-
-
Notifications
You must be signed in to change notification settings - Fork 29
Mobile Friendly CMDB
LAYER 30 Β· shipped as #1448β#1449 Β· the sixteenth module
Five pages: browse, an object's page, data quality, settings and the guide.
The short version: most of this module was already fit for a phone, and the work that mattered was on one page. That is a first, and it is the interesting part of the round β along with a fault that no containment check in the toolkit could have found, and a second that no measurement of any kind could have found.
Worth stating plainly, because every previous round opened with a list of breakages.
The object page carries its own @media (hover: none) rules, so the unlink and cog controls are not hover-gated on touch. That is Β§26 β a lesson this rollout learned the hard way on Contracts β applied by whoever built the page rather than retrofitted here. It also has its own max-width: 900px block that stacks the connection columns, wraps the hero and puts the hero actions on their own row.
Data quality and the guide needed nothing at all beyond the shared shell. Settings needed nothing beyond data-mobile-page="settings", which is the whole point of having a shared settings layer.
So: opt five pages in, fix one page, fix one sentence.
cmdb/index.php sets body { overflow: hidden }.
That single declaration makes the standard containment assertion β docScrollW === innerWidth β structurally incapable of failing. Nothing can overflow a document that clips. The browse page reported clean at 360px on every run while being unusable, and it would have reported clean whatever was on it.
What found it was measuring the panes instead of the document:
.browse-container x=0 w=360
.browse-sidebar x=0 w=260
.browse-main x=260 w=100 <- the object list
.main-header x=260 w=100
.object-list x=260 w=100
A 260px sidebar on a 360px screen takes 72% of it and leaves 100px for the thing you opened the page to look at. This is the same fault as the Forms approvals sidebar in LAYER 27, reached by a completely different route: there the content was squeezed, here it was squeezed and the page was clipping, so even the squeeze produced no overflow to detect.
The generalisation is in Β§30. Β§28 asked "can you reach the bottom?"; this is its horizontal twin β a page whose body clips cannot report an overflow, so measure the panes, not the document.
The same answer Contracts reached for its own 260px sidebar. A class list is short, flat and mutually exclusive, which is exactly what a chip row is for:
[data-mobile-page="cmdb-browse"] .browse-container { flex-direction: column; }
[data-mobile-page="cmdb-browse"] .browse-sidebar { width: auto; flex: 0 0 auto; }
[data-mobile-page="cmdb-browse"] .browse-sidebar .class-list {
flex-direction: row; overflow-x: auto; overscroll-behavior-x: contain;
}
[data-mobile-page="cmdb-browse"] .class-item { flex: 0 0 auto; border-radius: 999px; min-height: 40px; }β One thing worth knowing about turning a list row into a pill. .class-item is justify-content: space-between on desktop, which is right in a 260px column β name left, count right. Inside a pill only as wide as its content, "space between" has no space to work with and the two ends collide. Centre them and let a gap do the spacing.
The .browse-main pane then needs min-width: 0 to take the width back, which is Β§14 β a flex item will not shrink below its content without it β and the search box needs flex: 1 1 60%, the middle value from Β§23: auto lets its 240px width win and pushes New off the edge, 0 collapses it to its own padding.
With the class list moved to the top, the empty state still read:
Pick a class on the left to see its objects.
There is no longer a left.
A sentence that points the wrong way is exactly as wide as one that points the right way. Every containment check, every pane measurement, every font-size assertion passed. It took a screenshot, which is the third round running where looking at the page found something measuring it could not.
The obvious repair was to swap in a direction-free wording. cmdb.list.select_class β "Select a class" β already exists, is already translated in all 25 locales, and needed no new string. That is the harvest-don't-invent rule and it looked ideal.
The next screenshot showed the same three words twice, one directly under the other: the panel heading above the empty state already says "Select a class".
So the answer was smaller than either attempt β say it once, at the top, and drop the line entirely on a phone, keeping the hint underneath that actually adds something ("If you don't have any classes yet, head to Settings β Classes first"). Less markup than the fix that came before it.
The object page's stat tiles stay two-up. Its own 900px rule sets repeat(2, 1fr), which measures 146px a tile at 360px. That is comfortably readable, and a status strip exists to be scanned β density beats card size, the lesson Service Status taught. It is recorded in the layer so the next sweep does not "fix" it into a column of four.
The settings tables scroll sideways rather than becoming card feeds, which is what the shared settings layer does for every module and for a good reason: these are config tables with unlabelled booleans in them, and reading order cannot carry seven columns.
| File | What changed |
|---|---|
assets/css/mobile.css |
LAYER 30 (30a browse chip strip, 30b the main pane, 30c the typed fields, 30c-ii the empty state, 30d a note on the stat tiles) |
cmdb/index.php |
opt-in Γ3 parts, and a class on the empty-state heading |
cmdb/object.php Β· cmdb/audit.php Β· cmdb/help.php
|
opt-in only |
cmdb/settings/index.php |
opt-in Γ4 parts β including data-mobile-page="settings"
|
| 86 other pages |
mobile.css?v=127 / mobile.js?v=50
|
Four probes, at 360Γ740 and again at 1280Γ900, driving the real pages in a forged session.
Three of the four faults the probes reported were the probes' own. That is worth recording as plainly as the real ones:
| Reported | Actually |
|---|---|
| "module nav OFF-SCREEN AND NO HAMBURGER" on all five | the injected button is .mobile-views-btn; the probe guessed at .hamburger / .nav-toggle
|
| "STILL OFF-SCREEN AFTER TAP" on all five | headless Chrome on a virtual-time budget does not advance CSS transitions β the drawer was frozen at frame 0, not broken. Killing transitions in the frame first showed translateX(0), visible, on screen |
| "TABLE 962/324 OVERFLOWS" on settings | the settings layer makes the table itself the scroller; the check asked only about its parent |
.mobile-views-overlay "visible" on desktop, and .class-list "a ROW on desktop" |
a zero-height div, and flex-direction: row being the initial value on an element that is not a flex container |
Each cost a round of diagnosis. The guide already says suspect the probe when it reports a fault on code that has had a device pass; the corollary this round adds is that a new probe should be distrusted on its first red result, not its tenth.
The desktop audit ran with two known-good shipped pages as controls (LMS and Contracts). Without them "desktop unchanged" on five CMDB pages proves only that the assertions are lenient.
assets/css/mobile.css is a single @media (max-width: 768px) block, opening at line 14 and closing at 8966; LAYER 30 lands at 8807β8965, inside it, so it cannot reach desktop by construction. Confirmed anyway at 1280px: the sidebar is still 260px, the search box still 13px, the nav still a bar and not a drawer.
An audit of the other 86 changed files confirmed every one of them changed only its cache-buster and nothing else.
- Mobile-Friendly β strategy, and the one hard rule
- Mobile-Friendly: Techniques β Β§30 came out of this round
- Mobile: Contracts β the chip-strip precedent
- Mobile: Forms β the sidebar-squeeze fault, reached another way
- CMDB β what the module does
FreeITSM β an open-source IT Service Management platform Β· github.com/edmozley/freeitsm Β· MIT licence
- Installation
- β° Scheduled tasks (cron jobs)
- Architecture
- π§ͺ Developer tests
- AI Providers
- Internationalisation (i18n)
- Timezones & Time Handling
- π Date & Time Formats
- Theming & Dark Mode
- ποΈ Recent β getting back to what you were doing
- β¨οΈ Command palette (βK)
- π Searching inside tickets
- π Attached documents
-
MobileβFriendly
- β³ π« Mobile: Tickets
- β³ π» Mobile: Assets
- β³ π Mobile: Calendar
- β³ π Mobile: Knowledge
- β³ π¦ Mobile: Service Status
- β³ πΌ Mobile: Watchtower
- β³ π§© Mobile: Problem Management
- β³ π Mobile: Change Management
- β³ πΏ Mobile: Software
- β³ β Mobile: Tasks
- β³ π Mobile: Forms
- β³ π Mobile: Contracts
- β³ π Mobile: Domains
- β³ π Mobile: People
- β³ π Mobile: LMS
- β³ πΊοΈ Mobile: CMDB
- β³ πΊοΈ Mobile: Network Mapper
- β³ π§ Mobile: Process Mapper
- β³ βοΈ Mobile: Workflow
- β³ π₯οΈ Mobile: System
- β³ π Mobile: Reporting
- β³ π Mobile: System Wiki
- β³ π Mobile: Self-Service Portal
- β³ π§° Mobile: Techniques & Tricks
-
Security
- Layer 1 β which modules you can enter
- β³ π§© Module Access Control
- β³ π οΈ Module Access β Developer Guide
- Layer 2 β what you can administer
- β³ π Roles & Permissions
- β³ π οΈ Roles β Developer Guide
- β³ π€ Why capabilities are constants
- Layer 3 β the System module
- β³ π Admin Access Control
- Hardening
- β³ π Security review response 2026-08
- β³ π‘οΈ Security hardening 2026-08
- β³ π οΈ Security hardening 2026-08 β Developer Guide
- β³ π‘οΈ Round three β plain English
- β³ π οΈ Round three β Developer Guide
- β³ π‘οΈ CSRF protection (S4) β Developer Guide
- Single Sign-On (SSO)
- ποΈ LDAP & Active Directory
- π CardDAV contact sync
- Browser Extension
- API Reference
-
π REST API β how it works
- β³ π« REST API: Tickets
- β³ π» REST API: Assets
- β³ π΄ REST API: Problems
- β³ π REST API: Changes
- β³ π REST API: Knowledge
- β³ β REST API: Tasks
- β³ ποΈ REST API: CMDB
- β³ π REST API: Contracts
- β³ ποΈ REST API: Calendar
- β³ πΏ REST API: Software
- β³ π REST API: Domains
- β³ π¦ REST API: Service Status
- β³ βοΈ REST API: Morning Checks
- β³ π REST API: Forms
- β³ βοΈ REST API: Workflow
- β³ π·οΈ REST API: Cost centres
- β³ πΊοΈ REST API: Network Mapper
- β³ π§ Using the API docs page
- β³ π OpenAPI specification
- β³ β OpenAPI: kept correct
- β³ π οΈ Maintaining the catalogue
- Watchtower
-
Tickets
- β³ π Rota copy and paste β Developer Deep Dive
- β³ β Checklists & SOPs
- β³ βοΈ Mandatory fields
- β³ π·οΈ Ticket categories
- β³ π₯ Assigning tickets to a team, and escalation
- β³ π’ One board across every company
- β³ Mailbox Authentication
- β³ π€ Email send log
- β³ Basic IMAP mailboxes
- β³ Email rendering & images
- β³ SLA Management
- β³ WhatsApp channel
-
β³
βοΈ Telegram channel - β³ β CSAT company scope and filters β Developer Guide
- β³ π₯ Microsoft Teams channel
- β³ π¨οΈ Mattermost channel
- β³ π¬ Web chat channel
- β³ π£ Slack channel
- β³ π Linking tickets
- β³ β Record previews
- β³ π Ticket notes: internal or shared
- β³ ποΈ Canned responses
- β³ βοΈ Limiting replies to particular senders
- β³ π¨ Telling the analyst a ticket is theirs
- β³ βοΈ Email signatures
- β³ π The public web address
- β³ π’ Ticket numbering
- β³ π Raising a ticket for someone else
- β³ π Merging tickets
- β³ π Confidential tickets
- β³ π₯ Portal managers
- β³ π Who has seen a ticket
- β³ π Reading long tickets
- β³ β Splitting tickets
- β³ β Selecting several tickets
- β³ ποΈ The folder pane
- β³ π½ Just my tickets, or no closed ones
- β³ π οΈ Snoozing tickets β Developer Guide
- β³ π₯ Collision detection
- β³ β±οΈ Time tracking
- β³ π Scheduled work in your own calendar
- Problem Management
- Tasks
-
Assets
- β³ π’ Moving an asset between companies
- β³ π Shared asset locations
- β³ π§βπΌ Assigning assets to analysts
- β³ π Warranty and lease alerts
- β³ π Saved table views
- β³ π¨οΈ Recording anything, and importing it
- β³ π·οΈ QR asset labels
- β³ π Who holds what, and handover documents
- β³ π₯οΈ The inventory agent (PowerShell)
- β³ ποΈ Proxmox VE servers
- β³ βοΈ VMware Cloud Director servers
- β³ π Linking equipment to tickets
- β³ βοΈ Follow-up tasks on a ticket
- Knowledge
- Change Management
- Calendar
- Morning Checks
- Reporting
- Software
-
Forms
- β³ π¨ The form designer β Developer Guide
- β³ π Layout & the grid β Developer Guide
- β³ ποΈ Collections β grouping submissions
- β³ π Submissions as PDFs
- β³ β‘ What happens next β a form's own actions
- β³ π οΈ Sections & conditional logic β Developer Guide
- β³ π οΈ Lookup fields β Developer Guide
- β³ π‘οΈ Catalogue request approvals
- People
- Domains
- Contracts
- Service Status
- π Notifications
- π¨ War Room
- Self-Service Portal
- LMS
- Process Mapper
- CMDB
- Network Mapper
- Workflows
- Issue trackers (Jira, Azure DevOps)
- System
-
Overview
- β³ π Progress tracker
- β³ Concepts & vocabulary
- β³ Email routing & mailboxes
- β³ Settings: global vs per-company
- β³ Users & self-service
- β³ Staff cross-company access
- β³ π’ One board across every company
- β³ Worked examples
- β³ Pitfalls & gotchas
- β³ Scope: what it's for
- β³ π οΈ Developer Guide (make a module multi-company)
- β³ ποΈ Case study: CMDB (a linked graph)
- β³ π§ͺ Test harness (prove it's isolated)
- What this is
-
π Bugs resolved
- β³ πΌοΈ Logo and courses broke on Apache with PHP-FPM
- β³ π’ Chat tickets ignored your ticket numbering
- β³ π Dates shown as a dash, or in server time
- β³ π Assets β Users showed people from other companies
- β³ π Restricted analysts could read other modules' data
- β³ πΌοΈ Replies with a picture in the thread failed to send
- β³ π Reply attachments never reached the customer
- β³ π οΈ Outbound email attachments β Developer Guide
- β³ π A global SSO provider was missing from the portal
- β³ π Behind a proxy, the SSO redirect said http
- β³ βοΈ The portal tagline moved when you saved it
- β³ π¨ The portal settings screen forgot what you saved
- β³ π‘οΈ The approvals inbox said "Error" and nothing else
- β³ π A table's answers were missing from the PDF
- β³ β A single-select column let you tick every option
- β³ π The portal ignored a form's field widths
- β³ π The tasks board stopped taking clicks
- β³ ποΈ #121 The index list is out of date after upgrading
- β³ π #133 The calendar subscription was empty
- β³ π #131 Tasks always reopened on the board
- β³ π₯ #129 Every page returned HTTP 500 after upgrading
- β³ π³ #127 A PHP warning above the System page
- β³ π #126 Notes stamped with the server's clock
- β³ π Storing every date in UTC
- β³ πͺ The portal was down for everyone signed in
- β³ βοΈ #120 Workflow notes could never be written
- β³ βοΈ #123 Three errors when running Database Verification
- β³ π #122 The description box was a stub in the corner
- β³ π£ Demo data deleted real accounts
- β³ π #117 Sign-in redirected to the wrong address
- β³ π¨ #108 The priority dot was invisible
- β³ β±οΈ #116 Time logged from the right-click menu
- β³ π #114 API keys refused by our own guard
- β³ ποΈ #110 Assigning a task told nobody
- β³ πͺ #107 Signed out while still working
- β³ π #103 "Share with Requester" reached nobody
- β³ π #102 Search found nothing for hyphens
- β³ πͺ #101 Source code editor opened behind
- β³ βοΈ #88 Subtasks could not be ticked off
- β³ π» #84 Asset deep link selected nothing
- β³ π« #79 A new ticket arrived with no status
- β³ π§ #79 A ticket from email did not say so
- β³ π #78 Bell opened to nothing
- β³ π¬ #77 Mail only collected from Inbox
- β³ π #74 The default password could not be changed
- β³ π¦ #70 Renaming an impact level
- β³ π€ #67 App-only mailboxes could not send
- β³ π #45 Verify only ever worked for Microsoft
- β³ π #45 IMAP reported as not authenticated
- β³ βοΈ An email template stopped escaping itself
- β³ π The portal dashboard showed the wrong time
- β³ π’ The folder said 99 and the list showed 96