Project / Software
Lunar Sails Management Software
A private Windows desktop workspace for invite-only ticket and team operations.
- Year
- 2026
- Role
- Design and development
- Tools
- Next.js · TypeScript · React · Tailwind CSS · Electron · Supabase · PostgreSQL · Row Level Security
Overview
Lunar Sails Management Software is a private desktop workspace for managing shared business and ticket work. The project grew out of a need for an alternative to tools like Jira, which often felt too bloated, complicated, expensive, or restrictive for the way we wanted to work.
It runs as a Windows application and gives the team one place to coordinate day-to-day operations. The workspace is invite-only, with clear access controls designed to keep team data private and easy to manage.
The long-term goal is to turn it into an AI-powered operations manager that can observe company communication channels and suggest new tickets, updates, or completed work based on what is happening across the business. It is also planned to expand into project-based documentation and internal wikis, bringing ticket management and knowledge sharing into the same workspace.
What it does
The workspace supports creating, editing, assigning, prioritizing, tracking, and archiving tickets, along with due dates and team visibility. The My Work board gives each person a focused view of the tickets most relevant to them, and supports drag-n-drop.
Separate admin tools handle members, roles, permissions, and activity history, keeping everyday team work and administrative controls clearly separated.
How it works
The app is built with Next.js, React, and TypeScript, then packaged as a Windows desktop application with Electron. Supabase handles sign-in, multi-factor authentication, and stores the application’s workspace data.
Access to data is controlled based on each user’s permissions, with important actions recorded so changes can be tracked over time. Realtime updates keep workspace information current when needed.
Sensitive credentials are kept out of the desktop app, and private actions are verified against the signed-in user and their current workspace access.
Features
Ticket and team workspace
The workspace brings ticket creation, editing, assignment, status and priority tracking, due dates, team visibility, and archiving into one place. The My Work board gives each person a focused view of assigned and relevant tickets, while the wider workspace keeps shared work visible to the team.
Personal work planning
The My Work board groups assigned tickets by status and keeps priority, team, due date, and status controls close to each item. Drag-and-drop support makes it easy to move tickets between statuses. This gives an individual contributor a focused operating view without hiding the shared workspace behind it.
Administration and audit history
Administration views provide a separate place to manage members, roles, and permissions and to review audit history. Append-only operational and administration audit records preserve the history of important changes without mixing that work into the day-to-day ticket view.
Invite-only access and MFA
Access is invite-only. Workspace membership and role determine which parts of the application a person can use, and authenticator-app MFA is required for the protected workspace. Ticket and team actions are exposed through the authenticated application and its server-side boundaries, so interface visibility is not treated as the security control by itself.
Enforced permission and data boundaries
Roles and explicit permissions separate ordinary team work from administration. Permission checks are represented in the application and enforced with PostgreSQL Row Level Security and transactional database functions, which protects rows even when a request does not come through the intended UI.
Windows desktop delivery
The application is packaged for Windows with Electron, with the web application running inside the desktop shell. The project includes local checks for the permission model, MFA flows, audit behavior, and desktop packaging and update paths. Authenticated private update delivery is implemented as part of that release design.