Merge pull request #542 from Uniswap/release/next-to-main-20260625-180504

chore(release): promote next to production (2026-06-25)

Author: wkoutre

.claude-plugin/marketplace.json

@@ -30,6 +30,11 @@
       "source": "./packages/plugins/development-productivity",
       "description": "Documentation, research, test generation, and prompt optimization tools"
     },
+    {
+      "name": "skill-management",
+      "source": "./packages/plugins/skill-management",
+      "description": "Audit, map, mine, and improve your Claude Code skills, agents, and commands"
+    },
     {
       "name": "uniswap-integrations",
       "source": "./packages/plugins/uniswap-integrations",

.claude/rules/response-links-summary.md

@@ -0,0 +1,31 @@
+# Response Links Summary
+
+## Instructions for Claude Code
+
+When you finish a turn — that is, you are stopping, **not** asking the user a question and **not** mid-task — end the response with a short `## Links` block: a one-glance, copy-pasteable index of everything actionable from the turn, so the reader doesn't have to scroll back through the work to find it.
+
+## Critical Rules - ALWAYS FOLLOW
+
+### 1. End a stopping turn with a `## Links` block
+
+Include every link that is actionable or referenceable from the turn:
+
+- **PRs / branches** — any PR opened this session AND any PR referenced in-context.
+- **Issues / tickets / incidents** — anything touched or referenced (Jira, Linear, incident.io, GitHub issues, etc.).
+- **Observability** — dashboards, monitors, notebooks, SLOs, CI/build runs, or traces you cited.
+- **Docs / pages** — Notion, Confluence, design docs, runbooks you surfaced.
+
+Group by type when there are several; omit a group that's empty. If there are genuinely no links, **skip the section entirely** — never emit an empty heading.
+
+### 2. Always use full, clickable URLs — never bare IDs
+
+- Render `https://github.com/<org>/<repo>/pull/1234`, not `#1234`.
+- Whenever you reference an external component by ID or name in a summary (a monitor, dashboard, ticket, build job, etc.), link it directly — a bare ID forces the reader to go search for it. This applies to **every** summary that names such a component, not only the on-stop block.
+
+### 3. Keep it a trailing index, not the answer
+
+The `## Links` block sits **below** the substantive response and is just URLs plus a few words of label. Don't let it crowd out or replace the actual answer.
+
+## Why
+
+Readers act on these links immediately — open the PR, check the live dashboard, read the ticket. A trailing, grouped, fully-linked index turns "scroll back and reconstruct what was touched" into one glance, and avoids the common failure of citing a bare ID that the reader then has to hunt down.

.github/REUSABLE_WORKFLOWS.md

@@ -218,7 +218,7 @@ Notify Release (_notify-release.yml)
 
 | Input                           | Required | Default                          | Description                                                                        |
 | ------------------------------- | -------- | -------------------------------- | ---------------------------------------------------------------------------------- |
-| `model`                         | No       | `'claude-sonnet-4-6'`            | Claude model to use (Sonnet 4.6, Opus 4.7, or Haiku 4.5)                           |
+| `model`                         | No       | `'claude-sonnet-4-6'`            | Claude model to use (Sonnet 4.6, Opus 4.8, or Haiku 4.5)                           |
 | `allowed_tools`                 | No       | (permissive defaults, see below) | YAML string specifying which tools Claude can use (file operations, bash commands) |
 | `custom_instructions`           | No       | `'Be sure to follow rules...'`   | Additional instructions for Claude beyond CLAUDE.md files                          |
 | `timeout_minutes`               | No       | `'10'`                           | Maximum execution time in minutes (prevents runaway costs)                         |
@@ -282,7 +282,7 @@ The following settings are intentionally fixed to ensure consistent security and
 
 - **Interactive AI Assistance**: Respond to `@claude` mentions anywhere in GitHub
 - **Multiple Trigger Points**: Works in issue comments, PR comments, review comments, and reviews
-- **Configurable Model**: Choose between Sonnet 4.6 (balanced), Opus 4.7 (thorough), or Haiku 4.5 (fast)
+- **Configurable Model**: Choose between Sonnet 4.6 (balanced), Opus 4.8 (thorough), or Haiku 4.5 (fast)
 - **Flexible Tool Permissions**: Control what Claude can do (read-only, read-write, or custom)
 - **Custom Instructions**: Add repository-specific guidelines and standards
 - **Bot Filtering**: Automatically excludes bot comments to prevent loops
@@ -334,7 +334,7 @@ jobs:
     secrets:
       ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
     with:
-      model: 'claude-opus-4-7'
+      model: 'claude-opus-4-8'
       timeout_minutes: '15' # Opus may need more time
 ```
 
@@ -423,7 +423,7 @@ jobs:
     secrets:
       ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
     with:
-      model: 'claude-opus-4-7'
+      model: 'claude-opus-4-8'
       timeout_minutes: '15'
 ```
 
@@ -546,7 +546,7 @@ Claude says it doesn't have permission to perform action
 2. **Choose the Right Model**:
 
    - **Sonnet 4.6** (default): Best balance of speed, capability, and cost for 90% of use cases
-   - **Opus 4.7**: Reserve for complex architectural reviews or critical security analysis
+   - **Opus 4.8**: Reserve for complex architectural reviews or critical security analysis
    - **Haiku 4.5**: Fast and cost-effective for simple questions, quick lookups, or high-volume usage
 
 3. **Set Appropriate Timeouts**:
@@ -619,7 +619,7 @@ jobs:
     secrets:
       ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
     with:
-      model: 'claude-opus-4-7'
+      model: 'claude-opus-4-8'
       timeout_minutes: '15'
 ```
 
@@ -640,7 +640,7 @@ claude-deep:
     contains(github.event.pull_request.labels.*.name, 'deep-analysis') &&
     # ... (rest of if condition)
   with:
-    model: 'claude-opus-4-7'
+    model: 'claude-opus-4-8'
 ```
 
 #### Integration with Other Workflows
@@ -691,7 +691,7 @@ Tips for managing Claude API costs effectively:
 
    - Haiku 4.5: Most cost-effective for simple tasks
    - Sonnet 4.6: ~$3 per 1M input tokens, ~$15 per 1M output tokens (default, recommended)
-   - Opus 4.7: ~$5 per 1M input tokens, ~$25 per 1M output tokens (reserve for complex tasks)
+   - Opus 4.8: ~$5 per 1M input tokens, ~$25 per 1M output tokens (reserve for complex tasks)
    - Typical interaction: 5K-50K tokens (mostly input)
 
 2. **Timeout Strategy**:
@@ -1022,20 +1022,20 @@ This workflow does not have outputs (reviews are submitted directly to GitHub PR
 
 **Note**: You must provide either `ANTHROPIC_API_KEY` or `CLAUDE_CODE_OAUTH_TOKEN`. The secrets must be passed explicitly from the calling workflow.
 
-#### Permissions Required (Fixed)
+#### Permissions Required (caller must grant these)
 
-These permissions are **fixed** in the reusable workflow and cannot be overridden:
+The **calling** workflow must grant its calling job at least these permissions. A reusable workflow cannot be granted more than its caller provides, so granting fewer (for example `contents: read` here) makes GitHub reject the run with a silent `startup_failure` (a ~1s run with no logs):
 
 ```yaml
 permissions:
   id-token: write # Required for OIDC authentication
-  contents: read # Required to read repository code
+  contents: write # Required to read code AND push commits when auto_fix is enabled
   pull-requests: write # Required to comment and submit reviews
   issues: read # Required to read PR discussions
   actions: read # Required to check CI status
 ```
 
-**Note**: You do NOT need to specify these permissions in your calling workflow - they are automatically set by the reusable workflow.
+**Note**: These must be declared on the calling job. See `.github/workflows/examples/08-claude-code-review-basic.yml` for a complete caller.
 
 #### Fixed Settings (Cannot be Overridden)
 
@@ -1117,7 +1117,7 @@ jobs:
       pr_number: ${{ github.event.pull_request.number }}
       base_ref: ${{ github.base_ref }}
       # Use Opus for PRs with 'claude-opus' label, otherwise Sonnet
-      model: ${{ contains(github.event.pull_request.labels.*.name, 'claude-opus') && 'claude-opus-4-7' || 'claude-sonnet-4-6' }}
+      model: ${{ contains(github.event.pull_request.labels.*.name, 'claude-opus') && 'claude-opus-4-8' || 'claude-sonnet-4-6' }}
       max_turns: 20 # Allow more turns for thorough Opus reviews
       timeout_minutes: 45 # Longer timeout for complex reviews
     secrets:
@@ -1501,7 +1501,7 @@ Claude submitted multiple reviews instead of updating one
 2. **Model Selection**:
 
    - **Sonnet 4.6** (default): Best balance for most PRs (~80% of use cases)
-   - **Opus 4.7**: Reserve for critical code, security-sensitive changes, or complex architectures
+   - **Opus 4.8**: Reserve for critical code, security-sensitive changes, or complex architectures
    - Use labels to let developers request deeper reviews when needed
 
 3. **Custom Prompts**:
@@ -1596,7 +1596,7 @@ jobs:
     with:
       pr_number: ${{ github.event.pull_request.number }}
       base_ref: ${{ github.base_ref }}
-      model: 'claude-opus-4-7'
+      model: 'claude-opus-4-8'
       custom_prompt_path: '.github/prompts/security-review.md'
       timeout_minutes: 60
     secrets:

.github/workflows/CLAUDE.md

@@ -431,7 +431,7 @@ with:
   pr_number: ${{ github.event.pull_request.number }}
   base_ref: ${{ github.base_ref }}
   auto_fix: true # Enable automatic fixing of issues
-  auto_fix_model: 'claude-opus-4-7' # Use Opus for better fixes (optional)
+  auto_fix_model: 'claude-opus-4-8' # Use Opus for better fixes (optional)
 secrets:
   ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
   WORKFLOW_PAT: ${{ secrets.WORKFLOW_PAT }} # Required for pushing fixes
@@ -638,7 +638,7 @@ uses: Uniswap/ai-toolkit/.github/workflows/_claude-docs-check.yml@main
 with:
   pr_number: ${{ github.event.pull_request.number }}
   auto_fix: true # Enable automatic fixing of documentation issues
-  auto_fix_model: 'claude-opus-4-7' # Use Opus for better fixes (optional)
+  auto_fix_model: 'claude-opus-4-8' # Use Opus for better fixes (optional)
 secrets:
   ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
   WORKFLOW_PAT: ${{ secrets.WORKFLOW_PAT }} # Required for pushing fixes
@@ -950,7 +950,7 @@ If both are provided, OAuth token takes precedence. At least one authentication
 
 | Input                     | Default           | Description                                     |
 | ------------------------- | ----------------- | ----------------------------------------------- |
-| `model`                   | `claude-opus-4-7` | Claude model to use                             |
+| `model`                   | `claude-opus-4-8` | Claude model to use                             |
 | `max_turns`               | `150`             | Maximum conversation turns                      |
 | `debug_mode`              | `true`            | Show full Claude output                         |
 | `timeout_minutes`         | `60`              | Job timeout                                     |
@@ -989,7 +989,7 @@ with:
   issue_url: ${{ matrix.issue_url }}
   branch_name: ${{ matrix.branch_name }}
   target_branch: 'next'
-  model: 'claude-opus-4-7'
+  model: 'claude-opus-4-8'
   debug_mode: true
   pr_type: 'draft' # or 'published' for non-draft PRs
 secrets:
@@ -1009,7 +1009,7 @@ with:
   issue_url: ${{ matrix.issue_url }}
   branch_name: ${{ matrix.branch_name }}
   target_branch: 'next'
-  model: 'claude-opus-4-7'
+  model: 'claude-opus-4-8'
   debug_mode: true
   pr_type: 'draft'
 secrets:
@@ -1101,7 +1101,7 @@ gh workflow run update-action-versions.yml
 gh workflow run update-action-versions.yml -f dry_run=true
 
 # Use Opus model
-gh workflow run update-action-versions.yml -f model=claude-opus-4-7
+gh workflow run update-action-versions.yml -f model=claude-opus-4-8
 ```
 
 **Usage example (API Key):**
@@ -1237,7 +1237,7 @@ gh workflow run dev-ai-newsletter.yml -f dry_run=true
 gh workflow run dev-ai-newsletter.yml -f days_back=14
 
 # Use Opus model for better quality
-gh workflow run dev-ai-newsletter.yml -f model=claude-opus-4-7
+gh workflow run dev-ai-newsletter.yml -f model=claude-opus-4-8
 
 # Post to specific Slack channels
 gh workflow run dev-ai-newsletter.yml -f slack_post_channel_ids="C091XE1DNP2,C094URH6C13"

.github/workflows/README.md

@@ -75,7 +75,7 @@ Workflows designed to be called by other workflows using `workflow_call`. These
 
   - Interactive AI assistance via @claude mentions
   - Works in issue comments, PR comments, review comments, and reviews
-  - Configurable models (Sonnet 4.6, Opus 4.7, Haiku 4.5)
+  - Configurable models (Sonnet 4.6, Opus 4.8, Haiku 4.5)
   - Flexible tool permissions (read-only, read-write, or custom)
   - Custom instructions for repository-specific standards
   - Fixed security settings (Bullfrog scanning, immutable permissions)

.github/workflows/_claude-code-review.yml

@@ -37,8 +37,10 @@ name: "[claude] Claude Code Review"
 # event when re-requesting reviews from bot accounts. Use the comment trigger
 # or manual workflow_dispatch instead.
 #
-# PERMISSIONS REQUIRED (calling workflow must grant these):
-#   contents: read
+# PERMISSIONS REQUIRED (the calling workflow must grant its calling job at least these;
+# a reusable workflow cannot be granted more than its caller provides, so granting fewer
+# causes a silent startup_failure: a ~1s run with no logs):
+#   contents: write       # read code AND push commits when auto_fix is enabled
 #   pull-requests: write
 #   issues: read
 #   actions: read
@@ -251,6 +253,14 @@ on:
         description: "Personal Access Token with repo scope. Required for: (1) resolving review threads via GraphQL API, and (2) auto-fix pushes that trigger subsequent workflow runs. Falls back to GITHUB_TOKEN if not provided, but auto-fix pushes with GITHUB_TOKEN will NOT trigger new workflow runs."
         required: false
 
+# Disable Bun's automatic bunfig.toml loading from CWD. This workflow runs
+# `bun run` against post-review scripts; if a caller checks out PR head
+# content first, `bun run` would auto-load bunfig.toml from the checkout
+# root and `bunfig.toml.preload` would execute arbitrary code with the
+# caller's secrets. Propagates to all jobs and steps in this workflow.
+env:
+  BUN_CONFIG_FILE: /dev/null
+
 jobs:
   claude-review:
     runs-on: ubuntu-latest
@@ -262,7 +272,11 @@ jobs:
       NODE_OPTIONS: ""
       NPM_CONFIG_REGISTRY: ""
       NODE_PATH: ""
-    # Fixed permissions (cannot be overridden by calling workflow)
+    # Permissions the CALLING workflow must grant its calling job (matching or higher).
+    # A reusable workflow cannot be granted more than its caller provides, so a caller that
+    # declares fewer (e.g. contents: read when this needs contents: write for auto_fix pushes)
+    # makes GitHub reject the run with a silent startup_failure: a ~1s run with no logs.
+    # See .github/workflows/examples/08-claude-code-review-basic.yml for a correct caller.
     permissions:
       id-token: write # Required for OIDC
       contents: write # Required to read code and push fixes when auto_fix is enabled
@@ -275,22 +289,51 @@ jobs:
       # via attacker-controlled config files (bunfig.toml, .npmrc, etc.) in fork PRs.
       # If a legitimate host is missing, the workflow will fail loudly — update the
       # allowlist rather than switching back to audit mode.
+      # Per .github/workflows/CLAUDE.md, bullfrog must be the FIRST step in
+      # every job on a non-macOS runner ("no exceptions"), so it runs before
+      # the toolkit_ref validation below. Ordering is safe: bullfrog does not
+      # consume toolkit_ref, and the validation runs before any step that
+      # downloads action.yml or post-*.ts content using it.
       - name: Security Scan
         uses: bullfrogsec/bullfrog@1831f79cce8ad602eef14d2163873f27081ebfb3 # v0.8.4
         with:
           egress-policy: block
+          # Per-workflow tightened allowlist. Audit-mode sampling missed
+          # several destinations because bullfrog v0.8.4 queues DNS *replies*
+          # (agent/queue_audit.nft) and cached resolutions emit no further
+          # events. Domains added below as block-mode CI failures revealed:
+          # - raw.githubusercontent.com: build-plugin-config fetches
+          #   marketplace.json from /Uniswap/ai-toolkit/next/.claude-plugin/.
+          # - claude.ai: Claude SDK install path (claude.ai/install.sh)
+          #   AND runtime telemetry/session lookup on API-key auth too.
           allowed-domains: |
-            github.com
-            *.github.com
-            *.githubusercontent.com
+            release-assets.githubusercontent.com
+            raw.githubusercontent.com
             api.anthropic.com
             claude.ai
-            *.claude.ai
-            bun.sh
+            downloads.claude.ai
             registry.npmjs.org
-            *.npmjs.org
           enable-sudo: false
 
+      # Validate toolkit_ref BEFORE any downstream step uses it to download
+      # action.yml / post-*.ts script content from the ai-toolkit repo.
+      # Without this, an attacker-controlled ref could substitute malicious
+      # script content that runs inside this job with access to its secrets.
+      - name: Validate toolkit_ref
+        env:
+          TOOLKIT_REF: ${{ inputs.toolkit_ref }}
+        run: |
+          case "$TOOLKIT_REF" in
+            main|next) ;;
+            *)
+              if ! printf '%s' "$TOOLKIT_REF" | grep -qE '^[0-9a-fA-F]{40}$'; then
+                echo "::error::Invalid toolkit_ref: '$TOOLKIT_REF'. Allowed: main, next, or a full 40-char SHA."
+                exit 1
+              fi
+              ;;
+          esac
+          echo "✅ toolkit_ref validated: $TOOLKIT_REF"
+
       # Checkout required before using local composite actions
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -1176,7 +1219,7 @@ jobs:
       - name: Run Claude Code Review
         if: steps.cache-check.outputs.cache-hit != 'true' && steps.diff-size.outputs.is_too_large != 'true'
         id: claude
-        uses: anthropics/claude-code-action@476e359e6203e73dad705c8b322e333fabbd7416 # v1.0.119
+        uses: anthropics/claude-code-action@787c5a0ce96a9a6cfb050ea0c8f4c05f2447c251 # v1.0.133
         with:
           # Authentication: provide either API key or OAuth token (validated in earlier step)
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
@@ -1669,7 +1712,7 @@ jobs:
       - name: Run Claude Auto-Fix
         id: claude-fix
         if: steps.auto-fix-check.outputs.should_fix == 'true' && steps.pr-branch.outputs.repo_full_name == github.repository
-        uses: anthropics/claude-code-action@476e359e6203e73dad705c8b322e333fabbd7416 # v1.0.119
+        uses: anthropics/claude-code-action@787c5a0ce96a9a6cfb050ea0c8f4c05f2447c251 # v1.0.133
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}