- freeAccessStore.js: JSON-persisted whitelist of shops with optional
expiry dates; isShopAllowed(), addShop(), removeShop(), listShops()
- routes/adminPanel.js: password-protected single-page admin dashboard
served at /d4a-admin; cookie-based session auth (no extra deps);
add / remove / list shops with expiry dates and notes
- server.js: mount /d4a-admin panel; expose GET /free-access/:shop
public API for frontend loaders; import freeAccessStore
Credentials: d4a-admin / Data4autos@2026.
Migrates racewerksengg.myshopify.com from hardcode into the JSON store.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>