unusualify · oguzhanbukcuoglu · Mar 27, 2026 · Mar 27, 2026 · Mar 27, 2026 · Mar 27, 2026
diff --git a/composer.json b/composer.json
@@ -50,12 +50,14 @@
         "laravel/telescope": "^4.0|^5.0",
         "laravel/ui": "^4.2",
         "league/glide-laravel": "^1.0",
+        "mcamara/laravel-localization": "^1.8|^2.0",
         "nwidart/laravel-modules": "^8.0|^9.0|^10.0",
         "oobook/manage-eloquent": "^1.0",
         "oobook/post-redirector": "^1.0",
         "oobook/priceable": "^1.0",
         "oobook/snapshot": "^2.0",
         "orangehill/iseed": "^3.0",
+        "pragmarx/google2fa": "^8.0",
         "spatie/laravel-activitylog": "^3.0|^4.0",
         "spatie/laravel-permission": "^5.0",
         "spatie/once": "^2.0|^3.0",

diff --git a/composer.lock b/composer.lock
diff --git a/config/config.php b/config/config.php
@@ -22,6 +22,7 @@
     'admin_route_name_prefix' => env('ADMIN_ROUTE_NAME_PREFIX', 'admin'),
     'app_theme' => env('VUE_APP_THEME', 'unusualify'),
     'available_user_locales' => explode(',', env('MODULARITY_AVAILABLE_USER_LOCALES', 'en')),
+    'default_register_role' => env('MODULARITY_DEFAULT_REGISTER_ROLE', 'client-manager'),
 
     'version' => '1.0.0',
     'auth_login_redirect_path' => '/',

diff --git a/config/defers/auth_pages.php b/config/defers/auth_pages.php
@@ -47,6 +47,38 @@
             'formSlotsPreset' => 'login_options',
             'slotsPreset' => 'login_bottom',
         ],
+        'login_mfa' => [
+            'pageTitle' => 'authentication.login',
+            'layoutPreset' => 'minimal',
+            'formDraft' => 'login_email_form',
+            'actionRoute' => 'admin.login',
+            'formTitle' => 'authentication.login-title',
+            'buttonText' => 'authentication.sign-in',
+            'formSlotsPreset' => 'login_mfa_options',
+            'slotsPreset' => 'login_mfa_bottom',
+        ],
+        'login_2fa' => [
+            'pageTitle' => 'authentication.verify-login',
+            'layoutPreset' => 'minimal',
+            'formDraft' => 'login_2fa_form',
+            'actionRoute' => 'admin.login-2fa',
+            'formTitle' => 'authentication.verify-login',
+            'buttonText' => 'authentication.login',
+            'formSlotsPreset' => 'login_2fa_options',
+            'formOverrides' => ['noValidation' => true],
+            'slotsPreset' => null,
+        ],
+        'step_up' => [
+            'pageTitle' => 'authentication.verify-login',
+            'layoutPreset' => 'minimal',
+            'formDraft' => 'step_up_form',
+            'actionRoute' => 'admin.step-up.verify',
+            'formTitle' => 'authentication.verify-login',
+            'buttonText' => 'authentication.login',
+            'formSlotsPreset' => 'step_up_options',
+            'formOverrides' => ['noValidation' => true, 'async' => false],
+            'slotsPreset' => null,
+        ],
         'register' => [
             'pageTitle' => 'authentication.register',
             'layoutPreset' => 'banner',

diff --git a/config/defers/form_drafts.php b/config/defers/form_drafts.php
@@ -310,6 +310,48 @@
             'hideDetails' => 'auto',
         ],
     ],
+    'login_email_form' => [
+        'email' => [
+            'type' => 'text',
+            'name' => 'email',
+            'label' => 'E-mail',
+            'hint' => 'enter @example.com',
+            'default' => '',
+            'col' => [
+                'lg' => 12,
+            ],
+            'rules' => [
+                ['email', '', 'E-mail must be valid'],
+            ],
+            'validateOn' => 'lazy blur',
+        ],
+    ],
+    'login_2fa_form' => [
+        'verify_code' => [
+            'type' => 'otp-input',
+            'name' => 'verify-code',
+            'label' => 'One Time Password',
+            'default' => '',
+            'col' => [
+                'lg' => 12,
+            ],
+            'length' => env('MODULARITY_SECURITY_MFA_EMAIL_OTP_LENGTH', 6),
+            'rules' => 'required',
+        ],
+    ],
+    'step_up_form' => [
+        'verify_code' => [
+            'type' => 'otp-input',
+            'name' => 'verify-code',
+            'label' => 'Verification Code',
+            'default' => '',
+            'col' => [
+                'lg' => 12,
+            ],
+            'length' => 6,
+            'rules' => 'required',
+        ],
+    ],
     'forgot_password_form' => [
         'email' => [
             'type' => 'text',

diff --git a/config/defers/navigation.php b/config/defers/navigation.php
@@ -30,6 +30,21 @@
                 'icon' => '$header',
             ],
             ...Navigation::modulesMenu(),
+            // '_cms_promotion' => [
+            //     'name' => 'CMS promotion',
+            //     'icon' => 'mdi-rocket-launch-outline',
+            //     'route_name' => 'admin.system.cms.promotion.tool',
+            // ],
+            // '_cms_site_seo' => [
+            //     'name' => 'Site SEO',
+            //     'icon' => 'mdi-robot-outline',
+            //     'route_name' => 'admin.system.cms.siteSeo.tool',
+            // ],
+            // '_cms_sitemap' => [
+            //     'name' => 'Sitemap',
+            //     'icon' => 'mdi-sitemap',
+            //     'route_name' => 'admin.system.cms.sitemap.index',
+            // ],
             '_system_settings' => [
                 'name' => 'System Settings',
                 'icon' => '$header',

diff --git a/config/merges/cms_features.php b/config/merges/cms_features.php
@@ -0,0 +1,9 @@
+<?php
+
+return [
+    // Infrastructure registration toggles for CMS facilities.
+    // Feature behavior remains controlled by security/cms_promotion/cms_seo/cms_routing.
+    'enabled' => env('MODULARITY_CMS_FEATURES_ENABLED', true),
+    'register_contracts' => env('MODULARITY_CMS_REGISTER_CONTRACTS', true),
+    'register_middlewares' => env('MODULARITY_CMS_REGISTER_MIDDLEWARES', true),
+];
diff --git a/config/merges/cms_parent_segments.php b/config/merges/cms_parent_segments.php
@@ -0,0 +1,12 @@
+<?php
+
+return [
+    /**
+     * URL parent prefix bindings: one row per model class + locale (unique on target_model_class + locale).
+     * {@code normalized_prefix} may be left blank for a locale-root homepage (see {@see \Modules\Cms\Support\ParentSegmentBindingValidator} exclusivity rule).
+     *
+     * @see \Modules\Cms\Services\CmsParentSegmentResolver
+     * @see \Modules\Cms\Entities\ParentSegment
+     */
+    'enabled' => env('MODULARITY_CMS_PARENT_SEGMENTS_ENABLED', true),
+];
diff --git a/config/merges/cms_promotion.php b/config/merges/cms_promotion.php
@@ -0,0 +1,45 @@
+<?php
+
+return [
+    'enabled' => env('MODULARITY_CMS_PROMOTION_ENABLED', false),
+
+    'dry_run_required' => env('MODULARITY_CMS_PROMOTION_DRY_RUN_REQUIRED', true),
+
+    'scope' => [
+        'settings' => env('MODULARITY_CMS_PROMOTION_SCOPE_SETTINGS', true),
+        'content' => env('MODULARITY_CMS_PROMOTION_SCOPE_CONTENT', true),
+        'seo' => env('MODULARITY_CMS_PROMOTION_SCOPE_SEO', true),
+        'redirects' => env('MODULARITY_CMS_PROMOTION_SCOPE_REDIRECTS', true),
+        'layouts' => env('MODULARITY_CMS_PROMOTION_SCOPE_LAYOUTS', true),
+    ],
+
+    'approval' => [
+        'enabled' => env('MODULARITY_CMS_PROMOTION_APPROVAL_ENABLED', true),
+        'roles' => array_filter(array_map('trim', explode(',', env('MODULARITY_CMS_PROMOTION_APPROVER_ROLES', 'superadmin,admin')))),
+        'emails' => array_filter(array_map('trim', explode(',', env('MODULARITY_CMS_PROMOTION_APPROVER_EMAILS', '')))),
+        'checkpoint_label' => env('MODULARITY_CMS_PROMOTION_CHECKPOINT_LABEL', 'cms-promotion-approval'),
+    ],
+
+    /**
+     * Optional second Laravel DB connection (e.g. `staging`, `mysql_prod`) for dry-run **count deltas** vs default.
+     * Does not copy data — read-only snapshots. Restrict with `allowed_connections` in production.
+     */
+    'compare' => [
+        'connection' => env('MODULARITY_CMS_PROMOTION_COMPARE_CONNECTION', ''),
+        'label' => env('MODULARITY_CMS_PROMOTION_COMPARE_LABEL', 'target'),
+        /** Non-empty = only these connection names may be used for compare (e.g. ['staging','mysql_uat']) */
+        'allowed_connections' => array_values(array_filter(array_map('trim', explode(',', env('MODULARITY_CMS_PROMOTION_COMPARE_ALLOWED', ''))))),
+        /** When true, include full secondary snapshot in API (large JSON). Default: deltas only. */
+        'include_full_target_snapshot' => env('MODULARITY_CMS_PROMOTION_COMPARE_INCLUDE_TARGET', false),
+    ],
+
+    'execute' => [
+        /** When true, runs Cache::flush() after modularity cache (use with care). */
+        'flush_laravel_cache' => env('MODULARITY_CMS_PROMOTION_FLUSH_LARAVEL_CACHE', false),
+    ],
+
+    'audit' => [
+        'activity_log' => env('MODULARITY_CMS_PROMOTION_AUDIT_ACTIVITY', true),
+        'log_channel' => env('MODULARITY_CMS_PROMOTION_AUDIT_LOG_CHANNEL', 'modularity'),
+    ],
+];