<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="utf-8" />

    <!-- Favicon Configuration -->
    <link rel="icon" type="image/x-icon" href="/favicon.ico" />
    <link rel="icon" type="image/png" sizes="16x16" href="/images/favicon-16x16.png" />
    <link rel="icon" type="image/png" sizes="32x32" href="/images/favicon-32x32.png" />
    <link rel="apple-touch-icon" sizes="180x180" href="/images/apple-touch-icon.png" />
    <link rel="manifest" href="/site.webmanifest" />

    <meta name="viewport" content="width=device-width, initial-scale=1" />
    <meta name="theme-color" content="#275362" />

    <!-- DNS Prefetch for faster loading -->
    <link rel="dns-prefetch" href="https://fonts.googleapis.com" />
    <link rel="dns-prefetch" href="https://fonts.gstatic.com" />

    <!-- Google Fonts for Signature Styles -->
    <link rel="preconnect" href="https://fonts.googleapis.com" />
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
    <link href="https://fonts.googleapis.com/css2?family=Great+Vibes&family=Dancing+Script:wght@400;700&family=Pacifico&family=Satisfy&family=Allura&family=Alex+Brush&family=Tangerine:wght@400;700&display=swap" rel="stylesheet" />

    <!-- Content Security Policy
         Production-ready configuration with minimal unsafe directives
         - style-src unsafe-inline: Required for MUI emotion styling (documented necessity)
         - For enhanced security, see CSP_PRODUCTION.md for nonce-based configuration
         - Local development URLs (127.0.0.1, localhost) allowed for dev server
    -->
    <meta http-equiv="Content-Security-Policy" content="
      default-src 'self';
      script-src 'self';
      style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;
      img-src 'self' data: http://127.0.0.1:* http://localhost:* https: blob:;
      font-src 'self' https://fonts.gstatic.com data:;
      connect-src 'self' http://127.0.0.1:* http://localhost:* ws://127.0.0.1:* ws://localhost:* https://*.supabase.co https://api.refine.dev wss://*.supabase.co https://n8nnew.eoxvantage.com https://supabase.eoxvantage.com wss://supabase.eoxvantage.com;
      frame-src 'self' https://www.youtube.com https://youtube.com https://player.vimeo.com https://vimeo.com http://127.0.0.1:* http://localhost:*;
      media-src 'self' http://127.0.0.1:* http://localhost:* https: blob: data:;
      object-src 'none';
      base-uri 'self';
      form-action 'self';
      upgrade-insecure-requests;
    " />

    <!-- SEO and Social Media -->
    <meta
      name="description"
      content="EOX ERP - Enterprise Resource Planning Platform. Comprehensive solution for managing work orders, inventory, technicians, and customers."
    />
    <meta property="og:title" content="EOX ERP - Enterprise Resource Planning" />
    <meta
      property="og:description"
      content="Comprehensive enterprise resource planning solution for efficient business operations."
    />
    <meta property="og:image" content="/images/og-image.png" />
    <meta property="og:type" content="website" />
    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:title" content="EOX ERP - Enterprise Resource Planning" />
    <meta
      name="twitter:description"
      content="Comprehensive enterprise resource planning solution."
    />
    <meta name="twitter:image" content="/images/og-image.png" />

    <title>EOX ERP</title>
    <script type="module" crossorigin src="/assets/index-cNupnjPv.js"></script>
    <link rel="modulepreload" crossorigin href="/assets/0-vendor-react-B5jFeT7p.js">
    <link rel="modulepreload" crossorigin href="/assets/1-vendor-mui-DKGO6Qc9.js">
    <link rel="modulepreload" crossorigin href="/assets/2-vendor-mui-icons-BKDpG4Vd.js">
    <link rel="modulepreload" crossorigin href="/assets/3-vendor-refine-BfKa-UYx.js">
    <link rel="modulepreload" crossorigin href="/assets/vendor-utils-K39_CQEH.js">
    <link rel="modulepreload" crossorigin href="/assets/page-accounts-DhN8UlUb.js">
    <link rel="modulepreload" crossorigin href="/assets/vendor-docs-DaEUapX1.js">
    <link rel="modulepreload" crossorigin href="/assets/page-crm-BmzdkTIW.js">
    <link rel="modulepreload" crossorigin href="/assets/vendor-charts-CNhq-SQI.js">
    <link rel="modulepreload" crossorigin href="/assets/page-dashboard-RgBDp5vR.js">
    <link rel="modulepreload" crossorigin href="/assets/vendor-forms-BiT1k9fM.js">
    <link rel="modulepreload" crossorigin href="/assets/page-employees-Bjcdf-eB.js">
    <link rel="modulepreload" crossorigin href="/assets/vendor-calendar-BiRH6apJ.js">
    <link rel="modulepreload" crossorigin href="/assets/page-lms-BiMYybYY.js">
    <link rel="modulepreload" crossorigin href="/assets/page-settings-Bdrr8YM_.js">
    <link rel="modulepreload" crossorigin href="/assets/page-inventory-BmTFqrSM.js">
    <link rel="modulepreload" crossorigin href="/assets/page-auth-CwhrG0LJ.js">
    <link rel="modulepreload" crossorigin href="/assets/page-test-config-demo.tsx-DWnQqXEv.js">
    <link rel="stylesheet" crossorigin href="/assets/page-lms-BJJV364q.css">
    <link rel="stylesheet" crossorigin href="/assets/page-auth-CRWqxlHu.css">
  </head>
  <body>
    <noscript>You need to enable JavaScript to run this app.</noscript>
    <div id="root"></div>
    <!--
      This HTML file is a template.
      If you open it directly in the browser, you will see an empty page.

      You can add webfonts, meta tags, or analytics to this file.
      The build step will place the bundled scripts into the <body> tag.

      To begin the development, run `npm dev` or `yarn start`.
      To create a production bundle, use `npm run build` or `yarn build`.
    -->
  </body>
</html>
