What changed

dhtml backup, restore with a typed confirmation, rotation and a schedule, and JSONL export and import. Reviewed; the review found that a damaged live database could not be restored over, and fixed it with a test.

CGI mode and generated .htaccess rules for shared hosting, Passenger support through PORT, dhtml detect, a systemd example for servers, signed self-update with rollback, and the opt-in shell switch.

sign-up by email, login, logout, password change and reset, <d:auth> and <d:guest>, protected paths, and rate limits per address and per account.

<d:ai> with providers for Anthropic and OpenAI-compatible services, streaming over server-sent events, and a fake provider that needs no network.

<d:action>, validation, writes in a transaction, CSRF protection, rate limits, and uploads saved under random names.

SQLite with checksummed migrations, <d:query> with every value bound as a parameter, and dhtml db migrate.

pages, layouts, partials, loops, conditions and filters on top of Go's html/template, so output is escaped for the place it lands.

file-based routing, [routes] overrides, security headers, request limits, dhtml dev and dhtml run.

dhtml.config, .env, dhtml init, dhtml check and the folder layout.