@declaw/sdk 1.0.4 → 1.1.1

package/dist/index.d.cts

@@ -75,6 +75,12 @@ declare class ApiClient {
     streamGet(path: string, opts?: RequestOpts): Promise<Response>;
     /**
      * Abort all in-flight requests and release resources.
+     *
+     * Since 1.1.1 the SDK maintains a process-wide shared ApiClient cache
+     * for hot class-method paths (Sandbox.create, Volumes.*, Template.*).
+     * Calling `close()` on a shared instance aborts its AbortController,
+     * which would cancel any concurrent in-flight call. Prefer
+     * `resetSharedClients()` if you want to tear down every cached client.
      */
     close(): void;
     private buildUrl;
@@ -87,6 +93,8 @@ declare class ApiClient {
      */
     private delay;
 }
+declare function getSharedClient(config: ConnectionConfig): ApiClient;
+declare function resetSharedClients(): void;
 
 /** CIDR for all traffic. */
 declare const ALL_TRAFFIC = "0.0.0.0/0";
@@ -924,6 +932,27 @@ declare class Pty {
     resize(pid: number, size: PtySize, requestTimeout?: number): Promise<void>;
 }
 
+/** Request-side shape of a volume attachment on Sandbox.create. */
+interface VolumeAttachment {
+    volumeId: string;
+    mountPath: string;
+}
+/** Server-side metadata for a single volume. */
+interface VolumeInfo {
+    volumeId: string;
+    ownerId: string;
+    name: string;
+    blobKey: string;
+    sizeBytes: number;
+    contentType: string;
+    metadata: Record<string, string>;
+    createdAt: string;
+}
+/** Convert a wire-format volume row into a VolumeInfo. */
+declare function parseVolumeInfo(data: Record<string, unknown>): VolumeInfo;
+/** Render a VolumeAttachment in wire (snake_case) form. */
+declare function volumeAttachmentToJSON(att: VolumeAttachment): Record<string, string>;
+
 /** Options for creating a sandbox. */
 interface SandboxOpts {
     /** Template to use. Defaults to 'base'. */
@@ -944,6 +973,11 @@ interface SandboxOpts {
     security?: SecurityPolicy;
     /** Lifecycle configuration. */
     lifecycle?: SandboxLifecycle;
+    /** Volumes to attach at sandbox-boot time. Each {volumeId, mountPath}
+     *  references a blob uploaded via `Volumes.create`; the orchestrator
+     *  materializes its contents under `mountPath` before the first command
+     *  is dispatched. */
+    volumes?: VolumeAttachment[];
     /** API key override. */
     apiKey?: string;
     /** Domain override (supports "host:port" format, e.g. "104.198.24.180:8080"). */
@@ -1159,7 +1193,11 @@ declare class Sandbox {
         requestTimeout?: number;
     }): Promise<Sandbox>;
     /**
-     * Close the underlying HTTP client and release resources.
+     * Historically closed the sandbox's HTTP client; since 1.1.1 the SDK
+     * maintains a process-wide shared ApiClient (see `getSharedClient` in
+     * api/client.ts) so per-sandbox close no longer tears the connection
+     * pool down. Kept as a no-op for backwards compatibility — call
+     * `resetSharedClients()` if you want to force a full teardown.
      */
     close(): void;
     /**
@@ -1407,4 +1445,35 @@ declare class Template {
     static getBuildStatus(buildId: string, opts?: GetBuildStatusOpts): Promise<TemplateBuildStatus>;
 }
 
-export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseWriteInfo, requiresTlsInterception, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry };
+/** Shared per-call options. */
+interface VolumeRequestOpts {
+    apiKey?: string;
+    domain?: string;
+    apiUrl?: string;
+    requestTimeout?: number;
+}
+/** Options for Volumes.create. */
+interface VolumeCreateOpts extends VolumeRequestOpts {
+    /** Override the Content-Type header. Defaults to application/gzip. */
+    contentType?: string;
+}
+/**
+ * Volumes: upload a tarball once and attach it to one or many sandboxes.
+ *
+ * Phase 1: the body must be a gzip-compressed tar archive; the server
+ * materializes regular-file entries inside the sandbox filesystem under
+ * the attachment's mount_path. Symlinks, hardlinks, and device nodes
+ * are dropped on the server for safety.
+ */
+declare class Volumes {
+    /** Create a volume by streaming a tarball to the server. */
+    static create(name: string, data: Uint8Array | ArrayBuffer, opts?: VolumeCreateOpts): Promise<VolumeInfo>;
+    /** Fetch metadata for a single volume. */
+    static get(volumeId: string, opts?: VolumeRequestOpts): Promise<VolumeInfo>;
+    /** List all volumes owned by the caller, newest first. */
+    static list(opts?: VolumeRequestOpts): Promise<VolumeInfo[]>;
+    /** Delete a volume and its blob. Idempotent on the wire. */
+    static delete(volumeId: string, opts?: VolumeRequestOpts): Promise<void>;
+}
+
+export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, type VolumeAttachment, type VolumeCreateOpts, type VolumeInfo, type VolumeRequestOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, getSharedClient, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, resetSharedClients, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, volumeAttachmentToJSON };

package/dist/index.d.ts

@@ -75,6 +75,12 @@ declare class ApiClient {
     streamGet(path: string, opts?: RequestOpts): Promise<Response>;
     /**
      * Abort all in-flight requests and release resources.
+     *
+     * Since 1.1.1 the SDK maintains a process-wide shared ApiClient cache
+     * for hot class-method paths (Sandbox.create, Volumes.*, Template.*).
+     * Calling `close()` on a shared instance aborts its AbortController,
+     * which would cancel any concurrent in-flight call. Prefer
+     * `resetSharedClients()` if you want to tear down every cached client.
      */
     close(): void;
     private buildUrl;
@@ -87,6 +93,8 @@ declare class ApiClient {
      */
     private delay;
 }
+declare function getSharedClient(config: ConnectionConfig): ApiClient;
+declare function resetSharedClients(): void;
 
 /** CIDR for all traffic. */
 declare const ALL_TRAFFIC = "0.0.0.0/0";
@@ -924,6 +932,27 @@ declare class Pty {
     resize(pid: number, size: PtySize, requestTimeout?: number): Promise<void>;
 }
 
+/** Request-side shape of a volume attachment on Sandbox.create. */
+interface VolumeAttachment {
+    volumeId: string;
+    mountPath: string;
+}
+/** Server-side metadata for a single volume. */
+interface VolumeInfo {
+    volumeId: string;
+    ownerId: string;
+    name: string;
+    blobKey: string;
+    sizeBytes: number;
+    contentType: string;
+    metadata: Record<string, string>;
+    createdAt: string;
+}
+/** Convert a wire-format volume row into a VolumeInfo. */
+declare function parseVolumeInfo(data: Record<string, unknown>): VolumeInfo;
+/** Render a VolumeAttachment in wire (snake_case) form. */
+declare function volumeAttachmentToJSON(att: VolumeAttachment): Record<string, string>;
+
 /** Options for creating a sandbox. */
 interface SandboxOpts {
     /** Template to use. Defaults to 'base'. */
@@ -944,6 +973,11 @@ interface SandboxOpts {
     security?: SecurityPolicy;
     /** Lifecycle configuration. */
     lifecycle?: SandboxLifecycle;
+    /** Volumes to attach at sandbox-boot time. Each {volumeId, mountPath}
+     *  references a blob uploaded via `Volumes.create`; the orchestrator
+     *  materializes its contents under `mountPath` before the first command
+     *  is dispatched. */
+    volumes?: VolumeAttachment[];
     /** API key override. */
     apiKey?: string;
     /** Domain override (supports "host:port" format, e.g. "104.198.24.180:8080"). */
@@ -1159,7 +1193,11 @@ declare class Sandbox {
         requestTimeout?: number;
     }): Promise<Sandbox>;
     /**
-     * Close the underlying HTTP client and release resources.
+     * Historically closed the sandbox's HTTP client; since 1.1.1 the SDK
+     * maintains a process-wide shared ApiClient (see `getSharedClient` in
+     * api/client.ts) so per-sandbox close no longer tears the connection
+     * pool down. Kept as a no-op for backwards compatibility — call
+     * `resetSharedClients()` if you want to force a full teardown.
      */
     close(): void;
     /**
@@ -1407,4 +1445,35 @@ declare class Template {
     static getBuildStatus(buildId: string, opts?: GetBuildStatusOpts): Promise<TemplateBuildStatus>;
 }
 
-export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseWriteInfo, requiresTlsInterception, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry };
+/** Shared per-call options. */
+interface VolumeRequestOpts {
+    apiKey?: string;
+    domain?: string;
+    apiUrl?: string;
+    requestTimeout?: number;
+}
+/** Options for Volumes.create. */
+interface VolumeCreateOpts extends VolumeRequestOpts {
+    /** Override the Content-Type header. Defaults to application/gzip. */
+    contentType?: string;
+}
+/**
+ * Volumes: upload a tarball once and attach it to one or many sandboxes.
+ *
+ * Phase 1: the body must be a gzip-compressed tar archive; the server
+ * materializes regular-file entries inside the sandbox filesystem under
+ * the attachment's mount_path. Symlinks, hardlinks, and device nodes
+ * are dropped on the server for safety.
+ */
+declare class Volumes {
+    /** Create a volume by streaming a tarball to the server. */
+    static create(name: string, data: Uint8Array | ArrayBuffer, opts?: VolumeCreateOpts): Promise<VolumeInfo>;
+    /** Fetch metadata for a single volume. */
+    static get(volumeId: string, opts?: VolumeRequestOpts): Promise<VolumeInfo>;
+    /** List all volumes owned by the caller, newest first. */
+    static list(opts?: VolumeRequestOpts): Promise<VolumeInfo[]>;
+    /** Delete a volume and its blob. Idempotent on the wire. */
+    static delete(volumeId: string, opts?: VolumeRequestOpts): Promise<void>;
+}
+
+export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, type VolumeAttachment, type VolumeCreateOpts, type VolumeInfo, type VolumeRequestOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, getSharedClient, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, resetSharedClients, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, volumeAttachmentToJSON };