feat: add employee email verification on signup

- Signup sends verification email instead of auto-login; login blocks unverified emails
- New endpoints: POST /verify-email and POST /resend-verification
- New verify-email page in dashboard with token-based email confirmation
- DB migration adds emailVerified and emailVerificationToken fields to Employee
- Update sign-in/sign-up/reset-password flows to handle verification states
- Minor UI polish across dashboard and marketplace components
- Refactor marketplace-homepage types

apps/dashboard/src/app/(dashboard)/settings/page.tsx

@@ -657,7 +657,7 @@ export default function SettingsPage() {
               <div className="mt-5 space-y-4">
                 <div>
                   <label className="mb-1.5 block text-sm font-medium text-slate-700">{copy.subdomain}</label>
-                  <div className="rounded-2xl border border-slate-200 bg-slate-50 px-4 py-3 text-sm text-slate-700">{brand.subdomain}.RentalDriveGo.com</div>
+                  <div className="rounded-2xl border border-slate-200 bg-slate-50 px-4 py-3 text-sm text-slate-700">{brand.subdomain}.FleetOS.com</div>
                 </div>
                 <div>
                   <label className="mb-1.5 block text-sm font-medium text-slate-700">{copy.customDomainLabel}</label>

apps/dashboard/src/app/forgot-password/ForgotPasswordPageClient.tsx

@@ -17,6 +17,7 @@ export default function ForgotPasswordPageClient({ embedded = false }: { embedde
       title: 'Forgot your password?',
       subtitle: "Enter your work email and we'll send you a reset link.",
       email: 'Email',
+      emailPlaceholder: 'owner@company.com',
       submit: 'Send reset link',
       submitting: 'Sending…',
       backToLogin: 'Back to sign in',
@@ -28,6 +29,7 @@ export default function ForgotPasswordPageClient({ embedded = false }: { embedde
       title: 'Mot de passe oublié ?',
       subtitle: "Entrez votre email professionnel et nous vous enverrons un lien de réinitialisation.",
       email: 'Email',
+      emailPlaceholder: 'owner@company.com',
       submit: 'Envoyer le lien',
       submitting: 'Envoi…',
       backToLogin: 'Retour à la connexion',
@@ -39,6 +41,7 @@ export default function ForgotPasswordPageClient({ embedded = false }: { embedde
       title: 'نسيت كلمة المرور؟',
       subtitle: 'أدخل بريدك الإلكتروني وسنرسل لك رابط إعادة التعيين.',
       email: 'البريد الإلكتروني',
+      emailPlaceholder: 'owner@company.com',
       submit: 'إرسال رابط إعادة التعيين',
       submitting: 'جارٍ الإرسال…',
       backToLogin: 'العودة إلى تسجيل الدخول',
@@ -89,7 +92,7 @@ export default function ForgotPasswordPageClient({ embedded = false }: { embedde
               <a href={marketplaceUrl} target="_top">
                 <Image
                   src={DASHBOARD_LOGO_SRC}
-                  alt="RentalDriveGo"
+                  alt="FleetOS"
                   width={104}
                   height={104}
                   priority
@@ -124,7 +127,7 @@ export default function ForgotPasswordPageClient({ embedded = false }: { embedde
                     required
                     value={email}
                     onChange={(e) => setEmail(e.target.value)}
-                    placeholder="owner@company.com"
+                    placeholder={dict.emailPlaceholder}
                     className="input-field"
                   />
                 </div>

apps/dashboard/src/app/layout.tsx

@@ -12,7 +12,7 @@ const jetbrainsMono = JetBrains_Mono({
 })
 
 export const metadata: Metadata = {
-  title: 'RentalDriveGo Dashboard',
+  title: 'FleetOS Dashboard',
   description: 'Manage your rental car business',
   icons: {
     icon: '/dashboard/icon.svg',

apps/dashboard/src/app/onboarding/page.tsx

@@ -96,7 +96,7 @@ export default function OnboardingPage() {
       <main className="flex items-center justify-center px-4 py-12">
         <div className="w-full max-w-lg">
         <div className="mb-8 text-center">
-          <a href={marketplaceUrl} className="text-xs font-semibold uppercase tracking-widest text-blue-600">RentalDriveGo</a>
+          <a href={marketplaceUrl} className="text-xs font-semibold uppercase tracking-widest text-blue-600">FleetOS</a>
           <h1 className="mt-2 text-3xl font-bold text-slate-900">Set up your account</h1>
           <p className="mt-1 text-sm text-slate-500">Step {step} of 3</p>
         </div>
@@ -251,7 +251,7 @@ export default function OnboardingPage() {
                   checked={payments.isListedOnMarketplace}
                   onChange={(e) => setPayments({ ...payments, isListedOnMarketplace: e.target.checked })}
                 />
-                <span className="text-sm text-slate-700">List my company on the RentalDriveGo marketplace</span>
+                <span className="text-sm text-slate-700">List my company on the FleetOS marketplace</span>
               </label>
               <div className="flex gap-3">
                 <button onClick={() => setStep(2)} className="btn-secondary flex-1 justify-center">Back</button>

apps/dashboard/src/app/reset-password/ResetPasswordPageClient.tsx

@@ -79,6 +79,8 @@ function ResetPasswordContent({ embedded = false }: { embedded?: boolean }) {
 
   const [password, setPassword] = useState('')
   const [confirm, setConfirm] = useState('')
+  const [showPassword, setShowPassword] = useState(false)
+  const [showConfirm, setShowConfirm] = useState(false)
   const [loading, setLoading] = useState(false)
   const [done, setDone] = useState(false)
   const [error, setError] = useState<string | null>(null)
@@ -144,27 +146,65 @@ function ResetPasswordContent({ embedded = false }: { embedded?: boolean }) {
         )}
         <div>
           <label className="mb-1.5 block text-sm font-medium text-stone-700 dark:text-stone-300">{dict.newPassword}</label>
+          <div className="relative">
           <input
-            type="password"
+            type={showPassword ? 'text' : 'password'}
             required
             minLength={8}
             value={password}
             onChange={(e) => setPassword(e.target.value)}
             placeholder="••••••••"
-            className="input-field"
+            className="input-field pr-10"
           />
+          <button
+            type="button"
+            onClick={() => setShowPassword((v) => !v)}
+            className="absolute inset-y-0 right-3 flex items-center text-stone-400 hover:text-stone-700 dark:text-stone-500 dark:hover:text-stone-200"
+            tabIndex={-1}
+          >
+            {showPassword ? (
+              <svg xmlns="http://www.w3.org/2000/svg" className="h-5 w-5" fill="none" viewBox="0 0 24 24" stroke="currentColor" strokeWidth={2}>
+                <path strokeLinecap="round" strokeLinejoin="round" d="M13.875 18.825A10.05 10.05 0 0112 19c-4.478 0-8.268-2.943-9.543-7a9.97 9.97 0 011.563-3.029m5.858.908a3 3 0 114.243 4.243M9.878 9.878l4.242 4.242M9.88 9.88l-3.29-3.29m7.532 7.532l3.29 3.29M3 3l3.59 3.59m0 0A9.953 9.953 0 0112 5c4.478 0 8.268 2.943 9.543 7a10.025 10.025 0 01-4.132 5.411m0 0L21 21" />
+              </svg>
+            ) : (
+              <svg xmlns="http://www.w3.org/2000/svg" className="h-5 w-5" fill="none" viewBox="0 0 24 24" stroke="currentColor" strokeWidth={2}>
+                <path strokeLinecap="round" strokeLinejoin="round" d="M15 12a3 3 0 11-6 0 3 3 0 016 0z" />
+                <path strokeLinecap="round" strokeLinejoin="round" d="M2.458 12C3.732 7.943 7.523 5 12 5c4.478 0 8.268 2.943 9.542 7-1.274 4.057-5.064 7-9.542 7-4.477 0-8.268-2.943-9.542-7z" />
+              </svg>
+            )}
+          </button>
+          </div>
         </div>
         <div>
           <label className="mb-1.5 block text-sm font-medium text-stone-700 dark:text-stone-300">{dict.confirmPassword}</label>
+          <div className="relative">
           <input
-            type="password"
+            type={showConfirm ? 'text' : 'password'}
             required
             minLength={8}
             value={confirm}
             onChange={(e) => setConfirm(e.target.value)}
             placeholder="••••••••"
-            className="input-field"
+            className="input-field pr-10"
           />
+          <button
+            type="button"
+            onClick={() => setShowConfirm((v) => !v)}
+            className="absolute inset-y-0 right-3 flex items-center text-stone-400 hover:text-stone-700 dark:text-stone-500 dark:hover:text-stone-200"
+            tabIndex={-1}
+          >
+            {showConfirm ? (
+              <svg xmlns="http://www.w3.org/2000/svg" className="h-5 w-5" fill="none" viewBox="0 0 24 24" stroke="currentColor" strokeWidth={2}>
+                <path strokeLinecap="round" strokeLinejoin="round" d="M13.875 18.825A10.05 10.05 0 0112 19c-4.478 0-8.268-2.943-9.543-7a9.97 9.97 0 011.563-3.029m5.858.908a3 3 0 114.243 4.243M9.878 9.878l4.242 4.242M9.88 9.88l-3.29-3.29m7.532 7.532l3.29 3.29M3 3l3.59 3.59m0 0A9.953 9.953 0 0112 5c4.478 0 8.268 2.943 9.543 7a10.025 10.025 0 01-4.132 5.411m0 0L21 21" />
+              </svg>
+            ) : (
+              <svg xmlns="http://www.w3.org/2000/svg" className="h-5 w-5" fill="none" viewBox="0 0 24 24" stroke="currentColor" strokeWidth={2}>
+                <path strokeLinecap="round" strokeLinejoin="round" d="M15 12a3 3 0 11-6 0 3 3 0 016 0z" />
+                <path strokeLinecap="round" strokeLinejoin="round" d="M2.458 12C3.732 7.943 7.523 5 12 5c4.478 0 8.268 2.943 9.542 7-1.274 4.057-5.064 7-9.542 7-4.477 0-8.268-2.943-9.542-7z" />
+              </svg>
+            )}
+          </button>
+          </div>
         </div>
         <button
           type="submit"
@@ -200,7 +240,7 @@ function ResetShell({
       <main className="flex min-h-[calc(100vh-80px)] items-center justify-center px-4 py-12">
         <div className="w-full max-w-md">
           <div className="mb-8 text-center">
-            <span className="text-xs font-semibold uppercase tracking-[0.24em] text-orange-700 dark:text-orange-400">RentalDriveGo</span>
+            <span className="text-xs font-semibold uppercase tracking-[0.24em] text-orange-700 dark:text-orange-400">FleetOS</span>
             <h1 className="mt-3 text-3xl font-black tracking-tight text-stone-900 dark:text-stone-100">{title}</h1>
             {subtitle && <p className="mt-2 text-sm text-stone-500 dark:text-stone-400">{subtitle}</p>}
           </div>

apps/dashboard/src/app/sign-in/[[...sign-in]]/SignInPageClient.tsx

@@ -27,10 +27,11 @@ export default function SignInPageClient({ embedded = false }: { embedded?: bool
   const initializedFromQuery = useRef(false)
   const dict = {
     en: {
-      brandName: 'Space Agency',
+      brandName: 'FleetOS',
       title: 'Sign in',
       subtitle: 'Enter your credentials to access your account.',
       email: 'Email',
+      emailPlaceholder: 'owner@company.com',
       password: 'Password',
       signIn: 'Sign in',
       signingIn: 'Signing in…',
@@ -38,18 +39,21 @@ export default function SignInPageClient({ embedded = false }: { embedded?: bool
       verifying: 'Verifying…',
       authCode: 'Authentication code',
       enterCode: 'Enter the 6-digit code from your authenticator app.',
+      totpPlaceholder: '000000 or XXXX-XXXX-XXXX',
       back: 'Back to credentials',
       forgotPassword: 'Forgot your password?',
       invalidCredentials: 'Invalid email or password.',
       passwordNotSet: 'No password set yet. Check your invitation email or use "Forgot your password?"',
       tooManyRequests: 'Too many attempts. Please try again later.',
+      emailNotVerified: 'Please verify your email first. Check your inbox for the verification link.',
       unexpectedError: 'Something went wrong. Please try again.',
     },
     fr: {
-      brandName: 'Espace agence',
+      brandName: 'FleetOS',
       title: 'Connexion',
       subtitle: 'Saisissez vos identifiants pour accéder à votre compte.',
       email: 'Email',
+      emailPlaceholder: 'owner@company.com',
       password: 'Mot de passe',
       signIn: 'Connexion',
       signingIn: 'Connexion…',
@@ -57,18 +61,21 @@ export default function SignInPageClient({ embedded = false }: { embedded?: bool
       verifying: 'Vérification…',
       authCode: "Code d'authentification",
       enterCode: "Entrez le code à 6 chiffres de votre application d'authentification.",
+      totpPlaceholder: '000000 ou XXXX-XXXX-XXXX',
       back: 'Retour aux identifiants',
       forgotPassword: 'Mot de passe oublié ?',
       invalidCredentials: 'Adresse e-mail ou mot de passe invalide.',
       passwordNotSet: `Aucun mot de passe défini. Vérifiez votre e-mail d'invitation ou utilisez « Mot de passe oublié ? »`,
       tooManyRequests: 'Trop de tentatives. Veuillez réessayer plus tard.',
+      emailNotVerified: 'Veuillez vérifier votre adresse email. Consultez votre boîte de réception.',
       unexpectedError: 'Une erreur est survenue. Veuillez réessayer.',
     },
     ar: {
-      brandName: 'مساحة الوكالة',
+      brandName: 'FleetOS',
       title: 'تسجيل الدخول',
       subtitle: 'أدخل بياناتك للوصول إلى حسابك.',
       email: 'البريد الإلكتروني',
+      emailPlaceholder: 'owner@company.com',
       password: 'كلمة المرور',
       signIn: 'تسجيل الدخول',
       signingIn: 'جارٍ تسجيل الدخول…',
@@ -76,11 +83,13 @@ export default function SignInPageClient({ embedded = false }: { embedded?: bool
       verifying: 'جارٍ التحقق…',
       authCode: 'رمز المصادقة',
       enterCode: 'أدخل الرمز المكون من 6 أرقام من تطبيق المصادقة.',
+      totpPlaceholder: '000000 أو XXXX-XXXX-XXXX',
       back: 'العودة إلى بيانات الدخول',
       forgotPassword: 'نسيت كلمة المرور؟',
       invalidCredentials: 'البريد الإلكتروني أو كلمة المرور غير صحيحة.',
       passwordNotSet: 'لم يتم تعيين كلمة مرور بعد. تحقق من بريد الدعوة أو استخدم "نسيت كلمة المرور؟"',
       tooManyRequests: 'محاولات كثيرة جدًا. يرجى المحاولة لاحقًا.',
+      emailNotVerified: 'يرجى التحقق من بريدك الإلكتروني أولاً. تحقق من صندوق الوارد.',
       unexpectedError: 'حدث خطأ ما. يرجى المحاولة مرة أخرى.',
     },
   }[language]
@@ -149,7 +158,7 @@ export default function SignInPageClient({ embedded = false }: { embedded?: bool
               <a href={marketplaceUrl} target="_top">
                 <Image
                   src={DASHBOARD_LOGO_SRC}
-                  alt="RentalDriveGo"
+                  alt="FleetOS"
                   width={104}
                   height={104}
                   priority
@@ -158,7 +167,7 @@ export default function SignInPageClient({ embedded = false }: { embedded?: bool
               </a>
             </div>
             <p className="mt-5 text-xs font-bold uppercase tracking-[0.28em] text-orange-700 dark:text-orange-300">
-              RentalDriveGo
+              FleetOS
             </p>
             <h1 className="mt-3 text-3xl font-black tracking-[-0.03em] text-blue-950 dark:text-stone-50">
               {dict.brandName}
@@ -210,6 +219,9 @@ function LocalSignInForm({
     invalidCredentials: string
     passwordNotSet: string
     tooManyRequests: string
+    emailPlaceholder: string
+    totpPlaceholder: string
+    emailNotVerified: string
     unexpectedError: string
   }
 }) {
@@ -291,6 +303,11 @@ function LocalSignInForm({
           return true
         }
 
+        if (empJson?.error === 'email_not_verified') {
+          setError(dict.emailNotVerified)
+          return true
+        }
+
         if (empRes.status === 429) {
           setError(dict.tooManyRequests)
           return true
@@ -364,7 +381,7 @@ function LocalSignInForm({
               required
               value={email}
               onChange={(e) => setEmail(e.target.value)}
-              placeholder="owner@company.com"
+              placeholder={dict.emailPlaceholder}
               className="w-full rounded-2xl border border-stone-200 bg-white px-4 py-3 text-sm text-stone-900 transition-colors placeholder:text-stone-400 focus:border-transparent focus:outline-none focus:ring-2 focus:ring-orange-500 dark:border-blue-800 dark:bg-blue-950/80 dark:text-stone-100 dark:placeholder:text-stone-500"
             />
           </div>
@@ -430,7 +447,7 @@ function LocalSignInForm({
               required
               value={totpCode}
               onChange={(e) => setTotpCode(e.target.value.replace(/[^0-9A-Za-z-]/g, '').toUpperCase())}
-              placeholder="000000 or XXXX-XXXX-XXXX"
+              placeholder={dict.totpPlaceholder}
               className="w-full rounded-2xl border border-stone-200 bg-white px-4 py-3 text-center text-xl tracking-[0.45em] text-stone-900 transition-colors placeholder:text-stone-400 focus:border-transparent focus:outline-none focus:ring-2 focus:ring-orange-500 dark:border-blue-800 dark:bg-blue-950/80 dark:text-stone-100 dark:placeholder:text-stone-500"
             />
           </div>

apps/dashboard/src/app/sign-up/[[...sign-up]]/SignUpForm.tsx

@@ -6,23 +6,27 @@ import { apiFetch } from '@/lib/api'
 import PublicShell from '@/components/layout/PublicShell'
 import { useDashboardI18n } from '@/components/I18nProvider'
 import { marketplaceUrl } from '@/lib/urls'
-import { toPublicDashboardPath } from '@/lib/dashboardPaths'
 
 export default function SignUpForm() {
   const { language, setLanguage } = useDashboardI18n()
 
   const [email, setEmail] = useState('')
   const [password, setPassword] = useState('')
+  const [showPassword, setShowPassword] = useState(false)
   const [preferredLanguage, setPreferredLanguage] = useState<'en' | 'fr' | 'ar'>(language)
   const [loading, setLoading] = useState(false)
   const [error, setError] = useState<string | null>(null)
+  const [success, setSuccess] = useState(false)
 
   const dict = {
     en: {
       title: 'Create your workspace',
-      subtitle: 'Enter your email and password to get started. You can complete your profile after signing in.',
+      subtitle: 'Enter your email and password to get started.',
       email: 'Email',
+      emailPlaceholder: 'you@company.com',
       password: 'Password',
+      passwordPlaceholder: '\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022',
+      passwordHint: 'Minimum 8 characters',
       languageLabel: 'Preferred language',
       create: 'Create workspace',
       creating: 'Creating\u2026',
@@ -30,12 +34,18 @@ export default function SignUpForm() {
       signIn: 'Sign in',
       errorEmailTaken: 'An account with this email already exists.',
       errorGeneric: 'Something went wrong. Please try again.',
+      successTitle: 'Check your email',
+      successMessage: 'We sent a verification link to {email}. Click the link to activate your account, then sign in.',
+      successSignIn: 'Go to sign in',
     },
     fr: {
       title: 'Cr\u00e9ez votre espace',
-      subtitle: 'Saisissez votre email et mot de passe pour commencer. Vous pourrez compl\u00e9ter votre profil apr\u00e8s la connexion.',
+      subtitle: 'Saisissez votre email et mot de passe pour commencer.',
       email: 'Email',
+      emailPlaceholder: 'vous@entreprise.com',
       password: 'Mot de passe',
+      passwordPlaceholder: '\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022',
+      passwordHint: 'Minimum 8 caract\u00e8res',
       languageLabel: 'Langue pr\u00e9f\u00e9r\u00e9e',
       create: 'Cr\u00e9er mon espace',
       creating: 'Cr\u00e9ation\u2026',
@@ -43,12 +53,18 @@ export default function SignUpForm() {
       signIn: 'Se connecter',
       errorEmailTaken: 'Un compte avec cet email existe d\u00e9j\u00e0.',
       errorGeneric: 'Une erreur est survenue. Veuillez r\u00e9essayer.',
+      successTitle: 'V\u00e9rifiez votre email',
+      successMessage: 'Nous avons envoy\u00e9 un lien de v\u00e9rification \u00e0 {email}. Cliquez sur le lien pour activer votre compte, puis connectez-vous.',
+      successSignIn: 'Aller \u00e0 la connexion',
     },
     ar: {
       title: '\u0623\u0646\u0634\u0626 \u0645\u0633\u0627\u062d\u0629 \u0639\u0645\u0644\u0643',
-      subtitle: '\u0623\u062f\u062e\u0644 \u0628\u0631\u064a\u062f\u0643 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0648\u0643\u0644\u0645\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0644\u0644\u0628\u062f\u0621. \u064a\u0645\u0643\u0646\u0643 \u0625\u0643\u0645\u0627\u0644 \u0645\u0644\u0641\u0643 \u0627\u0644\u0634\u062e\u0635\u064a \u0628\u0639\u062f \u062a\u0633\u062c\u064a\u0644 \u0627\u0644\u062f\u062e\u0648\u0644.',
+      subtitle: '\u0623\u062f\u062e\u0644 \u0628\u0631\u064a\u062f\u0643 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0648\u0643\u0644\u0645\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0644\u0644\u0628\u062f\u0621.',
       email: '\u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a',
+      emailPlaceholder: 'you@company.com',
       password: '\u0643\u0644\u0645\u0629 \u0627\u0644\u0645\u0631\u0648\u0631',
+      passwordPlaceholder: '\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022',
+      passwordHint: '\u0627\u0644\u062d\u062f \u0627\u0644\u0623\u062f\u0646\u0649 8 \u0623\u062d\u0631\u0641',
       languageLabel: '\u0627\u0644\u0644\u063a\u0629 \u0627\u0644\u0645\u0641\u0636\u0644\u0629',
       create: '\u0623\u0646\u0634\u0626 \u0627\u0644\u0645\u0633\u0627\u062d\u0629',
       creating: '\u062c\u0627\u0631\u064d \u0627\u0644\u0625\u0646\u0634\u0627\u0621\u2026',
@@ -56,6 +72,9 @@ export default function SignUpForm() {
       signIn: '\u062a\u0633\u062c\u064a\u0644 \u0627\u0644\u062f\u062e\u0648\u0644',
       errorEmailTaken: '\u064a\u0648\u062c\u062f \u062d\u0633\u0627\u0628 \u0628\u0647\u0630\u0627 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0628\u0627\u0644\u0641\u0639\u0644.',
       errorGeneric: '\u062d\u062f\u062b \u062e\u0637\u0623 \u0645\u0627. \u064a\u0631\u062c\u0649 \u0627\u0644\u0645\u062d\u0627\u0648\u0644\u0629 \u0645\u0631\u0629 \u0623\u062e\u0631\u0649.',
+      successTitle: '\u062a\u062d\u0642\u0642 \u0645\u0646 \u0628\u0631\u064a\u062f\u0643 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a',
+      successMessage: '\u0623\u0631\u0633\u0644\u0646\u0627 \u0631\u0627\u0628\u0637 \u062a\u062d\u0642\u0642 \u0625\u0644\u0649 {email}. \u0627\u0646\u0642\u0631 \u0639\u0644\u0649 \u0627\u0644\u0631\u0627\u0628\u0637 \u0644\u062a\u0641\u0639\u064a\u0644 \u062d\u0633\u0627\u0628\u0643\u060c \u062b\u0645 \u0642\u0645 \u0628\u062a\u0633\u062c\u064a\u0644 \u0627\u0644\u062f\u062e\u0648\u0644.',
+      successSignIn: '\u0627\u0644\u0630\u0647\u0627\u0628 \u0625\u0644\u0649 \u062a\u0633\u062c\u064a\u0644 \u0627\u0644\u062f\u062e\u0648\u0644',
     },
   }[preferredLanguage]
 
@@ -65,17 +84,14 @@ export default function SignUpForm() {
     setError(null)
 
     try {
-      const res = await apiFetch<{ token: string }>('/auth/account/start', {
+      await apiFetch('/auth/account/start', {
         method: 'POST',
         body: JSON.stringify({ email, password, preferredLanguage }),
       })
 
       setLanguage(preferredLanguage)
       document.cookie = `rentaldrivego-language=${preferredLanguage}; path=/; max-age=31536000; samesite=lax`
-
-      if (typeof window !== 'undefined' && res.token) {
-        window.location.href = toPublicDashboardPath('/')
-      }
+      setSuccess(true)
     } catch (err: any) {
       if (err?.message?.includes('email_taken') || err?.code === 'email_taken') {
         setError(dict.errorEmailTaken)
@@ -87,6 +103,41 @@ export default function SignUpForm() {
     }
   }
 
+  if (success) {
+    return (
+      <PublicShell>
+        <main className="flex flex-1 items-center justify-center px-4 py-16">
+          <div className="w-full max-w-md text-center">
+            <div className="flex justify-center mb-6">
+              <Image
+                src="/dashboard/rentalcardrive.png"
+                alt="FleetOS"
+                width={80}
+                height={80}
+                priority
+                className="h-20 w-20 rounded-[1.5rem] border border-stone-200/80 bg-white/85 p-1.5 shadow-sm dark:border-blue-800 dark:bg-blue-950/80"
+              />
+            </div>
+            <div className="rounded-[2rem] border border-stone-200/80 bg-white/82 p-8 shadow-[0_30px_80px_rgba(28,25,23,0.08)] backdrop-blur dark:border-blue-900 dark:bg-blue-950/78">
+              <h1 className="text-2xl font-black tracking-[-0.03em] text-blue-950 dark:text-stone-50">
+                {dict.successTitle}
+              </h1>
+              <p className="mt-4 text-sm leading-7 text-stone-600 dark:text-stone-300">
+                {dict.successMessage.replace('{email}', email)}
+              </p>
+              <a
+                href="/sign-in"
+                className="mt-6 inline-flex justify-center rounded-full bg-orange-600 px-6 py-3 text-sm font-semibold text-white transition hover:bg-orange-700 dark:bg-orange-500 dark:hover:bg-orange-400"
+              >
+                {dict.successSignIn}
+              </a>
+            </div>
+          </div>
+        </main>
+      </PublicShell>
+    )
+  }
+
   return (
     <PublicShell>
       <main className="flex flex-1 items-center justify-center px-4 py-16">
@@ -96,7 +147,7 @@ export default function SignUpForm() {
               <a href={marketplaceUrl} target="_top">
                 <Image
                   src="/dashboard/rentalcardrive.png"
-                  alt="RentalDriveGo"
+                  alt="FleetOS"
                   width={80}
                   height={80}
                   priority
@@ -129,7 +180,7 @@ export default function SignUpForm() {
                   required
                   value={email}
                   onChange={(e) => setEmail(e.target.value)}
-                  placeholder="you@company.com"
+                  placeholder={dict.emailPlaceholder}
                   autoFocus
                   className="w-full rounded-2xl border border-stone-200 bg-white px-4 py-3 text-sm text-stone-900 transition-colors placeholder:text-stone-400 focus:border-transparent focus:outline-none focus:ring-2 focus:ring-orange-500 dark:border-blue-800 dark:bg-blue-950/80 dark:text-stone-100 dark:placeholder:text-stone-500"
                 />
@@ -139,16 +190,35 @@ export default function SignUpForm() {
                 <label className="mb-1.5 block text-sm font-medium text-stone-700 dark:text-stone-200">
                   {dict.password} <span className="text-red-500">*</span>
                 </label>
+                <div className="relative">
                 <input
-                  type="password"
+                  type={showPassword ? 'text' : 'password'}
                   required
                   minLength={8}
                   value={password}
                   onChange={(e) => setPassword(e.target.value)}
-                  placeholder="\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022"
-                  className="w-full rounded-2xl border border-stone-200 bg-white px-4 py-3 text-sm text-stone-900 transition-colors placeholder:text-stone-400 focus:border-transparent focus:outline-none focus:ring-2 focus:ring-orange-500 dark:border-blue-800 dark:bg-blue-950/80 dark:text-stone-100 dark:placeholder:text-stone-500"
+                  placeholder={'\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022'}
+                  className="w-full rounded-2xl border border-stone-200 bg-white px-4 py-3 pr-10 text-sm text-stone-900 transition-colors placeholder:text-stone-400 focus:border-transparent focus:outline-none focus:ring-2 focus:ring-orange-500 dark:border-blue-800 dark:bg-blue-950/80 dark:text-stone-100 dark:placeholder:text-stone-500"
                 />
-                <p className="mt-1 text-xs text-stone-400 dark:text-stone-500">Minimum 8 characters</p>
+                <button
+                  type="button"
+                  onClick={() => setShowPassword((v) => !v)}
+                  className="absolute inset-y-0 right-3 flex items-center text-stone-400 hover:text-stone-700 dark:text-stone-500 dark:hover:text-stone-200"
+                  tabIndex={-1}
+                >
+                  {showPassword ? (
+                    <svg xmlns="http://www.w3.org/2000/svg" className="h-5 w-5" fill="none" viewBox="0 0 24 24" stroke="currentColor" strokeWidth={2}>
+                      <path strokeLinecap="round" strokeLinejoin="round" d="M13.875 18.825A10.05 10.05 0 0112 19c-4.478 0-8.268-2.943-9.543-7a9.97 9.97 0 011.563-3.029m5.858.908a3 3 0 114.243 4.243M9.878 9.878l4.242 4.242M9.88 9.88l-3.29-3.29m7.532 7.532l3.29 3.29M3 3l3.59 3.59m0 0A9.953 9.953 0 0112 5c4.478 0 8.268 2.943 9.543 7a10.025 10.025 0 01-4.132 5.411m0 0L21 21" />
+                    </svg>
+                  ) : (
+                    <svg xmlns="http://www.w3.org/2000/svg" className="h-5 w-5" fill="none" viewBox="0 0 24 24" stroke="currentColor" strokeWidth={2}>
+                      <path strokeLinecap="round" strokeLinejoin="round" d="M15 12a3 3 0 11-6 0 3 3 0 016 0z" />
+                      <path strokeLinecap="round" strokeLinejoin="round" d="M2.458 12C3.732 7.943 7.523 5 12 5c4.478 0 8.268 2.943 9.542 7-1.274 4.057-5.064 7-9.542 7-4.477 0-8.268-2.943-9.542-7z" />
+                    </svg>
+                  )}
+                </button>
+                </div>
+                <p className="mt-1 text-xs text-stone-400 dark:text-stone-500">{dict.passwordHint}</p>
               </div>
 
               <div>

apps/dashboard/src/app/verify-email/page.tsx

@@ -0,0 +1,130 @@
+'use client'
+
+import { useEffect, useState } from 'react'
+import { useSearchParams } from 'next/navigation'
+import Image from 'next/image'
+import PublicShell from '@/components/layout/PublicShell'
+import { useDashboardI18n } from '@/components/I18nProvider'
+
+export default function VerifyEmailPage() {
+  const { language } = useDashboardI18n()
+  const searchParams = useSearchParams()
+  const token = searchParams.get('token')
+  const [status, setStatus] = useState<'loading' | 'success' | 'error'>('loading')
+
+  const dict = {
+    en: {
+      verifying: 'Verifying your email…',
+      success: 'Email verified! You can now sign in.',
+      error: 'This verification link is invalid or has expired.',
+      signIn: 'Go to sign in',
+    },
+    fr: {
+      verifying: 'Vérification de votre email…',
+      success: 'Email vérifié ! Vous pouvez maintenant vous connecter.',
+      error: 'Ce lien de vérification est invalide ou a expiré.',
+      signIn: 'Aller à la connexion',
+    },
+    ar: {
+      verifying: 'جارٍ التحقق من بريدك الإلكتروني…',
+      success: 'تم التحقق من البريد الإلكتروني! يمكنك الآن تسجيل الدخول.',
+      error: 'رابط التحقق هذا غير صالح أو منتهي الصلاحية.',
+      signIn: 'الذهاب إلى تسجيل الدخول',
+    },
+  }[language]
+
+  useEffect(() => {
+    if (!token) {
+      setStatus('error')
+      return
+    }
+
+    let cancelled = false
+
+    async function verify() {
+      try {
+        const API_BASE = process.env.NEXT_PUBLIC_API_URL || 'http://localhost:4000/api/v1'
+        const res = await fetch(`${API_BASE}/auth/employee/verify-email`, {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ token }),
+        })
+
+        if (cancelled) return
+
+        if (res.ok) {
+          setStatus('success')
+        } else {
+          setStatus('error')
+        }
+      } catch {
+        if (!cancelled) setStatus('error')
+      }
+    }
+
+    verify()
+
+    return () => {
+      cancelled = true
+    }
+  }, [token])
+
+  return (
+    <PublicShell>
+      <main className="flex flex-1 items-center justify-center px-4 py-16">
+        <div className="w-full max-w-md text-center">
+          <div className="flex justify-center mb-6">
+            <Image
+              src="/dashboard/rentalcardrive.png"
+              alt="FleetOS"
+              width={80}
+              height={80}
+              priority
+              className="h-20 w-20 rounded-[1.5rem] border border-stone-200/80 bg-white/85 p-1.5 shadow-sm dark:border-blue-800 dark:bg-blue-950/80"
+            />
+          </div>
+          <div className="rounded-[2rem] border border-stone-200/80 bg-white/82 p-8 shadow-[0_30px_80px_rgba(28,25,23,0.08)] backdrop-blur dark:border-blue-900 dark:bg-blue-950/78">
+            {status === 'loading' && (
+              <>
+                <div className="mx-auto mb-4 h-6 w-6 animate-spin rounded-full border-2 border-orange-500 border-t-transparent" />
+                <p className="text-sm text-stone-600 dark:text-stone-300">{dict.verifying}</p>
+              </>
+            )}
+            {status === 'success' && (
+              <>
+                <div className="mx-auto mb-4 flex h-12 w-12 items-center justify-center rounded-full bg-emerald-100 dark:bg-emerald-900/40">
+                  <svg className="h-6 w-6 text-emerald-600 dark:text-emerald-400" fill="none" viewBox="0 0 24 24" stroke="currentColor" strokeWidth={2}>
+                    <path strokeLinecap="round" strokeLinejoin="round" d="M5 13l4 4L19 7" />
+                  </svg>
+                </div>
+                <h1 className="text-xl font-black text-blue-950 dark:text-stone-50">{dict.success}</h1>
+                <a
+                  href="/sign-in"
+                  className="mt-6 inline-flex justify-center rounded-full bg-orange-600 px-6 py-3 text-sm font-semibold text-white transition hover:bg-orange-700 dark:bg-orange-500 dark:hover:bg-orange-400"
+                >
+                  {dict.signIn}
+                </a>
+              </>
+            )}
+            {status === 'error' && (
+              <>
+                <div className="mx-auto mb-4 flex h-12 w-12 items-center justify-center rounded-full bg-red-100 dark:bg-red-900/40">
+                  <svg className="h-6 w-6 text-red-600 dark:text-red-400" fill="none" viewBox="0 0 24 24" stroke="currentColor" strokeWidth={2}>
+                    <path strokeLinecap="round" strokeLinejoin="round" d="M6 18L18 6M6 6l12 12" />
+                  </svg>
+                </div>
+                <h1 className="text-xl font-black text-blue-950 dark:text-stone-50">{dict.error}</h1>
+                <a
+                  href="/sign-in"
+                  className="mt-6 inline-flex justify-center rounded-full bg-orange-600 px-6 py-3 text-sm font-semibold text-white transition hover:bg-orange-700 dark:bg-orange-500 dark:hover:bg-orange-400"
+                >
+                  {dict.signIn}
+                </a>
+              </>
+            )}
+          </div>
+        </div>
+      </main>
+    </PublicShell>
+  )
+}

apps/dashboard/src/components/layout/PublicFooter.tsx

@@ -165,7 +165,7 @@ export default function PublicFooter() {
         </div>
 
         <p className="text-sm text-stone-500 dark:text-stone-400">
-          &copy; {new Date().getFullYear()} RentalDriveGo. {footerContent.rightsLabel}
+          &copy; {new Date().getFullYear()} FleetOS. {footerContent.rightsLabel}
         </p>
       </div>
     </footer>

apps/dashboard/src/components/layout/PublicHeader.tsx

@@ -109,13 +109,13 @@ export default function PublicHeader() {
         <a href={marketplaceUrl} className="flex items-center gap-1.5 text-[11px] font-bold uppercase tracking-[0.14em] text-blue-950 dark:text-slate-100 sm:text-sm sm:tracking-[0.2em]">
           <Image
             src={DASHBOARD_LOGO_SRC}
-            alt="RentalDriveGo"
+            alt="FleetOS"
             width={36}
             height={36}
             priority
             className="h-8 w-8 rounded-md object-contain sm:h-9 sm:w-9"
           />
-          <span>RentalDriveGo</span>
+          <span>FleetOS</span>
         </a>
 
         <div className="flex flex-col gap-1.5 lg:flex-row lg:items-center lg:gap-3">

apps/dashboard/src/components/layout/Sidebar.tsx

@@ -401,7 +401,7 @@ export default function Sidebar() {
             )}
           </div>
           <span className="truncate bg-gradient-to-br from-blue-950 to-blue-600 bg-clip-text text-sm font-semibold tracking-[-0.01em] text-transparent dark:from-slate-100 dark:to-blue-300">
-            {brand?.displayName ?? 'RentalDriveGo'}
+            {brand?.displayName ?? 'FleetOS'}
           </span>
         </a>