Gogo's Bello Fresh | Fiona Stanley Hospital

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_170":171,"_172":173},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":58,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",11,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","e9fbdeca-b018-11f1-9cbd-1607ee4eb77e","name","fileType","http","content","// iTabs Menu — Gogo's Bello Fresh, Fiona Stanley Hospital\n// Val.town production build (blob-backed, photo upload enabled)\n// Paste into the val as itabs-gogos-bello-fresh-full.ts, Save, open the HTTP URL.\n// No env vars or secrets needed — blob storage is built in.\n//\n// PAIRS WITH: itabs-gogos-bello-fresh-queue.ts (same val, same SLUG) — the staff\n// live order queue. Orders placed here are written in a shape the queue file\n// can read directly (orderNumber, itemsText, paid/done flags).\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst SLUG = \"gogos-bello-fresh-fsh\";\nconst STATE_KEY = \"itabs-menu-\" + SLUG;\nconst LOCK_PREFIX = \"itabs-lock-\" + SLUG + \"-\";\nconst DEFAULT_PIN = \"0000\";\nconst MAX_ATTEMPTS = 5;\nconst LOCK_MINUTES = 15;\nconst RESEND_API_KEY = Deno.env.get(\"RESEND_API_KEY\") || \"\";\nconst RESEND_FROM = \"iTabs \";\nconst ORDERS_KEY = \"itabs-orders-\" + SLUG;\n// Recovery code — separate secret from the venue PIN, resets PIN back to\n// DEFAULT_PIN via GET /recover-pin?code=... Keep this private.\nconst RECOVERY_CODE = \"boilermaker-reset-gogosbellofresh-4821\";\n\n// Seed data — served until the first staff Save writes to blob.\nconst SEED = {\n settings: {\n venue: \"Gogo's Bello Fresh\",\n tagline: \"Fiona Stanley Hospital Food Court\",\n phone: \"08 9332 5676\",\n whatsapp: \"\",\n email: \"bellorewards@gmail.com\",\n mapUrl:\n \"https://www.google.com/maps/search/?api=1&query=102-108+Murdoch+Drive+Murdoch+WA+6150\",\n orderMethod: \"counter\",\n photoMode: \"off\",\n demoMode: true,\n accent: \"#f97316\",\n pin: DEFAULT_PIN, // 0000\n logo: \"\",\n heroImg: \"\",\n },\n categories: [\n {\n name: \"Breakfast\",\n items: [\n { name: \"Wholemeal Toast\", desc: \"\", price: 6.00, photo: \"\" },\n { name: \"Toasties\", desc: \"\", price: 6.50, photo: \"\" },\n {\n name: \"Wholemeal Toast ECT\",\n desc: \"Egg, cheese, tomato\",\n price: 6.50,\n photo: \"\",\n },\n { name: \"Bacon and Egg Toast\", desc: \"\", price: 6.95, photo: \"\" },\n { name: \"Big Breakfast\", desc: \"\", price: 16.00, photo: \"\" },\n ],\n },\n {\n name: \"Coffee and Tea\",\n items: [\n { name: \"Flat White (Small)\", desc: \"\", price: 5.30, photo: \"\" },\n { name: \"Flat White (Regular)\", desc: \"\", price: 5.80, photo: \"\" },\n { name: \"Flat White (Large)\", desc: \"\", price: 6.80, photo: \"\" },\n { name: \"Cappuccino (Small)\", desc: \"\", price: 5.30, photo: \"\" },\n { name: \"Cappuccino (Regular)\", desc: \"\", price: 5.80, photo: \"\" },\n { name: \"Cappuccino (Large)\", desc: \"\", price: 6.80, photo: \"\" },\n {\n name: \"Espresso / Long Black (Small)\",\n desc: \"\",\n price: 5.30,\n photo: \"\",\n },\n {\n name: \"Espresso / Long Black (Regular)\",\n desc: \"\",\n price: 5.80,\n photo: \"\",\n },\n {\n name: \"Espresso / Long Black (Large)\",\n desc: \"\",\n price: 6.80,\n photo: \"\",\n },\n { name: \"Macchiato (Small)\", desc: \"\", price: 5.30, photo: \"\" },\n { name: \"Macchiato (Regular)\", desc: \"\", price: 5.80, photo: \"\" },\n { name: \"Macchiato (Large)\", desc: \"\", price: 6.80, photo: \"\" },\n {\n name: \"Tea (Small)\",\n desc: \"Earl Grey, English Breakfast, or Green\",\n price: 5.30,\n photo: \"\",\n },\n {\n name: \"Tea (Regular)\",\n desc: \"Earl Grey, English Breakfast, or Green\",\n price: 5.80,\n photo: \"\",\n },\n {\n name: \"Tea (Large)\",\n desc: \"Earl Grey, English Breakfast, or Green\",\n price: 6.80,\n photo: \"\",\n },\n { name: \"Chai Latte (Small)\", desc: \"\", price: 5.50, photo: \"\" },\n { name: \"Chai Latte (Regular)\", desc: \"\", price: 6.00, photo: \"\" },\n { name: \"Chai Latte (Large)\", desc: \"\", price: 7.00, photo: \"\" },\n { name: \"Mocha (Small)\", desc: \"\", price: 5.50, photo: \"\" },\n { name: \"Mocha (Regular)\", desc: \"\", price: 6.00, photo: \"\" },\n { name: \"Mocha (Large)\", desc: \"\", price: 7.00, photo: \"\" },\n { name: \"Hot Chocolate (Small)\", desc: \"\", price: 5.50, photo: \"\" },\n { name: \"Hot Chocolate (Regular)\", desc: \"\", price: 6.00, photo: \"\" },\n { name: \"Hot Chocolate (Large)\", desc: \"\", price: 7.00, photo: \"\" },\n ],\n },\n {\n name: \"Iced Drinks\",\n items: [\n { name: \"Iced Latte\", desc: \"\", price: 8.00, photo: \"\" },\n { name: \"Iced Long Black\", desc: \"\", price: 8.00, photo: \"\" },\n { name: \"Iced Chai\", desc: \"\", price: 8.80, photo: \"\" },\n ],\n },\n {\n name: \"Curries and Noodles\",\n items: [\n { name: \"Beef Vindaloo\", desc: \"\", price: 11.00, photo: \"\" },\n { name: \"Butter Chicken\", desc: \"\", price: 11.00, photo: \"\" },\n { name: \"Chicken Penne\", desc: \"\", price: 11.50, photo: \"\" },\n { name: \"Chow Mein\", desc: \"\", price: 10.50, photo: \"\" },\n ],\n },\n {\n name: \"Lunch Mains\",\n items: [\n { name: \"Lamb Rogan Josh\", desc: \"\", price: 12.50, photo: \"\" },\n { name: \"Nasi Goreng\", desc: \"\", price: 9.95, photo: \"\" },\n { name: \"Nasi Lemak\", desc: \"\", price: 10.50, photo: \"\" },\n { name: \"Teriyaki Chicken\", desc: \"\", price: 11.50, photo: \"\" },\n { name: \"Thai Green Chicken\", desc: \"\", price: 11.00, photo: \"\" },\n { name: \"Veg Korma\", desc: \"\", price: 10.50, photo: \"\" },\n ],\n },\n {\n name: \"Salads and Fresh\",\n items: [\n { name: \"ChicPea Salad\", desc: \"\", price: 11.50, photo: \"\" },\n { name: \"Fruit Salad\", desc: \"\", price: 8.00, photo: \"\" },\n { name: \"Quinoa Moong Salad\", desc: \"\", price: 10.50, photo: \"\" },\n { name: \"Sushi\", desc: \"\", price: 7.95, photo: \"\" },\n { name: \"Tandoori Chicken Salad\", desc: \"\", price: 11.50, photo: \"\" },\n ],\n },\n ],\n};\n\nasync function getState() {\n try {\n const state = await blob.getJSON(STATE_KEY);\n if (state && state.settings && state.categories) return state;\n } catch (e) {}\n return SEED;\n}\n\nasync function saveState(state) {\n await blob.setJSON(STATE_KEY, state);\n}\n\nasync function getLock(ip) {\n try {\n const lock = await blob.getJSON(LOCK_PREFIX + ip);\n if (lock) return lock;\n } catch (e) {}\n return { attempts: 0, lockedUntil: 0 };\n}\n\nasync function setLock(ip, lock) {\n try {\n await blob.setJSON(LOCK_PREFIX + ip, lock);\n } catch (e) {}\n}\n\nasync function getOrders() {\n try {\n const orders = await blob.getJSON(ORDERS_KEY);\n if (Array.isArray(orders)) return orders;\n } catch (e) {}\n return [];\n}\n\nasync function saveOrders(orders) {\n await blob.setJSON(ORDERS_KEY, orders);\n}\n\n// Queue-compatible order numbering — resets effectively each day since the\n// queue only looks at today's orders, matches the queue template's own logic.\nasync function nextOrderNumber(orders) {\n const today = new Date().toISOString().slice(0, 10);\n let max = 13;\n for (const o of orders) {\n if (\n o.createdAt && o.createdAt.slice(0, 10) === today && o.orderNumber > max\n ) {\n max = o.orderNumber;\n }\n }\n return max + 1;\n}\n\nasync function sendConfirmationEmail(\n toEmail,\n venueName,\n editUrl,\n isDemo,\n orderId,\n) {\n if (!RESEND_API_KEY || !toEmail) return;\n const demoNote = isDemo\n ? '

This was a demo order — nothing was sent to ' +\n venueName + \", nothing was charged.

\"\n : \"

Your order has been placed with \" + venueName + \".

\";\n const html =\n '

' +\n \"

Thanks for trying iTabs\" +\n (isDemo ? \" — here's what just happened\" : \"\") + \"

\" +\n demoNote +\n \"

Order reference: \" + orderId + \"

\" +\n '

Want a menu like this for your own venue? Set it up here:

' +\n '

Set up your iTabs menu

' +\n '

' +\n \"

\";\n try {\n await fetch(\"https://api.resend.com/emails\", {\n method: \"POST\",\n headers: {\n \"Authorization\": \"Bearer \" + RESEND_API_KEY,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n from: RESEND_FROM,\n to: toEmail,\n subject: isDemo\n ? \"Your iTabs demo order\"\n : \"Your order from \" + venueName,\n html: html,\n }),\n });\n } catch (e) {}\n}\n\nfunction getIp(req) {\n const fwd = req.headers.get(\"x-forwarded-for\");\n if (fwd) return fwd.split(\",\")[0].trim();\n return \"unknown\";\n}\n\nfunction jsonResponse(obj, status) {\n return new Response(JSON.stringify(obj), {\n status: status || 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\nconst HTML_TEMPLATE = String.raw`\n\n\n\n\nGogo's Bello Fresh | Fiona Stanley Hospital | Order\n\n\n\n\n\n\n\n\n\n

\n \n

\n\n

\n \n \n \n

\n\n

\n \n\n \n\n \n

\n\n\n

0 items

$0.00

\n \n

\n\n\n

Connect

\n Get directions to Fiona Stanley Hospital food court\n

Pickup only at this location — no delivery

\n\n\n

Your order

Total$0.00

\n\n \n\n

Pickup time

\n\n

Add a syrup

\n\n

Name

\n \n\n

Email (for your receipt)

\n \n\n

Dietary

\n\n

Notes for the kitchen

\n \n\n

Pay at the counter and show this screen

\n \n

\n\n\n\n\n\n

Owner access

\n \n \n \n \n

\n \n

\n\n\n

Venue settings & menu

\n\n

\n \n \n

\n\n

Venue name

\n \n

Tagline

\n \n

Phone

\n \n

WhatsApp (intl format, e.g. 61412345678)

\n \n

Map link

\n \n

Orders go to

\n \n

Item photos

\n \n\n

Demo mode

Demo mode ON — orders marked as test, not sent to venue

\n \n\n

Brand colour (no purple)

\n \n\n

Logo (URL or upload)

\n \n Upload\n

\n \n\n

Hero banner image (URL or upload)

\n \n Upload\n

\n\n

Change PIN

New PIN (4 digits)

\n \n

Confirm new PIN

\n \n

\n\n \n\n \n \n

\n\n\n\n\n\n`;\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/\") {\n const state = await getState();\n const dataForClient = {\n settings: Object.assign({}, state.settings, { pin: undefined }),\n categories: state.categories,\n };\n delete dataForClient.settings.pin;\n let json = JSON.stringify(dataForClient);\n json = json.split(\"\n const html = HTML_TEMPLATE.replace(\"__ITABS_DATA__\", json);\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/recover-pin\") {\n const code = url.searchParams.get(\"code\");\n if (code !== RECOVERY_CODE) {\n return new Response(\"Not found\", { status: 404 });\n }\n const state = await getState();\n const newState = {\n settings: Object.assign({}, state.settings, { pin: DEFAULT_PIN }),\n categories: state.categories,\n };\n await saveState(newState);\n return new Response(\n \"PIN reset to \" + DEFAULT_PIN +\n \". Everything else (colours, photos, contact details) is untouched. Unlock the editor with this PIN and set a new one from Venue & Hero \\u2192 Change PIN.\",\n { headers: { \"Content-Type\": \"text/plain\" } },\n );\n }\n\n if (req.method === \"POST\" && url.pathname === \"/unlock\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n const minutesLeft = Math.ceil((lock.lockedUntil - Date.now()) / 60000);\n return jsonResponse({\n ok: false,\n locked: true,\n minutesLeft: minutesLeft,\n });\n }\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (body && body.pin === currentPin) {\n await setLock(ip, { attempts: 0, lockedUntil: 0 });\n return jsonResponse({ ok: true });\n }\n const attempts = (lock.attempts || 0) + 1;\n if (attempts >= MAX_ATTEMPTS) {\n await setLock(ip, {\n attempts: 0,\n lockedUntil: Date.now() + LOCK_MINUTES * 60000,\n });\n return jsonResponse({\n ok: false,\n locked: true,\n minutesLeft: LOCK_MINUTES,\n });\n }\n await setLock(ip, { attempts: attempts, lockedUntil: 0 });\n return jsonResponse({ ok: false, locked: false });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/save\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n const minutesLeft = Math.ceil((lock.lockedUntil - Date.now()) / 60000);\n return jsonResponse({\n ok: false,\n message: \"Too many attempts. Try again in \" + minutesLeft + \" min.\",\n });\n }\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) {\n return jsonResponse({\n ok: false,\n message: \"PIN check failed — please unlock again.\",\n });\n }\n if (!body.settings || !body.categories) {\n return jsonResponse({ ok: false, message: \"Missing data.\" });\n }\n const newState = {\n settings: Object.assign({}, state.settings, body.settings),\n categories: body.categories,\n };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) {\n newState.settings.pin = body.newPin;\n } else {\n newState.settings.pin = currentPin;\n }\n await saveState(newState);\n const responseSettings = Object.assign({}, newState.settings, {\n pin: undefined,\n });\n delete responseSettings.pin;\n const result = {\n ok: true,\n settings: responseSettings,\n categories: newState.categories,\n };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) result.pin = body.newPin;\n return jsonResponse(result);\n }\n\n if (req.method === \"POST\" && url.pathname === \"/order\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const isDemo = !!state.settings.demoMode;\n const items = (body && body.items) || [];\n const orders = await getOrders();\n const orderNumber = await nextOrderNumber(orders);\n const itemsText = items.map((i) => i.qty + \"× \" + i.name).join(\", \");\n const total = (body && body.total) || 0;\n const orderId = SLUG + \"-\" + Date.now().toString(36).toUpperCase();\n const order = {\n id: orderId,\n orderNumber: orderNumber,\n name: (body && body.name) || \"Guest\",\n email: (body && body.email) || \"\",\n notes: (body && body.notes) || \"\",\n items: items,\n itemsText: itemsText,\n total: total,\n paid: false,\n done: false,\n isDemo: isDemo,\n createdAt: new Date().toISOString(),\n };\n orders.push(order);\n await saveOrders(orders);\n\n let emailed = false;\n if (order.email) {\n await sendConfirmationEmail(\n order.email,\n state.settings.venue,\n url.origin + \"/\",\n isDemo,\n orderId,\n );\n emailed = !!RESEND_API_KEY;\n }\n return jsonResponse({\n ok: true,\n orderId: orderId,\n isDemo: isDemo,\n emailed: emailed,\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/clear-demo-orders\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) {\n return jsonResponse({\n ok: false,\n message: \"PIN check failed — please unlock again.\",\n });\n }\n const orders = await getOrders();\n const remaining = orders.filter((o) => !o.isDemo);\n const cleared = orders.length - remaining.length;\n await saveOrders(remaining);\n return jsonResponse({ ok: true, cleared: cleared });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","// iTabs Menu — Gogo's Bello Fresh, FSH. Val.town build, blob-backed.\n// Pairs with itabs-gogos-bello-fresh-queue.ts (same SLUG) for the staff queue.\nimport { blob } from \"https://esm.town/v/std/blob\";\nconst SLUG = \"gogos-bello-fresh-fsh\";\nconst STATE_KEY = \"itabs-menu-\" + SLUG;\nconst LOCK_PREFIX = \"itabs-lock-\" + SLUG + \"-\";\nconst DEFAULT_PIN = \"0000\";\nconst MAX_ATTEMPTS = 5;\nconst LOCK_MINUTES = 15;\nconst RESEND_API_KEY = Deno.env.get(\"RESEND_API_KEY\") || \"\";\nconst RESEND_FROM = \"iTabs \";\nconst ORDERS_KEY = \"itabs-orders-\" + SLUG;\n// Recovery code resets PIN via GET /recover-pin?code=... Keep this private.\nconst RECOVERY_CODE = \"boilermaker-reset-gogosbellofresh-4821\";\nconst SEED = {\n settings: {\n venue: \"Gogo's Bello Fresh\",\n tagline: \"Fiona Stanley Hospital Food Court\",\n phone: \"08 9332 5676\",\n whatsapp: \"\",\n email: \"bellorewards@gmail.com\",\n mapUrl:\n \"https://www.google.com/maps/search/?api=1&query=102-108+Murdoch+Drive+Murdoch+WA+6150\",\n orderMethod: \"counter\",\n photoMode: \"off\",\n demoMode: true,\n accent: \"#f97316\",\n pin: DEFAULT_PIN, // 0000\n logo: \"\",\n heroImg: \"\",\n },\n categories: [\n {\n name: \"Breakfast\",\n items: [\n { name: \"Wholemeal Toast\", desc: \"\", price: 6.00, photo: \"\" },\n { name: \"Toasties\", desc: \"\", price: 6.50, photo: \"\" },\n {\n name: \"Wholemeal Toast ECT\",\n desc: \"Egg, cheese, tomato\",\n price: 6.50,\n photo: \"\",\n },\n { name: \"Bacon and Egg Toast\", desc: \"\", price: 6.95, photo: \"\" },\n { name: \"Big Breakfast\", desc: \"\", price: 16.00, photo: \"\" },\n ],\n },\n {\n name: \"Coffee and Tea\",\n items: [\n { name: \"Flat White (Small)\", desc: \"\", price: 5.30, photo: \"\" },\n { name: \"Flat White (Regular)\", desc: \"\", price: 5.80, photo: \"\" },\n { name: \"Flat White (Large)\", desc: \"\", price: 6.80, photo: \"\" },\n { name: \"Cappuccino (Small)\", desc: \"\", price: 5.30, photo: \"\" },\n { name: \"Cappuccino (Regular)\", desc: \"\", price: 5.80, photo: \"\" },\n { name: \"Cappuccino (Large)\", desc: \"\", price: 6.80, photo: \"\" },\n {\n name: \"Espresso / Long Black (Small)\",\n desc: \"\",\n price: 5.30,\n photo: \"\",\n },\n {\n name: \"Espresso / Long Black (Regular)\",\n desc: \"\",\n price: 5.80,\n photo: \"\",\n },\n {\n name: \"Espresso / Long Black (Large)\",\n desc: \"\",\n price: 6.80,\n photo: \"\",\n },\n { name: \"Macchiato (Small)\", desc: \"\", price: 5.30, photo: \"\" },\n { name: \"Macchiato (Regular)\", desc: \"\", price: 5.80, photo: \"\" },\n { name: \"Macchiato (Large)\", desc: \"\", price: 6.80, photo: \"\" },\n {\n name: \"Tea (Small)\",\n desc: \"Earl Grey, English Breakfast, or Green\",\n price: 5.30,\n photo: \"\",\n },\n {\n name: \"Tea (Regular)\",\n desc: \"Earl Grey, English Breakfast, or Green\",\n price: 5.80,\n photo: \"\",\n },\n {\n name: \"Tea (Large)\",\n desc: \"Earl Grey, English Breakfast, or Green\",\n price: 6.80,\n photo: \"\",\n },\n { name: \"Chai Latte (Small)\", desc: \"\", price: 5.50, photo: \"\" },\n { name: \"Chai Latte (Regular)\", desc: \"\", price: 6.00, photo: \"\" },\n { name: \"Chai Latte (Large)\", desc: \"\", price: 7.00, photo: \"\" },\n { name: \"Mocha (Small)\", desc: \"\", price: 5.50, photo: \"\" },\n { name: \"Mocha (Regular)\", desc: \"\", price: 6.00, photo: \"\" },\n { name: \"Mocha (Large)\", desc: \"\", price: 7.00, photo: \"\" },\n { name: \"Hot Chocolate (Small)\", desc: \"\", price: 5.50, photo: \"\" },\n { name: \"Hot Chocolate (Regular)\", desc: \"\", price: 6.00, photo: \"\" },\n { name: \"Hot Chocolate (Large)\", desc: \"\", price: 7.00, photo: \"\" },\n ],\n },\n {\n name: \"Iced Drinks\",\n items: [\n { name: \"Iced Latte\", desc: \"\", price: 8.00, photo: \"\" },\n { name: \"Iced Long Black\", desc: \"\", price: 8.00, photo: \"\" },\n { name: \"Iced Chai\", desc: \"\", price: 8.80, photo: \"\" },\n ],\n },\n {\n name: \"Curries and Noodles\",\n items: [\n { name: \"Beef Vindaloo\", desc: \"\", price: 11.00, photo: \"\" },\n { name: \"Butter Chicken\", desc: \"\", price: 11.00, photo: \"\" },\n { name: \"Chicken Penne\", desc: \"\", price: 11.50, photo: \"\" },\n { name: \"Chow Mein\", desc: \"\", price: 10.50, photo: \"\" },\n ],\n },\n {\n name: \"Lunch Mains\",\n items: [\n { name: \"Lamb Rogan Josh\", desc: \"\", price: 12.50, photo: \"\" },\n { name: \"Nasi Goreng\", desc: \"\", price: 9.95, photo: \"\" },\n { name: \"Nasi Lemak\", desc: \"\", price: 10.50, photo: \"\" },\n { name: \"Teriyaki Chicken\", desc: \"\", price: 11.50, photo: \"\" },\n { name: \"Thai Green Chicken\", desc: \"\", price: 11.00, photo: \"\" },\n { name: \"Veg Korma\", desc: \"\", price: 10.50, photo: \"\" },\n ],\n },\n {\n name: \"Salads and Fresh\",\n items: [\n { name: \"ChicPea Salad\", desc: \"\", price: 11.50, photo: \"\" },\n { name: \"Fruit Salad\", desc: \"\", price: 8.00, photo: \"\" },\n { name: \"Quinoa Moong Salad\", desc: \"\", price: 10.50, photo: \"\" },\n { name: \"Sushi\", desc: \"\", price: 7.95, photo: \"\" },\n { name: \"Tandoori Chicken Salad\", desc: \"\", price: 11.50, photo: \"\" },\n ],\n },\n ],\n};\nasync function getState() {\n try {\n const state = await blob.getJSON(STATE_KEY);\n if (state && state.settings && state.categories) return state;\n } catch (e) {}\n return SEED;\n}\nasync function saveState(state) {\n await blob.setJSON(STATE_KEY, state);\n}\nasync function getLock(ip) {\n try {\n const lock = await blob.getJSON(LOCK_PREFIX + ip);\n if (lock) return lock;\n } catch (e) {}\n return { attempts: 0, lockedUntil: 0 };\n}\nasync function setLock(ip, lock) {\n try {\n await blob.setJSON(LOCK_PREFIX + ip, lock);\n } catch (e) {}\n}\nasync function getOrders() {\n try {\n const orders = await blob.getJSON(ORDERS_KEY);\n if (Array.isArray(orders)) return orders;\n } catch (e) {}\n return [];\n}\nasync function saveOrders(orders) {\n await blob.setJSON(ORDERS_KEY, orders);\n}\n// Resets effectively each day since queue only looks at today's orders.\nasync function nextOrderNumber(orders) {\n const today = new Date().toISOString().slice(0, 10);\n let max = 13;\n for (const o of orders) {\n if (\n o.createdAt && o.createdAt.slice(0, 10) === today && o.orderNumber > max\n ) {\n max = o.orderNumber;\n }\n }\n return max + 1;\n}\nasync function sendConfirmationEmail(\n toEmail,\n venueName,\n editUrl,\n isDemo,\n orderId,\n) {\n if (!RESEND_API_KEY || !toEmail) return;\n const demoNote = isDemo\n ? '

This was a demo order — nothing was sent to ' +\n venueName + \", nothing was charged.

\"\n : \"

Your order has been placed with \" + venueName + \".

\";\n const html =\n '

' +\n \"

Thanks for trying iTabs\" +\n (isDemo ? \" — here's what just happened\" : \"\") + \"

\" +\n demoNote +\n \"

Order reference: \" + orderId + \"

\" +\n '

Want a menu like this for your own venue? Set it up here:

' +\n '

Set up your iTabs menu

' +\n '

' +\n \"

\";\n try {\n await fetch(\"https://api.resend.com/emails\", {\n method: \"POST\",\n headers: {\n \"Authorization\": \"Bearer \" + RESEND_API_KEY,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n from: RESEND_FROM,\n to: toEmail,\n subject: isDemo\n ? \"Your iTabs demo order\"\n : \"Your order from \" + venueName,\n html: html,\n }),\n });\n } catch (e) {}\n}\nfunction getIp(req) {\n const fwd = req.headers.get(\"x-forwarded-for\");\n if (fwd) return fwd.split(\",\")[0].trim();\n return \"unknown\";\n}\nfunction jsonResponse(obj, status) {\n return new Response(JSON.stringify(obj), {\n status: status || 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\nconst HTML_TEMPLATE = String.raw`\n\n\n\n\nGogo's Bello Fresh | Fiona Stanley Hospital | Order\n\n\n\n\n\n\n\n

\n\n

\n\n\n\n

\n\n

0 items

$0.00

\n\n

Connect

\nGet directions to Fiona Stanley Hospital food court\n

Pickup only at this location — no delivery

\n\n

Your order

Total$0.00

\n\n

Pickup time

Name

\n\n

Email (for your receipt)

\n\n

Dietary

Notes for the kitchen

\n\n

Pay at the counter and show this screen

\n\n

Item

Size

Add a flavor

Quantity

\n\n

Total$0.00

\n\n

\n\n\n\n

Owner access

\n\n\n\n\n

\n\n

Venue settings & menu

\n\n\n

Venue name

\n\n

Tagline

\n\n

Phone

\n\n

WhatsApp (intl format, e.g. 61412345678)

\n\n

Map link

\n\n

Orders go to

\n\n

Item photos

\n\n

Demo mode

Demo mode ON — orders marked as test, not sent to venue

\n\n

Brand colour (no purple)

\n\n

Logo (URL or upload)

\n\nUpload\n

\n\n

Hero banner image (URL or upload)

\n\nUpload\n

Change PIN

New PIN (4 digits)

\n\n

Confirm new PIN

\n\n

\n\n\n\n

\n\n\n\n`;\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.pathname === \"/\") {\n const state = await getState();\n const dataForClient = {\n settings: Object.assign({}, state.settings, { pin: undefined }),\n categories: state.categories,\n };\n delete dataForClient.settings.pin;\n let json = JSON.stringify(dataForClient);\n json = json.split(\"\n const html = HTML_TEMPLATE.replace(\"__ITABS_DATA__\", json);\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n if (req.method === \"GET\" && url.pathname === \"/recover-pin\") {\n const code = url.searchParams.get(\"code\");\n if (code !== RECOVERY_CODE) {\n return new Response(\"Not found\", { status: 404 });\n }\n const state = await getState();\n const newState = {\n settings: Object.assign({}, state.settings, { pin: DEFAULT_PIN }),\n categories: state.categories,\n };\n await saveState(newState);\n return new Response(\n \"PIN reset to \" + DEFAULT_PIN +\n \". Everything else (colours, photos, contact details) is untouched. Unlock the editor with this PIN and set a new one from Venue & Hero \\u2192 Change PIN.\",\n { headers: { \"Content-Type\": \"text/plain\" } },\n );\n }\n if (req.method === \"POST\" && url.pathname === \"/unlock\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n const minutesLeft = Math.ceil((lock.lockedUntil - Date.now()) / 60000);\n return jsonResponse({\n ok: false,\n locked: true,\n minutesLeft: minutesLeft,\n });\n }\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (body && body.pin === currentPin) {\n await setLock(ip, { attempts: 0, lockedUntil: 0 });\n return jsonResponse({ ok: true });\n }\n const attempts = (lock.attempts || 0) + 1;\n if (attempts >= MAX_ATTEMPTS) {\n await setLock(ip, {\n attempts: 0,\n lockedUntil: Date.now() + LOCK_MINUTES * 60000,\n });\n return jsonResponse({\n ok: false,\n locked: true,\n minutesLeft: LOCK_MINUTES,\n });\n }\n await setLock(ip, { attempts: attempts, lockedUntil: 0 });\n return jsonResponse({ ok: false, locked: false });\n }\n if (req.method === \"POST\" && url.pathname === \"/save\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n const minutesLeft = Math.ceil((lock.lockedUntil - Date.now()) / 60000);\n return jsonResponse({\n ok: false,\n message: \"Too many attempts. Try again in \" + minutesLeft + \" min.\",\n });\n }\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) {\n return jsonResponse({\n ok: false,\n message: \"PIN check failed — please unlock again.\",\n });\n }\n if (!body.settings || !body.categories) {\n return jsonResponse({ ok: false, message: \"Missing data.\" });\n }\n const newState = {\n settings: Object.assign({}, state.settings, body.settings),\n categories: body.categories,\n };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) {\n newState.settings.pin = body.newPin;\n } else {\n newState.settings.pin = currentPin;\n }\n await saveState(newState);\n const responseSettings = Object.assign({}, newState.settings, {\n pin: undefined,\n });\n delete responseSettings.pin;\n const result = {\n ok: true,\n settings: responseSettings,\n categories: newState.categories,\n };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) result.pin = body.newPin;\n return jsonResponse(result);\n }\n if (req.method === \"POST\" && url.pathname === \"/order\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const isDemo = !!state.settings.demoMode;\n const items = (body && body.items) || [];\n const orders = await getOrders();\n const orderNumber = await nextOrderNumber(orders);\n const itemsText = items.map((i) => i.qty + \"× \" + i.name).join(\", \");\n const total = (body && body.total) || 0;\n const orderId = SLUG + \"-\" + Date.now().toString(36).toUpperCase();\n const order = {\n id: orderId,\n orderNumber: orderNumber,\n name: (body && body.name) || \"Guest\",\n email: (body && body.email) || \"\",\n notes: (body && body.notes) || \"\",\n items: items,\n itemsText: itemsText,\n total: total,\n paid: false,\n done: false,\n isDemo: isDemo,\n createdAt: new Date().toISOString(),\n };\n orders.push(order);\n await saveOrders(orders);\n let emailed = false;\n if (order.email) {\n await sendConfirmationEmail(\n order.email,\n state.settings.venue,\n url.origin + \"/\",\n isDemo,\n orderId,\n );\n emailed = !!RESEND_API_KEY;\n }\n return jsonResponse({\n ok: true,\n orderId: orderId,\n isDemo: isDemo,\n emailed: emailed,\n });\n }\n if (req.method === \"POST\" && url.pathname === \"/clear-demo-orders\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false, message: \"Bad request.\" });\n }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) {\n return jsonResponse({\n ok: false,\n message: \"PIN check failed — please unlock again.\",\n });\n }\n const orders = await getOrders();\n const remaining = orders.filter((o) => !o.isDemo);\n const cleared = orders.length - remaining.length;\n await saveOrders(remaining);\n return jsonResponse({ ok: true, cleared: cleared });\n }\n return new Response(\"Not found\", { status: 404 });\n}","createdAt",["D",1789381699737],"branchVersion","branchId","12155964-5920-4068-a3f8-441ef9737b66","id","1474ce9c-7f68-44c3-a8fc-a256d68c115d","gogos-bello-fresh",["D",1789375647573],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","iTabs ordering menu — Gogo's Bello Fresh, FSH","imageUrl","9e73754f-780d-46b7-924e-110519305b47","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019d76ed-e14a-727a-b612-7191b6d5a9b7","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",13,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","jgwynne7_4bf3679b","handle","displayName","iTabs-Menu","avatar","https://avatars.githubusercontent.com/u/177847225?v=4","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":166,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":167,"_80":168,"_82":169,"_84":25},"tree",[157,158],"files",[157,158],"counts",{"_146":62,"_147":148,"_149":62,"_150":151,"_152":153},"contents",[127,128],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":137,"_32":138,"_30":139,"_130":-5,"_41":42,"_40":140,"_131":25,"_38":141,"_13":142,"_33":34,"_35":143,"_24":25,"_134":144,"_27":145},{"_43":129,"_32":28,"_30":31,"_130":-5,"_41":42,"_40":14,"_131":58,"_38":132,"_13":133,"_33":34,"_35":37,"_24":25,"_134":135,"_27":136},"0250c674-e695-4841-a188-bd9ca38ea297","parentId","latest",["D",1789381699737],6,"label","gogos-bello-fresh-fsh",[28],"f992c629-c4bd-489c-aac0-7e0bc5c171a6","gogos-bello-fresh-queue.ts","c460992e-b01f-11f1-8041-1607ee4eb77e",8,["D",1789378881282],3,"// iTabs Queue — Gogo's Bello Fresh (staff/operator side) — v2\n// Separate val from the customer menu val, sharing the same blob storage keys.\n// Paste into its own Val.town HTTP val, bookmark this val's URL on the venue's iPad.\n//\n// SLUG below matches the customer menu val's SLUG exactly — nothing else\n// needs editing. Venue name and colour pull automatically from the menu\n// val's settings blob.\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst SLUG = \"gogos-bello-fresh-fsh\"; // matches itabs-gogos-bello-fresh-full.ts\nconst STATE_KEY = \"itabs-menu-\" + SLUG;\nconst ORDERS_KEY = \"itabs-orders-\" + SLUG;\nconst DEFAULT_EMOJI = \"🥙\"; // shown if a venue hasn't set settings.queueEmoji\n\nasync function getState() {\n try {\n const state = await blob.getJSON(STATE_KEY);\n if (state && state.settings && state.categories) return state;\n } catch (e) {}\n return { settings: { venue: \"Venue\", accent: \"#f97316\" }, categories: [] };\n}\nasync function getOrders() {\n try {\n const orders = await blob.getJSON(ORDERS_KEY);\n if (Array.isArray(orders)) return orders;\n } catch (e) {}\n return [];\n}\nasync function saveOrders(orders) {\n await blob.setJSON(ORDERS_KEY, orders);\n}\nasync function nextOrderNumber(orders) {\n const today = new Date().toISOString().slice(0, 10);\n let max = 13;\n for (const o of orders) {\n if (\n o.createdAt && o.createdAt.slice(0, 10) === today && o.orderNumber > max\n ) max = o.orderNumber;\n }\n return max + 1;\n}\nfunction jsonResponse(obj, status) {\n return new Response(JSON.stringify(obj), {\n status: status || 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\n// venue = { venue, accent, queueEmoji } pulled live from the menu blob so the\n// queue always matches whatever the operator set in the menu editor.\nfunction queuePage(venue) {\n const accent = venue.accent || \"#f97316\";\n const emoji = venue.queueEmoji || DEFAULT_EMOJI;\n const name = venue.venue || \"Venue\";\n return `\n\n${name} — Queue\n\n\n

${emoji} ${name}

0 waiting

Add Item

Size

\n \n \n\n

Order so far

No items added yet

\n\n

Name (optional)

\n \n

Notes (optional)

\n \n \n

\n\n`;\n}\n\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/\") {\n const state = await getState();\n return new Response(queuePage(state.settings), {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/queue-order\") {\n let body;\n try {\n body = await req.json();\n } catch (e) {\n return jsonResponse({ ok: false });\n }\n const orders = await getOrders();\n const items = body.items || [];\n const state = await getState();\n const flatMenu = [];\n state.categories.forEach((c) => c.items.forEach((it) => flatMenu.push(it)));\n let totalCents = 0;\n const itemsText = items.map((i) => {\n const menuItem = flatMenu.find((m) => m.name === i.name);\n const price = menuItem ? menuItem.price : 0;\n totalCents += Math.round(price * 100) * i.qty;\n return i.qty + \"× \" + i.name;\n }).join(\", \");\n const orderNumber = await nextOrderNumber(orders);\n const order = {\n id: SLUG + \"-\" + Date.now().toString(36).toUpperCase(),\n orderNumber,\n name: body.name || \"\",\n notes: body.notes || \"\",\n itemsText,\n total: totalCents / 100,\n paid: false,\n done: false,\n squareOrderId: \"\",\n createdAt: new Date().toISOString(),\n };\n orders.push(order);\n await saveOrders(orders);\n return jsonResponse({ ok: true, orderId: order.id });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/queue-data\") {\n const tab = url.searchParams.get(\"tab\") || \"active\";\n const orders = await getOrders();\n const state = await getState();\n const menuNames = [];\n state.categories.forEach((c) =>\n c.items.forEach((it) => menuNames.push(it.name))\n );\n const filtered = tab === \"active\"\n ? orders.filter((o) => !o.done).sort((a, b) =>\n a.orderNumber - b.orderNumber\n )\n : orders.filter((o) => o.done).sort((a, b) =>\n b.orderNumber - a.orderNumber\n ).slice(0, 100);\n return jsonResponse({ orders: filtered, menuNames });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/mark-paid\") {\n const body = await req.json();\n const orders = await getOrders();\n const order = orders.find((o) => o.id === body.id);\n if (order) order.paid = true;\n await saveOrders(orders);\n return jsonResponse({ ok: true });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/mark-done\") {\n const body = await req.json();\n const orders = await getOrders();\n const order = orders.find((o) => o.id === body.id);\n if (order) order.done = true;\n await saveOrders(orders);\n return jsonResponse({ ok: true });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","gogos-bello-fresh-queue-fsh",[138],"pulls","branches",1,"forks","envVars",{"_154":62,"_156":62},"connections",{"_154":62,"_155":62},"count","unfilledCount","emptyCount",{"_43":137,"_32":138,"_30":139,"_130":-5,"_41":42,"_40":140,"_131":25,"_38":163,"_13":142,"_33":34,"_35":143,"_24":25,"_134":144,"_160":164,"_27":165},{"_43":129,"_32":28,"_30":31,"_130":-5,"_41":42,"_40":14,"_131":58,"_38":159,"_13":133,"_33":34,"_35":37,"_24":25,"_134":135,"_160":161,"_27":162},["D",1789381699737],"children",[],[28],["D",1789378881282],[],[138],["D",1789375647573],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_124":203,"_204":205,"_206":207,"_208":25,"_209":25,"_210":25,"_211":58,"_212":-5,"_213":-7,"_214":-7,"_215":62,"_216":25,"_217":25,"_218":-5,"_219":25,"_220":25,"_221":25,"_222":-5},"ENV",{"_174":175,"_176":177,"_178":86,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Thanks for trying iTabs\" +\n (isDemo ? \" — here's what just happened\" : \"\") + \"

Order Placed

Thanks for trying iTabs\" +\n (isDemo ? \" — here's what just happened\" : \"\") + \"

Order Placed

Diff · v11