Журнал изменений

SCHEMA batch 4 (roadmap step 63): a column is nullable only where NULL means none or not recorded, the 6.2 language names turn into the codes of lang/ in every language column, and the birthday no longer receives the day of the save when its field is left empty. The stand was put on the release schema and collation on the way.

Core changes:

1. Schema and migration (storage/update/sql/table.sql, storage/update/sql/table_update6_3.sql):

2. _admins.title, super, smail, _forum.body, comments, _newsletter.body, _users.occ, origin, sig, viewmail turn NOT NULL

   • _admins.password and _users.sig are NOT NULL without a default; every insert supplies them
   • The migration fills NULL rows with the empty value first; a NULL viewmail becomes the 0 of a hidden address
3. _users.lang becomes VARCHAR(10) ascii_bin with an empty default; a value that is neither a name nor a code is emptied
4. _users.grp becomes INT UNSIGNED, a negative group is 0 first
5. A birthday equal to the day of the registration is the false one of the date filter and becomes NULL
6. Language codes of an updated site (public/update.php, admin/modules/lang.php):

7. setUpdateLangs() maps the 6.2 names in _admins, _blocks, _categories, _message, _users and _voting by getUpdateLangs()

   • An account language no lang/ file serves goes back to the empty site language; content rows keep theirs
8. setUpdateConfig() reads the same map; configsave() keeps the stored language when the form sends none
9. Empty birthday (core/security.php, core/helpers.php, modules/account/index.php, modules/account/admin/index.php):
10. The date filter of getVar() answers empty for an empty or invalid value instead of today
11. getTplAddDateTime() leaves a date-only control empty; both writers pass null as the default
12. viewmail is read as truthy by the settings switch, the cabinet lamp and the panel form
13. Inserts that supply sig (admin/index.php, public/setup.php, modules/account/index.php, tools/node-profile.php):
14. Registration, OAuth, the first administrator, the installer and the profile tool name sig
15. Tests (tests/SchemaConventionTest.php, tests/Unit/SchemaNullTest.php, tests/Unit/UpdateSiteTest.php, tests/Support/*, tests/Fixtures/update62/site.sql):
16. testNullMeansNoneOrNotRecorded() allows NULL only for a moment and eight named columns; every lang column is checked
17. SchemaNullTest drives route_probe.php in its null mode: a fresh account, the profile, the settings, a cleared birthday
18. UpdateSiteTest checks the empty values and the language codes after three runs over the 6.2 fixture
19. The probes supply the columns that lost their NULL
20. Plan and roadmap (docs/7-SCHEMA-2026.md, docs/ROADMAP-2026.md):
21. The choices of batch 4 and the release state of the stand under "Decisions"; step 63 ticked

Benefits:

• NULL carries one meaning across the schema, and the convention test holds it
• A profile no longer shows a birthday nobody entered
• One language value per account, the same codes the configuration uses

Technical notes:

• Breaking change: getVar(..., 'date') returns '' instead of today's date for an empty or invalid value; code outside the tree that relied on the fallback must pass its own default

• Breaking change: _users.lang holds a code (ru, en, ...) or '' for the site language, no longer a 6.2 name
• The migration is idempotent over the 6.2 fixture: three runs give the same rows and a schema equal to a clean install

ADMIN-LOG batches 2 and 3 (roadmap steps 60 and 61): the panel, the logins, OAuth, the database tool and the file scan write their events as JSON lines of their own Logger channels, the action of the panel is noted in checkAdminPost() and written once when the request ends, and "Безопасность" shows any journal as a filtered table that every module links to by its own entries. The stand drops its client-only screen log for that link and adds the Phoenix codex page.

Core changes:

1. Logger channels (core/classes/logger.php):

2. New channels admin, user, oauth, database and filescan with addAdmin(), addUser(), addOauth(), addDatabase(), addFilescan(), and addRequest() for the request journal

   • All five listed in BARECHANS: address, method, URL and browser of the request, never its body
   • addEntry() becomes protected; every writer goes through a named method

3. getEntries() reads every file of a channel newest first with its total

   • Level is a threshold, from and to are whole days, any other key matches the field of the line
   • A foreign line is skipped, a rotated archive is not read
4. Action record of the panel (core/security.php, core/system.php, core/admin.php):
5. setAdminLog() opens a record on the passed token check with scope, operation and object, only where ADMIN_FILE is defined
6. setRedirect() gives an open record its result, a warning being a refusal
7. The drag-and-drop order handlers of categories and blocks check through checkAdminPost(), so their saves are recorded
8. addAdminLog() writes the record as one line of admin.log at the end of the request
9. addLoginLog() writes a login once: a row of _login_log and an event of admin.log or user.log
10. write_log() and the text blocks of the old login report are gone
11. OAuth, database tool, file scan (core/classes/oauth.php, admin/modules/database.php, core/system.php):
12. OAuth::setLog() removed; protocol events go to Logger::addOauth() without tokens, codes or claims
13. The database tool writes Run started and one Block done or Block failed per block
14. The file scan writes one notice per change and one File scan line per run
15. Journal view of Security (admin/modules/security.php, core/helpers.php, admin/lang/.php, lang/.php):

16. logview shows a channel as a table with filters of level, period and field and the pager

    • admin.log: time, level, who, module, action, object, result, address
    • Other journals: time, level, message, address
17. "Журнал действий" ends the tab strip of every module for an administrator who may open Security
18. New constants in six locales; _INPUT left the site locales
19. Account module (modules/account/index.php, modules/account/admin/index.php):
20. Login and OAuth paths follow the new Logger methods and addLoginLog() parameters
21. Tests (tests/Unit/AdminLogTest.php, tests/Support/route_probe.php, tests/Support/journal_probe.php, tests/Unit/JournalSecretTest.php):

22. AdminLogTest over route_probe.php journal: panel actions, logins, OAuth events, database and scan lines, rotation, the filters, the pager, the foreign line and the module link

23. JournalSecretTest gains the probe mode scan
24. Plan and roadmap (docs/9-ADMIN-LOG-2026.md, docs/ROADMAP-2026.md):
25. Batches 2 and 3 closed with the widened bare channels and what the stand lacked; steps 60 and 61 ticked
26. Admin etalon and UX stands (public/demo/admin/index.html, public/demo/ux-0*.html, public/demo/assets/demo.js, public/demo/README.md):
27. Block E30 is the tab link to the Security journal filtered by module, the screen log and its script removed
28. Phoenix codex stand (public/demo/phoenix-codex.html, public/demo/assets/phoenix-codex*.{css,js,svg}, public/demo/assets/phoenix-codex/):
29. A story page of the 8.0 Phoenix release played over the live etalon, with particles, sound and the archive pictures

Benefits:

• One JSON format and one rotation for every journal; no module keeps file handling of its own
• Each action of the panel leaves one line, including handlers that stop without a redirect
• The administrator reads journals as tables instead of raw files

Technical notes:

• OAuth::setLog() and write_log() are removed; Logger::addEntry() is no longer public
• The journals admin, user and oauth now hold JSON lines; the old text journals of the stand were deleted, not converted
• The stand files are demo only and ship no change to the theme

The connection runs one collation, one SQL mode and the zone of PHP on every path, text columns sit on their domains in utf8mb4_unicode_520_ci read from one place with every outside value cut to its column, and no time is text any more: a moment a person reads is DATETIME, a machine timer unix seconds. The plan of the site journals joins the roadmap before the last schema batches, and the admin stand gains its pager, settings search, motion option and bell tip.

Core changes:

1. Connection contract, SCHEMA batch 1 (core/classes/pdo.php, core/system.php, admin/modules/config.php):

2. Database::__construct() takes the collation and sets SET NAMES, a fixed sql_mode and time_zone from date('P')

   • A zone offset the server refuses falls back to the zone name, a refused name is logged and the site keeps running
   • The zone line of core/system.php, $conf['db']['sync'] and the panel switch dbsync with its constants are gone
3. The referer list groups by its newest row, so it runs under ONLY_FULL_GROUP_BY
4. setup.php, update.php, tools/node-profile.php and the probes pass the configured collation
5. Text columns, SCHEMA batch 2 (storage/update/sql/*, core/security.php, writers in admin/ and modules/):
6. utf8mb4_unicode_520_ci comes from {collate} of config/db.php alone; the 6.2 path converts column by column (setconv)

7. ip, modul, scope, lang and user names take one declaration each; filterCutText() cuts a stored, escaped value without splitting an entity, and every uncut writer uses it

8. Fixed choices (bpos, action, lang, modul, apar) are checked against their values instead of cut
9. Time columns, SCHEMA batch 3 (storage/update/sql/*, mail, node service, rating, oauth, blocks, messages):

10. Timers in unix seconds: _mail.ntime and locked, _node_publish.due, _blocks.time, _rating.time

    • The mail claim and its reaper, the publication queue and the poll window read UNIX_TIMESTAMP()

11. Moments as DATETIME: _blocks.expire and _message.expire (NULL for none, set from days in the panel), _rating_votes.created and annulled, _rating_targets.created, _user_oauth.linked and lastlog

12. _users.lastvis is NULL for never; the forum new mark compares ltime with getUserLastVisit()
13. _users_temp.time leaves, the activation sweeps by regdate; format_time() takes a NULL moment
14. The 6.2 path converts values through runiftype(), a step that runs only while a column keeps its old type
15. Journals plan and roadmap (docs/9-ADMIN-LOG-2026.md, docs/ROADMAP-2026.md, docs/2027-*.md, docs/7-SCHEMA-2026.md):
16. The action journal goes to storage/logs/admin.log in the JSON format of Logger, written in checkAdminPost()
17. The login table _login_log of the 2027 core plan moves into it; logins are written at one point
18. Roadmap steps 58-62 stand before the remaining schema batches
19. Admin stand (public/demo/admin/*, public/demo/ux-07-motion.html):
20. Pager line aligned, a way down in the upper pager, only the key tip where no pages are
21. Settings search beside the heading, motion switch in Options, the bell as a theme tip on hover
22. Key tip in subtle green and scroll arrows in subtle blue, full colour on hover

Benefits:

• One connection state on every path: NOW() and date() write the same moment, MySQL and MariaDB refuse alike
• A write never fails on an overlong value, and a time column can no longer hold text
• Every journal of the site is planned in one place, without a second record of a login

Technical notes:

• Breaking: Database::__construct() requires the collation; _users_temp.time, $conf['db']['sync'] and dbsync are gone

• Breaking: _mail, _node_publish, _blocks, _message, _rating*, _user_oauth and _users.lastvis change type; update.php converts a 6.2 base, the stand was converted by hand and /schema shows no drift

• New guards: SchemaConventionTest, SchemaTimeTest, the time values of UpdateSiteTest

Roadmap step 51, RANKS batch 1: _groups.rank changes meaning from a picture file of the theme to the string icon:lit:total:#rrggbb, one parser and one renderer draw it as N lit marks of M in the colour of the rank, and the seven readers that built a path to images/ranks/ pass the raw column instead. The migration writes the darkened tones that hold 3:1 on both surfaces.

Core changes:

1. Rank helpers (core/system.php):

2. getRankData() splits the string and checks the icon, the colour and 0 <= lit <= total, 1 <= total <= 10; anything else, an old picture name included, gives an empty array and no rank

3. getRankView() renders the rank fragment with the group line as title and accessible name, or nothing

4. Readers (core/user.php, modules/forum/index.php, modules/account/index.php, blocks/user_info.php, modules/users/index.php, admin/modules/groups.php):

5. the comment, the forum post, the profile, the user block, the group table of the users statistics and the list of the panel call getRankView() on the raw column; no reader builds a path or tests a file any more

6. the group table of stats() was a seventh reader the plan had not named
7. groups() no longer needs $conf
8. Fragment and theme (fragments/rank.html of both themes, theme.css of both themes, tools/ui-contract.php):
9. one markup in both themes: sl-rank with role="img", the marks aria-hidden, the lit ones sl-is-active

10. the lit mark takes --sl-d-rank, written by the fragment and registered under data; the muted one --sl-border-strong; the marks stand at --sl-space-1 and take the size of the place they are printed in

11. Templates (fragments/comment.html, fragments/forum-post.html, partials/account-profile.html, partials/block-user-info.html):

12. rank_link, rank_src, rank_url, has_rank_image and rank_alt become one rank_html
13. the dead rank_html branch of the forum post, which no caller fed, is gone, so the personal title stays escaped
14. Migration (storage/update/sql/table_update6_3.sql):

15. one UPDATE over picture names maps the fifteen pictures onto the icon strings of the plan; a site's own picture becomes no lit mark of five in its group colour; only values ending in a picture extension change, so a second run changes nothing

16. run on the stand: 11 rows, then 0

17. Tests and plans (tests/Unit/RankDataTest.php, tools/ui-audit-baseline.json, docs/8-RANKS-2026.md, docs/ROADMAP-2026.md):

18. RankDataTest: a valid string, each bound, old picture names, bad icons, bad colours, the marks of the view
19. the plan records the seventh reader, --sl-d-rank and font-size: inherit; step 51 ticked

Benefits:

• a rank works in every theme without picture files and can be any icon, count and colour
• one parser and one renderer instead of seven ways to build a path

Technical notes:

• Breaking: _groups.rank holds icon:lit:total:#rrggbb; an old picture name is not drawn until update.php ran

• Breaking: the templates take rank_html in place of rank_link, rank_src, rank_url and has_rank_image; a theme with its own copy of these templates shows no rank

• the group form of the panel still offers pictures until batch 2; saving a group there writes a file name back
• no schema, address or API change

• tests: ui:gates green, phpstan and php-cs-fixer clean; the screenshot rig moved only forum-topic and profile; the 11 failing NodeProfileTest methods fail on the clean HEAD as well (installer probe)

Roadmap steps 47 to 49: the search field of a Node list offers up to five titles of its type as the reader types, the header plan is deleted with its lasting part in the reference, and the pager of both themes becomes the approved face of pg-09 and pg-14 - the arrows and the numbers on the segmented rail with its travelling plate, "to the top" beside them, the page line under them, narrowing by its own column.

Core changes:

1. Search hints (core/user.php, public/index.php, modules/node/index.php, partials/node/head.html, partials/node/hints.html):

2. getNodeHint() answers the light route go=1&op=getNodeHint with up to five links to what the search of the type finds under the read rights of the visitor; a word under the search minimum or a type outside the search answers nothing

3. the field is a combobox that asks after 300 ms through htmx; the list #sl-node-hints is a listbox
4. Hint keys and face (public/plugins/system/slaed.js, lite theme.css):

5. setHintKeys(): the arrows walk the hints round by aria-activedescendant, Enter opens the chosen one, Esc closes the list before the lens hears it; the list opens only with options and closes when the focus leaves

6. sl-node-hints and sl-node-hint in the lite theme
7. Node header reference (docs/NODE.md, docs/TEMPLATES.md, docs/VERSIONS.md, docs/5-NODE-HEAD-2026.md):
8. the header, the views, the live list, the search and the feed described as they stand; the change in VERSIONS
9. the plan file deleted
10. Pager view (core/helpers.php):

11. getTplPagerView() marks each number of the window is_far or is_near the current page, never an anchor, and hands range_from, range_to and range_text to the pager when the caller names the page size and the total

12. the arrows carry rel="prev" and rel="next"; the dots are a pager-link cell instead of an inline badge
13. Pager fragments (fragments/pager.html, fragments/pager-link.html, fragments/inline-badge.html of both themes):

14. one pair of files, byte for byte the same in lite and admin: a nav labelled _PAGENAV, the arrows as sl-but-mini, the numbers as sl-seg-cell in sl-seg sl-seg-pager with data-sl-knob="pager", the side group with "Наверх" on #top, the line "Страница 3 из 10 · Показаны 21–30 · Всего 97"

15. the admin sl-pnum row and the is_pager_dots branch of both inline badges are gone
16. Pager theme (theme.css and base.css of both themes):

17. .sl-pager is the container its steps measure: under 520px of its column the far numbers and the range go, under 320px the neighbours too; the site centres the row, the panel starts it at the left and pushes the line right

18. the digits of the rail read at --sl-text for AA, a number in hand takes --sl-primary-strong
19. the forum foot gives the pager a width and wraps it under the buttons; the panel list foot wraps under 560px

20. --sl-pnum-width, --sl-pnum-height, --sl-pnum-border, --sl-pnum-arrow-width, --sl-pnum-arrow-height and the admin --sl-card-shadow struck from the frozen API by the owner's decision: their one reader was the drawn arrow of the old panel pager

21. Strings (lang/*.php):
22. _PAGENAV and _PAGERANGE in six locales

23. Tests, gates and plans (tests/Unit/PagerViewTest.php, tests/Unit/NodeRouteTest.php, tests/Support/route_probe.php, tools/ui-contract.php, tools/ui-audit-baseline.json, tools/ui-contrast.json, tools/ui-shots.mjs, docs/6-PAGER-2026.md, docs/ROADMAP-2026.md):

24. PagerViewTest: the anchors, the dots, the marks at the first, a middle and the last page, the arrows, the range
25. NodeRouteTest::theSearchHintsFollowTheSearchOfTheType over real requests
26. the contrast crawler measures the chosen cell of a rail against the plate under it, not against the track
27. the contract drops the pager fragment forks and the stale duplicate group, the freeze exception is recorded
28. steps 47 to 49 ticked, the decisions of PAGER batch 1 recorded

Benefits:

• a reader reaches a material from the search field without leaving the list
• one pager markup for both themes, readable on a phone and in a 329px column, with the plate travelling between pages

Technical notes:

• Breaking: the pager fragments take new keys and print new classes; a theme with its own copy of pager.html or pager-link.html keeps its old face and loses the marks; .sl-pager-nextprev, .sl-pager-prev, .sl-pager-next, .sl-pnum-nav, .sl-pnum-cur and .sl-pnum-dots are gone

• Breaking: six admin API tokens removed, listed above
• no schema, address or API change; the light route getNodeHint is a new public read

• tests: ui:gates green, phpstan and php-cs-fixer clean; the screenshot rig moved only the five pages with a pager; the 11 failing NodeProfileTest methods fail on the clean HEAD as well (installer probe)