From e61b94fe805f6cd53baffdd55b17ee306b875d6a Mon Sep 17 00:00:00 2001
From: Jonathan Miller <jmiller@mokoconsulting.tech>
Date: Sun, 24 Aug 2025 23:45:33 -0500
Subject: [PATCH] Security hardening

---
 language/en-GB/index.html                     | 118 +++++++++++++++++
 language/en-US/index.html                     | 118 +++++++++++++++++
 language/index.html                           | 118 +++++++++++++++++
 media/index.html                              | 118 +++++++++++++++++
 media/templates/index.html                    | 118 +++++++++++++++++
 media/templates/site/index.html               | 118 +++++++++++++++++
 .../css/global/colors/dark/index.html         | 118 +++++++++++++++++
 .../css/global/colors/index.html              | 118 +++++++++++++++++
 .../css/global/colors/light/index.html        | 118 +++++++++++++++++
 .../moko-cassiopeia/css/global/index.html     | 118 +++++++++++++++++
 .../site/moko-cassiopeia/css/index.html       | 118 +++++++++++++++++
 .../moko-cassiopeia/css/system/index.html     | 118 +++++++++++++++++
 .../css/system/searchtools/index.html         | 118 +++++++++++++++++
 .../css/vendor/afeld/index.html               | 118 +++++++++++++++++
 .../css/vendor/choicesjs/index.html           | 118 +++++++++++++++++
 .../moko-cassiopeia/css/vendor/index.html     | 118 +++++++++++++++++
 .../vendor/joomla-custom-elements/index.html  | 118 +++++++++++++++++
 .../site/moko-cassiopeia/fonts/index.html     | 118 +++++++++++++++++
 .../site/moko-cassiopeia/images/index.html    | 118 +++++++++++++++++
 .../templates/site/moko-cassiopeia/index.html | 118 ++++++++++++++++-
 .../site/moko-cassiopeia/js/index.html        | 118 +++++++++++++++++
 .../moko-cassiopeia/js/mod_gabble/index.html  | 118 +++++++++++++++++
 .../moko-cassiopeia/js/mod_menu/index.html    | 118 +++++++++++++++++
 .../js/vendor/afeld/index.html                | 118 +++++++++++++++++
 .../site/moko-cassiopeia/js/vendor/index.html | 118 +++++++++++++++++
 templates/index.html                          | 118 +++++++++++++++++
 .../html/com_contact/contact/index.html       | 118 +++++++++++++++++
 .../html/com_contact/index.html               | 118 +++++++++++++++++
 .../html/com_content/article/index.html       | 118 +++++++++++++++++
 .../html/com_content/categories/index.html    | 118 +++++++++++++++++
 .../html/com_content/category/index.html      | 118 +++++++++++++++++
 .../html/com_content/featured/index.html      | 118 +++++++++++++++++
 .../html/com_content/index.html               | 118 +++++++++++++++++
 .../html/com_engage/comments/index.html       | 118 +++++++++++++++++
 .../html/com_engage/index.html                | 118 +++++++++++++++++
 .../html/com_osmembership/common/index.html   | 118 +++++++++++++++++
 .../html/com_osmembership/index.html          | 118 +++++++++++++++++
 .../html/com_osmembership/mplan/index.html    | 118 +++++++++++++++++
 .../html/com_osmembership/mplans/index.html   | 118 +++++++++++++++++
 .../html/com_osmembership/plan/index.html     | 118 +++++++++++++++++
 .../html/com_osmembership/plans/index.html    | 118 +++++++++++++++++
 templates/moko-cassiopeia/html/index.html     | 118 +++++++++++++++++
 .../html/layouts/chromes/index.html           | 118 +++++++++++++++++
 .../moko-cassiopeia/html/layouts/index.html   | 118 +++++++++++++++++
 .../html/mod_custom/index.html                | 118 +++++++++++++++++
 .../html/mod_gabble/index.html                | 118 +++++++++++++++++
 .../html/mod_membershipplans/index.html       | 118 +++++++++++++++++
 .../moko-cassiopeia/html/mod_menu/index.html  | 118 +++++++++++++++++
 .../html/mod_virtuemart_cart/index.html       | 118 +++++++++++++++++
 .../html/mod_virtuemart_category/index.html   | 118 +++++++++++++++++
 .../html/mod_virtuemart_currencies/index.html | 118 +++++++++++++++++
 .../mod_virtuemart_manufacturer/index.html    | 118 +++++++++++++++++
 .../html/mod_virtuemart_product/index.html    | 118 +++++++++++++++++
 .../html/mod_virtuemart_search/index.html     | 118 +++++++++++++++++
 .../moko-cassiopeia/html/tinymce/index.html   | 120 +++++++++++++++++-
 templates/moko-cassiopeia/index.html          | 118 +++++++++++++++++
 templates/moko-cassiopeia/index.php           |   2 -
 57 files changed, 6606 insertions(+), 6 deletions(-)
 create mode 100644 language/en-GB/index.html
 create mode 100644 language/en-US/index.html
 create mode 100644 language/index.html
 create mode 100644 media/index.html
 create mode 100644 media/templates/index.html
 create mode 100644 media/templates/site/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/css/global/colors/dark/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/css/global/colors/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/css/global/colors/light/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/css/global/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/css/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/css/system/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/css/system/searchtools/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/css/vendor/afeld/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/css/vendor/choicesjs/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/css/vendor/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/css/vendor/joomla-custom-elements/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/fonts/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/images/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/js/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/js/mod_gabble/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/js/mod_menu/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/js/vendor/afeld/index.html
 create mode 100644 media/templates/site/moko-cassiopeia/js/vendor/index.html
 create mode 100644 templates/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_contact/contact/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_contact/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_content/article/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_content/categories/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_content/category/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_content/featured/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_content/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_engage/comments/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_engage/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_osmembership/common/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_osmembership/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_osmembership/mplan/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_osmembership/mplans/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_osmembership/plan/index.html
 create mode 100644 templates/moko-cassiopeia/html/com_osmembership/plans/index.html
 create mode 100644 templates/moko-cassiopeia/html/index.html
 create mode 100644 templates/moko-cassiopeia/html/layouts/chromes/index.html
 create mode 100644 templates/moko-cassiopeia/html/layouts/index.html
 create mode 100644 templates/moko-cassiopeia/html/mod_custom/index.html
 create mode 100644 templates/moko-cassiopeia/html/mod_gabble/index.html
 create mode 100644 templates/moko-cassiopeia/html/mod_membershipplans/index.html
 create mode 100644 templates/moko-cassiopeia/html/mod_menu/index.html
 create mode 100644 templates/moko-cassiopeia/html/mod_virtuemart_cart/index.html
 create mode 100644 templates/moko-cassiopeia/html/mod_virtuemart_category/index.html
 create mode 100644 templates/moko-cassiopeia/html/mod_virtuemart_currencies/index.html
 create mode 100644 templates/moko-cassiopeia/html/mod_virtuemart_manufacturer/index.html
 create mode 100644 templates/moko-cassiopeia/html/mod_virtuemart_product/index.html
 create mode 100644 templates/moko-cassiopeia/html/mod_virtuemart_search/index.html
 create mode 100644 templates/moko-cassiopeia/index.html

diff --git a/language/en-GB/index.html b/language/en-GB/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/language/en-GB/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/language/en-US/index.html b/language/en-US/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/language/en-US/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/language/index.html b/language/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/language/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/index.html b/media/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/index.html b/media/templates/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/index.html b/media/templates/site/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/css/global/colors/dark/index.html b/media/templates/site/moko-cassiopeia/css/global/colors/dark/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/css/global/colors/dark/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/css/global/colors/index.html b/media/templates/site/moko-cassiopeia/css/global/colors/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/css/global/colors/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/css/global/colors/light/index.html b/media/templates/site/moko-cassiopeia/css/global/colors/light/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/css/global/colors/light/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/css/global/index.html b/media/templates/site/moko-cassiopeia/css/global/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/css/global/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/css/index.html b/media/templates/site/moko-cassiopeia/css/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/css/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/css/system/index.html b/media/templates/site/moko-cassiopeia/css/system/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/css/system/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/css/system/searchtools/index.html b/media/templates/site/moko-cassiopeia/css/system/searchtools/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/css/system/searchtools/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/css/vendor/afeld/index.html b/media/templates/site/moko-cassiopeia/css/vendor/afeld/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/css/vendor/afeld/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/css/vendor/choicesjs/index.html b/media/templates/site/moko-cassiopeia/css/vendor/choicesjs/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/css/vendor/choicesjs/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/css/vendor/index.html b/media/templates/site/moko-cassiopeia/css/vendor/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/css/vendor/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/css/vendor/joomla-custom-elements/index.html b/media/templates/site/moko-cassiopeia/css/vendor/joomla-custom-elements/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/css/vendor/joomla-custom-elements/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/fonts/index.html b/media/templates/site/moko-cassiopeia/fonts/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/fonts/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/images/index.html b/media/templates/site/moko-cassiopeia/images/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/images/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/index.html b/media/templates/site/moko-cassiopeia/index.html
index bae4b6b..206e130 100644
--- a/media/templates/site/moko-cassiopeia/index.html
+++ b/media/templates/site/moko-cassiopeia/index.html
@@ -1,2 +1,118 @@
-<!-- MOKO-COPYRIGHT: © 2025-08-10 Jonathan Miller || Moko Consulting — https://mokoconsulting.tech -->
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
 
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/js/index.html b/media/templates/site/moko-cassiopeia/js/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/js/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/js/mod_gabble/index.html b/media/templates/site/moko-cassiopeia/js/mod_gabble/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/js/mod_gabble/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/js/mod_menu/index.html b/media/templates/site/moko-cassiopeia/js/mod_menu/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/js/mod_menu/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/js/vendor/afeld/index.html b/media/templates/site/moko-cassiopeia/js/vendor/afeld/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/js/vendor/afeld/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/media/templates/site/moko-cassiopeia/js/vendor/index.html b/media/templates/site/moko-cassiopeia/js/vendor/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/media/templates/site/moko-cassiopeia/js/vendor/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/index.html b/templates/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_contact/contact/index.html b/templates/moko-cassiopeia/html/com_contact/contact/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_contact/contact/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_contact/index.html b/templates/moko-cassiopeia/html/com_contact/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_contact/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_content/article/index.html b/templates/moko-cassiopeia/html/com_content/article/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_content/article/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_content/categories/index.html b/templates/moko-cassiopeia/html/com_content/categories/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_content/categories/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_content/category/index.html b/templates/moko-cassiopeia/html/com_content/category/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_content/category/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_content/featured/index.html b/templates/moko-cassiopeia/html/com_content/featured/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_content/featured/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_content/index.html b/templates/moko-cassiopeia/html/com_content/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_content/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_engage/comments/index.html b/templates/moko-cassiopeia/html/com_engage/comments/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_engage/comments/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_engage/index.html b/templates/moko-cassiopeia/html/com_engage/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_engage/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_osmembership/common/index.html b/templates/moko-cassiopeia/html/com_osmembership/common/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_osmembership/common/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_osmembership/index.html b/templates/moko-cassiopeia/html/com_osmembership/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_osmembership/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_osmembership/mplan/index.html b/templates/moko-cassiopeia/html/com_osmembership/mplan/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_osmembership/mplan/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_osmembership/mplans/index.html b/templates/moko-cassiopeia/html/com_osmembership/mplans/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_osmembership/mplans/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_osmembership/plan/index.html b/templates/moko-cassiopeia/html/com_osmembership/plan/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_osmembership/plan/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/com_osmembership/plans/index.html b/templates/moko-cassiopeia/html/com_osmembership/plans/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/com_osmembership/plans/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/index.html b/templates/moko-cassiopeia/html/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/layouts/chromes/index.html b/templates/moko-cassiopeia/html/layouts/chromes/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/layouts/chromes/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/layouts/index.html b/templates/moko-cassiopeia/html/layouts/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/layouts/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/mod_custom/index.html b/templates/moko-cassiopeia/html/mod_custom/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/mod_custom/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/mod_gabble/index.html b/templates/moko-cassiopeia/html/mod_gabble/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/mod_gabble/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/mod_membershipplans/index.html b/templates/moko-cassiopeia/html/mod_membershipplans/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/mod_membershipplans/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/mod_menu/index.html b/templates/moko-cassiopeia/html/mod_menu/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/mod_menu/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/mod_virtuemart_cart/index.html b/templates/moko-cassiopeia/html/mod_virtuemart_cart/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/mod_virtuemart_cart/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/mod_virtuemart_category/index.html b/templates/moko-cassiopeia/html/mod_virtuemart_category/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/mod_virtuemart_category/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/mod_virtuemart_currencies/index.html b/templates/moko-cassiopeia/html/mod_virtuemart_currencies/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/mod_virtuemart_currencies/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/mod_virtuemart_manufacturer/index.html b/templates/moko-cassiopeia/html/mod_virtuemart_manufacturer/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/mod_virtuemart_manufacturer/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/mod_virtuemart_product/index.html b/templates/moko-cassiopeia/html/mod_virtuemart_product/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/mod_virtuemart_product/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/mod_virtuemart_search/index.html b/templates/moko-cassiopeia/html/mod_virtuemart_search/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/html/mod_virtuemart_search/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/html/tinymce/index.html b/templates/moko-cassiopeia/html/tinymce/index.html
index 2166c1a..206e130 100644
--- a/templates/moko-cassiopeia/html/tinymce/index.html
+++ b/templates/moko-cassiopeia/html/tinymce/index.html
@@ -1,4 +1,118 @@
-<!DOCTYPE html>
-<!-- MOKO-COPYRIGHT: © 2025-08-10 Jonathan Miller || Moko Consulting — https://mokoconsulting.tech -->
-<title></title>
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
 
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/index.html b/templates/moko-cassiopeia/index.html
new file mode 100644
index 0000000..206e130
--- /dev/null
+++ b/templates/moko-cassiopeia/index.html
@@ -0,0 +1,118 @@
+<!--
+ * Copyright (C) 2025 Moko Consulting <jmiller@mokoconsulting.tech>
+ *
+ * This file is part of a Moko Consulting project.
+ *
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ *  GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ *   along with this program. If not, see <https://www.gnu.org/licenses/>.
+ -->
+
+<!--FILE INFORMATION
+ * DEFGROUP: 	Joomla.Site
+ * INGROUP:  	Templates.Moko-Cassiopeia
+ * FILE: 			index.html
+ * BRIEF: 		Security redirect page to block folder access and forward to site root.
+-->
+
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8" />
+	<title>Redirecting…</title>
+
+	<!-- Search engines: do not index this placeholder redirect page -->
+	<meta name="robots" content="noindex, nofollow, noarchive" />
+
+	<!-- Instant redirect fallback even if JavaScript is disabled -->
+	<meta http-equiv="refresh" content="0; url=/" />
+
+	<!-- Canonical root reference -->
+	<link rel="canonical" href="/" />
+
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+
+	<script>
+	/**
+	 * @defgroup Dolibarr
+	 * @file index.html (embedded script)
+	 * @version 1.0.0
+	 * @brief Security redirect logic. Replaces the current history entry with the site root.
+	 * @details This script computes the absolute root URL using `location.origin` and
+	 *          forwards the user immediately. It prevents leaving the protected folder
+	 *          in the browser history by default.
+	 *
+	 * @section VARIABLES
+	 * @var {Object} opts                Configuration options for the redirect behavior.
+	 * @var {string} opts.fallbackPath   Path used when `location.origin` cannot be determined.
+	 * @var {number} opts.delayMs        Optional delay in milliseconds before redirecting.
+	 * @var {"replace"|"assign"} opts.behavior Navigation method used for the redirect.
+	 *
+	 * @section OPTIONS
+	 *  - opts.fallbackPath: default "/" (root path)
+	 *  - opts.delayMs: default 0 (immediate)
+	 *  - opts.behavior: one of
+	 *      * "replace" — calls `location.replace(url)`; does not keep the folder page in history.
+	 *      * "assign"  — calls `location.assign(url)`; keeps an extra history entry.
+	 */
+	(function redirectToRoot() {
+		// Configuration object with safe defaults.
+		var opts = {
+			fallbackPath: "/",   // string: fallback destination if origin is unavailable
+			delayMs: 0,           // number: delay before redirect in ms (0 = immediate)
+			behavior: "replace"   // enum: "replace" | "assign"
+		};
+
+		// Determine absolute origin in all mainstream browsers.
+		var origin = (typeof location.origin === "string" && location.origin)
+									|| (location.protocol + "//" + location.host);
+
+		// Final destination: absolute root of the current site, or fallback path.
+		var destination = origin ? origin + "/" : opts.fallbackPath;
+
+		function go() {
+			if (opts.behavior === "assign") {
+				location.assign(destination);
+			} else {
+				location.replace(destination);
+			}
+		}
+
+		// Execute redirect, optionally after a short delay.
+		if (opts.delayMs > 0) {
+			setTimeout(go, opts.delayMs);
+		} else {
+			go();
+		}
+	})();
+	</script>
+
+	<!--
+		Secondary meta-refresh for no-JS environments is already set above.
+		Some very old crawlers may ignore JS; the meta refresh ensures coverage.
+	-->
+
+	<noscript>
+		<!-- Extra defense-in-depth: if JS is disabled, meta refresh (above) handles redirect. -->
+		<style>
+			html, body { height:100%; }
+			body { display:flex; align-items:center; justify-content:center; margin:0; font: 16px/1.4 system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif; }
+			.msg { opacity: .75; text-align: center; }
+		</style>
+	</noscript>
+</head>
+<body>
+	<div class="msg">Redirecting to the site root… If you are not redirected, <a href="/">click here</a>.</div>
+</body>
+</html>
diff --git a/templates/moko-cassiopeia/index.php b/templates/moko-cassiopeia/index.php
index d6f0717..da8515b 100644
--- a/templates/moko-cassiopeia/index.php
+++ b/templates/moko-cassiopeia/index.php
@@ -180,8 +180,6 @@ $this->addScript($templatePath . '/js/vendor/afeld/bootstrap-toc.min.js');
   })();
 </script>
 
-<link href='https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css' rel='stylesheet' crossorigin='anonymous'>
-
     <?php if (trim($params_custom_head_end)) : ?><?php echo $params_custom_head_end; ?><?php endif; ?>
 </head>
 <body data-bs-spy="scroll" data-bs-target="#toc" class="site <?php echo $option . ' ' . $wrapper . ' view-' . $view . ($layout ? ' layout-' . $layout : ' no-layout') . ($task ? ' task-' . $task : ' no-task') . ($itemid ? ' itemid-' . $itemid : '') . ($pageclass ? ' ' . $pageclass : '') . $hasClass . ($this->direction == 'rtl' ? ' rtl' : ''); ?>">