Project · PC & Mac endpoint support

Baseline

Every PC and Mac on one baseline.

Endpoint support for a mixed Windows and macOS fleet — hardware lifecycle, standardised OS builds, software approvals, repairs and side-by-side Windows/macOS runbooks.

Open live demo Source: private repo
Role
Solo · Design & full-stack
Type
PC & Mac endpoint support
Stack
Next.js · Supabase
Status
● Live demo
Fleet overview — compliance ring, platform mix, OS support

// Fleet overview — compliance ring, platform mix, OS support · demo accounts available on request

The problem → the approach

The problem

Desktop support teams juggle spreadsheets for inventory, tribal knowledge for OS builds, and email threads for software requests — and every procedure exists twice, once for Windows and once for Mac.

The approach

Baseline tracks every device from arrival to retirement, generates platform-specific build checklists, gates licensed software behind approval, and scores the whole fleet against a compliance baseline.

What it does

Detect this device

Reads OS, chip, cores and form factor from the browser to pre-fill registration — and explains what browsers can't expose.

Standardised OS deployment

Autopilot / Reimage for Windows, Apple ADE / Erase-and-install for macOS, each step stamped with who and when.

Compliance baseline

Supported OS, disk encryption, free space and warranty checks roll up into a fleet compliance score.

Software governance

Free apps are self-service; licensed apps need a reason and approval. Duplicate and wrong-platform requests are blocked.

Side-by-side runbooks

Windows and macOS steps next to each other, your platform highlighted, printable as a training handout.

Full lifecycle

In stock → deploying → in use → repair → retired, with a timeline per device and CSV export.

Screens

// Runbooks with Windows and macOS side by side
// Device inventory with compliance status
// Software catalogue and request queue
// Sign-in

Who uses it

Employee
My devices & health checks, request software, report hardware issues
Technician
Fleet overview, devices, OS deployments, request queue, repairs
Admin
Everything above plus deletes and team & roles

Security, enforced in the database

Row-Level Security on every table — calling the API directly returns exactly what the screen shows, nothing more.
Writes go through role-checked SECURITY DEFINER functions that verify the caller before changing anything.
42 automated checks (scripts/e2e.mjs) cover row-level security and the role-checked database functions.
No secrets in the client or the repository — only the public Supabase URL and anon key, protected by RLS.
42
automated security checks
2
platforms, one workflow
50+
catalogued business apps

Tech stack

Next.js 15TypeScriptTailwind CSS v4Framer MotionRechartsSupabasePostgres RLSRealtime

What's next

QR asset labels & scannerAgent-based device inventoryIntune / Jamf syncWarranty lookup APIsLicense seat tracking