tapimo 0.8.0 → 0.9.0

package/src/apps/funding/routes/deposit-addresses.test.ts

@@ -1152,10 +1152,16 @@ describe('POST /funding/deposit-addresses/:id/reconcile', () => {
   })
 })
 
-describe('GET /funding/deposit-addresses/:id/deposits', () => {
+describe('GET /funding/deposits?depositAddress', () => {
   test('pages deposits newest-first under an owned address', async () => {
     const app = transfersApp()
-    const address = await seedDepositAddress()
+    const address = await seedDepositAddress({
+      snapshot: TestFunding.depositAddressSnapshot({
+        address: 'TQn9Y2khEsLJW1ChVWFMSMeRDow5KcbLSE',
+        provider: { id: 'relay_list_deposit_address', name: 'Relay' },
+        recipient: `0x${'41'.repeat(20)}`,
+      }),
+    })
     const first = await seedDeposit(address)
     const second = await seedDeposit(address)
     const third = await seedDeposit(address)
@@ -1164,7 +1170,7 @@ describe('GET /funding/deposit-addresses/:id/deposits', () => {
     const sixth = await seedDeposit(address)
 
     const response = await app.request(
-      `/v1/funding/deposit-addresses/${address.id}/deposits?limit=5`,
+      `/v1/funding/deposits?depositAddress=${address.address}&limit=5`,
       as(fundingReader),
     )
     expect(response.status).toBe(200)
@@ -1177,10 +1183,7 @@ describe('GET /funding/deposit-addresses/:id/deposits', () => {
         "etag": null,
       }
     `)
-    const body = await TestApp.json(
-      response,
-      Funding.schema.listFundingDepositAddressDeposits.Response,
-    )
+    const body = await TestApp.json(response, Funding.schema.listFundingDeposits.Response)
     expect(body.data.map((deposit) => deposit.id)).toEqual([
       sixth.id,
       fifth.id,
@@ -1192,10 +1195,10 @@ describe('GET /funding/deposit-addresses/:id/deposits', () => {
 
     const next = await TestApp.json(
       await app.request(
-        `/v1/funding/deposit-addresses/${address.id}/deposits?limit=5&cursor=${body.nextCursor}`,
+        `/v1/funding/deposits?depositAddress=${address.address}&limit=5&cursor=${body.nextCursor}`,
         as(fundingReader),
       ),
-      Funding.schema.listFundingDepositAddressDeposits.Response,
+      Funding.schema.listFundingDeposits.Response,
     )
     expect(next.data.map((deposit) => deposit.id)).toEqual([first.id])
     expect(next.nextCursor).toBeNull()
@@ -1205,6 +1208,7 @@ describe('GET /funding/deposit-addresses/:id/deposits', () => {
     const app = transfersApp()
     const address = await seedDepositAddress({
       snapshot: TestFunding.depositAddressSnapshot({
+        address: 'TF17BgPaZYbz8oxbjhriubPDsA7ArKoLX3',
         provider: { id: 'relay_observed', name: 'Relay' },
         recipient: `0x${'31'.repeat(20)}`,
       }),
@@ -1228,14 +1232,11 @@ describe('GET /funding/deposit-addresses/:id/deposits', () => {
     })
 
     const response = await app.request(
-      `/v1/funding/deposit-addresses/${address.id}/deposits`,
+      `/v1/funding/deposits?depositAddress=${address.address}`,
       as(fundingReader),
     )
     expect(response.status).toBe(200)
-    const body = await TestApp.json(
-      response,
-      Funding.schema.listFundingDepositAddressDeposits.Response,
-    )
+    const body = await TestApp.json(response, Funding.schema.listFundingDeposits.Response)
     expect(body).toMatchInlineSnapshot(
       {
         data: [
@@ -1305,21 +1306,30 @@ describe('GET /funding/deposit-addresses/:id/deposits', () => {
     )
   })
 
-  test('returns the parent not-found error before listing deposits', async () => {
+  test('hides a foreign deposit address', async () => {
     const app = transfersApp()
-    const address = await seedDepositAddress({ orgId: fundingForeign.orgId })
+    const address = await seedDepositAddress({
+      orgId: fundingForeign.orgId,
+      snapshot: TestFunding.depositAddressSnapshot({
+        address: 'TWd4WrZ9wn84f5x1hZhL4DHvk738ns5jwb',
+        provider: { id: 'relay_foreign_deposit_address', name: 'Relay' },
+        recipient: `0x${'42'.repeat(20)}`,
+      }),
+    })
+    await seedDeposit(address)
     const response = await app.request(
-      `/v1/funding/deposit-addresses/${address.id}/deposits`,
+      `/v1/funding/deposits?depositAddress=${address.address}`,
       as(fundingReader),
     )
-    expect(response.status).toBe(404)
-    expect(((await response.json()) as { error: { code: string } }).error.code).toBe(
-      'funding_deposit_address_not_found',
-    )
+    expect(response.status).toBe(200)
+    expect(await TestApp.json(response, Funding.schema.listFundingDeposits.Response)).toEqual({
+      data: [],
+      nextCursor: null,
+    })
   })
 })
 
-describe('GET /funding/deposits', () => {
+describe('GET /funding/deposits?recipient', () => {
   test('requires funding:read and pages recipient deposits across addresses', async () => {
     const app = transfersApp()
     const recipient = '0xABcdEFABcdEFabcdEfAbCdefabcdeFABcDEFabCD'
@@ -1327,6 +1337,17 @@ describe('GET /funding/deposits', () => {
     expect((await app.request(path)).status).toBe(401)
     expect((await app.request(path, as(TestApp.key))).status).toBe(403)
     expect((await app.request('/v1/funding/deposits', as(fundingReader))).status).toBe(400)
+    expect(
+      (await app.request('/v1/funding/deposits?depositAddress=', as(fundingReader))).status,
+    ).toBe(400)
+    expect(
+      (
+        await app.request(
+          `${path}&depositAddress=TJRabPrwbZy45sbavfcjinPJC18kjpRTv8`,
+          as(fundingReader),
+        )
+      ).status,
+    ).toBe(400)
 
     const firstAddress = await seedDepositAddress({
       snapshot: TestFunding.depositAddressSnapshot({

package/src/apps/funding/routes/deposit-addresses.ts

@@ -132,35 +132,36 @@ export namespace schema {
     export const Params = getFundingDepositAddress.Params
   }
 
-  /** Schemas for the listFundingDepositAddressDeposits operation. */
-  export namespace listFundingDepositAddressDeposits {
-    /** Path parameters for listing one address's deposits. */
-    export const Params = getFundingDepositAddress.Params
-
-    /** Query parameters for listing one address's deposits. */
-    export const Query = z
-      .object({ cursor: Schema.Cursor, limit: Schema.Limit })
-      .check(z.describe('Paging parameters for one funding deposit address.'))
-
-    /** One page of detected deposits. */
-    export const Response = z
-      .object({
-        data: z.array(Deposit).check(z.describe('Detected deposits on this page, newest first.')),
-        nextCursor: Schema.NextCursor,
-      })
-      .check(z.describe('A page of deposits detected for one funding deposit address.'))
-  }
-
   /** Schemas for the listFundingDeposits operation. */
   export namespace listFundingDeposits {
-    /** Query parameters for listing one account's funding deposits. */
+    /** Query parameters for listing funding deposits. */
     export const Query = z
       .object({
+        depositAddress: z
+          .optional(z.string().check(z.minLength(1)))
+          .check(
+            z.describe('Reusable source-chain deposit address that received the funds.'),
+            z.meta({ examples: ['TJRabPrwbZy45sbavfcjinPJC18kjpRTv8'] }),
+          ),
         cursor: Schema.Cursor,
         limit: Schema.Limit,
-        recipient: Schema.Address.check(z.describe('Tempo account that received the deposits.')),
+        recipient: z
+          .optional(Schema.Address)
+          .check(
+            z.describe('Tempo account that received the deposits.'),
+            z.meta({ examples: [`0x${'11'.repeat(20)}`] }),
+          ),
       })
-      .check(z.describe('Recipient filter and paging parameters for funding deposits.'))
+      .check(
+        z.refine(
+          (query) => (query.depositAddress === undefined) !== (query.recipient === undefined),
+          {
+            error: 'Pass exactly one of `depositAddress` or `recipient`.',
+            path: ['depositAddress'],
+          },
+        ),
+        z.describe('Exactly one deposit filter and optional paging parameters.'),
+      )
 
     /** One page of detected deposits. */
     export const Response = z
@@ -168,7 +169,7 @@ export namespace schema {
         data: z.array(Deposit).check(z.describe('Detected deposits on this page, newest first.')),
         nextCursor: Schema.NextCursor,
       })
-      .check(z.describe('A page of deposits received by one Tempo account.'))
+      .check(z.describe('A page of funding deposits matching the selected filter.'))
   }
 
   /** Schemas for the getFundingDeposit operation. */
@@ -273,11 +274,6 @@ const fundingDepositExample = {
   updatedAt: '2026-08-04T00:01:00.000Z',
 } satisfies z.output<typeof schema.Deposit>
 
-const fundingDepositAddressDepositsExample = {
-  data: [fundingDepositExample],
-  nextCursor: null,
-} satisfies z.output<typeof schema.listFundingDepositAddressDeposits.Response>
-
 const fundingDepositsExample = {
   data: [fundingDepositExample],
   nextCursor: null,
@@ -650,88 +646,6 @@ export function depositAddresses(options: depositAddresses.Options = {}) {
         }
       },
     )
-    .get(
-      '/v1/funding/deposit-addresses/:id{fda_[A-Za-z0-9_-]+}/deposits',
-      Auth.policy({ apiKey: { scopes: ['funding:read'] } }),
-      OpenApi.validate('param', schema.listFundingDepositAddressDeposits.Params, {
-        code: 'param_invalid',
-        message: 'Check the path parameters and try again.',
-      }),
-      OpenApi.validate('query', schema.listFundingDepositAddressDeposits.Query, {
-        code: 'query_invalid',
-        message: 'Check the query parameters and try again.',
-      }),
-      OpenApi.describeRoute({
-        description: 'Lists deposits detected for one funding deposit address, newest first.',
-        operationId: 'listFundingDepositAddressDeposits',
-        responses: OpenApi.responses({
-          errors: {
-            400: { codes: ['param_invalid', 'query_invalid'] },
-            404: {
-              codes: ['funding_deposit_address_not_found'],
-              description: 'No visible funding deposit address exists for the identifier.',
-            },
-          },
-          success: {
-            description: 'A page of deposits detected for the address.',
-            example: fundingDepositAddressDepositsExample,
-            schema: schema.listFundingDepositAddressDeposits.Response,
-          },
-        }),
-        summary: 'List deposits by deposit address',
-        tags: ['Deposit Addresses'],
-      }),
-      async (c) => {
-        if (Auth.narrowAccess) return Auth.accessError(c)
-        if (OpenApi.narrowValidation)
-          return OpenApi.validationError(c, {
-            code: 'query_invalid',
-            message: 'Check the request parameters and try again.',
-          })
-
-        const owner = Access.owner(c)
-        if (!owner) return Access.unauthorized(c)
-
-        const db = Db.get(c.get('db'))
-        const { id } = c.req.valid('param')
-        const { cursor, limit } = c.req.valid('query')
-        const decoded = cursor ? Cursor.decode(cursor, ['timestamp', 'id']) : undefined
-        try {
-          const address = await FundingDepositAddresses.getOwned(db, owner, id)
-          if (!address)
-            return Response.error(c, {
-              code: 'funding_deposit_address_not_found',
-              message: 'Funding deposit address not found',
-              status: 404,
-            })
-
-          const rows = await FundingDeposits.listByAddress(db, owner, id, {
-            ...(decoded
-              ? { cursor: { createdAt: String(decoded[0]), id: String(decoded[1]) } }
-              : {}),
-            limit: limit + 1,
-          })
-          const page = Cursor.paginate({
-            key: (record) => [record.createdAt, record.id],
-            limit,
-            rows,
-          })
-          const data = page.rows.map(FundingDeposit.toPublic)
-
-          c.header('Cache-Control', Cache.policies.noStore)
-          c.header('Vary', 'Accept-Encoding, Authorization, Tempo-API-Key, X-API-Key')
-          return c.json(
-            Response.validated(schema.listFundingDepositAddressDeposits.Response, {
-              data,
-              nextCursor: page.nextCursor,
-            }),
-            200,
-          )
-        } catch (cause) {
-          return Response.upstream(c, cause)
-        }
-      },
-    )
     .get(
       '/v1/funding/deposit-addresses/:id{fda_[A-Za-z0-9_-]+}',
       Auth.policy({ apiKey: { scopes: ['funding:read'] } }),
@@ -868,19 +782,19 @@ export function depositAddresses(options: depositAddresses.Options = {}) {
         message: 'Check the query parameters and try again.',
       }),
       OpenApi.describeRoute({
-        description: 'Lists deposits received by one Tempo account, newest first.',
+        description: 'Lists deposits by deposit address or Tempo recipient, newest first.',
         operationId: 'listFundingDeposits',
         responses: OpenApi.responses({
           errors: {
             400: { codes: ['query_invalid'] },
           },
           success: {
-            description: 'A page of funding deposits received by the account.',
+            description: 'A page of funding deposits matching the selected filter.',
             example: fundingDepositsExample,
             schema: schema.listFundingDeposits.Response,
           },
         }),
-        summary: 'List deposits by recipient',
+        summary: 'List deposits',
         tags: ['Deposit Addresses'],
       }),
       async (c) => {
@@ -895,17 +809,20 @@ export function depositAddresses(options: depositAddresses.Options = {}) {
         if (!owner) return Access.unauthorized(c)
 
         const db = Db.get(c.get('db'))
-        const { cursor, limit, recipient } = c.req.valid('query')
+        const { cursor, depositAddress, limit, recipient } = c.req.valid('query')
         const decoded = cursor ? Cursor.decode(cursor, ['timestamp', 'id']) : undefined
         try {
-          const rows = await FundingDeposits.listByRecipient(db, {
+          const paging = {
             ...(decoded
               ? { cursor: { createdAt: String(decoded[0]), id: String(decoded[1]) } }
               : {}),
             limit: limit + 1,
             owner,
-            recipient,
-          })
+          }
+          const rows =
+            depositAddress === undefined
+              ? await FundingDeposits.listByRecipient(db, { ...paging, recipient: recipient! })
+              : await FundingDeposits.listByDepositAddress(db, { ...paging, depositAddress })
           const page = Cursor.paginate({
             key: (record) => [record.createdAt, record.id],
             limit,

package/src/apps/funding/routes/transfers.test.ts

@@ -830,9 +830,6 @@ describe('funding transfers OpenAPI', () => {
         !path.endsWith('/deposits') &&
         !path.endsWith('/reconcile'),
     )!
-    const depositAddressDepositsPath = Object.keys(spec.paths).find(
-      (path) => path.includes('/v1/funding/deposit-addresses/{') && path.endsWith('/deposits'),
-    )!
     const depositPath = Object.keys(spec.paths).find((path) =>
       path.includes('/v1/funding/deposits/{'),
     )!
@@ -847,7 +844,6 @@ describe('funding transfers OpenAPI', () => {
       deposit: summarize(spec.paths[depositPath]!.get!),
       depositAddress: summarize(spec.paths[depositAddressPath]!.get!),
       depositAddressCreate: summarize(spec.paths['/v1/funding/deposit-addresses']!.post!),
-      depositAddressDeposits: summarize(spec.paths[depositAddressDepositsPath]!.get!),
       depositAddressReconcile: summarize(spec.paths[reconcilePath]!.post!),
       deposits: summarize(spec.paths['/v1/funding/deposits']!.get!),
       detail: summarize(spec.paths[detailPath]!.get!),
@@ -896,17 +892,13 @@ describe('funding transfers OpenAPI', () => {
             "description": "Creates or returns a reusable deposit address for funding a Tempo account.",
             "summary": "Create deposit address",
           },
-          "depositAddressDeposits": {
-            "description": "Lists deposits detected for one funding deposit address, newest first.",
-            "summary": "List deposits by deposit address",
-          },
           "depositAddressReconcile": {
             "description": "Queues an immediate provider reconciliation for one reusable funding deposit address.",
             "summary": "Reconcile deposit address",
           },
           "deposits": {
-            "description": "Lists deposits received by one Tempo account, newest first.",
-            "summary": "List deposits by recipient",
+            "description": "Lists deposits by deposit address or Tempo recipient, newest first.",
+            "summary": "List deposits",
           },
           "detail": {
             "description": "Returns a transfer by ID.",
@@ -934,7 +926,6 @@ describe('funding transfers OpenAPI', () => {
           },
         },
         "sidebar": [
-          "List transfers",
           "Get quotes",
           "Get chains",
           "Get providers",
@@ -947,8 +938,7 @@ describe('funding transfers OpenAPI', () => {
           "Get deposit address",
           "Get transfer",
           "Get deposit",
-          "List deposits by deposit address",
-          "List deposits by recipient",
+          "List deposits",
         ],
       }
     `)
@@ -1100,8 +1090,9 @@ describe('funding transfers OpenAPI', () => {
     const operation = spec.paths['/v1/funding/transfers']!.get
     const fields = Object.keys(operation.responses['200']!.content['application/json']!.example.data[0]!) // prettier-ignore
     expect(fields).toEqual([...fields].sort())
-    for (const parameter of operation.parameters ?? [])
-      expect(parameter.example ?? parameter.schema?.examples, parameter.name).toBeDefined()
+    for (const route of [operation, spec.paths['/v1/funding/deposits']!.get])
+      for (const parameter of route.parameters ?? [])
+        expect(parameter.example ?? parameter.schema?.examples, parameter.name).toBeDefined()
   })
 
   test('publishes operation ids and required scopes', async () => {
@@ -1128,9 +1119,6 @@ describe('funding transfers OpenAPI', () => {
         !path.endsWith('/deposits') &&
         !path.endsWith('/reconcile'),
     )
-    const depositAddressDepositsPath = Object.keys(spec.paths).find(
-      (path) => path.includes('/v1/funding/deposit-addresses/{') && path.endsWith('/deposits'),
-    )
     const depositPath = Object.keys(spec.paths).find((path) =>
       path.includes('/v1/funding/deposits/{'),
     )
@@ -1141,11 +1129,6 @@ describe('funding transfers OpenAPI', () => {
       depositAddressCreate: spec.paths['/v1/funding/deposit-addresses']?.post?.operationId,
       depositAddressCreateScopes:
         spec.paths['/v1/funding/deposit-addresses']?.post?.['x-required-scopes'],
-      depositAddressDeposits:
-        depositAddressDepositsPath && spec.paths[depositAddressDepositsPath]?.get.operationId,
-      depositAddressDepositsScopes:
-        depositAddressDepositsPath &&
-        spec.paths[depositAddressDepositsPath]?.get['x-required-scopes'],
       depositAddressReconcile: reconcilePath && spec.paths[reconcilePath]?.post?.operationId,
       depositAddressReconcileScopes:
         reconcilePath && spec.paths[reconcilePath]?.post?.['x-required-scopes'],
@@ -1170,8 +1153,6 @@ describe('funding transfers OpenAPI', () => {
       depositAddress: 'getFundingDepositAddress',
       depositAddressCreate: 'createFundingDepositAddress',
       depositAddressCreateScopes: ['funding:write'],
-      depositAddressDeposits: 'listFundingDepositAddressDeposits',
-      depositAddressDepositsScopes: ['funding:read'],
       depositAddressReconcile: 'reconcileFundingDepositAddress',
       depositAddressReconcileScopes: ['funding:write'],
       depositAddressScopes: ['funding:read'],

package/src/apps/funding/routes/transfers.ts

@@ -290,7 +290,7 @@ export function transfers() {
           },
         }),
         summary: 'List transfers',
-        tags: ['Transfers'],
+        tags: ['Funding Transfers'],
       }),
       fundingEtag,
       async (c) => {
@@ -373,7 +373,7 @@ export function transfers() {
           },
         }),
         summary: 'Get transfer',
-        tags: ['Transfers'],
+        tags: ['Funding Transfers'],
       }),
       async (c) => {
         if (Auth.narrowAccess) return Auth.accessError(c)
@@ -448,7 +448,7 @@ export function transfers() {
           },
         }),
         summary: 'Create transfer',
-        tags: ['Transfers'],
+        tags: ['Funding Transfers'],
       }),
       async (c) => {
         if (Auth.narrowAccess) return Auth.accessError(c)
@@ -637,7 +637,7 @@ export function transfers() {
         operationId: 'createFundingTransferVault',
         responses: unimplementedFundingTransferResponses,
         summary: 'Create transfer into vault',
-        tags: ['Transfers'],
+        tags: ['Funding Transfers'],
       }),
       (c) => {
         if (Auth.narrowAccess) return Auth.accessError(c)
@@ -671,7 +671,7 @@ export function transfers() {
         operationId: 'createFundingTransferZone',
         responses: unimplementedFundingTransferResponses,
         summary: 'Create transfer into zone',
-        tags: ['Transfers'],
+        tags: ['Funding Transfers'],
       }),
       (c) => {
         if (Auth.narrowAccess) return Auth.accessError(c)

package/src/db/Db.ts

@@ -1271,6 +1271,15 @@ export const migrations: readonly Migration[] = [
         sql`ALTER TABLE funding_deposits DROP CONSTRAINT IF EXISTS funding_deposits_detection_trigger_check, ADD CONSTRAINT funding_deposits_detection_trigger_check CHECK (detection_trigger IN ('chain', 'manual', 'poll', 'webhook'))`,
       ),
   },
+  {
+    name: '0114_funding_deposit_addresses_owner_address_index',
+    up: (db) =>
+      db.schema
+        .createIndex('funding_deposit_addresses_owner_address_idx')
+        .ifNotExists()
+        .on('fundingDepositAddresses')
+        .columns(['orgId', 'environment', 'address', 'projectId']),
+  },
 ]
 
 /**

package/src/db/tables/fundingDeposits.test.ts

@@ -77,6 +77,107 @@ describe('listByAddress', () => {
   })
 })
 
+describe('listByDepositAddress', () => {
+  const seedAddressDeposit = (address: Awaited<ReturnType<typeof seedAddress>>, index: number) => {
+    const sourceTransactionHash = `fe${index.toString(16).padStart(62, '0')}`
+    return Deposit.create(db, {
+      now: new Date(Date.UTC(2026, 1, 2, 0, 0, index)),
+      providerRequestId: `relay_deposit_address_request_${index}`,
+      snapshot: TestFunding.depositSnapshot(address.id, {
+        provider: address.snapshot.provider,
+        sourceTransactionHashes: [sourceTransactionHash],
+      }),
+      sourceTransactionHash,
+      sourceTransferIndex: 0,
+    })
+  }
+
+  test('pages one reusable address across provider records newest-first', async () => {
+    const depositAddress = 'TQn9Y2khEsLJW1ChVWFMSMeRDow5KcbLSE'
+    const firstAddress = await seedAddress({
+      snapshot: TestFunding.depositAddressSnapshot({
+        address: depositAddress,
+        provider: { id: 'relay_deposit_address_first', name: 'Relay' },
+      }),
+    })
+    const secondAddress = await seedAddress({
+      snapshot: TestFunding.depositAddressSnapshot({
+        address: depositAddress,
+        provider: { id: 'relay_deposit_address_second', name: 'Relay' },
+        subsidize: true,
+      }),
+    })
+    const first = await seedAddressDeposit(firstAddress, 1)
+    const second = await seedAddressDeposit(secondAddress, 2)
+    const third = await seedAddressDeposit(firstAddress, 3)
+    const unrelatedAddress = await seedAddress({
+      snapshot: TestFunding.depositAddressSnapshot({
+        address: 'TF17BgPaZYbz8oxbjhriubPDsA7ArKoLX3',
+        provider: { id: 'relay_deposit_address_unrelated', name: 'Relay' },
+        recipient: `0x${'fe'.repeat(20)}`,
+      }),
+    })
+    await seedAddressDeposit(unrelatedAddress, 4)
+
+    const page = await FundingDeposits.listByDepositAddress(db, {
+      depositAddress,
+      limit: 2,
+      owner,
+    })
+    expect(page.map((row) => row.id)).toEqual([third.id, second.id])
+    const rest = await FundingDeposits.listByDepositAddress(db, {
+      cursor: { createdAt: second.createdAt, id: second.id },
+      depositAddress,
+      limit: 2,
+      owner,
+    })
+    expect(rest.map((row) => row.id)).toEqual([first.id])
+  })
+
+  test('narrows project-attributed owners to their project', async () => {
+    const depositAddress = 'TWd4WrZ9wn84f5x1hZhL4DHvk738ns5jwb'
+    const address = await seedAddress({
+      projectId: 'prj_deposit',
+      snapshot: TestFunding.depositAddressSnapshot({
+        address: depositAddress,
+        provider: { id: 'relay_deposit_address_project', name: 'Relay' },
+      }),
+    })
+    await seedAddressDeposit(address, 5)
+
+    expect(
+      await FundingDeposits.listByDepositAddress(db, {
+        depositAddress,
+        limit: 10,
+        owner: { ...owner, projectId: 'prj_other' },
+      }),
+    ).toEqual([])
+  })
+
+  test('normalizes EVM address casing', async () => {
+    const depositAddress = `0x${'Ab'.repeat(20)}`
+    const source = TestFunding.transferSnapshot()
+    const address = await seedAddress({
+      snapshot: TestFunding.depositAddressSnapshot({
+        address: depositAddress,
+        provider: { id: 'relay_deposit_address_evm', name: 'Relay' },
+        recipient: `0x${'fd'.repeat(20)}`,
+        refundAddress: depositAddress,
+        sourceChain: source.sourceChain,
+        sourceToken: source.sourceToken,
+      }),
+    })
+    const record = await seedAddressDeposit(address, 6)
+
+    const rows = await FundingDeposits.listByDepositAddress(db, {
+      depositAddress,
+      limit: 10,
+      owner,
+    })
+    expect(rows.map((row) => row.id)).toEqual([record.id])
+  })
+})
+
 describe('listByRecipient', () => {
   test('pages recipient deposits across addresses and hides foreign ownership', async () => {
     const recipient = '0xABcdEFABcdEFabcdEfAbCdefabcdeFABcDEFabCD'