tapimo 0.19.0 → 0.20.0

package/src/apps/management/routes/billing.ts

@@ -88,18 +88,14 @@ export namespace schema {
                     ),
                   period: z
                     .object({
-                      end: z.iso
-                        .datetime()
-                        .check(
-                          z.describe('Inclusive end of this line’s service period.'),
-                          z.meta({ examples: ['2026-10-04T00:00:00.000Z'] }),
-                        ),
-                      start: z.iso
-                        .datetime()
-                        .check(
-                          z.describe('Inclusive start of this line’s service period.'),
-                          z.meta({ examples: ['2026-09-04T00:00:00.000Z'] }),
-                        ),
+                      end: Schema.dateTime().check(
+                        z.describe('Inclusive end of this line’s service period.'),
+                        z.meta({ examples: ['2026-10-04T00:00:00.000Z'] }),
+                      ),
+                      start: Schema.dateTime().check(
+                        z.describe('Inclusive start of this line’s service period.'),
+                        z.meta({ examples: ['2026-09-04T00:00:00.000Z'] }),
+                      ),
                     })
                     .check(
                       z.describe('Service dates for this invoice line, as reported by Stripe.'),
@@ -178,12 +174,10 @@ export namespace schema {
                 ],
               }),
             ),
-          retrievedAt: z.iso
-            .datetime()
-            .check(
-              z.describe('Time the estimate was read, not a meter aggregation watermark.'),
-              z.meta({ examples: ['2026-09-05T00:00:00.000Z'] }),
-            ),
+          retrievedAt: Schema.dateTime().check(
+            z.describe('Time the estimate was read, not a meter aggregation watermark.'),
+            z.meta({ examples: ['2026-09-05T00:00:00.000Z'] }),
+          ),
           startingBalance: Amount.check(
             z.describe('Customer balance before this invoice; negative amounts are credit.'),
           ),
@@ -351,7 +345,7 @@ export namespace schema {
             ),
             z.meta({ examples: [{ amount: '0.50', currency: 'usd' }] }),
           ),
-        updatedAt: z.optional(z.iso.datetime()).check(
+        updatedAt: z.optional(Schema.dateTime()).check(
           z.describe('When the billing status last changed (ISO 8601); absent before first checkout.'), // prettier-ignore
           z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
         ),
@@ -400,12 +394,10 @@ export namespace schema {
             z.describe('Card details; present when `type` is `card`.'),
             z.meta({ examples: [{ brand: 'visa', expMonth: 12, expYear: 2030, last4: '4242' }] }),
           ),
-        createdAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the method was attached (ISO 8601).'),
-            z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
-          ),
+        createdAt: Schema.dateTime().check(
+          z.describe('When the method was attached (ISO 8601).'),
+          z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+        ),
         default: z
           .boolean()
           .check(z.describe('Whether invoices charge this method.'), z.meta({ examples: [true] })),

package/src/apps/management/routes/cli.ts

@@ -28,12 +28,10 @@ export namespace schema {
       z.describe('Code shown in both the terminal and the console to match the request.'),
       z.meta({ examples: ['BCDF-GHJK'] }),
     )
-  const expiresAt = z.iso
-    .datetime()
-    .check(
-      z.describe('When the pending sign-in expires (ISO 8601).'),
-      z.meta({ examples: ['2026-01-01T00:10:00.000Z'] }),
-    )
+  const expiresAt = Schema.dateTime().check(
+    z.describe('When the pending sign-in expires (ISO 8601).'),
+    z.meta({ examples: ['2026-01-01T00:10:00.000Z'] }),
+  )
   const device = z
     .string()
     .check(
@@ -99,12 +97,10 @@ export namespace schema {
         .object({ device: z.optional(device), name: z.optional(name) })
         .check(z.describe('CLI details reported when the sign-in started.')),
       code,
-      createdAt: z.iso
-        .datetime()
-        .check(
-          z.describe('When the sign-in started (ISO 8601).'),
-          z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
-        ),
+      createdAt: Schema.dateTime().check(
+        z.describe('When the sign-in started (ISO 8601).'),
+        z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+      ),
       expiresAt,
       ip: z.optional(
         z
@@ -155,12 +151,10 @@ export namespace schema {
       z.object({ status: z.literal('pending') }),
       z.object({ status: z.literal('denied') }),
       z.object({
-        expiresAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the CLI session expires (ISO 8601).'),
-            z.meta({ examples: ['2026-01-31T00:00:00.000Z'] }),
-          ),
+        expiresAt: Schema.dateTime().check(
+          z.describe('When the CLI session expires (ISO 8601).'),
+          z.meta({ examples: ['2026-01-31T00:00:00.000Z'] }),
+        ),
         scopes: z
           .array(z.string())
           .check(

package/src/apps/management/routes/fee-payer-usage.ts

@@ -12,9 +12,10 @@ import type * as App from '../App.js'
 
 /** Console Fee Payer usage contracts. */
 export namespace schema {
-  const timestamp = z.iso
-    .datetime()
-    .check(z.describe('ISO 8601 timestamp.'), z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }))
+  const timestamp = Schema.dateTime().check(
+    z.describe('ISO 8601 timestamp.'),
+    z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+  )
   const amount = z
     .string()
     .check(
@@ -105,7 +106,7 @@ export namespace schema {
                   z.meta({ examples: [42] }),
                 ),
               date: z
-                .union([z.iso.date(), z.iso.datetime()])
+                .union([z.iso.date(), Schema.dateTime()])
                 .check(
                   z.describe(
                     'UTC bucket start: date for daily buckets, timestamp for hourly buckets.',

package/src/apps/management/routes/invitations.ts

@@ -33,24 +33,18 @@ export namespace schema {
   export const Invitation = OpenApi.component(
     Schema.describe(
       z.object({
-        createdAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the invitation was created (ISO 8601).'),
-            z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
-          ),
-        email: z
-          .email()
-          .check(
-            z.describe('Invitee email (lowercase).'),
-            z.meta({ examples: ['dev@example.com'] }),
-          ),
-        expiresAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the invitation expires (ISO 8601).'),
-            z.meta({ examples: ['2026-01-08T00:00:00.000Z'] }),
-          ),
+        createdAt: Schema.dateTime().check(
+          z.describe('When the invitation was created (ISO 8601).'),
+          z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+        ),
+        email: Schema.Email.check(
+          z.describe('Invitee email (lowercase).'),
+          z.meta({ examples: ['dev@example.com'] }),
+        ),
+        expiresAt: Schema.dateTime().check(
+          z.describe('When the invitation expires (ISO 8601).'),
+          z.meta({ examples: ['2026-01-08T00:00:00.000Z'] }),
+        ),
         id: z
           .string()
           .check(
@@ -122,9 +116,10 @@ export namespace schema {
   export const CreateInvitationRequest = OpenApi.component(
     z
       .object({
-        email: z
-          .email()
-          .check(z.describe('Invitee email.'), z.meta({ examples: ['dev@example.com'] })),
+        email: Schema.Email.check(
+          z.describe('Invitee email.'),
+          z.meta({ examples: ['dev@example.com'] }),
+        ),
         role,
       })
       .check(z.describe('Fields for creating an invitation.')),

package/src/apps/management/routes/invite-links.ts

@@ -39,7 +39,7 @@ export namespace schema {
       z.meta({ examples: [['example.org'], null] }),
     )
   const nullableExpiry = z
-    .nullable(z.iso.datetime({ offset: true }))
+    .nullable(Schema.dateTime({ offset: true }))
     .check(
       z.describe('When the link expires (ISO 8601), or null for no expiry.'),
       z.meta({ examples: ['2026-01-08T00:00:00.000Z', null] }),
@@ -59,12 +59,10 @@ export namespace schema {
     Schema.describe(
       z.object({
         allowedEmailDomains,
-        createdAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the link was created (ISO 8601).'),
-            z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
-          ),
+        createdAt: Schema.dateTime().check(
+          z.describe('When the link was created (ISO 8601).'),
+          z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+        ),
         createdBy: z
           .string()
           .check(
@@ -82,7 +80,7 @@ export namespace schema {
             z.meta({ examples: ['iln_1a2b3c4d5e6f7g8h9j0k1m2n'] }),
           ),
         lastUsedAt: z
-          .nullable(z.iso.datetime())
+          .nullable(Schema.dateTime())
           .check(
             z.describe('When the link last created a membership, or null.'),
             z.meta({ examples: ['2026-01-02T00:00:00.000Z', null] }),
@@ -107,12 +105,10 @@ export namespace schema {
             z.describe('Opaque bearer token embedded in the recipient URL (`lnk_…`).'),
             z.meta({ examples: ['lnk_1a2b3c4d5e6f7g8h9j0k1m2n'] }),
           ),
-        updatedAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the link was last changed (ISO 8601).'),
-            z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
-          ),
+        updatedAt: Schema.dateTime().check(
+          z.describe('When the link was last changed (ISO 8601).'),
+          z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+        ),
         useCount: z
           .number()
           .check(
@@ -131,18 +127,14 @@ export namespace schema {
   export const Redemption = OpenApi.component(
     Schema.describe(
       z.object({
-        createdAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the membership was created (ISO 8601).'),
-            z.meta({ examples: ['2026-01-02T00:00:00.000Z'] }),
-          ),
-        email: z
-          .email()
-          .check(
-            z.describe('Verified email used for redemption.'),
-            z.meta({ examples: ['dev@example.com'] }),
-          ),
+        createdAt: Schema.dateTime().check(
+          z.describe('When the membership was created (ISO 8601).'),
+          z.meta({ examples: ['2026-01-02T00:00:00.000Z'] }),
+        ),
+        email: Schema.Email.check(
+          z.describe('Verified email used for redemption.'),
+          z.meta({ examples: ['dev@example.com'] }),
+        ),
         id: z
           .string()
           .check(

package/src/apps/management/routes/me.ts

@@ -22,14 +22,12 @@ export namespace schema {
             z.describe('Wallet address bound to this user, when wallet sign-in established it.'),
             z.meta({ examples: ['0x0000000000000000000000000000000000000001'] }),
           ),
-        createdAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the user was created (ISO 8601).'),
-            z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
-          ),
+        createdAt: Schema.dateTime().check(
+          z.describe('When the user was created (ISO 8601).'),
+          z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+        ),
         email: z
-          .optional(z.email())
+          .optional(Schema.Email)
           .check(
             z.describe('Verified email bound to this user, when present.'),
             z.meta({ examples: ['dev@example.com'] }),
@@ -40,12 +38,10 @@ export namespace schema {
             z.describe('Opaque user id (`usr_…`).'),
             z.meta({ examples: ['usr_1a2b3c4d5e6f7g8h9j0k1m2n'] }),
           ),
-        updatedAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the user was last updated (ISO 8601).'),
-            z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
-          ),
+        updatedAt: Schema.dateTime().check(
+          z.describe('When the user was last updated (ISO 8601).'),
+          z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+        ),
       }),
       'The signed-in developer.',
     ),

package/src/apps/management/routes/members.ts

@@ -27,14 +27,12 @@ export namespace schema {
             z.describe("The member's wallet address, when wallet sign-in established it."),
             z.meta({ examples: ['0x20f414b3cbcf1fd8e8f5e1c1c2e3d4a5b6c7d8e9'] }),
           ),
-        createdAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the member joined (ISO 8601).'),
-            z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
-          ),
+        createdAt: Schema.dateTime().check(
+          z.describe('When the member joined (ISO 8601).'),
+          z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+        ),
         email: z
-          .optional(z.email())
+          .optional(Schema.Email)
           .check(
             z.describe("The member's verified email, when known."),
             z.meta({ examples: ['dev@example.com'] }),

package/src/apps/management/routes/orgs.ts

@@ -34,12 +34,10 @@ export namespace schema {
   export const Organization = OpenApi.component(
     Schema.describe(
       z.object({
-        createdAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the organization was created (ISO 8601).'),
-            z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
-          ),
+        createdAt: Schema.dateTime().check(
+          z.describe('When the organization was created (ISO 8601).'),
+          z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+        ),
         id: z
           .string()
           .check(
@@ -58,12 +56,10 @@ export namespace schema {
             z.describe("The caller's role; absent for API keys and the super admin."),
             z.meta({ examples: ['owner'] }),
           ),
-        updatedAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the organization was last updated (ISO 8601).'),
-            z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
-          ),
+        updatedAt: Schema.dateTime().check(
+          z.describe('When the organization was last updated (ISO 8601).'),
+          z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+        ),
       }),
       'An organization: the top-level tenant that owns API keys.',
     ),

package/src/apps/management/routes/projects.ts

@@ -28,12 +28,10 @@ export namespace schema {
   export const Project = OpenApi.component(
     Schema.describe(
       z.object({
-        createdAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the project was created (ISO 8601).'),
-            z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
-          ),
+        createdAt: Schema.dateTime().check(
+          z.describe('When the project was created (ISO 8601).'),
+          z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+        ),
         environments: z.array(z.enum(environments)).check(
           z.describe('Environments available to this project: sandbox (testnet) and production (mainnet).'), // prettier-ignore
           z.meta({ examples: [[...environments]] }),
@@ -53,12 +51,10 @@ export namespace schema {
             z.describe('Owning organization id (`org_…`).'),
             z.meta({ examples: ['org_1a2b3c4d5e6f7g8h9j0k1m2n'] }),
           ),
-        updatedAt: z.iso
-          .datetime()
-          .check(
-            z.describe('When the project was last updated (ISO 8601).'),
-            z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
-          ),
+        updatedAt: Schema.dateTime().check(
+          z.describe('When the project was last updated (ISO 8601).'),
+          z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+        ),
       }),
       'A project: an app or integration within an organization.',
     ),

package/src/apps/management/routes/route-usage.ts

@@ -14,9 +14,10 @@ import type * as App from '../App.js'
 
 /** Contracts for session-owned Routes activity reads. */
 export namespace schema {
-  const timestamp = z.iso
-    .datetime()
-    .check(z.describe('ISO 8601 timestamp.'), z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }))
+  const timestamp = Schema.dateTime().check(
+    z.describe('ISO 8601 timestamp.'),
+    z.meta({ examples: ['2026-01-01T00:00:00.000Z'] }),
+  )
   const volume = z
     .string()
     .check(
@@ -95,7 +96,7 @@ export namespace schema {
           .array(
             z.object({
               date: z
-                .union([z.iso.date(), z.iso.datetime()])
+                .union([z.iso.date(), Schema.dateTime()])
                 .check(
                   z.describe(
                     'UTC bucket start: date for daily buckets, timestamp for hourly buckets.',

package/src/apps/management/routes/routes-access-requests.test.ts

@@ -1,6 +1,7 @@
 import { generatePrivateKey, privateKeyToAccount } from 'viem/accounts'
 
 import * as TestApp from '../../../../test/App.js'
+import * as TestRoutes from '../../../../test/Routes.js'
 import * as ApiKeys from '../../../ApiKeys.js'
 import * as RoutesAccessRequests from '../../../db/tables/routesAccessRequests.js'
 import * as Orgs from './orgs.js'
@@ -26,10 +27,15 @@ function request(method: 'DELETE' | 'GET' | 'POST', cookie: string, body?: unkno
 }
 
 /** Creates an app, an owner session, an organization, a project, and one live key. */
-async function setup() {
+async function setup(options: setup.Options = {}) {
   const db = TestApp.database()
   const kv = { store: TestApp.kvStore() }
-  const app = TestApp.create({ db, kv, session: { wallet: { origin } } })
+  const app = TestApp.create({
+    db,
+    kv,
+    ...(options.notify ? { routesAccessRequests: { notify: options.notify } } : {}),
+    session: { wallet: { origin } },
+  })
   const { cookie } = await TestApp.signIn(app, privateKeyToAccount(generatePrivateKey()))
   if (!cookie) throw new Error('Sign-in did not establish a session')
   const org = await TestApp.json(
@@ -49,6 +55,13 @@ async function setup() {
   return { app, cookie, db, key, kv, org, path, project }
 }
 
+declare namespace setup {
+  type Options = {
+    /** Reviewer notifier handed to the management group. */
+    notify?: Requests.routesAccessRequests.Options['notify']
+  }
+}
+
 test('publishes the request operations', async () => {
   const { app } = await setup()
   const spec = await (await app.request('/openapi.json')).json()
@@ -122,6 +135,55 @@ test('creates, lists, and cancels a pending request', async () => {
   expect(empty.data).toEqual([])
 })
 
+test('notifies reviewers of a new request without waiting on them', async () => {
+  const notices: Requests.routesAccessRequests.Notice[] = []
+  const { app, cookie, db, key, path } = await setup({
+    notify: async (notice) => {
+      notices.push(notice)
+    },
+  })
+  await TestRoutes.publish(db)
+  const created = await app.request(
+    path,
+    request('POST', cookie, {
+      expectedVolume: '$50k per month',
+      keyIds: [key.id],
+      note: 'Payouts to merchants.',
+      routes: [route],
+      subsidy: true,
+    }),
+  )
+  expect(created.status).toBe(200)
+  await vi.waitFor(() => expect(notices).toHaveLength(1))
+  expect(notices[0]).toMatchInlineSnapshot(`
+    {
+      "environment": "production",
+      "expectedVolume": "$50k per month",
+      "keyCount": 1,
+      "note": "Payouts to merchants.",
+      "organization": "Acme",
+      "project": "Checkout",
+      "routes": [
+        "USDC on Base → OUSD on Tempo",
+      ],
+      "subsidy": true,
+    }
+  `)
+})
+
+test('keeps the request when the notifier fails', async () => {
+  const { app, cookie, key, path } = await setup({
+    notify: () => Promise.reject(new Error('Slack is down')),
+  })
+  const created = await app.request(
+    path,
+    request('POST', cookie, { keyIds: [key.id], routes: [], subsidy: false }),
+  )
+  expect(created.status).toBe(200)
+  const listed = await app.request(path, request('GET', cookie))
+  expect((await listed.json()).data).toHaveLength(1)
+})
+
 test('rejects keys outside the project and environment', async () => {
   const { app, cookie, kv, org, path } = await setup()
   const { record: sandbox } = await ApiKeys.mint(kv.store, {