@miosa/sdk 1.2.0 → 1.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miosa/sdk",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "TypeScript SDK for the MIOSA API — cloud VM desktop infrastructure for AI agents",
   "license": "MIT",
   "author": "MIOSA <hello@miosa.ai>",

package/src/resources/admin.ts

@@ -345,15 +345,4 @@ export class Admin {
       model_id: modelId,
     });
   }
-
-  /** POST /api/v1/admin/impersonate — returns {token, expires_at}. */
-  impersonate(
-    externalUserId: string,
-    options: { ttlSec?: number } = {},
-  ): Promise<{ token: string; expires_at: string }> {
-    return this.http.post("/admin/impersonate", {
-      external_user_id: externalUserId,
-      ttl_sec: options.ttlSec ?? 3600,
-    });
-  }
 }

package/src/resources/api-keys.ts

@@ -113,22 +113,6 @@ export class ApiKeys {
     return unwrap<ApiKeyCreateResult>(data);
   }
 
-  /** POST /api/v1/api-keys/scoped — L2 delegation token bound to one external user. */
-  async createScoped(params: {
-    externalUserId: string;
-    scopes: string[];
-    expiresAt?: string;
-  }): Promise<ApiKeyCreateResult> {
-    const body = stripUndefined({
-      external_user_id: params.externalUserId,
-      scopes: params.scopes,
-      expires_at: params.expiresAt,
-    });
-    return unwrap<ApiKeyCreateResult>(
-      await this.http.post<unknown>("/api-keys/scoped", body),
-    );
-  }
-
   async delete(keyId: string): Promise<void> {
     await this.http.delete<unknown>(`/api-keys/${keyId}`);
   }

package/src/resources/computer.ts

@@ -176,21 +176,26 @@ export class Computer {
    * ```ts
    * await computer.exec.bash("npm run dev &");
    * const url = computer.previewUrl(3000);
-   * // => https://3000-<slug>.sandbox.miosa.ai
+   * // => https://3000-<slug>.sandbox.<tenant-domain>
    * ```
    *
    * Works for any TCP HTTP listener. Public (no auth required); anyone with
    * the URL can see it. Served over the ingress proxy so it inherits the
-   * wildcard TLS cert — no per-sandbox certs to manage.
+   * tenant's white-label preview domain — no per-sandbox certs to manage.
    */
   previewUrl(port: number, path: string = "/"): string {
     const p = path.startsWith("/") ? path : `/${path}`;
-    return `https://${port}-${this.slug}.sandbox.miosa.ai${p}`;
+    return `https://${port}-${this.slug}.sandbox.${this.previewDomain}${p}`;
   }
 
   /** Root preview URL — serves whatever is on the default app port. */
   get publicUrl(): string {
-    return `https://${this.slug}.sandbox.miosa.ai`;
+    return `https://${this.slug}.sandbox.${this.previewDomain}`;
+  }
+
+  /** Tenant's preview/base domain, white-label aware. */
+  get previewDomain(): string {
+    return this.data.preview_domain || "miosa.app";
   }
 
   // ─── Lifecycle ─────────────────────────────────────────────────────────────

package/src/resources/custom_domains.ts

@@ -41,7 +41,7 @@ export interface CustomDomainRegisterParams {
  * // 1. Register the domain
  * const domain = await computer.domains.register("app.example.com");
  * console.log(domain.instructions);
- * // => "Add a CNAME record: app.example.com → <slug>.sandbox.miosa.ai"
+ * // => "Add a CNAME record: app.example.com → <slug>.sandbox.<tenant-domain>"
  *
  * // 2. Add the CNAME in your DNS registrar, then...
  *

package/src/resources/sandboxes.test.ts

@@ -393,10 +393,10 @@ describe("Sandbox handle", () => {
   it("pause/resume/deploy use native sandbox lifecycle endpoints", async () => {
     mockPost
       .mockResolvedValueOnce({ data: sandboxData({ state: "paused" }) })
-      .mockResolvedValueOnce({ data: sandboxData({ state: "running" }) })
-      .mockResolvedValueOnce({
+      .mockResolvedValueOnce({ data: sandboxData({ state: "running" }) });
+    mockRequest.mockResolvedValueOnce({
         data: { deployment_id: "dep_1", url: "https://app.miosa.app" },
-      });
+    });
 
     const sandbox = new Sandbox(makeHttp(), sandboxData());
     await sandbox.pause();
@@ -413,10 +413,13 @@ describe("Sandbox handle", () => {
       "/sandboxes/sbx_123/resume",
       {},
     );
-    expect(mockPost).toHaveBeenNthCalledWith(3, "/sandboxes/sbx_123/deploy", {
-      name: "site",
-      path: "/workspace/dist",
-      custom_domain: "example.com",
+    expect(mockRequest).toHaveBeenCalledWith("/sandboxes/sbx_123/deploy", {
+      method: "POST",
+      body: {
+        name: "site",
+        output_path: "/workspace/dist",
+        custom_domain: "example.com",
+      },
     });
     expect(deployment.deployment_id).toBe("dep_1");
   });

package/src/types.ts

@@ -78,7 +78,8 @@ export interface ComputerData {
   id: ComputerId;
   name: string;
   /**
-   * URL-safe identifier used in preview URLs: `https://{port}-{slug}.sandbox.miosa.ai`.
+   * URL-safe identifier used in preview URLs:
+   * `https://{port}-{slug}.sandbox.{preview_domain}`.
    * Falls back to the computer id when no slug is assigned.
    */
   slug: string;
@@ -90,8 +91,10 @@ export interface ComputerData {
   metadata: Record<string, string>;
   /** Controls who can access the HTTP preview URL. Defaults to `"public"`. */
   visibility: ComputerVisibility;
-  /** Public ingress root, e.g. `https://<slug>.sandbox.miosa.ai`. */
+  /** Public ingress root, e.g. `https://<slug>.sandbox.<preview_domain>`. */
   sandbox_url?: string;
+  /** Tenant's white-label preview/base domain, e.g. `cliniciq.com`. */
+  preview_domain?: string;
   /** KasmVNC URL for desktop templates. */
   desktop_url?: string;
   created_at: string;

package/src/resources/governance.test.ts

@@ -1,355 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import type { HttpClient } from "../http.js";
-import {
-  BillingResource,
-  BulkResource,
-  ExternalUsers,
-  GovernanceTenant,
-  GovernanceWorkspaces,
-} from "./governance.js";
-import { ApiKeys } from "./api-keys.js";
-import { Admin } from "./admin.js";
-
-const mockGet = vi.fn();
-const mockPost = vi.fn();
-const mockPut = vi.fn();
-const mockPatch = vi.fn();
-const mockDelete = vi.fn();
-const mockStream = vi.fn();
-const mockRequest = vi.fn();
-
-function makeHttp(): HttpClient {
-  return {
-    get: mockGet,
-    post: mockPost,
-    put: mockPut,
-    patch: mockPatch,
-    delete: mockDelete,
-    request: mockRequest,
-    stream: mockStream,
-  } as unknown as HttpClient;
-}
-
-beforeEach(() => {
-  vi.resetAllMocks();
-});
-
-// ── GovernanceTenant.policy ───────────────────────────────────────────────────
-
-describe("GovernanceTenant.policy", () => {
-  it("get calls GET /tenant/policy and unwraps data", async () => {
-    mockGet.mockResolvedValue({ data: { quotas: { max_sandboxes: 10 } } });
-    const t = new GovernanceTenant(makeHttp());
-    const result = await t.policy.get();
-    expect(mockGet).toHaveBeenCalledWith("/tenant/policy");
-    expect((result as Record<string, unknown>).quotas).toBeDefined();
-  });
-
-  it("set calls PUT /tenant/policy with body", async () => {
-    mockPut.mockResolvedValue({ data: { quotas: { max_sandboxes: 5 } } });
-    const t = new GovernanceTenant(makeHttp());
-    await t.policy.set({ quotas: { max_sandboxes: 5 } });
-    expect(mockPut).toHaveBeenCalledWith("/tenant/policy", {
-      quotas: { max_sandboxes: 5 },
-    });
-  });
-
-  it("delete calls DELETE /tenant/policy", async () => {
-    mockDelete.mockResolvedValue(null);
-    const t = new GovernanceTenant(makeHttp());
-    await t.policy.delete();
-    expect(mockDelete).toHaveBeenCalledWith("/tenant/policy");
-  });
-});
-
-// ── GovernanceTenant.members ──────────────────────────────────────────────────
-
-describe("GovernanceTenant.members", () => {
-  it("list returns members array", async () => {
-    mockGet.mockResolvedValue({
-      data: [{ id: "m1", email: "a@b.com", role: "admin" }],
-    });
-    const t = new GovernanceTenant(makeHttp());
-    const members = await t.members.list();
-    expect(members).toHaveLength(1);
-    expect(members[0].role).toBe("admin");
-  });
-
-  it("invite posts email and role", async () => {
-    mockPost.mockResolvedValue({ data: { id: "m2", role: "developer" } });
-    const t = new GovernanceTenant(makeHttp());
-    const result = await t.members.invite("x@y.com", "developer");
-    expect(mockPost).toHaveBeenCalledWith("/tenant/members", {
-      email: "x@y.com",
-      role: "developer",
-    });
-    expect(result.role).toBe("developer");
-  });
-
-  it("updateRole patches member role", async () => {
-    mockPatch.mockResolvedValue({ data: { id: "m1", role: "admin" } });
-    const t = new GovernanceTenant(makeHttp());
-    await t.members.updateRole("m1", "admin");
-    expect(mockPatch).toHaveBeenCalledWith("/tenant/members/m1/role", {
-      role: "admin",
-    });
-  });
-
-  it("remove deletes member", async () => {
-    mockDelete.mockResolvedValue(null);
-    const t = new GovernanceTenant(makeHttp());
-    await t.members.remove("m1");
-    expect(mockDelete).toHaveBeenCalledWith("/tenant/members/m1");
-  });
-
-  it("transferOwnership posts new_owner_user_id", async () => {
-    mockPost.mockResolvedValue({ data: { transferred: true } });
-    const t = new GovernanceTenant(makeHttp());
-    await t.members.transferOwnership("user_new");
-    expect(mockPost).toHaveBeenCalledWith("/tenant/transfer-ownership", {
-      new_owner_user_id: "user_new",
-    });
-  });
-});
-
-// ── GovernanceWorkspaces ──────────────────────────────────────────────────────
-
-describe("GovernanceWorkspaces", () => {
-  it("list returns workspace array", async () => {
-    mockGet.mockResolvedValue({ data: [{ id: "ws_1", name: "alpha" }] });
-    const gw = new GovernanceWorkspaces(makeHttp());
-    const items = await gw.list();
-    expect(items).toHaveLength(1);
-    expect(items[0].id).toBe("ws_1");
-  });
-
-  it("create posts name", async () => {
-    mockPost.mockResolvedValue({ data: { id: "ws_2", name: "beta" } });
-    const gw = new GovernanceWorkspaces(makeHttp());
-    await gw.create("beta");
-    expect(mockPost).toHaveBeenCalledWith("/workspaces", { name: "beta" });
-  });
-
-  it("workspace(id).policy.get calls correct path", async () => {
-    mockGet.mockResolvedValue({ data: { quotas: {} } });
-    const gw = new GovernanceWorkspaces(makeHttp());
-    await gw.workspace("ws_1").policy.get();
-    expect(mockGet).toHaveBeenCalledWith("/workspaces/ws_1/policy");
-  });
-
-  it("workspace(id).policy.set calls PUT", async () => {
-    mockPut.mockResolvedValue({ data: {} });
-    const gw = new GovernanceWorkspaces(makeHttp());
-    await gw.workspace("ws_1").policy.set({ quotas: { max_sandboxes: 3 } });
-    expect(mockPut).toHaveBeenCalledWith("/workspaces/ws_1/policy", {
-      quotas: { max_sandboxes: 3 },
-    });
-  });
-
-  it("workspace(id).members.list calls correct path", async () => {
-    mockGet.mockResolvedValue({ data: [{ id: "m1", role: "developer" }] });
-    const gw = new GovernanceWorkspaces(makeHttp());
-    const members = await gw.workspace("ws_1").members.list();
-    expect(mockGet).toHaveBeenCalledWith("/workspaces/ws_1/members");
-    expect(members[0].role).toBe("developer");
-  });
-
-  it("workspace(id).members.invite posts correctly", async () => {
-    mockPost.mockResolvedValue({ data: { id: "m2" } });
-    const gw = new GovernanceWorkspaces(makeHttp());
-    await gw.workspace("ws_1").members.invite("bob@acme.com", "viewer");
-    expect(mockPost).toHaveBeenCalledWith("/workspaces/ws_1/members", {
-      email: "bob@acme.com",
-      role: "viewer",
-    });
-  });
-
-  it("workspace(id).transfer posts resource_ids and target", async () => {
-    mockPost.mockResolvedValue({ data: { transferred: 2 } });
-    const gw = new GovernanceWorkspaces(makeHttp());
-    await gw.workspace("ws_1").transfer(["sbx_1", "sbx_2"], "ws_2");
-    expect(mockPost).toHaveBeenCalledWith("/workspaces/ws_1/transfer", {
-      resource_ids: ["sbx_1", "sbx_2"],
-      target_workspace_id: "ws_2",
-    });
-  });
-});
-
-// ── ExternalUsers.policy ──────────────────────────────────────────────────────
-
-describe("ExternalUsers.policy", () => {
-  it("get calls correct path", async () => {
-    mockGet.mockResolvedValue({ data: { lifecycle: {} } });
-    const eu = new ExternalUsers(makeHttp());
-    await eu.call("alice").policy.get();
-    expect(mockGet).toHaveBeenCalledWith("/external-users/alice/policy");
-  });
-
-  it("effective returns typed EffectivePolicyDoc with source fields", async () => {
-    mockGet.mockResolvedValue({
-      lifecycle: {
-        default_idle_timeout_sec: { value: 600, source: "user" },
-        default_timeout_sec: { value: 86400, source: "tenant" },
-      },
-      quotas: {
-        max_sandboxes: { value: 5, source: "workspace" },
-      },
-    });
-    const eu = new ExternalUsers(makeHttp());
-    const eff = await eu.call("alice").policy.effective();
-    expect(eff.lifecycle["default_idle_timeout_sec"]?.value).toBe(600);
-    expect(eff.lifecycle["default_idle_timeout_sec"]?.source).toBe("user");
-    expect(eff.quotas["max_sandboxes"]?.value).toBe(5);
-    expect(eff.quotas["max_sandboxes"]?.source).toBe("workspace");
-  });
-});
-
-// ── BulkResource ──────────────────────────────────────────────────────────────
-
-describe("BulkResource", () => {
-  it("sandboxes.pause posts ids", async () => {
-    mockPost.mockResolvedValue({ queued: 3, job_id: "job_1" });
-    const bulk = new BulkResource(makeHttp());
-    const result = await bulk.sandboxes.pause({
-      ids: ["sbx_1", "sbx_2", "sbx_3"],
-    });
-    expect(mockPost).toHaveBeenCalledWith("/bulk/sandboxes/pause", {
-      ids: ["sbx_1", "sbx_2", "sbx_3"],
-    });
-    expect(result.job_id).toBe("job_1");
-  });
-
-  it("sandboxes.destroy posts filter", async () => {
-    mockPost.mockResolvedValue({ queued: 5, job_id: "job_2" });
-    const bulk = new BulkResource(makeHttp());
-    const result = await bulk.sandboxes.destroy({ filter: { state: "idle" } });
-    expect(mockPost).toHaveBeenCalledWith("/bulk/sandboxes/destroy", {
-      filter: { state: "idle" },
-    });
-    expect(result.queued).toBe(5);
-  });
-
-  it("policy.apply posts tier + ids + policy", async () => {
-    mockPost.mockResolvedValue({ queued: 10, job_id: "job_3" });
-    const bulk = new BulkResource(makeHttp());
-    await bulk.policy.apply({
-      tier: "external_user",
-      idsOrFilter: ["u1", "u2"],
-      policy: { quotas: { max_sandboxes: 3 } },
-    });
-    expect(mockPost).toHaveBeenCalledWith("/bulk/policy/apply", {
-      tier: "external_user",
-      ids: ["u1", "u2"],
-      policy: { quotas: { max_sandboxes: 3 } },
-    });
-  });
-
-  it("jobs.get returns job status", async () => {
-    mockGet.mockResolvedValue({
-      data: { id: "job_1", status: "completed", processed: 3 },
-    });
-    const bulk = new BulkResource(makeHttp());
-    const job = await bulk.jobs.get("job_1");
-    expect(job.status).toBe("completed");
-    expect(job.processed).toBe(3);
-  });
-});
-
-// ── BillingResource ───────────────────────────────────────────────────────────
-
-describe("BillingResource", () => {
-  it("invoices.list returns array", async () => {
-    mockGet.mockResolvedValue({
-      data: [{ id: "inv_1", amount: 5000 }],
-    });
-    const billing = new BillingResource(makeHttp());
-    const invoices = await billing.invoices.list();
-    expect(invoices[0].id).toBe("inv_1");
-  });
-
-  it("invoices.get returns single invoice", async () => {
-    mockGet.mockResolvedValue({
-      data: { id: "inv_1", amount: 5000, line_items: [] },
-    });
-    const billing = new BillingResource(makeHttp());
-    const inv = await billing.invoices.get("inv_1");
-    expect(inv.id).toBe("inv_1");
-  });
-
-  it("paymentMethods returns list", async () => {
-    mockGet.mockResolvedValue({
-      data: [{ id: "pm_1", brand: "visa", last4: "4242" }],
-    });
-    const billing = new BillingResource(makeHttp());
-    const methods = await billing.paymentMethods();
-    expect(methods[0].brand).toBe("visa");
-  });
-
-  it("upcoming returns preview", async () => {
-    mockGet.mockResolvedValue({
-      data: { amount: 1200, period_end: "2026-06-01" },
-    });
-    const billing = new BillingResource(makeHttp());
-    const upcoming = await billing.upcoming();
-    expect((upcoming as Record<string, unknown>).amount).toBe(1200);
-  });
-});
-
-// ── ApiKeys.createScoped ──────────────────────────────────────────────────────
-
-describe("ApiKeys.createScoped", () => {
-  it("posts to /api-keys/scoped with correct body", async () => {
-    mockPost.mockResolvedValue({
-      data: { id: "key_1", token: "msk_l2_abc" },
-    });
-    const keys = new ApiKeys(makeHttp());
-    const result = await keys.createScoped({
-      externalUserId: "alice-42",
-      scopes: ["sandboxes:read", "sandboxes:exec"],
-      expiresAt: "2026-12-31T00:00:00Z",
-    });
-    expect(mockPost).toHaveBeenCalledWith("/api-keys/scoped", {
-      external_user_id: "alice-42",
-      scopes: ["sandboxes:read", "sandboxes:exec"],
-      expires_at: "2026-12-31T00:00:00Z",
-    });
-    expect(result.token).toBe("msk_l2_abc");
-  });
-
-  it("omits expires_at when not provided", async () => {
-    mockPost.mockResolvedValue({ data: { id: "key_2" } });
-    const keys = new ApiKeys(makeHttp());
-    await keys.createScoped({
-      externalUserId: "bob",
-      scopes: ["sandboxes:read"],
-    });
-    const body = mockPost.mock.calls[0][1] as Record<string, unknown>;
-    expect(body["expires_at"]).toBeUndefined();
-  });
-});
-
-// ── Admin.impersonate ─────────────────────────────────────────────────────────
-
-describe("Admin.impersonate", () => {
-  it("posts to /admin/impersonate with external_user_id and ttl_sec", async () => {
-    mockPost.mockResolvedValue({
-      token: "msi_abc",
-      expires_at: "2026-06-01T00:00:00Z",
-    });
-    const admin = new Admin(makeHttp());
-    const result = await admin.impersonate("alice-42", { ttlSec: 1800 });
-    expect(mockPost).toHaveBeenCalledWith("/admin/impersonate", {
-      external_user_id: "alice-42",
-      ttl_sec: 1800,
-    });
-    expect(result.token).toBe("msi_abc");
-  });
-
-  it("defaults ttl_sec to 3600", async () => {
-    mockPost.mockResolvedValue({ token: "msi_xyz" });
-    const admin = new Admin(makeHttp());
-    await admin.impersonate("bob");
-    const body = mockPost.mock.calls[0][1] as Record<string, unknown>;
-    expect(body["ttl_sec"]).toBe(3600);
-  });
-});