The run of the panel and the site in a real browser found small classes, sizes and lists that each had a look of their own. This change moves them onto the shared parts of the two themes: one height for a field, one copy button for code, one file door, one list canon, one segmented switch and one drawer. The type form of Node becomes tabs of one form, and config/points.php ships in the shape the panel writes.

Core changes:

1. The changelog in the panel (modules/changelog/admin/index.php, modules/changelog/common.php, modules/changelog/index.php, modules/changelog/admin/lang/*.php, modules/changelog/admin/info/ru.md):

• changelog() draws a table of getTplAdminList(), one row per commit: hash, title, author, changes and files (with statistics on a local Git), and date as a moment
  • the "i" of a row holds the body through $prs->filterDoc(), the e-mail and the per-file +/- lines; the search word is marked by filterTextHighlight() in the title and the body
  • the filter is fragments/list-filter.html in the tab head (word, author, file except for GitHub, date from/to); the pager reads num and the per-page choice through getListLimit(), with perpage as the base
  • an error of loading or an empty result goes to none_text (_NONE_FOUND under a filter, else _NO_INFO)
• rendpage() is gone; the panel no longer groups by date and no longer makes the canonical redirect
• chlogCanonicalRedirect() drops its $base argument and serves only the site
• The help describes the table, its columns, the filter, the pager and "Группировать по дате" acting on the site alone

2. The forums in the panel (modules/forum/admin/index.php, modules/forum/admin/info/ru.md):

• forum() builds its list with getTplAdminList() instead of a bare table in a box: the description sits in the "i" of the row, the status is a lamp, every column sorts, and the view switch and key tip of the canon stand above it

3. Node in the panel (modules/node/admin/index.php, modules/node/admin/lang/*.php, modules/node/admin/info/ru.md):

• add() opens the form of the first type the user moderates right away; a select "Тип" (list-filter, is_now) in the tab head switches the type, which replaces the page of links that listed the types
• getNodeTypeRows() becomes getNodeTypeTabs(): the type form is six runtime sub-tabs of one form (_GENPREF, _LIST, _NODE_FEATURES, _NODE_FLOW, _NODE_ROLES, _NODE_INTEG), and the form carries is_valid
  • each on/off setting (alphabet, every feature and integration, guestok, report, canlink, active of a role) is a Yes/No radio group of getTplRadioGroup() with its own caption, in place of a checkbox labelled "Да"
  • the sort direction has its own row (_NODE_ORDDIR new); minimum and maximum of a role are two labelled rows
  • each resource role is a partials/toggle-form-block.html block with its key in the cap, in place of the repeat fragment; _NODE_ROLEOPTS is gone
• The profile of a new type is a select "Профиль" in the tab head with an empty choice, in place of a row of links
• import() takes the file through getFormFileField()
• The help describes the "Добавить" type selector, the tabs of the type form, the profile selector and the role blocks

4. The file door of an ordinary form (core/helpers.php, public/templates/{admin,lite}/fragments/file-field.html, public/plugins/system/slaed.js, admin/modules/update.php, lang/*.php):

• getFormFileField() prints fragments/file-field.html with is_form: a button names the action by _FILEPICK, a chip shows the name and size of the picked file, a cross clears it
  • the form door carries data-sl-file-form and no data-editor, prints no path or address carrier, and keeps a required file field out of sight (sl-visually-hidden, tabindex -1), so the browser refusal points at the door
  • setFileDoors() and setFileDoor() of slaed.js open the browser picker, show the name and size, clear the field and return the focus to the button
• "Загрузить архив" of update is now a pane of its own (fragment pane, icon cloud-upload) and takes the door
• getTplUserSearchInput() no longer marks its input as required

5. The drawer menu of the site on a phone (public/plugins/system/slaed.js, public/templates/admin/assets/js/admin-ui.js, public/templates/lite/partials/site-header.html, public/templates/lite/assets/css/theme.css, lang/*.php):

• setDrawer() moves from admin-ui.js into slaed.js and finds its menu by the aria-controls of the toggle, so one drawer serves #sl-menu of the panel and #hmenu of lite
  • the page goes inert while the drawer is open; Esc, the scrim, the cross or a window opened from the menu close it, and it closes once the toggle is hidden; the focus returns to the toggle
• The header of lite gets the toggle sl-menu-btn with _MENU, the scrim sl-menu-scrim, and #hmenu as a nav with the cross sl-menu-close; below 900 px the menu and the search form one column of the drawer, above it the bar is unchanged

6. Sizes and small classes of both themes (public/templates/{admin,lite}/assets/css/{base,theme}.css, public/templates/{admin,lite}/fragments/code-block.html, public/templates/admin/partials/{layout-screen,statistic-cockpit,toggle-form-block}.html, admin/modules/statistic.php, admin/info/fields/ru.md):

• base.css of admin gives every one-line input and single select the height --sl-size-control
• The copy button of a code head and of the link window of the builder is .sl-code-copy in both themes, a quiet square of --sl-size-chip, larger on a touch screen, in place of the borrowed .sl-modal-act
• "Сейчас" and "Вчера" of the statistic cockpit are a plain sl-seg with its knob (rail stat-day); the server sets the active cell from is_now and admin-ui.js toggles sl-is-active with aria-pressed; .sl-cockpit-set is gone
• partials/toggle-form-block.html puts the name with the + toggle in a cap and its rows under it at the full width of the box; the side panel of the builder keeps them stacked; the help of the additional fields follows
• A list filter whose only fields are is_now selects shows its OK button only without scripts (@media (scripting: enabled))
• The chips of the private messages take --sl-size-chip, their bulk bar field --sl-size-control
• The changelog CSS of the admin theme is removed

7. Points config (config/points.php, docs/POINTS.md):

• config/points.php ships in the shape setConfigFile() writes: actions before active, one key per line, so an unchanged save of the panel leaves the file as it is

8. Tests (tests/Support/config_probe.php, tests/Support/route_probe.php, tests/Unit/{ConfigFileTest,EditorWindowTest,PointTest,AdminSecretTest,ListPickTest}.php):

• getProbeShipped() finds every setConfigFile('<name>.php') of admin, modules and core, saves each shipped file unchanged and reports any file that moves, ignoring the header year; anUnchangedSaveKeepsEveryShippedFile checks it
• anOrdinaryFormSendsItsFileThroughTheSameDoor checks the form door in both themes, getFormFileField(), _FILEPICK in six locales, update and Node import on the builder, and setFileDoors() started by slaed.js
• PointTest expects the key order actions, active
• route_probe and aDelegatedAdministratorWritesNoSecret: a changelog post of a delegated administrator that names the GitHub fields is refused whole, and the same form without them saves perpage and keeps the token and the source
• ListPickTest: a comment names the clear form by its op

9. UI tools (tools/ui-contract.php, tools/ui-shots.json, tools/ui-contrast.json, tools/ui-audit-baseline.json):

• ui-contract drops pmf-filter, the exceptions of the admin changelog classes and of fragments/changelog-commit.html, and adds the theme differences of .sl-menu-btn, .sl-menu-btn .bi and the 900 px .sl-menu-close
• ui-shots captures drawer-open on the front page (optional step)
• The contrast list and the audit baseline are regenerated

10. Docs (docs/TEMPLATES.md, docs/WINDOW.md, docs/UPDATE.md, docs/VERSIONS.md):

• TEMPLATES: the toggle form block, the is_now select of a list filter, the drawer of a phone, the screen switch as the plain sl-seg
• WINDOW: .sl-modal-act only for window actions and .sl-code-copy for code; the form door of getFormFileField()
• UPDATE: the changelog*.html templates and the changelog CSS stay only in lite
• VERSIONS: the sections of 2026-11-05 and 2026-11-06, including this change under "The look is one system"

Benefits:

• One field height, one copy button, one file door, one list canon and one drawer across both themes, so a fix lands in one place
• The changelog and the forums of the panel sort, switch views and page like every other list
• A shipped config the panel writes no longer changes on its first unchanged save

Technical notes:

• No database change
• Removed templates: admin partials/changelog.html, partials/changelog-body.html and fragments/changelog-commit.html, changelog-date-header.html, changelog-stats.html
• Breaking for a custom theme: the tokens --sl-pmf-filter-height (lite) and --sl-changelog-width, --sl-changelog-body-border, --sl-changelog-files-height, --sl-changelog-stat-width (admin) and the class .sl-cockpit-set are gone; the admin theme has no .sl-changelog-* rules
• The admin changelog list pages by num instead of page, and its filter no longer redirects to a canonical address
• New constants: _FILEPICK and _MENU in lang/.php, _NODE_ORDDIR in modules/node/admin/lang/.php
• Removed constants: _NODE_ROLEOPTS; _CHLOG_FILTER, _CHLOG_SEARCH_PH, _CHLOG_AUTHOR_PH, _CHLOG_FILE_PH, _CHLOG_FILTER_BTN, _CHLOG_RESET_BTN, _CHLOG_TOTAL, _CHLOG_FILTERED, _CHLOG_PAGE, _CHLOG_COMMITS, _CHLOG_COMMITS_REPO, _CHLOG_ERR_NO_COMMITS of the changelog admin
• The on/off settings of the Node type form now post 1 or 0 from a radio group under the same names
• getNodeTypeRows() is replaced by getNodeTypeTabs(); setDrawer() leaves admin-ui.js for slaed.js
• config/points.php changes only its layout and key order; its values are the same

An audit of the shipped types against the modules sites use most found four types a profile alone can make. A clean installation now creates and activates fourteen types; the events, vacancies and a lifetime of a classified ad need the core and wait in their own plan.

Core changes:

1. The profiles (modules/node/profiles/album.json, portfolio.json, board.json, reviews.json):

• album: view default with tiles and cards, a cover and a gallery of up to 100 images, every feature of pages
• portfolio: view article, a cover and a gallery of up to 30 images, the fields client, year, site and services; no submit, no comments, no rating
• board: view default, a cover and a gallery of up to 10 images, the fields price (decimal, scale 2), city, phone and e-mail; submit by users with moderation and schedule, so a moderator may set an end of the ad
• reviews: view default, the required field stars (int 1-5), workflow access all, so a guest may post, with moderation
  • the field is stars, not score: score is a column of _nodes and no field may take its name
• Sorts 110 to 140 after the ten profiles; uploads and rating empty, as every shipped profile

2. Language (lang/*.php):

• _BOARD, _PORTFOLIO, _REVIEWS as titles of the types; _NODE_CITY, _NODE_CLIENT, _NODE_PHONE, _NODE_PRICE, _NODE_SCORE, _NODE_SERVICES as labels of the fields, in six languages; the gallery takes the existing _ALBUM

3. Tests (tests/Unit/NodeProfileTest.php, tests/Support/install_probe.php):

• NodeProfileTest checks fourteen profiles: names, the order of sort, settings, roles, fields, the guest access of reviews; the clean installation, the exports, the panel offer and the write and view of a material of every type
• The probe keeps IPROFS as the ten profiles that stand for modules of 6.2, which the update rehearsal reads, and adds ISHIP, every shipped profile, for the installation checks; it writes the fields of the new types

4. Docs and help (docs/NODE.md, docs/ARCHITECTURE.md, modules/node/admin/info/ru.md, tools/node-profile.php):

• NODE.md lists the four in "Replaced modules" and in the tables of "Shipped profiles" with their fields
• The help of Node names fourteen types; the comments of the load profile no longer count ten types

Benefits:

• A new site has a gallery, a portfolio, classifieds and reviews without building a type
• The four take one click in "Новый тип" on an existing site

Technical notes:

• No database or URL change; a clean installation creates four more types and their routes
• The board shows the phone and the e-mail of an ad publicly, as a classified ad needs them

The form of a forum post without a category answered 500: add() read no row of _categories and handed null to is_acess(). A category that is not there, or one of another module, now counts as none in the form and in the three writers of the forum, as the list of forum() already does.

Core changes:

1. The forum (modules/forum/index.php):

• add() answers setError(404) for no category, a missing one, a missing post and a post whose category is gone or belongs to another module, as view() does for a missing topic
• send(), move() and delete() take such a category as none and go back to the forum writing nothing
  • a category of another module took the form of a new topic (rights 0|0) and its post, move and delete ended in an SQL error of IN (), as catids() names no category of another module
• The four reads of a category ask modul = :mod

2. Tests (tests/Support/route_probe.php, tests/Unit/FileAccessTest.php):

• The run files of route_probe.php asks the form with no category, a missing category, post and topic, a post whose category is gone and one of a category of news, and posts send, move and delete naming them
• aForumOfNoCategoryAnswersNotFound: six forms 404 and the writers 303 with the rows unchanged; red on the old code with nine answers 500, two forms 200 and three SQL errors

Benefits:

• No 500 and no SQL error from an address of the forum a visitor can type or a stale form can post
• The forum reads only its own categories, in the list and in every handler alike

Technical notes:

• No database, URL or language change
• A forum address with a category of another module now answers 404 instead of a form

The batches BROWSER-QA.17 to 20 bring the duplicates the browser run found onto one standard each: the right of a module on the site, the token of a site write, the unlink of an OAuth login, the ban list, the login mail and the password rule, one writer of a block row for both screens, one owner of the block columns, one check of the site name and logo, the language files written whole, and one split of a replacement rule. Two reds of the full run and the disk of the monitor are corrected on the way.

Core changes:

1. The site (modules/{account,contact,forum,node,recommend,rss}/index.php, core/security.php, core/classes/comment.php, core/user.php, core/system.php, public/plugins/system/slaed.js, public/templates/{admin,lite}/fragments/button.html):

• A closed profile, its private rows and checkProfileFile(), getProfileLastView() and Comment::getMode() open to is_moder('account') instead of any administrator
• getRssView() refuses an empty address itself; the page of rss calls it only for a sent feed form
• An empty comment is refused by the server alone in #repcstat and cleared by a stored one
  • the alert() of setComShow() and the branch hx_on_click of both button.html are gone
• checkSitePost() in core/security.php checks every write of forum, contact, recommend, account and node with the token of the module scope; checkForumPost() is gone
• The captcha of recommend follows the switch contact, _CAPTCHA_CONTACT in six locales

2. People and safety (core/classes/oauth.php, core/admin.php, core/security.php, admin/modules/{admins,security,logs,groups}.php, modules/account/admin/index.php, lang/.php, modules/account/lang/.php):

• Oauth::deleteLink() is the one writer of an unlink: the panel passes force for the last login method, the site names a provider not linked by _ACCOUNT_NOLINK
  • the forced unlink of the panel clears a link whose user row is gone
• A ban of an address goes through getBanList() (expired rows dropped, a manual one kept past the cap); both ban forms are told by kind
• addFormMail() in core/admin.php is the one writer of the login mail of admins and account and of the ban mail, sent only with a new password
  • the login mail of a user of the panel no longer joins the nick and the password by a literal \n
• checkPassRule() checks minpass for the registration, the password change of the cabinet, admins, account and the first administrator; _CHARMIN moves to lang/*.php and the swapped _NOPASS of de and en is set right
• Every credential field of the site and the panel has the type password or email
• The date filters of logview(), logins() and getPointsJournal() read getVar(..., 'date', '')

3. The blocks (core/admin.php, core/classes/layout.php, admin/modules/{blocks,layout,modules}.php, admin/lang/*.php):

• setBlockRow() is the one writer of a row of _blocks for blocks and the publication of the builder: the room of the text, a feed that fails at a new address refused with _RSSFAIL, an empty HTML block refused, bkey never taken from a post, bpos and weight left to setBlockOrder()
• A system block is neither offered for deletion nor deleted on both screens (_BLOCKS_SYSKEEP); a refused publication names its block (_LAYOUT_BLKBAD)
• getBlockSpec() is the one spec of the block fields read by both forms and the writer
• Layout::getPageColumns() answers null for the page of a module: the builder shows its columns with a link to their owner form (_LAYOUT_COLSOWN, _LAYOUT_COLSEDIT) and stores none; _BLOCKS_PAGEHINT is gone

4. The site in the panel (core/admin.php, admin/modules/{config,layout,lang}.php, core/classes/parser.php, admin/lang/*.php):

• filterSiteBrand() is the one check of the site name and logo for the settings and the builder: a name of up to 255 signs without control signs kept as typed, a logo that is in images/logos/ of the theme; the settings refuse by _ADM_BADVAL with the label of the field
• save() of config writes global.php on the file as it stands and no longer copies webroot, editor.code, geoip_asn, geoip_country and mtemp
• save() of lang writes each locale through setConfigSource() and names a locale it could not write (_LANG_NOWRITE); fileedit() shows the warning of checkPerms()
• A | in the word or the replacement of a rule is refused with the numbers of its fields (_REPLACE_BAR); Parser::replaceText() splits a rule once, like the form

5. The monitor (core/monitor.php, admin/modules/monitor.php, admin/lang/*.php):

• The disk is measured at BASE_DIR, not the working directory, and its scale is labelled _ADM_DISKUSED, as free space excludes the blocks reserved for root

6. Help, docs and tests (admin/info//ru.md, modules/account/admin/info/ru.md, docs/ARCHITECTURE.md, docs/NODE.md, tests/Unit/.php, tests/Support/*.php):

• The help of admins, account, blocks, config, lang, layout, modules, monitor and security describes the current state; ARCHITECTURE and NODE describe the delivery of the layout and the owners of the block columns
• ReplaceRuleTest: a | in a rule is refused, the parser splits a rule once; MailConfigTest: the settings write global.php on the base
• BlocksTest, LayoutTest, LayoutDraftTest, LayoutPublishTest, EditorBreakTest, OauthLinkTest, ListPickTest, RequestWatchTest, RouteWriterTest, FeedTest, CommentTransportTest, UploadIntegrationTest and AdminGuardTest on the new standards
• LayoutTest follows the shipped layout of slaed.net with shipped false; the long line of AdminListRowTest is split

Benefits:

• One mechanism per job across the site and the panel, so a fix lands once and both screens agree
• A refusal names its field, locale or block instead of a silent save or a cut rule

Technical notes:

• No database or URL change
• The site name saved by the settings is no longer HTML-escaped in config/global.php; every page escapes it on output
• New constants in six locales: _ADM_DISKUSED, _BLOCKS_SYSKEEP, _LAYOUT_COLSOWN, _LAYOUT_COLSEDIT, _LAYOUT_BLKBAD, _LANG_NOWRITE, _REPLACE_BAR, _ACCOUNT_NOLINK; _BLOCKS_PAGEHINT removed, _CHARMIN moved to lang/*.php
• checkForumPost() is removed in favour of checkSitePost()

The key tip of the lists stands once per list after the view switch and now also ends the bar of the catalogue and of the file window of the editor, with the keys of the file desk. The properties column of both file screens starts closed and gives its width to the list. The action log is read in "Журналы" by its module filter instead of a link in every section head, and the Russian language files lose their punctuation and spelling slips.

Core changes:

1. Key tip of the file screens (core/helpers.php, core/admin.php, public/templates//fragments/pager-keys.html, public/templates/admin/partials/file-browser.html, public/templates//partials/file-manager.html, public/plugins/system/filemanager.js, lang/*.php):

• getFileKeysView() builds the branch is_desk of pager-keys.html: arrows, Home and End, Space or Ctrl with a click, Shift for a range, Enter, the right button
  • Enter opens in the catalogue (_UPLOADS_OPEN) and inserts in the window (_EDITOR_INSERT); Esc is listed in the window alone
  • _EDITOR_DESKKEYS, _EDITOR_DESKARROW, _EDITOR_DESKWALK, _EDITOR_DESKEDGE, _EDITOR_DESKCLICK, _EDITOR_DESKMARK, _EDITOR_DESKSPAN, _EDITOR_DESKRMB, _EDITOR_DESKMENU in six locales
• The catalogue keys of the window step aside for the tip, a role="button", as for the other controls of its bar
• The tip is hidden on a touch screen in both themes

2. Properties and dates of the file screens (public/templates//partials/file-.html, public/templates/admin/fragments/file-browser-row.html, public/templates//assets/css/theme.css, core/admin.php, lang/.php):

• A button "Свойства" at the end of the bar opens and folds the properties column through data-sl-toggle, closed by default and remembered by the browser
• A closed column gives its width to the list; each row keeps one line and cuts a long name with an ellipsis
• The date of a row is shown to the minute (_TIMESHORT), the full time in its title

3. Lists of the panel (core/helpers.php, public/templates/admin/partials/admin-list.html, public/templates/*/fragments/pager.html, public/templates/admin/assets/css/theme.css):

• getTplAdminList() passes the scope keys; the tip stands once after the view switch with pages or without, and the pager of a list leaves it out
• The row under the table stands only for a pager or a bulk action
• A key plate keeps its width and line, so a narrow tip wraps the words beside it

4. One journal of the panel (core/helpers.php, admin/info/logs/ru.md, admin/info/update/ru.md, modules/master/admin/info/ru.md, docs/ARCHITECTURE.md):

• getTplAdminTabs() no longer adds "Журнал действий" to the head of a module; the actions of one module are read in "Журналы" by the filter "Модуль"

5. Language files (admin/lang/.php, lang/ru.php, modules//lang/ru.php):

• Russian values corrected: commas, dashes, hyphenated compounds (IP-адрес, HTML-блок), spelling and the full stop at the end of a sentence
• _SETUP_STEP starts with a capital in English

6. Reference, contract and tests (docs/TEMPLATES.md, admin/info/uploads/ru.md, tools/ui-contract.php, tests/Unit/PagerKeysTest.php, tests/Unit/AdminLogTest.php, tests/Unit/DeskKeysTest.php, tests/Unit/RouteParseTest.php, tests/Support/route_probe.php):

• The key tip of the file screens and of the lists in "Admin List Contract" and the pager table; the catalogue in the help of "Файловый менеджер"
• The divergence of .sl-pager-tip kbd between the themes carries its reason: the panel shares the plate with its rows picker
• PagerKeysTest holds the tip of both file screens in both themes and its constants in six locales; AdminLogTest that no module head links the journal
• The forms probe writes one journal, since the list of "Журналы" no longer reads as filled through the link of the head
• RouteParseTest expects the corrected title "Топ пользователей"

Benefits:

• One key tip explains every screen with keys, on the same fragment and the same constants
• The file list gets the width it needs, and the journal has one place to be read

Technical notes:

• No database or URL change; admin.php?name=logs&op=logview with modul= stays the address of a module's actions
• _SEC_STAT_A stays as the name of the admin journal in logs.php