Operations
Staff & live inventory
This storefront is public-only. Product counts, pricing pushes, and signage live in PotLuck Inventory — they are not hard-wired into the website.
When the headend is ready, it POSTs to:
POST /api/inventory/push
Header: X-PotLuck-Signature: sha256=<hmac of raw body>
Set POTLUCK_WEBHOOK_SECRET and POTLUCK_CLIENT_SLUG=west-paris-provisions on this site. Until then, the menu is the local catalog in resources/data/menu.json.
Hours on this website match the store clock (America/New_York). A future feed may overlay hours from the same payload without coupling the two apps.