DevLaunch CRM

SaaS

DevLaunch CRM

From internal business tool to a scalable operations platform

OVERVIEW

Summary

A custom business operations platform built to manage the full DevLaunch Systems workflow, from leads and proposals through clients, projects, contracts, invoicing, financial tracking, business development, and reporting. The CRM has evolved through multiple development phases as real business needs exposed new workflows, architectural requirements, and opportunities for automation.

Business Operations PlatformInternal ToolNeon PostgreSQLCRMWorkflow AutomationEngineering PlatformBusiness Intelligence

EVIDENCE

Metrics

Signals from building and operating the system—not vanity counters.

V5.6 Implementation Tasks

102

Completed tasks in the CRM design-system implementation phase.

Reusable UI Primitives

11

Shared primitives established during the V5.6 design-system implementation.

Storybook Stories

58

Component stories covering reusable UI across light and dark themes.

Critical Accessibility Violations

0

Serious or critical axe violations reported across the V5.6 Storybook stories.

V5.7 Planned Tasks

119

Planned tasks for configuration-driven UI, enterprise DataTables, reusable forms, feedback systems, and developer onboarding.

STORY

Engineering story

How the platform was scoped, built, and refined.

Problem

DevLaunch Systems initially needed a better way to manage basic business administration such as leads, clients, projects, quotes, contracts, and invoices. Using disconnected documents and external tools would have fragmented information across multiple systems and made it harder to connect business development, project delivery, finances, and reporting. As the business began operating, new requirements continued to emerge from the actual workflows being used day to day.

Solution

I built a custom CRM around the business process rather than starting with a fixed feature list. The system began with core business administration and evolved incrementally as new workflows became necessary. Leads could become clients and projects, quotes could progress into contracts and invoices, payments and expenses could feed financial records, and later versions expanded into project management, business development, work tracking, analytics, reporting, and reusable engineering infrastructure. This allowed the platform to grow alongside the business instead of requiring a complete rebuild whenever the workflow changed.

System design

Architecture

The CRM uses a layered Next.js architecture with React Server Components and server-side workflows backed by Prisma and Neon PostgreSQL. Business entities are modeled around the relationships between leads, clients, projects, quotes, contracts, invoices, payments, expenses, users, and project memberships. Auth.js provides authentication while application and database authorization controls protect administrative and project-scoped operations. Stripe integrations are handled through persisted application state and webhook-driven workflows. Later development phases introduced reusable UI primitives, centralized design tokens, Storybook documentation, configuration-driven interfaces, stronger testing boundaries, and architectural standards intended to support future developers and continued platform growth.

Challenges

The largest challenge has been evolving a production system while actively using it to run the business. Requirements were not known upfront because many became visible only after the underlying workflow was used in practice. New capabilities therefore had to coexist with existing data and workflows without destabilizing working features. As the CRM grew, another challenge emerged: functionality was increasing faster than the application's original organization could comfortably support, requiring deliberate codebase restructuring, stronger architectural boundaries, reusable UI patterns, security hardening, and better documentation.

Lessons learned

Building around stable business concepts while allowing workflows to evolve has been more valuable than trying to predict every future requirement. The project reinforced the importance of separating business logic from presentation, keeping authorization close to protected resources, using incremental migrations instead of large rewrites, and documenting architectural decisions before knowledge becomes dependent on one developer. It also demonstrated that internal software can become an engineering platform over time when repeated workflows are turned into reusable systems instead of isolated features.

Future improvements

Planned development continues the transition from a founder-built internal application toward a system another developer could safely understand and extend. Current work includes configuration-driven navigation and metadata, reusable form and DataTable patterns, standardized feedback components, stronger developer onboarding, continued authorization and security improvements, AI-assisted business workflows, and further automation between business development, project management, reporting, and engineering processes.

Product

Features

What the product or platform delivers.

  • Lead management
  • Client management
  • Project management
  • Quote and proposal management
  • Contract workflows
  • Invoice management
  • Stripe payment integration
  • Financial tracking
  • Expense management
  • Business development tracking
  • Job opportunity evaluation
  • Proposal tracking
  • Work logging
  • Weekly business reporting
  • PDF report generation
  • Project memberships
  • Role-based authorization
  • Client-facing workflows
  • Design system
  • Storybook documentation
  • Analytics
  • Configuration-driven UI
  • Automated testing
Ownership

Responsibilities

What I personally designed, built, or owned.

  • Product planning
  • Business process analysis
  • System architecture
  • Database design
  • Backend development
  • Frontend development
  • Authentication
  • Authorization architecture
  • Security hardening
  • Stripe integration
  • Reporting architecture
  • PDF generation
  • Design-system architecture
  • Testing
  • Accessibility
  • CI safeguards
  • Deployment
  • Technical documentation
  • Developer experience
  • Architecture planning
Project timeline · Started June 2026

EVOLUTION

How it evolved

Major milestones across the project lifecycle.

  1. 2026

    Initial CRM

    Business Administration

    • Lead and client management

    • Project tracking

    • Quotes and contracts

    • Invoice workflows

    • Basic business records

  2. 2026

    v2

    Business Operations Expansion

    • Financial tracking and expenses

    • Stripe payment workflows

    • Client-facing access flows

    • Improved project administration

    • Expanded reporting

  3. 2026

    v4

    Project Management Integration

    • IntelliTaskPro capabilities brought into the CRM architecture

    • Project memberships and roles

    • Kanban/project workflows

    • Shared business and delivery data

    • Reduced separation between administration and project execution

  4. 2026

    v4.5

    Security & Authorization Architecture

    • Authorization inventory and guardrails

    • Middleware hardening

    • Role and policy improvements

    • Database authorization context

    • Runtime validation

    • Security-focused CI protections

  5. 2026

    v5

    Business Development Platform

    • Job opportunity tracking

    • Technical and business-fit evaluation

    • Proposal tracking

    • Connect and pipeline analytics

    • Work logging and business activity tracking

  6. 2026

    v5.2

    Reporting & Operational Intelligence

    • Weekly activity aggregation

    • Proposal and finance metrics

    • Daily notes and highlights

    • Automated weekly reports

    • PDF report generation

  7. 2026

    v5.5

    Codebase Reorganization

    • Reorganized growing application architecture

    • Improved responsibility boundaries

    • Prepared codebase for reusable platform infrastructure

    • Reduced friction for future development

  8. 2026

    v5.6

    Design System

    • Centralized design tokens

    • 11 reusable UI primitives

    • 58 Storybook stories

    • Light and dark theme coverage

    • Accessibility validation

    • Automated testing and CI safeguards

  9. 2026

    V5.7

    Enterprise UI Architecture

    • Configuration-driven navigation

    • Shared metadata architecture

    • Reusable forms

    • Enterprise DataTable patterns

    • Standardized feedback components

    • Developer onboarding improvements

  10. 2026

    v5.8

    Authorization & Security Hardening

    • Staff authentication and ACTIVE-user enforcement

    • Platform administrator authorization boundary

    • Project RBAC with VIEW / WORK / MANAGE permission tiers

    • Server-side authorization and deny-semantics standardization

    • Cross-project IDOR and resource-binding hardening

    • External token isolation with PostgreSQL RLS

    • Portal, payment, signing, and subscription token lanes

    • Stripe webhook authorization and idempotency audit

    • Client/server security boundary enforcement

    • Repository-wide server-action authorization guards

    • Security-focused Jest, integration, and Playwright coverage

    • RLS and cross-lane authorization test matrix

    • CI authorization merge gates

    • Protected route/action developer standards

    • Security testing and onboarding documentation

  11. 2026

    v5.8.1

    Staff Identity & Account Lifecycle

    • Platform-admin-controlled staff invitations

    • INVITED → ACTIVE staff account lifecycle

    • Secure single-use onboarding and password-reset tokens

    • Hash-only token storage with expiry, revocation, and replay protection

    • Password and Google OAuth account setup

    • Identity-bound OAuth onboarding

    • Enumeration-resistant password recovery

    • Current-device sign-out after password changes and resets

    • Project invite separation from staff identity provisioning

    • Staff onboarding and reset authorization safeguards

    • Static staff-auth security guards and regression tests

    • DB-backed token lifecycle and concurrency testing

    • Staff-auth CI merge gates

    • Authentication, session, deployment, and security documentation

PLATFORM

Platform capabilities

Engineering capabilities demonstrated by this project.

  • Business workflow management

  • Database-driven application state

  • Layered service architecture

  • Authentication

  • Admin shell & auth hardening

  • Platform showcase section

  • Role-based authorization

  • Stripe integration

  • Webhook-driven payment state

  • Reporting and analytics

  • PDF generation

  • Reusable design system

  • Storybook documentation

  • Configuration-driven UI

  • Automated testing

  • Accessibility validation

  • CI safeguards

  • Server Components architecture

  • Server Actions architecture