178 Commits

Author	SHA1	Message	Date
Benjamin Admin	ea39418738	Merge branch 'main' of ssh://gitea.meghsakha.com:22222/Benjamin_Boenisch/breakpilot-core	2026-04-15 18:21:15 +02:00
Benjamin Admin	7f88ed0ed2	feat(pitch-deck): add Benjamin Boenisch photo + update team data ... - Photo extracted from CV and placed in public/team/ - Team data updated via MCP (both versions): - Bio: 18+ years industry/strategy, SVP at ETO GRUPPE, 60 employees, M&A, 11 patents, VDMA/CyberLAGO memberships - Role: CEO & Gründer (was CEO & Co-Founder) - Expertise tags: Strategie & M&A, DSGVO/AI Act/CRA, IoT & Embedded, Web3 & Blockchain, 11 Patente - photo_url set to /team/benjamin-boenisch.png Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 18:20:23 +02:00
Sharang Parnerkar	44659a9dd7	fix(pitch-deck): serve /screenshots/* past the auth middleware ... The SDK Live Demo slide renders screenshots via next/image from /public/screenshots/*.png. Because /screenshots was not on the PUBLIC_PATHS list, every request was 307-redirected to /auth, and the next/image optimizer responded with HTTP 400 "The requested resource isn't a valid image." leaving the slide with empty dark frames (surfaced in the pitch preview). next/image also bypasses middleware itself (see the matcher), but the server-side fetch it performs for the source URL does hit middleware and carries no investor cookie, so whitelisting the path is required even for authenticated viewers. These PNGs are public marketing assets — there's no reason to gate them. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-15 18:20:16 +02:00
Sharang Parnerkar	87d7da0198	fix(pitch-deck): point SDK demo URL mockup at admin-dev.breakpilot.ai ... The SDK live-demo slide renders a fake browser URL bar to frame each screenshot. It used admin.breakpilot.ai, but the actual demo instance investors should be able to reach lives on admin-dev.breakpilot.ai. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-15 18:09:04 +02:00
Benjamin Admin	9675c1f896	Merge branch 'main' of ssh://gitea.meghsakha.com:22222/Benjamin_Boenisch/breakpilot-core	2026-04-15 18:00:45 +02:00
Benjamin Admin	9736476a0c	feat(pitch-deck): legal disclaimer slide + projection footer on financial slides ... New DisclaimerSlide (last slide): - Full liability disclaimer (German/English) - Confidentiality clause (purpose limitation, 3yr duration, Konstanz jurisdiction) - Status as private individual in founding preparation ProjectionFooter component on 4 financial slides: - FinancialsSlide, TheAskSlide, FinanzplanSlide, CapTableSlide - "Alle Finanzdaten sind Planzahlen" disclaimer Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 18:00:08 +02:00
Sharang Parnerkar	03d420c984	feat(pitch-deck): self-service magic-link reissue on /auth ... Investors who lost their session or whose invite token was already used can now enter their email on /auth to receive a fresh access link, without needing a manual re-invite from an admin. - New /api/auth/request-link endpoint looks up the investor by email, issues a new pitch_magic_links row, and emails the link via the existing sendMagicLinkEmail path. Response is generic regardless of whether the email exists (enumeration resistance) and silently no-ops for revoked investors. - Rate-limited both per-IP (authVerify preset) and per-email (magicLink preset, 3/hour — same ceiling as admin-invite/resend). - /auth page now renders an email form; submits to the new endpoint and shows a generic "if invited, link sent" confirmation. - Route-level tests cover validation, normalization, unknown email, revoked investor, and both rate-limit paths. - End-to-end regression test wires request-link + verify against an in-memory fake DB and asserts the full flow: original invite used → replay rejected → email submission → fresh link → verify succeeds. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-15 17:06:12 +02:00
Benjamin Admin	6b52719079	feat(pitch-deck): rename Traction → Meilensteine, update milestones data ... - i18n: Traction & Meilensteine → Meilensteine / Milestones - slideNames updated (DE + EN) - Chat display name updated - Milestones data replaced via MCP (both versions): 13 milestones chronologically: domains, DPMA, IHK, prototype, pilot customers, RAG pipeline, EUIPO, L-Bank, Gründerzuschuss, GmbH founding, onboarding, App Store, distribution - Metrics updated: 385 docs, 25k controls, 12 modules, etc. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 16:20:47 +02:00
Benjamin Admin	a5b7d62969	fix(pitch-deck): USP cards wider (290px), circle larger (440px), more height ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 15:49:28 +02:00
Benjamin Admin	ef9e3699b2	fix(pitch-deck): USP cards overlap — increase container height to 520px ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 15:06:33 +02:00
Benjamin Admin	440367b69d	feat(pitch-deck): USP font sizes match Solution slide, product modules updated ... USP slide: - Title/subtitle same as Solution (text-4xl/text-lg) - Card titles: text-base font-bold (was text-xs) - Card descriptions: text-sm text-white/50 (was text-[10px]) - Circle text: text-sm (was text-[11px]/text-[9px]) - Cards 240px wide with GlassCard wrapper Product slide: - "Integration in Kundenprozesse" → "AI Act Compliance" (UCCA, Betriebsrat) - "Cookie-Generator" → "Tender Matching" (RFQ gegen Codebase) - Remove "FR" badge from deployment options Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 14:45:14 +02:00
Benjamin Admin	801a5a43f5	feat(pitch-deck): USP slide — larger circle, title back, infinity hub ... - USP as slide title (GradientText) above - Circle doubled to 380px with spinning ring - Infinity symbol (∞) in center hub instead of text - Compliance left, Code right inside circle — larger font - 4 cards in corners (220px wide, larger text, ~5 lines each) - Cards spread to corners (top/bottom, left/right) - Dashed SVG lines connecting circle to cards Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 14:33:28 +02:00
Benjamin Admin	9c23068a4f	feat(pitch-deck): USP slide — large circle with cards on sides ... - Large spinning circle (320px) with USP hub in center - Compliance items left, Code items right inside circle - 4 arrows pointing outward to capability cards - 2 cards left (RFQ, Bidirectional), 2 cards right (Process, Continuous) - Longer descriptions (~5 lines per card) - Grid layout: cards | circle | cards Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 14:26:59 +02:00
Benjamin Admin	d359b7b734	fix(pitch-deck): HowItWorks line behind icons, remove France refs, SOM label ... - Connection line: starts/ends between icons, opaque icon background - Remove all "oder Frankreich/or France/oder FR/or FR" references - Market subtitle: remove "Der Maschinenbau" - SOM label: add "(nur Maschinen- und Anlagenbauer als Kernmarkt)" Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 13:46:21 +02:00
Benjamin Admin	bd37ff807e	fix(pitch-deck): USP slide complete redesign — grid layout ... Replace broken absolute positioning with clean grid layout: - Top: Compliance card | BreakPilot hub (spinning) | Code card - Arrows + sync labels between cards - Bottom: 4 capability cards in a row - No more floating text, no overlapping elements Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 13:25:03 +02:00
Benjamin Admin	40d2342086	fix(pitch-deck): fix JSX syntax error in USPSlide corner cards ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 13:14:03 +02:00
Benjamin Admin	adf3bf8301	feat(pitch-deck): USP slide redesign + add to sidebar ... - USP added to slideNames (DE+EN) and chat display names - Circular layout: BreakPilot hub center, rotating ring, Compliance & Code sections inside circle - 4 capability cards in corners connected by dashed lines - Removed variant toggle (kept variant A design) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 13:04:06 +02:00
Benjamin Admin	1b5ccd4dec	feat(pitch-deck): solution text fixes + USP bridge 3 variants ... - Solution: 30k → 15k+ EUR per year per application - Solution: DE oder FR → Deutschland - USP title: Unser USP → USP - USP bridge: 3 switchable variants (A: circular loop, B: infinity loop, C: hexagonal hub) with toggle buttons Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 12:57:30 +02:00
Benjamin Admin	b5d8f9aed3	feat(pitch-deck): add USP slide + update cover and problem texts ... - Cover: remove "für den Maschinenbau" from tagline - Problem subtitle: Maschinenbauer → Deutsche und europäische Unternehmen - New USP slide after Solution: bridge between compliance docs/audits and actual code implementation — RFQ verification, bidirectional sync, automated process compliance, continuous instead of annual checks Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 12:44:32 +02:00
Benjamin Admin	c8171b0a1e	chore(pitch-deck): trigger rebuild 2 ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 11:05:40 +02:00
Benjamin Admin	7e15ef3725	chore(pitch-deck): trigger rebuild for i18n Problem slide changes ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 08:54:03 +02:00
Benjamin Admin	93e319e9fb	feat(pitch-deck): rewrite Problem slide cards for investors ... - Card 1 (KI-Dilemma): clearer framing of sovereignty vs competitiveness - Card 2: Patriots Act → Patriot Act + FISA 702, Schrems II reference - Card 3: 50.000+ EUR → Nicht tragbar / Unsustainable, focus on AI Act, NIS2, CRA since 2024, competitive disadvantage vs US/Asia, supply chain costs, geopolitical pressure - Quote updated: Maschinenbauer → Produzierende Unternehmen Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 07:59:59 +02:00
Benjamin Admin	6626d2a8f9	fix(pitch-deck): fix ReferenceError in ChatFAB breaking 2nd message ... faqMatch (undefined) → faqMatches[0]. The undefined variable caused a ReferenceError after streaming completed, which the catch block turned into "Verbindung fehlgeschlagen" for every subsequent message. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 00:53:42 +02:00
Benjamin Admin	e5d0386cfb	feat(pitch-deck): add FISA 702 FAQ entries for investor agent ... 5 new FAQ entries covering: - FISA 702 basics (PRISM, Upstream, Schrems II) - EU cloud region myth (extraterritorial US law) - DSFA contradiction (risk acceptance vs risk elimination) - Market opportunity (structural independence) - BreakPilot architecture (BSI, SysEleven, Hetzner) Also: middleware fix to allow admin sessions on investor routes (enables chat in preview mode) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 00:27:47 +02:00
Benjamin Admin	ff071af2a0	fix(pitch-deck): allow admin sessions to access investor routes ... Admins in preview mode can now use /api/chat and other investor endpoints without needing a separate investor login. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 00:13:13 +02:00
Benjamin Admin	fcdcbc51e3	fix(pitch-deck): regulatory matrix header positioning ... - Regulatorien + Branche moved to top header row - Branche: white/70 instead of white/30 for readability - Regulatorien: indigo color instead of grey Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 23:59:53 +02:00
Benjamin Admin	7b8f8d4b5a	fix(pitch-deck): regulatory matrix — remove legend, stagger headers ... - Remove colored dot legend row (redundant with column headers) - Stagger column headers on 2 rows (odd/even) to save space - Last column: Reg. → Regulatorien Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 23:54:59 +02:00
Benjamin Admin	f385c612f5	fix(pitch-deck): regulatory matrix header alignment + labels ... - Column headers: centered text labels instead of icons - Remove colored dots from headers - Last column: # → Reg. (Regulierungen) - Consistent column width for last column Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 23:45:24 +02:00
Benjamin Admin	9166d9dade	fix(pitch-deck): resolve merge conflict in AIPipelineSlide — keep updated version ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 17:42:13 +02:00
Benjamin Admin	7ae5bc0fd5	feat(pitch-deck): overhaul AI Pipeline slide with real data ... - Hero stats: 75+ sources, 70k+ controls, 47k+ obligations - RAG tab: source categories with investor-friendly explanations (why court rulings matter, why frameworks define state of art) - Remove inflated numbers (was 110+ regulations, now accurate 75+) - Quality tab: continuous expansion, cross-regulation mapping - Remove NiBiS/education references (irrelevant for compliance) - All numbers verified against production database Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 17:40:27 +02:00
Sharang Parnerkar	242ed1101e	style(team): tighter card layout — equal height, equity pill, GitHub/LinkedIn detection ... - grid items-stretch so cards match height - Smaller avatar (16->64px) to free vertical space - Equity moved to a top-right pill (compact); decimals collapsed via equityDisplay() - Profile link icon auto-detects GitHub vs LinkedIn vs generic - Expertise tags get their own divider strip at card bottom — cleaner hierarchy - Card background lightened from 0.08 to 0.04 with subtle hover border Bio text itself shortened on the data side (both draft versions via admin API).	2026-04-14 16:25:37 +02:00
Sharang Parnerkar	8b2e9ac328	content(pitch-deck): tidy slide text — remove OVH, generalize issue tracker, add live support, Mac Studio option ... Solution slide: - Continuous Code Security: "Jira tickets" -> "tickets in the issue tracker of your choice" - German Cloud / Full Integration: removed OVH (now "BSI cloud DE or FR"), removed "AI task creation from audio", added "Live support via Jitsi (video) and Matrix (chat)", "Mac Mini" -> "Mac Mini/Studio" Products / Modular toolkit slide: - Regional bubble: "OVH FR" -> "FR" How It Works: - Cloud step: removed OVH and "pre-configured Mac Mini" mentions Engineering deep dive: - "Docker Containers" stat -> "Services"; "Coolify -> Hetzner" -> "orca -> Hetzner" - "Dockerfiles / Fully containerized" stat -> "Infra Components / orca (Rust) + infisical + pg + qdrant" - devopsStack: Coolify -> orca (Rust), Docker Compose -> Private Registry (registry.meghsakha.com), HashiCorp Vault -> Infisical, EU-Cloud list drops OVH - Service Architecture Infrastructure section: add orca (Rust), Infisical, Private Registry - Footer note drops OVH Chat / Presenter (consistency): - chat/route.ts system prompt: OVH removed, Jira-Integration -> Issue-Tracker-Integration - presenter-faq.ts + presenter-script.ts: OVH references removed across all answers, Jira mentioned alongside GitLab/Linear/Gitea as examples, Mac Mini -> Mac Mini/Studio Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 16:14:40 +02:00
Benjamin Admin	084d09e9bd	fix(pitch-deck): revert banner test text back to Draft ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 15:32:46 +02:00
Benjamin Admin	646143ce5a	Merge branch 'main' of ssh://gitea.meghsakha.com:22222/Benjamin_Boenisch/breakpilot-core	2026-04-14 15:20:56 +02:00
Benjamin Admin	00d802f965	test(pitch-deck): banner text Draft → Draft V1 — deployment test ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 15:20:41 +02:00
Sharang Parnerkar	ebb7575f2c	test: retrigger with http:// webhook URL	2026-04-14 09:32:36 +02:00
Sharang Parnerkar	8e92a93aa8	test: verify full CI pipeline with registry auth + orca webhook	2026-04-14 09:27:05 +02:00
Sharang Parnerkar	1af160eed0	test: trigger orca webhook via CI	2026-04-14 09:22:10 +02:00
Benjamin Admin	d7ed5ce8c5	fix(pitch-deck): add 8 missing slides to renderSlide switch ... ExecutiveSummary, RegulatoryLandscape, CapTable, Savings, SDKDemo, Strategy, Finanzplan, Glossary Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-13 22:36:14 +02:00
Benjamin Admin	512088ab93	feat(pitch-deck): HTTPS via Nginx reverse proxy on port 3012 ... - Add Nginx SSL server block for pitch-deck on port 3012 - Route through Nginx instead of direct container port - Restore secure cookie flag (requires HTTPS) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-13 17:13:52 +02:00
Benjamin Admin	32b5e0223d	fix(pitch-deck): use explicit PITCH_SECURE_COOKIE flag for cookie security ... HTTP access on local network was blocked by secure cookie flag when NODE_ENV=production. Now requires explicit opt-in via env var. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-13 17:11:36 +02:00
Benjamin Admin	c02a7bd8a6	feat(pitch-deck): show version name + status in preview banner ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-13 12:21:59 +02:00
Sharang Parnerkar	27479ee553	docs(mcp-server): add README + gitignore .mcp.json ... Setup instructions for the pitch version MCP server. .mcp.json contains the admin secret and is gitignored. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-13 10:36:54 +02:00
Sharang Parnerkar	82a5d62f44	feat(pitch-deck): MCP server for pitch version management via Claude Code ... Stdio MCP server that wraps the pitch-deck admin API, exposing 11 tools: list_versions, create_version, get_version, get_table_data, update_table_data, commit_version, fork_version, diff_versions, list_investors, assign_version, invite_investor. Authenticates via PITCH_ADMIN_SECRET bearer token against the deployed pitch-deck API. All existing auth, validation, and audit logging is reused — the MCP server is a thin adapter. Usage: add to ~/.claude/settings.json mcpServers, set PITCH_API_URL and PITCH_ADMIN_SECRET env vars. See mcp-server/README.md (to be added). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-13 10:32:45 +02:00
Sharang Parnerkar	ea752088f6	feat(pitch-admin): structured form editors, bilingual fields, version preview ... Replaces raw JSON textarea in version editor with proper form UIs: - Company: single-record form with side-by-side DE/EN tagline + mission - Team: expandable card list with bilingual role/bio, expertise tags - Financials: year-by-year table with numeric inputs - Market: TAM/SAM/SOM row table - Competitors: card list with strengths/weaknesses tag arrays - Features: card list with DE/EN names + checkbox matrix - Milestones: card list with DE/EN title/description + status dropdown - Metrics: card list with DE/EN labels - Funding: form + nested use_of_funds table - Products: card list with DE/EN capabilities + feature tag arrays - FM Scenarios: card list with color picker - FM Assumptions: row table Shared editor primitives (components/pitch-admin/editors/): BilingualField, FormField, ArrayField, RowTable, CardList "Edit as JSON" toggle preserved as escape hatch on every tab. Preview: admin clicks "Preview" on version editor → opens /pitch-preview/[versionId] in new tab showing the full pitch deck with that version's data. Admin-cookie gated (no investor auth). Yellow "PREVIEW MODE" banner at top. Also fixes the [object Object] inline table type cast in FM editor. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-10 10:34:42 +02:00
Sharang Parnerkar	edadf39445	fix(pitch-admin): render JSONB arrays as inline table editors ... Arrays of objects (funding_schedule, founder_salary_schedule, etc.) now render as editable tables with per-field inputs, add/remove row buttons, instead of a raw JSON string in a single text input. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-10 10:09:26 +02:00
Sharang Parnerkar	1c3cec2c06	feat(pitch-deck): full pitch versioning with git-style history (#4) ... Full pitch versioning: 12 data tables versioned as JSONB snapshots, git-style parent chain (draft→commit→fork), per-investor assignment, side-by-side diff engine, version-aware /api/data + /api/financial-model. Bug fixes: FM editor [object Object] for JSONB arrays, admin scroll. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-10 07:37:33 +00:00
Benjamin Admin	ee5241a7bc	merge: gitea/main — resolve pitch-deck conflicts (accept theirs) ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-09 14:43:32 +02:00
Sharang Parnerkar	c7ab569b2b	feat(pitch-deck): admin UI for investor + financial-model management (#3) ... Adds /pitch-admin dashboard with real bcrypt admin accounts and full audit attribution for every state-changing action. - pitch_admins + pitch_admin_sessions tables (migration 002) - pitch_audit_logs.admin_id + target_investor_id columns - lib/admin-auth.ts: bcryptjs, single-session, jose JWT with audience claim - middleware.ts: two-cookie gating with bearer-secret CLI fallback - 14 new API routes (admin-auth, dashboard, investor detail/edit/resend, admins CRUD, fm scenarios + assumptions PATCH) - 9 admin pages: login, dashboard, investors list/new/[id], audit, financial-model list/[id], admins - Bootstrap CLI: npm run admin:create - 36 vitest tests covering auth, admin-auth, rate-limit primitives Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-07 10:36:16 +00:00
Sharang Parnerkar	645973141c	feat(pitch-deck): passwordless investor auth, audit logs, snapshots & PWA (#2) ... Adds investor-facing access controls, persistence, and PWA support to the pitch deck: - Passwordless magic-link auth (jose JWT + nodemailer SMTP) - Per-investor audit logging (logins, slide views, assumption changes, chat) - Financial model snapshot persistence (auto-save/restore per investor) - PWA support (manifest, service worker, offline caching, branded icons) - Safeguards: email watermark overlay, security headers, content protection, rate limiting, IP/new-IP detection, single active session per investor - Admin API: invite, list investors, revoke, query audit logs - pitch-deck service added to docker-compose.coolify.yml Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-07 08:48:38 +00:00