# F-099 — Implementer evidence

- Replaced the password-reset logging-only mailer with Nodemailer SMTP support.
- Added protected SMTP configuration in admin Settings → SMTP / Email; password is never returned and blank password preserves the existing value.
- Password reset reads SMTP settings from `store_settings` per send and returns a clear configuration error when incomplete.
- Made frontend `:3003` the canonical customer app: reset request/confirm pages, account profile editing, authenticated password change, and same-origin user/address proxies are available there.
- Set the LAN reset base URL to `http://192.168.18.93:3003`.
- Fixed ISO date values for date inputs, generated description synchronization into Lexical/WYSIWYG, empty rich-text detection, admin log SSE cookie forwarding, and icon-only login/logout UI.

Validation:
- Root typecheck: exit 0
- Frontend/admin typechecks: exit 0
- Tests: 133 passed, 56 skipped
- `scripts/verify.sh`: exit 0
- Production services restarted and healthy on ports 3000, 3003, 3004, 3005