chore(release): 1.0.0

perf(tbank-connection): poll screen sync every five seconds
During active screen sync, status checks and observe reads run every 5s instead of 1s; terminal state observes resources immediately. OpenSpec change: WealthLedger/specs#21
2026-10-07 18:14:21 +03:00 · 2026-10-07 14:03:55 +03:00 · 2026-10-07 09:10:03 +03:00 · 2026-10-07 07:27:16 +03:00 · 2026-10-06 22:05:41 +03:00 · 2026-10-06 22:05:24 +03:00
495 changed files with 29267 additions and 16345 deletions
@@ -8,7 +8,7 @@ Vitest — отдельную JSDOM конфигурацию. Точные versi
 [package.json](../package.json), реализация — source of truth.

 ```text
-app → pages → features → entities → shared
+app → pages → widgets → features → entities → shared
 page container → page VM → entity/feature query → shared/api → backend /api/v1
                         ↓
                 props → state/section views
@@ -30,13 +30,15 @@ contract; frontend не читает его checkout для генерации
 | --- | --- |
 | Bootstrap, глобальные providers, routes | `app` |
 | Композиция маршрута и поведение, нужное только этому экрану | `pages/<page>` |
+| Крупная переиспользуемая композиция экрана | `widgets/<widget>` |
 | Самостоятельная пользовательская возможность с собственным смыслом | `features/<capability>` |
 | Представление/поведение бизнес-сущности | `entities/<entity>` |
 | Переиспользуемый код без WealthLedger domain meaning | `shared` |

-Локальный FSD profile: `app → pages → features → entities → shared`, без `widgets`.
-Крупный уникальный блок остаётся в своей page. Form, mutation или click handler
-сами по себе не требуют feature. Два callers не делают domain helper generic shared.
+Локальный FSD profile: `app → pages → widgets → features → entities → shared`.
+Widget собирает несколько нижних слоёв в самостоятельный UI-блок; компонент для
+одной page остаётся у page. Form, mutation или click handler сами по себе не
+требуют feature. Два callers не делают domain helper generic shared.
 Slice именуется по ответственности, а не `helpers`, `hooks` или `types`.

 **Безопасный путь:** при сомнении оставь код у ближайшего допустимого owner.
@@ -47,12 +49,12 @@ Slice именуется по ответственности, а не `helpers`,

 Cross-slice consumer использует `@/` и `index.ts` владельца, например
 `@/entities/portfolio`. Alias Vite и TypeScript согласован. Другой slice не
-импортирует внутренний файл напрямую. Slices `pages`, `features`, `entities` не зависят от соседнего slice своего слоя;
+импортирует внутренний файл напрямую. Slices `pages`, `widgets`, `features`, `entities` не зависят от соседнего slice своего слоя;
 композиция принадлежит вышележащему owner. Existing меж-slice исключения
 не являются разрешением добавлять новые.

 Направление зависимостей, public imports и запрет соседних slices в
-`pages`, `features`, `entities` проверяет `npm run deps`. Внутренние imports
+`pages`, `widgets`, `features`, `entities` проверяет `npm run deps`. Внутренние imports
 одного slice и связи shared segments этот запрет не ограничивает.
 Knip проверяет использование exports, а не смысл placement.

@@ -69,15 +71,16 @@ Route-aware AppShell и его navigation styles принадлежат `app/ui`
 `ProtectedLayout` использует public API этого владельца. При изменении foundation прочитай
 [UI](conventions/ui.md#визуальная-основа) и [Storybook](conventions/storybook.md).

-Статичные Add/Edit/Delete и публичный `IconProps` принадлежат private
-`packages/icons`; package не зависит от UI, domain или motion.
-`BankOperationIcon` и mappings остаются у entity. Card/Cards используют package
-Add/Edit/Delete; restore/category SVG остаются локальными.
+Все SVG, их геометрия и анимации принадлежат private `packages/icons`.
+Приложение импортирует компоненты из `@wealthledger/icons` и подключает
+`@wealthledger/icons/styles.css`. В `src` нет SVG-файлов и компонентов,
+единственная задача которых — рисовать иконку. Domain mapping категории в
+параметры `OperationIcon` остаётся в `entities/bank-card/model`.

 ## Примеры

- Общая busy-область: существующий [LoadingSkeleton](../packages/ui/src/LoadingSkeleton.tsx), а не domain widget в shared.
- Account-income state views: [страница](../src/pages/account-income/ui/AccountIncomePage.tsx) и её flat `components/*.view.tsx`; новый page-local filter остаётся здесь.
+- Общая busy-область: существующий [LoadingSkeleton](../packages/ui/src/LoadingSkeleton/LoadingSkeleton.tsx), а не domain widget в shared.
+- Account-income state views: [страница](../src/pages/account-income/ui/AccountIncomePage/AccountIncomePage.tsx) и её `components/`; новый page-local filter остаётся здесь. Комплекты файлов группируются по [UI convention](conventions/ui.md#размещение-файлов-компонента).
 - Portfolio query: [entity public API](../src/entities/portfolio/index.ts); новая UI-сводка с бизнес-смыслом не становится shared только из-за нескольких экранов.

 ## Проверка
@@ -39,6 +39,10 @@ Authorization. Auth endpoints исключены из Bearer/retry middleware. R
 координируется single-flight; после `401` с `UNAUTHORIZED` возможен один retry.
 Не добавляй собственный refresh/retry loop в caller.

+Cookie-writing requests упорядочены только в текущей вкладке. Cross-tab auth
+synchronization не требуется; допустим reload/re-login. Web Locks и отдельные
+token stores не добавляются.
+
 Protected queries используют existing session-aware boundary; logout очищает
 session-scoped cache. Access token хранится только в памяти, refresh передаётся
 httpOnly cookie с `credentials: include`. Не сохраняй tokens в localStorage,
@@ -50,6 +54,15 @@ GET subtree; ошибка mutation не меняет generation/cache. Это о
 от обычного фонового refetch. Даже повторное сохранение того же token начинает
 новую generation; поздний ответ прежней generation не попадает в новый кэш.

+Отмена/reset принадлежат TanStack Query и generated queryFn с AbortSignal,
+без HTTP request registry, URL-wide latest-read counters и access epochs.
+Успешный HTTP с `data: null` остаётся query success; readiness выбирается по
+data/metadata, без подмены query status и отдельного transport state.
+Status синхронизации содержит только состояние работы. Resources читаются
+через `sync=observe` во время работы и после завершения, без hash comparison.
+Согласованность income entries/groups обеспечивает backend; frontend не
+дублирует её runtime validator.
+
 Mutations используют существующий generated client и query-key owner;
 после успеха обновляй/invalidируй только связанные данные. Optimistic update
 нужен конкретному UX и обязан иметь rollback/error behavior.
@@ -70,7 +83,7 @@ Network/unknown error получает безопасное локальное

 Если одна группа API codes требует одинакового recovery в нескольких views,
 сведи классификацию у ближайшего общего owner. Не размножай magic comparisons
-и не объявляй закрытый frontend error enum: generated `code` пока `string`.
+и используй `ApiErrorCode` для известных значений: generated `code` остаётся `string`.
 Неизвестный новый code должен сохранять fallback. Рефакторинг существующих
 разных recovery paths требует behavior proof, а не общей обработки всех ошибок.

@@ -29,7 +29,8 @@ owner и 1–3 примера. Код показывает механизм; с
 ## Domain values

 Finite business vocabulary принадлежит одному domain/module/entity owner.
-Переиспользуй его symbols; для нового словаря без аналога — `as const` + union.
+Переиспользуй его symbols; для machine codes и protocol values используй
+строковые `enum`, для структуры с разными payload — discriminated union.
 Сохраняй wire values; generated/external enums не переписывай вручную.
 Numeric policy называй по смыслу и единицам. Индексы, `Math.max(value, 0)` и
 обычные labels не выноси в constants без semantic benefit.
@@ -19,14 +19,16 @@ StateView/LoadingSkeleton и их stories принадлежат `packages/ui`.
 Используй CSF, `Meta`/`StoryObj`, `satisfies Meta`, локальные fixtures и actions.
 Общие Mantine/theme/i18n/Dates providers уже есть в
 [preview](../../.storybook/preview.tsx); не создавай второй theme source.
-Stories не достигают application API, auth, VM и query providers даже транзитивно;
+Stories не достигают application API, auth и query providers даже транзитивно.
+Presentation VM с form-context/UI-only state допустима; data VM остаётся за
+этой границей, которую проверяет полный reachable graph;
 границу проверяет `deps:storybook`. Не добавляй MSW worker ради каталога.

 `play` через `storybook/test` нужен, когда interaction иллюстрирует собственный
 контракт: keyboard activation, доступность действия, local callback. Не повторяй
 RTL suite и не тестируй внутренности Mantine. Существующий
 [Button](../../src/shared/ui/Button.stories.tsx) показывает themed control
-без production wrapper; [LoadingSkeleton](../../packages/ui/src/LoadingSkeleton.stories.tsx)
+без production wrapper; [LoadingSkeleton](../../packages/ui/src/LoadingSkeleton/LoadingSkeleton.stories.tsx)
 — значимые busy states.

 `npm run typecheck`, `npm run deps:storybook`, `npm run build:catalog` проверяют
@@ -45,9 +45,9 @@ Finance: loading/error/empty/loaded, cached snapshot при refetch failure, ret
 отсутствие старых данных после session/connection switch. ErrorBoundary: test-only
 throwing route, безопасная ссылка и reset после navigation.

-Примеры: [AuthForm test](../../src/features/auth/ui/AuthForm.test.tsx),
+Примеры: [AuthForm test](../../src/features/auth/ui/AuthForm/AuthForm.test.tsx),
 [client test](../../src/shared/api/client.test.ts),
-[usePortfolio test](../../src/entities/portfolio/api/usePortfolio.test.tsx).
+[resource lifecycle test](../../src/shared/api/resource-query.test.tsx).
 Не копируй fixtures/сценарии целиком, если задача затрагивает один исход.

 ## Команды
@@ -5,7 +5,8 @@
 - Сохраняй strict TS profile и `import type`. Для недоверенного значения используй
  `unknown` с narrowing; `any` не заменяет DTO/validation. Локальное исключение
  на нетипизированной boundary должно быть узким и объяснённым.
- `enum` и `namespace` не используются: frontend имеет `erasableSyntaxOnly`.
+- Строковые `enum` используются для machine codes и protocol values.
+  `namespace` не используется; tooling сохраняет `erasableSyntaxOnly`.
  Для состояния с разными payload выбирай discriminated union; не добавляй
  необязательные поля, допускающие невозможные комбинации.
 - Named components — const-valued `FC<Props>`; named props находятся рядом или
@@ -14,7 +15,42 @@
  на основе `PropsWithChildren<{ … }>`; без props — `FC`.
 - Обычные exports — нижний named block; barrel делает прямой re-export.
  CSF сохраняет default meta и прямые story exports; configuration exceptions
-  заданы в [Biome](../../biome.json). Не распространяй их на application code.
+  заданы в [ESLint](../../eslint.config.mjs). Не распространяй их на application code.
+
+Тип значений формы выводится из её schema, когда input/output совпадают.
+Общие props определяются у одного owner; DTO и presentation model сохраняют
+собственные типы при смысловом отличии. Type re-export сохраняет public imports.
+
+## Читаемость: ESLint и review
+
+ESLint проверяет ограничение 80 символов (tab = 2), пустые строки между
+JSX siblings и вокруг многострочных declarations/control-flow/return, вынос
+функций и условных выражений из JSX props, отдельные Zod schema files,
+отсутствие SVG в приложении, optional trailing parameters и многострочные
+сложные union types. Generated artifacts не форматируй вручную.
+URL, строковые/template/regex literals и комментарии исключены из `max-len`;
+это исключение для содержимого, а не повод собирать длинные expressions.
+Однострочный JSX не требует обрамляющих скобок; многострочный — требует.
+`unicorn/no-null` отключён: API DTO, React refs и Mantine используют `null`.
+Сохраняй различие `null`/`undefined` из контракта вместо массовых suppressions.
+CSS и Markdown также держи в 80 колонках там, где это не ломает данные/ссылки.
+
+Review проверяет то, чего синтаксис не доказывает:
+
+Обоснованное config exception сопровождается причиной и явным ожиданием в
+existing lint tests, включая разрешённый и запрещённый примеры. Это позволяет
+настраивать профиль без случайного ослабления остальных правил.
+
+- Пустая строка отделяет смысловые шаги: inputs, вычисления, действие, результат.
+- Имена derived values описывают значение, например `projectedAmount`.
+- Тернарник остаётся коротким выбором двух значений. Mapping, несколько веток
+  и многострочное преобразование — отдельная функция с guard и `if/else`.
+- Union из object shapes оформляй несколькими строками; nullable scalar
+  `null | string` остаётся компактным. Для повторяемого shape используй named type.
+- Последний необязательный аргумент — `accountId?: string`. Required аргумент
+  перед следующим required параметром может сохранять `T | undefined`.
+- Helpers и действия размещай по [UI ownership](ui.md#container-vm-и-view);
+  перенос не меняет null/zero, validation, recovery, closures и hook ordering.

 ## Hooks и derived state

@@ -33,19 +69,23 @@ Container/VM/view и state owners — в [UI](ui.md).

 Общее правило ownership и символических значений —
 [Domain values](engineering.md#domain-values).
-Backend vocabulary бери из generated `paths`, не создавай ручную копию enum.
-Текущий `schema.d.ts` содержит только types: typed wire literals допустимы,
-когда generator не предоставляет runtime values.
+Backend vocabulary бери из generated `paths`; generated artifacts вручную не меняй.
+Для открытых `string` полей допускается локальный enum известных значений,
+используемых UI. Он не закрывает wire contract и сохраняет unknown fallback.
+Если generator предоставляет runtime enum, используй его.

-`ProblemDetailsDto.code` сейчас `string`. Не объявляй закрытый frontend error
-enum и не превращай неизвестный code в известный через cast. Повторяющуюся
+`ProblemDetailsDto.code` сейчас `string`. `ApiErrorCode` перечисляет известные UI коды, а не закрывает wire contract.
+`apiErrorCode` сохраняет произвольную строку; `isApiErrorCode` проверяет известное
+значение без cast и сохраняет fallback для неизвестного кода. Повторяющуюся
 обработку своди у ответственного owner; [errors](data.md#errors).

-`noMagicNumbers` в Biome — error; fixtures/tests/stories исключены только
-из этого правила. Policy получает имя и единицы; подавление допустимо для
+`@typescript-eslint/no-magic-numbers` — error; fixtures/tests/stories исключены
+из этой дополнительной проверки. Policy получает имя и единицы; подавление допустимо для
 incidental value с объяснением. Обычный UI-текст не превращай в constant:
 его owner — [i18n](ui.md#строки-и-валидация).
-Semantic magic strings и props profile требуют review.
+`no-restricted-syntax` запрещает inline machine codes и protocol values в production;
+`no-unsafe-enum-comparison` проверяет сравнения enum. Fixtures/stories сохраняют
+literal wire values. Новые vocabularies и props profile требуют review.

 ## Проверка

@@ -11,13 +11,17 @@ Mantine component и общую тему. Для выпадающего выбо
 ограничения JSDOM решай в test setup, сохраняя production UI.
 Семантический HTML для структуры страницы остаётся уместным.

-Icons ищи у существующего owner (например,
-[BankOperationIcon](../../src/entities/bank-card/ui/BankOperationIcon.tsx));
-статичные Add/Edit/Delete доступны в `@wealthledger/icons`. Их SVG декоративны
-по умолчанию; имя action принадлежит кнопке. Standalone meaningful icon получает
-`aria-hidden={false}`, `role="img"` и доступное имя. Category/kind mappings
-и анимации остаются в entity. Не добавляй пакет ради одного символа. Business/domain
-components живут у feature/entity/page, даже при повторном использовании.
+Icons импортируй из `@wealthledger/icons`; геометрия, SVG assets и animation
+lifecycle принадлежат этому пакету. Domain/category lookup возвращает параметры
+иконки из model сущности. Каждый SVG хранится цельным декларативным
+компонентом: не разбивай path-строки и не собирай геометрию в runtime.
+Русские category names из API — данные для нормализованного сопоставления,
+не ключи реестра иконок; неизвестные/переименованные категории имеют fallback.
+Известные названия банков принадлежат enum `BankName` в bank-card model;
+свободный ввод пользовательского названия остаётся строкой.
+SVG декоративны по умолчанию; доступное имя action
+принадлежит кнопке. Meaningful icon получает `aria-hidden={false}`, `role="img"`
+и доступное имя. Приложение и Storybook подключают CSS пакета.

 Wrapper нужен для проектной ответственности, а не ради нового имени
 для Button. Локальный CSS module принадлежит component; общий token вводи для
@@ -51,19 +55,76 @@ retry callbacks, domain grouping и derived presentation data. View получа
 | `Component.types.ts` | Переиспользуемые props/local types, когда отдельный owner полезен |
 | `Component.module.css` | Локальные стили |

-Во view нет data/auth/router/navigation/VM hooks и вычислений по domain collection.
-Допустимы `useTranslation`, form-context hooks, UI-only state (например failed
-image fallback) и formatter одного переданного значения. Группировка/доли
-коллекции готовятся в VM. Перенос fetch во view ради меньшего container нарушает границу.
+View получает готовые данные и именованные действия. Container вызывает VM;
+VM владеет запросами, формой, состоянием, обработчиками и derived values.
+Во view нет data/auth/router/navigation hooks и domain grouping. Data VM
+вызывает container; presentation hook не должен скрывать fetching во view.
+Presentation VM для form-context/UI-only state может использоваться автономно
+в каталоге: её граф зависимостей не достигает application data/API.
+`useTranslation` и декларативный вывод коллекции допустимы во view.

-Отдельный state/section с самостоятельной responsibility выноси в flat
-`components/*.view.tsx`. Небольшой tightly-coupled renderer оставляй рядом.
-Не создавай folder/barrel/test/CSS для каждого view и не дроби по line count.
-Пример: [AccountIncomePage](../../src/pages/account-income/ui/AccountIncomePage.tsx)
-и [его VM](../../src/pages/account-income/ui/AccountIncomePage.vm.ts).
+ESLint ограничивает прямые data/auth/router hook imports в `*.view.tsx`;
+type imports, error helpers, router components и form context разрешены.
+Транзитивный fetching через local presentation hook проверяется review;
+Storybook дополнительно проверяет reachable graph. Новое исключение должно
+сохранять presentation-only responsibility.
+
+JSX props получают ссылки на функции, включая `onClick`, render props,
+`dateParser` и callbacks внутри объектов props. Для React Hook Form предпочитай
+`useController` в VM вместо inline `Controller.render`. Значение prop с условием
+сначала получает предметное имя: `projectedAmount`, `archiveActionLabel`.
+Проверяй narrowing при переносе: выражение не должно читать отсутствующие данные
+до ветки, которая раньше защищала доступ; обработчик сохраняет актуальный snapshot.
+
+Внутри компонента нет именованных helpers. Чистые функции форматирования и
+адаптации UI inputs выноси в `shared/lib`, передавая явные аргументы. Domain
+преобразование остаётся в model своего owner; shared не импортирует entities/pages.
+Closure над состоянием, mutations и refs является действием VM, а не shared helper.
+
+VM собирает связные предметные hooks, когда внутри смешиваются независимые
+сценарии. Например, `useRefundPurchase` владеет выбором исходной покупки,
+её загрузкой и пагинацией. Общий адаптер `bankDateField` обслуживает поля даты;
+простое подключение одного controller остаётся в VM формы.
+Не группируй несвязанные функции только по префиксу `on*` и не создавай
+passthrough hook над одним вызовом ради формального дробления.
+
+Render-helper замени самостоятельным presentation component у того же owner.
+
+Отдельный state/section с самостоятельной responsibility выноси в
+`components/` своего component. Небольшой tightly-coupled renderer оставляй
+рядом; размер файла сам по себе не требует разделения.
+Пример: [AccountIncomePage](../../src/pages/account-income/ui/AccountIncomePage/AccountIncomePage.tsx)
+и [его VM](../../src/pages/account-income/ui/AccountIncomePage/AccountIncomePage.vm.ts).
+
+## Размещение файлов компонента
+
+Правило действует в `src` и `packages`: компонент с сопутствующими файлами
+(view, VM, types, CSS, tests, stories) размещай в папке `Component/`.
+Сохраняй полные имена файлов: `Component.tsx`, `Component.view.tsx`,
+`Component.test.tsx`. Создавай только нужные файлы; одиночный компонент
+оставляй непосредственно в `ui`, `components` или source-каталоге пакета.
+
+Внутренние части принадлежат папке родителя; для набора state/section views
+используй её `components/`. Внутри него действует то же правило: отдельная
+папка объединяет комплект файлов, одиночный view остаётся файлом.
+Стили и хуки нескольких соседних компонентов остаются у ближайшего общего
+владельца; не копируй их и не прячь внутрь одного потребителя.
+
+Папка компонента не создаёт новую FSD-границу. Публичные exports остаются в
+существующем `index.ts` slice/segment или entry пакета; внутри используй
+прямые относительные imports без дополнительных barrels на каждый компонент.
+При переносе обновляй imports, ссылки документации и проверки, зависящие от пути.
+
+Пример: [BankCardForm](../../src/entities/bank-card/ui/BankCardForm/BankCardForm.tsx)
+лежит рядом со своим view, тестом и story. Формы используют Mantine
+`Fieldset variant="unstyled"` для групповой блокировки полей без локального CSS.

 ## Формы

+Схемы Zod объявляй в `*.schema.ts`, включая `.refine`/`.superRefine`.
+Зависимая от текущих данных схема — фабрика с явными inputs в том же файле;
+VM вызывает фабрику. Сохраняй актуальность данных и deferred validation messages.
+
 Используй `react-hook-form`, `zodResolver`, `FormProvider`. Container/VM создаёт
 form state, view получает `onSubmit`/`disabled`, fields используют `useFormContext`.
 Во время submit блокируй все действия формы. Zod errors показывай у поля;
@@ -98,7 +159,7 @@ Types, props, hooks и memoization — в [TypeScript/React](typescript-react.md
 Продуктовый текст хранится в `src/shared/i18n/locales/ru.ts`, читается через
 `useTranslation()`. В Zod используй `validationMessage(key)` из i18n/zod, без
 пользовательских literal messages. Это mandatory semantic review: общего запрета
-непереведённых JSX-строк в Biome/TypeScript нет. Synthetic story fixtures и
+непереведённых JSX-строк в ESLint/TypeScript нет. Synthetic story fixtures и
 описания историй допустимы; они не заменяют продуктовую локализацию.

 ## Проверка
@@ -22,13 +22,7 @@
 !packages/ui/vite.config.ts
 !packages/ui/tsconfig.json
 !packages/ui/src/
-!packages/ui/src/theme.ts
-!packages/ui/src/styles.css
-!packages/ui/src/index.ts
-!packages/ui/src/StateView.tsx
-!packages/ui/src/LoadingSkeleton.tsx
-!packages/ui/src/EntryCard.tsx
-!packages/ui/src/EntryCard.module.css
+!packages/ui/src/**
 !packages/icons/
 !packages/icons/package.json
 !packages/icons/tsconfig.json
@@ -40,3 +34,12 @@
 !packages/icons/src/svg/AddIcon.tsx
 !packages/icons/src/svg/EditIcon.tsx
 !packages/icons/src/svg/DeleteIcon.tsx
+
+# Keep local dependencies, outputs and secrets out of allowed source trees.
+**/node_modules
+**/dist
+**/coverage
+**/storybook-static
+**/.env*
+**/*.pem
+**/*.key
@@ -1,26 +0,0 @@
-name: Conventional commits
-
-on:
-  pull_request:
-    types: [opened, synchronize, reopened, edited]
-
-jobs:
-  commits:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: https://github.com/actions/checkout@v4
-        with:
-          ref: ${{ github.event.pull_request.head.sha }}
-          fetch-depth: 0
-      - uses: https://github.com/actions/setup-node@v4
-        with:
-          node-version-file: .nvmrc
-      - run: npm ci --ignore-scripts
-      - name: Check PR title and commits
-        env:
-          PR_TITLE: ${{ github.event.pull_request.title }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
-        run: |
-          printf '%s\n' "$PR_TITLE" | npm run commitlint -- --strict
-          npm run commitlint -- --strict --from "$BASE_SHA" --to "$HEAD_SHA"
@@ -30,6 +30,8 @@ jobs:
      - run: npm ci
        env:
          HUSKY: '0'
+      - name: Install Chromium and system dependencies
+        run: npx --no-install playwright install --with-deps chromium
      - run: npm run verify
        env:
          KNIP_DISABLE_RAW_TRANSFER: '1'
@@ -1,33 +0,0 @@
-name: Frontend security
-
-on:
-  push:
-    branches:
-      - '**'
-  pull_request:
-  schedule:
-    - cron: '17 5 * * *'
-
-jobs:
-  security:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: https://github.com/actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: Record checked revision
-        run: git rev-parse HEAD
-      - name: Scan history with Gitleaks 8.30.1
-        run: |
-          curl --fail --location --silent --show-error https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz -o /tmp/gitleaks.tar.gz
-          echo '551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb  /tmp/gitleaks.tar.gz' | sha256sum --check
-          mkdir -p /tmp/gitleaks-bin
-          tar -xzf /tmp/gitleaks.tar.gz -C /tmp/gitleaks-bin gitleaks
-          /tmp/gitleaks-bin/gitleaks git --log-opts=--all --redact=100 --no-banner
-      - uses: https://github.com/actions/setup-node@v4
-        with:
-          node-version-file: .nvmrc
-      - name: Verify pre-commit secret blocking and redaction
-        run: PATH=/tmp/gitleaks-bin:$PATH node --test scripts/test-pre-commit.mjs
-      - name: Audit runtime and development dependencies
-        run: npm audit --include=dev --audit-level=low
@@ -2,12 +2,74 @@ name: Frontend verify

 on:
  push:
-    branches:
-      - '**'
+    branches: [develop, main]
  pull_request:
+    types: [opened, synchronize, reopened, edited]
+  schedule:
+    - cron: '17 5 * * *'
+
+# Gitea >= 1.26. A new revision supersedes only the same PR/branch/event.
+concurrency:
+  group: frontend-verify-${{ gitea.event_name }}-${{ gitea.event.pull_request.number || gitea.ref }}
+  cancel-in-progress: true

 jobs:
+  commits:
+    if: gitea.event_name == 'pull_request'
+    timeout-minutes: 15
+    runs-on: ubuntu-latest
+    steps:
+      - uses: https://github.com/actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          fetch-depth: 0
+      - uses: https://github.com/actions/setup-node@v4
+        with:
+          node-version-file: .nvmrc
+      - run: npm ci --ignore-scripts
+      - name: Check PR title and commits
+        env:
+          PR_TITLE: ${{ github.event.pull_request.title }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
+        run: |
+          printf '%s\n' "$PR_TITLE" | npm run commitlint -- --strict
+          npm run commitlint -- --strict --from "$BASE_SHA" --to "$HEAD_SHA"
+
+  security:
+    needs: commits
+    if: >-
+      !cancelled() &&
+      (needs.commits.result == 'success' || needs.commits.result == 'skipped')
+    timeout-minutes: 15
+    runs-on: ubuntu-latest
+    steps:
+      - uses: https://github.com/actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Record checked revision
+        run: git rev-parse HEAD
+      - name: Scan history with Gitleaks 8.30.1
+        run: |
+          curl --fail --location --silent --show-error https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz -o /tmp/gitleaks.tar.gz
+          echo '551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb  /tmp/gitleaks.tar.gz' | sha256sum --check
+          mkdir -p /tmp/gitleaks-bin
+          tar -xzf /tmp/gitleaks.tar.gz -C /tmp/gitleaks-bin gitleaks
+          /tmp/gitleaks-bin/gitleaks git --log-opts=--all --redact=100 --no-banner
+      - uses: https://github.com/actions/setup-node@v4
+        with:
+          node-version-file: .nvmrc
+      - name: Verify pre-commit secret blocking and redaction
+        run: PATH=/tmp/gitleaks-bin:$PATH node --test scripts/test-pre-commit.mjs
+      - name: Audit runtime and development dependencies
+        run: npm audit --include=dev --audit-level=low
+
  verify:
+    needs: [commits, security]
+    if: >-
+      !cancelled() && needs.security.result == 'success' &&
+      gitea.event_name != 'schedule'
+    timeout-minutes: 45
    runs-on: ubuntu-latest
    steps:
      - uses: https://github.com/actions/checkout@v4
@@ -21,6 +83,8 @@ jobs:
      - run: npm ci
        env:
          HUSKY: '0'
+      - name: Install Chromium and system dependencies
+        run: npx --no-install playwright install --with-deps chromium
      - name: Run all frontend gates
        run: npm run verify
        env:
@@ -12,6 +12,7 @@ dist
 storybook-static
 dist-ssr
 coverage
+.vitest
 .scannerwork
 *.local

@@ -5,11 +5,16 @@ module.exports = {
 	forbidden: [
 		...base.forbidden,
 		{
+			from: { path: "[.]stories[.]tsx$|^[.]storybook/preview[.]tsx$" },
 			name: "stories-must-not-reach-application-data",
 			severity: "error",
-			from: { path: "\\.stories\\.tsx$|^\\.storybook/preview\\.tsx$" },
 			to: {
-				path: "^src/(shared/api|features/auth|app/routes|app/ui)/|^src/(entities|features)/[^/]+/api/|\\.vm\\.ts$|^src/pages/[^/]+/ui/[^/]+Page\\.tsx$|node_modules/(@tanstack/react-query|openapi-fetch|openapi-react-query)/",
+				path: [
+					"^src/(shared/api|features/auth|app/routes|app/ui)/",
+					"^src/(entities|features)/[^/]+/api/",
+					"^src/pages/[^/]+/ui/.*Page[.]tsx$",
+					"node_modules/(@tanstack/react-query|openapi-fetch|openapi-react-query)/",
+				],
 				reachable: true,
 			},
 		},
@@ -1,10 +1,10 @@
 import type { StorybookConfig } from "@storybook/react-vite";

 const config: StorybookConfig = {
-	stories: ["../src/**/*.stories.tsx", "../packages/*/src/**/*.stories.tsx"],
 	addons: ["@storybook/addon-docs"],
-	framework: "@storybook/react-vite",
 	core: { disableTelemetry: true },
+	framework: "@storybook/react-vite",
+	stories: ["../src/**/*.stories.tsx", "../packages/*/src/**/*.stories.tsx"],
 };

 export default config;
@@ -1,39 +1,34 @@
-import "@mantine/core/styles.css";
 import "@mantine/charts/styles.css";
+import "@mantine/core/styles.css";
 import "@mantine/dates/styles.css";
+import "@wealthledger/icons/styles.css";
 import "@wealthledger/ui/styles.css";
 import "dayjs/locale/ru";
+
+import type { Preview } from "@storybook/react-vite";
+
 import "../src/shared/i18n";
+
 import { MantineProvider } from "@mantine/core";
 import { DatesProvider } from "@mantine/dates";
-import type { Preview } from "@storybook/react-vite";
 import { cssVariablesResolver, theme } from "@wealthledger/ui/theme";

 const colorSchemeManager = {
+	clear: () => {},
 	get: () => "light" as const,
 	set: () => {},
-	clear: () => {},
 	subscribe: () => {},
 	unsubscribe: () => {},
 };

 const preview: Preview = {
-	parameters: {
-		layout: "padded",
-		options: {
-			storySort: {
-				order: ["Design System", ["Foundations", "Components"], "Product"],
-			},
-		},
-		controls: { expanded: true },
-	},
 	decorators: [
-		(Story) => (
+		Story => (
 			<MantineProvider
-				cssVariablesResolver={cssVariablesResolver}
-				theme={theme}
-				forceColorScheme="light"
 				colorSchemeManager={colorSchemeManager}
+				cssVariablesResolver={cssVariablesResolver}
+				forceColorScheme="light"
+				theme={theme}
 			>
 				<DatesProvider settings={{ locale: "ru" }}>
 					<Story />
@@ -41,6 +36,15 @@ const preview: Preview = {
 			</MantineProvider>
 		),
 	],
+	parameters: {
+		controls: { expanded: true },
+		layout: "padded",
+		options: {
+			storySort: {
+				order: ["Design System", ["Foundations", "Components"], "Product"],
+			},
+		},
+	},
 };

 export default preview;
@@ -34,4 +34,4 @@ Testing и без production diff. Перед завершением повто
 | Money, account/position/income | Entity types, API snapshot, formatters и tests соответствующего slice |
 | Theme/tokens, UI-каталог | [UI](.ai/conventions/ui.md), [Storybook](README.md#ui-каталог-storybook) |
 | Поведение области | Source и tests её page/entity/feature; неясное ожидание уточни до изменения |
-| Versions/scripts/check scope | Manifest/lockfile, Biome/TypeScript/dependency configs |
+| Versions/scripts/check scope | Manifest/lockfile, ESLint/TypeScript/dependency configs |
@@ -1,5 +1,90 @@
 # Changelog

+## [1.0.0](https://git.personal.ksv741.ru/WealthLedger/frontend/compare/v0.4.0...v1.0.0) (2026-10-07)
+
+### ⚠ BREAKING CHANGES
+
+* drop investment stateVersion/progress/resources
+  from the client contract and use data/metadata readiness instead of
+  rewritten query status. Cross-tab auth may require re-login.
+
+### Features
+
+* add quiet reading with rare confirmations ([5b30bb8](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/5b30bb802a4ec43c036066f9a7e178f37e747a0b))
+* default journal period to last 7 days ([0ea8d7b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/0ea8d7b62d50a4b7c92e9a9934aead6246ac97f9))
+
+### Bug Fixes
+
+* **deps:** remove npm dependency on Nexus ([c096fc7](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/c096fc70ef442474c9b7766fdf5772b645166b92))
+* **deps:** resolve npm audit advisories ([f873db7](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/f873db7b027b6dee0c7382b4bd3df5198c7a4198))
+* **deps:** resolve npm audit advisories ([10baefd](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/10baefda790e7fb491c893724ddc4da7992103f0))
+* resolve frontend audit findings ([f6db28d](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/f6db28defa51bd9d8fe932ceae4c3c720aba7eb3))
+* sort stock and bond events by payment date ([f5f4447](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/f5f4447d60661aa92c80b50a16e8cb194dfa161f))
+
+### Performance
+
+* **tbank-connection:** poll screen sync every five seconds ([74f8a72](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/74f8a72ed55af2348fa3668f57312f4fdfc1e8a8)), references [WealthLedger/specs#21](https://git.personal.ksv741.ru/WealthLedger/specs/issues/21)
+
+### Refactoring
+
+* address frontend review feedback ([a4046db](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/a4046dbe87bd7dc949df32da3b6aaf174e6f5e8f))
+* clarify frontend model ownership ([0865b35](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/0865b35f93865b4052181d918cee80c995312930))
+* clarify frontend module ownership ([f9f0f69](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/f9f0f6921e86f6c81510373c680b136e4580f386))
+* encapsulate instrument chart data ([64fe902](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/64fe902192b60a72440635f5610ebe02cf8543f8))
+* enforce enum machine codes [#18](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/18) ([5b69003](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/5b6900351612b6ba34c694fc99612733e7901c79))
+* enforce frontend view model boundaries ([ca0ad4f](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/ca0ad4f824a47fa47e32d4717e27b15c8a985f7d))
+* move PortfolioStructure to widgets layer ([c25f6bd](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/c25f6bd85b88c4c7acb2f5ae6fc013aec77005b2))
+* remove redundant page view models ([fb3a5a6](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/fb3a5a6eaa0223a15ea2c9f585a06459371f0a25))
+* share instrument search presentation ([32a7786](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/32a77860c8eaea4a59a26e55b2d66976fd8f9484))
+* share source sync status presentation ([0bc8bc3](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/0bc8bc36b7263b7f0120a08df840b290b40d8116))
+* simplify auth and instrument pages ([b404c18](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/b404c1802a74f5f369173fdfcb086a3d5760e35a))
+* simplify calendar and form state ([94adbaf](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/94adbafa344b23d7f95c31db975d99d990bfcb8b))
+* simplify errors and focus tests ([7e976c3](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/7e976c330c54715018eda4bff0764c5d4de9c8b0))
+* simplify finance view models ([2844b22](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/2844b22dbace41a02c1b5a07b3801e84c66b3528))
+* simplify frontend state and mutation boundaries ([a7537da](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/a7537da34452ab1a15138ab0c1cd93d53d06c517))
+* simplify query and session ownership ([6999707](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/69997075e569da3edd43e242ef36f09311262412))
+* simplify resource queries and layout tests ([c1b0873](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/c1b08735e3a45d565c3836ae37ad76186bf48f26))
+* tighten types and reuse instrument UI ([7c28a42](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/7c28a423dd8a3cc4a5bdcb49b8de7018979df413))
+* unify bank form types and actions ([ff67a76](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/ff67a768addc0c4ba55247f5e2d9d5d5d5aec734))
+
+### CI
+
+* reduce duplicate actions and serialize checks ([95fdc87](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/95fdc8759e20f9baa4ac3d00e703752c79010e01))
+
+### Tests
+
+* remove redundant frontend checks ([320ea59](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/320ea5922a70ab81ce4f05c3c90eb7b6a664fa39))
+
+### Styles
+
+* pin ternary operator formatting [#18](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/18) ([12c3b72](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/12c3b72bfb32dff5f1ffdb36519c90f7ea852488))
+
+### Maintenance
+
+* add typed ESLint checks [#18](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/18) ([5763010](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/57630102e4bcc6b555dd546ba373a14a88256eed))
+* finish frontend ESLint migration [#18](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/18) ([72d7835](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/72d7835227340e349d99f57db134a635f276f6e9))
+* guard presentation data boundaries ([6a89b08](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/6a89b08ee571562fea349801169c40f1f993e9b9))
+* guard unsafe DOM HTML with ESLint [#18](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/18) ([061ec70](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/061ec708c651029cd7d61d22319d11e7ac9f074e))
+* remove unused exports ([fcb938b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/fcb938b5a29fc82f00bbaa8b2ee776ca57dad010))
+
+## [0.4.0](https://git.personal.ksv741.ru/WealthLedger/frontend/compare/v0.3.0...v0.4.0) (2026-09-26)
+
+### Features
+
+* show persisted investment data and sync state ([4e5f564](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/4e5f564fa1d583013fb3e7febdb3baa9737446b4))
+
+### Bug Fixes
+
+* **api:** update validation and conflict response contract ([db184c8](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/db184c8caec01609e8a3df3b16097ce634e5eff0))
+* **auth:** isolate session races and financial caches ([a209d71](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/a209d715892862bb6d48084df0c84a10b8d56bf1))
+* **ci:** resume verification of immutable release images ([6a87379](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/6a87379813ba1d4002779b23b2a65446b4d10258))
+* **ui:** improve financial text contrast ([c86be7b](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/c86be7bf73d0141e0606d259ada6453c0d8e3dec))
+
+### Refactoring
+
+* colocate frontend component files ([b987fd8](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/b987fd8e780963dfe1dde0c714232697a52e0475))
+* establish local frontend workspace boundaries ([85fcfe3](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/85fcfe3d073f80e759dafb14281c9462c1d7410d))
+
 ## [0.3.0](https://git.personal.ksv741.ru/WealthLedger/frontend/compare/v0.2.3...v0.3.0) (2026-09-20)

 ### Features
@@ -75,20 +75,68 @@ Service worker кеширует только статическую оболоч

 ```bash
 nvm use --silent
+npm ci
+npx --no-install playwright install chromium
 npm run verify
 ```

 Команда проверяет, что generated OpenAPI types соответствуют committed snapshot,
-затем запускает strict TypeScript, Biome, один coverage-backed запуск Vitest,
+затем запускает strict TypeScript, ESLint и проверку его конфигурации,
+один coverage-backed запуск Vitest,
 Knip, dependency rules приложения и stories, сборки приложения и Storybook.
-Отдельный CI workflow `Frontend security` на push, pull request и ежедневно
-проверяет полную доступную историю Gitleaks 8.30.1 и выполняет
+
+`npm run lint` запускает ESLint с `--max-warnings=0`; `npm run lint:fix`
+применяет автофиксы. [Конфигурация](eslint.config.mjs) подключает рекомендованные
+наборы всех установленных плагинов: TypeScript, React, Hooks, Refresh, Query,
+Unicorn, import-x, SonarJS, RegExp, Security, no-unsanitized, Perfectionist, Stylistic,
+Vitest, Testing Library, jest-dom и Storybook. Правила React, тестов и stories
+применяются к соответствующим файлам; generated/build artifacts исключены.
+
+Stylistic отвечает за форматирование JS/TS/TSX, Perfectionist — за сортировку.
+Сохраняются табы, двойные кавычки и точки с запятой. Biome удалён; Prettier
+не используется. CSS, JSON и Markdown не форматируются через ESLint.
+`lint-staged` исправляет JS/TS/TSX перед commit. `lint:eslint` сначала собирает
+private packages, чтобы анализ типов использовал актуальные declarations.
+`npm run test:lint` проверяет действующие presets и ошибочные примеры.
+`no-unsanitized` проверяет опасные DOM HTML-присваивания и вызовы;
+React `dangerouslySetInnerHTML` отдельно проверяется React-плагином.
+
+Точечные исключения в исходниках объясняют контракты и ограничения статического
+анализа; изменение nullable API fields, query keys или порядка race-операций
+ради линтера недопустимо. Архитектуру проверяет dependency-cruiser, поведение —
+Vitest/MSW и Chromium. Линтеры не заменяют semantic/security review.
+`jsx-a11y` без поддержки ESLint 10 остаётся отложенным в
+[workspace issue #18](https://git.personal.ksv741.ru/WealthLedger/main/issues/18).
+
+Vitest включает JSDOM-тесты и проверку геометрии секций позиций в headless
+Chromium при ширинах 375 и 1280 px. Browser project не использует JSDOM setup
+и его заглушки layout API. Только браузерная проверка:
+`npm run test:run -- --project='browser-*'`. После обновления Playwright повторите
+установку Chromium; CI устанавливает его с `--with-deps` для Linux.
+Единый `.gitea/workflows/verify.yml` запускает `commits → security → verify`
+последовательно на PR; на push в `develop`/`main` — `security → verify`.
+Рабочие ветки проверяются после открытия PR, без дублирующего push-запуска.
+Изменение заголовка PR тоже повторяет проверки Conventional Commits.
+Новый запуск отменяет устаревший для того же PR/ветки и типа события
+(требуется Gitea 1.26+). Ежедневно в 05:17 UTC выполняется только `security`.
+Job `security` проверяет полную доступную историю Gitleaks 8.30.1 и выполняет
 `npm audit --include=dev --audit-level=low`. Любой advisory блокирует security job;
 исключений frontend нет. Локально можно выполнить те же команды:
 `gitleaks git --log-opts=--all --redact=100 --no-banner` и
 `npm audit --include=dev --audit-level=low`. Audit требует доступа к npm registry;
 проверка секретов выполняется локально и не выводит их значения.

+Имена jobs `commits`, `security`, `verify` сохранены, но Gitea включает имя
+workflow в статус. При внедрении администратор должен заменить required checks
+для защищённых веток на `Frontend verify / commits (pull_request)`,
+`Frontend verify / security (pull_request)` и
+`Frontend verify / verify (pull_request)`, удалив старые имена и push-статусы,
+если они требовались. Все три PR-проверки должны оставаться обязательными.
+Публикация образов по тегам остаётся в `image.yml`.
+Последовательность jobs ограничивает один запуск; для ограничения нагрузки всего сервера настройте
+`runner.capacity: 1` у общего runner и учтите остальные зарегистрированные
+runners. Конфигурация runner управляется вне этого репозитория.
+
 TypeScript остаётся на 5.9.3: `openapi-typescript@7.13.0` требует peer `^5.x`.
 Обновление до TypeScript 7 из Renovate dashboard откладывается до совместимого
 релиза генератора; `--force`/`--legacy-peer-deps` для обхода этого ограничения
@@ -214,14 +262,14 @@ Library build использует отдельный Vite config без app plu
 Начальная версия manifest взята из приложения; отдельный release-процесс
 и публикация не настроены.

-Private `@wealthledger/icons` экспортирует `AddIcon`, `EditIcon`, `DeleteIcon`
-и type `IconProps`. Единственный source рисунка — TSX в `packages/icons/src/svg`;
-поставка содержит ESM/declarations, без raw SVG, CSS, Mantine и motion.
-React — peer/external. Размер `size` по умолчанию 24, `strokeWidth` — 1.5;
-цвет наследуется через `currentColor`, SVG props можно передать явно.
-В action используйте декоративный `<AddIcon size={20} strokeWidth={2} />`,
-доступное имя задавайте кнопке. Standalone пример:
-`<EditIcon aria-hidden={false} role="img" aria-label="Редактирование" />`.
-Поддерживается также стандартный `aria-labelledby`; подпись выбирает caller.
-Card/Cards используют пакетные Add/Edit/Delete с прежними размерами/strokeWidth.
-Restore/category SVG и предметный BankOperationIcon остаются в приложении.
+Private `@wealthledger/icons` содержит все SVG приложения: действия,
+навигацию, contactless/wallet и геометрию `OperationIcon`. Пакет поставляет
+ESM, declarations и `@wealthledger/icons/styles.css`; приложение и Storybook
+подключают CSS явно. В `src` нет raw SVG и компонентов только для рисования
+иконок. Category/kind mapping остаётся в model `entities/bank-card`.
+
+Статичные иконки принимают `IconProps`: `size` по умолчанию 24,
+`strokeWidth` 1.5, цвет через `currentColor`. В кнопке иконка декоративная,
+имя принадлежит действию. Для самостоятельного изображения передайте
+`aria-hidden={false}`, `role="img"` и `aria-label` либо `aria-labelledby`.
+Анимации сохраняют hover/focus lifecycle и `prefers-reduced-motion`.
@@ -0,0 +1,70 @@
+# Security-плагины ESLint
+
+Проверено 28 сентября 2026 года для frontend: ESLint 10.11.0,
+TypeScript и React 19. Рекомендация — добавить только
+`eslint-plugin-no-unsanitized@4.1.5` с полным `configs.recommended`.
+Решение реализовано: пакет добавлен в devDependencies, полный recommended
+подключён в ESLint. Ниже сохранены результаты исследования до установки.
+
+## Все пакеты из раздела Security
+
+Источник списка: [awesome-eslint / Security](https://github.com/dustinspecker/awesome-eslint#security).
+Версии и даты ниже — опубликованные `latest` из npm на момент проверки.
+Широкий peer range сам по себе не доказывает работоспособность.
+
+| Пакет | Версия; публикация | Заявленный peer ESLint | Решение для frontend |
+| --- | --- | --- | --- |
+| [no-unsanitized](https://github.com/mozilla/eslint-plugin-no-unsanitized) | [4.1.5](https://registry.npmjs.org/eslint-plugin-no-unsanitized/4.1.5); 2026-02-19 | `^9 \|\| ^10` | Добавить: проверяет опасные присваивания и вызовы native DOM HTML API. Flat recommended включает `property` и `method` как errors. |
+| [no-secrets](https://github.com/nickdeis/eslint-plugin-no-secrets) | [2.3.3](https://registry.npmjs.org/eslint-plugin-no-secrets/2.3.3); 2026-03-01 | `>=5` | Не добавлять: поиск секретов по entropy/patterns существенно пересекается с существующими Gitleaks и SonarJS. Flat config поддерживается; отсутствие рекомендации связано с дублированием. |
+| [pii](https://github.com/shiva-hack/eslint-plugin-pii) | [1.0.2](https://registry.npmjs.org/eslint-plugin-pii/1.0.2); 2021-04-13 | `>=4.19.1` | Не добавлять: правило падает на ESLint 10. Проверяет email/даты рождения/IP/телефоны в литералах и комментариях, а не потоки персональных данных; потребует исключений для тестовых данных. |
+| [pg](https://github.com/interlace-collie/eslint/tree/main/packages/eslint-plugin-pg) | [1.4.14](https://registry.npmjs.org/eslint-plugin-pg/1.4.14); 2026-08-06 | `^8.0.0 \|\| ^9.0.0 \|\| ^10.0.0` | Не добавлять: предназначен для Node.js с `pg`, которого во frontend нет. Пакет deprecated и переименован в `eslint-plugin-postgresql-security`; старое имя больше не обновляется. |
+| [security](https://github.com/eslint-community/eslint-plugin-security) | [4.1.0](https://registry.npmjs.org/eslint-plugin-security/4.1.0); 2026-09-27 | Не указан | Уже установлен с recommended. Ориентирован главным образом на Node.js; не заменяет проверки DOM. |
+| [xss](https://github.com/Rantanen/eslint-plugin-xss) | [0.1.12](https://registry.npmjs.org/eslint-plugin-xss/0.1.12); 2022-06-27 | Не указан | Не добавлять: правило падает на ESLint 10. Проверяет HTML-конкатенации/соглашения об именах и присваивания `location.href`; это не специализированная проверка React/TSX. |
+
+## Что добавляет no-unsanitized
+
+[Правило property](https://github.com/mozilla/eslint-plugin-no-unsanitized/blob/master/docs/rules/property.md)
+проверяет присваивания `innerHTML`/`outerHTML`;
+[method](https://github.com/mozilla/eslint-plugin-no-unsanitized/blob/master/docs/rules/method.md)
+проверяет, в частности, `insertAdjacentHTML`, `document.write` и `document.writeln`.
+В [исходнике method](https://github.com/mozilla/eslint-plugin-no-unsanitized/blob/master/lib/rules/method.js)
+также есть проверки `createContextualFragment`, `setHTMLUnsafe` и dynamic import.
+Следовательно, перед включением нужно прогнать весь lint, а не только HTML-примеры.
+
+До подключения no-unsanitized [eslint.config.mjs](eslint.config.mjs) уже включал
+React-проверку `dom-no-dangerously-set-innerhtml` и security-правила SonarJS.
+Предварительная проверка через локальный `ESLint.lintText` показала пробел:
+функция с `element.innerHTML = html` не получала security-диагностику,
+тогда как JSX `dangerouslySetInnerHTML` получал
+диагностику React. Это различие в покрытии, не обнаруженная уязвимость приложения:
+таких production DOM-присваиваний при поиске не найдено.
+
+Плагин понимает TS-синтаксис через TypeScript parser, включая `as`-выражения,
+но не использует TypeScript type checker. Он не доказывает безопасность всех
+потоков данных. У версии 4.1.5 нет runtime dependencies; Prettier указан только
+в devDependencies самого плагина и при его обычной установке потребителем
+не устанавливается.
+
+## Проверка совместимости без установки
+
+Опубликованные npm tarballs прочитаны в `/tmp`; использованы локальные
+ESLint 10.11.0 и `@typescript-eslint/parser`, без lifecycle-скриптов пакетов.
+Через `Linter.verify` с recommended no-unsanitized проверены:
+
+- `innerHTML`/`outerHTML` с параметром `html: string` — обе ошибки найдены;
+- `insertAdjacentHTML`/`document.write`/`document.writeln` — все три ошибки найдены;
+- `innerHTML = html as string` — ошибка найдена;
+- безопасный `textContent` и обычная TSX-интерполяция — без ошибок.
+
+Отдельный запуск реальных правил `pii/no-email` и
+`xss/no-location-href-assign` завершился
+`TypeError: context.getSourceCode is not a function` на ESLint 10.
+Это подтверждает несовместимость проверенных версий, несмотря на широкий
+или отсутствующий peer range. Обходы через legacy adapters не предлагаются.
+
+Поиск секретов уже выполняют [security workflow](.gitea/workflows/security.yml)
+и pre-commit Gitleaks; SonarJS дополнительно проверяет hardcoded secrets.
+Добавление ещё одного secret-scanner в ESLint сейчас не оправдано.
+
+Активацию обоих правил и примеры опасных DOM-вставок проверяет
+`npm run test:lint`; интеграцию зависимости — полный `npm run verify`.
@@ -1,80 +0,0 @@
-{
-	"$schema": "./node_modules/@biomejs/biome/configuration_schema.json",
-	"vcs": {
-		"useIgnoreFile": true
-	},
-	"files": {
-		"includes": [
-			"**",
-			"!dist",
-			"!packages/*/dist",
-			"!storybook-static",
-			"!src/shared/api/generated",
-			"!src/shared/api/spec",
-			"!coverage",
-			"!node_modules"
-		]
-	},
-	"linter": {
-		"rules": {
-			"preset": "recommended",
-			"nursery": {
-				"useReactFunctionComponentDefinition": {
-					"level": "error",
-					"options": {
-						"namedComponents": "arrowFunction"
-					}
-				}
-			},
-			"style": {
-				"noDefaultExport": "error",
-				"useExportsLast": "error",
-				"noMagicNumbers": "error"
-			}
-		}
-	},
-	"overrides": [
-		{
-			"includes": [
-				"vite.config.ts",
-				"vitest.config.ts",
-				".storybook/main.ts",
-				".storybook/preview.tsx",
-				"packages/*/vite.config.ts"
-			],
-			"linter": {
-				"rules": {
-					"style": {
-						"noDefaultExport": "off"
-					}
-				}
-			}
-		},
-		{
-			"includes": ["**/*.stories.tsx"],
-			"linter": {
-				"rules": {
-					"style": {
-						"noDefaultExport": "off",
-						"useExportsLast": "off"
-					}
-				}
-			}
-		},
-		{
-			"includes": [
-				"**/*.test.ts",
-				"**/*.test.tsx",
-				"**/*.stories.tsx",
-				"src/test/**"
-			],
-			"linter": {
-				"rules": {
-					"style": {
-						"noMagicNumbers": "off"
-					}
-				}
-			}
-		}
-	]
-}
@@ -1,63 +1,88 @@
 module.exports = {
 	forbidden: [
 		{
+			from: {
+				path: "^(src|packages/[^/]+/src)/",
+				pathNot: "[.](test|stories|fixtures)[.]|^src/test/",
+			},
+			name: "production-must-not-depend-on-test-code",
+			severity: "error",
+			to: { path: "[.](test|stories|fixtures)[.]|^src/test/" },
+		},
+		{
+			from: {},
+			name: "no-unresolved",
+			severity: "error",
+			to: { couldNotResolve: true },
+		},
+		{
+			from: { path: "^packages/" },
 			name: "packages-must-not-depend-on-app",
 			severity: "error",
-			from: { path: "^packages/" },
 			to: { path: "^src/" },
 		},
 		{
+			from: {},
 			name: "no-circular",
 			severity: "error",
-			from: {},
 			to: { circular: true },
 		},
 		{
+			from: {
+				path: "^src/(app|pages|widgets|features|entities|shared)/([^/]+)/",
+			},
 			name: "slices-must-use-public-api",
 			severity: "error",
-			from: {
-				path: "^src/(app|pages|features|entities|shared)/([^/]+)/",
-			},
 			to: {
-				path: "^src/(app|pages|features|entities|shared)/([^/]+)/(?!index\\.ts$)",
+				path: String.raw`^src/(app|pages|widgets|features|entities|shared)/([^/]+)/(?!index\.ts$)`,
 				pathNot: "^src/$1/$2/",
 			},
 		},
 		{
+			from: { path: "^src/(pages|widgets|features|entities)/([^/]+)/" },
 			name: "no-same-layer-cross-slice-imports",
 			severity: "error",
-			from: { path: "^src/(pages|features|entities)/([^/]+)/" },
 			to: { path: "^src/$1/", pathNot: "^src/$1/$2/" },
 		},
 		{
+			from: { path: "^src/shared/" },
 			name: "shared-must-not-depend-on-layers",
 			severity: "error",
-			from: { path: "^src/shared/" },
-			to: { path: "^src/(entities|features|pages|app)/" },
+			to: { path: "^src/(entities|features|widgets|pages|app)/" },
 		},
 		{
+			from: { path: "^src/entities/" },
 			name: "entities-must-not-depend-on-higher-layers",
 			severity: "error",
-			from: { path: "^src/entities/" },
-			to: { path: "^src/(features|pages|app)/" },
+			to: { path: "^src/(features|widgets|pages|app)/" },
 		},
 		{
+			from: { path: "^src/features/" },
 			name: "features-must-not-depend-on-higher-layers",
 			severity: "error",
-			from: { path: "^src/features/" },
+			to: { path: "^src/(widgets|pages|app)/" },
+		},
+		{
+			from: { path: "^src/widgets/" },
+			name: "widgets-must-not-depend-on-higher-layers",
+			severity: "error",
 			to: { path: "^src/(pages|app)/" },
 		},
 		{
+			from: { path: "^src/pages/" },
 			name: "pages-must-not-depend-on-app",
 			severity: "error",
-			from: { path: "^src/pages/" },
 			to: { path: "^src/app/" },
 		},
 	],
 	options: {
-		exclude: "^packages/[^/]+/dist/",
 		doNotFollow: { path: "node_modules" },
-		tsConfig: { fileName: "tsconfig.app.json" },
+		enhancedResolveOptions: {
+			conditionNames: ["import", "require", "node", "default"],
+			exportsFields: ["exports"],
+		},
+		exclude: "^packages/[^/]+/dist/",
+		tsConfig: { fileName: "tsconfig.dependency-cruiser.json" },
 		tsPreCompilationDeps: true,
 	},
 };
@@ -0,0 +1,178 @@
+const readability = {
+	create(context) {
+		const filename = context.filename;
+
+		function checkParameters(node) {
+			const last = node.params.at(-1);
+			if (
+				last?.type === "Identifier"
+				&& !last.optional
+				&& last.typeAnnotation?.typeAnnotation.type === "TSUnionType"
+				&& last.typeAnnotation.typeAnnotation.types.some(
+					type => type.type === "TSUndefinedKeyword",
+				)
+			)
+				context.report({ messageId: "optional", node: last });
+		}
+
+		return {
+			ArrowFunctionExpression: checkParameters,
+			CallExpression(node) {
+				if (
+					node.callee.type === "MemberExpression"
+					&& ["refine", "superRefine"].includes(node.callee.property.name)
+					&& !filename.endsWith(".schema.ts")
+				)
+					context.report({ messageId: "schema", node });
+			},
+			FunctionDeclaration: checkParameters,
+			FunctionExpression: checkParameters,
+			ImportDeclaration(node) {
+				if (
+					node.source.value === "zod"
+					&& node.importKind !== "type"
+					&& !filename.endsWith(".schema.ts")
+				)
+					context.report({ messageId: "schema", node });
+			},
+			JSXOpeningElement(node) {
+				if (
+					!filename.includes("/packages/icons/")
+					&& node.name.type === "JSXIdentifier"
+					&& /^(?:svg|path|circle|ellipse|rect|polygon|polyline|line|g|defs|use|symbol)$/.test(
+						node.name.name,
+					)
+				)
+					context.report({ messageId: "svg", node });
+			},
+			TSUnionType(node) {
+				const complex
+					= node.types.length > 2
+						|| node.types.some(type => type.type === "TSTypeLiteral");
+
+				if (
+					complex
+					&& node.types.some(
+						(type, index) =>
+							index > 0
+							&& type.loc.start.line === node.types[index - 1].loc.end.line,
+					)
+				)
+					context.report({ messageId: "union", node });
+			},
+			VariableDeclarator(node) {
+				if (
+					!/^[A-Z]/.test(node.id.name ?? "")
+					|| node.init?.type !== "ArrowFunctionExpression"
+					|| node.init.body.type !== "BlockStatement"
+				)
+					return;
+
+				for (const statement of node.init.body.body) {
+					if (statement.type === "FunctionDeclaration")
+						context.report({ messageId: "helper", node: statement });
+
+					else if (statement.type === "VariableDeclaration") {
+						for (const declaration of statement.declarations) {
+							if (
+								["ArrowFunctionExpression", "FunctionExpression"].includes(
+									declaration.init?.type,
+								)
+							)
+								context.report({ messageId: "helper", node: declaration });
+						}
+					}
+				}
+			},
+		};
+	},
+	meta: {
+		messages: {
+			helper:
+				"Move helpers outside components; actions belong to the ViewModel.",
+			optional:
+				"Use an optional trailing parameter instead of a union with undefined.",
+			schema: "Declare Zod schemas in a dedicated *.schema.ts file.",
+			svg: "Own SVG markup in packages/icons, and import its public component.",
+			union: "Put complex union members on separate lines.",
+		},
+		schema: [],
+		type: "suggestion",
+	},
+};
+
+function isComponent(node) {
+	const pending = [node];
+
+	while (pending.length > 0) {
+		const child = pending.pop();
+		if (!child) continue;
+
+		switch (child.type) {
+			case "JSXElement": {
+				return true;
+			}
+
+			case "JSXFragment": {
+				return true;
+			}
+
+			case "JSXExpressionContainer": {
+				pending.push(child.expression);
+				continue;
+			}
+
+			case "LogicalExpression": {
+				pending.push(child.right);
+				continue;
+			}
+
+			case "ConditionalExpression": {
+				pending.push(child.consequent, child.alternate);
+				continue;
+			}
+		}
+	}
+
+	return false;
+}
+
+const jsxSpacing = {
+	create(context) {
+		function check(node) {
+			let previous;
+
+			for (const child of node.children) {
+				if (child.type === "JSXText" && !child.value.trim()) continue;
+				if (isComponent(child)) {
+					if (previous) {
+						const gap = context.sourceCode.text.slice(
+							previous.range[1],
+							child.range[0],
+						);
+
+						if (!/\n\s*\n/.test(gap))
+							context.report({
+								fix: fixer => fixer.insertTextAfter(previous, "\n"),
+								messageId: "space",
+								node: child,
+							});
+					}
+
+					previous = child;
+				}
+				else previous = undefined;
+			}
+		}
+
+		return { JSXElement: check, JSXFragment: check };
+	},
+	meta: {
+		fixable: "whitespace",
+		messages: { space: "Separate sibling JSX components with a blank line." },
+		schema: [],
+		type: "layout",
+	},
+};
+
+export default { rules: { "jsx-spacing": jsxSpacing, readability } };
@@ -0,0 +1,323 @@
+import react from "@eslint-react/eslint-plugin";
+import js from "@eslint/js";
+import stylistic from "@stylistic/eslint-plugin";
+import query from "@tanstack/eslint-plugin-query";
+import vitest from "@vitest/eslint-plugin";
+import { createTypeScriptImportResolver } from "eslint-import-resolver-typescript";
+import { importX } from "eslint-plugin-import-x";
+import jestDom from "eslint-plugin-jest-dom";
+import noUnsanitized from "eslint-plugin-no-unsanitized";
+import perfectionist from "eslint-plugin-perfectionist";
+import hooks from "eslint-plugin-react-hooks";
+import refresh from "eslint-plugin-react-refresh";
+import regexp from "eslint-plugin-regexp";
+import security from "eslint-plugin-security";
+import sonarjs from "eslint-plugin-sonarjs";
+import storybook from "eslint-plugin-storybook";
+import testingLibrary from "eslint-plugin-testing-library";
+import unicorn from "eslint-plugin-unicorn";
+import { defineConfig, globalIgnores } from "eslint/config";
+import globals from "globals";
+import tseslint from "typescript-eslint";
+
+import frontend from "./eslint-rules.mjs";
+
+export default defineConfig(
+	{
+		files: ["src/**/*.{ts,tsx}", "packages/*/src/**/*.{ts,tsx}"],
+		ignores: ["**/*.test.{ts,tsx}", "**/*.stories.tsx", "src/test/**"],
+		plugins: { frontend },
+		rules: { "frontend/jsx-spacing": "error", "frontend/readability": "error" },
+	},
+	globalIgnores([
+		"**/dist/**",
+		"dist-ssr/**",
+		"storybook-static/**",
+		"coverage/**",
+		".vitest/**",
+		".scannerwork/**",
+		"src/shared/api/generated/**",
+		"src/shared/api/spec/**",
+	]),
+	{
+		extends: [
+			js.configs.recommended,
+			importX.flatConfigs.recommended,
+			unicorn.configs.recommended,
+			sonarjs.configs.recommended,
+			regexp.configs.recommended,
+			security.configs.recommended,
+			noUnsanitized.configs.recommended,
+			perfectionist.configs["recommended-natural"],
+			stylistic.configs.customize({
+				indent: "tab",
+				jsx: true,
+				quotes: "double",
+				semi: true,
+			}),
+		],
+		files: ["**/*.{js,mjs,cjs,ts,tsx}"],
+		linterOptions: { reportUnusedDisableDirectives: "error" },
+		rules: {
+			// A comma disambiguates generic arrow functions from JSX in TSX.
+			"@stylistic/comma-dangle": [
+				"error",
+				{
+					arrays: "always-multiline",
+					enums: "always-multiline",
+					exports: "always-multiline",
+					functions: "always-multiline",
+					generics: "ignore",
+					imports: "always-multiline",
+					objects: "always-multiline",
+					tuples: "always-multiline",
+				},
+			],
+
+			// Keep text/interpolation together: splitting can change rendered whitespace.
+			"@stylistic/jsx-one-expression-per-line": ["error", { allow: "non-jsx" }],
+			"@stylistic/max-len": [
+				"error",
+				{
+					code: 80,
+					ignoreComments: true,
+					ignoreRegExpLiterals: true,
+					ignoreStrings: true,
+					ignoreTemplateLiterals: true,
+					ignoreTrailingComments: true,
+					ignoreUrls: true,
+					tabWidth: 2,
+				},
+			],
+
+			"@stylistic/multiline-ternary": ["error", "always-multiline"],
+			"@stylistic/no-tabs": ["error", { allowIndentationTabs: true }],
+			"@stylistic/operator-linebreak": ["error", "before"],
+			"@stylistic/padding-line-between-statements": [
+				"error",
+				{ blankLine: "always", next: "return", prev: "*" },
+				{
+					blankLine: "always",
+					next: "*",
+					prev: ["multiline-const", "multiline-let", "block-like", "type"],
+				},
+				{
+					blankLine: "always",
+					next: ["multiline-const", "multiline-let", "block-like", "type"],
+					prev: "*",
+				},
+				{ blankLine: "any", next: "cjs-import", prev: "cjs-import" },
+			],
+			"no-nested-ternary": "error",
+			"perfectionist/sort-classes": [
+				"error",
+				{
+					groups: ["static-method", "property", "method", "unknown"],
+					type: "natural",
+				},
+			],
+			// Preserve the repository's component, hook and config file naming conventions.
+			"unicorn/filename-case": [
+				"error",
+				{ cases: { camelCase: true, kebabCase: true, pascalCase: true } },
+			],
+			// React uses Props/Ref names, including the recommended React ref-name rule.
+			"unicorn/name-replacements": [
+				"error",
+				{ replacements: { props: false, ref: false } },
+			],
+			// API DTOs, React refs and Mantine use null as part of their contracts.
+			"unicorn/no-null": "off",
+			"unicorn/prefer-ternary": ["error", "only-single-line"],
+		},
+		settings: {
+			"import-x/resolver-next": [
+				createTypeScriptImportResolver({ project: "tsconfig.json" }),
+			],
+		},
+	},
+	{
+		files: ["**/*.{js,mjs,cjs}", "**/*.config.ts", ".storybook/main.ts"],
+		languageOptions: { globals: globals.node },
+	},
+	{
+		extends: [
+			tseslint.configs.recommendedTypeChecked,
+			importX.flatConfigs.typescript,
+		],
+		files: ["**/*.{ts,tsx}"],
+		languageOptions: {
+			parserOptions: {
+				projectService: true,
+				tsconfigRootDir: import.meta.dirname,
+			},
+		},
+		rules: {
+			"@typescript-eslint/consistent-type-imports": "error",
+			// React ignores event handler return values; floating promises are still checked in bodies.
+			"@typescript-eslint/no-misused-promises": [
+				"error",
+				{ checksVoidReturn: { attributes: false } },
+			],
+			"@typescript-eslint/no-non-null-assertion": "error",
+			"@typescript-eslint/switch-exhaustiveness-check": "error",
+		},
+	},
+	{
+		extends: [
+			react.configs["recommended-type-checked"],
+			hooks.configs.flat.recommended,
+			query.configs["flat/recommended"],
+		],
+		files: [
+			"src/**/*.{ts,tsx}",
+			"packages/*/src/**/*.{ts,tsx}",
+			".storybook/preview.tsx",
+		],
+		languageOptions: { globals: globals.browser },
+		rules: {
+			"import-x/exports-last": "error",
+			"import-x/no-default-export": "error",
+		},
+	},
+	{
+		extends: [refresh.configs.vite],
+		files: ["src/**/*.tsx", "packages/*/src/**/*.tsx"],
+		ignores: ["**/*.test.tsx", "**/*.stories.tsx", "src/test/**"],
+	},
+	{
+		files: ["src/**/*.view.tsx"],
+		rules: {
+			"no-restricted-imports": ["error", {
+				paths: [
+					{
+						allowTypeImports: true,
+						message: "Query lifecycle belongs to the data VM.",
+						name: "@tanstack/react-query",
+					},
+					{
+						allowTypeImports: true,
+						message: "Transport belongs to shared/api and the data VM.",
+						name: "openapi-fetch",
+					},
+					{
+						allowTypeImports: true,
+						message: "Transport belongs to shared/api and the data VM.",
+						name: "openapi-react-query",
+					},
+				],
+				patterns: [
+					{
+						allowTypeImports: true,
+						group: ["react-router", "@/entities/*", "@/features/*"],
+						importNamePattern: "^use",
+						message: "Pass route, auth and entity data from the data VM.",
+					},
+					{
+						allowTypeImports: true,
+						group: ["@/shared/api", "@/shared/api/*"],
+						importNamePattern: "^use|^api(?:Query)?Client$",
+						message: "Fetching belongs to the data VM; error helpers are allowed.",
+					},
+				],
+			}],
+		},
+	},
+	{
+		files: ["src/**/*.{ts,tsx}", "packages/*/src/**/*.{ts,tsx}"],
+		ignores: ["**/*.test.{ts,tsx}", "**/*.stories.tsx", "src/test/**"],
+		rules: {
+			"@typescript-eslint/no-magic-numbers": [
+				"error",
+				{
+					ignore: [-1, 0, 1, "-1n", "0n", "1n"],
+					ignoreArrayIndexes: true,
+					ignoreDefaultValues: true,
+					ignoreNumericLiteralTypes: true,
+					ignoreTypeIndexes: true,
+				},
+			],
+			"@typescript-eslint/no-unnecessary-condition": ["error", { allowConstantLoopConditions: true }],
+		},
+	},
+	{
+		extends: [vitest.configs.recommended],
+		files: ["**/*.test.{ts,tsx}"],
+		rules: {
+			"vitest/no-focused-tests": "error",
+			"vitest/valid-expect": ["error", { maxArgs: 2 }],
+		},
+	},
+	{
+		extends: [
+			testingLibrary.configs["flat/react"],
+			jestDom.configs["flat/recommended"],
+		],
+		files: ["**/*.test.tsx"],
+	},
+	storybook.configs["flat/recommended"],
+	{
+		files: ["**/*.stories.tsx", ".storybook/preview.tsx"],
+		rules: {
+			"import-x/exports-last": "off",
+			"import-x/no-default-export": "off",
+		},
+	},
+	{
+		files: ["src/**/*.{ts,tsx}", "packages/*/src/**/*.{ts,tsx}"],
+		ignores: ["**/*.test.{ts,tsx}", "**/*.stories.tsx", "src/test/**"],
+		rules: {
+			"@typescript-eslint/no-unsafe-enum-comparison": "error",
+			"no-restricted-syntax": [
+				"error",
+				{
+					message:
+						"Pass a named handler from the ViewModel; prepare prop data before JSX.",
+					selector:
+						"JSXAttribute > JSXExpressionContainer :matches(ArrowFunctionExpression, FunctionExpression)",
+				},
+				{
+					message: "Name the derived prop value before JSX.",
+					selector:
+						"JSXAttribute > JSXExpressionContainer ConditionalExpression",
+				},
+
+				{
+					message:
+						"Use the owning enum member for machine codes and protocol values.",
+					selector:
+						"Literal[value=/^(?:(?:INSTRUMENT_ID_TYPE|INSTRUMENT_TYPE|OPERATION_STATE|OPERATION_TYPE|ACCOUNT_STATUS|ACCOUNT_TYPE|CANDLE_INTERVAL|COUPON_TYPE|BANK|INVALID)_[A-Z0-9]+(?:_[A-Z0-9]+)*|[A-Z][A-Z0-9_]*_(?:ERROR|UNAVAILABLE|NOT_FOUND|NOT_CONNECTED|CONFLICT|AMBIGUOUS|REGISTERED)|P[0-9]{4}|UNAUTHORIZED|FORBIDDEN|BAD_REQUEST|NOT_FOUND|UNSUPPORTED_MEDIA_TYPE)$/]:not(TSEnumMember > Literal)",
+				},
+				{
+					message:
+						"Use the owning enum member instead of a template machine code.",
+					selector:
+						"TemplateElement[value.cooked=/^(?:(?:INSTRUMENT_ID_TYPE|INSTRUMENT_TYPE|OPERATION_STATE|OPERATION_TYPE|ACCOUNT_STATUS|ACCOUNT_TYPE|CANDLE_INTERVAL|COUPON_TYPE|BANK|INVALID)_[A-Z0-9]+(?:_[A-Z0-9]+)*|[A-Z][A-Z0-9_]*_(?:ERROR|UNAVAILABLE|NOT_FOUND|NOT_CONNECTED|CONFLICT|AMBIGUOUS|REGISTERED)|P[0-9]{4}|UNAUTHORIZED|FORBIDDEN|BAD_REQUEST|NOT_FOUND|UNSUPPORTED_MEDIA_TYPE)$/]:not(TSEnumMember TemplateElement)",
+				},
+				{
+					message:
+						"Use an enum member instead of an inline code or protocol value.",
+					selector:
+						"Property:matches([key.name=/^(code|errorCode|idType|instrumentKind)$/], [key.value=/^(code|errorCode|idType|instrumentKind)$/]) > Literal.value[value=type(string)]",
+				},
+				{
+					message:
+						"Use an enum member instead of constructing a code or protocol value.",
+					selector:
+						"Property:matches([key.name=/^(code|errorCode|idType|instrumentKind)$/], [key.value=/^(code|errorCode|idType|instrumentKind)$/]) > TemplateLiteral.value",
+				},
+				{
+					message: "Use a computed enum member as the protocol mapping key.",
+					selector:
+						"Property[computed=false][key.name=/^(OPERATION_TYPE|ACCOUNT_TYPE)_/]",
+				},
+				{
+					message:
+						"Compare codes with their enum members, not string literals.",
+					selector:
+						"BinaryExpression:has(> :matches(MemberExpression[property.name=/^(code|errorCode)$/], Identifier[name=/^(code|errorCode)$/])) > Literal[value=type(string)]",
+				},
+			],
+		},
+	},
+);
@@ -1,7 +1,7 @@
 {
 	"name": "wealth-ledger-frontend",
 	"private": true,
-	"version": "0.3.0",
+	"version": "1.0.0",
 	"type": "module",
 	"engines": {
 		"node": "24.21.0"
@@ -13,25 +13,28 @@
 		"preview:catalog": "vite preview --outDir storybook-static",
 		"typecheck": "npm run build:packages && tsc -b --noEmit",
 		"build": "npm run build:packages && tsc -b && vite build",
-		"lint": "biome check .",
+		"lint": "npm run lint:eslint",
+		"lint:eslint": "npm run build:packages && eslint . --max-warnings=0",
 		"test": "npm run build:packages && vitest",
 		"test:run": "npm run build:packages && vitest run",
 		"test:coverage": "npm run build:packages && vitest run --coverage",
+		"test:lint": "node --test scripts/test-eslint.mjs",
 		"openapi:generate": "openapi-typescript src/shared/api/spec/openapi.json -o src/shared/api/generated/schema.d.ts",
 		"openapi:check": "node scripts/check-openapi.mjs",
 		"knip": "npm run build:packages && knip",
 		"deps": "npm run build:packages && depcruise src packages --config dependency-cruiser.cjs --output-type err-long",
-		"verify": "npm run build:packages && npm run openapi:check && npm run typecheck && npm run lint && npm run test:coverage && npm run knip && npm run deps && npm run deps:storybook && npm run build && npm run build:catalog",
+		"verify": "npm run build:packages && npm run openapi:check && tsc -b --noEmit && eslint . --max-warnings=0 && npm run test:lint && vitest run --coverage && knip && depcruise src packages --config dependency-cruiser.cjs --output-type err-long && depcruise src packages .storybook/preview.tsx --config .storybook/dependency-cruiser.cjs --output-type err-long && tsc -b && vite build && storybook build --output-dir storybook-static --disable-telemetry",
 		"prepare": "husky",
 		"preview": "vite preview",
 		"deps:storybook": "npm run build:packages && depcruise src packages .storybook/preview.tsx --config .storybook/dependency-cruiser.cjs --output-type err-long",
 		"release:preview": "release-it --dry-run --ci",
 		"release:prepare": "release-it --ci",
 		"commitlint": "commitlint",
-		"build:packages": "npm run build --workspaces --if-present"
+		"build:packages": "npm run build --workspaces --if-present",
+		"lint:fix": "npm run build:packages && eslint . --fix --max-warnings=0"
 	},
 	"lint-staged": {
-		"*.{css,html,json,md,ts,tsx}": "biome format --write --no-errors-on-unmatched"
+		"*.{js,mjs,cjs,ts,tsx}": "eslint --fix --max-warnings=0 --no-warn-ignored"
 	},
 	"dependencies": {
 		"@hookform/resolvers": "5.9.1",
@@ -39,6 +42,7 @@
 		"@mantine/core": "9.6.1",
 		"@mantine/dates": "9.6.1",
 		"@mantine/hooks": "9.6.1",
+		"@mantine/notifications": "9.6.1",
 		"@tanstack/react-query": "5.102.8",
 		"@wealthledger/icons": "file:packages/icons",
 		"@wealthledger/tokens": "file:packages/tokens",
@@ -59,36 +63,64 @@
 	},
 	"devDependencies": {
 		"@babel/core": "8.0.5",
-		"@biomejs/biome": "2.5.13",
 		"@commitlint/cli": "21.2.2",
 		"@commitlint/config-conventional": "21.2.2",
+		"@eslint-react/eslint-plugin": "5.21.0",
+		"@eslint/js": "10.0.1",
 		"@release-it/conventional-changelog": "12.0.0",
 		"@rolldown/plugin-babel": "0.2.4",
 		"@storybook/addon-docs": "10.6.0",
 		"@storybook/react-vite": "10.6.0",
+		"@stylistic/eslint-plugin": "5.10.0",
+		"@tanstack/eslint-plugin-query": "5.104.0",
 		"@testing-library/jest-dom": "7.0.1",
 		"@testing-library/react": "16.3.3",
 		"@types/node": "24.13.4",
 		"@types/react": "19.3.0",
 		"@types/react-dom": "19.3.0",
 		"@vitejs/plugin-react": "6.1.1",
+		"@vitest/browser-playwright": "5.0.0",
 		"@vitest/coverage-v8": "5.0.0",
+		"@vitest/eslint-plugin": "1.6.27",
 		"babel-plugin-react-compiler": "1.0.0",
 		"conventional-changelog-conventionalcommits": "10.4.0",
 		"dependency-cruiser": "18.2.0",
+		"eslint": "10.11.0",
+		"eslint-import-resolver-typescript": "4.4.5",
+		"eslint-plugin-import-x": "4.17.1",
+		"eslint-plugin-jest-dom": "5.10.1",
+		"eslint-plugin-no-unsanitized": "4.1.5",
+		"eslint-plugin-perfectionist": "5.12.1",
+		"eslint-plugin-react-hooks": "7.1.1",
+		"eslint-plugin-react-refresh": "0.5.7",
+		"eslint-plugin-regexp": "3.3.1",
+		"eslint-plugin-security": "4.1.0",
+		"eslint-plugin-sonarjs": "4.2.1",
+		"eslint-plugin-storybook": "10.6.0",
+		"eslint-plugin-testing-library": "7.16.2",
+		"eslint-plugin-unicorn": "76.0.0",
+		"globals": "17.12.0",
 		"husky": "9.1.7",
 		"jsdom": "30.0.1",
 		"knip": "6.35.1",
 		"lint-staged": "17.5.1",
 		"msw": "2.15.0",
 		"openapi-typescript": "7.13.0",
+		"playwright": "1.63.0",
 		"release-it": "21.0.2",
 		"storybook": "10.6.0",
 		"typescript": "5.9.3",
+		"typescript-eslint": "8.70.1",
 		"vite": "8.3.0",
 		"vite-plugin-pwa": "1.3.0",
 		"vitest": "5.0.0"
 	},
+	"overrides": {
+		"release-it": {
+			"basic-ftp": "6.2.1",
+			"undici": "7.29.1"
+		}
+	},
 	"allowScripts": {
 		"esbuild@0.28.2": true,
 		"fsevents@2.3.3": true
@@ -10,9 +10,12 @@
 		".": {
 			"types": "./dist/index.d.ts",
 			"import": "./dist/index.js"
-		}
+		},
+		"./styles.css": "./dist/index.css"
 	},
-	"sideEffects": false,
+	"sideEffects": [
+		"**/*.css"
+	],
 	"scripts": {
 		"build": "vite build && tsc -p tsconfig.json"
 	},
@@ -1,10 +1,9 @@
 import type { Meta, StoryObj } from "@storybook/react-vite";
+
 import { AddIcon, DeleteIcon, EditIcon } from "./index";

 const meta = {
-	title: "Design System/Icons",
 	component: AddIcon,
-	tags: ["autodocs"],
 	parameters: {
 		docs: {
 			description: {
@@ -13,21 +12,26 @@ const meta = {
 			},
 		},
 	},
+	tags: ["autodocs"],
+	title: "Design System/Icons",
 } satisfies Meta<typeof AddIcon>;

 export default meta;
+
 type Story = StoryObj<typeof meta>;

 export const Decorative: Story = {
 	render: () => (
-		<div style={{ display: "flex", gap: 16, color: "#2563eb" }}>
-			<button type="button" aria-label="Добавить пример">
+		<div style={{ color: "#2563eb", display: "flex", gap: 16 }}>
+			<button aria-label="Добавить пример" type="button">
 				<AddIcon size={20} strokeWidth={2} />
 			</button>
-			<button type="button" aria-label="Изменить пример">
+
+			<button aria-label="Изменить пример" type="button">
 				<EditIcon size={18} />
 			</button>
-			<button type="button" aria-label="Удалить пример">
+
+			<button aria-label="Удалить пример" type="button">
 				<DeleteIcon size={18} />
 			</button>
 		</div>
@@ -36,10 +40,12 @@ export const Decorative: Story = {

 export const Meaningful: Story = {
 	render: () => (
-		<div style={{ display: "flex", gap: 16, color: "#2563eb" }}>
-			<AddIcon aria-hidden={false} role="img" aria-label="Добавление" />
-			<EditIcon aria-hidden={false} role="img" aria-label="Редактирование" />
-			<DeleteIcon aria-hidden={false} role="img" aria-label="Удаление" />
+		<div style={{ color: "#2563eb", display: "flex", gap: 16 }}>
+			<AddIcon aria-hidden={false} aria-label="Добавление" role="img" />
+
+			<EditIcon aria-hidden={false} aria-label="Редактирование" role="img" />
+
+			<DeleteIcon aria-hidden={false} aria-label="Удаление" role="img" />
 		</div>
 	),
 };
@@ -1,25 +1,28 @@
 import { render, screen } from "@testing-library/react";
 import { describe, expect, it } from "vitest";
-import { AddIcon, DeleteIcon, EditIcon } from "./index";
+
+import { AddIcon, DeleteIcon, EditIcon, OperationIcon } from "./index";

 describe("icon accessibility", () => {
 	it.each([AddIcon, EditIcon, DeleteIcon])(
 		"keeps decoration hidden and exposes explicitly named images: %s",
 		(Icon) => {
 			const { rerender } = render(
-				<button type="button" aria-label="Действие">
+				<button aria-label="Действие" type="button">
 					<Icon />
 				</button>,
 			);
+
 			expect(screen.queryByRole("img")).not.toBeInTheDocument();
 			expect(
+				// eslint-disable-next-line testing-library/no-node-access -- This assertion checks DOM structure, decoration or focus behavior that semantic queries cannot establish.
 				screen.getByRole("button", { name: "Действие" }).querySelector("svg"),
 			).toHaveAttribute("focusable", "false");
 			rerender(
 				<Icon
 					aria-hidden={false}
-					role="img"
 					aria-label="Пример"
+					role="img"
 					size={18}
 					strokeWidth={2}
 				/>,
@@ -31,4 +34,16 @@ describe("icon accessibility", () => {
 			expect(icon).toHaveAttribute("stroke", "currentColor");
 		},
 	);
+	it("keeps operation icons decorative", () => {
+		render(
+			<button aria-label="Операция" type="button">
+				<OperationIcon color="orange" variant="home" />
+			</button>,
+		);
+		expect(screen.queryByRole("img")).not.toBeInTheDocument();
+		// eslint-disable-next-line testing-library/no-node-access -- Decorative SVG has no accessible role.
+		expect(screen.getByRole("button").querySelector("svg")).toHaveAttribute(
+			"aria-hidden", "true",
+		);
+	});
 });
@@ -1,4 +1,5 @@
 .icon {
+	flex-shrink: 0;
 	overflow: visible;

 	& path {
@@ -0,0 +1,72 @@
+import type { FC } from "react";
+
+import { BasketIcon } from "./svg/BasketIcon";
+import { CarIcon } from "./svg/CarIcon";
+import { CashWithdrawalIcon } from "./svg/CashWithdrawalIcon";
+import { CoffeeIcon } from "./svg/CoffeeIcon";
+import { DepositIcon } from "./svg/DepositIcon";
+import { DiceIcon } from "./svg/DiceIcon";
+import { DownloadIcon } from "./svg/DownloadIcon";
+import { EducationIcon } from "./svg/EducationIcon";
+import { GridIcon } from "./svg/GridIcon";
+import { GrowthIcon } from "./svg/GrowthIcon";
+import { HomeIcon } from "./svg/HomeIcon";
+import { MedicalIcon } from "./svg/MedicalIcon";
+import { MusicIcon } from "./svg/MusicIcon";
+import { RefundIcon } from "./svg/RefundIcon";
+import { RepaymentIcon } from "./svg/RepaymentIcon";
+import { ServerIcon } from "./svg/ServerIcon";
+import { ShieldIcon } from "./svg/ShieldIcon";
+import { ShoppingIcon } from "./svg/ShoppingIcon";
+import { SmokingIcon } from "./svg/SmokingIcon";
+import { SubscriptionsIcon } from "./svg/SubscriptionsIcon";
+import { TaxiIcon } from "./svg/TaxiIcon";
+import { TopupIcon } from "./svg/TopupIcon";
+import { TransferIcon } from "./svg/TransferIcon";
+import { TravelIcon } from "./svg/TravelIcon";
+import { WifiIcon } from "./svg/WifiIcon";
+import { WineIcon } from "./svg/WineIcon";
+
+const icons = {
+	basket: BasketIcon,
+	car: CarIcon,
+	cashWithdrawal: CashWithdrawalIcon,
+	coffee: CoffeeIcon,
+	deposit: DepositIcon,
+	dice: DiceIcon,
+	download: DownloadIcon,
+	education: EducationIcon,
+	grid: GridIcon,
+	growth: GrowthIcon,
+	home: HomeIcon,
+	medical: MedicalIcon,
+	music: MusicIcon,
+	refund: RefundIcon,
+	repayment: RepaymentIcon,
+	server: ServerIcon,
+	shield: ShieldIcon,
+	shopping: ShoppingIcon,
+	smoking: SmokingIcon,
+	subscriptions: SubscriptionsIcon,
+	taxi: TaxiIcon,
+	topup: TopupIcon,
+	transfer: TransferIcon,
+	travel: TravelIcon,
+	wifi: WifiIcon,
+	wine: WineIcon,
+};
+
+type OperationIconProps = {
+	color: string;
+	variant: keyof typeof icons;
+};
+
+const OperationIcon: FC<OperationIconProps> = (props) => {
+	const { color, variant } = props;
+	// eslint-disable-next-line security/detect-object-injection -- Variant is a closed key of the static icon registry.
+	const Icon = icons[variant];
+
+	return <Icon style={{ color: `var(--mantine-color-${color}-7)` }} />;
+};
+
+export { OperationIcon, type OperationIconProps };
@@ -0,0 +1,40 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const BasketIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={`${classes.icon} ${classes.basket}`}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 9h18l-2 11H5L3 9Z" pathLength={1} />
+
+			<path d="M8 9l4-6 4 6" pathLength={1} />
+
+			<path d="M9 13v3" pathLength={1} />
+
+			<path d="M15 13v3" pathLength={1} />
+
+			<path d="M10 6a2 2 0 1 0 4 0a2 2 0 1 0-4 0" pathLength={1} />
+		</svg>
+	);
+};
+
+export { BasketIcon };
@@ -0,0 +1,40 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const CarIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={`${classes.icon} ${classes.car}`}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M4 16H2v-4l3-1 3-4h6l4 4 4 1v4h-2" pathLength={1} />
+
+			<path d="M8 16h8" pathLength={1} />
+
+			<path d="M6 11h12m-6-4v4" pathLength={1} />
+
+			<path d="M4 16a2 2 0 1 0 4 0a2 2 0 1 0-4 0m2-2v4m-2-2h4" pathLength={1} />
+
+			<path d="M16 16a2 2 0 1 0 4 0a2 2 0 1 0-4 0m2-2v4m-2-2h4" pathLength={1} />
+		</svg>
+	);
+};
+
+export { CarIcon };
@@ -0,0 +1,38 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const CashWithdrawalIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M4 10V3h16v7" pathLength={1} />
+
+			<path d="M7 7h10v14H7V7Z" pathLength={1} />
+
+			<path d="M7 11h10" pathLength={1} />
+
+			<path d="M10 16h4" pathLength={1} />
+		</svg>
+	);
+};
+
+export { CashWithdrawalIcon };
@@ -0,0 +1,40 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const CoffeeIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={`${classes.icon} ${classes.coffee}`}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M4 8h12v7a4 4 0 0 1-4 4H8a4 4 0 0 1-4-4V8Z" pathLength={1} />
+
+			<path d="M16 9h2a3 3 0 0 1 0 6h-2" pathLength={1} />
+
+			<path d="M8 6c-2-1 2-2 0-4" pathLength={1} />
+
+			<path d="M12 6c-2-1 2-2 0-4" pathLength={1} />
+
+			<path d="M3 22h15" pathLength={1} />
+		</svg>
+	);
+};
+
+export { CoffeeIcon };
@@ -0,0 +1,38 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const DepositIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={`${classes.icon} ${classes.deposit}`}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M6 9a6 6 0 1 0 12 0a6 6 0 1 0-12 0" pathLength={1} />
+
+			<path d="M10.5 12V6h2a1.5 1.5 0 0 1 0 3h-3m0 1.5h3" pathLength={1} />
+
+			<path d="M4 16c0 4 16 4 16 0" pathLength={1} />
+
+			<path d="M4 19c0 4 16 4 16 0" pathLength={1} />
+		</svg>
+	);
+};
+
+export { DepositIcon };
@@ -0,0 +1,42 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const DiceIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M5 3h14a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2Z" pathLength={1} />
+
+			<path d="M7 7h.01" pathLength={1} />
+
+			<path d="M17 7h.01" pathLength={1} />
+
+			<path d="M12 12h.01" pathLength={1} />
+
+			<path d="M7 17h.01" pathLength={1} />
+
+			<path d="M17 17h.01" pathLength={1} />
+		</svg>
+	);
+};
+
+export { DiceIcon };
@@ -0,0 +1,40 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const DownloadIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 3h18v13H3V3Z" pathLength={1} />
+
+			<path d="M8 21h8" pathLength={1} />
+
+			<path d="M12 16v5" pathLength={1} />
+
+			<path d="M12 6v7" pathLength={1} />
+
+			<path d="M9 10l3 3 3-3" pathLength={1} />
+		</svg>
+	);
+};
+
+export { DownloadIcon };
@@ -0,0 +1,36 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const EducationIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M2 8l10-5 10 5-10 5L2 8Z" pathLength={1} />
+
+			<path d="M6 10v7c4 3 8 3 12 0v-7" pathLength={1} />
+
+			<path d="M22 8v9" pathLength={1} />
+		</svg>
+	);
+};
+
+export { EducationIcon };
@@ -0,0 +1,38 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const GridIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={`${classes.icon} ${classes.grid}`}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M4 4h6v6H4V4Z" pathLength={1} />
+
+			<path d="M14 4h6v6h-6V4Z" pathLength={1} />
+
+			<path d="M4 14h6v6H4v-6Z" pathLength={1} />
+
+			<path d="M14 14h6v6h-6v-6Z" pathLength={1} />
+		</svg>
+	);
+};
+
+export { GridIcon };
@@ -0,0 +1,36 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const GrowthIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={`${classes.icon} ${classes.growth}`}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 3v18h18" pathLength={1} />
+
+			<path d="M6 15l5-5 4 3 6-8" pathLength={1} />
+
+			<path d="M16 5h5v5" pathLength={1} />
+		</svg>
+	);
+};
+
+export { GrowthIcon };
@@ -0,0 +1,36 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const HomeIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 11l9-8 9 8" pathLength={1} />
+
+			<path d="M5 10v11h14V10" pathLength={1} />
+
+			<path d="M9 21v-8h6v8" pathLength={1} />
+		</svg>
+	);
+};
+
+export { HomeIcon };
@@ -0,0 +1,32 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const MedicalIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M9 3h6v6h6v6h-6v6H9v-6H3V9h6V3Z" pathLength={1} />
+		</svg>
+	);
+};
+
+export { MedicalIcon };
@@ -0,0 +1,36 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const MusicIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M9 5v14a3 3 0 1 1-3-3h3" pathLength={1} />
+
+			<path d="M9 5l11-2v14a3 3 0 1 1-3-3h3" pathLength={1} />
+
+			<path d="M9 9l11-2" pathLength={1} />
+		</svg>
+	);
+};
+
+export { MusicIcon };
@@ -0,0 +1,34 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const RefundIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M8 4L3 9l5 5" pathLength={1} />
+
+			<path d="M3 9h11a7 7 0 0 1 0 14" pathLength={1} />
+		</svg>
+	);
+};
+
+export { RefundIcon };
@@ -0,0 +1,36 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const RepaymentIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={`${classes.icon} ${classes.repayment}`}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 5h18v14H3V5Z" pathLength={1} />
+
+			<path d="M3 9h18" pathLength={1} />
+
+			<path d="M10 18v-7h3a2 2 0 0 1 0 4H9m0 1.5h4" pathLength={1} />
+		</svg>
+	);
+};
+
+export { RepaymentIcon };
@@ -0,0 +1,42 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const ServerIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={`${classes.icon} ${classes.server}`}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 3h18v7H3V3Z" pathLength={1} />
+
+			<path d="M3 14h18v7H3v-7Z" pathLength={1} />
+
+			<path d="M7 6.5h.01" pathLength={1} />
+
+			<path d="M7 17.5h.01" pathLength={1} />
+
+			<path d="M15 6.5h3" pathLength={1} />
+
+			<path d="M15 17.5h3" pathLength={1} />
+		</svg>
+	);
+};
+
+export { ServerIcon };
@@ -0,0 +1,34 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const ShieldIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M12 2l8 4v6c0 5-8 10-8 10S4 17 4 12V6l8-4Z" pathLength={1} />
+
+			<path d="M8 12l3 3 5-6" pathLength={1} />
+		</svg>
+	);
+};
+
+export { ShieldIcon };
@@ -0,0 +1,34 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const ShoppingIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M5 7h14l2 14H3L5 7Z" pathLength={1} />
+
+			<path d="M8 8V6a4 4 0 0 1 8 0v2" pathLength={1} />
+		</svg>
+	);
+};
+
+export { ShoppingIcon };
@@ -0,0 +1,38 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const SmokingIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 14h18v5H3v-5Z" pathLength={1} />
+
+			<path d="M16 14v5" pathLength={1} />
+
+			<path d="M8 10V8c0-2 3-2 3-4V2" pathLength={1} />
+
+			<path d="M15 10V8c0-2 3-2 3-4" pathLength={1} />
+		</svg>
+	);
+};
+
+export { SmokingIcon };
@@ -0,0 +1,38 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const SubscriptionsIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M4 10a8 8 0 0 1 13-6l3 3" pathLength={1} />
+
+			<path d="M20 3v4h-4" pathLength={1} />
+
+			<path d="M20 14a8 8 0 0 1-13 6l-3-3" pathLength={1} />
+
+			<path d="M4 21v-4h4" pathLength={1} />
+		</svg>
+	);
+};
+
+export { SubscriptionsIcon };
@@ -0,0 +1,44 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const TaxiIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M4 10l2-6h12l2 6" pathLength={1} />
+
+			<path d="M3 10h18v8H3v-8Z" pathLength={1} />
+
+			<path d="M6 18v3" pathLength={1} />
+
+			<path d="M18 18v3" pathLength={1} />
+
+			<path d="M6 14h2" pathLength={1} />
+
+			<path d="M16 14h2" pathLength={1} />
+
+			<path d="M10 4V2h4v2" pathLength={1} />
+		</svg>
+	);
+};
+
+export { TaxiIcon };
@@ -0,0 +1,36 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const TopupIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={`${classes.icon} ${classes.topup}`}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M20 8V5H5a2 2 0 0 1 0-4h13v4" pathLength={1} />
+
+			<path d="M3 3v16a2 2 0 0 0 2 2h15V8H5" pathLength={1} />
+
+			<path d="M16 12v5m-2.5-2.5h5" pathLength={1} />
+		</svg>
+	);
+};
+
+export { TopupIcon };
@@ -0,0 +1,34 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const TransferIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={`${classes.icon} ${classes.transfer}`}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 7h18l-4-4" pathLength={1} />
+
+			<path d="M21 17H3l4 4" pathLength={1} />
+		</svg>
+	);
+};
+
+export { TransferIcon };
@@ -0,0 +1,32 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const TravelIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={classes.icon}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M10 3h4v7l7 5v3l-7-3v5l2 1v1l-4-1-4 1v-1l2-1v-5l-7 3v-3l7-5V3Z" pathLength={1} />
+		</svg>
+	);
+};
+
+export { TravelIcon };
@@ -0,0 +1,38 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const WifiIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={`${classes.icon} ${classes.wifi}`}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 7a14 14 0 0 1 18 0" pathLength={1} />
+
+			<path d="M6 11a9 9 0 0 1 12 0" pathLength={1} />
+
+			<path d="M9 15a4 4 0 0 1 6 0" pathLength={1} />
+
+			<path d="M12 19h.01" pathLength={1} />
+		</svg>
+	);
+};
+
+export { WifiIcon };
@@ -0,0 +1,38 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../../types";
+
+import { bindIconAnimation } from "../../bind-icon-animation";
+import classes from "../OperationIcon.module.css";
+
+const WineIcon: FC<IconProps> = (props) => {
+	const { size = 24, ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			className={`${classes.icon} ${classes.wine}`}
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.6"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M7 3h10v5a5 5 0 0 1-10 0V3Z" pathLength={1} />
+
+			<path d="M7 7h10v1a5 5 0 0 1-10 0V7Z" pathLength={1} />
+
+			<path d="M12 13v8" pathLength={1} />
+
+			<path d="M8 21h8" pathLength={1} />
+		</svg>
+	);
+};
+
+export { WineIcon };
@@ -1,36 +1,38 @@
-import { fireEvent, render, waitFor } from "@testing-library/react";
+import { fireEvent, render, screen, waitFor } from "@testing-library/react";
 import { afterEach, expect, it, vi } from "vitest";
+
 import { bindIconAnimation } from "./bind-icon-animation";

 afterEach(() => vi.restoreAllMocks());

 it("finishes every delayed part after leaving and does not restart on quick re-entry", async () => {
-	vi.spyOn(window, "matchMedia").mockReturnValue({
+	vi.spyOn(globalThis, "matchMedia").mockReturnValue({
 		matches: true,
 	} as MediaQueryList);
-	const { container, getByRole } = render(
+
+	const { container } = render(
 		<button type="button">
-			<svg ref={bindIconAnimation} aria-hidden="true" />
+			<svg aria-hidden="true" ref={bindIconAnimation} />
 			Category
 		</button>,
 	);
+
+	// eslint-disable-next-line testing-library/no-container, testing-library/no-node-access -- Bind browser animation doubles to the decorative SVG, which has no accessible role.
 	const icon = container.querySelector("svg");
 	if (!icon) throw new Error("Missing icon");
-	const target = getByRole("button");
+	const target = screen.getByRole("button");
 	let finishFirst!: () => void;
 	let finishLast!: () => void;
-	const getAnimations = vi.fn(() => [
-		{
-			finished: new Promise<void>((resolve) => {
-				finishFirst = resolve;
-			}),
-		},
-		{
-			finished: new Promise<void>((resolve) => {
-				finishLast = resolve;
-			}),
-		},
-	]);
+
+	const getAnimations = vi.fn(() => {
+		const first = Promise.withResolvers<void>();
+		const last = Promise.withResolvers<void>();
+		finishFirst = first.resolve;
+		finishLast = last.resolve;
+
+		return [{ finished: first.promise }, { finished: last.promise }];
+	});
+
 	Object.defineProperty(icon, "getAnimations", { value: getAnimations });
 	fireEvent.mouseEnter(target);
 	fireEvent.mouseLeave(target);
@@ -50,18 +52,20 @@ it("finishes every delayed part after leaving and does not restart on quick re-e
 });

 it("keeps playing after keyboard blur and releases cancelled animations", async () => {
-	const { container, getByRole, unmount } = render(
+	const { container, unmount } = render(
 		<button type="button">
-			<svg ref={bindIconAnimation} aria-hidden="true" />
+			<svg aria-hidden="true" ref={bindIconAnimation} />
 			Category
 		</button>,
 	);
+
+	// eslint-disable-next-line testing-library/no-container, testing-library/no-node-access -- Bind browser animation doubles to the decorative SVG, which has no accessible role.
 	const icon = container.querySelector("svg");
 	if (!icon) throw new Error("Missing icon");
-	const target = getByRole("button");
+	const target = screen.getByRole("button");
 	// JSDOM does not model the browser keyboard-focus modality.
 	vi.spyOn(target, "matches").mockImplementation(
-		(selector) => selector === ":focus-visible",
+		selector => selector === ":focus-visible",
 	);
 	let cancel!: () => void;
 	Object.defineProperty(icon, "getAnimations", {
@@ -1,67 +1,74 @@
 // React ref cleanup keeps native animation lifetimes tied to the mounted icon.
-const bindIconAnimation = (icon: SVGSVGElement | null) => {
+const bindIconAnimation = (icon: null | SVGSVGElement) => {
 	if (!icon) return;
 	const target = icon.closest<HTMLElement>("a, button") ?? icon.parentElement;
 	if (!target) return;
-	let hovered = false;
-	let focused = false;
-	let running = false;
-	let disposed = false;
+	let isHovered = false;
+	let isFocused = false;
+	let isRunning = false;
+	let isDisposed = false;

 	const release = () => {
-		if (!running && !hovered && !focused) {
-			icon.removeAttribute("data-icon-animating");
+		if (!isRunning && !isHovered && !isFocused) {
+			delete icon.dataset.iconAnimating;
 		}
 	};
+
 	const start = () => {
-		if (icon.hasAttribute("data-icon-animating")) return;
-		icon.setAttribute("data-icon-animating", "");
-		running = true;
+		if (Object.hasOwn(icon.dataset, "iconAnimating")) return;
+		icon.dataset.iconAnimating = "";
+		isRunning = true;
 		// Includes staggered/delayed children and finite iterations, without timers.
 		const animations = icon.getAnimations({ subtree: true });
 		void Promise.allSettled(
-			animations.map((animation) => animation.finished),
+			animations.map(animation => animation.finished),
 		).then(() => {
-			if (disposed) return;
-			running = false;
+			if (isDisposed) return;
+			isRunning = false;
 			release();
 		});
 	};
+
 	const enter = () => {
-		if (!window.matchMedia("(hover: hover)").matches) return;
-		hovered = true;
+		if (!matchMedia("(hover: hover)").matches) return;
+		isHovered = true;
 		start();
 	};
+
 	const leave = () => {
-		hovered = false;
+		isHovered = false;
 		release();
 	};
+
 	const focus = () => {
-		focused =
-			target.matches(":focus-visible") ||
-			!!target.querySelector(":focus-visible");
-		if (focused) start();
+		isFocused
+			= target.matches(":focus-visible")
+				|| !!target.querySelector(":focus-visible");
+		if (isFocused) start();
 	};
+
 	const blur = (event: FocusEvent) => {
 		if (
-			event.relatedTarget instanceof Node &&
-			target.contains(event.relatedTarget)
+			event.relatedTarget instanceof Node
+			&& target.contains(event.relatedTarget)
 		)
 			return;
-		focused = false;
+		isFocused = false;
 		release();
 	};
+
 	target.addEventListener("mouseenter", enter);
 	target.addEventListener("mouseleave", leave);
 	target.addEventListener("focusin", focus);
 	target.addEventListener("focusout", blur);
+
 	return () => {
-		disposed = true;
+		isDisposed = true;
 		target.removeEventListener("mouseenter", enter);
 		target.removeEventListener("mouseleave", leave);
 		target.removeEventListener("focusin", focus);
 		target.removeEventListener("focusout", blur);
-		icon.removeAttribute("data-icon-animating");
+		delete icon.dataset.iconAnimating;
 	};
 };

@@ -1,4 +1,17 @@
+export {
+	OperationIcon,
+	type OperationIconProps,
+} from "./OperationIcon/OperationIcon";
 export { AddIcon } from "./svg/AddIcon";
+export { BondsIcon } from "./svg/BondsIcon";
+export { CardsIcon } from "./svg/CardsIcon";
+export { CategoriesIcon } from "./svg/CategoriesIcon";
+export { ContactlessIcon } from "./svg/ContactlessIcon";
 export { DeleteIcon } from "./svg/DeleteIcon";
 export { EditIcon } from "./svg/EditIcon";
+export { PortfolioIcon } from "./svg/PortfolioIcon";
+export { RestoreIcon } from "./svg/RestoreIcon";
+export { SettingsIcon } from "./svg/SettingsIcon";
+export { StocksIcon } from "./svg/StocksIcon";
+export { WalletIcon } from "./svg/WalletIcon";
 export type { IconProps } from "./types";
@@ -1,35 +1,3 @@
-.content {
-	max-width: 1120px;
-	margin-inline: auto;
-}
-
-.header {
-	align-items: center;
-	display: flex;
-	padding: 0 var(--mantine-spacing-md);
-}
-
-.bottomNav {
-	display: none;
-}
-
-.navIcon {
-	display: inline-flex;
-	flex-shrink: 0;
-}
-
-.portfolioIcon {
-	color: var(--mantine-color-blue-7);
-}
-
-.cardsIcon {
-	color: var(--mantine-color-grape-7);
-
-	& svg {
-		overflow: visible;
-	}
-}
-
 .rubles {
 	pointer-events: none;
 	color: var(--mantine-color-green-8);
@@ -55,18 +23,6 @@
 	}
 }

-.stocksIcon {
-	color: var(--mantine-color-green-8);
-}
-
-.bondsIcon {
-	color: var(--mantine-color-orange-8);
-}
-
-.settingsIcon {
-	color: var(--mantine-color-gray-7);
-}
-
 .portfolioRuble {
 	stroke: var(--mantine-color-green-8);
 	opacity: 0;
@@ -82,10 +38,6 @@
 }

@media (prefers-reduced-motion: no-preference) {
-	.navLink {
-		transition: background-color 180ms ease-in-out;
-	}
-
 	.drawStroke,
 	.couponLines path {
 		stroke-dasharray: 1;
@@ -225,34 +177,3 @@
 		transform: translateX(var(--slider-offset));
 	}
 }
-
-@media (max-width: 47.99375em) {
-	.bottomNav {
-		background: var(--mantine-color-white);
-		border-top: 1px solid var(--mantine-color-gray-3);
-		bottom: 0;
-		display: flex;
-		justify-content: space-around;
-		left: 0;
-		padding: var(--mantine-spacing-xs) 2px;
-		gap: 2px;
-		font-size: 11px;
-		& a {
-			min-width: 0;
-			padding: 8px 2px;
-			text-align: center;
-		}
-		position: fixed;
-		right: 0;
-		z-index: 200;
-	}
-
-	.active {
-		color: var(--mantine-primary-color-filled);
-		font-weight: 600;
-	}
-
-	.main {
-		padding-bottom: 5rem;
-	}
-}
@@ -1,19 +1,21 @@
 import type { FC } from "react";
+
 import type { IconProps } from "../types";

 const AddIcon: FC<IconProps> = (props) => {
 	const { size = "24", ...svgProps } = props;
+
 	return (
 		<svg
-			width={size}
-			height={size}
-			viewBox="0 0 24 24"
-			fill="none"
-			stroke="currentColor"
-			strokeWidth="1.5"
-			strokeLinecap="round"
 			aria-hidden="true"
+			fill="none"
 			focusable="false"
+			height={size}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeWidth="1.5"
+			viewBox="0 0 24 24"
+			width={size}
 			{...svgProps}
 		>
 			<path d="M12 5v14 M5 12h14" />
@@ -0,0 +1,39 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../types";
+
+import { bindIconAnimation } from "../bind-icon-animation";
+import classes from "../navigation.module.css";
+
+const BondsIcon: FC<IconProps> = (props) => {
+	const { size = "24", ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.5"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M6 3h12v18l-3-2-3 2-3-2-3 2V3Z" />
+
+			<g className={classes.couponLines}>
+				<path d="M9 7h6" pathLength={1} />
+
+				<path d="M9 11h6" pathLength={1} />
+
+				<path d="M9 15h3" pathLength={1} />
+			</g>
+		</svg>
+	);
+};
+
+export { BondsIcon };
@@ -0,0 +1,39 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../types";
+
+import { bindIconAnimation } from "../bind-icon-animation";
+import classes from "../navigation.module.css";
+
+const CardsIcon: FC<IconProps> = (props) => {
+	const { size = "24", ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.5"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 5h18v14H3V5Zm0 4h18M6 15h4" />
+
+			<g className={classes.rubles}>
+				<path d="M10 12V4h3a2 2 0 0 1 0 4H9m0 2h4" />
+
+				<path d="M10 12V4h3a2 2 0 0 1 0 4H9m0 2h4" />
+
+				<path d="M10 12V4h3a2 2 0 0 1 0 4H9m0 2h4" />
+			</g>
+		</svg>
+	);
+};
+
+export { CardsIcon };
@@ -0,0 +1,27 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../types";
+
+const CategoriesIcon: FC<IconProps> = (props) => {
+	const { size = "24", ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			fill="none"
+			focusable="false"
+			height={size}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.5"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 3h7v7H3zM14 3h7v7h-7zM3 14h7v7H3zM14 14h7v7h-7z" />
+		</svg>
+	);
+};
+
+export { CategoriesIcon };
@@ -0,0 +1,32 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../types";
+
+const ContactlessIcon: FC<IconProps> = (props) => {
+	const { size = "24", ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			fill="none"
+			focusable="false"
+			height={size}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.5"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path
+				d="M7 11a8 8 0 0 1 0 8m5-12a15 15 0 0 1 0 16m5-20a23 23 0 0 1 0 24"
+				stroke="currentColor"
+				strokeLinecap="round"
+				strokeWidth="2"
+			/>
+		</svg>
+	);
+};
+
+export { ContactlessIcon };
@@ -1,20 +1,22 @@
 import type { FC } from "react";
+
 import type { IconProps } from "../types";

 const DeleteIcon: FC<IconProps> = (props) => {
 	const { size = "24", ...svgProps } = props;
+
 	return (
 		<svg
-			width={size}
-			height={size}
-			viewBox="0 0 24 24"
+			aria-hidden="true"
 			fill="none"
+			focusable="false"
+			height={size}
 			stroke="currentColor"
-			strokeWidth="1.5"
 			strokeLinecap="round"
 			strokeLinejoin="round"
-			aria-hidden="true"
-			focusable="false"
+			strokeWidth="1.5"
+			viewBox="0 0 24 24"
+			width={size}
 			{...svgProps}
 		>
 			<path d="M3 6h18 M9 6V3h6v3 M5 6l1 15h12l1-15 M10 10v7 M14 10v7" />
@@ -1,20 +1,22 @@
 import type { FC } from "react";
+
 import type { IconProps } from "../types";

 const EditIcon: FC<IconProps> = (props) => {
 	const { size = "24", ...svgProps } = props;
+
 	return (
 		<svg
-			width={size}
-			height={size}
-			viewBox="0 0 24 24"
+			aria-hidden="true"
 			fill="none"
+			focusable="false"
+			height={size}
 			stroke="currentColor"
-			strokeWidth="1.5"
 			strokeLinecap="round"
 			strokeLinejoin="round"
-			aria-hidden="true"
-			focusable="false"
+			strokeWidth="1.5"
+			viewBox="0 0 24 24"
+			width={size}
 			{...svgProps}
 		>
 			<path d="m16 3 5 5-12 12-6 1 1-6L16 3Z M13 6l5 5" />
@@ -0,0 +1,43 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../types";
+
+import { bindIconAnimation } from "../bind-icon-animation";
+import classes from "../navigation.module.css";
+
+const PortfolioIcon: FC<IconProps> = (props) => {
+	const { size = "24", ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.5"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 10v9h18v-9" />
+
+			<path className={classes.portfolioHandle} d="M8 6V4h8v2" />
+
+			<path
+				className={classes.portfolioLid}
+				d="M3 10V8a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2v2H3Zm6 0v3h6v-3"
+			/>
+
+			<path
+				className={classes.portfolioRuble}
+				d="M10 18v-7h3a2 2 0 0 1 0 4H9m0 1.5h4"
+			/>
+		</svg>
+	);
+};
+
+export { PortfolioIcon };
@@ -0,0 +1,27 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../types";
+
+const RestoreIcon: FC<IconProps> = (props) => {
+	const { size = "24", ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			fill="none"
+			focusable="false"
+			height={size}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.5"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 3h18v4H3z M5 7v14h14V7 M12 17V10m-3 3 3-3 3 3" />
+		</svg>
+	);
+};
+
+export { RestoreIcon };
@@ -0,0 +1,35 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../types";
+
+import { bindIconAnimation } from "../bind-icon-animation";
+import classes from "../navigation.module.css";
+
+const SettingsIcon: FC<IconProps> = (props) => {
+	const { size = "24", ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.5"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M4 7h16M4 17h16" />
+
+			<path className={classes.topSlider} d="M10 4v6h4V4h-4Z" />
+
+			<path className={classes.bottomSlider} d="M10 14v6h4v-6h-4Z" />
+		</svg>
+	);
+};
+
+export { SettingsIcon };
@@ -0,0 +1,39 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../types";
+
+import { bindIconAnimation } from "../bind-icon-animation";
+import classes from "../navigation.module.css";
+
+const StocksIcon: FC<IconProps> = (props) => {
+	const { size = "24", ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			fill="none"
+			focusable="false"
+			height={size}
+			ref={bindIconAnimation}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.5"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<path d="M3 3v18h18" />
+
+			<path
+				className={classes.drawStroke}
+				d="M7 14l5-5 4 3 5-7"
+				pathLength={1}
+			/>
+
+			<path className={classes.stockArrow} d="M16 5h5v5" />
+		</svg>
+	);
+};
+
+export { StocksIcon };
@@ -0,0 +1,29 @@
+import type { FC } from "react";
+
+import type { IconProps } from "../types";
+
+const WalletIcon: FC<IconProps> = (props) => {
+	const { size = "24", ...svgProps } = props;
+
+	return (
+		<svg
+			aria-hidden="true"
+			fill="none"
+			focusable="false"
+			height={size}
+			stroke="currentColor"
+			strokeLinecap="round"
+			strokeLinejoin="round"
+			strokeWidth="1.5"
+			viewBox="0 0 24 24"
+			width={size}
+			{...svgProps}
+		>
+			<rect height="15" rx="3" width="18" x="3" y="5" />
+
+			<path d="M3 9h18M7 15h3M14 5V3H7a4 4 0 0 0-4 4" />
+		</svg>
+	);
+};
+
+export { WalletIcon };
@@ -1,17 +1,22 @@
 {
+	"extends": "../../tsconfig.base.json",
 	"compilerOptions": {
-		"target": "ES2023",
-		"lib": ["ES2023", "DOM"],
+		"lib": [
+			"ES2023",
+			"DOM"
+		],
 		"module": "ESNext",
 		"moduleResolution": "Bundler",
-		"strict": true,
-		"skipLibCheck": true,
-		"verbatimModuleSyntax": true,
 		"declaration": true,
 		"emitDeclarationOnly": true,
 		"rootDir": "src",
 		"outDir": "dist",
-		"jsx": "react-jsx"
+		"jsx": "react-jsx",
+		"types": [
+			"vite/client"
+		]
 	},
-	"include": ["src/index.ts"]
+	"include": [
+		"src/index.ts"
+	]
 }
@@ -2,7 +2,7 @@ import { defineConfig } from "vite";

 export default defineConfig({
 	build: {
-		lib: { entry: "src/index.ts", formats: ["es"], fileName: "index" },
+		lib: { entry: "src/index.ts", fileName: "index", formats: ["es"] },
 		rolldownOptions: { external: /^react(\/|$)/ },
 	},
 });
@@ -131,7 +131,7 @@
 			},
 			"muted": {
 				"color": "gray",
-				"shade": 6,
+				"shade": 7,
 				"description": "Вторичный текст; проверяйте контраст при выборе фона"
 			},
 			"border": {
@@ -0,0 +1,38 @@
+import "@mantine/core/styles.css";
+
+import "../styles.css";
+
+import { MantineProvider } from "@mantine/core";
+// eslint-disable-next-line testing-library/no-manual-cleanup -- Vitest globals are disabled, so RTL cannot register its automatic afterEach cleanup.
+import { cleanup, render, screen } from "@testing-library/react";
+import { afterEach, expect, it } from "vitest";
+
+import { cssVariablesResolver, theme } from "../theme";
+import { EntryCard } from "./EntryCard";
+
+afterEach(cleanup);
+
+it("shows the full wrapped title without horizontal overflow", () => {
+	const title = "Дивидендная выплата с очень длинным описанием, которое должно переноситься и оставаться доступным полностью";
+
+	render(
+		<MantineProvider cssVariablesResolver={cssVariablesResolver} theme={theme}>
+			<EntryCard
+				initial="Д"
+				metadata="29.09.2026"
+				title={title}
+				tone="positive"
+				value="123 456 789,90 ₽"
+				valueLabel="Дивиденды"
+				wrap
+			/>
+		</MantineProvider>,
+	);
+
+	const description = screen.getByText(title);
+	expect(description.clientHeight).toBeGreaterThan(0);
+	expect(description.scrollHeight)
+		.toBeLessThanOrEqual(description.clientHeight);
+	expect(document.documentElement.scrollWidth)
+		.toBeLessThanOrEqual(window.innerWidth);
+});
@@ -93,3 +93,13 @@
 		transition: none;
 	}
 }
+
+.row[data-wrap] p {
+	white-space: normal;
+	overflow-wrap: anywhere;
+}
+@media (min-width: 36em) {
+	.row[data-wrap] {
+		grid-template-columns: auto minmax(0, 1fr) minmax(0, 40%);
+	}
+}
@@ -1,27 +1,27 @@
-import { Button } from "@mantine/core";
 import type { Meta, StoryObj } from "@storybook/react-vite";
+
+import { Button } from "@mantine/core";
 import { fn } from "storybook/test";
+
 import { EntryCard } from "./EntryCard";

 const meta = {
-	title: "Design System/Components/EntryCard",
-	component: EntryCard,
-	tags: ["autodocs"],
 	args: {
-		title:
-			"Учебная запись с очень длинным названием для проверки узкого экрана",
-		metadata: "22.09.2026 · Синтетические данные",
-		initial: "У",
-		imageSrc: "data:image/png;base64,invalid",
-		value: "−1 250,00 ₽",
-		valueLabel: "Тестовое значение",
-		tone: "negative",
 		actions: (
-			<Button size="compact-sm" onClick={fn()}>
+			<Button onClick={fn()} size="compact-sm">
 				Открыть пример
 			</Button>
 		),
+		imageSrc: "data:image/png;base64,invalid",
+		initial: "У",
+		metadata: "22.09.2026 · Синтетические данные",
+		title:
+			"Учебная запись с очень длинным названием для проверки узкого экрана",
+		tone: "negative",
+		value: "−1 250,00 ₽",
+		valueLabel: "Тестовое значение",
 	},
+	component: EntryCard,
 	parameters: {
 		docs: {
 			description: {
@@ -30,8 +30,14 @@ const meta = {
 			},
 		},
 	},
+	tags: ["autodocs"],
+	title: "Design System/Components/EntryCard",
 } satisfies Meta<typeof EntryCard>;

 export default meta;
+
 type Story = StoryObj<typeof meta>;
+
 export const LongContentAndFallback: Story = {};
+
+export const WrappedOperation: Story = { args: { value: "−123 456 789 012 345 678,90 ₽", wrap: true } };
@@ -1,26 +1,45 @@
 import { MantineProvider } from "@mantine/core";
 import { fireEvent, render, screen } from "@testing-library/react";
 import { assert, describe, expect, it } from "vitest";
+
 import { EntryCard } from "./EntryCard";

 describe("EntryCard", () => {
-	it("keeps the fallback after an image fails", () => {
+	it("does not leak a numeric zero from an absent action", () => {
+		render(
+			<MantineProvider>
+				<EntryCard
+					actions={0}
+					initial="У"
+					metadata="Описание"
+					title="Пример"
+					tone="neutral"
+					value="—"
+					valueLabel="Неизвестно"
+				/>
+			</MantineProvider>,
+		);
+		expect(screen.queryByText("0")).not.toBeInTheDocument();
+	});
+	it("keeps a failed image fallback until a new source is supplied", () => {
 		const props = {
-			title: "Пример",
-			metadata: "Описание",
+			imageSrc: "data:image/png;base64,invalid",
 			initial: "У",
+			metadata: "Описание",
+			title: "Пример",
+			tone: "neutral" as const,
 			value: "—",
 			valueLabel: "Неизвестно",
-			tone: "neutral" as const,
-			imageSrc: "data:image/png;base64,invalid",
 		};
-		const { container, rerender } = render(
+
+		const { rerender } = render(
 			<MantineProvider>
 				<EntryCard {...props} />
 			</MantineProvider>,
 		);
+
 		// Decorative image has no accessible name; trigger its actual failure event.
-		const image = container.querySelector("img");
+		const image = screen.queryByAltText("");
 		assert(image);
 		fireEvent.error(image);
 		rerender(
@@ -28,8 +47,18 @@ describe("EntryCard", () => {
 				<EntryCard {...props} title="Обновлённый пример" />
 			</MantineProvider>,
 		);
-		expect(container.querySelector("img")).toBeNull();
+		expect(screen.queryByAltText("")).not.toBeInTheDocument();
 		expect(screen.getByText("У")).toBeInTheDocument();
 		expect(screen.getByText("Обновлённый пример")).toBeInTheDocument();
+		rerender(
+			<MantineProvider>
+				<EntryCard {...props} imageSrc="/replacement-logo.png" />
+			</MantineProvider>,
+		);
+		expect(screen.queryByAltText("")).toHaveAttribute(
+			"src",
+			"/replacement-logo.png",
+		);
+		expect(screen.queryByText("У")).not.toBeInTheDocument();
 	});
 });
@@ -1,66 +1,78 @@
+import type { FC, ReactNode } from "react";
+
 import { Avatar, Paper, Stack, Text } from "@mantine/core";
-import { type FC, type ReactNode, useState } from "react";
+
 import classes from "./EntryCard.module.css";

 type EntryCardProps = {
-	title: string;
-	metadata: string;
-	details?: ReactNode;
 	actions?: ReactNode;
-	initial: string;
-	icon?: ReactNode;
 	color?: string;
-	imageSrc?: string | null;
+	details?: ReactNode;
+	icon?: ReactNode;
+	imageSrc?: null | string;
+	initial: string;
+	metadata: string;
+	title: string;
+	tone: "negative"
+		| "neutral"
+		| "positive";
 	value: string;
 	valueLabel: string;
-	tone: "positive" | "negative" | "neutral";
+	wrap?: boolean;
 };

 const EntryCard: FC<EntryCardProps> = (props) => {
-	const [imageFailed, setImageFailed] = useState(false);
+	const surfaceStyle = props.color
+		? {
+				background: `color-mix(in srgb, var(--mantine-color-${props.color}-0) 45%, var(--wl-color-surface))`,
+			}
+		: undefined;
+
+	const titleLineClamp = props.wrap ? undefined : 1;
+
+	const valueContainerClass = props.actions ? classes.valueFooter : undefined;
+	const valueLabelClass = `${classes[props.tone]} ${props.actions ? classes.valueLabel : ""}`;
+
 	return (
 		<Paper
 			className={classes.row}
+			data-wrap={props.wrap || undefined}
+			style={surfaceStyle}
 			withBorder
-			style={
-				props.color
-					? {
-							background: `color-mix(in srgb, var(--mantine-color-${props.color}-0) 45%, var(--wl-color-surface))`,
-						}
-					: undefined
-			}
 		>
 			<Avatar
 				alt=""
 				aria-hidden="true"
 				radius="md"
 				size={40}
-				src={imageFailed ? null : props.imageSrc}
-				onError={() => setImageFailed(true)}
+				src={props.imageSrc}
 			>
 				{props.icon ?? props.initial}
 			</Avatar>
+
 			<Stack className={classes.identity} gap={2}>
-				<Text fw={700} lineClamp={1}>
+				<Text fw={700} lineClamp={titleLineClamp}>
 					{props.title}
 				</Text>
+
 				<Text c="dimmed" size="sm">
 					{props.metadata}
 				</Text>
+
 				{props.details}
 			</Stack>
+
 			<Stack className={classes.value} gap={2}>
 				<Text className={classes[props.tone]} fw={700}>
 					{props.value}
 				</Text>
-				<div className={props.actions ? classes.valueFooter : undefined}>
-					<Text
-						className={`${classes[props.tone]} ${props.actions ? classes.valueLabel : ""}`}
-						size="sm"
-					>
+
+				<div className={valueContainerClass}>
+					<Text className={valueLabelClass} size="sm">
 						{props.valueLabel}
 					</Text>
-					{props.actions && (
+
+					{Boolean(props.actions) && (
 						<div className={classes.actions}>{props.actions}</div>
 					)}
 				</div>
@@ -1,16 +1,16 @@
-import { Paper, Skeleton } from "@mantine/core";
 import type { Meta, StoryObj } from "@storybook/react-vite";
+
+import { Paper, Skeleton } from "@mantine/core";
+
 import { LoadingSkeleton } from "./LoadingSkeleton";

 const meta = {
-	title: "Design System/Components/LoadingSkeleton",
-	component: LoadingSkeleton,
-	tags: ["autodocs"],
 	args: { label: "Загрузка содержимого" },
 	argTypes: {
-		label: { control: "text" },
 		children: { table: { disable: true } },
+		label: { control: "text" },
 	},
+	component: LoadingSkeleton,
 	parameters: {
 		docs: {
 			description: {
@@ -19,17 +19,23 @@ const meta = {
 			},
 		},
 	},
-	render: (args) => (
+	render: arguments_ => (
 		<Paper p="md" withBorder>
-			<LoadingSkeleton {...args}>
+			<LoadingSkeleton {...arguments_}>
 				<Skeleton h={24} w="60%" />
+
 				<Skeleton h={72} />
+
 				<Skeleton h={16} w="80%" />
 			</LoadingSkeleton>
 		</Paper>
 	),
+	tags: ["autodocs"],
+	title: "Design System/Components/LoadingSkeleton",
 } satisfies Meta<typeof LoadingSkeleton>;

 export default meta;
+
 type Story = StoryObj<typeof meta>;
+
 export const Initial: Story = { name: "Загрузка области" };
@@ -1,6 +1,7 @@
-import { Stack } from "@mantine/core";
 import type { FC, PropsWithChildren } from "react";

+import { Stack } from "@mantine/core";
+
 type LoadingSkeletonProps = PropsWithChildren<{
 	label: string;
 }>;
@@ -1,36 +1,36 @@
-import { Button } from "@mantine/core";
 import type { Meta, StoryObj } from "@storybook/react-vite";
 import type { ComponentProps } from "react";
+
+import { Button } from "@mantine/core";
 import { fn } from "storybook/test";
+
 import { StateView } from "./StateView";

-type StateStoryArgs = ComponentProps<typeof StateView> & {
-	withAction: boolean;
+type StateStoryArguments = ComponentProps<typeof StateView> & {
 	onAction: () => void;
+	withAction: boolean;
 };

 const meta = {
-	title: "Design System/Components/StateView",
-	component: StateView,
-	tags: ["autodocs"],
 	args: {
-		title: "Нет учебных данных",
-		text: "Синтетическое пустое состояние. Пользовательские данные не загружаются.",
 		error: false,
-		withAction: false,
 		onAction: fn(),
+		text: "Синтетическое пустое состояние. Пользовательские данные не загружаются.",
+		title: "Нет учебных данных",
+		withAction: false,
 	},
 	argTypes: {
-		title: { control: "text" },
-		text: { control: "text" },
-		error: { control: "boolean" },
 		action: { table: { disable: true } },
+		error: { control: "boolean" },
+		onAction: { control: false },
+		text: { control: "text" },
+		title: { control: "text" },
 		withAction: {
 			control: "boolean",
 			description: "Показать необязательное действие StateView",
 		},
-		onAction: { control: false },
 	},
+	component: StateView,
 	parameters: {
 		docs: {
 			description: {
@@ -39,40 +39,46 @@ const meta = {
 			},
 		},
 	},
-	render: (args) => {
-		const { withAction, onAction, ...stateProps } = args;
+	render: (arguments_) => {
+		const { onAction, withAction, ...stateProps } = arguments_;
+
 		return (
 			<StateView
 				{...stateProps}
 				action={
-					withAction ? (
-						<Button onClick={onAction} variant="default">
-							{args.error ? "Повторить локально" : "Выполнить пример"}
-						</Button>
-					) : undefined
+					withAction
+						? (
+								<Button onClick={onAction} variant="default">
+									{arguments_.error ? "Повторить локально" : "Выполнить пример"}
+								</Button>
+							)
+						: undefined
 				}
 			/>
 		);
 	},
-} satisfies Meta<StateStoryArgs>;
+	tags: ["autodocs"],
+	title: "Design System/Components/StateView",
+} satisfies Meta<StateStoryArguments>;

 export default meta;

 type Story = StoryObj<typeof meta>;
+
 export const Empty: Story = { name: "Пустое состояние" };
 export const EmptyWithAction: Story = {
-	name: "Пустое состояние с действием",
 	args: { withAction: true },
+	name: "Пустое состояние с действием",
 };
 export const Failed: Story = {
-	name: "Ошибка",
 	args: {
 		error: true,
-		title: "Учебная ошибка",
 		text: "Демонстрация недоступных данных без вызова API.",
+		title: "Учебная ошибка",
 	},
+	name: "Ошибка",
 };
 export const ErrorWithAction: Story = {
-	name: "Ошибка с retry",
 	args: { ...Failed.args, withAction: true },
+	name: "Ошибка с retry",
 };
@@ -1,7 +1,8 @@
 import { MantineProvider } from "@mantine/core";
 import { render, screen } from "@testing-library/react";
 import { describe, expect, it } from "vitest";
-import { LoadingSkeleton } from "./LoadingSkeleton";
+
+import { LoadingSkeleton } from "../LoadingSkeleton/LoadingSkeleton";
 import { StateView } from "./StateView";

 describe("StateView", () => {
@@ -1,22 +1,25 @@
-import { Paper, Stack, Text, Title } from "@mantine/core";
 import type { FC, ReactNode } from "react";

+import { Paper, Stack, Text, Title } from "@mantine/core";
+
 type StateViewProps = {
-	title: string;
-	text: string;
 	action?: ReactNode;
 	error?: boolean;
+	text: string;
+	title: string;
 };

 const StateView: FC<StateViewProps> = (props) => {
-	const { title, text, action, error = false } = props;
+	const { action, error = false, text, title } = props;
 	const role = error ? "alert" : undefined;

 	return (
-		<Paper p="xl" radius="md" shadow="xs" withBorder role={role}>
+		<Paper p="xl" radius="md" role={role} shadow="xs" withBorder>
 			<Stack align="flex-start" gap="sm">
 				<Title order={2}>{title}</Title>
+
 				<Text c="dimmed">{text}</Text>
+
 				{action}
 			</Stack>
 		</Paper>
@@ -1,3 +1,3 @@
-export { EntryCard } from "./EntryCard";
-export { LoadingSkeleton } from "./LoadingSkeleton";
-export { StateView } from "./StateView";
+export { EntryCard } from "./EntryCard/EntryCard";
+export { LoadingSkeleton } from "./LoadingSkeleton/LoadingSkeleton";
+export { StateView } from "./StateView/StateView";
@@ -1,6 +1,7 @@
 import { DEFAULT_THEME, mergeMantineTheme } from "@mantine/core";
 import source from "@wealthledger/tokens/tokens.json";
 import { describe, expect, it } from "vitest";
+
 import { colorRoles, cssVariablesResolver, theme } from "./theme";

 describe("design theme adapter", () => {
@@ -25,5 +26,8 @@ describe("design theme adapter", () => {
 		expect(Object.keys(variables)).toHaveLength(
 			Object.keys(source.color.roles).length,
 		);
+		expect(cssVariablesResolver(resolved).light["--mantine-color-dimmed"]).toBe(
+			variables["--wl-color-muted"],
+		);
 	});
 });
@@ -1,8 +1,7 @@
-import "./styles.css";
 import {
-	type CSSVariablesResolver,
 	colorsTuple,
 	createTheme,
+	type CSSVariablesResolver,
 	getThemeColor,
 	type MantinePrimaryShade,
 	Modal,
@@ -11,76 +10,83 @@ import {
 } from "@mantine/core";
 import designTokens from "@wealthledger/tokens/tokens.json";

-const { color, typography, spacing, radius, shadows, breakpoints } =
-	designTokens;
+import "./styles.css";
+
+const { breakpoints, color, radius, shadows, spacing, typography }
+	= designTokens;
+
 const mapValues = <T, U>(values: Record<string, T>, convert: (value: T) => U) =>
 	Object.fromEntries(
 		Object.entries(values).map(([name, value]) => [name, convert(value)]),
 	);

-const colorRoles = mapValues(color.roles, (role) =>
+const colorRoles = mapValues(color.roles, role =>
 	role.shade === null ? role.color : `${role.color}.${role.shade}`,
 );

 const theme = createTheme({
-	respectReducedMotion: true,
+	black: color.base.black,
+	breakpoints: mapValues(
+		breakpoints.values,
+		value => `${value}${breakpoints.unit}`,
+	),
+	colors: mapValues(color.palettes, colorsTuple),
 	components: {
 		Modal: Modal.extend({
 			defaultProps: {
 				overlayProps: { blur: 3 },
 				transitionProps: {
-					transition: "fade-down",
 					duration: 220,
 					exitDuration: 180,
 					timingFunction: "ease-out",
+					transition: "fade-down",
 				},
 			},
 		}),
 	},
-	primaryColor: color.roles.primary.color,
-	primaryShade: color.primaryShade as MantinePrimaryShade,
 	defaultRadius: radius.default,
-	white: color.base.white,
-	black: color.base.black,
-	colors: mapValues(color.palettes, colorsTuple),
 	fontFamily: typography.fontFamily,
 	fontFamilyMonospace: typography.fontFamilyMonospace,
-	fontSizes: mapValues(typography.fontSizes, (value) => rem(value)),
+	fontSizes: mapValues(typography.fontSizes, value => rem(value)),
 	fontWeights: mapValues(typography.fontWeights, String),
-	lineHeights: mapValues(typography.lineHeights, String),
 	headings: {
 		fontFamily: typography.fontFamily,
 		fontWeight: String(typography.fontWeights.bold),
-		sizes: mapValues(typography.headings, (value) => ({
+		sizes: mapValues(typography.headings, value => ({
 			fontSize: rem(value.fontSize),
 			lineHeight: String(value.lineHeight),
 		})),
 	},
-	spacing: mapValues(spacing.values, (value) => rem(value)),
-	radius: mapValues(radius.values, (value) => rem(value)),
-	shadows: mapValues(shadows.values, (layers) =>
+	lineHeights: mapValues(typography.lineHeights, String),
+	primaryColor: color.roles.primary.color,
+	primaryShade: color.primaryShade as MantinePrimaryShade,
+	radius: mapValues(radius.values, value => rem(value)),
+	respectReducedMotion: true,
+	shadows: mapValues(shadows.values, layers =>
 		layers
 			.map(
-				(layer) =>
+				layer =>
 					`${rem(layer.offsetX)} ${rem(layer.offsetY)} ${rem(layer.blur)} ${rem(layer.spread)} ${rgba(color.base[layer.color as keyof typeof color.base], layer.opacity)}`,
 			)
 			.join(", "),
 	),
-	breakpoints: mapValues(
-		breakpoints.values,
-		(value) => `${value}${breakpoints.unit}`,
-	),
+	spacing: mapValues(spacing.values, value => rem(value)),
+	white: color.base.white,
 });

-const cssVariablesResolver: CSSVariablesResolver = (resolvedTheme) => ({
+const cssVariablesResolver: CSSVariablesResolver = resolvedTheme => ({
+	dark: {},
+	light: {
+		"--mantine-color-dimmed": getThemeColor(colorRoles.muted, resolvedTheme),
+	},
 	variables: Object.fromEntries(
 		Object.entries(colorRoles).map(([role, reference]) => [
 			`--wl-color-${role}`,
 			getThemeColor(reference, resolvedTheme),
 		]),
 	),
-	light: {},
-	dark: {},
 });

-export { colorRoles, cssVariablesResolver, designTokens, theme };
+export { colorRoles, cssVariablesResolver, theme };
+
+export { default as designTokens } from "@wealthledger/tokens/tokens.json";
@@ -1,13 +1,10 @@
 {
+	"extends": "../../tsconfig.base.json",
 	"compilerOptions": {
-		"target": "ES2023",
 		"lib": ["ES2023", "DOM"],
 		"module": "ESNext",
 		"moduleResolution": "Bundler",
 		"resolveJsonModule": true,
-		"strict": true,
-		"skipLibCheck": true,
-		"verbatimModuleSyntax": true,
 		"declaration": true,
 		"emitDeclarationOnly": true,
 		"rootDir": "src",
@@ -3,9 +3,9 @@ import { defineConfig } from "vite";
 export default defineConfig({
 	build: {
 		lib: {
+			cssFileName: "styles",
 			entry: { index: "src/index.ts", theme: "src/theme.ts" },
 			formats: ["es"],
-			cssFileName: "styles",
 		},
 		rolldownOptions: {
 			external: /^(react(?:-dom)?|@mantine\/[^/]+|@wealthledger\/tokens)(\/|$)/,
@@ -1,31 +1,37 @@
-const { test } = require("node:test");
 const assert = require("node:assert/strict");
 const {
+	chmodSync,
 	mkdtempSync,
 	readFileSync,
-	writeFileSync,
-	chmodSync,
 	rmSync,
+	writeFileSync,
 } = require("node:fs");
 const { tmpdir } = require("node:os");
-const { join, resolve } = require("node:path");
+const nodePath = require("node:path");
+const { test } = require("node:test");
 const EXECUTABLE_MODE = 0o755;
 const { spawnSync } = require("node:child_process");

 test("immutable publication resumes exact digest checks after post-push failure", () => {
-	const directory = mkdtempSync(join(tmpdir(), "wl-image-retry-"));
+	const directory = mkdtempSync(nodePath.join(tmpdir(), "wl-image-retry-"));
+
 	const workflow = readFileSync(
-		resolve(__dirname, "../.gitea/workflows/image.yml"),
+		nodePath.resolve(__dirname, "../.gitea/workflows/image.yml"),
 		"utf8",
 	);
+
 	const block = workflow
-		.split("      - name: Publish immutable release tag\n        run: |\n")[1]
-		.split("      - name:")[0]
-		.replace(/^ {10}/gm, "");
-	const double = `#!${process.execPath}
+		.split(
+			"      - name: Publish immutable release tag\n        run: |\n",
+			2,
+		)[1]
+		.split("      - name:", 1)[0]
+		.replaceAll(/^ {10}/gm, "");
+
+	const double = String.raw`#!${process.execPath}
 const fs = require('node:fs');
 const args = process.argv.slice(2).join(' ');
-fs.appendFileSync('calls', args + '\\n');
+fs.appendFileSync('calls', args + '\n');
 if (args.startsWith('manifest inspect')) {
  if (!fs.existsSync('published')) { console.error('manifest unknown'); process.exit(1); }
 } else if (args.startsWith('buildx imagetools inspect')) {
@@ -39,37 +45,44 @@ if (args.startsWith('manifest inspect')) {
  console.log(args.includes('image.version') ? '1.2.3' : process.env.BAD_REVISION ? 'other' : 'commit');
 } else if (args.startsWith('run') && process.env.BAD_SMOKE) process.exit(1);
 `;
+
 	try {
 		for (const name of ["docker", "npm"]) {
-			writeFileSync(join(directory, name), double);
-			chmodSync(join(directory, name), EXECUTABLE_MODE);
+			// eslint-disable-next-line security/detect-non-literal-fs-filename -- Path is built from this check’s private mkdtemp directory and fixed filenames.
+			writeFileSync(nodePath.join(directory, name), double);
+			// eslint-disable-next-line security/detect-non-literal-fs-filename -- Path is built from this check’s private mkdtemp directory and fixed filenames.
+			chmodSync(nodePath.join(directory, name), EXECUTABLE_MODE);
 		}
+
 		const run = (extra = {}) =>
 			spawnSync("/bin/sh", ["-ec", block], {
 				cwd: directory,
 				encoding: "utf8",
 				env: {
 					...process.env,
-					PATH: `${directory}:${process.env.PATH}`,
 					IMAGE: "synthetic/image",
+					PATH: `${directory}:${process.env.PATH}`,
 					RELEASE_TAG: "v1.2.3",
 					REVISION: "commit",
 					...extra,
 				},
 			});
+
 		assert.notEqual(run().status, 0);
 		const retry = run();
 		assert.equal(retry.status, 0, retry.stdout + retry.stderr);
 		assert.notEqual(run({ BAD_REVISION: "1" }).status, 0);
 		assert.notEqual(run({ BAD_SMOKE: "1" }).status, 0);
-		const calls = readFileSync(join(directory, "calls"), "utf8");
+		// eslint-disable-next-line security/detect-non-literal-fs-filename -- Path is built from this check’s private mkdtemp directory and fixed filenames.
+		const calls = readFileSync(nodePath.join(directory, "calls"), "utf8");
 		assert.equal(
-			calls.split("\n").filter((line) => line.startsWith("buildx build"))
+			calls.split("\n").filter(line => line.startsWith("buildx build"))
 				.length,
 			1,
 		);
 		assert.ok(calls.includes("synthetic/image@sha256:exact"));
-	} finally {
-		rmSync(directory, { recursive: true, force: true });
+	}
+	finally {
+		rmSync(directory, { force: true, recursive: true });
 	}
 });
@@ -1,14 +1,15 @@
 import { spawnSync } from "node:child_process";
 import { mkdtemp, readFile, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { join, resolve } from "node:path";
+import nodePath from "node:path";

 const temporaryDirectory = await mkdtemp(
-	join(tmpdir(), "wealth-ledger-openapi-"),
+	nodePath.join(tmpdir(), "wealth-ledger-openapi-"),
 );
-const generatedPath = join(temporaryDirectory, "schema.d.ts");
-const committedPath = resolve("src/shared/api/generated/schema.d.ts");
-const cliPath = resolve("node_modules/openapi-typescript/bin/cli.js");
+
+const generatedPath = nodePath.join(temporaryDirectory, "schema.d.ts");
+const committedPath = nodePath.resolve("src/shared/api/generated/schema.d.ts");
+const cliPath = nodePath.resolve("node_modules/openapi-typescript/bin/cli.js");
 let exitCode = 0;

 try {
@@ -18,14 +19,13 @@ try {
 		{ encoding: "utf8" },
 	);

-	if (generated.status !== 0) {
-		process.stderr.write(generated.stderr || generated.stdout);
-		exitCode = generated.status ?? 1;
-	} else {
+	if (generated.status === 0) {
 		const [committed, current] = await Promise.all([
 			readFile(committedPath, "utf8"),
+			// eslint-disable-next-line security/detect-non-literal-fs-filename -- Path is built from this check’s private mkdtemp directory and fixed filenames.
 			readFile(generatedPath, "utf8"),
 		]);
+
 		if (committed !== current) {
 			console.error(
 				"Generated OpenAPI types are stale. Run `npm run openapi:generate` and commit the result.",
@@ -33,8 +33,13 @@ try {
 			exitCode = 1;
 		}
 	}
-} finally {
-	await rm(temporaryDirectory, { recursive: true, force: true });
+	else {
+		process.stderr.write(generated.stderr || generated.stdout);
+		exitCode = generated.status ?? 1;
+	}
+}
+finally {
+	await rm(temporaryDirectory, { force: true, recursive: true });
 }

 process.exitCode = exitCode;
@@ -1,14 +1,12 @@
 const assert = require("node:assert/strict");
 const { execFileSync } = require("node:child_process");
-const { version } = require("../package.json");
-const git = (...args) => execFileSync("git", args, { encoding: "utf8" }).trim();

-assert.equal(
-	git("status", "--porcelain"),
-	"",
-	"Commit all changes before preparing a release",
-);
-const tags = git(
+const { version } = require("../package.json");
+
+const git = (...arguments_) =>
+	execFileSync("git", arguments_, { encoding: "utf8" }).trim(); // eslint-disable-line sonarjs/no-os-command-from-path -- Repository checks use the developer/CI Git installation; arguments never invoke a shell.
+
+const tag_ = git(
 	"tag",
 	"--merged",
 	"HEAD",
@@ -17,9 +15,10 @@ const tags = git(
 	"--sort=-version:refname",
 )
 	.split("\n")
-	.filter((tag) => /^v\d+\.\d+\.\d+$/.test(tag));
+	.find(tag => /^v\d+\.\d+\.\d+$/.test(tag));
+
 assert.equal(
 	version,
-	tags[0]?.slice(1) ?? "0.0.0",
+	tag_?.slice(1) ?? "0.0.0",
 	"Version is already prepared or release tags are missing. Fetch tags; finish the existing release before preparing another.",
 );
@@ -0,0 +1,395 @@
+import react from "@eslint-react/eslint-plugin";
+import stylistic from "@stylistic/eslint-plugin";
+import query from "@tanstack/eslint-plugin-query";
+import vitest from "@vitest/eslint-plugin";
+import { ESLint } from "eslint";
+import { importX } from "eslint-plugin-import-x";
+import jestDom from "eslint-plugin-jest-dom";
+import noUnsanitized from "eslint-plugin-no-unsanitized";
+import perfectionist from "eslint-plugin-perfectionist";
+import hooks from "eslint-plugin-react-hooks";
+import refresh from "eslint-plugin-react-refresh";
+import regexp from "eslint-plugin-regexp";
+import security from "eslint-plugin-security";
+import sonarjs from "eslint-plugin-sonarjs";
+import storybook from "eslint-plugin-storybook";
+import testingLibrary from "eslint-plugin-testing-library";
+import unicorn from "eslint-plugin-unicorn";
+import assert from "node:assert/strict";
+import { globSync } from "node:fs";
+import { test } from "node:test";
+import tseslint from "typescript-eslint";
+
+test("ESLint enforces the frontend profile and excludes generated artifacts", async () => {
+	const eslint = new ESLint();
+
+	for (const [filePath, code, rule] of [
+		[
+			"src/shared/api/problem-details.ts",
+			"export function read(value: string) { return value?.trim(); }",
+			"@typescript-eslint/no-unnecessary-condition",
+		],
+		[
+			"src/shared/api/problem-details.ts",
+			"export function read(value?: string) { return value!.trim(); }",
+			"@typescript-eslint/no-non-null-assertion",
+		],
+		[
+			"src/shared/api/problem-details.ts",
+			"import { ReactNode } from \"react\"; export type Content = ReactNode;",
+			"@typescript-eslint/consistent-type-imports",
+		],
+		[
+			"src/shared/api/problem-details.ts",
+			"export function run() { Promise.resolve(); }",
+			"@typescript-eslint/no-floating-promises",
+		],
+		[
+			"packages/ui/src/EntryCard/EntryCard.tsx",
+			"import { useState } from \"react\"; export function Example({ active }: { active: boolean }) { if (active) useState(0); return null; }",
+			"react-hooks/rules-of-hooks",
+		],
+		[
+			"src/shared/api/problem-details.ts",
+			"export const values = Array(3).fill({});",
+			"unicorn/no-array-fill-with-reference-type",
+		],
+		[
+			"src/shared/api/problem-details.ts",
+			"export default 1;",
+			"import-x/no-default-export",
+		],
+		[
+			"src/shared/api/problem-details.ts",
+			"new Error(\"forgot to throw\");",
+			"sonarjs/no-unthrown-error",
+		],
+		[
+			"src/shared/api/problem-details.ts",
+			"export const pattern = /[aab]/;",
+			"regexp/no-dupe-characters-character-class",
+		],
+		[
+			"src/shared/api/problem-details.ts",
+			"export type Status = \"z\" | \"a\";",
+			"perfectionist/sort-union-types",
+		],
+		[
+			"src/shared/api/problem-details.ts",
+			"//missing space\nexport const ready = true;",
+			"@stylistic/spaced-comment",
+		],
+		[
+			"src/shared/api/problem-details.ts",
+			"export function pattern(input: string) { return new RegExp(input); }",
+			"security/detect-non-literal-regexp",
+		],
+		[
+			"scripts/check-openapi.mjs",
+			"import { exec } from \"node:child_process\"; exec(process.argv[2]);",
+			"security/detect-child-process",
+		],
+		[
+			"src/shared/api/problem-details.ts",
+			"export function renderHtml(element: HTMLElement, html: string) { element.innerHTML = html; }",
+			"no-unsanitized/property",
+		],
+		[
+			"src/shared/api/problem-details.ts",
+			"export function renderHtml(element: HTMLElement, html: string) { element.insertAdjacentHTML(\"beforeend\", html); }",
+			"no-unsanitized/method",
+		],
+		[
+			"packages/ui/src/EntryCard/EntryCard.test.tsx",
+			"import { expect } from \"vitest\"; expect(document.activeElement).toBe(document.body);",
+			"jest-dom/prefer-focus",
+		],
+		[
+			"src/shared/api/client.test.ts",
+			"import { it } from \"vitest\"; it.only(\"focused\", () => {});",
+			"vitest/no-focused-tests",
+		],
+		[
+			"packages/ui/src/EntryCard/EntryCard.test.tsx",
+			"import { screen } from \"@testing-library/react\"; screen.findByText(\"ready\");",
+			"testing-library/await-async-queries",
+		],
+		[
+			"packages/ui/src/EntryCard/EntryCard.tsx",
+			"import { QueryClient } from \"@tanstack/react-query\"; export function Example() { const client = new QueryClient(); return <div>{String(client)}</div>; }",
+			"@tanstack/query/stable-query-client",
+		],
+	]) {
+		const [result] = await eslint.lintText(code, { filePath });
+		assert.equal(result.fatalErrorCount, 0, filePath);
+		assert.ok(
+			result.messages.some(message => message.ruleId === rule),
+			rule,
+		);
+	}
+
+	for (const file of [
+		"src/shared/api/generated/schema.d.ts",
+		"packages/ui/dist/index.js",
+		"storybook-static/index.js",
+		"coverage/index.js",
+	])
+		assert.equal(await eslint.isPathIgnored(file), true, file);
+
+	const story = await eslint.calculateConfigForFile(
+		"src/shared/ui/Button.stories.tsx",
+	);
+
+	assert.equal(story.rules["import-x/no-default-export"][0], 0);
+	assert.ok(story.rules["storybook/default-exports"][0] > 0);
+	assert.equal(story.rules["react-refresh/only-export-components"], undefined);
+});
+
+test("recommended plugin rules retain the explicit null-contract exception", async () => {
+	const eslint = new ESLint();
+	const source = "src/shared/api/problem-details.ts";
+	const component = "packages/ui/src/EntryCard/EntryCard.tsx";
+	const unit = "packages/ui/src/EntryCard/EntryCard.test.tsx";
+
+	for (const [preset, filePath] of [
+		[tseslint.configs.recommendedTypeChecked, source],
+		[[importX.flatConfigs.recommended, importX.flatConfigs.typescript], source],
+		[unicorn.configs.recommended, source],
+		[sonarjs.configs.recommended, source],
+		[regexp.configs.recommended, source],
+		[security.configs.recommended, source],
+		[noUnsanitized.configs.recommended, source],
+		[perfectionist.configs["recommended-natural"], source],
+		[stylistic.configs.recommended, component],
+		[react.configs["recommended-type-checked"], component],
+		[hooks.configs.flat.recommended, component],
+		[refresh.configs.vite, component],
+		[query.configs["flat/recommended"], component],
+		[vitest.configs.recommended, unit],
+		[testingLibrary.configs["flat/react"], unit],
+		[jestDom.configs["flat/recommended"], unit],
+		...storybook.configs["flat/recommended"]
+			.filter(config => config.rules)
+			.map(config => [
+				config,
+				config.name.endsWith("main-rules")
+					? ".storybook/main.ts"
+					: "src/shared/ui/Button.stories.tsx",
+			]),
+	]) {
+		const configs = [preset].flat();
+
+		const expected = Object.assign(
+			{},
+			...configs.map(config => config.rules),
+		);
+
+		const config = await eslint.calculateConfigForFile(filePath);
+		const actual = new Map(Object.entries(config.rules));
+
+		for (const [rule, setting] of Object.entries(expected)) {
+			const severity = Array.isArray(setting) ? setting[0] : setting;
+			if (severity === "off" || severity === 0 || !rule.includes("/")) continue;
+
+			if (rule === "unicorn/no-null") {
+				assert.equal(actual.get(rule)?.[0], 0);
+				continue;
+			}
+
+			assert.ok(actual.get(rule)?.[0] > 0, `${filePath}: ${rule}`);
+		}
+	}
+});
+
+test("ESLint formatting is idempotent and preserves TSX generic syntax", async () => {
+	const eslint = new ESLint({ fix: true });
+	const filePath = "packages/ui/src/EntryCard/EntryCard.tsx";
+
+	const [fixed] = await eslint.lintText(
+		"//identity\nconst identity = <T,>(value: T): T => value;\nexport {identity};",
+		{ filePath },
+	);
+
+	assert.equal(fixed.fatalErrorCount, 0);
+	assert.equal(fixed.errorCount, 0);
+	assert.ok(fixed.output);
+	const [again] = await eslint.lintText(fixed.output, { filePath });
+	assert.equal(again.errorCount, 0);
+	assert.equal(again.output, undefined);
+});
+
+test("ESLint formatting preserves spaces around JSX text and interpolations", async () => {
+	const eslint = new ESLint({ fix: true });
+
+	const [fixed] = await eslint.lintText(
+		"const Example = () => {\nconst value = 'value';\nreturn <span>Amount: {value} / {value}</span>;\n};\nexport { Example };",
+		{ filePath: "packages/ui/src/EntryCard/EntryCard.tsx" },
+	);
+
+	assert.equal(fixed.errorCount, 0);
+	assert.ok(fixed.output?.includes("Amount: {value} / {value}"));
+});
+
+// Single-use codes must be caught too; fixture literals remain independent wire assertions.
+test("machine codes require enum members without banning ordinary text or Prisma selects", async () => {
+	const eslint = new ESLint();
+	const filePath = "src/shared/api/problem-details.ts";
+
+	for (const code of [
+		"export function check(code: string) { return code === \"one-off-code\"; }",
+		"export const result = `MOEX_UNAVAILABLE`;",
+		"export const result = { code: \"one-off-code\" };",
+		"export const result = { \"errorCode\": \"one-off-code\" };",
+		"export const result = { code: `dynamic-${Date.now()}` };",
+		"export const result = \"MOEX_UNAVAILABLE\";",
+		"export const result = [\"INSTRUMENT_ID_TYPE_FIGI\"];",
+		"export const result = { OPERATION_TYPE_COUPON: \"income\" };",
+	]) {
+		const [result] = await eslint.lintText(code, { filePath });
+		assert.equal(result.fatalErrorCount, 0, code);
+		assert.ok(
+			result.messages.some(({ ruleId }) => ruleId === "no-restricted-syntax"),
+			code,
+		);
+	}
+
+	for (const code of [
+		"enum Code { Unavailable = \"MOEX_UNAVAILABLE\" } export const result = { code: Code.Unavailable };",
+		"export const select = { code: true, errorCode: true };",
+		"export const label = \"Please try again\"; export const key = \"JWT_SECRET\";",
+	]) {
+		const [result] = await eslint.lintText(code, { filePath });
+		assert.equal(result.fatalErrorCount, 0, code);
+		assert.ok(
+			result.messages.every(({ ruleId }) => ruleId !== "no-restricted-syntax"),
+			code,
+		);
+	}
+
+	const [fixture] = await eslint.lintText(
+		"export const result = { code: \"MOEX_UNAVAILABLE\" };",
+		{ filePath: "src/shared/api/client.test.ts" },
+	);
+
+	assert.ok(
+		fixture.messages.every(({ ruleId }) => ruleId !== "no-restricted-syntax"),
+	);
+
+	const [comparison] = await eslint.lintText(
+		"enum Code { Ready = \"ready\" } export function check(code: Code) { return code === \"ready\"; }",
+		{ filePath },
+	);
+
+	assert.ok(
+		comparison.messages.some(
+			({ ruleId }) => ruleId === "@typescript-eslint/no-unsafe-enum-comparison",
+		),
+	);
+});
+
+test("readability enforces syntax without banning VM and schema patterns", async () => {
+	const eslint = new ESLint();
+	const component = "src/entities/bank-card/ui/BankCardForm/BankCardForm.tsx";
+	const model = "src/entities/income/api/useIncome.ts";
+
+	const invalid = [
+		[component, "const Example = () => <svg><path d=\"M0 0\" /></svg>;", "frontend/readability"],
+		[component, "const Example = () => <button onClick={() => alert(\"go\")} />;", "no-restricted-syntax"],
+		[component, "const Example = () => <button title={true ? \"yes\" : \"no\"} />;", "no-restricted-syntax"],
+		[component, "const Example = () => { const helper = () => 1; return <span>{helper()}</span>; };", "frontend/readability"],
+		[component, "import { z } from \"zod\"; const schema = z.string();", "frontend/readability"],
+		[component, "const schema = otherSchema.superRefine(() => {});", "frontend/readability"],
+		[model, "function useExample(accountId: string | undefined) { return accountId; }", "frontend/readability"],
+		[model, "type Example = { state: \"one\" } | { state: \"two\" };", "frontend/readability"],
+		[component, "const Example = () => <div>\n<span />\n<span />\n</div>; export { Example };", "frontend/jsx-spacing"],
+		[model, `const excessivelyLongDeclarationName = ${"1234567890".repeat(9)};`, "@stylistic/max-len"],
+	];
+
+	for (const [filePath, code, rule] of invalid) {
+		const [result] = await eslint.lintText(code, { filePath });
+		assert.equal(result.fatalErrorCount, 0, code);
+		assert.ok(result.messages.some(message => message.ruleId === rule), `${rule}: ${code}`);
+	}
+
+	for (const [filePath, code] of [
+		["src/shared/lib/calendar.schema.ts", "import { z } from \"zod\"; const calendar = z.iso.date();"],
+		["packages/icons/src/svg/AddIcon.tsx", "const Icon = () => <svg><path d=\"M0 0\" /></svg>;"],
+		[model, "function useExample(accountId?: string) { const onClick = () => accountId; return { onClick }; }"],
+		[model, "function example(value: string | undefined, required: string) { return value ?? required; }"],
+		[model, "type Example =\n | { state: \"one\" }\n | { state: \"two\" };"],
+		[component, "const Example = (props: { onClick: () => void }) => <button onClick={props.onClick} />;"],
+	]) {
+		const [result] = await eslint.lintText(code, { filePath });
+		assert.equal(result.fatalErrorCount, 0, code);
+		assert.ok(result.messages.every(message => !["frontend/readability", "no-restricted-syntax"].includes(message.ruleId)), code);
+	}
+
+	assert.deepEqual(globSync("src/**/*.svg"), []);
+});
+
+test("JSX spacing fixes preserve text interpolation and are stable", async () => {
+	const eslint = new ESLint({ fix: true });
+	const filePath = "packages/ui/src/EntryCard/EntryCard.tsx";
+	const [fixed] = await eslint.lintText("const Example = () => <div>\n<span />\n<span />\n</div>; export { Example };", { filePath });
+	const output = fixed.output;
+	assert.ok(output);
+	const [again] = await eslint.lintText(output, { filePath });
+	assert.equal(again.output, undefined);
+	assert.equal(again.errorCount, 0);
+});
+
+test("views accept presentation inputs but reject direct data hooks", async () => {
+	const eslint = new ESLint();
+	const filePath = "src/features/instrument-details/ui/InstrumentEvents.view.tsx";
+
+	for (const code of [
+		"import { useStock } from \"@/entities/stock\";",
+		"import { useAuth } from \"@/features/auth\";",
+		"import { useNavigate } from \"react-router\";",
+		"import { apiClient } from \"@/shared/api\";",
+		"import { useQuery } from \"@tanstack/react-query\";",
+	]) {
+		const [result] = await eslint.lintText(code, { filePath });
+		assert.equal(result.fatalErrorCount, 0);
+		assert.ok(result.messages.some(message =>
+			message.ruleId === "no-restricted-imports"));
+	}
+
+	for (const code of [
+		"import { Link } from \"react-router\";",
+		"import { apiErrorCode } from \"@/shared/api\";",
+		"import type { StockPosition } from \"@/entities/stock\";",
+		"import type { QueryKey } from \"@tanstack/react-query\";",
+		"import { useTranslation } from \"react-i18next\";",
+		"import { useFormContext } from \"react-hook-form\";",
+	]) {
+		const [result] = await eslint.lintText(code, { filePath });
+		assert.equal(result.fatalErrorCount, 0);
+		assert.ok(result.messages.every(message =>
+			message.ruleId !== "no-restricted-imports"));
+	}
+
+	const [vm] = await eslint.lintText(
+		"import { useStock } from \"@/entities/stock\";",
+		{ filePath: "src/pages/stock/ui/StockPage/StockPage.vm.ts" },
+	);
+
+	assert.ok(vm.messages.every(message =>
+		message.ruleId !== "no-restricted-imports"));
+});
+
+test("compact JSX and contract nulls need no local suppressions", async () => {
+	const eslint = new ESLint({ fix: true });
+	const filePath = "packages/ui/src/EntryCard/EntryCard.tsx";
+	const code = "import type { FC } from 'react'; type Props = { active: boolean }; const Example: FC<Props> = (props) => props.active ? <span /> : <div />;\nexport { Example };";
+	const [fixed] = await eslint.lintText(code, { filePath });
+	assert.equal(fixed.errorCount, 0);
+	assert.match(fixed.output ?? code, /\? <span \/> : <div \/>/);
+
+	const [nullable] = await eslint.lintText(
+		"export const value: string | null = null;",
+		{ filePath: "src/shared/api/problem-details.ts" },
+	);
+
+	assert.equal(nullable.errorCount, 0);
+});
@@ -9,53 +9,71 @@ import {
 	writeFileSync,
 } from "node:fs";
 import { tmpdir } from "node:os";
-import { delimiter, join, resolve } from "node:path";
+import nodePath from "node:path";
 import { test } from "node:test";

 const GITHUB_TOKEN_RANDOM_BYTES = 18;

 test("pre-commit scans the index, redacts findings and fails closed", () => {
-	const hook = resolve(".husky/pre-commit");
-	const cwd = mkdtempSync(join(tmpdir(), "frontend-hook-"));
-	const bin = join(cwd, "bin");
-	const marker = join(cwd, "downstream");
+	const hook = nodePath.resolve(".husky/pre-commit");
+	const cwd = mkdtempSync(nodePath.join(tmpdir(), "frontend-hook-"));
+	const bin = nodePath.join(cwd, "bin");
+	const marker = nodePath.join(cwd, "downstream");
 	const token = `ghp_${randomBytes(GITHUB_TOKEN_RANDOM_BYTES).toString("hex")}`;
-	const git = (...args) => execFileSync("git", args, { cwd, stdio: "pipe" });
-	const run = (path = `${bin}${delimiter}${process.env.PATH}`) =>
+
+	const git = (...arguments_) =>
+		execFileSync("git", arguments_, { cwd, stdio: "pipe" }); // eslint-disable-line sonarjs/no-os-command-from-path -- Repository checks use the developer/CI Git installation; arguments never invoke a shell.
+
+	const run = (path = `${bin}${nodePath.delimiter}${process.env.PATH}`) =>
 		spawnSync("/bin/sh", ["-e", hook], {
 			cwd,
-			env: { ...process.env, PATH: path },
 			encoding: "utf8",
+			env: { ...process.env, PATH: path },
 		});
+
 	try {
+		// eslint-disable-next-line security/detect-non-literal-fs-filename -- Path is built from this check’s private mkdtemp directory and fixed filenames.
 		mkdirSync(bin);
+
 		for (const command of ["npx", "npm"]) {
-			writeFileSync(join(bin, command), "#!/bin/sh\necho ran >> downstream\n", {
-				mode: 0o755,
-			});
+			// eslint-disable-next-line security/detect-non-literal-fs-filename -- Path is built from this check’s private mkdtemp directory and fixed filenames.
+			writeFileSync(
+				nodePath.join(bin, command),
+				"#!/bin/sh\necho ran >> downstream\n",
+				{
+					mode: 0o755,
+				},
+			);
 		}
+
 		git("init", "--quiet");
-		writeFileSync(join(cwd, "sample.txt"), "safe staged content\n");
+		// eslint-disable-next-line security/detect-non-literal-fs-filename -- Path is built from this check’s private mkdtemp directory and fixed filenames.
+		writeFileSync(nodePath.join(cwd, "sample.txt"), "safe staged content\n");
 		git("add", "sample.txt");
 		// An unstaged secret must not be mistaken for the index being committed.
-		writeFileSync(join(cwd, "sample.txt"), `token=${token}\n`);
+		// eslint-disable-next-line security/detect-non-literal-fs-filename -- Path is built from this check’s private mkdtemp directory and fixed filenames.
+		writeFileSync(nodePath.join(cwd, "sample.txt"), `token=${token}\n`);
 		let result = run();
 		assert.equal(
 			result.status,
 			0,
 			"clean index must pass; install Gitleaks first",
 		);
+		// eslint-disable-next-line security/detect-non-literal-fs-filename -- Path is built from this check’s private mkdtemp directory and fixed filenames.
 		assert.ok(existsSync(marker));
 		rmSync(marker);
 		git("add", "sample.txt");
 		result = run();
 		assert.equal(result.status, 1, "staged secret must block commit");
 		assert.ok(!`${result.stdout}${result.stderr}`.includes(token));
+		// eslint-disable-next-line security/detect-non-literal-fs-filename -- Path is built from this check’s private mkdtemp directory and fixed filenames.
 		assert.ok(!existsSync(marker), "formatting/dependency checks must not run");
 		result = run(bin);
 		assert.notEqual(result.status, 0, "missing Gitleaks must block commit");
+		// eslint-disable-next-line security/detect-non-literal-fs-filename -- Path is built from this check’s private mkdtemp directory and fixed filenames.
 		assert.ok(!existsSync(marker));
-	} finally {
-		rmSync(cwd, { recursive: true, force: true });
+	}
+	finally {
+		rmSync(cwd, { force: true, recursive: true });
 	}
 });
@@ -0,0 +1 @@
+export { useCurrentRoute } from "./useCurrentRoute";
@@ -0,0 +1,23 @@
+import { useMatch } from "react-router";
+
+function useCurrentRoute() {
+	const account = useMatch("/accounts/:accountId/:section?");
+
+	const section = (["events", "income", "operations"] as const)
+		.find(value => value === account?.params.section?.toLowerCase());
+
+	return {
+		account,
+		accounts: useMatch("/accounts"),
+		bond: useMatch("/bonds/:bondId"),
+		bonds: useMatch("/bonds"),
+		card: useMatch("/cards/:cardId"),
+		cards: useMatch("/cards"),
+		section,
+		settings: useMatch("/settings"),
+		stock: useMatch("/stocks/:stockId"),
+		stocks: useMatch("/stocks"),
+	};
+}
+
+export { useCurrentRoute };
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
ksv741	54deae57b3	chore(release): 1.0.0 Frontend image / publish (push) Successful in 7m39s Details Frontend verify / commits (pull_request) Successful in 39s Details Frontend verify / security (pull_request) Successful in 12s Details Frontend verify / verify (pull_request) Successful in 6m39s Details Frontend verify / commits (push) Skipped Details Frontend verify / security (push) Successful in 11s Details Frontend verify / verify (push) Successful in 7m34s Details	2026-10-07 18:14:21 +03:00
ksv741	74f8a72ed5	perf(tbank-connection): poll screen sync every five seconds Frontend verify / commits (pull_request) Successful in 48s Details Frontend verify / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Successful in 6m57s Details Frontend verify / commits (push) Skipped Details Frontend verify / security (push) Successful in 11s Details Frontend verify / verify (push) Successful in 8m21s Details During active screen sync, status checks and observe reads run every 5s instead of 1s; terminal state observes resources immediately. OpenSpec change: WealthLedger/specs#21	2026-10-07 14:03:55 +03:00
ksv741	fcb938b5a2	chore: remove unused exports Frontend verify / commits (pull_request) Successful in 42s Details Frontend verify / security (pull_request) Successful in 11s Details Frontend verify / verify (pull_request) Successful in 7m16s Details Frontend verify / commits (push) Skipped Details Frontend verify / security (push) Successful in 14s Details Frontend verify / verify (push) Failing after 6m28s Details	2026-10-07 09:10:03 +03:00
ksv741	f873db7b02	fix(deps): resolve npm audit advisories Frontend verify / commits (pull_request) Successful in 36s Details Frontend verify / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Failing after 32m34s Details	2026-10-07 07:27:16 +03:00
ksv741	0ea8d7b62d	feat: default journal period to last 7 days Frontend verify / commits (pull_request) Successful in 50s Details Frontend verify / security (pull_request) Failing after 13s Details Frontend verify / verify (pull_request) Skipped Details	2026-10-06 22:05:41 +03:00
ksv741	c25f6bd85b	refactor: move PortfolioStructure to widgets layer	2026-10-06 22:05:24 +03:00
ksv741	5b30bb802a	feat: add quiet reading with rare confirmations Part of the quiet-user-feedback change; docs and specs land in their own repositories.	2026-10-06 07:01:58 +03:00
ksv741	c096fc70ef	fix(deps): remove npm dependency on Nexus Frontend verify / commits (pull_request) Successful in 42s Details Frontend verify / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Failing after 36m0s Details Nexus hosts release Docker images, not npm dependencies. Omit registry URLs using npm's native lockfile option. Versions and integrity hashes remain unchanged.	2026-10-03 22:09:33 +03:00
ksv741	69997075e5	refactor!: simplify query and session ownership Frontend verify / commits (pull_request) Failing after 27s Details Frontend verify / security (pull_request) Skipped Details Frontend verify / verify (pull_request) Skipped Details Use Query cancellation and native mutation results instead of HTTP registries, access epochs and copied scope state. Keep local auth ordering and mutation identity fences. Allow staged generated files to remain excluded from ESLint. Backend contract: WealthLedger/backend@d698ed9 BREAKING CHANGE: drop investment stateVersion/progress/resources from the client contract and use data/metadata readiness instead of rewritten query status. Cross-tab auth may require re-login.	2026-10-03 11:45:04 +03:00
ksv741	6a89b08ee5	chore: guard presentation data boundaries Frontend verify / commits (pull_request) Successful in 31s Details Frontend verify / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Successful in 10m18s Details Frontend verify / commits (push) Skipped Details Frontend verify / security (push) Successful in 59s Details Frontend verify / verify (push) Successful in 10m53s Details	2026-10-01 20:53:23 +03:00
ksv741	2844b22dba	refactor: simplify finance view models	2026-10-01 20:53:13 +03:00
ksv741	ff67a768ad	refactor: unify bank form types and actions	2026-10-01 20:53:00 +03:00
ksv741	10baefda79	fix(deps): resolve npm audit advisories Refresh vulnerable transitive patch versions. Scope patched undici and basic-ftp to release-it. Retain the low audit threshold and release tooling version.	2026-10-01 20:51:32 +03:00
ksv741	f5f4447d60	fix: sort stock and bond events by payment date	2026-09-30 07:40:43 +03:00
ksv741	0bc8bc36b7	refactor: share source sync status presentation	2026-09-30 07:40:23 +03:00
ksv741	f9f0f6921e	refactor: clarify frontend module ownership Frontend verify / commits (pull_request) Failing after 1m19s Details Frontend verify / security (pull_request) Skipped Details Frontend verify / verify (pull_request) Skipped Details	2026-09-29 07:07:36 +03:00
ksv741	7c28a423dd	refactor: tighten types and reuse instrument UI Frontend verify / commits (pull_request) Successful in 24s Details Frontend verify / security (pull_request) Failing after 9s Details Frontend verify / verify (pull_request) Skipped Details	2026-09-29 06:15:31 +03:00
ksv741	b404c1802a	refactor: simplify auth and instrument pages Frontend verify / commits (pull_request) Successful in 24s Details Frontend verify / security (pull_request) Failing after 9s Details Frontend verify / verify (pull_request) Skipped Details	2026-09-29 05:45:08 +03:00
ksv741	32a77860c8	refactor: share instrument search presentation Frontend verify / commits (pull_request) Successful in 24s Details Frontend verify / security (pull_request) Failing after 9s Details Frontend verify / verify (pull_request) Skipped Details	2026-09-29 05:14:28 +03:00
ksv741	0865b35f93	refactor: clarify frontend model ownership Frontend verify / commits (pull_request) Successful in 27s Details Frontend verify / security (pull_request) Successful in 9s Details Frontend verify / verify (pull_request) Successful in 8m20s Details	2026-09-28 21:44:53 +03:00
ksv741	7e976c330c	refactor: simplify errors and focus tests Frontend verify / commits (pull_request) Successful in 30s Details Frontend verify / security (pull_request) Successful in 11s Details Frontend verify / verify (pull_request) Successful in 8m25s Details	2026-09-28 21:25:28 +03:00
ksv741	320ea5922a	test: remove redundant frontend checks Frontend verify / commits (pull_request) Successful in 28s Details Frontend verify / security (pull_request) Successful in 12s Details Frontend verify / verify (pull_request) Successful in 8m31s Details	2026-09-28 21:04:27 +03:00
ksv741	64fe902192	refactor: encapsulate instrument chart data Frontend verify / commits (pull_request) Successful in 27s Details Frontend verify / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Successful in 8m45s Details	2026-09-28 20:46:06 +03:00
ksv741	fb3a5a6eaa	refactor: remove redundant page view models Frontend verify / commits (pull_request) Successful in 29s Details Frontend verify / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Successful in 8m35s Details	2026-09-28 20:34:33 +03:00
ksv741	94adbafa34	refactor: simplify calendar and form state Frontend verify / commits (pull_request) Successful in 29s Details Frontend verify / security (pull_request) Successful in 11s Details Frontend verify / verify (pull_request) Successful in 8m43s Details	2026-09-28 20:23:02 +03:00
ksv741	a7537da344	refactor: simplify frontend state and mutation boundaries Frontend verify / commits (pull_request) Successful in 31s Details Frontend verify / security (pull_request) Successful in 11s Details Frontend verify / verify (pull_request) Successful in 9m1s Details Frontend verify / commits (push) Skipped Details Frontend verify / security (push) Successful in 10s Details Frontend verify / verify (push) Successful in 9m59s Details	2026-09-28 20:01:37 +03:00
ksv741	a4046dbe87	refactor: address frontend review feedback Frontend verify / commits (pull_request) Successful in 29s Details Frontend verify / security (pull_request) Successful in 9s Details Frontend verify / verify (pull_request) Successful in 8m54s Details Frontend verify / commits (push) Skipped Details Frontend verify / security (push) Successful in 12s Details Frontend verify / verify (push) Successful in 9m59s Details	2026-09-28 19:20:32 +03:00
ksv741	ca0ad4f824	refactor: enforce frontend view model boundaries Frontend verify / commits (pull_request) Successful in 28s Details Frontend verify / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Successful in 8m19s Details	2026-09-28 18:48:23 +03:00
ksv741	5b69003516	refactor: enforce enum machine codes #18 Frontend verify / commits (push) Skipped Details Frontend verify / security (push) Successful in 11s Details Frontend verify / verify (push) Successful in 9m31s Details Use owner enums for known codes; preserve wire values and unknown fallbacks. Verified npm ci and verify: 379 tests, 5 lint checks, app and Storybook builds.	2026-09-28 16:36:40 +03:00
ksv741	12c3b72bfb	style: pin ternary operator formatting #18	2026-09-28 16:36:40 +03:00
ksv741	061ec708c6	chore: guard unsafe DOM HTML with ESLint #18 Enable no-unsanitized recommended rules and verify TypeScript DOM sink diagnostics.	2026-09-28 16:36:40 +03:00
ksv741	72d7835227	chore: finish frontend ESLint migration #18 Enable every plugin recommended preset and replace Biome with ESLint formatting. Preserve API contracts and JSX whitespace; verify source, tests, builds and tooling.	2026-09-28 16:36:40 +03:00
ksv741	57630102e4	chore: add typed ESLint checks #18 Refs WealthLedger/main#18. Keep Biome; add no Prettier dependencies.	2026-09-28 16:36:40 +03:00
ksv741	95fdc8759e	ci: reduce duplicate actions and serialize checks Frontend verify / commits (pull_request) Successful in 28s Details Frontend verify / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Successful in 6m1s Details Frontend verify / commits (push) Skipped Details Frontend verify / security (push) Successful in 12s Details Frontend verify / verify (push) Successful in 7m2s Details	2026-09-28 14:18:16 +03:00
codex-bot	c1b08735e3	refactor: simplify resource queries and layout tests Frontend security / security (push) Successful in 10s Details Frontend verify / verify (push) Successful in 5m51s Details	2026-09-27 18:53:12 +03:00
codex-bot	5e076470aa	fix: resolve frontend audit findings (#39 ) Frontend security / security (push) Successful in 10s Details Frontend verify / verify (push) Successful in 6m27s Details	2026-09-27 12:11:44 +03:00
ksv741	f6db28defa	fix: resolve frontend audit findings Frontend security / security (push) Successful in 10s Details Frontend verify / verify (push) Successful in 4m57s Details Conventional commits / commits (pull_request) Successful in 28s Details Frontend security / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Successful in 5m10s Details Repair investment recovery, draft preservation, date validation, currency presentation, accessibility, and route error recovery. Correct Docker and dependency checks and consume explicit income roles.	2026-09-27 11:38:20 +03:00
ksv741	b34c1c860a	chore(release): 0.4.0 Frontend image / publish (push) Successful in 6m44s Details Conventional commits / commits (pull_request) Successful in 27s Details Frontend security / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Successful in 5m46s Details Frontend security / security (push) Successful in 10s Details Frontend verify / verify (push) Successful in 6m57s Details	2026-09-26 22:10:01 +03:00
ksv741	a005e8b13b	chore: synchronize develop before release Conventional commits / commits (pull_request) Successful in 27s Details Frontend security / security (pull_request) Successful in 10s Details Frontend verify / verify (pull_request) Successful in 6m6s Details Frontend security / security (push) Successful in 10s Details Frontend verify / verify (push) Successful in 7m5s Details	2026-09-26 21:30:58 +03:00
ksv741	4e5f564fa1	feat: show persisted investment data and sync state Consume the provided resource-envelope API snapshot. Preserve financial snapshots during refresh, observe synchronization without importing, and fence late responses across account and connection changes.	2026-09-26 21:22:49 +03:00
codex-bot	cd09ec698c	refactor: colocate frontend component files (#35 ) Frontend security / security (push) Successful in 9s Details Frontend verify / verify (push) Successful in 6m53s Details	2026-09-23 08:49:01 +03:00
ksv741	b987fd8e78	refactor: colocate frontend component files Frontend security / security (push) Successful in 9s Details Frontend verify / verify (push) Successful in 5m10s Details Conventional commits / commits (pull_request) Successful in 25s Details Frontend security / security (pull_request) Successful in 9s Details Frontend verify / verify (pull_request) Successful in 5m10s Details	2026-09-23 08:34:58 +03:00
ksv741	85fcfe3d07	refactor: establish local frontend workspace boundaries Conventional commits / commits (pull_request) Successful in 24s Details Frontend security / security (pull_request) Successful in 9s Details Frontend verify / verify (pull_request) Successful in 5m18s Details Frontend security / security (push) Successful in 10s Details Frontend verify / verify (push) Successful in 6m45s Details OpenSpec change: evolve-frontend-stack	2026-09-22 22:11:02 +03:00
ksv741	c86be7bf73	fix(ui): improve financial text contrast TD-010: use readable semantic text colors on financial surfaces while preserving signs and state meanings.	2026-09-21 21:10:10 +03:00
ksv741	6a87379813	fix(ci): resume verification of immutable release images TD-009: retry verification of an existing digest without republishing. Paired backend workflow fix: 82eccc3.	2026-09-21 21:09:53 +03:00
ksv741	db184c8cae	fix(api): update validation and conflict response contract TD-003 and TD-005: explicitly deliver OpenAPI and generated types from backend commit 1667991.	2026-09-21 21:09:41 +03:00
ksv741	a209d71589	fix(auth): isolate session races and financial caches TD-001 and TD-002: serialize cookie writes, ignore stale responses and reset financial queries on identity changes. Backend cookie lifecycle regression: ec5780d.	2026-09-21 21:09:23 +03:00
				`@@ -0,0 +1 @@`
				`export { useCurrentRoute } from "./useCurrentRoute";`