296 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Benjamin Admin	7c17e484c1	fix(pitch-deck): add /team to public paths for team photo access ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 18:23:52 +02:00
Benjamin Admin	ea39418738	Merge branch 'main' of ssh://gitea.meghsakha.com:22222/Benjamin_Boenisch/breakpilot-core	2026-04-15 18:21:15 +02:00
Benjamin Admin	7f88ed0ed2	feat(pitch-deck): add Benjamin Boenisch photo + update team data ... - Photo extracted from CV and placed in public/team/ - Team data updated via MCP (both versions): - Bio: 18+ years industry/strategy, SVP at ETO GRUPPE, 60 employees, M&A, 11 patents, VDMA/CyberLAGO memberships - Role: CEO & Gründer (was CEO & Co-Founder) - Expertise tags: Strategie & M&A, DSGVO/AI Act/CRA, IoT & Embedded, Web3 & Blockchain, 11 Patente - photo_url set to /team/benjamin-boenisch.png Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 18:20:23 +02:00
Sharang Parnerkar	44659a9dd7	fix(pitch-deck): serve /screenshots/* past the auth middleware ... The SDK Live Demo slide renders screenshots via next/image from /public/screenshots/*.png. Because /screenshots was not on the PUBLIC_PATHS list, every request was 307-redirected to /auth, and the next/image optimizer responded with HTTP 400 "The requested resource isn't a valid image." leaving the slide with empty dark frames (surfaced in the pitch preview). next/image also bypasses middleware itself (see the matcher), but the server-side fetch it performs for the source URL does hit middleware and carries no investor cookie, so whitelisting the path is required even for authenticated viewers. These PNGs are public marketing assets — there's no reason to gate them. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-15 18:20:16 +02:00
Sharang Parnerkar	87d7da0198	fix(pitch-deck): point SDK demo URL mockup at admin-dev.breakpilot.ai ... The SDK live-demo slide renders a fake browser URL bar to frame each screenshot. It used admin.breakpilot.ai, but the actual demo instance investors should be able to reach lives on admin-dev.breakpilot.ai. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-15 18:09:04 +02:00
Benjamin Admin	9675c1f896	Merge branch 'main' of ssh://gitea.meghsakha.com:22222/Benjamin_Boenisch/breakpilot-core	2026-04-15 18:00:45 +02:00
Benjamin Admin	9736476a0c	feat(pitch-deck): legal disclaimer slide + projection footer on financial slides ... New DisclaimerSlide (last slide): - Full liability disclaimer (German/English) - Confidentiality clause (purpose limitation, 3yr duration, Konstanz jurisdiction) - Status as private individual in founding preparation ProjectionFooter component on 4 financial slides: - FinancialsSlide, TheAskSlide, FinanzplanSlide, CapTableSlide - "Alle Finanzdaten sind Planzahlen" disclaimer Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 18:00:08 +02:00
Sharang Parnerkar	03d420c984	feat(pitch-deck): self-service magic-link reissue on /auth ... Investors who lost their session or whose invite token was already used can now enter their email on /auth to receive a fresh access link, without needing a manual re-invite from an admin. - New /api/auth/request-link endpoint looks up the investor by email, issues a new pitch_magic_links row, and emails the link via the existing sendMagicLinkEmail path. Response is generic regardless of whether the email exists (enumeration resistance) and silently no-ops for revoked investors. - Rate-limited both per-IP (authVerify preset) and per-email (magicLink preset, 3/hour — same ceiling as admin-invite/resend). - /auth page now renders an email form; submits to the new endpoint and shows a generic "if invited, link sent" confirmation. - Route-level tests cover validation, normalization, unknown email, revoked investor, and both rate-limit paths. - End-to-end regression test wires request-link + verify against an in-memory fake DB and asserts the full flow: original invite used → replay rejected → email submission → fresh link → verify succeeds. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-15 17:06:12 +02:00
Benjamin Admin	6b52719079	feat(pitch-deck): rename Traction → Meilensteine, update milestones data ... - i18n: Traction & Meilensteine → Meilensteine / Milestones - slideNames updated (DE + EN) - Chat display name updated - Milestones data replaced via MCP (both versions): 13 milestones chronologically: domains, DPMA, IHK, prototype, pilot customers, RAG pipeline, EUIPO, L-Bank, Gründerzuschuss, GmbH founding, onboarding, App Store, distribution - Metrics updated: 385 docs, 25k controls, 12 modules, etc. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 16:20:47 +02:00
Benjamin Admin	a5b7d62969	fix(pitch-deck): USP cards wider (290px), circle larger (440px), more height ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 15:49:28 +02:00
Benjamin Admin	ef9e3699b2	fix(pitch-deck): USP cards overlap — increase container height to 520px ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 15:06:33 +02:00
Benjamin Admin	440367b69d	feat(pitch-deck): USP font sizes match Solution slide, product modules updated ... USP slide: - Title/subtitle same as Solution (text-4xl/text-lg) - Card titles: text-base font-bold (was text-xs) - Card descriptions: text-sm text-white/50 (was text-[10px]) - Circle text: text-sm (was text-[11px]/text-[9px]) - Cards 240px wide with GlassCard wrapper Product slide: - "Integration in Kundenprozesse" → "AI Act Compliance" (UCCA, Betriebsrat) - "Cookie-Generator" → "Tender Matching" (RFQ gegen Codebase) - Remove "FR" badge from deployment options Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 14:45:14 +02:00
Benjamin Admin	801a5a43f5	feat(pitch-deck): USP slide — larger circle, title back, infinity hub ... - USP as slide title (GradientText) above - Circle doubled to 380px with spinning ring - Infinity symbol (∞) in center hub instead of text - Compliance left, Code right inside circle — larger font - 4 cards in corners (220px wide, larger text, ~5 lines each) - Cards spread to corners (top/bottom, left/right) - Dashed SVG lines connecting circle to cards Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 14:33:28 +02:00
Benjamin Admin	9c23068a4f	feat(pitch-deck): USP slide — large circle with cards on sides ... - Large spinning circle (320px) with USP hub in center - Compliance items left, Code items right inside circle - 4 arrows pointing outward to capability cards - 2 cards left (RFQ, Bidirectional), 2 cards right (Process, Continuous) - Longer descriptions (~5 lines per card) - Grid layout: cards | circle | cards Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 14:26:59 +02:00
Benjamin Admin	d359b7b734	fix(pitch-deck): HowItWorks line behind icons, remove France refs, SOM label ... - Connection line: starts/ends between icons, opaque icon background - Remove all "oder Frankreich/or France/oder FR/or FR" references - Market subtitle: remove "Der Maschinenbau" - SOM label: add "(nur Maschinen- und Anlagenbauer als Kernmarkt)" Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 13:46:21 +02:00
Benjamin Admin	bd37ff807e	fix(pitch-deck): USP slide complete redesign — grid layout ... Replace broken absolute positioning with clean grid layout: - Top: Compliance card | BreakPilot hub (spinning) | Code card - Arrows + sync labels between cards - Bottom: 4 capability cards in a row - No more floating text, no overlapping elements Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 13:25:03 +02:00
Benjamin Admin	40d2342086	fix(pitch-deck): fix JSX syntax error in USPSlide corner cards ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 13:14:03 +02:00
Benjamin Admin	adf3bf8301	feat(pitch-deck): USP slide redesign + add to sidebar ... - USP added to slideNames (DE+EN) and chat display names - Circular layout: BreakPilot hub center, rotating ring, Compliance & Code sections inside circle - 4 capability cards in corners connected by dashed lines - Removed variant toggle (kept variant A design) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 13:04:06 +02:00
Benjamin Admin	1b5ccd4dec	feat(pitch-deck): solution text fixes + USP bridge 3 variants ... - Solution: 30k → 15k+ EUR per year per application - Solution: DE oder FR → Deutschland - USP title: Unser USP → USP - USP bridge: 3 switchable variants (A: circular loop, B: infinity loop, C: hexagonal hub) with toggle buttons Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 12:57:30 +02:00
Benjamin Admin	b5d8f9aed3	feat(pitch-deck): add USP slide + update cover and problem texts ... - Cover: remove "für den Maschinenbau" from tagline - Problem subtitle: Maschinenbauer → Deutsche und europäische Unternehmen - New USP slide after Solution: bridge between compliance docs/audits and actual code implementation — RFQ verification, bidirectional sync, automated process compliance, continuous instead of annual checks Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 12:44:32 +02:00
Benjamin Admin	c8171b0a1e	chore(pitch-deck): trigger rebuild 2 ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 11:05:40 +02:00
Benjamin Admin	7e15ef3725	chore(pitch-deck): trigger rebuild for i18n Problem slide changes ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 08:54:03 +02:00
Benjamin Admin	e3a3802f5b	chore(pitch-deck): trigger rebuild for i18n changes ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 08:53:17 +02:00
Benjamin Admin	93e319e9fb	feat(pitch-deck): rewrite Problem slide cards for investors ... - Card 1 (KI-Dilemma): clearer framing of sovereignty vs competitiveness - Card 2: Patriots Act → Patriot Act + FISA 702, Schrems II reference - Card 3: 50.000+ EUR → Nicht tragbar / Unsustainable, focus on AI Act, NIS2, CRA since 2024, competitive disadvantage vs US/Asia, supply chain costs, geopolitical pressure - Quote updated: Maschinenbauer → Produzierende Unternehmen Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 07:59:59 +02:00
Benjamin Admin	6626d2a8f9	fix(pitch-deck): fix ReferenceError in ChatFAB breaking 2nd message ... faqMatch (undefined) → faqMatches[0]. The undefined variable caused a ReferenceError after streaming completed, which the catch block turned into "Verbindung fehlgeschlagen" for every subsequent message. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 00:53:42 +02:00
Benjamin Admin	3dbc470158	feat: DSFA Generator — FISA 702 Risiken bei US-Cloud-Providern ... Erkennt automatisch US-Provider (AWS, Azure, Google, Microsoft, OpenAI, Anthropic, Oracle, Amazon) und fuegt 3 Drittland-Risiken hinzu: - FISA 702 Zugriff nicht ausschliessbar - EU-Serverstandort schuetzt nicht gegen US-Rechtszugriff - Fehlende Rechtsbehelfe fuer EU-Betroffene Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 00:47:21 +02:00
Benjamin Admin	e5d0386cfb	feat(pitch-deck): add FISA 702 FAQ entries for investor agent ... 5 new FAQ entries covering: - FISA 702 basics (PRISM, Upstream, Schrems II) - EU cloud region myth (extraterritorial US law) - DSFA contradiction (risk acceptance vs risk elimination) - Market opportunity (structural independence) - BreakPilot architecture (BSI, SysEleven, Hetzner) Also: middleware fix to allow admin sessions on investor routes (enables chat in preview mode) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 00:27:47 +02:00
Benjamin Admin	ff071af2a0	fix(pitch-deck): allow admin sessions to access investor routes ... Admins in preview mode can now use /api/chat and other investor endpoints without needing a separate investor login. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-15 00:13:13 +02:00
Benjamin Admin	fcdcbc51e3	fix(pitch-deck): regulatory matrix header positioning ... - Regulatorien + Branche moved to top header row - Branche: white/70 instead of white/30 for readability - Regulatorien: indigo color instead of grey Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 23:59:53 +02:00
Benjamin Admin	7b8f8d4b5a	fix(pitch-deck): regulatory matrix — remove legend, stagger headers ... - Remove colored dot legend row (redundant with column headers) - Stagger column headers on 2 rows (odd/even) to save space - Last column: Reg. → Regulatorien Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 23:54:59 +02:00
Benjamin Admin	f385c612f5	fix(pitch-deck): regulatory matrix header alignment + labels ... - Column headers: centered text labels instead of icons - Remove colored dots from headers - Last column: # → Reg. (Regulierungen) - Consistent column width for last column Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 23:45:24 +02:00
Benjamin Admin	9166d9dade	fix(pitch-deck): resolve merge conflict in AIPipelineSlide — keep updated version ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 17:42:13 +02:00
Benjamin Admin	7ae5bc0fd5	feat(pitch-deck): overhaul AI Pipeline slide with real data ... - Hero stats: 75+ sources, 70k+ controls, 47k+ obligations - RAG tab: source categories with investor-friendly explanations (why court rulings matter, why frameworks define state of art) - Remove inflated numbers (was 110+ regulations, now accurate 75+) - Quality tab: continuous expansion, cross-regulation mapping - Remove NiBiS/education references (irrelevant for compliance) - All numbers verified against production database Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 17:40:27 +02:00
Sharang Parnerkar	242ed1101e	style(team): tighter card layout — equal height, equity pill, GitHub/LinkedIn detection ... - grid items-stretch so cards match height - Smaller avatar (16->64px) to free vertical space - Equity moved to a top-right pill (compact); decimals collapsed via equityDisplay() - Profile link icon auto-detects GitHub vs LinkedIn vs generic - Expertise tags get their own divider strip at card bottom — cleaner hierarchy - Card background lightened from 0.08 to 0.04 with subtle hover border Bio text itself shortened on the data side (both draft versions via admin API).	2026-04-14 16:25:37 +02:00
Sharang Parnerkar	8b2e9ac328	content(pitch-deck): tidy slide text — remove OVH, generalize issue tracker, add live support, Mac Studio option ... Solution slide: - Continuous Code Security: "Jira tickets" -> "tickets in the issue tracker of your choice" - German Cloud / Full Integration: removed OVH (now "BSI cloud DE or FR"), removed "AI task creation from audio", added "Live support via Jitsi (video) and Matrix (chat)", "Mac Mini" -> "Mac Mini/Studio" Products / Modular toolkit slide: - Regional bubble: "OVH FR" -> "FR" How It Works: - Cloud step: removed OVH and "pre-configured Mac Mini" mentions Engineering deep dive: - "Docker Containers" stat -> "Services"; "Coolify -> Hetzner" -> "orca -> Hetzner" - "Dockerfiles / Fully containerized" stat -> "Infra Components / orca (Rust) + infisical + pg + qdrant" - devopsStack: Coolify -> orca (Rust), Docker Compose -> Private Registry (registry.meghsakha.com), HashiCorp Vault -> Infisical, EU-Cloud list drops OVH - Service Architecture Infrastructure section: add orca (Rust), Infisical, Private Registry - Footer note drops OVH Chat / Presenter (consistency): - chat/route.ts system prompt: OVH removed, Jira-Integration -> Issue-Tracker-Integration - presenter-faq.ts + presenter-script.ts: OVH references removed across all answers, Jira mentioned alongside GitLab/Linear/Gitea as examples, Mac Mini -> Mac Mini/Studio Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 16:14:40 +02:00
Benjamin Admin	084d09e9bd	fix(pitch-deck): revert banner test text back to Draft ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 15:32:46 +02:00
Benjamin Admin	646143ce5a	Merge branch 'main' of ssh://gitea.meghsakha.com:22222/Benjamin_Boenisch/breakpilot-core	2026-04-14 15:20:56 +02:00
Benjamin Admin	00d802f965	test(pitch-deck): banner text Draft → Draft V1 — deployment test ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 15:20:41 +02:00
Sharang Parnerkar	ebb7575f2c	test: retrigger with http:// webhook URL	2026-04-14 09:32:36 +02:00
Sharang Parnerkar	d0539d0f2f	ci: use http:// for orca webhook (port 6880 serves plain HTTP)	2026-04-14 09:32:08 +02:00
Sharang Parnerkar	8e92a93aa8	test: verify full CI pipeline with registry auth + orca webhook	2026-04-14 09:27:05 +02:00
Sharang Parnerkar	f794347827	ci: add docker login step for registry.meghsakha.com ... Requires Gitea Actions secrets: REGISTRY_USERNAME, REGISTRY_PASSWORD	2026-04-14 09:26:12 +02:00
Sharang Parnerkar	1af160eed0	test: trigger orca webhook via CI	2026-04-14 09:22:10 +02:00
Sharang Parnerkar	eb118ebf92	ci: re-add HMAC-SHA256 signing on orca webhook (ORCA_WEBHOOK_SECRET)	2026-04-14 08:31:29 +02:00
Sharang Parnerkar	dbb476cc3b	ci: drop HMAC signing (orca webhooks have no secret by default)	2026-04-14 08:27:22 +02:00
Sharang Parnerkar	9345efc3f0	ci(pipeline): trigger orca redeploy after image push, remove coolify ... build-pitch-deck workflow now posts an HMAC-signed push event to orca's webhook endpoint after the image is built + pushed. This avoids the race where orca would otherwise redeploy with the old :latest image before CI finishes pushing the new one. Removed the obsolete deploy-coolify.yml (wrong branch, wrong system) and stripped the deploy-coolify job from ci.yaml. Requires Gitea Actions secret: ORCA_WEBHOOK_SECRET_PITCH_DECK	2026-04-14 08:20:05 +02:00
Benjamin Admin	c4e993e3f8	fix: Leere Controls (title/objective=None) filtern vor Store ... - Batch-Postprocessing: Controls mit title/objective = None/null/"" werden gefiltert und nicht gespeichert. Title wird aus Objective abgeleitet falls nur Title fehlt. - _store_control: Pre-store Quality Guard lehnt leere Controls ab - Verhindert "None"-Controls die durch LLM-Parsing-Fehler entstehen Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 06:59:47 +02:00
Benjamin Admin	a58d1aa403	fix: KRITISCH — 12 Pipeline-Bugs gefixt, 36.000 verlorene Controls retten ... Root Cause: _generate_control_id erzeugte ID-Kollisionen (String-Sort statt numeric), ON CONFLICT DO NOTHING verwarf Controls stillschweigend, Chunks wurden als "processed" markiert obwohl Store fehlschlug → permanent verloren. Fixes: 1. _generate_control_id: Numeric MAX statt String-Sort, Collision Guard mit UUID-Suffix Fallback, Exception wird geloggt statt verschluckt 2. _store_control: ON CONFLICT DO UPDATE statt DO NOTHING → ID immer returned 3. Store-Logik: Chunk wird bei store_failed NICHT mehr als processed markiert → Retry beim naechsten Lauf moeglich 4. Counter: controls_generated nur bei erfolgreichem Store inkrementiert Neue Counter: controls_stored + controls_store_failed 5. Anthropic API: HTTP 429/500/502/503/504 werden jetzt retried (2 Versuche) 6. Monitoring: Progress-Log zeigt Store-Rate (%), ALARM bei <80% 7. Post-Job Validierung: Vergleicht Generated vs Stored vs DB-Realitaet WARNUNG wenn store_failed > 0, KRITISCH wenn Rate < 90% Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-14 00:39:12 +02:00
Benjamin Admin	d7ed5ce8c5	fix(pitch-deck): add 8 missing slides to renderSlide switch ... ExecutiveSummary, RegulatoryLandscape, CapTable, Savings, SDKDemo, Strategy, Finanzplan, Glossary Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-13 22:36:14 +02:00
Benjamin Admin	512088ab93	feat(pitch-deck): HTTPS via Nginx reverse proxy on port 3012 ... - Add Nginx SSL server block for pitch-deck on port 3012 - Route through Nginx instead of direct container port - Restore secure cookie flag (requires HTTPS) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-13 17:13:52 +02:00