Wasabi Monkey | Fiona Stanley Hospital

This was a demo order — nothing was sent to ' +\n venueName + \", nothing was charged.

\"\n : \"

Your order has been placed with \" + venueName + \".

\";\n const html =\n '

' +\n \"

Thanks for trying iTabs\" +\n (isDemo ? \" — here's what just happened\" : \"\") + \"

\" +\n demoNote +\n \"

Order reference: \" + orderId + \"

\" +\n '

Want a menu like this for your own venue? Set it up here:

' +\n '

Set up your iTabs menu

' +\n '

' +\n \"

\";\n try {\n await fetch(\"https://api.resend.com/emails\", {\n method: \"POST\",\n headers: {\n \"Authorization\": \"Bearer \" + RESEND_API_KEY,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n from: RESEND_FROM,\n to: toEmail,\n subject: isDemo\n ? \"Your iTabs demo order\"\n : \"Your order from \" + venueName,\n html: html,\n }),\n });\n } catch (e) {}\n}\n\nfunction getIp(req) {\n const fwd = req.headers.get(\"x-forwarded-for\");\n if (fwd) return fwd.split(\",\")[0].trim();\n return \"unknown\";\n}\n\nfunction jsonResponse(obj, status) {\n return new Response(JSON.stringify(obj), {\n status: status || 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\nconst HTML_TEMPLATE = String.raw`\n\n\n\n\nWasabi Monkey | Fiona Stanley Hospital | Order\n\n\n\n\n\n\n\n\n\n

\n \n

\n\n

\n \n \n \n

\n\n

\n \n\n \n

\n\n\n

0 items

$0.00

\n \n

\n\n\n

Connect

\n Get directions to Fiona Stanley Hospital food court\n

Pickup only at this location — no delivery

\n\n\n

Your order

Total$0.00

\n\n \n\n

Pickup time

\n\n

Name

\n \n\n

Email (for your receipt)

\n \n\n

Dietary

\n\n

Notes for the kitchen

\n \n\n

Pay at the counter and show this screen

\n \n

\n\n\n\n\n\n

Owner access

\n \n \n \n \n

\n \n

\n\n\n

Venue settings & menu

\n\n

\n \n \n

\n\n

Venue name

\n \n

Tagline

\n \n

Phone

\n \n

WhatsApp (intl format, e.g. 61412345678)

\n \n

Map link

\n \n

Orders go to

\n \n

Item photos

\n \n\n

Demo mode

Demo mode ON — orders marked as test, not sent to venue

\n \n\n

Brand colour (no purple)

\n \n\n

Logo (URL or upload)

\n \n Upload\n

\n \n\n

Hero banner image (URL or upload)

\n \n Upload\n

\n\n

Change PIN

New PIN (4 digits)

\n \n

Confirm new PIN

\n \n

\n\n \n\n \n \n

\n\n\n\n\n\n`;\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/\") {\n const state = await getState();\n const dataForClient = {\n settings: Object.assign({}, state.settings, { pin: undefined }),\n categories: state.categories,\n };\n delete dataForClient.settings.pin;\n let json = JSON.stringify(dataForClient);\n json = json.split(\"\n const html = HTML_TEMPLATE.replace(\"__ITABS_DATA__\", json);\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/recover-pin\") {\n const code = url.searchParams.get(\"code\");\n if (code !== RECOVERY_CODE) {\n return new Response(\"Not found\", { status: 404 });\n }\n const state = await getState();\n const newState = {\n settings: Object.assign({}, state.settings, { pin: DEFAULT_PIN }),\n categories: state.categories,\n };\n await saveState(newState);\n return new Response(\n \"PIN reset to \" + DEFAULT_PIN +\n \". Everything else (colours, photos, contact details) is untouched. Unlock the editor with this PIN and set a new one from Venue & Hero \\u2192 Change PIN.\",\n { headers: { \"Content-Type\": \"text/plain\" } },\n );\n }\n\n if (req.method === \"POST\" && url.pathname === \"/unlock\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n const minutesLeft = Math.ceil((lock.lockedUntil - Date.now()) / 60000);\n return jsonResponse({\n ok: false,\n locked: true,\n minutesLeft: minutesLeft,\n });\n }\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (body && body.pin === currentPin) {\n await setLock(ip, { attempts: 0, lockedUntil: 0 });\n return jsonResponse({ ok: true });\n }\n const attempts = (lock.attempts || 0) + 1;\n if (attempts >= MAX_ATTEMPTS) {\n await setLock(ip, {\n attempts: 0,\n lockedUntil: Date.now() + LOCK_MINUTES * 60000,\n });\n return jsonResponse({\n ok: false,\n locked: true,\n minutesLeft: LOCK_MINUTES,\n });\n }\n await setLock(ip, { attempts: attempts, lockedUntil: 0 });\n return jsonResponse({ ok: false, locked: false });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/save\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n const minutesLeft = Math.ceil((lock.lockedUntil - Date.now()) / 60000);\n return jsonResponse({\n ok: false,\n message: \"Too many attempts. Try again in \" + minutesLeft + \" min.\",\n });\n }\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) {\n return jsonResponse({\n ok: false,\n message: \"PIN check failed — please unlock again.\",\n });\n }\n if (!body.settings || !body.categories) {\n return jsonResponse({ ok: false, message: \"Missing data.\" });\n }\n const newState = {\n settings: Object.assign({}, state.settings, body.settings),\n categories: body.categories,\n };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) {\n newState.settings.pin = body.newPin;\n } else {\n newState.settings.pin = currentPin;\n }\n await saveState(newState);\n const responseSettings = Object.assign({}, newState.settings, {\n pin: undefined,\n });\n delete responseSettings.pin;\n const result = {\n ok: true,\n settings: responseSettings,\n categories: newState.categories,\n };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) result.pin = body.newPin;\n return jsonResponse(result);\n }\n\n // Customer order — now writes queue-compatible fields (orderNumber,\n // itemsText, paid/done) so itabs-wasabi-monkey-queue.ts can read it directly.\n if (req.method === \"POST\" && url.pathname === \"/order\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const isDemo = !!state.settings.demoMode;\n const items = (body && body.items) || [];\n const orders = await getOrders();\n const orderNumber = await nextOrderNumber(orders);\n const itemsText = items.map((i) => i.qty + \"× \" + i.name).join(\", \");\n const total = (body && body.total) || 0;\n const orderId = SLUG + \"-\" + Date.now().toString(36).toUpperCase();\n const order = {\n id: orderId,\n orderNumber: orderNumber,\n name: (body && body.name) || \"Guest\",\n email: (body && body.email) || \"\",\n notes: (body && body.notes) || \"\",\n items: items,\n itemsText: itemsText,\n total: total,\n paid: false,\n done: false,\n isDemo: isDemo,\n createdAt: new Date().toISOString(),\n };\n orders.push(order);\n await saveOrders(orders);\n\n let emailed = false;\n if (order.email) {\n await sendConfirmationEmail(\n order.email,\n state.settings.venue,\n url.origin + \"/\",\n isDemo,\n orderId,\n );\n emailed = !!RESEND_API_KEY;\n }\n return jsonResponse({\n ok: true,\n orderId: orderId,\n isDemo: isDemo,\n emailed: emailed,\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/clear-demo-orders\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) {\n return jsonResponse({\n ok: false,\n message: \"PIN check failed — please unlock again.\",\n });\n }\n const orders = await getOrders();\n const remaining = orders.filter((o) => !o.isDemo);\n const cleared = orders.length - remaining.length;\n await saveOrders(remaining);\n return jsonResponse({ ok: true, cleared: cleared });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","label","wasabi-monkey-fsh",[129],"14b0de48-a40c-484b-a528-6a6ad954b34e",["D",1789047751703],"wasabi-monkey-fsh-queue",[28],"pulls","branches","forks","envVars",{"_150":62,"_152":62},"connections",{"_150":62,"_151":62},"count","unfilledCount","emptyCount",{"_43":139,"_32":28,"_30":31,"_130":-5,"_41":42,"_40":14,"_132":25,"_38":159,"_13":134,"_34":35,"_36":37,"_24":25,"_136":141,"_156":160,"_27":161},{"_43":128,"_32":129,"_30":56,"_130":-5,"_41":42,"_40":131,"_132":25,"_38":155,"_13":134,"_34":35,"_36":135,"_24":25,"_136":137,"_156":157,"_27":158},["D",1789047646679],"children",[],[129],["D",1789047751703],[],[28],["D",1788256910798],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":54,"_101":102,"_103":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_123":199,"_200":201,"_202":203,"_204":25,"_205":25,"_206":25,"_207":58,"_208":-5,"_209":-7,"_210":-7,"_211":62,"_212":25,"_213":25,"_214":-5,"_215":25,"_216":25,"_217":25,"_218":-5},"ENV",{"_170":171,"_172":173,"_174":86,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Thanks for trying iTabs\" +\n (isDemo ? \" — here's what just happened\" : \"\") + \"

Order Placed

Diff · v10