Each account should be able to say the order they wanna be sent to tenants they have access to when hitting the / redirect or logging in on a new device.

This should probs be a dropdown on the account page.

Allow a Mattrax superadmin to "become" another user for support purposes.

Allow the tenant to enabled/disable if we are allowed to do this as an extra layer of security.

• Apple store API
• Windows store API
• Android store API

Right now just throw em on the Applications page with no care for styling.

Might make dashboard URL's slightly nicer.

• The / route is always waiting for a server response. It should pull from localStorage if available.
• Tenant switch dropdown menu is a different width than trigger button
• Page overflow (x & y) shrinks sidebar (shrink your browser to be really small and look how it acts)
• Fix sidebar flex - If content max length it squishes the sidebar - Open Applications page
• Forbid mobile support (it's not gonna work well for now and I don't think it's important atm) #118
• Removing all non-nill assertions
• Disable sidebar and "Create Tenant" button when the auth comes back with an error. Right now it's just a toast and things silently go to crap.
• "Create tenant" should redirect to / within the tenant, not keep the current relative page #142
• onError handle/toast not firing for mutations
• Disable mutations when offline (does Tanstack Query do this or do we need to).
• Ensure Vercel build and local CLI checks for env vars (cause I don't think it's working atm) so the function crashes at runtime not startup/build time.

• Turn Mattrax into an installable PWA.
• Design a page when launched offline
• https://vite-pwa-org.netlify.app/guide/
• Reload toast when updates requires + automatically update on link press (turn back into hard like like Katt showed in one of his tweets)

Docs for using the product and for the #42.

cd forge
pnpm stats

Left side, vertically in the middle.

Form Abstraction:

• Pre-styled components - Already got them from Solid UI
• Validation errors from the backend
• https://modularforms.dev/solid/api/zodField
• https://tanstack.com/form/latest/docs/framework/solid/quick-start
• https://www.brendonovich.dev/blog/the-ultimate-form-abstraction

• Windows MDM protocol enrollment

Flow A

Windows Federated enrollment.

Windows Federated enrollment:

• Webview renders endpoint defined in Windows MDM payload.
• The endpoint instantly redirects to auth provider configured from the current tenant.
• Callback URL that fires the form like the current /Auth.svc endpoint.

Flow B

Blocked on #18

TODO:

• Authenticate the user
• Loading indicates cause with Intune this process is slowwwwwww.
• Detect the OS and customise process.
• Guide the user through what to do on the device

• Handle Vite chunk loading error and do a force reload of the page
• Detect a new deploy (using headers and API) and start a notification to reload

Vercel do offer this as a feature but I think building it into the product makes more sense also we might not stay with them.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/412

Implement checks so that if the administrator makes a change but someone else changes the same resources, the mutation fails with a toast.

It's important changes are made on up to date information.

• Email code authentication like Slack w/ support for passkeys.
• Use the cookie trick for checking auth - #161
• Session management - automatic renewal, expiry, show in account settings (we can do this later if you want). - #162
• User signup flow

The types for my custom MS Graph API bindings are basically always wrong. Fix this so we can actually use Typescript properly.

We can't use the existing SDK because it doesn't seem to like running on Edge Functions (won't be caught in dev though).

Typesafe paths & query params.

Allow paying for Mattrax's API without the dashboard. This would be for "Mattrax as a Platform" which can be used to build over MDM products.

Have an option for Mattrax employee's to deploy into a separate Intune account.

So we can use the Microsoft dev tenant, and not pay for devices used for testing.

(this could also be reused to allow managing customer's Intune tenants but I don't wanna offer that cause we will move off Intune one day).

Ensure it only moves over after the new owner has accepted the change.

Allow cancelling + show something in settings while we are waiting for them to accept.

Send email.

Eg. "Policies" item should be active when on /policies or /policy/:policyId/*

Blocked on #31

• Basic SEO tags
• Prerendered OpenGraph image (it's a dashboard with auth, it doesn't need to be dynamic)

We don't block Vercel deploy on it but should block PR's (but obviously with the ability for an administrator override if needed).

Idk, what it will look like but DND to the moon!

• Clone T3 App Eslint config
• https://www.npmjs.com/package/eslint-plugin-drizzle
• https://github.com/solidjs-community/eslint-plugin-solid
• https://tanstack.com/query/latest/docs/eslint/eslint-plugin-query
• Sort order of imports (I think we are gonna try the bottom of the file).
• Tailwind sort order.

Can we use a Rust based linter/formatter???

Administrator should be able to say two users (coming from OAuth provider) are the same and their resources should be copied over/kept in sync.

Might be useful if they recreate the user externally or something.

• Sidebar
• Policy builder

Show a nicely styled page when a user tries to access the dashboard without JS enabled.

When you reload the page you can end up on another tenant (for the / redirect).

Can we make it store per-tab but with a global default from the first/last tab.

Tenants will be linked with an authentication provider. This will be used to authentication the end-users to the MDM server when enrolling a device or using other self-service features.

For now I think we should just link Entra ID and deal with Google Workspaces in the future.

TODO:

• Grant the auth provider access using OAuth
• Store the linked tenantId into the DB
• Sync users from the auth provider (through in a Cron and copy the subscription code from #5 )

• Remove my fun experiment.
• Move to Tanstack Query
• Tanstack Query Devtools (lazy load when in dev or localStorage key set)
• Hook up the Broadcast Channel thing for sharing state between tabs
• Custom wrapper hooks that take in an Hono query like the createResource thing does.
• Toast when network offline
• Toast when network error (as long as we are online, ignore them if offline)

What is the default stale time and should we change it?

Setup Posthog

Come up with a logo for Mattrax that I don't hate.

Make it not look like ass.

Show it as it deploys to each device, similar to what Planetscale does with deploy requests.

Real-time updates to Mattrax resources.

This will make the product way nicer to user as administrators don't wanna be making decisions on outdated data.

Vinxi:

• Remove /manifest.js from being injected when it's empty
• Ability to serve from CDN but with function using my Vercel hacks
• Fix vite-tsconfig-paths bug
• Fix vite-plugin-html bug
• Vinxi extend vite.config.ts option to avoid my complicated loader
• Using import in a function does not lazily load the code.
• Why does landing have a wasm bundle? We don't need it!!!!!

It was brought in by solid-ui but having two icon libraries is inconsistent.

We need to make it easy to give feedback similar to what SD has.

https://github.com/itaditya/solid-command-palette
https://github.com/wobsoriano/solid-ninja-keys

• Hook Stripe up to tenant pages (use the external Stripe billing management portal)
• Prorate billing with Stripe? We are gonna bill by devices for now so how do we calculate usage?
• Stripe panel show next billing date and amount due.
• Also show updated number of billable devices for the current period and cost per device

Could be useful if your migrating auth provider or just have different sets of users, idk.

It wouldn't be too hard to support so may as well.

Sync users from Google Workspaces.

Taking a page outta Cal.com's book we should open this platform up to allow other MDM vendors to build on it.

Replaced by #80

https://kobalte.dev/docs/core/components/i18n-provider

Button in tenant settings, delete all associated data.

Require the user to enter the full tenant name and disable copy and pasting into that field if possible.

Restructure the repo around the config-based router.

Copy a structure similar to Brendan's app router in Spacedrive and document/lint the convention.