[object Object]

← back to Dw Hero Admin

initial scaffold — DW hero-grid admin :9772 with drag-drop into 2x2 hero

ea04db80e86ce1377e19de587edd8f13db70e5d5 · 2026-05-14 08:32:00 -0700 · Steve

Files touched

Diff

commit ea04db80e86ce1377e19de587edd8f13db70e5d5
Author: Steve <steve@designerwallcoverings.com>
Date:   Thu May 14 08:32:00 2026 -0700

    initial scaffold — DW hero-grid admin :9772 with drag-drop into 2x2 hero
---
 .gitignore        |   7 +
 package-lock.json | 827 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 package.json      |  10 +
 public/index.html | 334 ++++++++++++++++++++++
 server.js         | 144 ++++++++++
 5 files changed, 1322 insertions(+)

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..26d669c
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,7 @@
+node_modules/
+.env*
+*.log
+.DS_Store
+dist/
+build/
+.next/
diff --git a/package-lock.json b/package-lock.json
new file mode 100644
index 0000000..a27520a
--- /dev/null
+++ b/package-lock.json
@@ -0,0 +1,827 @@
+{
+  "name": "dw-hero-admin",
+  "version": "0.1.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "dw-hero-admin",
+      "version": "0.1.0",
+      "dependencies": {
+        "express": "^4.19.2"
+      }
+    },
+    "node_modules/accepts": {
+      "version": "1.3.8",
+      "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
+      "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-types": "~2.1.34",
+        "negotiator": "0.6.3"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/array-flatten": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
+      "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==",
+      "license": "MIT"
+    },
+    "node_modules/body-parser": {
+      "version": "1.20.5",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.5.tgz",
+      "integrity": "sha512-3grm+/2tUOvu2cjJkvsIxrv/wVpfXQW4PsQHYm7yk4vfpu7Ekl6nEsYBoJUL6qDwZUx8wUhQ8tR2qz+ad9c9OA==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "~3.1.2",
+        "content-type": "~1.0.5",
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "destroy": "~1.2.0",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.4.24",
+        "on-finished": "~2.4.1",
+        "qs": "~6.15.1",
+        "raw-body": "~2.5.3",
+        "type-is": "~1.6.18",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8",
+        "npm": "1.2.8000 || >= 1.4.16"
+      }
+    },
+    "node_modules/bytes": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
+      "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/call-bind-apply-helpers": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+      "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/call-bound": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+      "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "get-intrinsic": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/content-disposition": {
+      "version": "0.5.4",
+      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
+      "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==",
+      "license": "MIT",
+      "dependencies": {
+        "safe-buffer": "5.2.1"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/content-type": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
+      "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/cookie": {
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+      "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/cookie-signature": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.7.tgz",
+      "integrity": "sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==",
+      "license": "MIT"
+    },
+    "node_modules/debug": {
+      "version": "2.6.9",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "2.0.0"
+      }
+    },
+    "node_modules/depd": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
+      "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/destroy": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
+      "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8",
+        "npm": "1.2.8000 || >= 1.4.16"
+      }
+    },
+    "node_modules/dunder-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+      "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "gopd": "^1.2.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/ee-first": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
+      "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
+      "license": "MIT"
+    },
+    "node_modules/encodeurl": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
+      "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/es-define-property": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
+      "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/es-errors": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
+      "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/es-object-atoms": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
+      "integrity": "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/escape-html": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
+      "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==",
+      "license": "MIT"
+    },
+    "node_modules/etag": {
+      "version": "1.8.1",
+      "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
+      "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/express": {
+      "version": "4.22.2",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.22.2.tgz",
+      "integrity": "sha512-IuL+Elrou2ZvCFHs18/CIzy2Nzvo25nZ1/D2eIZlz7c+QUayAcYoiM2BthCjs+EBHVpjYjcuLDAiCWgeIX3X1Q==",
+      "license": "MIT",
+      "dependencies": {
+        "accepts": "~1.3.8",
+        "array-flatten": "1.1.1",
+        "body-parser": "~1.20.5",
+        "content-disposition": "~0.5.4",
+        "content-type": "~1.0.4",
+        "cookie": "~0.7.1",
+        "cookie-signature": "~1.0.6",
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "etag": "~1.8.1",
+        "finalhandler": "~1.3.1",
+        "fresh": "~0.5.2",
+        "http-errors": "~2.0.0",
+        "merge-descriptors": "1.0.3",
+        "methods": "~1.1.2",
+        "on-finished": "~2.4.1",
+        "parseurl": "~1.3.3",
+        "path-to-regexp": "~0.1.12",
+        "proxy-addr": "~2.0.7",
+        "qs": "~6.15.1",
+        "range-parser": "~1.2.1",
+        "safe-buffer": "5.2.1",
+        "send": "~0.19.0",
+        "serve-static": "~1.16.2",
+        "setprototypeof": "1.2.0",
+        "statuses": "~2.0.1",
+        "type-is": "~1.6.18",
+        "utils-merge": "1.0.1",
+        "vary": "~1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.10.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/finalhandler": {
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.2.tgz",
+      "integrity": "sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "2.6.9",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "on-finished": "~2.4.1",
+        "parseurl": "~1.3.3",
+        "statuses": "~2.0.2",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/forwarded": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
+      "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/fresh": {
+      "version": "0.5.2",
+      "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
+      "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/function-bind": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
+      "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/get-intrinsic": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
+      "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "es-define-property": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "es-object-atoms": "^1.1.1",
+        "function-bind": "^1.1.2",
+        "get-proto": "^1.0.1",
+        "gopd": "^1.2.0",
+        "has-symbols": "^1.1.0",
+        "hasown": "^2.0.2",
+        "math-intrinsics": "^1.1.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/get-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+      "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+      "license": "MIT",
+      "dependencies": {
+        "dunder-proto": "^1.0.1",
+        "es-object-atoms": "^1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/gopd": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
+      "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/has-symbols": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
+      "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/hasown": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.3.tgz",
+      "integrity": "sha512-ej4AhfhfL2Q2zpMmLo7U1Uv9+PyhIZpgQLGT1F9miIGmiCJIoCgSmczFdrc97mWT4kVY72KA+WnnhJ5pghSvSg==",
+      "license": "MIT",
+      "dependencies": {
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/http-errors": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
+      "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==",
+      "license": "MIT",
+      "dependencies": {
+        "depd": "~2.0.0",
+        "inherits": "~2.0.4",
+        "setprototypeof": "~1.2.0",
+        "statuses": "~2.0.2",
+        "toidentifier": "~1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/iconv-lite": {
+      "version": "0.4.24",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
+      "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==",
+      "license": "MIT",
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/inherits": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+      "license": "ISC"
+    },
+    "node_modules/ipaddr.js": {
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
+      "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
+    "node_modules/math-intrinsics": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
+      "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/media-typer": {
+      "version": "0.3.0",
+      "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
+      "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/merge-descriptors": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz",
+      "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/methods": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
+      "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
+      "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==",
+      "license": "MIT",
+      "bin": {
+        "mime": "cli.js"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/mime-db": {
+      "version": "1.52.0",
+      "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
+      "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime-types": {
+      "version": "2.1.35",
+      "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
+      "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-db": "1.52.0"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/ms": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+      "license": "MIT"
+    },
+    "node_modules/negotiator": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz",
+      "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/object-inspect": {
+      "version": "1.13.4",
+      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+      "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/on-finished": {
+      "version": "2.4.1",
+      "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
+      "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
+      "license": "MIT",
+      "dependencies": {
+        "ee-first": "1.1.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/parseurl": {
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
+      "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/path-to-regexp": {
+      "version": "0.1.13",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz",
+      "integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==",
+      "license": "MIT"
+    },
+    "node_modules/proxy-addr": {
+      "version": "2.0.7",
+      "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
+      "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==",
+      "license": "MIT",
+      "dependencies": {
+        "forwarded": "0.2.0",
+        "ipaddr.js": "1.9.1"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
+    "node_modules/qs": {
+      "version": "6.15.1",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.1.tgz",
+      "integrity": "sha512-6YHEFRL9mfgcAvql/XhwTvf5jKcOiiupt2FiJxHkiX1z4j7WL8J/jRHYLluORvc1XxB5rV20KoeK00gVJamspg==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "side-channel": "^1.1.0"
+      },
+      "engines": {
+        "node": ">=0.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/range-parser": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
+      "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/raw-body": {
+      "version": "2.5.3",
+      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz",
+      "integrity": "sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "~3.1.2",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.4.24",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/safe-buffer": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/safer-buffer": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "license": "MIT"
+    },
+    "node_modules/send": {
+      "version": "0.19.2",
+      "resolved": "https://registry.npmjs.org/send/-/send-0.19.2.tgz",
+      "integrity": "sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "destroy": "1.2.0",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "etag": "~1.8.1",
+        "fresh": "~0.5.2",
+        "http-errors": "~2.0.1",
+        "mime": "1.6.0",
+        "ms": "2.1.3",
+        "on-finished": "~2.4.1",
+        "range-parser": "~1.2.1",
+        "statuses": "~2.0.2"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/send/node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/serve-static": {
+      "version": "1.16.3",
+      "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.3.tgz",
+      "integrity": "sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==",
+      "license": "MIT",
+      "dependencies": {
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "parseurl": "~1.3.3",
+        "send": "~0.19.1"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/setprototypeof": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
+      "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==",
+      "license": "ISC"
+    },
+    "node_modules/side-channel": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
+      "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.3",
+        "side-channel-list": "^1.0.0",
+        "side-channel-map": "^1.0.1",
+        "side-channel-weakmap": "^1.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-list": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
+      "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.4"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-map": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+      "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-weakmap": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+      "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3",
+        "side-channel-map": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/statuses": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+      "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/toidentifier": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
+      "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.6"
+      }
+    },
+    "node_modules/type-is": {
+      "version": "1.6.18",
+      "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
+      "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==",
+      "license": "MIT",
+      "dependencies": {
+        "media-typer": "0.3.0",
+        "mime-types": "~2.1.24"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/unpipe": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
+      "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/utils-merge": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz",
+      "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4.0"
+      }
+    },
+    "node_modules/vary": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
+      "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    }
+  }
+}
diff --git a/package.json b/package.json
new file mode 100644
index 0000000..1582482
--- /dev/null
+++ b/package.json
@@ -0,0 +1,10 @@
+{
+  "name": "dw-hero-admin",
+  "version": "0.1.0",
+  "description": "Per-site 2x2 hero-grid admin: drag products into 4 slots, sorted newest first. Enforces never-show-images-with-headers rule.",
+  "main": "server.js",
+  "scripts": { "start": "node server.js" },
+  "dependencies": {
+    "express": "^4.19.2"
+  }
+}
diff --git a/public/index.html b/public/index.html
new file mode 100644
index 0000000..4185dd0
--- /dev/null
+++ b/public/index.html
@@ -0,0 +1,334 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>DW Hero Grid Admin</title>
+<style>
+  :root {
+    --bg: #0a0a0a;
+    --panel: #14110c;
+    --paper: #f5f1e8;
+    --muted: #8a8378;
+    --line: rgba(245,241,232,0.10);
+    --accent: #B0A080;
+    --slot-bg: #1c1814;
+    --slot-bd: rgba(176,160,128,0.35);
+    --hot: #d49a5c;
+  }
+  * { box-sizing: border-box; }
+  html,body { margin:0; height:100%; background:var(--bg); color:var(--paper); font:14px/1.4 -apple-system,"SF Pro Text",system-ui,sans-serif; }
+  a { color:var(--accent); }
+  .app { display:grid; grid-template-columns: 240px 1fr; height:100vh; min-height: 0; }
+  /* ─ sidebar ─ */
+  .sidebar { background:var(--panel); border-right:1px solid var(--line); overflow-y:auto; padding:16px 0; }
+  .sidebar h2 { font-size:11px; letter-spacing:0.18em; text-transform:uppercase; color:var(--muted); margin:0 16px 12px; font-weight:500; }
+  .site-list { list-style:none; padding:0; margin:0; }
+  .site-list li { padding:8px 16px; cursor:pointer; border-left:3px solid transparent; transition:background .14s,border-color .14s; font-size:13px; }
+  .site-list li:hover { background:rgba(245,241,232,0.04); }
+  .site-list li.active { background:rgba(176,160,128,0.10); border-left-color:var(--accent); color:#fff; }
+  .site-list li small { display:block; font-size:10px; color:var(--muted); margin-top:2px; }
+  .sidebar-search { padding:0 16px 12px; }
+  .sidebar-search input { width:100%; padding:8px 10px; background:transparent; border:1px solid var(--line); color:var(--paper); font:inherit; outline:none; border-radius:3px; }
+  /* ─ main ─ */
+  .main { display:flex; flex-direction:column; overflow:hidden; }
+  .topbar { padding:14px 24px; border-bottom:1px solid var(--line); display:flex; align-items:center; justify-content:space-between; }
+  .topbar h1 { margin:0; font-size:18px; font-weight:500; letter-spacing:-0.005em; }
+  .topbar .meta { color:var(--muted); font-size:12px; letter-spacing:0.04em; }
+  .save-status { font-size:12px; color:var(--muted); }
+  .save-status.ok { color:#7ed3a3; }
+  .save-status.err { color:#ff8c8c; }
+  /* ─ slot grid ─ */
+  .slots-wrap { padding:18px 24px; border-bottom:1px solid var(--line); background:#0d0a07; }
+  .slots-label { display:flex; align-items:center; justify-content:space-between; margin-bottom:10px; }
+  .slots-label h3 { margin:0; font-size:12px; letter-spacing:0.18em; text-transform:uppercase; color:var(--muted); font-weight:500; }
+  .slots-label .hint { font-size:11px; color:var(--muted); }
+  .slots { display:grid; grid-template-columns:1fr 1fr; grid-template-rows:1fr 1fr; gap:8px; width:100%; max-width:520px; aspect-ratio:1.6/1; margin:0 auto; }
+  .slot { position:relative; background:var(--slot-bg); border:1px dashed var(--slot-bd); overflow:hidden; cursor:default; transition:border-color .14s, background .14s; }
+  .slot.over { border-color:var(--hot); border-style:solid; background:rgba(212,154,92,0.08); }
+  .slot img { width:100%; height:100%; object-fit:cover; object-position:center 12%; display:block; }
+  .slot .empty { position:absolute; inset:0; display:flex; align-items:center; justify-content:center; color:var(--muted); font-size:11px; letter-spacing:0.12em; text-transform:uppercase; pointer-events:none; }
+  .slot .badge { position:absolute; top:6px; left:6px; background:rgba(10,10,10,0.78); padding:3px 8px; font-size:9px; letter-spacing:0.18em; text-transform:uppercase; border-radius:2px; }
+  .slot .clear { position:absolute; top:6px; right:6px; background:rgba(10,10,10,0.78); color:#fff; border:0; cursor:pointer; width:22px; height:22px; border-radius:50%; font-size:12px; line-height:1; display:none; }
+  .slot.has-img:hover .clear { display:block; }
+  .slot .title-strip { position:absolute; bottom:0; left:0; right:0; padding:6px 8px; background:linear-gradient(180deg, rgba(0,0,0,0) 0%, rgba(0,0,0,0.7) 100%); font-size:10px; line-height:1.2; }
+  .toolbar { display:flex; gap:8px; margin-top:12px; align-items:center; justify-content:center; }
+  .toolbar button { background:transparent; border:1px solid var(--line); color:var(--paper); padding:6px 14px; cursor:pointer; font:inherit; font-size:12px; letter-spacing:0.06em; border-radius:3px; transition:all .14s; }
+  .toolbar button:hover { background:rgba(245,241,232,0.06); border-color:var(--accent); }
+  .toolbar button.primary { background:var(--accent); color:#0a0a0a; border-color:var(--accent); font-weight:500; }
+  .toolbar button.primary:hover { background:#c0b090; }
+  /* ─ products grid ─ */
+  .products-wrap { flex:1; overflow-y:auto; padding:18px 24px; }
+  .products-header { display:flex; align-items:center; justify-content:space-between; margin-bottom:12px; }
+  .products-header h3 { margin:0; font-size:12px; letter-spacing:0.18em; text-transform:uppercase; color:var(--muted); font-weight:500; }
+  .product-search input { padding:6px 10px; background:transparent; border:1px solid var(--line); color:var(--paper); font:inherit; outline:none; border-radius:3px; width:260px; font-size:12px; }
+  .products { display:grid; grid-template-columns: repeat(auto-fill, minmax(140px, 1fr)); gap:10px; }
+  .product { position:relative; aspect-ratio:1/1.15; background:var(--slot-bg); border:1px solid var(--line); overflow:hidden; cursor:grab; transition:border-color .14s; }
+  .product:active { cursor:grabbing; }
+  .product:hover { border-color:var(--accent); }
+  .product.dragging { opacity:0.4; }
+  .product img { width:100%; height:100%; object-fit:cover; object-position:center 12%; display:block; pointer-events:none; }
+  .product .strip { position:absolute; bottom:0; left:0; right:0; padding:5px 7px; background:linear-gradient(180deg, rgba(0,0,0,0) 0%, rgba(0,0,0,0.85) 100%); font-size:10px; line-height:1.2; }
+  .product .strip .sku { color:var(--muted); font-size:9px; letter-spacing:0.04em; }
+  .empty-state { display:flex; align-items:center; justify-content:center; height:60vh; color:var(--muted); }
+  .loading { padding:40px; text-align:center; color:var(--muted); }
+  /* ─ controls ─ */
+  .kind-toggle { background:rgba(10,10,10,0.78); border:0; color:#fff; padding:3px 7px; font-size:9px; letter-spacing:0.18em; text-transform:uppercase; cursor:pointer; border-radius:2px; margin-left:6px; }
+  .kind-toggle:hover { background:var(--accent); color:#0a0a0a; }
+  /* mobile */
+  @media (max-width:780px) {
+    .app { grid-template-columns: 1fr; grid-template-rows: auto 1fr; }
+    .sidebar { max-height:30vh; }
+  }
+</style>
+</head>
+<body>
+<div class="app">
+  <aside class="sidebar">
+    <h2>DW Fleet</h2>
+    <div class="sidebar-search"><input id="siteSearch" type="search" placeholder="Filter sites..."></div>
+    <ul class="site-list" id="siteList"></ul>
+  </aside>
+  <main class="main">
+    <div class="topbar">
+      <div>
+        <h1 id="siteName">— pick a site —</h1>
+        <div class="meta" id="siteMeta"></div>
+      </div>
+      <div class="save-status" id="saveStatus"></div>
+    </div>
+    <div class="slots-wrap" id="slotsWrap" style="display:none">
+      <div class="slots-label">
+        <h3>Hero 2×2 — drag products in</h3>
+        <span class="hint">crop 12% from top · rule: never display image with header</span>
+      </div>
+      <div class="slots" id="slots">
+        <div class="slot" data-idx="0"><span class="badge">Room 1</span><div class="empty">Drop room photo</div></div>
+        <div class="slot" data-idx="1"><span class="badge">Pattern 1</span><div class="empty">Drop pattern</div></div>
+        <div class="slot" data-idx="2"><span class="badge">Room 2</span><div class="empty">Drop room photo</div></div>
+        <div class="slot" data-idx="3"><span class="badge">Pattern 2</span><div class="empty">Drop pattern</div></div>
+      </div>
+      <div class="toolbar">
+        <button id="saveBtn" class="primary">Save & push to prod</button>
+        <button id="resetBtn">Reset to newest 4</button>
+        <button id="openSiteBtn">Open live site ↗</button>
+      </div>
+    </div>
+    <div class="products-wrap" id="productsWrap">
+      <div class="empty-state">Pick a site on the left to start.</div>
+    </div>
+  </main>
+</div>
+
+<script>
+(function () {
+  'use strict';
+  var state = { site: null, products: [], grid: null, filter: '' };
+  var els = {
+    siteList: document.getElementById('siteList'),
+    siteSearch: document.getElementById('siteSearch'),
+    siteName: document.getElementById('siteName'),
+    siteMeta: document.getElementById('siteMeta'),
+    slotsWrap: document.getElementById('slotsWrap'),
+    slots: document.getElementById('slots'),
+    productsWrap: document.getElementById('productsWrap'),
+    saveStatus: document.getElementById('saveStatus'),
+    saveBtn: document.getElementById('saveBtn'),
+    resetBtn: document.getElementById('resetBtn'),
+    openSiteBtn: document.getElementById('openSiteBtn'),
+  };
+
+  function api(url, opts) { return fetch(url, opts).then(function (r) { return r.json(); }); }
+
+  function loadSites() {
+    return api('/api/sites').then(function (data) {
+      var sites = data.sites || [];
+      els.siteList.innerHTML = sites.map(function (s) {
+        return '<li data-site="' + s + '">' + s + '<small>' + s + '.com</small></li>';
+      }).join('');
+      Array.prototype.forEach.call(els.siteList.querySelectorAll('li'), function (li) {
+        li.addEventListener('click', function () { pickSite(li.dataset.site); });
+      });
+    });
+  }
+
+  function pickSite(site) {
+    state.site = site;
+    Array.prototype.forEach.call(els.siteList.querySelectorAll('li'), function (li) {
+      li.classList.toggle('active', li.dataset.site === site);
+    });
+    els.siteName.textContent = site;
+    els.siteMeta.textContent = 'loading…';
+    els.productsWrap.innerHTML = '<div class="loading">Loading products…</div>';
+    return api('/api/site/' + encodeURIComponent(site)).then(function (data) {
+      state.products = data.products || [];
+      state.grid = data.grid;
+      els.siteMeta.textContent = data.productCount + ' products · newest first';
+      els.slotsWrap.style.display = 'block';
+      renderSlots();
+      renderProducts();
+    }).catch(function (e) {
+      els.productsWrap.innerHTML = '<div class="empty-state">Error: ' + e.message + '</div>';
+    });
+  }
+
+  function renderSlots() {
+    var cells = (state.grid && state.grid.cells) || [];
+    var kinds = ['Room 1', 'Pattern 1', 'Room 2', 'Pattern 2'];
+    Array.prototype.forEach.call(els.slots.querySelectorAll('.slot'), function (slot, idx) {
+      slot.innerHTML = '<span class="badge">' + kinds[idx] + '<button class="kind-toggle" title="Toggle room/pattern">⇆</button></span>';
+      var cell = cells[idx];
+      if (cell && cell.image_url) {
+        slot.classList.add('has-img');
+        var img = document.createElement('img');
+        img.src = cell.image_url;
+        img.alt = cell.title || '';
+        slot.appendChild(img);
+        var clear = document.createElement('button');
+        clear.className = 'clear';
+        clear.textContent = '×';
+        clear.title = 'Clear';
+        clear.addEventListener('click', function (ev) { ev.stopPropagation(); clearSlot(idx); });
+        slot.appendChild(clear);
+        var strip = document.createElement('div');
+        strip.className = 'title-strip';
+        strip.textContent = cell.title || cell.sku || '';
+        slot.appendChild(strip);
+      } else {
+        slot.classList.remove('has-img');
+        var emp = document.createElement('div');
+        emp.className = 'empty';
+        emp.textContent = idx % 2 === 0 ? 'Drop room photo' : 'Drop pattern';
+        slot.appendChild(emp);
+      }
+      // toggle kind
+      var tog = slot.querySelector('.kind-toggle');
+      if (tog) tog.addEventListener('click', function (ev) {
+        ev.stopPropagation();
+        if (!state.grid) return;
+        var c = state.grid.cells[idx] || {};
+        c.kind = (c.kind === 'room') ? 'pattern' : 'room';
+        state.grid.cells[idx] = c;
+        flashStatus('toggled — click Save', '');
+      });
+      // drag handlers
+      slot.addEventListener('dragover', function (ev) { ev.preventDefault(); slot.classList.add('over'); });
+      slot.addEventListener('dragleave', function () { slot.classList.remove('over'); });
+      slot.addEventListener('drop', function (ev) {
+        ev.preventDefault();
+        slot.classList.remove('over');
+        var sku = ev.dataTransfer.getData('text/sku');
+        var hit = state.products.find(function (p) { return p.sku === sku; });
+        if (!hit) return;
+        setSlot(idx, hit, idx % 2 === 0 ? 'room' : 'pattern');
+      });
+    });
+  }
+
+  function setSlot(idx, product, kind) {
+    if (!state.grid) state.grid = { cells: [{}, {}, {}, {}], rotation_pool: [], autocycle_seconds: 6 };
+    state.grid.cells[idx] = {
+      kind: kind || state.grid.cells[idx]?.kind || (idx % 2 === 0 ? 'room' : 'pattern'),
+      sku: product.sku,
+      image_url: product.image_url,
+      title: product.title,
+    };
+    renderSlots();
+    flashStatus('unsaved — click Save to push to prod', '');
+  }
+
+  function clearSlot(idx) {
+    if (!state.grid || !state.grid.cells) return;
+    state.grid.cells[idx] = { kind: state.grid.cells[idx]?.kind || (idx % 2 === 0 ? 'room' : 'pattern'), sku: null, image_url: null, title: null };
+    renderSlots();
+    flashStatus('unsaved', '');
+  }
+
+  function renderProducts() {
+    var q = (state.filter || '').toLowerCase();
+    var items = state.products.filter(function (p) {
+      if (!q) return true;
+      return ((p.title || '') + ' ' + (p.sku || '') + ' ' + (p.vendor || '') + ' ' + (p.tags || []).join(' ')).toLowerCase().indexOf(q) !== -1;
+    });
+    els.productsWrap.innerHTML = '\
+      <div class="products-header">\
+        <h3>All products — newest first (' + items.length + ')</h3>\
+        <div class="product-search"><input id="prodFilter" type="search" placeholder="Filter pattern, vendor, tag..." value="' + escapeHtml(q) + '"></div>\
+      </div>\
+      <div class="products" id="prodGrid"></div>\
+    ';
+    var grid = document.getElementById('prodGrid');
+    grid.innerHTML = items.slice(0, 400).map(function (p) {
+      return '<div class="product" draggable="true" data-sku="' + escapeHtml(p.sku) + '">\
+        <img src="' + escapeHtml(p.image_url) + '" alt="' + escapeHtml(p.title || '') + '" loading="lazy">\
+        <div class="strip">' + escapeHtml((p.title || '').slice(0, 36)) + '<div class="sku">' + escapeHtml(p.sku) + '</div></div>\
+      </div>';
+    }).join('');
+    Array.prototype.forEach.call(grid.querySelectorAll('.product'), function (el) {
+      el.addEventListener('dragstart', function (ev) {
+        el.classList.add('dragging');
+        ev.dataTransfer.setData('text/sku', el.dataset.sku);
+        ev.dataTransfer.effectAllowed = 'copy';
+      });
+      el.addEventListener('dragend', function () { el.classList.remove('dragging'); });
+    });
+    var pf = document.getElementById('prodFilter');
+    if (pf) {
+      pf.addEventListener('input', function () { state.filter = pf.value; renderProducts(); });
+    }
+  }
+
+  function flashStatus(msg, cls) {
+    els.saveStatus.textContent = msg;
+    els.saveStatus.className = 'save-status ' + (cls || '');
+  }
+
+  function escapeHtml(s) {
+    return String(s || '').replace(/[&<>"']/g, function (c) {
+      return ({ '&':'&amp;', '<':'&lt;', '>':'&gt;', '"':'&quot;', "'":'&#39;' })[c];
+    });
+  }
+
+  els.saveBtn.addEventListener('click', function () {
+    if (!state.site || !state.grid) return;
+    flashStatus('saving…', '');
+    api('/api/site/' + encodeURIComponent(state.site) + '/grid', {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify(state.grid),
+    }).then(function (r) {
+      if (r.ok) flashStatus('✓ saved + pushed to prod', 'ok');
+      else flashStatus('✗ ' + (r.error || 'unknown'), 'err');
+    }).catch(function (e) { flashStatus('✗ ' + e.message, 'err'); });
+  });
+
+  els.resetBtn.addEventListener('click', function () {
+    if (!state.site) return;
+    var first4 = state.products.slice(0, 4);
+    state.grid = {
+      cells: first4.map(function (p, i) {
+        return { kind: i % 2 === 0 ? 'room' : 'pattern', sku: p.sku, image_url: p.image_url, title: p.title };
+      }),
+      rotation_pool: state.products.slice(0, 16).map(function (p) { return { sku: p.sku, image_url: p.image_url, title: p.title }; }),
+      autocycle_seconds: 6,
+    };
+    renderSlots();
+    flashStatus('reset (unsaved)', '');
+  });
+
+  els.openSiteBtn.addEventListener('click', function () {
+    if (state.site) window.open('https://' + state.site + '.com', '_blank');
+  });
+
+  els.siteSearch.addEventListener('input', function () {
+    var q = els.siteSearch.value.toLowerCase();
+    Array.prototype.forEach.call(els.siteList.querySelectorAll('li'), function (li) {
+      li.style.display = !q || li.dataset.site.indexOf(q) !== -1 ? '' : 'none';
+    });
+  });
+
+  loadSites();
+})();
+</script>
+</body>
+</html>
diff --git a/server.js b/server.js
new file mode 100644
index 0000000..eb3f92b
--- /dev/null
+++ b/server.js
@@ -0,0 +1,144 @@
+/**
+ * dw-hero-admin :9772
+ *
+ * Per-DW-site admin for the 2×2 rotating hero grid:
+ *   - lists all 53 DW sister sites
+ *   - shows each site's products sorted NEWEST FIRST
+ *   - drag products into 4 slots (room/pattern/room/pattern)
+ *   - writes per-site hero-4grid.json AND mirrors to prod /var/www/<site>.com/data/
+ *
+ * Hard rule: never displays a product image with a header band — applies the
+ * `object-fit:cover; object-position:center 12%` crop universally.
+ */
+const express = require('express');
+const fs = require('fs');
+const path = require('path');
+const { execFile } = require('child_process');
+
+const PORT = process.env.PORT || 9772;
+const PROJECTS_DIR = process.env.PROJECTS_DIR || path.join(process.env.HOME, 'Projects');
+const REMOTE_HOST = process.env.REMOTE_HOST || 'root@45.61.58.125';
+
+// Canonical 53-site list — same source as /tmp/dw-sites.txt (auto-discovers
+// every project under ~/Projects/ whose public/index.html has nsContactOpen
+// or .ns-modal markers — i.e. the DW family).
+function discoverSites() {
+  const sites = [];
+  const entries = fs.readdirSync(PROJECTS_DIR, { withFileTypes: true });
+  for (const e of entries) {
+    if (!e.isDirectory()) continue;
+    const idx = path.join(PROJECTS_DIR, e.name, 'public', 'index.html');
+    if (!fs.existsSync(idx)) continue;
+    try {
+      const buf = fs.readFileSync(idx, 'utf8');
+      if (buf.includes('nsContactOpen') || buf.includes('ns-modal')) {
+        sites.push(e.name);
+      }
+    } catch (err) { /* skip */ }
+  }
+  return sites.sort();
+}
+
+let SITES = discoverSites();
+console.log(`[hero-admin] discovered ${SITES.length} DW sites`);
+
+const app = express();
+app.use(express.json({ limit: '2mb' }));
+app.use(express.static(path.join(__dirname, 'public')));
+
+// ── list sites ───────────────────────────────────────────────────────────
+app.get('/api/sites', (req, res) => {
+  res.json({ sites: SITES });
+});
+
+// ── per-site products + current grid config ──────────────────────────────
+app.get('/api/site/:site', (req, res) => {
+  const site = req.params.site;
+  if (!SITES.includes(site)) return res.status(404).json({ error: 'unknown site' });
+  const projDir = path.join(PROJECTS_DIR, site);
+  const productsPath = path.join(projDir, 'data', 'products.json');
+  const gridPath = path.join(projDir, 'data', 'hero-4grid.json');
+  let products = [];
+  try {
+    const raw = fs.readFileSync(productsPath, 'utf8');
+    products = JSON.parse(raw);
+  } catch (e) {
+    return res.status(500).json({ error: 'cannot read products.json', detail: e.message });
+  }
+  // Newest first — products.json doesn't have created_at, so the LAST entries
+  // in the file are typically the most-recently-added by the catalog sync.
+  // We reverse to put them first.
+  products = products.slice().reverse();
+
+  // Drop products without image_url or with obvious header-watermarked sources.
+  products = products.filter(p => p.image_url && /^https:/.test(p.image_url));
+
+  let grid = null;
+  try { grid = JSON.parse(fs.readFileSync(gridPath, 'utf8')); } catch (e) { grid = null; }
+
+  res.json({
+    site,
+    productCount: products.length,
+    // Trim payload — only ship the fields the admin UI needs.
+    products: products.slice(0, 500).map(p => ({
+      sku: p.sku,
+      handle: p.handle,
+      title: p.title,
+      vendor: p.vendor || '',
+      image_url: p.image_url,
+      product_type: p.product_type || '',
+      tags: Array.isArray(p.tags) ? p.tags.slice(0, 6) : [],
+    })),
+    grid: grid || defaultGrid(products),
+  });
+});
+
+// Default — first 4 valid products: room, pattern, room, pattern slots.
+// Steve will reassign via drag-drop.
+function defaultGrid(products) {
+  const picks = products.slice(0, 4);
+  return {
+    cells: [
+      { kind: 'room',    sku: picks[0]?.sku || null, image_url: picks[0]?.image_url || null, title: picks[0]?.title || null },
+      { kind: 'pattern', sku: picks[1]?.sku || null, image_url: picks[1]?.image_url || null, title: picks[1]?.title || null },
+      { kind: 'room',    sku: picks[2]?.sku || null, image_url: picks[2]?.image_url || null, title: picks[2]?.title || null },
+      { kind: 'pattern', sku: picks[3]?.sku || null, image_url: picks[3]?.image_url || null, title: picks[3]?.title || null },
+    ],
+    rotation_pool: products.slice(0, 16).map(p => ({ sku: p.sku, image_url: p.image_url, title: p.title })),
+    autocycle_seconds: 6,
+    updated_at: null,
+  };
+}
+
+// ── save grid for a site ────────────────────────────────────────────────
+app.post('/api/site/:site/grid', (req, res) => {
+  const site = req.params.site;
+  if (!SITES.includes(site)) return res.status(404).json({ error: 'unknown site' });
+  const projDir = path.join(PROJECTS_DIR, site);
+  const dataDir = path.join(projDir, 'data');
+  if (!fs.existsSync(dataDir)) fs.mkdirSync(dataDir, { recursive: true });
+  const gridPath = path.join(dataDir, 'hero-4grid.json');
+  const grid = req.body || {};
+  grid.updated_at = new Date().toISOString();
+  fs.writeFileSync(gridPath, JSON.stringify(grid, null, 2));
+  // Mirror to prod (non-blocking)
+  pushToProd(site, gridPath).catch(e => console.warn(`[hero-admin] push failed ${site}:`, e.message));
+  res.json({ ok: true, site, written: gridPath });
+});
+
+function pushToProd(site, localPath) {
+  return new Promise((resolve, reject) => {
+    const remote = `${REMOTE_HOST}:/var/www/${site}.com/data/hero-4grid.json`;
+    execFile('rsync', ['-az', '-e', 'ssh -o BatchMode=yes -o ConnectTimeout=8', localPath, remote], (err, stdout, stderr) => {
+      if (err) return reject(new Error(stderr || err.message));
+      resolve(stdout);
+    });
+  });
+}
+
+// ── ping / health ───────────────────────────────────────────────────────
+app.get('/api/health', (req, res) => res.json({ ok: true, sites: SITES.length, ts: Date.now() }));
+
+app.listen(PORT, '127.0.0.1', () => {
+  console.log(`[hero-admin] http://127.0.0.1:${PORT}  (${SITES.length} sites)`);
+});

(oldest)  ·  back to Dw Hero Admin  ·  fix(filter): preserve focus on prodFilter — split renderProd 4adc646 →