@miosa/sdk 1.2.4 → 1.2.6

package/src/resources/volumes.ts

@@ -1,117 +0,0 @@
-/**
- * Volumes resource — persistent block storage.
- */
-
-import { randomUUID } from "node:crypto";
-
-import type { HttpClient } from "../http.js";
-
-// ── Branded IDs ──────────────────────────────────────────────────────────────
-
-export type VolumeId = string & { readonly __brand: "VolumeId" };
-
-// ── Resource shapes ──────────────────────────────────────────────────────────
-
-export interface VolumeData {
-  id: VolumeId;
-  tenant_id: string;
-  name: string;
-  size_gb: number;
-  state?: string;
-  region?: string | null;
-  attached_to?: string | null;
-  created_at?: string;
-  updated_at?: string;
-  [key: string]: unknown;
-}
-
-// ── Request payloads ─────────────────────────────────────────────────────────
-
-export interface VolumeListParams {
-  limit?: number;
-  cursor?: string;
-  state?: string;
-  [key: string]: string | number | boolean | undefined;
-}
-
-export interface VolumeCreateParams {
-  name: string;
-  size_gb: number;
-  sizeGb?: number;
-  region?: string;
-  idempotencyKey?: string;
-  [key: string]: unknown;
-}
-
-// ── Helpers ───────────────────────────────────────────────────────────────────
-
-function unwrap<T>(payload: unknown): T {
-  if (payload && typeof payload === "object" && "data" in (payload as object)) {
-    return (payload as { data: T }).data;
-  }
-  return payload as T;
-}
-
-function listItems<T>(
-  payload: unknown,
-  candidateKeys: string[] = ["data", "volumes", "items"],
-): T[] {
-  if (Array.isArray(payload)) return payload;
-  if (!payload || typeof payload !== "object") return [];
-  const p = payload as Record<string, unknown>;
-  if (Array.isArray(p.data)) return p.data as T[];
-  for (const key of candidateKeys) {
-    if (Array.isArray(p[key])) return p[key] as T[];
-  }
-  return [];
-}
-
-function stripUndefined(
-  input: Record<string, unknown>,
-): Record<string, unknown> {
-  return Object.fromEntries(
-    Object.entries(input).filter(([, v]) => v !== undefined),
-  );
-}
-
-function idempotencyKey(key?: string): string {
-  return key ?? randomUUID();
-}
-
-// ── Main resource ─────────────────────────────────────────────────────────────
-
-export class Volumes {
-  constructor(private readonly http: HttpClient) {}
-
-  async list(params: VolumeListParams = {}): Promise<VolumeData[]> {
-    const query = stripUndefined({ ...params }) as Record<
-      string,
-      string | number | boolean | undefined
-    >;
-    const data = await this.http.get<unknown>("/volumes", query);
-    return listItems<VolumeData>(data);
-  }
-
-  async get(volumeId: string): Promise<VolumeData> {
-    const data = await this.http.get<unknown>(`/volumes/${volumeId}`);
-    return unwrap<VolumeData>(data);
-  }
-
-  async create(params: VolumeCreateParams): Promise<VolumeData> {
-    const { idempotencyKey: ikey, sizeGb, ...rest } = params;
-    const body = stripUndefined({
-      ...rest,
-      size_gb: sizeGb ?? rest.size_gb,
-    });
-    const data = await this.http.request<unknown>("/volumes", {
-      method: "POST",
-      body,
-      headers: { "Idempotency-Key": idempotencyKey(ikey) },
-    });
-    return unwrap<VolumeData>(data);
-  }
-
-  async delete(volumeId: string): Promise<void> {
-    await this.http.delete<unknown>(`/volumes/${volumeId}`);
-  }
-}

package/src/resources/webhooks.ts

@@ -1,224 +0,0 @@
-/**
- * Webhooks resource — tenant outgoing event delivery.
- */
-
-import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
-
-import type { HttpClient } from "../http.js";
-
-// ── Branded IDs ──────────────────────────────────────────────────────────────
-
-export type WebhookId = string & { readonly __brand: "WebhookId" };
-export type WebhookDeliveryId = string & {
-  readonly __brand: "WebhookDeliveryId";
-};
-
-// ── Resource shapes ──────────────────────────────────────────────────────────
-
-export interface WebhookData {
-  id: WebhookId;
-  tenant_id: string;
-  url: string;
-  events: string[];
-  state?: string;
-  secret?: string | null;
-  enabled?: boolean;
-  created_at?: string;
-  updated_at?: string;
-  [key: string]: unknown;
-}
-
-export interface WebhookDeliveryData {
-  id: WebhookDeliveryId;
-  webhook_id: WebhookId;
-  event?: string;
-  state?: string;
-  response_status?: number | null;
-  attempt_count?: number;
-  next_retry_at?: string | null;
-  delivered_at?: string | null;
-  created_at?: string;
-  [key: string]: unknown;
-}
-
-// ── Request payloads ─────────────────────────────────────────────────────────
-
-export interface WebhookListParams {
-  limit?: number;
-  cursor?: string;
-  [key: string]: string | number | boolean | undefined;
-}
-
-export interface WebhookCreateParams {
-  url: string;
-  events: string[];
-  secret?: string;
-  enabled?: boolean;
-  idempotencyKey?: string;
-  [key: string]: unknown;
-}
-
-export interface WebhookUpdateParams {
-  url?: string;
-  events?: string[];
-  secret?: string;
-  enabled?: boolean;
-  [key: string]: unknown;
-}
-
-// ── Helpers ───────────────────────────────────────────────────────────────────
-
-function unwrap<T>(payload: unknown): T {
-  if (payload && typeof payload === "object" && "data" in (payload as object)) {
-    return (payload as { data: T }).data;
-  }
-  return payload as T;
-}
-
-function listItems<T>(
-  payload: unknown,
-  candidateKeys: string[] = ["data", "webhooks", "deliveries", "items"],
-): T[] {
-  if (Array.isArray(payload)) return payload;
-  if (!payload || typeof payload !== "object") return [];
-  const p = payload as Record<string, unknown>;
-  if (Array.isArray(p.data)) return p.data as T[];
-  for (const key of candidateKeys) {
-    if (Array.isArray(p[key])) return p[key] as T[];
-  }
-  return [];
-}
-
-function stripUndefined(
-  input: Record<string, unknown>,
-): Record<string, unknown> {
-  return Object.fromEntries(
-    Object.entries(input).filter(([, v]) => v !== undefined),
-  );
-}
-
-function idempotencyKey(key?: string): string {
-  return key ?? randomUUID();
-}
-
-function bodyBuffer(body: Buffer | Uint8Array | string): Buffer {
-  if (Buffer.isBuffer(body)) return body;
-  if (typeof body === "string") return Buffer.from(body, "utf8");
-  return Buffer.from(body);
-}
-
-/**
- * Verify the `Miosa-Signature` webhook header.
- *
- * Header format: `t=<unix_seconds>,v1=<hex_hmac>`.
- * Signed payload: `<timestamp>.<raw_body>`.
- */
-export function verifySignature(
-  body: Buffer | Uint8Array | string,
-  header: string,
-  secret: string,
-  toleranceSec = 300,
-): boolean {
-  const parts = Object.fromEntries(
-    header
-      .split(",")
-      .map((chunk) => chunk.split("=", 2))
-      .filter(([key, value]) => key && value),
-  );
-
-  const timestamp = parts.t;
-  const received = parts.v1;
-  if (!timestamp || !received || !secret) return false;
-
-  const unixSeconds = Number(timestamp);
-  if (!Number.isFinite(unixSeconds)) return false;
-
-  const ageSec = Math.abs(Date.now() / 1000 - unixSeconds);
-  if (ageSec > toleranceSec) {
-    throw new Error("webhook timestamp too old");
-  }
-
-  const rawBody = bodyBuffer(body);
-  const signed = Buffer.concat([Buffer.from(`${timestamp}.`), rawBody]);
-  const expected = createHmac("sha256", secret).update(signed).digest("hex");
-
-  try {
-    return timingSafeEqual(
-      Buffer.from(expected, "utf8"),
-      Buffer.from(received, "utf8"),
-    );
-  } catch {
-    return false;
-  }
-}
-
-// ── Main resource ─────────────────────────────────────────────────────────────
-
-export class Webhooks {
-  constructor(private readonly http: HttpClient) {}
-
-  static verifySignature = verifySignature;
-
-  async list(params: WebhookListParams = {}): Promise<WebhookData[]> {
-    const query = stripUndefined({ ...params }) as Record<
-      string,
-      string | number | boolean | undefined
-    >;
-    const data = await this.http.get<unknown>("/webhooks", query);
-    return listItems<WebhookData>(data);
-  }
-
-  async get(webhookId: string): Promise<WebhookData> {
-    const data = await this.http.get<unknown>(`/webhooks/${webhookId}`);
-    return unwrap<WebhookData>(data);
-  }
-
-  async create(params: WebhookCreateParams): Promise<WebhookData> {
-    const { idempotencyKey: ikey, ...rest } = params;
-    const body = stripUndefined(rest as Record<string, unknown>);
-    const data = await this.http.request<unknown>("/webhooks", {
-      method: "POST",
-      body,
-      headers: { "Idempotency-Key": idempotencyKey(ikey) },
-    });
-    return unwrap<WebhookData>(data);
-  }
-
-  async update(
-    webhookId: string,
-    params: WebhookUpdateParams,
-  ): Promise<WebhookData> {
-    const body = stripUndefined(params as Record<string, unknown>);
-    const data = await this.http.patch<unknown>(`/webhooks/${webhookId}`, body);
-    return unwrap<WebhookData>(data);
-  }
-
-  async delete(webhookId: string): Promise<void> {
-    await this.http.delete<unknown>(`/webhooks/${webhookId}`);
-  }
-
-  async test(
-    webhookId: string,
-    opts: { idempotencyKey?: string } = {},
-  ): Promise<Record<string, unknown>> {
-    const data = await this.http.request<unknown>(
-      `/webhooks/${webhookId}/test`,
-      {
-        method: "POST",
-        headers: { "Idempotency-Key": idempotencyKey(opts.idempotencyKey) },
-      },
-    );
-    return unwrap<Record<string, unknown>>(data);
-  }
-
-  async deliveries(webhookId: string): Promise<WebhookDeliveryData[]> {
-    const data = await this.http.get<unknown>(
-      `/webhooks/${webhookId}/deliveries`,
-    );
-    return listItems<WebhookDeliveryData>(data, [
-      "data",
-      "deliveries",
-      "items",
-    ]);
-  }
-}

package/src/resources/workspace-invites.ts

@@ -1,188 +0,0 @@
-/**
- * Workspace Invites — email invite flow for workspace access.
- *
- * Sending an invite to an email that already belongs to a tenant member
- * short-circuits to directly adding that user (returns `type: "added"`).
- * Accepting a workspace invite for an unknown email auto-creates both a
- * `tenant_members` and a `workspace_members` row atomically.
- *
- * Public endpoints (no auth):
- *   GET  /workspace-invites/:token
- *
- * Authenticated endpoints:
- *   POST   /workspaces/:id/invites
- *   GET    /workspaces/:id/invites
- *   DELETE /workspaces/:id/invites/:invite_id
- *   POST   /workspace-invites/:token/accept
- */
-
-import type { HttpClient } from "../http.js";
-import type {
-  WorkspaceMemberRecord,
-  WorkspaceRole,
-} from "./workspace-members.js";
-
-// ── Resource shapes ──────────────────────────────────────────────────────────
-
-export interface WorkspaceInvite {
-  id: string;
-  workspace_id: string;
-  tenant_id: string;
-  email: string;
-  role: WorkspaceRole;
-  invited_by: string | null;
-  expires_at: string;
-  accepted_at: string | null;
-  inserted_at: string;
-}
-
-export interface WorkspaceInvitePreview {
-  workspace_name: string;
-  tenant_name: string;
-  role: WorkspaceRole;
-  email: string;
-  expires_at: string;
-  expired: boolean;
-  revoked: boolean;
-  accepted: boolean;
-}
-
-// ── Request payloads ─────────────────────────────────────────────────────────
-
-export interface CreateWorkspaceInviteParams {
-  email: string;
-  role?: WorkspaceRole;
-}
-
-// ── Response shapes ───────────────────────────────────────────────────────────
-
-/** Returned when the email was unknown — an invite was created. */
-export interface WorkspaceInviteCreatedResponse {
-  data: WorkspaceInvite;
-  type: "invited";
-}
-
-/** Returned when the email already had a tenant_members row — added directly. */
-export interface WorkspaceMemberAddedResponse {
-  data: WorkspaceMemberRecord;
-  type: "added";
-}
-
-export type CreateWorkspaceInviteResponse =
-  | WorkspaceInviteCreatedResponse
-  | WorkspaceMemberAddedResponse;
-
-export interface WorkspaceInviteListResponse {
-  data: WorkspaceInvite[];
-  total: number;
-}
-
-export interface WorkspaceInviteRevokeResponse {
-  invite_id: string;
-  revoked: boolean;
-}
-
-export interface WorkspaceInvitePreviewResponse {
-  data: WorkspaceInvitePreview;
-}
-
-export interface AcceptWorkspaceInviteResponse {
-  accepted: boolean;
-  workspace_id: string;
-  tenant_id: string;
-  role: WorkspaceRole;
-}
-
-// ── Main resource ─────────────────────────────────────────────────────────────
-
-export class WorkspaceInvites {
-  constructor(private readonly http: HttpClient) {}
-
-  /**
-   * Create a workspace invite or add a member directly.
-   *
-   * If `email` already maps to a tenant member the user is added directly and
-   * `type === "added"` is returned with a `WorkspaceMemberRecord`. Otherwise
-   * an invite row is created and `type === "invited"` is returned.
-   *
-   * `POST /workspaces/:id/invites`
-   */
-  async create(
-    workspaceId: string,
-    params: CreateWorkspaceInviteParams,
-  ): Promise<CreateWorkspaceInviteResponse> {
-    return this.http.post<CreateWorkspaceInviteResponse>(
-      `/workspaces/${workspaceId}/invites`,
-      params,
-    );
-  }
-
-  /**
-   * List all pending (non-expired, non-accepted, non-revoked) workspace invites.
-   *
-   * `GET /workspaces/:id/invites`
-   */
-  async list(workspaceId: string): Promise<WorkspaceInvite[]> {
-    const res = await this.http.get<WorkspaceInviteListResponse>(
-      `/workspaces/${workspaceId}/invites`,
-    );
-    return res.data ?? [];
-  }
-
-  /**
-   * Revoke a pending workspace invite.
-   *
-   * Already-revoked invites are idempotent (returns `revoked: true`). An invite
-   * that was legitimately accepted throws `409 ALREADY_ACCEPTED`.
-   *
-   * `DELETE /workspaces/:id/invites/:invite_id`
-   */
-  async revoke(
-    workspaceId: string,
-    inviteId: string,
-  ): Promise<WorkspaceInviteRevokeResponse> {
-    return this.http.delete<WorkspaceInviteRevokeResponse>(
-      `/workspaces/${workspaceId}/invites/${inviteId}`,
-    );
-  }
-
-  /**
-   * Preview a workspace invite by token (no auth required).
-   *
-   * Use this to render the invite landing page before prompting the user to
-   * log in or sign up. Returns `null` when the token is unknown or revoked.
-   *
-   * `GET /workspace-invites/:token`
-   */
-  async preview(token: string): Promise<WorkspaceInvitePreview | null> {
-    try {
-      const res = await this.http.get<WorkspaceInvitePreviewResponse>(
-        `/workspace-invites/${token}`,
-      );
-      return res.data ?? null;
-    } catch {
-      return null;
-    }
-  }
-
-  /**
-   * Accept a workspace invite on behalf of the authenticated user.
-   *
-   * The caller's JWT email must match the invite email (case-insensitive).
-   *
-   * Error codes:
-   * - `INVALID_TOKEN` (404) — token not found.
-   * - `EXPIRED` (410) — invite TTL elapsed.
-   * - `REVOKED` (409) — invite was revoked.
-   * - `ALREADY_ACCEPTED` (409) — already used.
-   * - `EMAIL_MISMATCH` (422) — JWT email differs from invite email.
-   *
-   * `POST /workspace-invites/:token/accept`
-   */
-  async accept(token: string): Promise<AcceptWorkspaceInviteResponse> {
-    return this.http.post<AcceptWorkspaceInviteResponse>(
-      `/workspace-invites/${token}/accept`,
-      {},
-    );
-  }
-}

package/src/resources/workspace-members.test.ts

@@ -1,121 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import { HttpClient } from "../http.js";
-import { WorkspaceMembers } from "./workspace-members.js";
-
-const mockGet = vi.fn();
-const mockPost = vi.fn();
-const mockPatch = vi.fn();
-const mockDelete = vi.fn();
-const mockRequest = vi.fn();
-
-function makeHttp(): HttpClient {
-  const http = {} as HttpClient;
-  http.get = mockGet;
-  http.post = mockPost;
-  http.patch = mockPatch;
-  http.delete = mockDelete;
-  http.request = mockRequest;
-  return http;
-}
-
-const MEMBER = {
-  user_id: "usr_abc",
-  email: "alice@example.com",
-  name: "Alice",
-  avatar_url: null,
-  role: "member" as const,
-  joined_at: "2026-05-01T10:00:00Z",
-  added_by: null,
-};
-
-beforeEach(() => {
-  vi.clearAllMocks();
-});
-
-describe("WorkspaceMembers", () => {
-  describe("list()", () => {
-    it("calls GET /workspaces/:id/members and returns array", async () => {
-      mockGet.mockResolvedValue({ data: [MEMBER] });
-      const resource = new WorkspaceMembers(makeHttp());
-
-      const result = await resource.list("ws-uuid");
-
-      expect(mockGet).toHaveBeenCalledWith("/workspaces/ws-uuid/members");
-      expect(result).toHaveLength(1);
-      expect(result[0].user_id).toBe("usr_abc");
-      expect(result[0].email).toBe("alice@example.com");
-      expect(result[0].role).toBe("member");
-    });
-
-    it("returns empty array when data is empty", async () => {
-      mockGet.mockResolvedValue({ data: [] });
-      const resource = new WorkspaceMembers(makeHttp());
-
-      const result = await resource.list("ws-uuid");
-      expect(result).toEqual([]);
-    });
-  });
-
-  describe("add()", () => {
-    it("calls POST /workspaces/:id/members with userId and role", async () => {
-      const record = {
-        user_id: "usr_def",
-        workspace_id: "ws-uuid",
-        role: "member",
-        joined_at: "2026-05-22T09:00:00Z",
-        added_by: "usr_abc",
-      };
-      mockPost.mockResolvedValue({ data: record });
-      const resource = new WorkspaceMembers(makeHttp());
-
-      const result = await resource.add("ws-uuid", {
-        user_id: "usr_def",
-        role: "member",
-      });
-
-      expect(mockPost).toHaveBeenCalledWith(
-        "/workspaces/ws-uuid/members",
-        expect.objectContaining({ user_id: "usr_def", role: "member" }),
-      );
-      expect(result.user_id).toBe("usr_def");
-      expect(result.role).toBe("member");
-    });
-  });
-
-  describe("updateRole()", () => {
-    it("calls PATCH /workspaces/:id/members/:userId with new role", async () => {
-      const updated = {
-        user_id: "usr_def",
-        workspace_id: "ws-uuid",
-        role: "admin",
-        joined_at: "2026-05-22T09:00:00Z",
-        added_by: "usr_abc",
-      };
-      mockPatch.mockResolvedValue({ data: updated });
-      const resource = new WorkspaceMembers(makeHttp());
-
-      const result = await resource.updateRole("ws-uuid", "usr_def", {
-        role: "admin",
-      });
-
-      expect(mockPatch).toHaveBeenCalledWith(
-        "/workspaces/ws-uuid/members/usr_def",
-        { role: "admin" },
-      );
-      expect(result.role).toBe("admin");
-    });
-  });
-
-  describe("remove()", () => {
-    it("calls DELETE /workspaces/:id/members/:userId", async () => {
-      mockDelete.mockResolvedValue({ deleted: true });
-      const resource = new WorkspaceMembers(makeHttp());
-
-      await resource.remove("ws-uuid", "usr_def");
-
-      expect(mockDelete).toHaveBeenCalledWith(
-        "/workspaces/ws-uuid/members/usr_def",
-      );
-    });
-  });
-});