xamxam/TODO.md

TODO

Last updated: 2026-06-20 Context: Fix sticky TOC going out of view + heading anchor links not working on charte/licence/apropos pages

In Progress

Pending

• #overtype-analysis Analyse and fix OverType editor reliability on contenus-edit.php

• #tfe-optional-formats Make TFE file optional when format is Site web (1), Performance (4) or Installation (6) — fixed incorrect format IDs [3→1,4,6] + added client-side JS toggle for TFE required/asterisk. Note d'intention remains required. 🎯 (fichiers-fragment.php, file-upload-filepond.js) ✓

• #typography-weight-300 Set search placeholder + apropos/charte/licence

  content to BBBDMSans weight 300 (search.css, apropos.css) ✓

• #toc-parts-uppercase Hardcode "PARTIES" uppercase + black bottom border on TOC label (about.php, charte.php, licence.php, apropos.css) ✓

• #apropos-overflow Prevent #apropos-intro and content-section children from overflowing (apropos.css) ✓

• #toc-navigation Fix TOC links not navigating to headings — added apply_id_to_heading: true to CommonMark config so IDs land on headings not hidden elements; added scroll-margin-top to headings; unstuck main from flex container so sticky TOC works for full page height (CharteController.php, LicenceController.php, apropos.css) ✓

• #apropos-toc-style Fix TOC "Parties" label: Ductus font + lowercase, remove border-left from links, match global link style; rename .apropos-content → section.content, .apropos-section → .content-section, remove .prose wrapper (apropos.css, about.php, charte.php, licence.php) ✓

• #apropos-toc-confirm Fixed sticky TOC: removed flex: 1; min-height: 0 on main for apropos-body so the sticky container is full content height; added max-height + overflow-y: auto to TOC for long lists (apropos.css) ✓

• #aria-test-manual Test WCAG changes with VoiceOver and NVDA on full add/edit/partage form flows

• #nojs-upload-test Test end-to-end: submit partage form with JS disabled, verify files arrive via $_FILES

• #csp-media-iframe-deploy Deploy nginx config fix to server, test PDF iframe on /tfe?id=221

Completed

• #csrf-rotation-race Stop CSRF token rotation in draft.php + remove hx-post from

  — both broke FilePond uploads and form submission (admin/actions/draft.php, partage/fragments/draft.php, FormBootstrap.php, pill-search.js) ✓

• #filepond-csrf-stale (superseded by #csrf-rotation-race)

• #adminold-return-type Fix adminOld closure return type from :string to :string|array (FormBootstrap.php) ✓

• #duration-integer-units Make duration field: integer for pages/Mo, dedicated h/m/s time inputs (form.php, ThesisCreateController.php, tfe.php, form-base.css) ✓

• #licence-svg-fix Fix licence details/summary SVG: width 1rem, inline-flex layout (fieldset-licence-explanation.php, form-base.css) ✓

• #restore-languages Un-soft-delete anglais (id=2) and néerlandais (id=71) in dev DB ✓

• #php-upload-limits Increase PHP upload_max_filesize to 8G, post_max_size to 8.5G (.user.ini) ✓

• #formdata-fieldset-crash Remove leftover debug console.log that called new FormData(fieldset) (admin/footer.php) ✓

• #csp-media-iframe-fix Fix CSP frame-ancestors 'none' blocking PDF iframes — replaced try_files redirect with direct fastcgi_pass in location = /media so add_header CSP override survives internal nginx redirect (nginx/xamxam.conf) ✓

• #duration-migration Add migration to reintroduce duration_value and duration_unit columns + update views (migrations/applied/040_duration_fields.sql) ✓

• #duration-database Update createThesis, updateThesis, getThesisRawFields in Database (Database.php) ✓

• #duration-controllers Handle duration in ThesisCreateController and ThesisEditController (ThesisCreateController.php, ThesisEditController.php) ✓

• #duration-form Add duration fieldset (value + unit dropdown) to form template (templates/partials/form/form.php) ✓

• #duration-display Show duration on public TFE detail page (templates/public/tfe.php) ✓

• #duration-view Include duration in v_theses_full and v_theses_public (migrations/applied/040_duration_fields.sql, schema.sql, schema.sql.new) ✓

• #duration-bootstrapWire Wire duration variables through FormBootstrap adminFormVariables (FormBootstrap.php) ✓

• #cleanup-drafts Add periodic cleanup job for orphaned drafts (Database.php, justfile, deploy/xamxam-cleanup.cron, scripts/cleanup-drafts.php) ✓

• #form-setup-helper Add FormBootstrap helper class to reduce bootstrap duplication across add/edit/partage (admin/add.php) (admin/edit.php) ✓

• #two-phase-commit Add two-phase commit: INSERT thesis status='draft', COMMIT, move files, UPDATE to active (ThesisCreateController.php) ✓

• #filepond-preserve Preserve FilePond temp file IDs on partage validation redirect (partage/index.php) (FilepondHandler.php) ✓

• #refactor-partage Extract partage form page chrome to templates/partage/form-page.php (partage/index.php) ✓

• #htmx-migration HTMX v2 migration: OverType editors, autosave handler, backend HX-Request detection ✓

• #filepond-crash FilePond crash on TFE upload forms: root cause fixed (.filename → .name), all crashes resolved ✓

• #aria-errormessage WCAG AA: field-level aria-errormessage, aria-invalid, aria-describedby on all form fields ✓

• #nojs-upload-fix No-JS file uploads: filepond_mode default to 0 disabled, server-side $_FILES fallback ✓

• #autosave-partage Autosave text fields on partage form: session draft endpoint (fragments/draft.php), HTMX autosave on change/input, page-load hydration, "Brouillon enregistré" indicator, draft cleared on submit ✓

• #autosave-partage-wire Wire formExtraAttrs, showAutosaveStatus, draft hydration, autosave-handler.js, draft cleanup into partage form (partage/index.php, partage/form-page.php) ✓

• #mobile-responsive Mobile-responsive form layout: @media (max-width: 600px) breakpoint, 44×44px touch targets ✓

• #aria-fieldset-fix Remove invalid required attribute from <fieldset>, keep aria-required="true", add role="group" ✓

• #split-form-css Split form.css into form-base.css and form-admin.css ✓

• #extra-css-admin Update head.php to support $extraCssAdmin for admin-only stylesheets (head.php) ✓

Deferred / Blocked