tapimo 0.12.0 → 0.14.0

package/src/admin/apps/organizations.ts

@@ -71,6 +71,18 @@ export namespace schema {
     'An organization visible to an authenticated administrator.',
   )
 
+  const SponsorshipSubsidy = Schema.describe(
+    z.object({
+      durationDays: z
+        .nullable(z.literal(90))
+        .check(z.describe('Promotion duration in days, or null when disabled.'), z.meta({ examples: [90] })), // prettier-ignore
+      projectSpendLimit: z
+        .nullable(z.string())
+        .check(z.describe('Optional per-project promotion cap in USD.'), z.meta({ examples: ['1000'] })), // prettier-ignore
+    }),
+    'Current per-project sponsorship subsidy policy.',
+  )
+
   /** Schemas for the listOrganizations operation. */
   export namespace listOrganizations {
     /** Query parameters for organization lookup. */
@@ -287,6 +299,7 @@ export namespace schema {
               ],
             }),
           ),
+        sponsorshipSubsidy: SponsorshipSubsidy,
       }),
       'Detailed organization information for administrators.',
     )
@@ -435,8 +448,8 @@ export namespace schema {
     )
   }
 
-  /** Schemas for the getOrganizationSponsorship operation. */
-  export namespace getOrganizationSponsorship {
+  /** Schemas for organization sponsorship operations. */
+  export namespace organizationSponsorship {
     const Environment = z.object({
       committedSpend: z
         .string()
@@ -454,7 +467,7 @@ export namespace schema {
     })
 
     /** Current-period sponsorship spend by key environment. */
-    export const Response = Schema.describe(
+    export const GetResponse = Schema.describe(
       z.object({
         production: Environment,
         sandbox: Environment,
@@ -462,6 +475,28 @@ export namespace schema {
       }),
       'Current-period sponsorship spend for an organization.',
     )
+
+    /** Replacement subsidy policy. */
+    export const SetBody = z
+      .union([
+        z.object({
+          enabled: z.literal(true),
+          projectSpendLimit: z.optional(
+            z
+              .string()
+              .check(
+                z.regex(/^(?:0|[1-9]\d*)(?:\.\d{1,6})?$/),
+                z.describe('Optional per-project promotion cap in USD.'),
+                z.meta({ examples: ['1000'] }),
+              ),
+          ),
+        }),
+        z.object({ enabled: z.literal(false) }),
+      ])
+      .check(z.describe('Replacement per-project sponsorship subsidy policy.'))
+
+    /** Current subsidy policy. */
+    export const SetResponse = SponsorshipSubsidy
   }
 
   /** Schemas for the getOrganizationWebhooks operation. */
@@ -640,6 +675,56 @@ export function organizations() {
                 production: serializeBilling(productionSettings, productionSource),
                 sandbox: serializeBilling(sandboxSettings, sandboxSource),
               },
+              sponsorshipSubsidy: {
+                durationDays: organization.sponsorshipSubsidyDurationDays,
+                projectSpendLimit: organization.sponsorshipSubsidyProjectSpendLimit,
+              },
+            }),
+            200,
+          )
+        } catch (cause) {
+          return Response.upstream(c, cause)
+        }
+      },
+    )
+    .put(
+      '/:orgId/sponsorship',
+      OpenApi.validate('param', schema.getOrganization.Params, {
+        code: 'param_invalid',
+        message: 'Invalid path parameters',
+      }),
+      OpenApi.validate('json', schema.organizationSponsorship.SetBody, {
+        code: 'body_invalid',
+        message: 'Invalid request body',
+      }),
+      OpenApi.describeRoute({
+        operationId: 'setAdminOrganizationSponsorshipSubsidy',
+        responses: OpenApi.responses({
+          errors: { 404: 'Organization not found.' },
+          success: {
+            description: 'Current sponsorship subsidy policy.',
+            schema: schema.organizationSponsorship.SetResponse,
+          },
+        }),
+        summary: 'Set sponsorship subsidy',
+        tags: ['Organizations'],
+      }),
+      async (c) => {
+        const { orgId } = c.req.valid('param')
+        const policy = c.req.valid('json')
+        try {
+          const organization = await Organizations.setSponsorshipSubsidy(
+            Db.get(c.get('db')),
+            orgId,
+            policy.enabled
+              ? { durationDays: 90, projectSpendLimit: policy.projectSpendLimit ?? null }
+              : { durationDays: null, projectSpendLimit: null },
+          )
+          if (!organization) return organizationNotFound(c)
+          return c.json(
+            Response.validated(schema.organizationSponsorship.SetResponse, {
+              durationDays: organization.sponsorshipSubsidyDurationDays,
+              projectSpendLimit: organization.sponsorshipSubsidyProjectSpendLimit,
             }),
             200,
           )
@@ -933,7 +1018,7 @@ export function organizations() {
           errors: { 404: 'Organization not found.' },
           success: {
             description: 'Recent organization sponsorship activity.',
-            schema: schema.getOrganizationSponsorship.Response,
+            schema: schema.organizationSponsorship.GetResponse,
           },
         }),
         summary: 'Get sponsorship activity',
@@ -969,7 +1054,7 @@ export function organizations() {
             }),
           )
           return c.json(
-            Response.validated(schema.getOrganizationSponsorship.Response, {
+            Response.validated(schema.organizationSponsorship.GetResponse, {
               production,
               sandbox,
               to,

package/src/admin/ui/src/lib/api-keys.ts

@@ -93,6 +93,25 @@ export namespace update {
   }
 }
 
+/** Rotates an API key while preserving its access and attribution. */
+export namespace rotate {
+  export async function fn(id: string) {
+    const response = await client['api-keys'][':id'].rotate.$post({ param: { id } })
+    if (!response.ok)
+      throw new Error(
+        await Response.errorMessage(response, { fallback: 'Failed to rotate the API key.' }),
+      )
+    return response.json()
+  }
+  export function useMutation() {
+    const queryClient = ReactQuery.useQueryClient()
+    return ReactQuery.useMutation({
+      mutationFn: fn,
+      onSuccess: () => queryClient.invalidateQueries({ queryKey: get.baseKey }),
+    })
+  }
+}
+
 /** Revoke an API key by id. */
 export namespace revoke {
   export async function fn(id: string) {

package/src/admin/ui/src/lib/organizations.test.ts

@@ -5,7 +5,11 @@ import { renderToStaticMarkup } from 'react-dom/server'
 import { describe, expect, it, vi } from 'vite-plus/test'
 
 import { routeTree } from '../routeTree.gen.js'
-import { BillingSourcesCard, Route as DetailRoute } from '../routes/organizations_.$orgId.js'
+import {
+  BillingSourcesCard,
+  Route as DetailRoute,
+  SponsorshipSubsidyCard,
+} from '../routes/organizations_.$orgId.js'
 import { Route as ListRoute } from '../routes/organizations.js'
 import * as Organizations from './organizations.js'
 
@@ -75,6 +79,7 @@ describe('withEnabledSources', () => {
       memberCount: 0,
       name: 'Example',
       projectCount: 0,
+      sponsorshipSubsidy: { durationDays: null, projectSpendLimit: null },
       updatedAt: '2026-01-01T00:00:00.000Z',
       userId: null,
     } satisfies Organizations.Detail
@@ -101,6 +106,50 @@ describe('withEnabledSources', () => {
   })
 })
 
+describe('withSponsorshipSubsidy', () => {
+  it('replaces only the organization subsidy policy', () => {
+    const detail = {
+      billing: {
+        enabledSources: [],
+        production: { settings: null, source: null },
+        sandbox: { settings: null, source: null },
+      },
+      createdAt: '2026-01-01T00:00:00.000Z',
+      createdBy: null,
+      id: 'org_example',
+      memberCount: 0,
+      name: 'Example',
+      projectCount: 0,
+      sponsorshipSubsidy: { durationDays: null, projectSpendLimit: null },
+      updatedAt: '2026-01-01T00:00:00.000Z',
+      userId: null,
+    } satisfies Organizations.Detail
+
+    const updated = Organizations.withSponsorshipSubsidy({
+      detail,
+      sponsorshipSubsidy: { durationDays: 90, projectSpendLimit: '1000' },
+    })
+
+    expect({
+      billingPreserved: updated.billing === detail.billing,
+      original: detail.sponsorshipSubsidy,
+      updated: updated.sponsorshipSubsidy,
+    }).toMatchInlineSnapshot(`
+      {
+        "billingPreserved": true,
+        "original": {
+          "durationDays": null,
+          "projectSpendLimit": null,
+        },
+        "updated": {
+          "durationDays": 90,
+          "projectSpendLimit": "1000",
+        },
+      }
+    `)
+  })
+})
+
 describe('BillingSourcesCard', () => {
   it('renders source state and the setup-only warning', () => {
     const markup = renderToStaticMarkup(
@@ -139,6 +188,68 @@ describe('BillingSourcesCard', () => {
   })
 })
 
+describe('SponsorshipSubsidyCard', () => {
+  it('renders an enabled policy with its fixed duration and optional cap', () => {
+    const markup = renderToStaticMarkup(
+      createElement(SponsorshipSubsidyCard, {
+        error: null,
+        onSave() {},
+        pending: false,
+        policy: { durationDays: 90, projectSpendLimit: '1000' },
+      }),
+    )
+    const marker = 'aria-label="Sponsorship subsidy"'
+    const markerIndex = markup.indexOf(marker)
+    const switchTag = markup.slice(
+      markup.lastIndexOf('<', markerIndex),
+      markup.indexOf('>', markerIndex),
+    )
+
+    expect({
+      cap: markup.includes('value="1000"'),
+      duration: markup.includes('value="90 days"'),
+      enabled: switchTag.includes('aria-checked="true"'),
+      startsAt: markup.includes('first mainnet sponsorship'),
+    }).toMatchInlineSnapshot(`
+      {
+        "cap": true,
+        "duration": true,
+        "enabled": true,
+        "startsAt": true,
+      }
+    `)
+  })
+
+  it('renders a disabled policy', () => {
+    const markup = renderToStaticMarkup(
+      createElement(SponsorshipSubsidyCard, {
+        error: null,
+        onSave() {},
+        pending: false,
+        policy: { durationDays: null, projectSpendLimit: null },
+      }),
+    )
+    const marker = 'aria-label="Sponsorship subsidy"'
+    const markerIndex = markup.indexOf(marker)
+    const switchTag = markup.slice(
+      markup.lastIndexOf('<', markerIndex),
+      markup.indexOf('>', markerIndex),
+    )
+
+    expect({
+      billedNormally: markup.includes('billed normally'),
+      disabled: switchTag.includes('aria-checked="false"'),
+      spendCapHidden: !markup.includes('Per-project spend cap'),
+    }).toMatchInlineSnapshot(`
+      {
+        "billedNormally": true,
+        "disabled": true,
+        "spendCapHidden": true,
+      }
+    `)
+  })
+})
+
 describe('organization routes', () => {
   it('matches a direct detail URL without the list route as a parent', () => {
     const router = createRouter({

package/src/admin/ui/src/lib/organizations.ts

@@ -26,6 +26,10 @@ type SponsorshipResponse = InferResponseType<
   (typeof client)['organizations'][':orgId']['sponsorship']['$get'],
   200
 >
+type SponsorshipSubsidyResponse = InferResponseType<
+  (typeof client)['organizations'][':orgId']['sponsorship']['$put'],
+  200
+>
 type UsageResponse = InferResponseType<
   (typeof client)['organizations'][':orgId']['usage']['$get'],
   200
@@ -172,6 +176,24 @@ export declare namespace withEnabledSources {
   }
 }
 
+/** Returns organization detail with its sponsorship subsidy policy replaced. */
+export function withSponsorshipSubsidy(options: withSponsorshipSubsidy.Options): Detail {
+  return {
+    ...options.detail,
+    sponsorshipSubsidy: options.sponsorshipSubsidy,
+  }
+}
+
+export declare namespace withSponsorshipSubsidy {
+  /** Inputs for replacing an organization's cached subsidy policy. */
+  type Options = {
+    /** Organization detail to update. */
+    detail: Detail
+    /** Current sponsorship subsidy policy. */
+    sponsorshipSubsidy: Detail['sponsorshipSubsidy']
+  }
+}
+
 /** Enable an organization-wide billing source. */
 export namespace enableBillingSource {
   /** Billing source to enable for an organization. */
@@ -236,6 +258,39 @@ export namespace disableBillingSource {
   }
 }
 
+/** Replace an organization's sponsorship subsidy policy. */
+export namespace setSponsorshipSubsidy {
+  /** Sponsorship subsidy policy accepted by the admin API. */
+  export type Input = { enabled: false } | { enabled: true; projectSpendLimit?: string | undefined }
+
+  /** Replaces the policy and returns its current value. */
+  export async function fn(options: Input & { orgId: string }) {
+    const json = ((): Input => {
+      if (!options.enabled) return { enabled: false }
+      if (!options.projectSpendLimit) return { enabled: true }
+      return { enabled: true, projectSpendLimit: options.projectSpendLimit }
+    })()
+    const response = await client.organizations[':orgId'].sponsorship.$put({
+      json,
+      param: { orgId: options.orgId },
+    })
+    if (!response.ok) throw new Error('Failed to update sponsorship subsidy.')
+    return (await response.json()) as SponsorshipSubsidyResponse
+  }
+
+  /** Creates a mutation that replaces the subsidy policy. */
+  export function useMutation(orgId: string) {
+    const queryClient = ReactQuery.useQueryClient()
+    return ReactQuery.useMutation({
+      mutationFn: (input: Input) => fn({ ...input, orgId }),
+      onSuccess: (response) =>
+        queryClient.setQueryData(get.key(orgId), (detail: Detail | undefined) =>
+          detail ? withSponsorshipSubsidy({ detail, sponsorshipSubsidy: response }) : detail,
+        ),
+    })
+  }
+}
+
 /** List members for one organization. */
 export namespace members {
   export function key(orgId: string) {

package/src/admin/ui/src/routes/api-keys.tsx

@@ -8,6 +8,7 @@ import {
   Copy as CopyIcon,
   Pencil,
   Plus,
+  RefreshCw,
   Search,
   Trash2,
   TriangleAlert,
@@ -207,13 +208,13 @@ function RouteComponent() {
   )
 }
 
-function TokenBanner(props: { onDismiss: () => void; token: string }) {
+function TokenBanner(props: { onDismiss: () => void; title?: string; token: string }) {
   const { copy, notifying } = useCopy()
   return (
     <Card className="flex flex-col gap-3 p-4">
       <div className="flex items-start justify-between gap-3">
         <div className="flex flex-col gap-1">
-          <span className="text-label-14 text-foreground">Key provisioned</span>
+          <span className="text-label-14 text-foreground">{props.title ?? 'Key provisioned'}</span>
           <span className="text-label-12 text-foreground-secondary">
             Copy this token now, it won't be shown again.
           </span>
@@ -732,6 +733,7 @@ function KeyRow(props: { currentUser?: string | undefined; record: ApiKeys.ApiKe
           </dl>
           <div className="flex justify-end gap-2 border-t border-border px-5 py-3">
             <EditDialog record={record} />
+            <RotateDialog record={record} />
             <RevokeDialog currentUser={currentUser} record={record} />
           </div>
         </Rows.Panel>
@@ -812,6 +814,91 @@ declare namespace EditDialog {
   }
 }
 
+function RotateDialog(options: RotateDialog.Props) {
+  const { record } = options
+  const [open, setOpen] = useState(false)
+  const rotate = ApiKeys.rotate.useMutation()
+
+  return (
+    <Dialog.Root
+      onOpenChange={(value) => {
+        if (!value && rotate.isPending) return
+        setOpen(value)
+        if (!value) rotate.reset()
+      }}
+      open={open}
+    >
+      <Dialog.Trigger
+        render={
+          <Button size="small">
+            <RefreshCw className="size-4" />
+            Rotate key
+          </Button>
+        }
+      />
+      <Dialog.Popup>
+        {rotate.data ? (
+          <>
+            <Dialog.Title>Key rotated</Dialog.Title>
+            <Dialog.Description>
+              Copy the replacement token now. The source key remains active until it is revoked.
+            </Dialog.Description>
+            <div className="mt-5">
+              <TokenBanner
+                onDismiss={() => setOpen(false)}
+                title="Replacement key provisioned"
+                token={rotate.data.token}
+              />
+            </div>
+          </>
+        ) : (
+          <>
+            <Dialog.Title>Rotate {record.name ?? 'API key'}?</Dialog.Title>
+            <Dialog.Description>
+              This creates a replacement with the same scopes, ownership, limits, and restrictions.
+              The source key remains active.
+            </Dialog.Description>
+            <dl className="mt-5 grid grid-cols-2 gap-4 border border-border bg-secondary p-4">
+              <Detail className="col-span-2" label="Key ID">
+                <code className="break-all">{record.id}</code>
+              </Detail>
+              <Detail label="Environment">{record.environment}</Detail>
+              <Detail label="Organization">{organization(record)}</Detail>
+              <Detail label="Project">{project(record)}</Detail>
+              <Detail label="Scopes">{record.scopes.length}</Detail>
+            </dl>
+            {rotate.error ? (
+              <p className="mt-3 text-copy-13 text-negative">{rotate.error.message}</p>
+            ) : null}
+            <div className="mt-6 flex justify-end gap-2">
+              <Dialog.Close
+                render={
+                  <Button disabled={rotate.isPending} type="button">
+                    Cancel
+                  </Button>
+                }
+              />
+              <Button
+                loading={rotate.isPending}
+                onClick={() => rotate.mutate(record.id)}
+                variant="primary"
+              >
+                Rotate key
+              </Button>
+            </div>
+          </>
+        )}
+      </Dialog.Popup>
+    </Dialog.Root>
+  )
+}
+
+declare namespace RotateDialog {
+  type Props = {
+    record: ApiKeys.ApiKey
+  }
+}
+
 function RevokeDialog(props: { currentUser?: string | undefined; record: ApiKeys.ApiKey }) {
   const { currentUser, record } = props
   const [confirmation, setConfirmation] = useState('')

package/src/admin/ui/src/routes/organizations_.$orgId.tsx

@@ -14,6 +14,7 @@ import {
 } from '@tanstack/react-router'
 import { Button, Rows, Select } from 'regen-ui'
 import { ArrowLeft, RefreshCw } from 'lucide-react'
+import { useEffect, useState } from 'react'
 
 import { Card, Notice, Page } from '../components/Page.js'
 import * as core_Format from '../lib/format.js'
@@ -34,6 +35,7 @@ function PageComponent() {
   const period = period_search ?? '7d'
   const disableBillingSource = Organizations.disableBillingSource.useMutation(orgId)
   const enableBillingSource = Organizations.enableBillingSource.useMutation(orgId)
+  const setSponsorshipSubsidy = Organizations.setSponsorshipSubsidy.useMutation(orgId)
   const organizationQuery = useSuspenseQuery(Organizations.get.options(orgId))
   const organization = organizationQuery.data
   const members = useInfiniteQuery(Organizations.members.options(orgId))
@@ -198,6 +200,12 @@ function PageComponent() {
           onChange={setBillingSource}
           pending={billingSourcePending}
         />
+        <SponsorshipSubsidyCard
+          error={setSponsorshipSubsidy.error}
+          onSave={(policy) => setSponsorshipSubsidy.mutate(policy)}
+          pending={setSponsorshipSubsidy.isPending}
+          policy={organization.sponsorshipSubsidy}
+        />
         <div className="grid gap-3 md:grid-cols-2">
           <BillingCard
             environment="Production"
@@ -655,6 +663,114 @@ export declare namespace BillingSourcesCard {
   }
 }
 
+/** Organization-wide per-project sponsorship subsidy controls. */
+export function SponsorshipSubsidyCard(options: SponsorshipSubsidyCard.Props) {
+  const [enabled, setEnabled] = useState(options.policy.durationDays !== null)
+  const [projectSpendLimit, setProjectSpendLimit] = useState(options.policy.projectSpendLimit ?? '')
+
+  useEffect(() => {
+    setEnabled(options.policy.durationDays !== null)
+    setProjectSpendLimit(options.policy.projectSpendLimit ?? '')
+  }, [options.policy.durationDays, options.policy.projectSpendLimit])
+
+  return (
+    <Card>
+      <form
+        onSubmit={(event) => {
+          event.preventDefault()
+          if (!enabled) return options.onSave({ enabled: false })
+          if (!projectSpendLimit) return options.onSave({ enabled: true })
+          return options.onSave({ enabled: true, projectSpendLimit })
+        }}
+      >
+        <div className="flex items-start justify-between gap-4 p-4">
+          <div className="min-w-0">
+            <h3 className="text-label-14 text-foreground">Sponsorship subsidy</h3>
+            <p className="mt-1 text-copy-13 text-foreground-secondary">
+              Waive sponsored transaction charges for each project's first 90 days.
+            </p>
+          </div>
+          <Switch.Root
+            aria-label="Sponsorship subsidy"
+            checked={enabled}
+            className="flex h-5 w-9 shrink-0 cursor-pointer items-center rounded-full border border-border bg-secondary p-0.5 outline-none transition-colors hover:bg-secondary-hover focus-visible:border-focus data-[checked]:bg-invert disabled:cursor-not-allowed disabled:opacity-50"
+            disabled={options.pending}
+            onCheckedChange={setEnabled}
+          >
+            <Switch.Thumb className="block size-4 translate-x-0 rounded-full bg-foreground-secondary transition-transform data-[checked]:translate-x-4 data-[checked]:bg-on-invert" />
+          </Switch.Root>
+        </div>
+        {enabled ? (
+          <div className="grid gap-4 border-t border-border p-4 md:grid-cols-2">
+            <label className="flex min-w-0 flex-col gap-2">
+              <span className="text-label-13 text-foreground-secondary">Duration per project</span>
+              <input
+                className="h-10 rounded-body border-2 border-transparent bg-secondary px-3 text-copy-14 text-foreground-secondary"
+                disabled
+                value="90 days"
+              />
+              <span className="text-label-12 text-foreground-secondary">
+                Starts with the project's first mainnet sponsorship.
+              </span>
+            </label>
+            <label className="flex min-w-0 flex-col gap-2">
+              <span className="text-label-13 text-foreground-secondary">
+                Per-project spend cap (optional)
+              </span>
+              <span className="flex h-10 items-center rounded-body border-2 border-transparent bg-secondary px-3 focus-within:border-focus">
+                <span className="text-copy-14 text-foreground-secondary">$</span>
+                <input
+                  aria-label="Per-project spend cap"
+                  className="min-w-0 flex-1 bg-transparent px-2 text-copy-14 text-foreground outline-none"
+                  disabled={options.pending}
+                  inputMode="decimal"
+                  min="0"
+                  onChange={(event) => setProjectSpendLimit(event.target.value)}
+                  placeholder="No cap"
+                  step="0.000001"
+                  type="number"
+                  value={projectSpendLimit}
+                />
+              </span>
+              <span className="text-label-12 text-foreground-secondary">
+                Leave blank for no spend cap.
+              </span>
+            </label>
+          </div>
+        ) : (
+          <p className="border-t border-border p-4 text-copy-13 text-foreground-secondary">
+            New sponsorships for this organization are billed normally.
+          </p>
+        )}
+        <div className="flex items-center justify-end gap-3 border-t border-border p-4">
+          {options.error ? (
+            <p className="mr-auto text-copy-13 text-negative" role="alert">
+              {options.error.message}
+            </p>
+          ) : null}
+          <Button loading={options.pending} type="submit">
+            Save policy
+          </Button>
+        </div>
+      </form>
+    </Card>
+  )
+}
+
+export declare namespace SponsorshipSubsidyCard {
+  /** Sponsorship subsidy control properties. */
+  type Props = {
+    /** Latest mutation error. */
+    error: Error | null
+    /** Saves a replacement policy. */
+    onSave: (policy: Organizations.setSponsorshipSubsidy.Input) => void
+    /** Whether a policy change is pending. */
+    pending: boolean
+    /** Current organization policy. */
+    policy: Organizations.Detail['sponsorshipSubsidy']
+  }
+}
+
 function BillingCard(options: BillingCard.Props) {
   const { settings, source } = options.record
   const remaining =