fix(pitch-deck): allow admin sessions to access investor routes

Admins in preview mode can now use /api/chat and other investor
endpoints without needing a separate investor login.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

pitch-deck/middleware.ts

@@ -67,6 +67,17 @@ export async function middleware(request: NextRequest) {
     }
   }
 
+  // ----- Allow admins to access investor routes (e.g. /api/chat in preview) -----
+  const adminFallback = request.cookies.get('pitch_admin_session')?.value
+  if (adminFallback && secret) {
+    try {
+      await jwtVerify(adminFallback, new TextEncoder().encode(secret), { audience: ADMIN_AUDIENCE })
+      return NextResponse.next()
+    } catch {
+      // Invalid admin token, fall through to investor auth
+    }
+  }
+
   // ----- Investor-gated routes (everything else) -----
   const token = request.cookies.get('pitch_session')?.value