tapimo 0.0.2 → 0.2.0

package/src/apps/{rpc.test.ts → data/routes/rpc.test.ts}

@@ -1,6 +1,6 @@
-import type * as Viem from '../internal/Viem.js'
-import * as TestApp from '../../test/App.js'
-import * as Runtime from '../../test/runtime.js'
+import type * as Viem from '../../../internal/Viem.js'
+import * as TestApp from '../../../../test/App.js'
+import * as Runtime from '../../../../test/runtime.js'
 
 const runtime = Runtime.get()
 
@@ -227,16 +227,14 @@ describe('POST /rpc', () => {
     try {
       const app = TestApp.create({
         auth: {
-          source: TestApp.source({
-            keys: [
-              {
-                id: 'key_indexer_only',
-                orgId: 'org_test',
-                scopes: ['indexer:query'],
-                token: 'secret_indexer_key',
-              },
-            ],
-          }),
+          keys: [
+            {
+              id: 'key_indexer_only',
+              orgId: 'org_test',
+              scopes: ['indexer:query'],
+              token: 'secret_indexer_key',
+            },
+          ],
         },
       })
       const response = await app.fetch(
@@ -266,6 +264,137 @@ describe('POST /rpc', () => {
   })
 })
 
+describe('POST /rpc/relay', () => {
+  test('rejects anonymous callers', async () => {
+    const app = TestApp.create()
+
+    const response = await app.fetch(
+      new Request('http://tempo-api.test/rpc/relay', {
+        body: JSON.stringify({ id: 1, jsonrpc: '2.0', method: 'eth_chainId' }),
+        method: 'POST',
+      }),
+    )
+    const body = (await response.json()) as Record<string, unknown>
+    const { requestId, ...stable } = body
+
+    expect(response.status).toMatchInlineSnapshot(`401`)
+    expect(typeof requestId).toMatchInlineSnapshot(`"string"`)
+    expect(stable).toMatchInlineSnapshot(`
+      {
+        "error": {
+          "code": "api_key_missing",
+          "message": "Missing API key",
+        },
+      }
+    `)
+  })
+
+  test('rejects keys missing the relay scope', async () => {
+    // The shared test key holds the data/indexer scopes only.
+    const app = TestApp.create()
+
+    const response = await app.fetch(
+      new Request('http://tempo-api.test/rpc/relay', {
+        body: JSON.stringify({ id: 1, jsonrpc: '2.0', method: 'eth_chainId' }),
+        headers: { 'tempo-api-key': TestApp.key.token },
+        method: 'POST',
+      }),
+    )
+    const body = (await response.json()) as Record<string, unknown>
+    const { requestId, ...stable } = body
+
+    expect(response.status).toMatchInlineSnapshot(`403`)
+    expect(typeof requestId).toMatchInlineSnapshot(`"string"`)
+    expect(stable).toMatchInlineSnapshot(`
+      {
+        "error": {
+          "code": "api_key_forbidden",
+          "message": "API key missing required scope",
+        },
+      }
+    `)
+  })
+
+  test('routes chain-scoped mounts to the relay pipeline', async () => {
+    const fetch = mockRpc()
+
+    try {
+      const app = TestApp.create({
+        auth: {
+          keys: [
+            {
+              id: 'key_relay',
+              orgId: 'org_test',
+              scopes: ['rpc-relay:read'],
+              token: 'secret_relay_key',
+            },
+          ],
+        },
+        rpc: { url: () => 'https://internal.rpc.test/json-rpc' },
+      })
+
+      // Without a fee payer configured the relay pipeline answers this method
+      // itself; a proxied request would return the mock upstream's result.
+      const response = await app.fetch(
+        new Request('http://tempo-api.test/rpc/relay/42431', {
+          body: JSON.stringify({ id: 1, jsonrpc: '2.0', method: 'eth_signRawTransaction', params: ['0x76'] }), // prettier-ignore
+          headers: { 'tempo-api-key': 'secret_relay_key' },
+          method: 'POST',
+        }),
+      )
+
+      expect(response.status).toMatchInlineSnapshot(`200`)
+      const body = (await response.json()) as { error?: { message: string } | undefined }
+      expect(body.error?.message).toMatchInlineSnapshot(
+        `"eth_signRawTransaction requires a fee payer to be configured on the relay. Set the \`feePayer\` option in \`Handler.relay()\` to enable transaction sponsorship."`,
+      )
+      expect(fetch.calls).toMatchInlineSnapshot(`[]`)
+    } finally {
+      fetch.restore()
+    }
+  })
+
+  test('proxies for keys holding rpc-relay:read', async () => {
+    const fetch = mockRpc()
+
+    try {
+      const app = TestApp.create({
+        auth: {
+          keys: [
+            {
+              id: 'key_relay',
+              orgId: 'org_test',
+              scopes: ['rpc-relay:read'],
+              token: 'secret_relay_key',
+            },
+          ],
+        },
+        rpc: { url: () => 'https://internal.rpc.test/json-rpc' },
+      })
+
+      const response = await app.fetch(
+        new Request('http://tempo-api.test/rpc/relay', {
+          body: JSON.stringify({ id: 1, jsonrpc: '2.0', method: 'eth_chainId' }),
+          headers: { 'tempo-api-key': 'secret_relay_key' },
+          method: 'POST',
+        }),
+      )
+
+      expect(response.status).toMatchInlineSnapshot(`200`)
+      expect(await response.json()).toMatchInlineSnapshot(`
+        {
+          "id": 1,
+          "jsonrpc": "2.0",
+          "result": "0xa5bf",
+        }
+      `)
+      expect(fetch.calls[0]?.url).toMatchInlineSnapshot(`"https://internal.rpc.test/json-rpc"`)
+    } finally {
+      fetch.restore()
+    }
+  })
+})
+
 function mockRpc() {
   const original = globalThis.fetch
   const calls: {

package/src/apps/{rpc.ts → data/routes/rpc.ts}

@@ -1,12 +1,12 @@
 import { Hono, type Context, type TypedResponse } from 'hono'
 import * as z from 'zod/mini'
 
-import type * as App from '../App.js'
-import * as Auth from '../internal/Auth.js'
-import * as OpenApi from '../internal/OpenApi.js'
-import * as Response from '../internal/Response.js'
-import * as Schema from '../internal/Schema.js'
-import * as Viem from '../internal/Viem.js'
+import type * as App from '../../../App.js'
+import * as Auth from '../../../internal/Auth.js'
+import * as OpenApi from '../../../internal/OpenApi.js'
+import * as Response from '../../../internal/Response.js'
+import * as Schema from '../../../internal/Schema.js'
+import * as Viem from '../../../internal/Viem.js'
 
 // Request headers that must not be forwarded upstream: hop-by-hop headers, the
 // inbound host, and any caller auth so the consumer's Tempo API credentials never
@@ -101,7 +101,7 @@ export namespace schema {
 /** Creates the raw Tempo RPC passthrough handler. */
 export function rpc() {
   return new Hono<App.Environment>().post(
-    '/:chain{mainnet|testnet|[0-9]+}?',
+    '/rpc/:chain{(mainnet|testnet|[0-9]+)}?',
     Auth.policy({ apiKey: { scopes: ['data:read'] }, public: true }),
     OpenApi.describeRoute({
       description:

package/src/apps/{tokenlist.test.ts → data/routes/tokenlist.test.ts}

@@ -1,8 +1,6 @@
-import { Store } from 'cadent'
-
-import * as TestApp from '../../test/App.js'
-import * as Runtime from '../../test/runtime.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
+import * as TestApp from '../../../../test/App.js'
+import * as Runtime from '../../../../test/runtime.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
 import * as Tokenlist from './tokenlist.js'
 
 /** Reader key for the data routes. */
@@ -11,7 +9,7 @@ const reader = {
   orgId: 'org_test',
   scopes: ['data:read'],
   token: 'secret_reader',
-} satisfies TestApp.source.Key
+} satisfies TestApp.kvStore.Key
 
 /** A known list published into the store before exercising the read endpoint. */
 const seedList = [
@@ -27,11 +25,11 @@ function as(key: { token: string }) {
 
 /** Client whose verified-token store holds a published {@link seedList} snapshot. */
 async function seeded() {
-  const store = Store.memory()
-  await VerifiedTokens.replace(store, chainId, seedList)
+  const db = TestApp.database()
+  await VerifiedTokens.replace(db, chainId, seedList)
   return TestApp.client({
-    auth: { source: TestApp.source({ keys: [reader] }) },
-    verifiedTokens: { store },
+    auth: { keys: [reader] },
+    db,
   })
 }
 

package/src/apps/{tokenlist.ts → data/routes/tokenlist.ts}

@@ -1,14 +1,14 @@
 import { Hono } from 'hono'
 import * as z from 'zod/mini'
 
-import type * as App from '../App.js'
-import * as Auth from '../internal/Auth.js'
-import * as Cache from '../internal/Cache.js'
-import * as OpenApi from '../internal/OpenApi.js'
-import * as Response from '../internal/Response.js'
-import * as Schema from '../internal/Schema.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
-import * as Viem from '../internal/Viem.js'
+import type * as App from '../../../App.js'
+import * as Auth from '../../../internal/Auth.js'
+import * as Cache from '../../../internal/Cache.js'
+import * as OpenApi from '../../../internal/OpenApi.js'
+import * as Response from '../../../internal/Response.js'
+import * as Schema from '../../../internal/Schema.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
+import * as Viem from '../../../internal/Viem.js'
 import { getTokenLogo } from './tokens.js'
 
 /** Zod schemas owned by the tokenlist resource. */
@@ -124,7 +124,7 @@ export namespace schema {
  */
 export function tokenlist() {
   return new Hono<App.Environment>().get(
-    '/',
+    '/v1/tokenlist',
     Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
     OpenApi.validate('query', schema.getTokenList.Query, {
       code: 'query_invalid',

package/src/apps/{tokens.test.ts → data/routes/tokens.test.ts}

@@ -1,7 +1,7 @@
-import { Schema } from 'cadent'
+import { Schema } from 'tapimo'
 
-import * as TestApp from '../../test/App.js'
-import * as Runtime from '../../test/runtime.js'
+import * as TestApp from '../../../../test/App.js'
+import * as Runtime from '../../../../test/runtime.js'
 import * as Tokens from './tokens.js'
 
 // Verified enrichment is store-backed now that the build-time bundle is gone, so
@@ -10,9 +10,10 @@ import * as Tokens from './tokens.js'
 // verified tokens the bundle used to provide; a test can still override
 // `verifiedTokens`.
 const runtime = Runtime.get()
-const verified = TestApp.verifiedStore(runtime.chainId)
+const db = TestApp.database()
+await TestApp.verifiedSeed(db, runtime.chainId)
 function app(options: TestApp.create.Options = {}) {
-  return TestApp.client({ verifiedTokens: { store: verified }, ...options })
+  return TestApp.client({ db, ...options })
 }
 
 const verifiedTokenCount = 6

package/src/apps/{tokens.ts → data/routes/tokens.ts}

@@ -3,20 +3,20 @@ import { AbiEvent, AbiParameters } from 'ox'
 import { type Address, ContractFunctionExecutionError } from 'viem'
 import * as z from 'zod/mini'
 
-import type * as App from '../App.js'
-import * as Auth from '../internal/Auth.js'
-import * as Cache from '../internal/Cache.js'
-import * as Cursor from '../internal/Cursor.js'
-import * as OpenApi from '../internal/OpenApi.js'
-import * as Path from '../internal/Path.js'
-import * as Response from '../internal/Response.js'
-import * as Schema from '../internal/Schema.js'
-import * as Store from '../internal/Store.js'
-import * as Tidx from '../internal/Tidx.js'
-import * as Timing from '../internal/Timing.js'
-import * as Ttl from '../internal/Ttl.js'
-import * as Value from '../internal/Value.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
+import type * as App from '../../../App.js'
+import * as Auth from '../../../internal/Auth.js'
+import * as Cache from '../../../internal/Cache.js'
+import * as Cursor from '../../../internal/Cursor.js'
+import * as OpenApi from '../../../internal/OpenApi.js'
+import * as Path from '../../../internal/Path.js'
+import * as Response from '../../../internal/Response.js'
+import * as Schema from '../../../internal/Schema.js'
+import * as Store from '../../../internal/Store.js'
+import * as Tidx from '../../../internal/Tidx.js'
+import * as Timing from '../../../internal/Timing.js'
+import * as Ttl from '../../../internal/Ttl.js'
+import * as Value from '../../../internal/Value.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
 import * as Transactions from './transactions.js'
 
 const tokenCreatedSignature =
@@ -552,7 +552,7 @@ export namespace schema {
 export function tokens() {
   return new Hono<App.Environment>()
     .get(
-      '/',
+      '/v1/tokens',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('query', schema.getTokens.Query, {
         code: 'query_invalid',
@@ -622,7 +622,7 @@ export function tokens() {
       },
     )
     .get(
-      `/:symbol{${schema.getTokenBySymbol.routePattern}}`,
+      `/v1/tokens/:symbol{${schema.getTokenBySymbol.routePattern}}`,
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.getTokenBySymbol.Params, {
         code: 'symbol_invalid',
@@ -694,7 +694,7 @@ export function tokens() {
       },
     )
     .get(
-      '/:token',
+      '/v1/tokens/:token',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.getToken.Params, {
         code: 'token_invalid',
@@ -749,7 +749,7 @@ export function tokens() {
       },
     )
     .get(
-      '/:token/logo',
+      '/v1/tokens/:token/logo',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.getTokenLogo.Params, {
         code: 'token_invalid',
@@ -839,7 +839,7 @@ export function tokens() {
       },
     )
     .get(
-      '/:token/holders',
+      '/v1/tokens/:token/holders',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.getTokenHolders.Params, {
         code: 'token_invalid',
@@ -930,7 +930,7 @@ export function tokens() {
       },
     )
     .get(
-      '/:token/transactions',
+      '/v1/tokens/:token/transactions',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.getTokenTransactions.Params, {
         code: 'token_invalid',

package/src/apps/{transactions.test.ts → data/routes/transactions.test.ts}

@@ -1,10 +1,10 @@
-import { Schema } from 'cadent'
+import { Schema } from 'tapimo'
 import { Hex } from 'ox'
 import { zeroHash } from 'viem'
 
-import * as TestApp from '../../test/App.js'
-import * as Runtime from '../../test/runtime.js'
-import * as Viem from '../../test/Viem.js'
+import * as TestApp from '../../../../test/App.js'
+import * as Runtime from '../../../../test/runtime.js'
+import * as Viem from '../../../../test/Viem.js'
 import * as Transactions from './transactions.js'
 
 /** The decoded `type` names a humanized transaction may report. */

package/src/apps/{transactions.ts → data/routes/transactions.ts}

@@ -2,19 +2,19 @@ import { Hono, type Context } from 'hono'
 import { Hex } from 'ox'
 import * as z from 'zod/mini'
 
-import type * as App from '../App.js'
-import * as Auth from '../internal/Auth.js'
-import * as Cache from '../internal/Cache.js'
-import * as Cursor from '../internal/Cursor.js'
-import * as OpenApi from '../internal/OpenApi.js'
-import * as Response from '../internal/Response.js'
-import * as Schema from '../internal/Schema.js'
-import * as Store from '../internal/Store.js'
-import type * as Tidx from '../internal/Tidx.js'
-import * as Timing from '../internal/Timing.js'
-import * as Ttl from '../internal/Ttl.js'
-import * as Value from '../internal/Value.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
+import type * as App from '../../../App.js'
+import * as Auth from '../../../internal/Auth.js'
+import * as Cache from '../../../internal/Cache.js'
+import * as Cursor from '../../../internal/Cursor.js'
+import * as OpenApi from '../../../internal/OpenApi.js'
+import * as Response from '../../../internal/Response.js'
+import * as Schema from '../../../internal/Schema.js'
+import * as Store from '../../../internal/Store.js'
+import type * as Tidx from '../../../internal/Tidx.js'
+import * as Timing from '../../../internal/Timing.js'
+import * as Ttl from '../../../internal/Ttl.js'
+import * as Value from '../../../internal/Value.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
 import * as Receipts from './receipts.js'
 import * as Tokens from './tokens.js'
 
@@ -595,7 +595,7 @@ export namespace schema {
 export function transactions() {
   return new Hono<App.Environment>()
     .get(
-      '/',
+      '/v1/transactions',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('query', schema.getTransactions.Query, {
         code: 'query_invalid',
@@ -692,7 +692,7 @@ export function transactions() {
       },
     )
     .get(
-      '/:transactionHash',
+      '/v1/transactions/:transactionHash',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.getTransaction.Params, {
         code: 'transaction_invalid',

package/src/apps/{transfers.test.ts → data/routes/transfers.test.ts}

@@ -1,8 +1,8 @@
 import type * as z from 'zod/mini'
-import { Schema } from 'cadent'
+import { Schema } from 'tapimo'
 
-import * as TestApp from '../../test/App.js'
-import * as Runtime from '../../test/runtime.js'
+import * as TestApp from '../../../../test/App.js'
+import * as Runtime from '../../../../test/runtime.js'
 import * as Transfers from './transfers.js'
 
 describe('GET /transfers', () => {

package/src/apps/{transfers.ts → data/routes/transfers.ts}

@@ -3,20 +3,20 @@ import { Address, Hex } from 'ox'
 import { Addresses } from 'viem/tempo'
 import * as z from 'zod/mini'
 
-import type * as App from '../App.js'
-import * as Auth from '../internal/Auth.js'
-import * as Cache from '../internal/Cache.js'
-import * as Cursor from '../internal/Cursor.js'
-import * as Mpp from '../internal/Mpp.js'
-import * as OpenApi from '../internal/OpenApi.js'
-import * as Response from '../internal/Response.js'
-import * as Schema from '../internal/Schema.js'
-import * as Store from '../internal/Store.js'
-import type * as Tidx from '../internal/Tidx.js'
-import * as Timing from '../internal/Timing.js'
-import * as Ttl from '../internal/Ttl.js'
-import * as Value from '../internal/Value.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
+import type * as App from '../../../App.js'
+import * as Auth from '../../../internal/Auth.js'
+import * as Cache from '../../../internal/Cache.js'
+import * as Cursor from '../../../internal/Cursor.js'
+import * as Mpp from '../../../internal/Mpp.js'
+import * as OpenApi from '../../../internal/OpenApi.js'
+import * as Response from '../../../internal/Response.js'
+import * as Schema from '../../../internal/Schema.js'
+import * as Store from '../../../internal/Store.js'
+import type * as Tidx from '../../../internal/Tidx.js'
+import * as Timing from '../../../internal/Timing.js'
+import * as Ttl from '../../../internal/Ttl.js'
+import * as Value from '../../../internal/Value.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
 import * as Tokens from './tokens.js'
 
 // TIP-20 tokens emit the standard ERC-20 Transfer event. Supplying the
@@ -285,7 +285,7 @@ export namespace schema {
 /** Creates transfer handlers. */
 export function transfers() {
   return new Hono<App.Environment>().get(
-    '/',
+    '/v1/transfers',
     Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
     OpenApi.validate('query', schema.getTransfers.Query, {
       code: 'query_invalid',

package/src/apps/{verified-tokens.test.ts → data/routes/verified-tokens.test.ts}

@@ -1,22 +1,15 @@
-import { Store } from 'cadent'
-
-import * as TestApp from '../../test/App.js'
-import * as Runtime from '../../test/runtime.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
+import * as TestApp from '../../../../test/App.js'
+import * as Runtime from '../../../../test/runtime.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
 import * as Verified from './verified-tokens.js'
 
-// Mutations live in the admin API (`cadent/admin`) and are covered in
-// `../admin/apps/verified-tokens.test.ts`; these tests cover the public reads,
-// seeded by publishing a snapshot through the same core module the admin
-// writes use.
-
 /** Reader key for the data routes. */
 const reader = {
   id: 'key_reader',
   orgId: 'org_test',
   scopes: ['data:read'],
   token: 'secret_reader',
-} satisfies TestApp.source.Key
+} satisfies TestApp.kvStore.Key
 
 /** An address not present in the seed list. */
 const unknownAddress = '0x20c00000000000000000000000000000000000ff'
@@ -36,11 +29,11 @@ function as(key: { token: string }) {
 
 /** Client whose verified-token store holds a published {@link seedList} snapshot. */
 async function seeded() {
-  const store = Store.memory()
-  await VerifiedTokens.replace(store, chainId, seedList)
+  const db = TestApp.database()
+  await VerifiedTokens.replace(db, chainId, seedList)
   return TestApp.client({
-    auth: { source: TestApp.source({ keys: [reader] }) },
-    verifiedTokens: { store },
+    auth: { keys: [reader] },
+    db,
   })
 }
 
@@ -55,6 +48,25 @@ describe('GET /verified-tokens', () => {
     expect(body.data[1]?.logoUri).toBeUndefined()
   })
 
+  test('reads through `db.cached` when configured', async () => {
+    // Seed only the cached source: the list serving from it proves the
+    // snapshot path resolves `cached`, not `source`. `refreshMs: 0` forces a
+    // head check against this app's database (the per-isolate snapshot cell
+    // is keyed by chain id, so a prior test's cell could otherwise satisfy
+    // the read).
+    const cached = TestApp.database()
+    await VerifiedTokens.replace(cached, chainId, seedList)
+    const client = TestApp.client({
+      auth: { keys: [reader] },
+      db: { cached, source: TestApp.database() },
+      verifiedTokens: { refreshMs: 0 },
+    })
+    const response = await client.v1['verified-tokens'].$get({ query: {} }, as(reader))
+    expect(response.status).toBe(200)
+    const body = await TestApp.json(response, Verified.schema.listVerifiedTokens.Response)
+    expect(body.data.map((token) => token.address)).toEqual(seedList.map((token) => token.address))
+  })
+
   test('filters by currency (case-insensitive)', async () => {
     const response = await (
       await seeded()

package/src/apps/{verified-tokens.ts → data/routes/verified-tokens.ts}

@@ -1,13 +1,13 @@
 import { type Context, Hono } from 'hono'
 import * as z from 'zod/mini'
 
-import type * as App from '../App.js'
-import * as Auth from '../internal/Auth.js'
-import * as Cache from '../internal/Cache.js'
-import * as OpenApi from '../internal/OpenApi.js'
-import * as Response from '../internal/Response.js'
-import * as Schema from '../internal/Schema.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
+import type * as App from '../../../App.js'
+import * as Auth from '../../../internal/Auth.js'
+import * as Cache from '../../../internal/Cache.js'
+import * as OpenApi from '../../../internal/OpenApi.js'
+import * as Response from '../../../internal/Response.js'
+import * as Schema from '../../../internal/Schema.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
 
 /** Zod schemas owned by the verified-tokens resource. */
 export namespace schema {
@@ -138,7 +138,7 @@ export namespace schema {
 export function verifiedTokens() {
   return new Hono<App.Environment>()
     .get(
-      '/',
+      '/v1/verified-tokens',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('query', schema.listVerifiedTokens.Query, {
         code: 'query_invalid',
@@ -183,7 +183,7 @@ export function verifiedTokens() {
       },
     )
     .get(
-      '/currencies',
+      '/v1/verified-tokens/currencies',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('query', schema.getVerifiedTokenCurrencies.Query, {
         code: 'query_invalid',
@@ -230,7 +230,7 @@ export function verifiedTokens() {
       },
     )
     .get(
-      '/:address',
+      '/v1/verified-tokens/:address',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.Params, {
         code: 'address_invalid',