Complete Feature Directory &
Operational Capabilities
An end-to-end breakdown of all customer dining interfaces, kitchen display engines, security audit trails, anti-fraud verifiers, and POS management tools running across the platform.
Diner Ordering & Menu
Table QR ordering, customized portions, address pin, tracking & billing.
Kitchen & Cashier Hub
Live KOT tickets, table map, shift Z-reports, audit trail & bill editor.
Floor Captain Mobile
High-speed floor order punches, table occupancy check & waiter calls.
Receipt Authenticator
Cryptographic token validation & tamper-proof guest tax invoice verification.
Table QR Instant Dine-In Ordering
Patrons scan an acrylic or thermal QR standee placed at their dining table to automatically lock their table number, explore the live menu, and dispatch KOT rounds directly to the kitchen without needing app downloads.
Multi-Round Kitchen KOT Dispatch
Supports incremental dining rounds (starters, main course, desserts) appended to the same active table ticket with automated chef acceptance, prep timers, and acoustic bell chimes.
Manager Void & Discount Audit Trail
Mandates a 4-digit Manager PIN (9999) and reason presets (VIP Courtesy, Taste Issue, Delay, Wrong Item) for any item void, bill discount, or ticket cancellation, writing permanently into an immutable audit ledger with CSV export.
Anti-Fraud Receipt Verification QR
Computes a cryptographic verification hash on every printed receipt and thermal slip. Scanning the QR opens a public authenticator page proving that the bill was settled on-books and not voided fraudulently.
POS Inactivity Auto-Lock Guard
Monitors keyboard, mouse, and touch activity across POS terminals. Automatically locks the terminal after 3 minutes of idle time with a glowing luxury PIN keypad to prevent unauthorized order alterations.
EOD Shift Close & 80mm Z-Report
Generates a comprehensive End-of-Day financial audit slip detailing Gross Revenue, CGST/SGST breakdowns, Net Sales, Tender splits (Cash vs UPI vs Card), and printable 80mm ESC/POS slips.
Cash Float & Blind Drop Reconciliation
Tracks shift opening drawer cash float (default ₹2,000) and compares counted physical notes against expected cash collections. Automatically triggers an audit incident if discrepancy exceeds ₹50.
Encrypted Backups & Disaster Recovery
Exports `.ibnbak` encrypted system snapshots encapsulating all orders, audit ledgers, and shift history. Automatically takes daily rolling 7-day snapshots upon shift closure with manager PIN restore.
Table QR Anti-Spam & Prank Protection
Enforces a 35-second cooldown timer between consecutive table order submissions and caps unconfirmed items to protect kitchen chefs from accidental duplicate punches or table QR prank orders.
Role-Based 4-Digit Staff PIN Auth
Differentiates permissions by staff hierarchy: Head Chef (1111), Floor Captain (2222), Waitstaff (3333), and General Manager (9999). Restricts bill settlement and item deletion to authorized roles only.
Interactive GPS Delivery Map Picker
Interactive leaflet map integration allowing customers to drag a pinpoint marker to their exact doorstep in Sonamukhi/Bankura with live reverse-geocoding, landmark tags, and delivery zone validation.
86-Item Sold-Out & Portion Manager
Allows kitchen chefs to mark dishes as Sold Out (86'd) or set daily portion caps (e.g. only 15 Mutton Biryanis remaining). Instantly greys out items in customer menus and prevents over-ordering.
Dynamic Bill Editor & Dynamic UPI QR
Full-featured cashier bill modal to adjust quantities, packaging charges, GST rates (5%, 12%, 18%), and auto-generate live UPI QR codes encoded with the exact grand total and transaction reference.
Printable QR Standees & Stickers
Generates ready-to-print 80mm thermal QR stickers or luxury acrylic standee cards for all tables across Ground Floor, 1st Floor, and Banquet with direct table-specific deep links.
Post-Meal Review Shield & GM Resolution Desk
Auto-triggers a golden Google Review pop-up when meals are completed: 4-5★ diners boost Google Maps SEO, while 1-3★ diners are intercepted privately into a real-time tracking ticket with live GM investigation, custom apology, and instant VIP discount/dessert voucher issuance.
Client-Side Price & Total Tamper Protection
Cross-verifies every cart item against an immutable, frozen catalog registry (`MENU_DATA`). If a tech-savvy user alters prices in the browser DOM (Inspect Element), the cart engine automatically detects the tampering, logs a security warning, and enforces official menu pricing.
Atomic Multi-User Write Queue
Replaced raw synchronous file overwrites with a sequential task queue and atomic temporary file swapping (`fs.renameSync`). Guarantees zero data loss or JSON corruption even when dozens of diners and waiters place orders simultaneously.
Stream Payload Limit & DoS Defense Armor
Enforces a strict 1MB payload stream cap on all incoming HTTP request streams. Immediately aborts and returns HTTP 413 (Payload Too Large) if an attacker attempts to flood the Node server with memory-exhausting infinite payloads.
Universal DOM XSS Sanitizer Shield
Sanitizes all user-generated strings—customer names, dietary instructions, phone numbers, review comments, delivery landmarks, and addresses—using universal HTML entity escaping before rendering in kitchen or cashier screens.
Staff PIN Brute-Force Lockout Guard
Limits consecutive incorrect PIN entries across all terminals. 5 incorrect attempts triggers an immediate 5-minute terminal lockdown with remaining attempt countdowns to prevent automated PIN guessing attacks.
Sensitive Backend File & Traversal Isolation
Blocks direct browser downloads of internal databases (`data/orders.json`), backend source files (`server.js`, `package.json`), and hidden environment files, while normalizing filepaths to completely eliminate directory traversal risks.
Full-Stack Offline-First Resilience Architecture
Engineered to keep restaurant operations running without downtime
The La IBN Flavor Junction ecosystem runs on a hybrid local-first synchronization model. Orders and tables are instantly synchronized across tablets, kitchen monitors, and waiters using high-speed inter-tab BroadcastChannels and localStorage caching with real-time Firestore cloud persistence. If internet connectivity drops, the local POS continues accepting orders, processing bills, and printing thermal slips without interruption.