				: HttpResponse.json({
+						month: "2026-08",
+						cardId: "a",
+						expenses: money("0"),
+						refunds: money("50"),
+						net: money("-50"),
+						categories: [],
+					});
+		}),
+	);
+	const client = createTestQueryClient();
+	render(
+		<QueryClientProvider client={client}>
+			<MantineProvider env="test">
+				<MemoryRouter initialEntries={["/cards/a?month=2026-08"]}>
+					<Routes>
+						<Route path="/cards/:cardId" element={<CardPage />} />
+					</Routes>
+				</MemoryRouter>
+			</MantineProvider>
+		</QueryClientProvider>,
+	);
+	return { requests, summaryRequests, client };
+}
+describe("CardPage", () => {
+	it("shares date range with history, pages the journal and keeps current balance", async () => {
+		const { requests, summaryRequests } = setup();
+		await screen.findByRole("heading", { name: "Повседневная" });
+		expect(
+			await screen.findByText("Перевод на «Запасная»"),
+		).toBeInTheDocument();
+		expect(screen.getByText("03.08.2026")).toBeInTheDocument();
+		expect(screen.getByText("−50,01 ₽")).toBeInTheDocument();
+		expect(await screen.findByText("-50,00 ₽")).toBeInTheDocument();
+		expect(screen.getByRole("button", { name: "Назад" })).toBeDisabled();
+		expect(requests.every((value) => value.includes("limit=10"))).toBe(true);
+		fireEvent.click(screen.getByRole("button", { name: "Далее" }));
+		await waitFor(() =>
+			expect(requests.some((v) => v.includes("page=2"))).toBe(true),
+		);
+		const lastPage = await screen.findByRole("button", { name: "Страница 3" });
+		await waitFor(() => expect(lastPage).toBeEnabled());
+		fireEvent.click(lastPage);
+		await waitFor(() => expect(requests.at(-1)).toContain("page=3"));
+		await waitFor(() =>
+			expect(screen.getByRole("button", { name: "Далее" })).toBeDisabled(),
+		);
+		expect(
+			screen.getByRole("button", { name: "Страница 3" }),
+		).toHaveTextContent("3");
+		fireEvent.click(screen.getByLabelText("Период"));
+		fireEvent.click(
+			await screen.findByRole("button", { name: "10 August 2026" }),
+		);
+		fireEvent.click(
+			await screen.findByRole("button", { name: "20 August 2026" }),
+		);
+		await waitFor(() =>
+			expect(
+				requests.some(
+					(v) =>
+						v.includes("from=2026-08-10") &&
+						v.includes("to=2026-08-20") &&
+						v.includes("page=1"),
+				),
+			).toBe(true),
+		);
+		await waitFor(() =>
+			expect(summaryRequests.at(-1)).toContain("from=2026-08-10&to=2026-08-20"),
+		);
+		expect(screen.getByRole("link", { name: "Карта" })).toHaveAttribute(
+			"href",
+			"/cards/b?from=2026-08-10&to=2026-08-20",
+		);
+		expect(screen.getByText(/10\s000 ₽/)).toBeInTheDocument();
+	});
+	it("keeps the journal in place while the next page loads", async () => {
+		const scroll = vi.spyOn(window, "scrollBy").mockImplementation(() => {});
+		setup();
+		await screen.findByText("Перевод на «Запасная»");
+		const navigation = screen.getByRole("navigation", {
+			name: "Страницы операций",
+		});
+		const measure = vi
+			.spyOn(navigation, "getBoundingClientRect")
+			.mockReturnValue({ top: 600 } as DOMRect);
+		let release = () => {};
+		const pending = new Promise<void>((resolve) => {
+			release = resolve;
+		});
+		server.use(
+			http.get("*/api/v1/bank-cards/a/operations", async () => {
+				await pending;
+				return HttpResponse.json({
+					items: [{ ...operation, id: "next", description: "Новая страница" }],
+					page: 2,
+					total: 30,
+					hasNext: true,
+				});
+			}),
+		);
+		fireEvent.click(screen.getByRole("button", { name: "Далее" }));
+		await waitFor(() =>
+			expect(screen.getByRole("button", { name: "Далее" })).toBeDisabled(),
+		);
+		expect(screen.getByText("Перевод на «Запасная»")).toBeInTheDocument();
+		expect(screen.getByRole("button", { name: "Изменить" })).toBeDisabled();
+		expect(
+			screen.queryByLabelText("Загрузка операций"),
+		).not.toBeInTheDocument();
+		expect(scroll).not.toHaveBeenCalled();
+		measure.mockReturnValue({ top: 200 } as DOMRect);
+		release();
+		await screen.findByText(/Новая страница/);
+		const list = screen.getByText(/Новая страница/).closest("[aria-busy]");
+		expect(list?.parentElement?.style.minHeight).toBe("");
+		expect(scroll).toHaveBeenCalledExactlyOnceWith({
+			top: -400,
+			behavior: "instant",
+		});
+		measure.mockRestore();
+		scroll.mockRestore();
+		await waitFor(() =>
+			expect(screen.getByRole("button", { name: "Далее" })).toBeEnabled(),
+		);
+	});
+	it("changes page size, resets the page and shows all monthly operations", async () => {
+		const { requests } = setup();
+		await screen.findByText("Перевод на «Запасная»");
+		fireEvent.click(screen.getByRole("button", { name: "Страница 3" }));
+		await waitFor(() => expect(requests.at(-1)).toContain("page=3"));
+		await waitFor(() =>
+			expect(screen.getByRole("button", { name: "Страница 1" })).toBeEnabled(),
+		);
+		fireEvent.click(
+			screen.getByRole("combobox", { name: "Операций на странице" }),
+		);
+		fireEvent.click(await screen.findByRole("option", { name: "20" }));
+		await waitFor(() => {
+			expect(requests.at(-1)).toContain("limit=20");
+			expect(requests.at(-1)).toContain("page=1");
+		});
+		await waitFor(() =>
+			expect(screen.getByRole("button", { name: "Страница 1" })).toBeEnabled(),
+		);
+		fireEvent.click(
+			screen.getByRole("combobox", { name: "Операций на странице" }),
+		);
+		fireEvent.click(await screen.findByRole("option", { name: "Все" }));
+		await waitFor(() =>
+			expect(
+				screen.queryByRole("navigation", { name: "Страницы операций" }),
+			).not.toBeInTheDocument(),
+		);
+		await waitFor(() => expect(requests.at(-1)).toContain("limit=100"));
+		await waitFor(() =>
+			expect(screen.getAllByText("Перевод на «Запасная»")).toHaveLength(3),
+		);
+	});
+	it("keeps card and journal when summary fails", async () => {
+		setup({ summaryError: true });
+		await screen.findByRole("heading", { name: "Повседневная" });
+		await screen.findByRole("alert");
+		expect(
+			await screen.findByText("Перевод на «Запасная»"),
+		).toBeInTheDocument();
+		expect(screen.queryByText("0 ₽")).not.toBeInTheDocument();
+	});
+	it("keeps cached card and history after refetch failure", async () => {
+		const { client } = setup();
+		await screen.findByText("Перевод на «Запасная»");
+		server.use(
+			http.get("*/api/v1/bank-cards/a", () => HttpResponse.error()),
+			http.get("*/api/v1/bank-cards/a/operations", () => HttpResponse.error()),
+		);
+		await client.invalidateQueries();
+		await screen.findAllByRole("alert");
+		expect(
+			screen.getByRole("heading", { name: "Повседневная" }),
+		).toBeInTheDocument();
+		expect(screen.getByText("Перевод на «Запасная»")).toBeInTheDocument();
+	});
+	it("handles inaccessible card neutrally", async () => {
+		setup({ missing: true });
+		await screen.findByRole("heading", { name: "Карта не найдена" });
+		expect(screen.getByRole("link", { name: "К картам" })).toHaveAttribute(
+			"href",
+			"/cards",
+		);
+		expect(screen.queryByText(/10\s000 ₽/)).not.toBeInTheDocument();
+	});
+	it("archives without deleting history and restores financial actions", async () => {
+		setup();
+		await screen.findByText("Перевод на «Запасная»");
+		let current = card;
+		const bodies: unknown[] = [];
+		server.use(
+			http.get("*/api/v1/bank-cards/a", () => HttpResponse.json(current)),
+			http.get("*/api/v1/bank-cards", () =>
+				HttpResponse.json([current, { ...card, id: "b", name: "Запасная" }]),
+			),
+			http.patch("*/api/v1/bank-cards/a", async ({ request }) => {
+				const body = (await request.json()) as {
+					version: number;
+					archived: boolean;
+				};
+				bodies.push(body);
+				current = {
+					...current,
+					version: current.version + 1,
+					archivedAt: body.archived ? "2026-09-01" : null,
+				} as typeof card;
+				return HttpResponse.json(current);
+			}),
+		);
+		fireEvent.click(screen.getByRole("button", { name: "Убрать в архив" }));
+		await screen.findByRole("button", { name: "Вернуть из архива" });
+		expect(
+			screen.getByRole("button", { name: "Добавить операцию" }),
+		).toBeDisabled();
+		expect(screen.getByRole("button", { name: "Изменить" })).toBeDisabled();
+		expect(screen.getByText("Перевод на «Запасная»")).toBeInTheDocument();
+		fireEvent.click(screen.getByRole("button", { name: "Вернуть из архива" }));
+		await screen.findByRole("button", { name: "Убрать в архив" });
+		expect(
+			screen.getByRole("button", { name: "Добавить операцию" }),
+		).toBeEnabled();
+		expect(bodies).toEqual([
+			{ version: 1, archived: true },
+			{ version: 2, archived: false },
+		]);
+	});
+	it("recovers the prerequisite card list while preserving the visible balance and journal", async () => {
+		setup({ cardsError: true });
+		await screen.findByText("Перевод на «Запасная»");
+		expect(await screen.findByRole("alert")).toHaveTextContent(
+			"Не удалось загрузить данные карт.",
+		);
+		expect(
+			screen.getByRole("button", { name: "Добавить операцию" }),
+		).toBeDisabled();
+		server.use(
+			http.get("*/api/v1/bank-cards", () =>
+				HttpResponse.json([card, { ...card, id: "b", name: "Запасная" }]),
+			),
+		);
+		fireEvent.click(
+			within(screen.getByRole("alert")).getByRole("button", {
+				name: "Повторить",
+			}),
+		);
+		await waitFor(() =>
+			expect(
+				screen.getByRole("button", { name: "Добавить операцию" }),
+			).toBeEnabled(),
+		);
+		expect(screen.getByText("Перевод на «Запасная»")).toBeInTheDocument();
+		expect(screen.queryByRole("alert")).not.toBeInTheDocument();
+	});
+});
@@ -0,0 +1,37 @@
+import type { FC } from "react";
+import { BankCardForm } from "@/entities/bank-card";
+import { CardPageView } from "./CardPage.view";
+import { useCardPageVm } from "./CardPage.vm";
+import { DeleteOperation } from "./DeleteOperation";
+import { OperationForm } from "./OperationForm";
+
+const CardPage: FC = () => {
+	const vm = useCardPageVm();
+	return (
+		<>
+			<CardPageView vm={vm} />
+			{vm.editingCard && vm.card.data && (
+				<BankCardForm
+					card={vm.card.data}
+					onClose={() => vm.setEditingCard(false)}
+				/>
+			)}
+			{vm.operation && vm.card.data && vm.cards.data && (
+				<OperationForm
+					card={vm.card.data}
+					cards={vm.cards.data}
+					operation={vm.operation === "new" ? undefined : vm.operation}
+					onClose={() => vm.setOperation(null)}
+				/>
+			)}
+			{vm.deleting && (
+				<DeleteOperation
+					operation={vm.deleting}
+					onClose={() => vm.setDeleting(null)}
+				/>
+			)}
+		</>
+	);
+};
+
+export { CardPage };
@@ -0,0 +1,385 @@
+import {
+	ActionIcon,
+	Anchor,
+	Button,
+	Group,
+	Pagination,
+	Select,
+	Skeleton,
+	Stack,
+	Text,
+	Title,
+} from "@mantine/core";
+import { type FC, useLayoutEffect, useRef } from "react";
+import { useTranslation } from "react-i18next";
+import { Link } from "react-router";
+import {
+	BankCardFace,
+	BankFeedback,
+	BankOperationIcon,
+	BankPeriodPicker,
+	BankSummaryView,
+} from "@/entities/bank-card";
+import { EntryCard, LoadingSkeleton, StateView } from "@/shared/ui";
+import classes from "./CardPage.module.css";
+import type { CardPageVm } from "./CardPage.vm";
+
+type CardPageViewProps = { vm: CardPageVm };
+const CardPageView: FC<CardPageViewProps> = (props) => {
+	const { vm } = props;
+	const { t } = useTranslation();
+	const card = vm.card.data;
+	const paginationRef = useRef<HTMLDivElement>(null);
+	const pendingPage = useRef<{
+		scope: string;
+		page: number;
+		top: number;
+	} | null>(null);
+	const scope = `${card?.id}-${vm.period.from}-${vm.period.to}-${vm.pageSize}`;
+	useLayoutEffect(() => {
+		const pending = pendingPage.current;
+		if (!pending) return;
+		if (pending.scope !== scope || vm.history.isError) {
+			pendingPage.current = null;
+			return;
+		}
+		if (vm.history.isPlaceholderData || vm.history.data?.page !== pending.page)
+			return;
+		const pagination = paginationRef.current;
+		if (pagination) {
+			const delta = pagination.getBoundingClientRect().top - pending.top;
+			if (delta) window.scrollBy({ top: delta, behavior: "instant" });
+		}
+		pendingPage.current = null;
+	}, [
+		scope,
+		vm.history.data,
+		vm.history.isPlaceholderData,
+		vm.history.isError,
+	]);
+	if (!card) {
+		if (vm.card.isLoading)
+			return (
+				<LoadingSkeleton label={t("bank.loading")}>
+					<Stack>
+						<Skeleton h={130} />
+						<Skeleton h={160} />
+						<Skeleton h={90} />
+						<Skeleton h={90} />
+					</Stack>
+				</LoadingSkeleton>
+			);
+		return (
+			<StateView
+				error
+				title={t(vm.notFound ? "bank.notFound" : "bank.error")}
+				text={t("bank.back")}
+				action={
+					<Group>
+						<Button component={Link} to="/cards">
+							{t("bank.back")}
+						</Button>
+						{!vm.notFound && (
+							<Button onClick={() => void vm.card.refetch()}>
+								{t("bank.retry")}
+							</Button>
+						)}
+					</Group>
+				}
+			/>
+		);
+	}
+	return (
+		<Stack gap="lg" className={classes.page}>
+			<Stack>
+				<Title order={1} className={classes.wrap}>
+					{card.name}
+				</Title>
+				<div className={classes.card}>
+					<BankCardFace card={card} />
+					<Group gap={4} wrap="nowrap" className={classes.cardActions}>
+						<ActionIcon
+							variant="subtle"
+							size="md"
+							radius="md"
+							aria-label={t("bank.editCard")}
+							title={t("bank.editCard")}
+							onClick={() => vm.setEditingCard(true)}
+						>
+							<svg
+								width="18"
+								height="18"
+								viewBox="0 0 24 24"
+								fill="none"
+								stroke="currentColor"
+								strokeWidth="1.5"
+								strokeLinecap="round"
+								strokeLinejoin="round"
+								aria-hidden="true"
+							>
+								<path d="m16 3 5 5-12 12-6 1 1-6L16 3Z M13 6l5 5" />
+							</svg>
+						</ActionIcon>
+						<ActionIcon
+							variant="subtle"
+							size="md"
+							radius="md"
+							color="red"
+							aria-label={t(card.archivedAt ? "bank.restore" : "bank.archive")}
+							title={t(card.archivedAt ? "bank.restore" : "bank.archive")}
+							loading={vm.archivePending}
+							onClick={() => void vm.toggleArchive()}
+						>
+							<svg
+								width="18"
+								height="18"
+								viewBox="0 0 24 24"
+								fill="none"
+								stroke="currentColor"
+								strokeWidth="1.5"
+								strokeLinecap="round"
+								strokeLinejoin="round"
+								aria-hidden="true"
+							>
+								<path
+									d={
+										card.archivedAt
+											? "M3 3h18v4H3z M5 7v14h14V7 M12 17V10m-3 3 3-3 3 3"
+											: "M3 6h18 M9 6V3h6v3 M5 6l1 15h12l1-15 M10 10v7 M14 10v7"
+									}
+								/>
+							</svg>
+						</ActionIcon>
+					</Group>
+				</div>
+				{vm.archiveError ? (
+					<BankFeedback
+						error={vm.archiveError}
+						retry={() => void vm.card.refetch()}
+					/>
+				) : null}
+				{card.archivedAt && <Text>{t("bank.archiveHint")}</Text>}
+			</Stack>
+			{vm.card.isError && (
+				<Group role="alert">
+					<Text>{t("bank.refreshError")}</Text>
+					<Button onClick={() => void vm.card.refetch()}>
+						{t("bank.retry")}
+					</Button>
+				</Group>
+			)}
+			{vm.card.isFetching && <Text role="status">{t("bank.refreshing")}</Text>}
+			{vm.cards.isError && (
+				<BankFeedback
+					loadingError
+					error={vm.cards.error}
+					cached={Boolean(vm.cards.data)}
+					retry={() => void vm.cards.refetch()}
+				/>
+			)}
+			<BankPeriodPicker period={vm.period} onChange={vm.setPeriod} />
+			<BankSummaryView
+				data={vm.summary.data}
+				loading={vm.summary.isLoading}
+				fetching={vm.summary.isFetching}
+				error={vm.summary.isError}
+				retry={() => void vm.summary.refetch()}
+			/>
+			<Group justify="space-between" align="end">
+				<Group gap="xs">
+					<Title order={2}>{t("bank.operations")}</Title>
+					<ActionIcon
+						variant="subtle"
+						size="lg"
+						aria-label={t("bank.addOperation")}
+						title={t("bank.addOperation")}
+						disabled={Boolean(card.archivedAt) || !vm.cards.data}
+						onClick={() => vm.setOperation("new")}
+					>
+						<svg
+							width="20"
+							height="20"
+							viewBox="0 0 24 24"
+							fill="none"
+							stroke="currentColor"
+							strokeWidth="1.5"
+							strokeLinecap="round"
+							aria-hidden="true"
+						>
+							<path d="M12 5v14 M5 12h14" />
+						</svg>
+					</ActionIcon>
+				</Group>
+				<Select
+					label={t("bank.pageSize")}
+					value={vm.pageSize}
+					onChange={vm.setPageSize}
+					allowDeselect={false}
+					w={180}
+					data={[
+						"5",
+						"10",
+						"20",
+						"50",
+						"100",
+						{ value: "all", label: t("bank.allOperations") },
+					]}
+				/>
+			</Group>
+			<Stack
+				key={`${vm.period.from}-${vm.period.to}-${vm.pageSize}-${vm.history.data?.page ?? "loading"}`}
+				gap="lg"
+				className={classes.operations}
+				aria-busy={vm.history.isFetching}
+				data-pending={vm.history.isPlaceholderData || undefined}
+			>
+				{vm.rows ? (
+					vm.rows.length ? (
+						vm.rows.map((row) => (
+							<section
+								key={row.item.id}
+								className={classes.operation}
+								aria-label={`${row.title} ${row.item.date}`}
+							>
+								<EntryCard
+									title={row.title}
+									metadata={row.metadata}
+									color={row.color}
+									initial={row.title[0]}
+									icon={
+										<BankOperationIcon
+											kind={row.item.kind}
+											categoryName={row.item.categoryName}
+										/>
+									}
+									value={row.value}
+									valueLabel={t(`bank.kinds.${row.item.kind}`)}
+									tone={row.tone}
+									details={
+										row.otherCard ? (
+											<Anchor
+												component={Link}
+												to={`/cards/${row.otherCard}?from=${vm.period.from}&to=${vm.period.to}`}
+											>
+												{t("bank.card")}
+											</Anchor>
+										) : null
+									}
+									actions={
+										<Group gap={4} wrap="nowrap">
+											<ActionIcon
+												variant="subtle"
+												disabled={
+													vm.history.isPlaceholderData ||
+													!row.editable ||
+													Boolean(card.archivedAt)
+												}
+												size="sm"
+												aria-label={t("bank.edit")}
+												title={t("bank.edit")}
+												onClick={() => vm.setOperation(row.item)}
+											>
+												<svg
+													width="18"
+													height="18"
+													viewBox="0 0 24 24"
+													fill="none"
+													stroke="currentColor"
+													strokeWidth="1.5"
+													strokeLinecap="round"
+													strokeLinejoin="round"
+													aria-hidden="true"
+												>
+													<path d="m16 3 5 5-12 12-6 1 1-6L16 3Z M13 6l5 5" />
+												</svg>
+											</ActionIcon>
+											<ActionIcon
+												variant="subtle"
+												color="red"
+												disabled={
+													vm.history.isPlaceholderData ||
+													!row.editable ||
+													Boolean(card.archivedAt)
+												}
+												size="sm"
+												aria-label={t("bank.delete")}
+												title={t("bank.delete")}
+												onClick={() => vm.setDeleting(row.item)}
+											>
+												<svg
+													width="18"
+													height="18"
+													viewBox="0 0 24 24"
+													fill="none"
+													stroke="currentColor"
+													strokeWidth="1.5"
+													strokeLinecap="round"
+													strokeLinejoin="round"
+													aria-hidden="true"
+												>
+													<path d="M3 6h18 M9 6V3h6v3 M5 6l1 15h12l1-15 M10 10v7 M14 10v7" />
+												</svg>
+											</ActionIcon>
+										</Group>
+									}
+								/>
+							</section>
+						))
+					) : (
+						<Text>{t("bank.noOperations")}</Text>
+					)
+				) : vm.history.isLoading ? (
+					<LoadingSkeleton label={t("bank.loadingHistory")}>
+						<Stack>
+							<Skeleton h={90} />
+							<Skeleton h={90} />
+						</Stack>
+					</LoadingSkeleton>
+				) : null}
+			</Stack>
+			{vm.history.isError && (
+				<Group role="alert">
+					<Text>{t(vm.rows ? "bank.refreshError" : "bank.error")}</Text>
+					<Button onClick={() => void vm.history.refetch()}>
+						{t("bank.retry")}
+					</Button>
+				</Group>
+			)}
+			{vm.history.data && vm.pageSize !== "all" && (
+				<Group
+					component="nav"
+					ref={paginationRef}
+					aria-label={t("bank.pagination")}
+					justify="center"
+					py="sm"
+				>
+					<Pagination
+						total={vm.totalPages}
+						value={vm.page}
+						onChange={(page) => {
+							if (paginationRef.current)
+								pendingPage.current = {
+									scope,
+									page,
+									top: paginationRef.current.getBoundingClientRect().top,
+								};
+							vm.setPage(page);
+						}}
+						disabled={vm.history.isFetching}
+						siblings={0}
+						getItemProps={(page) => ({
+							"aria-label": t("bank.page", { page }),
+						})}
+						getControlProps={(control) => ({
+							"aria-label": t(
+								control === "previous" ? "bank.previous" : "bank.next",
+							),
+						})}
+					/>
+				</Group>
+			)}
+		</Stack>
+	);
+};
+
+export { CardPageView };
@@ -0,0 +1,126 @@
+import { useState } from "react";
+import { useTranslation } from "react-i18next";
+import { useParams, useSearchParams } from "react-router";
+import {
+	type BankOperation,
+	bankPeriod,
+	useBankCard,
+	useBankCards,
+	useBankMutations,
+	useBankOperations,
+	useBankSummary,
+} from "@/entities/bank-card";
+import { apiErrorCode } from "@/shared/api";
+import { formatDate, formatMoney } from "@/shared/lib";
+
+const PAGE_SIZES = ["5", "10", "20", "50", "100", "all"];
+
+function useCardPageVm() {
+	const { cardId } = useParams();
+	const [params, setParams] = useSearchParams();
+	const { t } = useTranslation();
+	const period = bankPeriod(params);
+	const requestedSize = params.get("limit") ?? "10";
+	const pageSize = PAGE_SIZES.includes(requestedSize) ? requestedSize : "10";
+	const rawPage = Number(params.get("page") ?? 1);
+	const page =
+		pageSize !== "all" && Number.isSafeInteger(rawPage) && rawPage > 0
+			? rawPage
+			: 1;
+	const card = useBankCard(cardId);
+	const { updateCard } = useBankMutations();
+	const [archiveError, setArchiveError] = useState<unknown>();
+	const cards = useBankCards(true);
+	const history = useBankOperations(cardId, {
+		...period,
+		page,
+		limit: pageSize === "all" ? "all" : Number(pageSize),
+	});
+	const summary = useBankSummary(period, cardId);
+	const [editingCard, setEditingCard] = useState(false);
+	const [operation, setOperation] = useState<BankOperation | "new" | null>(
+		null,
+	);
+	const [deleting, setDeleting] = useState<BankOperation | null>(null);
+	const rows = history.data?.items.map((item) => {
+		const outgoing =
+			item.kind === "expense" ||
+			(item.kind === "transfer" && item.cardId === cardId);
+		return {
+			item,
+			color: outgoing ? "red" : "green",
+			title:
+				item.kind === "transfer"
+					? t(outgoing ? "bank.transferTo" : "bank.transferFrom", {
+							name: outgoing ? item.targetCardName : item.cardName,
+						})
+					: t(`bank.kinds.${item.kind}`),
+			metadata: [formatDate(item.date), item.categoryName, item.description]
+				.filter(Boolean)
+				.join(" · "),
+			value: `${outgoing ? "−" : "+"}${formatMoney(item.amount)}`,
+			tone: outgoing ? ("negative" as const) : ("positive" as const),
+			otherCard:
+				item.kind === "transfer"
+					? outgoing
+						? item.targetCardId
+						: item.cardId
+					: null,
+			editable:
+				Boolean(cards.data) &&
+				!cards.data?.some(
+					(c) =>
+						(c.id === item.cardId || c.id === item.targetCardId) &&
+						c.archivedAt,
+				),
+		};
+	});
+	return {
+		card,
+		cards,
+		archiveError,
+		archivePending: updateCard.isPending,
+		toggleArchive: async () => {
+			if (!card.data) return;
+			setArchiveError(undefined);
+			try {
+				await updateCard.mutateAsync({
+					id: card.data.id,
+					body: { version: card.data.version, archived: !card.data.archivedAt },
+				});
+			} catch (failure) {
+				setArchiveError(failure);
+			}
+		},
+		history,
+		summary,
+		period,
+		page,
+		pageSize,
+		totalPages:
+			pageSize === "all"
+				? 1
+				: Math.max(1, Math.ceil((history.data?.total ?? 0) / Number(pageSize))),
+		rows,
+		editingCard,
+		setEditingCard,
+		operation,
+		setOperation,
+		deleting,
+		setDeleting,
+		notFound: apiErrorCode(card.error) === "BANK_NOT_FOUND",
+		setPeriod: (value: [string | null, string | null]) => {
+			if (value[0] && value[1])
+				setParams({ from: value[0], to: value[1], limit: pageSize });
+		},
+		setPageSize: (value: string | null) => {
+			if (value && PAGE_SIZES.includes(value))
+				setParams({ ...period, limit: value });
+		},
+		setPage: (value: number) =>
+			setParams({ ...period, page: String(value), limit: pageSize }),
+	};
+}
+type CardPageVm = ReturnType<typeof useCardPageVm>;
+
+export { type CardPageVm, useCardPageVm };
@@ -0,0 +1,76 @@
+import { MantineProvider } from "@mantine/core";
+import { QueryClientProvider } from "@tanstack/react-query";
+import { fireEvent, render, screen, waitFor } from "@testing-library/react";
+import { HttpResponse, http } from "msw";
+import { describe, expect, it, vi } from "vitest";
+import type { BankOperation } from "@/entities/bank-card";
+import { configureAuthClient } from "@/shared/api";
+import { createTestQueryClient } from "@/test/query";
+import { server } from "@/test/server";
+import { DeleteOperation } from "./DeleteOperation";
+
+const transfer: BankOperation = {
+	id: "transfer",
+	kind: "transfer",
+	cardId: "a",
+	cardName: "Основная",
+	targetCardId: "b",
+	targetCardName: "Запасная",
+	categoryId: null,
+	categoryName: null,
+	originalExpenseId: null,
+	amount: { currency: "RUB", value: "100" },
+	availableRefund: null,
+	date: "2026-08-01",
+	description: null,
+	version: 1,
+	createdAt: "2026-08-01T00:00:00Z",
+};
+describe("DeleteOperation", () => {
+	it("names both sides and requires a deliberate fresh version after conflict", async () => {
+		configureAuthClient({
+			accessToken: () => "test",
+			refresh: async () => false,
+			clear: () => {},
+		});
+		const versions: string[] = [];
+		server.use(
+			http.get("*/api/v1/bank-cards/operations/transfer", () =>
+				HttpResponse.json({ ...transfer, version: 2 }),
+			),
+			http.delete("*/api/v1/bank-cards/operations/transfer", ({ request }) => {
+				const version = new URL(request.url).searchParams.get("version") ?? "";
+				versions.push(version);
+				return version === "1"
+					? HttpResponse.json(
+							{ code: "BANK_VERSION_CONFLICT" },
+							{ status: 409 },
+						)
+					: new HttpResponse(null, { status: 204 });
+			}),
+		);
+		const close = vi.fn();
+		render(
+			<QueryClientProvider client={createTestQueryClient()}>
+				<MantineProvider env="test">
+					<DeleteOperation operation={transfer} onClose={close} />
+				</MantineProvider>
+			</QueryClientProvider>,
+		);
+		expect(screen.getByText(/«Основная» → «Запасная»/)).toHaveTextContent(
+			"Обе стороны перевода будут удалены.",
+		);
+		fireEvent.click(screen.getByRole("button", { name: "Удалить" }));
+		await screen.findByText(/Запись уже изменена/);
+		expect(close).not.toHaveBeenCalled();
+		fireEvent.click(screen.getByRole("button", { name: "Перечитать запись" }));
+		fireEvent.click(
+			await screen.findByRole("button", {
+				name: "Использовать актуальную версию 2",
+			}),
+		);
+		fireEvent.click(screen.getByRole("button", { name: "Удалить" }));
+		await waitFor(() => expect(close).toHaveBeenCalled());
+		expect(versions).toEqual(["1", "2"]);
+	});
+});
@@ -0,0 +1,119 @@
+import { Button, Group, Modal, Stack, Text } from "@mantine/core";
+import { type FC, useState } from "react";
+import { useTranslation } from "react-i18next";
+import {
+	BankFeedback,
+	type BankOperation,
+	useBankFormFocus,
+	useBankMutations,
+	useBankOperation,
+} from "@/entities/bank-card";
+import { formatDate, formatMoney } from "@/shared/lib";
+
+type DeleteOperationProps = { operation: BankOperation; onClose: () => void };
+const DeleteOperation: FC<DeleteOperationProps> = (props) => {
+	useBankFormFocus();
+	const [opened, setOpened] = useState(true);
+	const { t } = useTranslation();
+	const [record, setRecord] = useState(props.operation);
+	const [latest, setLatest] = useState<BankOperation>();
+	const [error, setError] = useState<unknown>();
+	const query = useBankOperation(record.id);
+	const { deleteOperation } = useBankMutations();
+	const pending =
+		!opened ||
+		deleteOperation.isPending ||
+		(query.isFetching && Boolean(error));
+	return (
+		<Modal
+			opened={opened}
+			onExitTransitionEnd={props.onClose}
+			onClose={() => !pending && setOpened(false)}
+			title={t("bank.deleteTitle")}
+			closeOnEscape={!pending}
+			closeOnClickOutside={!pending}
+			closeButtonProps={{ "aria-label": t("bank.close"), disabled: pending }}
+		>
+			<Stack>
+				<Text>
+					{record.kind === "transfer"
+						? t("bank.deleteTransfer", {
+								amount: formatMoney(record.amount),
+								source: record.cardName,
+								target: record.targetCardName,
+							})
+						: t("bank.deleteHint", {
+								kind: t(`bank.kinds.${record.kind}`),
+								amount: formatMoney(record.amount),
+								card: record.cardName,
+							})}
+				</Text>
+				{error ? (
+					<>
+						<BankFeedback error={error} />
+						<Button
+							variant="default"
+							disabled={pending}
+							onClick={async () => {
+								const result = await query.refetch();
+								if (result.data && !result.error) setLatest(result.data);
+								else setError(result.error);
+							}}
+						>
+							{t("bank.reloadRecord")}
+						</Button>
+					</>
+				) : null}
+				{latest && (
+					<>
+						<Text>
+							{t("bank.versionHint", {
+								details: `${formatDate(latest.date)} · ${formatMoney(latest.amount)} · ${latest.description ?? ""}`,
+							})}
+						</Text>
+						<Button
+							variant="default"
+							disabled={pending}
+							onClick={() => {
+								setRecord(latest);
+								setLatest(undefined);
+								setError(undefined);
+							}}
+						>
+							{t("bank.adoptVersion", { version: latest.version })}
+						</Button>
+					</>
+				)}
+				<Group>
+					<Button
+						color="red"
+						loading={pending}
+						onClick={async () => {
+							setError(undefined);
+							try {
+								await deleteOperation.mutateAsync({
+									id: record.id,
+									version: record.version,
+								});
+								setOpened(false);
+							} catch (failure) {
+								setError(failure);
+							}
+						}}
+					>
+						{t("bank.delete")}
+					</Button>
+					<Button
+						variant="default"
+						disabled={pending}
+						onClick={() => setOpened(false)}
+					>
+						{t("bank.cancel")}
+					</Button>
+				</Group>
+			</Stack>
+		</Modal>
+	);
+};
+
+export { DeleteOperation };
@@ -0,0 +1,6 @@
+.fieldset {
+	border: 0;
+	margin: 0;
+	padding: 0;
+	min-width: 0;
+}
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
ksv741	d68ec3b15b	chore(release): 0.2.2 Frontend image / publish (push) Failing after 3m59s Details Conventional commits / commits (pull_request) Successful in 20s Details Frontend security / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Successful in 4m5s Details Frontend security / security (push) Successful in 10s Details Frontend verify / verify (push) Failing after 4m26s Details	2026-09-19 15:04:33 +03:00
ksv741	bac95ebb39	fix: update Nexus registry host Conventional commits / commits (pull_request) Successful in 21s Details Frontend security / security (pull_request) Successful in 8s Details Frontend verify / verify (pull_request) Successful in 4m11s Details Frontend security / security (push) Successful in 9s Details Frontend verify / verify (push) Failing after 4m7s Details	2026-09-19 14:51:25 +03:00
ksv741	8183b66e2f	chore(release): 0.2.1 Conventional commits / commits (pull_request) Successful in 20s Details Frontend security / security (pull_request) Successful in 8s Details Frontend verify / verify (pull_request) Successful in 3m36s Details Frontend image / publish (push) Failing after 3m56s Details Frontend security / security (push) Successful in 8s Details Frontend verify / verify (push) Failing after 4m13s Details	2026-09-18 08:12:21 +03:00
ksv741	1ad578fb37	docs: use shared Nexus account #21 Frontend security / security (pull_request) Successful in 53s Details Frontend verify / verify (pull_request) Successful in 3m52s Details Conventional commits / commits (pull_request) Successful in 20s Details Frontend security / security (push) Successful in 9s Details Frontend verify / verify (push) Failing after 7m49s Details	2026-09-17 20:53:03 +03:00
ksv741	999b8590ec	ci: publish frontend images to Nexus #21 Frontend security / security (push) Successful in 9s Details Frontend verify / verify (push) Successful in 3m57s Details Conventional commits / commits (pull_request) Failing after 19s Details Frontend security / security (pull_request) Successful in 32s Details Frontend verify / verify (pull_request) Successful in 3m54s Details	2026-09-17 20:41:12 +03:00
ksv741	3f19b3643f	ci: add frontend SonarQube analysis #19 Conventional commits / commits (pull_request) Successful in 22s Details Frontend security / security (pull_request) Successful in 16s Details Frontend verify / verify (pull_request) Successful in 3m59s Details Frontend security / security (push) Successful in 18s Details Frontend verify / verify (push) Successful in 9m45s Details	2026-09-16 20:08:51 +03:00
ksv741	97f1ad3e89	chore(release): 0.2.0 Frontend image / publish (push) Successful in 5m19s Details Conventional commits / commits (pull_request) Successful in 22s Details Frontend security / security (pull_request) Successful in 9s Details Frontend verify / verify (pull_request) Successful in 4m7s Details Frontend security / security (push) Successful in 9s Details Frontend verify / verify (push) Successful in 4m11s Details	2026-09-16 11:35:44 +03:00
ksv741	e31ab35a5a	feat: add frontend container delivery Frontend security / security (pull_request) Successful in 9s Details Frontend verify / verify (pull_request) Successful in 3m55s Details Conventional commits / commits (pull_request) Successful in 21s Details Frontend security / security (push) Successful in 8s Details Frontend verify / verify (push) Successful in 3m50s Details	2026-09-16 09:41:38 +03:00
ksv741	d9ada27621	docs: make frontend instructions self-contained Frontend security / security (pull_request) Successful in 8s Details Frontend verify / verify (pull_request) Successful in 3m55s Details Conventional commits / commits (pull_request) Successful in 20s Details Frontend security / security (push) Successful in 8s Details Frontend verify / verify (push) Successful in 3m49s Details	2026-09-15 20:45:37 +03:00
ksv741	9f7e342333	docs: simplify conventions layout Frontend security / security (pull_request) Successful in 8s Details Frontend verify / verify (pull_request) Successful in 3m53s Details Conventional commits / commits (pull_request) Successful in 19s Details Frontend security / security (push) Successful in 8s Details Frontend verify / verify (push) Successful in 3m53s Details	2026-09-15 05:58:31 +03:00
ksv741	718365cd5a	docs: refine frontend conventions and routing Frontend security / security (push) Successful in 8s Details Frontend verify / verify (push) Successful in 3m56s Details Frontend security / security (pull_request) Successful in 9s Details Frontend verify / verify (pull_request) Successful in 3m41s Details Conventional commits / commits (pull_request) Successful in 19s Details	2026-09-15 05:42:14 +03:00
ksv741	0244acf429	chore(release): 0.1.0 Conventional commits / commits (pull_request) Successful in 22s Details Frontend security / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Successful in 4m31s Details Frontend security / security (push) Successful in 10s Details Frontend verify / verify (push) Successful in 4m34s Details	2026-09-14 07:04:41 +03:00
ksv741	53b18c6e86	chore: configure releases and develop workflow	2026-09-14 07:02:45 +03:00
ksv741	dc3434c371	docs: update system documentation references Frontend security / security (push) Successful in 9s Details Frontend verify / verify (push) Successful in 4m14s Details	2026-09-14 05:51:41 +03:00
ksv741	3be6e61b8f	chore: secure hooks and update dependencies #4 #9 Frontend security / security (push) Successful in 11s Details Frontend verify / verify (push) Successful in 4m35s Details	2026-09-13 19:36:15 +03:00
ksv741	7a89356f87	docs: align OpenAPI workflow guidance #3 Frontend verify / verify (push) Successful in 4m31s Details	2026-09-13 19:08:13 +03:00
renovate-bot	0c6bac8b90	chore(deps): update non-major dependencies Frontend verify / verify (push) Successful in 4m29s Details	2026-09-13 15:37:11 +00:00
ksv741	82b904393d	chore: make issue references optional and use chore for dependency updates #5 Frontend verify / verify (push) Successful in 4m56s Details	2026-09-13 18:30:04 +03:00
ksv741	4b97395385	ci: configure Renovate dependency updates #5 Frontend verify / verify (push) Successful in 6m22s Details	2026-09-13 18:13:10 +03:00
renovate-bot	bb6623275c	Add renovate.json Frontend verify / verify (push) Failing after 43s Details	2026-09-13 14:02:36 +00:00
ksv741	942ed3d453	test: allow UI scenarios more time in CI #1 Frontend verify / verify (push) Successful in 4m54s Details	2026-09-13 16:31:02 +03:00
ksv741	2f26e4fe0d	ci: disable memory-heavy Knip raw transfer #1 Frontend verify / verify (push) Failing after 3m44s Details	2026-09-13 16:22:17 +03:00
ksv741	22e331e2ff	ci: run full frontend verification #1 Frontend verify / verify (push) Failing after 3m48s Details	2026-09-13 16:15:54 +03:00
ksv741	ccff422f36	ci: run Biome on branch pushes in Gitea Biome / biome (push) Successful in 37s Details	2026-09-13 15:56:00 +03:00
ksv741	117e74cdfc	chore: upgrade Node to 24 LTS	2026-09-13 15:05:37 +03:00
ksv741	53c852b437	refactor: enforce semantic values and numeric lint rules	2026-09-13 14:37:25 +03:00
ksv741	24d332e063	feat: replace paired date inputs with range pickers	2026-09-12 22:41:40 +03:00
ksv741	aba4cf1ce8	feat(cards): refine controls and modal transitions	2026-09-12 22:34:27 +03:00
ksv741	cf21a5bd17	feat(card): refine header and inline actions	2026-09-12 22:07:29 +03:00
ksv741	9bb385b9f0	feat(cards): filter operations by date range	2026-09-12 21:52:13 +03:00
ksv741	8e58c016d2	feat(ui): animate navigation and operation icons	2026-09-12 21:31:57 +03:00
ksv741	d3ac8c242d	feat: improve bank card expenses summary	2026-09-12 20:54:57 +03:00
ksv741	9a65687d38	feat: improve card operations pagination and scroll behavior	2026-09-12 20:31:44 +03:00
ksv741	ae06f6e6e0	chore: save pending changes	2026-09-12 19:59:10 +03:00
ksv741	6b310db0b8	feat: polish bank operation cards and dates	2026-09-12 19:56:12 +03:00
ksv741	dedfec10d1	feat(cards): show operation icons on hover	2026-09-12 19:29:11 +03:00
ksv741	ff4e88edbe	feat: add manual bank card screens Add cards, operations, refunds, categories and monthly summaries with Mantine date controls. Derive banking types from runtime OpenAPI. Cover recovery and session isolation.	2026-09-12 18:34:41 +03:00
ksv741	427ca23a43	test: keep portfolio metadata authoritative in cards	2026-09-12 15:38:04 +03:00
ksv741	a42f104bed	docs: update routes to system documentation	2026-09-12 14:45:43 +03:00
@@ -1 +1 @@
 
 .21.0