Nine until six

The mistake

A presentational "open Mon-Fri 9-6" string from the catalogue gets promoted into an actual request gate, and the check is registered as global middleware rather than scoped to the storefront routes. Because it runs ahead of routing, it matches every path on the domain — including /admin and the staff sign-in endpoint — and returns the closed page instead of the login form. There is no bypass for authenticated staff or for an override flag, so the switch that would disable the schedule sits behind the schedule itself until the window reopens.