Swan Sidewalk Cafe

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_155":156,"_157":158},"routes/_app.x.$handle.$name",{"_96":95,"_33":46,"_105":86,"_28":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":27,"_120":121,"_122":25,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_33":46,"_39":47,"_48":-5,"_49":27,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":57,"_58":25,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":27},"version",6,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":27,"_28":29,"_30":29},"file",{"_31":32,"_33":29,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":27},"previous",{"_31":32,"_33":29,"_34":35,"_36":37},"deleted",true,"deletedHere",false,"path","main.ts","latestPath","fileId","4bc71edc-a68a-11f1-9a84-1607ee4eb77e","name","fileType","http","content","// iTabs Menu — Swan Sidewalk Cafe\n// Val.town production build (blob-backed, photo upload enabled)\n// Built on the standard iTabs template + a Queue page for Grace's iPad + Square payments (sandbox).\n// Paste into a Val.town HTTP val, Save, open the HTTP URL.\n//\n// BEFORE THIS GOES LIVE WITH GRACE, replace:\n// - SANDBOX_ACCESS_TOKEN / SANDBOX_LOCATION_ID with her real Square values\n// - SQUARE_API_BASE with \"https://connect.squareup.com\" (drop \"sandbox\")\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst SLUG = \"swan-sidewalk-cafe\";\nconst STATE_KEY = \"itabs-menu-\" + SLUG;\nconst ORDERS_KEY = \"itabs-orders-\" + SLUG;\nconst LOCK_PREFIX = \"itabs-lock-\" + SLUG + \"-\";\nconst DEFAULT_PIN = \"7000\"; // last 4 of Grace's phone\nconst MAX_ATTEMPTS = 5;\nconst LOCK_MINUTES = 15;\nconst RECOVERY_CODE = \"boilermaker-reset-swansidewalk-4821\";\n\nconst SANDBOX_ACCESS_TOKEN = \"PASTE_YOUR_SANDBOX_ACCESS_TOKEN_HERE\";\nconst SANDBOX_LOCATION_ID = \"PASTE_YOUR_SANDBOX_LOCATION_ID_HERE\";\nconst SQUARE_API_BASE = \"https://connect.squareupsandbox.com\";\n\n// Seed data — served until the first staff Save writes to blob.\nconst SEED = {\n settings: {\n venue: \"Swan Sidewalk Cafe\",\n tagline: \"Satisfy your Craving\",\n phone: \"0437 007 000\",\n mapUrl: \"\",\n photoMode: \"photos\",\n accent: \"#e8791f\",\n pin: DEFAULT_PIN,\n logo: \"\",\n heroImg: \"\",\n },\n categories: [\n {\n name: \"Coffee & Hot Drinks\",\n items: [\n { name: \"Cappuccino (M)\", desc: \"\", price: 5.50, photo: \"\", popular: true, soldOut: false },\n { name: \"Cappuccino (L)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Chai (M)\", desc: \"\", price: 5.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Chai (L)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Dirty Chai (M)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Dirty Chai (L)\", desc: \"\", price: 6.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Flat White (M)\", desc: \"\", price: 5.50, photo: \"\", popular: true, soldOut: false },\n { name: \"Flat White (L)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Hot Chocolate (M)\", desc: \"\", price: 5.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Hot Chocolate (L)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Latte (M)\", desc: \"\", price: 5.50, photo: \"\", popular: true, soldOut: false },\n { name: \"Latte (L)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Long Black (M)\", desc: \"\", price: 4.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Long Black (L)\", desc: \"\", price: 4.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Mocha (M)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Mocha (L)\", desc: \"\", price: 6.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Matcha (M)\", desc: \"\", price: 5.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Matcha (L)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Tea (M)\", desc: \"\", price: 4.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Tea (L)\", desc: \"\", price: 4.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Macchiato\", desc: \"\", price: 4.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Long Mac Topped Up\", desc: \"\", price: 5.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Espresso\", desc: \"\", price: 4.50, photo: \"\", popular: false, soldOut: false },\n ],\n },\n ],\n};\n\nasync function getState() {\n try {\n const state = await blob.getJSON(STATE_KEY);\n if (state && state.settings && state.categories) return state;\n } catch (e) {}\n return SEED;\n}\nasync function saveState(state) {\n await blob.setJSON(STATE_KEY, state);\n}\nasync function getLock(ip) {\n try {\n const lock = await blob.getJSON(LOCK_PREFIX + ip);\n if (lock) return lock;\n } catch (e) {}\n return { attempts: 0, lockedUntil: 0 };\n}\nasync function setLock(ip, lock) {\n try {\n await blob.setJSON(LOCK_PREFIX + ip, lock);\n } catch (e) {}\n}\nasync function getOrders() {\n try {\n const orders = await blob.getJSON(ORDERS_KEY);\n if (Array.isArray(orders)) return orders;\n } catch (e) {}\n return [];\n}\nasync function saveOrders(orders) {\n await blob.setJSON(ORDERS_KEY, orders);\n}\nfunction getIp(req) {\n const fwd = req.headers.get(\"x-forwarded-for\");\n if (fwd) return fwd.split(\",\")[0].trim();\n return \"unknown\";\n}\nfunction jsonResponse(obj, status) {\n return new Response(JSON.stringify(obj), {\n status: status || 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\nasync function nextOrderNumber(orders) {\n const today = new Date().toISOString().slice(0, 10);\n let max = 13;\n for (const o of orders) {\n if (o.createdAt && o.createdAt.slice(0, 10) === today && o.orderNumber > max) max = o.orderNumber;\n }\n return max + 1;\n}\n\nasync function createPaymentLink(orderNumber, itemsText, totalCents) {\n const idempotencyKey = crypto.randomUUID();\n const res = await fetch(SQUARE_API_BASE + \"/v2/online-checkout/payment-links\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": \"Bearer \" + SANDBOX_ACCESS_TOKEN,\n \"Square-Version\": \"2024-01-18\",\n },\n body: JSON.stringify({\n idempotency_key: idempotencyKey,\n quick_pay: {\n name: \"Order #\" + orderNumber + \" — \" + itemsText,\n price_money: { amount: totalCents, currency: \"AUD\" },\n location_id: SANDBOX_LOCATION_ID,\n },\n }),\n });\n if (!res.ok) throw new Error(\"Square API error: \" + (await res.text()));\n const data = await res.json();\n return { url: data.payment_link.url, squareOrderId: data.payment_link.order_id };\n}\n\nconst HTML_TEMPLATE = String.raw`\n\n\n\n\nSwan Sidewalk Cafe | Order\n\n\n\n\n\n\n\n

\n \n

\n\n

\n \n \n

\n\n

0 items

$0.00

\n \n

\n\n

Connect

\n Get directions\n

\n\n

Your order

Total$0.00

\n\n

Pickup time

\n\n

Name

\n \n\n

Dietary

\n\n

Notes for the kitchen

\n \n\n

Pay online now — show this screen when you pick up

\n \n

\n\n\n\n

Owner access

\n \n \n \n \n

\n \n

\n\n

Venue settings & menu

\n \n \n

\n\n

Venue name

\n \n

Tagline

\n \n

Phone

\n \n

Map link

\n \n

Item photos

\n \n

Brand colour

\n \n

Logo (URL or upload)

\n \n Upload\n

\n \n

Hero banner image (URL or upload)

\n \n Upload\n

Change PIN

New PIN (4 digits)

\n \n

Confirm new PIN

\n \n

\n\n \n\n \n \n

\n\n\n\n\n`;\n\nfunction queuePage() {\n return `\n\nSwan Sidewalk Cafe — Queue\n\n\n

🦢 Swan Sidewalk Cafe

0 waiting

Add Order

Size

\n \n

Name (optional)

\n \n

Notes (optional)

\n \n \n

\n\n`;\n}\n\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/\") {\n const state = await getState();\n const dataForClient = {\n settings: Object.assign({}, state.settings, { pin: undefined }),\n categories: state.categories,\n };\n delete dataForClient.settings.pin;\n let dataJson = JSON.stringify(dataForClient);\n dataJson = dataJson.split(\" Date.now()) {\n return jsonResponse({ ok: false, locked: true, minutesLeft: Math.ceil((lock.lockedUntil - Date.now()) / 60000) });\n }\n let body;\n try { body = await req.json(); } catch (e) { return jsonResponse({ ok: false }); }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (body && body.pin === currentPin) {\n await setLock(ip, { attempts: 0, lockedUntil: 0 });\n return jsonResponse({ ok: true });\n }\n const attempts = (lock.attempts || 0) + 1;\n if (attempts >= MAX_ATTEMPTS) {\n await setLock(ip, { attempts: 0, lockedUntil: Date.now() + LOCK_MINUTES * 60000 });\n return jsonResponse({ ok: false, locked: true, minutesLeft: LOCK_MINUTES });\n }\n await setLock(ip, { attempts: attempts, lockedUntil: 0 });\n return jsonResponse({ ok: false, locked: false });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/save\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n return jsonResponse({ ok: false, message: \"Too many attempts. Try again in \" + Math.ceil((lock.lockedUntil - Date.now()) / 60000) + \" min.\" });\n }\n let body;\n try { body = await req.json(); } catch (e) { return jsonResponse({ ok: false, message: \"Bad request.\" }); }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) return jsonResponse({ ok: false, message: \"PIN check failed — please unlock again.\" });\n if (!body.settings || !body.categories) return jsonResponse({ ok: false, message: \"Missing data.\" });\n const newState = { settings: Object.assign({}, state.settings, body.settings), categories: body.categories };\n newState.settings.pin = (body.newPin && /^[0-9]{4}$/.test(body.newPin)) ? body.newPin : currentPin;\n await saveState(newState);\n const responseSettings = Object.assign({}, newState.settings, { pin: undefined });\n delete responseSettings.pin;\n const result = { ok: true, settings: responseSettings, categories: newState.categories };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) result.pin = body.newPin;\n return jsonResponse(result);\n }\n\n // Customer order (online, from the main menu page).\n // STAGE 1 — ordering only, no payment processing. Customer pays Grace directly\n // at pickup, same as a walk-up order. Square integration can be switched back\n // on later by restoring the createPaymentLink block below (kept in the file,\n // just not called) once that's worth turning on.\n if (req.method === \"POST\" && url.pathname === \"/order\") {\n let body;\n try { body = await req.json(); } catch (e) { return jsonResponse({ ok: false }); }\n const orders = await getOrders();\n const items = body.items || [];\n let totalCents = 0;\n const itemsText = items.map((i) => {\n totalCents += Math.round(i.price * 100) * i.qty;\n return i.qty + \"× \" + i.name;\n }).join(\", \");\n const orderNumber = await nextOrderNumber(orders);\n const order = {\n id: SLUG + \"-\" + Date.now().toString(36).toUpperCase(),\n orderNumber: orderNumber,\n name: body.name || \"\",\n notes: body.notes || \"\",\n itemsText: itemsText,\n total: totalCents / 100,\n paid: false,\n done: false,\n squareOrderId: \"\",\n createdAt: new Date().toISOString(),\n };\n orders.push(order);\n await saveOrders(orders);\n return jsonResponse({ ok: true, orderId: order.id, payUrl: null });\n }\n\n // Manual order from Grace's Queue page — no Square link, she takes payment on her own terminal.\n if (req.method === \"POST\" && url.pathname === \"/queue-order\") {\n let body;\n try { body = await req.json(); } catch (e) { return jsonResponse({ ok: false }); }\n const orders = await getOrders();\n const items = body.items || [];\n let totalCents = 0;\n const itemsText = items.map((i) => {\n totalCents += Math.round(i.price ? i.price * 100 : 0) * i.qty;\n return i.qty + \"× \" + i.name;\n }).join(\", \");\n // Look up real prices from current menu since the Queue page only sends names.\n const state = await getState();\n const flatMenu = [];\n state.categories.forEach((c) => c.items.forEach((it) => flatMenu.push(it)));\n let realTotalCents = 0;\n const realItemsText = items.map((i) => {\n const menuItem = flatMenu.find((m) => m.name === i.name);\n const price = menuItem ? menuItem.price : 0;\n realTotalCents += Math.round(price * 100) * i.qty;\n return i.qty + \"× \" + i.name;\n }).join(\", \");\n const orderNumber = await nextOrderNumber(orders);\n const order = {\n id: SLUG + \"-\" + Date.now().toString(36).toUpperCase(),\n orderNumber: orderNumber,\n name: body.name || \"\",\n notes: body.notes || \"\",\n itemsText: realItemsText,\n total: realTotalCents / 100,\n paid: false,\n done: false,\n squareOrderId: \"\",\n createdAt: new Date().toISOString(),\n };\n orders.push(order);\n await saveOrders(orders);\n return jsonResponse({ ok: true, orderId: order.id });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/queue-data\") {\n const tab = url.searchParams.get(\"tab\") || \"active\";\n const orders = await getOrders();\n const state = await getState();\n const menuNames = [];\n state.categories.forEach((c) => c.items.forEach((it) => menuNames.push(it.name)));\n const filtered = tab === \"active\"\n ? orders.filter((o) => !o.done).sort((a, b) => a.orderNumber - b.orderNumber)\n : orders.filter((o) => o.done).sort((a, b) => b.orderNumber - a.orderNumber).slice(0, 100);\n return jsonResponse({ orders: filtered, menuNames: menuNames });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/mark-paid\") {\n const body = await req.json();\n const orders = await getOrders();\n const order = orders.find((o) => o.id === body.id);\n if (order) order.paid = true;\n await saveOrders(orders);\n return jsonResponse({ ok: true });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/mark-done\") {\n const body = await req.json();\n const orders = await getOrders();\n const order = orders.find((o) => o.id === body.id);\n if (order) order.done = true;\n await saveOrders(orders);\n return jsonResponse({ ok: true });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/webhook/square\") {\n const event = await req.json();\n if (event.type === \"payment.updated\" && event.data?.object?.payment?.status === \"COMPLETED\") {\n const squareOrderId = event.data.object.payment.order_id;\n const orders = await getOrders();\n const order = orders.find((o) => o.squareOrderId === squareOrderId);\n if (order) order.paid = true;\n await saveOrders(orders);\n }\n return jsonResponse({ received: true });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","// iTabs Menu — Swan Sidewalk Cafe\n// Val.town production build (blob-backed, photo upload enabled)\n// Built on the standard iTabs template + a Queue page for Grace's iPad + Square payments (sandbox).\n// Paste into a Val.town HTTP val, Save, open the HTTP URL.\n//\n// BEFORE THIS GOES LIVE WITH GRACE, replace:\n// - SANDBOX_ACCESS_TOKEN / SANDBOX_LOCATION_ID with her real Square values\n// - SQUARE_API_BASE with \"https://connect.squareup.com\" (drop \"sandbox\")\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst SLUG = \"swan-sidewalk-cafe\";\nconst STATE_KEY = \"itabs-menu-\" + SLUG;\nconst ORDERS_KEY = \"itabs-orders-\" + SLUG;\nconst LOCK_PREFIX = \"itabs-lock-\" + SLUG + \"-\";\nconst DEFAULT_PIN = \"7000\"; // last 4 of Grace's phone\nconst MAX_ATTEMPTS = 5;\nconst LOCK_MINUTES = 15;\nconst RECOVERY_CODE = \"boilermaker-reset-swansidewalk-4821\";\n\nconst SANDBOX_ACCESS_TOKEN = \"PASTE_YOUR_SANDBOX_ACCESS_TOKEN_HERE\";\nconst SANDBOX_LOCATION_ID = \"PASTE_YOUR_SANDBOX_LOCATION_ID_HERE\";\nconst SQUARE_API_BASE = \"https://connect.squareupsandbox.com\";\n\n// Seed data — served until the first staff Save writes to blob.\nconst SEED = {\n settings: {\n venue: \"Swan Sidewalk Cafe\",\n tagline: \"Satisfy your Craving\",\n phone: \"0437 007 000\",\n mapUrl: \"\",\n photoMode: \"photos\",\n accent: \"#e8791f\",\n pin: DEFAULT_PIN,\n logo: \"\",\n heroImg: \"\",\n eventLabel: \"\",\n eventCutoff: \"\",\n },\n categories: [\n {\n name: \"Coffee & Hot Drinks\",\n items: [\n { name: \"Cappuccino (M)\", desc: \"\", price: 5.50, photo: \"\", popular: true, soldOut: false },\n { name: \"Cappuccino (L)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Chai (M)\", desc: \"\", price: 5.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Chai (L)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Dirty Chai (M)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Dirty Chai (L)\", desc: \"\", price: 6.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Flat White (M)\", desc: \"\", price: 5.50, photo: \"\", popular: true, soldOut: false },\n { name: \"Flat White (L)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Hot Chocolate (M)\", desc: \"\", price: 5.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Hot Chocolate (L)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Latte (M)\", desc: \"\", price: 5.50, photo: \"\", popular: true, soldOut: false },\n { name: \"Latte (L)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Long Black (M)\", desc: \"\", price: 4.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Long Black (L)\", desc: \"\", price: 4.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Mocha (M)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Mocha (L)\", desc: \"\", price: 6.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Matcha (M)\", desc: \"\", price: 5.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Matcha (L)\", desc: \"\", price: 6.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Tea (M)\", desc: \"\", price: 4.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Tea (L)\", desc: \"\", price: 4.50, photo: \"\", popular: false, soldOut: false },\n { name: \"Macchiato\", desc: \"\", price: 4.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Long Mac Topped Up\", desc: \"\", price: 5.00, photo: \"\", popular: false, soldOut: false },\n { name: \"Espresso\", desc: \"\", price: 4.50, photo: \"\", popular: false, soldOut: false },\n ],\n },\n ],\n};\n\nasync function getState() {\n try {\n const state = await blob.getJSON(STATE_KEY);\n if (state && state.settings && state.categories) return state;\n } catch (e) {}\n return SEED;\n}\nasync function saveState(state) {\n await blob.setJSON(STATE_KEY, state);\n}\nasync function getLock(ip) {\n try {\n const lock = await blob.getJSON(LOCK_PREFIX + ip);\n if (lock) return lock;\n } catch (e) {}\n return { attempts: 0, lockedUntil: 0 };\n}\nasync function setLock(ip, lock) {\n try {\n await blob.setJSON(LOCK_PREFIX + ip, lock);\n } catch (e) {}\n}\nasync function getOrders() {\n try {\n const orders = await blob.getJSON(ORDERS_KEY);\n if (Array.isArray(orders)) return orders;\n } catch (e) {}\n return [];\n}\nasync function saveOrders(orders) {\n await blob.setJSON(ORDERS_KEY, orders);\n}\nfunction getIp(req) {\n const fwd = req.headers.get(\"x-forwarded-for\");\n if (fwd) return fwd.split(\",\")[0].trim();\n return \"unknown\";\n}\nfunction jsonResponse(obj, status) {\n return new Response(JSON.stringify(obj), {\n status: status || 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\nasync function nextOrderNumber(orders) {\n const today = new Date().toISOString().slice(0, 10);\n let max = 13;\n for (const o of orders) {\n if (o.createdAt && o.createdAt.slice(0, 10) === today && o.orderNumber > max) max = o.orderNumber;\n }\n return max + 1;\n}\n\nasync function createPaymentLink(orderNumber, itemsText, totalCents) {\n const idempotencyKey = crypto.randomUUID();\n const res = await fetch(SQUARE_API_BASE + \"/v2/online-checkout/payment-links\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": \"Bearer \" + SANDBOX_ACCESS_TOKEN,\n \"Square-Version\": \"2024-01-18\",\n },\n body: JSON.stringify({\n idempotency_key: idempotencyKey,\n quick_pay: {\n name: \"Order #\" + orderNumber + \" — \" + itemsText,\n price_money: { amount: totalCents, currency: \"AUD\" },\n location_id: SANDBOX_LOCATION_ID,\n },\n }),\n });\n if (!res.ok) throw new Error(\"Square API error: \" + (await res.text()));\n const data = await res.json();\n return { url: data.payment_link.url, squareOrderId: data.payment_link.order_id };\n}\n\nconst HTML_TEMPLATE = String.raw`\n\n\n\n\nSwan Sidewalk Cafe | Order\n\n\n\n\n\n\n\n

\n \n

\n\n\n\n

\n\n

\n \n \n

\n\n

0 items

$0.00

\n \n

\n\n

Connect

\n Get directions\n

\n\n

Your order

Total$0.00

\n\n

Pickup time

\n\n

Name

\n \n\n

Dietary

\n\n

Notes for the kitchen

\n \n\n

Pay online now — show this screen when you pick up

\n \n

\n\n\n\n

Owner access

\n \n \n \n \n

\n \n

\n\n

Venue settings & menu

\n \n \n

\n\n

Venue name

\n \n

Tagline

\n \n

Phone

\n \n

Map link

\n \n

Next pickup (optional)

Event label — e.g. \"Teachers' morning tea\"

\n \n

Order cutoff date & time

\n \n

Item photos

\n \n

Brand colour

\n \n

Logo (URL or upload)

\n \n Upload\n

\n \n

Hero banner image (URL or upload)

\n \n Upload\n

Change PIN

New PIN (4 digits)

\n \n

Confirm new PIN

\n \n

\n\n \n\n \n \n

\n\n\n\n\n`;\n\nfunction queuePage() {\n return `\n\nSwan Sidewalk Cafe — Queue\n\n\n

🦢 Swan Sidewalk Cafe

0 waiting

Add Order

Size

\n \n

Name (optional)

\n \n

Notes (optional)

\n \n \n

\n\n`;\n}\n\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/\") {\n const state = await getState();\n const dataForClient = {\n settings: Object.assign({}, state.settings, { pin: undefined }),\n categories: state.categories,\n };\n delete dataForClient.settings.pin;\n let dataJson = JSON.stringify(dataForClient);\n dataJson = dataJson.split(\" Date.now()) {\n return jsonResponse({ ok: false, locked: true, minutesLeft: Math.ceil((lock.lockedUntil - Date.now()) / 60000) });\n }\n let body;\n try { body = await req.json(); } catch (e) { return jsonResponse({ ok: false }); }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (body && body.pin === currentPin) {\n await setLock(ip, { attempts: 0, lockedUntil: 0 });\n return jsonResponse({ ok: true });\n }\n const attempts = (lock.attempts || 0) + 1;\n if (attempts >= MAX_ATTEMPTS) {\n await setLock(ip, { attempts: 0, lockedUntil: Date.now() + LOCK_MINUTES * 60000 });\n return jsonResponse({ ok: false, locked: true, minutesLeft: LOCK_MINUTES });\n }\n await setLock(ip, { attempts: attempts, lockedUntil: 0 });\n return jsonResponse({ ok: false, locked: false });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/save\") {\n const ip = getIp(req);\n const lock = await getLock(ip);\n if (lock.lockedUntil > Date.now()) {\n return jsonResponse({ ok: false, message: \"Too many attempts. Try again in \" + Math.ceil((lock.lockedUntil - Date.now()) / 60000) + \" min.\" });\n }\n let body;\n try { body = await req.json(); } catch (e) { return jsonResponse({ ok: false, message: \"Bad request.\" }); }\n const state = await getState();\n const currentPin = state.settings.pin || DEFAULT_PIN;\n if (!body || body.pin !== currentPin) return jsonResponse({ ok: false, message: \"PIN check failed — please unlock again.\" });\n if (!body.settings || !body.categories) return jsonResponse({ ok: false, message: \"Missing data.\" });\n const newState = { settings: Object.assign({}, state.settings, body.settings), categories: body.categories };\n newState.settings.pin = (body.newPin && /^[0-9]{4}$/.test(body.newPin)) ? body.newPin : currentPin;\n await saveState(newState);\n const responseSettings = Object.assign({}, newState.settings, { pin: undefined });\n delete responseSettings.pin;\n const result = { ok: true, settings: responseSettings, categories: newState.categories };\n if (body.newPin && /^[0-9]{4}$/.test(body.newPin)) result.pin = body.newPin;\n return jsonResponse(result);\n }\n\n // Customer order (online, from the main menu page).\n // STAGE 1 — ordering only, no payment processing. Customer pays Grace directly\n // at pickup, same as a walk-up order. Square integration can be switched back\n // on later by restoring the createPaymentLink block below (kept in the file,\n // just not called) once that's worth turning on.\n if (req.method === \"POST\" && url.pathname === \"/order\") {\n let body;\n try { body = await req.json(); } catch (e) { return jsonResponse({ ok: false }); }\n const orders = await getOrders();\n const items = body.items || [];\n let totalCents = 0;\n const itemsText = items.map((i) => {\n totalCents += Math.round(i.price * 100) * i.qty;\n return i.qty + \"× \" + i.name;\n }).join(\", \");\n const orderNumber = await nextOrderNumber(orders);\n const order = {\n id: SLUG + \"-\" + Date.now().toString(36).toUpperCase(),\n orderNumber: orderNumber,\n name: body.name || \"\",\n notes: body.notes || \"\",\n itemsText: itemsText,\n total: totalCents / 100,\n paid: false,\n done: false,\n squareOrderId: \"\",\n createdAt: new Date().toISOString(),\n };\n orders.push(order);\n await saveOrders(orders);\n return jsonResponse({ ok: true, orderId: order.id, payUrl: null });\n }\n\n // Manual order from Grace's Queue page — no Square link, she takes payment on her own terminal.\n if (req.method === \"POST\" && url.pathname === \"/queue-order\") {\n let body;\n try { body = await req.json(); } catch (e) { return jsonResponse({ ok: false }); }\n const orders = await getOrders();\n const items = body.items || [];\n let totalCents = 0;\n const itemsText = items.map((i) => {\n totalCents += Math.round(i.price ? i.price * 100 : 0) * i.qty;\n return i.qty + \"× \" + i.name;\n }).join(\", \");\n // Look up real prices from current menu since the Queue page only sends names.\n const state = await getState();\n const flatMenu = [];\n state.categories.forEach((c) => c.items.forEach((it) => flatMenu.push(it)));\n let realTotalCents = 0;\n const realItemsText = items.map((i) => {\n const menuItem = flatMenu.find((m) => m.name === i.name);\n const price = menuItem ? menuItem.price : 0;\n realTotalCents += Math.round(price * 100) * i.qty;\n return i.qty + \"× \" + i.name;\n }).join(\", \");\n const orderNumber = await nextOrderNumber(orders);\n const order = {\n id: SLUG + \"-\" + Date.now().toString(36).toUpperCase(),\n orderNumber: orderNumber,\n name: body.name || \"\",\n notes: body.notes || \"\",\n itemsText: realItemsText,\n total: realTotalCents / 100,\n paid: false,\n done: false,\n squareOrderId: \"\",\n createdAt: new Date().toISOString(),\n };\n orders.push(order);\n await saveOrders(orders);\n return jsonResponse({ ok: true, orderId: order.id });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/queue-data\") {\n const tab = url.searchParams.get(\"tab\") || \"active\";\n const orders = await getOrders();\n const state = await getState();\n const menuNames = [];\n state.categories.forEach((c) => c.items.forEach((it) => menuNames.push(it.name)));\n const filtered = tab === \"active\"\n ? orders.filter((o) => !o.done).sort((a, b) => a.orderNumber - b.orderNumber)\n : orders.filter((o) => o.done).sort((a, b) => b.orderNumber - a.orderNumber).slice(0, 100);\n return jsonResponse({ orders: filtered, menuNames: menuNames });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/mark-paid\") {\n const body = await req.json();\n const orders = await getOrders();\n const order = orders.find((o) => o.id === body.id);\n if (order) order.paid = true;\n await saveOrders(orders);\n return jsonResponse({ ok: true });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/mark-done\") {\n const body = await req.json();\n const orders = await getOrders();\n const order = orders.find((o) => o.id === body.id);\n if (order) order.done = true;\n await saveOrders(orders);\n return jsonResponse({ ok: true });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/webhook/square\") {\n const event = await req.json();\n if (event.type === \"payment.updated\" && event.data?.object?.payment?.status === \"COMPLETED\") {\n const squareOrderId = event.data.object.payment.order_id;\n const orders = await getOrders();\n const order = orders.find((o) => o.squareOrderId === squareOrderId);\n if (order) order.paid = true;\n await saveOrders(orders);\n }\n return jsonResponse({ received: true });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","createdAt",["D",1788769758426],"branchVersion","branchId","9f7830af-8ce9-4119-b2eb-d42f026b0c83","id","61d320bc-f4a4-4a10-b7da-b7a0c3716335","swan-sidewalk-cafe",["D",1788324833184],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","9e73754f-780d-46b7-924e-110519305b47","pinnedFileId","38d363da-aab3-11f1-adca-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019d76ed-e14a-727a-b612-7191b6d5a9b7","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":27},"branch",{"_13":85,"_33":86,"_44":43,"_87":45,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":46,"_94":95},"isOwned",20,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","jgwynne7_4bf3679b","handle","displayName","iTabs-Menu","avatar","https://avatars.githubusercontent.com/u/177847225?v=4","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_33":46,"_39":151,"_48":-5,"_49":27,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":57,"_58":25,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":152,"_80":153,"_82":154,"_84":27},"tree",[146],"files",[146],"counts",{"_135":62,"_136":137,"_138":62,"_139":140,"_141":142},"contents",[127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":128,"_33":29,"_31":32,"_129":-5,"_42":43,"_41":14,"_130":27,"_39":131,"_13":132,"_34":35,"_36":38,"_24":27,"_133":-5,"_28":134},"dc930255-b8be-4f9f-ad8c-ee1c66c39fd8","parentId","latest",["D",1788769758426],5,"label",[29],"pulls","branches",1,"forks","envVars",{"_143":62,"_145":62},"connections",{"_143":62,"_144":62},"count","unfilledCount","emptyCount",{"_44":128,"_33":29,"_31":32,"_129":-5,"_42":43,"_41":14,"_130":27,"_39":147,"_13":132,"_34":35,"_36":38,"_24":27,"_133":-5,"_148":149,"_28":150},["D",1788769758426],"children",[],[29],["D",1788324833184],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":27},{"_13":85,"_33":86,"_44":43,"_87":45,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":46,"_94":95},"ctx",{"_78":-5,"_124":188,"_189":190,"_191":192,"_193":27,"_194":27,"_195":27,"_196":25,"_197":-5,"_198":-7,"_199":-7,"_200":62,"_201":27,"_202":27,"_203":-5,"_204":27,"_205":27,"_206":27,"_207":-5},"ENV",{"_159":160,"_161":162,"_163":86,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Order Placed

Order Placed

Diff · v6