Sugar Shack Cafe Rocky Mount

Payments — Now Live Square moved from Sandbox to Production — checkout now calls the live Square API, so you're taking real payments. Server-side price recalculation — totals are recomputed from trusted menu pricing on the backend, preventing client-side payment manipulation. Hardcoded Square redirect URL — locks the post-payment return path to prevent open-redirect exploits. Ordering Experience Dine-in vs. Pickup modes — customers choose how they're ordering via a new modal on entry. Store-hours-aware scheduling — pickup slots and the "Dine In" option automatically respect your current business hours (closed = no dine-in, no same-day slots). Tropical Sno restricted to dine-in — those items only appear when the customer is dining in. iOS / Mobile Polish Safe-area padding on navbar and main content for native gesture bars. Security & Compliance Row-Level Security applied to Order, ArrivalNotification, and StaffSettings entities. SMS opt-in compliance — unchecked consent checkbox, message-frequency disclosure, STOP/HELP instructions, and internal Terms/Privacy links. Under the Hood New centralized storeHours.js utility for business-hour validation. Hero "play island vibes" button repositioned to avoid overlapping the Facebook link. Checkout cleanup — redundant functions removed, pickup fields hidden during dine-in.