IMPORTANT: Third-Party Services & Usage Costs

This script integrates with several third-party services. Accounts and any associated fees are the buyer’s responsibility and are NOT included in the purchase price:

Supabase — backend, database, auth, storage (free tier available, paid plans for production usage)
Stripe — card payments (per-transaction fees set by Stripe)
PayPal — alternative payment provider (per-transaction fees set by PayPal)
Google OAuth — social sign-in (free)
Google Gemini API — AI Smart Matching & content suggestions (usage-based pricing)
Meta WhatsApp Cloud API — messaging fees based on destination country and conversation window

You will need to provide your own API keys and manage all associated costs separately. Typical costs vary based on usage volume.

WACRM — All-in-One Enterprise Omnichannel CRM, WhatsApp Business & AI Automation SaaS Platform

WACRM Dashboard

WACRM is a production-grade, multi-tenant SaaS platform that unifies the entire customer lifecycle — WhatsApp Business Cloud API, Omnichannel Inbox across 16+ channels, AI Assistants, Sales CRM, Marketing Automation, Helpdesk with SLA, Appointment Booking, Client Portal, WhatsApp Commerce, Business Intelligence, Chatbot Builder, Live Chat Widget, Plugin Marketplace and a full public REST API — inside one blazing-fast, installable, offline-capable Progressive Web App.

Built with React 19, TanStack Start, TanStack Router, TanStack Query, Tailwind v4, shadcn/ui and Supabase, WACRM ships with a bulletproof Setup Wizard, environment-controlled Demo Mode, enterprise RBAC, GDPR readiness, SAML SSO, audit logs, plan-to-gateway billing, and a fully documented Node.js / Docker / cPanel deployment path. Everything you need to launch a premium SaaS business — in one clean codebase.

Live Demo

Demo URL: https://wacrm.wrapcoders.bid

User: user@demo.com / User123!
Agent: agent@demo.com / Agent123!
Admin: admin@demo.com / Admin123!

What’s New in v4.0.0

Plan Gateway Mapping — link subscription plans directly to Stripe / Paddle price IDs with environment-aware validation.
Billing Webhooks — automatic subscription renewal, upgrade, downgrade and cancellation via gateway webhooks.
Audit Logs — platform-wide audit trail for gateway changes, plan linkage, security events and staff actions.
Gateway Health Panel — real-time webhook delivery status and one-click replay for failed deliveries.
WhatsApp Template Variables — strict numbered placeholders, automatic named-to-numbered conversion, URL param mapping preview.
Accessible Theme Engine — automatic contrast-safe accent colors with live WCAG preview.
Live Chat to Inbox Bridge — widget sessions are mirrored into the unified Inbox with real-time updates.
Security Dashboard — aggregated security issues, RLS regression scans and issue severity tracking.

Overview

Enterprise multi-tenant SaaS with per-workspace isolation and RLS.
Official WhatsApp Cloud API (Meta) integration — WABA, templates, media, webhooks, reliable outbox.
Omnichannel unified inbox across 16+ providers (WhatsApp, Instagram, Messenger, Telegram, Email, SMS, Web Chat and more).
AI Layer with multi-provider LLM support, RAG Knowledge Base (pgvector), AI Reply Assistant, Sales Assistant and Conversation Intelligence.
Full Sales CRM, Kanban pipelines, Quotes, Invoices and Commerce.
Visual Workflow Builder, Marketing Campaigns and Chatbot Builder.
Helpdesk with SLA, ticket routing and AI panels.
Installable PWA, native Expo mobile app, plugin marketplace and public REST API.

Key Features

1. WhatsApp Business Cloud API

Official Meta WhatsApp Cloud API integration (no unofficial libraries).
Step-by-step WhatsApp Business connection wizard and admin status diagnostics.
WABA management, phone number pool and business verification workflow.
Template management with sync, categories, drafts, multi-language support and strict numbered placeholders.
URL button validation with placeholder variables inside query strings and fragments.
Enterprise media management (images, video, audio, docs, stickers, contacts, location) using Meta Resumable Upload.
Reliable webhook processing with HMAC verification, IP allowlists, replay protection and idempotency.
Delivery outbox with retries, delivery/read receipts and status tracking.
Monitoring dashboard, error reporting and provider health checks.

Omnichannel Integrations

2. Omnichannel Unified Inbox

One inbox for 16+ channels through a clean provider abstraction layer.
Unified customer timeline across every touchpoint.
Realtime typing indicators, read receipts, presence and unread badges.
Assignments, teams, tags, priorities, snooze, notes and internal replies.
Global search across conversations, contacts, deals and tickets.
Keyboard shortcuts, bulk actions and mobile-optimized conversation list.
Media lightbox, background sync settings and inbound deduplication.

Unified Inbox

3. AI Assistants & RAG Knowledge Base

Multi-provider AI Engine (OpenAI, Gemini, Anthropic and Lovable AI Gateway).
AI Reply Assistant, Smart Compose, Summaries and Sentiment.
Conversation Intelligence, lead scoring and next-best-action.
pgvector-powered RAG Knowledge Base with document ingestion and re-embedding.
AI Sales Assistant with deal-stage predictions.
AI Helpdesk panel with automated ticket triage.

AI Integrations

4. Sales CRM & Commerce

Contacts, Companies, Deals, Quotes, Invoices and Products.
Drag-and-drop Kanban pipelines and custom fields.
Customer 360 with activity timeline, engagement metrics, notes and tasks.
Task & birthday reminder engine with notifications.
WhatsApp Commerce — catalog sync, cart, orders, payment links, promotions, inventory, brands and shipping.

WhatsApp Commerce

5. Marketing & Workflow Automation

Multi-step campaign wizard with segmentation, scheduling and A/B stats.
Scheduled / running / paused campaigns with mid-flight enqueue.
Visual No-Code Workflow Builder powered by React Flow with workspace-level security.
Triggers, delays, conditions, branches and omnichannel nodes.
Workflow history, versioning and performance dashboards.

Marketing Automation Workflow Builder

Tickets with SLA, routing, priorities and relationships.
Visual Chatbot Builder with multi-language triggers, operator handoff and skills-based routing.
Template marketplace, install/uninstall and permission diffs.
Embeddable Live Chat Widget (420×600) with unread badges, delivery states, attachments and appearance preview.
Widget analytics and install snippet generator.

Helpdesk

7. Business Intelligence & Reporting

Realtime BI dashboards at /bi.
Sales, conversation, campaign, chatbot and omnichannel analytics.
Custom widgets and dashboard builder.

Business Intelligence

8. Appointment Booking & Client Portal

AI scheduling assistant with availability rules.
Bookings, calendars, reminders and confirmations.
Branded Client Portal at /client with attachments and messaging.

Appointment Booking

9. Super Admin, API Platform & Plugin Marketplace

Dedicated Super Admin zone (/admin) with collapsed app-sidebar UX.
AI Provider management, Payment Gateway management and gateway audit logs.
Developer Center with public REST API, API key scopes and documentation portal.
Extension SDK and Plugin Marketplace for third-party integrations.

Super Admin

Multi-Role System

Agent Role Manager Role Admin Role

Super Admin — platform-wide operations, tenants, billing, branding, PWA icons, AI providers and payment gateways.
Owner / Admin — full workspace control, members, roles, billing.
Agent — inbox, CRM, sales, helpdesk, campaigns.
Provider — restricted delivery / logistics / partner surfaces.
User / Viewer — read-only or personal scope.

All roles are stored in a dedicated user_roles table and enforced through a has_role() SECURITY DEFINER function plus strict Row Level Security — no client-side role checks, no privilege escalation.

Authentication System

Supabase Auth with email/password and social OAuth (Google, Apple, Microsoft-ready).
Secure PasswordInput component with strength meter.
Invitation flow with role presets and email delivery.
Multi-tenant workspace switching with cache purge and realtime resubscribe.
Idle-logout, session rotation, device management and biometrics (mobile).

Role-Based Redirect System

Post-login routing decided by role and workspace context.
Super Admin → /admin, Agent → /inbox, User → /dashboard, Provider → dedicated console.
Deep-link protection: unauthorized hash and route deep links never render protected panels — verified with end-to-end tests.
Account menu items are hidden or disabled per role in sidebar and mobile navigation.

Setup Wizard (Installation Flow)

Guided first-run wizard with system validation, database checks and storage checks.
Super Admin account creation, workspace, branding and SMTP test.
Signed, single-use step tokens — secure by construction.
Setup Lock via SETUP_LOCKED=true — the wizard cannot re-run without manual unlock.

PWA System — Installable, Offline, Admin-Controlled Branding

Installable Progressive Web App with Add to Home Screen on iOS and Android.
Optional offline app-shell with network-first HTML and cache-first hashed assets.
Admin-controlled PWA icons, splash, theme color and name — no code edits required.
Drag-and-drop logo, favicon and PWA icon uploads with live preview.
Manifest, Apple touch icons, maskable icons and favicon set out of the box.
Safe registration guards for editor previews and iframes; kill-switch cleanup worker for stale installs.

Supabase Integration

Auth — email/password, OAuth, SAML SSO-ready, session cookies via @supabase/ssr.
Database — Postgres with typed client, migrations and typed schema generation.
Row Level Security (RLS) — enabled on every user-data table with policies scoped to auth.uid() and workspace isolation.
Storage — avatars, attachments, media, catalog, branding and PWA icons via Supabase Storage.
Realtime — inbox, notifications, badges, presence, workflows and BI with burst deduplication and auto-reconnection.
Server Functions — TanStack createServerFn for app-internal RPC, public server routes for webhooks.
pgvector — powering the RAG Knowledge Base.

DEMO_MODE=true — quick login buttons, visible demo credentials and instant sign-in.
DEMO_MODE=false — all demo UI is removed at build time; production-safe auth only.
Perfect for sales demos, staging environments and CodeCanyon buyer previews without leaking credentials in production.

Desktop — full app sidebar with grouped nav (Inbox, CRM, Sales, Marketing, Helpdesk, Commerce, Admin, Account).
Tablet — collapsible mini sidebar, floating triggers, no auto-open side panels.
Mobile — bottom nav, hamburger drawer, safe-area aware, conversation-first layout.
Nested dropdowns for second-level menus with accurate active-state matching.
Admin zone auto-collapses the main sidebar and restores it on exit.

Documentation System

Built-in documentation portal at /docs with sidebar, search, copy-to-clipboard and syntax highlighting.
Full sections: Introduction, Installation, Build & Deployment (Node.js, PM2, systemd, Nginx, cPanel, Docker), Project Structure, Configuration, Features, Demo Mode, Setup Wizard, Changelog, Troubleshooting and FAQ.
Changelog with semantic versioning — current release: v4.0.0.
PDF release notes download button for v4.0.0.
Environment variable reference table and deployment troubleshooting guide.

Security Features

RLS Security 2FA Security GDPR

Row Level Security on every table with owner-scoped and workspace-scoped policies.
Server-side role enforcement via has_role() SECURITY DEFINER.
HMAC-verified webhooks (WhatsApp, chatbot lifecycle, payment providers).
IP allowlists, signed setup tokens, API key scopes and rate limiting.
GDPR readiness — data export, deletion and retention.
Audit logs, cross-tenant access prevention, security dashboard and org-switch stress-tested.
Idle-logout, secure cookies, CSRF-safe server functions and column-level grants for sensitive tokens.

Performance Optimization

SSR + selective prerender via TanStack Start.
TanStack Query with loader ensureQueryData + useSuspenseQuery pattern.
Route-level code splitting, lazy images and virtualized lists.
Realtime patched via RPC (get_conversation_counts) to bypass PostgREST schema cache thrash.
Bundled, edge-friendly server runtime with zero cold-start module resolution.

Billing & Subscriptions

Subscription plan management with trial, active, past-due and cancelled states.
Plan-to-gateway price mapping for Stripe and Paddle.
Upgrade / downgrade wizard with checkout and entitlement refresh.
Automatic status updates via verified gateway webhooks.
Workspace billing settings with invoice and subscription history.

WACRM After

Deployment Guide (Summary)

Node.js — DEPLOY_TARGET=node bun run build then node app.cjs. PM2 & systemd units included.
Nginx reverse proxy with WebSocket upgrade and TLS.
cPanel — Setup Node.js App, startup file app.cjs, Node 20+.
Docker — docker compose up -d with dev / staging / production compose files.
Cloudflare Workers — default TanStack Start target.

Who It’s For

SaaS founders launching a WhatsApp / Omnichannel CRM product.
Agencies reselling a white-label customer-engagement platform.
Enterprises consolidating sales, support and marketing into one stack.
Developers who want a modern React 19 + Supabase codebase they can extend via plugins.
Anyone replacing fragmented tools with one clean, documented, production-ready system.

What You Get

Full source code (frontend + server functions + migrations).
Native Expo mobile app scaffold.
Docker, Nginx and systemd deployment assets.
Comprehensive /docs portal (v4.0.0) with changelog and PDF export.
Extension SDK and plugin templates.
Regular updates and buyer support.

Growth Tools

WACRM — Ship a premium, multi-tenant SaaS in days, not months.

WACRM — WhatsApp CRM SaaS with Chatbot, Flow Builder, API Access & Multi-Tenant System