@miosa/sdk 1.1.0 → 1.2.0

package/dist/index.js

@@ -1,4 +1,4 @@
-import { randomUUID, createHmac, timingSafeEqual } from 'crypto';
+import { randomUUID } from 'crypto';
 import EventEmitter from 'events';
 
 var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
@@ -592,6 +592,13 @@ var Admin = class {
       model_id: modelId
     });
   }
+  /** POST /api/v1/admin/impersonate — returns {token, expires_at}. */
+  impersonate(externalUserId, options = {}) {
+    return this.http.post("/admin/impersonate", {
+      external_user_id: externalUserId,
+      ttl_sec: options.ttlSec ?? 3600
+    });
+  }
 };
 
 // src/resources/analytics.ts
@@ -662,11 +669,10 @@ var ApiKeys = class {
     return listItems(data);
   }
   async create(params) {
-    const { idempotencyKey: ikey, expiresAt, workspaceId, ...rest } = params;
+    const { idempotencyKey: ikey, expiresAt, ...rest } = params;
     const body = stripUndefined2({
       ...rest,
-      expires_at: expiresAt ?? rest.expires_at,
-      workspace_id: workspaceId ?? rest.workspace_id
+      expires_at: expiresAt ?? rest.expires_at
     });
     const data = await this.http.request("/api-keys", {
       method: "POST",
@@ -675,6 +681,17 @@ var ApiKeys = class {
     });
     return unwrap2(data);
   }
+  /** POST /api/v1/api-keys/scoped — L2 delegation token bound to one external user. */
+  async createScoped(params) {
+    const body = stripUndefined2({
+      external_user_id: params.externalUserId,
+      scopes: params.scopes,
+      expires_at: params.expiresAt
+    });
+    return unwrap2(
+      await this.http.post("/api-keys/scoped", body)
+    );
+  }
   async delete(keyId) {
     await this.http.delete(`/api-keys/${keyId}`);
   }
@@ -3791,7 +3808,6 @@ var Deployments = class {
       auto_deploy: params.autoDeploy ?? params.auto_deploy,
       database: params.database,
       metadata: params.metadata,
-      target_region: params.targetRegion ?? params.target_region,
       ...attributionBody(params)
     });
     const data = await this.http.request("/deployments", {
@@ -3886,11 +3902,9 @@ var Deployments = class {
     );
     return unwrap23(data);
   }
-  async listEnv(deploymentId, opts = {}) {
-    const query = stripUndefined10({ environment: opts.environment });
+  async listEnv(deploymentId) {
     const data = await this.http.get(
-      `/deployments/${deploymentId}/env`,
-      Object.keys(query).length ? query : void 0
+      `/deployments/${deploymentId}/env`
     );
     return listItems4(data);
   }
@@ -6705,65 +6719,17 @@ var OrgInvites = class {
 function unwrap41(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
-    for (const k of ["data", "tenant", "branding", "preview_domain", "items"]) {
+    for (const k of ["data", "tenant", "items"]) {
       if (k in p) return p[k];
     }
   }
   return payload;
 }
-var PreviewDomain = class {
-  constructor(http) {
-    this.http = http;
-  }
-  http;
-  /** GET /api/v1/tenant/preview-domain → {domain, verified_at, cname_target} */
-  async get() {
-    return unwrap41(await this.http.get("/tenant/preview-domain"));
-  }
-  /** PUT /api/v1/tenant/preview-domain — set the preview domain. */
-  async set(domain) {
-    return unwrap41(
-      await this.http.put("/tenant/preview-domain", { domain })
-    );
-  }
-  /** POST /api/v1/tenant/preview-domain/verify → {verified, target, records} */
-  async verify() {
-    return unwrap41(
-      await this.http.post("/tenant/preview-domain/verify", {})
-    );
-  }
-  /** DELETE /api/v1/tenant/preview-domain */
-  async delete() {
-    await this.http.delete("/tenant/preview-domain");
-  }
-};
-var Branding = class {
-  constructor(http) {
-    this.http = http;
-  }
-  http;
-  /** GET /api/v1/tenant/branding */
-  async get() {
-    return unwrap41(await this.http.get("/tenant/branding"));
-  }
-  /** PUT /api/v1/tenant/branding — keys: product_name, logo_url, support_url, support_email, primary_color, background_color */
-  async set(branding) {
-    return unwrap41(await this.http.put("/tenant/branding", branding));
-  }
-  /** DELETE /api/v1/tenant/branding */
-  async delete() {
-    await this.http.delete("/tenant/branding");
-  }
-};
 var Tenant = class {
   constructor(http) {
     this.http = http;
-    this.preview_domain = new PreviewDomain(http);
-    this.branding = new Branding(http);
   }
   http;
-  preview_domain;
-  branding;
   /** Get the current tenant's plan, limits, and live usage counters. */
   async current() {
     const data = await this.http.get("/tenant/plan");
@@ -6866,29 +6832,6 @@ var Volumes = class {
     await this.http.delete(`/volumes/${volumeId}`);
   }
 };
-var MAX_TIMESTAMP_AGE_MS = 5 * 60 * 1e3;
-function verifySignature(payload, signatureHeader, secret) {
-  const parts = {};
-  for (const part of signatureHeader.split(",")) {
-    const idx = part.indexOf("=");
-    if (idx > 0) parts[part.slice(0, idx).trim()] = part.slice(idx + 1).trim();
-  }
-  const tsStr = parts["t"];
-  const sig = parts["v1"];
-  if (!tsStr || !sig) return false;
-  const ts = parseInt(tsStr, 10);
-  if (isNaN(ts)) return false;
-  if (Date.now() - ts * 1e3 > MAX_TIMESTAMP_AGE_MS) {
-    throw new Error(`Webhook timestamp is too old: ${ts}`);
-  }
-  const body = payload instanceof Uint8Array ? payload : Buffer.from(payload, "utf-8");
-  const signed = Buffer.concat([Buffer.from(`${tsStr}.`, "utf-8"), body]);
-  const expected = createHmac("sha256", secret).update(signed).digest("hex");
-  return timingSafeEqual(
-    Buffer.from(expected, "utf-8"),
-    Buffer.from(sig, "utf-8")
-  );
-}
 function unwrap44(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
@@ -6965,18 +6908,6 @@ var Webhooks = class {
       "items"
     ]);
   }
-  /**
-   * Verify an incoming ``X-Miosa-Signature`` header.
-   *
-   * Header format: ``t=<unix_ts>,v1=<hex_hmac>``
-   * HMAC body:     ``<t>.<raw_payload>``
-   *
-   * Throws if timestamp is older than 5 minutes.
-   * Returns true if signature matches.
-   */
-  static verifySignature(payload, signatureHeader, secret) {
-    return verifySignature(payload, signatureHeader, secret);
-  }
 };
 
 // src/resources/workspace-invites.ts
@@ -7129,192 +7060,11 @@ var WorkspaceMembers = class {
   }
 };
 
-// src/resources/workspaces.ts
-function unwrap45(payload) {
-  if (payload && typeof payload === "object" && "data" in payload) {
-    return payload.data;
-  }
-  return payload;
-}
-function listItems17(payload, candidateKeys = ["data", "items"]) {
-  if (Array.isArray(payload)) return payload;
-  if (!payload || typeof payload !== "object") return [];
-  const p = payload;
-  if (Array.isArray(p.data)) return p.data;
-  for (const key of candidateKeys) {
-    if (Array.isArray(p[key])) return p[key];
-  }
-  return [];
-}
-var Workspaces = class {
-  http;
-  constructor(http) {
-    this.http = http;
-  }
-  /**
-   * Create a new workspace.
-   */
-  async create(params) {
-    const payload = await this.http.post("/workspaces", params);
-    return unwrap45(payload);
-  }
-  /**
-   * List all workspaces visible to the current credential.
-   */
-  async list() {
-    const payload = await this.http.get("/workspaces");
-    if (payload && typeof payload === "object" && "workspaces" in payload) {
-      const p = payload;
-      return p["workspaces"] ?? [];
-    }
-    return listItems17(payload, ["data", "workspaces", "items"]);
-  }
-  /**
-   * Get a single workspace by ID.
-   */
-  async get(id) {
-    const payload = await this.http.get(`/workspaces/${id}`);
-    return unwrap45(payload);
-  }
-  /**
-   * Update a workspace's metadata.
-   */
-  async update(id, params) {
-    const payload = await this.http.patch(`/workspaces/${id}`, params);
-    return unwrap45(payload);
-  }
-  /**
-   * Delete a workspace. Does not delete member computers.
-   */
-  async delete(id) {
-    await this.http.delete(`/workspaces/${id}`);
-  }
-  /**
-   * Update workspace-level settings.
-   */
-  async updateSettings(id, settings) {
-    const payload = await this.http.put(
-      `/workspaces/${id}/settings`,
-      settings
-    );
-    return unwrap45(payload);
-  }
-  /**
-   * List all computers that belong to the given workspace.
-   */
-  async listComputers(id) {
-    const payload = await this.http.get(`/workspaces/${id}/computers`);
-    const items = listItems17(payload, [
-      "data",
-      "computers",
-      "items"
-    ]);
-    return items.map((d) => new Computer(this.http, d));
-  }
-  /**
-   * List all sandboxes that belong to this workspace.
-   */
-  async listSandboxes(id) {
-    const payload = await this.http.get(`/workspaces/${id}/sandboxes`);
-    return listItems17(payload, [
-      "data",
-      "sandboxes",
-      "items"
-    ]);
-  }
-  /**
-   * List all deployments that belong to this workspace.
-   */
-  async listDeployments(id) {
-    const payload = await this.http.get(
-      `/workspaces/${id}/deployments`
-    );
-    return listItems17(payload, [
-      "data",
-      "deployments",
-      "items"
-    ]);
-  }
-  /**
-   * List all managed databases that belong to this workspace.
-   */
-  async listDatabases(id) {
-    const payload = await this.http.get(`/workspaces/${id}/databases`);
-    return listItems17(payload, [
-      "data",
-      "databases",
-      "items"
-    ]);
-  }
-  /**
-   * List all projects that belong to this workspace.
-   */
-  async listProjects(id) {
-    const payload = await this.http.get(`/workspaces/${id}/projects`);
-    return listItems17(payload, [
-      "data",
-      "projects",
-      "items"
-    ]);
-  }
-  /**
-   * Return aggregate resource stats for this workspace.
-   */
-  async stats(id) {
-    const payload = await this.http.get(`/workspaces/${id}/stats`);
-    return unwrap45(payload);
-  }
-  /**
-   * Return metered usage data for this workspace.
-   */
-  async usage(id) {
-    const payload = await this.http.get(`/workspaces/${id}/usage`);
-    return unwrap45(payload);
-  }
-  /**
-   * Return activity feed for this workspace.
-   */
-  async activity(id) {
-    const payload = await this.http.get(`/workspaces/${id}/activity`);
-    return listItems17(payload, [
-      "data",
-      "activity",
-      "events",
-      "items"
-    ]);
-  }
-  /**
-   * List computer templates available in this workspace.
-   */
-  async listComputerTemplates(id) {
-    const payload = await this.http.get(
-      `/workspaces/${id}/computer-templates`
-    );
-    return listItems17(payload, [
-      "data",
-      "templates",
-      "items"
-    ]);
-  }
-  /**
-   * Create a computer template scoped to this workspace.
-   */
-  async createComputerTemplate(id, params) {
-    const payload = await this.http.post(
-      `/workspaces/${id}/computer-templates`,
-      params
-    );
-    return unwrap45(payload);
-  }
-};
-
 // src/client.ts
 var DEFAULT_BASE_URL = "https://api.miosa.ai/api/v1";
 var DEFAULT_TIMEOUT2 = 3e4;
 var DEFAULT_MAX_RETRIES2 = 3;
 var Miosa = class {
-  /** Workspace CRUD — create, list, get, update, delete, and sub-resource queries. */
-  workspaces;
   /** Per-workspace user roster — list, add, update role, remove. */
   workspaceMembers;
   /**
@@ -7437,7 +7187,6 @@ var Miosa = class {
       timeout: config.timeout ?? DEFAULT_TIMEOUT2,
       maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES2
     });
-    this.workspaces = new Workspaces(this.http);
     this.workspaceMembers = new WorkspaceMembers(this.http);
     this.workspaceInvites = new WorkspaceInvites(this.http);
     this.orgInvites = new OrgInvites(this.http);
@@ -7486,6 +7235,6 @@ var Miosa = class {
   }
 };
 
-export { Admin, Analytics, ApiKeys, AuditLog, AuthError, Benchmarks, BuilderSessions, Channels, Checkpoints, CommandCenter, Community, Completions, Computer, ComputerAudit, ComputerAutoStop, ComputerEnv, ComputerInbox, ComputerLogs, ComputerNetwork, ComputerOsa, ComputerPorts, ComputerSecrets, ComputerTerminal, ComputerVolumes, Computers, Credits, CronJobs, Dashboard, Databases, DeploymentDomains, DeploymentReleases, DeploymentRuntimeInstances, DeploymentVersions, Deployments, Desktop, EgressAudit, EgressNetwork, EgressSecrets, Email, EmailCampaigns, EmailInbox, EmailTemplates, Embeddings, Exec, ExternalKeys, Files, FlatCustomDomains, Functions, HealthChecks, InsufficientCreditsError, Integrations, Mcp, Miosa, MiosaError, Models, NetworkError, NetworkPolicy, NotFoundError, OAuthFlow, OpenComputers, OrgInvites, ProjectAuth, ProjectIntegrations, ProviderDefaults, RateLimitError, Regions, SANDBOX_TEMPLATE, Sandbox, SandboxArtifacts, SandboxAudit, SandboxCommands, SandboxEnv, SandboxEvents, SandboxFiles, SandboxNetwork, SandboxPreview, SandboxPreviews, SandboxSecrets, SandboxTags, SandboxTemplates, SandboxTerminal, Sandboxes, ScopedFs, Settings, SnapshotsStandalone, Storage, Tenant, TimeoutError, Usage, ValidationError, Volumes, Webhooks, WorkspaceInvites, WorkspaceMembers, Workspaces };
+export { Admin, Analytics, ApiKeys, AuditLog, AuthError, Benchmarks, BuilderSessions, Channels, Checkpoints, CommandCenter, Community, Completions, Computer, ComputerAudit, ComputerAutoStop, ComputerEnv, ComputerInbox, ComputerLogs, ComputerNetwork, ComputerOsa, ComputerPorts, ComputerSecrets, ComputerTerminal, ComputerVolumes, Computers, Credits, CronJobs, Dashboard, Databases, DeploymentDomains, DeploymentReleases, DeploymentRuntimeInstances, DeploymentVersions, Deployments, Desktop, EgressAudit, EgressNetwork, EgressSecrets, Email, EmailCampaigns, EmailInbox, EmailTemplates, Embeddings, Exec, ExternalKeys, Files, FlatCustomDomains, Functions, HealthChecks, InsufficientCreditsError, Integrations, Mcp, Miosa, MiosaError, Models, NetworkError, NetworkPolicy, NotFoundError, OAuthFlow, OpenComputers, OrgInvites, ProjectAuth, ProjectIntegrations, ProviderDefaults, RateLimitError, Regions, SANDBOX_TEMPLATE, Sandbox, SandboxArtifacts, SandboxAudit, SandboxCommands, SandboxEnv, SandboxEvents, SandboxFiles, SandboxNetwork, SandboxPreview, SandboxPreviews, SandboxSecrets, SandboxTags, SandboxTemplates, SandboxTerminal, Sandboxes, ScopedFs, Settings, SnapshotsStandalone, Storage, Tenant, TimeoutError, Usage, ValidationError, Volumes, Webhooks, WorkspaceInvites, WorkspaceMembers };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map