tapimo 0.19.0 → 0.20.0

package/src/admin/ui/src/routeTree.gen.ts

@@ -9,7 +9,7 @@
 // Additionally, you should also exclude this file from your linter and/or formatter to prevent it from being checked or modified.
 
 import { Route as rootRouteImport } from './routes/__root.js'
-import { Route as ZoneKeyRequestsRouteImport } from './routes/zone-key-requests.js'
+import { Route as ZoneDelegationRequestsRouteImport } from './routes/zone-delegation-requests.js'
 import { Route as VerifiedTokensRouteImport } from './routes/verified-tokens.js'
 import { Route as SentinelRouteImport } from './routes/sentinel.js'
 import { Route as RoutesRouteImport } from './routes/routes.js'
@@ -33,9 +33,9 @@ import { Route as OrganizationsOrgIdSetupRouteImport } from './routes/organizati
 import { Route as EarnVaultsNewRouteImport } from './routes/earn.vaults_.new.js'
 import { Route as EarnVaultsVaultIdRouteImport } from './routes/earn.vaults_.$vaultId.js'
 
-const ZoneKeyRequestsRoute = ZoneKeyRequestsRouteImport.update({
-  id: '/zone-key-requests',
-  path: '/zone-key-requests',
+const ZoneDelegationRequestsRoute = ZoneDelegationRequestsRouteImport.update({
+  id: '/zone-delegation-requests',
+  path: '/zone-delegation-requests',
   getParentRoute: () => rootRouteImport,
 } as any)
 const VerifiedTokensRoute = VerifiedTokensRouteImport.update({
@@ -161,7 +161,7 @@ export interface FileRoutesByFullPath {
   '/routes': typeof RoutesRoute
   '/sentinel': typeof SentinelRoute
   '/verified-tokens': typeof VerifiedTokensRoute
-  '/zone-key-requests': typeof ZoneKeyRequestsRoute
+  '/zone-delegation-requests': typeof ZoneDelegationRequestsRoute
   '/earn/vaults': typeof EarnVaultsRoute
   '/organizations/$orgId': typeof OrganizationsOrgIdRoute
   '/prop-amms/manage': typeof PropAmmsManageRoute
@@ -186,7 +186,7 @@ export interface FileRoutesByTo {
   '/routes': typeof RoutesRoute
   '/sentinel': typeof SentinelRoute
   '/verified-tokens': typeof VerifiedTokensRoute
-  '/zone-key-requests': typeof ZoneKeyRequestsRoute
+  '/zone-delegation-requests': typeof ZoneDelegationRequestsRoute
   '/earn/vaults': typeof EarnVaultsRoute
   '/organizations/$orgId': typeof OrganizationsOrgIdRoute
   '/prop-amms/manage': typeof PropAmmsManageRoute
@@ -212,7 +212,7 @@ export interface FileRoutesById {
   '/routes': typeof RoutesRoute
   '/sentinel': typeof SentinelRoute
   '/verified-tokens': typeof VerifiedTokensRoute
-  '/zone-key-requests': typeof ZoneKeyRequestsRoute
+  '/zone-delegation-requests': typeof ZoneDelegationRequestsRoute
   '/earn/vaults': typeof EarnVaultsRoute
   '/organizations_/$orgId': typeof OrganizationsOrgIdRoute
   '/prop-amms_/manage': typeof PropAmmsManageRoute
@@ -239,7 +239,7 @@ export interface FileRouteTypes {
     | '/routes'
     | '/sentinel'
     | '/verified-tokens'
-    | '/zone-key-requests'
+    | '/zone-delegation-requests'
     | '/earn/vaults'
     | '/organizations/$orgId'
     | '/prop-amms/manage'
@@ -264,7 +264,7 @@ export interface FileRouteTypes {
     | '/routes'
     | '/sentinel'
     | '/verified-tokens'
-    | '/zone-key-requests'
+    | '/zone-delegation-requests'
     | '/earn/vaults'
     | '/organizations/$orgId'
     | '/prop-amms/manage'
@@ -289,7 +289,7 @@ export interface FileRouteTypes {
     | '/routes'
     | '/sentinel'
     | '/verified-tokens'
-    | '/zone-key-requests'
+    | '/zone-delegation-requests'
     | '/earn/vaults'
     | '/organizations_/$orgId'
     | '/prop-amms_/manage'
@@ -315,7 +315,7 @@ export interface RootRouteChildren {
   RoutesRoute: typeof RoutesRoute
   SentinelRoute: typeof SentinelRoute
   VerifiedTokensRoute: typeof VerifiedTokensRoute
-  ZoneKeyRequestsRoute: typeof ZoneKeyRequestsRoute
+  ZoneDelegationRequestsRoute: typeof ZoneDelegationRequestsRoute
   EarnVaultsRoute: typeof EarnVaultsRoute
   OrganizationsOrgIdRoute: typeof OrganizationsOrgIdRoute
   PropAmmsManageRoute: typeof PropAmmsManageRoute
@@ -331,11 +331,11 @@ export interface RootRouteChildren {
 
 declare module '@tanstack/react-router' {
   interface FileRoutesByPath {
-    '/zone-key-requests': {
-      id: '/zone-key-requests'
-      path: '/zone-key-requests'
-      fullPath: '/zone-key-requests'
-      preLoaderRoute: typeof ZoneKeyRequestsRouteImport
+    '/zone-delegation-requests': {
+      id: '/zone-delegation-requests'
+      path: '/zone-delegation-requests'
+      fullPath: '/zone-delegation-requests'
+      preLoaderRoute: typeof ZoneDelegationRequestsRouteImport
       parentRoute: typeof rootRouteImport
     }
     '/verified-tokens': {
@@ -507,7 +507,7 @@ const rootRouteChildren: RootRouteChildren = {
   RoutesRoute: RoutesRoute,
   SentinelRoute: SentinelRoute,
   VerifiedTokensRoute: VerifiedTokensRoute,
-  ZoneKeyRequestsRoute: ZoneKeyRequestsRoute,
+  ZoneDelegationRequestsRoute: ZoneDelegationRequestsRoute,
   EarnVaultsRoute: EarnVaultsRoute,
   OrganizationsOrgIdRoute: OrganizationsOrgIdRoute,
   PropAmmsManageRoute: PropAmmsManageRoute,

package/src/admin/ui/src/routes/__root.tsx

@@ -155,7 +155,7 @@ const sections = [
     label: 'Earn',
   },
   {
-    items: [{ href: '/zone-key-requests', icon: ShieldCheck, label: 'Key requests' }],
+    items: [{ href: '/zone-delegation-requests', icon: ShieldCheck, label: 'Delegation requests' }],
     label: 'Zones',
   },
   {

package/src/admin/ui/src/routes/api-keys.tsx

@@ -11,7 +11,6 @@ import * as ApiKeys from '../lib/api-keys.js'
 import * as Config from '../lib/config.js'
 import * as Format from '../lib/format.js'
 import * as Scopes from '../lib/scopes.js'
-import * as ZoneKeyRequests from '../lib/zone-key-requests.js'
 
 export const Route = createFileRoute('/api-keys')({
   head: () => ({ meta: [{ title: 'API keys | Tempo API Admin' }] }),
@@ -67,10 +66,6 @@ function RouteComponent() {
     const environment = field('environment') === 'sandbox' ? 'sandbox' : 'production'
     const scopes = ApiKeyForm.readScopes(form)
     if (!scopes) return
-    if (ZoneKeyRequests.required(scopes)) {
-      alert('Zone read keys need two approvals. Submit them from Zone Key Requests instead.')
-      return
-    }
     provision.mutate(
       {
         allowedIps,
@@ -427,16 +422,8 @@ function KeyRow(props: { currentUser?: string | undefined; record: ApiKeys.ApiKe
                 Manage route policies
               </Button>
             ) : null}
-            {ZoneKeyRequests.required(record.scopes) ? (
-              <Button render={<Link to="/zone-key-requests" />} size="small">
-                Request a replacement
-              </Button>
-            ) : (
-              <>
-                <EditDialog record={record} />
-                <RotateDialog record={record} />
-              </>
-            )}
+            <EditDialog record={record} />
+            <RotateDialog record={record} />
             <RevokeDialog currentUser={currentUser} record={record} />
           </div>
         </Rows.Panel>

package/src/admin/ui/src/routes/audit-logs.tsx

@@ -61,7 +61,7 @@ function Page() {
             label="Path prefix"
             maxLength={1024}
             name="path"
-            placeholder="/zone-key-requests"
+            placeholder="/zone-delegations"
             spellCheck={false}
           />
           <Input
@@ -213,7 +213,7 @@ function LookupError(options: LookupError.Props) {
   return (
     <Frame.Page title="Audit logs" description="Audit history could not be loaded.">
       <p className="text-copy-14 text-negative" role="alert">
-        {options.error.message}
+        {options.error instanceof Error ? options.error.message : 'Unexpected error.'}
       </p>
       <div className="flex gap-2">
         <Button

package/src/admin/ui/src/routes/index.tsx

@@ -94,8 +94,6 @@ const tasks = [
 
 function PageComponent() {
   const waiting = ReviewQueues.useWaiting()
-  // Unknown membership (`null`) keeps the queue visible; its page re-checks access.
-  const approver = Config.use().data?.auth.zoneKeyApprover !== false
   // The Routes overview reports production by default, so its attention count matches this one.
   const summary = useQuery(Routes.summary.options({ environments: ['production'] }))
   const stuck: ReviewQueues.Waiting = summary.data
@@ -122,6 +120,13 @@ function PageComponent() {
       to: '/routes/activity',
       waiting: stuck,
     },
+    {
+      description: 'Zone delegations waiting on approvals from Zone issuers.',
+      icon: ShieldCheck,
+      label: 'Delegation requests',
+      to: '/zone-delegation-requests',
+      waiting: waiting['/zone-delegation-requests'],
+    },
     {
       description: 'Organizations the daily risk scan flagged.',
       icon: Shield,
@@ -129,16 +134,11 @@ function PageComponent() {
       to: '/sentinel',
       waiting: waiting['/sentinel'],
     },
-    {
-      description: 'Zone read keys waiting on approvals from Zone issuers.',
-      icon: ShieldCheck,
-      label: 'Zone key requests',
-      to: '/zone-key-requests',
-      waiting: waiting['/zone-key-requests'],
-    },
   ]
-  // Zone key approval needs Okta group membership, so only approvers see that queue.
-  const visible = queues.filter((queue) => approver || queue.to !== '/zone-key-requests')
+  // Unknown membership (`null`) keeps the queue visible; its page re-checks access.
+  const approver = Config.use().data?.auth.delegationApprover !== false
+  // Delegation approval needs Okta group membership, so only approvers see that queue.
+  const visible = queues.filter((queue) => approver || queue.to !== '/zone-delegation-requests')
   // Empty queues stay hidden; a failed count still shows so an outage never reads as clear.
   const shown = visible.filter(
     ({ waiting }) =>

package/src/admin/ui/src/routes/organizations.tsx

@@ -175,7 +175,9 @@ function LookupError(options: LookupError.Props) {
   return (
     <Page description={description} title="Organizations">
       <Card className="flex flex-col items-center gap-4 px-6 py-12 text-center">
-        <p className="type-body-b2 text-negative">{options.error.message}</p>
+        <p className="type-body-b2 text-negative">
+          {options.error instanceof Error ? options.error.message : 'Unexpected error.'}
+        </p>
         <Button
           onClick={() => {
             options.reset()

package/src/admin/ui/src/routes/organizations_.$orgId.tsx

@@ -1432,7 +1432,9 @@ function OrganizationError(options: OrganizationError.Props) {
       title="Organization unavailable"
     >
       <Card className="flex flex-col items-center gap-4 px-6 py-12 text-center">
-        <p className="type-body-b2 text-negative">{options.error.message}</p>
+        <p className="type-body-b2 text-negative">
+          {options.error instanceof Error ? options.error.message : 'Unexpected error.'}
+        </p>
         <Button
           onClick={() => {
             options.reset()

package/src/admin/ui/src/routes/organizations_.$orgId_.setup.tsx

@@ -533,9 +533,7 @@ function SetupForm(options: SetupForm.Props) {
                       <p className="pl-7 type-body-b3 text-foreground-secondary">
                         {access === 'granted'
                           ? `Already has ${Setup.writeScope}.`
-                          : access === 'locked'
-                            ? 'Zone read keys change only through a reviewed reissue.'
-                            : key.scopes.join(', ')}
+                          : key.scopes.join(', ')}
                       </p>
                     </li>
                   )