v2.11.0 - Backend Resilience and Account Workspace Routing
May 3, 2026
AI Request Guards Extended Improved
Direct Anthropic-backed creator, business-plan, and crypto advisor functions now share a standard input guard so oversized prompts are trimmed before reaching the provider. The main AI Advisor path remains on the standard Claude API without the retired 1M-context beta header.
Supabase Helper RPCs Locked Down Security
Internal security-definer helpers for usage tracking, account triggers, AfroStream snapshots, and counter maintenance are now callable only by Postgres or the service role. A duplicate AfroStream snapshot index was removed after advisor verification.
Workspace API Routing Added Fix
The account workspace endpoint is now exposed through both Netlify redirect sources at
/api/workspace, preparing cloud-backed dashboard drafts and saved workspace items to work after deployment.Dashboard Sign-Out Recovery Hardened Fix
Dashboard sign-out now clears both host-only and domain-scoped auth cookies before returning to the signed-out state, and password reset links preserve the dashboard return path for a smoother account recovery flow.
AfroPoints Backend Env Handling Aligned Fix
AfroPoints leaderboard and shared market-data helpers now accept the same service-role env variants as the account and workspace APIs, while still failing closed when no server key is configured.