tapimo 0.19.0 → 0.20.0

package/src/internal/EarnVaults.ts

@@ -172,7 +172,7 @@ export namespace schema {
       ),
       vaultAddress: Schema.Address.check(
         z.describe('Earn vault contract address.'),
-        z.meta({ examples: ['0x4f94590b636f5878bce585e82379de81e1ec174f'] }),
+        z.meta({ examples: ['0xb20ba39ccf522d69b7a21e3f369be5de73a2c694'] }),
       ),
     })
     .check(z.describe('Onchain identity of an Earn vault.'))
@@ -254,7 +254,7 @@ export namespace schema {
       state,
       vaultAddress: Schema.Address.check(
         z.describe('Earn vault contract address.'),
-        z.meta({ examples: ['0x4f94590b636f5878bce585e82379de81e1ec174f'] }),
+        z.meta({ examples: ['0xb20ba39ccf522d69b7a21e3f369be5de73a2c694'] }),
       ),
     })
     .check(z.describe('Live state resolved from an Earn vault.'))

package/src/internal/Log.test-d.ts

@@ -35,6 +35,7 @@ test('bounds sponsorship diagnostics', () => {
     'project_id_required',
     'spend_limit_exceeded',
     'tx_fee_limit_exceeded',
+    'zone_access_unavailable',
   ] as const satisfies readonly Log.SponsorshipReason[]
   expectTypeOf<(typeof reasons)[number]>().toEqualTypeOf<Log.SponsorshipReason>()
 

package/src/internal/Log.test.ts

@@ -927,10 +927,9 @@ describe('middleware', () => {
         'zoneAccess' as never,
         {
           accounts: ['0xabababababababababababababababababababab'],
-          agreement: false,
           chainId: 421_700_001,
-          delegation: { decision: 'deny', id: 'zd_shadow' },
-          grant: 'scope',
+          delegation: { decision: 'allow', id: 'zd_shadow' },
+          grant: 'delegation',
           tokens: [],
           verb: 'read',
         } as never,
@@ -953,10 +952,9 @@ describe('middleware', () => {
             "0xabababababababababababababababababababab",
           ],
           "zoneChainId": 421700001,
-          "zoneDecisionAgreement": false,
-          "zoneDelegationDecision": "deny",
+          "zoneDelegationDecision": "allow",
           "zoneDelegationId": "zd_shadow",
-          "zoneGrant": "scope",
+          "zoneGrant": "delegation",
           "zoneTokens": [],
           "zoneVerb": "read",
         },

package/src/internal/Log.ts

@@ -122,6 +122,7 @@ export type SponsorshipReason =
   | 'project_id_required'
   | 'spend_limit_exceeded'
   | 'tx_fee_limit_exceeded'
+  | 'zone_access_unavailable'
 
 /** Bounded diagnostics for sponsorship rejections in one JSON-RPC request. */
 export type Sponsorship = {
@@ -272,9 +273,7 @@ export type Entry = {
   zoneAccounts?: readonly string[] | undefined
   /** Zone chain the request targeted, when a Zone access decision was made. */
   zoneChainId?: number | undefined
-  /** Whether the delegation decision agreed with the scope decision; absent when no delegation decision was made. */
-  zoneDecisionAgreement?: boolean | undefined
-  /** Delegation decision computed beside the scope decision, which alone admits the request. */
+  /** Delegation decision for a Zone read the key was eligible for; absent for writes and ineligible keys. */
   zoneDelegationDecision?: ZoneDelegation.Decision | undefined
   /** Active delegation for the caller organization and Zone, when one exists. */
   zoneDelegationId?: string | undefined
@@ -481,9 +480,6 @@ export function middleware<environment extends Environment = Environment>(
           : {
               zoneAccounts: zoneAccess.accounts,
               zoneChainId: zoneAccess.chainId,
-              ...(zoneAccess.agreement === undefined
-                ? {}
-                : { zoneDecisionAgreement: zoneAccess.agreement }),
               ...(zoneAccess.delegation === undefined
                 ? {}
                 : { zoneDelegationDecision: zoneAccess.delegation.decision }),

package/src/internal/Response.ts

@@ -4,14 +4,11 @@ import type * as z from 'zod/mini'
 
 import * as Tidx from './Tidx.js'
 import * as ApiKeys from '../ApiKeys.js'
-import * as ZoneKeyApproval from './ZoneKeyApproval.js'
 
 /** Maps key input and issuance denials separately from dependency failures. */
 export function keyUpstream(c: Context, cause: unknown) {
   if (cause instanceof ApiKeys.InvalidInputError)
     return error(c, { code: 'body_invalid', message: cause.message, status: 400 })
-  if (cause instanceof ZoneKeyApproval.RequiredError)
-    return error(c, { code: 'zone_key_approval_required', message: cause.message, status: 403 })
   return upstream(c, cause)
 }
 

package/src/internal/Schema.test.ts

@@ -81,3 +81,45 @@ describe('timestampBound', () => {
     )
   })
 })
+
+describe('dateTime', () => {
+  test('preserves minute, second, and fractional precision', () => {
+    const schema = Schema.dateTime()
+    for (const timestamp of [
+      '2026-10-23T12:34Z',
+      '2026-10-23T12:34:56Z',
+      '2026-10-23T12:34:56.789Z',
+    ])
+      expect(schema.parse(timestamp)).toBe(timestamp)
+  })
+
+  test('accepts offsets only when requested', () => {
+    const timestamp = '2026-10-23T12:34+05:30'
+    expect(Schema.dateTime().safeParse(timestamp).success).toBe(false)
+    expect(Schema.dateTime({ offset: true }).parse(timestamp)).toBe(timestamp)
+  })
+
+  test('rejects invalid dates, times, and unqualified timestamps', () => {
+    for (const timestamp of [
+      '2026-02-29T12:34Z',
+      '2026-10-23T24:00Z',
+      '2026-10-23T12:60Z',
+      '2026-10-23T12:34:60Z',
+      '2026-10-23T12:34',
+    ])
+      expect(Schema.dateTime({ offset: true }).safeParse(timestamp).success).toBe(false)
+    expect(Schema.dateTime().parse('2024-02-29T12:34Z')).toBe('2024-02-29T12:34Z')
+  })
+})
+
+describe('Email', () => {
+  test('accepts ordinary, dotted, and tagged addresses', () => {
+    for (const address of ['dev@example.com', 'first.last@example.com', 'dev+tag@sub.example.com'])
+      expect(Schema.Email.parse(address)).toBe(address)
+  })
+
+  test('rejects leading, trailing, or repeated dots in the local part', () => {
+    for (const address of ['.dev@example.com', 'dev.@example.com', 'dev..name@example.com'])
+      expect(Schema.Email.safeParse(address).success).toBe(false)
+  })
+})

package/src/internal/Schema.ts

@@ -533,7 +533,7 @@ export function timestampBound(noun: string, bound: 'from' | 'to') {
   return z
     .optional(
       z.pipe(
-        z.iso.datetime({ offset: true }),
+        dateTime({ offset: true }),
         z.transform((value) => new Date(value).toISOString()),
       ),
     )
@@ -612,3 +612,38 @@ export const totalCountInclude = includeQuery(
 export const CountMeta = z
   .object({ totalCountCapped: TotalCountCapped, totalCount: TotalCount })
   .check(z.describe('Response-wide resources embedded on demand via `include`.'))
+
+/** Preserves ISO 8601 timestamps with optional seconds across Zod security upgrades. */
+export function dateTime(options: dateTime.Options = {}) {
+  const date = z.regexes.date.source.slice(1, -1)
+  const time = '(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?'
+  const zone = options.offset ? 'Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)' : 'Z'
+  // Zod now requires seconds by default; existing API inputs and OpenAPI contracts allow minute precision.
+  return new z.iso.ZodMiniISODateTime({
+    check: 'string_format',
+    format: 'datetime',
+    local: false,
+    offset: options.offset ?? false,
+    pattern: new RegExp(`^${date}T(?:${time}(?:${zone}))$`),
+    precision: null,
+    type: 'string',
+  })
+}
+
+export declare namespace dateTime {
+  /** Timestamp validation options. */
+  type Options = {
+    /** Accept numeric timezone offsets in addition to UTC. */
+    offset?: boolean | undefined
+  }
+}
+
+/** Email validation with the existing OpenAPI pattern and Zod's patched runtime matcher. */
+export const Email = z.email().check(
+  // Both patterns accept the same addresses; preserve the published pattern for generated clients.
+  z.meta({
+    pattern:
+      /^(?!\.)(?!.*\.\.)([A-Za-z0-9_'+\-\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$/
+        .source,
+  }),
+)