@miosa/sdk 1.1.0 → 1.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miosa/sdk",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "TypeScript SDK for the MIOSA API — cloud VM desktop infrastructure for AI agents",
   "license": "MIT",
   "author": "MIOSA <hello@miosa.ai>",

package/src/client.ts

@@ -44,7 +44,6 @@ import { Volumes } from "./resources/volumes.js";
 import { Webhooks } from "./resources/webhooks.js";
 import { WorkspaceInvites } from "./resources/workspace-invites.js";
 import { WorkspaceMembers } from "./resources/workspace-members.js";
-import { Workspaces } from "./resources/workspaces.js";
 import type { MiosaClientConfig } from "./types.js";
 
 const DEFAULT_BASE_URL = "https://api.miosa.ai/api/v1";
@@ -65,9 +64,6 @@ const DEFAULT_MAX_RETRIES = 3;
  * ```
  */
 export class Miosa {
-  /** Workspace CRUD — create, list, get, update, delete, and sub-resource queries. */
-  readonly workspaces: Workspaces;
-
   /** Per-workspace user roster — list, add, update role, remove. */
   readonly workspaceMembers: WorkspaceMembers;
 
@@ -242,7 +238,6 @@ export class Miosa {
       maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES,
     });
 
-    this.workspaces = new Workspaces(this.http);
     this.workspaceMembers = new WorkspaceMembers(this.http);
     this.workspaceInvites = new WorkspaceInvites(this.http);
     this.orgInvites = new OrgInvites(this.http);

package/src/index.ts

@@ -245,16 +245,6 @@ export type {
   ApiKeyCreateParams,
 } from "./resources/api-keys.js";
 
-// Workspace CRUD
-export { Workspaces } from "./resources/workspaces.js";
-export type {
-  WorkspaceId as TenantWorkspaceId,
-  WorkspaceData,
-  WorkspaceCreateParams,
-  WorkspaceUpdateParams,
-  WorkspaceComputerTemplateCreateParams,
-} from "./resources/workspaces.js";
-
 // Members & Invites
 export { WorkspaceMembers } from "./resources/workspace-members.js";
 export type {

package/src/resources/admin.ts

@@ -345,4 +345,15 @@ export class Admin {
       model_id: modelId,
     });
   }
+
+  /** POST /api/v1/admin/impersonate — returns {token, expires_at}. */
+  impersonate(
+    externalUserId: string,
+    options: { ttlSec?: number } = {},
+  ): Promise<{ token: string; expires_at: string }> {
+    return this.http.post("/admin/impersonate", {
+      external_user_id: externalUserId,
+      ttl_sec: options.ttlSec ?? 3600,
+    });
+  }
 }

package/src/resources/api-keys.ts

@@ -47,9 +47,6 @@ export interface ApiKeyCreateParams {
   expires_at?: string;
   expiresAt?: string;
   idempotencyKey?: string;
-  /** Scope this key to a single workspace. Omit for a tenant-wide key. */
-  workspaceId?: string;
-  workspace_id?: string;
   [key: string]: unknown;
 }
 
@@ -103,11 +100,10 @@ export class ApiKeys {
   }
 
   async create(params: ApiKeyCreateParams): Promise<ApiKeyCreateResult> {
-    const { idempotencyKey: ikey, expiresAt, workspaceId, ...rest } = params;
+    const { idempotencyKey: ikey, expiresAt, ...rest } = params;
     const body = stripUndefined({
       ...rest,
       expires_at: expiresAt ?? rest.expires_at,
-      workspace_id: workspaceId ?? rest.workspace_id,
     });
     const data = await this.http.request<unknown>("/api-keys", {
       method: "POST",
@@ -117,6 +113,22 @@ export class ApiKeys {
     return unwrap<ApiKeyCreateResult>(data);
   }
 
+  /** POST /api/v1/api-keys/scoped — L2 delegation token bound to one external user. */
+  async createScoped(params: {
+    externalUserId: string;
+    scopes: string[];
+    expiresAt?: string;
+  }): Promise<ApiKeyCreateResult> {
+    const body = stripUndefined({
+      external_user_id: params.externalUserId,
+      scopes: params.scopes,
+      expires_at: params.expiresAt,
+    });
+    return unwrap<ApiKeyCreateResult>(
+      await this.http.post<unknown>("/api-keys/scoped", body),
+    );
+  }
+
   async delete(keyId: string): Promise<void> {
     await this.http.delete<unknown>(`/api-keys/${keyId}`);
   }

package/src/resources/cron-jobs.ts

@@ -55,13 +55,6 @@ export interface CronJobCreateParams {
   name: string;
   schedule: string;
   idempotencyKey?: string;
-  // White-label attribution
-  externalWorkspaceId?: string;
-  external_workspace_id?: string;
-  externalUserId?: string;
-  external_user_id?: string;
-  externalProjectId?: string;
-  external_project_id?: string;
   [key: string]: unknown;
 }
 

package/src/resources/custom_domains.ts

@@ -27,13 +27,6 @@ export interface CustomDomainData {
 
 export interface CustomDomainRegisterParams {
   fqdn: string;
-  // White-label attribution
-  externalWorkspaceId?: string;
-  external_workspace_id?: string;
-  externalUserId?: string;
-  external_user_id?: string;
-  externalProjectId?: string;
-  external_project_id?: string;
 }
 
 // ─── CustomDomains resource ──────────────────────────────────────────────────

package/src/resources/deployments.ts

@@ -95,7 +95,7 @@ export interface DeploymentData {
    * with `source_sandbox_id` on the version row. Will become nullable.
    */
   repo_url?: string;
-  repo_provider?: "github" | "gitlab" | "bitbucket";
+  repo_provider?: "github";
   branch?: string;
   build_command?: string | null;
   run_command?: string | null;
@@ -278,9 +278,6 @@ export interface DeploymentCreateParams extends ExternalAttribution {
   autoDeploy?: boolean;
   database?: DeploymentDatabaseRequest;
   metadata?: Record<string, unknown>;
-  /** Pin build and runtime VMs to a specific DC. One of: "us-west", "us-east", "us-mia". */
-  target_region?: string;
-  targetRegion?: string;
   idempotencyKey?: string;
 }
 
@@ -620,7 +617,6 @@ export class Deployments {
       auto_deploy: params.autoDeploy ?? params.auto_deploy,
       database: params.database,
       metadata: params.metadata,
-      target_region: params.targetRegion ?? params.target_region,
       ...attributionBody(params),
     });
     const data = await this.http.request<unknown>("/deployments", {
@@ -739,16 +735,9 @@ export class Deployments {
     return unwrap(data) as DeploymentBuildData;
   }
 
-  async listEnv(
-    deploymentId: string,
-    opts: { environment?: string } = {},
-  ): Promise<Record<string, unknown>[]> {
-    const query = stripUndefined({ environment: opts.environment });
+  async listEnv(deploymentId: string): Promise<Record<string, unknown>[]> {
     const data = await this.http.get<unknown>(
       `/deployments/${deploymentId}/env`,
-      Object.keys(query).length
-        ? (query as Record<string, string | number | boolean | undefined>)
-        : undefined,
     );
     return listItems<Record<string, unknown>>(data);
   }

package/src/resources/flat-custom-domains.ts

@@ -47,13 +47,6 @@ export interface CustomDomainCreateParams {
   redirect_policy?: "none" | "www_to_apex" | "apex_to_www";
   redirectPolicy?: "none" | "www_to_apex" | "apex_to_www";
   idempotencyKey?: string;
-  // White-label attribution
-  externalWorkspaceId?: string;
-  external_workspace_id?: string;
-  externalUserId?: string;
-  external_user_id?: string;
-  externalProjectId?: string;
-  external_project_id?: string;
   [key: string]: unknown;
 }
 

package/src/resources/functions.ts

@@ -46,13 +46,6 @@ export interface FunctionCreateParams {
   timeoutSec?: number;
   env?: Record<string, string>;
   idempotencyKey?: string;
-  // White-label attribution
-  externalWorkspaceId?: string;
-  external_workspace_id?: string;
-  externalUserId?: string;
-  external_user_id?: string;
-  externalProjectId?: string;
-  external_project_id?: string;
   [key: string]: unknown;
 }
 

package/src/resources/governance.test.ts

@@ -0,0 +1,355 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import type { HttpClient } from "../http.js";
+import {
+  BillingResource,
+  BulkResource,
+  ExternalUsers,
+  GovernanceTenant,
+  GovernanceWorkspaces,
+} from "./governance.js";
+import { ApiKeys } from "./api-keys.js";
+import { Admin } from "./admin.js";
+
+const mockGet = vi.fn();
+const mockPost = vi.fn();
+const mockPut = vi.fn();
+const mockPatch = vi.fn();
+const mockDelete = vi.fn();
+const mockStream = vi.fn();
+const mockRequest = vi.fn();
+
+function makeHttp(): HttpClient {
+  return {
+    get: mockGet,
+    post: mockPost,
+    put: mockPut,
+    patch: mockPatch,
+    delete: mockDelete,
+    request: mockRequest,
+    stream: mockStream,
+  } as unknown as HttpClient;
+}
+
+beforeEach(() => {
+  vi.resetAllMocks();
+});
+
+// ── GovernanceTenant.policy ───────────────────────────────────────────────────
+
+describe("GovernanceTenant.policy", () => {
+  it("get calls GET /tenant/policy and unwraps data", async () => {
+    mockGet.mockResolvedValue({ data: { quotas: { max_sandboxes: 10 } } });
+    const t = new GovernanceTenant(makeHttp());
+    const result = await t.policy.get();
+    expect(mockGet).toHaveBeenCalledWith("/tenant/policy");
+    expect((result as Record<string, unknown>).quotas).toBeDefined();
+  });
+
+  it("set calls PUT /tenant/policy with body", async () => {
+    mockPut.mockResolvedValue({ data: { quotas: { max_sandboxes: 5 } } });
+    const t = new GovernanceTenant(makeHttp());
+    await t.policy.set({ quotas: { max_sandboxes: 5 } });
+    expect(mockPut).toHaveBeenCalledWith("/tenant/policy", {
+      quotas: { max_sandboxes: 5 },
+    });
+  });
+
+  it("delete calls DELETE /tenant/policy", async () => {
+    mockDelete.mockResolvedValue(null);
+    const t = new GovernanceTenant(makeHttp());
+    await t.policy.delete();
+    expect(mockDelete).toHaveBeenCalledWith("/tenant/policy");
+  });
+});
+
+// ── GovernanceTenant.members ──────────────────────────────────────────────────
+
+describe("GovernanceTenant.members", () => {
+  it("list returns members array", async () => {
+    mockGet.mockResolvedValue({
+      data: [{ id: "m1", email: "a@b.com", role: "admin" }],
+    });
+    const t = new GovernanceTenant(makeHttp());
+    const members = await t.members.list();
+    expect(members).toHaveLength(1);
+    expect(members[0].role).toBe("admin");
+  });
+
+  it("invite posts email and role", async () => {
+    mockPost.mockResolvedValue({ data: { id: "m2", role: "developer" } });
+    const t = new GovernanceTenant(makeHttp());
+    const result = await t.members.invite("x@y.com", "developer");
+    expect(mockPost).toHaveBeenCalledWith("/tenant/members", {
+      email: "x@y.com",
+      role: "developer",
+    });
+    expect(result.role).toBe("developer");
+  });
+
+  it("updateRole patches member role", async () => {
+    mockPatch.mockResolvedValue({ data: { id: "m1", role: "admin" } });
+    const t = new GovernanceTenant(makeHttp());
+    await t.members.updateRole("m1", "admin");
+    expect(mockPatch).toHaveBeenCalledWith("/tenant/members/m1/role", {
+      role: "admin",
+    });
+  });
+
+  it("remove deletes member", async () => {
+    mockDelete.mockResolvedValue(null);
+    const t = new GovernanceTenant(makeHttp());
+    await t.members.remove("m1");
+    expect(mockDelete).toHaveBeenCalledWith("/tenant/members/m1");
+  });
+
+  it("transferOwnership posts new_owner_user_id", async () => {
+    mockPost.mockResolvedValue({ data: { transferred: true } });
+    const t = new GovernanceTenant(makeHttp());
+    await t.members.transferOwnership("user_new");
+    expect(mockPost).toHaveBeenCalledWith("/tenant/transfer-ownership", {
+      new_owner_user_id: "user_new",
+    });
+  });
+});
+
+// ── GovernanceWorkspaces ──────────────────────────────────────────────────────
+
+describe("GovernanceWorkspaces", () => {
+  it("list returns workspace array", async () => {
+    mockGet.mockResolvedValue({ data: [{ id: "ws_1", name: "alpha" }] });
+    const gw = new GovernanceWorkspaces(makeHttp());
+    const items = await gw.list();
+    expect(items).toHaveLength(1);
+    expect(items[0].id).toBe("ws_1");
+  });
+
+  it("create posts name", async () => {
+    mockPost.mockResolvedValue({ data: { id: "ws_2", name: "beta" } });
+    const gw = new GovernanceWorkspaces(makeHttp());
+    await gw.create("beta");
+    expect(mockPost).toHaveBeenCalledWith("/workspaces", { name: "beta" });
+  });
+
+  it("workspace(id).policy.get calls correct path", async () => {
+    mockGet.mockResolvedValue({ data: { quotas: {} } });
+    const gw = new GovernanceWorkspaces(makeHttp());
+    await gw.workspace("ws_1").policy.get();
+    expect(mockGet).toHaveBeenCalledWith("/workspaces/ws_1/policy");
+  });
+
+  it("workspace(id).policy.set calls PUT", async () => {
+    mockPut.mockResolvedValue({ data: {} });
+    const gw = new GovernanceWorkspaces(makeHttp());
+    await gw.workspace("ws_1").policy.set({ quotas: { max_sandboxes: 3 } });
+    expect(mockPut).toHaveBeenCalledWith("/workspaces/ws_1/policy", {
+      quotas: { max_sandboxes: 3 },
+    });
+  });
+
+  it("workspace(id).members.list calls correct path", async () => {
+    mockGet.mockResolvedValue({ data: [{ id: "m1", role: "developer" }] });
+    const gw = new GovernanceWorkspaces(makeHttp());
+    const members = await gw.workspace("ws_1").members.list();
+    expect(mockGet).toHaveBeenCalledWith("/workspaces/ws_1/members");
+    expect(members[0].role).toBe("developer");
+  });
+
+  it("workspace(id).members.invite posts correctly", async () => {
+    mockPost.mockResolvedValue({ data: { id: "m2" } });
+    const gw = new GovernanceWorkspaces(makeHttp());
+    await gw.workspace("ws_1").members.invite("bob@acme.com", "viewer");
+    expect(mockPost).toHaveBeenCalledWith("/workspaces/ws_1/members", {
+      email: "bob@acme.com",
+      role: "viewer",
+    });
+  });
+
+  it("workspace(id).transfer posts resource_ids and target", async () => {
+    mockPost.mockResolvedValue({ data: { transferred: 2 } });
+    const gw = new GovernanceWorkspaces(makeHttp());
+    await gw.workspace("ws_1").transfer(["sbx_1", "sbx_2"], "ws_2");
+    expect(mockPost).toHaveBeenCalledWith("/workspaces/ws_1/transfer", {
+      resource_ids: ["sbx_1", "sbx_2"],
+      target_workspace_id: "ws_2",
+    });
+  });
+});
+
+// ── ExternalUsers.policy ──────────────────────────────────────────────────────
+
+describe("ExternalUsers.policy", () => {
+  it("get calls correct path", async () => {
+    mockGet.mockResolvedValue({ data: { lifecycle: {} } });
+    const eu = new ExternalUsers(makeHttp());
+    await eu.call("alice").policy.get();
+    expect(mockGet).toHaveBeenCalledWith("/external-users/alice/policy");
+  });
+
+  it("effective returns typed EffectivePolicyDoc with source fields", async () => {
+    mockGet.mockResolvedValue({
+      lifecycle: {
+        default_idle_timeout_sec: { value: 600, source: "user" },
+        default_timeout_sec: { value: 86400, source: "tenant" },
+      },
+      quotas: {
+        max_sandboxes: { value: 5, source: "workspace" },
+      },
+    });
+    const eu = new ExternalUsers(makeHttp());
+    const eff = await eu.call("alice").policy.effective();
+    expect(eff.lifecycle["default_idle_timeout_sec"]?.value).toBe(600);
+    expect(eff.lifecycle["default_idle_timeout_sec"]?.source).toBe("user");
+    expect(eff.quotas["max_sandboxes"]?.value).toBe(5);
+    expect(eff.quotas["max_sandboxes"]?.source).toBe("workspace");
+  });
+});
+
+// ── BulkResource ──────────────────────────────────────────────────────────────
+
+describe("BulkResource", () => {
+  it("sandboxes.pause posts ids", async () => {
+    mockPost.mockResolvedValue({ queued: 3, job_id: "job_1" });
+    const bulk = new BulkResource(makeHttp());
+    const result = await bulk.sandboxes.pause({
+      ids: ["sbx_1", "sbx_2", "sbx_3"],
+    });
+    expect(mockPost).toHaveBeenCalledWith("/bulk/sandboxes/pause", {
+      ids: ["sbx_1", "sbx_2", "sbx_3"],
+    });
+    expect(result.job_id).toBe("job_1");
+  });
+
+  it("sandboxes.destroy posts filter", async () => {
+    mockPost.mockResolvedValue({ queued: 5, job_id: "job_2" });
+    const bulk = new BulkResource(makeHttp());
+    const result = await bulk.sandboxes.destroy({ filter: { state: "idle" } });
+    expect(mockPost).toHaveBeenCalledWith("/bulk/sandboxes/destroy", {
+      filter: { state: "idle" },
+    });
+    expect(result.queued).toBe(5);
+  });
+
+  it("policy.apply posts tier + ids + policy", async () => {
+    mockPost.mockResolvedValue({ queued: 10, job_id: "job_3" });
+    const bulk = new BulkResource(makeHttp());
+    await bulk.policy.apply({
+      tier: "external_user",
+      idsOrFilter: ["u1", "u2"],
+      policy: { quotas: { max_sandboxes: 3 } },
+    });
+    expect(mockPost).toHaveBeenCalledWith("/bulk/policy/apply", {
+      tier: "external_user",
+      ids: ["u1", "u2"],
+      policy: { quotas: { max_sandboxes: 3 } },
+    });
+  });
+
+  it("jobs.get returns job status", async () => {
+    mockGet.mockResolvedValue({
+      data: { id: "job_1", status: "completed", processed: 3 },
+    });
+    const bulk = new BulkResource(makeHttp());
+    const job = await bulk.jobs.get("job_1");
+    expect(job.status).toBe("completed");
+    expect(job.processed).toBe(3);
+  });
+});
+
+// ── BillingResource ───────────────────────────────────────────────────────────
+
+describe("BillingResource", () => {
+  it("invoices.list returns array", async () => {
+    mockGet.mockResolvedValue({
+      data: [{ id: "inv_1", amount: 5000 }],
+    });
+    const billing = new BillingResource(makeHttp());
+    const invoices = await billing.invoices.list();
+    expect(invoices[0].id).toBe("inv_1");
+  });
+
+  it("invoices.get returns single invoice", async () => {
+    mockGet.mockResolvedValue({
+      data: { id: "inv_1", amount: 5000, line_items: [] },
+    });
+    const billing = new BillingResource(makeHttp());
+    const inv = await billing.invoices.get("inv_1");
+    expect(inv.id).toBe("inv_1");
+  });
+
+  it("paymentMethods returns list", async () => {
+    mockGet.mockResolvedValue({
+      data: [{ id: "pm_1", brand: "visa", last4: "4242" }],
+    });
+    const billing = new BillingResource(makeHttp());
+    const methods = await billing.paymentMethods();
+    expect(methods[0].brand).toBe("visa");
+  });
+
+  it("upcoming returns preview", async () => {
+    mockGet.mockResolvedValue({
+      data: { amount: 1200, period_end: "2026-06-01" },
+    });
+    const billing = new BillingResource(makeHttp());
+    const upcoming = await billing.upcoming();
+    expect((upcoming as Record<string, unknown>).amount).toBe(1200);
+  });
+});
+
+// ── ApiKeys.createScoped ──────────────────────────────────────────────────────
+
+describe("ApiKeys.createScoped", () => {
+  it("posts to /api-keys/scoped with correct body", async () => {
+    mockPost.mockResolvedValue({
+      data: { id: "key_1", token: "msk_l2_abc" },
+    });
+    const keys = new ApiKeys(makeHttp());
+    const result = await keys.createScoped({
+      externalUserId: "alice-42",
+      scopes: ["sandboxes:read", "sandboxes:exec"],
+      expiresAt: "2026-12-31T00:00:00Z",
+    });
+    expect(mockPost).toHaveBeenCalledWith("/api-keys/scoped", {
+      external_user_id: "alice-42",
+      scopes: ["sandboxes:read", "sandboxes:exec"],
+      expires_at: "2026-12-31T00:00:00Z",
+    });
+    expect(result.token).toBe("msk_l2_abc");
+  });
+
+  it("omits expires_at when not provided", async () => {
+    mockPost.mockResolvedValue({ data: { id: "key_2" } });
+    const keys = new ApiKeys(makeHttp());
+    await keys.createScoped({
+      externalUserId: "bob",
+      scopes: ["sandboxes:read"],
+    });
+    const body = mockPost.mock.calls[0][1] as Record<string, unknown>;
+    expect(body["expires_at"]).toBeUndefined();
+  });
+});
+
+// ── Admin.impersonate ─────────────────────────────────────────────────────────
+
+describe("Admin.impersonate", () => {
+  it("posts to /admin/impersonate with external_user_id and ttl_sec", async () => {
+    mockPost.mockResolvedValue({
+      token: "msi_abc",
+      expires_at: "2026-06-01T00:00:00Z",
+    });
+    const admin = new Admin(makeHttp());
+    const result = await admin.impersonate("alice-42", { ttlSec: 1800 });
+    expect(mockPost).toHaveBeenCalledWith("/admin/impersonate", {
+      external_user_id: "alice-42",
+      ttl_sec: 1800,
+    });
+    expect(result.token).toBe("msi_abc");
+  });
+
+  it("defaults ttl_sec to 3600", async () => {
+    mockPost.mockResolvedValue({ token: "msi_xyz" });
+    const admin = new Admin(makeHttp());
+    await admin.impersonate("bob");
+    const body = mockPost.mock.calls[0][1] as Record<string, unknown>;
+    expect(body["ttl_sec"]).toBe(3600);
+  });
+});