@miosa/sdk 1.1.0 → 1.2.0

package/src/resources/webhooks.ts

@@ -2,48 +2,10 @@
  * Webhooks resource — tenant outgoing event delivery.
  */
 
-import { createHmac, timingSafeEqual } from "node:crypto";
 import { randomUUID } from "node:crypto";
 
 import type { HttpClient } from "../http.js";
 
-const MAX_TIMESTAMP_AGE_MS = 5 * 60 * 1000;
-
-/**
- * Verify an incoming ``X-Miosa-Signature`` header.
- * Header format: ``t=<unix_ts>,v1=<hex_hmac>``
- */
-export function verifySignature(
-  payload: string | Uint8Array,
-  signatureHeader: string,
-  secret: string,
-): boolean {
-  const parts: Record<string, string> = {};
-  for (const part of signatureHeader.split(",")) {
-    const idx = part.indexOf("=");
-    if (idx > 0) parts[part.slice(0, idx).trim()] = part.slice(idx + 1).trim();
-  }
-  const tsStr = parts["t"];
-  const sig = parts["v1"];
-  if (!tsStr || !sig) return false;
-
-  const ts = parseInt(tsStr, 10);
-  if (isNaN(ts)) return false;
-  if (Date.now() - ts * 1000 > MAX_TIMESTAMP_AGE_MS) {
-    throw new Error(`Webhook timestamp is too old: ${ts}`);
-  }
-
-  const body =
-    payload instanceof Uint8Array ? payload : Buffer.from(payload, "utf-8");
-  const signed = Buffer.concat([Buffer.from(`${tsStr}.`, "utf-8"), body]);
-  const expected = createHmac("sha256", secret).update(signed).digest("hex");
-
-  return timingSafeEqual(
-    Buffer.from(expected, "utf-8"),
-    Buffer.from(sig, "utf-8"),
-  );
-}
-
 // ── Branded IDs ──────────────────────────────────────────────────────────────
 
 export type WebhookId = string & { readonly __brand: "WebhookId" };
@@ -206,21 +168,4 @@ export class Webhooks {
       "items",
     ]);
   }
-
-  /**
-   * Verify an incoming ``X-Miosa-Signature`` header.
-   *
-   * Header format: ``t=<unix_ts>,v1=<hex_hmac>``
-   * HMAC body:     ``<t>.<raw_payload>``
-   *
-   * Throws if timestamp is older than 5 minutes.
-   * Returns true if signature matches.
-   */
-  static verifySignature(
-    payload: string | Uint8Array,
-    signatureHeader: string,
-    secret: string,
-  ): boolean {
-    return verifySignature(payload, signatureHeader, secret);
-  }
 }

package/src/types.ts

@@ -66,13 +66,6 @@ export interface ComputerCreateParams {
   size?: ComputerSize;
   visibility?: ComputerVisibility;
   metadata?: Record<string, string>;
-  // White-label attribution
-  externalWorkspaceId?: string;
-  external_workspace_id?: string;
-  externalUserId?: string;
-  external_user_id?: string;
-  externalProjectId?: string;
-  external_project_id?: string;
 }
 
 export interface ComputerUpdateParams {