tapimo 0.15.0 → 0.18.0

package/src/apps/data/routes/tokens.ts

@@ -1,7 +1,7 @@
 import { Hono, type Context } from 'hono'
 import { AbiEvent, AbiParameters, Hash } from 'ox'
 import { type Address, ContractFunctionExecutionError } from 'viem'
-import { Abis } from 'viem/tempo'
+import { Abis, Addresses } from 'viem/tempo'
 import * as z from 'zod/mini'
 
 import * as Assets from '../../../Assets.js'
@@ -52,6 +52,7 @@ const tokenCreatedSignature =
 // lookup reads the raw `logs` table by topic0 and ABI-decodes the data blob
 // instead.
 const tokenCreatedTopic = AbiEvent.getSelector(tokenCreatedSignature)
+const tip20Factory = Addresses.tip20Factory.toLowerCase()
 
 // Non-indexed `TokenCreated` data layout, in event-parameter order:
 // `[name, symbol, currency, quoteToken, admin, salt]`.
@@ -2072,7 +2073,7 @@ export async function getTokenCreatedAtByAddress(
 
   if (addresses.length === 0) return {}
 
-  const key = (address: string) => `token:v1:${options.chainId}:${address}:created_at`
+  const key = (address: string) => `token:v2:${options.chainId}:${address}:created_at`
 
   const cached = await Promise.all(addresses.map((address) => store.get(key(address))))
   const createdAtByAddress: Record<string, string> = {}
@@ -2095,7 +2096,8 @@ export async function getTokenCreatedAtByAddress(
       query: `
         SELECT token, block_timestamp
         FROM tokencreated
-        WHERE token IN (${misses.map((address) => `'${address}'`).join(', ')})
+        WHERE address = '${tip20Factory}'
+          AND token IN (${misses.map((address) => `'${address}'`).join(', ')})
       `,
       signatures: [tokenCreatedSignature],
     })
@@ -2165,7 +2167,7 @@ async function getTokenCreatedByAddress(
 
   if (addresses.length === 0) return {}
 
-  const key = (address: string) => `token:v2:${options.chainId}:${address}:created`
+  const key = (address: string) => `token:v3:${options.chainId}:${address}:created`
 
   const cached = await Promise.all(addresses.map((address) => store.get(key(address))))
   const createdByAddress: Record<string, getTokenCreatedByAddress.Created> = {}
@@ -2193,6 +2195,7 @@ async function getTokenCreatedByAddress(
         SELECT topic1, data, block_timestamp
         FROM logs
         WHERE selector = '${tokenCreatedTopic}'
+          AND address = '${tip20Factory}'
           AND topic1 IN (${misses.map((address) => `'0x${'0'.repeat(24)}${address.slice(2)}'`).join(', ')})
       ` as string,
     })
@@ -2445,7 +2448,9 @@ async function getTokens(c: Context<App.Environment>, options: getTokens.Options
         // here are real columns like `block_num` and `currency`, plus the
         // cursor keyset; verified-only mode is handled above by serving the
         // curated static list directly.
-        const filters: string[] = []
+        // Authenticate the emitter before pagination so forged events cannot
+        // crowd canonical factory-created tokens out of the public list.
+        const filters = [`address = '${tip20Factory}'`]
         if (cursor !== undefined)
           filters.push(
             Cursor.keyset([
@@ -2490,7 +2495,7 @@ async function getTokens(c: Context<App.Environment>, options: getTokens.Options
         }
       },
       {
-        key: `token:v1:${options.chainId}:indexed:${order}:${encodeURIComponent(options.currency?.toLowerCase() ?? '')}:${cursor ? `cursor:${cursor[0]}:${cursor[1]}` : offset !== undefined ? `page:${options.page}` : 'head'}:${limit}`,
+        key: `token:v2:${options.chainId}:indexed:${order}:${encodeURIComponent(options.currency?.toLowerCase() ?? '')}:${cursor ? `cursor:${cursor[0]}:${cursor[1]}` : offset !== undefined ? `page:${options.page}` : 'head'}:${limit}`,
         store,
         ttl: Ttl.minutes(2),
       },

package/src/apps/data/routes/transactions.test.ts

@@ -3,6 +3,7 @@
 import { Schema } from 'tapimo/server'
 import { Hex } from 'ox'
 import { zeroHash } from 'viem'
+import { Addresses } from 'viem/tempo'
 
 import * as TestApp from '../../../../test/App.js'
 import * as Runtime from '../../../../test/runtime.js'
@@ -502,4 +503,32 @@ describe('GET /transactions?address=…', () => {
       head.data.slice(5, 10).map((entry) => entry.hash),
     )
   })
+
+  test('serves an ascending page for a token contract that never sends', async () => {
+    // A TIP-20 contract never sends, so its `"from"` side has no matches: the
+    // ascending shape that can time out into the fenced retry.
+    const client = TestApp.client()
+    const response = await client.v1.transactions.$get(
+      { query: { address: Addresses.pathUsd, include: 'receipt', limit: '10', order: 'asc' } },
+      TestApp.auth,
+    )
+    const body = await TestApp.json(response, Transactions.schema.getTransactions.Response)
+    expect(response.status).toBe(200)
+    expect({
+      ascending: body.data.every(
+        (entry, index) =>
+          index === 0 || (body.data[index - 1]!.blockNumber ?? 0) <= (entry.blockNumber ?? 0),
+      ),
+      everyReceiptMatchesHash: body.data.every(
+        (entry) => entry.meta.receipt?.transactionHash === entry.hash,
+      ),
+      everyRecipientIsToken: body.data.every((entry) => entry.recipient === Addresses.pathUsd),
+    }).toMatchInlineSnapshot(`
+      {
+        "ascending": true,
+        "everyReceiptMatchesHash": true,
+        "everyRecipientIsToken": true,
+      }
+    `)
+  })
 })

package/src/apps/data/routes/transactions.ts

@@ -13,6 +13,7 @@ import * as Response from '../../../internal/Response.js'
 import * as Schema from '../../../internal/Schema.js'
 import * as Store from '../../../internal/Store.js'
 import * as Tidx from '../../../internal/Tidx.js'
+import * as Timeout from '../../../internal/Timeout.js'
 import * as Timing from '../../../internal/Timing.js'
 import * as Ttl from '../../../internal/Ttl.js'
 import * as Value from '../../../internal/Value.js'
@@ -1072,8 +1073,8 @@ export function getTransactions(c: Context<App.Environment>, options: getTransac
 
   return Timing.time(c, 'transactions', () =>
     Store.memoize(
-      async () => {
-        const page = await scanTransactions({ tidx }, options)
+      async (signal) => {
+        const page = await scanTransactions({ signal, tidx }, options)
         return {
           data: page.items.map((item) => item.data),
           nextCursor: page.nextCursor,
@@ -1115,7 +1116,7 @@ export async function scanTransactions(
     toBlock,
     toTimestamp,
   } = options
-  const { tidx } = deps
+  const { signal: flight, tidx } = deps
   const sortDirection = order === 'asc' ? 'ASC' : 'DESC'
   // Keyset pagination: anchor the page below the previous row's `(block, idx)`
   // position instead of a numeric offset, so rows arriving at the head can't
@@ -1177,35 +1178,43 @@ export async function scanTransactions(
     feePayer !== undefined ||
     feeToken !== undefined
   const fetchRows = async (where: readonly string[]) => {
+    // Raw-table query (no signature-decoded CTE), so the inline SQL is cast
+    // to `string`.
+    const query = (block: string) =>
+      `
+        SELECT ${transactionColumns}
+        FROM txs
+        ${where.length > 0 ? `WHERE ${where.join(' AND ')}` : ''}
+        ORDER BY ${block} ${sortDirection}, idx ${sortDirection}
+        LIMIT ${queryLimit}${skip}
+      ` as string
+    if (!filtered)
+      return await tidx.fetch({
+        chainId,
+        query: query('block_num'),
+        ...(flight ? { signal: flight } : {}),
+      })
+    // TIDX reports statement kills as 408 timeouts, which the client retries until
+    // the deadline; half the deadline bounds the walk so the fenced retry still runs.
+    const timeout = AbortSignal.timeout(Timeout.duration / 2)
     try {
       return await tidx.fetch({
         chainId,
-        // Raw-table query (no signature-decoded CTE), so the inline SQL is cast
-        // to `string`.
-        query: `
-          SELECT ${transactionColumns}
-          FROM txs
-          ${where.length > 0 ? `WHERE ${where.join(' AND ')}` : ''}
-          ORDER BY block_num ${sortDirection}, idx ${sortDirection}
-          LIMIT ${queryLimit}${skip}
-        ` as string,
+        query: query('block_num'),
+        signal: flight ? AbortSignal.any([flight, timeout]) : timeout,
       })
     } catch (error) {
+      // An expired flight means the memoized caller already gave up.
+      if (flight?.aborted) throw error
       // Planner mis-selectivity turns these top-N scans into a block-ordered
       // walk that times out when matches sit far from the scan boundary;
       // `block_num + 0` blocks that walk, forcing the filter index plus a sort.
-      if (!filtered || !Tidx.isDeterministicError(error)) throw error
+      if (!timeout.aborted && !Tidx.isQueryTimeout(error) && !Tidx.isDeterministicError(error))
+        throw error
       return await tidx.fetch({
         chainId,
-        // Raw-table query (no signature-decoded CTE), so the inline SQL is cast
-        // to `string`.
-        query: `
-          SELECT ${transactionColumns}
-          FROM txs
-          ${where.length > 0 ? `WHERE ${where.join(' AND ')}` : ''}
-          ORDER BY block_num + 0 ${sortDirection}, idx ${sortDirection}
-          LIMIT ${queryLimit}${skip}
-        ` as string,
+        query: query('block_num + 0'),
+        ...(flight ? { signal: flight } : {}),
       })
     }
   }
@@ -1395,6 +1404,8 @@ export declare namespace countTransactions {
 export declare namespace scanTransactions {
   /** Dependencies for {@link scanTransactions}. */
   type Deps = {
+    /** Optional deadline signal bounding every TIDX read in the scan. */
+    signal?: AbortSignal | undefined
     /** TIDX query client for the target chain. */
     tidx: Tidx.Client
   }

package/src/apps/data/routes/webhooks.scan.test.ts

@@ -239,6 +239,35 @@ describe('scanBlock', () => {
     expect(invalid.invalid).toHaveLength(1)
   })
 
+  test('delivers an anonymous LOG0 event matched by address', () => {
+    const result = AppWebhooks.scanBlock({
+      block: block(),
+      logs: [customLog({ topics: [] })],
+      subscriptions: [subscription('log:emitted', { address: callTarget })],
+    })
+
+    expect(result.invalid).toEqual([])
+    expect(result.matches).toHaveLength(1)
+    expect(result.matches[0]?.data).toMatchObject({
+      address: callTarget,
+      data: `0x${'0'.repeat(63)}1`,
+      logIndex: 7,
+      topics: [],
+      transactionHash,
+    })
+  })
+
+  test('rejects raw logs with malformed topics', () => {
+    const result = AppWebhooks.scanBlock({
+      block: block(),
+      logs: [customLog({ topics: ['invalid'] })],
+      subscriptions: [subscription('log:emitted', { address: callTarget })],
+    })
+
+    expect(result.matches).toEqual([])
+    expect(result.invalid).toEqual([])
+  })
+
   test('rolls back partial matches when a matcher throws mid-block', () => {
     const signature = 'event Named(string value)'
     const namedTopic = encodeEventTopics({ abi: [parseAbiItem(signature)] })[0]

package/src/apps/data/routes/webhooks.test.ts

@@ -307,10 +307,19 @@ describe('CRUD lifecycle', () => {
       },
       as(webhookWriter),
     )
-    const body = (await response.json()) as { error?: { code?: string } }
+    expect(response.status).toMatchInlineSnapshot(`403`)
+    if (response.status !== 403) throw new Error('Expected a forbidden response')
+    const { requestId, ...body } = await response.json()
 
-    expect(response.status).toBe(403)
-    expect(body.error?.code).toBe('api_key_forbidden')
+    expect(requestId).toBeDefined()
+    expect(body).toMatchInlineSnapshot(`
+      {
+        "error": {
+          "code": "api_key_forbidden",
+          "message": "API key is missing required permissions: routes:read. Use an API key with these scopes.",
+        },
+      }
+    `)
   })
 
   test('captures route transfer ownership scope without reading the RPC head', async () => {
@@ -2144,6 +2153,12 @@ describe('matchesOperator', () => {
     expect(Webhooks.matchesOperator('0x200', op, 'number')).toBe(false)
   })
 
+  test('compare accepts decoded integer values', () => {
+    const op = { gte: '100', lte: '200' }
+    expect(Webhooks.matchesOperator(150n, op, 'number')).toBe(true)
+    expect(Webhooks.matchesOperator(201, op, 'number')).toBe(false)
+  })
+
   test('bytes selector matches the first four bytes', () => {
     expect(Webhooks.matchesOperator('0xa9059cbbdeadbeef', { selector: '0xa9059cbb' })).toBe(true)
     expect(Webhooks.matchesOperator('0x12345678deadbeef', { selector: '0xa9059cbb' })).toBe(false)

package/src/apps/data/routes/webhooks.ts

@@ -908,9 +908,12 @@ export namespace schema {
             z.meta({ examples: ['2026-01-14T18:38:03.685Z'] }),
           ),
         topics: z.array(Schema.Hash).check(
-          z.describe('Log topics, starting with the event signature hash (topic 0).'),
+          z.describe(
+            'Zero to four log topics; non-anonymous events start with the event signature hash.',
+          ),
           z.meta({
             examples: [
+              [],
               [
                 '0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef',
                 '0x000000000000000000000000e7687128b0a808c2831ff94d4f7b2fb35c65af38',
@@ -1667,7 +1670,8 @@ export function webhooks(options: webhooks.Options = {}) {
             )
               return Response.error(c, {
                 code: 'api_key_forbidden',
-                message: 'API key missing required scope',
+                message:
+                  'API key is missing required permissions: routes:read. Use an API key with these scopes.',
                 status: 403,
               })
           }
@@ -2421,10 +2425,14 @@ function serializeArgs(value: unknown): unknown {
 const toBig = (value: unknown) => BigInt(String(value))
 
 /** Case-insensitive equality for string fields; bigint equality for numeric. */
-function operandEquals(value: string, target: unknown, kind: 'number' | 'string'): boolean {
+function operandEquals(
+  value: bigint | number | string,
+  target: unknown,
+  kind: 'number' | 'string',
+): boolean {
   return kind === 'number'
     ? toBig(value) === toBig(target)
-    : value.toLowerCase() === String(target).toLowerCase()
+    : String(value).toLowerCase() === String(target).toLowerCase()
 }
 
 /**
@@ -2442,17 +2450,18 @@ function operandEquals(value: string, target: unknown, kind: 'number' | 'string'
  * - `{ startsWith }` → hex prefix
  */
 export function matchesOperator(
-  value: string | undefined,
+  value: bigint | number | string | undefined,
   op: unknown,
   kind: 'number' | 'string' = 'string',
 ): boolean {
   if (value === undefined) return false
   if (typeof op !== 'object' || op === null) return operandEquals(value, op, kind)
   const o = op as Record<string, unknown>
+  const value_string = String(value)
   if ('selector' in o)
-    return value.slice(0, 10).toLowerCase() === String(o['selector']).toLowerCase()
+    return value_string.slice(0, 10).toLowerCase() === String(o['selector']).toLowerCase()
   if ('startsWith' in o)
-    return value.toLowerCase().startsWith(String(o['startsWith']).toLowerCase())
+    return value_string.toLowerCase().startsWith(String(o['startsWith']).toLowerCase())
   if ('in' in o) return (o['in'] as readonly unknown[]).some((v) => operandEquals(value, v, kind))
   if ('not' in o) return !operandEquals(value, o['not'], kind)
   if ('eq' in o && kind === 'string') return operandEquals(value, o['eq'], kind)
@@ -2535,13 +2544,12 @@ function toLogEvent(
   const blockNumber = log.blockNumber === null ? undefined : Number(log.blockNumber)
   const logIndex = log.logIndex ?? undefined
   const transactionIndex = log.transactionIndex ?? undefined
-  const topics = log.topics.filter((t): t is string => typeof t === 'string')
-  const topic0 = Schema.Hash.safeParse(topics[0])
+  const topics = z.array(Schema.Hash).safeParse(log.topics)
   const data = typeof log.data === 'string' ? log.data : '0x'
   if (
     !address.success ||
     !transactionHash.success ||
-    !topic0.success ||
+    !topics.success ||
     blockNumber === undefined ||
     logIndex === undefined ||
     transactionIndex === undefined ||
@@ -2555,15 +2563,17 @@ function toLogEvent(
     data,
     logIndex,
     timestamp,
-    topics,
+    topics: topics.data,
     transactionHash: transactionHash.data,
     transactionIndex,
   }
   if (!signature || !event || log.args === undefined) return base
+  const topic0 = topics.data[0]
+  if (!topic0) return undefined
   return {
     ...base,
     args: serializeArgs(log.args) as Record<string, unknown>,
-    event: { name: event.name, signature, topic0: topic0.data },
+    event: { name: event.name, signature, topic0 },
   }
 }
 
@@ -2736,7 +2746,11 @@ function matchesLog(
       const numeric = /^u?int/.test(input.type)
       const value = args[name]
       const normalized = input.type === 'address' ? lowercaseLeaves(op) : op
-      if (!matchesOperator(asString(value), normalized, numeric ? 'number' : 'string')) return false
+      const operand =
+        typeof value === 'bigint' || typeof value === 'number' || typeof value === 'string'
+          ? value
+          : undefined
+      if (!matchesOperator(operand, normalized, numeric ? 'number' : 'string')) return false
     }
   }
   return true

package/src/apps/management/App.ts

@@ -7,6 +7,7 @@ import * as Metadata from '../metadata.js'
 
 import { apiKeys } from './routes/api-keys.js'
 import { billing } from './routes/billing.js'
+import { cli } from './routes/cli.js'
 import { faucet } from './routes/faucet.js'
 import { invitations } from './routes/invitations.js'
 import { inviteLinks } from './routes/invite-links.js'
@@ -75,6 +76,7 @@ export function management(options: management.Options = {}) {
     })
     .route('/', apiKeys({ enabled: options.apiKeys !== false }))
     .route('/', billing())
+    .route('/', cli({ consoleUrl: options.consoleUrl }))
     .route('/', faucet())
     .route('/', invitations())
     .route('/', inviteLinks())
@@ -96,6 +98,8 @@ export declare namespace management {
     apiKeys?: boolean | undefined
     /** Stripe billing capability; omit to disable billing routes (501) and keep production sponsorship closed. */
     billing?: Billing | undefined
+    /** Console origin hosting the CLI sign-in approval page. @default 'https://console.tempo.xyz' */
+    consoleUrl?: string | undefined
     /** Legacy group-level transactional email sender. Prefer `App.create({ email })`. */
     email?: Email.Sender | undefined
     /** Webhook capability shared with the data group and host poller; omit or pass false to disable management. */