¶ Launcher Layer
Entry point where users choose available apps and tools.
Overview of how UtopiaSystem is built and connected.
UtopiaSystem is the central internal platform for Utopia Group's digital operations.
It brings multiple company workspaces and tools into one connected system, giving employees a single place to access the applications they need for daily work.
UtopiaSystem is built on five main layers that work together.
Entry point where users choose available apps and tools.
Business workspaces such as Personal, HR, Finance, and Operation Efficiency.
API services for modules that need deeper business processing.
Common packages for UI, Supabase, auth, and access control.
Supabase Auth, Postgres database, storage, and permissions data.
A simplified view of how the system components interact.
Users authenticate once through the shared sign-in system.
The launcher becomes the starting point for available workspaces and tools.
Users enter the workspace or tool they need based on their role and permissions.
Access control decides which data and features each user can use.
Access control is server-authoritative and deny-by-default.
The system uses policies, grants, and scopes:
| Concept | Meaning |
|---|---|
| Policy | A rule that defines what a feature requires |
| Grant | Permission given to a user |
| Scope | Limits what data the user can see |
| Decision | Final true or false access result |
The project is managed as an Nx monorepo.
The monorepo structure makes it easier to share code, run builds, manage dependencies, and keep apps aligned.
Supabase is the main platform service for identity and data.
Some modules use backend services when business logic needs a dedicated API layer.
| Backend | Purpose |
|---|---|
| utopia-finance-backend | Finance API and finance-related business processing |
| utopia-oe-backend | Operation Efficiency API and backend processing |
Most user-facing work happens inside frontend applications.
The launcher is the first screen users see after signing in.
It shows available spaces and tools in one place, such as
Personal Space, HR, Finance, Operation Efficiency, Sales, Fleet Tracker, Outreach, Replybox, and Asset Management.
The launcher also reflects access status. Apps can appear as available, locked, or coming soon depending on the user's permissions and the current rollout stage.