tapimo 0.7.0 → 0.7.2

package/dist/providers/index.js

@@ -0,0 +1,19 @@
+import * as Uniswap from '../internal/exchange/providers/uniswap.js';
+import * as Across from '../internal/funding/providers/across.js';
+import * as Relay from '../internal/funding/providers/relay.js';
+import * as Rhino from '../internal/funding/providers/rhino.js';
+import * as Squid from '../internal/funding/providers/squid.js';
+import * as Symbiosis from '../internal/funding/providers/symbiosis.js';
+/** Creates an Across funding provider. */
+export const across = Across.across;
+/** Creates a Relay funding provider. */
+export const relay = Relay.relay;
+/** Creates a Rhino funding provider. */
+export const rhino = Rhino.rhino;
+/** Creates a Squid funding provider. */
+export const squid = Squid.squid;
+/** Creates a Symbiosis funding provider. */
+export const symbiosis = Symbiosis.symbiosis;
+/** Creates a Uniswap exchange provider. */
+export const uniswap = Uniswap.uniswap;
+//# sourceMappingURL=index.js.map

package/dist/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,2CAA2C,CAAA;AACpE,OAAO,KAAK,MAAM,MAAM,yCAAyC,CAAA;AACjE,OAAO,KAAK,KAAK,MAAM,wCAAwC,CAAA;AAC/D,OAAO,KAAK,KAAK,MAAM,wCAAwC,CAAA;AAC/D,OAAO,KAAK,KAAK,MAAM,wCAAwC,CAAA;AAC/D,OAAO,KAAK,SAAS,MAAM,4CAA4C,CAAA;AAEvE,0CAA0C;AAC1C,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;AAOnC,wCAAwC;AACxC,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;AAOhC,wCAAwC;AACxC,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;AAOhC,wCAAwC;AACxC,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;AAOhC,4CAA4C;AAC5C,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAA;AAO5C,2CAA2C;AAC3C,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tapimo",
   "type": "module",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "main": "./dist/index.js",
   "license": "MIT",
   "bin": {
@@ -21,13 +21,13 @@
     "incur": "^0.4.19",
     "jose": "^6.2.3",
     "kysely": "^0.29.2",
-    "mppx": "0.8.9",
+    "mppx": "https://pkg.pr.new/mppx@c7c1e4b",
     "nanoid": "^5.1.11",
-    "ox": "0.14.30",
+    "ox": "0.14.33",
     "pg": "^8.22.0",
     "stripe": "^19.1.0",
     "tidx.ts": "^0.1.2",
-    "viem": "2.54.6",
+    "viem": "2.55.10",
     "vocs": "^2.3.3",
     "zod": "^4.4.3"
   },
@@ -85,6 +85,11 @@
       "types": "./dist/apps/mpp/index.d.ts",
       "default": "./dist/apps/mpp/index.js"
     },
+    "./providers": {
+      "src": "./src/providers/index.ts",
+      "types": "./dist/providers/index.d.ts",
+      "default": "./dist/providers/index.js"
+    },
     "./relay": {
       "src": "./src/apps/relay/index.ts",
       "types": "./dist/apps/relay/index.d.ts",

package/src/ApiKeys.test.ts

@@ -98,14 +98,14 @@ describe('mint', () => {
     ).rejects.toThrowError(/invalid API key input/)
   })
 
-  test('mints a per-zone read scope', async () => {
+  test('mints per-zone read and write scopes', async () => {
     const state = Store.memory()
     const { token } = await ApiKeys.mint(state, {
       orgId: 'org_a',
-      scopes: ['zone:421700001:read'],
+      scopes: ['zone:421700001:read', 'zone:421700001:write'],
     })
     const resolved = await ApiKeys.resolve(state, token)
-    expect(resolved?.scopes).toEqual(['zone:421700001:read'])
+    expect(resolved?.scopes).toEqual(['zone:421700001:read', 'zone:421700001:write'])
   })
 
   test('rejects malformed zone scopes', async () => {
@@ -115,8 +115,9 @@ describe('mint', () => {
       'zone:1.5:read',
       'zone:-1:read',
       'zone:0:read',
+      'zone:0:write',
       'zone:000421700001:read',
-      'zone:1:write',
+      'zone:1:admin',
     ])
       await expect(
         ApiKeys.mint(Store.memory(), { orgId: 'org_a', scopes: [scope as never] }),
@@ -257,15 +258,17 @@ describe('listByOrg', () => {
   })
 })
 
-describe('attribute', () => {
-  test('re-attributes org and project, moving the org index', async () => {
+describe('update', () => {
+  test('updates the name, org, and project while moving the org index', async () => {
     const state = Store.memory()
     const { record, token } = await ApiKeys.mint(state, { orgId: 'org_a', scopes: ['data:read'] })
 
-    const updated = await ApiKeys.attribute(state, record.id, {
+    const updated = await ApiKeys.update(state, record.id, {
+      name: 'Explorer',
       orgId: 'org_b',
       projectId: 'prj_b',
     })
+    expect(updated?.name).toBe('Explorer')
     expect(updated?.orgId).toBe('org_b')
     expect(updated?.projectId).toBe('prj_b')
 
@@ -277,6 +280,7 @@ describe('attribute', () => {
     expect(await ApiKeys.listByOrg(state, 'org_a')).toEqual([])
     expect((await ApiKeys.listByOrg(state, 'org_b')).map(({ id }) => id)).toEqual([record.id])
 
+    expect(await ApiKeys.update(state, 'key_missing', { projectId: 'prj_x' })).toBeNull()
     expect(await ApiKeys.attribute(state, 'key_missing', { projectId: 'prj_x' })).toBeNull()
   })
 })

package/src/ApiKeys.ts

@@ -291,21 +291,20 @@ export async function revoke(state: Store.State, id: string): Promise<boolean> {
 }
 
 /**
- * Re-attributes a key to an organization and/or project, rewriting its record
- * in place (same token hash) and moving the org index entry when the org
- * changes. The backfill path for legacy keys.
+ * Updates a key's display name and attribution, rewriting its record in place
+ * (same token hash) and moving the org index entry when the org changes.
  *
  * @param state - The KV state store holding key records.
  * @param id - The key id (`key_…`).
- * @param input - The attribution to apply.
+ * @param input - Key metadata to apply.
  * @param options - Scope catalog used for validation.
  * @returns The updated record, or `null` when the key is absent.
  */
-export async function attribute(
+export async function update(
   state: Store.State,
   id: string,
-  input: attribute.Input,
-  options: attribute.Options = {},
+  input: update.Input,
+  options: update.Options = {},
 ): Promise<Record | null> {
   const recordKey = await state.get(idKeyFor(id))
   if (!recordKey) return null
@@ -314,6 +313,7 @@ export async function attribute(
 
   const updated: Record = {
     ...record,
+    ...(input.name === undefined ? {} : { name: input.name }),
     ...(input.orgId === undefined ? {} : { orgId: input.orgId }),
     ...(input.projectId === undefined ? {} : { projectId: input.projectId }),
   }
@@ -327,9 +327,11 @@ export async function attribute(
   return updated
 }
 
-export declare namespace attribute {
-  /** Attribution applied by {@link attribute}; omitted fields keep their current value. */
+export declare namespace update {
+  /** Metadata applied by {@link update}; omitted fields keep their current value. */
   type Input = {
+    /** New human-readable key name. */
+    name?: string | undefined
     /** New owning organization id (`org_…`). */
     orgId?: string | undefined
     /** New attributed project id (`prj_…`). */
@@ -343,6 +345,32 @@ export declare namespace attribute {
   }
 }
 
+/**
+ * Re-attributes a key while preserving the existing public API.
+ *
+ * @param state - The KV state store holding key records.
+ * @param id - The key id (`key_…`).
+ * @param input - Attribution to apply.
+ * @param options - Scope catalog used for validation.
+ * @returns The updated record, or `null` when the key is absent.
+ */
+export function attribute(
+  state: Store.State,
+  id: string,
+  input: attribute.Input,
+  options: attribute.Options = {},
+): Promise<Record | null> {
+  return update(state, id, input, options)
+}
+
+export declare namespace attribute {
+  /** Attribution applied by {@link attribute}; omitted fields keep their current value. */
+  type Input = Pick<update.Input, 'orgId' | 'projectId'>
+
+  /** Options for reading and updating the key record. */
+  type Options = update.Options
+}
+
 /**
  * Stamps `billingActive` onto every key an organization owns in an environment,
  * re-syncing the snapshot the auth path reads when billing flips (activation or

package/src/App.test.ts

@@ -2,6 +2,7 @@ import * as http from 'node:http'
 import { Challenge } from 'mppx'
 import { ApiKeys, App, Metrics, RateLimit, Store } from 'tapimo'
 import * as Docs from 'tapimo/docs'
+import * as Tokenlist from './apps/data/routes/tokenlist.js'
 import * as Tokens from './apps/data/routes/tokens.js'
 import type * as Log from './internal/Log.js'
 import * as TestApp from '../test/App.js'
@@ -9,6 +10,27 @@ import * as Runtime from '../test/runtime.js'
 import * as Tempo from '../test/Tempo.js'
 
 describe('create', () => {
+  test('rejects duplicate provider ids', () => {
+    expect(() =>
+      TestApp.create({
+        providers: [
+          { id: 'duplicate', name: 'First', type: 'funding' },
+          { id: 'duplicate', name: 'Second', type: 'exchange' },
+        ],
+      }),
+    ).toThrowErrorMatchingInlineSnapshot(
+      `[App.DuplicateProviderIdError: Duplicate provider id "duplicate".]`,
+    )
+  })
+
+  test('rejects provider ids that are not normalized', () => {
+    expect(() =>
+      TestApp.create({ providers: [{ id: ' Relay ', name: 'Relay', type: 'funding' }] }),
+    ).toThrowErrorMatchingInlineSnapshot(
+      `[App.InvalidProviderIdError: Invalid provider id " Relay ". Provider ids must be lowercase and trimmed.]`,
+    )
+  })
+
   test('composes default dependencies', async () => {
     const store = Store.memory()
     TestApp.create({ cache: { store } })
@@ -226,7 +248,7 @@ describe('create', () => {
     const store = Store.memory()
     const limit = { perMinute: 2 }
     const app = TestApp.create({
-      mpp: { rateLimit: limit },
+      auth: { mpp: { rateLimit: limit } },
       rateLimit: { store },
     })
     await exhaustQuota(RateLimit.memory({ store }), 'mpp:public:203.0.113.10', limit)
@@ -248,11 +270,11 @@ describe('create', () => {
     const routeLimit = { perMinute: 1 }
     const app = TestApp.create({
       auth: {
+        mpp: { rateLimit: { perMinute: 2 } },
         overrides: {
           'GET /v1/tokens/:token': { mpp: { rateLimit: routeLimit } },
         },
       },
-      mpp: { rateLimit: { perMinute: 2 } },
       rateLimit: { store },
     })
     await exhaustQuota(RateLimit.memory({ store }), 'mpp:public:203.0.113.10', routeLimit)
@@ -507,6 +529,55 @@ describe('create', () => {
     expect(body.data.every((token) => typeof token.logoUri === 'string')).toBe(true)
   })
 
+  test('builds token lists from asset metadata without loading bodies', async () => {
+    const db = TestApp.database()
+    await TestApp.verifiedSeed(db, 42431)
+    const address = '0x20c0000000000000000000000000000000000000'
+    const key = `42431/icons/${address}`
+    const app = App.create({ auth: false, db, defaultChainId: 42431 }).route(
+      '/',
+      App.data({
+        assets: {
+          get: async () => {
+            throw new Error('Token list loaded an asset body.')
+          },
+          list: async (prefix) => (prefix === '42431/icons/' ? [key] : []),
+        },
+      }),
+    )
+
+    const response = await app.request('/v1/tokenlist')
+    const body = await TestApp.json(response, Tokenlist.schema.getTokenList.Response)
+    const token = body.tokens.find((token) => token.address === address)
+
+    expect(response.status).toBe(200)
+    expect(token?.logoURI).toBe(`http://localhost/assets/${key}`)
+  })
+
+  test('serves token lists when the asset store is unavailable', async () => {
+    const db = TestApp.database()
+    await TestApp.verifiedSeed(db, 42431)
+    const app = App.create({ auth: false, db, defaultChainId: 42431 }).route(
+      '/',
+      App.data({
+        assets: {
+          get: async () => {
+            throw new Error('Asset store unavailable')
+          },
+          list: async () => {
+            throw new Error('Asset store unavailable')
+          },
+        },
+      }),
+    )
+
+    const response = await app.request('/v1/tokenlist')
+    const body = await TestApp.json(response, Tokenlist.schema.getTokenList.Response)
+
+    expect(response.status).toBe(200)
+    expect(body.tokens.length).toBeGreaterThan(0)
+  })
+
   test('returns token metadata from RPC', async () => {
     const app = TestApp.create()
     const response = await app.request(`/v1/tokens/${TestApp.token}`, {
@@ -659,13 +730,6 @@ describe('create', () => {
           token: 'secret_test_key',
         },
       ],
-    } satisfies NonNullable<TestApp.create.Options['auth']>
-    const store = Store.memory({ entries: [['status', 'ready']] })
-    const rateLimitStore = Store.memory()
-    const now = () => new Date('2026-05-25T00:00:30.000Z')
-    const app = TestApp.create({
-      auth,
-      cache: { store },
       mpp: {
         secretKey: 'secret_test_key_0123456789abcdef',
         session: {
@@ -675,6 +739,13 @@ describe('create', () => {
           recipient: Tempo.accounts[2].address,
         },
       },
+    } satisfies NonNullable<TestApp.create.Options['auth']>
+    const store = Store.memory({ entries: [['status', 'ready']] })
+    const rateLimitStore = Store.memory()
+    const now = () => new Date('2026-05-25T00:00:30.000Z')
+    const app = TestApp.create({
+      auth,
+      cache: { store },
       rateLimit: {
         now,
         store: rateLimitStore,
@@ -765,7 +836,11 @@ describe('chain id validation', () => {
   })
 
   test('honors supportedChainIds for self-hosted chains (e.g. a localnet)', async () => {
-    const app = TestApp.create({ auth: false, supportedChainIds: [31337] })
+    const app = TestApp.create({
+      auth: false,
+      rpc: { url: 'https://rpc.example' },
+      supportedChainIds: [31337],
+    })
     const response = await app.request('/v1/transfers?chainId=999999')
     const body = (await response.json()) as { error: { message: string } }