@@ -256,6 +285,9 @@ export const SettingsPage: React.FC = () => {
...(flags.accounting
? [{ key: 'accounting' as const, label: t('settings.accounting.title', 'Accounting'), icon: Landmark }]
: []),
+ ...(flags.whatsapp
+ ? [{ key: 'whatsapp' as const, label: t('settings.whatsapp.title', 'WhatsApp'), icon: Smartphone }]
+ : []),
],
},
{
@@ -270,18 +302,8 @@ export const SettingsPage: React.FC = () => {
const allItems = navGroups.flatMap((g) => g.items);
const activeItem = allItems.find((i) => i.key === activeTab) ?? allItems[0];
-
- // If the active tab refers to an item that's now hidden (e.g. admin
- // landed on ?tab=reminderTemplates after disabling reminderEmails),
- // snap to the first visible item so the content area doesn't render
- // a hidden tab's UI. Effect re-fires when flags toggle live.
- useEffect(() => {
- const visibleKeys = allItems.map((i) => i.key);
- if (!visibleKeys.includes(activeTab) && visibleKeys.length > 0) {
- setActiveTab(visibleKeys[0]);
- }
- // eslint-disable-next-line react-hooks/exhaustive-deps
- }, [flags.quotes, flags.bills, flags.contracts, flags.reminderEmails, flags.accounting, activeTab]);
+ // (Visibility snap-back is handled in the useEffect above, which sits
+ // before the isLoading early return to keep hook ordering stable.)
// For tabs that mount existing top-level pages OR bring their own
// header (FeaturesTab has its own icon+title+description block), skip
@@ -420,6 +442,7 @@ export const SettingsPage: React.FC = () => {
{activeTab === 'contracts' &&
}
{activeTab === 'reminderTemplates' &&
}
{activeTab === 'accounting' &&
}
+ {activeTab === 'whatsapp' &&
}
{activeTab === 'status' && (
{
- const response = await api.put(`/admin/categories/${id}`, { name });
+ // Update a category. `name` is required by the backend validator; the other
+ // fields are optional patches. Per-category `allow_downloads` is the #640
+ // hook so admins can disable downloads for one category while keeping
+ // everything else downloadable.
+ async updateCategory(
+ id: number,
+ name: string,
+ patch?: { allow_downloads?: boolean }
+ ): Promise {
+ const response = await api.put(`/admin/categories/${id}`, { name, ...patch });
return response.data;
},
diff --git a/frontend/src/services/featureFlags.service.ts b/frontend/src/services/featureFlags.service.ts
index cc7c5d18..18113843 100644
--- a/frontend/src/services/featureFlags.service.ts
+++ b/frontend/src/services/featureFlags.service.ts
@@ -58,7 +58,12 @@ export type FeatureKey =
// Projects (migration 120). Admin-only grouping layer above events with the
// 360° Project Overview cockpit + the "book to project" hours control. Off
// by default; gates the CRM → Overview area entirely.
- | 'projects';
+ | 'projects'
+ // WhatsApp Business API delivery channel (migration 136, #640D).
+ // Strictly opt-in — requires a Meta Business Account, an approved
+ // message template, and a Meta access token. Independent of email; both
+ // can fire on the same event.
+ | 'whatsapp';
export type FeatureFlags = Record;
diff --git a/frontend/src/services/feedback.service.ts b/frontend/src/services/feedback.service.ts
index 64207221..72735ec9 100644
--- a/frontend/src/services/feedback.service.ts
+++ b/frontend/src/services/feedback.service.ts
@@ -136,9 +136,18 @@ class FeedbackService {
return response.data;
}
- async exportEventFeedback(eventId: string, format: 'json' | 'csv' = 'json') {
+ // `shape` defaults to 'long' (one row per feedback action) for backward
+ // compatibility with anyone scripting against this endpoint. 'pivot' (per
+ // #640 #6) returns one row per (photo, guest_identifier) with boolean
+ // is_favorited / is_liked plus star_rating + comment. Hidden-by-moderator
+ // rows are excluded from the pivot.
+ async exportEventFeedback(
+ eventId: string,
+ format: 'json' | 'csv' = 'json',
+ shape: 'long' | 'pivot' = 'long',
+ ) {
const response = await api.get(`/admin/feedback/events/${eventId}/feedback/export`, {
- params: { format },
+ params: { format, shape },
responseType: format === 'csv' ? 'blob' : 'json'
});
return response.data;
diff --git a/frontend/src/services/whatsapp.service.ts b/frontend/src/services/whatsapp.service.ts
new file mode 100644
index 00000000..f557face
--- /dev/null
+++ b/frontend/src/services/whatsapp.service.ts
@@ -0,0 +1,37 @@
+import { api } from '../config/api';
+
+/**
+ * WhatsApp Business API admin config (#640D). The access token is masked on
+ * GET — the server returns `'********'` when a token is stored, the empty
+ * string when none is. The PUT silently preserves the stored token if the
+ * masked sentinel is sent back unchanged.
+ */
+export interface WhatsAppConfig {
+ phone_number_id: string;
+ waba_id: string;
+ access_token: string; // masked '********' on GET when a real token is stored
+ template_name: string;
+ enabled: boolean;
+}
+
+export const whatsappService = {
+ async getConfig(): Promise {
+ const response = await api.get('/admin/whatsapp/config');
+ return response.data;
+ },
+
+ async updateConfig(config: Partial): Promise<{ success: true }> {
+ const response = await api.put<{ success: true }>('/admin/whatsapp/config', config);
+ return response.data;
+ },
+
+ // Sends a static test message to the supplied phone number using the
+ // currently-saved config. Returns the Meta message ID on success.
+ async sendTest(phone: string): Promise<{ success: boolean; messageId?: string }> {
+ const response = await api.post<{ success: boolean; messageId?: string }>(
+ '/admin/whatsapp/test',
+ { phone },
+ );
+ return response.data;
+ },
+};
diff --git a/frontend/src/types/index.ts b/frontend/src/types/index.ts
index 6d4b542b..e4c526f3 100644
--- a/frontend/src/types/index.ts
+++ b/frontend/src/types/index.ts
@@ -112,6 +112,11 @@ export interface Photo {
category_id?: number | string | null;
category_name?: string;
category_slug?: string;
+ // Per-category download permission (#640). Defaults true for uncategorised
+ // photos and for categories that pre-date migration 135. The frontend hides
+ // the lightbox download button when this is false (event-level allow_downloads
+ // also has to be true — they AND together).
+ category_allow_downloads?: boolean;
size: number;
uploaded_at: string;
captured_at?: string; // EXIF capture date (if available)