URLs are now treated as data: every producer emits a raw & and the template layer escapes exactly once at the output boundary via {{ href }}. This removes the previous mix of producer-side & encoding and raw {{{ }}} output and eliminates latent single/double-escape inconsistencies across the site.

Core changes:

1. URL producers to raw & (blocks, modules, admin/modules, core):
2. Front-end SEO links built via getSeoUrl() (raw &, SEO-friendly URLs under rewrite)
3. Admin afile.php?..., htmx go=...&op=... tails, absolute/redirect URLs to raw &
4. getQueryString() always emits raw & (dropped the obsolete $html parameter)
5. Template output boundaries (81 flips, lite + admin fragments/partials):
6. href/src/action/hx-get/hx-post URL attributes: {{{ x }}} to {{ x }}
7. Kept raw ({{{ }}}): _html and _attr blobs, inline-JS onclick (reset_url, reload_query)
8. Removed runtime URL pre-encoders exposed by the boundary flip:

9. $alink session-monitor URL, RSS source href, and files-admin download href no longer wrapped in htmlspecialchars() (the boundary now escapes)

10. domain() html_entity_decode()s stored referer URLs before building the link

Benefits:

• Single source of truth for escaping; no more & risk
• Redirects/Location and htmx keep a raw &; HTML output is uniformly &
• Blocks now honor rewrite / SEO-friendly URLs like the modules do

Technical notes:

• Left untouched: parser entity decoders, config/* content cache, setup legacy HTML echoes, sitemap XML content encoder

• Pre-existing/out-of-scope: _referer stores double-encoded anchor data; config.replace link URLs are stored with a bare &

• Verified: php -l (85 files), phpunit 8/8, guest + admin real-HTTP render with zero app-generated &

Add the breadcrumb variant galleries under demo/ and a task prompt for the site-wide URL escaping migration (escape at the HTML output boundary, keep getSeoUrl raw).

Rework the admin sidebar counter block into a data-driven table with a single row helper, switch to COUNT queries, wire sidebar dials, and bring helper names and comments in line with the project rules.

Core changes:

1. Sidebar counters (core/admin.php):
2. Replace the repeated per-module blocks with a grouped table and loop
3. Add getAdminCountRow() using SELECT COUNT(id) instead of materializing rows
4. Emit the unified sl-chip badge for counts
5. Remove the dead album block
6. Naming and comments (core/admin.php, admin/modules/monitor.php):
7. Rename admininfo() to getAdminInfo() and db_version() to getDbVersion()
8. Migrate call sites
9. Add missing function comments, drop in-body comments and blank lines
10. Sidebar dials (admin/index.php):
11. Build the dial action list once for both grid cards and list rows
12. Docs (docs/PERFORMANCE.md):
13. Sync the counter reference to the new function name

Benefits:

• Fewer and lighter count queries per admin render
• Less duplication and no dead code
• Naming and comments compliant with the project rules

Technical notes:

• No storage or template contract changes
• Backward compatibility is preserved

Rename lite theme size variables to semantic icon, chip, control, navigation, display, and forum tokens. The update keeps demo and error pages aligned with the theme token names.

Core changes:

1. Lite design tokens (templates/lite/assets/css/base.css, templates/lite/assets/css/theme.css):

2. Replaced generic numeric size variables with semantic token names

   • Icon sizes now use sl-size-icon-* tokens
   • Navigation and control sizes now use sl-size-nav-control and sl-size-control
   • Display and forum dimensions use dedicated semantic tokens
3. Demo and error surfaces (demo/*.html, error.html):
4. Updated embedded CSS references to the renamed semantic tokens
5. Kept layout dimensions and visual behavior equivalent

Benefits:

• Improves token readability and maintainability
• Aligns lite and demo surfaces with the admin token naming direction
• Reduces reliance on generic numeric CSS custom properties

Technical notes:

• No storage changes
• HTML structure and runtime contracts are unchanged
• Backward compatibility is preserved for rendered behavior

Expand admin dashboard module cards with direct actions for configuration, categories, site view, documentation, and status changes. The update also separates dashboard section labels and reuses a shared category module list.

Core changes:

1. Admin dashboard actions (admin/index.php):

2. Added config, categories, site view, info, edit, and status action links where applicable

   • Configuration links are shown only when a module config file and admin config route exist
   • Site links are shown only for active frontend modules
3. Added distinct dashboard panel labels and icons for admin and site module groups
4. Shared module metadata (core/helpers.php, config/modules.php):
5. Added getCategoryModules() for shared category-capable module detection
6. Reused the helper in category module selects
7. Updated the account module icon to match the dashboard visual language
8. Admin language constants (admin/lang/*.php):
9. Added localized labels for dashboard sections and site view actions across all supported admin locales

Benefits:

• Reduces navigation steps from the module dashboard
• Centralizes category-capable module names for reuse
• Keeps admin labels synchronized across locales

Technical notes:

• No storage changes
• Existing module routes and permission checks are preserved
• Backward compatibility is preserved