Wasabi Monkey | Fiona Stanley Hospital

This was a demo order — nothing was sent to ' +\n venueName + \", nothing was charged.

\"\n : \"

Your order has been placed with \" + venueName + \".

\";\n const html =\n '

' +\n \"

Thanks for trying iTabs\" +\n (isDemo ? \" — here's what just happened\" : \"\") + \"

\" +\n demoNote +\n \"

Order reference: \" + orderId + \"

\" +\n '

Want a menu like this for your own venue? Set it up here:

' +\n '

Set up your iTabs menu

' +\n '

' +\n \"

\";\n try {\n await fetch(\"https://api.resend.com/emails\", {\n method: \"POST\",\n headers: {\n \"Authorization\": \"Bearer \" + RESEND_API_KEY,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n from: RESEND_FROM,\n to: toEmail,\n subject: isDemo\n ? \"Your iTabs demo order\"\n : \"Your order from \" + venueName,\n html: html,\n }),\n });\n } catch (e) {}\n}\n\nfunction getIp(req) {\n const fwd = req.headers.get(\"x-forwarded-for\");\n if (fwd) return fwd.split(\",\")[0].trim();\n return \"unknown\";\n}\n\nfunction jsonResponse(obj, status) {\n return new Response(JSON.stringify(obj), {\n status: status || 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\nconst HTML_TEMPLATE = String.raw`\n\n\n\n\nWasabi Monkey | Fiona Stanley Hospital | Order\n\n\n\n\n\n\n\n\n\n

\n \n

\n\n

\n \n \n \n

\n\n

\n \n\n \n

\n\n\n

0 items

$0.00

\n \n

\n\n\n

Connect

\n Get directions to Fiona Stanley Hospital food court\n

Pickup only at this location — no delivery

\n\n\n

Your order

Total$0.00

\n\n \n\n

Pickup time

\n\n

Name

\n \n\n

Email (for your receipt)

\n \n\n

Dietary

\n\n

Notes for the kitchen

\n \n\n

Pay at the counter and show this screen

\n \n

\n\n\n\n\n\n

Owner access

\n \n \n \n \n

\n \n

\n\n\n

Venue settings & menu

\n\n

\n \n \n

\n\n

Venue name

\n \n

Tagline

\n \n

Phone

\n \n

WhatsApp (intl format, e.g. 61412345678)

\n \n

Map link

\n \n

Orders go to

\n \n

Item photos

\n \n\n

Demo mode

Demo mode ON — orders marked as test, not sent to venue

\n \n\n

Brand colour (no purple)

\n \n\n

Logo (URL or upload)

\n \n Upload\n

\n \n\n

Hero banner image (URL or upload)

\n \n Upload\n

\n\n

Change PIN

New PIN (4 digits)

\n \n

Confirm new PIN

\n \n

\n\n \n\n \n \n

\n\n\n\n\n\n`;\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/\") {\n const state = await getState();\n const dataForClient = {\n settings: Object.assign({}, state.settings, { pin: undefined }),\n categories: state.categories,\n };\n delete dataForClient.settings.pin;\n let json = JSON.stringify(dataForClient);\n json = json.split(\"\n const html = HTML_TEMPLATE.replace(\"__ITABS_DATA__\", json);\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/recover-pin\") {\n const code = url.searchParams.get(\"code\");\n if (code !== RECOVERY_CODE) {\n return new Response(\"Not found\", { status: 404 });\n }\n const state = await getState();\n const newState = {\n settings: Object.assign({}, state.settings, { pin: DEFAULT_PIN }),\n categories: state.categories,\n };\n await saveState(newState);\n return new Response(\n \"PIN reset to \" + DEFAULT_PIN +\n \". Everything else (colours, photos, contact details) is untouched. Unlock the editor with this PIN and set a new one from Venue & Hero \\u2192 Change PIN.\",\n { headers: { \"Content-Type\": \"text/plain\" } },\n );\n }\n\n if (req.method === \"POST\" && url.pathname === \"/unlock\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n const minutesLeft = Math.ceil((lock.lockedUntil - Date.now()) / 60000);\n return jsonResponse({\n ok: false,\n locked: true,\n minutesLeft: minutesLeft,\n });\n }\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (body && body.pin === currentPin) {\n await setLock(ip, { attempts: 0, lockedUntil: 0 });\n return jsonResponse({ ok: true });\n }\n const attempts = (lock.attempts || 0) + 1;\n if (attempts >= MAX_ATTEMPTS) {\n await setLock(ip, {\n attempts: 0,\n lockedUntil: Date.now() + LOCK_MINUTES * 60000,\n });\n return jsonResponse({\n ok: false,\n locked: true,\n minutesLeft: LOCK_MINUTES,\n });\n }\n await setLock(ip, { attempts: attempts, lockedUntil: 0 });\n return jsonResponse({ ok: false, locked: false });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/save\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n const minutesLeft = Math.ceil((lock.lockedUntil - Date.now()) / 60000);\n return jsonResponse({\n ok: false,\n message: \"Too many attempts. Try again in \" + minutesLeft + \" min.\",\n });\n }\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) {\n return jsonResponse({\n ok: false,\n message: \"PIN check failed — please unlock again.\",\n });\n }\n if (!body.settings || !body.categories) {\n return jsonResponse({ ok: false, message: \"Missing data.\" });\n }\n const newState = {\n settings: Object.assign({}, state.settings, body.settings),\n categories: body.categories,\n };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) {\n newState.settings.pin = body.newPin;\n } else {\n newState.settings.pin = currentPin;\n }\n await saveState(newState);\n const responseSettings = Object.assign({}, newState.settings, {\n pin: undefined,\n });\n delete responseSettings.pin;\n const result = {\n ok: true,\n settings: responseSettings,\n categories: newState.categories,\n };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) result.pin = body.newPin;\n return jsonResponse(result);\n }\n\n // Customer order — now writes queue-compatible fields (orderNumber,\n // itemsText, paid/done) so itabs-wasabi-monkey-queue.ts can read it directly.\n if (req.method === \"POST\" && url.pathname === \"/order\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const isDemo = !!state.settings.demoMode;\n const items = (body && body.items) || [];\n const orders = await getOrders();\n const orderNumber = await nextOrderNumber(orders);\n const itemsText = items.map((i) => i.qty + \"× \" + i.name).join(\", \");\n const total = (body && body.total) || 0;\n const orderId = SLUG + \"-\" + Date.now().toString(36).toUpperCase();\n const order = {\n id: orderId,\n orderNumber: orderNumber,\n name: (body && body.name) || \"Guest\",\n email: (body && body.email) || \"\",\n notes: (body && body.notes) || \"\",\n items: items,\n itemsText: itemsText,\n total: total,\n paid: false,\n done: false,\n isDemo: isDemo,\n createdAt: new Date().toISOString(),\n };\n orders.push(order);\n await saveOrders(orders);\n\n let emailed = false;\n if (order.email) {\n await sendConfirmationEmail(\n order.email,\n state.settings.venue,\n url.origin + \"/\",\n isDemo,\n orderId,\n );\n emailed = !!RESEND_API_KEY;\n }\n return jsonResponse({\n ok: true,\n orderId: orderId,\n isDemo: isDemo,\n emailed: emailed,\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/clear-demo-orders\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) {\n return jsonResponse({\n ok: false,\n message: \"PIN check failed — please unlock again.\",\n });\n }\n const orders = await getOrders();\n const remaining = orders.filter((o) => !o.isDemo);\n const cleared = orders.length - remaining.length;\n await saveOrders(remaining);\n return jsonResponse({ ok: true, cleared: cleared });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","deleted","label","wasabi-monkey-fsh",[110],"22d6f14e-9c19-4f4f-ab8f-4d7e0160de7d","itabs-wasabi-monkey-queue.ts","55e51966-ad1d-11f1-92df-1607ee4eb77e",["D",1789047898280],"// iTabs Queue — TEMPLATE (staff/operator side) — v2\n// Separate val from the customer menu val, sharing the same blob storage keys.\n// Paste into its own Val.town HTTP val, bookmark this val's URL on the venue's iPad.\n//\n// SETUP FOR A NEW VENUE:\n// 1. Set SLUG below to match the customer menu val's SLUG exactly.\n// 2. Nothing else needs editing — venue name, emoji, and colour all pull\n// automatically from the menu val's settings blob.\n//\n// v2 CHANGE: manual \"Add Order\" panel is now a mini-cart — staff can add\n// several different items (with quantities) before submitting one order,\n// instead of one item = one submit = one order number.\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst SLUG = \"wasabi-monkey-fsh\"; // matches itabs-wasabi-monkey-full.ts\nconst STATE_KEY = \"itabs-menu-\" + SLUG;\nconst ORDERS_KEY = \"itabs-orders-\" + SLUG;\nconst DEFAULT_EMOJI = \"📋\"; // shown if a venue hasn't set settings.queueEmoji\n\nasync function getState() {\n try {\n const state = await blob.getJSON(STATE_KEY);\n if (state && state.settings && state.categories) return state;\n } catch (e) {}\n return { settings: { venue: \"Venue\", accent: \"#e8791f\" }, categories: [] };\n}\nasync function getOrders() {\n try {\n const orders = await blob.getJSON(ORDERS_KEY);\n if (Array.isArray(orders)) return orders;\n } catch (e) {}\n return [];\n}\nasync function saveOrders(orders) {\n await blob.setJSON(ORDERS_KEY, orders);\n}\nasync function nextOrderNumber(orders) {\n const today = new Date().toISOString().slice(0, 10);\n let max = 13;\n for (const o of orders) {\n if (\n o.createdAt && o.createdAt.slice(0, 10) === today && o.orderNumber > max\n ) max = o.orderNumber;\n }\n return max + 1;\n}\nfunction jsonResponse(obj, status) {\n return new Response(JSON.stringify(obj), {\n status: status || 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\n// venue = { venue, accent, queueEmoji } pulled live from the menu blob so the\n// queue always matches whatever the operator set in the menu editor.\nfunction queuePage(venue) {\n const accent = venue.accent || \"#e8791f\";\n const emoji = venue.queueEmoji || DEFAULT_EMOJI;\n const name = venue.venue || \"Venue\";\n return `\n\n${name} — Queue\n\n\n

${emoji} ${name}

0 waiting

Add Item

Size

\n \n \n\n

Order so far

No items added yet

\n\n

Name (optional)

\n \n

Notes (optional)

\n \n \n

\n\n`;\n}\n\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/\") {\n const state = await getState();\n return new Response(queuePage(state.settings), {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/queue-order\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false });\n }\n const orders = await getOrders();\n const items = body.items || [];\n const state = await getState();\n const flatMenu = [];\n state.categories.forEach((c) => c.items.forEach((it) => flatMenu.push(it)));\n let totalCents = 0;\n const itemsText = items.map((i) => {\n const menuItem = flatMenu.find((m) => m.name === i.name);\n const price = menuItem ? menuItem.price : 0;\n totalCents += Math.round(price * 100) * i.qty;\n return i.qty + \"× \" + i.name;\n }).join(\", \");\n const orderNumber = await nextOrderNumber(orders);\n const order = {\n id: SLUG + \"-\" + Date.now().toString(36).toUpperCase(),\n orderNumber,\n name: body.name || \"\",\n notes: body.notes || \"\",\n itemsText,\n total: totalCents / 100,\n paid: false,\n done: false,\n squareOrderId: \"\",\n createdAt: new Date().toISOString(),\n };\n orders.push(order);\n await saveOrders(orders);\n return jsonResponse({ ok: true, orderId: order.id });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/queue-data\") {\n const tab = url.searchParams.get(\"tab\") || \"active\";\n const orders = await getOrders();\n const state = await getState();\n const menuNames = [];\n state.categories.forEach((c) =>\n c.items.forEach((it) => menuNames.push(it.name))\n );\n const filtered = tab === \"active\"\n ? orders.filter((o) => !o.done).sort((a, b) =>\n a.orderNumber - b.orderNumber\n )\n : orders.filter((o) => o.done).sort((a, b) =>\n b.orderNumber - a.orderNumber\n ).slice(0, 100);\n return jsonResponse({ orders: filtered, menuNames });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/mark-paid\") {\n const body = await req.json();\n const orders = await getOrders();\n const order = orders.find((o) => o.id === body.id);\n if (order) order.paid = true;\n await saveOrders(orders);\n return jsonResponse({ ok: true });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/mark-done\") {\n const body = await req.json();\n const orders = await getOrders();\n const order = orders.find((o) => o.id === body.id);\n if (order) order.done = true;\n await saveOrders(orders);\n return jsonResponse({ ok: true });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","wasabi-monkey-fsh-queue",[128],"pulls","branches",1,"forks","envVars",{"_142":42,"_144":42},"connections",{"_142":42,"_143":42},"count","unfilledCount","emptyCount",{"_18":127,"_20":128,"_111":129,"_112":-5,"_113":68,"_114":66,"_116":38,"_22":151,"_65":118,"_119":120,"_121":131,"_123":26,"_124":132,"_148":152,"_86":153},{"_18":109,"_20":110,"_111":36,"_112":-5,"_113":68,"_114":115,"_116":38,"_22":147,"_65":118,"_119":120,"_121":122,"_123":26,"_124":125,"_148":149,"_86":150},["D",1789047883505],"children",[],[110],["D",1789047898280],[],[128],["D",1788256910798],{"_16":17,"_84":80},{"_16":17,"_77":78,"_79":80,"_33":34,"_81":82,"_83":26},{"_65":66,"_20":67,"_18":68,"_69":19,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":21,"_76":17},"ctx",{"_58":-5,"_104":191,"_192":193,"_194":195,"_196":26,"_197":26,"_198":26,"_199":38,"_200":-5,"_201":-7,"_202":-7,"_203":42,"_204":26,"_205":26,"_206":-5,"_207":26,"_208":26,"_209":26,"_210":-5},"ENV",{"_162":163,"_164":165,"_166":67,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Thanks for trying iTabs\" +\n (isDemo ? \" — here's what just happened\" : \"\") + \"

Order Placed

Search