# LRGK Platform Starter v1.0 Alpha Native

Native Node/Linux hospitality platform for **Lloyd-Rose Gyros & Kafe**, built forward from v0.7 without Docker.

## Environment

- Node.js
- Static frontends
- Native Linux deployment
- systemd service supported
- JSON storage for alpha/pilot only
- No Docker / no containers

## Apps

- `/` customer web ordering PWA
- `/kiosk` kiosk ordering
- `/kitchen` kitchen display
- `/collection` collection board
- `/track` customer tracking
- `/staff` staff console
- `/admin` admin console
- `/legal` allergen/legal page

## Run locally

```bash
cd server
PORT=3400 SESSION_SECRET=dev-secret node index.js
```

Open `http://localhost:3400`.

## Alpha credentials

- Staff PIN: `7319`
- Manager PIN: `9042`

Rotate before any public use.

## Key APIs

### Public/customer

- `GET /api/menu`
- `GET /api/legal`
- `POST /api/orders`
- `GET /api/orders/:idOrCode`
- `GET /api/orders/:idOrCode/receipt`
- `POST /api/auth/customer`
- `POST /api/arkwright`

### Staff/admin protected

- `POST /api/auth/staff`
- `GET /api/orders`
- `GET /api/orders/active`
- `PUT /api/orders/:idOrCode/status`
- `POST /api/orders/:idOrCode/cancel`
- `POST /api/orders/:idOrCode/payment`
- `POST /api/orders/:idOrCode/refund` manager only
- `GET/POST /api/inventory`
- `GET/POST /api/recipes`
- `GET/POST /api/suppliers`
- `GET /api/fusion/products`
- `GET /api/fusion/orders/:idOrCode`
- `GET /api/reports/daily`
- `GET /api/readiness`

Use `Authorization: Bearer <token>` from `/api/auth/staff`.

## What changed from v0.7

- Admin auth is now required by default.
- Demo PINs replaced.
- Staff PIN hashes are salted.
- Protected sensitive endpoints.
- Nonexistent/unavailable menu items are blocked at checkout.
- Basic rate limiting added to auth and order creation.
- Atomic JSON writes and backups added.
- Inventory, recipes and suppliers added.
- Stock reduction on order creation.
- Manual payments, refunds and cancellations added.
- Fusion export payloads added.
- Native install/update/backup scripts added.
- systemd service added.
- No Docker added.

## Readiness

- Prototype: strong
- Pilot: possible after compliance/payment/fulfilment decisions
- Production: not yet

Before public trading you still need:

- food business/compliance route
- fulfilment partner or kitchen
- payment provider decision
- real deployment secret
- live domain/profile setup
- QA on real devices
- backup/restore test

See `docs/NATIVE_DEPLOY.md` and `docs/CHANGELOG_v1.0-alpha-native.md`.