chore(release): 0.1.0

chore: configure releases and develop workflow
docs: update system documentation references
2026-09-14 07:04:41 +03:00 · 2026-09-14 07:02:45 +03:00 · 2026-09-14 05:51:41 +03:00 · 2026-09-13 19:36:15 +03:00 · 2026-09-13 19:08:13 +03:00 · 2026-09-13 15:37:11 +00:00
65 changed files with 4540 additions and 1558 deletions
@@ -9,11 +9,11 @@
 | Создать/перенести module/component/slice; выбрать page/entity/feature/shared; cross-slice imports | [Architecture](conventions/frontend-architecture.md) |
 | Component/props, container/VM/view, form, local state/effect, loading/error/retry, Mantine/UI | [UI](conventions/frontend-ui.md) |
 | Только продуктовая строка или Zod message | [Строки](conventions/frontend-ui.md#строки-и-валидация) |
-| Только TS declaration/import/export | [Код](conventions/frontend-ui.md#код-и-components) |
+| TS declaration/import/export, domain literals, magic values | [Код](conventions/frontend-ui.md#код-и-components) + [Domain literals](conventions/frontend-ui.md#domain-literals-and-magic-values) |
 | query/mutation, shared/api, server state/cache, generated types, Bearer/refresh | [Data](conventions/frontend-data.md) |
 | Тесты или behavior с testing risk | [Testing](conventions/frontend-testing.md) |
-| Новый abstraction/dependency, refactor или неоднозначный scope | [Общий выбор реализации](../../docs/development/engineering-governance.md#выбор-реализации) |
-| Request/response field, route/status/error shape, OpenAPI snapshot/generated type | [Общий contract workflow](../../docs/development/runtime-openapi-verification.md) |
+| Новый abstraction/dependency, refactor или неоднозначный scope | [Общий выбор реализации](../../AGENTS.md) |
+| Request/response field, route/status/error shape, OpenAPI snapshot/generated type | [Источник HTTP-контракта](../../docs/architecture/http-api.md#источник-контракта) |
 | Login/refresh/logout, token/cookie, auth ownership | Data + [security](../../backend/.ai/conventions/security-auth.md) + Testing |
 | Storybook/theme/tokens/shared UI | UI + точные [источники](SOURCES.md) дизайн-системы/каталога |

@@ -3,11 +3,11 @@
 | Что нужно установить | Владелец |
 | --- | --- |
 | Какое implementation-решение принять | [CONVENTIONS](CONVENTIONS.md) |
-| HTTP wire contract и направление генерации | Backend runtime OpenAPI → [snapshot/types workflow](../../docs/development/runtime-openapi-verification.md) |
+| HTTP wire contract и направление генерации | Backend-owned contract → provided snapshot → [Источник HTTP-контракта](../../docs/architecture/http-api.md#источник-контракта) |
 | Error codes/validation/error envelope | [docs: HTTP API](../../docs/architecture/http-api.md) |
 | Auth/session, token storage и refresh | [Аутентификация](../../docs/domains/authentication/overview.md), [подключение брокера](../../docs/integrations/tbank.md) |
 | Значение Money, cached snapshot, account/position/income | [docs: Domain](../../docs/glossary.md) |
-| Mantine/theme/tokens и существующие stories | [Дизайн-система](../../docs/development/design-system.md), [UI-каталог](../../docs/development/ui-catalog.md) |
+| Mantine/theme/tokens и существующие stories | [Дизайн-система](../../docs/design/overview.md), [UI-каталог](../README.md#ui-каталог-storybook) |
 | As-built behavior нужной feature | [docs: Features](../../docs/README.md#предметные-области) |
 | Существующие behavioral requirements, если нужны по задаче | [specs index](../../specs/AI_INDEX.md) |
 | Действующие versions/scripts/check scope | package.json, lockfile, Biome/TS/dependency configs |
@@ -40,7 +40,7 @@ designTokens, color roles, CSSVariablesResolver и base styles. Внешний c
 `shared/ui` содержит StateView/LoadingSkeleton. Existing route-aware AppShell также
 лежит в shared/ui, но не является общим catalog primitive; его расположение не
 служит основанием переносить новую domain/navigation логику в shared.
-Изменяя foundation, прочитай [design system](../../../docs/development/design-system.md).
+Изменяя foundation, прочитай [design system](../../../docs/design/overview.md).

 ## Примеры

@@ -14,16 +14,19 @@ pages/features/entities и прямой T-Bank call запрещены. Снач

 ## Типы и contract

-Backend runtime OpenAPI — source; committed frontend snapshot и generated
-`schema.d.ts` производны. Тип request/response бери из generated `paths`, например:
+Backend-owned OpenAPI contract поступает во frontend как предоставленный
+актуальный snapshot; generated `schema.d.ts` производен от него. Тип
+request/response бери из generated `paths`, например:

 ```ts
 type User = paths["/api/v1/auth/me"]["get"]["responses"][200]["content"]["application/json"];
 ```

 Domain/UI type допустим, когда он отличается по смыслу, а не копирует transport DTO.
-Generated TS вручную не исправляется. Изменение wire shape/status/route проходит
-[общий contract workflow](../../../docs/development/runtime-openapi-verification.md).
+Generated TS вручную не исправляется. Frontend-команды не читают соседний
+backend checkout и не проверяют backend runtime OpenAPI; изменение wire
+shape/status/route сохраняет
+[границу HTTP-контракта](../../../docs/architecture/http-api.md#источник-контракта).
 Одна UI-модель не требует менять API. `openapi:generate` работает offline от snapshot;
 `openapi:check` генерирует во временный каталог и сравнивает, не меняя tracked files.

@@ -53,4 +56,5 @@ Default focus refetch выключен; freshness и retry определяют
 Изменяя header/retry/invalidation, проверяй наблюдаемое поведение через MSW и
 [Testing](frontend-testing.md); не обращайся к реальному T-Bank.
 `npm run openapi:check`, `npm run typecheck` и targeted tests проверяют разные
-части решения. Для API semantics нужны также exact docs и contract gate.
+части решения. Для API semantics нужны exact docs и проверки наблюдаемого
+HTTP-поведения на стороне backend.
@@ -2,7 +2,8 @@

 ## Выбор проверки

-Читай при изменении тестов или behavior с [testing risk](../../../docs/development/engineering-governance.md#risk-based-testing).
+Читай при изменении тестов, доступа, денежных расчётов, восстановления
+интерфейса или исправлении подтверждённой регрессии.
 Выбирай boundary по наблюдаемому исходу, а не внутреннему helper/component state.

 | Изменение | Дешёвая надёжная проверка |
@@ -13,7 +13,7 @@ Mantine component и общую тему. Для выпадающего выбо

 Wrapper нужен для проектной ответственности, а не ради нового имени
 для Button. Локальный CSS module принадлежит component; общий token вводи для
-реально общей роли через [design system](../../../docs/development/design-system.md).
+реально общей роли через [design system](../../../docs/design/overview.md).

 | Состояние | Владелец |
 | --- | --- |
@@ -91,6 +91,57 @@ CSF `*.stories.tsx` сохраняют default meta и прямые story export
 Vite/Vitest configs и `.storybook/main.ts`/`preview.tsx` имеют только
 конфигурационное default-export exception. Scope исключений принадлежит biome.json.

+## Domain literals and magic values
+
+Finite business vocabulary must be modeled explicitly; incidental implementation
+literals stay inline. Это относится к error codes, statuses, operation/account/
+instrument/transaction types, permissions, roles, feature states и бизнес-режимам.
+
+Перед новым определением найди existing owner/type/value. В branching и comparisons
+используй символическое значение владельца; не повторяй raw domain literals.
+Храни словарь у domain/module/entity с соблюдением границ слоёв, без глобальной
+свалки `constants.ts`. Сохраняй принятый pattern; для нового project-owned словаря
+без подходящего аналога используй `as const` с derived union:
+
+```ts
+const BankErrorCode = {
+  InvalidDate: "BANK_INVALID_DATE",
+  ImmutableOperation: "BANK_IMMUTABLE_OPERATION",
+} as const;
+type BankErrorCode = (typeof BankErrorCode)[keyof typeof BankErrorCode];
+
+// Вместо code === "BANK_INVALID_DATE":
+if (code === BankErrorCode.InvalidDate) { /* existing handling */ }
+```
+
+Значимые numeric policies (timeout, retry, page size, threshold, coefficient)
+называй по смыслу и единицам: `REQUEST_TIMEOUT_MS`, `CACHE_TTL_SECONDS`,
+`MAX_RETRY_COUNT`, `PAGE_SIZE`. Оставляй inline UI labels в принятом месте,
+log messages, индексы, `index + 1`, `Math.max(value, 0)`, `page ?? 1`,
+`percentage * 100` и очевидные локальные детали без semantic benefit.
+При неясном owner/смысле оставь значение и укажи ограничение в review.
+
+Не мигрируй корректные existing enum/union styles массово. Не добавляй ради
+правила factories, registries, schemas, loaders, abstraction layers, dependencies,
+custom lint/AST rules, generation/validation scripts или тесты существования
+констант. Semantic review проверяет ownership, единое написание и неизменность
+wire values; обычные behavior tests проверяют поведение.
+
+Backend API vocabulary бери из generated OpenAPI types/client, runtime values —
+когда генератор их предоставляет. Не создавай ручную копию backend enum/object.
+Текущий `schema.d.ts` предоставляет только types: используй indexed-access type
+из `paths`; typed literals в запросах/сравнениях допустимы при отсутствии
+runtime values. `ProblemDetailsDto.code` сейчас `string`: не выдумывай закрытый
+frontend error enum. Развитие API source — отдельное contract-решение.
+Frontend `enum` по-прежнему запрещён локальным TS/style profile.
+
+`noMagicNumbers` включён как error в Biome. Fixtures, tests и stories исключены
+из этого правила; остальные проверки для них сохраняются. Используй имена
+политик/единиц и existing values. Точечное подавление допустимо для очевидного
+incidental значения с объяснением, например перевода доли в проценты; не подавляй
+скрытые бизнес-лимиты. Semantic magic strings проверяются conventions/review: в
+установленном Biome нет такого встроенного правила, новый инструмент не добавляем.
+
 ## Строки и валидация

 Продуктовый текст хранится в `src/shared/i18n/locales/ru.ts`, читается через
@@ -103,5 +154,5 @@ Vite/Vitest configs и `.storybook/main.ts`/`preview.tsx` имеют тольк

 Type/style: `npm run typecheck`, `npm run lint`. Для risk behavior/изменения тестов
 используй [Testing](frontend-testing.md). UI: keyboard, narrow viewport,
-loading/error/empty/loaded и recovery по применимости. [Storybook](../../../docs/development/ui-catalog.md)
+loading/error/empty/loaded и recovery по применимости. [Storybook](../../README.md#ui-каталог-storybook)
 уже установлен; используй его как reference, но сверяй UI с задачей отдельно от build.
@@ -0,0 +1,26 @@
+name: Conventional commits
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, edited]
+
+jobs:
+  commits:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: https://github.com/actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          fetch-depth: 0
+      - uses: https://github.com/actions/setup-node@v4
+        with:
+          node-version-file: .nvmrc
+      - run: npm ci --ignore-scripts
+      - name: Check PR title and commits
+        env:
+          PR_TITLE: ${{ github.event.pull_request.title }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
+        run: |
+          printf '%s\n' "$PR_TITLE" | npm run commitlint -- --strict
+          npm run commitlint -- --strict --from "$BASE_SHA" --to "$HEAD_SHA"
@@ -0,0 +1,33 @@
+name: Frontend security
+
+on:
+  push:
+    branches:
+      - '**'
+  pull_request:
+  schedule:
+    - cron: '17 5 * * *'
+
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: https://github.com/actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Record checked revision
+        run: git rev-parse HEAD
+      - name: Scan history with Gitleaks 8.30.1
+        run: |
+          curl --fail --location --silent --show-error https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz -o /tmp/gitleaks.tar.gz
+          echo '551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb  /tmp/gitleaks.tar.gz' | sha256sum --check
+          mkdir -p /tmp/gitleaks-bin
+          tar -xzf /tmp/gitleaks.tar.gz -C /tmp/gitleaks-bin gitleaks
+          /tmp/gitleaks-bin/gitleaks git --log-opts=--all --redact=100 --no-banner
+      - uses: https://github.com/actions/setup-node@v4
+        with:
+          node-version-file: .nvmrc
+      - name: Verify pre-commit secret blocking and redaction
+        run: PATH=/tmp/gitleaks-bin:$PATH node --test scripts/test-pre-commit.mjs
+      - name: Audit runtime and development dependencies
+        run: npm audit --include=dev --audit-level=low
@@ -0,0 +1,26 @@
+name: Frontend verify
+
+on:
+  push:
+    branches:
+      - '**'
+  pull_request:
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: https://github.com/actions/checkout@v4
+      - name: Record checked revision
+        run: git rev-parse HEAD
+      - uses: https://github.com/actions/setup-node@v4
+        with:
+          node-version-file: .nvmrc
+      - run: npm ci
+        env:
+          HUSKY: '0'
+      - name: Run all frontend gates
+        run: npm run verify
+        env:
+          # OXC raw transfer allocates a ~6 GiB buffer; use the standard parser in CI.
+          KNIP_DISABLE_RAW_TRANSFER: '1'
@@ -1,2 +1,3 @@
+gitleaks git --pre-commit --staged --redact=100 --no-banner || exit $?
 npx lint-staged
 npm run deps
@@ -1 +1 @@
-22
+24.21.0
@@ -0,0 +1,106 @@
+{
+	"git": {
+		"requireBranch": "release/*",
+		"requireCleanWorkingDir": true,
+		"requireUpstream": false,
+		"requireCommits": true,
+		"commitMessage": "chore(release): ${version}",
+		"tagName": "v${version}",
+		"tag": false,
+		"push": false
+	},
+	"npm": {
+		"publish": false
+	},
+	"github": {
+		"release": false
+	},
+	"gitlab": {
+		"release": false
+	},
+	"hooks": {
+		"after:git:init": "node scripts/check-release.cjs"
+	},
+	"plugins": {
+		"@release-it/conventional-changelog": {
+			"infile": "CHANGELOG.md",
+			"preset": {
+				"name": "conventionalcommits",
+				"types": [
+					{
+						"type": "chore",
+						"scope": "release",
+						"effect": "hidden"
+					},
+					{
+						"type": "feat",
+						"section": "Features",
+						"effect": "bump"
+					},
+					{
+						"type": "fix",
+						"section": "Bug Fixes",
+						"effect": "bump"
+					},
+					{
+						"type": "perf",
+						"section": "Performance",
+						"effect": "bump"
+					},
+					{
+						"type": "docs",
+						"section": "Documentation",
+						"effect": "bump"
+					},
+					{
+						"type": "spec",
+						"section": "Specifications",
+						"effect": "bump"
+					},
+					{
+						"type": "refactor",
+						"section": "Refactoring",
+						"effect": "bump"
+					},
+					{
+						"type": "build",
+						"section": "Build",
+						"effect": "bump"
+					},
+					{
+						"type": "ci",
+						"section": "CI",
+						"effect": "bump"
+					},
+					{
+						"type": "test",
+						"section": "Tests",
+						"effect": "bump"
+					},
+					{
+						"type": "style",
+						"section": "Styles",
+						"effect": "bump"
+					},
+					{
+						"type": "chore",
+						"section": "Maintenance",
+						"effect": "bump"
+					},
+					{
+						"type": "revert",
+						"section": "Reverts",
+						"effect": "bump"
+					}
+				]
+			},
+			"context": {
+				"host": "https://git.personal.ksv741.ru",
+				"owner": "WealthLedger",
+				"repository": "frontend",
+				"linkReferences": true,
+				"commit": "commit"
+			}
+		}
+	}
+}
@@ -12,13 +12,25 @@ React/Vite-клиент; общие правила работы — в root `AGE
 dependency boundaries и сборки приложения/Storybook без backend.
 Точные scripts принадлежат `package.json`; targeted checks — у выбранного convention.

-HTTP contract changes дополнительно проходят общий
-[contract workflow](../docs/development/runtime-openapi-verification.md).
+HTTP contract changes используют предоставленный OpenAPI snapshot; frontend
+локально проверяет только соответствие generated types этому snapshot:
+[Источник HTTP-контракта](../docs/architecture/http-api.md#источник-контракта).
 Generated types редактируются через их source; T-Bank доступен только через backend.
 Frontend dependencies используют exact versions. Pre-commit запускает staged
 formatting и FSD checks; сообщения commits — Conventional Commits.
+Если у задачи есть связанная issue этого репозитория, добавляй её номер
+в конец заголовка: `ci: run full frontend verification #1`.
+Без связанной issue номер необязателен: `chore(deps): update non-major dependencies`.
+Формат Conventional Commits проверяет `commitlint.config.cjs`.

 Code/style checks автоматические только в scope конфигурации. i18n, props,
 semantic placement и выбор полезных тестов обязательны при review.
 Storybook уже доступен как reference; ожидаемый UI и его состояния определяет
 задача, а визуальное соответствие проверяется отдельно от сборки.
+
+## Ветки и релизы
+
+Работа — в отдельной ветке от `develop`, затем PR в `develop`; в `main` напрямую
+не пушить. Release/hotfix и синхронизация веток — по [root README](../README.md#релизы-и-ветки).
+Commits и заголовки PR — Conventional Commits; для спецификаций допустим `spec:`.
+Перед подготовкой релиза прочитай root README; версии вручную не повышать.
@@ -0,0 +1,118 @@
+# Changelog
+
+## 0.1.0 (2026-09-14)
+
+### Features
+
+* **account-operations:** require explicit ledger filters ([7d748a6](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/7d748a65d384e76220e234aa37a21b05b81e442a))
+* **accounts:** enrich brokerage account list ([fd93133](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/fd93133cfcdfd9372b2630cacaa7f5195f1beb58))
+* **account:** wrap portfolio sections in Mantine Accordion ([c1a8674](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/c1a8674f164117018236bf461bd457208ac9ad00))
+* add all-accounts portfolio pages ([daf1dca](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/daf1dca6666035cbca3ba020d8ae0b2a8789dc3a))
+* add authorization ([3448fea](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3448fea1407f246e0b093e64edd7b672ae8992a9))
+* add bond pages and portfolio navigation ([232d7f9](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/232d7f999040e4c91c27d5b382f2fcdfc4542d5a))
+* add breadcrumbs ([719a6ed](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/719a6ed8b73f8a552778a1b78f65776f02d4127c))
+* add brocker account list ([6e89c1a](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/6e89c1a8f765025bd7be37b59c696d092fd4bbe4))
+* add manual bank card screens ([ff4e88e](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/ff4e88edbeb9de244c2a6094ab70d9e48a4768a7))
+* add operations page ([4f3ee7d](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/4f3ee7ddb289284f8a6a0677438f270e8756a3fb))
+* add portfolio ([9156f29](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/9156f297073fefa2fe1c5cb9659495e2d532ac89))
+* add stock pages and ticker navigation ([561222e](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/561222e4686bde1dc98454a4216025c4cbc02d65))
+* add Storybook for WealthLedger components ([e63fd89](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/e63fd89a3922cd4dd7f194e33b320b4178985a5f))
+* add tbank tokens ([32e21de](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/32e21de17d00de5b3a4b074a2300e6a29a81e3ae))
+* add агегку events ([da55de5](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/da55de5b5008cce0ea24def664e13f3239174324))
+* animate page transitions with Motion ([c906dfa](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/c906dfa2e290164e6b089764be18edc99f10e775))
+* **broker-operation:** show operation type label in ledger entries ([d53ce50](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/d53ce50e2842e8d69a709b92417888ba851774b4))
+* **card:** refine header and inline actions ([cf21a5b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/cf21a5bd178a18753321811b6d8ac81ff848d676))
+* **cards:** filter operations by date range ([9bb385b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/9bb385b9f02cc780e27d9da8f30fae374ab0f08c))
+* **cards:** refine controls and modal transitions ([aba4cf1](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/aba4cf1ce83ea62082f35be358c2081d797f6645))
+* **cards:** show operation icons on hover ([dedfec1](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/dedfec10d1e94b76a21e0d9ee90b6cf7fea5a4a9))
+* compact portfolio currency totals ([47fbc21](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/47fbc212831058f1a0f1226dd262bf5c37870e34))
+* consume money projected event amounts ([1fd9a3a](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/1fd9a3a861a8b915b6c64861a018db39e2598a83))
+* enforce frontend quality guardrails ([1fc269a](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/1fc269adec9f0cfeacdc365c6e59a30c4620dba7))
+* establish frontend foundation ([1e13ada](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/1e13adabd32412de9707f452e42d2c65e73c106f))
+* **events:** add date filters to upcoming events ([9469dd2](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/9469dd2fdc03df47c202da2afdcdadb49dbb2748))
+* improve bank card expenses summary ([d3ac8c2](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/d3ac8c242de1d30cd3c4ca8e5850700192c2c259))
+* improve card operations pagination and scroll behavior ([9a65687](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/9a65687d3875d264b6de088d6886e6cb916d3426))
+* improve ledger event rows ([488ccad](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/488ccad540c771e862fb795edf2df6c6cea315af))
+* **income:** add account income analytics ([9364568](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/93645682028947d3fbd212bc9929dd2195715c69))
+* initial commit ([3331b7f](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3331b7f684f2ccc6d3934436d0326d877d1c3899))
+* polish bank operation cards and dates ([6b310db](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/6b310db0b8c37cb4cffe54acf3b7e9799f9f3ea0))
+* polish stock position cards ([273778c](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/273778c4cfa6ef8bd3ab421e03c57b6e31f7d925))
+* **portfolio:** add expanded layout for bond position cards ([bcf9369](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/bcf93691aa874114faf75cb9c36d1426dd7b8903))
+* **portfolio:** extend instrument logo rendering to bonds ([c04025a](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/c04025a3924ad76ae06e9bbbd32df4d18c85b34a))
+* **portfolio:** show stock tickers ([8f9caa9](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/8f9caa946ee99e2db2b495a384b17a0ce90ddcfd))
+* **portfolio:** visualize asset allocation ([0306526](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/0306526d3330d508d817aedecf74f0b74583dea7))
+* redesign portfolio position cards ([5168870](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/5168870cf2d5ac19a6d08ad8fee35f2952cdda87))
+* redesign year-over-year income comparison ([91eaeb5](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/91eaeb5661706f30171f5f15bf22e419fe2ee57c))
+* render stock logos with signed returns on account page ([a6d3051](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/a6d305127057bf6413825ffddba1c15b53e65a73))
+* replace loading spinners with skeletons ([71a214d](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/71a214d7adfcf5fc57cd5518fb008021d50e7723))
+* replace paired date inputs with range pickers ([24d332e](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/24d332e06341ccfb0d0d7046793ca145669cec44))
+* show page context in browser tab titles ([2580134](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/2580134683cbe036bb07b635aab6262d3702f270))
+* simplify income page filters and payments ([26f229b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/26f229ba3e0f8335dde297bf6c4575f7014e9f28))
+* **ui:** animate navigation and operation icons ([8e58c01](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/8e58c016d2dccfbdc6089480f6ccc113b6719850))
+* **ui:** animate sidebar icons on hover ([ebba6ab](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/ebba6ab25dc968c278d525fd2fd4194c8422d8d1))
+* **ui:** establish shared design system foundations ([d762ba5](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/d762ba50342cd96e4387a51bac12a0c4c43c648c))
+* unify upcoming event cards across pages ([451400b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/451400b63be0011a7a3b4dfd77e9365f7bcca467))
+
+### Bug Fixes
+
+* **frontend:** complete audit remediation ([9e42148](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/9e42148f6a9ad620b4fc9f6aef9ee2d80d73702b))
+* harden frontend dependency and env hygiene ([826936c](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/826936c6a4a7160b07224f0fa94b6d2d941bc6dc))
+* little fixes ([2e32d22](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/2e32d226d321f2d51653f1823ade8bace17fc5e5))
+* preserve cached data during refresh failures ([6d892da](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/6d892da9cec9d8522520cec3c26d343e81f4a51d))
+* remove income analytics period limit ([ab1b536](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/ab1b53680d811e5b5f91e8e14a7f219274e57313))
+* separate portfolio cash presentation ([3017fc8](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3017fc810ee10f2790dbc04902ad4e2f2cbadbd4))
+* stabilize frontend query cache contracts ([1250581](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/1250581ee3336e901bd01f757328ae4c4dd091c8))
+* **tbank:** reset connection-derived query cache ([175727b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/175727bc93876f950280d0ad35515a6d4acffbaf))
+* **ui:** align page layouts and add navigation icons ([d7e8963](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/d7e8963d1cfabd0900051e30e33ec30284282a7c))
+
+### Documentation
+
+* **agents:** link audit remediation registry ([b285719](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/b285719c1bcea32e490f9d960d7893bd21ba9e81))
+* **agents:** restore openspec authority ([fd72fb2](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/fd72fb2239849cb87d441c552b194b6358c9dc8a))
+* **ai:** route frontend conventions by task ([bcc034f](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/bcc034f19839a1aefadad978c5bb3a89d81ebe63))
+* align OpenAPI workflow guidance [#3](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/3) ([7a89356](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/7a89356f8783a14d6dde752358ee995d0dcadd66))
+* define canonical OpenSpec store ([d870d53](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/d870d535d7090aa3051de6f1b0fd979eaf6d7154))
+* document runtime OpenAPI verification ([7a3048c](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/7a3048c3476675528203fbe74338131723354e1d))
+* refresh frontend onboarding ([be80ef2](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/be80ef2f1bffc01867ee97f5f78c0cba7764a24e))
+* remove useless ([7ab043d](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/7ab043dce63a3fbacbfc9ac7d15b00dd714a541f))
+* update routes to system documentation ([a42f104](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/a42f104bed4daf982f2a72f0634887e4ea067dec))
+* update system documentation references ([dc3434c](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/dc3434c3716f09cfb1ef4aa3006e9db12f6b3bcf))
+
+### Refactoring
+
+* **account-operations:** split page state views into components ([695cda0](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/695cda0456970fe3a46d09dcec718c741ee6b18d))
+* align frontend ownership boundaries ([c97f62b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/c97f62bd983d6b5327132f4ec42e767118720913))
+* centralize frontend auth query gating ([268acdf](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/268acdf2e1057ed0f6c19384bfb6477aff773d1d))
+* enforce account page view model boundary ([fff36f2](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/fff36f252aa1a7bb18042c8fc2d06262b687b0b1))
+* enforce semantic values and numeric lint rules ([53c852b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/53c852b437ee1174843a4f959722239132e9150a))
+* little structure refactor ([2cca503](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/2cca503519888762067c770c188ed2d977979cbb))
+* refactor foundation ([da585b1](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/da585b157a5350753a91abb7f10aa00c7e9cf2c3))
+* simplify local design token consumption ([8b29cdf](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/8b29cdfd98790cb3316f1db0f8933c8b6bc4b335))
+* source shared design tokens from JSON ([0f50f15](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/0f50f156584b6b0bf3e473d047c3960284cf0cdd))
+* use Mantine Breadcrumbs for app navigation ([3c459e6](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3c459e66cc640cad58267cbaac2be4fbcaee4fdf))
+
+### CI
+
+* configure Renovate dependency updates [#5](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/5) ([4b97395](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/4b973953853785660b5c34ef96c90d518ab6c561))
+* disable memory-heavy Knip raw transfer [#1](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/1) ([2f26e4f](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/2f26e4fe0d8aa4e693c3ca425db04b04afbba75f))
+* run Biome on branch pushes in Gitea ([ccff422](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/ccff422f367bbcf5e19f510119dbe8b63de9b87a))
+* run full frontend verification [#1](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/1) ([22e331e](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/22e331e2ff4c5f68b3273de89fe9968029a1343d))
+
+### Tests
+
+* allow UI scenarios more time in CI [#1](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/1) ([942ed3d](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/942ed3d453d71547dc8883924a9bb2f76f7e997f))
+* keep portfolio metadata authoritative in cards ([427ca23](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/427ca23a433a20be25b1f4373f32c9e1f6f8c400))
+
+### Maintenance
+
+* align SDD routing and instruction commits ([3669832](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/36698322b7273b3a9eae1d078bcc9cddf2c8295b))
+* codify frontend local verification ([11be786](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/11be786943024699a4eccf91a8d1ad32a6d29e5f))
+* codify React component style ([d10e1dd](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/d10e1dd1827094e6e52768f0ccd2ea060aef95a1))
+* configure releases and develop workflow ([53b18c6](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/53b18c6e86f433bcb967721232c150fba4f7cc9f))
+* **deps:** update non-major dependencies ([0c6bac8](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/0c6bac8b902b88dc0b447b9198968e938db72c82))
+* make issue references optional and use chore for dependency updates [#5](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/5) ([82b9043](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/82b904393dcf65d9876fd06d1864dddef7d70bdb))
+* save pending changes ([ae06f6e](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/ae06f6e6e0f98a2be208d66105ca53ecf2d86bfd))
+* secure hooks and update dependencies [#4](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/4) [#9](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/9) ([3be6e61](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3be6e61b8fc85d4b16199dbe9910b38894159cb8))
+* simplify frontend verification ([f09baa6](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/f09baa68fcecfd210f95a7bfe8a67dc3741abce8))
+* simplify frontend verification ([3d9b619](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3d9b6194c60b373996a590c4bd56653e0935e8c6))
+* upgrade Node to 24 LTS ([117e74c](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/117e74cdfc29cbf63f549ea88e8106ab25300541))
@@ -5,7 +5,7 @@ backend; прямые вызовы T-Bank из frontend не допускают

 ## Быстрый старт

-Требуется Node 22 (`.nvmrc`). Создайте `.env` из примера и установите
+Требуется Node 24 (`.nvmrc`). Создайте `.env` из примера и установите
 зависимости строго из lockfile:

 ```bash
@@ -17,6 +17,12 @@ npm run dev

 `VITE_API_BASE_URL` по умолчанию указывает на `http://localhost:3000`.

+Для commits установите [Gitleaks](https://github.com/gitleaks/gitleaks/releases/tag/v8.30.1)
+8.30.1 в `PATH` (macOS: `brew install gitleaks`). Pre-commit сначала проверяет
+staged diff с полной редакцией секретов, затем запускает formatting и FSD checks.
+Находка или отсутствие Gitleaks блокирует commit.
+Проверка этого поведения: `node --test scripts/test-pre-commit.mjs`.
+
 ## Проверка

 ```bash
@@ -27,10 +33,30 @@ npm run verify
 Команда проверяет, что generated OpenAPI types соответствуют committed snapshot,
 затем запускает strict TypeScript, Biome, один coverage-backed запуск Vitest,
 Knip, dependency rules приложения и stories, сборки приложения и Storybook.
+Отдельный CI workflow `Frontend security` на push, pull request и ежедневно
+проверяет полную доступную историю Gitleaks 8.30.1 и выполняет
+`npm audit --include=dev --audit-level=low`. Любой advisory блокирует security job;
+исключений frontend нет. Локально можно выполнить те же команды:
+`gitleaks git --log-opts=--all --redact=100 --no-banner` и
+`npm audit --include=dev --audit-level=low`. Audit требует доступа к npm registry;
+проверка секретов выполняется локально и не выводит их значения.
+
+TypeScript остаётся на 5.9.3: `openapi-typescript@7.13.0` требует peer `^5.x`.
+Обновление до TypeScript 7 из Renovate dashboard откладывается до совместимого
+релиза генератора; `--force`/`--legacy-peer-deps` для обхода этого ограничения
+не используются.
 Если backend-контракт изменился,
 обновите `src/shared/api/spec/openapi.json` копированием backend OpenAPI
 document и затем выполните `npm run openapi:generate`.

+## UI-каталог Storybook
+
+После `nvm use --silent` выполните `npm run dev:catalog`; статическая сборка —
+`npm run build:catalog`. Каталог использует общую тему приложения, вымышленные
+данные и локальные действия без application API. Примеры не доказывают
+восстановление реального запроса. Визуальные роли описаны в
+[дизайн-системе](../docs/design/overview.md).
+
 ## Документация

 - [Router conventions](.ai/CONVENTIONS.md) и [источники](.ai/SOURCES.md)
@@ -38,15 +64,17 @@ document и затем выполните `npm run openapi:generate`.
 - [UI, state, формы и компоненты](.ai/conventions/frontend-ui.md)
 - [Data/API/cache](.ai/conventions/frontend-data.md)
 - [Testing](.ai/conventions/frontend-testing.md)
- [Поставленный UI-каталог Storybook](../docs/development/ui-catalog.md)
+- [UI-каталог Storybook](#ui-каталог-storybook)
 - [Обзор поставленной системы](../docs/overview.md)
- [Engineering governance и risk-based testing](../docs/development/engineering-governance.md)
 - [Карта проектных фактов](../docs/README.md)
- [Границы проверки интерфейса](../docs/development/verification.md#интерфейс)
- [Remediation registry](../docs/development/audit-remediation.md)

 Runtime OpenAPI backend сверяется с frontend snapshot отдельной read-only
 backend командой `npm run test:openapi-contract`.
 Разработка идёт напрямую по задаче пользователя. Каждый affected repo проходит
 свой verify; при изменении wire contract дополнительно выполняется contract check.
 Обязательного OpenSpec/SDD lifecycle нет.
+
+Версии и ветки: [процесс релиза](../README.md#релизы-и-ветки).
+
+Knip исключает `conventional-changelog-conventionalcommits`: release-it загружает
+preset по имени из `.release-it.json`. Версия preset закреплена напрямую.
@@ -27,7 +27,8 @@
 			},
 			"style": {
 				"noDefaultExport": "error",
-				"useExportsLast": "error"
+				"useExportsLast": "error",
+				"noMagicNumbers": "error"
 			}
 		}
 	},
@@ -57,6 +58,21 @@
 					}
 				}
 			}
+		},
+		{
+			"includes": [
+				"**/*.test.ts",
+				"**/*.test.tsx",
+				"**/*.stories.tsx",
+				"src/test/**"
+			],
+			"linter": {
+				"rules": {
+					"style": {
+						"noMagicNumbers": "off"
+					}
+				}
+			}
 		}
 	]
 }
@@ -1 +1,23 @@
-module.exports = { extends: ["@commitlint/config-conventional"] };
+module.exports = {
+	extends: ["@commitlint/config-conventional"],
+	rules: {
+		"type-enum": [
+			2,
+			"always",
+			[
+				"feat",
+				"fix",
+				"perf",
+				"docs",
+				"spec",
+				"refactor",
+				"build",
+				"ci",
+				"test",
+				"style",
+				"chore",
+				"revert",
+			],
+		],
+	},
+};
@@ -1,3 +1,4 @@
 {
-	"project": ["src/**/*.{ts,tsx}", "!src/shared/api/generated/**"]
+	"project": ["src/**/*.{ts,tsx}", "!src/shared/api/generated/**"],
+	"ignoreDependencies": ["conventional-changelog-conventionalcommits"]
 }
@@ -1,10 +1,10 @@
 {
 	"name": "wealth-ledger-frontend",
 	"private": true,
-	"version": "0.0.0",
+	"version": "0.1.0",
 	"type": "module",
 	"engines": {
-		"node": "22.x"
+		"node": "24.21.0"
 	},
 	"scripts": {
 		"dev": "vite",
@@ -24,58 +24,68 @@
 		"verify": "npm run openapi:check && npm run typecheck && npm run lint && npm run test:coverage && npm run knip && npm run deps && npm run deps:storybook && npm run build && npm run build:catalog",
 		"prepare": "husky",
 		"preview": "vite preview",
-		"deps:storybook": "depcruise src .storybook/preview.tsx --config .storybook/dependency-cruiser.cjs --output-type err-long"
+		"deps:storybook": "depcruise src .storybook/preview.tsx --config .storybook/dependency-cruiser.cjs --output-type err-long",
+		"release:preview": "release-it --dry-run --ci",
+		"release:prepare": "release-it --ci",
+		"commitlint": "commitlint"
 	},
 	"lint-staged": {
 		"*.{css,html,json,md,ts,tsx}": "biome format --write --no-errors-on-unmatched"
 	},
 	"dependencies": {
-		"@hookform/resolvers": "5.7.1",
-		"@mantine/charts": "9.5.1",
-		"@mantine/core": "9.5.1",
-		"@mantine/dates": "9.5.1",
-		"@mantine/hooks": "9.5.1",
-		"@tanstack/react-query": "5.101.4",
+		"@hookform/resolvers": "5.9.1",
+		"@mantine/charts": "9.6.1",
+		"@mantine/core": "9.6.1",
+		"@mantine/dates": "9.6.1",
+		"@mantine/hooks": "9.6.1",
+		"@tanstack/react-query": "5.102.8",
 		"dayjs": "1.11.23",
-		"i18next": "26.0.2",
+		"i18next": "26.4.2",
 		"motion": "13.2.0",
 		"openapi-fetch": "0.17.0",
 		"openapi-react-query": "0.5.4",
-		"react": "19.2.8",
-		"react-dom": "19.2.8",
-		"react-hook-form": "7.85.0",
-		"react-i18next": "16.3.5",
-		"react-is": "19.2.8",
-		"react-router": "7.18.2",
+		"react": "19.3.0",
+		"react-dom": "19.3.0",
+		"react-hook-form": "7.88.0",
+		"react-i18next": "17.0.14",
+		"react-is": "19.3.0",
+		"react-router": "8.3.1",
 		"recharts": "3.10.1",
-		"zod": "3.25.76"
+		"zod": "4.6.4"
 	},
 	"devDependencies": {
-		"@babel/core": "7.29.7",
-		"@biomejs/biome": "2.5.8",
+		"@babel/core": "8.0.5",
+		"@biomejs/biome": "2.5.13",
 		"@commitlint/cli": "21.2.2",
 		"@commitlint/config-conventional": "21.2.2",
-		"@rolldown/plugin-babel": "0.2.3",
+		"@release-it/conventional-changelog": "12.0.0",
+		"@rolldown/plugin-babel": "0.2.4",
 		"@storybook/addon-docs": "10.6.0",
 		"@storybook/react-vite": "10.6.0",
-		"@testing-library/jest-dom": "6.9.1",
-		"@testing-library/react": "16.3.0",
-		"@types/node": "24.13.3",
-		"@types/react": "19.2.17",
-		"@types/react-dom": "19.2.3",
-		"@vitejs/plugin-react": "6.0.4",
-		"@vitest/coverage-v8": "4.1.10",
+		"@testing-library/jest-dom": "7.0.1",
+		"@testing-library/react": "16.3.3",
+		"@types/node": "24.13.4",
+		"@types/react": "19.3.0",
+		"@types/react-dom": "19.3.0",
+		"@vitejs/plugin-react": "6.1.1",
+		"@vitest/coverage-v8": "5.0.0",
 		"babel-plugin-react-compiler": "1.0.0",
+		"conventional-changelog-conventionalcommits": "10.4.0",
 		"dependency-cruiser": "18.2.0",
 		"husky": "9.1.7",
-		"jsdom": "27.4.0",
-		"knip": "6.32.2",
-		"lint-staged": "16.2.7",
+		"jsdom": "30.0.1",
+		"knip": "6.35.1",
+		"lint-staged": "17.5.1",
 		"msw": "2.15.0",
 		"openapi-typescript": "7.13.0",
+		"release-it": "21.0.2",
 		"storybook": "10.6.0",
 		"typescript": "5.9.3",
-		"vite": "8.2.0",
-		"vitest": "4.1.10"
+		"vite": "8.3.0",
+		"vitest": "5.0.0"
+	},
+	"allowScripts": {
+		"esbuild@0.28.2": true,
+		"fsevents@2.3.3": true
 	}
 }
@@ -0,0 +1,19 @@
+{
+	"$schema": "https://docs.renovatebot.com/renovate-schema.json",
+	"extends": ["config:recommended", ":semanticCommitTypeAll(chore)"],
+	"timezone": "Europe/Moscow",
+	"labels": ["dependencies"],
+	"dependencyDashboard": true,
+	"rangeStrategy": "pin",
+	"packageRules": [
+		{
+			"matchUpdateTypes": ["minor", "patch"],
+			"groupName": "non-major dependencies"
+		},
+		{
+			"matchUpdateTypes": ["major"],
+			"dependencyDashboardApproval": true
+		}
+	],
+	"baseBranchPatterns": ["develop"]
+}
@@ -0,0 +1,25 @@
+const assert = require("node:assert/strict");
+const { execFileSync } = require("node:child_process");
+const { version } = require("../package.json");
+const git = (...args) => execFileSync("git", args, { encoding: "utf8" }).trim();
+
+assert.equal(
+	git("status", "--porcelain"),
+	"",
+	"Commit all changes before preparing a release",
+);
+const tags = git(
+	"tag",
+	"--merged",
+	"HEAD",
+	"--list",
+	"v[0-9]*",
+	"--sort=-version:refname",
+)
+	.split("\n")
+	.filter((tag) => /^v\d+\.\d+\.\d+$/.test(tag));
+assert.equal(
+	version,
+	tags[0]?.slice(1) ?? "0.0.0",
+	"Version is already prepared or release tags are missing. Fetch tags; finish the existing release before preparing another.",
+);
@@ -0,0 +1,61 @@
+import assert from "node:assert/strict";
+import { execFileSync, spawnSync } from "node:child_process";
+import { randomBytes } from "node:crypto";
+import {
+	existsSync,
+	mkdirSync,
+	mkdtempSync,
+	rmSync,
+	writeFileSync,
+} from "node:fs";
+import { tmpdir } from "node:os";
+import { delimiter, join, resolve } from "node:path";
+import { test } from "node:test";
+
+const GITHUB_TOKEN_RANDOM_BYTES = 18;
+
+test("pre-commit scans the index, redacts findings and fails closed", () => {
+	const hook = resolve(".husky/pre-commit");
+	const cwd = mkdtempSync(join(tmpdir(), "frontend-hook-"));
+	const bin = join(cwd, "bin");
+	const marker = join(cwd, "downstream");
+	const token = `ghp_${randomBytes(GITHUB_TOKEN_RANDOM_BYTES).toString("hex")}`;
+	const git = (...args) => execFileSync("git", args, { cwd, stdio: "pipe" });
+	const run = (path = `${bin}${delimiter}${process.env.PATH}`) =>
+		spawnSync("/bin/sh", ["-e", hook], {
+			cwd,
+			env: { ...process.env, PATH: path },
+			encoding: "utf8",
+		});
+	try {
+		mkdirSync(bin);
+		for (const command of ["npx", "npm"]) {
+			writeFileSync(join(bin, command), "#!/bin/sh\necho ran >> downstream\n", {
+				mode: 0o755,
+			});
+		}
+		git("init", "--quiet");
+		writeFileSync(join(cwd, "sample.txt"), "safe staged content\n");
+		git("add", "sample.txt");
+		// An unstaged secret must not be mistaken for the index being committed.
+		writeFileSync(join(cwd, "sample.txt"), `token=${token}\n`);
+		let result = run();
+		assert.equal(
+			result.status,
+			0,
+			"clean index must pass; install Gitleaks first",
+		);
+		assert.ok(existsSync(marker));
+		rmSync(marker);
+		git("add", "sample.txt");
+		result = run();
+		assert.equal(result.status, 1, "staged secret must block commit");
+		assert.ok(!`${result.stdout}${result.stderr}`.includes(token));
+		assert.ok(!existsSync(marker), "formatting/dependency checks must not run");
+		result = run(bin);
+		assert.notEqual(result.status, 0, "missing Gitleaks must block commit");
+		assert.ok(!existsSync(marker));
+	} finally {
+		rmSync(cwd, { recursive: true, force: true });
+	}
+});
@@ -126,7 +126,9 @@ describe("AppRoutes", () => {
 		});
 		fireEvent.click(screen.getByRole("button", { name: "Вход" }));
 		await screen.findByRole("heading", { name: "Добавьте первую карту" });
-		expect(screen.getByLabelText("Месяц")).toHaveTextContent("August 2026");
+		expect(screen.getByLabelText("Период")).toHaveTextContent(
+			"01.08.2026 – 31.08.2026",
+		);
 		expect(document.title).toBe("Карты — WealthLedger");
 	});

@@ -3,6 +3,8 @@ import * as m from "motion/react-m";
 import type { FC, PropsWithChildren } from "react";
 import { useLocation } from "react-router";

+const TRANSITION_DURATION_SECONDS = 0.2;
+
 const RouteTransition: FC<PropsWithChildren> = (props) => {
 	const { children } = props;
 	const { pathname } = useLocation();
@@ -14,7 +16,10 @@ const RouteTransition: FC<PropsWithChildren> = (props) => {
 				key={pathname}
 				initial={reduceMotion ? false : { opacity: 0 }}
 				animate={{ opacity: 1 }}
-				transition={{ duration: reduceMotion ? 0 : 0.2, ease: "easeOut" }}
+				transition={{
+					duration: reduceMotion ? 0 : TRANSITION_DURATION_SECONDS,
+					ease: "easeOut",
+				}}
 			>
 				{children}
 			</m.div>
@@ -30,6 +30,8 @@ type CreateExpenseCategory =
 type UpdateExpenseCategory =
 	paths["/api/v1/bank-cards/categories/{id}"]["patch"]["requestBody"]["content"]["application/json"];

+const OPERATIONS_PAGE_SIZE = 100;
+
 function useBankCards(includeArchived = false) {
 	return useAuthenticatedQuery(
 		apiQueryClient.queryOptions("get", "/api/v1/bank-cards", {
@@ -71,7 +73,7 @@ function useBankOperations(
 		query: {
 			...query,
 			page: all ? 1 : query.page,
-			limit: query.limit === "all" ? 100 : query.limit,
+			limit: query.limit === "all" ? OPERATIONS_PAGE_SIZE : query.limit,
 		},
 	};
 	const options = apiQueryClient.queryOptions(
@@ -87,7 +89,7 @@ function useBankOperations(
 		) => {
 			const previous = previousQuery?.queryKey[2]?.params;
 			return !all &&
-				previousQuery?.queryKey.length === 3 &&
+				previousQuery?.queryKey.length === options.queryKey.length &&
 				previous?.path?.id === id &&
 				previous?.query?.month === query.month &&
 				previous?.query?.from === query.from &&
@@ -14,15 +14,16 @@ export {
 	bankDateInputValue,
 	bankDateSchema,
 	bankMoneyValue,
-	bankMonth,
 	bankToday,
 	moneyCents,
 	positiveMoneySchema,
 } from "./model/form-validation";
+export { bankPeriod } from "./model/period";
 export { BankCardFace } from "./ui/BankCardFace";
 export { BankCardForm } from "./ui/BankCardForm";
 export { BankFeedback } from "./ui/BankFeedback";
 export { BankOperationIcon } from "./ui/BankOperationIcon";
+export { BankPeriodPicker } from "./ui/BankPeriodPicker";
 export { BankSummaryView } from "./ui/BankSummary.view";
 export { CategoryManager } from "./ui/CategoryManager";
 export { useBankFormFocus } from "./ui/useBankFormFocus";
@@ -1,6 +1,9 @@
 import { z } from "zod";
 import { validationMessage } from "@/shared/i18n";

+const ISO_MONTH_LENGTH = 7;
+const MAX_CARD_NAME_LENGTH = 100;
+
 function bankToday() {
 	return new Intl.DateTimeFormat("en-CA", {
 		timeZone: "Europe/Moscow",
@@ -15,7 +18,7 @@ function bankDateInputValue(value: string) {
 function bankMonth(value: string | null) {
 	return value && /^\d{4}-(0[1-9]|1[0-2])$/.test(value)
 		? value
-		: bankToday().slice(0, 7);
+		: bankToday().slice(0, ISO_MONTH_LENGTH);
 }
 function bankMoneyValue(value: string) {
 	return value
@@ -32,18 +35,27 @@ function moneyCents(value: string): bigint | null {
 		(normalized.startsWith("-") ? -1n : 1n)
 	);
 }
-const moneySchema = z.string().refine((value) => {
-	const cents = moneyCents(value);
-	return (
-		cents !== null &&
-		cents >= -9223372036854775808n &&
-		cents <= 9223372036854775807n
-	);
-}, validationMessage("bank.validation.money"));
-const positiveMoneySchema = moneySchema.refine((value) => {
-	const cents = moneyCents(value);
-	return cents === null || cents > 0n;
-}, validationMessage("bank.validation.positive"));
+const MIN_BALANCE_KOPECKS = -9_223_372_036_854_775_808n;
+const MAX_BALANCE_KOPECKS = 9_223_372_036_854_775_807n;
+
+const moneySchema = z.string().refine(
+	(value) => {
+		const cents = moneyCents(value);
+		return (
+			cents !== null &&
+			cents >= MIN_BALANCE_KOPECKS &&
+			cents <= MAX_BALANCE_KOPECKS
+		);
+	},
+	{ error: validationMessage("bank.validation.money") },
+);
+const positiveMoneySchema = moneySchema.refine(
+	(value) => {
+		const cents = moneyCents(value);
+		return cents === null || cents > 0n;
+	},
+	{ error: validationMessage("bank.validation.positive") },
+);
 const bankDateSchema = z
 	.string()
 	.refine(
@@ -53,27 +65,30 @@ const bankDateSchema = z
 			!Number.isNaN(Date.parse(`${value}T00:00:00Z`)) &&
 			new Date(`${value}T00:00:00Z`).toISOString().slice(0, 10) === value &&
 			value <= bankToday(),
-		validationMessage("bank.validation.date"),
+		{ error: validationMessage("bank.validation.date") },
 	);
 const bankCardSchema = z.object({
 	name: z
 		.string()
 		.trim()
 		.min(1, validationMessage("bank.validation.name")(undefined))
-		.max(100, validationMessage("bank.validation.name")(undefined)),
+		.max(
+			MAX_CARD_NAME_LENGTH,
+			validationMessage("bank.validation.name")(undefined),
+		),
 	bankName: z
 		.string()
 		.trim()
-		.max(100, validationMessage("bank.validation.bankName")(undefined)),
-	lastFour: z
-		.string()
-		.refine(
-			(value) => !value || /^\d{4}$/.test(value),
-			validationMessage("bank.validation.lastFour"),
+		.max(
+			MAX_CARD_NAME_LENGTH,
+			validationMessage("bank.validation.bankName")(undefined),
 		),
+	lastFour: z.string().refine((value) => !value || /^\d{4}$/.test(value), {
+		error: validationMessage("bank.validation.lastFour"),
+	}),
 	paymentSystem: z
 		.enum(["", "mir", "visa", "mastercard"], {
-			errorMap: validationMessage("bank.validation.paymentSystem"),
+			error: validationMessage("bank.validation.paymentSystem"),
 		})
 		.optional(),
 	openingBalance: moneySchema,
@@ -0,0 +1,23 @@
+import dayjs from "dayjs";
+import { z } from "zod";
+import { bankMonth } from "./form-validation";
+
+const calendarDate = z.string().date();
+function bankPeriod(params: URLSearchParams) {
+	const month = bankMonth(params.get("month"));
+	const from = params.get("from");
+	const to = params.get("to");
+	return from &&
+		to &&
+		calendarDate.safeParse(from).success &&
+		calendarDate.safeParse(to).success &&
+		from >= "0001-01-01" &&
+		from <= to
+		? { from, to }
+		: {
+				from: `${month}-01`,
+				to: dayjs(`${month}-01`).endOf("month").format("YYYY-MM-DD"),
+			};
+}
+
+export { bankPeriod };
@@ -39,6 +39,12 @@ function setup(value: BankCard) {
 	return close;
 }
 describe("BankCardForm", () => {
+	it("waits for the exit transition before notifying the parent", async () => {
+		const close = setup(card);
+		fireEvent.click(screen.getByRole("button", { name: "Отмена" }));
+		expect(close).not.toHaveBeenCalled();
+		await waitFor(() => expect(close).toHaveBeenCalledTimes(1));
+	});
 	it("clears optional metadata on archive while omitting protected financial fields", async () => {
 		const close = setup({ ...card, archivedAt: "2026-09-01" });
 		expect(screen.getByLabelText(/Начальный остаток/)).toHaveAttribute(
@@ -20,6 +20,7 @@ import { useBankFormFocus } from "./useBankFormFocus";
 type BankCardFormProps = { card?: BankCard; onClose: () => void };
 const BankCardForm: FC<BankCardFormProps> = (props) => {
 	useBankFormFocus();
+	const [opened, setOpened] = useState(true);
 	const { t } = useTranslation();
 	const [intent] = useState(() => crypto.randomUUID());
 	const [version, setVersion] = useState(props.card?.version ?? 1);
@@ -39,11 +40,14 @@ const BankCardForm: FC<BankCardFormProps> = (props) => {
 		},
 	});
 	const pending =
-		methods.formState.isSubmitting || (fresh.isFetching && Boolean(error));
+		!opened ||
+		methods.formState.isSubmitting ||
+		(fresh.isFetching && Boolean(error));
 	return (
 		<Modal
-			opened
-			onClose={() => !pending && props.onClose()}
+			opened={opened}
+			onExitTransitionEnd={props.onClose}
+			onClose={() => !pending && setOpened(false)}
 			title={t(props.card ? "bank.editCard" : "bank.addCard")}
 			closeButtonProps={{ "aria-label": t("bank.close"), disabled: pending }}
 			closeOnClickOutside={!pending}
@@ -82,7 +86,7 @@ const BankCardForm: FC<BankCardFormProps> = (props) => {
 									...metadata,
 									...financial,
 								});
-							props.onClose();
+							setOpened(false);
 						} catch (failure) {
 							setError(failure);
 						}
@@ -132,7 +136,7 @@ const BankCardForm: FC<BankCardFormProps> = (props) => {
 								<Button type="submit" loading={pending}>
 									{t("bank.save")}
 								</Button>
-								<Button variant="default" onClick={props.onClose}>
+								<Button variant="default" onClick={() => setOpened(false)}>
 									{t("bank.cancel")}
 								</Button>
 							</Group>
@@ -0,0 +1,38 @@
+import { DatePickerInput } from "@mantine/dates";
+import { type FC, useState } from "react";
+import { useTranslation } from "react-i18next";
+
+type BankPeriodPickerProps = {
+	period: { from: string; to: string };
+	onChange: (value: [string | null, string | null]) => void;
+};
+const BankPeriodPicker: FC<BankPeriodPickerProps> = (props) => {
+	const { period, onChange } = props;
+	const { t } = useTranslation();
+	const scope = `${period.from}-${period.to}`;
+	const [draft, setDraft] = useState<{
+		scope: string;
+		value: [string | null, string | null];
+	}>();
+	const value: [string | null, string | null] =
+		draft?.scope === scope ? draft.value : [period.from, period.to];
+	return (
+		<DatePickerInput
+			type="range"
+			allowSingleDateInRange
+			label={t("bank.period")}
+			valueFormat="DD.MM.YYYY"
+			value={value}
+			onChange={(next) => {
+				setDraft({ scope, value: next });
+				onChange(next);
+			}}
+			popoverProps={{
+				returnFocus: true,
+				middlewares: { shift: { crossAxis: true } },
+			}}
+		/>
+	);
+};
+
+export { BankPeriodPicker };
@@ -25,6 +25,8 @@ import classes from "./BankForms.module.css";
 import { BankOperationIcon } from "./BankOperationIcon";
 import { useBankFormFocus } from "./useBankFormFocus";

+const MAX_CATEGORY_NAME_LENGTH = 80;
+
 type CategoryManagerProps = {
 	onClose: () => void;
 	onCreated?: (id: string) => void;
@@ -53,6 +55,7 @@ const CategoryFields: FC = () => {
 };
 const CategoryManager: FC<CategoryManagerProps> = (props) => {
 	useBankFormFocus();
+	const [opened, setOpened] = useState(true);
 	const { t } = useTranslation();
 	const categories = useBankCategories();
 	const mutation = useBankMutations();
@@ -66,8 +69,9 @@ const CategoryManager: FC<CategoryManagerProps> = (props) => {
 					.string()
 					.trim()
 					.refine(
-						(value) => value.length > 0 && value.length <= 80,
-						validationMessage("bank.validation.category"),
+						(value) =>
+							value.length > 0 && value.length <= MAX_CATEGORY_NAME_LENGTH,
+						{ error: validationMessage("bank.validation.category") },
 					)
 					.refine(
 						(value) =>
@@ -77,17 +81,18 @@ const CategoryManager: FC<CategoryManagerProps> = (props) => {
 									c.name.toLocaleLowerCase("ru-RU") ===
 										value.toLocaleLowerCase("ru-RU"),
 							),
-						validationMessage("bank.validation.duplicate"),
+						{ error: validationMessage("bank.validation.duplicate") },
 					),
 			}),
 		),
 		defaultValues: { name: "" },
 	});
-	const pending = methods.formState.isSubmitting;
+	const pending = !opened || methods.formState.isSubmitting;
 	return (
 		<Modal
-			opened
-			onClose={() => !pending && props.onClose()}
+			opened={opened}
+			onExitTransitionEnd={props.onClose}
+			onClose={() => !pending && setOpened(false)}
 			title={t("bank.categories")}
 			closeOnClickOutside={!pending}
 			closeOnEscape={!pending}
@@ -205,7 +210,7 @@ const CategoryManager: FC<CategoryManagerProps> = (props) => {
 										{t("bank.cancel")}
 									</Button>
 								)}
-								<Button variant="default" onClick={props.onClose}>
+								<Button variant="default" onClick={() => setOpened(false)}>
 									{t("bank.close")}
 								</Button>
 							</Group>
@@ -1,6 +1,16 @@
-import { apiQueryClient, useAuthenticatedQuery } from "@/shared/api";
+import {
+	apiQueryClient,
+	type paths,
+	useAuthenticatedQuery,
+} from "@/shared/api";

-type BondPeriod = "month" | "halfYear" | "year" | "all";
+type BondPeriod = NonNullable<
+	NonNullable<
+		paths["/api/v1/bonds/{uid}/candles"]["get"]["parameters"]["query"]
+	>["period"]
+>;
+
+const BOND_STALE_TIME_MS = 30_000;

 function useBondSearch(query: string) {
 	return useAuthenticatedQuery({
@@ -8,7 +18,7 @@ function useBondSearch(query: string) {
 			params: { query: { query } },
 		}),
 		enabled: query.length >= 2,
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 }
 function bondQueryOptions(uid: string) {
@@ -16,7 +26,7 @@ function bondQueryOptions(uid: string) {
 		...apiQueryClient.queryOptions("get", "/api/v1/bonds/{uid}", {
 			params: { path: { uid } },
 		}),
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	};
 }

@@ -35,7 +45,7 @@ function useBond(identifier: string) {
 			params: { path: { ticker: identifier } },
 		}),
 		enabled: Boolean(identifier) && !isUid,
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 	return isUid ? byUid : byTicker;
 }
@@ -45,7 +55,7 @@ function useBondMetrics(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 }
 function useBondQuote(uid: string) {
@@ -54,7 +64,7 @@ function useBondQuote(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 }
 function useBondCandles(uid: string, period: BondPeriod) {
@@ -63,7 +73,7 @@ function useBondCandles(uid: string, period: BondPeriod) {
 			params: { path: { uid }, query: { period } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 }
 function useBondPosition(uid: string) {
@@ -72,7 +82,7 @@ function useBondPosition(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 }
 function useBondCoupons(uid: string) {
@@ -81,7 +91,7 @@ function useBondCoupons(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: BOND_STALE_TIME_MS,
 	});
 }

@@ -9,6 +9,7 @@ function formatShare(
 	if (!numerator || !denominator) return null;
 	const total = Number(denominator.value);
 	if (!Number.isFinite(total) || total <= 0) return null;
+	// biome-ignore lint/style/noMagicNumbers: obvious conversion of a ratio to percent.
 	const percent = (Number(numerator.value) / total) * 100;
 	if (!Number.isFinite(percent)) return null;
 	const rounded = new Intl.NumberFormat("ru-RU", {
@@ -1,10 +1,17 @@
 import {
 	apiQueryClient,
+	type paths,
 	useAuthenticatedQueries,
 	useAuthenticatedQuery,
 } from "@/shared/api";

-type StockPeriod = "month" | "halfYear" | "year" | "all";
+type StockPeriod = NonNullable<
+	NonNullable<
+		paths["/api/v1/stocks/{uid}/candles"]["get"]["parameters"]["query"]
+	>["period"]
+>;
+
+const STOCK_STALE_TIME_MS = 30_000;

 function useStockSearch(query: string) {
 	return useAuthenticatedQuery({
@@ -12,7 +19,7 @@ function useStockSearch(query: string) {
 			params: { query: { query } },
 		}),
 		enabled: query.length >= 2,
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 }
 function stockQueryOptions(uid: string) {
@@ -20,7 +27,7 @@ function stockQueryOptions(uid: string) {
 		...apiQueryClient.queryOptions("get", "/api/v1/stocks/{uid}", {
 			params: { path: { uid } },
 		}),
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	};
 }

@@ -47,7 +54,7 @@ function useStock(identifier: string) {
 			params: { path: { ticker: identifier } },
 		}),
 		enabled: Boolean(identifier) && !isUid,
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 	return isUid ? byUid : byTicker;
 }
@@ -57,7 +64,7 @@ function useStockQuote(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 }
 function useStockCandles(uid: string, period: StockPeriod) {
@@ -66,7 +73,7 @@ function useStockCandles(uid: string, period: StockPeriod) {
 			params: { path: { uid }, query: { period } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 }
 function useStockPosition(uid: string) {
@@ -75,7 +82,7 @@ function useStockPosition(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 }
 function useStockCompany(uid: string) {
@@ -84,7 +91,7 @@ function useStockCompany(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 }
 function useStockDividends(uid: string) {
@@ -93,7 +100,7 @@ function useStockDividends(uid: string) {
 			params: { path: { uid } },
 		}),
 		enabled: Boolean(uid),
-		staleTime: 30_000,
+		staleTime: STOCK_STALE_TIME_MS,
 	});
 }

@@ -1,11 +1,17 @@
 import { z } from "zod";
 import { validationMessage } from "@/shared/i18n";

+const ASCII_SPACE = 32;
+const ASCII_DELETE = 127;
+const MAX_EMAIL_LENGTH = 254;
+const MIN_PASSWORD_BYTES = 12;
+const MAX_PASSWORD_BYTES = 72;
+
 function isEmailCharacterInvalid(character: string): boolean {
 	return (
 		/\s/.test(character) ||
-		character.charCodeAt(0) < 32 ||
-		character.charCodeAt(0) === 127
+		character.charCodeAt(0) < ASCII_SPACE ||
+		character.charCodeAt(0) === ASCII_DELETE
 	);
 }

@@ -13,21 +19,21 @@ const email = z
 	.string()
 	.trim()
 	.toLowerCase()
-	.max(254)
+	.max(MAX_EMAIL_LENGTH)
 	.refine(
 		(value) =>
 			value.split("@").length === 2 &&
 			value.split("@").every(Boolean) &&
 			!value.split("").some(isEmailCharacterInvalid),
-		validationMessage("auth.validation.invalidEmail"),
+		{ error: validationMessage("auth.validation.invalidEmail") },
 	);
 const password = z
 	.string()
 	.refine(
 		(value) =>
-			new TextEncoder().encode(value).length >= 12 &&
-			new TextEncoder().encode(value).length <= 72,
-		validationMessage("auth.validation.invalidPasswordLength"),
+			new TextEncoder().encode(value).length >= MIN_PASSWORD_BYTES &&
+			new TextEncoder().encode(value).length <= MAX_PASSWORD_BYTES,
+		{ error: validationMessage("auth.validation.invalidPasswordLength") },
 	);

 const loginSchema = z.object({
@@ -37,10 +43,10 @@ const loginSchema = z.object({
 });
 const registerSchema = loginSchema.refine(
 	(value) => value.password === value.passwordConfirmation,
-	(value) => ({
+	{
 		path: ["passwordConfirmation"],
-		...validationMessage("auth.validation.passwordsDoNotMatch")(value),
-	}),
+		error: validationMessage("auth.validation.passwordsDoNotMatch"),
+	},
 );

 type AuthFormValues = z.input<typeof loginSchema>;
@@ -14,6 +14,9 @@ import { LoadingSkeleton } from "@/shared/ui";
 import type { SectionState } from "../model/section";
 import classes from "./InstrumentDetails.module.css";

+const CHART_SKELETON_HEIGHT_PX = 280;
+const SECTION_SKELETON_HEIGHT_PX = 65;
+
 type InstrumentSectionProps = PropsWithChildren<{
 	title: string;
 	state: SectionState;
@@ -59,7 +62,13 @@ const InstrumentSection: FC<InstrumentSectionProps> = (props) => {
 					label={t("stock.loadingSection", { section: props.title })}
 				>
 					<Stack>
-						<Skeleton h={props.large ? 280 : 65} />
+						<Skeleton
+							h={
+								props.large
+									? CHART_SKELETON_HEIGHT_PX
+									: SECTION_SKELETON_HEIGHT_PX
+							}
+						/>
 						<Skeleton h={14} w="60%" />
 					</Stack>
 				</LoadingSkeleton>
@@ -55,7 +55,7 @@ describe("Upcoming event date filters", () => {
 			);
 			render(
 				<QueryClientProvider client={createTestQueryClient()}>
-					<MantineProvider>
+					<MantineProvider env="test">
 						<MemoryRouter
 							initialEntries={[
 								`/accounts/${accountId}/events?from=2099-02-01&to=2099-02-28`,
@@ -72,31 +72,37 @@ describe("Upcoming event date filters", () => {
 					</MantineProvider>
 				</QueryClientProvider>,
 			);
-			const from = await screen.findByLabelText("С");
-			const to = screen.getByLabelText("По");
-			expect(from).toHaveValue("01.02.2099");
-			expect(to).toHaveValue("28.02.2099");
+			const from = await screen.findByLabelText("Период");
+			expect(from).toHaveTextContent("01.02.2099 – 28.02.2099");
 			expect(screen.getByRole("button", { name: "Применить" })).toBeDisabled();
 			expect(searches).toEqual(["?from=2099-02-01&to=2099-02-28"]);
-			fireEvent.change(from, { target: { value: "10.02.2099" } });
-			fireEvent.blur(from);
+			fireEvent.click(from);
+			fireEvent.click(
+				await screen.findByRole("button", { name: /10 February 2099/i }),
+			);
+			fireEvent.click(
+				await screen.findByRole("button", { name: /28 February 2099/i }),
+			);
 			expect(searches).toHaveLength(1);
 			fireEvent.click(screen.getByRole("button", { name: "Применить" }));
 			await waitFor(() =>
 				expect(searches.at(-1)).toBe("?from=2099-02-10&to=2099-02-28"),
 			);
-			expect(await screen.findByLabelText("С")).toHaveValue("10.02.2099");
+			expect(await screen.findByLabelText("Период")).toHaveTextContent(
+				"10.02.2099 – 28.02.2099",
+			);
 			fireEvent.click(screen.getByRole("button", { name: "History back" }));
 			await waitFor(() =>
-				expect(screen.getByLabelText("С")).toHaveValue("01.02.2099"),
+				expect(screen.getByLabelText("Период")).toHaveTextContent(
+					"01.02.2099 – 28.02.2099",
+				),
 			);
 			expect(screen.getByLabelText("URL")).toHaveTextContent(
 				"?from=2099-02-01&to=2099-02-28",
 			);
 			fireEvent.click(screen.getByRole("button", { name: "Сбросить" }));
 			await waitFor(() => expect(searches.at(-1)).toBe(""));
-			expect(await screen.findByLabelText("С")).toHaveValue("");
-			expect(screen.getByLabelText("По")).toHaveValue("");
+			expect(await screen.findByLabelText("Период")).toHaveTextContent("");
 			expect(screen.getByRole("button", { name: "Применить" })).toBeDisabled();
 			expect(
 				screen.getByText("За выбранный период событий не найдено"),
@@ -7,22 +7,13 @@ import {
 	Text,
 	Title,
 } from "@mantine/core";
-import { DateInput } from "@mantine/dates";
-import dayjs from "dayjs";
-import customParseFormat from "dayjs/plugin/customParseFormat";
+import { DatePickerInput } from "@mantine/dates";
 import type { FC } from "react";
 import { useTranslation } from "react-i18next";
 import { BrokerageEventCard } from "@/entities/brokerage-event";
 import type { AccountEventsPageViewModel } from "../AccountEventsPage.vm";
 import { AccountEventsPageEmpty } from "./AccountEventsPageEmpty.view";

-dayjs.extend(customParseFormat);
-
-const parseDate = (value: string) => {
-	const date = dayjs(value, "DD.MM.YYYY", true);
-	return date.isValid() ? date.format("YYYY-MM-DD") : null;
-};
-
 type AccountEventsPageLoadedProps = Extract<
 	AccountEventsPageViewModel,
 	{ state: "loaded" }
@@ -46,25 +37,22 @@ const AccountEventsPageLoaded: FC<AccountEventsPageLoadedProps> = (props) => {
 			) : null}
 			<Text c="dimmed">{t("events.hint")}</Text>
 			<Group align="end">
-				<DateInput
-					label={t("ledger.from")}
-					value={props.draftFrom}
-					onChange={props.onDraftFromChange}
-					maxDate={props.draftTo ?? undefined}
+				<DatePickerInput
+					type="range"
+					allowSingleDateInRange
+					clearable
+					clearButtonProps={{ "aria-label": t("ledger.clearPeriod") }}
+					label={t("ledger.period")}
+					value={[props.draftFrom, props.draftTo]}
+					onChange={([from, to]) => {
+						props.onDraftFromChange(from);
+						props.onDraftToChange(to);
+					}}
 					valueFormat="DD.MM.YYYY"
-					dateParser={parseDate}
-					allowDeselect
-					popoverProps={{ middlewares: { shift: { crossAxis: true } } }}
-				/>
-				<DateInput
-					label={t("ledger.to")}
-					value={props.draftTo}
-					onChange={props.onDraftToChange}
-					minDate={props.draftFrom ?? undefined}
-					valueFormat="DD.MM.YYYY"
-					dateParser={parseDate}
-					allowDeselect
-					popoverProps={{ middlewares: { shift: { crossAxis: true } } }}
+					popoverProps={{
+						returnFocus: true,
+						middlewares: { shift: { crossAxis: true } },
+					}}
 				/>
 			</Group>
 			<Group>
@@ -3,6 +3,8 @@ import type { FC } from "react";
 import { useTranslation } from "react-i18next";
 import { LoadingSkeleton } from "@/shared/ui";

+const skeletonRowIds = ["first", "second", "third", "fourth"];
+
 const AccountEventsPageLoading: FC = () => {
 	const { t } = useTranslation();
 	return (
@@ -17,8 +19,8 @@ const AccountEventsPageLoading: FC = () => {
 				<Skeleton height={36} width={116} />
 				<Skeleton height={36} width={108} />
 			</Group>
-			{[0, 1, 2, 3].map((index) => (
-				<Skeleton key={index} height={82} radius="md" />
+			{skeletonRowIds.map((id) => (
+				<Skeleton key={id} height={82} radius="md" />
 			))}
 		</LoadingSkeleton>
 	);
@@ -5,7 +5,7 @@

 .fields {
 	display: grid;
-	grid-template-columns: repeat(2, minmax(0, 1fr));
+	grid-template-columns: minmax(0, 1fr);
 	gap: var(--mantine-spacing-sm);
 }

@@ -523,12 +523,10 @@ const LocationProbe: FC = () => {
 	);
 };

-function inputDate(label: string, value: string) {
-	const field = screen.getByLabelText(label);
-	fireEvent.focus(field);
-	fireEvent.input(field, { target: { value } });
-	fireEvent.blur(field);
-	return field;
+function selectPeriod() {
+	fireEvent.click(screen.getByLabelText("Период"));
+	fireEvent.click(screen.getByRole("button", { name: /^2 августа 2026$/i }));
+	fireEvent.click(screen.getByRole("button", { name: /^27 августа 2026$/i }));
 }

 function respondWithRequestedPeriod(requests: string[]) {
@@ -557,9 +555,10 @@ describe("income period and snapshot boundary", () => {
 		const requests: string[] = [];
 		respondWithRequestedPeriod(requests);
 		renderPage();
-		expect(await screen.findByLabelText("С")).toHaveValue("01.08.2026");
-		expect(screen.getByLabelText("По")).toHaveValue("27.08.2026");
-		inputDate("С", "02.08.2026");
+		expect(await screen.findByLabelText("Период")).toHaveTextContent(
+			"01.08.2026 – 27.08.2026",
+		);
+		selectPeriod();
 		expect(requests).toHaveLength(1);
 		expect(
 			screen.queryByText("2026-08-01 — 2026-08-27"),
@@ -573,66 +572,37 @@ describe("income period and snapshot boundary", () => {
 				.closest("form") as HTMLFormElement,
 		);
 		await waitFor(() => expect(requests).toHaveLength(2));
-		expect(await screen.findByLabelText("С")).toHaveValue("02.08.2026");
+		expect(await screen.findByLabelText("Период")).toHaveTextContent(
+			"02.08.2026 – 27.08.2026",
+		);
 		expect(screen.getByTestId("location")).toHaveTextContent(
 			"from=2026-08-02&to=2026-08-27",
 		);
 		fireEvent.click(screen.getByRole("button", { name: "Back" }));
 		await waitFor(() =>
-			expect(screen.getByLabelText("С")).toHaveValue("01.08.2026"),
+			expect(screen.getByLabelText("Период")).toHaveTextContent(
+				"01.08.2026 – 27.08.2026",
+			),
 		);
 	});

-	it.each([
-		["С", "", "Введите существующую дату"],
-		["С", "31.02.2026", "Введите существующую дату"],
-		["По", "29.02.2026", "Введите существующую дату"],
-		["По", "2026-08-02", "Введите существующую дату"],
-		["С", "01.01.2099", "Дата не может быть позже"],
-		["По", "01.01.2099", "Дата не может быть позже"],
-		["По", "31.07.2026", "Укажите корректный период"],
-	])(
-		"rejects visible %s=%s without replacing data or URL",
-		async (label, value, error) => {
-			const requests: string[] = [];
-			respondWithRequestedPeriod(requests);
-			renderPage();
-			await screen.findByLabelText("С");
-			const field = inputDate(label, value);
-			fireEvent.click(screen.getByRole("button", { name: "Применить" }));
-			expect(await screen.findByText(new RegExp(error))).toBeInTheDocument();
-			expect(field).toHaveValue(value);
-			expect(field).toHaveAttribute("aria-invalid", "true");
-			await waitFor(() => expect(field).toHaveFocus());
-			expect(requests).toHaveLength(1);
-			expect(screen.getByTestId("location")).toHaveTextContent(
-				"from=2026-08-01&to=2026-08-27",
-			);
-			expect(
-				screen.queryByText("2026-08-01 — 2026-08-27"),
-			).not.toBeInTheDocument();
-			expect(screen.getByRole("region", { name: "Выплаты" })).toBeVisible();
-		},
-	);
-
-	it("replaces invalid raw text with a calendar choice and closes the calendar with Escape", async () => {
-		respondWithRequestedPeriod([]);
+	it("rejects an incomplete range without replacing the URL and allows a single day", async () => {
+		const requests: string[] = [];
+		respondWithRequestedPeriod(requests);
 		renderPage();
-		const from = await screen.findByLabelText("С");
-		act(() => from.focus());
-		fireEvent.input(from, { target: { value: "invalid" } });
-		// The selected month stays available even when the visible draft is invalid.
-		const day = await screen.findByRole("button", {
-			name: /^2 августа 2026$/i,
-		});
-		fireEvent.click(day);
-		expect(from).toHaveValue("02.08.2026");
-		act(() => from.focus());
-		fireEvent.keyDown(from, { key: "Escape" });
+		const period = await screen.findByLabelText("Период");
+		fireEvent.click(period);
+		fireEvent.click(screen.getByRole("button", { name: /^2 августа 2026$/i }));
+		fireEvent.keyDown(period, { key: "Escape" });
+		fireEvent.click(screen.getByRole("button", { name: "Применить" }));
+		expect(await screen.findByText(/Введите существующую дату/)).toBeVisible();
+		expect(requests).toHaveLength(1);
+		if (period.getAttribute("aria-expanded") !== "true")
+			fireEvent.click(period);
+		fireEvent.click(screen.getByRole("button", { name: /^2 августа 2026$/i }));
+		fireEvent.click(screen.getByRole("button", { name: "Применить" }));
 		await waitFor(() =>
-			expect(
-				screen.queryByRole("button", { name: /^2 августа 2026$/i }),
-			).not.toBeInTheDocument(),
+			expect(requests.at(-1)).toBe("?from=2026-08-02&to=2026-08-02"),
 		);
 	});

@@ -642,19 +612,23 @@ describe("income period and snapshot boundary", () => {
 		const requests: string[] = [];
 		respondWithRequestedPeriod(requests);
 		renderPage("");
-		expect(await screen.findByLabelText("С")).toHaveValue("01.09.2026");
-		expect(screen.getByLabelText("По")).toHaveValue("01.09.2026");
-		inputDate("С", "wrong");
+		expect(await screen.findByLabelText("Период")).toHaveTextContent(
+			"01.09.2026 – 01.09.2026",
+		);
+		fireEvent.click(screen.getByLabelText("Период"));
+		fireEvent.click(screen.getByRole("button", { name: /^1 сентября 2026$/i }));
+		fireEvent.keyDown(screen.getByLabelText("Период"), { key: "Escape" });
 		fireEvent.click(screen.getByRole("button", { name: "Применить" }));
 		await screen.findByText(/Введите существующую дату/);
 		fireEvent.click(screen.getByRole("button", { name: "Сбросить" }));
 		await waitFor(() =>
-			expect(screen.getByLabelText("С")).toHaveValue("01.09.2026"),
+			expect(screen.getByLabelText("Период")).toHaveTextContent(
+				"01.09.2026 – 01.09.2026",
+			),
 		);
 		expect(
 			screen.queryByText(/Введите существующую дату/),
 		).not.toBeInTheDocument();
-		expect(screen.getByLabelText("По")).toHaveValue("01.09.2026");
 		expect(screen.getByTestId("location")).toHaveTextContent(
 			"from=2026-09-01&to=2026-09-01",
 		);
@@ -664,8 +638,8 @@ describe("income period and snapshot boundary", () => {
 	it("keeps valid data and draft during refetch, warns on failure and retries", async () => {
 		respondWithRequestedPeriod([]);
 		const { queryClient } = renderPage();
-		await screen.findByLabelText("С");
-		inputDate("С", "02.08.2026");
+		await screen.findByLabelText("Период");
+		selectPeriod();
 		let release!: () => void;
 		const pending = new Promise<void>((resolve) => {
 			release = resolve;
@@ -686,7 +660,9 @@ describe("income period and snapshot boundary", () => {
 			await screen.findByRole("status", { name: "Обновляем пассивный доход" }),
 		).toBeInTheDocument();
 		expect(screen.getByRole("region", { name: "Выплаты" })).toBeVisible();
-		expect(screen.getByLabelText("С")).toHaveValue("02.08.2026");
+		expect(screen.getByLabelText("Период")).toHaveTextContent(
+			"02.08.2026 – 27.08.2026",
+		);
 		release();
 		expect(
 			await screen.findByText(/Показан последний загруженный результат/),
@@ -699,13 +675,15 @@ describe("income period and snapshot boundary", () => {
 				screen.queryByText(/Показан последний загруженный результат/),
 			).not.toBeInTheDocument(),
 		);
-		expect(screen.getByLabelText("С")).toHaveValue("02.08.2026");
+		expect(screen.getByLabelText("Период")).toHaveTextContent(
+			"02.08.2026 – 27.08.2026",
+		);
 	});

 	it("shows busy skeleton for a new uncached period without relabeling the previous result", async () => {
 		respondWithRequestedPeriod([]);
 		renderPage();
-		await screen.findByLabelText("С");
+		await screen.findByLabelText("Период");
 		let release!: () => void;
 		const pending = new Promise<void>((resolve) => {
 			release = resolve;
@@ -722,7 +700,7 @@ describe("income period and snapshot boundary", () => {
 				},
 			),
 		);
-		inputDate("С", "02.08.2026");
+		selectPeriod();
 		fireEvent.click(screen.getByRole("button", { name: "Применить" }));
 		expect(
 			await screen.findByRole("status", { name: "Загрузка" }),
@@ -734,7 +712,9 @@ describe("income period and snapshot boundary", () => {
 			screen.queryByText("2026-08-02 — 2026-08-27"),
 		).not.toBeInTheDocument();
 		release();
-		expect(await screen.findByLabelText("С")).toHaveValue("02.08.2026");
+		expect(await screen.findByLabelText("Период")).toHaveTextContent(
+			"02.08.2026 – 27.08.2026",
+		);
 	});

 	it("shows one flat payment card per entry in server order without currency or instrument groups", () => {
@@ -7,6 +7,8 @@ import { type IncomeAnalytics, useIncomeAnalytics } from "@/entities/income";
 import { validationMessage } from "@/shared/i18n";
 import { formatDate } from "@/shared/lib";

+const ISO_MONTH_LENGTH = 7;
+
 type IncomePeriod = { from: string; to: string };
 type IncomeForm = IncomePeriod;

@@ -42,14 +44,16 @@ type AccountIncomePageViewModel =
 const datePattern = /^\d{4}-\d{2}-\d{2}$/;
 const draftDate = z
 	.string()
+	.refine((value) => parseDraftDate(value) !== null, {
+		error: validationMessage("income.validation.date"),
+	})
 	.refine(
-		(value) => parseDraftDate(value) !== null,
-		validationMessage("income.validation.date"),
-	)
-	.refine((value) => {
-		const date = parseDraftDate(value);
-		return !date || date <= moscowDate(new Date());
-	}, validationMessage("income.validation.future"));
+		(value) => {
+			const date = parseDraftDate(value);
+			return !date || date <= moscowDate(new Date());
+		},
+		{ error: validationMessage("income.validation.future") },
+	);
 const incomeFormSchema = z.object({ from: draftDate, to: draftDate }).refine(
 	({ from, to }) => {
 		const start = parseDraftDate(from);
@@ -99,7 +103,7 @@ const useAccountIncomePageViewModel = (
 	const onReset = () => {
 		const next = defaultPeriod();
 		form.reset(draftPeriod(next));
-		// DateInput retains raw text while its calendar is open; reset that UI state too.
+		// Reset the open calendar along with the form.
 		setFormRevision((revision) => revision + 1);
 		setSearchParams(next, { replace: true });
 	};
@@ -143,7 +147,7 @@ function draftPeriod(period: IncomePeriod): IncomeForm {

 function defaultPeriod(): IncomePeriod {
 	const today = moscowDate(new Date());
-	return { from: `${today.slice(0, 7)}-01`, to: today };
+	return { from: `${today.slice(0, ISO_MONTH_LENGTH)}-01`, to: today };
 }

 function validPeriod(period: IncomePeriod): period is IncomePeriod {
@@ -1,7 +1,7 @@
 import { Button, Paper, Stack, Text } from "@mantine/core";
-import { DateInput } from "@mantine/dates";
+import { DatePickerInput } from "@mantine/dates";
 import type { FC, FormEventHandler } from "react";
-import { Controller, useFormContext, useWatch } from "react-hook-form";
+import { useController, useFormContext, useWatch } from "react-hook-form";
 import { useTranslation } from "react-i18next";
 import classes from "../AccountIncomePage.module.css";
 import {
@@ -22,6 +22,8 @@ const IncomePeriodForm: FC<IncomePeriodFormProps> = (props) => {
 		control,
 		formState: { isSubmitting },
 	} = useFormContext<IncomeForm>();
+	const fromField = useController({ control, name: "from" });
+	const toField = useController({ control, name: "to" });
 	const [from, to] = useWatch({ control, name: ["from", "to"] });
 	const today = moscowDate(new Date());
 	const start = parseDraftDate(from);
@@ -37,39 +39,34 @@ const IncomePeriodForm: FC<IncomePeriodFormProps> = (props) => {
 			<Stack gap="sm">
 				<Text fw={700}>{t("income.period")}</Text>
 				<div className={classes.fields}>
-					{(["from", "to"] as const).map((name) => (
-						<Controller
-							key={name}
-							name={name}
-							control={control}
-							render={({ field, fieldState }) => (
-								<DateInput
-									ref={field.ref}
-									label={t(`income.${name}`)}
-									placeholder={t("income.datePlaceholder")}
-									valueFormat="DD.MM.YYYY"
-									value={parseDraftDate(field.value)}
-									dateParser={parseDraftDate}
-									fixOnBlur={false}
-									popoverProps={{ middlewares: { shift: { crossAxis: true } } }}
-									onInput={(event) => field.onChange(event.currentTarget.value)}
-									onChange={(value) =>
-										field.onChange(value ? formatDraftDate(value) : "")
-									}
-									onBlur={(event) => {
-										field.onChange(event.currentTarget.value);
-										field.onBlur();
-									}}
-									minDate={
-										name === "to" && start && start <= today ? start : undefined
-									}
-									maxDate={name === "from" && end && end <= today ? end : today}
-									error={fieldState.error?.message}
-									disabled={isSubmitting}
-								/>
-							)}
-						/>
-					))}
+					<DatePickerInput
+						type="range"
+						allowSingleDateInRange
+						clearable
+						clearButtonProps={{ "aria-label": t("ledger.clearPeriod") }}
+						ref={fromField.field.ref}
+						label={t("income.period")}
+						valueFormat="DD.MM.YYYY"
+						value={[start, end]}
+						onChange={([from, to]) => {
+							fromField.field.onChange(from ? formatDraftDate(from) : "");
+							toField.field.onChange(to ? formatDraftDate(to) : "");
+						}}
+						onBlur={() => {
+							fromField.field.onBlur();
+							toField.field.onBlur();
+						}}
+						maxDate={today}
+						error={
+							fromField.fieldState.error?.message ??
+							toField.fieldState.error?.message
+						}
+						disabled={isSubmitting}
+						popoverProps={{
+							returnFocus: true,
+							middlewares: { shift: { crossAxis: true } },
+						}}
+					/>
 				</div>
 				<div className={classes.actions}>
 					<Button type="submit" loading={isSubmitting}>
@@ -7,7 +7,7 @@ import {
 	Stack,
 	Title,
 } from "@mantine/core";
-import { DateInput } from "@mantine/dates";
+import { DatePickerInput } from "@mantine/dates";
 import type { FC } from "react";
 import { useTranslation } from "react-i18next";
 import {
@@ -25,21 +25,6 @@ type AccountOperationsPageLoadedProps = Extract<

 const operationCategorySet = new Set<string>(operationCategories);

-function toDateValue(value: string | null): Date | null {
-	if (!value) return null;
-	const [year, month, day] = value.split("-").map(Number);
-	return new Date(year, month - 1, day);
-}
-
-function fromDateValue(value: Date | string | null): string | null {
-	if (!value) return null;
-	if (typeof value === "string") return value;
-	const year = value.getFullYear();
-	const month = String(value.getMonth() + 1).padStart(2, "0");
-	const day = String(value.getDate()).padStart(2, "0");
-	return `${year}-${month}-${day}`;
-}
-
 function fromMultiSelectValue(value: string[]) {
 	return value.filter((item): item is OperationCategory =>
 		operationCategorySet.has(item),
@@ -87,19 +72,22 @@ const AccountOperationsPageLoaded: FC<AccountOperationsPageLoadedProps> = (
 				</Alert>
 			) : null}
 			<Group align="end">
-				<DateInput
-					label={t("ledger.from")}
-					value={toDateValue(draftFrom)}
-					onChange={(value) => onDraftFromChange(fromDateValue(value))}
-					maxDate={toDateValue(draftTo) ?? undefined}
-					valueFormat="DD.MM.YYYY"
-				/>
-				<DateInput
-					label={t("ledger.to")}
-					value={toDateValue(draftTo)}
-					onChange={(value) => onDraftToChange(fromDateValue(value))}
-					minDate={toDateValue(draftFrom) ?? undefined}
+				<DatePickerInput
+					type="range"
+					allowSingleDateInRange
+					clearable
+					clearButtonProps={{ "aria-label": t("ledger.clearPeriod") }}
+					label={t("ledger.period")}
+					value={[draftFrom, draftTo]}
+					onChange={([from, to]) => {
+						onDraftFromChange(from);
+						onDraftToChange(to);
+					}}
 					valueFormat="DD.MM.YYYY"
+					popoverProps={{
+						returnFocus: true,
+						middlewares: { shift: { crossAxis: true } },
+					}}
 				/>
 			</Group>
 			<MultiSelect
@@ -111,6 +99,7 @@ const AccountOperationsPageLoaded: FC<AccountOperationsPageLoadedProps> = (
 					onDraftCategoriesChange(fromMultiSelectValue(value))
 				}
 				clearable
+				clearButtonProps={{ "aria-label": t("ledger.clearPeriod") }}
 			/>
 			<Group>
 				<Button onClick={onApply} disabled={!canApply}>
@@ -3,6 +3,8 @@ import type { FC } from "react";
 import { useTranslation } from "react-i18next";
 import { LoadingSkeleton } from "@/shared/ui";

+const skeletonRowIds = ["first", "second", "third", "fourth"];
+
 const AccountOperationsPageLoading: FC = () => {
 	const { t } = useTranslation();

@@ -19,8 +21,8 @@ const AccountOperationsPageLoading: FC = () => {
 				<Skeleton height={36} width={110} radius="sm" />
 			</Group>
 			<Stack gap="xs">
-				{[0, 1, 2, 3].map((index) => (
-					<Skeleton key={index} height={64} radius="md" />
+				{skeletonRowIds.map((id) => (
+					<Skeleton key={id} height={64} radius="md" />
 				))}
 			</Stack>
 		</LoadingSkeleton>
@@ -17,6 +17,8 @@ import { useStocks } from "@/entities/stock";
 import { apiErrorCode } from "@/shared/api";
 import { formatMoney, instrumentLogoUrl } from "@/shared/lib";

+const RECENT_EVENTS_LIMIT = 5;
+
 type PositionSectionKind = "stocks" | "bonds" | "other";
 type AccountPageReturnTone = "positive" | "negative";

@@ -176,7 +178,7 @@ function toRecentEvents(
 	const to = `/accounts/${accountId}/events`;
 	if (events.isLoading) return { state: "loading", to };
 	if (events.isError) return { state: "error", to };
-	const items = events.data?.events.slice(0, 5) ?? [];
+	const items = events.data?.events.slice(0, RECENT_EVENTS_LIMIT) ?? [];
 	if (!items.length) return { state: "empty", to };
 	return { state: "loaded", to, items };
 }
@@ -4,6 +4,8 @@ import type { Portfolio } from "@/entities/portfolio";
 import { formatMoney } from "@/shared/lib";
 import { PortfolioStructureView } from "./PortfolioStructure.view";

+const MIN_VISIBLE_SHARE_PERCENT = 0.01;
+
 // A cached snapshot or an older running server can predate this response field.
 type PortfolioStructureProps = { structure?: Portfolio["structure"] | null };

@@ -45,7 +47,7 @@ const PortfolioStructure: FC<PortfolioStructureProps> = (props) => {
 					share:
 						percentage === null
 							? t("portfolio.structure.shareUnavailable")
-							: percentage > 0 && percentage < 0.01
+							: percentage > 0 && percentage < MIN_VISIBLE_SHARE_PERCENT
 								? t("portfolio.structure.smallShare")
 								: `${new Intl.NumberFormat("ru-RU", { maximumFractionDigits: 2 }).format(percentage)} %`,
 					value: percentage ?? 0,
@@ -4,10 +4,12 @@ import { useBondSearch } from "@/entities/bond";
 import { apiErrorCode } from "@/shared/api";
 import { instrumentLogoUrl } from "@/shared/lib";

+const SEARCH_DEBOUNCE_MS = 300;
+
 function useBondsPageVm() {
 	const [params, setParams] = useSearchParams();
 	const query = params.get("q") ?? "";
-	const [debounced] = useDebouncedValue(query.trim(), 300);
+	const [debounced] = useDebouncedValue(query.trim(), SEARCH_DEBOUNCE_MS);
 	const result = useBondSearch(debounced);
 	const waiting = query.trim() !== debounced;
 	return {
@@ -1,3 +1,30 @@
+.card {
+	position: relative;
+	width: 100%;
+	max-width: 28rem;
+}
+.cardActions {
+	position: absolute;
+	top: 4.5rem;
+	right: clamp(1.1rem, 3vw, 1.6rem);
+	padding: 4px;
+	border: 1px solid var(--mantine-color-gray-3);
+	border-radius: var(--mantine-radius-lg);
+	background: var(--mantine-color-white);
+	box-shadow: 0 3px 12px #0000001a;
+}
+@media (hover: hover) and (pointer: fine) {
+	.cardActions {
+		opacity: 0;
+		pointer-events: none;
+	}
+	.card:hover .cardActions,
+	.card:focus-within .cardActions {
+		opacity: 1;
+		pointer-events: auto;
+	}
+}
+
 .wrap {
 	overflow-wrap: anywhere;
 	min-width: 0;
@@ -21,7 +48,21 @@
 .operations[data-pending] {
 	opacity: 0.55;
 }
+@media (pointer: coarse) {
+	.cardActions button {
+		min-width: 36px;
+		min-height: 36px;
+	}
+}
@media (prefers-reduced-motion: no-preference) {
+	.cardActions {
+		transition: opacity 180ms ease;
+	}
+	.page button {
+		transition:
+			background-color 180ms ease,
+			color 180ms ease;
+	}
 	.operations {
 		animation: operations-appear 200ms ease-out;
 		transition: opacity 150ms ease;
@@ -4,60 +4,26 @@ import {
 	Button,
 	Group,
 	Pagination,
-	Paper,
 	Select,
 	Skeleton,
 	Stack,
 	Text,
 	Title,
 } from "@mantine/core";
-import { DatePickerInput } from "@mantine/dates";
-import { type FC, useLayoutEffect, useRef, useState } from "react";
+import { type FC, useLayoutEffect, useRef } from "react";
 import { useTranslation } from "react-i18next";
 import { Link } from "react-router";
 import {
 	BankCardFace,
 	BankFeedback,
 	BankOperationIcon,
+	BankPeriodPicker,
 	BankSummaryView,
 } from "@/entities/bank-card";
 import { EntryCard, LoadingSkeleton, StateView } from "@/shared/ui";
 import classes from "./CardPage.module.css";
 import type { CardPageVm } from "./CardPage.vm";

-type PeriodPickerProps = {
-	period: CardPageVm["period"];
-	onChange: CardPageVm["setPeriod"];
-};
-const PeriodPicker: FC<PeriodPickerProps> = (props) => {
-	const { period, onChange } = props;
-	const { t } = useTranslation();
-	const scope = `${period.from}-${period.to}`;
-	const [draft, setDraft] = useState<{
-		scope: string;
-		value: [string | null, string | null];
-	}>();
-	const value: [string | null, string | null] =
-		draft?.scope === scope ? draft.value : [period.from, period.to];
-	return (
-		<DatePickerInput
-			type="range"
-			allowSingleDateInRange
-			label={t("bank.period")}
-			valueFormat="DD.MM.YYYY"
-			value={value}
-			onChange={(next) => {
-				setDraft({ scope, value: next });
-				onChange(next);
-			}}
-			popoverProps={{
-				returnFocus: true,
-				middlewares: { shift: { crossAxis: true } },
-			}}
-		/>
-	);
-};
-
 type CardPageViewProps = { vm: CardPageVm };
 const CardPageView: FC<CardPageViewProps> = (props) => {
 	const { vm } = props;
@@ -124,41 +90,76 @@ const CardPageView: FC<CardPageViewProps> = (props) => {
 		);
 	}
 	return (
-		<Stack gap="lg">
-			<Paper p="md" withBorder>
-				<Stack>
-					<Title order={1} className={classes.wrap}>
-						{card.name}
-					</Title>
+		<Stack gap="lg" className={classes.page}>
+			<Stack>
+				<Title order={1} className={classes.wrap}>
+					{card.name}
+				</Title>
+				<div className={classes.card}>
 					<BankCardFace card={card} />
-					<Text c="dimmed">{t("bank.manualBalance")}</Text>
-					<Group>
-						<Button
-							disabled={Boolean(card.archivedAt) || !vm.cards.data}
-							onClick={() => vm.setOperation("new")}
+					<Group gap={4} wrap="nowrap" className={classes.cardActions}>
+						<ActionIcon
+							variant="subtle"
+							size="md"
+							radius="md"
+							aria-label={t("bank.editCard")}
+							title={t("bank.editCard")}
+							onClick={() => vm.setEditingCard(true)}
 						>
-							{t("bank.addOperation")}
-						</Button>
-						<Button variant="default" onClick={() => vm.setEditingCard(true)}>
-							{t("bank.editCard")}
-						</Button>
-						<Button
-							variant="default"
+							<svg
+								width="18"
+								height="18"
+								viewBox="0 0 24 24"
+								fill="none"
+								stroke="currentColor"
+								strokeWidth="1.5"
+								strokeLinecap="round"
+								strokeLinejoin="round"
+								aria-hidden="true"
+							>
+								<path d="m16 3 5 5-12 12-6 1 1-6L16 3Z M13 6l5 5" />
+							</svg>
+						</ActionIcon>
+						<ActionIcon
+							variant="subtle"
+							size="md"
+							radius="md"
+							color="red"
+							aria-label={t(card.archivedAt ? "bank.restore" : "bank.archive")}
+							title={t(card.archivedAt ? "bank.restore" : "bank.archive")}
 							loading={vm.archivePending}
 							onClick={() => void vm.toggleArchive()}
 						>
-							{t(card.archivedAt ? "bank.restore" : "bank.archive")}
-						</Button>
+							<svg
+								width="18"
+								height="18"
+								viewBox="0 0 24 24"
+								fill="none"
+								stroke="currentColor"
+								strokeWidth="1.5"
+								strokeLinecap="round"
+								strokeLinejoin="round"
+								aria-hidden="true"
+							>
+								<path
+									d={
+										card.archivedAt
+											? "M3 3h18v4H3z M5 7v14h14V7 M12 17V10m-3 3 3-3 3 3"
+											: "M3 6h18 M9 6V3h6v3 M5 6l1 15h12l1-15 M10 10v7 M14 10v7"
+									}
+								/>
+							</svg>
+						</ActionIcon>
 					</Group>
-					{vm.archiveError ? (
-						<BankFeedback
-							error={vm.archiveError}
-							retry={() => void vm.card.refetch()}
-						/>
-					) : null}
-					{card.archivedAt && <Text>{t("bank.archiveHint")}</Text>}
-				</Stack>
-			</Paper>
+				</div>
+				{vm.archiveError ? (
+					<BankFeedback
+						error={vm.archiveError}
+						retry={() => void vm.card.refetch()}
+					/>
+				) : null}
+				{card.archivedAt && <Text>{t("bank.archiveHint")}</Text>}
+			</Stack>
 			{vm.card.isError && (
 				<Group role="alert">
 					<Text>{t("bank.refreshError")}</Text>
@@ -176,7 +177,7 @@ const CardPageView: FC<CardPageViewProps> = (props) => {
 					retry={() => void vm.cards.refetch()}
 				/>
 			)}
-			<PeriodPicker period={vm.period} onChange={vm.setPeriod} />
+			<BankPeriodPicker period={vm.period} onChange={vm.setPeriod} />
 			<BankSummaryView
 				data={vm.summary.data}
 				loading={vm.summary.isLoading}
@@ -185,7 +186,30 @@ const CardPageView: FC<CardPageViewProps> = (props) => {
 				retry={() => void vm.summary.refetch()}
 			/>
 			<Group justify="space-between" align="end">
-				<Title order={2}>{t("bank.operations")}</Title>
+				<Group gap="xs">
+					<Title order={2}>{t("bank.operations")}</Title>
+					<ActionIcon
+						variant="subtle"
+						size="lg"
+						aria-label={t("bank.addOperation")}
+						title={t("bank.addOperation")}
+						disabled={Boolean(card.archivedAt) || !vm.cards.data}
+						onClick={() => vm.setOperation("new")}
+					>
+						<svg
+							width="20"
+							height="20"
+							viewBox="0 0 24 24"
+							fill="none"
+							stroke="currentColor"
+							strokeWidth="1.5"
+							strokeLinecap="round"
+							aria-hidden="true"
+						>
+							<path d="M12 5v14 M5 12h14" />
+						</svg>
+					</ActionIcon>
+				</Group>
 				<Select
 					label={t("bank.pageSize")}
 					value={vm.pageSize}
@@ -1,11 +1,9 @@
-import dayjs from "dayjs";
 import { useState } from "react";
 import { useTranslation } from "react-i18next";
 import { useParams, useSearchParams } from "react-router";
-import { z } from "zod";
 import {
 	type BankOperation,
-	bankMonth,
+	bankPeriod,
 	useBankCard,
 	useBankCards,
 	useBankMutations,
@@ -15,29 +13,13 @@ import {
 import { apiErrorCode } from "@/shared/api";
 import { formatDate, formatMoney } from "@/shared/lib";

-const calendarDate = z.string().date();
-
 const PAGE_SIZES = ["5", "10", "20", "50", "100", "all"];

 function useCardPageVm() {
 	const { cardId } = useParams();
 	const [params, setParams] = useSearchParams();
 	const { t } = useTranslation();
-	const month = bankMonth(params.get("month"));
-	const from = params.get("from");
-	const to = params.get("to");
-	const period =
-		from &&
-		to &&
-		calendarDate.safeParse(from).success &&
-		calendarDate.safeParse(to).success &&
-		from >= "0001-01-01" &&
-		from <= to
-			? { from, to }
-			: {
-					from: `${month}-01`,
-					to: dayjs(`${month}-01`).endOf("month").format("YYYY-MM-DD"),
-				};
+	const period = bankPeriod(params);
 	const requestedSize = params.get("limit") ?? "10";
 	const pageSize = PAGE_SIZES.includes(requestedSize) ? requestedSize : "10";
 	const rawPage = Number(params.get("page") ?? 1);
@@ -13,6 +13,7 @@ import { formatDate, formatMoney } from "@/shared/lib";
 type DeleteOperationProps = { operation: BankOperation; onClose: () => void };
 const DeleteOperation: FC<DeleteOperationProps> = (props) => {
 	useBankFormFocus();
+	const [opened, setOpened] = useState(true);
 	const { t } = useTranslation();
 	const [record, setRecord] = useState(props.operation);
 	const [latest, setLatest] = useState<BankOperation>();
@@ -20,11 +21,14 @@ const DeleteOperation: FC<DeleteOperationProps> = (props) => {
 	const query = useBankOperation(record.id);
 	const { deleteOperation } = useBankMutations();
 	const pending =
-		deleteOperation.isPending || (query.isFetching && Boolean(error));
+		!opened ||
+		deleteOperation.isPending ||
+		(query.isFetching && Boolean(error));
 	return (
 		<Modal
-			opened
-			onClose={() => !pending && props.onClose()}
+			opened={opened}
+			onExitTransitionEnd={props.onClose}
+			onClose={() => !pending && setOpened(false)}
 			title={t("bank.deleteTitle")}
 			closeOnEscape={!pending}
 			closeOnClickOutside={!pending}
@@ -91,7 +95,7 @@ const DeleteOperation: FC<DeleteOperationProps> = (props) => {
 									id: record.id,
 									version: record.version,
 								});
-								props.onClose();
+								setOpened(false);
 							} catch (failure) {
 								setError(failure);
 							}
@@ -99,7 +103,11 @@ const DeleteOperation: FC<DeleteOperationProps> = (props) => {
 					>
 						{t("bank.delete")}
 					</Button>
-					<Button variant="default" disabled={pending} onClick={props.onClose}>
+					<Button
+						variant="default"
+						disabled={pending}
+						onClick={() => setOpened(false)}
+					>
 						{t("bank.cancel")}
 					</Button>
 				</Group>
@@ -26,6 +26,8 @@ import classes from "./OperationForm.module.css";
 import type { OperationValues } from "./OperationForm.types";
 import { OperationFields, RefundFields } from "./OperationForm.view";

+const MAX_DESCRIPTION_LENGTH = 500;
+
 const operationSchema = z.object({
 	kind: z.enum(["expense", "topup", "transfer", "refund"]),
 	cardId: z.string(),
@@ -36,7 +38,10 @@ const operationSchema = z.object({
 	date: bankDateSchema,
 	description: z
 		.string()
-		.max(500, validationMessage("bank.validation.description")(undefined)),
+		.max(
+			MAX_DESCRIPTION_LENGTH,
+			validationMessage("bank.validation.description")(undefined),
+		),
 });

 type OperationFormProps = {
@@ -47,6 +52,7 @@ type OperationFormProps = {
 };
 const OperationForm: FC<OperationFormProps> = (props) => {
 	useBankFormFocus();
+	const [opened, setOpened] = useState(true);
 	const { t } = useTranslation();
 	const [categoriesOpen, setCategoriesOpen] = useState(false);
 	const [version, setVersion] = useState(props.operation?.version ?? 1);
@@ -164,15 +170,16 @@ const OperationForm: FC<OperationFormProps> = (props) => {
 		{ page: sourcePage },
 	);
 	const source = methods.watch("cardId");
-	const pending = methods.formState.isSubmitting;
+	const pending = !opened || methods.formState.isSubmitting;
 	const options = props.cards
 		.filter((c) => !c.archivedAt)
 		.map((c) => ({ value: c.id, label: c.name }));
 	return (
 		<>
 			<Modal
-				opened
-				onClose={() => !pending && !categoriesOpen && props.onClose()}
+				opened={opened}
+				onExitTransitionEnd={props.onClose}
+				onClose={() => !pending && !categoriesOpen && setOpened(false)}
 				title={t(props.operation ? "bank.editOperation" : "bank.addOperation")}
 				closeOnEscape={!pending && !categoriesOpen}
 				closeOnClickOutside={!pending && !categoriesOpen}
@@ -217,7 +224,7 @@ const OperationForm: FC<OperationFormProps> = (props) => {
 										id: intent,
 										...body,
 									});
-								props.onClose();
+								setOpened(false);
 							} catch (failure) {
 								setError(failure);
 							}
@@ -392,7 +399,7 @@ const OperationForm: FC<OperationFormProps> = (props) => {
 									>
 										{t("bank.save")}
 									</Button>
-									<Button variant="default" onClick={props.onClose}>
+									<Button variant="default" onClick={() => setOpened(false)}>
 										{t("bank.cancel")}
 									</Button>
 								</Group>
@@ -42,7 +42,7 @@ function renderCards(fail = false, categoryFail = false) {
 	);
 	return render(
 		<QueryClientProvider client={createTestQueryClient()}>
-			<MantineProvider>
+			<MantineProvider env="test">
 				<MemoryRouter initialEntries={["/cards?month=2026-09"]}>
 					<CardsPage />
 				</MemoryRouter>
@@ -138,10 +138,42 @@ describe("CardsPage", () => {
 		fireEvent.click(screen.getByLabelText("Показать архив"));
 		await screen.findByText("Запасная");
 		expect(requests).toContain("?includeArchived=true");
-		expect(screen.getByLabelText("Месяц")).toHaveTextContent("September 2026");
+		expect(screen.getByLabelText("Период")).toHaveTextContent(
+			"01.09.2026 – 30.09.2026",
+		);
 		expect(screen.getByRole("link", { name: /Запасная/ })).toHaveAttribute(
 			"href",
-			"/cards/demo?month=2026-09",
+			"/cards/demo?from=2026-09-01&to=2026-09-30",
+		);
+	});
+	it("applies a completed custom period to the summary", async () => {
+		renderCards();
+		await screen.findByText("За этот период операций по расходам нет.");
+		await screen.findByRole("heading", { name: "Добавьте первую карту" });
+		const requests: string[] = [];
+		server.use(
+			http.get("*/api/v1/bank-cards/summary", ({ request }) => {
+				requests.push(new URL(request.url).search);
+				return HttpResponse.json({
+					cardId: null,
+					expenses: money("0"),
+					refunds: money("0"),
+					net: money("0"),
+					categories: [],
+				});
+			}),
+		);
+		fireEvent.click(screen.getByLabelText("Период"));
+		fireEvent.click(
+			await screen.findByRole("button", { name: "10 September 2026" }),
+		);
+		expect(requests).toHaveLength(0);
+
+		fireEvent.click(
+			await screen.findByRole("button", { name: "20 September 2026" }),
+		);
+		await waitFor(() =>
+			expect(requests.at(-1)).toBe("?from=2026-09-10&to=2026-09-20"),
 		);
 	});
 	it("shows retry after failure instead of presenting an empty list", async () => {
@@ -1,4 +1,5 @@
 import {
+	ActionIcon,
 	Button,
 	Group,
 	Paper,
@@ -9,13 +10,13 @@ import {
 	Text,
 	Title,
 } from "@mantine/core";
-import { MonthPickerInput } from "@mantine/dates";
 import type { FC } from "react";
 import { useTranslation } from "react-i18next";
 import { Link } from "react-router";
 import {
 	BankCardFace,
 	BankFeedback,
+	BankPeriodPicker,
 	BankSummaryView,
 } from "@/entities/bank-card";
 import { LoadingSkeleton, StateView } from "@/shared/ui";
@@ -28,11 +29,29 @@ const CardsPageView: FC<CardsPageViewProps> = (props) => {
 	const { t } = useTranslation();
 	return (
 		<Stack gap="lg">
-			<Group justify="space-between">
+			<Group gap="sm">
 				<Title order={1}>{t("bank.title")}</Title>
-				<Button onClick={() => vm.setAdding(true)}>{t("bank.addCard")}</Button>
+				<ActionIcon
+					size="lg"
+					variant="light"
+					aria-label={t("bank.addCard")}
+					title={t("bank.addCard")}
+					onClick={() => vm.setAdding(true)}
+				>
+					<svg
+						width="20"
+						height="20"
+						viewBox="0 0 24 24"
+						fill="none"
+						stroke="currentColor"
+						strokeWidth="2"
+						strokeLinecap="round"
+						aria-hidden="true"
+					>
+						<path d="M12 5v14M5 12h14" />
+					</svg>
+				</ActionIcon>
 			</Group>
-			<Text c="dimmed">{t("bank.manualBalance")}</Text>
 			<Switch
 				label={t("bank.showArchive")}
 				checked={vm.archive}
@@ -83,14 +102,32 @@ const CardsPageView: FC<CardsPageViewProps> = (props) => {
 			{vm.cards.data && vm.cards.isFetching && (
 				<Text role="status">{t("bank.refreshing")}</Text>
 			)}
-			<MonthPickerInput
-				label={t("bank.month")}
-				value={`${vm.month}-01`}
-				onChange={(value) => {
-					if (value) vm.setMonth(value.slice(0, 7));
-				}}
-				popoverProps={{ middlewares: { shift: { crossAxis: true } } }}
-			/>
+			<Group align="flex-end" justify="space-between">
+				<BankPeriodPicker period={vm.period} onChange={vm.setPeriod} />
+				{Boolean(vm.categories.data?.length || vm.cards.data?.length) && (
+					<Button
+						variant="subtle"
+						color="gray"
+						onClick={() => vm.setManagingCategories(true)}
+						leftSection={
+							<svg
+								width="18"
+								height="18"
+								viewBox="0 0 24 24"
+								fill="none"
+								stroke="currentColor"
+								strokeWidth="1.7"
+								strokeLinejoin="round"
+								aria-hidden="true"
+							>
+								<path d="M3 3h7v7H3zM14 3h7v7h-7zM3 14h7v7H3zM14 14h7v7h-7z" />
+							</svg>
+						}
+					>
+						{t("bank.categories")}
+					</Button>
+				)}
+			</Group>
 			<BankSummaryView
 				all
 				data={vm.summary.data}
@@ -107,14 +144,6 @@ const CardsPageView: FC<CardsPageViewProps> = (props) => {
 					retry={() => void vm.categories.refetch()}
 				/>
 			)}
-			{Boolean(vm.categories.data?.length || vm.cards.data?.length) && (
-				<Button
-					variant="default"
-					onClick={() => vm.setManagingCategories(true)}
-				>
-					{t("bank.categories")}
-				</Button>
-			)}
 		</Stack>
 	);
 };
@@ -1,7 +1,7 @@
 import { useState } from "react";
 import { useSearchParams } from "react-router";
 import {
-	bankMonth,
+	bankPeriod,
 	useBankCards,
 	useBankCategories,
 	useBankSummary,
@@ -9,30 +9,30 @@ import {

 function useCardsPageVm() {
 	const [params, setParams] = useSearchParams();
-	const month = bankMonth(params.get("month"));
+	const period = bankPeriod(params);
 	const [archive, setArchive] = useState(false);
 	const categories = useBankCategories();
 	const [managingCategories, setManagingCategories] = useState(false);
 	const [adding, setAdding] = useState(false);
 	const cards = useBankCards(archive);
-	const summary = useBankSummary(month);
+	const summary = useBankSummary(period);
 	return {
 		categories,
 		managingCategories,
 		setManagingCategories,
-		month,
+		period,
 		archive,
 		setArchive,
 		adding,
 		setAdding,
 		cards,
 		summary,
-		setMonth: (value: string) => {
-			if (value) setParams({ month: bankMonth(value) });
+		setPeriod: (value: [string | null, string | null]) => {
+			if (value[0] && value[1]) setParams({ from: value[0], to: value[1] });
 		},
 		items: cards.data?.map((card) => ({
 			...card,
-			to: `/cards/${card.id}?month=${month}`,
+			to: `/cards/${card.id}?${new URLSearchParams(period)}`,
 		})),
 	};
 }
@@ -4,10 +4,12 @@ import { useStockSearch } from "@/entities/stock";
 import { apiErrorCode } from "@/shared/api";
 import { instrumentLogoUrl } from "@/shared/lib";

+const SEARCH_DEBOUNCE_MS = 300;
+
 function useStocksPageVm() {
 	const [params, setParams] = useSearchParams();
 	const query = params.get("q") ?? "";
-	const [debounced] = useDebouncedValue(query.trim(), 300);
+	const [debounced] = useDebouncedValue(query.trim(), SEARCH_DEBOUNCE_MS);
 	const result = useStockSearch(debounced);
 	const waiting = query.trim() !== debounced;
 	return {
@@ -3,6 +3,8 @@ import createQueryClient from "openapi-react-query";

 import type { paths } from "./generated/schema";

+const HTTP_UNAUTHORIZED = 401;
+
 const apiBaseUrl = import.meta.env.VITE_API_BASE_URL ?? "http://localhost:3000";

 type AuthHandlers = {
@@ -50,7 +52,7 @@ async function authenticatedFetch(request: Request): Promise<Response> {
 	const retryRequest = authorized.clone();
 	const response = await fetch(authorized);
 	if (
-		response.status !== 401 ||
+		response.status !== HTTP_UNAUTHORIZED ||
 		isAuthRequest ||
 		!auth ||
 		(
@@ -529,6 +529,7 @@ const ru = {
 			share: "Доля: {{value}}",
 		},
 		ledger: {
+			clearPeriod: "Очистить период",
 			occurredAt: "{{date}} UTC",
 			quantity: "{{value}} шт.",
 			price: "Цена: {{value}}",
@@ -550,6 +551,7 @@ const ru = {
 			recentLoading: "Загрузка последних событий",
 			recentError: "Не удалось загрузить последние события.",
 			recentEmpty: "Последних событий пока нет.",
+			period: "Период",
 			from: "С",
 			to: "По",
 			categories: "Категории",
@@ -10,3 +10,30 @@ a {
 	color: inherit;
 	text-decoration: none;
 }
+
+@media (prefers-reduced-motion: no-preference) {
+	.mantine-Modal-content {
+		animation: modal-appear 220ms ease-out;
+	}
+
+	.mantine-Modal-overlay {
+		animation: modal-backdrop-appear 220ms ease-out;
+	}
+}
+
+@keyframes modal-appear {
+	from {
+		opacity: 0;
+		transform: translateY(8px) scale(0.98);
+	}
+	to {
+		opacity: 1;
+		transform: translateY(0) scale(1);
+	}
+}
+
+@keyframes modal-backdrop-appear {
+	from {
+		opacity: 0;
+	}
+}
@@ -4,6 +4,7 @@ import {
 	createTheme,
 	getThemeColor,
 	type MantinePrimaryShade,
+	Modal,
 	rem,
 	rgba,
 } from "@mantine/core";
@@ -21,6 +22,20 @@ const colorRoles = mapValues(color.roles, (role) =>
 );

 const theme = createTheme({
+	respectReducedMotion: true,
+	components: {
+		Modal: Modal.extend({
+			defaultProps: {
+				overlayProps: { blur: 3 },
+				transitionProps: {
+					transition: "fade-down",
+					duration: 220,
+					exitDuration: 180,
+					timingFunction: "ease-out",
+				},
+			},
+		}),
+	},
 	primaryColor: color.roles.primary.color,
 	primaryShade: color.primaryShade as MantinePrimaryShade,
 	defaultRadius: radius.default,
@@ -1,10 +1,13 @@
 import "@testing-library/jest-dom/vitest";
-import { cleanup } from "@testing-library/react";
+import { cleanup, configure } from "@testing-library/react";
 import { afterAll, afterEach, beforeAll } from "vitest";
 import { configureAuthClient } from "@/shared/api";
 import "../shared/i18n";
 import { server } from "./server";

+// Allow async UI updates on the slower CI runner; local waits stay unchanged.
+if (process.env.CI) configure({ asyncUtilTimeout: 5_000 });
+
 beforeAll(() => server.listen({ onUnhandledRequest: "error" }));
 afterEach(() => {
 	cleanup();
@@ -2,10 +2,14 @@ import { fileURLToPath, URL } from "node:url";
 import react from "@vitejs/plugin-react";
 import { configDefaults, defineConfig } from "vitest/config";

+const CI_TEST_TIMEOUT_MS = 15_000;
+
 export default defineConfig({
 	plugins: [react()],
 	resolve: { alias: { "@": fileURLToPath(new URL("./src", import.meta.url)) } },
 	test: {
+		// CI runs the UI scenarios with coverage on a slower runner.
+		testTimeout: process.env.CI ? CI_TEST_TIMEOUT_MS : undefined,
 		environment: "jsdom",
 		exclude: configDefaults.exclude,
 		setupFiles: "./src/test/setup.ts",
Author	SHA1	Message	Date
ksv741	0244acf429	chore(release): 0.1.0 Conventional commits / commits (pull_request) Successful in 22s Details Frontend security / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Successful in 4m31s Details Frontend security / security (push) Successful in 10s Details Frontend verify / verify (push) Successful in 4m34s Details	2026-09-14 07:04:41 +03:00
ksv741	53b18c6e86	chore: configure releases and develop workflow	2026-09-14 07:02:45 +03:00
ksv741	dc3434c371	docs: update system documentation references Frontend security / security (push) Successful in 9s Details Frontend verify / verify (push) Successful in 4m14s Details	2026-09-14 05:51:41 +03:00
ksv741	3be6e61b8f	chore: secure hooks and update dependencies #4 #9 Frontend security / security (push) Successful in 11s Details Frontend verify / verify (push) Successful in 4m35s Details	2026-09-13 19:36:15 +03:00
ksv741	7a89356f87	docs: align OpenAPI workflow guidance #3 Frontend verify / verify (push) Successful in 4m31s Details	2026-09-13 19:08:13 +03:00
renovate-bot	0c6bac8b90	chore(deps): update non-major dependencies Frontend verify / verify (push) Successful in 4m29s Details	2026-09-13 15:37:11 +00:00
ksv741	82b904393d	chore: make issue references optional and use chore for dependency updates #5 Frontend verify / verify (push) Successful in 4m56s Details	2026-09-13 18:30:04 +03:00
ksv741	4b97395385	ci: configure Renovate dependency updates #5 Frontend verify / verify (push) Successful in 6m22s Details	2026-09-13 18:13:10 +03:00
renovate-bot	bb6623275c	Add renovate.json Frontend verify / verify (push) Failing after 43s Details	2026-09-13 14:02:36 +00:00
ksv741	942ed3d453	test: allow UI scenarios more time in CI #1 Frontend verify / verify (push) Successful in 4m54s Details	2026-09-13 16:31:02 +03:00
ksv741	2f26e4fe0d	ci: disable memory-heavy Knip raw transfer #1 Frontend verify / verify (push) Failing after 3m44s Details	2026-09-13 16:22:17 +03:00
ksv741	22e331e2ff	ci: run full frontend verification #1 Frontend verify / verify (push) Failing after 3m48s Details	2026-09-13 16:15:54 +03:00
ksv741	ccff422f36	ci: run Biome on branch pushes in Gitea Biome / biome (push) Successful in 37s Details	2026-09-13 15:56:00 +03:00
ksv741	117e74cdfc	chore: upgrade Node to 24 LTS	2026-09-13 15:05:37 +03:00
ksv741	53c852b437	refactor: enforce semantic values and numeric lint rules	2026-09-13 14:37:25 +03:00
ksv741	24d332e063	feat: replace paired date inputs with range pickers	2026-09-12 22:41:40 +03:00
ksv741	aba4cf1ce8	feat(cards): refine controls and modal transitions	2026-09-12 22:34:27 +03:00
ksv741	cf21a5bd17	feat(card): refine header and inline actions	2026-09-12 22:07:29 +03:00
@@ -1 +1 @@
 
 .21.0