Order Ahead

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_104":85,"_27":105,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":58,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",2,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","4336fa52-9f88-11f1-99c0-1607ee4eb77e","name","fileType","http","content","// Joey ZaZa's Boss Sandwiches — iTabs order-ahead menu\n// Generated by iTabs Studio from the master template. Blob-backed:\n// staff edits persist and are shared across every device.\n// Staff PIN starts as 0000 — change it in the editor (Venue settings > Change PIN).\n\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { email } from \"https://esm.town/v/std/email\";\n\nconst SLUG = \"joey-zazas\";\nconst VENUE = \"Joey ZaZa's Boss Sandwiches\";\nconst ACCENT = \"#ffc400\";\nconst DEFAULT_PIN = \"0000\";\n\nconst HTML = \"\\n\\n\\n\\n\\n\\nOrder Ahead\\n\\n\\n\\n\\n\\n\\n

\\n\\n

\\n\\n\\n\\n\\n\\n\\n\\n\\n

\\n

0 items · $0.00

\\n \\n

\\n\\n\\n

\\n

Connect

\\n

Find us and stay in the loop

\\n 📞 Call us\\n 💬 WhatsApp us\\n ✉️ Email us\\n 📍 Find us\\n 🌐 Website\\n \\n

\\n\\n\\n

\\n

Your order

\\n

Pay at the counter and show this screen

\\n

Total$0.00

\\n\\n

\\n Pickup time\\n

\\n

\\n Table number (optional)\\n \\n

\\n

\\n Name\\n \\n

\\n

\\n Email (for your receipt + 1-tap reorder)\\n \\n

\\n

\\n Dietary (optional)\\n

\\n

\\n Notes for the kitchen (optional)\\n \\n

\\n\\n \\n \\n

\\n\\n\\n

\\n

✅

\\n

#---

\\n \\n

Show this screen at the counter.

\\n

Total$0.00

\\n \\n

\\n\\n\\n

\\n

Owner access

\\n

Enter your 4-digit PIN to edit the menu

\\n

\\n \\n

\\n \\n \\n

\\n

\\n\\n\\n

\\n

Edit menu

\\n

Tap a photo tile to change it. Edit names, descriptions, prices, mark best-sellers, add or remove items — then save. Changes go live on every device.

\\n

\\n \\n \\n

\\n\\n\\n\\n\\n\";\n\nconst KEY = \"itabs-menu-\" + SLUG;\nconst lockKey = (ip: string) => \"itabs-lock-\" + SLUG + \"-\" + ip;\n\nasync function getState(): Promise {\n try { const s = await blob.getJSON(KEY); return s || null; } catch { return null; }\n}\nasync function getLock(ip: string): Promise {\n try { return (await blob.getJSON(lockKey(ip))) || { fails: 0, until: 0 }; }\n catch { return { fails: 0, until: 0 }; }\n}\nasync function setLock(ip: string, l: any): Promise {\n try { await blob.setJSON(lockKey(ip), l); } catch {}\n}\nasync function effectivePin(): Promise {\n const s = await getState();\n return (s && s.settings && s.settings.pin) ? s.settings.pin : DEFAULT_PIN;\n}\nfunction json(o: any, status = 200): Response {\n return new Response(JSON.stringify(o), { status, headers: { \"Content-Type\": \"application/json\" } });\n}\nfunction money(n: number): string { return \"$\" + Number(n || 0).toFixed(2); }\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const ip = (req.headers.get(\"x-forwarded-for\") || \"unknown\").split(\",\")[0].trim();\n\n // --- unlock: verify staff PIN, with IP lockout (5 fails = 15 min) ---\n if (req.method === \"POST\" && url.pathname === \"/unlock\") {\n const lock = await getLock(ip); const now = Date.now();\n if (lock.until > now) return json({ minutes: Math.ceil((lock.until - now) / 60000) }, 429);\n let body: any = {}; try { body = await req.json(); } catch {}\n if (body.pin === (await effectivePin())) {\n await setLock(ip, { fails: 0, until: 0 });\n return json({ ok: true });\n }\n lock.fails = (lock.fails || 0) + 1;\n if (lock.fails >= 5) { lock.until = now + 15 * 60 * 1000; lock.fails = 0; await setLock(ip, lock); return json({ minutes: 15 }, 429); }\n await setLock(ip, lock);\n return json({ ok: false, left: 5 - lock.fails }, 401);\n }\n\n // --- save: PIN-checked write to blob (shared across every device) ---\n if (req.method === \"POST\" && url.pathname === \"/save\") {\n const lock = await getLock(ip); const now = Date.now();\n if (lock.until > now) return json({ minutes: Math.ceil((lock.until - now) / 60000) }, 429);\n let body: any = {}; try { body = await req.json(); } catch {}\n const pin = await effectivePin();\n if (body.pin !== pin) {\n lock.fails = (lock.fails || 0) + 1;\n if (lock.fails >= 5) { lock.until = now + 15 * 60 * 1000; lock.fails = 0; await setLock(ip, lock); return json({ minutes: 15 }, 429); }\n await setLock(ip, lock);\n return json({ error: \"Incorrect PIN\" }, 401);\n }\n const state = await getState();\n const base = (state && state.settings) ? state.settings : {};\n const merged: any = Object.assign({}, base, body.settings || {});\n if (!merged.pin) merged.pin = pin;\n await blob.setJSON(KEY, {\n categories: body.categories || (state && state.categories) || [],\n settings: merged,\n });\n return json({ ok: true });\n }\n\n // --- receipt: emails the customer their order + a 1-tap reorder link ---\n if (req.method === \"POST\" && url.pathname === \"/receipt\") {\n let b: any = {}; try { b = await req.json(); } catch {}\n const to = String(b.to || \"\").trim();\n if (!to || to.indexOf(\"@\") === -1) return json({ ok: false }, 400);\n try {\n const items = Array.isArray(b.items) ? b.items : [];\n const rows = items.map((i: any) =>\n \"\" + i.qty + \"× \" + i.name +\n \"\" + money(i.qty * i.price) + \"\"\n ).join(\"\");\n const reorder = String(b.reorderUrl || \"\");\n const html = \"

\" +\n \"

\" + VENUE + \"

\" +\n \"

Order #\" + String(b.code || \"\") + \"\" +\n (b.table ? \" · Table \" + b.table : \"\") + \"

\" +\n \"\" + rows +\n \"\" +\n \"

Total

\" + money(b.total) + \"

\" +\n (b.diet && b.diet.length ? \"

Dietary: \" + b.diet.join(\", \") + \"

\" : \"\") +\n (b.notes ? \"

Notes: \" + b.notes + \"

\" : \"\") +\n (reorder ? \"

Reorder this in one tap

\" : \"\") +\n \"

\";\n await email({ to, subject: VENUE + \" — order #\" + String(b.code || \"\"), html });\n return json({ ok: true });\n } catch (e: any) {\n return json({ ok: false, error: String(e && e.message || e) }, 200);\n }\n }\n\n // --- GET /menu.json : the live menu, PIN stripped ---\n if (req.method === \"GET\" && url.pathname === \"/menu.json\") {\n const s = await getState();\n if (!s) return json({ note: \"No edits saved yet — serving seed.\", categories: null, settings: null });\n const pub = Object.assign({}, s.settings || {});\n delete pub.pin;\n return json({ categories: s.categories, settings: pub });\n }\n\n // --- GET / : the menu, with current blob state injected (PIN stripped) ---\n const state = await getState();\n let injected: any = null;\n if (state) {\n const pub = Object.assign({}, state.settings || {});\n delete pub.pin;\n injected = { categories: state.categories, settings: pub };\n }\n const data = JSON.stringify(injected).replace(/<\\//g, \"<\\\\/\");\n const page = HTML.replace(\"__ITABS_DATA__\", () => data);\n return new Response(page, { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } });\n}\n","// Joey ZaZa's Boss Sandwiches — iTabs order-ahead menu\n// Generated by iTabs Studio from the master template. Blob-backed:\n// staff edits persist and are shared across every device.\n// Staff PIN starts as 0000 — change it in the editor (Venue settings > Change PIN).\n\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { email } from \"https://esm.town/v/std/email\";\n\nconst SLUG = \"joey-zazas\";\nconst VENUE = \"Joey ZaZa's Boss Sandwiches\";\nconst ACCENT = \"#ffc400\";\nconst DEFAULT_PIN = \"0000\";\n\nconst HTML =\n '\\n\\n\\n\\n\\n\\nOrder Ahead\\n\\n\\n\\n\\n\\n\\n

\\n\\n

\\n\\n\\n\\n\\n\\n\\n\\n\\n

\\n

0 items · $0.00

\\n \\n

\\n\\n\\n

\\n

Connect

\\n

Find us and stay in the loop

\\n 📞 Call us\\n 💬 WhatsApp us\\n ✉️ Email us\\n 📍 Find us\\n 🌐 Website\\n \\n

\\n\\n\\n

\\n

Your order

\\n

Pay at the counter and show this screen

\\n

Total$0.00

\\n\\n \\n

\\n Table number (optional)\\n \\n

\\n

\\n Name\\n \\n

\\n

\\n Email (for your receipt + 1-tap reorder)\\n \\n

\\n

\\n Dietary (optional)\\n

\\n

\\n Notes for the kitchen (optional)\\n \\n

\\n\\n \\n \\n

\\n\\n\\n

\\n

✅

\\n

#---

\\n \\n

Show this screen at the counter.

\\n

Total$0.00

\\n \\n

\\n\\n\\n

\\n

Owner access

\\n

Enter your 4-digit PIN to edit the menu

\\n

\\n \\n

\\n \\n \\n

\\n

\\n\\n\\n

\\n

Edit menu

\\n

Tap a photo tile to change it. Edit names, descriptions, prices, mark best-sellers, add or remove items — then save. Changes go live on every device.

\\n

\\n \\n \\n

\\n\\n\\n\\n\\n';\n\nconst KEY = \"itabs-menu-\" + SLUG;\nconst lockKey = (ip: string) => \"itabs-lock-\" + SLUG + \"-\" + ip;\n\nasync function getState(): Promise {\n try {\n const s = await blob.getJSON(KEY);\n return s || null;\n } catch {\n return null;\n }\n}\nasync function getLock(ip: string): Promise {\n try {\n return (await blob.getJSON(lockKey(ip))) || { fails: 0, until: 0 };\n } catch {\n return { fails: 0, until: 0 };\n }\n}\nasync function setLock(ip: string, l: any): Promise {\n try {\n await blob.setJSON(lockKey(ip), l);\n } catch {}\n}\nasync function effectivePin(): Promise {\n const s = await getState();\n return (s && s.settings && s.settings.pin) ? s.settings.pin : DEFAULT_PIN;\n}\nfunction json(o: any, status = 200): Response {\n return new Response(JSON.stringify(o), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\nfunction money(n: number): string {\n return \"$\" + Number(n || 0).toFixed(2);\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const ip = (req.headers.get(\"x-forwarded-for\") || \"unknown\").split(\",\")[0]\n .trim();\n\n // --- unlock: verify staff PIN, with IP lockout (5 fails = 15 min) ---\n if (req.method === \"POST\" && url.pathname === \"/unlock\") {\n const lock = await getLock(ip);\n const now = Date.now();\n if (lock.until > now) {\n return json({ minutes: Math.ceil((lock.until - now) / 60000) }, 429);\n }\n let body: any = {};\n try {\n body = await req.json();\n } catch {}\n if (body.pin === (await effectivePin())) {\n await setLock(ip, { fails: 0, until: 0 });\n return json({ ok: true });\n }\n lock.fails = (lock.fails || 0) + 1;\n if (lock.fails >= 5) {\n lock.until = now + 15 * 60 * 1000;\n lock.fails = 0;\n await setLock(ip, lock);\n return json({ minutes: 15 }, 429);\n }\n await setLock(ip, lock);\n return json({ ok: false, left: 5 - lock.fails }, 401);\n }\n\n // --- save: PIN-checked write to blob (shared across every device) ---\n if (req.method === \"POST\" && url.pathname === \"/save\") {\n const lock = await getLock(ip);\n const now = Date.now();\n if (lock.until > now) {\n return json({ minutes: Math.ceil((lock.until - now) / 60000) }, 429);\n }\n let body: any = {};\n try {\n body = await req.json();\n } catch {}\n const pin = await effectivePin();\n if (body.pin !== pin) {\n lock.fails = (lock.fails || 0) + 1;\n if (lock.fails >= 5) {\n lock.until = now + 15 * 60 * 1000;\n lock.fails = 0;\n await setLock(ip, lock);\n return json({ minutes: 15 }, 429);\n }\n await setLock(ip, lock);\n return json({ error: \"Incorrect PIN\" }, 401);\n }\n const state = await getState();\n const base = (state && state.settings) ? state.settings : {};\n const merged: any = Object.assign({}, base, body.settings || {});\n if (!merged.pin) merged.pin = pin;\n await blob.setJSON(KEY, {\n categories: body.categories || (state && state.categories) || [],\n settings: merged,\n });\n return json({ ok: true });\n }\n\n // --- receipt: emails the customer their order + a 1-tap reorder link ---\n if (req.method === \"POST\" && url.pathname === \"/receipt\") {\n let b: any = {};\n try {\n b = await req.json();\n } catch {}\n const to = String(b.to || \"\").trim();\n if (!to || to.indexOf(\"@\") === -1) return json({ ok: false }, 400);\n try {\n const items = Array.isArray(b.items) ? b.items : [];\n const rows = items.map((i: any) =>\n \"\" + i.qty + \"× \" + i.name +\n \"\" +\n money(i.qty * i.price) + \"\"\n ).join(\"\");\n const reorder = String(b.reorderUrl || \"\");\n const html =\n '

' +\n \"

\" + VENUE + \"

\" +\n \"

Order #\" +\n String(b.code || \"\") + \"\" +\n (b.table ? \" · Table \" + b.table : \"\") + \"

\" +\n \"\" +\n rows +\n \"\" +\n \"

Total

\" +\n money(b.total) + \"

\" +\n (b.diet && b.diet.length\n ? \"

Dietary: \" +\n b.diet.join(\", \") + \"

\"\n : \"\") +\n (b.notes\n ? \"

Notes: \" + b.notes + \"

\"\n : \"\") +\n (reorder\n ? \"

Reorder this in one tap

\"\n : \"\") +\n \"

\";\n await email({\n to,\n subject: VENUE + \" — order #\" + String(b.code || \"\"),\n html,\n });\n return json({ ok: true });\n } catch (e: any) {\n return json({ ok: false, error: String(e && e.message || e) }, 200);\n }\n }\n\n // --- GET /menu.json : the live menu, PIN stripped ---\n if (req.method === \"GET\" && url.pathname === \"/menu.json\") {\n const s = await getState();\n if (!s) {\n return json({\n note: \"No edits saved yet — serving seed.\",\n categories: null,\n settings: null,\n });\n }\n const pub = Object.assign({}, s.settings || {});\n delete pub.pin;\n return json({ categories: s.categories, settings: pub });\n }\n\n // --- GET / : the menu, with current blob state injected (PIN stripped) ---\n const state = await getState();\n let injected: any = null;\n if (state) {\n const pub = Object.assign({}, state.settings || {});\n delete pub.pin;\n injected = { categories: state.categories, settings: pub };\n }\n const data = JSON.stringify(injected).replace(/<\\//g, \"<\\\\/\");\n const page = HTML.replace(\"__ITABS_DATA__\", () => data);\n return new Response(page, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n}","createdAt",["D",1787555726041],"branchVersion","branchId","116163d7-5237-48a9-9241-54a7a235611a","id","82f341a0-649e-45f4-8a32-165be4ff680d","joey-zazas-516",["D",1787554301599],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Joey ZaZa's Boss Sandwiches — iTabs order-ahead menu","imageUrl","9e73754f-780d-46b7-924e-110519305b47","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019d76ed-e14a-727a-b612-7191b6d5a9b7","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},"branch",{"_13":14,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","jgwynne7_4bf3679b","handle","displayName","iTabs-Menu","avatar","https://avatars.githubusercontent.com/u/177847225?v=4","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":149,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":150,"_80":151,"_82":152,"_84":25},"tree",[144],"files",[144],"counts",{"_134":62,"_135":131,"_136":62,"_137":138,"_139":140},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":58,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"f5e360c5-3544-487d-91e8-d7b260ac7a24","parentId","latest",["D",1787555726041],1,"label",[28],"pulls","branches","forks","envVars",{"_141":62,"_143":62},"connections",{"_141":62,"_142":62},"count","unfilledCount","emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":58,"_38":145,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_146":147,"_27":148},["D",1787555726041],"children",[],[28],["D",1787554301599],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},{"_13":14,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_78":-5,"_123":186,"_187":188,"_189":190,"_191":25,"_192":25,"_193":25,"_194":58,"_195":-5,"_196":-7,"_197":-7,"_198":62,"_199":25,"_200":25,"_201":-5,"_202":25,"_203":25,"_204":25,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":85,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v2