Five self-contained improvements, each too small to warrant its own ticket, grouped here.
A walk's venue, and every other automatically generated related link (the OS Maps route, GPX download, calendar download, What3words, the "on Ramblers" link), only ever showed when the walk leader had also added a manual link such as a Meetup page. Most walks never get one, so the whole Related Links section, venue included, was silently missing from almost every walk page. It now shows whenever there is something to show, independent of manual links.
The Directions and Add to calendar entries were also cut down from a wall of near-identical lines, one per app, to a single "Directions to the start" and a single "Add to calendar". Directions is a plain link that opens the device's own maps on a phone and Google Maps elsewhere. Add to calendar is a small menu, the same one used by the walk leader's phone number, offering Calendar, Google Calendar and Outlook; the event carries the walk's description, the walk leader and their visible contact details, and a clickable link back to the walk's own page.
Where a site takes its walks or its social events from Walks Manager, there is nothing to add locally, yet the events list still offered an Add New Event button that led to an edit form for an event that would never be published. The button now only appears when every event type shown in that list is populated locally.
After a walk was published to Ramblers, opening it to edit showed it as already changed, with "Notify the leader about this change" ticked before anyone had touched anything. The publish step records a snapshot of the walk, and the later Ramblers sync then writes the walk's Ramblers link into it, so the walk and its snapshot disagreed on that one system-written link forever after. The Ramblers link is now left out of the change audit, so only real edits count.
Typing :thanks in a caption used to find nothing, because there is no emoji actually called "thanks" - the nearest ones are called pray, clap and raised hands. The emoji picker in captions and descriptions now understands a set of everyday words like this and offers the right emojis for them, skin-tone variants are pushed to the bottom of the list so the plain emoji comes first, and the dropdown now sizes itself to the space available on screen instead of stopping at a fixed height. The word list itself is editable per site in System Settings, so a site can add or change its own shortcuts without needing a code change.
:thanks, :cheers, :hike and similar everyday words now offers a sensible set of emojis, not just literal name matchesword: emoji_one, emoji_twoEvery social publishing call, and any other Graph API request, was writing its full request URL to the debug log, tokens included. A grep of a single evening's local log turned up dozens of live Page access tokens sitting in plain text. Request logging now masks the value of access_token, client_secret, fb_exchange_token and input_token wherever they appear in a request path, so the log stays useful for debugging without handing out working credentials.
access_token=*** instead of the real token, in both the request line and the timeout message