@openrails/billing-ui 0.0.0-stage → 0.233.2

package/dist/types.d.ts

@@ -0,0 +1,250 @@
+import { z } from 'zod';
+export declare const amountSchema: z.ZodString & z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>;
+export declare const unitDecimalsSchema: z.ZodNumber & z.ZodType<number, number, z.core.$ZodTypeInternals<number, number>>;
+export declare const checkoutSessionStatusSchema: z.ZodEnum<{
+    canceled: "canceled";
+    succeeded: "succeeded";
+    failed: "failed";
+    expired: "expired";
+    created: "created";
+    requires_action: "requires_action";
+    processing: "processing";
+    blocked: "blocked";
+}>;
+export type CheckoutSessionStatus = z.infer<typeof checkoutSessionStatusSchema>;
+export declare const paymentFailureSchema: z.ZodObject<{
+    reason: z.ZodString;
+    message: z.ZodString;
+    field: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export type PaymentFailure = z.infer<typeof paymentFailureSchema>;
+export declare const checkoutOperationSchema: z.ZodObject<{
+    id: z.ZodString;
+    status: z.ZodString;
+}, z.core.$strip>;
+export declare const paymentOptionSchema: z.ZodObject<{
+    id: z.ZodString;
+    psp_id: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+    rail: z.ZodString;
+    mode: z.ZodEnum<{
+        subscription: "subscription";
+        one_off: "one_off";
+    }>;
+    driver: z.ZodEnum<{
+        card: "card";
+        collect_js: "collect_js";
+        stripe_elements: "stripe_elements";
+        redirect: "redirect";
+        solana_pay: "solana_pay";
+    }>;
+    psp_key: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+    public_config: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodString>>>, z.ZodTransform<Record<string, string> | undefined, Record<string, string> | null | undefined>>>;
+}, z.core.$strip>;
+export type PaymentOption = z.infer<typeof paymentOptionSchema>;
+export declare const nextActionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"redirect_to_url">;
+    url: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"solana_pay">;
+    url: z.ZodString;
+}, z.core.$strip>], "type">;
+export type NextAction = z.infer<typeof nextActionSchema>;
+export declare const savedPaymentMethodSchema: z.ZodObject<{
+    id: z.ZodString;
+    option_id: z.ZodString;
+    rail: z.ZodString;
+    card: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        brand: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        last4: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        exp_month: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        exp_year: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type SavedPaymentMethod = z.infer<typeof savedPaymentMethodSchema>;
+export declare const checkoutLineItemSchema: z.ZodObject<{
+    label: z.ZodString;
+    sublabel: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+    amount: z.ZodString & z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>;
+}, z.core.$strip>;
+export type CheckoutLineItem = z.infer<typeof checkoutLineItemSchema>;
+export declare const checkoutPlanSchema: z.ZodObject<{
+    auto_renew: z.ZodBoolean;
+    display_name: z.ZodString;
+    unit_amount: z.ZodString & z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>;
+    currency: z.ZodString;
+    unit_decimals: z.ZodNumber & z.ZodType<number, number, z.core.$ZodTypeInternals<number, number>>;
+    billing_interval_hours: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodNumber>>, z.ZodTransform<number | undefined, number | null | undefined>>>;
+    access_duration_hours: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodNumber>>, z.ZodTransform<number | undefined, number | null | undefined>>>;
+}, z.core.$strip>;
+export type CheckoutPlan = z.infer<typeof checkoutPlanSchema>;
+export declare const checkoutSessionSchema: z.ZodObject<{
+    id: z.ZodString;
+    status: z.ZodEnum<{
+        canceled: "canceled";
+        succeeded: "succeeded";
+        failed: "failed";
+        expired: "expired";
+        created: "created";
+        requires_action: "requires_action";
+        processing: "processing";
+        blocked: "blocked";
+    }>;
+    merchant: z.ZodObject<{
+        display_name: z.ZodString;
+    }, z.core.$strip>;
+    plan: z.ZodObject<{
+        auto_renew: z.ZodBoolean;
+        display_name: z.ZodString;
+        unit_amount: z.ZodString & z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>;
+        currency: z.ZodString;
+        unit_decimals: z.ZodNumber & z.ZodType<number, number, z.core.$ZodTypeInternals<number, number>>;
+        billing_interval_hours: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodNumber>>, z.ZodTransform<number | undefined, number | null | undefined>>>;
+        access_duration_hours: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodNumber>>, z.ZodTransform<number | undefined, number | null | undefined>>>;
+    }, z.core.$strip>;
+    line_items: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
+        label: z.ZodString;
+        sublabel: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+        amount: z.ZodString & z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>;
+    }, z.core.$strip>>>>, z.ZodTransform<{
+        label: string;
+        amount: string;
+        sublabel?: string | undefined;
+    }[] | undefined, {
+        label: string;
+        amount: string;
+        sublabel?: string | undefined;
+    }[] | null | undefined>>>;
+    tax: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString & z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+    due_today: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString & z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+    options: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        psp_id: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+        rail: z.ZodString;
+        mode: z.ZodEnum<{
+            subscription: "subscription";
+            one_off: "one_off";
+        }>;
+        driver: z.ZodEnum<{
+            card: "card";
+            collect_js: "collect_js";
+            stripe_elements: "stripe_elements";
+            redirect: "redirect";
+            solana_pay: "solana_pay";
+        }>;
+        psp_key: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+        public_config: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodString>>>, z.ZodTransform<Record<string, string> | undefined, Record<string, string> | null | undefined>>>;
+    }, z.core.$strip>>;
+    saved_methods: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        option_id: z.ZodString;
+        rail: z.ZodString;
+        card: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            brand: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            last4: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            exp_month: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            exp_year: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>>>, z.ZodTransform<{
+        id: string;
+        option_id: string;
+        rail: string;
+        card?: {
+            brand?: string | null | undefined;
+            last4?: string | null | undefined;
+            exp_month?: number | null | undefined;
+            exp_year?: number | null | undefined;
+        } | null | undefined;
+    }[] | undefined, {
+        id: string;
+        option_id: string;
+        rail: string;
+        card?: {
+            brand?: string | null | undefined;
+            last4?: string | null | undefined;
+            exp_month?: number | null | undefined;
+            exp_year?: number | null | undefined;
+        } | null | undefined;
+    }[] | null | undefined>>>;
+    next_action: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"redirect_to_url">;
+        url: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"solana_pay">;
+        url: z.ZodString;
+    }, z.core.$strip>], "type">>>;
+    payment_id: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+    subscription_id: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+    failure_message: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+    failure: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        reason: z.ZodString;
+        message: z.ZodString;
+        field: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>>;
+    operation: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        status: z.ZodString;
+    }, z.core.$strip>>>;
+    success_url: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+    embed_origin: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+    expires_at: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+}, z.core.$strip>;
+export type CheckoutSession = z.infer<typeof checkoutSessionSchema>;
+export declare const payRequestSchema: z.ZodObject<{
+    option_id: z.ZodString;
+    payment_token: z.ZodOptional<z.ZodString>;
+    payment_method_id: z.ZodOptional<z.ZodString>;
+    card: z.ZodOptional<z.ZodObject<{
+        number: z.ZodString;
+        exp_month: z.ZodNumber;
+        exp_year: z.ZodNumber;
+        cvc: z.ZodString;
+    }, z.core.$strip>>;
+    billing_details: z.ZodOptional<z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        email: z.ZodOptional<z.ZodString>;
+        phone: z.ZodOptional<z.ZodString>;
+        address: z.ZodOptional<z.ZodObject<{
+            line1: z.ZodOptional<z.ZodString>;
+            line2: z.ZodOptional<z.ZodString>;
+            city: z.ZodOptional<z.ZodString>;
+            state: z.ZodOptional<z.ZodString>;
+            postal_code: z.ZodOptional<z.ZodString>;
+            country: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    token_symbol: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type PayRequest = z.infer<typeof payRequestSchema>;
+export declare const payResultSchema: z.ZodObject<{
+    status: z.ZodEnum<{
+        canceled: "canceled";
+        succeeded: "succeeded";
+        failed: "failed";
+        expired: "expired";
+        created: "created";
+        requires_action: "requires_action";
+        processing: "processing";
+        blocked: "blocked";
+    }>;
+    next_action: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"redirect_to_url">;
+        url: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"solana_pay">;
+        url: z.ZodString;
+    }, z.core.$strip>], "type">>>;
+    operation: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        status: z.ZodString;
+    }, z.core.$strip>>>;
+    payment_id: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+    subscription_id: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+    failure_message: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | undefined, string | null | undefined>>>;
+    failure: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        reason: z.ZodString;
+        message: z.ZodString;
+        field: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type PayResult = z.infer<typeof payResultSchema>;
+export type CheckoutPhase = "loading" | "ready" | "processing" | "succeeded" | "failed" | "blocked" | "expired" | "unavailable" | "error";

package/docs/payment-form-contract.md

@@ -0,0 +1,136 @@
+# Payment form contract
+
+`Checkout` renders one real `<form autocomplete="on">` and submits through its
+native submit event. Every host-owned billing field has a stable `id`, `name`,
+label, and standards-based autocomplete token.
+
+## Money
+
+The session document (`GET /billing/v1/checkout-sessions/{id}`) carries every amount
+as an exact signed int64 decimal string of `plan.currency`'s native unit, and
+`plan.unit_decimals` is that currency's registered scale:
+
+```json
+{
+  "plan": {
+    "display_name": "Premium Membership",
+    "unit_amount": "99000000",
+    "currency": "USD",
+    "unit_decimals": 6,
+    "auto_renew": true,
+    "billing_interval_hours": 720,
+    "access_duration_hours": 720
+  },
+  "line_items": [{ "label": "Premium Membership", "amount": "99000000" }],
+  "tax": "0",
+  "due_today": "99000000"
+}
+```
+
+`unit_amount`, `line_items[].amount`, `tax` and `due_today` share the plan's
+currency and scale. A JSON number, a decimal point, a value outside int64, or
+a missing `unit_decimals` fails schema validation and the session is
+unavailable; the package never assumes a scale. Hosts take the scale from
+OpenRails' currency registry (`billing.LookupCurrency`, the same table as
+the `currencies` of `GET /v1/config`); OpenRails serves the session at
+`GET /v1/checkout-sessions/{id}`; its canonical fixture
+(`testdata/wire/checkout_session.json`) is decoded by this package's tests.
+
+Rendering scales with `BigInt` and hands Intl the exact major-unit decimal;
+`formatAmount`, `amountToDecimal` and `addAmounts` are exported for hosts that
+show the same figures outside the component. An amount the engine cannot show
+exactly is refused with a visible notice, never rounded. `due_today`, when
+absent, is the exact sum of the line items and `tax`.
+
+## NMI new cards
+
+The host collects only:
+
+- the cardholder's name: one visible “Name on card” input with `autocomplete="cc-name"`;
+- the country: a native ISO-3166 country select with `autocomplete="billing country"`;
+- the postal code: a country-aware input with `autocomplete="billing postal-code"`.
+
+Postal code is optional for the 53 ISO-3166 alpha-2 countries and territories
+in the Universal Postal Union's September 2025
+[list of countries which do not require postal codes](https://www.upu.int/UPU/media/upu/documents/PostCode/General-Addressing-Issues.pdf).
+The UI keeps a postal code when the customer supplies one. It does not collect
+street, city, or state for NMI.
+
+Card number, expiration, and CVC remain inside NMI Collect.js cross-origin
+iframes. NMI owns those inner inputs, including their browser-autofill behavior;
+host markup cannot assign `cc-number`, `cc-exp`, or `cc-csc` to them. The
+Collect.js configuration supplies the supported field titles and placeholders,
+and the outer host page provides stable labelled containers. Verify saved-card
+autofill against the real gateway in each supported browser because a DOM unit
+test cannot inspect or control the cross-origin fields.
+
+A PSP that takes cards on OpenRails itself (`card_entry: server`, driver
+`card`) gets plain inputs instead, with `autocomplete` `cc-number`, `cc-exp`
+and `cc-csc`, the same layout and field errors, and no gateway script. Its
+request carries `card: {number, exp_month, exp_year, cvc}` in place of
+`payment_token`; the inputs are cleared once the card is sent.
+
+A new-card payment request includes the one-time `payment_token` plus
+`billing_details`: `name`, and `address` with the uppercase ISO `country` and
+`postal_code`. Paying with an
+existing saved method sends only `payment_method_id`; it does not overwrite the
+stored billing identity with empty form values.
+
+The package never shows separate first- and last-name inputs; OpenRails
+projects the one name onto provider-specific fields at the rail boundary.
+
+## Card subscriptions
+
+`Subscribe` is one action: paying the session with a `payment_token` (or a
+`payment_method_id`) saves a new card, accepts the displayed recurring terms
+and charges it. A decline answers `failed` and keeps no card.
+
+## Solana Pay
+
+The package never assumes which token a Solana option settles in. OpenRails
+binds the token on the advertised option's `public_config` (hosts copy it):
+
+- `token_symbol` — required; the SPL mint symbol the price is bound to
+  (`USDC`, `USD1`, …). It is sent back verbatim (uppercased) as the pay
+  request's `token_symbol`. An option without it is not offered at all.
+- `token_name` — optional buyer-facing name (`USD Coin`), shown next to the
+  symbol in the method list.
+- `network` — optional Solana cluster (`mainnet-beta`, `devnet`, `testnet`).
+  Any network other than `mainnet-beta` is named in the method hint
+  (“USD Coin (USDC) on Solana devnet”) so a test-network payment is never
+  mistaken for a real one.
+
+## Pending payment outcomes
+
+`processing` means an accepted outcome is unresolved. Checkout polls the same
+source's `getSession` without calling `pay` or Collect.js again. The optional
+`expires_at` may be null for an accepted pending attempt; a local display timer
+never releases or fails that attempt. The host must return verified terminal
+state, not infer payment from navigation or a timeout. A thrown error after
+`pay` starts is treated as unknown and remains pending, rather than enabling
+a fresh card token and payment. Tokenization/field validation errors before
+submission remain editable. Explicit `failed` results are definitive host
+responses; they must not represent an unknown provider result.
+
+`client.checkoutSource(id)` is the source of every checkout: it reads and pays
+the OpenRails session. `getSession` is a read, never another payment. With the
+session id alone it sends no bearer, so it pays with a new card only. A
+signed-in customer pays with a saved card through a customer surface:
+`client.checkoutSource(id, { customerBase: "/billing/v1/me" })` reads and pays
+at that surface's `/checkout-sessions/{id}` with the client's credential.
+
+## Separate NMI card setup
+
+`TokenizedCardForm` reuses the same hosted fields and emits `payment_token`,
+`name_on_card`, `country` and `zip` to its async `onTokenized` callback. The host
+provides explicit save-card consent and uses the callback to invoke its native
+authenticated save-card endpoint. Set `disabled` until consent is given. The
+form never creates a zero-dollar checkout or announces a completed payment.
+After token submission it locks the form; a failed/unknown save must be checked
+against the host's saved-method state before mounting a new attempt.
+
+Saving a card does not authorize a recurring charge. The host separately obtains
+and displays the immutable membership quote, then asks the signed-in customer
+to confirm that agreement.
+
+Hosts must key `TokenizedCardForm` by authenticated customer and provider identity. A customer change must unmount the old form. The form also discards an in-flight token if its tokenization configuration changes or save consent is withdrawn before dispatch.

package/package.json

@@ -1,6 +1,115 @@
 {
   "name": "@openrails/billing-ui",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.233.2",
+  "description": "Embeddable OpenRails checkout and account-billing UI: client, React hooks and styled components.",
+  "type": "module",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/open-rails/openrails.git",
+    "directory": "sdk/billing-ui"
+  },
+  "homepage": "https://github.com/open-rails/openrails/tree/master/sdk/billing-ui#readme",
+  "bugs": {
+    "url": "https://github.com/open-rails/openrails/issues"
+  },
+  "engines": {
+    "node": ">=22.12.0"
+  },
+  "files": [
+    "dist",
+    "docs",
+    "CHANGELOG.md",
+    "LICENSE",
+    "README.md"
+  ],
+  "sideEffects": [
+    "./dist/index.js",
+    "**/*.css"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./client": {
+      "types": "./dist/client/index.d.ts",
+      "import": "./dist/client.js"
+    },
+    "./react": {
+      "types": "./dist/react/index.d.ts",
+      "import": "./dist/react.js"
+    },
+    "./locales/*": {
+      "types": "./dist/locales/*.d.ts",
+      "import": "./dist/locales/*.js"
+    },
+    "./styles.css": "./dist/styles.css",
+    "./package.json": "./package.json"
+  },
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "style": "./dist/styles.css",
+  "publishConfig": {
+    "access": "public",
+    "provenance": false
+  },
+  "peerDependencies": {
+    "react": ">=19 <20",
+    "react-dom": ">=19 <20"
+  },
+  "dependencies": {
+    "@base-ui/react": "^1.7.0",
+    "@hugeicons/core-free-icons": "^4.2.3",
+    "@hugeicons/react": "^1.1.9",
+    "@stripe/stripe-js": "^9.17.0",
+    "class-variance-authority": "^0.7.1",
+    "cn": "0.4.0",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@microsoft/api-extractor": "^7.58.12",
+    "@playwright/test": "1.60.0",
+    "@solana/kit": "^6.10.0",
+    "@solana/pay": "^1.0.26",
+    "@solana/sysvars": "^5.5.1",
+    "@tailwindcss/vite": "^4.3.3",
+    "@testing-library/jest-dom": "^7.0.0",
+    "@testing-library/react": "^16.3.2",
+    "@types/node": "^26.2.0",
+    "@types/react": "^19.2.18",
+    "@types/react-dom": "^19.2.4",
+    "@vitejs/plugin-react": "^6.0.5",
+    "eslint": "^10.8.1",
+    "eslint-plugin-react-hooks": "^7.1.1",
+    "eslint-plugin-react-refresh": "^0.5.3",
+    "globals": "^17.9.0",
+    "jsdom": "^30.0.1",
+    "postcss": "8.5.26",
+    "prettier": "^3.9.6",
+    "prettier-plugin-tailwindcss": "^0.8.1",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8",
+    "tailwindcss": "^4.3.3",
+    "tw-animate-css": "^1.4.0",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.66.0",
+    "vite": "^8.2.1",
+    "vite-plugin-dts": "^5.0.3",
+    "vitest": "^4.1.11"
+  },
+  "scripts": {
+    "build": "vite build",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint .",
+    "test": "vitest run",
+    "test:browser": "playwright test",
+    "test:e2e": "playwright test -c playwright.e2e.config.ts",
+    "contract": "cd ../.. && go run ./scripts/contracts -write",
+    "contract:check": "cd ../.. && go run ./scripts/contracts",
+    "format": "prettier --write \"**/*.{css,ts,tsx,json,md}\"",
+    "check": "pnpm typecheck && pnpm lint && pnpm test && pnpm build"
+  }
 }