D20: OTP_MASTER_CODE login bypass read only from the environment, disabled when unset, audited on every use, with a boot banner while armed. SMS no longer aborts the boot in production — it warns and declines silently, so no message can stop an operation. D19: port Utility::faTOen onto admin-entered mobiles (before the uniqueness lookup, which could previously be bypassed with Persian digits), and the create-only welcome SMS, byte-identical to the reference and fire-and-forget. user-app-v2 was missing the cart stock ceiling entirely: capQty/maxQty, the un-orderable guard and the qty clamp are ported, leaving v2's own design intact. The two cart stores are now byte-identical. isVariantOrderable and the orderable-first default selection ported too. jest 45/45; typecheck clean on api, admin-panel, user-app, user-app-v2. [ref: henza_server/app/Http/Controllers/Adm/AdminController.php:333,348,364,378-387] [ref: henza_server/app/Models/Utility.php:26] Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
20 lines
897 B
HTML
20 lines
897 B
HTML
<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
<link rel="icon" href="/favicon.ico" />
|
|
<meta charset="UTF-8" />
|
|
<meta name="apple-mobile-web-app-capable" content="yes" />
|
|
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
|
|
<meta name="theme-color" content="#1C2D56" />
|
|
<meta name="background-color" content="#1C2D56" />
|
|
<meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" name="viewport" />
|
|
<title>طلای منتزر</title>
|
|
<script type="module" crossorigin src="/assets/index-B3AQ-Dpo.js"></script>
|
|
<link rel="stylesheet" crossorigin href="/assets/index-D-jEuKqG.css">
|
|
<link rel="manifest" href="/manifest.webmanifest"></head>
|
|
<body style="background-color: #1C2D56">
|
|
<div class="bg-white w-screen h-screen fixed"></div>
|
|
<div id="app"></div>
|
|
|
|
</body>
|
|
</html>
|