Audit Diff

.github/workflows/claude-code-review.yml

@@ -0,0 +1,53 @@
+name: Claude Code Review
+
+on:
+  pull_request:
+    types: [opened, synchronize]
+    # Optional: Only run on specific file changes
+    # paths:
+    #   - "src/**/*.ts"
+    #   - "src/**/*.tsx"
+    #   - "src/**/*.js"
+    #   - "src/**/*.jsx"
+
+jobs:
+  claude-review:
+    if: |
+      github.event.pull_request.user.login == 'external-contributor' ||
+      github.event.pull_request.user.login == 'new-developer' ||
+      github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write 
+      issues: read
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Run Claude Code Review
+        id: claude-review
+        uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          prompt: |
+            Please review this pull request and provide feedback on:
+            - Code quality and best practices
+            - Potential bugs or issues
+            - Performance considerations
+            - Security concerns
+            - Test coverage
+
+            Use the repository's CLAUDE.md for guidance on style and conventions. Be constructive and helpful in your feedback.
+
+            Use `gh pr comment` with your Bash tool to leave your review as a comment on the PR.
+
+          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
+          # or https://docs.anthropic.com/en/docs/claude-code/sdk#command-line for available options
+          claude_args: '--allowed-tools "Bash(gh issue view:*),Bash(gh search:*),Bash(gh issue list:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh pr list:*)"'
+

.github/workflows/claude.yml

@@ -0,0 +1,63 @@
+name: Claude Code
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  issues:
+    types: [opened, assigned]
+  pull_request_review:
+    types: [submitted]
+
+jobs:
+  claude:
+    if: |
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
+      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write        # Needed to create commits/PRs
+      pull-requests: write   # Needed to comment on PRs
+      issues: write          # Needed to comment on issues
+      id-token: write
+      actions: read # Required for Claude to read CI results on PRs
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+          # For PR comments, checkout the PR branch instead of main
+          ref: ${{ github.event.issue.pull_request && format('refs/pull/{0}/head', github.event.issue.number) || '' }}
+
+      - name: Run Claude Code
+        id: claude
+        uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+
+          # This is an optional setting that allows Claude to read CI results on PRs
+          additional_permissions: |
+            actions: read
+
+          # Use review prompt for simple @claude mentions in PR comments, otherwise follow specific instructions
+          prompt: |
+            ${{ github.event_name == 'issue_comment' && github.event.issue.pull_request && github.event.comment.body == '@claude' &&
+            format('Please review pull request #{0} and provide feedback on:
+            - Code quality and best practices
+            - Potential bugs or issues
+            - Performance considerations
+            - Security concerns
+            - Test coverage
+
+            Use the repository''s CLAUDE.md for guidance on style and conventions. Be constructive and helpful in your feedback.
+
+            Use `gh pr comment {0}` with your Bash tool to leave your review as a comment on the PR.', github.event.issue.number) || '' }}
+
+          # Optional: Add claude_args to customize behavior and configuration
+          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
+          # or https://docs.anthropic.com/en/docs/claude-code/sdk#command-line for available options
+          claude_args: '--allowed-tools "Bash(gh issue view:*),Bash(gh search:*),Bash(gh issue list:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh pr list:*)"'
+

.github/workflows/deepbookv3-build-tx.yml

@@ -13,12 +13,10 @@ on:
           - Enable Version
           - Disable Version
           - Unregister Pool and Create
-          - Prep MVR
-          - Prep Kiosk MVR
-          - Prep Kiosk MVR Registration
-          - Package Info Creation
-          - Register Deepbook with MVR
           - Add Stable Coins
+          - Adjust Tick Size
+          - Adjust Min Lot Size
+          - Transfer Funds
       sui_tools_image:
         description: "image reference of sui_tools"
         default: "mysten/sui-tools:mainnet"
@@ -184,6 +182,136 @@ jobs:
         run: |
           cd scripts && pnpm install && pnpm ts-node transactions/addStablecoin.ts
 
+      - name: Transfer Mvr Kiosk
+        if: ${{ inputs.transaction_type == 'Transfer Mvr Kiosk' }}
+        env:
+          NODE_ENV: production
+          GAS_OBJECT: ${{ inputs.gas_object_id }}
+          NETWORK: mainnet
+          ORIGIN: gh_action
+        run: |
+          cd scripts && pnpm install && pnpm ts-node transactions/transferMvrObjectsKiosk.ts
+
+      - name: Finish MVR Setup
+        if: ${{ inputs.transaction_type == 'Finish MVR Setup' }}
+        env:
+          NODE_ENV: production
+          GAS_OBJECT: ${{ inputs.gas_object_id }}
+          NETWORK: mainnet
+          ORIGIN: gh_action
+        run: |
+          cd scripts && pnpm install && pnpm ts-node transactions/allMvrSetup.ts
+
+      - name: MVR Package Reverse Resolution
+        if: ${{ inputs.transaction_type == 'MVR Package Reverse Resolution' }}
+        env:
+          NODE_ENV: production
+          GAS_OBJECT: ${{ inputs.gas_object_id }}
+          NETWORK: mainnet
+          ORIGIN: gh_action
+        run: |
+          cd scripts && pnpm install && pnpm ts-node transactions/mvrPackageReverseResolution.ts
+
+      - name: Setup Denylist
+        if: ${{ inputs.transaction_type == 'Setup Denylist' }}
+        env:
+          NODE_ENV: production
+          GAS_OBJECT: ${{ inputs.gas_object_id }}
+          NETWORK: mainnet
+          ORIGIN: gh_action
+        run: |
+          cd scripts && pnpm install && pnpm ts-node transactions/setupDenylist.ts
+
+      - name: MVR Package Metadata
+        if: ${{ inputs.transaction_type == 'MVR Package Metadata' }}
+        env:
+          NODE_ENV: production
+          GAS_OBJECT: ${{ inputs.gas_object_id }}
+          NETWORK: mainnet
+          ORIGIN: gh_action
+        run: |
+          cd scripts && pnpm install && pnpm ts-node transactions/mvrPackageMetadata.ts
+
+      - name: Adjust Tick Size
+        if: ${{ inputs.transaction_type == 'Adjust Tick Size' }}
+        env:
+          NODE_ENV: production
+          GAS_OBJECT: ${{ inputs.gas_object_id }}
+          NETWORK: mainnet
+          ORIGIN: gh_action
+        run: |
+          cd scripts && pnpm install && pnpm ts-node transactions/updatePoolTickSize.ts
+
+      - name: Adjust Min Lot Size
+        if: ${{ inputs.transaction_type == 'Adjust Min Lot Size' }}
+        env:
+          NODE_ENV: production
+          GAS_OBJECT: ${{ inputs.gas_object_id }}
+          NETWORK: mainnet
+          ORIGIN: gh_action
+        run: |
+          cd scripts && pnpm install && pnpm ts-node transactions/updatePoolMinLotSize.ts
+
+      - name: Fix MVR Path
+        if: ${{ inputs.transaction_type == 'Fix MVR Path' }}
+        env:
+          NODE_ENV: production
+          GAS_OBJECT: ${{ inputs.gas_object_id }}
+          NETWORK: mainnet
+          ORIGIN: gh_action
+        run: |
+          cd scripts && pnpm install && pnpm ts-node transactions/mvrFix.ts
+
+      - name: Setup Walrus Site
+        if: ${{ inputs.transaction_type == 'Setup Walrus Site' }}
+        env:
+          NODE_ENV: production
+          GAS_OBJECT: ${{ inputs.gas_object_id }}
+          NETWORK: mainnet
+          ORIGIN: gh_action
+        run: |
+          cd scripts && pnpm install && pnpm ts-node transactions/walrusSitesSetup.ts
+
+      - name: Nautilus Setup
+        if: ${{ inputs.transaction_type == 'Nautilus Setup' }}
+        env:
+          NODE_ENV: production
+          GAS_OBJECT: ${{ inputs.gas_object_id }}
+          NETWORK: mainnet
+          ORIGIN: gh_action
+        run: |
+          cd scripts && pnpm install && pnpm ts-node transactions/nautilus-setup.ts
+
+      - name: Payment Setup
+        if: ${{ inputs.transaction_type == 'Payment Setup' }}
+        env:
+          NODE_ENV: production
+          GAS_OBJECT: ${{ inputs.gas_object_id }}
+          NETWORK: mainnet
+          ORIGIN: gh_action
+        run: |
+          cd scripts && pnpm install && pnpm ts-node transactions/paymentSetup.ts
+
+      - name: Margin Setup
+        if: ${{ inputs.transaction_type == 'Margin Setup' }}
+        env:
+          NODE_ENV: production
+          GAS_OBJECT: ${{ inputs.gas_object_id }}
+          NETWORK: mainnet
+          ORIGIN: gh_action
+        run: |
+          cd scripts && pnpm install && pnpm ts-node transactions/marginSetup.ts
+
+      - name: Transfer Funds
+        if: ${{ inputs.transaction_type == 'Transfer Funds' }}
+        env:
+          NODE_ENV: production
+          GAS_OBJECT: ${{ inputs.gas_object_id }}
+          NETWORK: mainnet
+          ORIGIN: gh_action
+        run: |
+          cd scripts && pnpm install && pnpm ts-node transactions/transferFunds.ts
+
       - name: Show Transaction Data (To sign)
         run: |
           cat scripts/tx/tx-data.txt

.github/workflows/deploy.yml

@@ -0,0 +1,45 @@
+name: Deploy DeepBook Services
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+    paths:
+      - crates/**
+      - docker/**
+      - Cargo.lock
+      - Cargo.toml
+
+concurrency:
+  group: deployment
+  cancel-in-progress: true
+
+jobs:
+  deploy-pulumi:
+    name: Deploy to Testnet
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    environment: production
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # [email protected]
+
+      - name: Trigger Pulumi Deployment
+        uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # [email protected]
+        with:
+          repository: MystenLabs/sui-operations
+          token: ${{ secrets.DEPLOY_PULUMI_DISPATCH_TOKEN }}
+          event-type: pulumi-up
+          client-payload: |-
+            {
+                "project": "apps/deepbook",
+                "stack": "testnet"
+            }
+
+      - name: View deployment status
+        run: |
+          echo "🚀 View the status of the deployment here: https://github.com/MystenLabs/sui-operations/actions/workflows/pulumi-up.yaml"
+

.github/workflows/move-formatter.yml

@@ -25,3 +25,5 @@ jobs:
         uses: actions/setup-node@v4
       - run: npm i @mysten/prettier-plugin-move
       - run: npx prettier-move -c $PWD/../packages/deepbook/**/*.move
+      - run: npx prettier-move -c $PWD/../packages/deepbook_margin/**/*.move
+      - run: npx prettier-move -c $PWD/../packages/margin_liquidation/**/*.move

.github/workflows/move_test.yml

@@ -22,34 +22,13 @@ jobs:
         with:
           fetch-depth: 1
 
-      - name: Install Sui 1.45.3
+      - name: Install Homebrew
         run: |
-          echo "Installing Sui 1.45.3..."
-          mkdir -p $HOME/sui-bin
+          /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
+          echo "/home/linuxbrew/.linuxbrew/bin" >> $GITHUB_PATH
 
-          SUI_URL="https://github.com/MystenLabs/sui/releases/download/mainnet-v1.45.3/sui-mainnet-v1.45.3-macos-x86_64.tgz"
-          echo "Downloading Sui from $SUI_URL"
-
-          # Use curl with fail flag and check response
-          HTTP_STATUS=$(curl -o sui.tar.gz -w "%{http_code}" -L $SUI_URL)
-
-          if [[ "$HTTP_STATUS" -ne 200 ]]; then
-            echo "Error: Failed to download Sui. HTTP Status: $HTTP_STATUS"
-            exit 1
-          fi
-
-          if ! file sui.tar.gz | grep -q "gzip compressed"; then
-            echo "Error: Downloaded file is not a valid tar.gz archive."
-            exit 1
-          fi
-
-          tar -xvzf sui.tar.gz -C $HOME/sui-bin
-          chmod +x $HOME/sui-bin/sui
-          echo "$HOME/sui-bin" >> $GITHUB_PATH
-          export PATH="$HOME/sui-bin:$PATH"
-
-          # Verify installation
-          sui --version
+      - name: Install Sui using Homebrew
+        run: brew install sui
 
       - name: Run Move tests in all package subdirectories, with exclusions
         run: |