${name} — Queue

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_167":168,"_169":170},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":53,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":59,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":25},"version",14,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":37,"_35":36,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","itabs-wasabi-monkey-queue.ts","latestPath","fileId","55e51966-ad1d-11f1-92df-1607ee4eb77e","name","fileType","script","content","// iTabs Queue — TEMPLATE (staff/operator side) — v2\n// Separate val from the customer menu val, sharing the same blob storage keys.\n// Paste into its own Val.town HTTP val, bookmark this val's URL on the venue's iPad.\n//\n// SETUP FOR A NEW VENUE:\n// 1. Set SLUG below to match the customer menu val's SLUG exactly.\n// 2. Nothing else needs editing — venue name, emoji, and colour all pull\n// automatically from the menu val's settings blob.\n//\n// v2 CHANGE: manual \"Add Order\" panel is now a mini-cart — staff can add\n// several different items (with quantities) before submitting one order,\n// instead of one item = one submit = one order number.\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst SLUG = \"wasabi-monkey-fsh\"; // matches itabs-wasabi-monkey-full.ts\nconst STATE_KEY = \"itabs-menu-\" + SLUG;\nconst ORDERS_KEY = \"itabs-orders-\" + SLUG;\nconst DEFAULT_EMOJI = \"📋\"; // shown if a venue hasn't set settings.queueEmoji\n\nasync function getState() {\n try {\n const state = await blob.getJSON(STATE_KEY);\n if (state && state.settings && state.categories) return state;\n } catch (e) {}\n return { settings: { venue: \"Venue\", accent: \"#e8791f\" }, categories: [] };\n}\nasync function getOrders() {\n try {\n const orders = await blob.getJSON(ORDERS_KEY);\n if (Array.isArray(orders)) return orders;\n } catch (e) {}\n return [];\n}\nasync function saveOrders(orders) {\n await blob.setJSON(ORDERS_KEY, orders);\n}\nasync function nextOrderNumber(orders) {\n const today = new Date().toISOString().slice(0, 10);\n let max = 13;\n for (const o of orders) {\n if (\n o.createdAt && o.createdAt.slice(0, 10) === today && o.orderNumber > max\n ) max = o.orderNumber;\n }\n return max + 1;\n}\nfunction jsonResponse(obj, status) {\n return new Response(JSON.stringify(obj), {\n status: status || 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\n// venue = { venue, accent, queueEmoji } pulled live from the menu blob so the\n// queue always matches whatever the operator set in the menu editor.\nfunction queuePage(venue) {\n const accent = venue.accent || \"#e8791f\";\n const emoji = venue.queueEmoji || DEFAULT_EMOJI;\n const name = venue.venue || \"Venue\";\n return `\n\n${name} — Queue\n\n\n

${emoji} ${name}

0 waiting

Add Item

Size

\n \n \n\n

Order so far

No items added yet

\n\n

Name (optional)

\n \n

Notes (optional)

\n \n \n

\n\n`;\n}\n\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/\") {\n const state = await getState();\n return new Response(queuePage(state.settings), {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/queue-order\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false });\n }\n const orders = await getOrders();\n const items = body.items || [];\n const state = await getState();\n const flatMenu = [];\n state.categories.forEach((c) => c.items.forEach((it) => flatMenu.push(it)));\n let totalCents = 0;\n const itemsText = items.map((i) => {\n const menuItem = flatMenu.find((m) => m.name === i.name);\n const price = menuItem ? menuItem.price : 0;\n totalCents += Math.round(price * 100) * i.qty;\n return i.qty + \"× \" + i.name;\n }).join(\", \");\n const orderNumber = await nextOrderNumber(orders);\n const order = {\n id: SLUG + \"-\" + Date.now().toString(36).toUpperCase(),\n orderNumber,\n name: body.name || \"\",\n notes: body.notes || \"\",\n itemsText,\n total: totalCents / 100,\n paid: false,\n done: false,\n squareOrderId: \"\",\n createdAt: new Date().toISOString(),\n };\n orders.push(order);\n await saveOrders(orders);\n return jsonResponse({ ok: true, orderId: order.id });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/queue-data\") {\n const tab = url.searchParams.get(\"tab\") || \"active\";\n const orders = await getOrders();\n const state = await getState();\n const menuNames = [];\n state.categories.forEach((c) =>\n c.items.forEach((it) => menuNames.push(it.name))\n );\n const filtered = tab === \"active\"\n ? orders.filter((o) => !o.done).sort((a, b) =>\n a.orderNumber - b.orderNumber\n )\n : orders.filter((o) => o.done).sort((a, b) =>\n b.orderNumber - a.orderNumber\n ).slice(0, 100);\n return jsonResponse({ orders: filtered, menuNames });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/mark-paid\") {\n const body = await req.json();\n const orders = await getOrders();\n const order = orders.find((o) => o.id === body.id);\n if (order) order.paid = true;\n await saveOrders(orders);\n return jsonResponse({ ok: true });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/mark-done\") {\n const body = await req.json();\n const orders = await getOrders();\n const order = orders.find((o) => o.id === body.id);\n if (order) order.done = true;\n await saveOrders(orders);\n return jsonResponse({ ok: true });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","http","createdAt",["D",1789047898280],"branchVersion","branchId","16b1a248-587d-4a8a-b783-4035d4708676","id","df48ed4b-9ec0-40f3-8c5b-2238e0c674bb","Wasabi-monkey",["D",1788256910798],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","9e73754f-780d-46b7-924e-110519305b47","pinnedFileId","b4fa0958-ad1c-11f1-b6fc-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019d76ed-e14a-727a-b612-7191b6d5a9b7","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":14,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","jgwynne7_4bf3679b","handle","displayName","iTabs-Menu","avatar","https://avatars.githubusercontent.com/u/177847225?v=4","tier","pro","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":163,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":164,"_81":165,"_83":166,"_85":25},"tree",[154,155],"files",[154,155],"counts",{"_143":63,"_144":145,"_146":63,"_147":148,"_149":150},"contents",[126,127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":139,"_32":28,"_30":31,"_130":-5,"_41":42,"_40":14,"_132":59,"_38":140,"_13":134,"_33":37,"_35":36,"_24":25,"_136":141,"_27":142},{"_43":128,"_32":129,"_30":57,"_130":-5,"_41":42,"_40":131,"_132":59,"_38":133,"_13":134,"_33":37,"_35":135,"_24":25,"_136":137,"_27":138},"c696262d-8749-4f2f-8a52-81e20377725c","wasabi-monkey.ts","parentId",13,"latest",["D",1789047883505],3,"// iTabs Menu — Wasabi Monkey, Fiona Stanley Hospital\n// Val.town production build (blob-backed, photo upload enabled)\n// Paste into the val as itabs-wasabi-monkey-full.ts, Save, open the HTTP URL.\n// No env vars or secrets needed — blob storage is built in.\n//\n// PAIRS WITH: itabs-wasabi-monkey-queue.ts (same val, same SLUG) — the staff\n// live order queue. Orders placed here are written in a shape the queue file\n// can read directly (orderNumber, itemsText, paid/done flags).\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst SLUG = \"wasabi-monkey-fsh\";\nconst STATE_KEY = \"itabs-menu-\" + SLUG;\nconst LOCK_PREFIX = \"itabs-lock-\" + SLUG + \"-\";\nconst DEFAULT_PIN = \"0000\";\nconst MAX_ATTEMPTS = 5;\nconst LOCK_MINUTES = 15;\nconst RESEND_API_KEY = Deno.env.get(\"RESEND_API_KEY\") || \"\";\nconst RESEND_FROM = \"iTabs \";\nconst ORDERS_KEY = \"itabs-orders-\" + SLUG;\n// Recovery code — separate secret from the venue PIN, resets PIN back to\n// DEFAULT_PIN via GET /recover-pin?code=... Keep this private.\nconst RECOVERY_CODE = \"boilermaker-reset-wasabimonkey-3771\";\n\n// Seed data — served until the first staff Save writes to blob.\nconst SEED = {\n settings: {\n venue: \"Wasabi Monkey\",\n tagline: \"Cheeky Food On The Run \\u00b7 Fiona Stanley Hospital\",\n phone: \"\",\n whatsapp: \"\",\n email: \"\",\n mapUrl:\n \"https://www.google.com/maps/search/?api=1&query=Fiona+Stanley+Hospital+Food+Court+Murdoch\",\n orderMethod: \"counter\",\n photoMode: \"off\",\n demoMode: true,\n accent: \"#22c55e\",\n pin: DEFAULT_PIN, // 0000\n logo: \"\",\n heroImg: \"\",\n },\n categories: [\n {\n name: \"Hot Food\",\n items: [\n {\n name: \"Bento Box\",\n desc: \"Katsu chicken, rice, salad & assorted sushi\",\n price: 15.50,\n photo: \"\",\n },\n {\n name: \"Bento Box and Miso\",\n desc: \"Bento box plus miso soup\",\n price: 18.50,\n photo: \"\",\n },\n { name: \"Katsu Udon\", desc: \"Made to order\", price: 15.50, photo: \"\" },\n {\n name: \"Chicken Teriyaki and Rice\",\n desc: \"\",\n price: 14.50,\n photo: \"\",\n },\n { name: \"Chicken Katsu and Rice\", desc: \"\", price: 14.50, photo: \"\" },\n {\n name: \"Vegetarian Spring Rolls\",\n desc: \"3 for\",\n price: 7.00,\n photo: \"\",\n },\n { name: \"Vegetarian Samosa\", desc: \"3 for\", price: 7.00, photo: \"\" },\n { name: \"Vegetarian Croquette\", desc: \"2 for\", price: 7.50, photo: \"\" },\n { name: \"Chicken Gyoza\", desc: \"5 pack\", price: 7.50, photo: \"\" },\n { name: \"Vegetarian Gyoza\", desc: \"\", price: 4.50, photo: \"\" },\n { name: \"Miso Soup\", desc: \"\", price: 5.50, photo: \"\" },\n { name: \"Rice\", desc: \"\", price: 3.50, photo: \"\" },\n { name: \"Chicken Bites\", desc: \"Per skewer\", price: 7.50, photo: \"\" },\n ],\n },\n {\n name: \"Sushi\",\n items: [\n {\n name: \"Tuna Roll\",\n desc:\n \"Tuna, mayo, avocado \\u00b7 4pk (8pk $11.00, brown rice 8pk $12.00)\",\n price: 7.00,\n photo: \"\",\n },\n {\n name: \"Salmon Roll\",\n desc:\n \"Salmon, mayo, avocado, cucumber \\u00b7 4pk (8pk $13.00, brown rice 8pk $13.50)\",\n price: 8.50,\n photo: \"\",\n },\n {\n name: \"Prawn Roll\",\n desc:\n \"Prawn, mayo, avocado, cucumber \\u00b7 4pk (8pk $13.00, brown rice 8pk $12.00)\",\n price: 8.00,\n photo: \"\",\n },\n {\n name: \"Teriyaki Chicken Roll\",\n desc:\n \"Chicken, mayo, avocado \\u00b7 4pk (8pk $11.00, brown rice 8pk $12.00)\",\n price: 7.00,\n photo: \"\",\n },\n {\n name: \"Katsu Chicken Roll\",\n desc:\n \"Crumbed chicken, kewpie mayo, teriyaki sauce \\u00b7 4pk (8pk $12.00)\",\n price: 7.50,\n photo: \"\",\n },\n {\n name: \"Fire Salmon Roll\",\n desc: \"Fresh salmon, avocado, cucumber, sweet chili spice \\u00b7 5pk\",\n price: 9.50,\n photo: \"\",\n },\n {\n name: \"Spicy Salmon & Squid Roll\",\n desc: \"Salmon, avocado, cucumber, spicy mayo \\u00b7 4pk\",\n price: 9.50,\n photo: \"\",\n },\n {\n name: \"Spicy Tuna Roll\",\n desc: \"Spicy tuna, mayo, cucumber \\u00b7 4pk (8pk $11.00)\",\n price: 7.00,\n photo: \"\",\n },\n {\n name: \"Combination Roll\",\n desc: \"Assorted sushi \\u00b7 4pk (8pk $13.50)\",\n price: 8.00,\n photo: \"\",\n },\n {\n name: \"Smoked Salmon Roll\",\n desc: \"Salmon, avocado, cucumber \\u00b7 4pk (8pk $13.50)\",\n price: 8.50,\n photo: \"\",\n },\n {\n name: \"Vegetable Roll\",\n desc: \"Tofu, cucumber, avocado, carrot \\u00b7 4pk (8pk $11.00)\",\n price: 7.00,\n photo: \"\",\n },\n {\n name: \"Wasabi Monkey Special\",\n desc:\n \"Salmon, tuna, avocado, cucumber, smoked salmon, mayo, tobiko on outside \\u00b7 4pk (8pk $16.00)\",\n price: 9.50,\n photo: \"\",\n },\n {\n name: \"Softshell Crab Roll\",\n desc: \"4pk (8pk $15.00)\",\n price: 9.50,\n photo: \"\",\n },\n {\n name: \"Spicy Katsu Roll\",\n desc: \"Katsu, cucumber, spicy mayo, fried onions \\u00b7 5pk\",\n price: 8.00,\n photo: \"\",\n },\n ],\n },\n {\n name: \"Sashimi, Nigiri & More\",\n items: [\n {\n name: \"Inari (Plain)\",\n desc: \"Rice wrapped in tofu\",\n price: 7.50,\n photo: \"\",\n },\n { name: \"Inari (Seaweed Salad)\", desc: \"\", price: 7.50, photo: \"\" },\n {\n name: \"Inari (Crab Stick Salad)\",\n desc: \"With tobiko\",\n price: 8.50,\n photo: \"\",\n },\n {\n name: \"Avocado Rice Paper Rolls\",\n desc: \"Avocado, cucumber, carrot, spinach\",\n price: 12.00,\n photo: \"\",\n },\n {\n name: \"Rice Paper Rolls\",\n desc:\n \"Teriyaki chicken/prawn/avocado, carrot, cucumber, spinach, rice noodles\",\n price: 12.50,\n photo: \"\",\n },\n {\n name: \"Seared Salmon\",\n desc: \"Cooked salmon, teriyaki sauce \\u00b7 4pk\",\n price: 9.00,\n photo: \"\",\n },\n {\n name: \"Nigiri\",\n desc: \"Salmon, tuna, prawn, crab stick, tofu\",\n price: 16.00,\n photo: \"\",\n },\n { name: \"Salmon Sashimi\", desc: \"\", price: 20.00, photo: \"\" },\n { name: \"Salmon Nigiri\", desc: \"\", price: 20.00, photo: \"\" },\n {\n name: \"Tub of Sauce\",\n desc:\n \"Kewpie mayo, katsu sauce, sweet chili, sriracha, salad dressing\",\n price: 2.00,\n photo: \"\",\n },\n ],\n },\n {\n name: \"Smoothies\",\n items: [\n {\n name: \"Morning Rounds\",\n desc: \"Rolled oats, banana, honey, yoghurt, almond milk\",\n price: 8.00,\n photo: \"\",\n },\n {\n name: \"Bananas\",\n desc: \"Bananas, honey, almond milk, yoghurt\",\n price: 8.00,\n photo: \"\",\n },\n {\n name: \"Greens Fever\",\n desc: \"Spinach, banana, pineapple, almond milk, chia seeds\",\n price: 8.50,\n photo: \"\",\n },\n {\n name: \"Tea Tonic\",\n desc:\n \"Matcha, dates, banana, almond milk, spinach, cinnamon, oats, vanilla\",\n price: 9.00,\n photo: \"\",\n },\n {\n name: \"Booster\",\n desc:\n \"Blueberries, raspberries, strawberries, banana, almond milk, yoghurt\",\n price: 9.00,\n photo: \"\",\n },\n ],\n },\n {\n name: \"Juice Bar\",\n items: [\n {\n name: \"Keep the Doctor Away\",\n desc: \"Carrot, apple, ginger\",\n price: 7.00,\n photo: \"\",\n },\n {\n name: \"Wasabi Sunset\",\n desc: \"Watermelon, apple, lime, strawberries\",\n price: 7.00,\n photo: \"\",\n },\n {\n name: \"Citrus Breeze\",\n desc: \"Orange, lemon, pineapple, apple\",\n price: 7.00,\n photo: \"\",\n },\n {\n name: \"Daily Dose\",\n desc: \"Spinach, cucumber, lime, apple, kiwi\",\n price: 9.00,\n photo: \"\",\n },\n ],\n },\n ],\n};\n\nasync function getState() {\n try {\n const state = await blob.getJSON(STATE_KEY);\n if (state && state.settings && state.categories) return state;\n } catch (e) {}\n return SEED;\n}\n\nasync function saveState(state) {\n await blob.setJSON(STATE_KEY, state);\n}\n\nasync function getLock(ip) {\n try {\n const lock = await blob.getJSON(LOCK_PREFIX + ip);\n if (lock) return lock;\n } catch (e) {}\n return { attempts: 0, lockedUntil: 0 };\n}\n\nasync function setLock(ip, lock) {\n try {\n await blob.setJSON(LOCK_PREFIX + ip, lock);\n } catch (e) {}\n}\n\nasync function getOrders() {\n try {\n const orders = await blob.getJSON(ORDERS_KEY);\n if (Array.isArray(orders)) return orders;\n } catch (e) {}\n return [];\n}\n\nasync function saveOrders(orders) {\n await blob.setJSON(ORDERS_KEY, orders);\n}\n\n// Queue-compatible order numbering — resets effectively each day since the\n// queue only looks at today's orders, matches the queue template's own logic.\nasync function nextOrderNumber(orders) {\n const today = new Date().toISOString().slice(0, 10);\n let max = 13;\n for (const o of orders) {\n if (o.createdAt && o.createdAt.slice(0, 10) === today && o.orderNumber > max) {\n max = o.orderNumber;\n }\n }\n return max + 1;\n}\n\nasync function sendConfirmationEmail(\n toEmail,\n venueName,\n editUrl,\n isDemo,\n orderId,\n) {\n if (!RESEND_API_KEY || !toEmail) return;\n const demoNote = isDemo\n ? '

This was a demo order — nothing was sent to ' +\n venueName + \", nothing was charged.

\"\n : \"

Your order has been placed with \" + venueName + \".

\";\n const html =\n '

' +\n \"

Thanks for trying iTabs\" +\n (isDemo ? \" — here's what just happened\" : \"\") + \"

\" +\n demoNote +\n \"

Order reference: \" + orderId + \"

\" +\n '

Want a menu like this for your own venue? Set it up here:

' +\n '

Set up your iTabs menu

' +\n '

' +\n \"

\";\n try {\n await fetch(\"https://api.resend.com/emails\", {\n method: \"POST\",\n headers: {\n \"Authorization\": \"Bearer \" + RESEND_API_KEY,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n from: RESEND_FROM,\n to: toEmail,\n subject: isDemo\n ? \"Your iTabs demo order\"\n : \"Your order from \" + venueName,\n html: html,\n }),\n });\n } catch (e) {}\n}\n\nfunction getIp(req) {\n const fwd = req.headers.get(\"x-forwarded-for\");\n if (fwd) return fwd.split(\",\")[0].trim();\n return \"unknown\";\n}\n\nfunction jsonResponse(obj, status) {\n return new Response(JSON.stringify(obj), {\n status: status || 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\nconst HTML_TEMPLATE = String.raw`\n\n\n\n\nWasabi Monkey | Fiona Stanley Hospital | Order\n\n\n\n\n\n\n\n\n\n

\n \n

\n\n

\n \n \n \n

\n\n

\n \n\n \n

\n\n\n

0 items

$0.00

\n \n

\n\n\n

Connect

\n Get directions to Fiona Stanley Hospital food court\n

Pickup only at this location — no delivery

\n\n\n

Your order

Total$0.00

\n\n \n\n

Pickup time

\n\n

Name

\n \n\n

Email (for your receipt)

\n \n\n

Dietary

\n\n

Notes for the kitchen

\n \n\n

Pay at the counter and show this screen

\n \n

\n\n\n\n\n\n

Owner access

\n \n \n \n \n

\n \n

\n\n\n

Venue settings & menu

\n\n

\n \n \n

\n\n

Venue name

\n \n

Tagline

\n \n

Phone

\n \n

WhatsApp (intl format, e.g. 61412345678)

\n \n

Map link

\n \n

Orders go to

\n \n

Item photos

\n \n\n

Demo mode

Demo mode ON — orders marked as test, not sent to venue

\n \n\n

Brand colour (no purple)

\n \n\n

Logo (URL or upload)

\n \n Upload\n

\n \n\n

Hero banner image (URL or upload)

\n \n Upload\n

\n\n

Change PIN

New PIN (4 digits)

\n \n

Confirm new PIN

\n \n

\n\n \n\n \n \n

\n\n\n\n\n\n`;\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/\") {\n const state = await getState();\n const dataForClient = {\n settings: Object.assign({}, state.settings, { pin: undefined }),\n categories: state.categories,\n };\n delete dataForClient.settings.pin;\n let json = JSON.stringify(dataForClient);\n json = json.split(\"\n const html = HTML_TEMPLATE.replace(\"__ITABS_DATA__\", json);\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/recover-pin\") {\n const code = url.searchParams.get(\"code\");\n if (code !== RECOVERY_CODE) {\n return new Response(\"Not found\", { status: 404 });\n }\n const state = await getState();\n const newState = {\n settings: Object.assign({}, state.settings, { pin: DEFAULT_PIN }),\n categories: state.categories,\n };\n await saveState(newState);\n return new Response(\n \"PIN reset to \" + DEFAULT_PIN +\n \". Everything else (colours, photos, contact details) is untouched. Unlock the editor with this PIN and set a new one from Venue & Hero \\u2192 Change PIN.\",\n { headers: { \"Content-Type\": \"text/plain\" } },\n );\n }\n\n if (req.method === \"POST\" && url.pathname === \"/unlock\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n const minutesLeft = Math.ceil((lock.lockedUntil - Date.now()) / 60000);\n return jsonResponse({\n ok: false,\n locked: true,\n minutesLeft: minutesLeft,\n });\n }\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (body && body.pin === currentPin) {\n await setLock(ip, { attempts: 0, lockedUntil: 0 });\n return jsonResponse({ ok: true });\n }\n const attempts = (lock.attempts || 0) + 1;\n if (attempts >= MAX_ATTEMPTS) {\n await setLock(ip, {\n attempts: 0,\n lockedUntil: Date.now() + LOCK_MINUTES * 60000,\n });\n return jsonResponse({\n ok: false,\n locked: true,\n minutesLeft: LOCK_MINUTES,\n });\n }\n await setLock(ip, { attempts: attempts, lockedUntil: 0 });\n return jsonResponse({ ok: false, locked: false });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/save\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n const minutesLeft = Math.ceil((lock.lockedUntil - Date.now()) / 60000);\n return jsonResponse({\n ok: false,\n message: \"Too many attempts. Try again in \" + minutesLeft + \" min.\",\n });\n }\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) {\n return jsonResponse({\n ok: false,\n message: \"PIN check failed — please unlock again.\",\n });\n }\n if (!body.settings || !body.categories) {\n return jsonResponse({ ok: false, message: \"Missing data.\" });\n }\n const newState = {\n settings: Object.assign({}, state.settings, body.settings),\n categories: body.categories,\n };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) {\n newState.settings.pin = body.newPin;\n } else {\n newState.settings.pin = currentPin;\n }\n await saveState(newState);\n const responseSettings = Object.assign({}, newState.settings, {\n pin: undefined,\n });\n delete responseSettings.pin;\n const result = {\n ok: true,\n settings: responseSettings,\n categories: newState.categories,\n };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) result.pin = body.newPin;\n return jsonResponse(result);\n }\n\n // Customer order — now writes queue-compatible fields (orderNumber,\n // itemsText, paid/done) so itabs-wasabi-monkey-queue.ts can read it directly.\n if (req.method === \"POST\" && url.pathname === \"/order\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const isDemo = !!state.settings.demoMode;\n const items = (body && body.items) || [];\n const orders = await getOrders();\n const orderNumber = await nextOrderNumber(orders);\n const itemsText = items.map((i) => i.qty + \"× \" + i.name).join(\", \");\n const total = (body && body.total) || 0;\n const orderId = SLUG + \"-\" + Date.now().toString(36).toUpperCase();\n const order = {\n id: orderId,\n orderNumber: orderNumber,\n name: (body && body.name) || \"Guest\",\n email: (body && body.email) || \"\",\n notes: (body && body.notes) || \"\",\n items: items,\n itemsText: itemsText,\n total: total,\n paid: false,\n done: false,\n isDemo: isDemo,\n createdAt: new Date().toISOString(),\n };\n orders.push(order);\n await saveOrders(orders);\n\n let emailed = false;\n if (order.email) {\n await sendConfirmationEmail(\n order.email,\n state.settings.venue,\n url.origin + \"/\",\n isDemo,\n orderId,\n );\n emailed = !!RESEND_API_KEY;\n }\n return jsonResponse({\n ok: true,\n orderId: orderId,\n isDemo: isDemo,\n emailed: emailed,\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/clear-demo-orders\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) {\n return jsonResponse({\n ok: false,\n message: \"PIN check failed — please unlock again.\",\n });\n }\n const orders = await getOrders();\n const remaining = orders.filter((o) => !o.isDemo);\n const cleared = orders.length - remaining.length;\n await saveOrders(remaining);\n return jsonResponse({ ok: true, cleared: cleared });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","label","wasabi-monkey-fsh",[129],"22d6f14e-9c19-4f4f-ab8f-4d7e0160de7d",["D",1789047898280],"wasabi-monkey-fsh-queue",[28],"pulls","branches",1,"forks","envVars",{"_151":63,"_153":63},"connections",{"_151":63,"_152":63},"count","unfilledCount","emptyCount",{"_43":139,"_32":28,"_30":31,"_130":-5,"_41":42,"_40":14,"_132":59,"_38":160,"_13":134,"_33":37,"_35":36,"_24":25,"_136":141,"_157":161,"_27":162},{"_43":128,"_32":129,"_30":57,"_130":-5,"_41":42,"_40":131,"_132":59,"_38":156,"_13":134,"_33":37,"_35":135,"_24":25,"_136":137,"_157":158,"_27":159},["D",1789047883505],"children",[],[129],["D",1789047898280],[],[28],["D",1788256910798],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":14,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_79":-5,"_123":200,"_201":202,"_203":204,"_205":25,"_206":25,"_207":25,"_208":59,"_209":-5,"_210":-7,"_211":-7,"_212":63,"_213":25,"_214":25,"_215":-5,"_216":25,"_217":25,"_218":25,"_219":-5},"ENV",{"_171":172,"_173":174,"_175":86,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Thanks for trying iTabs\" +\n (isDemo ? \" — here's what just happened\" : \"\") + \"

Order Placed

Diff · v14