Gogo's Bello Fresh | Fiona Stanley Hospital

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_116":-5,"_20":117,"_22":118,"_119":120,"_121":122,"_25":123,"_24":-5,"_124":-5,"_125":-5,"_126":53,"_127":128,"_129":44,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","jgwynne7_4bf3679b","name","Gogol-fresh","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":19,"_69":-5,"_70":71,"_72":37,"_73":44,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","5f203abc-3ae6-458e-b982-3c4d1e98b889","main.ts","fileId","7ac5f59c-a792-11f1-b4b1-1607ee4eb77e","parentId","branchId","17611424-5590-4a4e-9c2f-8066ac899b48","branchVersion",3,"latest",true,"createdAt",["D",1788438325681],2,"fileType","http","content","// iTabs Menu — Gogo's Bello Fresh, Fiona Stanley Hospital\n// Val.town production build (blob-backed, photo upload enabled)\n// Single-file build (under Val.town's 80K limit). Paste into the val, Save, open the HTTP URL.\n// No env vars or secrets needed — blob storage is built in.\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst SLUG = \"gogos-bellofresh-fsh\";\nconst STATE_KEY = \"itabs-menu-\" + SLUG;\nconst LOCK_PREFIX = \"itabs-lock-\" + SLUG + \"-\";\nconst DEFAULT_PIN = \"0000\";\nconst MAX_ATTEMPTS = 5;\nconst LOCK_MINUTES = 15;\nconst RESEND_API_KEY = Deno.env.get(\"RESEND_API_KEY\") || \"\";\nconst RESEND_FROM = \"iTabs \";\nconst ORDERS_KEY = \"itabs-orders-\" + SLUG;\n// Recovery code — separate secret from the venue PIN, resets PIN back to\n// DEFAULT_PIN via GET /recover-pin?code=... Keep this private.\nconst RECOVERY_CODE = \"boilermaker-reset-gogosbellofresh-4192\";\n\n// Seed data — served until the first staff Save writes to blob.\nconst SEED = {\n settings: {\n venue: \"Gogo's Bello Fresh\",\n tagline:\n \"Coffee \\u00b7 Breakfast \\u00b7 Lunch \\u00b7 Fiona Stanley Hospital\",\n phone: \"0893325676\",\n whatsapp: \"\",\n email: \"\",\n mapUrl:\n \"https://www.google.com/maps/search/?api=1&query=Fiona+Stanley+Hospital+Food+Court+Murdoch\",\n orderMethod: \"counter\",\n photoMode: \"off\",\n demoMode: true,\n accent: \"#d9552c\",\n pin: DEFAULT_PIN, // 0000\n logo: \"\",\n heroImg: \"\",\n },\n categories: [\n {\n name: \"Breakfast\",\n items: [\n { name: \"Wholemeal Toast\", desc: \"\", price: 6.00, photo: \"\" },\n { name: \"Toasties\", desc: \"\", price: 6.50, photo: \"\" },\n { name: \"Wholemeal Toast ECT\", desc: \"\", price: 6.50, photo: \"\" },\n { name: \"Bacon & Egg Toast\", desc: \"\", price: 6.95, photo: \"\" },\n {\n name: \"Breakfast\",\n desc: \"Full breakfast plate\",\n price: 16.00,\n photo: \"\",\n },\n ],\n },\n {\n name: \"Coffee & Drinks\",\n items: [\n { name: \"Flat White\", desc: \"\", price: 5.00, photo: \"\" },\n { name: \"Cappuccino\", desc: \"\", price: 5.00, photo: \"\" },\n { name: \"Mocha\", desc: \"\", price: 5.30, photo: \"\" },\n { name: \"Espresso / Long Black\", desc: \"\", price: 4.50, photo: \"\" },\n { name: \"Macchiato\", desc: \"\", price: 4.50, photo: \"\" },\n { name: \"Chai Latte\", desc: \"\", price: 5.30, photo: \"\" },\n {\n name: \"Tea\",\n desc: \"Earl Grey, English Breakfast, or Green\",\n price: 4.50,\n photo: \"\",\n },\n { name: \"Hot Chocolate\", desc: \"\", price: 5.30, photo: \"\" },\n ],\n },\n {\n name: \"Lunch\",\n items: [\n { name: \"Beef Vindaloo\", desc: \"\", price: 11.00, photo: \"\" },\n { name: \"Butter Chicken\", desc: \"\", price: 11.00, photo: \"\" },\n { name: \"Chicken Penne\", desc: \"\", price: 11.50, photo: \"\" },\n { name: \"Chow Mein\", desc: \"\", price: 10.50, photo: \"\" },\n ],\n },\n ],\n};\n\nasync function getState() {\n try {\n const state = await blob.getJSON(STATE_KEY);\n if (state && state.settings && state.categories) return state;\n } catch (e) {}\n return SEED;\n}\n\nasync function saveState(state) {\n await blob.setJSON(STATE_KEY, state);\n}\n\nasync function getLock(ip) {\n try {\n const lock = await blob.getJSON(LOCK_PREFIX + ip);\n if (lock) return lock;\n } catch (e) {}\n return { attempts: 0, lockedUntil: 0 };\n}\n\nasync function setLock(ip, lock) {\n try {\n await blob.setJSON(LOCK_PREFIX + ip, lock);\n } catch (e) {}\n}\n\nasync function getOrders() {\n try {\n const orders = await blob.getJSON(ORDERS_KEY);\n if (Array.isArray(orders)) return orders;\n } catch (e) {}\n return [];\n}\n\nasync function saveOrders(orders) {\n await blob.setJSON(ORDERS_KEY, orders);\n}\n\nasync function sendConfirmationEmail(\n toEmail,\n venueName,\n editUrl,\n isDemo,\n orderId,\n) {\n if (!RESEND_API_KEY || !toEmail) return;\n const demoNote = isDemo\n ? '

This was a demo order — nothing was sent to ' +\n venueName + \", nothing was charged.

\"\n : \"

Your order has been placed with \" + venueName + \".

\";\n const html =\n '

' +\n \"

Thanks for trying iTabs\" +\n (isDemo ? \" — here's what just happened\" : \"\") + \"

\" +\n demoNote +\n \"

Order reference: \" + orderId + \"

\" +\n '

Want a menu like this for your own venue? Set it up here:

' +\n '

Set up your iTabs menu

' +\n '

' +\n \"

\";\n try {\n await fetch(\"https://api.resend.com/emails\", {\n method: \"POST\",\n headers: {\n \"Authorization\": \"Bearer \" + RESEND_API_KEY,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n from: RESEND_FROM,\n to: toEmail,\n subject: isDemo\n ? \"Your iTabs demo order\"\n : \"Your order from \" + venueName,\n html: html,\n }),\n });\n } catch (e) {}\n}\n\nfunction getIp(req) {\n const fwd = req.headers.get(\"x-forwarded-for\");\n if (fwd) return fwd.split(\",\")[0].trim();\n return \"unknown\";\n}\n\nfunction jsonResponse(obj, status) {\n return new Response(JSON.stringify(obj), {\n status: status || 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\nconst HTML_TEMPLATE = String.raw`\n\n\n\n\nGogo's Bello Fresh | Fiona Stanley Hospital | Order\n\n\n\n\n\n\n\n\n\n

\n \n

\n\n

\n \n \n \n

\n\n

\n \n\n \n

\n\n\n

0 items

$0.00

\n \n

\n\n\n

Connect

\n Get directions to Fiona Stanley Hospital food court\n

Pickup only at this location — no delivery

\n\n\n

Your order

Total$0.00

\n\n \n\n

Pickup time

\n\n

Name

\n \n\n

Email (for your receipt)

\n \n\n

Dietary

\n\n

Notes for the kitchen

\n \n\n

Pay at the counter and show this screen

\n \n

\n\n\n\n\n\n

Owner access

\n \n \n \n \n

\n \n

\n\n\n

Venue settings & menu

\n\n

\n \n \n

\n\n

Venue name

\n \n

Tagline

\n \n

Phone

\n \n

WhatsApp (intl format, e.g. 61412345678)

\n \n

Map link

\n \n

Orders go to

\n \n

Item photos

\n \n\n

Demo mode

Demo mode ON — orders marked as test, not sent to venue

\n \n\n

Brand colour (no purple)

\n \n\n

Logo (URL or upload)

\n \n Upload\n

\n \n\n

Hero banner image (URL or upload)

\n \n Upload\n

\n\n

Change PIN

New PIN (4 digits)

\n \n

Confirm new PIN

\n \n

\n\n \n\n \n \n

\n\n\n\n\n\n`;\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/\") {\n const state = await getState();\n const dataForClient = {\n settings: Object.assign({}, state.settings, { pin: undefined }),\n categories: state.categories,\n };\n delete dataForClient.settings.pin;\n let json = JSON.stringify(dataForClient);\n json = json.split(\"\n const html = HTML_TEMPLATE.replace(\"__ITABS_DATA__\", json);\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/recover-pin\") {\n const code = url.searchParams.get(\"code\");\n if (code !== RECOVERY_CODE) {\n return new Response(\"Not found\", { status: 404 });\n }\n const state = await getState();\n const newState = {\n settings: Object.assign({}, state.settings, { pin: DEFAULT_PIN }),\n categories: state.categories,\n };\n await saveState(newState);\n return new Response(\n \"PIN reset to \" + DEFAULT_PIN +\n \". Everything else (colours, photos, contact details) is untouched. Unlock the editor with this PIN and set a new one from Venue & Hero \\u2192 Change PIN.\",\n { headers: { \"Content-Type\": \"text/plain\" } },\n );\n }\n\n if (req.method === \"POST\" && url.pathname === \"/unlock\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n const minutesLeft = Math.ceil((lock.lockedUntil - Date.now()) / 60000);\n return jsonResponse({\n ok: false,\n locked: true,\n minutesLeft: minutesLeft,\n });\n }\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (body && body.pin === currentPin) {\n await setLock(ip, { attempts: 0, lockedUntil: 0 });\n return jsonResponse({ ok: true });\n }\n const attempts = (lock.attempts || 0) + 1;\n if (attempts >= MAX_ATTEMPTS) {\n await setLock(ip, {\n attempts: 0,\n lockedUntil: Date.now() + LOCK_MINUTES * 60000,\n });\n return jsonResponse({\n ok: false,\n locked: true,\n minutesLeft: LOCK_MINUTES,\n });\n }\n await setLock(ip, { attempts: attempts, lockedUntil: 0 });\n return jsonResponse({ ok: false, locked: false });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/save\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n const minutesLeft = Math.ceil((lock.lockedUntil - Date.now()) / 60000);\n return jsonResponse({\n ok: false,\n message: \"Too many attempts. Try again in \" + minutesLeft + \" min.\",\n });\n }\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) {\n return jsonResponse({\n ok: false,\n message: \"PIN check failed — please unlock again.\",\n });\n }\n if (!body.settings || !body.categories) {\n return jsonResponse({ ok: false, message: \"Missing data.\" });\n }\n const newState = {\n settings: Object.assign({}, state.settings, body.settings),\n categories: body.categories,\n };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) {\n newState.settings.pin = body.newPin;\n } else {\n newState.settings.pin = currentPin;\n }\n await saveState(newState);\n const responseSettings = Object.assign({}, newState.settings, {\n pin: undefined,\n });\n delete responseSettings.pin;\n const result = {\n ok: true,\n settings: responseSettings,\n categories: newState.categories,\n };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) result.pin = body.newPin;\n return jsonResponse(result);\n }\n\n if (req.method === \"POST\" && url.pathname === \"/order\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const isDemo = !!state.settings.demoMode;\n const orderId = SLUG + \"-\" + Date.now().toString(36).toUpperCase();\n const order = {\n id: orderId,\n name: (body && body.name) || \"Guest\",\n email: (body && body.email) || \"\",\n items: (body && body.items) || [],\n total: (body && body.total) || 0,\n isDemo: isDemo,\n createdAt: new Date().toISOString(),\n };\n const orders = await getOrders();\n orders.push(order);\n await saveOrders(orders);\n\n const editUrl = url.origin + url.pathname.replace(/\\/order$/, \"/\") +\n \"?edit=1\";\n let emailed = false;\n if (order.email) {\n await sendConfirmationEmail(\n order.email,\n state.settings.venue,\n url.origin + \"/\",\n isDemo,\n orderId,\n );\n emailed = !!RESEND_API_KEY;\n }\n return jsonResponse({\n ok: true,\n orderId: orderId,\n isDemo: isDemo,\n emailed: emailed,\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/clear-demo-orders\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) {\n return jsonResponse({\n ok: false,\n message: \"PIN check failed — please unlock again.\",\n });\n }\n const orders = await getOrders();\n const remaining = orders.filter((o) => !o.isDemo);\n const cleared = orders.length - remaining.length;\n await saveOrders(remaining);\n return jsonResponse({ ok: true, cleared: cleared });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","deleted",false,"label",[35],{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":59,"_18":60},["D",1788438325681],"children",[],[35],"6d4e4a1a-5731-4aa7-bda9-b317781d492f",["D",1788438299102],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","9e73754f-780d-46b7-924e-110519305b47","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019d76ed-e14a-727a-b612-7191b6d5a9b7","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_115":111},"org",{"_11":12,"_108":109,"_110":111,"_70":71,"_112":113,"_114":53},"branch",{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","iTabs-Menu","avatar","https://avatars.githubusercontent.com/u/177847225?v=4","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":61,"_13":14,"_45":149,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":19,"_69":-5,"_70":71,"_72":37,"_73":44,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":150,"_95":151,"_97":152,"_99":53},[146],"files",[146],"counts",{"_136":77,"_137":138,"_139":77,"_31":140,"_141":142},[134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":135},[35],"pulls","branches",1,"forks",{"_143":77,"_145":77},"connections",{"_143":77,"_144":77},"count","unfilledCount","emptyCount",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":147,"_18":148},[],[35],["D",1788438299102],{"_11":12,"_115":111},{"_11":12,"_108":109,"_110":111,"_70":71,"_112":113,"_114":53},{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"ctx",{"_93":-5,"_131":186,"_187":188,"_189":190,"_191":53,"_192":53,"_193":53,"_194":44,"_195":-5,"_196":-7,"_197":-7,"_198":77,"_199":53,"_200":53,"_201":-5,"_202":53,"_203":53,"_204":53,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":16,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Thanks for trying iTabs\" +\n (isDemo ? \" — here's what just happened\" : \"\") + \"

Order Placed

Code