← All investors
[ INVESTOR ] {investor.firm.toUpperCase()}
{investor.name}
{investor.email}
{investor.status}
↗ Email
⌕ Reset access
⏵ Schedule call
d.downloaded).length} />
{/* Doc engagement */}
{investor.docs.filter(d => ROOM_FILES.find(x => x.id === d.id)).map(d => {
const f = ROOM_FILES.find(x => x.id === d.id);
return (
{f.title || f.name}
{d.opens} {d.opens === 1 ? 'open' : 'opens'}
{fmtSec(d.time)}
{d.downloaded ? '↓ YES' : '—'}
0 ? 'var(--text-secondary)' : 'var(--text-tertiary)', textAlign: 'right' }}>
{d.opens > 0 ? '✓' : '○'}
);
})}
{investor.activity.map((v, i) => (
0 ? 4 : 0)}px`,
background: v > 0 ? 'var(--gold)' : 'var(--border)',
minHeight: 2,
}} />
))}
24H AGO 18H 12H 6H NOW
{/* Profile sidecar */}
ONBOARDING_ANSWERS
SUGGESTED_ACTION
{investor.score >= 80
? `Hot — ${investor.name.split(' ')[0]} has reviewed all key docs. Reach out to schedule diligence.`
: investor.score >= 50
? `Warm — partial review. Follow up with a specific question about their stated focus.`
: `Cold — minimal engagement. Consider a re-engagement email or ping.`}
↗ {investor.score >= 80 ? 'Schedule diligence' : investor.score >= 50 ? 'Send follow-up' : 'Re-engage'}
);
}
function ProfileRow({ label, value, last }) {
return (
);
}
function DocsAnalytics() {
return (
[ ADMIN_VIEW ] DOCUMENTS
Documents
Document
Section
Total opens
Avg time
Avg scroll
Downloads
Reach
{ROOM_FILES.map(f => {
const opens = FAKE_INVESTORS.reduce((s, i) => s + (i.docs.find(d => d.id === f.id)?.opens || 0), 0);
const totalTime = FAKE_INVESTORS.reduce((s, i) => s + (i.docs.find(d => d.id === f.id)?.time || 0), 0);
const avgTime = opens ? Math.round(totalTime / opens) : 0;
const scrollSum = FAKE_INVESTORS.reduce((s, i) => s + (i.docs.find(d => d.id === f.id)?.scroll || 0), 0);
const reach = FAKE_INVESTORS.filter(i => (i.docs.find(d => d.id === f.id)?.opens || 0) > 0).length;
const avgScroll = reach ? Math.round(scrollSum / FAKE_INVESTORS.length) : 0;
const dl = FAKE_INVESTORS.reduce((s, i) => s + (i.docs.find(d => d.id === f.id)?.downloaded ? 1 : 0), 0);
return (
{f.title || f.name}
{f.section} {opens} {fmtSec(avgTime)}
{dl} {reach}/{FAKE_INVESTORS.length}
);
})}
);
}
function ActivityLog() {
const events = [
{ who: 'Marcus Reed', firm: 'BWFO', what: 'opened', target: 'Returns Model & Sensitivities.xlsx', when: '14m ago', icon: '○' },
{ who: 'Marcus Reed', firm: 'BWFO', what: 'downloaded', target: 'Term Sheet — Series Seed.docx', when: '22m ago', icon: '↓' },
{ who: 'Jane Catalano', firm: 'Latticework', what: 'finished reading', target: 'Vault Architecture Memo.html', when: '2h ago', icon: '✓' },
{ who: 'Ravi Anand', firm: 'Self', what: 'opened', target: 'Investor Deck.pdf', when: '5h ago', icon: '○' },
{ who: 'Ravi Anand', firm: 'Self', what: 'scrolled to 60%', target: 'Returns Model & Sensitivities.xlsx', when: '5h ago', icon: '▼' },
{ who: 'Yuki Tanaka', firm: 'Octant DAO', what: 'opened', target: 'ArbVault.sol', when: '8h ago', icon: '○' },
{ who: 'Sara Lindqvist', firm: 'NSC', what: 'opened', target: 'Investor Deck.pdf', when: '1d ago', icon: '○' },
{ who: 'Marcus Reed', firm: 'BWFO', what: 'invited', target: '+ accepted invite', when: '1d ago', icon: '+' },
{ who: 'Eli Brooks', firm: 'Veridian', what: 'opened', target: 'Investor Deck.pdf', when: '6d ago', icon: '○' },
];
return (
[ ADMIN_VIEW ] ACTIVITY_LOG
Activity
{events.map((e, i) => (
{e.icon}
{e.who}
({e.firm})
{e.what}
{e.target}
{e.when}
))}
);
}
// ── Invites: live API-backed admin tab ────────────────────
const ADMIN_KEY_STORAGE = 'arbcap_admin_key';
function getAdminKey() {
try { return localStorage.getItem(ADMIN_KEY_STORAGE) || ''; } catch (e) { return ''; }
}
function saveAdminKey(k) {
try { localStorage.setItem(ADMIN_KEY_STORAGE, k); } catch (e) {}
}
function clearAdminKey() {
try { localStorage.removeItem(ADMIN_KEY_STORAGE); } catch (e) {}
}
function relTime(iso) {
if (!iso) return '—';
const ms = Date.now() - new Date(iso).getTime();
if (ms < 0 || isNaN(ms)) return '—';
const s = Math.floor(ms / 1000);
if (s < 60) return 'just now';
const m = Math.floor(s / 60);
if (m < 60) return `${m}m ago`;
const h = Math.floor(m / 60);
if (h < 24) return `${h}h ago`;
const d = Math.floor(h / 24);
if (d < 30) return `${d}d ago`;
return new Date(iso).toISOString().slice(0, 10);
}
async function adminFetch(path, opts = {}) {
const adminKey = getAdminKey();
const headers = Object.assign({}, opts.headers || {}, { 'x-admin-key': adminKey });
if (opts.body && !headers['Content-Type']) headers['Content-Type'] = 'application/json';
const res = await fetch(path, Object.assign({}, opts, { headers, credentials: 'include' }));
if (res.status === 401) {
const e = new Error('admin_unauthorized');
e.code = 401;
throw e;
}
return res;
}
function InvitesTab() {
const [list, setList] = React.useState([]);
const [loading, setLoading] = React.useState(true);
const [error, setError] = React.useState(null);
const [keyPromptOpen, setKeyPromptOpen] = React.useState(!getAdminKey());
const [keyDraft, setKeyDraft] = React.useState('');
const [draftEmail, setDraftEmail] = React.useState('');
const [draftName, setDraftName] = React.useState('');
const [draftFirm, setDraftFirm] = React.useState('');
const [busy, setBusy] = React.useState(false);
const [lastCreated, setLastCreated] = React.useState(null);
const [copied, setCopied] = React.useState(false);
const valid = /^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(draftEmail);
const refresh = React.useCallback(async () => {
if (!getAdminKey()) { setKeyPromptOpen(true); setLoading(false); return; }
setLoading(true);
setError(null);
try {
const r = await adminFetch('/api/invite/list');
if (!r.ok) {
setError(`HTTP ${r.status}`); setLoading(false); return;
}
const data = await r.json();
setList(data.invites || []);
} catch (e) {
if (e.code === 401) { clearAdminKey(); setKeyPromptOpen(true); }
else setError(e.message);
} finally {
setLoading(false);
}
}, []);
React.useEffect(() => { refresh(); }, [refresh]);
const unlockAdmin = async () => {
if (!keyDraft.trim()) return;
saveAdminKey(keyDraft.trim());
setKeyPromptOpen(false);
setKeyDraft('');
await refresh();
};
const create = async () => {
if (!valid || busy) return;
setBusy(true); setError(null);
try {
const r = await adminFetch('/api/invite/create', {
method: 'POST',
body: JSON.stringify({ email: draftEmail, name: draftName, firm: draftFirm }),
});
const data = await r.json();
if (!r.ok) { setError(data.error || `HTTP ${r.status}`); return; }
setLastCreated({ ...data.invite, url: data.url });
setDraftEmail(''); setDraftName(''); setDraftFirm('');
await refresh();
} catch (e) {
if (e.code === 401) { clearAdminKey(); setKeyPromptOpen(true); }
else setError(e.message);
} finally {
setBusy(false);
}
};
const copyUrl = (url) => {
if (!url || typeof navigator === 'undefined' || !navigator.clipboard) return;
navigator.clipboard.writeText(url).catch(() => {});
setCopied(true);
setTimeout(() => setCopied(false), 1400);
};
const revoke = async (id) => {
if (!confirm('Revoke this invite? Active sessions on this link will be kicked.')) return;
try {
await adminFetch('/api/invite/revoke', { method: 'POST', body: JSON.stringify({ id }) });
await refresh();
} catch (e) {
if (e.code === 401) { clearAdminKey(); setKeyPromptOpen(true); }
else setError(e.message);
}
};
if (keyPromptOpen) {
return (
[ ADMIN_VIEW ] UNLOCK
Admin key required
Paste the ADMIN_KEY from your environment. Stored in this browser only.
Unlock
);
}
return (
[ ADMIN_VIEW ] INVITES
Invites
Each link is bound to one email. Drop in a cold email or share after a first call.
{/* Create */}
{busy ? '…' : '+ Generate link'}
{error && (
{error}
)}
{lastCreated && (
✓ LINK_READY — copy now (the URL is only shown at issuance)
copyUrl(lastCreated.url)}>
{copied ? '✓ Copied' : '⎘ Copy'}
Bound to {lastCreated.email} · expires {relTime(lastCreated.expires_at)} · re-issue from this form to share again
)}
{/* List */}
{loading ? (
LOADING…
) : list.length === 0 ? (
No invites yet. Mint one above.
) : (
Recipient
Firm
Created
Opens
Last seen
Status
{list.map((r, i) => (
{String(i+1).padStart(2,'0')}
{r.name || r.email.split('@')[0]}
{r.email}
{r.firm || '—'} {relTime(r.created_at)} {r.opens || 0} {relTime(r.last_seen)}
{r.status}
revoke(r.id)} disabled={r.status === 'REVOKED'}>×
))}
)}
);
}
Object.assign(window, { Admin, FAKE_INVESTORS, fmtSec });