IMPORTANT: Third-Party Services & Usage Costs

This script integrates with several third-party services. Accounts and any associated fees are the buyer’s responsibility and are NOT included in the purchase price:

Supabase — backend, database, auth, storage (free tier available, paid plans for production usage)
Stripe — card payments (per-transaction fees set by Stripe)
PayPal — alternative payment provider (per-transaction fees set by PayPal)
Google OAuth — social sign-in (free)
Google Gemini API — AI Smart Matching & content suggestions (usage-based pricing)

You will need to provide your own API keys and manage all associated costs separately. Typical costs vary based on usage volume.

Swiffer — All-in-One Enterprise Omnichannel CRM, WhatsApp Business & AI Automation SaaS Platform

Swiffer is a production-grade, multi-tenant SaaS platform that unifies the entire customer lifecycle — WhatsApp Business Cloud API, Omnichannel Inbox across 16+ channels, AI Assistants, Sales CRM, Marketing Automation, Helpdesk with SLA, Appointment Booking, Client Portal, WhatsApp Commerce, Business Intelligence, Chatbot Builder, Live Chat Widget, Plugin Marketplace and a full public REST API — inside one blazing-fast, installable, offline-capable Progressive Web App.

Built with React 19, TanStack Start, TanStack Router, TanStack Query, Tailwind v4, shadcn/ui and Supabase, Swiffer ships with a bulletproof Setup Wizard, environment-controlled Demo Mode, enterprise RBAC, GDPR readiness, SAML SSO, audit logs, and a fully documented Node.js / Docker / cPanel deployment path. Everything you need to launch a premium SaaS business — in one clean codebase.

Live Demo

Demo URL: https://swiffer.wrapcoders.com

User: user@demo.com / User123!
Agent: agent@demo.com / Agent123!
Admin: admin@demo.com / Admin123!

Overview

Enterprise multi-tenant SaaS with per-workspace isolation and RLS.
Official WhatsApp Cloud API (Meta) integration — WABA, templates, media, webhooks, reliable outbox.
Omnichannel unified inbox across 16+ providers (WhatsApp, Instagram, Messenger, Telegram, Email, SMS, Web Chat and more).
AI Layer with multi-provider LLM support, RAG Knowledge Base (pgvector), AI Reply Assistant, Sales Assistant and Conversation Intelligence.
Full Sales CRM, Kanban pipelines, Quotes, Invoices and Commerce.
Visual Workflow Builder, Marketing Campaigns and Chatbot Builder.
Helpdesk with SLA, ticket routing and AI panels.
Installable PWA, native Expo mobile app, plugin marketplace and public REST API.

Key Features

1. WhatsApp Business Cloud API

Official Meta WhatsApp Cloud API integration (no unofficial libraries).
WABA management, phone number pool and business verification workflow.
Template management with sync, categories, drafts and multi-language support.
Enterprise media management (images, video, audio, docs, stickers, contacts, location).
Reliable webhook processing with HMAC verification, IP allowlists and replay protection.
Delivery outbox with retries, delivery/read receipts and status tracking.
Monitoring dashboard, error reporting and provider health checks.

2. Omnichannel Unified Inbox

One inbox for 16+ channels through a clean provider abstraction layer.
Unified customer timeline across every touchpoint.
Realtime typing indicators, read receipts, presence and unread badges.
Assignments, teams, tags, priorities, snooze, notes and internal replies.
Global search across conversations, contacts, deals and tickets.
Keyboard shortcuts and bulk actions for high-volume support teams.

3. AI Assistants & RAG Knowledge Base

Multi-provider AI Engine (OpenAI, Gemini, Anthropic and Lovable AI Gateway).
AI Reply Assistant, Smart Compose, Summaries and Sentiment.
Conversation Intelligence, lead scoring and next-best-action.
pgvector-powered RAG Knowledge Base with document ingestion and re-embedding.
AI Sales Assistant with deal-stage predictions.
AI Helpdesk panel with automated ticket triage.

4. Sales CRM & Commerce

Contacts, Companies, Deals, Quotes, Invoices and Products.
Drag-and-drop Kanban pipelines and custom fields.
Customer 360 with activity timeline, engagement metrics, notes and tasks.
Task & birthday reminder engine with notifications.
WhatsApp Commerce — catalog sync, cart, orders, payment links, promotions, inventory, brands and shipping.

5. Marketing & Workflow Automation

Multi-step campaign wizard with segmentation and A/B stats.
Scheduled / running / paused campaigns with mid-flight enqueue.
Visual No-Code Workflow Builder powered by React Flow.
Triggers, delays, conditions, branches and omnichannel nodes.
Workflow history, versioning and performance dashboards.

Tickets with SLA, routing, priorities and relationships.
Visual Chatbot Builder with template marketplace, install/uninstall and permission diffs.
Embeddable Live Chat Widget (420×600) with unread badges, delivery states, attachments and appearance preview.
Widget analytics and install snippet generator.

7. Business Intelligence & Reporting

Realtime BI dashboards at /bi.
Sales, conversation, campaign, chatbot and omnichannel analytics.
Custom widgets and dashboard builder.

8. Appointment Booking & Client Portal

AI scheduling assistant with availability rules.
Bookings, calendars, reminders and confirmations.
Branded Client Portal at /client with attachments and messaging.

9. Super Admin, API Platform & Plugin Marketplace

Dedicated Super Admin zone (/admin) with collapsed app-sidebar UX.
Developer Center with public REST API and documentation portal.
Extension SDK and Plugin Marketplace for third-party integrations.

Multi-Role System

Super Admin — platform-wide operations, tenants, billing, branding, PWA icons.
Owner / Admin — full workspace control, members, roles, billing.
Agent — inbox, CRM, sales, helpdesk, campaigns.
Provider — restricted delivery / logistics / partner surfaces.
User / Viewer — read-only or personal scope.

All roles are stored in a dedicated user_roles table and enforced through a has_role() SECURITY DEFINER function plus strict Row Level Security — no client-side role checks, no privilege escalation.

Authentication System

Supabase Auth with email/password and social OAuth (Google, Apple, Microsoft-ready).
Secure PasswordInput component with strength meter.
Invitation flow with role presets and email delivery.
Multi-tenant workspace switching with cache purge and realtime resubscribe.
Idle-logout, session rotation, device management and biometrics (mobile).

Role-Based Redirect System

Post-login routing decided by role and workspace context.
Super Admin → /admin, Agent → /inbox, User → /dashboard, Provider → dedicated console.
Deep-link protection: unauthorized hash and route deep links never render protected panels — verified with end-to-end tests.
Account menu items are hidden or disabled per role in sidebar and mobile navigation.

Setup Wizard (Installation Flow)

Guided first-run wizard with system validation, database checks and storage checks.
Super Admin account creation, workspace, branding and SMTP test.
Signed, single-use step tokens — secure by construction.
Setup Lock via SETUP_LOCKED=true — the wizard cannot re-run without manual unlock.

PWA System — Installable, Offline, Admin-Controlled Branding

Installable Progressive Web App with Add to Home Screen on iOS and Android.
Optional offline app-shell with network-first HTML and cache-first hashed assets.
Admin-controlled PWA icons, splash, theme color and name — no code edits required.
Manifest, Apple touch icons, maskable icons and favicon set out of the box.
Safe registration guards for editor previews and iframes; kill-switch cleanup worker for stale installs.

Supabase Integration

Auth — email/password, OAuth, SAML SSO-ready, session cookies via @supabase/ssr.
Database — Postgres with typed client, migrations and typed schema generation.
Row Level Security (RLS) — enabled on every user-data table with policies scoped to auth.uid().
Storage — avatars, attachments, media, catalog and PWA icons via Supabase Storage.
Realtime — inbox, notifications, badges, presence, workflows and BI.
Server Functions — TanStack createServerFn for app-internal RPC, public server routes for webhooks.
pgvector — powering the RAG Knowledge Base.

DEMO_MODE=true — quick login buttons, visible demo credentials and instant sign-in.
DEMO_MODE=false — all demo UI is removed at build time; production-safe auth only.
Perfect for sales demos, staging environments and CodeCanyon buyer previews without leaking credentials in production.

Desktop — full app sidebar with grouped nav (Inbox, CRM, Sales, Marketing, Helpdesk, Commerce, Admin, Account).
Tablet — collapsible sidebar, floating triggers, no auto-open side panels on 820px.
Mobile — bottom nav, hamburger drawer, safe-area aware.
Nested dropdowns for second-level menus with accurate active-state matching.
Admin zone auto-collapses the main sidebar and restores it on exit.

Documentation System

Built-in documentation portal at /docs with sidebar, search, copy-to-clipboard and syntax highlighting.
Full sections: Introduction, Installation, Build & Deployment (Node.js, PM2, systemd, Nginx, cPanel, Docker), Project Structure, Configuration, Features, Demo Mode, Setup Wizard, Changelog, Troubleshooting and FAQ.
Changelog with semantic versioning — current release: v3.3.3.
Environment variable reference table and deployment troubleshooting guide.

Security Features

Row Level Security on every table with owner-scoped policies.
Server-side role enforcement via has_role() SECURITY DEFINER.
HMAC-verified webhooks (WhatsApp, chatbot lifecycle, payment providers).
IP allowlists, signed setup tokens and rate limiting.
GDPR readiness — data export, deletion and retention.
Audit logs, cross-tenant access prevention and org-switch stress-tested.
Idle-logout, secure cookies, CSRF-safe server functions.

Performance Optimization

SSR + selective prerender via TanStack Start.
TanStack Query with loader ensureQueryData + useSuspenseQuery pattern.
Route-level code splitting, lazy images and virtualized lists.
Realtime patched via RPC (get_conversation_counts) to bypass PostgREST schema cache thrash.
Bundled, edge-friendly server runtime with zero cold-start module resolution.

Deployment Guide (Summary)

Node.js — DEPLOY_TARGET=node bun run build then node app.js. PM2 & systemd units included.
Nginx reverse proxy with WebSocket upgrade and TLS.
cPanel — Setup Node.js App, startup file app.js, Node 20+.
Docker — docker compose up -d with dev / staging / production compose files.
Cloudflare Workers — default TanStack Start target.

Who It’s For

SaaS founders launching a WhatsApp / Omnichannel CRM product.
Agencies reselling a white-label customer-engagement platform.
Enterprises consolidating sales, support and marketing into one stack.
Developers who want a modern React 19 + Supabase codebase they can extend via plugins.
Anyone replacing fragmented tools with one clean, documented, production-ready system.

What You Get

Full source code (frontend + server functions + migrations).
Native Expo mobile app scaffold.
Docker, Nginx and systemd deployment assets.
Comprehensive /docs portal (v3.3.3) with changelog.
Extension SDK and plugin templates.
Regular updates and buyer support.

Swiffer v3.3.3 — Ship a premium, multi-tenant SaaS in days, not months.

Swiffer — The Ultimate WhatsApp CRM SaaS Platform (Node.js Script)