История коммитов

The undocumented BBCode formatting of the profile about/website fields is dropped in favor of HTMLPurifier, removing the runtime dependency on the legacy Bbcode engine.

The topic reply form already uses CKEditor; the buttons() output was passed to the template but never rendered. Remove the Bbcode injection and the now-unused system::app/bbcode templates.

Replace the removed "npm run prod"/"npm run watch" commands with "npm run build" and the "npm run dev" server, and add a frontend build step to the Docker install since the bundle is no longer committed.

The compiled bundle in public/build is now generated by "npm run build" after installation instead of being committed.

Replace the Laravel Mix / Webpack build with Vite and upgrade Vue 2.7 to Vue 3.5, keeping the server-rendered island setup where every .vue_app element is mounted as its own app.

Add a Vite view extension that renders entry point tags from the manifest in production and from the dev server (with HMR) when the hot file is present. RTL keeps a separate app.rtl.css, emitted next to every stylesheet via rtlcss.

Publish jQuery/axios/lodash globals from a dedicated module so libraries that read window.jQuery load after them, switch Bootstrap and flatpickr calls to native APIs, and load Prism in manual mode (currentScript is null in a module). Drop the frontend part of the wysibb editor; the backend stays untouched.

The 10.0 branch of the documentation repository was a dead line from 2024: it
shares no history with 9.9 and predates most of the current docs. It has been
recreated from 9.9 and now carries the public document root guides; the old
branch is kept as 10.0-legacy-2024.

.gitmodules records the branch, so submodule update --remote follows 10.0
instead of the repository default.

The base path is PUBLIC_PATH in every call site, so the argument became
optional and defaults to it. Passing it explicitly still works, which keeps
third party themes and modules building.

Everything reachable over HTTP now lives in public/, the code stays in the
repository root and is no longer served. The layout below public/ mirrors the
old one, so not a single URL changes.

The preparation landed earlier: PUBLIC_PATH switching to ROOT_PATH . 'public'
is what actually moves the application.

- nginx: root points at /app/public in both templates.
- webpack: setPublicPath('public') keeps the mix-manifest keys as /themes/...,
the build output moves under public/.
- a root .htaccess forwards requests into public/ and denies access to the code,
for Apache hosting where the document root cannot be changed.

BREAKING CHANGE: the document root must be pointed at public/. Restart php-fpm
after updating, the realpath cache holds the old paths.

The scanned folders were suffixes appended to ROOT_PATH, so assets and upload
would have silently dropped out of the snapshot once they move into public/.
They are now absolute roots, taken from the constants that follow them.

The implicit rule that only the repository root is scanned without recursion
became an explicit flag.

The installer directory is now covered as well: it is reachable by URL but was
never scanned. Existing snapshots keep working, since scan() only compares the
paths they already contain.

A language pack ships both system/locale/xx.ini and a theme flag under
themes/default/assets/. Extracting the archive straight into ROOT_PATH would
drop the flag outside of the document root once themes assets move into
public/, leaving a stray themes/default/assets/ directory in the root.

The archive is now extracted into a temporary directory and moved into place:
theme assets go under PUBLIC_THEMES_PATH, everything else into ROOT_PATH.