tapimo 0.1.0 → 0.3.0

package/src/apps/{receipts.ts → data/routes/receipts.ts}

@@ -2,17 +2,18 @@ import { Hono, type Context } from 'hono'
 import { Hex } from 'ox'
 import * as z from 'zod/mini'
 
-import type * as App from '../App.js'
-import * as Auth from '../internal/Auth.js'
-import * as Cache from '../internal/Cache.js'
-import * as Cursor from '../internal/Cursor.js'
-import * as OpenApi from '../internal/OpenApi.js'
-import * as Response from '../internal/Response.js'
-import * as Schema from '../internal/Schema.js'
-import * as Store from '../internal/Store.js'
-import * as Timing from '../internal/Timing.js'
-import * as Ttl from '../internal/Ttl.js'
-import * as Value from '../internal/Value.js'
+import type * as App from '../../../App.js'
+import * as Auth from '../../../internal/Auth.js'
+import * as Cache from '../../../internal/Cache.js'
+import * as Cursor from '../../../internal/Cursor.js'
+import * as Fees from '../../../internal/Fees.js'
+import * as OpenApi from '../../../internal/OpenApi.js'
+import * as Response from '../../../internal/Response.js'
+import * as Schema from '../../../internal/Schema.js'
+import * as Store from '../../../internal/Store.js'
+import * as Timing from '../../../internal/Timing.js'
+import * as Ttl from '../../../internal/Ttl.js'
+import * as Value from '../../../internal/Value.js'
 import * as Tokens from './tokens.js'
 
 // Receipts and transactions deliberately form an import cycle (receipts reuses
@@ -25,13 +26,6 @@ import { decodeTransactionType, embedFeeTokens, schema as txSchema } from './tra
 /** Example transaction hash surfaced in OpenAPI docs. */
 const exampleHash = '0x515801d7f9a5ac705e793e85904c9c69b3f1694b465cc8fb6ba3f0298dc82665'
 
-// Tempo gas prices are denominated in attodollars (10^-18 USD) while fee-token
-// balances use 6 decimals (microdollars, 10^-6 USD), so the fee charged to the
-// fee payer — in the fee token's base units — is
-// `ceil(gasUsed * effectiveGasPrice / 10^12)` (ceiling division). Mirrors
-// `calc_gas_balance_spending` in tempoxyz/tempo.
-const feeScalingFactor = 10n ** 12n
-
 /**
  * Computes the fee charged to the fee payer, in the fee token's base units, from
  * the receipt's `gasUsed` and decimal `effectiveGasPrice`. Returns undefined
@@ -39,8 +33,7 @@ const feeScalingFactor = 10n ** 12n
  */
 function computeFeeAmount(gasUsed: number | undefined, effectiveGasPrice: string | undefined) {
   if (gasUsed === undefined || effectiveGasPrice === undefined) return undefined
-  const product = BigInt(gasUsed) * BigInt(effectiveGasPrice)
-  return ((product + feeScalingFactor - 1n) / feeScalingFactor).toString()
+  return Fees.fromGas(BigInt(gasUsed), BigInt(effectiveGasPrice)).toString()
 }
 
 /** Zod schemas owned by the receipt handlers. */
@@ -455,7 +448,7 @@ export namespace schema {
 export function receipts() {
   return new Hono<App.Environment>()
     .get(
-      '/receipts',
+      '/v1/transactions/receipts',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('query', schema.getReceipts.Query, {
         code: 'query_invalid',
@@ -548,7 +541,7 @@ export function receipts() {
       },
     )
     .get(
-      '/:transactionHash/receipt',
+      '/v1/transactions/:transactionHash/receipt',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.getReceipt.Params, {
         code: 'transaction_invalid',

package/src/apps/{rpc.test.ts → data/routes/rpc.test.ts}

@@ -1,6 +1,6 @@
-import type * as Viem from '../internal/Viem.js'
-import * as TestApp from '../../test/App.js'
-import * as Runtime from '../../test/runtime.js'
+import type * as Viem from '../../../internal/Viem.js'
+import * as TestApp from '../../../../test/App.js'
+import * as Runtime from '../../../../test/runtime.js'
 
 const runtime = Runtime.get()
 
@@ -96,7 +96,7 @@ describe('POST /rpc', () => {
     }
   })
 
-  test('routes anonymous requests to the public RPC without basic auth', async () => {
+  test('allows eth-prefixed methods anonymously', async () => {
     const fetch = mockRpc()
 
     try {
@@ -109,7 +109,7 @@ describe('POST /rpc', () => {
 
       const response = await app.fetch(
         new Request('http://tempo-api.test/rpc/testnet', {
-          body: JSON.stringify({ id: 1, jsonrpc: '2.0', method: 'eth_chainId' }),
+          body: JSON.stringify({ id: 1, jsonrpc: '2.0', method: 'eth_fillTransaction' }),
           method: 'POST',
         }),
       )
@@ -122,6 +122,82 @@ describe('POST /rpc', () => {
     }
   })
 
+  test('requires an API key for non-eth methods', async () => {
+    const fetch = mockRpc()
+
+    try {
+      const app = TestApp.create()
+      const response = await app.fetch(
+        new Request('http://tempo-api.test/rpc', {
+          body: JSON.stringify({ id: 1, jsonrpc: '2.0', method: 'tempo_fundAddress' }),
+          method: 'POST',
+        }),
+      )
+      const body = (await response.json()) as Record<string, unknown>
+      const { requestId, ...stable } = body
+
+      expect(response.status).toMatchInlineSnapshot(`401`)
+      expect(typeof requestId).toMatchInlineSnapshot(`"string"`)
+      expect(stable).toMatchInlineSnapshot(`
+        {
+          "error": {
+            "code": "api_key_missing",
+            "message": "Missing API key",
+          },
+        }
+      `)
+      expect(fetch.calls).toMatchInlineSnapshot(`[]`)
+    } finally {
+      fetch.restore()
+    }
+  })
+
+  test('requires an API key when a batch includes a private method', async () => {
+    const fetch = mockRpc()
+
+    try {
+      const app = TestApp.create()
+      const response = await app.fetch(
+        new Request('http://tempo-api.test/rpc', {
+          body: JSON.stringify([
+            { id: 1, jsonrpc: '2.0', method: 'eth_chainId' },
+            { id: 2, jsonrpc: '2.0', method: 'tempo_fundAddress' },
+          ]),
+          method: 'POST',
+        }),
+      )
+      const body = (await response.json()) as { error?: { code?: unknown } }
+
+      expect(response.status).toMatchInlineSnapshot(`401`)
+      expect(body.error?.code).toMatchInlineSnapshot(`"api_key_missing"`)
+      expect(fetch.calls).toMatchInlineSnapshot(`[]`)
+    } finally {
+      fetch.restore()
+    }
+  })
+
+  test('allows API keys to call private methods', async () => {
+    const fetch = mockRpc()
+
+    try {
+      const app = TestApp.create()
+      const response = await app.fetch(
+        new Request('http://tempo-api.test/rpc', {
+          body: JSON.stringify({ id: 1, jsonrpc: '2.0', method: 'tempo_fundAddress' }),
+          headers: { 'tempo-api-key': TestApp.key.token },
+          method: 'POST',
+        }),
+      )
+
+      expect(response.status).toMatchInlineSnapshot(`200`)
+      expect(fetch.calls[0]?.body).toMatchInlineSnapshot(
+        `"{"id":1,"jsonrpc":"2.0","method":"tempo_fundAddress"}"`,
+      )
+    } finally {
+      fetch.restore()
+    }
+  })
+
   test('uses the requested chain id for upstream URL resolution', async () => {
     const fetch = mockRpc()
 
@@ -315,7 +391,46 @@ describe('POST /rpc/relay', () => {
     `)
   })
 
-  test('proxies for keys holding rpc-relay', async () => {
+  test('routes chain-scoped mounts to the relay pipeline', async () => {
+    const fetch = mockRpc()
+
+    try {
+      const app = TestApp.create({
+        auth: {
+          keys: [
+            {
+              id: 'key_relay',
+              orgId: 'org_test',
+              scopes: ['rpc-relay:read'],
+              token: 'secret_relay_key',
+            },
+          ],
+        },
+        rpc: { url: () => 'https://internal.rpc.test/json-rpc' },
+      })
+
+      // Without a fee payer configured the relay pipeline answers this method
+      // itself; a proxied request would return the mock upstream's result.
+      const response = await app.fetch(
+        new Request('http://tempo-api.test/rpc/relay/42431', {
+          body: JSON.stringify({ id: 1, jsonrpc: '2.0', method: 'eth_signRawTransaction', params: ['0x76'] }), // prettier-ignore
+          headers: { 'tempo-api-key': 'secret_relay_key' },
+          method: 'POST',
+        }),
+      )
+
+      expect(response.status).toMatchInlineSnapshot(`200`)
+      const body = (await response.json()) as { error?: { message: string } | undefined }
+      expect(body.error?.message).toMatchInlineSnapshot(
+        `"eth_signRawTransaction requires a fee payer to be configured on the relay. Set the \`feePayer\` option in \`Handler.relay()\` to enable transaction sponsorship."`,
+      )
+      expect(fetch.calls).toMatchInlineSnapshot(`[]`)
+    } finally {
+      fetch.restore()
+    }
+  })
+
+  test('proxies for keys holding rpc-relay:read', async () => {
     const fetch = mockRpc()
 
     try {
@@ -325,7 +440,7 @@ describe('POST /rpc/relay', () => {
             {
               id: 'key_relay',
               orgId: 'org_test',
-              scopes: ['rpc-relay'],
+              scopes: ['rpc-relay:read'],
               token: 'secret_relay_key',
             },
           ],

package/src/apps/{rpc.ts → data/routes/rpc.ts}

@@ -1,12 +1,12 @@
 import { Hono, type Context, type TypedResponse } from 'hono'
 import * as z from 'zod/mini'
 
-import type * as App from '../App.js'
-import * as Auth from '../internal/Auth.js'
-import * as OpenApi from '../internal/OpenApi.js'
-import * as Response from '../internal/Response.js'
-import * as Schema from '../internal/Schema.js'
-import * as Viem from '../internal/Viem.js'
+import type * as App from '../../../App.js'
+import * as Auth from '../../../internal/Auth.js'
+import * as OpenApi from '../../../internal/OpenApi.js'
+import * as Response from '../../../internal/Response.js'
+import * as Schema from '../../../internal/Schema.js'
+import * as Viem from '../../../internal/Viem.js'
 
 // Request headers that must not be forwarded upstream: hop-by-hop headers, the
 // inbound host, and any caller auth so the consumer's Tempo API credentials never
@@ -101,7 +101,7 @@ export namespace schema {
 /** Creates the raw Tempo RPC passthrough handler. */
 export function rpc() {
   return new Hono<App.Environment>().post(
-    '/:chain{mainnet|testnet|[0-9]+}?',
+    '/rpc/:chain{(mainnet|testnet|[0-9]+)}?',
     Auth.policy({ apiKey: { scopes: ['data:read'] }, public: true }),
     OpenApi.describeRoute({
       description:
@@ -143,9 +143,22 @@ export function rpc() {
       summary: 'Call JSON-RPC',
       tags: ['RPC'],
     }),
-    (c) => {
+    async (c) => {
       if (Auth.narrowAccess) return Auth.accessError(c)
 
+      if (requiresApiKey(c)) {
+        const body = await c.req.raw
+          .clone()
+          .json()
+          .catch(() => undefined)
+        if (!isPublicRequest(body))
+          return Response.error(c, {
+            code: 'api_key_missing',
+            message: 'Missing API key',
+            status: 401,
+          })
+      }
+
       const chainId = resolveChainId(c)
       if (!chainId)
         return Response.error(c, {
@@ -161,6 +174,23 @@ export function rpc() {
   )
 }
 
+function requiresApiKey(c: Context<App.Environment>) {
+  if (!c.get('auth')) return false
+  const principal = Auth.getPrincipal(c)
+  return principal?.type !== 'api_key' && principal?.type !== 'super_admin'
+}
+
+function isPublicRequest(body: unknown): boolean {
+  const requests = Array.isArray(body) ? body : [body]
+  return requests.length > 0 && requests.every((request) => isPublicMethod(request))
+}
+
+function isPublicMethod(request: unknown): boolean {
+  if (!request || typeof request !== 'object') return false
+  const method = (request as Record<string, unknown>)['method']
+  return typeof method === 'string' && method.startsWith('eth_')
+}
+
 async function passthrough(
   c: Context<App.Environment>,
   chainId: z.output<typeof Schema.ChainId>,

package/src/apps/{tokenlist.test.ts → data/routes/tokenlist.test.ts}

@@ -1,6 +1,6 @@
-import * as TestApp from '../../test/App.js'
-import * as Runtime from '../../test/runtime.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
+import * as TestApp from '../../../../test/App.js'
+import * as Runtime from '../../../../test/runtime.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
 import * as Tokenlist from './tokenlist.js'
 
 /** Reader key for the data routes. */

package/src/apps/{tokenlist.ts → data/routes/tokenlist.ts}

@@ -1,14 +1,14 @@
 import { Hono } from 'hono'
 import * as z from 'zod/mini'
 
-import type * as App from '../App.js'
-import * as Auth from '../internal/Auth.js'
-import * as Cache from '../internal/Cache.js'
-import * as OpenApi from '../internal/OpenApi.js'
-import * as Response from '../internal/Response.js'
-import * as Schema from '../internal/Schema.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
-import * as Viem from '../internal/Viem.js'
+import type * as App from '../../../App.js'
+import * as Auth from '../../../internal/Auth.js'
+import * as Cache from '../../../internal/Cache.js'
+import * as OpenApi from '../../../internal/OpenApi.js'
+import * as Response from '../../../internal/Response.js'
+import * as Schema from '../../../internal/Schema.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
+import * as Viem from '../../../internal/Viem.js'
 import { getTokenLogo } from './tokens.js'
 
 /** Zod schemas owned by the tokenlist resource. */
@@ -124,7 +124,7 @@ export namespace schema {
  */
 export function tokenlist() {
   return new Hono<App.Environment>().get(
-    '/',
+    '/v1/tokenlist',
     Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
     OpenApi.validate('query', schema.getTokenList.Query, {
       code: 'query_invalid',

package/src/apps/{tokens.test.ts → data/routes/tokens.test.ts}

@@ -1,7 +1,7 @@
 import { Schema } from 'tapimo'
 
-import * as TestApp from '../../test/App.js'
-import * as Runtime from '../../test/runtime.js'
+import * as TestApp from '../../../../test/App.js'
+import * as Runtime from '../../../../test/runtime.js'
 import * as Tokens from './tokens.js'
 
 // Verified enrichment is store-backed now that the build-time bundle is gone, so

package/src/apps/{tokens.ts → data/routes/tokens.ts}

@@ -3,20 +3,20 @@ import { AbiEvent, AbiParameters } from 'ox'
 import { type Address, ContractFunctionExecutionError } from 'viem'
 import * as z from 'zod/mini'
 
-import type * as App from '../App.js'
-import * as Auth from '../internal/Auth.js'
-import * as Cache from '../internal/Cache.js'
-import * as Cursor from '../internal/Cursor.js'
-import * as OpenApi from '../internal/OpenApi.js'
-import * as Path from '../internal/Path.js'
-import * as Response from '../internal/Response.js'
-import * as Schema from '../internal/Schema.js'
-import * as Store from '../internal/Store.js'
-import * as Tidx from '../internal/Tidx.js'
-import * as Timing from '../internal/Timing.js'
-import * as Ttl from '../internal/Ttl.js'
-import * as Value from '../internal/Value.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
+import type * as App from '../../../App.js'
+import * as Auth from '../../../internal/Auth.js'
+import * as Cache from '../../../internal/Cache.js'
+import * as Cursor from '../../../internal/Cursor.js'
+import * as OpenApi from '../../../internal/OpenApi.js'
+import * as Path from '../../../internal/Path.js'
+import * as Response from '../../../internal/Response.js'
+import * as Schema from '../../../internal/Schema.js'
+import * as Store from '../../../internal/Store.js'
+import * as Tidx from '../../../internal/Tidx.js'
+import * as Timing from '../../../internal/Timing.js'
+import * as Ttl from '../../../internal/Ttl.js'
+import * as Value from '../../../internal/Value.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
 import * as Transactions from './transactions.js'
 
 const tokenCreatedSignature =
@@ -552,7 +552,7 @@ export namespace schema {
 export function tokens() {
   return new Hono<App.Environment>()
     .get(
-      '/',
+      '/v1/tokens',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('query', schema.getTokens.Query, {
         code: 'query_invalid',
@@ -622,7 +622,7 @@ export function tokens() {
       },
     )
     .get(
-      `/:symbol{${schema.getTokenBySymbol.routePattern}}`,
+      `/v1/tokens/:symbol{${schema.getTokenBySymbol.routePattern}}`,
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.getTokenBySymbol.Params, {
         code: 'symbol_invalid',
@@ -694,7 +694,7 @@ export function tokens() {
       },
     )
     .get(
-      '/:token',
+      '/v1/tokens/:token',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.getToken.Params, {
         code: 'token_invalid',
@@ -749,7 +749,7 @@ export function tokens() {
       },
     )
     .get(
-      '/:token/logo',
+      '/v1/tokens/:token/logo',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.getTokenLogo.Params, {
         code: 'token_invalid',
@@ -839,7 +839,7 @@ export function tokens() {
       },
     )
     .get(
-      '/:token/holders',
+      '/v1/tokens/:token/holders',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.getTokenHolders.Params, {
         code: 'token_invalid',
@@ -930,7 +930,7 @@ export function tokens() {
       },
     )
     .get(
-      '/:token/transactions',
+      '/v1/tokens/:token/transactions',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.getTokenTransactions.Params, {
         code: 'token_invalid',

package/src/apps/{transactions.test.ts → data/routes/transactions.test.ts}

@@ -2,9 +2,9 @@ import { Schema } from 'tapimo'
 import { Hex } from 'ox'
 import { zeroHash } from 'viem'
 
-import * as TestApp from '../../test/App.js'
-import * as Runtime from '../../test/runtime.js'
-import * as Viem from '../../test/Viem.js'
+import * as TestApp from '../../../../test/App.js'
+import * as Runtime from '../../../../test/runtime.js'
+import * as Viem from '../../../../test/Viem.js'
 import * as Transactions from './transactions.js'
 
 /** The decoded `type` names a humanized transaction may report. */

package/src/apps/{transactions.ts → data/routes/transactions.ts}

@@ -2,19 +2,19 @@ import { Hono, type Context } from 'hono'
 import { Hex } from 'ox'
 import * as z from 'zod/mini'
 
-import type * as App from '../App.js'
-import * as Auth from '../internal/Auth.js'
-import * as Cache from '../internal/Cache.js'
-import * as Cursor from '../internal/Cursor.js'
-import * as OpenApi from '../internal/OpenApi.js'
-import * as Response from '../internal/Response.js'
-import * as Schema from '../internal/Schema.js'
-import * as Store from '../internal/Store.js'
-import type * as Tidx from '../internal/Tidx.js'
-import * as Timing from '../internal/Timing.js'
-import * as Ttl from '../internal/Ttl.js'
-import * as Value from '../internal/Value.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
+import type * as App from '../../../App.js'
+import * as Auth from '../../../internal/Auth.js'
+import * as Cache from '../../../internal/Cache.js'
+import * as Cursor from '../../../internal/Cursor.js'
+import * as OpenApi from '../../../internal/OpenApi.js'
+import * as Response from '../../../internal/Response.js'
+import * as Schema from '../../../internal/Schema.js'
+import * as Store from '../../../internal/Store.js'
+import type * as Tidx from '../../../internal/Tidx.js'
+import * as Timing from '../../../internal/Timing.js'
+import * as Ttl from '../../../internal/Ttl.js'
+import * as Value from '../../../internal/Value.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
 import * as Receipts from './receipts.js'
 import * as Tokens from './tokens.js'
 
@@ -595,7 +595,7 @@ export namespace schema {
 export function transactions() {
   return new Hono<App.Environment>()
     .get(
-      '/',
+      '/v1/transactions',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('query', schema.getTransactions.Query, {
         code: 'query_invalid',
@@ -692,7 +692,7 @@ export function transactions() {
       },
     )
     .get(
-      '/:transactionHash',
+      '/v1/transactions/:transactionHash',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.getTransaction.Params, {
         code: 'transaction_invalid',

package/src/apps/{transfers.test.ts → data/routes/transfers.test.ts}

@@ -1,8 +1,8 @@
 import type * as z from 'zod/mini'
 import { Schema } from 'tapimo'
 
-import * as TestApp from '../../test/App.js'
-import * as Runtime from '../../test/runtime.js'
+import * as TestApp from '../../../../test/App.js'
+import * as Runtime from '../../../../test/runtime.js'
 import * as Transfers from './transfers.js'
 
 describe('GET /transfers', () => {

package/src/apps/{transfers.ts → data/routes/transfers.ts}

@@ -3,20 +3,20 @@ import { Address, Hex } from 'ox'
 import { Addresses } from 'viem/tempo'
 import * as z from 'zod/mini'
 
-import type * as App from '../App.js'
-import * as Auth from '../internal/Auth.js'
-import * as Cache from '../internal/Cache.js'
-import * as Cursor from '../internal/Cursor.js'
-import * as Mpp from '../internal/Mpp.js'
-import * as OpenApi from '../internal/OpenApi.js'
-import * as Response from '../internal/Response.js'
-import * as Schema from '../internal/Schema.js'
-import * as Store from '../internal/Store.js'
-import type * as Tidx from '../internal/Tidx.js'
-import * as Timing from '../internal/Timing.js'
-import * as Ttl from '../internal/Ttl.js'
-import * as Value from '../internal/Value.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
+import type * as App from '../../../App.js'
+import * as Auth from '../../../internal/Auth.js'
+import * as Cache from '../../../internal/Cache.js'
+import * as Cursor from '../../../internal/Cursor.js'
+import * as Mpp from '../../../internal/Mpp.js'
+import * as OpenApi from '../../../internal/OpenApi.js'
+import * as Response from '../../../internal/Response.js'
+import * as Schema from '../../../internal/Schema.js'
+import * as Store from '../../../internal/Store.js'
+import type * as Tidx from '../../../internal/Tidx.js'
+import * as Timing from '../../../internal/Timing.js'
+import * as Ttl from '../../../internal/Ttl.js'
+import * as Value from '../../../internal/Value.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
 import * as Tokens from './tokens.js'
 
 // TIP-20 tokens emit the standard ERC-20 Transfer event. Supplying the
@@ -285,7 +285,7 @@ export namespace schema {
 /** Creates transfer handlers. */
 export function transfers() {
   return new Hono<App.Environment>().get(
-    '/',
+    '/v1/transfers',
     Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
     OpenApi.validate('query', schema.getTransfers.Query, {
       code: 'query_invalid',

package/src/apps/{verified-tokens.test.ts → data/routes/verified-tokens.test.ts}

@@ -1,6 +1,6 @@
-import * as TestApp from '../../test/App.js'
-import * as Runtime from '../../test/runtime.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
+import * as TestApp from '../../../../test/App.js'
+import * as Runtime from '../../../../test/runtime.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
 import * as Verified from './verified-tokens.js'
 
 /** Reader key for the data routes. */

package/src/apps/{verified-tokens.ts → data/routes/verified-tokens.ts}

@@ -1,13 +1,13 @@
 import { type Context, Hono } from 'hono'
 import * as z from 'zod/mini'
 
-import type * as App from '../App.js'
-import * as Auth from '../internal/Auth.js'
-import * as Cache from '../internal/Cache.js'
-import * as OpenApi from '../internal/OpenApi.js'
-import * as Response from '../internal/Response.js'
-import * as Schema from '../internal/Schema.js'
-import * as VerifiedTokens from '../internal/VerifiedTokens.js'
+import type * as App from '../../../App.js'
+import * as Auth from '../../../internal/Auth.js'
+import * as Cache from '../../../internal/Cache.js'
+import * as OpenApi from '../../../internal/OpenApi.js'
+import * as Response from '../../../internal/Response.js'
+import * as Schema from '../../../internal/Schema.js'
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js'
 
 /** Zod schemas owned by the verified-tokens resource. */
 export namespace schema {
@@ -138,7 +138,7 @@ export namespace schema {
 export function verifiedTokens() {
   return new Hono<App.Environment>()
     .get(
-      '/',
+      '/v1/verified-tokens',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('query', schema.listVerifiedTokens.Query, {
         code: 'query_invalid',
@@ -183,7 +183,7 @@ export function verifiedTokens() {
       },
     )
     .get(
-      '/currencies',
+      '/v1/verified-tokens/currencies',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('query', schema.getVerifiedTokenCurrencies.Query, {
         code: 'query_invalid',
@@ -230,7 +230,7 @@ export function verifiedTokens() {
       },
     )
     .get(
-      '/:address',
+      '/v1/verified-tokens/:address',
       Auth.policy({ apiKey: { scopes: ['data:read'] }, mpp: true, public: true }),
       OpenApi.validate('param', schema.Params, {
         code: 'address_invalid',