feat(pitch-deck): passwordless investor auth, audit logs, snapshots & PWA (#2)

Browse Source

Adds investor-facing access controls, persistence, and PWA support to the pitch deck:

- Passwordless magic-link auth (jose JWT + nodemailer SMTP)
- Per-investor audit logging (logins, slide views, assumption changes, chat)
- Financial model snapshot persistence (auto-save/restore per investor)
- PWA support (manifest, service worker, offline caching, branded icons)
- Safeguards: email watermark overlay, security headers, content protection,
  rate limiting, IP/new-IP detection, single active session per investor
- Admin API: invite, list investors, revoke, query audit logs
- pitch-deck service added to docker-compose.coolify.yml

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

This commit was merged in pull request #2.

...

This commit is contained in:

Sharang Parnerkar

2026-04-07 08:48:38 +00:00

parent 3a2567b44d

commit 645973141c

35 changed files with 4232 additions and 14 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

BIN

pitch-deck/public/icons/icon-192.png Normal file

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 3.5 KiB

BIN

pitch-deck/public/icons/icon-512.png Normal file

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 14 KiB

BIN

pitch-deck/public/icons/icon-maskable-512.png Normal file

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 10 KiB