chore: promote development to master

[Seranged]

Features

• Show an Uncovered losses statistic on EulerEarn vault overviews, netting recorded lost assets against coverage supplied to the canonical coverage address, clamped at zero, with USD formatting and an explanatory tooltip (feat: show uncovered losses on earn vault statistics #778) @kasperpawlowski

Fixes

• Display EulerRouter governance events in EVK vault Activity feeds: oracle routes as readable asset pairs, resolved vaults as internal links, and non-Euler resolved vaults labeled with their on-chain token symbol, gated on factory membership via the SDK vault resolver (fix: display oracle router activity events #774) @Seranged
• Run rEUL reward claims and unlocks as standalone transactions that require an empty batch cart, revalidate lock data before every unlock review and confirmation, and decode the unlock in transaction review with the reviewed EUL amount (Keep rEUL claims and unlocks outside transaction batches #780) @dglowinski
• Block unsafe reward campaign URL schemes, escape inline chain configuration against script injection, reject encoded V3 proxy path characters, and keep RPC secrets out of vault validation logs (Security fixes - RPC/Reward provider links #775) @kanvgupta

Documentation

• Document the deployment-controlled announcement modal and V3 proxy operations: allowlisted paths, rate limits, backoff, and log fields (docs: document announcements and V3 proxy ops #720) @cursor
• Add a projected-yield engineering guide covering rate simulation, multi-collateral snapshots, metric formulas, reward breakdowns, and batch-layer consistency (docs: document projected yield architecture #759) @cursor
• Document the V3-backed activity feed architecture and the batch-cart slot-hint and account prefetch handoff (docs: activity feed and batch cart prefetch guidance #773) @cursor
• Add AGENTS.md with repository architecture, testing, and Cursor Cloud dev environment guidance (Set up Cursor Cloud dev environment #721) @kanvgupta

Dependencies

• Update @eulerxyz/euler-v2-sdk from 1.2.3 to 1.2.5 across the rEUL unlock and oracle router Activity work (Keep rEUL claims and unlocks outside transaction batches #780, fix: display oracle router activity events #774) @dglowinski @Seranged
• Update nuxt 4.4.8 → 4.5.1 in the nuxt-ecosystem group, dropping the unhead override it obsoletes (chore(deps): bump nuxt from 4.4.8 to 4.5.1 in the nuxt-ecosystem group across 1 directory #762) @dependabot
• Refresh 16 wallet, UI, runtime, and tooling dependencies, including AppKit, Wagmi, Viem, Vue, TanStack Query, Axios, Playwright, and Sass, aligning the @wagmi/connectors override with @wagmi/core 3.6.4 (chore(deps): bump the all-updates group across 1 directory with 16 updates #786) @dependabot
• Update @nuxt/devtools 3.2.4 → 3.4.1 (chore(deps): bump @nuxt/devtools from 3.2.4 to 3.4.1 #790) @dependabot
• Update valibot 1.4.1 → 1.4.2 (chore(deps): bump valibot from 1.4.1 to 1.4.2 #764) @dependabot
• Update js-yaml 4.3.0 → 4.3.1 (chore(deps): bump js-yaml from 4.3.0 to 4.3.1 #787) @dependabot
• Update brace-expansion 1.1.14 → 1.1.18 (chore(deps-dev): bump brace-expansion from 1.1.14 to 1.1.18 #777) @dependabot

Validation

• git diff --check v2.1.0..0ec3697c — clean
• npm run typecheck — passes
• npm run test:run — 169 files passed, 1 skipped; 1612 tests passed, 1 skipped
• npm run build — production build completed
• Changelist validated across 43 files: 6,528 insertions and 5,035 deletions since v2.1.0
• v2.1.1-rc.0 and v2.1.1 point to 0ec3697cb6e311ba1164737028ddd6db74b5ddb5, the master first-parent promotion merge commit
• Trigger Stage Deploy completed successfully for v2.1.1-rc.0
• Trigger Prod Deploy completed successfully for v2.1.1

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: euler-xyz/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: b261b306-62ef-457b-95b4-4441c1ceddd8

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Review summary

No high-severity DeFi correctness, security, or stack-hygiene defects found in this development → master promote. The money-touching changes (rEUL unlock/claim isolation, freshness revalidation, SDK allowRemainderLoss opt-in) and the security hardening (V3 encoded-path reject, script-JSON escape on __CHAIN_CONFIG__, reward sourceUrl sanitization, ensure-vault log redaction) look intentional and internally consistent; dependency bumps correctly resolve the known Nuxt/unhead and wagmi-connectors skews.

Reviewed: rEUL unlock/claim UI + useREULLocks / reulUnlockReview, activity vault-resolution + display, earn uncovered-losses display, server proxy/config hardening, package.json / lockfile overrides, related tests · Traced beyond the diff: executePlan → SDK ToS/plugin path, fetchVaultCategory error handling, SDK reulLockService.buildUnlockPlan / EulerEarn.lostAssets, V3 allowlist vs docs/activity-feed.md, npm ls for @wagmi/core + resolved unhead@3.2.3 · Protocol skills consulted: euler-advanced (rEUL/rewards), euler-earn (lost assets / coverage)

Not flagged

• Hardcoded allowRemainderLoss: true is required by SDK ≥1.2.4 and matches early-unlock burn UI + freshness checks that reject a worse burn quote.
• Removing “Add to batch” for rEUL unlocks / blocking rEUL claims while a batch is open is the intended fix for unsafe mixed batches, not a regression.
• Factory-gated activity vault resolution and explorer fallback for unresolved resolved_vault addresses match the established pattern.
• safeExternalHttpUrl returning the original string (not url.href) remains fine for Vue :href binding.
• CI lint / typecheck / test are green on this head.

  

_{Sent by Cursor Automation: Lite PR Reviewer}