SCALYMISE — PRODUCTION DEPLOYMENT

DEPLOY
1. Back up the current scalymise.com document root.
2. Remove the previous website build from the domain root instead of merging old and new CSS/JS files.
3. Upload this ZIP to the scalymise.com document root and Extract.
4. Confirm .htaccess, index.html, assets/, services/, process/, our-work/, about/, contact/, faq/, legal-page folders, api/, admin/, config/ and storage/ are directly in the domain root.
5. Visit https://scalymise.com in an incognito/private window and test desktop + mobile.

CLEAN URLS
Public URLs use /services, /process, /our-work, /about, /contact, /faq, /terms, /privacy, /cookies and /disclaimer. No .html is shown.

FRONTEND ARCHITECTURE
The deployed site is intentionally framework-light for fast shared-hosting performance. The production UI is HTML + modern CSS + generated JavaScript, with TypeScript source in src/app.ts and Node/TypeScript build tooling in package.json. Node is NOT required on the live server.

Navigation is app-like: same-origin page changes fetch and swap only <main>. The header, footer and mobile bottom navigation stay mounted, preventing the old white flash/header blink. Native View Transitions are used when supported, with a normal fallback in other browsers.

THEME
Light/dark theme is stored locally in the visitor's browser and applied before the stylesheet paints, preventing theme flash.

ADMIN / TRACKING
Open https://scalymise.com/admin/
Change the admin password after the first successful production login.
The panel manages GTM, GA4, Google Ads, Meta Pixel, TikTok Pixel, Microsoft Clarity, LinkedIn Insight Tag, Search Console verification, SMTP and contact routing.

CONTACT EMAIL + WHATSAPP
The contact form submits to the server first, then opens WhatsApp with a professionally formatted prefilled message. Configure SMTP for info@scalymise.com in /admin/ for reliable primary notification, secondary notification and visitor acknowledgement. If SMTP is not configured, the backend attempts PHP mail().

COOKIE / CONSENT
Analytics and advertising integrations stay consent-aware. Essential site operation works without analytics consent.

FILES / PERMISSIONS
Normal folders: 0755
Normal files: 0644
storage/ must be writable by PHP on the hosting account. Use the least-permissive writable setting recommended by the host.

SECURITY
Do not expose config/, storage/ or src/. The included .htaccess blocks public access to them and to development source/config files.

CACHE
CSS and JS references contain a build version query so a new deployment does not keep stale interface code from an older build. If the host/CDN has its own cache, purge it after deployment.

SOURCE BUILD (OPTIONAL, LOCAL DEVELOPMENT ONLY)
npm install
npm run check
npm run build

The generated production JavaScript is assets/js/app.js.
