@miosa/sdk 1.1.0 → 1.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miosa/sdk",
-  "version": "1.1.0",
+  "version": "1.2.1",
   "description": "TypeScript SDK for the MIOSA API — cloud VM desktop infrastructure for AI agents",
   "license": "MIT",
   "author": "MIOSA <hello@miosa.ai>",

package/src/client.ts

@@ -44,7 +44,6 @@ import { Volumes } from "./resources/volumes.js";
 import { Webhooks } from "./resources/webhooks.js";
 import { WorkspaceInvites } from "./resources/workspace-invites.js";
 import { WorkspaceMembers } from "./resources/workspace-members.js";
-import { Workspaces } from "./resources/workspaces.js";
 import type { MiosaClientConfig } from "./types.js";
 
 const DEFAULT_BASE_URL = "https://api.miosa.ai/api/v1";
@@ -65,9 +64,6 @@ const DEFAULT_MAX_RETRIES = 3;
  * ```
  */
 export class Miosa {
-  /** Workspace CRUD — create, list, get, update, delete, and sub-resource queries. */
-  readonly workspaces: Workspaces;
-
   /** Per-workspace user roster — list, add, update role, remove. */
   readonly workspaceMembers: WorkspaceMembers;
 
@@ -242,7 +238,6 @@ export class Miosa {
       maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES,
     });
 
-    this.workspaces = new Workspaces(this.http);
     this.workspaceMembers = new WorkspaceMembers(this.http);
     this.workspaceInvites = new WorkspaceInvites(this.http);
     this.orgInvites = new OrgInvites(this.http);

package/src/index.ts

@@ -245,16 +245,6 @@ export type {
   ApiKeyCreateParams,
 } from "./resources/api-keys.js";
 
-// Workspace CRUD
-export { Workspaces } from "./resources/workspaces.js";
-export type {
-  WorkspaceId as TenantWorkspaceId,
-  WorkspaceData,
-  WorkspaceCreateParams,
-  WorkspaceUpdateParams,
-  WorkspaceComputerTemplateCreateParams,
-} from "./resources/workspaces.js";
-
 // Members & Invites
 export { WorkspaceMembers } from "./resources/workspace-members.js";
 export type {

package/src/resources/api-keys.ts

@@ -47,9 +47,6 @@ export interface ApiKeyCreateParams {
   expires_at?: string;
   expiresAt?: string;
   idempotencyKey?: string;
-  /** Scope this key to a single workspace. Omit for a tenant-wide key. */
-  workspaceId?: string;
-  workspace_id?: string;
   [key: string]: unknown;
 }
 
@@ -103,11 +100,10 @@ export class ApiKeys {
   }
 
   async create(params: ApiKeyCreateParams): Promise<ApiKeyCreateResult> {
-    const { idempotencyKey: ikey, expiresAt, workspaceId, ...rest } = params;
+    const { idempotencyKey: ikey, expiresAt, ...rest } = params;
     const body = stripUndefined({
       ...rest,
       expires_at: expiresAt ?? rest.expires_at,
-      workspace_id: workspaceId ?? rest.workspace_id,
     });
     const data = await this.http.request<unknown>("/api-keys", {
       method: "POST",

package/src/resources/computer.ts

@@ -176,21 +176,26 @@ export class Computer {
    * ```ts
    * await computer.exec.bash("npm run dev &");
    * const url = computer.previewUrl(3000);
-   * // => https://3000-<slug>.sandbox.miosa.ai
+   * // => https://3000-<slug>.sandbox.<tenant-domain>
    * ```
    *
    * Works for any TCP HTTP listener. Public (no auth required); anyone with
    * the URL can see it. Served over the ingress proxy so it inherits the
-   * wildcard TLS cert — no per-sandbox certs to manage.
+   * tenant's white-label preview domain — no per-sandbox certs to manage.
    */
   previewUrl(port: number, path: string = "/"): string {
     const p = path.startsWith("/") ? path : `/${path}`;
-    return `https://${port}-${this.slug}.sandbox.miosa.ai${p}`;
+    return `https://${port}-${this.slug}.sandbox.${this.previewDomain}${p}`;
   }
 
   /** Root preview URL — serves whatever is on the default app port. */
   get publicUrl(): string {
-    return `https://${this.slug}.sandbox.miosa.ai`;
+    return `https://${this.slug}.sandbox.${this.previewDomain}`;
+  }
+
+  /** Tenant's preview/base domain, white-label aware. */
+  get previewDomain(): string {
+    return this.data.preview_domain || "miosa.app";
   }
 
   // ─── Lifecycle ─────────────────────────────────────────────────────────────

package/src/resources/cron-jobs.ts

@@ -55,13 +55,6 @@ export interface CronJobCreateParams {
   name: string;
   schedule: string;
   idempotencyKey?: string;
-  // White-label attribution
-  externalWorkspaceId?: string;
-  external_workspace_id?: string;
-  externalUserId?: string;
-  external_user_id?: string;
-  externalProjectId?: string;
-  external_project_id?: string;
   [key: string]: unknown;
 }
 

package/src/resources/custom_domains.ts

@@ -27,13 +27,6 @@ export interface CustomDomainData {
 
 export interface CustomDomainRegisterParams {
   fqdn: string;
-  // White-label attribution
-  externalWorkspaceId?: string;
-  external_workspace_id?: string;
-  externalUserId?: string;
-  external_user_id?: string;
-  externalProjectId?: string;
-  external_project_id?: string;
 }
 
 // ─── CustomDomains resource ──────────────────────────────────────────────────
@@ -48,7 +41,7 @@ export interface CustomDomainRegisterParams {
  * // 1. Register the domain
  * const domain = await computer.domains.register("app.example.com");
  * console.log(domain.instructions);
- * // => "Add a CNAME record: app.example.com → <slug>.sandbox.miosa.ai"
+ * // => "Add a CNAME record: app.example.com → <slug>.sandbox.<tenant-domain>"
  *
  * // 2. Add the CNAME in your DNS registrar, then...
  *

package/src/resources/deployments.ts

@@ -95,7 +95,7 @@ export interface DeploymentData {
    * with `source_sandbox_id` on the version row. Will become nullable.
    */
   repo_url?: string;
-  repo_provider?: "github" | "gitlab" | "bitbucket";
+  repo_provider?: "github";
   branch?: string;
   build_command?: string | null;
   run_command?: string | null;
@@ -278,9 +278,6 @@ export interface DeploymentCreateParams extends ExternalAttribution {
   autoDeploy?: boolean;
   database?: DeploymentDatabaseRequest;
   metadata?: Record<string, unknown>;
-  /** Pin build and runtime VMs to a specific DC. One of: "us-west", "us-east", "us-mia". */
-  target_region?: string;
-  targetRegion?: string;
   idempotencyKey?: string;
 }
 
@@ -620,7 +617,6 @@ export class Deployments {
       auto_deploy: params.autoDeploy ?? params.auto_deploy,
       database: params.database,
       metadata: params.metadata,
-      target_region: params.targetRegion ?? params.target_region,
       ...attributionBody(params),
     });
     const data = await this.http.request<unknown>("/deployments", {
@@ -739,16 +735,9 @@ export class Deployments {
     return unwrap(data) as DeploymentBuildData;
   }
 
-  async listEnv(
-    deploymentId: string,
-    opts: { environment?: string } = {},
-  ): Promise<Record<string, unknown>[]> {
-    const query = stripUndefined({ environment: opts.environment });
+  async listEnv(deploymentId: string): Promise<Record<string, unknown>[]> {
     const data = await this.http.get<unknown>(
       `/deployments/${deploymentId}/env`,
-      Object.keys(query).length
-        ? (query as Record<string, string | number | boolean | undefined>)
-        : undefined,
     );
     return listItems<Record<string, unknown>>(data);
   }

package/src/resources/flat-custom-domains.ts

@@ -47,13 +47,6 @@ export interface CustomDomainCreateParams {
   redirect_policy?: "none" | "www_to_apex" | "apex_to_www";
   redirectPolicy?: "none" | "www_to_apex" | "apex_to_www";
   idempotencyKey?: string;
-  // White-label attribution
-  externalWorkspaceId?: string;
-  external_workspace_id?: string;
-  externalUserId?: string;
-  external_user_id?: string;
-  externalProjectId?: string;
-  external_project_id?: string;
   [key: string]: unknown;
 }
 

package/src/resources/functions.ts

@@ -46,13 +46,6 @@ export interface FunctionCreateParams {
   timeoutSec?: number;
   env?: Record<string, string>;
   idempotencyKey?: string;
-  // White-label attribution
-  externalWorkspaceId?: string;
-  external_workspace_id?: string;
-  externalUserId?: string;
-  external_user_id?: string;
-  externalProjectId?: string;
-  external_project_id?: string;
   [key: string]: unknown;
 }
 

package/src/resources/sandboxes.test.ts

@@ -393,10 +393,10 @@ describe("Sandbox handle", () => {
   it("pause/resume/deploy use native sandbox lifecycle endpoints", async () => {
     mockPost
       .mockResolvedValueOnce({ data: sandboxData({ state: "paused" }) })
-      .mockResolvedValueOnce({ data: sandboxData({ state: "running" }) })
-      .mockResolvedValueOnce({
+      .mockResolvedValueOnce({ data: sandboxData({ state: "running" }) });
+    mockRequest.mockResolvedValueOnce({
         data: { deployment_id: "dep_1", url: "https://app.miosa.app" },
-      });
+    });
 
     const sandbox = new Sandbox(makeHttp(), sandboxData());
     await sandbox.pause();
@@ -413,10 +413,13 @@ describe("Sandbox handle", () => {
       "/sandboxes/sbx_123/resume",
       {},
     );
-    expect(mockPost).toHaveBeenNthCalledWith(3, "/sandboxes/sbx_123/deploy", {
-      name: "site",
-      path: "/workspace/dist",
-      custom_domain: "example.com",
+    expect(mockRequest).toHaveBeenCalledWith("/sandboxes/sbx_123/deploy", {
+      method: "POST",
+      body: {
+        name: "site",
+        output_path: "/workspace/dist",
+        custom_domain: "example.com",
+      },
     });
     expect(deployment.deployment_id).toBe("dep_1");
   });

package/src/resources/storage.ts

@@ -49,13 +49,6 @@ export interface BucketCreateParams {
   visibility?: "private" | "public";
   quota_bytes?: number;
   public?: boolean;
-  // White-label attribution
-  externalWorkspaceId?: string;
-  external_workspace_id?: string;
-  externalUserId?: string;
-  external_user_id?: string;
-  externalProjectId?: string;
-  external_project_id?: string;
   [key: string]: unknown;
 }
 

package/src/resources/tenant.ts

@@ -1,5 +1,5 @@
 /**
- * Tenant — current tenant info, preview domain, and branding.
+ * Tenant — current tenant info and plan/usage.
  */
 
 import type { HttpClient } from "../http.js";
@@ -14,101 +14,22 @@ export interface TenantPlan {
   [key: string]: unknown;
 }
 
-export interface PreviewDomainData {
-  domain: string;
-  verified_at?: string | null;
-  cname_target?: string;
-  [key: string]: unknown;
-}
-
-export interface PreviewDomainVerifyResult {
-  verified: boolean;
-  target?: string;
-  records?: unknown[];
-  [key: string]: unknown;
-}
-
-export interface BrandingData {
-  product_name?: string;
-  logo_url?: string;
-  support_url?: string;
-  support_email?: string;
-  primary_color?: string;
-  background_color?: string;
-  [key: string]: unknown;
-}
-
 // ── Helpers ───────────────────────────────────────────────────────────────────
 
 function unwrap<T>(payload: unknown): T {
   if (payload && typeof payload === "object") {
     const p = payload as Record<string, unknown>;
-    for (const k of ["data", "tenant", "branding", "preview_domain", "items"]) {
+    for (const k of ["data", "tenant", "items"]) {
       if (k in p) return p[k] as T;
     }
   }
   return payload as T;
 }
 
-// ── Sub-resources ─────────────────────────────────────────────────────────────
-
-export class PreviewDomain {
-  constructor(private readonly http: HttpClient) {}
-
-  /** GET /api/v1/tenant/preview-domain → {domain, verified_at, cname_target} */
-  async get(): Promise<PreviewDomainData> {
-    return unwrap(await this.http.get<unknown>("/tenant/preview-domain"));
-  }
-
-  /** PUT /api/v1/tenant/preview-domain — set the preview domain. */
-  async set(domain: string): Promise<PreviewDomainData> {
-    return unwrap(
-      await this.http.put<unknown>("/tenant/preview-domain", { domain }),
-    );
-  }
-
-  /** POST /api/v1/tenant/preview-domain/verify → {verified, target, records} */
-  async verify(): Promise<PreviewDomainVerifyResult> {
-    return unwrap(
-      await this.http.post<unknown>("/tenant/preview-domain/verify", {}),
-    );
-  }
-
-  /** DELETE /api/v1/tenant/preview-domain */
-  async delete(): Promise<void> {
-    await this.http.delete<unknown>("/tenant/preview-domain");
-  }
-}
-
-export class Branding {
-  constructor(private readonly http: HttpClient) {}
-
-  /** GET /api/v1/tenant/branding */
-  async get(): Promise<BrandingData> {
-    return unwrap(await this.http.get<unknown>("/tenant/branding"));
-  }
-
-  /** PUT /api/v1/tenant/branding — keys: product_name, logo_url, support_url, support_email, primary_color, background_color */
-  async set(branding: BrandingData): Promise<BrandingData> {
-    return unwrap(await this.http.put<unknown>("/tenant/branding", branding));
-  }
-
-  /** DELETE /api/v1/tenant/branding */
-  async delete(): Promise<void> {
-    await this.http.delete<unknown>("/tenant/branding");
-  }
-}
-
 // ── Main resource ─────────────────────────────────────────────────────────────
 
 export class Tenant {
-  readonly preview_domain: PreviewDomain;
-  readonly branding: Branding;
-
-  constructor(private readonly http: HttpClient) {
-    this.preview_domain = new PreviewDomain(http);
-    this.branding = new Branding(http);
-  }
+  constructor(private readonly http: HttpClient) {}
 
   /** Get the current tenant's plan, limits, and live usage counters. */
   async current(): Promise<TenantPlan> {

package/src/resources/volumes.ts

@@ -40,13 +40,6 @@ export interface VolumeCreateParams {
   sizeGb?: number;
   region?: string;
   idempotencyKey?: string;
-  // White-label attribution
-  externalWorkspaceId?: string;
-  external_workspace_id?: string;
-  externalUserId?: string;
-  external_user_id?: string;
-  externalProjectId?: string;
-  external_project_id?: string;
   [key: string]: unknown;
 }
 

package/src/resources/webhooks.ts

@@ -2,48 +2,10 @@
  * Webhooks resource — tenant outgoing event delivery.
  */
 
-import { createHmac, timingSafeEqual } from "node:crypto";
 import { randomUUID } from "node:crypto";
 
 import type { HttpClient } from "../http.js";
 
-const MAX_TIMESTAMP_AGE_MS = 5 * 60 * 1000;
-
-/**
- * Verify an incoming ``X-Miosa-Signature`` header.
- * Header format: ``t=<unix_ts>,v1=<hex_hmac>``
- */
-export function verifySignature(
-  payload: string | Uint8Array,
-  signatureHeader: string,
-  secret: string,
-): boolean {
-  const parts: Record<string, string> = {};
-  for (const part of signatureHeader.split(",")) {
-    const idx = part.indexOf("=");
-    if (idx > 0) parts[part.slice(0, idx).trim()] = part.slice(idx + 1).trim();
-  }
-  const tsStr = parts["t"];
-  const sig = parts["v1"];
-  if (!tsStr || !sig) return false;
-
-  const ts = parseInt(tsStr, 10);
-  if (isNaN(ts)) return false;
-  if (Date.now() - ts * 1000 > MAX_TIMESTAMP_AGE_MS) {
-    throw new Error(`Webhook timestamp is too old: ${ts}`);
-  }
-
-  const body =
-    payload instanceof Uint8Array ? payload : Buffer.from(payload, "utf-8");
-  const signed = Buffer.concat([Buffer.from(`${tsStr}.`, "utf-8"), body]);
-  const expected = createHmac("sha256", secret).update(signed).digest("hex");
-
-  return timingSafeEqual(
-    Buffer.from(expected, "utf-8"),
-    Buffer.from(sig, "utf-8"),
-  );
-}
-
 // ── Branded IDs ──────────────────────────────────────────────────────────────
 
 export type WebhookId = string & { readonly __brand: "WebhookId" };
@@ -206,21 +168,4 @@ export class Webhooks {
       "items",
     ]);
   }
-
-  /**
-   * Verify an incoming ``X-Miosa-Signature`` header.
-   *
-   * Header format: ``t=<unix_ts>,v1=<hex_hmac>``
-   * HMAC body:     ``<t>.<raw_payload>``
-   *
-   * Throws if timestamp is older than 5 minutes.
-   * Returns true if signature matches.
-   */
-  static verifySignature(
-    payload: string | Uint8Array,
-    signatureHeader: string,
-    secret: string,
-  ): boolean {
-    return verifySignature(payload, signatureHeader, secret);
-  }
 }

package/src/types.ts

@@ -66,13 +66,6 @@ export interface ComputerCreateParams {
   size?: ComputerSize;
   visibility?: ComputerVisibility;
   metadata?: Record<string, string>;
-  // White-label attribution
-  externalWorkspaceId?: string;
-  external_workspace_id?: string;
-  externalUserId?: string;
-  external_user_id?: string;
-  externalProjectId?: string;
-  external_project_id?: string;
 }
 
 export interface ComputerUpdateParams {
@@ -85,7 +78,8 @@ export interface ComputerData {
   id: ComputerId;
   name: string;
   /**
-   * URL-safe identifier used in preview URLs: `https://{port}-{slug}.sandbox.miosa.ai`.
+   * URL-safe identifier used in preview URLs:
+   * `https://{port}-{slug}.sandbox.{preview_domain}`.
    * Falls back to the computer id when no slug is assigned.
    */
   slug: string;
@@ -97,8 +91,10 @@ export interface ComputerData {
   metadata: Record<string, string>;
   /** Controls who can access the HTTP preview URL. Defaults to `"public"`. */
   visibility: ComputerVisibility;
-  /** Public ingress root, e.g. `https://<slug>.sandbox.miosa.ai`. */
+  /** Public ingress root, e.g. `https://<slug>.sandbox.<preview_domain>`. */
   sandbox_url?: string;
+  /** Tenant's white-label preview/base domain, e.g. `cliniciq.com`. */
+  preview_domain?: string;
   /** KasmVNC URL for desktop templates. */
   desktop_url?: string;
   created_at: string;