The panel gets its idle screensaver, the scene of the release codename with its badge, and every alert gets one slot for its actions in the look "Chip", so a button no longer stands inside the sentence of an alert. isModGroup() read the module config without declaring it, so since February every signed-in user passed a module limited to a group; it reads it again, and the comments of core/user.php are cut to one line each under the new comment rule.

Core changes:

1. Screensaver "Rebirth", ROADMAP step 110 (public/templates/admin/assets/js/phoenix.js, public/templates/admin/assets/css/phoenix.css, public/templates/admin/assets/js/admin-ui.js, public/templates/admin/layouts/admin.html, core/admin.php, core/system.php, admin/lang/*.php):

2. the scene and its styles are one pair of files of the theme admin, bound to the codename of the release

   • the scene takes the logo from the .sl-brand image the panel shows, not from a path of the stand
   • its control is busy, ended, start() and wake(); pause, rewind and chapters of the demo are not carried over

3. the idle timer lives in admin-ui.js: getSaverWait(), setSaver(), setSaverTouch(), setSaverTick(), setSaverView(), setSaverWatch()

4. the row "Screensaver" of the Options is kept in localStorage (slaed-toggle:saver, minutes 0, 1, 5, 15) like the sound

   • it reaches other open tabs through the storage event; op option and PHP never see it
   • labels _OFF and _ADM_SAVERIN through getPluralForm(), title _ADM_SAVER, in all six locales

5. the badge is the first two parts of SL_VERSION with SL_CODENAME, written into layouts/admin.html

   • visible under :root[data-sl-phx], which setSaver() sets while the screensaver is on
6. layers 10039-10041 became --sl-z-popover; the component tokens are --sl-phx-* and its spring reads --sl-alert-ease

7. The action of an alert, ROADMAP step 110a (core/helpers.php, public/templates/*/fragments/alert.html, public/templates/*/fragments/post-button.html, public/templates/admin/fragments/toast.html, public/templates/admin/partials/admin-list.html, public/templates/*/assets/css/base.css, public/templates/*/assets/css/theme.css, admin/modules/blocks.php, admin/modules/categories.php, admin/modules/comments.php, admin/modules/database.php, admin/modules/referers.php, admin/lang/*.php):

8. the fragment alert of both themes carries one slot sl-alert-acts filled from acts_html

   • the look "Chip" sl-alert-act, with a quiet second action and a danger action

9. getTplPostButton() takes a fifth parameter string $look ('', 'act', 'danger')

   • post-button.html gets the flags is_act and is_danger and sets the classes itself, no class string from PHP

10. the six places of the modules move their buttons out of the alert text into the slot

    • "Mark all N" with the meter sl-alert-meter, Retry and Undo of the panel toast
    • the sort note of Categories uses _CATDRAGSORT, Referrers name their count with _REF_TOTAL
11. the toast of the site stays a pill with sl-toast-undo: it is not an alert
12. Module group limit (core/user.php):

13. isModGroup() declares $conf and reads the group of the module again

    • the lost read went through ?? and logged nothing, so a set group was never enforced

14. the flag extra of a group arrives as an integer with emulated prepares off and is compared as one

    • a member of a special group was refused, because the strict comparison with '1' never matched

15. the rule is the one of the original is_mod_group(): a special group by membership, a point group by the points reached, a module without group open to every signed-in user

16. Comments of core/user.php:

17. 34 multi-line blocks cut to one line each, 157 comment lines down to 57

    • each line keeps the fact the code cannot show: a lock order, a swap target that must stay printed, a refusal

that looks like a mistake

• history of earlier versions, a stale "or a product" and a claim about callers are removed

1. Tests and gates (tests/Unit/ModuleGroupTest.php, tests/Support/modgroup_probe.php, tests/TemplateValidationTest.php, tests/Unit/ViewBridgeSmokeTest.php, tools/ui-audit-baseline.json, tools/ui-contract.php, tools/ui-contrast.json):

2. ModuleGroupTest lifts isModGroup() over a scripted account, module and group, with native integer rows

   • the version before this commit answers 1 in every limited case
3. testAlertActionsStandInTheirSlot holds the modules, viewRendersAlertActionSlot the fragments

4. phoenix.css is listed in themes.admin.css of the contract; the audit baseline and the contrast map follow the new rules

5. Configuration and plan (config/security.php, docs/ROADMAP-2026.md, docs/12-ADMIN-UI-2026.md):
6. the secret getSecret() generated on the stand is stored in config/security.php
7. steps 110 and 110a are closed with the answers of steps 22 and 22a; next are 110b and 22c

Benefits:

• an alert reads as a sentence with its actions beside it, the same in the panel and on the site
• a module limited to a group is closed again to accounts outside it
• the comments of core/user.php carry only what a reader of the code cannot recover

Technical notes:

• breaking change: a module with a group set now refuses signed-in users outside a special group and below the points of a point group; until this commit they all passed, so sites using module groups change behaviour

• getTplPostButton() keeps its four-parameter calls; the fifth parameter is optional
• no schema, URL or route is touched; the screensaver setting is local to the browser

Steps 106 to 109 of docs/ROADMAP-2026.md: one floating menu drawn by the theme for the panel and for the site, with pins, the watch ring and the admin card, and the voices of the system as files in sound/ of each theme, played by one engine; public/sound/ is retired. The stand series per-* for the coming step "rows per page" lands with them.

Core changes:

1. The floating menu in the panel (core/system.php, fragments/dock.html, dock.css of admin, admin-ui.js):

2. getAdminDock() draws the layer for a logged administrator: the home mark, the own links, the logout, the window tools

   • the pill grows the icon under the hand, moves by its grip and keys, folds along its axis by setSlideMotion()
   • "Floating menu" is the cookie dock-off through op option with data-sl-dock-off from the first byte, the place stays in the browser
3. Pins: the cookie pins, at most eight sections the administrator may open, pinned from the fan with Undo
4. The watch ring, the palette entry and the admin card with its two logins from getLoginLog()
5. Escape shuts an open sl-float and gives the focus back to its launcher
6. The floating menu on the site (public/plugins/system/dock.js, lite fragments/dock.html, dock.css of lite):
7. One mechanism for both menus: dock.js took the menu out of admin-ui.js with the one setOptionSend()

8. "This page in the panel" by getAdminPageLink(), the live queue by the poll of the bell, "All sections" by op getAdminSectionData

   • getAdminSectionList() is the one check of rights for the panel menu, the home and the pins
   • getAdminBlockLinks() reads the admin row of _blocks once a request
9. The row "Menu on the site" is the cookie dock-site-off
10. Sounds (public/plugins/system/sound.js, templates/admin/sound/, templates/lite/sound/, slaed.js, admin-ui.js, dock.js):

11. The voices the owner chose, rendered from the stand synth to mp3: success, error, warn, queue, win; lite adds inbox and send

    • win is a cut of the Phoenix anthem at 72.3 s

12. One engine plays them: silent before the first touch, one of a kind per 2.5 s, its switch and zones kept by getToggleState()

    • setToast(), setConfirmTask(), the session end window, a failed list and the error summary of a form sound
    • a grown queue of the bell and of the site menu sounds, quieter on a seen tab
13. The win: in the panel when a deferred action reached the server and emptied a queue, on the site by HX-Trigger of updateCommentStatus()
14. The row "Sound" in Options, the zones in the profile settings of the account, never sent to the server
15. getPrivateCountData() answers the poll of unread private messages; a grown number sounds and updates the badges
16. getAssetList() adds sound.js to the derived script list only for a theme with sound/, so no request looks at the disk
17. Theme files and the retired folder (core/system.php and 7 callers, core/classes/route.php, public/robots.txt, .gitattributes):
18. getThemeImageUrl()/getThemeImagePath() renamed to getThemeFileUrl()/getThemeFilePath() from the root of the theme
19. public/sound/ is deleted with every mention: Route::TYPES, robots.txt, the robots sample of the editor, export-ignore, the documents
20. Stand and documents (public/demo/per-*, docs/, README.md, UPGRADING.md):
21. The series per-01 to per-09 of rows per page for step 110c
22. docs/TEMPLATES.md describes sound/ in the theme structure, the plan records the answers of steps 18 to 21
23. Tests (tests/Unit/ThemeFileTest.php, tests/Support/theme_probe.php, tests/Unit/AdminGuardTest.php):
24. ThemeFileTest checks the address and the path from the root of the theme and that a theme with sounds loads the engine
25. AdminGuardTest holds the pins at both ends and keeps the menu on the site for an administrator alone

Benefits:

• One menu code serves the panel and the site, each theme draws its own markup
• The sounds ship with the theme and update with it; a theme without sound/ stays silent
• One helper reaches every file of a theme instead of a pair bound to images/

Technical notes:

• New cookies dock-off, dock-site-off and pins through op option; sound and zones live in localStorage only
• New op getPrivateCountData (go=1, token) and getAdminSectionData (go=5)
• The address /sound/ answers 404; no page linked it. sound is no longer a reserved name of Route
• The asset version map config/local.php must be rebuilt on a site that keeps an old one

Steps 103 to 105 of the roadmap in one commit, by the owner's wish. The home of the panel gets its cockpit on the data of step 102, the blocks "Administration" and "Observation" become one block of the same markup in both themes, and the visitor lists come back as the system window "Observation" of a super-administrator, read from the live sessions alone; the demo stands of the owner ride along.

Core changes:

1. Cockpit of the home (admin/index.php, public/templates/admin/partials/cockpit.html, public/templates/admin/fragments/live-chip.html, public/templates/admin/assets/css/theme.css, public/templates/admin/assets/js/admin-ui.js, public/templates/admin/assets/css/base.css):

2. the rings of CPU, RAM, disk and OPcache as open arcs of sl-knob, the lamp as the sign of the theme with its dotted orbit, the strip of figures and the live chip with its pause

   • the lamp, its line of state and the fourteen signal rows come with the page from getSystemSignals(), the rings

and the strip from the poll getCockpitData, at once and every 10 s while the tab is seen and the chip runs

• the alerts of setup.php, the self-check and the PHP version left the home for the lamp; getSelfCheckAlert() lost its $full, the language lost _PHPSETUP; _ADM_STATE, _ADM_CALM, _ADM_HEED, _ADM_FAULT, _ADM_PASSED, _ADM_WAIT

• --sl-gauge-width, --sl-font-hero and --sl-track-tight in the API block of the theme admin
• One store of the monitor (core/monitor.php, admin/modules/security.php, admin/info/monitor/ru.md):

• getMonitorCache() is a file of Cache under the memory of the request, never APCu: each php-cgi of a Windows pool keeps its own APCu, so the poll almost never hit and cost about 6 s

• the help of "Monitoring" describes the cockpit, its lamp and every threshold

• Block "Administration" (core/system.php, core/admin.php, public/templates/*/fragments/admin-block.html, public/templates//partials/session-summary.html, public/templates//assets/css/dock.css):

• one block of adminblock() in both themes instead of two: the summary as a ring of shares with the share of the administration (--sl-d-admins), the keys sl-adm-*, the links of the admin row read by getAdminBlockLinks()

  • a javascript:OpenWindow link becomes its address in a new tab, an address without a root reads from the root of

the site, a missing file inside the site is marked _ADM_NOFILE

• in the panel on the home only, on the site first in its column whatever its weight; status, which and lang decide

• dock.css is the component file of the block, the floating menu and the window in each theme; admin-block-links.html is gone in both themes; _OPCL moved to lang/*.php beside _ADM_LINKS and _ADM_NOFILE

• Window "Observation" (core/system.php, core/helpers.php, public/index.php, public/templates//partials/session-stats.html, public/templates//fragments/window.html, public/plugins/system/slaed.js, public/templates/admin/assets/js/admin-ui.js):

• getWindowSet() prints the window for a super-administrator with sessions on, on every page of the panel and the site; the ring of the summary and the key sl-adm-stat open it, a module administrator keeps the plain summary

• getSessionStats() answers op getSessionStats in go=5 and go=1 with the token: the kinds as an sl-seg filter swapped out of band, three figures of the present, the bar of shares, who is where (100 rows), the open pages and the countries (10 each); the filter is decided by the server through kind

  • the body comes on the first opening (intersect once), then the chosen cell polls every 10 s; slaed.js swallows a

timed poll of a window that is shut or out of sight, the live chip pauses it

• an address of _session.url becomes a link only when it starts with one slash; //host and /\host stay text

• window.html takes move_text, full_text and restore_text; a rail swapped out of band hands its knob place over
• a data-sl-open inside the phone drawer shuts the drawer first, so the window is not left inert
• the admin fragment session-row.html and its rules sl-session-row, -icon, -name, -module, -note are gone
• _ADM_LIVE, _ADM_NOW, _ADM_PAGES, _ADM_LANDS, _ADM_WHERE, _ADM_NOBODY, _ADM_NOGEO; _STATISTIC moved to lang/*.php

• Tests and contract (tests/Unit/AdminGuardTest.php, tests/Unit/SelfCheckTest.php, tests/Support/check_probe.php, tests/Unit/ThemeCreationTest.php, tools/ui-contract.php, tools/ui-audit-baseline.json, tools/ui-contrast.json, tools/ui-shots.json):

• theWatchWindowIsForTheSuperAdmin: the window and its answer only for a super-administrator, never without token

• the self-check alert has one form; the components cockpit, dock, adm, stats and the data tokens are declared, --sl-d-part also carries the shares of the window, the contract entries of the removed admin rules are pruned

• Docs and help (docs/12-ADMIN-UI-2026.md, docs/ROADMAP-2026.md, docs/ARCHITECTURE.md, admin/info/blocks/ru.md):
• the answers of steps 15 to 17 with what was found on the way; steps 103 to 105 ticked, step 110a added
• the help of "Blocks" describes the merged block and the window "Observation"
• Demo stands (public/demo/):

• the stands adm-08-aurora, act-01 to act-08, pick-01 to pick-08, tbl-01 to tbl-09 and tbl-compare with their assets, the index in README.md and demo.js

Benefits:

• one look at the home tells the state of the system, with the page that answers each signal
• one block and one window in both themes instead of two blocks and two copies of the summary
• the window costs nothing until it is opened and polls only while it is seen

Technical notes:

• no schema change; new ops getSessionStats (go=1, go=5); getSelfCheckAlert() lost its parameter
• a site after deployment drops config/local.php, whose asset map has to learn dock.css
• the help of the panel is Russian only, as before

Eduard Laas info@slaed.net

Steps 99-101 of the roadmap in one commit. "Configurations" takes the form canon with a check, a summary and a find of its settings, and every POST form of the panel asks before its changes are left behind. Thirty screens of groups A and B move onto getTplAdminList() with labelled filters, in-place tabs and pagers, a lamp in the row and deferred removal with Undo; no panel list but the file manager builds its head and foot any more.

Core changes:

1. Form canon (partials/form.html, partials/module-head.html, admin/modules/config.php, core/helpers.php, admin-ui.js, slaed.js, partials/group-form.html, admin/modules/groups.php):

2. the key is_valid gives a form novalidate, a check after the first try and on leaving a field, and the summary sl-form-sum with links into hidden tabs; a tab holding a change shows sl-tab-dot

3. the key find of the module head (getTplAdminTabs()) searches the settings of the page; Ctrl+K lists them as a group

4. every POST form carries data-sl-dirty and data-sl-leave; setDirtyForms() measures against the loaded values and _ADM_LEAVE asks before a link, another form or the window takes the page

   • the group form uses the same mechanism; _GROUPS_LEAVE and the data-sl-rank-* hooks are gone
5. every field of the tab "Mail" has its label; logo and editor lists are named

6. Group A on the list canon (modules/node, modules/search, modules/voting, modules/account admin, admin/modules/ favorites.php, privat.php, ratings.php, admins.php, groups.php, categories.php, core/admin.php):

7. Node items, support queue and types, favorites, private messages, votings, search log and top, rating votes, users, new users, OAuth links, administrators and the points journal are drawn by getTplAdminList()

   • getAdminFavoriteList(), getAdminPrivateList() and their go=5 entries leave core/admin.php; toplist() is folded into

search(bool $top)

• "New" and "OAuth" get working filters, OAuth a pager instead of LIMIT 100

• "Categories" and the group ladder stay components of their own with the canon filter, a lamp and deferred removal
• a lamp that stays in its row is data-sl-later="lamp <field>"; a Node move says _ADM_MOVED
• deleting a group clears grp of its users; a write that did not happen is refused

• Group B on the list canon (admin/modules/messages.php, modules.php, lang.php, scheduler.php, database.php, security.php, referers.php, newsletter.php, uploads.php, modules/master/admin/index.php):

• messages, modules, languages, scheduler, the three database tabs, the journals, journal view, logins and both ban lists of "Security", referers, campaigns, mail queue and dead addresses, master releases, sites and notes

• every removal of the group is deferred without a question; TRUNCATE/DROP, clearing referers, module tables, releasing or stopping a mailing and the master keep it, and clearing referers gains one

• the lists of "Messages" and "Blocks" write no expiry: an expired row says _EXPIRED, turning it on clears the date

• "Optimize" and "Repair" run only by POST (op optimize, repair) and redirect to their tab, which shows the result per table once; opening a tab runs nothing

• the ban lists are op=banlist&kind=ip|user, each with its add form under the list
• referers count their groups and page in SQL; master notes page by 50; a second list of a module keeps its own sort

• "Blocks" stays its own component with a lamp and deferred removal; the file manager filter is the canon one and its boxes name their file

• List canon frame (core/helpers.php, partials/admin-list.html, fragments/list-filter.html, tabs-link.html, toast.html, partials/div.html, theme.css, tools/ui-contract.php):

• list-filter takes a plain field (itype, value, is_count) beside a list; admin-list takes foot_html for a form under the list inside the redrawn frame

• the dead flags is_search_line and is_inline_filter and the rules sl-inline-filter-form are removed

• Classes and tests (core/classes/rating.php, core/classes/privat.php, tests/Support/rating_probe.php, privat_class_probe.php, tests/Unit/RatingTest.php, PrivatClassTest.php, PointOwnersTest.php):

• Rating::getRatingList($scope, $id, $page, $limit) pages by number, newest first
• Privat::deleteAdminMessage() refuses when no row was removed
• Texts, plan and baselines (admin/lang/.php, lang/.php, docs/, tools/-baseline.json):

• _ADM_LEAVE, _ADM_UNSAVED, _ADM_FILL, _ADM_BADVAL, _ADM_EDITED, _ADM_SETFIND, _ADM_MOVED, _EXPIRED, _DATEFROM, _DATETO in all six locales; _GROUPS_LEAVE removed

• the answers of steps 11-13 are recorded, steps 99-101 ticked; docs/RATINGS.md and docs/POINTS.md follow the contract
• the label crawl holds 434 routes with no finding, the audit baseline is stored

Benefits:

• one list canon for every panel list: filter, address, pager, views, lamp and Undo behave the same everywhere
• no state change rides a GET any more on the database tabs, and no list writes while it is drawn
• refused writes are told instead of reported as success

Technical notes:

• no schema change; new ops optimize and repair of "Database", new address key kind of the ban lists
• getRatingList() changes its signature: the cursor after is replaced by page and limit
• the go=5 entries of favorites and private messages are removed; their lists are built by their modules

The comment list takes the second part of the list canon of the panel: the canon draws the rows from their cells and names every cell by its column, so one table carries four views, stays readable as cards on a phone and keeps its head in view. Tablesort now binds on the first load, which no sortable table of the panel or the site did before.

Core changes:

1. List canon rows and view (core/helpers.php, partials/admin-list.html, fragments/table.html, table-cells.html):

2. getTplAdminList() takes rows as cells and gives each cell the name of its column; rows_html stays for the screens not yet on the canon

3. the view switch stands at the right end of the row over the table: "Стандартный", "Полный", "Компактный", "Карточки", one stop of Tab, the arrows walk it

   • the cookie density, read by getTplAdminList(), puts data-sl-density on the table in the first byte
4. table-cells.html gains label (data-label), stamp (<time datetime> and data-sort) and text_html (sl-cell-text)
5. table.html carries the key a kept sort is stored under and the words that say it
6. Option op (admin/index.php):
7. setAdminOption() takes the key density: full, compact or cards set the cookie, anything else deletes it
8. Comments on the row canon (admin/modules/comments.php):

9. the rows are cells; the date is a stamp, the comment text a text cell, its popover a prefix with its own label ("Подробности: Комментарий N") and the id of its panel

10. the title of the comment cell no longer shows the markup of the search highlight
11. Behaviour (public/plugins/system/slaed.js, templates/admin/assets/js/admin-ui.js):

12. slaed.js runs before tablesort.min.js in the deferred bundle, so the tables now wait for the end of the bundle; every data-sl-table-sort table of the panel and the site sorts and shows its arrows on the first load

13. a table naming its key gets the last sort of its viewer back quietly and says a new one on data-sl-said
14. the view applies at once and is stored through op option; a refusal puts the view back
15. the date of a list reads relative in the language of the page, the exact moment stays in its title
16. the rows a filter, a tab or a page brings enter one after another; a list Back restores only stands
17. Theme and canon fragments (templates/admin, templates/lite, tools/ui-contract.php):

18. the views, the sticky head, the tint of the row in hand and the stronger one of a picked row in theme.css admin

    • cards on a phone with the names of their columns; a pick puts the bulk action at the foot of the screen
    • the cascade fills backwards only, so no row stays a stacking context over the tip of the row above

19. popover.html of both themes opens from a real button beside its panel, with tip_label and tip_id

    • the panel is no part of the button any more, so the IP link in it stays a link (axe nested-interactive)
20. --sl-d-order is declared in the data list of the contract; the audit baseline is stored
21. Texts, help and plan (lang/.php, admin/lang/.php, admin/info/comments/ru.md, docs/*):

22. _DETAILS in the site language, _ADM_VIEW, _ADM_STD, _ADM_FULL, _ADM_DENSE, _ADM_CARDS in the panel language, all six locales

23. the help of "Comments" describes the views, the sort, the date and the tip
24. the answers of step 9 are recorded in docs/12-ADMIN-UI-2026.md and step 97 is ticked in docs/ROADMAP-2026.md

Benefits:

• one row canon for every panel list of steps 12-13: the module passes cells, the phone cards come with them
• sorting works on the first load on every sortable table, not only after an htmx swap
• the popover is a named button whose panel a screen reader reads, in both themes

Technical notes:

• no schema or route change; op option gains the key density and the cookie user_c-density
• the tables that never sorted on the first load now do: a visible change on every sortable screen of both themes
• the stand's config/local.php has to be rebuilt after the CSS and JS change, as after every release