chore: post-v0.25.0 hardening (docs sync + release npm-auth preflight)

[alkautsarf]

Small follow-ups after the v0.25.0 (0G Router brain) release. No version bump, publishes nothing — merging this only updates main; prod still moves only on a v* tag.

What changed

• Docs synced to v0.25.0 — the live "Current version" strings in apps/web/app/llms/[[...path]]/route.ts (the llms.txt route, x2) and apps/web/content/docs/11-agents.md (x2) still said 0.24.17. Bumped to 0.25.0 to match the shipped release. (The historical hackathon-window reference in the root README is intentionally left as-is.)
• release.yml: fail-fast npm-auth preflight — a granular npm token defaults to ~30-day expiry, and an expired token makes bun publish fail with a misleading 404 ("package does not exist in this registry") ~90s into the run, after packing 7 tarballs (this is exactly what bit the v0.25.0 publish). A new early step hits the registry whoami endpoint up front (curl + jq, before setup-bun), so a dead/missing token fails in ~2s with an unambiguous message that points at rotating to a classic Automation token.

Verification

• bun run lint + bun run typecheck: clean.
• The new auth step's shell logic was simulated under GitHub's default bash -eo pipefail: empty-token path and invalid-token path both print their guidance and exit 1 (the || true on the curl pipeline is what keeps set -e/pipefail from aborting before the message prints).
• Diff is docs + one CI step only; no packages/* or contracts/ source touched.

https://claude.ai/code/session_01PQ6KBM8gAanXLCFrm4zU7g

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
anima	Ready	Preview, Comment	Jun 18, 2026 10:36am