RewriteEngine On

# Serve real files (static, uploads, images) directly
RewriteCond %{REQUEST_FILENAME} -f
RewriteRule ^ - [L]

RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]

# API
RewriteRule ^api/ api.php [QSA,L]

# Everything else -> PHP router (fixes CSS paths via <base>)
RewriteRule ^ index.php [QSA,L]

# Protect data
RewriteRule ^data/ - [F,L]
