# LunchShift

> Smart Meal Booking Platform — Enterprise B2B SaaS for corporate food service management (ristorazione collettiva). 26 features across 4 categories, multi-tenant architecture with PostgreSQL RLS, EU regulatory compliance (NIS2 95/100, GDPR 96/100, EU 1169/2011), 7 payment gateways, real-time operations. Designed and built by Marco Laudati.

LunchShift manages the complete corporate catering workflow: from ingredient databases and recipe building to menu planning, meal booking, delivery tracking, and payment processing. The platform serves four distinct user roles — operators, kitchen staff, platform administrators, and technical stakeholders — with dedicated feature sets for each.

## Feature Documentation

- [Complete Feature Reference](https://lunchshift.app/llms-full.txt): All 26 features with technical specifications, metrics, and architecture details

## Operators & Manager Features (6)

- [Delegated Booking](https://lunchshift.app/llms-full.txt#delegated-booking): Batch meal ordering for operators — select client, week, employees, and menu. 32% time reduction (internal benchmark)
- [Paper Booking (OMR)](https://lunchshift.app/llms-full.txt#paper-booking): Optical Mark Recognition scanner converts paper order forms to digital bookings with QR code user traceability in under 5 seconds
- [Employee Management](https://lunchshift.app/llms-full.txt#employee-management): CSV import, role assignment, group management for 500+ employees per tenant. Zero manual data entry
- [Delivery Groups](https://lunchshift.app/llms-full.txt#delivery-groups): Intelligent delivery point assignment, group creation, and EU-compliant label printing
- [Order Tracking](https://lunchshift.app/llms-full.txt#order-tracking): Real-time order pipeline from kitchen to delivery with Socket.IO status updates. 98% on-time delivery rate
- [Analytics & Reports](https://lunchshift.app/llms-full.txt#analytics): Consumption dashboard with advanced filters, Delta Mode period comparison, and multi-format export (PDF, Excel, CSV)

## Kitchen Operations Features (6)

- [INRAN Ingredients Database](https://lunchshift.app/llms-full.txt#inran-ingredients): 1,030+ ingredients from the official Italian INRAN nutritional database with complete macro/micronutrient profiles
- [Recipe Builder](https://lunchshift.app/llms-full.txt#recipe-builder): Create recipes with automatic nutrient calculation, EU allergen detection (14 allergens), and per-portion cost estimation
- [Menu Planner](https://lunchshift.app/llms-full.txt#menu-planner): 12-week multi-client drag-and-drop menu planning with holiday management and duplication
- [Menu PDF Generator](https://lunchshift.app/llms-full.txt#menu-pdf): Professional A4 PDF menus with EU 1169/2011 allergen icons, dietitian notes, and tenant branding
- [Delivery Routes](https://lunchshift.app/llms-full.txt#delivery-routes): Optimized delivery route planning with 300 DPI EU-compliant label printing and delivery point tracking
- [EU Allergen Compliance](https://lunchshift.app/llms-full.txt#eu-allergens): Full EU 1169/2011 compliance covering 14 regulated allergens with 3 risk levels (Contains, May Contain, Cross-Contact) and PDF label generation

## Platform Admin Features (9)

- [Multi-Tenant Architecture](https://lunchshift.app/llms-full.txt#multi-tenant): 4-level tenant hierarchy (Platform → Kitchen → Customer → User) with PostgreSQL Row-Level Security and 6 RBAC roles
- [NIS2/GDPR Compliance](https://lunchshift.app/llms-full.txt#nis2-gdpr): NIS2 score 95/100, GDPR score 96/100, AES-256-GCM encryption, right to erasure, Art. 30 audit trail
- [Audit Trail](https://lunchshift.app/llms-full.txt#audit-trail): Complete GDPR Art. 30 event logging with severity scoring, advanced filters, compliance export, and 365+ day retention
- [Error Monitor](https://lunchshift.app/llms-full.txt#error-monitor): Real-time error dashboard with 5-tier rate limiting and automatic alerting
- [Security Alerts](https://lunchshift.app/llms-full.txt#security-alerts): Brute force detection, anomalous login detection, rate limit violation monitoring with automatic blocking across all channels
- [SSO + MFA](https://lunchshift.app/llms-full.txt#sso-mfa): TOTP, WebAuthn/Passkeys (FIDO2 AAL3), Azure AD SSO, Google Workspace SSO — enterprise passwordless authentication
- [TV Display](https://lunchshift.app/llms-full.txt#tv-display): 16:9 branded menu display with automatic rotation, QR code for instant booking, and multi-display support
- [White-Label Branding](https://lunchshift.app/llms-full.txt#branding): Per-tenant customization of colors, logo, email templates, and UI themes via CSS variables
- [PWA](https://lunchshift.app/llms-full.txt#pwa): Progressive Web App with offline cache, push notifications, and home screen shortcuts. No app store required

## Tech Deep-Dive Features (5)

- [7 Payment Methods](https://lunchshift.app/llms-full.txt#payments): Stripe, Nexi, Satispay QR, Edenred meal vouchers, RFID Badge, Digital Wallet, Cash — all encrypted with AES-256-GCM, PCI DSS compliant
- [Real-Time Chat](https://lunchshift.app/llms-full.txt#chat): Socket.IO messaging with Redis Pub/Sub, direct/group/channel modes, typing indicators, emoji reactions, and read receipts
- [OpenTelemetry Tracing](https://lunchshift.app/llms-full.txt#otel-tracing): Distributed tracing across 8 Docker services with Jaeger visualization — spans, latencies, and service dependency mapping
- [Testing Pyramid](https://lunchshift.app/llms-full.txt#testing-pyramid): 7,000+ automated tests — 5,719 Jest unit tests, 1,256 Playwright E2E tests, 6 k6 load tests covering booking, payments, and auth flows
- [Health Monitoring](https://lunchshift.app/llms-full.txt#health-monitoring): Health checks on PostgreSQL, Redis, and all Docker services with proactive alerting. 99.9% uptime guarantee

## Tech Stack

- **Frontend**: Next.js 16 (App Router, Server Components), React 19, TypeScript (strict), Tailwind CSS 3, Framer Motion 12, @dnd-kit
- **Backend**: PostgreSQL 16, Prisma 6 ORM, Redis 7 (cache + pub/sub), Socket.IO, FastAPI (Python OMR microservice)
- **Security**: WebAuthn AAL3, TOTP, OAuth 2.0, AES-256-GCM, PostgreSQL RLS, 6-role RBAC
- **Payments**: Stripe, Nexi, Satispay, Edenred, RFID Badge, Digital Wallet, Cash
- **Infrastructure**: Docker, OpenTelemetry, Jaeger, MinIO S3, Zod validation, ExcelJS, @react-pdf/renderer
- **Testing**: Playwright (1,256 E2E), Jest (5,719 unit), k6 (6 load tests)
- **Compliance**: NIS2, GDPR, EU 1169/2011, PCI DSS, ISO 22000 Ready, BRC, IFS

## Contact

- **Author**: Marco Laudati
- **Email**: info@romagnainformatica.it
- **LinkedIn**: https://www.linkedin.com/in/marcolaudati/
- **Website**: https://lunchshift.app