OSIT-AE-App-Svelte/documentation/TODO__Agents.md

# Frontend Agent Task List
> Use this file to track steps for complex features or bug fixes.
> **Status:** Stable — ongoing development.
> **Scope:** Active/open work only. Completed detail lives in archive files.

## 🔴 LCI October — Pres Mgmt Restoration (in progress 2026-06-12)

These features regressed over the last 6 months and must be working before the LCI conference.
Reference commit for original working implementation: `bb993a102`.

### Session POC (Champion/Moderator) — `session_view.svelte`

**Root cause of visible bugs:** The POC section is placed *below* the session hero card as a
separate disconnected block. In the original it was part of a structured `<ul>` with the session
name, code, datetime, location, and description all together. The current layout looks and feels
wrong to users.

- [x] **[Pres Mgmt] POC section — move inside session hero card** (2026-06-12)
  Restructured hero card as a `<ul>` with datetime, room, and POC as rows inside the card.
  Session name and code are now always visible (not just in edit_mode — that was a bug).

- [x] **[Pres Mgmt] POC assignment — "Select Person" flow broken** (2026-06-12)
  Gated the select editor on `person_options_loaded` (`Object.keys($slct.person_obj_kv).length > 0`).
  "Select Person" button renders as "Reload Person" after list is loaded.

- [x] **[Pres Mgmt] Email Session POC sign-in link — UI missing** (2026-06-12)
  Restored email button in POC row with `sending/sent/error` state feedback.
  Shown when `require__session_agree && show__email_access_link && poc_person_primary_email`.

- [x] **[Pres Mgmt] Copy Session POC access link — UI missing from session view** (2026-06-12)
  Restored inline `MyClipboard` copy button in POC row for trusted staff.
  Shown when `show__copy_access_link && trusted_access && poc_sign_in_url`.

### Presenter Sign-In

- [ ] **[Pres Mgmt] Presenter email sign-in link routes to wrong page**
  `email_sign_in__event_presenter()` builds a URL to `/presenter/[id]?person_id=...&person_pass=...`.
  The URL param parser (`sign_in_out.svelte`) is only mounted on the *session* page menu, not the
  presenter page. A presenter clicking their email link lands on their page with no auth granted.
  Fix: mount `Sign_in_out` in `presenter_page_menu.svelte` (same way session menu does it), or
  change the email link to route to the session page (which already has the parser) and include
  the presenter/presentation IDs as params — which is how it worked originally.

- [ ] **[Pres Mgmt] Presenter agreement not enforced before file upload**
  `require__presenter_agree` is stored and displayed but the upload components are gated on
  `auth__kv.presenter[id]` only, not on `presenter.agree`. A presenter who signs in but has not
  agreed can still upload. The original blocked the upload section until `agree === true`.

### Session POC Sign-In

- [ ] **[Pres Mgmt] `session_page_menu.svelte` sign-in prop still wrong**
  `event_session_id` prop passed to `Sign_in_out` was just changed from `event_id` to
  `event_session_id` — verify this is actually `$lq__event_session_obj?.event_session_id`
  (the real session ID string) not the URL param `url_session_id`. The sign-in component
  uses this value to set `auth__kv.session[event_session_id]`.

---



- [ ] **[Launcher/Electron] Wallpaper reliability (post-CMSC)**
  - [ ] Use timestamp/randomized temp filename so macOS always sees a new path.
  - [ ] Add resilient reconciliation loop or event-driven reapply on display topology changes.

---

## 🔴 Axonius DC — June 9 (Badge Printing)
**Setup/Registration:** June 8 | **Show:** June 9

- [x] **[Badges] Epson C3500 fanfold badge layout** — `badge_4x6_fanfold` layout CSS created,
  wired, and documented. First live use: Axonius Adapt DC, June 9, 2026. (2026-05-15)

---

## 🚧 V3 CRUD Migration (Surgical Cleanup)
Finalizing the 100% adoption of V3 Standard endpoints and retirement of legacy wrappers.

- [ ] **[Core] Legacy Utility Helpers** — Refactor `ae_core_functions.ts` to use V3 helpers.
- [ ] **[Cleanup] Delete Legacy Wrappers** — Once all callsites are migrated, remove
  `src/lib/ae_api/api_get__crud_obj_id.ts` and the legacy exports from `api.ts`.

---

## 🚧 High Priority Workstreams

### [Stores] Svelte 4 → Svelte 5 State Migration
The app uses `svelte-persisted-store` (coarse reactivity). Migration target: replace with Svelte 5
`PersistedState` (from `runed`) for fine-grained updates. See `PROJECT__Stores_Svelte5_Migration.md`.

- [x] **Events module — COMPLETE (2026-06-11):** `events_loc` fully retired. All 5 sub-stores
  (`badges_loc`, `leads_loc`, `pres_mgmt_loc`, `launcher_loc`, `events_auth_loc`) are on
  `PersistedState`. Unused fields also pruned from `ae_stores.ts` and `ae_idaa_stores.ts`.
- [ ] **`idaa_loc` → PersistedState** — Highest remaining priority. Root cause of the IDAA
  "Access Denied" corruption bug (`ae_loc` bootstrap writes stomp on `authenticated_access`).
  Promote `novi_*` identity fields and `archives/bb/recovery_meetings` sub-objects.
- [ ] **`ae_loc` → PersistedState** — Largest scope. Extract `auth_loc` sub-store first
  (the identity/permission fields are what get corrupted). Defer full migration until after `idaa_loc`.
- [ ] **Non-persisted writables** (`ae_sess`, `slct`, etc.) — Low priority; no coarse-reactivity problem.

### [Data Layer] IDB sorting + content version rollout
Sorting baseline is now `build_tmp_sort` (ASC chain, no `.reverse()` on tmp-sort lists).

**⚠️ Exception:** `ae_events__event.ts` and `ae_events__event_session.ts` use **legacy encoding**
(`priority ? 1 : 0`, priority=true→`'1'`). Their sort comparators must remain **descending**
until the modules are migrated to `build_tmp_sort`. `ae_events__event_presentation.ts` already
uses `build_tmp_sort` (overrides generic encoding in its `specific_processor`). See
`CLIENT__IDAA_and_customized_mods.md` → "Sort Encoding" for full table.

- [ ] **[IDB Sort] Migrate `ae_events__event.ts` to `build_tmp_sort`** — requires bumping
  `IDB_CONTENT_VERSIONS.events.event` (currently v3) and switching all event sort comparators
  to ascending. Check all pages that sort events before doing this.
- [ ] **[IDB Sort] Roll out to `ae_events__event_session`** after sort behavior review.
- [ ] **[IDB Sort] Roll out to `ae_events__event_presenter`** after sort behavior review.
- [ ] **[IDB Sort] Roll out to `ae_events__event_location`** after sort behavior review.
- [ ] **[IDB Sort] Roll out to `ae_core__person` + `ae_core__account`** after sort behavior review.
- [ ] **[IDB Version] Roll out to `db_events.ts`** (session, presenter, badge, etc.).
- [ ] **[IDB Version] Roll out to `db_core.ts`** (site_domain, person, user).

### [Journals] Journal Entry Config follow-ups
- [ ] **[Journals] Entry passcode secondary auth** — implement `passcode_hash` comparison.

---

## 🧪 Testing & Optimization

- [ ] **[IDAA] IDB fast-path contact search** — parse `contact_li_json` in `search__event()`.
- [ ] **[IDAA] Optimize Recovery Meetings SQL VIEW and indexes.**
- [ ] **[IDAA / Events] Audit `default_qry_str` coverage** in all other event search pages.
- [ ] **[Launcher/VLC] Linux playback investigation** — fullscreen + pause-on-end flags.

---

## ⚙️ DevOps & Backend

- [ ] **[Backend] `event_file` — add `cfg_json` column (post-CMSC)** — The per-file display
  override currently uses a localStorage workaround (`launcher_loc.current.file_display_overrides`)
  because `event_file` has no JSON blob column. Proper fix: add `cfg_json` to the `event_file` DB
  table, expose it through the FastAPI model, then migrate the frontend back to reading/writing the
  backend field (restoring global/cross-device persistence). Frontend code is in
  `launcher_file_cont.svelte` — search for `file_display_overrides`.
- [ ] **[Backend] Re-add `Access-Control-Allow-Private-Network: true` CORS header.**
- [x] **[DevOps] Service worker `skipWaiting` + `clients.claim`** — Root cause of "users see
  old code / can't reproduce in dev testing": the SW sat in waiting state until all tabs closed.
  IDAA members leave idaa.org open all day. Fixed 2026-06-03: both calls added to
  `src/service-worker.js`. See mistake #16 in `BOOTSTRAP__AI_Agent_Quickstart.md`.
- [ ] **[DevOps] Nginx proxy buffer tuning** — Buffer settings copied from PHP guide; not
  optimal for Node.js. `proxy_busy_buffers_size` technically exceeds safe limit. Re-examine
  when enabling compression (now re-enabled) stabilizes.
- [ ] **[DevOps] Simplify Dockerfile env file selection** — Use plain `.env` instead of `BUILD_MODE`.

---

## ✅ Completed (archived)
See the full completed history in:
[documentation/archive/TODO__Agents__ARCHIVE_2026-03.md](documentation/archive/TODO__Agents__ARCHIVE_2026-03.md)
[documentation/archive/TODO__Agents__ARCHIVE_2026-04.md](documentation/archive/TODO__Agents__ARCHIVE_2026-04.md)
[documentation/archive/TODO__Agents__ARCHIVE_2026-05.md](documentation/archive/TODO__Agents__ARCHIVE_2026-05.md)
[documentation/archive/TODO__Agents__ARCHIVE_2026-06.md](documentation/archive/TODO__Agents__ARCHIVE_2026-06.md)