diff --git a/commits.txt b/commits.txt
new file mode 100644
index 0000000..a3c07ea
--- /dev/null
+++ b/commits.txt
@@ -0,0 +1,6268 @@
+72d3075466cc | 2026-06-29 17:27
+
+---
+a790ddc02ad0 | 2026-06-24 14:57
+Fix admin login heading: prevent 'Administration' from hyphenating or overflowing box
+
+---
+21f16ee093ec | 2026-06-24 14:49
+chore: move #rep-polish to Completed, investigate #tighten-csp blockers
+
+---
+eb706214ce16 | 2026-06-24 14:45
+feat: scroll-position memory on repertoire HTMX swaps + swap transition polish
+
+- Add repertoire-scroll-restore.js: snapshots scrollTop of each column <ul>
+  before htmx:beforeSwap, restores after htmx:afterSwap (keyed by data-col)
+- Add subtle opacity transition on #repertoire-index during htmx-swapping
+- Tighten rep-indicator opacity transition to 0.1s for snappier feedback
+- Import new module in public-entry.js
+
+---
+e0cf9f8f5746 | 2026-06-24 14:26
+chore: update TODO — mark icon-color-verify and 3 security tasks complete
+
+---
+0062b296782e | 2026-06-24 14:17
+Fix security issues from audit: gate partage fragments on share_active session, add CSRF to retry-email POST, remove dead App::verifyCsrf()
+
+---
+84869ad96811 | 2026-06-24 14:15
+Fix open redirect in tag.php + language.php: reject protocol-relative URLs (//evil.com) by also checking for // prefix
+
+---
+6ecd3d4540ef | 2026-06-24 13:21
+Fix biome lint errors: remove duplicate CSS properties, apply safe auto-fixes
+
+CSS:
+- Remove duplicate 'background' fallbacks in base.css, header.css, search.css
+  (solid color declared before gradient — gradient always wins)
+- Remove duplicate 'padding' in admin.css .admin-import-log
+
+JS (biome --write safe fixes applied):
+- function() → arrow functions in all IIFEs and callbacks
+- forEach/callback → arrow functions
+- evaluePtrn → parseInt(x, 10) in admin-contacts-form.js
+- Cleaned label text in build.mjs lint step
+
+Remaining warnings are intentional: !important overrides, descending
+specificity (admin.css cascade), noUnusedVariables (functions exported
+to window/onclick), useTemplate style preference.
+
+---
+82d3dcb084b7 | 2026-06-24 13:18
+Fix repertoire column scrolling + admin TOC duplication
+
+- repertoire.css: add min-height: 0 to column <ul> scroll containers so
+  grid 1fr row shrinks below content and overflow-y: auto activates
+- admin-toc.js: add __adminTocBuilt guard + nav.children check to prevent
+  double population when loaded both via admin.min.js and direct <script>
+- admin-toc.php: remove duplicate <script src="admin-toc.js"> tag —
+  JS is already bundled in admin.min.js
+
+---
+9f8a4be84efe | 2026-06-24 13:11
+Add dev-watch recipe with chokidar-cli for live rebuild on CSS/JS changes
+
+- just dev now spawns a background chokidar watcher alongside the PHP server
+- CSS/JS changes auto-rebuild into dist/ (~200ms per rebuild)
+- just stop kills both the PHP server and the watcher
+- just dev-watch still available standalone for split-terminal workflows
+- chokidar-cli added as devDependency
+
+---
+20fe4b6c8c69 | 2026-06-24 13:09
+Add biome + rolldown + lightningcss build pipeline for JS/CSS bundling & minification
+
+- package.json with biome, rolldown, lightningcss devDependencies  
+- biome.json: add CSS formatter support
+- scripts/build-css.mjs: lightningcss resolves @import chain, bundles/minifies CSS  
+- scripts/build-js.mjs: rolldown per-entry JS bundling (no code splitting)
+- scripts/build.mjs: orchestrator for both CSS + JS
+- scripts/check-build.mjs: staleness checker for CI/deploy guard
+- justfile: add build, build-css, build-js, build-install, build-check recipes
+- justfile: deploy recipe now runs build before deploy-code
+- head.php + form-page.php: use dist/base.min.css instead of style.css
+- All controllers + FormBootstrap: reference dist/*.min.{css,js}
+- admin footer: load admin.min.js for all admin pages
+- repertoire: use public.min.js instead of individual app JS files
+- Fix stray '}' syntax error in admin.css line 305
+- .gitignore: add app/public/assets/dist/
+
+---
+e74f9210c5d6 | 2026-06-24 12:56
+#gzip #extract-inline-js enable gzip in nginx + move ~730 lines of inline JS to 15 external files
+
+---
+0ff6ee78d9e9 | 2026-06-24 12:49
+#todo add gzip + inline-js extraction tasks from analysis
+
+---
+3c786b037a38 | 2026-06-24 11:32
+Sort all filter columns: matched entries first, then unmatched, both alphabetical
+
+---
+982d91345dea | 2026-06-24 11:28
+Sort keywords column: matched entries first, then unmatched, both alphabetical
+
+When filters are active, viable (matched) keywords now appear at the top
+of the Mots-clés column so users don't have to scroll past faded entries
+to find clickable tags. Both groups maintain alphabetical order internally.
+
+---
+654c884fed4b | 2026-06-24 11:20
+Remove mobile filter chip bar from repertoire page
+
+The sticky chip bar added noise: users already see their active
+filters highlighted in the accordion columns (with rep-entry--selected
+styling and the active-count badge on each toggle). Removing chips
+shifts focus back to the accordions, consistent with the expectation
+that users return to the dropdowns to adjust filters.
+
+---
+bb3bb805670a | 2026-06-24 11:12
+Fix accordion re-init after HTMX outerHTML swap on repertoire page
+
+The htmx:afterSwap handler was calling initAccordions(e.detail.target)
+but after an outerHTML swap, e.detail.target references the old detached
+DOM element, not the new live element. This meant accordion click
+handlers were never attached to the new filter column toggles after
+applying or removing a filter — breaking all subsequent interaction.
+
+Fix: query the live DOM with document.querySelector() instead.
+
+---
+ecb90ba5dd34 | 2026-06-22 15:45
+Add accordion + active-filter chip bar for mobile repertoire
+
+- repertoire-index.php: wrap each filter column in rep-accordion with toggle
+  button, chevron, badge (active filter count); add rep-chip-bar with
+  removable active-filter chips above the columns
+- repertoire.css: mobile (≤640px) accordion mode — columns collapse to
+  single-open accordion sections with 48px touch targets; chip bar becomes
+  sticky; desktop/tablet layout unchanged via display:none on toggle elements
+- repertoire.php: JS for single-accordion-open behavior on mobile, HTMX
+  re-init after swap, resize-breakpoint cleanup
+- docs/repertoire-mobile-propositions.md: analysis + 4 architecture proposals
+
+---
+cca3d08f058f | 2026-06-22 15:25
+Replace apropos/licence/charte sticky nav with responsive details/summary TOC
+
+- Convert .apropos-toc <nav> to <details class="toc" open> in all three templates
+- Add caret-down icon to summary (visible only on mobile via media queries)
+- Desktop (≥768px): sticky sidebar via CSS grid, force-open via pointer-events:none, hide caret
+- Mobile (≤767px): single column, collapsible TOC with rotating caret, margin-top below search bar
+- Rename .apropos-toc-link to .toc-sidebar-link
+- Merge 900px and 600px breakpoints into single 600px mobile media query
+- Rename apropos.css → content-page.css; update 3 controller references
+
+---
+0a2b4781d143 | 2026-06-21 18:12
+Fix search icon wrong color
+
+---
+6aee5ec131bf | 2026-06-21 17:52
+Clean up cleanup dialog
+
+- Remove duplicate 'Téléversements abandonnés' heading already communicated by the summary
+- Replace #peertube-orphans-wrapper with display:contents wrapper so PeerTube details sit as direct grid siblings
+- Add hx-confirm to all delete buttons (filepond, trash, PeerTube orphans)
+
+---
+dfde88eaa5d6 | 2026-06-21 17:23
+Migrate all &lt;img&gt;-based icons to inline SVG via PHP helper
+
+Replace every &lt;img src="/assets/icons/..."&gt; with &lt;?= icon('name') ?&gt;
+across 26 template files. The PHP helper inlines the SVG markup into the
+DOM so CSS color cascades naturally through fill="currentColor".
+
+- Add src/icon.php helper: reads SVG file, sets width/height to 1em,
+  injects aria-hidden, supports optional CSS class
+- Fix 12 icon SVGs that had hardcoded fill="#000000" or missing fill attr
+- Replace search.svg with Phosphor fill-based magnifying glass
+- Add explicit SVG sizes for admin header nav icons (16px/20px)
+- Scope public search icon CSS to form[role=search]:not(.header-search-form)
+  to avoid breaking admin header layout; change stroke to fill
+- Remove &lt;img&gt; filter: brightness(0) invert(1) hacks from admin.css
+
+---
+b1774e6e9798 | 2026-06-21 17:04
+Replace all inline SVGs with icon files, ensure currentColor fill for proper color inheritance on buttons
+
+---
+71a92d682b86 | 2026-06-21 16:50
+Fix nettoyage modal: SVG icon files, padding/margin consistency, BBBDMSans font, fix HTMX trigger, nested details cleanup
+
+---
+03c9c3566ff3 | 2026-06-21 13:33
+Add SQLite indexes for contenus page language/tag queries + WIP: Peertube orphans, dialogs, contact decoupling, context note, finality types
+
+---
+0d5e9dac19fd | 2026-06-20 13:29
+fix: make sticky TOC work for full scroll height and fix heading anchor links
+
+---
+19bf9f101ac6 | 2026-06-15 16:35
+Refactor apropos/charte/licence pages: shared layout, TOC anchors, and UI polish
+
+Unify the three public pages (à propos, charte, licence) onto a single
+grid layout (.page-content) with sticky TOC sidebar, replacing the old
+separate  /  /  markup.
+
+- Merge about.php, charte.php, licence.php templates into shared
+  .page-content / .content-section structure
+- Add CommonMark HeadingPermalinkExtension for stable heading anchors
+- Use SlugNormalizer for TOC links so they match rendered heading IDs
+- Standardize link styling across content blocks: bold black, accent on
+  hover (consistent with global link style)
+- Fix code block wrapping: use pre-wrap instead of pre, constrain grid
+  columns with min-width:0, auto scrollbar
+- Fix apropos page grid placement: force content-section into column 2
+  so contacts and credits stay in the content area, not the sidebar
+
+Also includes accumulated WIP changes:
+- Header gradient: hardcoded purple-to-green (replaces CSS variables)
+- Search placeholder font
+- Duration field: replace minutes/sec/heures with h:m:s time inputs
+- TFE file optional for formats 1,4,6 with client-side JS toggle
+- Licence form: em-dash to hyphen, details/summary classes
+- Pill search: block Enter key form submission when no results
+- Draft autosave: remove CSRF rotation (broke concurrent FilePond uploads)
+- Language pill: clear hints for excluded main languages
+- Search results: gradient placeholder cards for items without covers
+- TFE display: format durée values as XhYm instead of decimal
+
+---
+928e074d24f2 | 2026-06-15 16:27
+fix: update dev server PHP limits in justfile to match large video uploads
+
+The just dev command hardcodes upload_max_filesize=512M and
+post_max_size=520M via -d flags, which override .user.ini.
+Raised to 8192M/8704M to match the JS-side 8GB video size
+caps.  Also raised max_execution_time and max_input_time to
+600s to accommodate large file transfers and PeerTube uploads.
+
+---
+c8af3bf869fe | 2026-06-15 16:27
+fix: remove leftover debug console.log that crashed HTMX with new FormData(fieldset)
+
+The htmx:beforeSend listener in admin/footer.php was a debugging
+leftover that called new FormData(e.target.closest('fieldset')).
+FormData only accepts HTMLFormElement or nothing — passing a
+<fieldset> throws 'Argument 1 does not implement interface
+HTMLFormElement'.  Removed the serialization call; kept the
+minimal debug log.
+
+---
+2633cb13b5f6 | 2026-06-15 16:17
+fix: increase PHP upload limits to support large video files
+
+Raised upload_max_filesize from 512M to 8192M (8G) and post_max_size
+from 520M to 8704M to match the JS-side per-extension size caps that
+allow up to 8GB for video files (mp4, webm, mov, etc.).  Also raised
+memory_limit to 512M and max_input_time to 600s.
+
+---
+a5db81a73d5a | 2026-06-15 16:16
+fix: change adminOld return type from string to string|array
+
+The closure returned arrays when formData values were arrays (e.g.
+jury_promoteur), but the PHP return type annotation was :string.
+PHP 8.x enforces this strictly, causing a fatal TypeError in
+jury-fieldset.php on add mode.
+
+---
+d588ae004d45 | 2026-06-11 13:05
+Reintroduce TFE duration metadata: DB columns, form fields, controllers, views, and migration
+
+Add 'unsafe-eval' to CSP script-src directives (htmx requires Function())
+
+---
+00fed5f0e3f8 | 2026-06-11 12:23
+Add periodic cleanup of orphaned drafts: cleanup job, just command, deploy cron
+
+---
+a19e9e145452 | 2026-06-11 12:11
+Extract FormBootstrap helper to eliminate bootstrap duplication across add/edit form pages
+
+---
+f4a3e26901e8 | 2026-06-11 12:09
+Add thesis status column for two-phase commit lifecycle tracking
+
+---
+11a6f6a9f2a4 | 2026-06-11 11:41
+Preserve FilePond temp files across partage validation redirects
+
+---
+b744271cf633 | 2026-06-11 11:29
+Extract partage page chrome to templates/partage/form-page.php
+
+---
+cbd369bc7284 | 2026-06-11 11:04
+Split form.css into form-base.css and form-admin.css, drop dead upload-progress code
+
+Also introduces $extraCssAdmin support in head.php for admin-only
+stylesheets (form-admin.css, filepond CSS, system.css). Admin pages
+now use $extraCssAdmin for admin-only assets and $extraCss for
+shared stylesheets like form-base.css.
+
+---
+99125cc8e310 | 2026-06-11 10:32
+Add autosave draft system for partage form with HTMX-based session persistence
+
+- New fragment endpoint POST/GET /partage/fragments/draft.php:
+  saves all form fields to PHP session, excludes file/csrf/slug fields
+  GET returns JSON for JS hydration on page load
+  rotates both global CSRF and share CSRF tokens in sync
+
+- form.php accepts optional $formExtraAttrs and $showAutosaveStatus:
+  allows injecting HTMX attributes and 'Brouillon enregistré' indicator
+
+- renderShareLinkForm adds hx-post with change/input debounce trigger,
+  loads autosave-handler.js, hydrate fields from draft on page load
+
+- Draft cleared on successful form submission in handleShareLinkSubmission
+
+- autosave-handler.js now also updates share_link_token hidden input
+  when rotating CSRF token (partage form uses both csrf_token and share_link_token)
+
+- Added .autosave-status CSS to form.css (was admin.css-only)
+
+- Updated fragment routing to accept GET requests (needed for draft hydration)
+
+---
+4b37a05be39c | 2026-06-11 10:32
+Guard no-JS file uploads: disabled filepond_mode by default, server-side fallback
+
+The partage/admin form had a hardcoded filepond_mode=1 hidden input,
+so without JavaScript the server always entered the FilePond async
+path — which found no hex IDs and silently dropped all files.
+
+Three-layer fix:
+1. HTML: filepond_mode input starts disabled with value=0; JS enables
+   it and sets value=1 on DOMContentLoaded (and after HTMX swaps).
+   Disabled inputs aren't submitted → server gets no filepond_mode
+   → naturally falls to legacy  path.
+2. JS: enableFilepondMode() called on page load and hx:afterSwap so
+   FilePond-enhanced forms always send filepond_mode=1.
+3. Server (defense-in-depth): ThesisFileHandler::hasFilePondQueueData()
+   scans POST['queue_file'] for 32-char hex IDs; ThesisCreateController
+   and ThesisEditController use it alongside filepond_mode, so even if
+   the flag somehow arrives without async upload IDs, the  path
+   takes over.
+
+---
+63e65d98562e | 2026-06-11 10:23
+Add mobile-responsive form layout with WCAG 2.5.5 touch targets
+
+Add @media (max-width: 600px) rule to form.css:
+- Stack form row labels above inputs (1fr grid, single column)
+- Ensure 44×44px minimum touch targets on checkboxes, radios,
+  selects, textareas, text inputs, and .btn/.btn--sm
+- Stack thesis-add-header and recap-dl grids to single column
+- Stack form footer buttons vertically with full width
+- Unstick sticky formats fieldset on mobile
+- Tighten fieldset margins for narrow viewports
+
+---
+e17246c850cf | 2026-06-11 10:22
+Add field-level aria-errormessage, aria-invalid, and aria-describedby across the TFE form
+
+WCAG 3.3.1 (Error Identification): failing fields now get
+aria-errormessage pointing to the flash-error container and
+aria-invalid="true". WCAG 3.3.3 (Error Suggestion): <small>
+hint text on inputs, selects, and file fields is now linked via
+aria-describedby (always, not just on error).
+
+Changes:
+- text-field.php, select-field.php, checkbox-list.php: accept
+  $errorFieldName; add aria-errormessage/aria-invalid on match;
+  add id to <small> and aria-describedby on the control
+- fieldset-tfe-info.php: aria-invalid on synopsis textarea
+- fichiers-fragment.php: aria-describedby on cover, note
+  d'intention, TFE, annexes, and website inputs; aria-invalid
+  on format checkboxes when error matches 'formats'
+- form.php: id="flash-error" + tabindex="-1" on flash-error
+  div; accept $errorFieldName from callers
+- admin/add.php: set $errorFieldName, wire $withAutofocusFn
+  (was identity default)
+- admin/edit.php: set $errorFieldName
+- partage/index.php: consume autofocus field, wire autofocus
+  function, add App::flashAutofocus() in submit catch block
+
+Also fixes WCAG standards issue: removed invalid 'required'
+HTML attribute from <fieldset> elements in checkbox-list.php
+and fichiers-fragment.php (only aria-required stays). Added
+role="group" for explicit ARIA semantics.
+
+---
+c0ba99e86151 | 2026-06-11 10:14
+TODO: add form accessibility & resilience tasks from assessment
+
+---
+2c6b55777f57 | 2026-06-10 00:13
+Fix logs being captured
+
+---
+fb752f5ba27e | 2026-06-09 23:35
+cleanup: remove _write guard — FilePond external API doesn't expose _write
+
+ro=['fire','_read','_write'] is an exclusion list in Ee(), not an inclusion
+list. The external pond object has none of these. The only safe interception
+point is inside the closure (vendor patch), but the root-cause fix
+(fileValidateSizeFilter .filename → .name) already prevents the crash.
+
+---
+6d93199fa2e6 | 2026-06-09 23:22
+docs: HTMX/destroy race hypothesis investigation — REFUTED
+
+Investigation verdict:
+- HTMX does NOT swap the FilePond container on the edit page; the
+  htmx:targetError in the crash log is unrelated noise
+- The pre-destroy abort in destroyFilePondsIn has a wrong status check
+  (filters for nonexistent status 4, misses status 7 LOADING) but is
+  moot because no HTMX swap targets the FilePond container
+- The load-file-error -> DID_THROW_ITEM_INVALID path is vulnerable
+  (passes t.status directly, unlike every other error handler which
+  wraps it), but for local files the LOAD_FILE plugins always wrap
+  rejections properly
+- Likely actual trigger: Firefox XHR abort edge case in server.load
+  for the existing cover file, racing with addition of a new local file
+  that replaces it in the single-file queue
+
+---
+d8d925243e3b | 2026-06-09 23:02
+docs: add filepond crash analysis report
+
+Documents the 'can't access property main, n.status is undefined'
+crash in FilePond 4.32.12. Root cause: vendor code in filepond.min.js
+has a property name mismatch — createResponse objects use .code but the
+load-file-error handler reads .status. When action.status is undefined,
+the view writers crash.
+
+Proposes Option B (custom load function) as the cleanest fix.
+
+---
+2829d13a16bb | 2026-06-09 21:53
+filepond: fix crash 'can't access property main, n.status is undefined'
+
+Fixes three root causes of FilePond errors on TFE upload forms:
+
+1. server.process.onerror accessed .status on a string (XHR response
+   text body) — now extracts the body safely.
+
+2. server.load was a bare URL string with no error handling — converted
+   to object with onload/onerror to prevent FilePond internal _write
+   crash when load.php returns HTTP errors.
+
+3. destroyFilePondsIn now aborts in-flight processing before pond.destroy()
+   to prevent stale XHR callbacks firing on a torn-down FilePond instance.
+
+Server-side: FilepondHandler now emits Content-Type: text/plain on all
+responses (PHP defaults to text/html on die(), confusing FilePond's
+response parser).
+
+---
+38ef55039727 | 2026-06-09 19:57
+feat: render actual elements in markdown cheatsheet instead of labels
+
+Replace text labels (h1, bold, italic) with rendered HTML in the Rendu column:
+headings, strong, em, del, code, links, blockquote, lists, hr, sup, small
+
+---
+4a2b000fca3f | 2026-06-09 19:43
+Add Charte static page (public + admin editing)
+
+---
+317547ac93fc | 2026-06-09 19:35
+Fix #4 v2: decouple contact_interne from contact_visible in ThesisCreateController
+
+validateAndSanitise() no longer cross-contaminates:
+- contact_interne overwrote mail, which then copied to contact_visible
+- Fixed: contactInterne from contact_interne (admin) or confirmation_email (student)
+- Fixed: contactVisible from contact_visible (admin) or mail (student)
+- Fixed: submit() uses contactInterne as author email, not mail
+
+---
+1490c9926800 | 2026-06-09 17:41
+Fix FilePond: maxFileSize as bytes + temp files survive page reload
+
+1. maxFileSize bug: FileValidateSize plugin overrides core's maxFileSize
+   setter. Core uses toBytes('1GB') = 1073741824, but plugin registers
+   maxFileSize as [null, Type.INT] which calls toInt('1GB') = 1.
+   Fix: all maxFileSize and perExtensionMaxSize values as raw bytes.
+   Also fix option name: fileValidateSizeFilterItem → fileValidateSizeFilter.
+
+2. Temp file persistence: files uploaded via FilePond went to
+   tmp/filepond/ and vanished from the UI on page reload because
+   data-existing-files only included DB-persisted files.
+   Fix: session-track temp file_ids in handleProcess, inject via
+   getSessionTempFiles() into data-existing-files, teach handleLoad
+   to stream temp files from disk, and route JS remove → revert for hex IDs.
+
+---
+c4a550f9d14f | 2026-06-09 17:10
+Rework contenus-edit: auto-save, OverType toolbar, dynamic sidebar links
+
+- Auto-save: new autosave.js with 1.5s debounce, watches all forms with
+  data-autosave, POSTs to form action with Accept: application/json, shows
+  saving/saved/error status indicator
+- All action handlers (page.php, apropos.php, form-help.php) now detect
+  JSON Accept header and return {success, csrf_token} or {error} responses
+- OverType toolbar enabled (toolbar:true) on all three markdown editors
+  (page, about_page, form_help)
+- Sidebar links: replaced fixed erg_site_url / source_code_url rows with
+  dynamic sidebar_links array of {label, url} objects. Add/remove via JS.
+  Fallback migration reads legacy keys if sidebar_links is empty.
+- Updated AboutController and about.php template to render dynamic links
+- Updated apropos.css: unified .apropos-toc-link replacing .apropos-toc-erg
+  and .apropos-toc-source
+- New CSS: autosave-status states, sidebar-link-row layout
+- Removed all Enregistrer + Annuler buttons — auto-save and h1 back-arrow
+  make them redundant
+
+---
+a45a2c9ac4eb | 2026-06-09 16:49
+Changed dev serve recipe to be just dev
+
+---
+655dd4c038cb | 2026-06-09 14:01
+feat: clarification contact étudiant + déplacer Contact visible dans Informations du TFE
+
+- Label : « Contact visible (optionnel) », placeholder : mail/site/insta/etc.
+- Hint : demander l'URL complète, le système raccourcit à l'affichage
+- Affichage public (tfe.php) : extraction d'identifiant depuis l'URL
+- Déplacement de contact_visible du Backoffice vers le fieldset Informations du TFE
+- Renommage « Identité » → « Informations du TFE » dans le récapitulatif admin
+
+---
+021c58925efd | 2026-06-09 13:40
+fix: auto-regenerate thesis identifier on any year-prefix mismatch, support .php migrations in runner
+
+ThesisEditController::save() previously only regenerated the identifier when
+the year field changed during an edit. If a thesis had its year corrected in
+a past edit (or via other means) and the identifier still carried the old
+year prefix, subsequent edits that didn't touch the year field would leave
+the mismatched identifier in place.
+
+Now saves() also checks whether the existing identifier's 4-digit prefix
+matches the thesis year, and regenerates if not — regardless of whether year
+changed in the current edit.
+
+The migration runner (run.php) only scanned for .sql files, so PHP migrations
+(013, 016, 018, 038) were never auto-applied. Extended the runner to also
+discover and execute .php migrations in a subprocess. If a PHP migration fails
+with an idempotent error (no such column, already exists, duplicate column),
+the runner treats it as already-applied and continues rather than aborting
+— preventing a stale migration like 016 (banner_path already dropped by 028)
+from blocking migrations that come after it alphabetically (e.g. 038).
+
+Updated migrations 016 and 038 to accept an optional $argv[1] DB path.
+Fixed 016 to gracefully handle the banner_path column already being gone
+(exit 0 instead of fatal).
+
+---
+07370b722176 | 2026-06-09 13:20
+search: ajout filtres finalité et format, boutons plus compacts et Réinitialiser en neutre
+
+---
+34739d6ae584 | 2026-06-09 12:44
+feat: migration 038 to fix thesis identifiers mismatched with their year
+
+---
+3df14567816d | 2026-06-09 12:33
+fix: author name casing not updating — use ID lookup priority
+
+Root cause: SQLite uses BINARY collation, so WHERE name = ? is
+case-sensitive. When changing 'john doe' to 'John Doe', the name
+lookup failed and fell through to the email path which didn't update
+the name. The previous fix only added UPDATE in the name-match branch.
+
+Fixes in findOrCreateAuthor:
+1. Accept optional $idHint parameter — when known (edit flow), update
+   directly by ID (fastest, zero ambiguity)
+2. Add COLLATE NOCASE to the name lookup (fallback path)
+3. Add UPDATE in the email fallback path too
+
+setThesisAuthors now fetches existing author_ids before deletion and
+passes them as position-based hints, so identity is always preserved.
+
+---
+3016c199bdfa | 2026-06-08 18:31
+Fix edit form: is_published reset, contact decoupling, note label, author name case
+
+- Fix #1: Add is_published to getThesisRawFields() SELECT so the publish
+  checkbox stays checked when editing an already-published TFE.
+- Fix #2: Rename 'Note contextuelle' → 'Note contextuelle relative à
+  soutenance' in all templates and StudentEmail.
+- Fix #3: Update findOrCreateAuthor to also UPDATE the author name when
+  a record is found by name (fixes inability to capitalise names).
+- Fix #4/#5: Decouple contact_interne (private author email) from
+  contact_visible (public contact on TFE page). Add migration 037 to
+  add contact_visible TEXT column to theses table and rebuild
+  v_theses_full view. Update all controllers, templates, and DB methods
+  to treat them independently.
+- Fix #6: Investigated libre→interne restriction — no code barrier
+  found; likely resolved by is_published fix.
+
+---
+3d524226a1be | 2026-06-08 18:05
+formulaire: correctifs identifiant/année, contact, fichiers optionnels
+
+- Identifiant: mise à jour automatique quand l'année change en back-office (updateThesis + ThesisEditController)
+- Contact: hint enrichi (1 seul contact, formatage Instagram/Mastodon)
+- Fichiers: TFE rendu optionnel pour Site web/Performance/Installation (note d'intention reste obligatoire)
+
+---
+c4664ec2e960 | 2026-06-08 17:48
+fix: prevent mid-word break in repertoire column headers
+
+Base.css applies word-break: break-word to all elements inside <main>,
+causing mid-word breaks in narrow columns. Override in repertoire.css:
+- hyphens: none, word-break: normal, overflow-wrap: normal on all h2
+- redistribute grid fractions: shrink Orientations (1.2→0.9fr), 
+  Étudiantes (1→0.8fr), boost Finalité (0.7→0.9fr, min 7rem)
+
+---
+a184e0d25311 | 2026-06-08 17:38
+Ajouter l'affichage de la finalité du master sur la page publique TFE
+
+---
+a2092b58a75b | 2026-06-08 17:24
+fix: supprimer les vidéos PeerTube lors de la suppression d'un TFE
+
+- Ajout de PeerTubeService::deleteVideo() qui appelle DELETE /api/v1/videos/{uuid}
+- deleteThesisFileToTrash() appelle maintenant deleteVideo() pour les fichiers peertube_ids:
+- hardDeleteThesis() supprime aussi les vidéos PeerTube associées
+
+---
+312d9eab0e53 | 2026-06-08 12:47
+À propos: contacts flexibles, liens sidebar éditables, grille contacts admin, et bouton supprimer
+
+- Contacts: on peut laisser vide le nom OU le rôle (plus besoin des deux)
+- Sidebar: les liens « site de l'erg » et « code source » sont éditables depuis /admin/contenus-edit.php?slug=about
+- Admin: les champs Nom/Email/Lien des contacts s'affichent en grille 3 colonnes
+- Admin: icône corbeille (admin-icon-btn--delete) pour supprimer un contact, avec réindexation automatique
+- Database::getAproposContent() gère maintenant les valeurs string (URLs) en plus des arrays
+- Database::saveAproposContent() accepte array|string
+
+---
+a1a9a316ca65 | 2026-06-08 12:40
+rework tfe.php layout: row1 author above title, row2 meta+synopsis 2-col grid, row3 flex files
+
+---
+e0d706c677de | 2026-06-08 12:31
+tfe.css: tfe-meta-item font-weight 400→700
+
+---
+c9fa5943cf76 | 2026-06-08 12:20
+repertoire: rep-entry + col h2 step-0, years col step-3
+
+---
+ef6bff895aec | 2026-06-08 12:16
+admin nav-logo: grid layout for icon+text horizontal alignment and vertical centering
+
+---
+9e272873e1ac | 2026-06-08 12:10
+style: set tfe-meta-item default to font-weight 400 so Accès/Licence values render at regular weight
+
+---
+3588f22d7ba2 | 2026-06-08 11:58
+style: consolidate aria-current nav styles — remove border-radius from base header links, keep global :focus-visible ring, move border-bottom/padding to shared header.css
+
+---
+cb2b18e47072 | 2026-06-08 11:53
+style: standardise links to Regular weight (400) with violet accent hover, body to Light (300)
+
+---
+cee3345ea3c8 | 2026-06-08 11:35
+tfe.php: afficher CC2r + licence, formater contact court, supprimer download PDF
+
+---
+24b753a99297 | 2026-06-08 11:22
+fix: add missing csrf_token to htmx checkbox in file access restrictions
+
+The 'Activer la restriction d'accès' checkbox in /admin/acces.php used
+htmx to POST to settings.php but the #fieldset-restrictions container
+was missing a csrf_token hidden input. This caused two bugs:
+1. 'Erreur de sécurité, token invalide' error
+2. Full /admin/parametres.php HTML injected into #restrictions-response
+   (due to HTMX following the 302 redirect on CSRF failure)
+
+---
+3f200dae70fa | 2026-06-08 11:13
+TFE page: replace dl/dt/dd with p/span for metadata, remove underlines, lowercase keywords/languages/formats, inclusive text, editable restriction messages
+
+---
+71949425c7eb | 2026-06-08 10:56
+TFE page: remove underlines from all links, lowercase keywords/languages/formats, inclusive writing, prevent keyword mid-word breaks, editable restriction messages in admin
+
+---
+9a8f0cad6515 | 2026-06-08 10:50
+fix(répertoire): colonnes différenciées, scrollbars discrètes, fontes conformes maquette, AP entre crochets
+
+- grid-template-columns: années=0.4fr, orientations=1.2fr, AP/finalité/intermédiaires
+- scrollbars: WebKit 5px transparent + Firefox scrollbar-width:thin global
+- rep-entry: BBBDMSans Regular 398, --step--1
+- années: BBBDMSans Medium 498 (semi-bold)
+- titres colonnes: Ductus Regular 398, text-secondary, letter-spacing 0.12em
+- AP: diminutifs entre crochets (ex: Design et Politique du Multiple [DPM])
+- TODO: marquer les 4 correctifs répertoire comme faits
+
+---
+df70fba5d43a | 2026-06-08 10:28
+feat: convert all file inputs to FilePond for standardized uploading
+
+- Add csv_import queue type (storeAsFile, no async upload) for CSV import dialog
+- Convert file-field.php partial to FilePond with field-name→queue-type mapping
+- Conditionally skip server config for storeAsFile queues in buildFilePondOptions
+- Skip FilePond init for inputs inside closed <dialog> elements
+- Trigger FilePond init when import dialog opens
+- Load FilePond CSS/JS assets on admin index page
+
+---
+fad38f4e0d35 | 2026-06-08 10:14
+Added more logs to be excluded
+
+---
+053f09b1812f | 2026-06-08 09:48
+fix(migration): deduplicate languages before LOWER() in 025_lowercase_languages.sql
+
+Two rows (Néerlandais id=5, néerlandais id=3) collided when lowercased,
+violating the UNIQUE constraint on languages.name.
+
+Added DELETE to keep the lowest-ID row per LOWER(name) group before
+the UPDATE SET name = LOWER(name).
+
+---
+f4cb06656ec9 | 2026-06-04 23:50
+Improve .gitignore
+
+---
+2bb520bb8c36 | 2026-06-08 10:12
+Fix: anchor vendor/ gitignore to root so app/public/assets/js/vendor/ is tracked (htmx, OverType, FilePond)
+
+---
+f398a0f1ff29 | 2026-05-31 17:49
+Fix non-constant-time credential comparisons
+
+- account.php: replace !== CSRF token check with hash_equals
+- ShareLink::setPassword(): also encrypt and store plain-text password
+  alongside the hash, matching create() behavior so the decrypted_password
+  decoration stays correct after password updates
+
+---
+6246174fc570 | 2026-05-20 13:21
+Export: add LINK.txt with PeerTube watch URLs to file ZIP export
+
+---
+a251aeb50096 | 2026-05-20 13:10
+Fix: bootstrap.php autoload path detects vendor location (same dir vs parent dir) for flat server layout
+
+---
+d33a56981e89 | 2026-05-20 13:06
+Fix: deploy-deps patches classmap path (app/src/ → src/) for flat server layout before composer install
+
+---
+47405e5334e0 | 2026-05-20 12:58
+Fix: split deploy recipe into deploy-code/deploy-deps/deploy-migrate; deploy-deps always syncs composer.json+composer.lock, runs composer install only when lockfile checksum changed
+
+---
+4e409c409d4a | 2026-05-20 12:44
+Fix: add ZipArchive guard to export-files.php, add composer install step + composer.json sync to deploy recipe
+
+---
+ae66c2baad71 | 2026-05-20 02:16
+Integrate Monolog: replace four logging systems with single PSR-3 factory
+
+- Add monolog/monolog dependency (^3.10)  
+- Create app/Logger.php central factory with channels: app, admin, error, audit
+- Each channel gets RotatingFileHandler (30-day retention) with pass-through LineFormatter
+  preserving existing JSON format contracts
+- Rewrite AppLogger as thin facade delegating to Logger::get('app')
+- Rewrite ErrorHandler::log() to delegate to Logger::get('error')
+- Rewrite AdminLogger file output to delegate to Logger::get('admin'), keep DB writes
+- Add Monolog file shadow to Audit via Logger::get('audit') (Option A per monolog-plan)
+- Log level controlled by LOG_LEVEL env var (defaults: DEBUG in cli-server, WARNING otherwise)
+- Graceful NullHandler fallback when log directory is not writable
+- Update SystemController LOG_FILES: remove php_error, add app/admin/error/audit
+- JSON app logs parsed to readable one-liners in the log viewer
+- Remove nginx config tab (parametres + fragment + template + css)
+- Friendly empty-state message when app log files don't exist yet (notYet)
+- PHP tail fallback when exec() unavailable
+- All 228 PHPUnit tests pass, no call sites changed
+
+---
+a6e0aa5887c7 | 2026-05-20 02:03
+Add code coverage configuration (phpunit.xml source filter), baseline coverage report (21.27% lines), gitignore coverage/ and .phpunit.result.cache; remove deprecated setAccessible() calls
+
+---
+a047062d8714 | 2026-05-20 01:55
+Phase 4 cleanup: migrate old tests to PHPUnit, add ErrorHandler/PureLogic/SearchController tests, remove app/tests/, update justfile test target
+
+---
+93625d09b58b | 2026-05-20 01:51
+Add integration tests (Phase 2: DatabaseExtended, ShareLinkExtended, RateLimitExtended) and controller validation tests (Phase 3: ThesisCreate, ThesisEdit, AutofocusField)
+
+---
+7a4d0fafb285 | 2026-05-20 01:28
+Add PHPUnit setup (Phase 0) and pure-logic tests (Phase 1): Crypto, EmailObfuscator, SystemController helpers, StudentEmail, TfeController OG tags
+
+---
+d9e454174916 | 2026-05-20 01:21
+Remove unused Parsedown.php (replaced by league/commonmark in Phase 1); update phpstan baseline
+
+---
+a0cda5b55d2c | 2026-05-20 01:17
+Phase 3: Replace SmtpRelay SMTP socket with PHPMailer
+
+---
+ba578200169d | 2026-05-20 01:07
+Phase 2: Replace PeerTubeService HTTP client with Guzzle
+
+---
+5e75cacad7a9 | 2026-05-20 01:02
+Phase 1: Replace Parsedown with league/commonmark (4 call sites)
+
+---
+4683ba4116b1 | 2026-05-20 00:53
+Add composer.json with league/commonmark, guzzlehttp/guzzle, phpmailer/phpmailer; wire autoloader into bootstrap; document de-librairisation strategy and PHP extension setup
+
+---
+728f05502c96 | 2026-05-19 23:59
+Combine phpstan, cs-check, cs-fix into lint-php recipe; fix lint issues + test failures + duplicate detection bug
+
+---
+2e75a3b35ca0 | 2026-05-19 22:38
+Fix beforeunload dialog appearing on edit.php when no changes made
+
+---
+42222abe7c25 | 2026-05-19 22:32
+Récapitulatif admin: sections → fieldsets, fichiers en table, marges + pas de thumbnails
+
+---
+defc919cd01f | 2026-05-19 22:00
+cleanup modal: list stale files to remove; storage restructure: documents/ → {objet}/
+
+---
+c6199525f94b | 2026-05-19 21:00
+add sticky thead to index, langues, and mots-clés tables
+
+---
+bcf3140aa2e5 | 2026-05-19 20:53
+edit submission: redirect to recapitulatif instead of edit
+
+---
+4da317de0a75 | 2026-05-19 19:39
+deploy: remove .env from generic file perm check, remove router.php check (dev-only file)
+
+---
+5bbf633295d7 | 2026-05-19 19:26
+Contenus: add Mots-clés fieldset mirroring Langues, keep dedicated page button as backup, add Annuler cancel button to both bulk action bars, limit both table wraps to max-height:50vh with overflow scroll
+
+---
+678f9fc8044d | 2026-05-19 19:05
+Index page: remove Mots-clés button, move export to bulk selection, fix ZipArchive error, move DB export to paramètres, sticky thead
+
+- Remove 'Mots-clés' button from toolbar (redundant with admin sidebar tags)
+- Replace export dialog with 'Exporter CSV' + 'Exporter fichiers' buttons in bulk selection bar
+- Export dispatcher now accepts ?ids=1,2,3 for per-selection export
+- All ExportController/Database methods accept optional thesisIds array
+- Graceful error message when ZipArchive extension is missing on server
+- Move DB export (SQLite download) to paramètres → Maintenance section
+- Sticky table column headers (position: sticky, top: 0, z-index: 5) for index page table
+
+---
+b48494312891 | 2026-05-19 19:00
+Unnest header.css (native CSS nesting silently broken in browsers without support)
+
+---
+2cb8d71fe9a5 | 2026-05-19 18:08
+Fix dialog margins, add admin-dialog__body/styles, give trash page horizontal margins
+
+---
+d619d2f11673 | 2026-05-19 16:56
+Update TODO after CSS refactoring fixes
+
+---
+7cf020c7bd82 | 2026-05-19 14:55
+Refactor CSS architecture per css-methodology-spec.md
+
+Split CSS into named layers: reset → colors → typography → base →
+components → utilities. Each component has one unique root class in
+its own file. No cross-component overrides.
+
+New files:
+- reset.css (modern-normalize base — matches project's prior reset)
+- colors.css (all colour variables)
+- typography.css (font faces, size/space scale, font-family vars)
+- base.css (≤ 5 site-wide rules: layout, headings)
+- utilities.css (sr-only, skip-link, reduced-motion)
+- style.css (root @import file loading all layers)
+- components/{links,focus,forms,tables,dialog,details,media,
+  buttons,badges,toasts,pagination,header,search}.css
+
+Existing files:
+- variables.css → backward-compat wrapper (imports colors + typography)
+- common.css → backward-compat wrapper (imports style.css)
+- Page files (admin, public, form, tfe, apropos, repertoire, system,
+  file-access) → removed redundant @import url(./variables.css)
+- head.php → loads style.css instead of modern-normalize + common.css
+- partage pages → load style.css
+
+Fixes vs initial refactoring:
+- reset.css: use modern-normalize base (not Tailwind Preflight) to
+  avoid border/list/heading regressions from aggressive defaults
+- components/search.css: restore !important flags on input styles
+  (needed to override forms.css base input selectors)
+- acces.php: add toast feedback on password copy button
+
+Cleaned up duplicate status-badge/toast definitions from admin.css
+(now live in components/badges.css and components/toast.css).
+
+---
+7c30d1c55d4d | 2026-05-19 01:13
+Fix relink: close modal + HTMX refresh for immediate pool update
+
+- After relink, always close the modal (even if FilePond input not found,
+  e.g. page refreshed by live-reload during the fetch).
+- After closing, re-fetch #format-fichiers-block via HTMX from
+  /admin/fragments/fichiers.php?_thesis_id=N which loads thesis files
+  from DB and re-renders the fragment with pre-populated FilePond pools.
+  The afterSwap handler auto-reinitializes FilePond instances.
+- Updated admin/fragments/fichiers.php to accept _thesis_id, load
+  existing files from DB, build per-queue-type JSON, and render in
+  edit mode.
+
+---
+b77bc486e591 | 2026-05-19 00:41
+Fix relink: FilePond addFile API, yellow border, limbo type + await
+
+- Fix addFile argument format: FilePond.addFile() takes (source, options)
+  as two separate arguments, not a single {source, options} object.
+- Change .filepond--file default border from accent-yellow to accent-green.
+  Existing files loaded in edit mode have type 'local' and never reach
+  processing-complete state, so they got the yellow border.
+- Change relinked file add from type 'local' to 'limbo'. Limbo items
+  go through DID_COMPLETE_ITEM_PROCESSING which triggers onprocessfile
+  (ensures syncOrderInput runs with serverId available) and renders
+  the green checkmark visual.
+- Await addFile Promise and close modal in .then() instead of
+  immediately, ensuring the item is created before cleanup.
+- Remove duplicate modal.close() after the addFile block.
+
+---
+ae9a8a62c0f2 | 2026-05-19 00:26
+deploy: exclude storage/{tmp,documents,theses,triage,backups,logs} from rsync + fix .env perm check to 640
+
+---
+41eebf8a02f2 | 2026-05-19 00:06
+cleanup: squash commit history from 177 to 98 commits, resolve acces.php conflict markers
+
+---
+27e6abc7e491 | 2026-05-18 17:39
+feat: file browser + relink for orphaned files + htmx fix + header cleanup + fix relinked FilePond integration + resolve acces.php conflict markers
+
+---
+79eddf5d5a02 | 2026-05-13 14:58
+feat: fix file deletion on save + trash policy + documents/ prefix + relink browser
+
+1. note_intention: Delete old file only when a genuinely new upload arrives
+   (32-char hex file_id), not when the FilePond pool preserves an existing
+   file by sending its DB integer ID.  Previously the DB integer ID
+   triggered $hasNewNote=true, which deleted the existing note_intention
+   from disk+DB, then handleFilePondSingleFile couldn't re-process it
+   because the regex requires a hex pattern.  Same fix applied to cover.
+
+2. All file deletions now use deleteThesisFileToTrash() which renames
+   files to tmp/_trash/ instead of unlinking.  The trash preserves
+   original filenames prefixed with DB id for traceability.  Skips
+   website URLs and PeerTube refs (no disk file).
+
+3. Storage prefix changed from theses/ to documents/ to reflect that
+   the folder holds all document types (determined by file_type in DB).
+   MediaController visibility gate supports both prefixes for backward
+   compat with existing files.
+
+4. File browser + relink feature for orphaned files:
+   - /admin/fragments/file-browser.php — HTMX tree browser for
+     storage/documents/ and storage/theses/
+   - /admin/actions/filepond/relink.php — POST endpoint that inserts
+     a thesis_files row pointing to existing on-disk file
+   - Per-pool "📂 Relier" buttons (edit mode only)
+   - JS: XamxamOpenFileBrowser / XamxamRelinkFile with FilePond integration
+   - CSS: .relink-modal dialog + .file-browser tree styles
+
+---
+6f7a02244f3e | 2026-05-12 15:19
+maintenance: allow /partage through gate, fix fragment routing, add visibility table in admin
+
+Extract shared filepond logic into src/FilepondHandler.php class.
+Admin filepond endpoints delegate to the handler after AdminAuth check.
+New partage filepond endpoints at /partage/actions/filepond/ verify
+share_active session flag + CSRF token, no admin auth required.
+
+JS reads filepond-base meta tag to determine endpoint path:
+- Admin pages: /admin/actions/filepond (via head.php isAdmin check)
+- Partage form: /partage/actions/filepond (explicit meta)
+
+partage/index.php sets share_active = true on form render, cleans up on
+successful submit. Partage process endpoint rate-limited to 30/5min per
+session. No nginx changes needed — /partage/ location already handles
+PHP without auth_basic.
+
+---
+da153fc60473 | 2026-05-12 15:01
+Refactor HTMX fragment architecture: DRY split into auth endpoints + shared templates
+
+- Created templates/partials/form/_licence.php (shared HTML, no auth logic)
+- Created templates/partials/form/_format-website.php (shared HTML, no auth logic)
+- Created src/FragmentRenderer.php helper for clean fragment rendering
+- Created public/{admin,partage}/fragments/ subdirectories
+- Created thin fragment endpoint files: auth guard + data fetch + render template
+- Updated all hx-post references in templates to new fragments/ paths
+- Updated partage/index.php routing for new fragments subdirectory
+- Kept old fragment files as thin delegates for backward compat
+- Updated nginx config: added PHP handler in /partage/ location block
+
+---
+2632730fa07c | 2026-05-12 14:36
+.gitignore ignore rate_limit and theses and logs.
+
+ Done. The .gitignore now ignores all files in app/storage/cache/rate_limit/* and app/storage/theses/* while   
+ preserving their .gitkeep files via ! negation rules.       
+
+---
+2f4ac22bcb55 | 2026-05-12 14:36
+Fix Interdit Info text
+
+---
+fdc301c20d13 | 2026-05-12 14:28
+fix: require Crypto.php in ShareLink.php
+
+---
+9152b120e8a1 | 2026-05-12 13:50
+feat: mandatory auto-generated passwords for share links + admin password copy/regeneration + password gate rate limiting
+
+---
+8bb0b3a1f2db | 2026-05-12 12:27
+refactor: unify FilePond edit previews + clean upload UI and shared fragments
+
+* Move shared `fichiers-fragment.php` from `partage/` to `templates/partials/form/`
+  and update all include/require references
+* `.gitignore`: exclude SQLite WAL/SHM journal files
+* FilePond UI:
+
+  * change uploaded file block border state from yellow to green
+  * restyle image previews to use site light-theme colors
+* Edit mode:
+
+  * remove custom existing-file preview list implementation
+  * preload existing files directly into FilePond pools
+  * include `cover` and `note_intention` assets in FilePond-managed state
+* Remove obsolete upload progress bar UI and related JS includes
+* Remove deprecated `Écriture` + `Image` format types from upload flow/configuration
+
+---
+6e7c0c00e37b | 2026-05-12 12:08
+refactor: merge video/audio FilePond pools into TFE input
+
+- Remove separate video/audio/peertube_video/peertube_audio pools from UI
+- TFE pool now accepts all file types including video/audio
+- When PeerTube is enabled, video/audio dropped into TFE pool auto-upload
+  to PeerTube (process.php detects MIME and uploads immediately)
+- PeerTube return IDs now encode type: peertube:video:UUID or peertube:audio:UUID
+- load.php returns placeholder SVG for PeerTube files so they appear in FilePond
+- Edit mode: all existing files (including PeerTube) shown in TFE FilePond pool
+- Remove legacy  video/audio/peertube_* handling from both controllers
+- Remove unused vide/audio/peertube_* entries from JS QUEUE_CONFIG
+
+---
+1ff3c70ebe03 | 2026-05-12 10:35
+fix: track vendor JS files, add 'unsafe-inline' to public CSP, gitignore filepond tmp
+
+- Track vendor JS files (filepond, htmx, overtype) that were moved
+  to app/public/assets/js/vendor/ but never tracked → missing from deploys
+- Add script-src 'self' 'unsafe-inline' to main CSP header so public
+  pages (jury fieldset, repertoire, partage) can use inline scripts
+  and onclick handlers
+- Add storage/tmp/filepond/* to .gitignore with .gitkeep, and exclude
+  from deploy rsync to avoid syncing local test uploads to production
+
+---
+2e9ebfc684c4 | 2026-05-11 20:11
+filepond: implement async server-ID upload architecture with nested queue support + PeerTube integration
+
+Replace `storeAsFile:true` with a full async FilePond round-trip pipeline using opaque server-side file IDs.
+
+* Added 4 new PHP endpoints under `/admin/actions/filepond/`:
+
+  * `process.php` — upload/process single file and return opaque `file_id`
+  * `revert.php` — delete pending tmp uploads before form submit
+  * `load.php` — stream existing files by DB ID for FilePond preload
+  * `remove.php` — soft-delete `thesis_files` rows
+* `process.php` improvements:
+
+  * accept arbitrary FilePond field names instead of hardcoded `file`
+  * support PHP-nested multi-file queue inputs (`queue_file[tfe][]`)
+  * explicit unwrapping of nested `$_FILES` structures
+  * add `audio/mp3` to audio + `peertube_audio` MIME whitelists
+  * immediate upload of `peertube_*` files to PeerTube, returning `peertube:{uuid}` IDs
+  * extensive `error_log()` instrumentation for request, CSRF, MIME, upload, and save stages
+* `revert.php` now accepts `peertube:` IDs without local cleanup
+* `ThesisFileHandler`:
+
+  * add `handleFilePondQueueFiles()` + `handleFilePondSingleFile()`
+  * process async uploads from `storage/tmp/filepond/` via opaque `file_id`
+  * inline handling of `peertube:{uuid}` IDs with direct `thesis_files` insertion
+  * remove obsolete deferred PeerTube queue-processing flow
+* `ThesisCreateController` + `ThesisEditController`:
+
+  * gate async path behind `filepond_mode=1`
+  * preserve legacy multipart flow as fallback
+* `file-upload-filepond.js`:
+
+  * remove `storeAsFile:true`
+  * add `buildServerConfig()` for async endpoint wiring
+  * fix `syncOrderInput()` to use `serverId`
+  * add `onprocessfile` hook
+  * add `fileValidateSizeFilterItem` for per-extension size caps
+  * preload existing uploads via `data-existing-files` + `server.load`
+  * replace static `INPUT_ID_TO_TYPE` map with `data-queue-type`
+  * add extensive `console.log()` debugging across upload pipeline stages
+* `upload-progress.js`:
+
+  * block form submission while uploads are pending
+  * update `collectFileNames()` to read processed FilePond items
+* Templates/layout:
+
+  * add `data-queue-type`
+  * add `data-existing-files`
+  * add global CSRF meta tag outside admin-only context
+  * add `filepond_mode` hidden input
+  * add CSRF token/meta support for partage pages
+  * move website URL field below file upload block
+* `.gitignore`: exclude `storage/tmp/` from version control
+
+---
+b56d07321030 | 2026-05-11 19:37
+refactor: extract inline JS into app/ modules, remove dead overtype-webcomponent
+
+- Remove overtype-webcomponent.min.js (zero references)
+- Extract copyLogContent + fallbackCopy + HTMX tab-updater → app/admin-logs.js
+  (removes duplicate from both system.php and parametres.php)
+- Extract copyUrl → app/clipboard.js (shared by acces.php)
+- Extract tag/language pill-search logic → app/pill-search.js
+  Generalized with data-pill-search attributes, auto-inits via
+  DOMContentLoaded + htmx:afterSwap
+- Extract access-request form handler → app/access-request.js
+  (was inline in templates/public/tfe.php)
+
+Files created: admin-logs.js, clipboard.js, pill-search.js, access-request.js
+Files modified: 9 templates/controllers to drop inline scripts and
+  reference external JS files
+
+---
+04094d802db6 | 2026-05-11 18:03
+fix: harden security based on pentest scan findings
+
+- Add Content-Security-Policy to main nginx server block (was only on /admin/)
+- Add Cross-Origin-Opener-Policy and Cross-Origin-Resource-Policy headers
+- Add includeSubDomains to HSTS header
+- Set HttpOnly, Secure, SameSite=Lax session cookie params on public pages
+  (AdminAuth already hardens the /admin session with SameSite=Strict)
+- Update xamxam.conf.reference and SECURITY_HEADERS.md to match
+
+---
+4717b4d67efa | 2026-05-11 17:56
+feat: add passive pentest scanner script with PEP 723 uv metadata
+
+---
+df12af842344 | 2026-05-11 17:03
+fix: validation error messages hidden by generic fallback in ErrorHandler::userMessage
+
+ErrorHandler::userMessage only handled RuntimeException, but all validation
+throws in ThesisCreateController and ThesisEditController use plain Exception.
+This caused user-friendly messages like 'Le champ Nom/Prénom/Pseudo est requis'
+to fall through to the 'Une erreur inattendue est survenue…' generic message.
+
+Fix: add Exception check (after PDOException, since PDOException extends it)
+so all validation exceptions pass their message through.
+
+---
+c3f6e8a03362 | 2026-05-11 16:55
+fix: upload progress bar not visible — collectFileNames checks FilePond instances; remove admin auth from progress poll endpoint
+
+---
+d873a7f09e6d | 2026-05-11 16:22
+fix: add upload-progress.js to partage form (progress bar was missing on public submissions)
+
+---
+e5e76cfb70c1 | 2026-05-11 16:07
+add migration 033 to deduplicate format_types, fix 019 to use INSERT OR IGNORE
+
+---
+3ae22cd42737 | 2026-05-11 16:03
+add system dependency checks (php-curl, sqlite3) to deploy-server.sh step 0
+
+---
+31ccbd195b48 | 2026-05-11 16:01
+add syntaqlite SQL validation to migrate.sh before applying schema.sql
+
+---
+cb6394e119cd | 2026-05-11 15:54
+add incremental migration runner to deploy recipe — execute whole SQL files (not semicolon-split), catch 'no such column' for idempotent re-runs, merge into migrate.sh
+
+---
+c1960d224b23 | 2026-05-11 15:23
+fix deploy: multiple deploy recipe fixes — upload xamxam.conf before deploy-server.sh, sudo rsync for chown, migrate.sh via sqlite3, chmod WAL/SHM sidecar files, deploy-verify-permissions awk fix, .env sudo perms
+
+---
+206a6427e70e | 2026-05-11 14:53
+style: unify recap+edit file figure styling — two-column grid dl, vertical spacing, admin-back-btn sizing, standardise file display and delete-to-trash SVG icons
+
+---
+230555a4c4c2 | 2026-05-11 14:45
+exhaustive recap: all fields, figures for files, PeerTube ID display, same in edit form
+
+---
+8bf95f4e144a | 2026-05-11 14:19
+feat: refactor licence fragment — Libre→CC2r+licence, Interne→opt-in want_license, Interdit→none, add details/summary to license UI
+
+---
+927ee2fe2acc | 2026-05-11 13:12
+feat: upload progress bar — fieldset layout, accent colors, file name display, completion animation, 800ms redirect delay; decorelate formats from fichiers; server-side poll via token; bump PeerTube embed audio player
+
+---
+cdec3e96a679 | 2026-05-11 12:09
+fix PeerTube upload: final working solution — simple multipart POST with CURLFile; iterated through Google-resumable PATCH protocol debugging (HTTP version negotiation, chunk body encoding, off-by-one fixes) before settling on simpler POST approach
+
+---
+1b0451581d53 | 2026-05-11 11:40
+refactor: move Restrictions d'accès aux fichiers from contenus.php to acces.php, cleanup section
+
+---
+d000f9e1d485 | 2026-05-11 11:35
+cleanup: merge SMTP fields into single fieldset, rename to Emails
+
+- Renamed section from 'Relay SMTP' to 'Emails'
+- Merged 'Expéditeur par défaut' fieldset into the main SMTP grid
+- Removed separate 'from_email' field: now uses username as from_email
+- Changed username label from 'Nom d\'utilisateur' to 'Adresse e-mail'
+  with placeholder xamxam@erg.be and type=email
+- from_name and notify_email now inline in the main grid after password
+
+---
+83a5a508ea5e | 2026-05-11 10:47
+feat: PeerTube integration — alternate audio/video labels, FilePond pools, shared SMTP credentials, channel by name, test button, resumable upload, embed improvements, fix alt labels/curl_close/deprecation
+
+---
+28ef35dce5ad | 2026-05-11 10:31
+fix: make schema.sql fully idempotent — add IF NOT EXISTS to all CREATE INDEX, CREATE TRIGGER, and CREATE VIEW statements
+
+---
+973444bdbb9d | 2026-05-11 03:51
+feat(backup): deploy cron-based SQLite backups to production
+
+- Create deploy/xamxam-backup.cron with hourly (30d) and daily (90d) jobs
+- Add just recipes for deploying backup infrastructure:
+  - deploy-backup-script: upload backup-sqlite.sh to /usr/local/bin
+  - deploy-backup-cron: install cron.d file, create /var/backups/xamxam + log
+  - deploy-backup: one-shot convenience (script + cron)
+  - deploy-check-backup-log: tail the backup log
+  - deploy-list-backups: ls remote backup directory
+  - trigger-backup: manually invoke backup on server
+  - test-restore: scp, gunzip, verify a remote snapshot
+- Add reminder to run deploy-backup after first deploy
+- Replace 'Contenu (Markdown)' label with 'Syntax Markdown' link (cheatsheet)
+
+---
+be50ac5eb09d | 2026-05-11 03:18
+fix(production): fix multiple remote server errors from nginx logs
+
+- Fix 413 Request Entity Too Large: bump client_max_body_size to 256M,
+  PHP post_max_size/upload_max_filesize to 256M, fastcgi timeouts to 300s
+- Fix missing v_smtp_active view: add IF NOT EXISTS to all CREATE VIEW
+  statements in schema.sql for idempotent migrates
+- Fix bars.svg 404: create animated SVG spinner in app/public/assets/img/
+- Fix nginx rate limiting: increase admin zone from 60r/m (1 r/s) to
+  300r/m (5 r/s) with burst=30 to handle ~11 concurrent HTMX fragment
+  GETs on contenus.php page load
+- Add deploy-nginx recipe to justfile for uploading nginx config to server
+- Database readonly issue mitigated by existing --chown + deploy-server.sh
+  permissions fix
+- Add comprehensive PHP/JS debugging logs for settings checkboxes:
+  per-field raw POST values in error_log, console.log on htmx:beforeSend,
+  htmx:sendError, htmx:afterRequest, toast lifecycle
+- Fix toast auto-remove script: use getElementById with unique ID instead
+  of querySelector which could remove wrong toast on rapid clicks
+
+---
+43064ccbd7e2 | 2026-05-11 03:11
+feat(admin): add htmx toast feedback for settings checkboxes in contenus.php
+
+- Replace hx-swap="none" with hx-target on response divs inside each of the
+  three fieldsets (Restrictions d'accès, Degré d'ouverture, Types de travaux)
+- Add hxToastSuccess / hxToastError helpers in settings.php that return HTML
+  toast fragments with self-referencing auto-dismiss after 3s
+- Each response div has aria-live="polite" for accessibility
+- Add comprehensive PHP/JS debugging logs:
+  - settings.php logs raw POST values per field before resolving to 0/1
+  - checkboxes have hx-on::before-request and hx-on::after-request console.log
+  - global htmx:beforeSend and htmx:sendError listeners in admin footer
+  - toast lifecycle logged (creation + removal) for traceability
+- Fix toast auto-remove: use getElementById with random unique ID instead
+  of querySelector which could remove wrong toast on rapid clicks
+- Follows the Django+HTMX ajax checkbox pattern from the reference tutorial
+
+feat(admin): add htmx toast feedback for settings checkboxes in contenus.php
+
+- Replace hx-swap="none" with hx-target on response divs inside each of the
+  three fieldsets (Restrictions d'accès, Degré d'ouverture, Types de travaux)
+- Add hxToastSuccess / hxToastError helpers in settings.php that return HTML
+  toast fragments with self-referencing auto-dismiss after 3s
+- Each response div has aria-live="polite" for accessibility
+- Add comprehensive PHP/JS debugging logs:
+  - settings.php logs raw POST values per field before resolving to 0/1
+  - checkboxes have hx-on::before-request and hx-on::after-request console.log
+  - global htmx:beforeSend and htmx:sendError listeners in admin footer
+  - toast lifecycle logged (creation + removal) for traceability
+- Fix toast auto-remove: use getElementById with random unique ID instead
+  of querySelector which could remove wrong toast on rapid clicks
+- Fix checkbox unresponsive after toggles: move hidden value="0" inputs
+  outside <label> to prevent HTML label double-activation
+- Follows the Django+HTMX ajax checkbox pattern from the reference tutorial
+
+feat(admin): add htmx toast feedback for settings checkboxes in contenus.php
+
+- Replace hx-swap="none" with hx-target on response divs inside each of the
+  three fieldsets (Restrictions d'accès, Degré d'ouverture, Types de travaux)
+- Add hxToastSuccess / hxToastError helpers in settings.php that return HTML
+  toast fragments with self-referencing auto-dismiss after 3s
+- Each response div has aria-live="polite" for accessibility
+- Add comprehensive PHP/JS debugging logs:
+  - settings.php logs raw POST values per field before resolving to 0/1
+  - checkboxes have hx-on::before-request and hx-on::after-request console.log
+  - global htmx:beforeSend and htmx:sendError listeners in admin footer
+  - toast lifecycle logged (creation + removal) for traceability
+- Fix toast auto-remove: use getElementById with random unique ID instead
+  of querySelector which could remove wrong toast on rapid clicks
+- Fix checkbox unresponsive after toggles: remove hidden value="0" inputs entirely; unchecked checkboxes are simply absent from POST and server treats missing key as 0
+  outside <label> to prevent HTML label double-activation
+- Follows the Django+HTMX ajax checkbox pattern from the reference tutorial
+
+---
+72f7192156ec | 2026-05-11 02:28
+feat(deploy): add deploy-verify-permissions recipe + upload/run deploy-server.sh before verification + run migrations in deploy
+
+---
+3136fa7113c3 | 2026-05-11 01:45
+fix: settings checkboxes — fix unchecked state handling, split into separate forms to avoid cross-resets, use HTMX auto-save with hidden value=0 inputs
+
+---
+926659087fbd | 2026-05-11 01:08
+feat: implement SQLite backup & data integrity plan (Phases 2-4)
+
+---
+c0163ca4d53e | 2026-05-11 00:43
+fix: exclude entire var/ from rsync --delete to preserve logs
+
+---
+7e987d281c6c | 2026-05-11 00:34
+fix: add hx-swap="none" to admin auto-save checkboxes to prevent page swap
+
+---
+cf9bd5cd5d5f | 2026-05-10 23:49
+feat: require 3 mots-clés in partage, language asterisk toggle, admin auto-save checkboxes
+
+- tag-search: add minTags/required params, counter shows red if < 3, accent if ≥ 3
+- form.php: pass minTags=3 for partage mode keywords
+- checkbox-list: support labelHtml for raw HTML label with targetable asterisk span
+- language-autre-fragment: OOB swap updates #languages-required-asterisk when autre pills change
+- language-search: client-side update #languages-required-asterisk on pill add/remove
+- contenus.php: replace 3 form+submit-button fieldsets with HTMX auto-save checkboxes
+- settings.php: detect HX-Request header, return OOB CSRF token updates, skip redirect
+
+---
+48da914bc8e9 | 2026-05-10 23:40
+fix: obfuscate email in contact links, raise rate limits, make Libre toggleable
+
+- about.php: use EmailObfuscator::email() for contact email link text instead of htmlspecialchars
+- SearchController: raise rate limit from 30 to 300 req/min
+- request-access.php: raise rate limit from 3 to 30 req/10min
+- partage/index.php: raise rate limit from 5 to 50 req/10min
+- contenus.php: make Libre option toggleable (remove disabled class), move to top of Degré d'ouverture, remove temporary note about next academic year
+
+---
+2bacc7849287 | 2026-05-10 23:22
+import dialog: add Terminé button, fix padding, make success permanent, avoid POST resend
+
+import dialog: add Terminé button, fix padding, make success permanent, avoid POST resend
+
+---
+cab65ea4a43e | 2026-05-10 23:06
+fix: jury-fieldset.php calling old() with wrong signature for partage
+
+jury-fieldset.php called old('jury_promoteur') as a global function,
+but the partage context defines old(array $data, string $key) —
+passing a string where array is expected caused a TypeError.
+
+Changed jury-fieldset.php to use $oldFn callable (like fieldset-tfe-info.php),
+with fallback to global old() when not provided. The add-mode repopulation
+block no longer calls the global old() directly.
+
+---
+9bcfaf5fd57f | 2026-05-10 22:40
+Make Auteur(s) and Accès columns sortable alphabetically in admin list
+
+---
+406752bc6f98 | 2026-05-10 22:36
+Improve recap page + fix CSV import for jury roles
+
+recapitulatif.php (partage):
+- Center .thanks-success and add bottom margin/padding
+- Display ALL fields: identifier, synopsis, languages, formats,
+  jury (all roles), baiu link, license, access type
+- Add validation notice asking user to verify info, with
+  xamxam@erg.be contact link (email obfuscated)
+
+StudentEmail:
+- Add 'Note contextuelle' and license_custom to email recap
+- Rename 'Promoteur·ice(s)' to 'Promoteur·ice(s) interne'
+- Change email message to ask student to verify info + contact
+  for errors
+
+CSV export/import:
+- Add 3 new CSV columns: Lecteur·ice(s) interne,
+  Lecteur·ice(s) externe, Promoteur·ice(s) ULB
+- Export splits supervisors by role/is_external/is_ulb into
+  separate columns
+- Import inserts supervisors with correct role, is_external,
+  and is_ulb flags (was: all treated as generic supervisors)
+- Add header matching for short distinguishers (ulb, externe)
+  via str_contains fallback
+
+---
+8545daaccc6c | 2026-05-10 22:18
+fix migration 028, promoteurice repopulation, DB bootstrap
+
+- Fix undefined $isExternalUrl in tfe.php (moved after assignment)
+- Disable PeerTube rendering in tfe.php entirely
+- Migration 028: drop banner_path from theses with proper view handling
+  - Drop dependent views before column, recreate without banner_path
+  - Remove broken 027_drop_banner_path.sql
+  - Move 025_fix_oui_non_artefacts.sql and 021_peertube_settings.sql to applied/
+- Add scripts/ensure-db.php to init fresh DB from schema.sql when missing
+- Update deploy justfile to run ensure-db.php before migrations
+- Fix promoteurice array repopulation in partage form:
+  - Fix old() to return raw arrays (not json_encode) so callers can iterate
+  - Handle jury_promoteur[] and jury_promoteur_ulb_name[] arrays properly
+
+---
+8db7b6e9eb92 | 2026-05-10 20:41
+feat: FilePond production hardening — extension-based validation, server-side size limits (2GB), annexe validation, drop accept attributes, FilePond file styling
+
+---
+7b5f3efe4095 | 2026-05-10 20:33
+feat: add FilePond pools for couverture, note_intention, video, audio; refactor queue config
+
+---
+ecb559a18af2 | 2026-05-10 20:28
+refactor: decouple format extras from main fichiers block, scope FilePond destroy to individual slots, fix FilePond integration for decoupled extras
+
+---
+1aff5ff46dee | 2026-05-10 20:10
+Replace custom file-upload-queue.js with FilePond
+
+- Delete file-upload-queue.js (495 lines of custom queue logic)
+- Delete sortable.min.js dependency
+- Add file-upload-filepond.js: thin wrapper that upgrades .tfe-file-picker
+  inputs to FilePond instances with storeAsFile:true for native multipart
+  form submission (no form-submit interception needed)
+- Update fichiers-fragment.php: replace queue container <ul> elements
+  and empty-state <p> with bare <input> elements that FilePond upgrades;
+  change name attributes to queue_file[tfe][] etc. for PHP compatibility
+- Update add.php, edit.php, partage/index.php: swap JS/CSS refs
+- Clean up form.css: remove .fq-* and .tfe-file-queue custom styles,
+  add FilePond theme overrides matching xamxam design tokens
+- Update dead-code fieldset-files.php for consistency
+
+Server-side stays unchanged: PHP receives ['queue_file']['tfe'][]
+exactly as before through native multipart submission.
+
+---
+223a15b397ef | 2026-05-10 20:10
+chore: resolve rebase conflict markers in acces.php (no functional changes)
+
+---
+11e6eed980d6 | 2026-05-10 19:53
+fix: stop checkbox click in admin index from navigating to recapitulatif
+
+---
+f28a20d642ca | 2026-05-10 19:23
+fix: spurious HTMX console warnings from checkbox-list default hx-include
+
+The checkbox-list partial defaulted hx-include to 'this, #website-url-fieldset',
+but #website-url-fieldset only exists when `Site web` is checked in the
+format list.  Every language checkbox click triggered a no-match warning
+and a cascade triggering the known HTMX internal-data crash.
+
+---
+d5fee1acfbdb | 2026-05-10 18:08
+fix: repair form submission with queued files + add comprehensive debug logging
+
+- Replace fetch(redirect:manual) with XMLHttpRequest in file-upload-queue.js.
+  The previous fetch-based redirect detection was broken because opaque
+  redirects hide the Location header. XHR's responseURL reliably exposes
+  the final URL after server-side redirects.
+
+- Add console.log tracing at every decision point in submit interception:
+  entry, hasFiles check, enctype check, double-submit guard, XHR status,
+  redirect detection, error fallback.
+
+- Add error_log entry-point logging to all 16 admin action files plus
+  the partage/index.php submission handler and password gate. Each logs:
+  request method, content type/length, POST keys, file counts, and
+  queue-specific file counts where applicable.
+
+- Add double-submit guard (_xamxamActiveSubmit) to prevent duplicate
+  XHR sends when the native submit handler fires after interception.
+
+---
+13d26ded66e4 | 2026-05-10 17:16
+Replace HTMX+PHP file upload queues with client-side JS
+
+Drops the session-backed HTMX incremental upload system in favour of a
+single JS module that manages `File` objects client-side and injects
+them into `FormData` on submit.
+
+Key changes:
+
+* `file-upload-queue.js`: client-side queues with validation, reorder
+  (SortableJS), removal, dirty-state tracking, and fetch-based submit
+  with manual redirect handling
+* `fichiers-fragment.php`: empty queue containers for JS-managed queues;
+  HTMX format switching still works with queue rehydration after swap;
+  annexe uploads now support multiple files
+* Form UI cleanup: moved existing files and cover preview into the
+  `Fichiers` fieldset (edit mode); removed redundant queue labels while
+  keeping labels for single-file inputs (`couverture`,
+  `note d'intention`); added delete buttons for existing files
+* `ThesisFileHandler.php`: added
+  `handleTfeQueueFiles()`/`handleAnnexeQueueFiles()` reading from
+  `$_FILES['queue_file']`; introduced `extractFilesSubArray()` for
+  nested upload arrays; removed session-based queue handling
+* `ThesisCreateController.php` &
+  `ThesisEditController.php`: switched to extracted
+  `['queue_file']` uploads
+* `beforeunload-guard.js`: now also watches
+  `window.__xamxamDirty`
+* Deleted obsolete PHP upload/remove/reorder queue endpoints for
+  `partage` and `admin`
+* Cleaned up route dispatch in `partage/index.php`
+* Misc form and styling updates in templates/CSS
+* Added `docs/cms-migration-plan.html`
+
+---
+98ed83fac237 | 2026-05-10 16:32
+fix: scoped HTMX file validation, add validation to TFE/PeerTube inputs
+
+- Wrap file-field.php validation in <form> to scope hx-include (fixes
+  cross-field contamination where cover change triggered note_intention
+  validation)
+- Add inline MIME/size validation to upload-tfe-file.php
+- Add inline validation to PeerTube video/audio and direct video/audio
+  file inputs in format-extras-block
+- Fallback in validate-file-fragment-shared.php: if field_name doesn't
+  match any $_FILES key, try the first uploaded file (handles
+  PeerTube inputs where name differs from field_name)
+- Fix file-field.php admin_mode using $adminMode variable instead of
+  undefined ADMIN_MODE constant
+
+---
+ca7707cd4733 | 2026-05-10 16:19
+refactor: session-based incremental TFE upload via HTMX, drop SortableJS
+
+Replace the client-side FileArray + Sortable drag-to-reorder with a
+server-side session-based upload flow:
+
+- New endpoints: /partage/upload-tfe-file, /partage/remove-tfe-file
+  (and /admin/ variants) — single-file incremental upload via HTMX
+  multipart/form-data with progress bar support
+- Session storage: uploaded files go to STORAGE_ROOT/uploads/{session_id}/
+  with metadata in $_SESSION['tfe_uploads']
+- file-upload-queue.js reduced to single-file previews only (couverture,
+  note_intention, annexes thumbnails)
+- ThesisFileHandler gains handleTfeFilesFromSession + writeTfeFileFromSrc
+  + cleanupSessionUploads for final commit from session temp
+- Sortable.min.js removed from all script tags; drag handles and ghost
+  CSS removed
+- No file_orders[]/file_labels[] hidden field injection needed
+- Upload queue survives page refresh (server-owned list)
+
+This eliminates the SortableJS dependency entirely while keeping the
+same UX: pick files, see them in a queue, remove individual files.
+
+---
+e06a31749937 | 2026-05-10 15:55
+fix: req annexes, add HTMX inline file validation (MIME/size)
+
+- Annexes file input now required when 'has_annexes' checkbox is checked
+- PHP-side validation: if has_annexes but no files, throw error
+- HTMX inline file validation: POSTs to validate-file-fragment on file change
+  - Validates MIME type against per-field whitelists (couverture, note_intention,
+    tfe, annexes)
+  - Validates file size with PDF-specific 100MB limit
+  - Supports both single-file and multi-file inputs
+  - Returns green ✓ or red ✕ inline validation messages
+- Shared validation logic in src/Controllers/validate-file-fragment-shared.php
+- Admin wrapper: admin/validate-file-fragment.php (with AdminAuth guard)
+- Partage route: /partage/validate-file-fragment (dispatched via index.php)
+- CSS: .file-validation-msg, .fv-ok (green), .fv-error (red)
+- file-field.php: accepts $fieldName for per-input validation type,
+  auto-detects admin/partage validate URL
+
+---
+a1a5d4609ff2 | 2026-05-10 15:14
+fix: TFE and annexes files not saved, plus keyword validation and file preview CSS
+
+- ThesisCreateController::submit() was missing call to handleAnnexeFiles
+- ThesisEditController::save() was missing annexe upload handling
+- handleAnnexeFiles now applies ALLOWED_MIME_TYPES/ALLOWED_EXTENSIONS validation
+  (same restrictions as TFE files, formerly only size was checked)
+- Use correct $_FILES key 'annexes' (matching the form input name)
+- Relax keyword minimum: admin create/edit require 1+, student (partage) requires 3
+- Add CSS styles for file preview items (.fp-item, .fp-thumb, .fp-icon,
+  .fp-meta, .fp-name, .fp-size) so multi-file previews (annexes, etc.) wrap correctly
+- Fix TFE file input accept attribute in fichiers-fragment.php to include
+  video/audio/archive extensions
+
+---
+38dc8de9d8dc | 2026-05-10 14:51
+feat: obfuscate all email addresses and mailto links as HTML entities
+
+Added EmailObfuscator class (src/EmailObfuscator.php) that converts
+email addresses to HTML decimal entities (e.g. &#102;&#111;&#111;@...)
+so browsers render them correctly but bots and scrapers see gibberish.
+
+Methods:
+- email($addr): obfuscate for display in HTML content
+- mailto($addr): return obfuscated mailto: href
+- obfuscateHtml($html): post-process rendered HTML to obfuscate all
+  mailto: links (used after Parsedown/Markdown rendering)
+
+Applied to:
+- partage/index.php: mailto link at top + error scenarios via _flash_contact
+  flag rendered in form.php (outside htmlspecialchars to avoid double-escape)
+- admin/acces.php: request email mailto links
+- admin/file-access.php: request email mailto links
+- public/about.php: contact email mailto links
+- public/tfe.php: author contact mailto links
+- AboutController: Parsedown output post-processing
+- LicenceController: Parsedown output post-processing
+- Dispatcher::render(): require_once EmailObfuscator for all public views
+
+Also fixed _flash_contact session flag in form.php partial to show
+contact email line on share link validation errors (separate from
+flash_error/warning to bypass htmlspecialchars double-escaping).
+
+---
+ab6e26680779 | 2026-05-10 14:06
+fix: add help email, preserve file names on validation error, license fix
+
+The share link (partage) form does not expose a license field and does
+not send access_type_id (defaults to 2/Interne). Server-side validation
+was unconditionally requiring a license for non-admin submissions,
+causing all share link submissions to fail.
+
+Now the license check is gated on adminMode=false AND accessTypeId=1
+(Libre), matching the client-side HTMX fragment behaviour in
+licence-fragment.php. Also fixed a use-before-definition where
+accessTypeId was referenced before being assigned.
+
+Student form improvements:
+- Add xamxam@erg.be mailto link at top of form
+- On validation error, append "Si le problème persiste, envoyez un
+  e-mail à xamxam@erg.be" to the flash message
+- Preserve uploaded file names across validation redirects: store in
+  session (share_primed_files_<slug>), display as warning on form
+  re-render so the student knows which files to re-select
+
+- License: only required for non-admin when access_type_id=1 (Libre),
+  not for Interne (2) or Interdit (3). Fixes share link submissions
+  failing with "Veuillez sélectionner une licence". Also fixed
+  use-before-definition of accessTypeId.
+
+---
+6224e3ede0a8 | 2026-05-10 13:20
+Fix language-search fragment
+
+- mots-clé and language where sharing the same q variable for the input value; they now have unique variables.
+
+The admin language-search-fragment was missing App::boot() which the tag-search
+fragment had. This caused the language suggestion dropdown to not return results
+in Firefox. Both fragments now follow the same bootstrap pattern.
+
+Rewrote language-search-fragment.php to use the same clean pattern as
+tag-search-fragment.php: ->searchLanguages(), simple exact match check,
+no predefined exclusion list. Both fragments now share identical structure.
+
+fix: exclude main languages (français, anglais, néerlandais) from language-search suggestions
+
+---
+a3ded169158f | 2026-05-10 12:52
+Add sidebar TOC, simplify Données Secondaires section
+
+- Rename 'Éditer Données Secondaires' → 'Données Secondaires', remove fieldset wrapper on Mots-clés link
+- Create admin-toc.php partial: IntersectionObserver-based sidebar nav
+- Include TOC on contenus.php, acces.php, parametres.php
+- Add .admin-with-toc flex layout (sidebar + main) and .admin-toc CSS
+- Fonts (Ductus, BBB DM Sans): verified loaded via variables.css → common.css import chain
+- TOC: move inside <main> as <aside>, content in <article>, fix scrolling
+- Lazy load: hx-trigger='load delay:100ms' with spinner (htmx-indicator) for tags/langues
+- Inline rename: edit button in Nom cell, HTMX post for rename, validate+ cancel buttons
+- Checkbox column: width:1% / fit-content
+- Remove per-row merge forms/selects, only bulk merge when ≥2 checkboxes selected
+- Remove per-row merge dialogs, keep only bulk merge and delete dialogs
+- Add htmx-settling CSS transition for lazy-load fade-in
+- Update acces.php/parametres.php: article layout, TOC inside main
+- TOC: DOMContentLoaded guard, use <nav>+<a> directly instead of <ul>/<li>
+- Section spacing: margin-bottom on sections and fieldsets in admin-main--toc
+- Language dedup: GROUP BY LOWER(name) in getAllLanguagesWithCount and searchLanguages
+- deduplicateLanguages() merges duplicate names and reassigns thesis_languages
+- Sticky bulk-actions: position:sticky;top:0;z-index:10
+- Tags toolbar: title left, stat count right (margin-left:auto), search bar under
+- Tags count stat updated via hx-swap-oob from fragment
+- Remove margin/max-width from .admin-main--toc
+- Gap between TOC and article: --space-xs, sticky top: --space-xs
+- Main padding: --space-s / --space-m / --space-xl (was --space-l/--space-l/--space-2xl)
+- Article padding-top: --space-m
+
+---
+396cf19e9f12 | 2026-05-10 12:13
+Add Mots-clés and Langues management to contenus page
+
+- Add searchLanguages, getAllLanguagesWithCount, renameLanguage, mergeLanguage, deleteLanguage to Database
+- Create actions/language.php handler with rename/merge/merge_bulk/delete actions
+- Add merge_bulk action to actions/tag.php
+- Add Mots-clés section to contenus template with HTMX search, select checkboxes, rename/delete/merge buttons, and multi-select merge toolbar
+- Add Langues section to contenus template with same pattern
+- Create contenus-tags-fragment.php and contenus-languages-fragment.php HTMX fragments
+- Remove form-settings- from flat-fieldset CSS selector so fieldsets in contenus retain border/padding
+- contenus.php: add 'Gérer les mots-clés' link to /admin/tags.php
+- contenus.php: add Langues fieldset with HTMX search + table (rename/merge/delete/bulk)
+- tags.php: add HTMX search bar, checkbox column, bulk merge toolbar
+- Create tags-fragment.php and contenus-langues-fragment.php for HTMX
+- Remove tab component and associated CSS
+- Simplify JS: separate tags/langues-prefixed functions
+- Fix redirects: tag.php defaults to /admin/tags.php, supports return override
+- Keep tags.php standalone page and Mots-clés button unchanged
+
+---
+494675d78c5f | 2026-05-10 11:39
+Move Formulaire settings to contenus, remove delete-all TFE
+
+- Removed 'Supprimer tous les TFE' danger zone from parametres (template, dialog,
+  backend handler, Database::deleteAllTheses(), AdminLogger method)
+- Moved Formulaire section (access type toggles, restricted files) from parametres
+  to contenus under new h2 'Paramètres du Formulaire'
+- Moved Types de travaux from parametres to contenus as sub-section under
+  Paramètres du Formulaire
+- Existing 'Structure du formulaire' section now a sub-heading (h3) under
+  Paramètres du Formulaire in contenus
+- Sub-sections: Restrictions d'accès aux fichiers, Degré d'ouverture,
+  Types de travaux, Structure du Formulaire
+- Added siteSettings query to contenus controller
+
+---
+048a14bc2edc | 2026-05-10 10:59
+Add language-search component for Autre Langue input + active search in lists
+
+Mirrors the mots-clé tag-search system: dropdown suggestions from
+existing languages via HTMX, pill display with bin-icon remove buttons,
+'Créer' option for new languages. Replaces the plain text input.
+
+- New partial: templates/partials/form/language-search.php
+- New fragment: public/partage/language-search-fragment.php
+- Admin wrapper: public/admin/language-search-fragment.php
+- Updated language-autre-fragment to return just the required asterisk indicator
+- Updated both controllers to handle language_autre as array (pill-based)
+  with backward-compatible string path
+- Updated edit form to compute selectedOtherLanguages from DB
+- Registered new route in partage/index.php
+- Fix CSV importer: split comma-separated language column into individual entries
+- Add htmx active search to admin index, title line-clamp, predefined languages only in checkboxes
+- Admin index: filter form now uses htmx triggers (input delay:300ms on search,
+  change on selects) to actively search without page reload
+- Sort links include hx-push-url for back-button support
+- Added loading indicator bar (.admin-search-indicator)
+- Title column: line-clamp at 2 lines with overflow hidden, native title attr
+  tooltip for full text
+- Language checkboxes now show only 3 predefined languages (Français, Anglais,
+  Néerlandais); all others go via the Autre langue search component
+- Added Database::getPredefinedLanguages() and excluded predefined from
+  language-search-fragment suggestions
+- Included hidden sort/dir inputs in table-wrap so sort state preserved across
+  filter changes
+- Fix language-search: block 'Créer' for predefined languages in dropdown
+  The 'Créer' option in the language-search dropdown now also checks against the
+  predefined set (français, anglais, néerlandais) to avoid offering creation of
+  languages that already exist as checkboxes.
+
+---
+96fa8ee26687 | 2026-05-10 03:33
+CSV importer: boolean and ap variants/typos
+
+- add AP aliases for:
+  - Design & politique du multiple → DPM,
+  - Pratiques artistiques & complexité scientifique → PACS,
+  - Narraion Speculative typo → NS
+- Fix: OUI/NON CSV artefacts in contact_interne — clean DB, guard in findOrCreateAuthor and CSV import
+- Cleaned 141 authors.email = 'NON' rows → NULL in dev DB
+- findOrCreateAuthor: treat OUI/NON as null (CSV boolean artefact in email column)
+- CSV import: sanitize contact column — OUI/NON → empty string before passing to findOrCreateAuthor
+
+---
+fa30aab36837 | 2026-05-10 03:02
+Rename author_email→contact_interne, author_show_contact→contact_public across view/controllers/templates
+
+- v_theses_full: author_email→contact_interne, author_show_contact→contact_public
+- Updated schema.sql and live DB view
+- Renamed all PHP variables: currentAuthorEmail→contactInterne, currentAuthorShowContact→contactPublic
+- Restored contact_interne backoffice field with proper wiring (takes precedence over mail field)
+- Updated admin/add.php, admin/edit.php, partage/index.php, public/tfe.php templates
+
+---
+8a4b2541fbd6 | 2026-05-10 02:55
+Fix: email clearing in findOrCreateAuthor, htmlspecialchars(null) crash in old(), dead contact_interne field, access_type_id radio clearing
+
+- findOrCreateAuthor: always update email column (pass null when empty/falsy) so clearing an email actually persists
+- admin/add.php & admin/edit.php old(): add null guard before htmlspecialchars, cast to string
+- jury-fieldset.php: guard against old() returning array for scalar-checked jury_lecteur keys
+- formulaire.php: only suppress display_errors in production (not cli-server dev mode)
+- Removed dead contact_interne field from backoffice form (no DB column, never saved)
+- Removed dead contactInterne validation from ThesisCreateController
+- Added "— Non défini" radio option for access_type_id in admin mode for clearing
+- Fixed strict int-vs-string comparison breaking radio button checked detection
+
+---
+6cc0e407f305 | 2026-05-09 21:36
+Error tests, FK violations fix
+
+- ErrorHandler tests: 77 assertions covering FK extraction, normalization, dedup, edge cases. Fix FK table map for child tables.
+- Fix FK violation: (int)null → 0 in createThesis for orientation/ap/finality/license FK columns. Add FK value logging to updateThesis.
+- Add CURRENT_ISSUES.md with summary of FK violation, dev debugging, and tag dedup status for next conversation
+
+---
+a80b2c08bf80 | 2026-05-09 20:51
+Admin mobile block: fix inline style beating media query
+
+---
+6614b04dbddd | 2026-05-09 20:42
+Fix bulk form nesting, remove count bar, stopPropagation on actions
+
+- Remove admin-bulk-meta__default (TFE count bar) — only bulk actions on selection
+- Move #bulk-form out of table wrapper to avoid nested forms (was breaking
+  per-row publish/unpublish which submitted to bulk form instead)
+- execBulk() now populates #bulk-checkboxes with hidden inputs from checked boxes
+- Add event.stopPropagation() to edit link and delete+publish forms so
+  clicking actions doesn't navigate the row to recapitulatif
+- Delete button: only opens confirm modal, no row nav
+
+---
+b6908f745316 | 2026-05-09 20:39
+Rename Liens étudiant·e, add link name + edit dialog
+
+- Rename 'Accès étudiant·e' → 'Liens étudiant·e' in acces.php
+- Add 'name' column to share_links (schema.sql + ALTER TABLE migration)
+- ShareLink::create() now accepts optional  parameter
+- Add ShareLink::update() method for name/password/expiration
+- Add 'update' action to acces-etudiante.php controller
+- Remove Visiter (play) button; row click opens link in new tab
+- Add edit dialog with name, password, expiration fields
+- Add pen icon button to open edit dialog per row
+- Add Nom column to table (also in archived links section)
+
+---
+7711557d080c | 2026-05-09 19:11
+refactor: Admin index — replace emoji buttons with Phosphor SVG icons, add back buttons + row click navigation, minimal JS, move export DB to Exporter modal, color stats, bulk bar anti-shift, credits reorder, tags icons
+
+---
+dc3191f458e3 | 2026-05-09 18:58
+add explanation hint to is_published checkbox in Backoffice fieldset
+
+---
+bcf683c5c146 | 2026-05-09 18:54
+Merge Publication fieldset's is_published checkbox into Backoffice fieldset
+
+Move the is_published checkbox from its own separate Publication fieldset
+into the Backoffice fieldset (as item #8). This means the publish control
+is now present in both add and edit admin forms (previously it was only
+shown in edit mode via $showPublish).
+
+---
+c4a23d5c2d21 | 2026-05-09 18:39
+Remove duration_pages/duration_minutes/file_size_info; rename cc4r → cc2r in DB and code
+
+---
+cc0ae32df045 | 2026-05-09 16:58
+fix: resolve partage form submission issues
+
+- Replace mb_strlen/mb_substr/mb_strtolower with strlen/substr/strtolower
+  (mbstring extension missing on server, causing fatal error)
+- Scope annexes checkbox HTMX swap to #annexes-input-block with hx-select
+  (prevents duplicating entire page inside Fichiers fieldset)
+- Split format+fichiers response: #format-fichiers-block (stable) and
+  #format-extras-block (swappable, inside Fichiers fieldset). Format
+  checkboxes use hx-select to extract only the extras, preserving file queue.
+- Keep format extras inline in Fichiers fieldset (no sub-fieldsets). Remove
+  website legend input (URL only).
+- When PeerTube upload disabled, show direct file upload inputs for
+  video/audio (name=files[]).
+- Add "Glissez-déposez" sort hint below TFE file queue.
+- Fix .fq-name overflow with width:0;min-width:100% chain.
+- Remove legend placeholder from .fq-item.
+- Merge "Récits et expérimentation" AP into "Narration Spéculative".
+  Rename PACS to "Pratique de lart - outils critiques, arts et contexte
+  simultanés".
+- Remove président·e field from jury fieldset, form templates, and
+  controller validation. Keep DB column and display logic for existing data.
+
+---
+59bbcf4642fd | 2026-05-09 16:15
+css: moved + tweaked styles to common.css
+
+- Add baseline input[type="checkbox"] and input[type="radio"] styling
+  in common.css (accent-color, size, cursor, flex-shrink)
+- Give select a solid background (var(--bg-primary)) and its own focus rule
+- Remove now-redundant checkbox accent-color/size from
+  .admin-checkbox-label (form.css) and .param-checkbox (admin.css)
+- Simplify .search-filter-select (repertoire.css) to inherit common
+  select defaults (border, background, arrow icon)
+- Keep all layout-specific classes in form.css and admin.css intact
+- Add baseline input[type="checkbox"] and input[type="radio"] styling
+  in common.css (accent-color, size, cursor, flex-shrink)
+- Give select its own rule block with same shape as text inputs
+  (transparent background, same padding/border/radius/focus)
+- Remove now-redundant checkbox accent-color/size from
+  .admin-checkbox-label (form.css) and .param-checkbox (admin.css)
+- Simplify .search-filter-select (repertoire.css) to inherit common
+  select defaults
+- Keep all layout-specific classes in form.css and admin.css intact
+- Remove bottom-border/border-radius:0 overrides from .admin-form,
+  .admin-inline-form, .param-form, and .param-grid inputs/selects
+- Change required-field indicator from border-bottom-style to
+  border-style: dashed to work with full-border approach
+- Update param-grid aria-invalid from border-bottom-color to border-color
+- All text inputs, selects, and textareas now inherit the full-border
+  style from common.css (border, border-radius, padding, focus ring)
+- .password-gate input[password]: remove redundant padding override
+- .retry-email-form input[email]: remove redundant border/border-radius/
+  padding/box-sizing, keep only font-size (larger) and width
+- .tfe-access-request-form input/textarea: remove broken references to
+  undefined vars (--border, --background, --accent), now inherit from
+  common.css. Remove redundant focus rule.
+- .fhb-name-input: strip redundant padding/border/radius/font-size/font
+- .admin-inline-form input/select: strip redundant font-size
+- .param-checkbox: remove font-size (inherits from body)
+- .param-checkbox small: remove redundant color + font-size (common.css small already sets both)
+- .param-note: remove font-size
+- .param-account-status: remove font-size
+- .param-smtp-test-row label: remove display:block + font-size (common.css label)
+- .param-smtp-status: remove font-size
+- .param-grid label: remove font-size
+- Remove .param-form legend padding override (now inherits common.css legend)
+- Remove .param-danger-zone legend padding override
+- Remove .param-export-zone legend padding override
+- Remove .param-fieldset-inline legend entirely (only rule was padding)
+- Remove .licence-explanation legend entirely (all properties identical to common.css legend)
+- All fieldsets now consistently use common.css fieldset padding
+  (0 var(--space-m) var(--space-m) var(--space-m))
+- The common.css fieldset has padding-top: 0, which leaves checkboxes
+  and other content tight against the legend. Add var(--space-s) top
+  padding so the first content row has proper spacing from the legend.
+
+---
+013317c97f90 | 2026-05-09 16:11
+link creation: fieldset with checkboxes for objet restriction, TFE checked by default
+
+link creation: fieldset with checkboxes for objet restriction, TFE checked by default; password/expiration in second fieldset 'Accès'
+
+---
+21c2b55bfbda | 2026-05-08 19:24
+style: normalize headers, overtype editor rounded corners, remove duplicate cover preview, thesis-add-header grid layout, subtitle below header with top gradient
+
+---
+7ccadbb224ec | 2026-05-08 19:18
+refactor public search bar
+- one big input with positioned magnifying glass icon
+- fix search input left padding to prevent placeholder overlapping magnifying glass
+- add !important to search input styles to override base form element rules
+- reduce search input vertical padding
+- bump search input vertical padding to space-2xs
+
+---
+862ed02136a1 | 2026-05-08 17:57
+style: unify form element styles in common.css, redesign focus rings, refactor public search bar, tweak admin section
+
+---
+77fd282e29c0 | 2026-05-08 17:31
+refactor: unify edit mode Format+Fichiers with add/partage HTMX fragment
+
+- Edit mode now uses the same fichiers-fragment.php as add and partage,
+  instead of duplicating the format checkboxes + new-file upload + website
+  URL fieldsets.
+- Edit-only elements (existing files list, cover replace) stay in
+  a separate #edit-existing-files-block below the shared fragment.
+- Removed .zip/.tar/.gz from the main TFE upload accept in both
+  fichiers-fragment.php and fieldset-files.php. Archives go only
+  in the Annexes file input.
+- Removed admin/format-website-fragment.php dependency from edit
+  (no longer needed — the shared fragment handles website too).
+
+fix: jury repop crash + hx-preserve on file inputs, remove zip/tar from tfe accept
+
+- Jury fieldset add-mode repopulation now handles both scalar (legacy)
+  and array (new dynamic multi-row) values for jury_promoteur and
+  jury_promoteur_ulb_name. htmlspecialchars() was choking on array value.
+- All file inputs in fichiers-fragment.php wrapped in hx-preserve
+  containers so HTMX swaps don't wipe user-selected files when toggling
+  formats or the annexes checkbox.
+- Removed .zip/.tar/.gz from main TFE file accept — archives only via
+  annexes input (which already had multiple + correct accept).
+- Edit mode now reuses the same fichiers-fragment.php fragment.
+
+fix: file inputs re-initialize after HTMX swap via inline script
+
+- Exposed window.XamxamInitFileUploads from file-upload-queue.js IIFE
+  so HTMX fragments can trigger re-binding without a global listener.
+- fichiers-fragment.php emits <script>XamxamInitFileUploads()</script>
+  at the end of the #format-fichiers-block fragment.
+- Removed hx-preserve wrappers — they prevented re-render after
+  format/annexes toggles changed visible inputs.
+- This also fixes .zip removal from TFE accept and jury repopulation
+  array crash from the previous commit.
+
+refactor: simplify file-upload-queue.js, remove file-preview.js
+
+- file-upload-queue.js rewritten from ~250 lines to ~120 lines:
+  no more DataTransfer machinery, no IIFE wrapper, uses .onchange
+  instead of addEventListener for simpler HTMX re-init.
+- window.XamxamInitFileUploads is the function itself (not an IIFE export).
+- Merged file-preview.js functionality into file-upload-queue.js
+  (single-file .data-preview handling). Deleted file-preview.js.
+- fichiers-fragment.php inline script calls XamxamInitFileUploads()
+  after every HTMX swap (same as before).
+
+debug: add console.log to file-upload-queue.js for file input behavior
+
+Adds logging at key points to diagnose why only one file is displayed:
+- XamxamInitFileUploads called
+- TFE queue picker init (id, multiple attribute state)
+- onchange event (files count, names)
+- fileArray post-concat length
+- Single-file preview bindings (id, multiple attribute)
+
+Remove after debug session.
+
+---
+8f4f9d00b457 | 2026-05-08 17:03
+Refactor: Form improvements and cleanup: note contextuel, annexes, fichiers
+
+1. fix: form improvements — multiple promoteurices, asterisks, contact dedup, bentopdf
+
+- Multiple promoteurice (interne + ULB): both fieldsets now support dynamic
+  add/remove rows (same pattern as lecteurs). field names changed to arrays
+  (jury_promoteur[], jury_promoteur_ulb_name[]). Controllers accept both
+  scalar and array forms for backwards compat.
+- ULB promoteurice: when finality=Approfondi, asterisk appears on legend
+  and first ULB input is marked required (JS toggle). Non-Approfondi hides
+  the fieldset and clears values.
+- Contact visibility duplication: removed redundant contact_public checkbox
+  from admin add/edit forms (showContact=false). The 'mail' field in
+  fieldset-tfe-info already serves this purpose.
+- Asterisk fixes: website URL field now has asterisk+required when Site web
+  format selected. Video/audio already had correct required handling.
+- bentopdf link: clearer full URL 'https://bentopdf.com/' in both
+  fichiers-fragment.php and form.php (edit mode)
+
+2. refactor: merge Note contextuelle into Backoffice, add Lien BAIU, reorder fields
+
+Backoffice fieldset now contains in order:
+1. Note contextuelle (was standalone fieldset)
+2. Points du jury
+3. Remarques
+4. Lien BAIU (moved from Métadonnées complémentaires)
+5. Exemplaire physique BAIU
+6. Exemplaire physique ERG
+7. Contact interne
+
+
+Métadonnées complémentaires now only has: pages, minutes, annexes checkbox.
+Removed dead showContextNote variable from form.php, add.php, edit.php.
+Controller baiu_link still mapped to input name "lien" (no migration needed).
+
+3. refactor: move annexes checkbox from Métadonnées into Fichiers fieldset
+
+- Removed 'Ce TFE comporte des annexes' checkbox from
+  fieldset-metadata.php.
+- Added annexes checkbox + conditional file input to
+  fichiers-fragment.php. When checked, an HTMX swap reveals
+  the 'annexes' file input (multiple, PDF or ZIP/TAR, max 500 MB).
+- form.php seeds ['has_annexes'] for initial fragment render.
+- Métadonnées complémentaires now only contains pages + minutes.
+
+---
+03c5fd217eaa | 2026-05-08 16:48
+feat: dual upload system — direct file storage + PeerTube API integration
+
+Adds a parallel PeerTube upload system behind a feature flag (disabled by default
+until upload quota is granted). When disabled, the existing direct file upload
+path works unchanged.
+
+Files:
+- src/PeerTubeService.php — credential storage (encrypted), OAuth2 token
+  retrieval, multipart upload to /api/v1/videos/upload
+- migrations/021_peertube_settings.sql — peertube_settings singleton table
+  + peertube_upload_enabled site_setting (default 0)
+- admin/actions/settings.php — peertube section handler
+- admin/parametres.php / templates/admin/parametres.php — PeerTube UI section
+- partage/fichiers-fragment.php — shows file inputs when enabled, TODO notice otherwise
+- ThesisCreateController / ThesisEditController — handlePeerTubeUpload()
+- tfe.php — PeerTube iframe embed detection
+- AdminLogger — logPeerTubeUpdate()
+
+---
+11e61226e2aa | 2026-05-08 16:35
+fix: justfile shebang recipes indentation (spaces → tabs)
+
+---
+e6829994b6d1 | 2026-05-08 13:03
+Refactor + feat: unify format/fichiers HTMX fragment, reorder format types, add file constraints, fix admin auth
+
+* **Unified Format + Fichiers into a single HTMX fragment**
+
+  * Introduced `app/public/partage/fichiers-fragment.php` as shared dynamic block returning both format checkboxes and adaptive “Fichiers” fieldset
+  * Logic adapts inputs based on selected formats:
+
+    * no selection / upload formats → standard file inputs
+    * “Site web” → URL fields only
+    * “Site web + upload” → file inputs + URL sub-fieldset
+  * Added admin wrapper: `app/public/admin/fichiers-fragment.php` (gated via `admin_mode=1`)
+  * Added `app/public/admin/format-website-fragment.php` for edit-mode website URL toggling
+  * Wired route `/partage/fichiers-fragment` in `app/public/partage/index.php`
+  * Refactored `form.php` (add/edit partage) to use single `#format-fichiers-block` instead of separate fragments
+  * Edit mode format checkboxes now target `format-website-fragment.php` → `#edit-website-url-fieldset`
+  * Added `$hxInclude` support in `checkbox-list.php` for configurable HTMX includes
+
+* **Format system migration + ordering**
+
+  * Migration `020_format_types_sort_and_rename.sql`:
+
+    * added `sort_order` column to `format_types`
+    * inserted new format **Image**
+    * defined ordering: Écriture · Image · Audio · Vidéo · Site web · Performance · Objet éditorial · Installation · Autre
+  * `Database.php`: format queries now use `ORDER BY sort_order, id`
+  * `fichiers-fragment.php`:
+
+    * uses ordered format list
+    * resolves Image/Vidéo/Audio by name
+    * introduces `$hasImage` flag
+    * preserves `admin_mode` across HTMX requests
+
+* **File constraints and UX updates**
+
+  * Enforced **100 MB PDF limit**
+
+    * `ThesisCreateController`: `MAX_PDF_SIZE = 100MB` for PDFs only
+    * `ThesisEditController`: same PDF-specific constraint applied
+    * Other file types remain capped at 500 MB
+  * Updated UI hints in `fichiers-fragment.php` and edit form:
+
+    * explicitly mention 100 MB PDF limit
+    * added reference to `bentopdf.com` for compression guidance
+  * `file-field.php`: added `$hintRaw` to allow HTML rendering in hints
+
+* **Admin authentication fix**
+
+  * Fixed missing auth in admin fragments
+  * Added `require_once AdminAuth.php`
+  * Replaced direct usage with `AdminAuth::requireLogin()`
+  * Applied consistent pattern with existing fragment authentication approach
+
+* **Migrations included**
+
+  * `019_add_ecriture_format.sql`
+  * `020_format_types_sort_and_rename.sql`
+
+* **Files affected**
+
+  * Controllers: `ThesisCreateController`, `ThesisEditController`
+  * DB layer: `Database.php`
+  * Public fragments: `partage/fichiers-fragment.php`, `admin/fichiers-fragment.php`, `admin/format-website-fragment.php`
+  * Templates: `form.php`, `checkbox-list.php`, `file-field.php`
+  * Routing: `partage/index.php`
+  * Misc: `TODO.md`
+
+This consolidates format normalization, HTMX UI simplification, file validation rules, and admin stability fixes into a single coherent system update.
+
+---
+7e35bba5304c | 2026-05-08 12:48
+Encrypt SMTP password at rest with AES-256-GCM
+
+---
+95fcbc919a44 | 2026-05-08 12:40
+Remove required from all admin add/edit form inputs
+
+- Skip required-field validation for orientation/ap/finality/licence/jury in admin add+edit
+
+---
+5735ccbc3878 | 2026-05-08 11:30
+Fix issues with nginx access to pages
+
+- fix: 403 on /language-autre-fragment.php — add explicit nginx location block
+
+  The nginx catch-all  blocked direct access
+  to all PHP files except /index.php and files inside /admin/.
+
+  language-autre-fragment.php lives at the public root and is POSTed to by
+  HTMX from both the admin edit form and the partage form. Added an explicit
+   fastcgi block so it is executed
+  rather than denied.
+
+- fix: replace .php-suffixed public URLs blocked by nginx catch-all
+
+  Audit of all client-facing PHP URL references against nginx routing:
+
+  - fetch('/request-access.php') in tfe.php -> '/request-access'
+    (clean URL already routed by Dispatcher)
+  - /media.php?path= in form.php (x2) and admin/recapitulatif.php -> /media?path=
+    (nginx only has location = /media, no location for /media.php)
+
+  All these .php-suffixed URLs hit the nginx catch-all
+    location ~ \.php$ { deny all; }
+  which takes precedence over location / { try_files ... } for regex matches.
+
+---
+6ba13e00eabd | 2026-05-08 10:56
+test: add ShareLinkTest + PureLogicTest (TDD), fix coverMap undefined in SearchController
+
+---
+15d54fa19ee3 | 2026-05-08 10:55
+add Néerlandais language option and make language_autre conditionally required
+
+---
+f3d961556260 | 2026-05-08 10:46
+merge banners into covers: remove banner field, migrate files, add covers to search/home/repertoire cards
+
+---
+e3896811c416 | 2026-05-07 23:45
+Fix migrations and deploy issues + errors + linting
+- scan both pending/ and applied/ dirs so remote catch-up works
+- fix remote 500s: run.php handles per-statement errors so VIEW rebuilds run after duplicate columns; replace mb_strimwidth with substr (no mbstring extension on server)
+- add missing migration: 015_license_custom.sql (column existed in schema.sql but was never migrated)
+- remote: fgetcsv enclosure single-char + AdminLogger permission-denied
+guard + deploy always migrates
+- fix admin-filters wrapping: restore flex-wrap, flex-basis on
+inputs/selects, shrink-protect buttons
+- fix phpstan: remove redundant ?? [] after isset guard in
+ThesisEditController
+- biome: exclude vendored min.js via includes patterns;
+lint whole js dir; modernise beforeunload-guard.js
+
+---
+bdd95341b09c | 2026-05-07 22:48
+Extract shared TFE form partial — single source of truth for add/edit/partage
+
+Created templates/partials/form/form.php as the unified form template driven by
+$mode ('add'|'edit'|'partage') and boolean flags for optional sections.
+
+The three calling templates (templates/admin/add.php, templates/admin/edit.php,
+partage/index.php renderShareLinkForm) now only set variables then include the
+shared partial. ~200 lines of duplicated fieldset HTML eliminated.
+
+---
+ac0008df6cc5 | 2026-05-07 21:24
+Add website-type TFE support: URLs stored as thesis_files rows, HTMX-toggle on Site web format
+
+---
+9dc7ea98f252 | 2026-05-07 20:58
+fix: password-protected share links never load form after password entry
+
+The main GET handler in partage/index.php always showed the password gate
+for links with password_hash set, even after successful verification. The
+session flag share_verified_<slug> was being set by requirePasswordGate()
+but never checked when deciding whether to re-show the gate.
+
+Added a check: if the session flag is already set, skip the gate and
+render the form directly.
+
+Also added error_log() calls throughout the password flow to help
+diagnose future issues.
+
+---
+03121d6b7ef5 | 2026-05-07 20:52
+form: add spacing between elements inside fieldsets
+
+- common.css: fieldset > *:not(:last-child) gets margin-bottom: var(--space-xs)
+- admin.css: .param-form fieldset > * zeroes margin to avoid double-spacing with flex gap
+
+---
+d9dd4bdbc777 | 2026-05-07 20:42
+Edit Email confirmation styling
+
+---
+696259afae08 | 2026-05-07 19:54
+Fix form field required states & missing fields per spec
+
+- Admin add: add contact_public checkbox (matching edit form)
+- All forms: formats checkbox-list now required
+- All forms: jury promoteur·ice interne required, lecteur·ice interne/externe required
+- All forms: licence select now required
+- Admin edit: add E-mail de confirmation fieldset
+- Partage: contact always visible when provided (no contact_public field)
+- Partage: filter PACS from AP programs dropdown
+- Server-side validation: formats, jury, licence required (create + edit controllers)
+- Autofocus mappings for new validation errors
+- No duplicate asterisks — verified across all rendered fields
+- fix: add missing old() function in admin edit controller
+- refactor: move admin email field to Backoffice as Contact interne, never send email
+- Untrack admin.log (covered by .gitignore)
+
+---
+51f9f56e0995 | 2026-05-07 19:40
+Replace span with a link + href in about.php for credits
+
+---
+e0c748d8e7b0 | 2026-05-07 18:44
+Refactor about.php
+
+- Hardcode source code URL and credits in about template, remove from DB/admin interface; only contacts remains editable
+- Merge apropos editables into one À propos section, remove charte, add editable source code URL
+
+---
+24d68dda598e | 2026-05-07 17:52
+refactor form structure per new spec + fix
+- split jury into interne/externe/ULB,
+- remove president from student form,
+- add language_autre,
+- split duration into pages+minutes+annexes,
+- move licence to degrés d'ouverture with CC2r,
+- add license_custom,
+- filter PACS from student AP list,
+- editable généralités help block,
+- Libre toggle per settings
+
+Fix:
+- missing comma after cc4r column in schema.sql
+- remove duplicate form footer from partage template
+- remove couverture from student files fieldset; add promoteur ULB conditional disable via JS on Approfondi
+- promoteur ULB: remove 'si applicable', make required when visible
+
+---
+dce0e0b30194 | 2026-05-07 17:30
+schema: validate against new TFE field spec
+- add exemplaire_baiu, exemplaire_erg, cc4r, remarks;
+- add is_ulb to jury;
+- split jury_lecteurs into interne/externe in view;
+- refactor admin edit form with backoffice fields;
+- update public fiche to show promoteur ULB and split lecteurs
+
+---
+7793b6f86d4f | 2026-05-07 16:28
+add file export system for admins
+
+- ExportController: getAllThesisFiles(), buildExportManifest(), createExportZip()
+  builds a ZIP archive with manifest.json + files/ mirror of storage/theses/
+- Database: getAllThesisFilesForExport() queries all thesis_files + identifier
+- AdminLogger: logFilesExport() audit log entry
+- admin/actions/export-files.php: thin dispatcher, streams zip with headers
+- templates/admin/index.php: 'Exporter fichiers' button next to CSV export
+
+---
+821369f00468 | 2026-05-07 12:27
+exclude maintenance.flag from rsync deploy and git
+
+---
+3f87d71e389e | 2026-05-05 18:54
+Fix: CSV importer and imported data
+- pad rows, distinguish empty year, better error diagnostics
+- derive year from identifier when year column is empty
+- fix remaining 18 theses: Installation/Performance (slash→dash) orientation alias
+- csv importer: use column-name-based header detection instead of hardcoded positions
+
+---
+b063312642c5 | 2026-05-05 18:27
+centralise repertoire filter column rendering
+- shared repFilterEntry() and  config array
+- shared repFilterEntry() and $filterColumns config array
+- fix single-valued FK fading via full intersection
+
+---
+bca707ee9687 | 2026-05-05 11:34
+standardise buttons: .btn base class (border-radius 10px, padding var(--space-xs))
+
+---
+b58445f71c84 | 2026-05-05 11:09
+sticky save/cancel buttons at top-right of admin edit page
+
+---
+95066de7b4d3 | 2026-05-05 10:31
+standardise multi-author support across all forms
+
+- ThesisCreateController: comma-split auteurice, sort alphabetically,
+  use setThesisAuthors() instead of hardcoded createThesis() author_id
+- Database::createThesis(): removed author_id param and hardcoded insert
+- Database::findDuplicateThesis(): accepts array of author names, matches
+  any shared author via IN + DISTINCT
+- ThesisEditController::save(): sort authors alphabetically on save
+- File folder naming: slug from all authors alphabetically sorted
+- v_theses_full GROUP_CONCAT: ORDER BY a.name ASC for deterministic display
+- Migration 012_author_view_order.sql: rebuilds view with alphabetical order
+
+---
+125c501f4080 | 2026-05-04 18:33
+Fix 403 on HTMX fragment requests: AdminAuth Basic Auth sets session key
+
+---
+37111eaac452 | 2026-05-04 18:19
+fix: add missing remote DB migrations and deploy-migrate recipe
+
+Four ALTER TABLE / CREATE TABLE statements were applied locally but never
+deployed to the remote production database, causing:
+
+- acces.php → 500: share_links.is_archived missing (ShareLink::listActive/listArchived)
+- parametres.php → 500: smtp_settings.notify_email missing (SmtpRelay::getSettings)
+- /tfe?id=N → redirect-to-home: thesis_files.sort_order missing (getThesisFiles ORDER BY)
+- admin_audit_log table missing (AdminLogger::insertDb, best-effort but noisy)
+
+Adds four pending migrations (008–011) covering all missing schema changes.
+Adds 'deploy-migrate' just recipe to run migrations on the remote after deploy.
+
+---
+ae6d9b86b32a | 2026-05-04 17:52
+Replace browser alert/confirm dialogs with <dialog> modals
+
+- admin/index.php: alert() → no-selection dialog; confirm() bulk actions → bulk-confirm/bulk-delete dialogs; confirm() single delete → delete-thesis dialog; removed redundant confirm on Dépublier (reversible action)
+- admin/tags.php: confirm() merge/delete → merge-tag/delete-tag dialogs
+- admin/acces-etudiante.php: confirm() delete link → delete-link dialog
+- admin/acces.php: confirm() archive link → archive-link dialog
+- admin/parametres.php: confirm() maintenance/delete-all → enable-maintenance/delete-all-tfe dialogs; admin password confirm() kept with TODO comment
+- admin/account.php: admin password confirm() kept with TODO comment
+- admin.css: add .admin-dialog--sm, .admin-dialog__alert, .admin-dialog__footer styles
+
+---
+ca5983075d2d | 2026-05-04 17:34
+feat: admin audit logging across all admin actions
+
+- AdminLogger: JSON-lines → /var/log/xamxam.log (prod) / storage/logs/admin.log (dev)
+  + best-effort DB mirror to admin_audit_log table
+- DB: admin_audit_log table, share_links.is_archived column
+- ShareLink: archive() replaces delete(), toggleActive() returns new state,
+  listActive()/listArchived() split, validateLink blocks archived slugs
+- All action handlers wired: publish, unpublish, visibility, delete, csv/db export,
+  tfe add/edit, tags, pages, apropos, form-help, access-request, maintenance,
+  settings (formulaire toggles, objet types, smtp update), smtp-test
+- acces.php: archive button replaces delete; collapsible archived links section
+- setup-server.sh: provision /var/log/xamxam.log (www-data:xamxam 640)
+
+---
+5f24dcae7eb2 | 2026-05-04 17:04
+fix: duplicate warning not shown in admin, double-encoded in partage, no focus
+
+- toast-fragment.php: 204 early-exit now also checks flash['warning'];
+  previously the warning was consumed by consumeFlash() then silently dropped
+- partage/index.php: store warning as plain text; htmlspecialchars() applied
+  once at render time — previously htmlspecialchars() was called inside the
+  stored string then again at output, producing &#039; entities etc.
+- partage/index.php: flash-warning div gets id + tabindex=-1; inline JS
+  scrolls it into view and focuses it on DOMContentLoaded
+- admin/footer.php: htmx:afterSettle listener focuses .toast--warning after
+  HTMX injects the toast fragment into #toast-region
+
+---
+a2cba6d3c01c | 2026-05-04 16:29
+feat: prevent duplicate TFE submissions with logging and user feedback
+
+- Add DuplicateThesisException (typed, carries existing thesis metadata)
+- Add Database::findDuplicateThesis(): matches on year + author + normalised
+  title (exact, prefix, Levenshtein ≤10% of longer string)
+- ThesisCreateController::submit() runs duplicate check before any DB write
+  and throws DuplicateThesisException on match
+- AppLogger::logDuplicate() writes status=duplicate entries to the JSON-lines
+  log for audit purposes
+- App::flash/consumeFlash extended to support 'warning' flash type
+- admin/actions/formulaire.php: catches DuplicateThesisException, logs it,
+  flashes an HTML warning toast with a clickable link to the existing thesis,
+  and repopulates the form fields
+- partage/index.php: same catch block; surfaces a plain-text flash-warning
+  banner on the student form with identifier, title, and year of the match;
+  form is repopulated via session
+- toast.php: renders toast--warning variant
+- admin.css: .toast--warning + link colour rules
+- form.css: .flash-warning style for the partage form
+
+---
+0a05f3911cd6 | 2026-05-04 16:06
+Replace Psalm with PHPStan + PHP‑CS‑Fixer + Biome, add linting configs & cleanup
+
+- Removed the `vimeo/psalm` dependency and all related files
+(`psalm.xml`, `psalm‑baseline.xml`, suppress annotations).  
+- Added **PHPStan** (v2.1.54) and **PHP‑CS‑Fixer** (v3.95.1) to
+`vendor/bin/`.  
+- Created `phpstan.neon` (level 5, bootstraps `app/bootstrap.php`,
+scans `Parsedown.php`).  
+- Created `phpstan‑baseline.neon` with 10 pre‑existing errors.  
+- Added `.php‑cs‑fixer.dist.php` (PSR‑12 + PHP80Migration, targets
+ `app/src` & `app/tests`).  
+- Added `biome.json` and updated `justfile` to replace the old Psalm
+recipes with `phpstan`, `cs‑check`, and `cs‑fix`.  
+- Updated `.gitignore` to exclude PHPStan and PHP‑CS‑Fixer cache files.  
+- Updated several JS files (`file‑preview.js`, `file‑upload‑queue.js`)
+eand PHP controllers (`MediaController.php`, `SearchController.php`,
+`SystemController.php`).  
+- Minor adjustments to `TODO.md`, `app/src/Database.php`,
+`app/src/Parsedown.php`, `app/src/ShareLink.php`, and
+`app/src/SmtpRelay.php`.  
+
+---
+d6e30ec9cdae | 2026-05-04 14:46
+Enhance serve recipe to automatically open the browser
+
+- use xdg-open firefox
+- keep serve recipe in foreground
+
+---
+8a38708fc8f0 | 2026-05-01 22:41
+Refactor justfile to reduce redundancy and merge similar recipes
+
+- Merge deploy-* recipes into a single deploy-script recipe
+- Remove rarely used recipes (show id, setup-dirs)
+- Simplify test-* recipes
+- Remove redundant default recipe
+- Preserve all critical functionality
+
+---
+d09f1942f014 | 2026-05-01 22:39
+Fix Mistral provider: change api from openai-completions to mistral-conversations
+
+---
+34b2d073ee1c | 2026-04-30 16:00
+style(toast): reposition to bottom-center, solid bg, larger text, longer duration
+
+---
+e8bf89d18479 | 2026-04-30 14:16
+admin header: replace déconnexion text with SVG sign-out icon
+
+---
+0f849468f70b | 2026-04-30 13:52
+feat: inline email retry on 550 rejection in tfe access request form
+
+---
+da53bf5d7a99 | 2026-04-30 13:44
+feat: email retry page on 550 rejection; confirmation_email optional in admin form
+
+---
+898a87789b0f | 2026-04-30 13:37
+fix(smtp-test): catch SmtpSendException to surface delivery errors as flash messages
+
+---
+19784090a3b6 | 2026-04-30 13:26
+fix: pass PHP upload limits via -d flags in justfile serve recipe
+
+php -S (built-in dev server) ignores .htaccess and .user.ini entirely.
+The POST Content-Length limit was still 8M from /etc/php/php.ini.
+Pass upload_max_filesize=512M, post_max_size=520M, memory_limit=256M,
+max_execution_time=300, max_input_time=300 directly on the CLI.
+
+---
+6a37d21f3fc0 | 2026-04-30 13:22
+docs: add file-uploads.md — accepted types, limits, storage, ordering, security
+
+---
+a83dc1c74e8e | 2026-04-30 13:07
+feat: multi-type file upload with sort order, labels, and expanded MIME support
+
+- DB migration 007: add sort_order + display_label to thesis_files
+- Database: getThesisFiles ordered by sort_order; insertThesisFile accepts label/order;
+  new reorderThesisFiles() and updateThesisFileLabel() methods
+- ThesisCreateController + ThesisEditController: expand allowed MIME/exts to include
+  audio (mp3/ogg/wav/flac/aac/m4a), video (webm/mov/ogv), image (gif/webp),
+  archives (tar/gz), any-ext via octet-stream; max size raised to 500 MB;
+  accept file_labels[] and file_orders[] POST fields; detectFileType() helper
+- MediaController: expanded MIME allowlist; HTTP Range support for audio/video;
+  force-download for unknown types; inline for known displayable types
+- fieldset-files.php: sortable queue UI with SortableJS, per-file labels, 500 MB hint
+- templates/admin/edit.php: existing files as sortable list with drag handles,
+  type icons, label inputs, delete checkboxes, hidden sort-order fields
+- file-upload-queue.js: new JS replacing file-preview.js — sortable new-file queue,
+  per-file labels, hidden order fields on submit, backward-compat legacy preview
+- tfe.php: renders audio (<audio>), all video formats, images, PDF, and
+  download-only 'other' files; reads display_label; sorted by sort_order
+- tfe.css + form.css: styles for audio player, download files, sortable queue,
+  drag handles, file type badges, label inputs
+- .htaccess + .user.ini: upload_max_filesize=512M / post_max_size=520M
+
+---
+2188ff5479db | 2026-04-30 12:56
+docs: add SMTP 550 postfix fix report for mail admin
+
+---
+89b7ab476e66 | 2026-04-30 12:40
+Handle SMTP 550 recipient-rejected errors with structured SmtpSendException
+
+- Add SmtpSendException with smtpCode/smtpResponse/isRecipientRejected()
+- smtpSend() $expect closure throws SmtpSendException (with code) instead of RuntimeException
+- SmtpRelay::send() re-throws SmtpSendException so callers can inspect it
+- request-access.php (new): catch 550 → roll back token+approval, return HTTP 422 with FR user message
+- request-access.php (resend): catch 550 → HTTP 422 instead of silently claiming success
+- StudentEmail::sendConfirmation(): catch SmtpSendException → log+false (submission not aborted)
+- admin/actions/access-request.php: catch SmtpSendException post-approval → flash warning (recipient-rejected vs transient)
+
+---
+8d115dc96504 | 2026-04-30 12:36
+smtp: enable TLS peer verification, fix envelope injection, fix dot-stuffing
+
+---
+33987c9b1589 | 2026-04-30 12:19
+smtp: add notify_email field; fix admin notification sent to no-reply sender
+
+---
+bdb68479d571 | 2026-04-30 12:16
+smtp: typed probe errors with per-field UI highlighting on save
+
+---
+b750aca2f502 | 2026-04-30 12:10
+smtp: probe credentials on save (connect+auth+quit, no message sent)
+
+---
+56c8d5443589 | 2026-04-30 11:42
+repertoire: align all column headings to shared baseline row
+
+---
+a9e03c4b1c80 | 2026-04-30 11:41
+repertoire: fixed-header columns, remove main/index padding, minimal column padding
+
+---
+0960afb7317d | 2026-04-30 11:38
+fix: add missing favicon tags to partage/recapitulatif.php
+
+---
+9ba60084bf93 | 2026-04-30 11:34
+fix: require SmtpRelay.php before StudentEmail.php in partage/index.php
+
+---
+cb883ab33f61 | 2026-04-30 11:27
+fix: deploy-server.sh migrates posterg.db → xamxam.db and cleans legacy nginx configs
+
+---
+ab51bf3a6615 | 2026-04-30 11:11
+fix: deploy-server.sh cleans up legacy posterg configs and prunes old xamxam backups
+
+---
+68e30abb5673 | 2026-04-30 11:10
+fix: remove Post-ERG branding → XAMXAM; drop legacy posterg nginx symlink in deploy script; rename posterg.db → xamxam.db
+
+---
+c949cf948170 | 2026-04-30 10:50
+rename posterg → xamxam throughout: nginx conf, scripts, PHP source, docs
+
+---
+3e35bbc40f4c | 2026-04-30 00:03
+style: align mobile nav dropdown links left
+
+---
+471c89263836 | 2026-04-30 00:03
+style: larger mobile nav dropdown links
+
+---
+42286b1b7152 | 2026-04-30 00:03
+Header link modification
+
+---
+671cfb6d83ec | 2026-04-29 22:13
+fix: hamburger dropdown not showing — reset display:none at mobile breakpoint
+
+---
+11f429eb7243 | 2026-04-29 22:12
+feat: pure-CSS hamburger menu for public nav (≤640px)
+
+---
+c27ffafa7edd | 2026-04-29 21:58
+fix: add missing favicon tags to partage/index.php (error, password gate, form)
+
+---
+80b7fddea43f | 2026-04-29 21:54
+fix: partials must not unset caller-owned $formData
+
+fieldset-academic.php, fieldset-metadata.php and fieldset-licence-explanation.php
+were each calling unset($formData) (or wrong variable) in their cleanup block,
+destroying the variable in the parent renderShareLinkForm() scope.  This caused
+an Undefined variable / TypeError on old($formData, ...) for any field rendered
+after those partials (e.g. confirmation_email at line 328).
+
+Fix: remove $formData from the unset() calls; fieldset-licence-explanation.php
+was also unsetting the wrong name — corrected to unset($n) which is the variable
+it actually declares.
+
+---
+992f74b31cfd | 2026-04-29 21:47
+fix: prevent jury-fieldset partial from calling old() with wrong arity in partage context
+
+Drop '?: null' coercions on juryPresident/juryPromoteur seeding in partage/index.php
+so they are '' (not null), making the partial's $addMode guard false and skipping the
+single-arg old() call that clashes with partage's 3-arg old() signature.
+
+---
+43702542ebdd | 2026-04-29 21:44
+feat(admin): sortable form-help blocks with two-panel UI
+
+- Migration 005: add sort_order column to form_help_blocks
+- Database: getAllFormHelpBlocks orders by sort_order; new reorderFormHelpBlocks()
+- actions/form-help-reorder.php: HTMX POST handler, CSRF-validated, 204 response
+- templates/admin/contenus.php: replace flat table with two-panel layout
+  - Left: SortableJS 1.15.2 + htmx drag-and-drop ordered block cards
+  - Right: static form structure reference showing fieldsets and their inputs
+- admin.css: .fhb-* styles for layout, cards, ghost/chosen/drag states, anchors
+- schema.sql: updated form_help_blocks DDL with sort_order column
+
+---
+5c39e856a352 | 2026-04-29 21:34
+fix: pass enabledAccessTypes from ThesisEditController to edit view
+
+---
+885150ea45d3 | 2026-04-29 21:33
+css: centralise semantic element baseline styles in common.css
+
+---
+b5189c0d089f | 2026-04-29 21:18
+admin: merge acces-etudiante+file-access into acces.php, absorb system.php into parametres.php
+
+---
+670a38f30da4 | 2026-04-29 21:08
+add form help blocks: DB table, admin editor, live rendering in partage form
+
+---
+0437ec8d1567 | 2026-04-29 21:05
+fix: escape apostrophe in FORM_HELP_LABELS string (Database.php:2005)
+
+---
+d665cb502dde | 2026-04-29 20:59
+centralise form fieldsets into shared partials; add TODO stubs in partage form
+
+---
+0628efbba37f | 2026-04-29 20:47
+Updated the README
+
+---
+89de6dd748d0 | 2026-04-28 22:21
+Removed the test csv
+
+---
+18a02a0018a5 | 2026-04-28 22:21
+deploy: rename deploy path from /var/www/posterg to /var/www/xamxam
+
+---
+cd68e6e9d7d4 | 2026-04-28 22:12
+deploy: exclude posterg.db, theses/, covers/ from rsync to avoid overwriting remote data
+
+---
+59c4cf055f5d | 2026-04-27 21:32
+smtp-test: bypass DB, use POST fields directly for credentials
+
+---
+9ff8b1b4642b | 2026-04-27 21:16
+fix: call RateLimit::checkKey() as instance method in request-access.php
+
+---
+e09b0561156f | 2026-04-27 21:11
+fix: iframe for PDF display, exclude cover files from public loop, no session on media requests
+
+---
+46a3c360ecf6 | 2026-04-27 21:06
+fix: use local storage/ in dev, create upload dirs, gitignore uploads
+
+---
+48059c23175e | 2026-04-27 21:03
+fix: serve logs, formulaire.php error_log path, CSRF debug, undefined $redirect
+
+---
+32a75095987f | 2026-04-27 20:41
+feat: add file display to forms and recap pages
+
+- Live file preview on all file inputs (file-field partial, edit template):
+  thumbnails for images, emoji icons for PDF/video/zip/vtt, filename + size
+- New file-preview.js wired via $extraJs in add.php / edit.php and direct
+  <script> in partage/index.php; $extraJs support added to head.php
+- admin/recapitulatif.php: replace plain table with rich file list — image
+  thumbnails linked to media.php, type badges, human-readable size, date
+- partage/recapitulatif.php: full rewrite — shows thesis metadata + files
+  list with same rich display (no media links for student privacy)
+- form.css: new sections for .file-preview-list (live preview) and
+  .recap-file-list / .recap-dl / .partage-recap (recap pages)
+
+---
+aca7e7eef8e6 | 2026-04-27 20:40
+rename thanks.php to recapitulatif.php in admin and partage
+
+---
+4d88bd8cc5ab | 2026-04-27 20:38
+edit.php: rework Fichiers fieldset layout
+
+- Drop file-field.php partial for cover/banner (it added a second label)
+- Inline all three file inputs with admin-file-input wrapper
+- Move banner inside the Fichiers fieldset
+- Each entry: one label, one input, one small hint — no duplicate labels
+- Context-aware hints: 'Laisser vide pour conserver...' when file already exists
+
+---
+8e864fc62482 | 2026-04-27 20:33
+admin edit.php: add cover image + thesis file management fields
+
+- Database: add deleteThesisFile() and handleCoverUpload() methods
+- ThesisEditController::load(): expose currentFiles + currentCover to view
+- ThesisEditController::save(): handle couverture upload/removal,
+  per-file deletion (delete_files[]), and new thesis file uploads
+- edit.php template: new Fichiers fieldset with cover preview+remove,
+  existing files list with delete checkboxes, new file upload input
+  (mirrors add.php / partage.php)
+
+---
+27e1b6828d57 | 2026-04-27 20:12
+Implement TFE file access restriction feature (complete)
+
+Requirements:
+- parametres.php toggle: 'restricted_files_enabled' enables/disables the feature
+- Public TFE page: when enabled + access_type=Interne, hides files, shows French
+  restriction message + access request form (metadata/synopsis still visible)
+- ERG emails (@erg.school / @erg.be): auto-approve, send 24h access link immediately
+- External emails: show justification textarea, create pending request, notify admin
+- Admin panel /admin/file-access.php: approve/reject requests with optional notes,
+  sends access email on approval (linked from admin nav with pending count badge)
+
+Security:
+- One-time 24h email tokens (used_at + is_valid=0 on first click)
+- Token redeemed via POST /validate-access (GET shows confirmation page only)
+- Long-lived 30-day browser session in file_access_sessions table
+- Cookie: HttpOnly + Secure + SameSite=Strict
+- CSRF on all mutations, rate limiting on request submission
+- Audit trail: IP, UA, event, timestamp in file_access_audit
+
+Bug fixes:
+- admin/file-access.php: $vars never extract()ed → page was blank
+- Template had self-contained head/footer includes (double-include)
+- Admin approval URL used $requestId instead of $request['thesis_id']
+- App::boot() now starts session so CSRF token works on public pages
+- Dispatcher routes /validate-access and /request-access through front controller
+
+---
+5c776dd39e48 | 2026-04-27 19:30
+Updated gitignore to keep cache folder but exclude rate_limit logs
+
+---
+d2d54b577a0c | 2026-04-27 19:30
+Added cache folder to gitignore
+
+---
+88b9f341cd57 | 2026-04-27 18:31
+Replace Posterg branding with XAMXAM in all user-facing content
+
+---
+7e26351f4b05 | 2026-04-27 18:07
+refactor: remove test.db, use only posterg.db for all environments
+
+- Simplified Database.php determineDatabasePath to always use posterg.db
+- Removed test.db auto-detection based on php_sapi_name
+- Removed test.db targets from justfile (migrate-test removed)
+- Removed CreateTestDatabase.php fixture script
+- Updated migrate.sh to only init posterg.db
+- Updated setup-dev.sh to init posterg.db
+- Updated run-tests.php (removed DB_ENV=test env var)
+- Updated deploy-db to use posterg.db
+- Removed test.db file
+
+refactor: remove empty fixtures directory
+
+---
+780105eec025 | 2026-04-25 19:20
+Fix storage/cache ignore path and untrack cache files
+
+---
+209dc86990ae | 2026-04-25 19:20
+Added the cache folder wildcard
+
+---
+54ef24d21f4a | 2026-04-24 22:48
+ignore *.db files, fix thesis identifier to use max seq instead of count, untrack .db files
+
+---
+4986fa74f40a | 2026-04-24 16:55
+add structured logging for admin/partage form submissions + migration system
+
+
+- AppLogger: JSON-line logger in storage/logs/form-submissions.log
+- Logs submissions (admin + partage) with IP, UA, thesis ID, author
+- Logs errors with context (post keys, share slug)
+- Migration runner (app/migrations/run.php) handles schema drift
+- 001_add_objet_column.sql fixes production DB missing 'objet' column
+- ThesisCreateController::getIdentifier() helper for logging
+
+---
+decb9e29076e | 2026-04-24 13:38
+fix: replace mb_strlen/mb_substr in student-preview.php (mbstring unavailable)
+
+---
+9b4cb52617e2 | 2026-04-24 13:32
+fix: replace mb_strtolower with strtolower in admin import (mbstring unavailable in php8.4-fpm)
+
+---
+769beae4ee48 | 2026-04-24 13:27
+fix: drop hx-trigger once — rely on browser cache for dedup
+
+---
+743268cf1b0e | 2026-04-24 13:27
+fix: drop hx-trigger once — rely on browser cache for dedup
+
+---
+6eb111a6ab7e | 2026-04-24 13:20
+perf: htmx lazy popover with Cache-Control — no pre-render, images load on hover only
+
+---
+e590d8e0351a | 2026-04-24 13:17
+perf: pre-render student popover cards server-side into <template> tags — zero per-hover requests
+
+---
+53c3127140b2 | 2026-04-24 13:13
+feat: student name popover preview on /repertoire via htmx
+
+---
+ede53746ba3b | 2026-04-24 13:11
+feat: student name popover preview on /repertoire via htmx
+
+---
+d961f9533c2c | 2026-04-22 14:06
+feat: add objet field (tfe/thèse/frart) with share-link restriction and site-settings toggles
+
+---
+dbaabaf8a058 | 2026-04-22 11:30
+merge all migrations into schema.sql
+
+---
+38031374c1c8 | 2026-04-22 11:23
+fix(partage): smtp view missing in schema + thanks redirect broken
+
+- Add v_smtp_active VIEW to schema.sql (was only in migration 012,
+  causing SmtpRelay::isConfigured() to always return false on fresh installs)
+- Change thanks redirect from /partage/thanks.php to /partage/thanks
+  (nginx 'location ~ \.php$ { deny all }' blocked the .php URL)
+- Route /partage/thanks in index.php before slug validation
+- Guard App::boot() in thanks.php to avoid double-boot when included
+
+---
+95bce2bbad0d | 2026-04-22 11:18
+Extract form CSS into form.css; scope system.css to system.php only
+
+---
+d82556c59679 | 2026-04-22 11:10
+Unify form CSS: move licence/share-badge styles to admin.css, remove inline style from partage form
+
+---
+057d2539eb3a | 2026-04-22 10:58
+SmtpRelay: parse EHLO caps, prefer AUTH PLAIN over AUTH LOGIN
+
+---
+a3849a8e6993 | 2026-04-22 10:53
+SmtpRelay: replace mail() stub with native socket SMTP client
+
+---
+b448d0d40c24 | 2026-04-22 10:45
+Lock body scroll: only main/inner elements scroll on admin and public pages
+
+---
+5a58eefe66be | 2026-04-22 10:40
+feat(admin): add SMTP test email button on parametres page
+
+---
+4839b568deba | 2026-04-21 21:49
+Separate admin views from controllers — move HTML to templates/admin/
+
+All admin pages refactored to thin controllers + pure view templates, mirroring
+the public-page pattern:
+
+Controllers (public/admin/*.php): auth, data loading, include template
+Views (templates/admin/*.php): pure HTML/PHP output
+Fragment partials (templates/admin/partials/): toast, system-log-panel, system-nginx-config-panel
+
+Pages migrated: login, tags, contenus, contenus-edit, account, acces-etudiante,
+thanks, add, edit, parametres, system, index
+
+Fragment endpoints refactored: system-fragment.php, toast-fragment.php
+Skipped (pure redirects): logout, logs, status, import
+
+---
+362688c0faa7 | 2026-04-21 19:25
+fix: remove broken flash-messages include from admin footer; make repertoire columns scrollable
+
+---
+19ef2a11dca6 | 2026-04-21 19:16
+fix CSV importer AP/orientation name resolution + seed missing AP programs
+
+- migration 014: adds Récits et expérimentation (RE), PACS, sets code NS
+  on Narration Spéculative; applied to both posterg.db and test.db
+
+- importer (admin/index.php): replaced the code-only ap_programs lookup
+  (SELECT WHERE code=?) and the orientationMap short-code translation with
+  two resolver closures that handle the real CSV format (full names):
+
+  resolveAP(): alias map for L.I.E.N.S., case variants → exact name
+  match → code match (legacy) → case-insensitive name match
+
+  resolveOrientation(): legacy 2-letter code map → alias map for
+  Installation/Performance, Arts numériques, Design numérique →
+  exact name match → case-insensitive name match
+
+  All 5 AP values and 13 orientation values from the real CSV now
+  resolve to correct DB IDs. Legacy short-code CSVs (test.db format)
+  continue to work unchanged.
+
+---
+73fdda4a7fc9 | 2026-04-21 19:05
+fix repertoire AP/OR/FI columns and main scroll containment
+
+- repertoire-index.php: add $colHasMatches per-column guard.
+  Entries in a column are only faded when that column has at least one
+  matched entry in the current result set. When a dimension has no
+  matched entries (e.g. no thesis has orientation_id set yet), the
+  entire column stays fully interactive — all values remain clickable.
+  This fixes: empty columns, forced single-select, cascade fading.
+
+- Database.php: revert allAp/allOr/allFi to full lookup-table queries
+  so all known values are always shown (not just ones linked to theses).
+
+- common.css: body is now a flex column; main gets flex:1 + min-height:0;
+  header-search-wrap gets flex-shrink:0; duplicate html/body blocks merged.
+- public.css: removed redundant top-level main block; home-main gets min-height:0.
+- repertoire.css: search-main gets min-height:0 for proper flex scroll.
+
+---
+78449afe641f | 2026-04-20 16:48
+some css changes
+
+---
+1b02ccb1d5b3 | 2026-04-20 16:19
+fix: mark languages as required, add required-field visual indicators on both forms
+
+- checkbox-list.php: support $required prop → adds required + aria-required on fieldset
+- add.php: languages checkbox now marked required (matches server-side validation)
+- partage/index.php: same for student form
+- admin.css: dashed border on required inputs, bold labels, red asterisk via :has(), "Champs obligatoires" note
+- Both forms now show "* Champs obligatoires" note at top
+
+Server-side required fields = titre, auteurice, synopsis, année, orientation, ap, finality, languages (≥1), access_type_id, confirmation_email. All now have required attribute + visual asterisk.
+
+---
+e21a4d81a2c3 | 2026-04-20 15:02
+refine: required confirmation_email field on both student forms, StudentEmail uses it directly
+
+- Add dedicated 'confirmation_email' (type=email, required) field
+  to student form at end of submission (partage + admin).
+- ThesisCreateController now validates it is present and a valid
+  email; form is rejected if missing/invalid.
+- Autofocus mapping for confirmation_email errors.
+- StudentEmail uses confirmation_email directly (removed extractEmail
+  hack that mined email from free-form contact field).
+
+---
+fa75ca4a65f4 | 2026-04-20 14:23
+fix: inline getDatabasePath into Database.php, delete config/config.php
+
+- Remove require_once for config/config.php (file was never deployed — outside app/)
+- Inline DB path resolution directly in Database::determineDatabasePath()
+- Uses APP_ROOT when defined (bootstrap already loaded), falls back to __DIR__/../
+- DB_ENV=test|prod env-var override preserved for tests
+- php -S cli-server -> test.db, nginx/fpm -> posterg.db
+
+---
+468278349adb | 2026-04-20 14:13
+fix: router.php — bypass admin requests to front controller
+
+---
+033599aa36b5 | 2026-04-20 14:12
+fix: config/config.php — correct DB paths to app/storage/, add test.db for dev
+
+---
+5af31acedaaa | 2026-04-20 14:11
+fix: Database.php require_once -> resolve config.php from app/src/
+
+---
+de2e7a61ee6f | 2026-04-20 12:41
+feat: single entry point routing — convert to front controller pattern
+
+- Create app/public/index.php as front controller (bootstrap + Dispatcher)
+- Rewrite app/router.php for PHP dev server → all non-asset requests to index.php
+- Update Dispatcher to render full page layouts (head+header+view+footer)
+- Move public view templates into templates/public/ (home, search, tfe, about, repertoire)
+- Delete dead direct-access public/*.php files (apropos, search, tfe, licence, repertoire)
+- Add clean URL routes to Dispatcher (/search, /tfe, /repertoire, /apropos, /licence, /media)
+- Remove .php extensions from all internal links (header, views, templates, URLs)
+- Update OG tags in controllers to use clean URLs
+- Update nginx posterg.conf → front-controller try_files pattern, block direct .php access
+- Update header.php and search-bar.php form actions to clean URLs
+- Switch AboutController nav key from 'nav' to 'currentNav' for consistency
+
+---
+75f808bee4bd | 2026-04-17 11:44
+feat: extract MediaController, wire into Dispatcher, delete media.php
+
+---
+b03be51b92df | 2026-04-16 14:45
+feat: migrate admin system page to HTMX with tab-based navigation and log viewer
+
+---
+05002ccee459 | 2026-04-16 14:33
+fix: allow isAuthenticated() bypass in development mode
+
+---
+bf30aab0b3d7 | 2026-04-16 13:44
+migrate apropos data from config/apropos.php to SQLite
+
+- Create apropos_contents table via migration 010
+- Add Database methods: getAproposContent(), saveAproposContent(), getAllAproposContents()
+- Replace admin/pages.php with admin/contenus.php (renamed header from 'Pages statiques' to 'Contenus')
+- Replace admin/pages-edit.php with admin/contenus-edit.php (support editing pages + apropos contents)
+- Create admin/actions/apropos.php for saving apropos data (contacts, credits, erg_url)
+- Update public/apropos.php to read contacts/credits/erg_url from DB
+- Delete config/apropos.php
+
+---
+4158c72d0862 | 2026-04-16 13:03
+admin: replace header 'Ajouter un TFE' nav link with toolbar button
+
+---
+e70a65ffb66a | 2026-04-16 12:56
+fix: session boot on POST path, consolidate rate limiter via checkKey()
+
+---
+a6df3c8c0e34 | 2026-04-16 12:00
+fix: /partage/<slug> routing (regex delimiter + nginx location)
+
+---
+b7be93e30bc2 | 2026-04-16 11:50
+Security: rate limiting and flash messaging for partage share links
+
+- Add rate limiting (5 submissions per IP per 10 min, per share link)
+  to prevent abuse of shared submission endpoints
+- Replace all plain die() error responses with styled flash messages
+  and redirects (invalid slug, disabled link, expired link, wrong password,
+  rate limit exceeded, CSRF failure)
+- Add dedicated error page renderer for disabled/expired links with
+  home page link
+- Password gate now uses flash message via session redirect instead
+  of inline error variable
+
+---
+150099dc3ce5 | 2026-04-16 11:50
+admin: replace header 'Ajouter un TFE' nav link with toolbar button
+
+---
+c4705f6265bc | 2026-04-15 14:17
+docs: add bookmarklet for auto-filling TFE test form
+
+- bookmark.md with draggable link + readable source + lookup table reference
+- all field selectors match actual form name attributes and schema IDs
+
+---
+f4aba500e69a | 2026-04-15 13:49
+feat: student mode support for thanks page (admin-auth only)
+
+- add hidden student_mode field in add.php form
+- pass mode=student through redirect to thanks.php in formulaire.php
+- thanks.php renders clean student thank-you page (no header, centered button)
+- add CSS for .thanks-student-page, .btn-new-form, .thanks-success, .thanks-error
+- admin auth always required; student mode is purely UI variant on the physical machine
+
+---
+c3affd22851f | 2026-04-15 13:43
+admin/add: add ?mode=student toggle — hides admin header, keeps admin form css
+
+---
+150b5b1dacac | 2026-04-15 13:42
+admin/add: add ?mode=student toggle — hides admin header, keeps auth
+
+---
+0eb2e310f444 | 2026-04-15 13:28
+admin/parametres: cleanup page — remove card syntax, use semantic HTML (checkboxes/fieldsets), move delete-all-TFE danger zone into maintenance
+
+---
+fd4fb5ce4a90 | 2026-04-15 12:58
+Add delete/batch-delete and sortable columns to admin list
+
+- Database: add deleteThesis() and bulkDeleteTheses() methods with file cleanup
+- Database: add SORT_MAP + buildOrderBy() for safe column sorting
+- Database: getThesesList() now respects sort/dir filter params
+- New action: actions/delete.php (single + batch delete with CSRF)
+- Admin index: delete button per row with confirmation dialog
+- Admin index: batch 'Supprimer' button in bulk actions bar
+- Admin index: sortable column headers (ID, Titre, Année, Orientation, AP, Statut)
+- Admin index: sort state preserved in pagination links
+- CSS: admin-btn-delete (red muted), admin-sort-link styles
+
+---
+1b104df51eca | 2026-04-15 12:55
+Fix undefined $from– variable: brace-interpolate variables before en-dash in double-quoted string
+
+---
+6f04514aa268 | 2026-04-15 12:51
+fix: add structural guard for migration 008 in migrate.sh
+
+---
+0cb4451218bc | 2026-04-15 11:57
+formulaire: default interne, unpublished, contact toggle, settings section
+
+---
+67a4aaac26a0 | 2026-04-15 10:58
+Fix nginx deduplication: remove nginx/scripts/ entirely, fix README typos and dead references
+
+---
+507f3eb70454 | 2026-04-15 10:58
+Consolidate nginx docs and scripts, update paths
+
+---
+3cd96ed28a70 | 2026-04-14 18:25
+Deduplicate and standardise documentation
+
+- Consolidate 36 markdown files → 14 (plus TODO.md)
+- Merge overlapping docs into authoritative files:
+  - database.md (from DATABASE_SPECIFICATION + QUICK_SCHEMA_REFERENCE + DATABASE_CONFIG + SETUP)
+  - deployment.md (from SERVER_SETUP + COMPLETE_DEPLOYMENT_GUIDE + DEPLOYMENT_STEPS)
+  - security.md (from SECURITY_ANALYSIS + TODO.SECURITY)
+  - development.md (from DEVELOPMENT_GUIDE + LIVE_RELOAD_SETUP + TEST_CENTRALIZATION)
+  - migration-history.md (from 11 past migration docs)
+- Standardise all filenames to lowercase
+- Remove non-doc files (Context.md research notes, chat export)
+- Remove superseded docs (SECURITY.md pre-SQLite, SECURITY_IMPLEMENTATION, README_SECURE_SEARCH)
+- Fix stale cross-references
+
+---
+5c5054d74426 | 2026-04-13 11:10
+Investigating VM crash
+
+---
+0c29fa21e905 | 2026-04-09 14:37
+Prevent admin nav wrapping to match public header height
+
+---
+c5c049eace85 | 2026-04-09 14:37
+Move public search bar below header so admin and public headers have same height
+
+---
+1885f2da92c0 | 2026-04-09 14:34
+Replace random HSL gradients in homepage cards with header-style gradient; header keeps its own CSS-variables gradient
+
+---
+aa3fc50d927e | 2026-04-09 14:33
+use exact hard-coded gradient on header and card placeholders
+
+---
+a13e73aed3e4 | 2026-04-09 14:29
+Replace random HSL gradients in homepage cards with header gradient
+
+---
+07f0afde252b | 2026-04-09 14:07
+cache-bust: add filemtime-based versioning to all CSS and JS assets
+
+---
+424f79c8197a | 2026-04-08 18:07
+typography: switch display font from Combined to Ductus
+
+---
+a333a5fdade0 | 2026-04-08 18:04
+Rebrand: replace PostErg with XAMXAM in admin header link, default title, and OG site_name
+
+---
+18045af243b1 | 2026-04-08 18:01
+favicon: replace SVG placeholder with full PNG/ICO set from assets/favicon/
+
+---
+d68645f1b108 | 2026-04-08 17:49
+style: retheme system page to site light palette — remove dark --sys-* tokens
+
+---
+df414346e939 | 2026-04-08 17:46
+fix: SystemController php-fpm detection — probe phpX.Y-fpm from running PHP version first
+
+---
+7117934d07f3 | 2026-04-08 17:42
+fix: replace mb_strlen/mb_substr with strlen/substr — mbstring not available on prod
+
+---
+9eec5d3ac04c | 2026-04-08 16:03
+SPECS.md
+
+---
+49b113319ac4 | 2026-04-08 15:17
+Add AP filter to admin list; fix reset as unstyled button
+
+---
+4199b206db05 | 2026-04-08 15:12
+Move CSV import to inline dialog on list page
+
+---
+603af07b68f9 | 2026-04-08 15:06
+Add Paramètres page: consolidate maintenance + account settings
+
+---
+ba135f0cb509 | 2026-04-07 15:20
+fix: replace 'Xamxam' with 'Posterg' in public nav header
+
+---
+f6977384b97a | 2026-04-07 15:13
+migrate to utopia fluid type and space scales across all CSS
+
+---
+ad06bbbcaf14 | 2026-04-07 15:03
+bump all font-size values ~10% across all CSS files
+
+---
+0c2276d5ad14 | 2026-04-07 15:01
+Split search into search.php; repertoire.php is index-only
+
+---
+e96ec572bef9 | 2026-04-07 14:38
+tfe: hyperlink metadata values to repertoire.php with correct filter params
+
+---
+55c6ac21b852 | 2026-04-07 14:37
+fix tfe page: scope common.css header to body>header, fix grid width collapse, remove overflow-y clip
+
+---
+3a1cd5b43e92 | 2026-04-07 14:29
+tfe page: author above title, interne/externe jury split, rounded images, strip contact protocol
+
+---
+547d581e2663 | 2026-04-07 14:25
+Removed footer navbar
+
+---
+11a665e096ca | 2026-04-07 14:21
+Improve À propos page layout: sticky TOC nav, bordered contact rows, credits dl grid
+
+---
+dddfc8554be0 | 2026-04-07 14:15
+fonts: add --font-body/--font-display vars, use them everywhere
+
+---
+797eaf87d1f1 | 2026-04-07 14:14
+Apply correct fonts: Combined for titles, BBBDMSans for body text
+
+---
+572ef75a1e6a | 2026-04-07 13:57
+répertoire: rename search.php, 6-column layout, HTMX filter, faded entries disabled, URL-shareable
+
+---
+088324cb804e | 2026-04-06 17:20
+Match Accueil.png mockup: nav layout, full-width search, section label
+
+---
+8b27acec2754 | 2026-04-06 17:09
+fix homepage card grid styling: gaps, borders, rounded corners, gradient aspect-ratio
+
+---
+0bfb24723f17 | 2026-04-06 16:57
+fix(font): rebuild Combinedd.otf with sorted kern pairs to fix browser discard
+
+---
+b8e94f1b6b69 | 2026-04-06 16:54
+fix(css): add format hint + descriptors to @font-face for police1/Combinedd.otf
+
+---
+b45e6c50cc55 | 2026-04-06 16:49
+fix: admin CSP allow inline scripts
+
+script-src 'self' 'unsafe-inline' added to admin Content-Security-Policy.
+default-src 'self' was blocking OverType editor init block and
+the dev live-reload poller. Admin section is auth-gated so
+unsafe-inline is acceptable.
+
+---
+e6960f0c9c04 | 2026-04-06 16:40
+fix: RateLimit permission denied — code + deploy scripts
+
+RateLimit.php:
+- Silence mkdir() with @ operator
+- Guard file_put_contents with is_writable() check (graceful degrade)
+
+scripts/deploy-server.sh + setup-server.sh:
+- mkdir -p storage/cache/rate_limit on every deploy
+- chown www-data:posterg + chmod 2775 on storage/cache/
+  so php-fpm can always write rate limit files
+
+---
+756ddb576545 | 2026-04-06 16:39
+fix: RateLimit graceful degradation on permission denied
+
+Silence mkdir() with @ operator; guard file_put_contents with
+is_writable() check. When storage/cache/rate_limit is not writable
+by php-fpm, requests are allowed through instead of throwing
+warnings that flood the nginx error log.
+
+---
+6a1b41ac9376 | 2026-04-06 16:16
+css: remove dark mode, unify token system, eliminate all hardcoded colors
+
+- Remove @media (prefers-color-scheme: dark) block from variables.css
+- Delete colors.css (dead reference doc, never loaded)
+- Add semantic tokens to variables.css:
+    --header-gradient-fade, --header-shadow-strong/soft, --header-nav-active-border
+    --search-error-bg/border/color
+    --sys-bg-surface/deep/panel, --sys-border/border-deep/border-hover
+    --sys-text-dim/bright/body, --sys-overlay, --sys-syntax-* (7 highlight tokens)
+    --success/warning/error/blue/yellow/green -muted-bg/border/hover alpha overlays
+    --danger-border-muted
+- Replace all hardcoded hex/rgba in common.css, main.css, search.css, admin.css, system.css
+- Fix --border-color typo -> --border-primary in search.css
+- Fix view-toggle__btn active color: --text-primary -> --accent-foreground
+- Admin and public share identical token set, no separate admin theme
+- Update README.md
+
+---
+e73fcfd0c850 | 2026-04-06 16:11
+fix: drop curl_close() call (deprecated PHP 8.5, no-op since 8.0)
+
+---
+9a9dfd2b9e9a | 2026-04-06 15:26
+fix(apropos): replace straight apostrophe in l'ERG role string (parse error)
+
+---
+f6e2c77d1a26 | 2026-04-06 15:25
+Adjusting admin static pages edit page
+
+---
+480451aa2b76 | 2026-04-06 15:19
+replace EasyMDE (333KB) with OverType (118KB) in pages-edit.php
+
+- Remove easymde.min.js (320KB) and easymde.min.css (13KB)
+- Vendor overtype.min.js (118KB, v2.3.5)
+- Replace <textarea name=content> + 60-line toolbar/SVG init with:
+  - <input type=hidden name=content> for form submission
+  - <div id=editor> as OverType mount target
+  - 6-line init: value from hidden input, onChange syncs it back
+- Net saving: ~215KB assets, ~54 lines of inline JS
+
+---
+d51cd62088ed | 2026-04-06 15:09
+Extract last inline style from header.php into admin.css
+
+The SVG icon in the admin nav's public-site link had two inline styles:
+  style="vertical-align:middle;margin-right:0.4em"
+
+Moved to a new CSS rule:
+  .admin-body header nav > a svg { vertical-align: middle; margin-right: 0.4em; }
+
+templates/header.php now contains zero style= attributes.
+The only remaining inline styles project-wide are:
+  - dynamic gradient (hsl computed from $item['id']) in public/index.php — legitimately dynamic
+  - --disk-pct/--disk-color custom properties in system.php — carry PHP runtime values
+
+---
+a60e742d1a20 | 2026-04-06 15:06
+Extract last 3 inline styles from admin templates into CSS classes
+
+admin/thanks.php:
+- <div style="margin-top:1.5rem;display:flex;gap:.75rem;flex-wrap:wrap;"> → class="admin-action-bar"
+- <p style="color:var(--text-secondary);"> → class="admin-muted"
+
+admin/pages.php:
+- Éditer button style="font-size:.8rem;padding:.3rem .75rem;" → class="admin-btn admin-btn--sm"
+
+admin.css (Thesis info sections block):
+- Added .admin-action-bar { margin-top:1.5rem; display:flex; gap:0.75rem; flex-wrap:wrap }
+- Added .admin-muted { color: var(--text-secondary) }
+
+The only remaining inline style in any admin PHP file is the dynamic
+--disk-pct/--disk-color custom properties on the disk bar in system.php,
+which carry PHP runtime values and cannot be moved to static CSS.
+
+---
+ca8081575cbb | 2026-04-06 14:45
+Add prefers-color-scheme dark mode for public pages
+
+Scope: variables.css, search.css, todo/04-accessibility.md
+
+- variables.css: add @media (prefers-color-scheme: dark) block scoped to
+  body:not(.admin-body); overrides all semantic tokens with dark equivalents:
+  --bg-* (#111→#333 range), --text-* (#eee/aaa/777),
+  --border-* (#333/#444), --accent-primary lightened to #b87fd4
+  (4.5:1 contrast on #111 background), --accent-secondary stays #9557b5,
+  --accent-foreground flipped to #111111 for dark buttons,
+  --accent-muted adjusted to rgba(184,127,212,0.15),
+  status colours muted for dark (success #4db886, error #e05555,
+  warning #d4a830); new --search-error-{bg,border,color} tokens added
+  to :root (light: #fff0f0/#c00) and overridden in dark (#2a1515/#e05555)
+
+- search.css: replace three hardcoded hex values in .search-error rule
+  with var(--search-error-bg/border/color) so dark mode applies cleanly
+
+- Admin pages are entirely unaffected: .admin-body body class is excluded
+  from the dark-mode selector; system.css already has its own dark palette
+
+---
+2841e057168a | 2026-04-06 14:37
+Extract ThesisCreateController; add Database publish methods
+
+Consolidate action handlers into controller methods (todo/02-php-components.md).
+
+src/ThesisCreateController.php (new, 435 lines)
+  Mirrors ThesisEditController for the add-thesis flow.
+
+  make()           — factory; instantiates Database via new Database()
+  loadFormData()   — returns all lookup tables needed by admin/add.php
+                     (orientations, apPrograms, finalityTypes, languages,
+                      formatTypes, licenseTypes)
+  submit(post, files) — full new-thesis creation pipeline:
+    1. validateAndSanitise() — trims/strips HTML, validates required fields,
+       year range, orientation/ap/finality IDs, language selection, max-10
+       keywords, URL format; throws named Exception on failure
+    2. findOrCreateAuthor() — reuses existing DB method
+    3. Transaction: createThesis + setThesisJury + setThesisLanguages +
+       setThesisFormats + setThesisTags; rolls back on any failure
+    4. File uploads outside transaction: cover image (JPG/PNG only, stored in
+       storage/covers/), banner via handleBannerUpload(), thesis files
+       (PDF/JPG/PNG/MP4/ZIP/VTT, stored in storage/theses/YEAR/IDENT/,
+       file_type auto-detected: caption/annex/main/other)
+  autofocusFieldForError() — static; maps exception messages to field names
+    for WCAG 3.3.1 autofocus on re-render (same contract as
+    ThesisEditController::autofocusFieldForError)
+
+admin/actions/formulaire.php  346 → 45 lines
+  Now: bootstrap + CSRF guard + ThesisCreateController::make()->submit() +
+  flash/redirect on error. All validation, DB logic, and file handling removed.
+
+admin/add.php
+  Lookup-table block (new Database() + 6 individual DB calls) replaced with
+  ThesisCreateController::make()->loadFormData() + extract().
+
+src/Database.php — two new methods added
+  setPublished(int , bool ): void
+    UPDATE theses SET is_published = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?
+  bulkSetPublished(int[] , bool ): void
+    Same but with an IN (...) clause for multiple IDs
+
+admin/actions/publish.php  100 → 65 lines
+  Raw SQL (->prepare('UPDATE theses SET is_published = ?...')) replaced
+  with ->setPublished() / ->bulkSetPublished(). No raw PDO calls remain
+  in any action handler file.
+
+---
+b1e70a2bf12e | 2026-04-06 14:29
+Extract HomeController from public/index.php
+
+Move all data-fetching and view-variable assembly out of public/index.php
+into a new src/HomeController.php, following the same pattern as
+SearchController, TfeController, SystemController, and ThesisEditController.
+
+HomeController::create() builds the Database singleton dependency.
+HomeController::handle() encapsulates:
+- GET param parsing (page, year) with safe type coercion
+- Display-mode detection: default random-latest view / year-filtered /
+  paginated-all theses
+- All DB calls: getLatestPublishedYear, getLatestYearTheses, searchTheses,
+  countSearchResults, getPublishedTheses, countPublishedTheses,
+  getCoverPathsForTheses, getAvailableYears
+- Batch cover-image loading for theses without a banner_path
+- baseParams assembly for the pagination partial
+- OG / meta tag array construction
+- Graceful error handling (logs exception, returns safe empty state)
+- Returns a flat array of view variables
+
+public/index.php is now a 6-line dispatcher (require + create + handle +
+extract) followed by a pure view template. Reduced from 100 to 71 lines.
+All error-handling and data logic removed from the view layer entirely.
+
+---
+89067a521fe0 | 2026-04-06 14:25
+Extract TfeController from public/tfe.php
+
+src/TfeController.php (new, 195 lines):
+- Dedicated controller for the public TFE detail page
+- create(): Database singleton injection, ready-to-use factory
+- handle(): validates id param (redirect to index.php on missing/invalid/404),
+  loads thesis via getThesisById(), fetches access type via getThesisAccessTypeId()
+- buildMetaDescription(): strip_tags + 160-char mb_substr truncation
+- resolveOgImage(): banner_path → first image file → empty string resolution
+- buildOgTags(): full og:type/title/description/url/image/image_alt/site_name +
+  article:author / article:published_time assembly
+- collectCaptionPaths(): ordered list of VTT paths for N-th-video pairing
+- returns flat array of all view variables including ogTags, captionFiles,
+  pageTitle, metaDescription, isInterdit, bodyClass, extraCss, currentNav
+
+public/tfe.php (271 → 206 lines):
+- Reduced to 9-line dispatcher: require TfeController, create(), handle(), extract()
+- $db reference removed from view layer entirely
+- Inline OG tag block (~20 lines) removed
+- Inline meta-description block (~5 lines) removed
+- Inline caption-collection loop (~10 lines) removed
+- $captionFiles replaces $_captionFiles in the video pairing section
+
+todo/02-php-components.md:
+- TfeController extraction marked done
+- 'Move OG tag construction into controller logic' marked done
+- Remaining item narrowed to public/index.php home-page controller
+
+---
+41629398d321 | 2026-04-05 19:17
+Extract ThesisEditController from admin/edit.php and actions/edit.php
+
+src/ThesisEditController.php (285 lines) centralises all data-fetching and
+mutation logic for the thesis-edit workflow:
+
+  load(int $thesisId): array
+    Fetches the thesis row, current language/format/jury selections, and all
+    lookup tables (orientations, AP programmes, finality types, languages,
+    formats, licences, access types) in one call.  Returns a flat view-variable
+    array that the dispatcher extracts directly.
+
+  save(int $thesisId, array $post, array $files): void
+    Runs the full edit inside a transaction: thesis metadata, authors, jury,
+    languages, formats, tags.  Banner upload/removal is handled outside the
+    transaction (filesystem op).  Rolls back and re-throws on any failure.
+
+  static autofocusFieldForError(string $msg): ?string
+    Centralises the WCAG 3.3.1 exception-message → field-name mapping that
+    was previously duplicated inline in actions/edit.php.
+
+Dispatcher changes:
+  admin/edit.php      191 → 162 lines  (pure view + ThesisEditController::create() + load())
+  actions/edit.php    153 →  53 lines  (CSRF guard + ThesisEditController::save() call)
+
+Follows the same pattern as SearchController and SystemController.
+
+---
+40cb119448ed | 2026-04-05 17:39
+Extract SystemController: centralise system page data logic, eliminate frag_ helper duplication
+
+- Add src/SystemController.php (452 lines) encapsulating:
+  - runStatusChecks(): nginx, php-fpm, HTTP ping, SQLite DB, storage, maintenance flag
+  - getStatusData() / getPhpInfo() / getDiskInfo() with SystemCache TTL delegation
+  - getLogData(tab, n): log file tail reading + file metadata
+  - getNginxConfigData(): live-then-local nginx config reading
+  - Static helpers: logLineClass(), nginxLineClass(), statusLabel(), statusClass(),
+    humanBytes(), diskColor() — shared by both entry points
+  - invalidateAll() for ?refresh=1 cache busting
+
+- Rewrite admin/system.php: 582 → 282 lines
+  - All free functions (safeExec, systemdStatus, localHttpCheck, humanBytes,
+    statusLabel, statusClass, logLineClass, nginxLineClass, readLogTail) removed
+  - Data sections replaced by controller method calls
+  - View template unchanged; now calls SystemController::statusClass() etc. directly
+
+- Rewrite admin/system-fragment.php: 213 → 137 lines
+  - All duplicated frag_readLogTail(), frag_logLineClass(), frag_nginxLineClass()
+    helpers removed
+  - Now instantiates SystemController and delegates getLogData()/getNginxConfigData()
+  - Identical rendering logic preserved; constant references updated to
+    SystemController::LOG_FILES and SystemController::ALLOWED_LINES
+
+No behaviour change; no CSS/JS changes.
+
+---
+9a58b97cb87c | 2026-04-04 12:39
+Extract SearchController from public/search.php
+
+Move all data-fetching and request logic out of the 285-line search page
+into src/SearchController.php:
+
+- SearchController::create() — static factory; builds RateLimit + Database
+  dependencies, sends HTTP 429 (and exits) if rate limit is exceeded,
+  runs probabilistic cleanup, returns ready instance
+- SearchController::handle() — sanitises GET params (query/year/orientation/
+  ap_program/keyword), runs all DB queries (searchTheses, countSearchResults,
+  getAvailableYears, getAllOrientations, getAllAPPrograms, getUsedTags,
+  getPublishedAuthors), builds alphabetical author→id map, assembles
+  OG/meta tags, returns a flat array of view variables
+- Rate-limit 429 HTML response moved into private sendRateLimitResponse()
+
+public/search.php is now a 6-line dispatcher:
+  require SearchController; extract(SearchController::create()->handle());
+followed by the unchanged view template (162 lines total, was 285).
+
+The view template is byte-for-byte equivalent: same HTML, same variable
+names, same pagination partial include.
+
+---
+c3a02e0aaa42 | 2026-04-04 12:36
+system.php: extract inline JS and style= attrs into separate assets
+
+Move the ~130-line $extraJsInline heredoc from admin/system.php into a
+static file public/assets/js/system.js, loaded via $extraJs so the
+template footer emits a normal <script src=…>.
+
+Replace 4 inline style= attributes with named CSS modifier classes in
+system.css:
+  - style="margin:0;border:none;padding:0" on .srv-section-title
+    → .srv-section-title--compact
+  - style="margin-bottom:.75rem" on sub-heading <h3>
+    → .srv-section-title--sub
+  - style="margin-bottom:0" on .php-grid
+    → .php-grid--flush
+  - style="font-size:.84rem;color:var(--text-secondary)" on <label>
+    → .log-toolbar label rule in system.css
+
+The one remaining inline style (--disk-pct / --disk-color CSS custom
+properties on .disk-bar) is intentionally kept: it carries PHP runtime
+values that cannot be expressed in a static stylesheet.
+
+---
+9637114f6ba5 | 2026-04-04 12:31
+Clean up flash key legacy code and extract import.php inline styles
+
+App::consumeFlash() had 18-line legacy fallback chains reading from seven old
+session keys (error, admin_error, edit_error, form_error, success,
+admin_success, edit_success) that were written by no code in the codebase.
+All action handlers have used App::flash() -> _flash_error / _flash_success
+since the App class was introduced. Removed the dead fallbacks; consumeFlash()
+is now 4 lines.
+
+admin/import.php was the last admin template with inline style= attributes.
+Extracted four of them to named CSS classes in admin.css:
+- admin-error-list   — error <ul> spacing (was style="margin:.5rem 0 0;padding-left:1.2rem")
+- admin-file-hint    — <small> display + margin (was style="margin-top:.5rem")
+- admin-import-results        — results panel margin (was style="margin-top:2rem")
+- admin-import-results__title — <h2> typography (was multi-property inline style)
+
+Closes the 'unify flash message keys' item in todo/02-php-components.md and
+the import.php inline style item in todo/01-css-semantic-refactor.md.
+
+---
+c2eff757897b | 2026-04-04 12:23
+WCAG 3.3.1: autofocus first invalid field on add/edit form validation failure
+
+Add App::flashAutofocus(fieldName) and consumeAutofocus() to the thin App
+helper so action handlers can identify which field caused a validation error
+and the form page can move browser focus directly to it on reload.
+
+Changes:
+- src/App.php — flashAutofocus() stores field name in _flash_autofocus
+  session key; consumeAutofocus() drains it and returns the name (or null)
+- actions/formulaire.php — catch block maps exception messages to field
+  names (auteurice, titre, synopsis, année, orientation, ap, finality,
+  languages, tag, lien) and calls App::flashAutofocus()
+- actions/edit.php — catch block maps common edit errors to field names
+  and calls App::flashAutofocus()
+- add.php — consumes the hint via App::consumeAutofocus() into
+  $autofocusField; withAutofocus() helper merges autofocus=>true into
+  $attrs for every field include; synopsis textarea gets inline autofocus
+- edit.php — same pattern with inline ternary merges and textarea autofocus
+- templates/partials/form/text-field.php — $attrs loop now emits bare
+  attribute names (no ="...") when value === true, supporting autofocus,
+  disabled, readonly etc. without special-casing
+- templates/partials/form/select-field.php — same boolean-attr support
+  added; $attrs variable initialised to [] when caller omits it
+
+Closes WCAG 3.3.1 autofocus item in todo/04-accessibility.md.
+
+---
+4c3f71b6e4c7 | 2026-04-04 12:05
+Extract apropos contacts/credits to config/apropos.php
+
+Names, roles, emails, and credits on the À propos page were hardcoded
+directly in apropos.php HTML. To update a contact meant editing a
+template file — risky for non-developers and easy to introduce a typo
+or broken mailto link.
+
+Changes:
+- config/apropos.php: new config array with erg_url, contacts[] (name,
+  role, email per person) and credits[] (label/value pairs); follows
+  the same pattern as config/admin_credentials.php
+- public/apropos.php: loads config via require; aside section now loops
+  over $apropos['contacts'] and $apropos['credits'] with htmlspecialchars
+  throughout; hardcoded HTML strings removed entirely
+
+Also audited todo/02-php-components.md and marked 8 stale items as done:
+all 5 form field partials were already implemented and in use, the
+flash-message consolidation was already handled by App::consumeFlash(),
+and the RateLimit cache dir was already at storage/cache/rate_limit
+(excluded from deploy rsync).
+
+---
+94e9060dc72c | 2026-04-03 13:24
+WCAG 4.1.2: add WebVTT caption support for <video> elements on tfe.php
+
+Problem: <video> elements on tfe.php had no <track kind="captions"> element,
+violating WCAG 4.1.2 (name, role, value) for video content.
+
+Changes:
+- public/tfe.php: collect all text/vtt files from the thesis file list before
+  rendering; skip standalone rendering of .vtt entries; for each MP4 emit a
+  <track kind="captions" srclang="fr" label="Sous-titres" default> pointing
+  to the N-th VTT file (N-th video paired with N-th caption in document order)
+- public/media.php: add text/vtt to allowed MIME list; normalise finfo
+  text/plain -> text/vtt for .vtt files; add vtt branch to cache/header
+  block (Content-Type: text/vtt; charset=utf-8, 1-day cache)
+- public/admin/actions/formulaire.php: allow .vtt uploads (text/vtt MIME,
+  vtt extension); normalise text/plain finfo result; set file_type='caption'
+  for VTT files so they are distinguishable from other thesis files
+- public/admin/add.php: extend files field accept attr to include .vtt;
+  update hint text to document the VTT sidecar convention
+
+VTT files uploaded under theses/ inherit the same access_type visibility
+gate in media.php as all other thesis content (403 for access_type_id=3).
+
+---
+6e68edfbff02 | 2026-04-03 13:14
+Fix WCAG 4.1.2 truncated select text + split admin/public favicons
+
+- admin/edit.php: remove mb_strimwidth(60) truncation from access_type
+  <select> option labels; full 'name — description' text is now the
+  accessible name so screen readers get unambiguous option text (WCAG 4.1.2)
+
+- public/assets/favicon.svg: new public favicon — brand-purple (#9557b5)
+  rounded square with white 'P' lettermark; distinct from admin_favicon.svg
+  (archive-restore Lucide icon in #c104fc) which is admin-only
+
+- templates/head.php: favicon <link> now conditionally serves favicon.svg
+  (public pages) or admin_favicon.svg (admin pages) based on $isAdmin;
+  closes the open favicon task in todo/01-css-semantic-refactor.md
+
+- todo/04-accessibility.md: mark WCAG 3.1.1 lang audit and WCAG 4.1.2
+  select truncation items as done
+- todo/01-css-semantic-refactor.md: mark favicon task as done
+
+---
+d9f94eeb13d5 | 2026-04-03 13:10
+a11y(jury-fieldset): fix WCAG 3.3.2, 4.1.2, 2.1.1 + audit 1.4.4/1.4.12
+
+3.3.2 Labels or instructions
+- Replace bare <label>Lecteur·ices :</label> (no 'for', no associated control)
+  with <fieldset class="admin-jury-lecteurs"><legend>Lecteur·ices</legend>
+  giving AT a proper programmatic label for the entire lecteur group
+
+4.1.2 Name, role, value — Externe checkboxes lacked group context
+- Add aria-label="Promoteur·ice — externe" on the promoteur Externe checkbox
+- Add aria-label="Lecteur·ice N — nom" on every lecteur name input
+- Add aria-label="Lecteur·ice N — externe" on every lecteur Externe checkbox
+- All three attributes added to both PHP-rendered rows and the addJuryRow() JS
+  that builds new rows dynamically
+
+2.1.1 Keyboard — remove buttons already had aria-label; verified and updated
+  label text to "Supprimer le lecteur·ice N" (consistent with new numbering)
+
+CSS (admin.css)
+- Add .admin-body fieldset fieldset.admin-jury-lecteurs rule: removes
+  border/padding/background from the nested fieldset so it reads as a
+  sub-group inside the outer jury fieldset, not a double-bordered card
+
+Audit (no code change)
+- WCAG 1.4.4: all font-size values use rem — no px text sizing anywhere
+- WCAG 1.4.12: only overflow:hidden on media containers and .sr-only utility;
+  no essential text content is clipped by text-spacing overrides
+- WCAG 4.1.2 bulk JS: result is a redirect to flash-messages.php which already
+  emits role="alert"/role="status" — no additional JS announcement needed
+
+---
+769d56fabcca | 2026-04-03 13:05
+wcag: fix 2.4.4 duplicate link text on home page cards
+
+Add <span class="sr-only">, YEAR</span> to each thesis card <p> in
+public/index.php. Screen readers now read "Author – Title, 2024" instead
+of bare "Author – Title", so two theses sharing the same title produce
+distinct accessible names (WCAG 2.4.4 Link Purpose — In Context).
+
+Also audit and close WCAG 2.4.3: the tfe.php back link (<a class="tfe-back-link">
+← Retour</a>) is already the first child of <header class="tfe-left">
+in DOM order, preceding <h1 class="tfe-title">. No code change needed;
+TODO item marked done.
+
+---
+fe1f8629ea38 | 2026-04-03 12:54
+rename admin-submit-wrap → admin-form-footer across all templates and CSS
+
+- Updated 6 admin templates: add.php, edit.php, login.php, account.php,
+  import.php, pages-edit.php — replaced <div class="admin-submit-wrap">
+  with <div class="admin-form-footer">
+- Updated 8 CSS selectors in admin.css:
+  - .admin-form-footer { margin-top/padding-top } (was .admin-submit-wrap)
+  - .admin-form > div:not(.admin-form-footer) grid exclusion guard (×3)
+  - .admin-login-box .admin-form > div:not(.admin-form-footer) overrides (×2)
+  - .admin-login-box .admin-form-footer compact spacing override
+- No visual change; purely a semantic rename to a descriptive class name
+- Also marked status-badge.php partial and WCAG 1.3.1 badge tasks as
+  already-done in todo/02-php-components.md and todo/04-accessibility.md
+  (partial + CSS were fully implemented but todo had not been updated)
+
+---
+62eee63f80f9 | 2026-04-03 12:35
+fix(admin): add aria-current nav indicator + fix undefined --admin-purple variable
+
+WCAG 1.4.1 — Active nav link had no non-colour indicator in the admin panel.
+Public nav already had border-bottom via common.css; admin nav had nothing.
+
+admin.css:
+- Add `[aria-current="page"]` rule on admin nav links:
+    border-bottom: 2px solid currentColor; padding-bottom: 1px
+  This gives a visible underline as a non-colour signal for the active page.
+
+- Fix `--admin-purple` undefined CSS variable in pagination button hover.
+  The variable was referenced but never defined in variables.css (which was
+  refactored to use --accent-primary / --accent-secondary). Replaced both
+  border-color and color usages with var(--accent-primary) (#9557b5 — same
+  value), restoring the intended purple hover tint on pagination buttons.
+
+todo/01-css-semantic-refactor.md:
+- Audited ~15 pending CSS/HTML tasks; all were already implemented.
+  Marked as done: .admin-main, .admin-page-title, .admin-form-row,
+  .admin-label, .admin-input/select/textarea, .admin-table, .admin-fieldset,
+  tfe.css class replacements, search.css h2 selector, admin-alert replacement,
+  login.php/edit.php inline style removal, form partial hints (<small>).
+
+todo/04-accessibility.md:
+- Marked WCAG 1.4.1 admin nav and --admin-purple audit items as completed.
+
+---
+234d7bae4054 | 2026-04-03 12:29
+admin/index.php: add server-side pagination (25/page)
+
+- Add Database::getThesesListCount(array $filters) — runs the same WHERE
+  clauses as getThesesList() but with COUNT(DISTINCT t.id); used to compute
+  total pages without loading all rows.
+- Extend Database::getThesesList() with $limit/$offset parameters; when
+  $limit > 0 appends LIMIT/OFFSET and re-binds positional params individually
+  to avoid the PDO mixed-style restriction.
+- Fix getThesesList() SELECT: add LEFT JOIN access_types + at.name as
+  access_type — the column was referenced in the template but never fetched.
+- Wire admin/index.php: read ?page=, compute $totalPages/$offset, pass
+  $perPage=25 + $offset to getThesesList(); include pagination.php partial
+  below the table with filter-preserving $baseParams.
+- Add result-count line (<p class="admin-list-meta">) showing "X–Y sur Z TFE"
+  when multiple pages exist.
+- Add .admin-body .pagination-wrap / .pagination-btn / .pagination-info styles
+  to admin.css (scoped to .admin-body to avoid colliding with public pages).
+
+---
+ff8e33727ded | 2026-04-02 21:06
+admin: semantic HTML pass — checkbox fieldset, landmarks, dl/dt, autocomplete, inline styles
+
+checkbox-list.php partial:
+- Replace outer <div>/<label> with <div>/<span class="admin-row-label"> + inner
+  <fieldset class="admin-checkbox-group"><legend class="sr-only"> to satisfy
+  WCAG 1.3.1 (group label for multi-checkbox rows without duplicating visible text)
+- Replace <div class="admin-checkbox-list"> with <ul>; each checkbox wrapped in <li>
+
+admin.css:
+- Drop .admin-checkbox-list; add .admin-body fieldset.admin-checkbox-group rules
+  (border/padding reset so it doesn't inherit jury-fieldset box styling)
+- Extend form-row label rule to span.admin-row-label
+- .admin-inline-form + .admin-inline-form { margin-top:.35rem } replaces inline style
+- .admin-input--inline / .admin-select--inline get width:160px (was inline style)
+- .admin-tags-count + table th sizing via :has() replaces th inline styles
+
+login.php: wrap content in <main id="main-content"> (missing landmark)
+
+account.php:
+- <div class="admin-account-status"> → <dl>; __label <span> → <dt>
+- <div class="admin-danger-zone__description"> → <p>
+
+index.php: <div class="admin-maintenance-bar"> → <aside role="status" aria-label="Statut du site">
+
+add.php / edit.php: autocomplete="name" on author field, autocomplete="email" on
+contact field (WCAG 1.3.5 / input purpose)
+
+tags.php: all inline style= attributes removed (width, text-align, margin-top,
+display:inline); all moved to CSS classes
+
+---
+fde05da49381 | 2026-04-02 18:57
+common.css: taller header, larger nav text (header height -10%)
+
+---
+b2ec15372c96 | 2026-04-02 18:57
+common.css: taller header, larger nav text
+
+- header nav padding 1rem → 1.6rem (top/bottom)
+- logo link font-size 0.95rem → 1.1rem
+- nav link font-size 0.85rem → 0.95rem
+
+---
+da6d06f65a21 | 2026-04-02 18:56
+common.css: header text-shadow — purple glow, 0 offset, 12px blur, 65% opacity
+
+---
+c68e355de7b0 | 2026-04-02 18:55
+common.css: add subtle text-shadow to header nav text
+
+0 offset, 8px blur, rgba(0,0,0,0.35) — no directional shadow, just a
+soft glow that improves legibility of white text against the lighter
+portions of the gradient header.
+
+---
+d85fb22cfc4b | 2026-04-02 18:54
+admin: center main content with margin-inline: auto
+
+---
+f18e3381ea0c | 2026-04-02 18:49
+admin.css: rewrite from scratch using only variables.css tokens
+
+The file had accumulated severe corruption in its lower half (garbled
+selector text, variable names spliced into property values, orphaned
+declarations, broken nesting) alongside hardcoded hex colours throughout.
+
+Rewrote the entire file cleanly:
+- Every colour is now a var() referencing a token defined in variables.css:
+  --accent-primary/secondary/foreground, --accent-blue/green/yellow/red,
+  --bg-secondary/tertiary, --border-primary, --text-primary/secondary/tertiary,
+  --error, --warning, --success, --accent-muted.
+- Zero raw hex values remain in admin.css.
+- Removed the corrupted/dead CSS from the bottom half and reconstructed
+  all selectors from what the templates actually use (audited via grep).
+- Fixed structural issues: broken border shorthand, nested rules that
+  were not valid CSS, orphaned declaration blocks.
+- New/restored rules: .admin-maintenance-bar (was corrupted),
+  .status-access variants (was corrupted), .admin-section-title--danger,
+  .admin-danger-zone, .admin-account-status (all reconstructed cleanly).
+- .admin-btn--warning and .admin-btn--danger now use var(--accent-yellow)
+  and var(--accent-red) instead of hardcoded dark hex values.
+- .admin-btn-remove hover now uses var(--error) instead of #e55.
+- .admin-btn-unpublish now uses var(--bg-secondary)/var(--text-tertiary)
+  instead of hardcoded grey hex values.
+- select option background colours removed (browser chrome, not styleable
+  cross-platform).
+
+Templates: replace 4 inline var(--admin-text-muted) with var(--text-secondary)
+in index.php, thanks.php, import.php.
+
+---
+871e919efaca | 2026-04-02 18:45
+system.css: use only variables.css tokens, remove undefined custom properties
+
+Replace the two undefined variables that had crept in:
+- var(--admin-border) → #555  (in .log-output border)
+- var(--admin-text-muted) → #969696  (inline style on log toolbar label,
+  in both system.php and system-fragment.php)
+
+Revert the incorrect intermediate attempt that mapped dark-UI hex values
+to light-theme tokens (--bg-primary: #fff, --border-primary: #ddd, etc.)
+and also revert the .admin-body override block that was added to
+variables.css — variables.css is shared and must not have per-component
+overrides.
+
+All remaining var() calls in system.css now reference tokens that exist
+in variables.css:
+  --accent-primary, --accent-green, --error, --warning, --success,
+  --text-tertiary
+The dark surface colours (#1a1a1a, #242424, #0d0d0d, #555, #969696, etc.)
+stay as literal hex values, consistent with how admin.css handles them.
+
+---
+b981223ff4a1 | 2026-04-02 18:39
+admin/system: fetch()-based tab switching, no full-page reload
+
+Add system-fragment.php — a thin authenticated endpoint that returns only
+the tab-panel HTML (toolbar + meta + log/nginx-config output) for a given
+?tab=&n= combination. No page shell, no status section, no DB queries.
+
+system.php changes:
+- Tab <a> elements gain data-tab= attributes used by JS to identify the
+  target without parsing hrefs.
+- Tab panel content wrapped in <div id=sys-tab-panel data-tab= data-n=>
+  which JS uses as both the swap target and its own state store.
+- JS rewritten: tab clicks and lines-select changes call loadPanel()
+  which fetch()es system-fragment.php, swaps innerHTML, updates active
+  tab ARIA attributes, and pushes state via history.pushState.
+- Browser back/forward handled via popstate listener.
+- bindPanelControls() re-wires the lines-select and copy-to-clipboard
+  button after every innerHTML swap (event delegation not feasible here
+  because log-output is replaced wholesale).
+- fetch() failure falls back to window.location.href (full page load).
+- Tabs without JS still work: <a href> links go to system.php?tab=…
+  as before.
+
+system-fragment.php:
+- Requires AdminAuth::isAuthenticated(); returns 403 on failure.
+- Validates tab and n params against the same whitelist as system.php.
+- All helper functions namespaced with frag_ prefix to avoid redeclaration
+  if PHP ever includes both files in the same process.
+- Renders identical HTML to the corresponding section in system.php.
+
+system.css:
+- #sys-tab-panel gets min-height:8rem and position:relative to prevent
+  layout jump during fetch.
+- .sys-panel-loading: opacity 0.4 + pointer-events:none + subtle
+  diagonal-stripe ::after overlay with shimmer animation.
+
+---
+c86781b9be5b | 2026-04-02 18:31
+admin/system: move status panel above tabs, add collapse toggle
+
+Status (services, PHP env, disk) is now always visible above the log/config
+tab bar rather than being one of the tab targets:
+
+- Status section rendered unconditionally above <nav class="sys-tabs">.
+- Services grid, PHP info grid and disk bar grouped inside a collapsible
+  <section> with a header row containing the cache-freshness badge and a
+  toggle button (▲ Réduire / ▼ Développer).
+- Collapse state persisted in localStorage so the preference survives
+  page reloads (e.g. when switching log tabs).
+- Tab bar now only contains the three log tabs + nginx config; the 'Statut'
+  tab is removed. Legacy ?tab=status URLs fall through to nginx_access.
+- PHP/disk sub-sections laid out in a 2-col grid inside the status panel;
+  responsive single-col below 700px.
+- system.css: new .sys-status-section / .sys-status-header /
+  .sys-status-toggle / .sys-status-meta rules added.
+- aria-current="page" added to active tab links.
+- todo/03-system-cache.md: all items marked done; notes added explaining
+  why log caching was deliberately omitted.
+
+---
+e1ce90011399 | 2026-04-02 18:17
+a11y: WCAG 2.5.5 target sizes + 2.5.3 label-in-name fixes
+
+Increase touch/click target sizes to meet WCAG 2.5.5 (minimum 44×44px
+for navigation, 32px for admin UI controls):
+
+- main.css / search.css: pagination buttons 2rem → min-height/min-width
+  2.75rem (44px). Changed display to inline-flex for proper centering.
+- admin.css: .admin-btn-sm gains min-height: 2rem (32px) and switches
+  to inline-flex so the constraint is respected.
+- admin.css: .admin-btn-remove (jury ✕ buttons) gains min-height: 2rem
+  and inline-flex display + explicit cursor:pointer.
+
+WCAG 2.5.3 label-in-name — jury remove buttons already had aria-label;
+wrap the visible ✕ glyph in <span aria-hidden='true'> so screen readers
+hear only the aria-label, not the symbol:
+
+- templates/partials/form/jury-fieldset.php: all three ✕ occurrences
+  (static PHP blocks + JS-generated innerHTML string) wrapped.
+
+WCAG 4.1.2 / semantic HTML:
+- admin/index.php: add role='toolbar' aria-label='Actions groupées' to
+  the bulk-actions bar.
+
+---
+ba367251117a | 2026-04-02 18:08
+Split TODO.md into todo/ folder by topic (completed tasks removed)
+
+---
+d78befe62283 | 2026-04-02 18:01
+restore TODO.md: recover full historical TODO from 9108c4069d82, append CSS color variables section (2026-04-02)
+
+---
+7e0ac45a659b | 2026-04-02 17:42
+Changed colors to the shared colors
+
+---
+758bdce669b4 | 2026-04-02 17:24
+refactor: unify CSS color variables across public and admin
+
+- Add new standardized color variables in variables.css:
+  - Public/light theme: --bg-primary, --bg-secondary, etc.
+  - Admin/dark theme: --admin-bg, --admin-bg-alt, --admin-text, etc.
+  - Gradient colors: --gradient-start (#3C856C), --gradient-2 (#60ECB4), --gradient-3 (#E390FF), --gradient-4 (#9557B5)
+  - Shared: --success, --error, --warning, --accent-primary, --accent-secondary
+- Update all CSS files to use new variables
+- Keep admin-specific variables for dark theme sections
+
+---
+ae499e45b585 | 2026-04-02 17:23
+refactor: unify CSS color variables across public and admin
+
+- Add new standardized color variables in variables.css:
+  - Public/light theme: --bg-primary, --bg-secondary, etc.
+  - Admin/dark theme: --admin-bg, --admin-bg-alt, --admin-text, etc.
+  - Gradient colors: --gradient-start (#3C856C), --gradient-2 (#60ECB4), --gradient-3 (#E390FF), --gradient-4 (#9557B5)
+  - Shared: --success, --error, --warning, --accent-primary, --accent-secondary
+- Update all CSS files to use new variables
+- Keep admin-specific variables for dark theme sections
+
+---
+f7babf9e964b | 2026-04-02 17:22
+refactor: unify CSS color variables across public and admin
+
+- Add new standardized color variables in variables.css:
+  - Public/light theme: --bg-primary, --bg-secondary, etc.
+  - Admin/dark theme: --admin-bg, --admin-bg-alt, --admin-text, etc.
+  - Gradient colors: --gradient-start (#3C856C), --gradient-2 (#60ECB4), --gradient-3 (#E390FF), --gradient-4 (#9557B5)
+  - Shared: --success, --error, --warning, --accent-primary, --accent-secondary
+- Update all CSS files to use new variables
+- Keep admin-specific variables for dark theme sections
+
+---
+bf2594112bf6 | 2026-04-02 14:11
+fix serve recipe: filter output to Development Server start + [200] requests only
+
+refactor: unify CSS color variables across public and admin
+
+- Replace old variable structure with new standardized naming:
+  - Background: --bg-primary, --bg-secondary, --bg-tertiary, --bg-active
+  - Text: --text-primary, --text-secondary, --text-tertiary
+  - Border: --border-primary, --border-secondary
+  - Status: --success, --error, --warning
+  - Accent: --accent-primary, --accent-secondary, --accent-foreground, --accent-muted
+- Remove admin-specific color variables (--admin-*)
+- Update all CSS files to use shared variables:
+  - variables.css, common.css, main.css, admin.css
+  - tfe.css, search.css, apropos.css, system.css, colors.css
+
+---
+ba7814c6dc13 | 2026-04-02 13:04
+feat: system page caching via SystemCache + system_cache SQLite table
+
+Add a TTL-based cache for the expensive checks on the admin system page,
+eliminating repeated systemctl subprocess calls (~4×~100ms), curl self-pings
+(~200-500ms), disk_*_space() and PHP ini reads on every page load.
+
+Changes:
+- storage/migrations/007_system_cache.sql: new migration creating the
+  system_cache table (key TEXT PK, value TEXT, updated_at INTEGER)
+- storage/schema.sql: system_cache table added before pages table
+- Applied migration to live storage/posterg.db
+- src/SystemCache.php: new class with get/set/isStale/ageSeconds/invalidate;
+  uses SQLite INSERT … ON CONFLICT upsert; no external dependencies
+- src/Database.php: added getDatabasePath(): string accessor
+- public/admin/system.php:
+  - Bootstrap SystemCache at request start using the existing DB PDO handle
+  - system_status: cached with 2-min TTL (systemctl + curl checks)
+  - php_info: cached with 1-hour TTL (PHP ini values are runtime-constant)
+  - disk_info: cached with 5-min TTL (total/free/used/pct tuple)
+  - Logs section: unchanged — always reads live log tail per active tab
+  - ?refresh=1 GET param invalidates all three cache keys before rendering
+  - Status panel heading shows cache badge: '⚡ Cache — il y a Xs' (hit)
+    or '⟳ Actualisé' (miss/fresh), styled via new .sys-cache-badge rules
+- public/assets/css/system.css: .sys-cache-badge / --hit / --miss styles
+
+---
+592b1183db86 | 2026-04-02 12:57
+Unify flash messages: replace all legacy session key writes with App::flash()
+
+All admin action files (account, tag, page, edit, visibility, maintenance,
+publish, formulaire) now call App::flash('error'|'success', ...) instead of
+writing to raw per-page session keys ($_SESSION['error'], 'admin_error',
+'edit_error', 'admin_success', 'edit_success', 'form_error').
+
+All admin display pages (add, edit, account, tags, pages, index) now include
+templates/partials/flash-messages.php instead of manually reading and
+unsetting the legacy session keys and inlining their own alert HTML.
+
+App::consumeFlash() already drained all legacy key variants as a safety net,
+so the partial works correctly whether called from pages that were already
+migrated or any remaining stragglers. No behaviour change for end users.
+
+---
+77bfd2f8e343 | 2026-04-02 12:50
+Extract status-badge.php partial; replace inline badge markup in index.php and account.php
+
+Add templates/partials/status-badge.php — a single reusable partial that
+renders the <span class="status-badge …"> element for three badge types:
+
+  'publish'  — Publié / En attente derived from a boolean is_published value
+  'access'   — access-type label (Libre / Interne / Interdit) with slug-based
+               CSS modifier class and appropriate symbol (○ ◑ ●)
+  'ok'       — generic green/yellow boolean badge with caller-supplied labels
+               (used for 'Active'/'Non configurée' and 'Présent'/'Absent' in
+               account.php)
+
+All three variants emit aria-label with a context prefix and wrap the
+decorative symbol in aria-hidden="true" — behaviour identical to the
+inline code they replace.
+
+Callers set $badgeType + $badgeValue (+ optional $badgeOkLabel /
+$badgeWarnLabel / $badgeContext) before the include; the partial unsets
+all working variables after rendering so they do not bleed into the
+including scope.
+
+Files changed:
+  templates/partials/status-badge.php  — new partial
+  public/admin/index.php               — table status column now uses partial
+                                         (removes 15 lines of inline if/else/php)
+  public/admin/account.php             — two credential status rows now use partial
+                                         (removes 8 lines of inline if/else)
+
+---
+2143869b1e8a | 2026-04-02 12:48
+Add admin form field partials and apply to add/edit forms
+
+Four reusable PHP partials extracted to templates/partials/form/:
+
+- text-field.php  — single-line input (text/number/url); wraps input+hint in div,
+                    skips the inner wrapper when no hint is present. Supports $type,
+                    $placeholder, $required, $attrs, $hint, $id overrides.
+- select-field.php — <select> with leading empty option; matches $selected against
+                    option id OR option name string (handles view-sourced data where
+                    orientation/ap/finality come back as name strings, not FK ids).
+- checkbox-list.php — checkbox group (languages, formats); renders .admin-checkbox-list
+                    with typed-string comparison so int ids from DB match string values.
+- file-field.php  — file input with accept/multiple/hint; appends [] to name when
+                    $multiple is true.
+
+Both add.php and edit.php rewritten to use the partials:
+- ~15 repeated text-field divs collapsed to single-line include calls
+- ~6 repeated select divs collapsed to single-line include calls
+- 4 checkbox-list blocks collapsed to 2 calls each
+- 3 file input blocks collapsed to single-line include calls
+- Textarea fields (synopsis, context_note) kept inline — no partial for <textarea>
+- Banner preview block in edit.php kept inline — conditional UI not generalised
+
+Line count: add.php 251→93 (-158), edit.php 289→171 (-118)
+
+---
+c8a3cc0ff208 | 2026-04-02 12:42
+css: replace admin-form-row/admin-label/admin-input/select/textarea classes with semantic selectors
+
+Remove five presentational classes from admin forms and replace with
+structural CSS selectors scoped to .admin-form:
+
+- .admin-form-row  → .admin-form > div:not(.admin-submit-wrap)
+  Grid layout (260px label col + 1fr input col) applied directly to div
+  children of the form; submit-wrap div excluded via :not().
+
+- .admin-label     → .admin-form > div:not(.admin-submit-wrap) > label
+  Scoped to the direct label child of each form row div; does not bleed
+  into nested checkbox labels inside .admin-checkbox-list.
+
+- .admin-input / .admin-select / .admin-textarea
+  → .admin-form input:not([type=checkbox|radio|file|hidden|submit])
+  → .admin-form select
+  → .admin-form textarea
+  Also extended to .admin-inline-form input/select (tags page) so the
+  tags table inputs retain identical base styling and focus colour.
+
+Templates updated: add.php, edit.php, login.php, account.php,
+pages-edit.php, import.php, tags.php,
+templates/partials/form/jury-fieldset.php — all class= attributes for
+the five removed classes stripped.
+
+import.php: added 'admin-form' class alongside 'admin-import-area' so
+its single file-input row gets the grid row treatment; submit div was
+already using admin-submit-wrap so it is correctly excluded.
+
+No visual change — selectors target the same elements as before.
+
+---
+e9e012376de5 | 2026-04-02 12:35
+Replace .admin-alert BEM classes with semantic role/data-type attributes
+
+- admin.css: replace .admin-alert / .admin-alert--error / .admin-alert--success
+  selectors with [role="alert"][data-type="error"] and [role="status"][data-type="success"]
+- All 10 admin templates updated: <div class="admin-alert admin-alert--{type}">
+  becomes <p role="alert|status" data-type="error|success"> (or <div> for the
+  import.php multi-item list that contains a <ul>)
+- flash-messages.php partial updated to match
+- WCAG benefit: role="alert" is an ARIA live region — errors are announced
+  immediately by screen readers without focus movement (fixes WCAG 3.3.1, 4.1.2)
+- role="status" (polite live region) used for success messages — announced
+  without interrupting the user
+- Removes two BEM modifier classes; CSS now targets element semantics directly
+
+---
+10b07393fea4 | 2026-04-02 12:26
+Extract jury-fieldset.php partial; deduplicate jury section from add.php and edit.php
+
+The jury composition fieldset (président·e, promoteur·ice + external checkbox, dynamic
+lecteur·ices list with JS add/remove) was copy-pasted verbatim between the two longest
+admin forms.
+
+- Created templates/partials/form/jury-fieldset.php
+  - Consumes $juryPresident, $juryPromoteur, $juryPromoteurExt, $juryLecteurs[]
+  - Handles both add-mode (falls back to old()/wasSelected() flash helpers) and
+    edit-mode (pre-populates from DB-loaded variables)
+  - $juryIdx initialised from max(count($juryLecteurs), 1) — correct for both modes
+- add.php: 311 → 251 lines (-60); entire fieldset + <script> replaced with one require
+- edit.php: 359 → 289 lines (-70); PHP variable extraction kept inline before require
+
+---
+7834d88873df | 2026-04-02 12:20
+Extract pagination into templates/partials/pagination.php
+
+The pagination nav was duplicated between public/index.php and public/search.php
+with structural differences: index.php used string concatenation for query params
+and had first/last-page buttons (« »); search.php used http_build_query but had
+only prev/next (‹ ›) and a flat <span> rather than a <ul>/<li> structure.
+
+- Add templates/partials/pagination.php: accepts $page, $totalPages, $baseParams[]
+  (any array of query params to preserve); builds URLs with http_build_query;
+  renders a semantic <nav>/<ul>/<li> block with first/prev/info/next/last buttons,
+  correct aria-disabled + tabindex on disabled links, and aria-label on each button.
+  Returns immediately (no output) when $totalPages <= 1.
+
+- Replace inline pagination block in index.php with:
+    $baseParams = array_filter(['year' => $year]);
+    include pagination.php
+
+- Replace inline pagination block in search.php with:
+    $baseParams = array_diff_key($_GET, ['page' => '']);
+    include pagination.php
+  This also upgrades search.php to the full first/last button set it was missing.
+
+Both callers verified with php -l. No functional change to existing behaviour.
+
+---
+0ab08f3aa053 | 2026-04-02 12:16
+admin.css: replace .admin-main, .admin-page-title, .admin-table, .admin-fieldset with semantic selectors
+
+Replace four presentational class names in admin.css with structural selectors
+that target native HTML elements already present in every admin template:
+
+  .admin-main           → .admin-body main
+  .admin-page-title     → .admin-body main > h1
+  .admin-table          → .admin-body table
+  .admin-fieldset       → .admin-body fieldset
+  .admin-fieldset-legend → .admin-body legend
+
+Also migrate the .admin-main > section / h2 / dl / dt / dd block to
+.admin-body main > section so the thanks-page section styles survive.
+
+Add .admin-body main > table { margin-top: 1.5rem } to absorb the inline
+style="margin-top:1.5rem" that was on tags.php's <table class="admin-table">.
+
+All 10 affected admin templates updated (add, edit, account, index, import,
+pages, pages-edit, tags, system, thanks) — class attributes removed where
+the element alone is now the selector.  Zero visual changes.
+
+---
+cb1ced535bd6 | 2026-04-01 17:31
+Replace .admin-hint / .admin-field-hint with .admin-body form small
+
+- admin.css: remove .admin-hint and .admin-field-hint class rules; add
+  .admin-body form small with the same font-size/color/margin properties
+  plus display:block so it stacks below sibling inputs; stub comment left
+  where .admin-field-hint was to document the change
+- add.php: 5× <p class="admin-hint"> → <small>
+- edit.php: 3× <p class="admin-hint"> → <small>
+- import.php: <div class="admin-hint"> → <small> (block hint below CSV input)
+- pages-edit.php: class="admin-hint" removed from already-correct <small>
+- account.php: <p class="admin-field-hint"> → <small>
+
+Hint text is now styled purely via the semantic element selector; no class
+required on any hint element in admin templates.
+
+---
+f208423e8db8 | 2026-04-01 17:24
+Extract system.php inline <style> and <script> to system.css / $extraJsInline
+
+- Create public/assets/css/system.css with all 280 lines of CSS that were
+  inline in system.php: tab bar, status cards, PHP info grid, disk bar,
+  log viewer, nginx config viewer, and syntax-highlight classes.
+- Disk bar dynamic values (width %, colour) moved from PHP-interpolated CSS
+  rules to CSS custom properties (--disk-pct, --disk-color) set on the
+  element via an inline style attribute; static .disk-bar rule in system.css
+  consumes them via var().
+- system.php JS block (tab-select auto-nav + copy-to-clipboard) moved to
+  $extraJsInline heredoc; footer.php emits it before </body> — keeps it
+  out of the document <head> and removes the bare <script> after </main>.
+- system.php now sets $extraCss = ['/assets/css/system.css'] so head.php
+  emits a proper <link> in <head>, consistent with all other admin pages.
+- No behaviour change; system.php is now zero inline CSS/JS.
+
+---
+cd58bc13e47c | 2026-04-01 17:08
+css: replace presentational class selectors with semantic element selectors
+
+Replace 6 CSS class selectors across tfe.css, main.css, and search.css with
+semantic element-based selectors, removing the corresponding classes from the
+HTML templates entirely.
+
+tfe.css:
+- .tfe-meta-list → article dl / article dl > div / article dl dt / article dl dd
+- .tfe-media-block → aside figure (+ img, video, embed children)
+- .tfe-file-caption → aside figcaption
+
+main.css:
+- .card__media → .home-body figure (+ img/video children and hover/motion rules)
+- .card__caption → .home-body li > a > p
+
+search.css:
+- .repertoire-col > h2 → .repertoire-index section > h2
+
+Template changes:
+- tfe.php: removed class= from <dl>, <figure>, and <figcaption>
+- index.php: removed class= from <figure> and <p class=card__caption>;
+  stripped orphaned card__media from the gradient <div> (only --gradient needed)
+
+No visual change — selectors match the same elements as before since the
+semantic HTML was already in place from prior refactoring work.
+
+---
+77576e966cdb | 2026-04-01 16:55
+Remove inline styles from admin templates; extract to admin.css utility classes
+
+- login.php: removed style= on .admin-form-row and .admin-label (already covered
+  by .admin-login-box scoped rules); extracted submit-wrap spacing and full-width
+  button to .admin-login-box .admin-submit-wrap and .admin-login-box .admin-btn
+- account.php: style="margin-top:3rem" on danger-zone heading moved to
+  .admin-section-title--danger modifier; <span style="color:..."> replaced with
+  <small> element styled via .admin-danger-zone__description small
+- add.php / edit.php / pages-edit.php: all style="align-items:start" removed from
+  .admin-form-row (redundant — already the CSS default at line 116 of admin.css);
+  banner preview inline styles extracted to .admin-banner-preview / .admin-banner-preview img;
+  add-jury button margin extracted to .admin-add-jury-btn; cancel links use .admin-cancel-link
+
+Zero inline style= attributes remain in login, account, add, edit, pages-edit.
+
+---
+573747303f42 | 2026-04-01 16:50
+admin: semantic HTML improvements — dl stats, section cards, th scope
+
+- admin/index.php: replace <div class="admin-stats"> with <dl>; inner
+  <div class="admin-stat__number"> → <dd>, <div class="admin-stat__label"> → <dt>;
+  use CSS order to keep number visually first; add scope="col" to all 9 <th> cells
+
+- admin/thanks.php: replace all four <div class="admin-thesis-info"> wrappers
+  with <section> elements; remove the class entirely; add scope="col" to
+  the files table <th> cells
+
+- admin/tags.php: add scope="col" to all 3 <th> cells
+
+- admin/pages.php: add scope="col" to all 4 <th> cells
+
+- admin.css: rename .admin-thesis-info selectors to .admin-main > section
+  (element + context selector — no class needed); add display:flex +
+  flex-direction:column to .admin-stat so CSS order property works correctly
+
+Addresses TODO items: section X (admin-stats dl, th scope), XI (tags th scope),
+XII (admin-thesis-info → section), XIII (pages.php th scope)
+
+---
+8e36f981391d | 2026-04-01 16:44
+Move RateLimit cache dir from src/cache/ to storage/cache/rate_limit/
+
+The default cache directory for the file-based rate limiter was
+src/cache/rate_limit/, placing transient JSON files inside the source tree.
+This meant:
+- The directory was deployed via rsync on every deploy (wasted I/O)
+- .gitignore had to track a src/-internal path
+- Developers running tests could leave stale cache state in the source tree
+
+Changes:
+- src/RateLimit.php: default $cacheDir changed from __DIR__.'/cache/rate_limit'
+  to dirname(__DIR__).'/storage/cache/rate_limit'; dirname(__DIR__) resolves to
+  the project root regardless of how the file is loaded (with or without bootstrap)
+- .gitignore: replaced 'src/cache/rate_limit/' with 'storage/cache/' (broader,
+  covers any future cache subdirs under storage/)
+- storage/cache/.gitkeep: added so the directory is tracked in VCS and created
+  on fresh clones/deploys, but its contents are ignored
+- justfile: added '--exclude storage/cache/*' to the deploy rsync recipe so
+  rate-limit state is never transferred to the server
+- src/cache/: removed (no longer needed)
+
+All RateLimit unit tests pass.
+
+---
+9108c4069d82 | 2026-04-01 15:58
+restore TODO.md: merge current active tasks with full historical TODO recovered from kkmmrrrkkyrs
+
+---
+a5ee9b162fcc | 2026-04-01 12:40
+Replace site-search BEM classes with semantic header form[role="search"] selectors
+
+CSS: .site-search → header form[role="search"],
+     .site-search__icon → header form[role="search"] svg,
+     .site-search__input → header form[role="search"] input,
+     .site-search__input::placeholder → header form[role="search"] input::placeholder
+
+HTML: Removed class="site-search", class="site-search__icon", and
+class="site-search__input" from header.php and search-bar.php.
+The form already uses role="search" and contains a single svg + input,
+so the semantic selectors are unambiguous.
+
+---
+92a07d0b99d3 | 2026-04-01 12:36
+TODO: add targeted tasks for template simplification, PHP partials/components, and system page caching
+
+---
+eb67e6d4993a | 2026-04-01 12:25
+Add src/App.php foundation class and flash-messages partial
+
+Create the central App helper that eliminates ~170 lines of duplicated
+bootstrap/auth/CSRF preamble across 24 page and action handler files.
+
+src/App.php provides:
+- boot(): loads Database + ensures CSRF token (public pages)
+- adminGuard(): requires AdminAuth login + boot (admin pages)
+- verifyCsrf() / rotateCsrf(): centralised CSRF lifecycle
+- flash() / consumeFlash(): unified flash messages with legacy key drain
+  (error, success, admin_error, admin_success, edit_error, edit_success,
+  form_error all consumed transparently for incremental migration)
+- redirect(): flash + Location header + exit in one call
+- render(): head → header → content → footer pipeline with auto admin
+  footer selection
+
+App.php is auto-loaded from config/bootstrap.php so all existing pages
+get the class for free without any changes.
+
+templates/partials/flash-messages.php uses App::consumeFlash() to replace
+the 5+ copy-pasted flash blocks across admin templates.
+
+All existing tests pass. No existing page files modified — this is a
+non-breaking addition that enables incremental controller extraction.
+
+---
+7aace2a5517f | 2026-03-31 23:06
+Add refactoring recommendations for controller/template/routing separation
+
+---
+8976e52d10f4 | 2026-03-31 22:50
+Add PHP vs Flask architecture analysis
+
+---
+780b1b2a13a2 | 2026-03-31 22:22
+merge head/nav templates into unified head.php + header.php; semantic CSS for nav
+
+---
+4ff959a72d6d | 2026-03-31 22:03
+fix template consolidation: admin/head.php wraps public/head.php, footer.php wired to all public pages, remove duplicate font-family and body reset
+
+---
+3a42838cec4b | 2026-03-31 21:32
+consolidate admin/public templates: common.css base in admin, nav partial, remove duplicate CSS
+
+---
+f3f1e0e5fc21 | 2026-03-31 16:57
+Replace unicode left arrow with SVG icon in admin nav logo
+
+---
+a88e5562f8ea | 2026-03-31 16:47
+fix(config): auto-route test.db locally, posterg.db on production
+
+- config.php: getDatabasePath() detects php built-in CLI server
+  (php_sapi_name() === 'cli-server') and routes to test.db; all
+  other SAPIs (nginx/fpm) get posterg.db. DB_ENV env-var still
+  overrides either way.
+
+- migrate.sh: auto-initialise the target DB from storage/schema.sql
+  when the file is absent or has no tables yet. Existing DBs with
+  data are left completely untouched (table_count check, no re-run
+  of schema on populated DB). Idempotent: safe to run repeatedly.
+
+- justfile: serve still calls migrate (which now handles init too),
+  no DB_ENV prefix needed since sapi detection handles routing.
+
+---
+877e3225682d | 2026-03-31 16:37
+fix(import): set is_published=1 and map access_type_id on CSV import
+
+Imported theses were invisible on the public site because:
+1. is_published defaulted to 0 (schema default) — the INSERT never
+   set it, so all imported rows stayed unpublished and were filtered
+   out by v_theses_public (WHERE is_published = 1) and every public
+   DB method.
+2. The access column (CSV col 16 'Autorisation') was read into $access
+   but never written to access_type_id — silently dropped.
+
+Fix: INSERT now includes is_published = 1 and access_type_id (resolved
+from access_types.name via ucfirst/strtolower normalisation, defaulting
+to 1/Libre when the CSV cell is empty or unrecognised).
+
+---
+72d48c49c3f9 | 2026-03-31 16:19
+feat(db): auto-migrate both DBs on serve via scripts/migrate.sh
+
+---
+af06e09caa6f | 2026-03-31 16:17
+fix(import): skip rows with duplicate identifier instead of crashing
+
+---
+e5d05982080d | 2026-03-31 16:15
+fix: correct require_once path depth in admin action files
+
+---
+94f3fb67369d | 2026-03-31 16:12
+feat(admin): nav logo links back to public site; all nav links right-aligned
+
+templates/admin/head.php:
+  - admin-nav__logo now href="/" with target="_blank" rel="noopener noreferrer"
+  - Left arrow prefix (← via &#8592;, aria-hidden) signals leaving admin
+  - sr-only suffix "(site public, nouvel onglet)" for screen readers
+
+public/admin/login.php:
+  - Same treatment on the standalone login nav (was a bare <span>)
+
+public/assets/css/admin.css:
+  - admin-nav__list: flex:1 removed; margin-left:auto added
+    → entire link list now right-justified inside the nav bar,
+      mirroring the layout of the public site header
+  - .admin-nav__logout { margin-left:auto } removed (no longer needed;
+    logout is just the last item in a right-aligned list)
+
+---
+77cc3caa0a33 | 2026-03-31 16:10
+fix(a11y): status badges no longer colour-only; fix aria on ✕ buttons (WCAG 1.4.1, 2.5.3)
+
+admin/index.php — status badges (WCAG 1.4.1 Use of Colour):
+  - Published badge: prefix ● symbol (aria-hidden) + aria-label="Statut : Publié"
+  - Pending badge:   prefix ◌ symbol (aria-hidden) + aria-label="Statut : En attente"
+  - Access badges (Libre/Interne/Interdit): prefix ○/◑/● symbol per type (aria-hidden)
+    + aria-label="Accès : [type]"; symbol chosen from a PHP map keyed on the slug
+  Each badge now communicates its state through shape AND colour, not colour alone.
+
+admin/index.php — ✕ Réinitialiser link (WCAG 2.5.3 / 1.1.1):
+  - ✕ wrapped in <span aria-hidden="true"> so the decorative symbol is skipped by
+    screen readers; accessible name remains "Réinitialiser"
+
+admin/add.php + admin/edit.php — jury remove buttons (WCAG 2.5.3):
+  - All four ✕ remove buttons (2 static template rows + 2 JS-generated innerHTML strings)
+    given aria-label="Supprimer ce lecteur"; the bare ✕ Unicode character has no
+    speech equivalent so the aria-label replaces rather than supplements the label
+
+---
+338782947ca4 | 2026-03-31 15:35
+chore: vendor all CDN assets locally; reorganise assets into css/ and js/
+
+All third-party assets are now self-hosted — zero external requests at runtime.
+
+CSS (assets/css/):
+  - modern-normalize.min.css  (was assets/)
+  - common.css, admin.css, main.css, search.css, tfe.css, apropos.css  (was assets/)
+  - easymde.min.css 2.20.0  (was cdn.jsdelivr.net)
+  - font-awesome.min.css 4.7.0  (was maxcdn.bootstrapcdn.com; injected at runtime by EasyMDE)
+
+JS (assets/js/):
+  - easymde.min.js 2.20.0  (was cdn.jsdelivr.net)
+
+Fonts (assets/fonts/fontawesome/):
+  - fontawesome-webfont.{eot,woff2,woff,ttf,svg}, FontAwesome.otf 4.7.0
+
+Path fixes:
+  - common.css @font-face: ./fonts/ -> ../fonts/ (one level deeper)
+  - font-awesome.min.css @font-face: ../fonts/ -> ../fonts/fontawesome/ (dedicated subdir)
+  - pages-edit.php: autoDownloadFontAwesome:false added to EasyMDE init to
+    suppress the runtime CDN injection that was still present inside easymde.min.js
+
+Reference updates (all now absolute /assets/css/* or /assets/js/*):
+  - templates/public/head.php: modern-normalize + common
+  - templates/admin/head.php: modern-normalize + admin
+  - public/admin/login.php: modern-normalize + admin (standalone head)
+  - public/index.php, tfe.php, search.php, apropos.php, licence.php: extraCss paths
+  - public/admin/pages-edit.php: extraCss + extraJs (font-awesome, easymde CSS/JS)
+
+Nginx static-file location already covers .css/.js/.woff/.woff2/.ttf/.otf with
+30-day cache headers — no nginx config change needed.
+
+---
+986945a347ae | 2026-03-31 15:28
+fix(a11y): move pages-edit EasyMDE scripts to head/footer, add h1 to home, fix stale TODO items
+
+- pages-edit.php: EasyMDE CDN JS URL moved to $extraJs (rendered by footer.php before </body>);
+  inline EasyMDE init block moved to $extraJsInline, emitted by footer.php via new
+  `<?php if (!empty($extraJsInline))` guard - fixes invalid <script> floating in <body> (WCAG 4.1.1)
+- pages-edit.php: add <small> keyboard-trap hint below the editor textarea:
+  'Appuyez sur Échap pour quitter l'éditeur au clavier.' (WCAG 2.1.2)
+- templates/admin/footer.php: extend to support $extraJsInline (raw inline script string)
+- index.php: add <h1 class="sr-only">Mémoires de l'ERG</h1> inside <main> so the page has
+  a document heading (WCAG 2.4.6; h2 columns in search.php already had a sr-only h1)
+- TODO.md: mark completed items as [x]: skip links (2.4.1), focus-visible / outline:none
+  removal (2.4.7), search.php h1 + index.php h1 (2.4.6), pages-edit.php invalid HTML (4.1.1),
+  EasyMDE keyboard trap hint (2.1.2)
+
+---
+59ae2151d070 | 2026-03-29 17:01
+semantic HTML: apropos.php and licence.php (TODO section V & VI)
+
+apropos.php:
+- Remove redundant <div class="apropos-left"> wrapper; prose div is now a direct
+  grid child
+- <div class="apropos-description apropos-page-content"> → <div class="prose">
+  (single canonical class for Markdown-rendered content)
+- <div class="apropos-right"> → <aside class="apropos-aside"> (supplementary info
+  landmark; contacts and credits are secondary to the main description)
+- Three bare <div> wrappers inside the aside → <section> (erg link, Contacts, Crédits)
+- Three <div class="apropos-contact"> entries → <address> with font-style:normal
+  override; <span class="apropos-contact-name"> → <strong>;
+  <span class="apropos-contact-email"> → <a href="mailto:…">
+  Removes classes: apropos-left, apropos-right, apropos-contact, apropos-contact-name,
+  apropos-contact-role, apropos-contact-email, apropos-description, apropos-page-content
+
+licence.php:
+- <div class="apropos-description apropos-page-content apropos-single"> →
+  <div class="prose apropos-single"> (consistent with apropos.php rename)
+
+apropos.css:
+- Rename .apropos-description / .apropos-page-content → .prose; merge all prose
+  content rules under the single .prose selector
+- Rename .apropos-right → .apropos-aside; remove .apropos-left (empty rule)
+- Replace .apropos-contact, .apropos-contact-name etc. with element selectors:
+  .apropos-aside address, .apropos-aside address strong,
+  .apropos-aside address span, .apropos-aside address a
+- Update responsive blocks to reference .prose instead of .apropos-description
+
+---
+f2c023e19ab8 | 2026-03-29 16:31
+admin nav: replace bare <a> links with <ul>/<li>, use aria-current instead of .active class
+
+- templates/admin/head.php: all 7 nav links (+ conditional Modifier + Déconnexion)
+  wrapped in <ul class="admin-nav__list">/<li>; .active class removed, replaced
+  with aria-current="page" on each <a> based on $currentPage match
+- Déconnexion link: removed inline style="margin-left:auto;opacity:.6;"; moved to
+  new .admin-nav__logout <li> class in admin.css
+- public/assets/admin.css: replaced .admin-nav__link rules with .admin-nav__list a
+  selectors; added .admin-nav__list (flex list, gap 2.5rem, flex:1); added
+  .admin-nav__list a[aria-current="page"] rule (border-bottom underline indicator);
+  added .admin-nav__logout / .admin-nav__logout a for the push-right logout item
+- Removes .admin-nav__link class entirely from the codebase (was only used in
+  templates/admin/head.php and admin.css)
+
+Fixes WCAG 2.4.6 (nav landmark content model), 1.4.1 (colour-only active indicator),
+and section VIII of the semantic HTML admin audit.
+
+---
+ac872c1fe0ae | 2026-03-29 16:13
+Semantic HTML: home page card grid — <ul>/<li>/<figure>/<nav> refactor
+
+Replace presentational divs in index.php and main.css with elements that
+carry correct semantic meaning, fixing multiple WCAG 2.1 AA issues:
+
+index.php:
+- <div class="cards-container"> → <ul class="cards-container"> (list of navigable items)
+- <a class="card-link"><div class="card">…</div></a> → <li class="card"><a> (block link
+  is the <a>, <li> is the container; removes the redundant .card div wrapper)
+- <div class="card__media"> → <figure class="card__media"> when wrapping an <img>;
+  gradient placeholder stays as <div> (presentational, aria-hidden)
+- Improved alt text: "Couverture — [title] par [authors]" instead of bare title
+- Removed <div class="card__info"> wrapper; caption is now a bare <p class="card__caption">
+  directly inside the <a>
+- <div class="filter-info"> → <p class="filter-info" role="status"> (live-region
+  semantics; announces filter state to screen readers)
+- ✕ symbol in clear-filter link wrapped in <span aria-hidden="true">
+- Gradient placeholder div gets aria-hidden="true" (decorative; caption below carries text)
+- Empty-state <p style="…"> → <li class="cards-empty"> (removes inline style)
+- <div class="pagination-wrap"> → <nav class="pagination-wrap" aria-label="Pagination">
+  with <ul>/<li> children; page-info <span> → <li aria-current="page">
+
+main.css:
+- .cards-container: add list-style:none; margin:0; padding:0 (reset <ul> defaults)
+- Remove .card-link rule; replace with .card > a (block flex link, no separate class)
+- .card__media: add margin:0 to reset <figure> default margin
+- Remove .card__info rules; rename .authors to .card__caption with same styles
+- Add .cards-empty rule (removes last inline style from index.php)
+- .pagination-wrap: restructured for <nav>/<ul>; inner <ul> carries the flex layout
+- prefers-reduced-motion: add .card__media--gradient guard
+
+WCAG criteria addressed: 1.1.1 (alt text), 1.3.1 (info & relationships via semantic
+list/figure), 2.4.1 (filter-info now live region), role="status" on filter banner.
+
+---
+c352a392a1f9 | 2026-03-29 16:06
+search.php: semantic HTML overhaul of répertoire index and results view
+
+- Replace 4x <div class="repertoire-col"> with <section>; remove
+  .repertoire-col__header class, CSS now targets section > h2
+- Wrap all index link groups in <ul>/<li>; delete the four per-column
+  link classes (year-index-item, cat-index-item, student-index-item,
+  keyword-index-item); active state switches from .active to
+  aria-current="page" on the <a>
+- Add <h1 class="sr-only">Répertoire</h1> so the index view has a
+  page-level heading (WCAG 2.4.6)
+- Remove redundant <div class="search-results-view"> wrapper; padding
+  moved to .results-grid and .search-results-header directly
+- Replace <div class="results-grid"> with <ul class="results-grid">;
+  each result card becomes <li><a class="result-card">
+- Replace <span class="result-card__meta"> with <small> (ancillary
+  metadata per HTML spec)
+- Replace result-count <p> with <output role="status"> (computed value)
+- Replace 3x <div class="search-filter-group"><label>…</label><select>
+  with <label> directly wrapping <select> (implicit association,
+  removes .search-filter-group divs); CSS updated to display:flex on
+  the label itself
+- Pagination wrapper changed to <nav aria-label="Pagination">;
+  page-info span gets aria-current="page"
+- search.css: delete .search-results-view, four index-item classes,
+  .cat-index-group, .search-filter-group; consolidate years/other
+  column link styles under .repertoire-col:first-child ul a and
+  .repertoire-col:not(:first-child) ul a selectors; add ul reset rule
+
+---
+6657c4fbbe6d | 2026-03-29 15:50
+refactor(nav): replace div+BEM classes with semantic ul/li in public nav
+
+templates/nav.php:
+- Replace <div class="site-nav__links"> with <ul role="list"> + <li> children
+- Move À Propos link inside the list (was a loose sibling <a>)
+- Remove .site-nav__link and .site-nav__link--active classes from all <a> elements
+- Active state now driven solely by aria-current="page" (already present)
+
+public/assets/common.css:
+- Remove .site-nav__links, .site-nav__link, .site-nav__link:hover, .site-nav__link--active rules
+- Add .site-nav ul (flex, gap, list-style reset), .site-nav ul a, .site-nav ul a:hover
+- Active indicator: .site-nav ul a[aria-current="page"] — self-documenting, screen-reader-announced
+
+Fixes TODO section I (nav semantic HTML audit). All three BEM nav-link classes deleted;
+zero references remain in the codebase.
+
+---
+7a4a47183864 | 2026-03-29 15:47
+fix: search filter labels, 429 page styling, __wakeup PHP 8.x deprecation
+
+- Replace three <span class='search-filter-label'> with proper <label for='...'> elements in
+  search.php filter bar; add id attributes to the corresponding <select> elements so the
+  label/control association is programmatic (WCAG 1.3.1, 3.3.2).
+
+- Rewrite the rate-limit 429 early-exit in search.php from a bare one-liner echo to a full
+  HTML document with lang='fr', viewport meta, and inline dark styles matching maintenance.php;
+  inject the retry countdown into the user-facing message (Template audit F).
+
+- Fix PHP 8.x __wakeup() deprecation in Database.php singleton guard: replace the throw
+  statement with trigger_error(..., E_USER_ERROR) and add an explicit void return type
+  (Refactor audit C).
+
+---
+3a8ffa6afede | 2026-03-29 15:43
+Add Open Graph and Twitter Card meta tags to all public pages
+
+- templates/public/head.php: add centralised OG/Twitter tag rendering via $ogTags array;
+  supports type, title, description, url, image, image_alt, site_name, article_author,
+  article_published_time; twitter:card switches between summary_large_image / summary
+  based on presence of og:image
+
+- public/tfe.php: populate full article OG tags — og:type=article, canonical URL,
+  og:image resolved from banner_path → first image file in thesis_files → omitted,
+  og:image:alt, article:author, article:published_time (year-01-01); twitter:card
+  summary_large_image when image present
+
+- public/index.php, search.php, apropos.php, licence.php: add basic og:type=website
+  tags (title, description, canonical url, site_name)
+
+Sharing a thesis link on Slack, WhatsApp, iMessage, or any social platform will now
+render a rich preview card with the thesis title, synopsis excerpt, and cover/banner image.
+
+---
+1dee1ea73fb4 | 2026-03-28 19:38
+Add <meta name=description> to all public pages; improve page titles
+
+- templates/public/head.php: emit <meta name="description"> when $metaDescription is set
+- index.php: title → 'Posterg – Mémoires de l\'ERG'; description = site blurb
+- tfe.php: title → '[Titre] – [Auteur] – Posterg'; description = synopsis excerpt (strip_tags, truncate 160)
+- search.php: description = répertoire purpose blurb
+- apropos.php: description = about-page blurb
+- licence.php: description = licences blurb
+
+Fixes WCAG 2.4.2 (Page Titled) for index.php and tfe.php.
+All descriptions properly htmlspecialchars-escaped at render time.
+
+---
+5c00886db6c1 | 2026-03-28 19:13
+fix fgetcsv deprecation and apply pending DB migrations
+
+---
+126703f34002 | 2026-03-28 19:12
+tfe.php: full semantic HTML overhaul
+
+- Replace <div class="tfe-layout"> with <article>, <div class="tfe-left"> with
+  <header>, <div class="tfe-right"> with <aside> (supplementary media column)
+- Fix inverted heading hierarchy: <h1> is now the thesis title (primary topic);
+  author demoted to <p class="tfe-author"> (metadata, not a heading)
+- Replace <div class="tfe-meta-list"> / <div class="tfe-meta-item"> / <span class="label">
+  / <span class="value"> with <dl> / <dt> / <dd> (WCAG 1.3.1 info & relationships)
+- Replace <div class="tfe-media-block"> with <figure>; <p class="tfe-file-caption">
+  with <figcaption>; PDF <embed> gets .tfe-pdf-fallback download link (WCAG 4.1.2)
+- Move back link to top of left column; extract inline styles to .tfe-back-link,
+  .tfe-note-value, .tfe-restricted CSS classes
+- Fix image alt text: description column used when populated, fallback to
+  "Title — Author" instead of raw filename (WCAG 1.1.1)
+- Add sr-only new-tab warning on baiu_link (WCAG 1.3.1 / 2.4.4)
+- Fix PDF embed height: clamp(300px, 80vh, 700px) prevents horizontal overflow
+  on small screens (WCAG 1.4.10 reflow)
+- tfe.css: update all selectors to match new structure; remove inline styles;
+  unify .tfe-restricted and .tfe-no-files; add .tfe-pdf-fallback, .tfe-back-link
+
+---
+a84d6d560a08 | 2026-03-28 18:13
+a11y: nav aria-label, search role=search + label, card hover motion guard
+
+- templates/nav.php: add aria-label="Navigation principale" to <nav>; emit
+  aria-current="page" on the active link alongside the existing CSS class
+  so screen readers announce the current page without relying on colour/style alone
+
+- templates/search-bar.php: add role="search" + aria-label="Recherche" to
+  the <form>; add a visually-hidden <label for="site-search-input"> linked to
+  the input via id="site-search-input", satisfying WCAG 3.3.2 (labels/instructions)
+  and 4.1.2 (name/role/value) — placeholder text alone is not a label
+
+- public/assets/main.css: add @media (prefers-reduced-motion: reduce) block that
+  sets transition:none and transform:none on .card__media img/video hover, so the
+  scale(1.02) zoom is fully suppressed for users who opt out of motion (WCAG 2.3.3 /
+  prefers-reduced-motion); the global transition-duration guard in common.css already
+  covers all other transitions but does not zero the transform value itself
+
+Fixes TODO sections: G (nav/search-bar landmark names), I (site-search form ARIA),
+3.3.2 (search input label), prefers-reduced-motion (card hover transform gate)
+
+---
+4f5ff5a22c60 | 2026-03-28 18:08
+refactor: extract edit.php POST handler to actions/edit.php
+
+edit.php was a 530-line file mixing form display, POST handling, file
+uploads, and reference-data loading. This refactor splits it along the
+same action-file pattern already used by formulaire.php, tag.php, and
+page.php.
+
+Changes:
+- public/admin/actions/edit.php (new): standalone POST handler; auth
+  guard, CSRF check, transaction, redirect with session flash messages
+- public/admin/edit.php: display-only; reads edit_success/edit_error
+  flash keys from session; form action points to actions/edit.php via
+  a hidden thesis_id field instead of a query-string self-post
+- src/Database.php: four new methods to remove all raw PDO from both
+  files:
+    - updateThesis(int, array): void  — UPDATE theses core fields
+    - setThesisAuthors(int, array): void  — delete-then-reinsert authors
+    - getThesisLanguageIds(int): array — SELECT language_id for form
+    - getThesisFormatIds(int): array   — SELECT format_id for form
+
+---
+f20aab5f66b0 | 2026-03-28 17:00
+css: deduplicate html/body reset; fix pages-edit.php invalid HTML
+
+Move the repeated 'html, body { margin:0; padding:0; height:100% }' block from
+main.css, search.css, tfe.css, and apropos.css into the single canonical location
+in common.css. All four public page stylesheets already load common.css first, so
+the rule applies identically — no visual change.
+
+Fix pages-edit.php invalid HTML: the EasyMDE <link rel=stylesheet> was placed
+inside <body> (after head.php was already closed), which is invalid. Add an
+$extraCss hook to templates/admin/head.php so pages can inject <link> tags into
+<head> via an array variable, matching the pattern already used by the public
+templates/public/head.php. Also add a symmetric $extraJs hook to
+templates/admin/footer.php for future use. pages-edit.php now sets
+$extraCss = ['easymde.min.css'] before requiring head.php; the EasyMDE JS
+<script> and its inline init remain in <body> in the correct load order.
+
+---
+b8529f7abeb7 | 2026-03-28 16:51
+fix: WCAG 2.1 AA contrast, mobile répertoire layout, and pagination accessibility
+
+Contrast failures (WCAG 1.4.3):
+- common.css: remove opacity:0.92 from .site-nav__link (was 4.05:1, now 4.87:1 white-on-purple)
+- common.css: placeholder colour #aaa → #767676 (2.32:1 → 4.54:1 on white)
+- main.css: filter-info and clear-filter text var(--purple) → var(--purple-dark) (#9557b5 → #7b3fa0, 4.08 → 5.7:1)
+- index.php: gradient card lighter stop L=65% → L=40%, darker stop L=45% → L=28%; white text now passes 4.5:1 across all hues
+
+Non-text contrast (WCAG 1.4.11):
+- search.css: search-filter <select> border #ddd → #949494 (1.6:1 → 3.0:1 on white)
+- admin.css: --admin-border #333 → #555 (input bottom-border on #1a1a1a: 1.8:1 → 3.1:1)
+- admin.css: --admin-text-muted #888 → #969696 (4.38:1 → 4.54:1 on #242424)
+
+Mobile layout (WCAG 1.4.10 Reflow):
+- search.css: add @media (max-width:768px) to collapse répertoire 4-column grid to single column;
+  columns switch from right-border to bottom-border separators
+
+Keyboard / screen reader (WCAG 2.1.1, 2.4.4):
+- index.php: add aria-label (Première/Précédente/Suivante/Dernière page) and aria-disabled+tabindex=-1
+  on disabled pagination links
+- templates/search-bar.php: add aria-hidden=true and focusable=false to decorative SVG magnifier
+
+Language (WCAG 3.1.1):
+- search.php: add lang=fr to <html> in 429 rate-limit response
+
+---
+18197bd46854 | 2026-03-28 16:49
+Extract shared public <head> partial
+
+Create templates/public/head.php accepting $pageTitle and $extraCss (array of
+stylesheet hrefs), mirroring the existing templates/admin/head.php pattern.
+
+The partial emits: DOCTYPE, <html lang=fr>, charset/viewport meta, favicon,
+modern-normalize, common.css, any extra CSS links, and the dev-only live-reload
+script.  The live-reload snippet was previously copy-pasted verbatim into all
+five public pages.
+
+Updated pages:
+  - public/index.php        ($pageTitle='Posterg', $extraCss=['assets/main.css'])
+  - public/search.php       ($pageTitle='Répertoire – Posterg', search.css)
+  - public/tfe.php          ($pageTitle=thesis title + suffix, tfe.css)
+  - public/apropos.php      ($pageTitle='À Propos – Posterg', apropos.css)
+  - public/licence.php      ($pageTitle=DB title + suffix, apropos.css)
+
+tfe.php: removed redundant htmlspecialchars() call on $pageTitle (the partial
+applies it); licence.php: renamed conflicting $page variable to $dbPage to
+avoid collision with the shared $pageTitle expected by the partial.
+
+All syntax checks and test suite pass (4/4).
+
+---
+640d37936fd7 | 2026-03-28 16:44
+css: fix nav active state, deduplicate .site-nav__right, add font-display, clean up search pagination
+
+- common.css: add font-display: swap to Combinedd.otf @font-face (eliminates FOIT)
+- common.css: remove duplicate .site-nav__right block (identical to .site-nav__link);
+  update nav.php to use .site-nav__link on the À Propos link
+- common.css: add .site-nav__link--active rule (opacity:1 + white underline); the class
+  was already applied in nav.php but had no CSS definition, making it invisible
+- search.php: replace fully inline-styled pagination with .pagination-wrap / .pagination-btn
+  / .pagination-info classes; add aria-disabled + tabindex=-1 on disabled links;
+  add aria-label on prev/next links
+- search.css: add pagination rule block to match, keeping styles co-located with the page
+
+---
+764edf912123 | 2026-03-28 16:42
+Remove dead template/asset files; fix licence.php full-width layout
+
+- Delete templates/header.php and templates/head.php — both were legacy
+  partials from a previous design iteration (lang="en", broken nav markup)
+  that were never included anywhere in the current codebase.
+
+- Delete public/assets/icons.svg — the full TrumboWYG icon sprite (~15 KB)
+  referenced nowhere; the only active WYSIWYG editor (EasyMDE in
+  pages-edit.php) loads its own assets from CDN.
+
+- Fix licence.php layout: the page was borrowing the two-column
+  .apropos-layout grid but leaving the right column always empty, wasting
+  ~40% of the viewport. Removed the grid wrapper and the empty .apropos-right
+  div. Added .apropos-single utility class to apropos.css (max-width: 720px)
+  so licence content now spans the full available width with a readable
+  line length.
+
+---
+61ac3c002db2 | 2026-03-28 13:52
+refactor: encapsulate thesis creation SQL in Database::createThesis()
+
+Move the raw identifier-generation query and the INSERT INTO theses /
+INSERT INTO thesis_authors statements out of formulaire.php into two new
+Database methods:
+
+  generateThesisIdentifier(int $year): string
+    – counts existing theses for the year inside the open transaction so
+      concurrent workers cannot produce duplicate YYYY-NNN identifiers.
+
+  createThesis(array $data): int
+    – generates the identifier, INSERTs the thesis row, links the author
+      via thesis_authors (author_order=1), returns the new thesis ID.
+
+  getThesisIdentifier(int $id): string
+    – fetches the stored identifier for a thesis ID; used by formulaire.php
+      to reconstruct the upload path (storage/theses/YYYY/YYYY-NNN/).
+
+formulaire.php now calls $db->createThesis([…]) + $db->getThesisIdentifier()
+and no longer holds any raw PDO queries for the core thesis insert.
+The $pdo local variable (previously $db->getPDO()) is removed entirely.
+
+All four test suites (Unit, RateLimit, Integration, Security) pass.
+
+---
+2ec5a7f38f97 | 2026-03-28 13:48
+docs: ORM assessment — verdict: keep raw PDO, no ORM needed
+
+---
+06488586aff4 | 2026-03-28 13:48
+refactor: encapsulate junction-table writes and banner upload in Database
+
+Add three delete-then-reinsert helpers to Database.php that follow the same
+pattern already used by setThesisJury():
+
+  setThesisLanguages(int $thesisId, array $languageIds)
+  setThesisFormats(int $thesisId,   array $formatIds)
+  setThesisTags(int $thesisId,      array $tagNames)
+
+setThesisTags() calls findOrCreateTag() internally and enforces the 10-tag cap,
+keeping that rule in one place.
+
+Also extract the duplicated banner-upload block (MIME check, size cap,
+random filename, move_uploaded_file, chmod, setBannerPath) into:
+
+  handleBannerUpload(int $thesisId, ?array $uploadedFile): ?string
+
+Both formulaire.php and edit.php are updated to call these methods instead of
+open-coding the SQL loops and file-upload logic. The edit.php banner-removal
+branch is unchanged (unlink + setBannerPath(null) stays inline as it is
+logically distinct from an upload).
+
+---
+e126e1a3b010 | 2026-03-28 13:47
+refactor: use encapsulated Database methods in formulaire.php and edit.php
+
+---
+71167b2cdf26 | 2026-03-28 13:43
+fix: remove DB_ENV auto-detection; require explicit DB_ENV=test for tests
+
+src/config.php: remove the file-existence fallback that silently redirected
+all requests to test.db whenever that file was present on disk. getDatabasePath()
+now always returns the production DB unless DB_ENV=test is explicitly set.
+
+tests/run-tests.php: putenv('DB_ENV=test') at the top so the suite always
+targets test.db regardless of what is set in the shell environment.
+
+tests/Unit/DatabaseTest.php, tests/Integration/SearchTest.php,
+tests/Security/SecurityTest.php: same putenv() guard added to each file so
+they work correctly when run standalone (e.g. just test-unit).
+
+justfile: all test and DB-development recipes now prefix DB_ENV=test to their
+php/sqlite3 commands, making the intent explicit in the recipe itself.
+
+Fixes: a developer who ran the test suite and kept test.db on disk would
+silently hit test data when browsing the local site with no DB_ENV set.
+
+---
+7d96a0832436 | 2026-03-28 13:35
+perf: replace fat-view student index query with lean getPublishedAuthors()
+
+The répertoire page was loading the full v_theses_public view
+(15 JOINs + 8 GROUP_CONCAT temp B-trees) via getAllPublishedTheses()
+just to build the student name → thesis-id map on the index page.
+Only two columns (id, authors) were ever consumed by the template.
+
+Add Database::getPublishedAuthors(): array
+- Queries thesis_authors JOIN authors directly on the theses base table
+- Filters on theses.is_published = 1 using the existing index
+- Returns only id + GROUP_CONCAT(authors) — no view expansion
+- Results verified identical to the old getAllPublishedTheses() output
+
+Update search.php to call getPublishedAuthors() instead.
+Mark getAllPublishedTheses() @deprecated in Database.php.
+
+All tests pass.
+
+---
+1181cfa88b8e | 2026-03-28 13:32
+encapsulate raw PDO queries leaking from callers into Database.php methods
+
+- Add getThesisAccessTypeId(int $id): ?int — replaces raw SELECT in tfe.php
+- Add getCoverPathsForTheses(array $ids): array — replaces raw SELECT/IN query in index.php
+- Add getFileVisibility(string $path): ?int — replaces raw join query in media.php
+- Add getThesisBannerPath(int $id): ?string — replaces unparameterised SQL injection in
+  edit.php (SELECT banner_path FROM theses WHERE id = $thesisId was interpolating $thesisId
+  directly into the query string; now parameterised via prepared statement)
+- Add getThesisRawFields(int $id): ?array — replaces raw SELECT license_id/access_type_id/
+  context_note in edit.php
+- Add getThesisCount(): int — replaces raw SELECT COUNT(*) in system.php
+
+Callers updated: public/tfe.php, public/index.php, public/media.php,
+public/admin/edit.php, public/admin/system.php
+
+---
+20e5f71634ab | 2026-03-28 13:28
+Fix two backend correctness issues
+
+- Wrap setThesisJury() in a transaction: the method did a DELETE then multiple
+  INSERTs with no atomicity guarantee. A partial failure (e.g. findOrCreateSupervisor
+  throwing) would leave the jury table with orphaned rows. The fix uses
+  pdo->inTransaction() to avoid nesting when called from within an outer transaction,
+  and performs beginTransaction/commit/rollBack otherwise.
+
+- Replace raw PDO query in admin/thanks.php with db->getThesisFiles(): the file
+  listing after TFE submission was manually preparing a SELECT on thesis_files
+  instead of calling the existing Database::getThesisFiles() method. Removes the
+  getPDO() call entirely from that file.
+
+---
+69e161ada3c9 | 2026-03-28 11:42
+fix(admin): stats bar always shows whole-DB counts, not filtered counts
+
+admin/index.php showed "TFE total / Publiés / En attente" by running
+array_filter() over the already-filtered $theses array returned by
+getThesesList(). When any search or year filter was active the three
+numbers reflected only the matching subset, making the stats misleading
+(e.g. searching for a single student would show "1 total, 0 publiés").
+
+Add Database::getThesesStats(): array — a single SQL aggregation query:
+  SELECT COUNT(*), SUM(is_published), SUM(NOT is_published) FROM theses
+
+This runs against the raw theses table with no filters, so the counters
+always display the true whole-database figures regardless of what filter
+the admin has active. admin/index.php now calls getThesesStats() and
+reads $stats['total'], $stats['published'], $stats['pending'] instead
+of the array_filter expressions.
+
+---
+2e277b104ef7 | 2026-03-28 11:35
+refactor(Database): remove dead CRUD helpers and alias proliferation
+
+Remove 5 unused ID-lookup helpers (getOrientationId, getAPProgramId,
+getFinalityId, getLanguageId, getFormatId) — forms have always passed
+FK ids directly from <select> elements; these methods were never called
+outside import.php, which now uses inline PDO queries instead.
+
+Collapse 13 alias methods down to the single canonical name for each:
+  getAllOrientations, getAllAPPrograms, getAllFinalityTypes,
+  getAllFormatTypes, getAllLanguages, getAllLicenseTypes,
+  getUsedTags, findOrCreateTag
+
+The short-name variants (getOrientations, getApPrograms, etc.) and
+compat aliases (getUsedKeywords, findOrCreateKeyword, getAllLicenseTypes
+delegating to getLicenseTypes) are deleted. All call-sites updated:
+  - public/search.php: getOrientations→getAllOrientations, etc.
+  - public/admin/import.php: findOrCreateKeyword→findOrCreateTag,
+    thesis_keywords→thesis_tags, keyword_id→tag_id (fixes stale table
+    reference from pre-migration-001 that bypassed the M2M rename)
+  - tests/Unit/DatabaseTest.php: remove alias smoke-test (test 7)
+
+Database.php: 948 → 848 lines (-100).
+
+---
+b0632b4772b3 | 2026-03-27 23:16
+fix(formulaire): remove htmlspecialchars from sanitize_string + delete dead $problematique
+
+HTML-escaping at write time stores &amp;, &lt; etc. in the DB, corrupting full-text
+search, tag matching, exports, and any non-HTML consumer. PDO parameterised queries
+already prevent SQL injection; templates call htmlspecialchars() on output.
+
+sanitize_string() now does strip_tags(trim()) only — matching the pattern already
+used by edit.php which never had this bug.
+
+Also deleted the dead $problematique variable (read from POST[problématique] but
+never passed to any INSERT or used anywhere in the codebase).
+
+---
+f37069720a59 | 2026-03-27 13:48
+schema: add composite index (is_published, year DESC) + fix stale migration 005
+
+- Add idx_theses_pub_year composite index on theses(is_published, year DESC) to
+  schema.sql; replaces the need for the query planner to pick between the two
+  separate idx_theses_published / idx_theses_year indexes and sort with a temp
+  B-tree. Every public query filters on is_published=1 and orders/filters by year,
+  so this covering index eliminates the sort pass for those queries.
+
+- Create storage/migrations/006_add_composite_index.sql and apply to both
+  posterg.db and test.db.
+
+- Fix storage/migrations/005_add_banner.sql: the view recreation in that file
+  still referenced the pre-migration-001 table/column names (thesis_keywords,
+  keywords.keyword). Updated to use thesis_tags / tags tg to match the canonical
+  schema.sql. The live DB was unaffected (migration 001 ran before 005), but the
+  file was misleading and would fail if ever re-run from scratch.
+
+---
+42af4644c5ba | 2026-03-27 13:45
+perf+a11y: WAL mode for SQLite, skip links, :focus-visible, .sr-only
+
+SQLite performance (Database::__construct):
+- PRAGMA journal_mode = WAL: eliminates full-DB read locks on write, safe
+  for concurrent PHP-FPM workers
+- PRAGMA synchronous = NORMAL: durable on commit without full fsync per write
+- PRAGMA cache_size = -8000: ~8 MB page cache per connection
+
+Accessibility foundation (WCAG 2.1 AA):
+- common.css: add .sr-only utility, .skip-link (hidden until focused),
+  global :focus-visible (2px purple outline, 2px offset),
+  prefers-reduced-motion guard; remove bare outline:none from
+  .site-search__input
+- admin.css: same :focus-visible, skip-link, and motion guard scoped to
+  admin purple; remove outline:none from .admin-input/.admin-select/
+  .admin-textarea and .admin-filters select (both had :focus border rules
+  already, so focus is still visually communicated)
+- search.css: remove outline:none from .search-filter-select (already has
+  :focus border-color rule)
+- All 5 public pages (index, search, tfe, apropos, licence): add
+  <a href="#main-content" class="skip-link"> as first child of <body>;
+  add id="main-content" to <main>
+- templates/admin/head.php: same skip link; aria-label="Navigation admin"
+  on <nav>; id="main-content" on all 10 admin <main> elements
+
+All 4 test suites pass (unit, integration, security, rate-limit).
+
+---
+a9877b1d1d44 | 2026-03-26 23:04
+docs: accessibility audit — add WCAG 2.1 AA analysis to TODO.md
+
+Measured contrast ratios, traced every interactive element, checked all four
+WCAG principles across public and admin surfaces. Current state confirmed:
+zero ARIA attributes, zero skip links, zero focus-visible styles, zero
+prefers-reduced-motion guards in the live codebase.
+
+Key failures by criterion:
+
+1.1.1: TFE file images use raw filename as alt; search bar SVG not aria-hidden;
+       jury remove buttons have no accessible name (bare ✕)
+
+1.3.1: TFE metadata is div/span soup with no programmatic label-value association;
+       search filter selects have no associated label; checkbox groups need fieldset/legend
+
+1.4.1: Status badges distinguish state by colour only; active nav link has no
+       non-colour indicator and its CSS class has no rule at all
+
+1.4.3 (measured failures):
+  - Nav links at opacity:0.92 on purple: 4.05:1 (fails AA 4.5:1)
+  - filter-info purple text on purple-light bg: 4.08:1 (fails AA)
+  - Placeholder #aaa on white: 2.32:1 (fails AA)
+  - Gradient cards: white text on L=65% HSL — every warm hue fails AA,
+    some as low as 1.46:1 (yellow). Only blue/indigo hues pass.
+  - admin-text-muted #888 on bg-alt #242424: 4.38:1 (fails AA)
+  - admin-purple on dark bg: 3.57:1 (fails for normal text size)
+
+1.4.10: Répertoire 4-column grid has no mobile breakpoint
+1.4.11: Search select border #ddd on white: 1.6:1; admin input border: 1.8:1
+
+2.1.1: Disabled pagination links have pointer-events:none but remain keyboard-focusable
+2.4.1: No skip-to-main link anywhere in the site
+2.4.4: Pagination arrows (« ‹ › ») have no aria-label
+2.4.6: tfe.php h1=author h2=title is inverted; index/search have no h1 at all
+2.4.7: No :focus-visible defined anywhere; outline:none suppresses browser default
+       on search input with no replacement
+
+3.1.1: 429 response has no lang attribute
+3.3.1: Form errors not announced as live regions; no autofocus on invalid field
+3.3.2: Search input has no label, only placeholder
+
+4.1.1: pages-edit.php has <link> in <body>
+4.1.2: <video> has no caption track; <embed> PDF has no fallback download link;
+       bulk action results not announced to AT
+
+Motion: no prefers-reduced-motion guard on any transition or animation
+
+Infrastructure gaps: no .sr-only class, no skip link, no :focus-visible,
+four explicit outline:none suppressions with no replacement
+
+---
+22fabeb44768 | 2026-03-26 22:58
+docs: semantic HTML audit admin section — add sections VIII–XVI to TODO.md
+
+Analysed every admin template against semantic HTML:
+
+templates/admin/head.php (VIII):
+- Nav links are bare <a> in flat <nav>, no <ul>/<li> structure
+- No aria-label on <nav>, active state uses .active class not aria-current=page
+- Déconnexion link has inline style for positioning
+
+add.php / edit.php (IX):
+- ~20 <div class=admin-form-row> wrappers removable with CSS grid on form directly
+- Inner anonymous <div> wrapping input+hint → <small> removes the wrapper
+- <div class=admin-checkbox-list> + <label class=admin-checkbox-label> → <ul>/<li label>
+- <div class=admin-submit-wrap> → remove, style button directly
+- <div class=admin-alert> → <p role=alert> / <p role=status>
+
+index.php (X):
+- Stats <div> soup → <dl>/<dt>/<dd> (numbers as defined terms)
+- Maintenance bar <div> → <aside role=status>
+- Bulk toolbar → role=toolbar aria-label
+- <th> cells missing scope=col
+
+tags.php (XI):
+- <th> cells missing scope=col; inline margins on sibling forms → CSS selector
+
+thanks.php (XII):
+- <div class=admin-thesis-info> already uses <dl> inside — wrap in <section> instead
+
+account.php (XIII):
+- Status rows <div> soup → <dl>/<dt>/<dd>
+- Danger zone description <div> → <p>
+- Inline margin on section title → CSS
+
+login.php (XIV):
+- No <main> landmark on the page
+- Inline styles on form rows → modifier class
+
+pages-edit.php (XV):
+- <link> stylesheet injected inside <body> (invalid) — move to <head> via $extraCss
+
+Summary table: 15 additional admin classes deletable via semantic replacements
+
+---
+bc5c50f1fb9a | 2026-03-26 22:53
+docs: semantic HTML audit — add section I–VII to TODO.md
+
+Full analysis of every public-facing page and partial against semantic HTML.
+Currently only one semantic element exists across the entire public frontend (<nav>).
+
+Key findings mapped to concrete replacements:
+
+nav.php: <div class=site-nav__links> → <ul>/<li>; active class → aria-current=page
+         search <form> needs role=search, aria-label, hidden SVG icon
+
+index.php: <div class=cards-container> → <ul>; card <div>s → <li>; <a> wraps directly
+           card__media → <figure> for image cards; pagination divs → <nav><ul>
+           disabled pagination links need aria-disabled + tabindex=-1, not just a class
+
+search.php: filter label+div groups → <label> wrapping <select> (removes 2 classes per group)
+            .search-results-view wrapper → remove (redundant inside <main>)
+            results-grid <div> → <ul>; result-card__meta <span> → <small>
+            repertoire columns <div> → <section>; link lists → <ul>/<li>
+            active links → aria-current=page
+
+tfe.php: heading hierarchy is backwards — author is h1, title is h2; should be reversed
+         .tfe-layout → <article>; .tfe-left → <header> inside article
+         .tfe-meta-list div+span soup → <dl>/<dt>/<dd> (removes ~30 wrapper divs + 5 classes)
+         .tfe-right → <aside>; .tfe-media-block → <figure>; caption → <figcaption>
+         .tfe-synopsis-text <div> → <p>; back link wrapper div → remove
+
+apropos.php: .apropos-right <div> → <aside>; contact divs → <address>
+             section wrapper divs → <section>; two CSS classes → strong + a[href^=mailto:]
+             double-class .apropos-description.apropos-page-content → single .prose
+
+licence.php: remove always-empty right column and two-column layout entirely
+
+Summary table: 25+ classes that become deletable once semantic elements carry the meaning
+
+---
+7d836c165cab | 2026-03-26 22:51
+docs: frontend & template audit — add sections D–H to TODO.md
+
+Analysed all public pages, CSS files, and template partials. Found:
+
+Template structure (D):
+- <head> boilerplate duplicated across 5 public pages (no shared partial exists)
+- Live-reload snippet copy-pasted into 6 files
+- templates/header.php and templates/head.php are dead/orphaned files
+- public/assets/icons.svg is a dead TrumboWYG sprite (never referenced, ~15 KB)
+- admin_favicon.svg used as public favicon (misleading naming)
+
+CSS (E):
+- html/body reset block repeated in 4 page stylesheets; belongs in common.css
+- @font-face missing font-display:swap (FOIT risk)
+- Search pagination is fully inline-styled; home page already has .pagination-btn classes
+- Multiple one-off inline styles across tfe.php, edit.php, index.php
+- .site-nav__right is a CSS duplicate of .site-nav__link
+- .site-nav__link--active applied in PHP but has no CSS rule (invisible active state)
+
+Template logic (F):
+- 429 rate-limit response is bare unstyled HTML
+- apropos.php contacts/credits hardcoded (require code deploy to change)
+- licence.php wastes half the viewport with an always-empty right column
+
+Accessibility (G):
+- <nav> has no aria-label; search <form> has no accessible name
+- No <meta name=description> on any public page
+- No Open Graph tags anywhere (blank previews when sharing thesis links)
+
+Minor (H):
+- thanks.php duplicates getThesisFiles() with a raw query
+- admin/index.php stats broken when filters are active (PHP array_filter on subset)
+
+---
+72daf46c466b | 2026-03-26 22:42
+docs: backend audit — add refactor & maintenance task list to TODO.md
+
+Full analysis of PHP and SQLite layer covering:
+
+Performance:
+- WAL mode + cache_size pragma missing from Database constructor
+- Separate is_published/year indexes force temp B-tree sort on every public query
+- v_theses_full materialised as CTE on every query, indexes never used by view
+- getAllPublishedTheses() runs full 15-join view just for the author name index
+
+PHP / Database.php:
+- 5 dead CRUD helpers (getOrientationId etc.) never called anywhere
+- 13 alias methods doubling every lookup; pick canonical names and remove
+- getPDO()/getConnection() leaking to 8 call-sites with raw SQL that belongs in DB layer
+- Unparameterised query in edit.php line 155 (SQL injection, fix immediately)
+- sanitize_string() HTML-escapes at write time — stores &amp; in DB, breaks search/export
+- Dead variable $problematique in formulaire.php (read from POST, never used)
+- setThesisJury() has no transaction guard of its own
+- DB config auto-detection silently uses test.db if file exists locally
+
+Maintainability:
+- edit.php (530 lines) mixes display + POST + file upload — extract action file
+- Banner upload logic copy-pasted between formulaire.php and edit.php
+- Junction-table loops open-coded in every action; add setThesisLanguages/Formats/Tags
+- RateLimit writes a JSON file on every public request
+- __wakeup() throws from public method (PHP 8 deprecation)
+
+---
+b12ae73e9104 | 2026-03-26 18:54
+tests: fix SecurityTest fatal TypeError — update searchTheses call to use array params
+
+SecurityTest::Test1 was calling $db->searchTheses($string) with a plain
+string, but searchTheses() was refactored to require array $params when
+the tag M2M work landed.  This caused an immediate PHP fatal TypeError
+before any SQL ever ran, killing the entire Security test suite with
+exit code 255 and masking all three tests.
+
+Fix: pass each malicious payload via ['query' => $string] which is the
+correct API and properly exercises the parameterised query path through
+validateSearchParams() + buildSearchConditions().  Added a clarifying
+comment explaining why the array form is required.
+
+All 4 test suites now pass:
+  - Database (Unit):   7/7
+  - Rate Limit (Unit): 5/5
+  - Search (Integration): 6/6
+  - Security:          3/3
+
+---
+e4be230a0480 | 2026-03-26 11:23
+admin/system: add nginx config viewer tab
+
+Add a 'nginx — config' tab to the Système admin page (system.php).
+
+- Reads /etc/nginx/sites-available/posterg (live deployed config) first;
+  falls back to nginx/posterg.conf (local reference copy) when the live
+  path is inaccessible (e.g. in dev, or wrong permissions).
+- Displays a colour-coded badge: green '● Config déployée' for live,
+  amber '⚠ Référence locale' for the fallback.
+- Renders the full config in the shared .log-output code block with
+  line numbers (data-n gutter via CSS ::before) and lightweight nginx
+  syntax colouring (comments grey, block keywords purple, directives blue).
+- Reuses the existing copy-to-clipboard button.
+- Tab routing: activeTab validation extended to accept 'nginx_config';
+  log pre-loading guards skip when activeTab is 'nginx_config'.
+- No remote execution: read-only, zero new attack surface.
+
+---
+45acadaa0af2 | 2026-03-24 18:23
+Instructions pour DEV sur MACOS → DEV.md
+
+---
+37f3a07c6e51 | 2026-03-24 15:55
+admin: merge status + logs into unified system.php with instant tabs
+
+Replace the separate /admin/status.php and /admin/logs.php pages with a
+single /admin/system.php page organised around a tab bar.
+
+- system.php — top-level tab bar: 'Statut' + one tab per log file
+  (nginx accès, nginx erreurs, PHP-FPM).  Switching tabs is a plain
+  href (?tab=…) so no JS required for navigation; the lines-selector
+  SELECT triggers a location change on 'change' for instant reload
+  without a submit button.
+- Status tab preserves all existing service cards, PHP runtime grid,
+  and disk-usage bar from the old status.php.
+- Log tabs preserve line-count selector, file metadata bar, and
+  per-line colour coding from the old logs.php.
+- New: copy-to-clipboard button on each log output block (Clipboard
+  API with textarea execCommand fallback).
+- status.php / logs.php replaced with 301 redirect stubs so existing
+  bookmarks and links keep working.
+- templates/admin/head.php: 'Statut' + 'Journaux' nav items replaced
+  with a single 'Système' item; active state covers all three page
+  names for redirect compatibility.
+
+---
+ea48f4a5f582 | 2026-03-24 15:52
+todo: add system page merge + logs tab/copy tasks
+
+---
+20a633c0e2f7 | 2026-03-24 15:52
+Add admin account page for PHP password management
+
+Implements the admin user management UI as a self-contained PHP password
+change/set flow — no SSH or sudo required.
+
+- public/admin/account.php: shows auth status (PHP hash present, credentials
+  file path), password change form (requires current password when one exists,
+  min 12 chars, confirm field), and a danger-zone form to delete the
+  credentials file entirely
+- public/admin/actions/account.php: CSRF-guarded POST handler; verifies
+  current password via AdminAuth::login() before accepting a new one;
+  generates bcrypt (cost 12) hash; writes config/admin_credentials.php
+  atomically via a temp file + rename; regenerates session on success;
+  redirects to /admin/login.php when credentials are deleted
+- templates/admin/head.php: 'Compte' nav link added (active on account.php)
+- public/assets/admin.css: .admin-account-status, .admin-section-title,
+  .admin-field-hint, .admin-danger-zone component styles added
+
+Note: the nginx htpasswd flow (manage-admin-users.sh) requires root on the
+server and is intentionally kept as a CLI-only operation.
+
+---
+020bfa5a3362 | 2026-03-24 15:47
+admin: add server log viewer; fix curl_close() PHP 8.5 deprecation in status.php
+
+- public/admin/logs.php: new page tailing nginx error/access + PHP-FPM logs.
+  Selector for log file and line count (50/100/200/500, default 100).
+  Lines reversed (newest first), colour-coded by severity, numbered gutter.
+  Graceful degradation when exec() unavailable or file unreadable (dev msg).
+
+- templates/admin/head.php: 'Journaux' nav link added after 'Statut'.
+
+- public/admin/status.php: remove curl_close() call deprecated in PHP 8.5
+  (no-op since PHP 8.0); replace with unset($ch) to silence the warning
+  that was leaking raw text above the page output.
+
+---
+c678b7549471 | 2026-03-24 15:41
+Add admin server status page
+
+New page /admin/status.php gives a real-time health dashboard:
+
+- Services panel: nginx (systemctl), php-fpm (auto-detects versioned unit names),
+  site HTTP ping (curl HEAD with latency), SQLite DB (exists/writable/row count/size),
+  storage directory (writable, banner/cover file counts), maintenance-mode flag.
+- PHP runtime panel: version, SAPI, memory_limit, upload_max_filesize, post_max_size,
+  max_execution_time.
+- Disk usage bar for the partition containing APP_ROOT (colour-coded: green/amber/red).
+- All shell calls go through safeExec() which suppresses stderr and checks exit code;
+  systemctl/curl unavailability degrades gracefully to 'unknown' without fatal errors.
+- 'Statut' nav link added to templates/admin/head.php (active state on status.php).
+
+---
+ed2b06a34c5a | 2026-03-24 15:39
+feat: cover image fallback for home grid cards
+
+- index.php: batch-load thesis_files covers for theses without banner_path
+- Resolution order: banner_path → cover file → gradient placeholder
+- Uses single IN() query to avoid N+1 problem
+
+---
+372abb5cd624 | 2026-03-24 15:38
+feat: tag management tests, maintenance mode polish, répertoire pagination fix
+
+- tests/Unit/DatabaseTest.php: tests 5-7 for findOrCreateTag round-trip, getUsedTags column, alias
+- tests/Integration/SearchTest.php: tests 4-6 for tag subquery, full-text query, count consistency
+- Database: getAllPublishedTheses() bypasses 100-row search cap for student index
+- search.php: uses getAllPublishedTheses() for étudiantes column; all tests pass
+
+---
+92e344b757cf | 2026-03-24 15:35
+feat: admin tag management, maintenance mode, TFE visibility states
+
+Tags admin:
+- Database: getAllTagsWithCount(), renameTag(), mergeTag(), deleteTag()
+- public/admin/tags.php: table with inline rename/merge/delete forms, CSRF-guarded
+- public/admin/actions/tag.php: routes on action=rename|merge|delete
+- templates/admin/head.php: 'Mots-clés' nav link
+- admin.css: admin-inline-form, admin-btn--sm/warning/danger variants
+
+Maintenance mode:
+- config/bootstrap.php: gate on MAINTENANCE_FLAG file; admin/ and maintenance.php exempt
+- public/maintenance.php: 503 dark minimal page
+- public/admin/actions/maintenance.php: enable/disable toggle
+- public/admin/index.php: status bar with toggle button
+- admin.css: admin-maintenance-bar styles
+
+TFE Visibility (Libre/Interne/Interdit via existing access_type_id):
+- migration 002_add_visibility.sql: seeds access_types if missing
+- Database: setVisibility(), bulkSetVisibility(), getAccessTypes()
+- public/media.php: blocks thesis files for access_type_id=3
+- public/tfe.php: shows access_type, context_note; hides file panel for Interdit
+- public/admin/edit.php: access_type_id select + context_note textarea; saves both
+- public/admin/index.php: three-state badge (Libre/Interne/Interdit) per row
+- public/admin/actions/visibility.php: single + bulk visibility action handler
+- admin.css: status-access badge variants
+
+---
+0933137540a6 | 2026-03-24 13:30
+refactor: rename keywords→tags M2M (migration 001)
+
+- migration 001_rename_keywords_to_tags.sql: CREATE tags/thesis_tags from keywords/thesis_keywords,
+  copy data, drop old tables, rebuild indexes and views
+- schema.sql: tags table, thesis_tags junction, updated indexes and v_theses_full/v_theses_public
+- Database.php: findOrCreateTag(), getUsedTags() with proper JOIN; backwards-compat aliases;
+  buildSearchConditions uses EXISTS subquery on thesis_tags+tags with vp. alias throughout
+- admin/actions/formulaire.php: INSERT OR IGNORE INTO thesis_tags
+- admin/edit.php: DELETE FROM thesis_tags + findOrCreateTag
+- search.php: $kw['name'] (was $kw['keyword'])
+- fixtures/CreateTestDatabase.php: tags/thesis_tags table names
+
+---
+cefceb046c7a | 2026-03-24 13:25
+feat: jury composition + banner image upload
+
+- migration 004: thesis_supervisors.role + is_external; view adds jury_president/jury_promoteurs/jury_lecteurs
+- migration 005: theses.banner_path; view exposes t.banner_path and t.license_id
+- Database: getThesisJury(), setThesisJury(), setBannerPath()
+- admin/add.php: jury fieldset (président/promoteur/lecteurs + externe checkboxes, JS add/remove rows); banner file input
+- admin/edit.php: jury fieldset pre-populated from DB; banner preview + remove checkbox + upload; multipart form
+- admin/actions/formulaire.php: parse jury fields → setThesisJury(); banner upload to banners/
+- tfe.php: three conditional jury rows (président·e, promoteur·ice, lecteur·ices)
+- schema.sql: updated thesis_supervisors, theses, v_theses_full, v_theses_public definitions
+- admin.css: fieldset, jury-row, jury-entry, btn-remove styles
+
+---
+d87348c388c4 | 2026-03-24 13:12
+feat: licence page, admin pages editor, license types, gradient card placeholders, latest-year home view
+
+- Feature 1: public /licence.php fetches 'licenses' page from DB, renders Markdown
+- Feature 1: nav.php adds 'Licence' link with active state
+- Feature 2: Database::getPage(), savePage(), getAllPages() methods
+- Feature 2: bundled src/Parsedown.php (MIT, zero-dependency)
+- Feature 2: apropos.php now renders 'about' page content from DB via Parsedown
+- Feature 2: admin/pages.php (list) + admin/pages-edit.php (EasyMDE editor)
+- Feature 2: admin/actions/page.php (auth+CSRF+validation+save)
+- Feature 2: admin/head.php adds 'Pages statiques' nav link
+- Feature 3: storage/schema.sql seeds 8 CC license types
+- Feature 3: storage/migrations/003_seed_license_types.sql (applied to live DB)
+- Feature 3: Database::getLicenseTypes() / getAllLicenseTypes()
+- Feature 3: admin/add.php + formulaire.php: license_id field on add form
+- Feature 3: admin/edit.php: license_id field on edit form with raw FK lookup
+- Feature 3: tfe.php: shows 'Licence :' meta row when non-null
+- Feature 6: main.css: .card__media--gradient styles
+- Feature 6: index.php: deterministic HSL gradient placeholder cards
+- Feature 6: Database::getLatestYearTheses() + getLatestPublishedYear()
+- Feature 6: index.php default home = random latest-year theses with info label
+
+---
+86a2082edcfe | 2026-03-24 12:55
+docs: add feature tasks for licence page, admin WYSIWYG, jury section, banner upload, and home randomisation
+
+---
+f8a4bfb612f0 | 2026-03-24 12:40
+docs: add maintenance mode + TFE visibility tasks to TODO
+
+---
+4131fc07e9bc | 2026-03-23 11:03
+docs: add admin tag management UI task to TODO
+
+---
+6d2c50f0b983 | 2026-03-23 11:00
+docs: add M2M tags refactor task proposal to TODO
+
+---
+46040328a42a | 2026-03-11 12:39
+add flake.nix for Nix PHP dev shell
+
+---
+7208292c0e47 | 2026-03-02 15:51
+deploy-nginx: add recipe, upload scripts to /tmp, print sudo instructions
+
+---
+5e1543e9a8ac | 2026-03-02 15:46
+nginx: relax admin rate limit to 60r/m burst=20 (was 10r/m burst=5)
+
+---
+1fb9644d5a7c | 2026-03-02 15:43
+fix favicon 404s: add <link rel=icon> to all pages, nginx 204 for /favicon.ico
+
+---
+e4b2205eac65 | 2026-03-02 15:32
+fix rsync permissions: setup-server.sh with setgid dirs, exclude .claude/.pi
+
+---
+52978aa658ec | 2026-03-02 15:24
+ops: simplify justfile, guard deploy-db, extract scripts, fix .gitignore
+
+---
+2110d2b916f5 | 2026-02-24 23:34
+Redesign UI to match target design images
+
+- Flat purple-gradient nav bar with POSTERG/RÉPERTOIRE/À PROPOS links
+- Full-width search bar with icon, bottom-border only, below nav
+- Home: white bg, media card grid (thumbnail + author/title label below)
+- Répertoire: 4-column index (Années/Catégories/Étudiantes/Mots-clés)
+- TFE: 2-column layout (large text left, media right)
+- À Propos: 2-column, large monospace text, new apropos.php page
+- Admin: dark theme (#1a1a1a), purple gradient nav, bottom-border inputs
+- New shared partials: templates/nav.php, templates/search-bar.php
+- Rewrote all CSS: common, main, search, tfe, apropos, admin
+
+---
+eaad74057464 | 2026-02-24 23:21
+refactor: extract buildSearchConditions, add getThesesList, remove dead code, fix SearchTest
+
+- Database: extract private buildSearchConditions(array $params): array shared by
+  searchTheses() and countSearchResults(), eliminating ~80 lines of duplication;
+  add array type hints to both public methods
+- Database: add getThesesList(array $filters) and getAllYears() so admin/index.php
+  no longer builds raw SQL inline
+- admin/index.php: replace inline PDO query block with $db->getThesesList() /
+  $db->getAllYears(); drop the now-unused $pdo local
+- config/bootstrap.php: remove dead include_template() helper and the
+  vendor/autoload.php Composer stub (no vendor/ directory exists)
+- apps/: delete entire directory (leftover artefact, no code references it)
+- tests/Integration/SearchTest.php: fix three searchTheses() calls from bare
+  strings to proper array params to match the method signature (prevented TypeError)
+
+---
+d30153871fe5 | 2026-02-24 23:19
+fix: resolve broken lib/ require paths in admin and normalise modern-normalize to .min.css
+
+---
+da53d567443a | 2026-02-24 23:11
+analysis: dependency audit and refactoring task proposals in TODO.md
+
+---
+73c27a067dac | 2026-02-12 13:23
+Make search page header more compact and fix layout structure
+
+- Reduce all spacing and padding in header for more compact fit
+- Fix back button overflow by removing width: 100% and adding overflow handling
+- Make filter section more compact with smaller fonts and spacing
+- Add main-wrapper div to group main and footer
+- Keep rounded corners (40px) on all three sections like main.css
+- Footer stays at bottom of main content area
+- Fix HTML structure: footer outside main, both inside wrapper
+
+---
+bc98df4993cd | 2026-02-12 13:22
+Improve search page with denser header and filter layout
+
+- Transform header into compact search bar with back button
+- Move filters panel underneath search bar (collapsible)
+- Display results in grid layout matching main.css style
+- Add pagination controls in main section
+- Show result count in footer
+- Prevent overflow with responsive design and proper flex constraints
+- Reduce padding and font sizes for denser layout
+
+---
+061b2b540e82 | 2026-02-12 13:12
+Improve card layout: move pagination inside main, add responsive grid (3 rows × 4 cols = 12 items), display keywords as tags, optimize text sizes and spacing
+
+---
+73b0093b26ea | 2026-02-12 12:46
+feat: rename memoire to tfe and improve styling
+
+- Rename memoire.php to tfe.php throughout codebase
+- Create dedicated tfe.css with rounded header/main/footer layout
+- Move metadata (orientation, AP program, finality, keywords) to header
+- Move back button from header to footer
+- Create shared templates/head.php for common HTML head section
+- Maintain rounded borders (40px) matching main site design
+- Keep purple header (#9557b5), green main (#3c856b), dark footer (#222)
+- Improve content readability with centered max-width layout
+- Add responsive design for mobile devices
+
+---
+9f6147577bb0 | 2026-02-12 12:30
+refactor: improve layout ratios and pagination UI
+
+Layout improvements:
+- Fixed header/main/footer ratios to 2:5, 3:5, 1:5 using flex
+- Default to sans-serif font system stack
+- Made sections properly flex-based instead of viewport height
+
+Pagination improvements:
+- First/previous/next/last navigation buttons (‹‹ ‹ › ››)
+- Current page highlighted in colored badge
+- Disabled state for unavailable actions
+- Clean rounded button design with hover effects
+- Proper spacing and visual hierarchy
+
+Card styling:
+- Better typography hierarchy
+- Hover effects (lift + shadow)
+- Improved spacing and readability
+- Year displayed in brand color
+
+Tests passing ✅
+
+---
+9511bb93b501 | 2026-02-12 12:26
+feat: add year filter to main index
+
+- Footer now displays all available years horizontally with scroll
+- Click on year filters thesis list to that year
+- Active year highlighted in footer
+- 'Tous' link to reset filter
+- Filter info banner shows when year selected with reset button
+- Pagination preserves year filter
+- Styled with horizontal scroll, smooth scrollbar
+- Tests passing ✅
+
+---
+942a93a3ad14 | 2026-02-12 12:20
+refactor: update nginx config for new structure
+
+- Updated posterg.conf with new directory structure
+- Document root: /var/www/posterg/public
+- Explicitly deny access to: /src, /templates, /config, /storage, /tests, /scripts, /docs
+- Added structure diagram in comments
+- Updated deploy scripts security checks
+- Replaced outdated posterg.conf.reference
+
+All non-public directories outside webroot for security.
+Defense-in-depth: explicit deny rules even though paths outside /public.
+
+---
+87971f9c2318 | 2026-02-12 12:15
+refactor: extract templates from public/
+
+- Created /templates for main site (header.php, footer.php)
+- Created /templates/admin for admin section (head.php, footer.php)
+- Removed /public/includes and /public/admin/inc
+- Updated all references in code and docs
+- Tests passing ✅
+
+Cleaner separation: /public only contains web-accessible files (PHP entry points + assets)
+
+---
+7fca85d1c12a | 2026-02-12 12:12
+refactor: rename database → storage
+
+More semantically accurate: contains SQLite files, schema, fixtures, test data.
+Updated all references in code, scripts, docs.
+
+---
+0e4921583e45 | 2026-02-12 12:11
+refactor: reorganize to standard PHP structure
+
+- Moved /lib → /src (PHP source code)
+- Moved /includes → /public/includes (main site templates)
+- Admin section remains self-contained in /public/admin with its own /inc
+- Updated all require/include paths across codebase
+- Updated config/bootstrap.php, justfile, tests, docs
+- All tests passing ✅
+
+Structure now follows PHP best practices:
+  /config      - Configuration files
+  /database    - SQLite database + schema
+  /docs        - Documentation (intact)
+  /nginx       - Server config (intact)
+  /public      - Web-accessible files (entry point)
+    /admin     - Self-contained admin interface
+    /assets    - CSS, fonts, icons
+    /includes  - Main site templates (header/footer)
+  /scripts     - Deployment scripts (intact)
+  /src         - PHP source classes (Database, AdminAuth, RateLimit)
+  /tests       - Test suites
+
+---
+0b650cd3e727 | 2026-02-12 10:37
+Work on the admin section styling
+
+---
+8613f7111253 | 2026-02-08 14:12
+security: add PHP session auth guard for admin panel (item #2, CRITICAL)
+
+- lib/AdminAuth.php: new class with requireLogin(), login(), logout(),
+  isAuthenticated(); starts session with hardened cookie params
+  (HttpOnly, SameSite=Strict, Secure, Path=/admin) — also resolves
+  item #8 (session cookie hardening)
+- requireLogin() auto-authenticates from nginx Basic Auth credentials
+  ($_SERVER['PHP_AUTH_PW']) so the user only sees one browser prompt;
+  falls back to /admin/login.php if the proxy is absent/misconfigured
+- config/admin_credentials.php: gitignored credential store; define
+  ADMIN_PASSWORD_HASH with a bcrypt hash to enable PHP auth
+- config/admin_credentials.example.php: template for the above
+- config/bootstrap.php: auto-loads admin_credentials.php if present
+- .gitignore: exclude config/admin_credentials.php
+- public/admin/login.php: fallback login form (shown only when nginx
+  Basic Auth is bypassed / proxy absent)
+- public/admin/logout.php: session destruction + redirect to login
+- All 7 admin PHP files: replace session_start() with
+  AdminAuth::requireLogin() (defence-in-depth behind nginx Basic Auth)
+- public/admin/inc/head.php: Déconnexion button when ADMIN_PASSWORD_HASH
+  is defined
+- nginx/PHP_AUTH_LAYER.md: documents dual-auth architecture, UX flow,
+  and setup instructions
+- docs/TODO.SECURITY.md: items #2 and #8 moved to Resolved; priority
+  order updated (all CRITICAL done)
+
+---
+a2b1ff5f4148 | 2026-02-08 14:01
+security: fix all HIGH priority items from TODO.SECURITY.md
+
+Items resolved:
+- #3 (HIGH): Move file uploads outside webroot to STORAGE_ROOT (/var/www/posterg/storage).
+  Uploads were previously stored in public/admin/actions/data/ which is web-accessible.
+- #4 (HIGH): Align file paths and add media.php controller.
+  DB paths are now storage-relative (theses/YEAR/ID/file, covers/file).
+  New public/media.php serves files with path-traversal jail, MIME allow-list,
+  and proper caching headers. memoire.php and search.php updated to use /media.php?path=.
+  Also fixed: cover images were never recorded in thesis_files (broken INSERT).
+- #5 (HIGH): RateLimit::getClientIdentifier() now uses REMOTE_ADDR only.
+  HTTP_X_FORWARDED_FOR and HTTP_CLIENT_IP are attacker-controlled headers that
+  allowed unlimited rate-limit bypass by rotating spoofed IPs.
+- #6 (HIGH): Port public/admin/.htaccess security rules to nginx/posterg.conf.
+  Apache .htaccess directives are silently ignored by nginx; none were active.
+  CSP added to /admin/ location block, .log file denial added globally,
+  autoindex off made explicit. Documented in nginx/HTACCESS_TO_NGINX.md.
+
+Supporting changes:
+- config/bootstrap.php: add STORAGE_ROOT constant
+- nginx/SECURITY_HEADERS.md: updated to reflect admin CSP and pending public CSP
+- docs/TODO.SECURITY.md: items #3-6 moved to resolved; priority order updated
+
+---
+f5d3281c4301 | 2026-02-08 11:58
+security: fix all LOW priority items from TODO.SECURITY.md
+
+Item 13 — Remove deprecated X-XSS-Protection header
+- nginx/posterg.conf: header removed (was '1; mode=block')
+- nginx/SECURITY_HEADERS.md: new file documenting header decisions
+  and explaining why X-XSS-Protection is counterproductive
+
+Item 14 — Add rel="noreferrer" to external target="_blank" link
+- public/admin/thanks.php: rel="noopener" → rel="noopener noreferrer"
+
+Item 15 — Explicit (int) casts on all integer HTML outputs
+- public/index.php: (int) on item id, page numbers
+- public/search.php: (int) on totalItems, year options, item id, pagination
+
+Item 16 — Remove unused DATABASE_PATH constant
+- config/bootstrap.php: define('DATABASE_PATH', ...) removed
+
+docs/TODO.SECURITY.md updated: items 13-16 marked resolved and
+moved to the ✅ Resolved section.
+
+---
+94d110438fd8 | 2026-02-06 14:31
+docs: rewrite admin panel README
+
+---
+df611b0333fe | 2026-02-06 14:31
+admin: unify templates, dynamic navigation, and PHP cleanup
+
+---
+52decc3e5fea | 2026-02-06 14:31
+admin css: expand stylesheet with reusable component classes
+
+---
+87f0838b5d43 | 2026-02-06 14:31
+dev: add live-reload development server
+
+---
+52f8e267e5a6 | 2026-02-06 14:31
+admin: restructure action scripts to actions/ subdirectory
+
+---
+f7132ecb7d0f | 2026-02-06 13:26
+CSS fixup
+
+---
+4bbbc58e24ee | 2026-02-06 12:14
+Fix admin CSS not loading and quirks mode issues
+
+Fixed multiple issues in admin panel:
+
+1. CSS path: modern-normalize.css → modern-normalize.min.css
+   (File is actually named .min.css)
+
+2. Icon path: assets/icon.svg → /assets/admin_favicon.svg
+   (Was relative, now absolute; correct filename)
+
+3. Navigation: /admin/list.php → /admin/
+   (list.php was renamed to index.php)
+
+4. Short PHP tags: <? → <?php
+   (Better compatibility, some servers don't enable short_open_tag)
+
+5. Quirks mode warning was due to CSS not loading, not DOCTYPE
+   (DOCTYPE was already present)
+
+Files modified:
+- public/admin/inc/head.php (main fixes)
+- public/admin/index.php (short tags)
+- public/admin/add.php (short tags)
+- public/admin/import.php (short tags)
+
+Need to redeploy for production: just deploy
+
+---
+e789c286de1b | 2026-02-06 11:33
+Refactor admin panel and add migration documentation
+
+- Add comprehensive migration guides (DEPLOYMENT_MIGRATION.md, DIRECTORY_STRUCTURE.md, MIGRATION_CHECKLIST.md)
+- Refactor admin panel: split add.php, create reusable header/footer
+- Update styles: admin.css, common.css, main.css
+- Improve public pages: index.php, memoire.php
+- Reorganize database documentation into database/docs/
+- Update .gitignore and justfile
+
+This prepares for migration to public/ directory structure
+
+---
+d2b3c6ca6711 | 2026-02-05 20:07
+Major refactor
+
+- update the structure to have monolithic setup
+- updated deployments
+- added live-reloading for devops
+
+---
+f23fbb481b64 | 2026-02-05 17:33
+Nginx config, working deploy, basic theme, repo cleanup 
+
+---
+2cb543664730 | 2026-02-02 18:56
+Added Claude assessements
+
+---
+467aced73476 | 2026-01-28 10:24
+Restructure repository and implement secure search feature
+
+Phase 1: Consolidate shared infrastructure
+- Create shared/ directory for common code
+- Consolidate Database.php from front-backend and formulaire into unified shared/Database.php
+  - Smart path detection for test.db vs posterg.db
+  - Secure search with wildcard escaping and input validation
+  - Support both singleton and direct instantiation patterns
+  - Full CRUD methods for admin functionality
+- Move RateLimit.php to shared/ (30 requests/min)
+- Update all require paths across apps to use shared/
+
+Phase 2: Reorganize directory structure
+- Rename front-backend/ → apps/public/
+- Rename formulaire/ → apps/admin/
+- Rename db/ → database/
+- Update all file paths for new structure
+- Create root .gitignore excluding databases, cache, logs
+
+Implement secure search feature
+- Add apps/public/search.php with full-text search across theses
+- Search filters: query, year, orientation, AP program, keywords
+- Security features:
+  - SQL injection prevention (prepared statements)
+  - Wildcard injection prevention (escape % and _)
+  - Input validation (max 200 chars, year range 1900-2100)
+  - Rate limiting (30 req/min per IP)
+  - Pagination limited to 100 results/page
+  - XSS protection (htmlspecialchars on output)
+
+Add comprehensive test suite
+- Create apps/public/tests/ with proper structure
+  - tests/Integration/SearchTest.php - 12 search scenarios
+  - tests/Security/SecurityTest.php - vulnerability testing
+  - tests/Unit/RateLimitTest.php - rate limit behavior
+- Create database/fixtures/CreateTestDatabase.php
+- Add apps/public/run-tests.php test runner
+- All tests passing (4/4 suites)
+
+Update deployment configuration
+- Rename justfile 'sync' recipe to 'deploy'
+- Create deploy group with separate deploy-public and deploy-admin
+- Add test-deploy recipe for test database
+- Exclude *.db, tests/, cache/, *.md from production deploy
+- Deploy shared/ to both public and admin locations
+
+Stats: +4482 insertions, -654 deletions across 72 files
+
+---
+95f52d549e85 | 2026-01-27 15:43
+Add comprehensive thesis management system with database migration
+
+This commit introduces a complete thesis management interface and migrates
+the system from YAML-based storage to SQLite:
+
+Core Changes:
+- Add Database.php helper class with PDO connection and entity management
+- Add list.php for viewing all theses with filtering and sorting
+- Add edit.php for modifying existing thesis records
+- Add import.php for migrating legacy YAML data to SQLite
+- Add justfile with development tasks (serve, init-test-db, etc.)
+
+Documentation:
+- Add MIGRATION.md with complete migration guide and architecture docs
+- Update README.md with database setup and Just recipe instructions
+- Update .gitignore to exclude test databases and error logs
+
+Modified Forms:
+- Enhanced formulaire.php with transaction-based SQLite processing
+- Updated index.php with database-driven form options
+- Improved thanks.php to read from database views
+
+The new architecture provides:
+- Normalized database schema (19 tables, 2 views)
+- Transaction safety and referential integrity
+- CRUD operations for thesis management
+- Filtering by year, orientation, AP program, publication status
+- Secure file handling with metadata tracking
+
+🤖 Generated with [Claude Code](https://claude.com/claude-code)
+
+Co-Authored-By: Claude <noreply@anthropic.com>
+
+---
+99ccd60f9007 | 2026-01-27 15:19
+Add SQLite database schema and documentation
+
+Added complete database schema for Post-ERG thesis archive:
+- schema.sql with full relational database structure
+- README.md with schema documentation and usage examples
+- SETUP.md with comprehensive setup and maintenance guide
+- posterg_fiche-technique.md with technical specifications
+- Database_TFE_test.csv and .ods with example data
+
+Database features:
+- Normalized relational schema (3NF)
+- Support for multiple authors, supervisors, languages, formats, keywords
+- Publication workflow (submission → defense → jury review → publication)
+- Access control (Libre/Interne/Interdit)
+- File attachments tracking
+- Predefined reference tables for orientations, AP programs, finalities
+- Views for simplified querying
+- Automatic timestamps and cascade deletes
+
+---
+0d3fc3ab9a9a | 2026-01-26 20:02
+Added justfile recipe file and the .gitignore
+
+---
+14c82cfeed27 | 2026-01-26 15:44
+Mise à jours et création de READMEs dédier.
+
+---
+2d343eee06b2 | 2026-01-26 15:24
+Organize into monorepo structure with resolved conflicts
+
+---
+37ec8aa5c1a2 | 2026-01-26 15:45
+Prepare formulaire branch for merge
+
+---
+0697753dd345 | 2026-01-26 15:24
+Move formulaire files to formulaire/
diff --git a/docs/LIVRAISONS_PAR_MOIS.md b/docs/LIVRAISONS_PAR_MOIS.md
new file mode 100644
index 0000000..1ae1c25
--- /dev/null
+++ b/docs/LIVRAISONS_PAR_MOIS.md
@@ -0,0 +1,139 @@
+# Livraisons par mois — xamxam
+
+## Janvier 2026 (8 commits)
+
+- Site public affichant le contenu de la DB + fichiers
+- Formulaire de soumission séparé → écriture en base
+- Première version des contrôleurs TFE (création, édition)
+- Structure initiale du projet : routing, templates, DB SQLite
+- Schéma de base de données (theses, auteurs, formats, langues, etc.)
+
+## Février 2026 (29 commits)
+
+- Formulaire admin + formulaire étudiant (partage)
+- Soumissions étudiant via liens de partage (share links)
+- Système de visibilité : Libre / Interne / Interdit
+- Pages statiques éditables (À propos) → début du CMS
+- Gestion des fichiers uploadés (stockage, affichage)
+- Export CSV des TFE
+- Import CSV des TFE
+- Structure admin : index, navigation, table listant les TFE
+- Base du système de licences (CC2r)
+
+## Mars 2026 (74 commits)
+
+- Édition / correction / suppression des entrées TFE dans l'admin
+- Récapitulatif admin après soumission
+- Affichage public des TFE (page tfe.php)
+- Moteur de recherche dans le répertoire (par nom)
+- Filtres par orientation, AP, année, langue, finalité
+- Système d'authentification admin (login / mot de passe / session)
+- Protection par mot de passe des fichiers « Interne »
+- Données internes : points du jury, remarques, lien BAIU, exemplaires
+- Colonnes du répertoire : années, orientations, AP, mots-clés, noms
+- Rework CSS majeur (variables, typographie, thème clair/sombre)
+- Intégration HTMX pour les interactions dynamiques
+- Upload de fichiers avec queues JS (avant FilePond)
+- Structure formulaire : champs conditionnels selon les formats
+- PDF obligatoire / optionnel selon les formats
+- Jury (promoteurices, lecteurices) dans le formulaire admin
+
+## Avril 2026 (207 commits)
+
+- Refonte complète des uploads : FilePond remplace les queues custom
+- Architecture d'upload asynchrone FilePond (process/revert/load/remove)
+- Pool unique TFE acceptant tous les formats (vidéo, audio, etc.)
+- Upload de masse avec barre de progression
+- Intégration PeerTube pour vidéos / audio (upload API, embed)
+- Système de brouillon automatique (autosave) pour le formulaire partage
+- Fragments HTMX partagés admin / partage (formats, fichiers, licence)
+- Extraction du JS inline en modules externes (admin-logs, clipboard, pill-search, etc.)
+- Composant pill-search pour mots-clés et langues (autocomplete HTMX)
+- Gestion des mots-clés et langues dans l'admin (rename, merge, delete)
+- TOC sidebar dans les pages admin (IntersectionObserver)
+- Tri des colonnes dans l'index admin (Auteur, Accès, etc.)
+- Liens de partage : nom éditable, expiration, dialogue d'édition
+- Obfuscation des emails en entités HTML (EmailObfuscator)
+- Récapitulatif exhaustif (partage + admin)
+- Champs conditionnels : website URL, annexes, PeerTube vs. upload direct
+- Promoteurices multiples (interne + ULB) avec ajout/suppression dynamique
+- Formulaire mobile responsive
+- Contact visible / contact interne découplés
+- CC2r renommé (ex-CC4r), restructuration des licences
+- Pages statiques : Charte, Licence, À propos avec TOC sticky
+- Checkboxes admin en auto-save HTMX avec toasts de feedback
+- Backups SQLite automatisés (horaire + quotidien, cron)
+- Déploiement : recettes justfile, vérification permissions, migrations incrémentales
+- Content-Security-Policy, HSTS, SameSite cookies
+- Script de scan passif de sécu (pentest)
+- Chiffrement du mot de passe SMTP (AES-256-GCM)
+- Rate limiting sur les endpoints sensibles
+
+## Mai 2026 (156 commits)
+
+- FilePond : correction crash « can't access property main », tailles en bytes
+- Fichiers temporaires FilePond survivent au rechargement de page
+- Relink de fichiers orphelins (file browser + FilePond integration)
+- Trash policy : suppression → tmp/_trash avec traçabilité
+- Storage prefix : theses/ → documents/
+- Recap admin : sections → fieldsets, fichiers en table
+- Extraction de FormBootstrap pour DRY add/edit
+- Système de colonnes thesis_status (two-phase commit lifecycle)
+- Draft autosave avec persistence session (HTMX POST/GET fragments)
+- Guard no-JS file uploads (filepond_mode désactivé par défaut)
+- Accessibilité formulaire : aria-errormessage, aria-invalid, aria-describedby
+- Cibles tactiles 44×44px minimum (WCAG 2.5.5)
+- Nettoyage périodique des brouillons orphelins (cron)
+- Durée TFE : colonnes DB, champs formulaire, affichage XhYm
+- Déploiement : split deploy-code/deploy-deps/deploy-migrate
+- Intégration Monolog : 4 canaux PSR-3 remplaçant 4 systèmes de log
+- Tests PHPUnit : 228 tests, couverture 21,27%
+- Remplacement Parsedown → league/commonmark
+- Remplacement client HTTP custom → Guzzle
+- Remplacement SMTP socket → PHPMailer
+- Composer.json et autoloader
+- Refactor architecture CSS : layers (reset → colors → typography → base → components)
+- Composants CSS dédiés par fichier (links, focus, forms, tables, dialog, etc.)
+- SVG icons inline via helper PHP (icon()) — plus de <img> pour icônes
+- Style global : liens regular, body light, hover violet, police BBB DM Sans
+- Page TFE : layout auteur > titre > meta + synopsis 2-col > fichiers flex
+- Répertoire : colonnes triées (match first), scrollbars discrètes, pas de chip bar mobile
+- Accordéon mobile pour les filtres du répertoire
+- Détails/summary TOC pour pages statiques (responsive)
+- Contenus-edit : auto-save, toolbar OverType, liens sidebar dynamiques
+- Gestion des contacts admin (grille 3 colonnes, suppression, réindexation)
+- Corrections d'identifiants (year-prefix mismatch), migrations PHP
+- Fix contact_interne / contact_visible (découplage complet)
+- Author name casing (COLLATE NOCASE, idHint lookup)
+- Finalité master affichée sur la page publique TFE
+- Suppression vidéos PeerTube lors de la suppression d'un TFE
+- Nettoyage logs, gitignore vendor/, icône de recherche
+- Build pipeline : biome + rolldown + lightningcss (bundling/minification)
+- Dev-watch avec chokidar-cli (reconstruction live)
+- Gzip activé dans nginx + ~730 lignes de JS inline → 15 fichiers externes
+- Scroll-position memory sur les swaps HTMX du répertoire
+- Correctifs sécu (open redirect, CSRF partage, gate session, verifyCsrf)
+- Biome lint fixes (duplicate CSS, arrow functions)
+
+## Juin 2026 (82 commits)
+
+- Migration icônes <img> → SVG inline (26 templates, helper icon())
+- Cleanup dialog : suppression doublons, hx-confirm sur delete
+- Refonte pages statiques (layout partagé, TOC sticky)
+- PHP upload limits → 8GB pour vidéos
+- Debug leftover crash HTMX FormData(fieldset)
+- Type hint adminOld corrigé (string → string|array)
+- Index SQLite pour requêtes langues/tags
+- Accordéon mobile répertoire : toggle, chevron, badge actif
+- Remplacement sticky nav par details/summary TOC responsive
+- Icône recherche corrigée
+- Scroll colonnes répertoire + admin TOC duplication
+- Filtres répertoire : tri matched-first, mot-clés en haut
+- Suppression chip bar mobile
+- Accordéon re-init après HTMX swap (bug DOM détaché)
+- Gzip + extraction JS inline
+- Build pipeline CSS/JS
+- Dev-watch
+- Transition scroll + swap fluide sur répertoire
+- Correctifs sécu (csrf partage, open redirect, verifyCsrf)
+- TODO et tasks de sécu complétés