Only 09128081392 / 123456 remains as admin; remove seeded internal messages and add a reset-admin script for production databases.
Co-authored-by: Cursor <cursoragent@cursor.com>
Expose GET /admin/checks with order context, and point admin check alerts to the per-order checks page.
Co-authored-by: Cursor <cursoragent@cursor.com>
Tell the user no account exists and to register, instead of a bare
"user not found" string on the login OTP request path.
Co-authored-by: Cursor <cursoragent@cursor.com>
Ship 4-digit OTP with rate-limit attempts, Tehran-safe expiry/rass math, larger JSON body limit for check images, and safer order pricing/status guards. Include rebuilt dist for prebuilt deploy.
Co-authored-by: Cursor <cursoragent@cursor.com>
Allow Nest prefix server/api and overlay dist from git onto the deploy bundle so proxy paths match without a full retar.
Co-authored-by: Cursor <cursoragent@cursor.com>
Build on the developer machine without Docker, commit dist/, and run on the server with Dockerfile.dist plus compose env_file.
Co-authored-by: Cursor <cursoragent@cursor.com>
mohmdsdgandCursor