Audit date: 2026-02-07
README.mdSECURITY.mdCONTRIBUTING.mddocs/*.mdpackager/README.md- In-app docs pages under
app/docs/*
- Core setup: Entra ID, database setup, Docker, GitHub Actions, self-hosting.
- Operational basics: troubleshooting, health checks, packager setup.
- Feature docs (in-app): unmanaged apps, MSP workflows, settings/webhooks.
- Broken root docs link:
- Added
CONTRIBUTING.mdreferenced byREADME.md.
- Added
- Outdated repository references:
- Updated docs using
IntuneGet-WebsitetoIntuneGet.
- Updated docs using
- GitHub packaging drift:
- Updated docs for private workflows repository (
GITHUB_WORKFLOWS_REPO). - Updated callback path to
/api/package/callback.
- Updated docs for private workflows repository (
- Missing referenced docs:
- Added
docs/authentication-architecture.md.
- Added
- Packager env var drift:
- Updated
packager/README.mdfromWEB_APP_URLtoINTUNEGET_API_URLand clarified API/Supabase modes.
- Updated
- Added missing feature/API/env docs:
- Added
docs/API_REFERENCE.md. - Added
docs/FEATURES_SCCM.md. - Added
docs/FEATURES_UPDATES.md. - Added
docs/FEATURES_INVENTORY_AND_REPORTS.md. - Added
docs/ENV_REFERENCE.md.
- Added
- Docker runtime env var injection (GitHub Issue #6)
- Problem:
NEXT_PUBLIC_AZURE_AD_CLIENT_IDwas inlined at build time by Next.js, so the Docker image shipped with an empty client ID. Passing the variable at container runtime via docker-compose had no effect on the already-built client bundle. - Fix: Added
lib/runtime-config.tsand a<script>tag inlayout.tsxthat injects the value at request time viawindow.__RUNTIME_CONFIG__. Client code now callsgetPublicClientId()instead of accessingprocess.envdirectly. - Docs updated:
SELF_HOSTING.md(Docker note + runtime injection section + troubleshooting),ENV_REFERENCE.md(Docker Runtime Injection section + validation tip).
- Problem:
No major missing documentation areas remain from the original gap list.
- Keep docs synced with implementation caveats:
- Uploads highlight query param mismatch (
jobvsjobs). - Detection feedback enum alignment between validator and schema/types.
- Uploads highlight query param mismatch (
- Add request/response examples per endpoint if a stricter API contract is needed.
- Add changelog entries when docs change materially, to aid operators upgrading self-hosted instances.