tapimo 0.7.1 → 0.8.0

package/dist/internal/index.js

@@ -2,15 +2,19 @@ export * as Auth from './Auth.js';
 export * as Cache from './Cache.js';
 export * as Cursor from './Cursor.js';
 export * as EdgeCache from './EdgeCache.js';
+export * as EarnVaults from './EarnVaults.js';
 export * as Errors from './Errors.js';
+export * as Exchange from './exchange/index.js';
 export * as Fees from './Fees.js';
-export * as FundingQuotes from './FundingQuotes.js';
+export * as Funding from './funding/index.js';
 export * as Id from './Id.js';
+export * as Idempotency from './Idempotency.js';
 export * as Log from './Log.js';
 export * as MetricSink from './MetricSink.js';
 export * as Mpp from './Mpp.js';
 export * as OpenApi from './OpenApi.js';
 export * as Path from './Path.js';
+export * as Provider from './Provider.js';
 export * as RateLimit from './RateLimit.js';
 export * as Response from './Response.js';
 export * as RpcSchema from './RpcSchema.js';

package/dist/internal/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/internal/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AACrD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,kBAAkB,MAAM,yBAAyB,CAAA;AAC7D,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/internal/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAA;AAC/C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,OAAO,MAAM,oBAAoB,CAAA;AAC7C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAC/C,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AACrD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,kBAAkB,MAAM,yBAAyB,CAAA;AAC7D,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA"}

package/dist/internal/webhookDestinations/url.js

@@ -66,65 +66,69 @@ export function assertDeliverableUrl(input) {
         throw new WebhookDestination.InvalidUrlError('protocol', input);
     if (url.username || url.password)
         throw new WebhookDestination.InvalidUrlError('credentials', input);
-    if (isBlockedHost(url.hostname))
+    if (Hostname.isBlocked(url.hostname))
         throw new WebhookDestination.InvalidUrlError('blocked_host', input);
     return url;
 }
-function isBlockedHost(hostname) {
-    // URL hostnames preserve IPv6 brackets and are already lowercased for names.
-    const host = hostname.replace(/^\[|\]$/g, '').toLowerCase();
-    if (host === 'localhost' || host.endsWith('.localhost'))
-        return true;
-    if (host === 'metadata.google.internal')
-        return true;
-    if (host.length === 0)
-        return true;
-    if (isIpv4(host))
-        return isBlockedIpv4(host);
-    if (host.includes(':'))
-        return isBlockedIpv6(host);
-    return false;
-}
-function isIpv4(host) {
-    const parts = host.split('.');
-    return parts.length === 4 && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255);
-}
-function isBlockedIpv4(host) {
-    const [a, b] = host.split('.').map(Number);
-    if (a === 0 || a === 10 || a === 127)
-        return true; // unspecified, private, loopback
-    if (a === 169 && b === 254)
-        return true; // link-local (incl. cloud metadata)
-    if (a === 172 && b >= 16 && b <= 31)
-        return true; // private
-    if (a === 192 && b === 168)
-        return true; // private
-    if (a === 100 && b >= 64 && b <= 127)
-        return true; // carrier-grade NAT
-    return false;
-}
-function isBlockedIpv6(host) {
-    if (host === '::' || host === '::1')
-        return true; // unspecified, loopback
-    if (host.startsWith('fe8') ||
-        host.startsWith('fe9') ||
-        host.startsWith('fea') ||
-        host.startsWith('feb'))
-        return true; // link-local fe80::/10
-    if (host.startsWith('fc') || host.startsWith('fd'))
-        return true; // unique local fc00::/7
-    // IPv4-mapped (::ffff:a.b.c.d) — re-check the embedded v4.
-    const dotted = host.match(/::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/);
-    if (dotted?.[1] && isIpv4(dotted[1]))
-        return isBlockedIpv4(dotted[1]);
-    // The URL parser compresses ::ffff:a.b.c.d to two hex groups (e.g. 7f00:1).
-    const hex = host.match(/::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/);
-    if (hex?.[1] && hex[2]) {
-        const high = Number.parseInt(hex[1], 16);
-        const low = Number.parseInt(hex[2], 16);
-        const v4 = `${high >> 8}.${high & 0xff}.${low >> 8}.${low & 0xff}`;
-        return isBlockedIpv4(v4);
+var Hostname;
+(function (Hostname) {
+    function isBlocked(hostname) {
+        // URL hostnames preserve IPv6 brackets and are already lowercased for names.
+        const host = hostname.replace(/^\[|\]$/g, '').toLowerCase();
+        if (host === 'localhost' || host.endsWith('.localhost'))
+            return true;
+        if (host === 'metadata.google.internal')
+            return true;
+        if (host.length === 0)
+            return true;
+        if (isIpv4(host))
+            return isBlockedIpv4(host);
+        if (host.includes(':'))
+            return isBlockedIpv6(host);
+        return false;
     }
-    return false;
-}
+    Hostname.isBlocked = isBlocked;
+    function isIpv4(host) {
+        const parts = host.split('.');
+        return (parts.length === 4 && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255));
+    }
+    function isBlockedIpv4(host) {
+        const [a, b] = host.split('.').map(Number);
+        if (a === 0 || a === 10 || a === 127)
+            return true; // unspecified, private, loopback
+        if (a === 169 && b === 254)
+            return true; // link-local (incl. cloud metadata)
+        if (a === 172 && b >= 16 && b <= 31)
+            return true; // private
+        if (a === 192 && b === 168)
+            return true; // private
+        if (a === 100 && b >= 64 && b <= 127)
+            return true; // carrier-grade NAT
+        return false;
+    }
+    function isBlockedIpv6(host) {
+        if (host === '::' || host === '::1')
+            return true; // unspecified, loopback
+        if (host.startsWith('fe8') ||
+            host.startsWith('fe9') ||
+            host.startsWith('fea') ||
+            host.startsWith('feb'))
+            return true; // link-local fe80::/10
+        if (host.startsWith('fc') || host.startsWith('fd'))
+            return true; // unique local fc00::/7
+        // IPv4-mapped (::ffff:a.b.c.d) — re-check the embedded v4.
+        const dotted = host.match(/::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/);
+        if (dotted?.[1] && isIpv4(dotted[1]))
+            return isBlockedIpv4(dotted[1]);
+        // The URL parser compresses ::ffff:a.b.c.d to two hex groups (e.g. 7f00:1).
+        const hex = host.match(/::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/);
+        if (hex?.[1] && hex[2]) {
+            const high = Number.parseInt(hex[1], 16);
+            const low = Number.parseInt(hex[2], 16);
+            const ipv4 = `${high >> 8}.${high & 0xff}.${low >> 8}.${low & 0xff}`;
+            return isBlockedIpv4(ipv4);
+        }
+        return false;
+    }
+})(Hostname || (Hostname = {}));
 //# sourceMappingURL=url.js.map

package/dist/internal/webhookDestinations/url.js.map

@@ -1 +1 @@
-{"version":3,"file":"url.js","sourceRoot":"","sources":["../../../src/internal/webhookDestinations/url.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,kBAAkB,MAAM,0BAA0B,CAAA;AAE9D;;;;;GAKG;AACH,MAAM,UAAU,GAAG,CAAC,GAAW;IAC7B,oBAAoB,CAAC,GAAG,CAAC,CAAA;IACzB,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;YAC5B,uEAAuE;YACvE,0EAA0E;YAC1E,aAAa;YACb,IAAI,CAAC;gBACH,oBAAoB,CAAC,GAAG,CAAC,CAAA;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GACV,KAAK,YAAY,kBAAkB,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAA;gBAClF,OAAO,EAAE,KAAK,EAAE,iBAAiB,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;YACzD,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;YAClE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;YACrC,OAAO,kBAAkB,CAAC,IAAI,CAAC;gBAC7B,IAAI;gBACJ,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE;oBACP,CAAC,kBAAkB,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,EAAE;oBAC/C,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,IAAI;oBACnD,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC;wBAC5D,IAAI;wBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;qBAC7B,CAAC;iBACH;gBACD,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,uEAAuE;gBACvE,oEAAoE;gBACpE,eAAe,EAAE,IAAI;gBACrB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,GAAG;aACJ,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,EAAE,KAAK;QACX,GAAG;KACJ,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAClE,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,kBAAkB,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;IAC9F,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAC9B,MAAM,IAAI,kBAAkB,CAAC,eAAe,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;IACpE,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC7B,MAAM,IAAI,kBAAkB,CAAC,eAAe,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAErE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,6EAA6E;IAC7E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAE3D,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAA;IACpE,IAAI,IAAI,KAAK,0BAA0B;QAAE,OAAO,IAAI,CAAA;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAElC,IAAI,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAA;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAA;IAClD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC7B,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAqC,CAAA;IAC9E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA,CAAC,iCAAiC;IACnF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA,CAAC,oCAAoC;IAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAA,CAAC,UAAU;IAC3D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA,CAAC,UAAU;IAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAA,CAAC,oBAAoB;IACtE,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAA,CAAC,wBAAwB;IACzE,IACE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAEtB,OAAO,IAAI,CAAA,CAAC,uBAAuB;IACrC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA,CAAC,wBAAwB;IAExF,2DAA2D;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACzE,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAErE,4EAA4E;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAA;IACjE,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACxC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACvC,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,EAAE,CAAA;QAClE,OAAO,aAAa,CAAC,EAAE,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../../../src/internal/webhookDestinations/url.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,kBAAkB,MAAM,0BAA0B,CAAA;AAE9D;;;;;GAKG;AACH,MAAM,UAAU,GAAG,CAAC,GAAW;IAC7B,oBAAoB,CAAC,GAAG,CAAC,CAAA;IACzB,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;YAC5B,uEAAuE;YACvE,0EAA0E;YAC1E,aAAa;YACb,IAAI,CAAC;gBACH,oBAAoB,CAAC,GAAG,CAAC,CAAA;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GACV,KAAK,YAAY,kBAAkB,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAA;gBAClF,OAAO,EAAE,KAAK,EAAE,iBAAiB,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;YACzD,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;YAClE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;YACrC,OAAO,kBAAkB,CAAC,IAAI,CAAC;gBAC7B,IAAI;gBACJ,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE;oBACP,CAAC,kBAAkB,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,EAAE;oBAC/C,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,IAAI;oBACnD,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC;wBAC5D,IAAI;wBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;qBAC7B,CAAC;iBACH;gBACD,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,uEAAuE;gBACvE,oEAAoE;gBACpE,eAAe,EAAE,IAAI;gBACrB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,GAAG;aACJ,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,EAAE,KAAK;QACX,GAAG;KACJ,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAClE,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,kBAAkB,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;IAC9F,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAC9B,MAAM,IAAI,kBAAkB,CAAC,eAAe,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;IACpE,IAAI,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClC,MAAM,IAAI,kBAAkB,CAAC,eAAe,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAErE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,IAAU,QAAQ,CAwDjB;AAxDD,WAAU,QAAQ;IAChB,SAAgB,SAAS,CAAC,QAAgB;QACxC,6EAA6E;QAC7E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;QAE3D,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAA;QACpE,IAAI,IAAI,KAAK,0BAA0B;YAAE,OAAO,IAAI,CAAA;QACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAElC,IAAI,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAA;QAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAA;QAClD,OAAO,KAAK,CAAA;IACd,CAAC;IAXe,SAAA,SAAS,YAWxB,CAAA;IAED,SAAS,MAAM,CAAC,IAAY;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC7B,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAC3F,CAAA;IACH,CAAC;IAED,SAAS,aAAa,CAAC,IAAY;QACjC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAqC,CAAA;QAC9E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA,CAAC,iCAAiC;QACnF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA,CAAC,oCAAoC;QAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAA,CAAC,UAAU;QAC3D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA,CAAC,UAAU;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAA,CAAC,oBAAoB;QACtE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,SAAS,aAAa,CAAC,IAAY;QACjC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,CAAA,CAAC,wBAAwB;QACzE,IACE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACtB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACtB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACtB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAEtB,OAAO,IAAI,CAAA,CAAC,uBAAuB;QACrC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA,CAAC,wBAAwB;QAExF,2DAA2D;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACzE,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;QAErE,4EAA4E;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAA;QACjE,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YACvC,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,EAAE,CAAA;YACpE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAA;QAC5B,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,EAxDS,QAAQ,KAAR,QAAQ,QAwDjB"}

package/dist/providers/index.d.ts

@@ -0,0 +1,43 @@
+import * as Uniswap from '../internal/exchange/providers/uniswap.js';
+import * as Across from '../internal/funding/providers/across.js';
+import * as Relay from '../internal/funding/providers/relay.js';
+import * as Rhino from '../internal/funding/providers/rhino.js';
+import * as Squid from '../internal/funding/providers/squid.js';
+import * as Symbiosis from '../internal/funding/providers/symbiosis.js';
+/** Creates an Across funding provider. */
+export declare const across: typeof Across.across;
+export declare namespace across {
+    /** Across provider configuration. */
+    type Options = Across.across.Options;
+}
+/** Creates a Relay funding provider. */
+export declare const relay: typeof Relay.relay;
+export declare namespace relay {
+    /** Relay provider configuration. */
+    type Options = Relay.relay.Options;
+}
+/** Creates a Rhino funding provider. */
+export declare const rhino: typeof Rhino.rhino;
+export declare namespace rhino {
+    /** Rhino provider configuration. */
+    type Options = Rhino.rhino.Options;
+}
+/** Creates a Squid funding provider. */
+export declare const squid: typeof Squid.squid;
+export declare namespace squid {
+    /** Squid provider configuration. */
+    type Options = Squid.squid.Options;
+}
+/** Creates a Symbiosis funding provider. */
+export declare const symbiosis: typeof Symbiosis.symbiosis;
+export declare namespace symbiosis {
+    /** Symbiosis provider configuration. */
+    type Options = Symbiosis.symbiosis.Options;
+}
+/** Creates a Uniswap exchange provider. */
+export declare const uniswap: typeof Uniswap.uniswap;
+export declare namespace uniswap {
+    /** Uniswap provider configuration. */
+    type Options = Uniswap.uniswap.Options;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,2CAA2C,CAAA;AACpE,OAAO,KAAK,MAAM,MAAM,yCAAyC,CAAA;AACjE,OAAO,KAAK,KAAK,MAAM,wCAAwC,CAAA;AAC/D,OAAO,KAAK,KAAK,MAAM,wCAAwC,CAAA;AAC/D,OAAO,KAAK,KAAK,MAAM,wCAAwC,CAAA;AAC/D,OAAO,KAAK,SAAS,MAAM,4CAA4C,CAAA;AAEvE,0CAA0C;AAC1C,eAAO,MAAM,MAAM,sBAAgB,CAAA;AAEnC,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,qCAAqC;IACrC,KAAK,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAA;CACrC;AAED,wCAAwC;AACxC,eAAO,MAAM,KAAK,oBAAc,CAAA;AAEhC,MAAM,CAAC,OAAO,WAAW,KAAK,CAAC;IAC7B,oCAAoC;IACpC,KAAK,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAA;CACnC;AAED,wCAAwC;AACxC,eAAO,MAAM,KAAK,oBAAc,CAAA;AAEhC,MAAM,CAAC,OAAO,WAAW,KAAK,CAAC;IAC7B,oCAAoC;IACpC,KAAK,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAA;CACnC;AAED,wCAAwC;AACxC,eAAO,MAAM,KAAK,oBAAc,CAAA;AAEhC,MAAM,CAAC,OAAO,WAAW,KAAK,CAAC;IAC7B,oCAAoC;IACpC,KAAK,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAA;CACnC;AAED,4CAA4C;AAC5C,eAAO,MAAM,SAAS,4BAAsB,CAAA;AAE5C,MAAM,CAAC,OAAO,WAAW,SAAS,CAAC;IACjC,wCAAwC;IACxC,KAAK,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAA;CAC3C;AAED,2CAA2C;AAC3C,eAAO,MAAM,OAAO,wBAAkB,CAAA;AAEtC,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,sCAAsC;IACtC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAA;CACvC"}

package/dist/providers/index.js

@@ -0,0 +1,19 @@
+import * as Uniswap from '../internal/exchange/providers/uniswap.js';
+import * as Across from '../internal/funding/providers/across.js';
+import * as Relay from '../internal/funding/providers/relay.js';
+import * as Rhino from '../internal/funding/providers/rhino.js';
+import * as Squid from '../internal/funding/providers/squid.js';
+import * as Symbiosis from '../internal/funding/providers/symbiosis.js';
+/** Creates an Across funding provider. */
+export const across = Across.across;
+/** Creates a Relay funding provider. */
+export const relay = Relay.relay;
+/** Creates a Rhino funding provider. */
+export const rhino = Rhino.rhino;
+/** Creates a Squid funding provider. */
+export const squid = Squid.squid;
+/** Creates a Symbiosis funding provider. */
+export const symbiosis = Symbiosis.symbiosis;
+/** Creates a Uniswap exchange provider. */
+export const uniswap = Uniswap.uniswap;
+//# sourceMappingURL=index.js.map

package/dist/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,2CAA2C,CAAA;AACpE,OAAO,KAAK,MAAM,MAAM,yCAAyC,CAAA;AACjE,OAAO,KAAK,KAAK,MAAM,wCAAwC,CAAA;AAC/D,OAAO,KAAK,KAAK,MAAM,wCAAwC,CAAA;AAC/D,OAAO,KAAK,KAAK,MAAM,wCAAwC,CAAA;AAC/D,OAAO,KAAK,SAAS,MAAM,4CAA4C,CAAA;AAEvE,0CAA0C;AAC1C,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;AAOnC,wCAAwC;AACxC,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;AAOhC,wCAAwC;AACxC,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;AAOhC,wCAAwC;AACxC,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;AAOhC,4CAA4C;AAC5C,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAA;AAO5C,2CAA2C;AAC3C,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tapimo",
   "type": "module",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "main": "./dist/index.js",
   "license": "MIT",
   "bin": {
@@ -21,14 +21,14 @@
     "incur": "^0.4.19",
     "jose": "^6.2.3",
     "kysely": "^0.29.2",
-    "mppx": "0.8.9",
+    "mppx": "^0.8.15",
     "nanoid": "^5.1.11",
-    "ox": "0.14.30",
+    "ox": "0.14.33",
     "pg": "^8.22.0",
     "stripe": "^19.1.0",
     "tidx.ts": "^0.1.2",
-    "viem": "2.54.6",
-    "vocs": "^2.3.3",
+    "viem": "2.55.10",
+    "vocs": "^2.8.3",
     "zod": "^4.4.3"
   },
   "sideEffects": false,
@@ -85,6 +85,11 @@
       "types": "./dist/apps/mpp/index.d.ts",
       "default": "./dist/apps/mpp/index.js"
     },
+    "./providers": {
+      "src": "./src/providers/index.ts",
+      "types": "./dist/providers/index.d.ts",
+      "default": "./dist/providers/index.js"
+    },
     "./relay": {
       "src": "./src/apps/relay/index.ts",
       "types": "./dist/apps/relay/index.d.ts",

package/src/ApiKey.test.ts

@@ -10,6 +10,7 @@ describe('schema.ApiKey', () => {
       scopes: ['data:read'],
     })
     expect(parsed.environment).toMatchInlineSnapshot(`"production"`)
+    expect(parsed.allowedIps).toEqual([])
   })
 
   test('accepts an explicit sandbox environment', () => {
@@ -32,6 +33,40 @@ describe('schema.ApiKey', () => {
       }).success,
     ).toBe(false)
   })
+
+  test('accepts exact IP and CIDR allowlist rules', () => {
+    const parsed = ApiKey.schema.ApiKey.parse({
+      allowedIps: ['203.0.113.7', '203.0.113.0/24', '2001:db8::/32'],
+      id: 'key_test',
+      orgId: 'org_test',
+      scopes: ['data:read'],
+    })
+    expect(parsed.allowedIps).toEqual(['203.0.113.7', '203.0.113.0/24', '2001:db8::/32'])
+  })
+
+  test.each(['203.0.113.0/33', '2001:db8::/129', '*', 'not-an-ip'])(
+    'rejects invalid allowlist rule %s',
+    (rule) => {
+      expect(
+        ApiKey.schema.ApiKey.safeParse({
+          allowedIps: [rule],
+          id: 'key_test',
+          orgId: 'org_test',
+          scopes: ['data:read'],
+        }).success,
+      ).toBe(false)
+    },
+  )
+
+  test('accepts 100 allowlist rules and rejects 101', () => {
+    const base = { id: 'key_test', orgId: 'org_test', scopes: ['data:read'] }
+    const rules = Array.from({ length: 101 }, (_, index) => `203.0.113.${index}`)
+
+    expect(
+      ApiKey.schema.ApiKey.safeParse({ ...base, allowedIps: rules.slice(0, 100) }).success,
+    ).toBe(true)
+    expect(ApiKey.schema.ApiKey.safeParse({ ...base, allowedIps: rules }).success).toBe(false)
+  })
 })
 
 describe('redact', () => {

package/src/ApiKey.ts

@@ -15,10 +15,29 @@ import { Hash, Hex } from 'ox'
 import * as z from 'zod/mini'
 
 import * as Id from './internal/Id.js'
+import * as IpAllowlist from './internal/IpAllowlist.js'
 import * as RateLimit from './internal/RateLimit.js'
 
 /** Zod schemas owned by the API-key module. */
 export namespace schema {
+  /** Client IP/CIDR rules restricting where a key may be used. */
+  export const AllowedIps = z
+    .readonly(
+      z.array(
+        z
+          .string()
+          .check(
+            z.maxLength(64),
+            z.refine(IpAllowlist.isRule),
+            z.describe('An exact IPv4/IPv6 address or CIDR range.'),
+          ),
+      ),
+    )
+    .check(
+      z.maxLength(100),
+      z.describe('Client IP addresses and CIDR ranges restricting where a key may be used.'),
+    )
+
   /**
    * Canonical schema for resolved API-key metadata, and the single source of
    * truth for the {@link ApiKey} type. `ApiKeys` derives its persisted
@@ -26,6 +45,14 @@ export namespace schema {
    * persisted shapes cannot drift.
    */
   export const ApiKey = z.object({
+    allowedIps: z
+      ._default(AllowedIps, [])
+      .check(
+        z.describe(
+          'Client IP addresses and CIDR ranges allowed to use this key. An empty list means unrestricted access.',
+        ),
+        z.meta({ examples: [['203.0.113.0/24', '2001:db8::1']] }),
+      ),
     billingActive: z
       .optional(z.boolean())
       .check(

package/src/ApiKeys.test.ts

@@ -73,6 +73,7 @@ describe('mint', () => {
     expect(record.tokenLast4).toBe(token.slice(-4))
     expect({ ...record, id: '<id>', tokenLast4: '<last4>' }).toMatchInlineSnapshot(`
       {
+        "allowedIps": [],
         "createdAt": "2026-01-01T00:00:00.000Z",
         "createdBy": "admin@tempo.xyz",
         "environment": "production",
@@ -98,14 +99,14 @@ describe('mint', () => {
     ).rejects.toThrowError(/invalid API key input/)
   })
 
-  test('mints a per-zone read scope', async () => {
+  test('mints per-zone read and write scopes', async () => {
     const state = Store.memory()
     const { token } = await ApiKeys.mint(state, {
       orgId: 'org_a',
-      scopes: ['zone:421700001:read'],
+      scopes: ['zone:421700001:read', 'zone:421700001:write'],
     })
     const resolved = await ApiKeys.resolve(state, token)
-    expect(resolved?.scopes).toEqual(['zone:421700001:read'])
+    expect(resolved?.scopes).toEqual(['zone:421700001:read', 'zone:421700001:write'])
   })
 
   test('rejects malformed zone scopes', async () => {
@@ -115,8 +116,9 @@ describe('mint', () => {
       'zone:1.5:read',
       'zone:-1:read',
       'zone:0:read',
+      'zone:0:write',
       'zone:000421700001:read',
-      'zone:1:write',
+      'zone:1:admin',
     ])
       await expect(
         ApiKeys.mint(Store.memory(), { orgId: 'org_a', scopes: [scope as never] }),
@@ -257,15 +259,17 @@ describe('listByOrg', () => {
   })
 })
 
-describe('attribute', () => {
-  test('re-attributes org and project, moving the org index', async () => {
+describe('update', () => {
+  test('updates the name, org, and project while moving the org index', async () => {
     const state = Store.memory()
     const { record, token } = await ApiKeys.mint(state, { orgId: 'org_a', scopes: ['data:read'] })
 
-    const updated = await ApiKeys.attribute(state, record.id, {
+    const updated = await ApiKeys.update(state, record.id, {
+      name: 'Explorer',
       orgId: 'org_b',
       projectId: 'prj_b',
     })
+    expect(updated?.name).toBe('Explorer')
     expect(updated?.orgId).toBe('org_b')
     expect(updated?.projectId).toBe('prj_b')
 
@@ -277,8 +281,37 @@ describe('attribute', () => {
     expect(await ApiKeys.listByOrg(state, 'org_a')).toEqual([])
     expect((await ApiKeys.listByOrg(state, 'org_b')).map(({ id }) => id)).toEqual([record.id])
 
+    expect(await ApiKeys.update(state, 'key_missing', { projectId: 'prj_x' })).toBeNull()
     expect(await ApiKeys.attribute(state, 'key_missing', { projectId: 'prj_x' })).toBeNull()
   })
+
+  test('replaces and clears the IP allowlist without changing the token', async () => {
+    const state = Store.memory()
+    const { record, token } = await ApiKeys.mint(state, {
+      allowedIps: ['203.0.113.0/24'],
+      orgId: 'org_a',
+      scopes: ['data:read'],
+    })
+
+    const updated = await ApiKeys.update(state, record.id, {
+      allowedIps: ['2001:db8::/32'],
+    })
+    expect(updated?.allowedIps).toEqual(['2001:db8::/32'])
+    expect((await ApiKeys.resolve(state, token))?.allowedIps).toEqual(['2001:db8::/32'])
+
+    const cleared = await ApiKeys.update(state, record.id, { allowedIps: [] })
+    expect(cleared?.allowedIps).toEqual([])
+    expect((await ApiKeys.resolve(state, token))?.allowedIps).toEqual([])
+  })
+
+  test('rejects invalid IP allowlist rules at the write boundary', async () => {
+    const state = Store.memory()
+    const { record } = await ApiKeys.mint(state, { orgId: 'org_a', scopes: ['data:read'] })
+
+    await expect(
+      ApiKeys.update(state, record.id, { allowedIps: ['203.0.113.0/33'] }),
+    ).rejects.toThrowError(/invalid API key input/)
+  })
 })
 
 describe('setBillingActive', () => {

package/src/ApiKeys.ts

@@ -97,6 +97,7 @@ export async function mint(
   const recordKey = ApiKey.keyFor(token)
   const id = ApiKey.generateId()
   const record: Record = {
+    allowedIps: data.allowedIps,
     createdAt: time.toISOString(),
     environment: data.environment,
     id,
@@ -291,22 +292,25 @@ export async function revoke(state: Store.State, id: string): Promise<boolean> {
 }
 
 /**
- * Re-attributes a key to an organization and/or project, rewriting its record
- * in place (same token hash) and moving the org index entry when the org
- * changes. The backfill path for legacy keys.
+ * Updates a key's IP allowlist, display name, and attribution, rewriting its
+ * record in place and moving the org index entry when the org changes.
  *
  * @param state - The KV state store holding key records.
  * @param id - The key id (`key_…`).
- * @param input - The attribution to apply.
+ * @param input - Key metadata to apply.
  * @param options - Scope catalog used for validation.
  * @returns The updated record, or `null` when the key is absent.
  */
-export async function attribute(
+export async function update(
   state: Store.State,
   id: string,
-  input: attribute.Input,
-  options: attribute.Options = {},
+  input: update.Input,
+  options: update.Options = {},
 ): Promise<Record | null> {
+  if (input.allowedIps !== undefined) {
+    const valid = ApiKey.schema.AllowedIps.safeParse(input.allowedIps)
+    if (!valid.success) throw new Error(`invalid API key input: ${z.prettifyError(valid.error)}`)
+  }
   const recordKey = await state.get(idKeyFor(id))
   if (!recordKey) return null
   const record = await read(state, recordKey, Date.now(), options.scopeCatalog ?? Scope.catalog)
@@ -314,6 +318,8 @@ export async function attribute(
 
   const updated: Record = {
     ...record,
+    ...(input.allowedIps === undefined ? {} : { allowedIps: input.allowedIps }),
+    ...(input.name === undefined ? {} : { name: input.name }),
     ...(input.orgId === undefined ? {} : { orgId: input.orgId }),
     ...(input.projectId === undefined ? {} : { projectId: input.projectId }),
   }
@@ -327,22 +333,52 @@ export async function attribute(
   return updated
 }
 
-export declare namespace attribute {
-  /** Attribution applied by {@link attribute}; omitted fields keep their current value. */
+export declare namespace update {
+  /** Metadata applied by {@link update}; omitted fields keep their current value. */
   type Input = {
+    /** Replacement client IP/CIDR allowlist. An empty list clears the restriction. */
+    allowedIps?: readonly string[] | undefined
+    /** New human-readable key name. */
+    name?: string | undefined
     /** New owning organization id (`org_…`). */
     orgId?: string | undefined
     /** New attributed project id (`prj_…`). */
     projectId?: string | undefined
   }
 
-  /** Options for {@link attribute}. */
+  /** Options for {@link update}. */
   type Options = {
     /** Scope catalog accepted while reading the key. */
     scopeCatalog?: Scope.Catalog | undefined
   }
 }
 
+/**
+ * Re-attributes a key while preserving the existing public API.
+ *
+ * @param state - The KV state store holding key records.
+ * @param id - The key id (`key_…`).
+ * @param input - Attribution to apply.
+ * @param options - Scope catalog used for validation.
+ * @returns The updated record, or `null` when the key is absent.
+ */
+export function attribute(
+  state: Store.State,
+  id: string,
+  input: attribute.Input,
+  options: attribute.Options = {},
+): Promise<Record | null> {
+  return update(state, id, input, options)
+}
+
+export declare namespace attribute {
+  /** Attribution applied by {@link attribute}; omitted fields keep their current value. */
+  type Input = Pick<update.Input, 'orgId' | 'projectId'>
+
+  /** Options for reading and updating the key record. */
+  type Options = update.Options
+}
+
 /**
  * Stamps `billingActive` onto every key an organization owns in an environment,
  * re-syncing the snapshot the auth path reads when billing flips (activation or