koala73 Release Notes

What's Changed

• chore: bump version 2.11.1 → 2.11.2 (#9445)
• fix(health): track freshness of every OECD yield market (#9443)
• fix(docker): keep the qualified-signals e2e fixture inside the build context (#9439)
• chore(security): add OSS Scanner build image and threat model (#9441)
• fix(sidecar): give signed-out desktops an anonymous cloud session (#7548) (#9440)
• test(mcp): supply required country history arguments
• fix(mcp): rate-limit invalid panel calls
• test(mcp): reproduce invalid panel call burst bypass
• fix(mcp): validate stock research before reserving allowance
• test(mcp): cover stock validation before allowance reservation
• fix(review): validate food section commodity before quota
• fix(review): reject remaining local arguments before quota
• fix(review): preserve supply vulnerability country aliases
• fix(review): validate food commodity before allowance
• fix(mcp): reject semantic argument errors before allowance
• fix(mcp): mark argument validator as an internal helper
• fix(mcp): validate tool arguments before reserving allowance

Full Changelog: convex-deployed...v2.11.2

#9435 added historyDays to the entitlements table validator but not to syncEntitlementCache's argument validator. upsertEntitlements hands the action the exact features object it just wrote, and v.object rejects extra keys, so the immediate Redis cache sync failed after every entitlement write (Sentry WORLDMONITOR-18W). Paid users then waited for the delayed DB resync before the gateway saw their new plan.

Both sites now use one shared entitlementFeaturesValidator, so the table and the action cannot drift again. A convex-test runs the action against every catalog plan's features.

Claude-Session: https://claude.ai/code/session_014vKuhCYdCYEd9CwKCLiAaR

What's Changed

• chore: bump version 2.11.0 → 2.11.1 (#9428)
• fix(country): share default accepted assessments across clients (#9427)
• fix(desktop): Pro cloud access, Pro setup copy, and panels stuck loading (#9396) (#9424)
• docs(mcp): rewrite the quickstart as a connector walkthrough with screenshots (Claude, ChatGPT, Codex, Cursor) (#9426)
• fix(sentry): report handled brief degradations at warning level (#9423)
• fix(cii): score sustained crises and place geo events by real borders, worldwide (CII v11) (#9421)
• fix(data): label every figure with its own year (debt ticker, energy mix, resilience) (#9420)
• fix(map): skip country hit tests for SVG controls (#9422)

Full Changelog: convex-deployed...v2.11.1

What's Changed

• chore: bump version 2.10.0 → 2.11.0 (#9182)
• fix(mcp-proxy): pin upstream sockets to the DoH-vetted address (GHSA-887j) (#9038)
• fix(welcome): product-led homepage H1 and canonical meta description (#9156)
• build(deps): bump the npm-security group across 1 directory with 5 updates (#9125)
• fix(pro): keep mounted /pro inside phone viewports (#9176)
• fix: load country energy assets on cold visits (#9178)
• perf(pro): prerender the /pro nav and hero so desktop LCP lands at first paint (#9175)
• fix(country-brief): keep instability indicators in sync (#9179)
• fix: prevent unsupported sanctions links in country assessments (#9177)
• seo(glossary): show the live Pentagon Pizza Index level on its page (#9173)
• fix: keep startup alive when window.beta cannot be defined (#9168)
• fix(sentry): drop WebView autofill errors on the landing page (#9172)

Full Changelog: convex-deployed...v2.11.0

Why

One country brief fans out into dozens of MCP reads. Charging each read against Pro's 50/day allowance exhausted it during panel acceptance testing. Admit one bounded country request for one daily unit and reuse loaded observations across topic changes, return navigation and repeated questions.

Scope

open_country_brief issues a user/country-bound, expiring admission; atomic Redis scripts enforce one charge and a 64-uncached-read ceiling. Country assessment, coverage and fixed section readers reuse that admission and ready results. Explicit refresh starts a new paid request; retries share a stable request ID.

The embedded panel coalesces reads, caches ready data and displays remaining allowance/reset time. A pending refresh preserves a newly typed country choice.

Share the existing numeric country mappings so trade-reader scope checks retain Comtrade overrides. Update generated discovery metadata and usage documentation.

Tradeoffs

Keep progressive readers instead of adding another server-side country bundle. Retain the published 50/250 numerical allowances provisionally: reader costs are measured, but provider invoices and real daily usage are unavailable. The measurement report records the evidence and calibration gap.

Blast Radius

Grouping applies to dedicated paid MCP allowances. API plans retain weighted billing; current entitlement checks, UTC reset, no-refund rules and burst protection remain. The existing 60-call/minute burst can still throttle an immediate full refresh. Receipts expire within ten minutes and cannot authorize another user, country or arbitrary tool.

Verification

Same controlled 43-call country workflow: 43 calculated daily units under the old rule → 1 measured unit. Repeated country/topic selections: zero additional calls; refresh: one unit. Deliberately failed sections remain retryable.

2,681 scoped MCP tests passed, including real Lua admission/read-ceiling execution, concurrent opens, boundary reuse, stable retry expiry, world-production scope, forged scope, entitlement revocation, API billing and HTTP 429 behavior.

Built opaque-iframe acceptance: all five Chromium tests passed, including the delayed-refresh race, downloads, navigation reuse and initial/refresh quota denial. Desktop/mobile screenshots show controlled fixtures, not live source acceptance.

API/browser type checks, Biome, architecture boundaries, premium-fetch/API contracts, rate-limit policies, generated product facts, Markdown and repository safety gates passed; all 537 sidecar tests passed.

Native ChatGPT acceptance, production freshness and cloud-dollar calibration remain post-deployment checks. This PR does not establish store readiness.

Summary by CodeRabbit

New Features

Pro and Pro Business country briefs now use dedicated daily request allowances. Opening a brief includes its section loads, and reopening the same country within five minutes reuses the request; refreshing starts a new request.

Country views display usage limits and reset information, and reuse ready data for up to five minutes. Each admission allows up to 64 uncached reads.

Updates

Standalone MCP calls on paid plans cost one unit each. API plans continue to use weighted billing against their shared daily API budget.