tapimo 0.0.2 → 0.1.0

package/src/admin/apps/api-keys.test.ts

@@ -1,4 +1,5 @@
 import * as ApiKey from '../../ApiKey.js'
+import * as core_ApiKeys from '../../ApiKeys.js'
 
 import * as TestAdmin from '../../../test/Admin.js'
 import * as TestApp from '../../../test/App.js'
@@ -9,7 +10,7 @@ const validBody = { orgId: 'org_test', scopes: ['data:read'] } as const
 
 describe('POST /api-keys', () => {
   test('mints a key, returns the token once, persists a hashed record', async () => {
-    const { client, source, store } = TestAdmin.setup()
+    const { client, store } = TestAdmin.setup()
     const response = await client['api-keys'].$post({ json: { ...validBody, name: 'CI' } })
     const body = await TestApp.json(response, ApiKeys.schema.createApiKey.Response)
 
@@ -34,26 +35,26 @@ describe('POST /api-keys', () => {
       }
     `)
 
-    // The token resolves through the source (proving the record persisted),
+    // The token resolves through the module (proving the record persisted),
     // and at rest it is keyed by the token hash — never the plaintext token.
-    const resolved = await source.resolve(body.token)
+    const resolved = await core_ApiKeys.resolve(store, body.token)
     expect(resolved?.orgId).toBe('org_test')
     expect(await store.get(body.token)).toBeNull()
     expect(await store.get(ApiKey.keyFor(body.token))).not.toBeNull()
   })
 
   test('defaults to the production environment', async () => {
-    const { client, source } = TestAdmin.setup()
+    const { client, store } = TestAdmin.setup()
     const response = await client['api-keys'].$post({ json: validBody })
     const body = await TestApp.json(response, ApiKeys.schema.createApiKey.Response)
 
     expect(response.status).toBe(200)
     expect(body.environment).toBe('production')
-    expect((await source.list())[0]?.environment).toBe('production')
+    expect((await core_ApiKeys.list(store))[0]?.environment).toBe('production')
   })
 
   test('persists a sandbox environment when provided', async () => {
-    const { client, source } = TestAdmin.setup()
+    const { client, store } = TestAdmin.setup()
     const response = await client['api-keys'].$post({
       json: { ...validBody, environment: 'sandbox' },
     })
@@ -63,19 +64,19 @@ describe('POST /api-keys', () => {
     expect(body.environment).toBe('sandbox')
     // Sandbox tokens carry a distinct prefix for recognizability/leak detection.
     expect(body.token).toMatch(/^tempo_sandbox:sk:[a-f0-9]{48}$/)
-    const resolved = await source.resolve(body.token)
+    const resolved = await core_ApiKeys.resolve(store, body.token)
     expect(resolved?.environment).toBe('sandbox')
   })
 
   test('records the expiry when provided', async () => {
-    const { client, source } = TestAdmin.setup()
+    const { client, store } = TestAdmin.setup()
     const expiresAt = '2100-01-01T00:00:00.000Z'
     const response = await client['api-keys'].$post({ json: { ...validBody, expiresAt } })
     const body = await TestApp.json(response, ApiKeys.schema.createApiKey.Response)
 
     expect(response.status).toBe(200)
     expect(body.expiresAt).toBe(expiresAt)
-    expect((await source.list())[0]?.expiresAt).toBe(expiresAt)
+    expect((await core_ApiKeys.list(store))[0]?.expiresAt).toBe(expiresAt)
   })
 
   test('rejects an unknown scope with 400', async () => {
@@ -106,8 +107,8 @@ describe('POST /api-keys', () => {
 
 describe('GET /api-keys', () => {
   test('lists records as metadata only (never the token)', async () => {
-    const { client, source } = TestAdmin.setup()
-    const { token } = await source.mint(validBody)
+    const { client, store } = TestAdmin.setup()
+    const { token } = await core_ApiKeys.mint(store, validBody)
 
     const response = await client['api-keys'].$get({ query: {} })
     const body = await TestApp.json(response, ApiKeys.schema.listApiKeys.Response)
@@ -120,9 +121,9 @@ describe('GET /api-keys', () => {
   })
 
   test('filters by orgId', async () => {
-    const { client, source } = TestAdmin.setup()
-    await source.mint({ orgId: 'org_a', scopes: ['data:read'] })
-    await source.mint({ orgId: 'org_b', scopes: ['data:read'] })
+    const { client, store } = TestAdmin.setup()
+    await core_ApiKeys.mint(store, { orgId: 'org_a', scopes: ['data:read'] })
+    await core_ApiKeys.mint(store, { orgId: 'org_b', scopes: ['data:read'] })
 
     const response = await client['api-keys'].$get({ query: { orgId: 'org_a' } })
     const body = await TestApp.json(response, ApiKeys.schema.listApiKeys.Response)
@@ -133,16 +134,16 @@ describe('GET /api-keys', () => {
 
 describe('DELETE /api-keys/:id', () => {
   test('revokes a key, after which it no longer resolves or lists', async () => {
-    const { client, source } = TestAdmin.setup()
-    const { record, token } = await source.mint(validBody)
+    const { client, store } = TestAdmin.setup()
+    const { record, token } = await core_ApiKeys.mint(store, validBody)
 
     const response = await client['api-keys'][':id'].$delete({ param: { id: record.id } })
     const body = await TestApp.json(response, ApiKeys.schema.revokeApiKey.Response)
 
     expect(response.status).toBe(200)
     expect(body).toEqual({ id: record.id })
-    expect(await source.resolve(token)).toBeNull()
-    expect(await source.list()).toEqual([])
+    expect(await core_ApiKeys.resolve(store, token)).toBeNull()
+    expect(await core_ApiKeys.list(store)).toEqual([])
   })
 
   test('unknown id → 404', async () => {

package/src/admin/apps/api-keys.ts

@@ -1,7 +1,7 @@
 import { Hono } from 'hono'
 import * as z from 'zod/mini'
 
-import * as ApiKeySource from '../../ApiKeySource.js'
+import * as ApiKeys from '../../ApiKeys.js'
 import * as OpenApi from '../../internal/OpenApi.js'
 import * as Response from '../../internal/Response.js'
 import * as Schema from '../../internal/Schema.js'
@@ -16,13 +16,13 @@ export namespace schema {
      * server sets from the verified identity so it can't be spoofed).
      */
     export const Body = Schema.describe(
-      z.omit(ApiKeySource.schema.MintInput, { createdBy: true }),
+      z.omit(ApiKeys.schema.MintInput, { createdBy: true }),
       'Fields accepted when minting an API key.',
     )
 
     /** Response: the record plus the one-time plaintext token. */
     export const Response = Schema.describe(
-      z.extend(ApiKeySource.schema.Record, {
+      z.extend(ApiKeys.schema.Record, {
         token: z
           .string()
           .check(z.describe('The plaintext token, shown once and unrecoverable afterward.')),
@@ -46,7 +46,7 @@ export namespace schema {
     export const Response = Schema.describe(
       z.object({
         data: z
-          .array(ApiKeySource.schema.Record)
+          .array(ApiKeys.schema.Record)
           .check(z.describe('API-key records, newest first (metadata only — never tokens).')),
       }),
       'A list of API-key records.',
@@ -70,8 +70,7 @@ export namespace schema {
 }
 
 /**
- * Provisioning routes for API keys, backed by the request's
- * {@link App.Environment} `source`:
+ * Provisioning routes for API keys, backed by the app's KV state store:
  *
  * - `POST /` mints a key, recording `createdBy` from the verified identity and
  *   returning the one-time token.
@@ -100,7 +99,7 @@ export function apiKeys() {
       async (c) => {
         // `createdBy` is the verified admin email, never client-supplied.
         // `requireAuth` guarantees identity on this gated route.
-        const { record, token } = await c.get('source').mint({
+        const { record, token } = await ApiKeys.mint(c.get('kv').store, {
           ...c.req.valid('json'),
           createdBy: c.get('identity')!.email,
         })
@@ -123,7 +122,7 @@ export function apiKeys() {
       }),
       async (c) => {
         const { orgId } = c.req.valid('query')
-        const data = await c.get('source').list(orgId ? { orgId } : {})
+        const data = await ApiKeys.list(c.get('kv').store, orgId ? { orgId } : {})
         return c.json(Response.validated(schema.listApiKeys.Response, { data }))
       },
     )
@@ -144,7 +143,7 @@ export function apiKeys() {
       }),
       async (c) => {
         const { id } = c.req.valid('param')
-        const revoked = await c.get('source').revoke(id)
+        const revoked = await ApiKeys.revoke(c.get('kv').store, id)
         if (!revoked)
           return Response.error(c, {
             code: 'not_found',

package/src/admin/apps/scopes.test.ts

@@ -22,6 +22,10 @@ describe('GET /scopes', () => {
             "description": "Run ad-hoc queries against the raw indexer passthrough.",
             "scope": "indexer:query",
           },
+          {
+            "description": "Fill and submit transactions through the relay.",
+            "scope": "rpc-relay",
+          },
           {
             "description": "Read webhook subscriptions.",
             "scope": "webhooks:read",

package/src/admin/apps/verified-tokens.test.ts

@@ -1,5 +1,3 @@
-import { Store } from 'cadent'
-
 import * as TestAdmin from '../../../test/Admin.js'
 import * as TestApp from '../../../test/App.js'
 import * as Verified from './verified-tokens.js'
@@ -15,29 +13,14 @@ const novel = {
 
 const chainId = '42431' as const
 
-/** Write-enabled admin client backed by a fresh in-memory state store. */
+/** Write-enabled admin client backed by a fresh schema-isolated database. */
 function writes() {
-  return TestAdmin.setup({ verifiedTokens: { store: Store.memory() } })
+  return TestAdmin.setup()
 }
 
-describe('feature gate', () => {
-  test('write routes return 404 when no store is configured', async () => {
-    const { client } = TestAdmin.setup()
-    const response = await client['verified-tokens'].$post({
-      json: { ...novel, chainId: 42431 },
-    })
-    expect(response.status).toBe(404)
-    const body = (await response.json()) as { error?: { code?: string } }
-    expect(body.error?.code).toBe('verified_tokens_not_enabled')
-  })
-})
-
 describe('authentication', () => {
   test('denied identity → 401', async () => {
-    const { client } = TestAdmin.setup({
-      identify: () => null,
-      verifiedTokens: { store: Store.memory() },
-    })
+    const { client } = TestAdmin.setup({ identify: () => null })
     const response = await client['verified-tokens'].$post({
       json: { ...novel, chainId: 42431 },
     })
@@ -46,12 +29,6 @@ describe('authentication', () => {
 })
 
 describe('list', () => {
-  test('returns 404 when no store is configured', async () => {
-    const { client } = TestAdmin.setup()
-    const response = await client['verified-tokens'].$get({ query: { chainId } })
-    expect(response.status).toBe(404)
-  })
-
   test('empty list → data [] and null version', async () => {
     const { client } = writes()
     const response = await client['verified-tokens'].$get({ query: { chainId } })
@@ -176,7 +153,6 @@ describe('create with inline logo', () => {
         get: async (key) => stored.find((entry) => entry.key === key)?.content,
         put: async (key, content) => void stored.push({ content, key }),
       },
-      verifiedTokens: { store: Store.memory() },
     })
     return { client, stored }
   }
@@ -219,7 +195,6 @@ describe('create with inline logo', () => {
           throw new Error('upload failed')
         },
       },
-      verifiedTokens: { store: Store.memory() },
     })
     const response = await client['verified-tokens'].$post({
       json: { ...novel, chainId: 42431, logo: svg },
@@ -297,7 +272,6 @@ describe('PUT /verified-tokens/:address/logo', () => {
           stored.push({ content, key })
         },
       },
-      verifiedTokens: { store: Store.memory() },
     })
     return { client, stored }
   }
@@ -375,7 +349,6 @@ describe('GET /verified-tokens/:address/logo', () => {
         get: async (key) => objects.get(key),
         put: async (key, content) => void objects.set(key, content),
       },
-      verifiedTokens: { store: Store.memory() },
     })
     return { client, objects }
   }

package/src/admin/apps/verified-tokens.ts

@@ -4,7 +4,7 @@ import * as z from 'zod/mini'
 import * as OpenApi from '../../internal/OpenApi.js'
 import * as Response from '../../internal/Response.js'
 import * as Schema from '../../internal/Schema.js'
-import type * as Store from '../../internal/Store.js'
+import * as Db from '../../db/Db.js'
 import * as VerifiedTokens from '../../internal/VerifiedTokens.js'
 import { schema as readSchema } from '../../apps/verified-tokens.js'
 import type * as App from '../App.js'
@@ -149,9 +149,9 @@ export namespace schema {
 }
 
 /**
- * Management routes for the curated verified-token list, backed by the request's
- * `verifiedTokens` store; all `404` when no store is configured. Mutations accept
- * an optional `If-Match` precondition (`412` on mismatch).
+ * Management routes for the curated verified-token list, backed by the app
+ * database (snapshot rows). Mutations accept an optional `If-Match`
+ * precondition (`412` on mismatch).
  *
  * - `POST /` creates a token (`409` on a duplicate address or symbol).
  * - `PUT /` replaces a chain's entire list (seed/rollback).
@@ -170,7 +170,6 @@ export function verifiedTokens() {
       OpenApi.describeRoute({
         operationId: 'listVerifiedTokens',
         responses: OpenApi.responses({
-          errors: { 404: featureDisabledDescription },
           success: {
             description: 'Curated verified tokens.',
             schema: schema.listVerifiedTokens.Response,
@@ -180,10 +179,9 @@ export function verifiedTokens() {
         tags: ['Verified Tokens'],
       }),
       async (c) => {
-        const store = c.get('verifiedTokens')?.store
-        if (!store) return notEnabled(c)
+        const db = Db.get(c.get('db'))
         const { chainId } = c.req.valid('query')
-        const snapshot = await VerifiedTokens.read(store, chainId)
+        const snapshot = await VerifiedTokens.read(db, chainId)
         return c.json(
           Response.validated(schema.listVerifiedTokens.Response, {
             data: snapshot?.list ?? [],
@@ -202,7 +200,6 @@ export function verifiedTokens() {
         operationId: 'createVerifiedToken',
         responses: OpenApi.responses({
           errors: {
-            404: featureDisabledDescription,
             409: 'Duplicate address or symbol.',
             413: 'Logo exceeds the size limit.',
             415: 'Logo is not valid SVG.',
@@ -216,22 +213,21 @@ export function verifiedTokens() {
         tags: ['Verified Tokens'],
       }),
       async (c) => {
-        const store = c.get('verifiedTokens')?.store
-        if (!store) return notEnabled(c)
+        const db = Db.get(c.get('db'))
         const { logo, ...body } = c.req.valid('json')
         try {
           if (logo !== undefined) {
             const assets = c.get('assets')
             if (!assets?.put) return assetsNotEnabled(c)
             const svg = encodeLogo(logo)
-            const duplicate = await findDuplicate(store, body)
+            const duplicate = await findDuplicate(db, body)
             if (duplicate) throw duplicate
             await assets.put(logoKey(body.chainId, body.address), {
               body: svg,
               contentType: 'image/svg+xml',
             })
           }
-          const { snapshot, token } = await VerifiedTokens.create(store, body)
+          const { snapshot, token } = await VerifiedTokens.create(db, body)
           return c.json(
             Response.validated(schema.createVerifiedToken.Response, {
               data: token,
@@ -257,7 +253,6 @@ export function verifiedTokens() {
         operationId: 'replaceVerifiedTokens',
         responses: OpenApi.responses({
           errors: {
-            404: featureDisabledDescription,
             409: 'Duplicate address or symbol.',
             412: 'Version precondition failed.',
           },
@@ -270,12 +265,11 @@ export function verifiedTokens() {
         tags: ['Verified Tokens'],
       }),
       async (c) => {
-        const store = c.get('verifiedTokens')?.store
-        if (!store) return notEnabled(c)
+        const db = Db.get(c.get('db'))
         const { chainId } = c.req.valid('query')
         const { tokens } = c.req.valid('json')
         try {
-          const { snapshot } = await VerifiedTokens.replace(store, chainId, tokens, {
+          const { snapshot } = await VerifiedTokens.replace(db, chainId, tokens, {
             ...ifMatch(c),
           })
           return c.json(
@@ -320,13 +314,12 @@ export function verifiedTokens() {
         tags: ['Verified Tokens'],
       }),
       async (c) => {
-        const store = c.get('verifiedTokens')?.store
-        if (!store) return notEnabled(c)
+        const db = Db.get(c.get('db'))
         const { address } = c.req.valid('param')
         const { chainId } = c.req.valid('query')
         const body = c.req.valid('json')
         try {
-          const { snapshot, token } = await VerifiedTokens.patch(store, chainId, address, body, {
+          const { snapshot, token } = await VerifiedTokens.patch(db, chainId, address, body, {
             ...ifMatch(c),
           })
           return c.json(
@@ -366,12 +359,11 @@ export function verifiedTokens() {
         tags: ['Verified Tokens'],
       }),
       async (c) => {
-        const store = c.get('verifiedTokens')?.store
-        if (!store) return notEnabled(c)
+        const db = Db.get(c.get('db'))
         const { address } = c.req.valid('param')
         const { chainId } = c.req.valid('query')
         try {
-          const { snapshot } = await VerifiedTokens.remove(store, chainId, address, {
+          const { snapshot } = await VerifiedTokens.remove(db, chainId, address, {
             ...ifMatch(c),
           })
           return c.json(
@@ -476,9 +468,6 @@ export function verifiedTokens() {
 /** Largest accepted logo upload (SVG icons are tiny; this is generous). */
 const maxLogoBytes = 256 * 1024
 
-/** OpenAPI description shared by write routes' 404 when the feature is disabled. */
-const featureDisabledDescription = 'Verified-token management is not enabled (or not found).'
-
 /** Asset-store key the main API's loader reads for a token's curated icon. */
 function logoKey(chainId: number, address: string): string {
   return `${chainId}/icons/${address.toLowerCase()}`
@@ -511,10 +500,10 @@ function encodeLogo(logo: string): ArrayBuffer {
 // Returns the duplicate-address/symbol error a create would throw, or undefined,
 // so the logo upload can be skipped before it overwrites an existing icon.
 async function findDuplicate(
-  store: Store.State,
+  db: Db.Db,
   token: { address: string; chainId: VerifiedTokens.ChainId; symbol: string },
 ): Promise<Error | undefined> {
-  const snapshot = await VerifiedTokens.read(store, token.chainId)
+  const snapshot = await VerifiedTokens.read(db, token.chainId)
   if (!snapshot) return undefined
   if (snapshot.byAddress.has(token.address.toLowerCase()))
     return new VerifiedTokens.DuplicateAddressError({ address: token.address, chainId: token.chainId }) // prettier-ignore
@@ -556,11 +545,3 @@ function mutationError(c: Context<App.Environment>, cause: unknown) {
     return Response.error(c, { code: 'version_mismatch', message: cause.message, status: 412 })
   return Response.upstream(c, cause)
 }
-
-function notEnabled(c: Context<App.Environment>) {
-  return Response.error(c, {
-    code: 'verified_tokens_not_enabled',
-    message: 'Verified-token management is not enabled for this deployment.',
-    status: 404,
-  })
-}

package/src/admin/ui.generated.ts

@@ -11,7 +11,7 @@ export type Asset = {
 
 /** The prerendered SPA shell HTML (assets normalized to relative URLs). */
 export const shell =
-  '<!DOCTYPE html><html lang="en" data-theme="dark" data-regen-radius="none"><head><meta charSet="utf-8"/><meta content="width=device-width, initial-scale=1" name="viewport"/><link rel="stylesheet" href="./assets/styles-Cd7Fp5b_.css" data-precedence="default"/><title>Tempo API Admin</title><link rel="modulepreload" href="./assets/index-CPTihwDe.js"/><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%20269%20269%22%3E%3Crect%20width%3D%22269%22%20height%3D%22269%22%20fill%3D%22%23000%22%2F%3E%3Cpath%20d%3D%22M123.273%20190.794H93.445L121.09%20105.318H85.7334L93.445%2080.2642H191.95L184.238%20105.318H150.773L123.273%20190.794Z%22%20fill%3D%22%23fff%22%2F%3E%3C%2Fsvg%3E"/></head><body><div id="root"></div><script class="$tsr" id="$tsr-stream-barrier">(self.$R=self.$R||{})["tsr"]=[];self.$_TSR={h(){this.hydrated=!0,this.c()},e(){this.streamEnded=!0,this.c()},c(){this.hydrated&&this.streamEnded&&(delete self.$_TSR,delete self.$R.tsr)},p(e){this.initialized?e():this.buffer.push(e)},buffer:[]};$_TSR.router=($R=>$R[0]={manifest:$R[1]={routes:$R[2]={__root__:$R[3]={preloads:$R[4]=["./assets/index-CPTihwDe.js"],scripts:$R[5]=[$R[6]={attrs:$R[7]={type:"module",async:!0,src:"./assets/index-CPTihwDe.js"}}]}}},matches:$R[8]=[$R[9]={i:"__root__\u0000",u:1782959721668,s:"success",ssr:!0}],lastMatchId:"__root__\u0000"})($R["tsr"]);$_TSR.e();document.currentScript.remove()</script><script type="module" async="" src="./assets/index-CPTihwDe.js"></script></body></html>'
+  '<!DOCTYPE html><html lang="en" data-theme="dark" data-regen-radius="none"><head><meta charSet="utf-8"/><meta content="width=device-width, initial-scale=1" name="viewport"/><link rel="stylesheet" href="./assets/styles-Cd7Fp5b_.css" data-precedence="default"/><title>Tempo API Admin</title><link rel="modulepreload" href="./assets/index-CPTihwDe.js"/><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%20269%20269%22%3E%3Crect%20width%3D%22269%22%20height%3D%22269%22%20fill%3D%22%23000%22%2F%3E%3Cpath%20d%3D%22M123.273%20190.794H93.445L121.09%20105.318H85.7334L93.445%2080.2642H191.95L184.238%20105.318H150.773L123.273%20190.794Z%22%20fill%3D%22%23fff%22%2F%3E%3C%2Fsvg%3E"/></head><body><div id="root"></div><script class="$tsr" id="$tsr-stream-barrier">(self.$R=self.$R||{})["tsr"]=[];self.$_TSR={h(){this.hydrated=!0,this.c()},e(){this.streamEnded=!0,this.c()},c(){this.hydrated&&this.streamEnded&&(delete self.$_TSR,delete self.$R.tsr)},p(e){this.initialized?e():this.buffer.push(e)},buffer:[]};$_TSR.router=($R=>$R[0]={manifest:$R[1]={routes:$R[2]={__root__:$R[3]={preloads:$R[4]=["./assets/index-CPTihwDe.js"],scripts:$R[5]=[$R[6]={attrs:$R[7]={type:"module",async:!0,src:"./assets/index-CPTihwDe.js"}}]}}},matches:$R[8]=[$R[9]={i:"__root__\u0000",u:1783028662119,s:"success",ssr:!0}],lastMatchId:"__root__\u0000"})($R["tsr"]);$_TSR.e();document.currentScript.remove()</script><script type="module" async="" src="./assets/index-CPTihwDe.js"></script></body></html>'
 
 /** Content-hashed UI assets, keyed by their path under the mount (e.g. `assets/index-*.js`). */
 export const assets: Record<string, Asset> = {

package/src/apps/balances.test.ts

@@ -1,4 +1,4 @@
-import { Schema } from 'cadent'
+import { Schema } from 'tapimo'
 import { Value as core_Value } from 'ox'
 
 import * as TestApp from '../../test/App.js'
@@ -12,9 +12,10 @@ import * as Tokens from './tokens.js'
 // verified tokens the bundle used to provide; a test can still override
 // `verifiedTokens`.
 const runtime = Runtime.get()
-const verified = TestApp.verifiedStore(runtime.chainId)
+const db = TestApp.database()
+await TestApp.verifiedSeed(db, runtime.chainId)
 function app(options: TestApp.create.Options = {}) {
-  return TestApp.client({ verifiedTokens: { store: verified }, ...options })
+  return TestApp.client({ db, ...options })
 }
 
 async function holderWithBalance(client: ReturnType<typeof app>) {

package/src/apps/blocks.test.ts

@@ -1,4 +1,4 @@
-import { Schema } from 'cadent'
+import { Schema } from 'tapimo'
 import { Hex } from 'ox'
 import { zeroHash } from 'viem'
 

package/src/apps/exchanges.test.ts

@@ -1,5 +1,5 @@
 import type * as z from 'zod/mini'
-import { Schema } from 'cadent'
+import { Schema } from 'tapimo'
 
 import * as TestApp from '../../test/App.js'
 import * as Exchanges from './exchanges.js'

package/src/apps/indexer.test.ts

@@ -1,4 +1,4 @@
-import { RateLimit, Store } from 'cadent'
+import { RateLimit, Store } from 'tapimo'
 import * as TestApp from '../../test/App.js'
 import * as Mppx from '../../test/Mppx.js'
 import * as Runtime from '../../test/runtime.js'

package/src/apps/receipts.test.ts

@@ -1,4 +1,4 @@
-import { Schema } from 'cadent'
+import { Schema } from 'tapimo'
 import { Hex } from 'ox'
 import { zeroHash } from 'viem'
 

package/src/apps/rpc.test.ts

@@ -227,16 +227,14 @@ describe('POST /rpc', () => {
     try {
       const app = TestApp.create({
         auth: {
-          source: TestApp.source({
-            keys: [
-              {
-                id: 'key_indexer_only',
-                orgId: 'org_test',
-                scopes: ['indexer:query'],
-                token: 'secret_indexer_key',
-              },
-            ],
-          }),
+          keys: [
+            {
+              id: 'key_indexer_only',
+              orgId: 'org_test',
+              scopes: ['indexer:query'],
+              token: 'secret_indexer_key',
+            },
+          ],
         },
       })
       const response = await app.fetch(
@@ -266,6 +264,98 @@ describe('POST /rpc', () => {
   })
 })
 
+describe('POST /rpc/relay', () => {
+  test('rejects anonymous callers', async () => {
+    const app = TestApp.create()
+
+    const response = await app.fetch(
+      new Request('http://tempo-api.test/rpc/relay', {
+        body: JSON.stringify({ id: 1, jsonrpc: '2.0', method: 'eth_chainId' }),
+        method: 'POST',
+      }),
+    )
+    const body = (await response.json()) as Record<string, unknown>
+    const { requestId, ...stable } = body
+
+    expect(response.status).toMatchInlineSnapshot(`401`)
+    expect(typeof requestId).toMatchInlineSnapshot(`"string"`)
+    expect(stable).toMatchInlineSnapshot(`
+      {
+        "error": {
+          "code": "api_key_missing",
+          "message": "Missing API key",
+        },
+      }
+    `)
+  })
+
+  test('rejects keys missing the relay scope', async () => {
+    // The shared test key holds the data/indexer scopes only.
+    const app = TestApp.create()
+
+    const response = await app.fetch(
+      new Request('http://tempo-api.test/rpc/relay', {
+        body: JSON.stringify({ id: 1, jsonrpc: '2.0', method: 'eth_chainId' }),
+        headers: { 'tempo-api-key': TestApp.key.token },
+        method: 'POST',
+      }),
+    )
+    const body = (await response.json()) as Record<string, unknown>
+    const { requestId, ...stable } = body
+
+    expect(response.status).toMatchInlineSnapshot(`403`)
+    expect(typeof requestId).toMatchInlineSnapshot(`"string"`)
+    expect(stable).toMatchInlineSnapshot(`
+      {
+        "error": {
+          "code": "api_key_forbidden",
+          "message": "API key missing required scope",
+        },
+      }
+    `)
+  })
+
+  test('proxies for keys holding rpc-relay', async () => {
+    const fetch = mockRpc()
+
+    try {
+      const app = TestApp.create({
+        auth: {
+          keys: [
+            {
+              id: 'key_relay',
+              orgId: 'org_test',
+              scopes: ['rpc-relay'],
+              token: 'secret_relay_key',
+            },
+          ],
+        },
+        rpc: { url: () => 'https://internal.rpc.test/json-rpc' },
+      })
+
+      const response = await app.fetch(
+        new Request('http://tempo-api.test/rpc/relay', {
+          body: JSON.stringify({ id: 1, jsonrpc: '2.0', method: 'eth_chainId' }),
+          headers: { 'tempo-api-key': 'secret_relay_key' },
+          method: 'POST',
+        }),
+      )
+
+      expect(response.status).toMatchInlineSnapshot(`200`)
+      expect(await response.json()).toMatchInlineSnapshot(`
+        {
+          "id": 1,
+          "jsonrpc": "2.0",
+          "result": "0xa5bf",
+        }
+      `)
+      expect(fetch.calls[0]?.url).toMatchInlineSnapshot(`"https://internal.rpc.test/json-rpc"`)
+    } finally {
+      fetch.restore()
+    }
+  })
+})
+
 function mockRpc() {
   const original = globalThis.fetch
   const calls: {

package/src/apps/tokenlist.test.ts

@@ -1,5 +1,3 @@
-import { Store } from 'cadent'
-
 import * as TestApp from '../../test/App.js'
 import * as Runtime from '../../test/runtime.js'
 import * as VerifiedTokens from '../internal/VerifiedTokens.js'
@@ -11,7 +9,7 @@ const reader = {
   orgId: 'org_test',
   scopes: ['data:read'],
   token: 'secret_reader',
-} satisfies TestApp.source.Key
+} satisfies TestApp.kvStore.Key
 
 /** A known list published into the store before exercising the read endpoint. */
 const seedList = [
@@ -27,11 +25,11 @@ function as(key: { token: string }) {
 
 /** Client whose verified-token store holds a published {@link seedList} snapshot. */
 async function seeded() {
-  const store = Store.memory()
-  await VerifiedTokens.replace(store, chainId, seedList)
+  const db = TestApp.database()
+  await VerifiedTokens.replace(db, chainId, seedList)
   return TestApp.client({
-    auth: { source: TestApp.source({ keys: [reader] }) },
-    verifiedTokens: { store },
+    auth: { keys: [reader] },
+    db,
   })
 }