Self-service order cancellation, merchant snooze and running-late tools, a merchant sales summary and courier cash view, all switched on

What changed

• Customers can cancel an order themselves while it is still early (before the restaurant accepts or starts preparing). Orders already paid online are routed to the refund process instead of an instant cancel, so money is always handled safely.
• Merchants can put an item 'on snooze' for a set number of minutes; it automatically becomes available again when the timer expires - no manual step and no background job needed.
• Merchants can flag an order as 'running late'; the customer sees a clear notice in their order tracking. The estimated delivery time is deliberately left unchanged - the notice is informational only.
• Merchants get a read-only sales summary: total sales, average order value, the cash-versus-card split, and top items for a chosen day window.
• Couriers get a read-only cash reconciliation: cash collected, cash handed in, and what is still outstanding - each courier sees only their own figures.
• Operators get a read-only diagnostics screen listing which features are on or off, to manage roll-outs - it shows only on/off states and counts, never any personal or sensitive data.
• Fixed a small operator-console glitch where attempting to reassign an already-delivered order logged a harmless error in the background; the action was always correctly refused, it just no longer logs noise.

Why it matters

These features give customers more control (cancel early without calling support), give merchants everyday tools to manage their menu and set expectations when the kitchen is busy, and give couriers and operators clearer visibility - all without changing prices, payments, or how deliveries are assigned.

Everything was tested against the live system before and after switching on, including the customer cancellation tested end to end on a real phone, and each access boundary was checked so people only see what they should.

Safety

• Payment-safe: no card payment flow was changed; online-paid orders go through the proper refund path rather than an instant cancel.
• Every feature is individually reversible with a single switch, with no code change required to turn one back off.
• Access is strictly scoped: couriers see only their own cash, merchants only their own sales, and the operator diagnostics screen exposes no personal or sensitive data.
• Reviewed by independent automated reviewers; no critical or high-risk issues were found, and the live system stayed healthy throughout.