@declaw/sdk 1.1.0 → 1.1.1

package/dist/index.d.cts

@@ -75,6 +75,12 @@ declare class ApiClient {
     streamGet(path: string, opts?: RequestOpts): Promise<Response>;
     /**
      * Abort all in-flight requests and release resources.
+     *
+     * Since 1.1.1 the SDK maintains a process-wide shared ApiClient cache
+     * for hot class-method paths (Sandbox.create, Volumes.*, Template.*).
+     * Calling `close()` on a shared instance aborts its AbortController,
+     * which would cancel any concurrent in-flight call. Prefer
+     * `resetSharedClients()` if you want to tear down every cached client.
      */
     close(): void;
     private buildUrl;
@@ -87,6 +93,8 @@ declare class ApiClient {
      */
     private delay;
 }
+declare function getSharedClient(config: ConnectionConfig): ApiClient;
+declare function resetSharedClients(): void;
 
 /** CIDR for all traffic. */
 declare const ALL_TRAFFIC = "0.0.0.0/0";
@@ -1185,7 +1193,11 @@ declare class Sandbox {
         requestTimeout?: number;
     }): Promise<Sandbox>;
     /**
-     * Close the underlying HTTP client and release resources.
+     * Historically closed the sandbox's HTTP client; since 1.1.1 the SDK
+     * maintains a process-wide shared ApiClient (see `getSharedClient` in
+     * api/client.ts) so per-sandbox close no longer tears the connection
+     * pool down. Kept as a no-op for backwards compatibility — call
+     * `resetSharedClients()` if you want to force a full teardown.
      */
     close(): void;
     /**
@@ -1464,4 +1476,4 @@ declare class Volumes {
     static delete(volumeId: string, opts?: VolumeRequestOpts): Promise<void>;
 }
 
-export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, type VolumeAttachment, type VolumeCreateOpts, type VolumeInfo, type VolumeRequestOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, volumeAttachmentToJSON };
+export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, type VolumeAttachment, type VolumeCreateOpts, type VolumeInfo, type VolumeRequestOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, getSharedClient, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, resetSharedClients, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, volumeAttachmentToJSON };

package/dist/index.d.ts

@@ -75,6 +75,12 @@ declare class ApiClient {
     streamGet(path: string, opts?: RequestOpts): Promise<Response>;
     /**
      * Abort all in-flight requests and release resources.
+     *
+     * Since 1.1.1 the SDK maintains a process-wide shared ApiClient cache
+     * for hot class-method paths (Sandbox.create, Volumes.*, Template.*).
+     * Calling `close()` on a shared instance aborts its AbortController,
+     * which would cancel any concurrent in-flight call. Prefer
+     * `resetSharedClients()` if you want to tear down every cached client.
      */
     close(): void;
     private buildUrl;
@@ -87,6 +93,8 @@ declare class ApiClient {
      */
     private delay;
 }
+declare function getSharedClient(config: ConnectionConfig): ApiClient;
+declare function resetSharedClients(): void;
 
 /** CIDR for all traffic. */
 declare const ALL_TRAFFIC = "0.0.0.0/0";
@@ -1185,7 +1193,11 @@ declare class Sandbox {
         requestTimeout?: number;
     }): Promise<Sandbox>;
     /**
-     * Close the underlying HTTP client and release resources.
+     * Historically closed the sandbox's HTTP client; since 1.1.1 the SDK
+     * maintains a process-wide shared ApiClient (see `getSharedClient` in
+     * api/client.ts) so per-sandbox close no longer tears the connection
+     * pool down. Kept as a no-op for backwards compatibility — call
+     * `resetSharedClients()` if you want to force a full teardown.
      */
     close(): void;
     /**
@@ -1464,4 +1476,4 @@ declare class Volumes {
     static delete(volumeId: string, opts?: VolumeRequestOpts): Promise<void>;
 }
 
-export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, type VolumeAttachment, type VolumeCreateOpts, type VolumeInfo, type VolumeRequestOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, volumeAttachmentToJSON };
+export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, type VolumeAttachment, type VolumeCreateOpts, type VolumeInfo, type VolumeRequestOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, getSharedClient, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, resetSharedClients, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, volumeAttachmentToJSON };

package/dist/index.js

@@ -171,6 +171,12 @@ var ApiClient = class {
   }
   /**
    * Abort all in-flight requests and release resources.
+   *
+   * Since 1.1.1 the SDK maintains a process-wide shared ApiClient cache
+   * for hot class-method paths (Sandbox.create, Volumes.*, Template.*).
+   * Calling `close()` on a shared instance aborts its AbortController,
+   * which would cancel any concurrent in-flight call. Prefer
+   * `resetSharedClients()` if you want to tear down every cached client.
    */
   close() {
     this.abortController.abort();
@@ -290,6 +296,28 @@ var ApiClient = class {
     await new Promise((resolve) => setTimeout(resolve, ms));
   }
 };
+var _sharedClients = /* @__PURE__ */ new Map();
+function sharedKey(config) {
+  return [config.apiKey ?? "", config.apiUrl, config.requestTimeout ?? ""].join("|");
+}
+function getSharedClient(config) {
+  const key = sharedKey(config);
+  let client = _sharedClients.get(key);
+  if (!client) {
+    client = new ApiClient(config);
+    _sharedClients.set(key, client);
+  }
+  return client;
+}
+function resetSharedClients() {
+  for (const client of _sharedClients.values()) {
+    try {
+      client.close();
+    } catch {
+    }
+  }
+  _sharedClients.clear();
+}
 
 // src/sandbox/network.ts
 var ALL_TRAFFIC = "0.0.0.0/0";
@@ -1839,54 +1867,49 @@ var Sandbox = class _Sandbox {
       apiUrl: opts?.apiUrl,
       requestTimeout: opts?.requestTimeout
     });
-    const client = new ApiClient(config);
-    try {
-      const body = {
-        template: opts?.template ?? DEFAULT_TEMPLATE,
-        timeout: opts?.timeout ?? DEFAULT_TIMEOUT,
-        secure: opts?.secure ?? true
-      };
-      if (opts?.metadata) {
-        body.metadata = opts.metadata;
-      }
-      if (opts?.envs) {
-        body.envs = opts.envs;
-      }
-      if (opts?.network) {
-        body.network = networkOptsToJSON(opts.network);
-      } else if (opts?.allowInternetAccess === false) {
-        body.network = { deny_out: [ALL_TRAFFIC] };
-      }
-      if (opts?.security) {
-        body.security = { policy_json: JSON.stringify(securityPolicyToJSON(opts.security)) };
-        if (opts.security.network && !body.network) {
-          body.network = typeof opts.security.network === "object" && "allowOut" in opts.security.network ? networkOptsToJSON(opts.security.network) : opts.security.network;
-        }
-      }
-      if (opts?.lifecycle) {
-        body.lifecycle = lifecycleToJSON(opts.lifecycle);
-      }
-      if (opts?.volumes && opts.volumes.length > 0) {
-        body.volumes = opts.volumes.map(volumeAttachmentToJSON);
+    const client = getSharedClient(config);
+    const body = {
+      template: opts?.template ?? DEFAULT_TEMPLATE,
+      timeout: opts?.timeout ?? DEFAULT_TIMEOUT,
+      secure: opts?.secure ?? true
+    };
+    if (opts?.metadata) {
+      body.metadata = opts.metadata;
+    }
+    if (opts?.envs) {
+      body.envs = opts.envs;
+    }
+    if (opts?.network) {
+      body.network = networkOptsToJSON(opts.network);
+    } else if (opts?.allowInternetAccess === false) {
+      body.network = { deny_out: [ALL_TRAFFIC] };
+    }
+    if (opts?.security) {
+      body.security = { policy_json: JSON.stringify(securityPolicyToJSON(opts.security)) };
+      if (opts.security.network && !body.network) {
+        body.network = typeof opts.security.network === "object" && "allowOut" in opts.security.network ? networkOptsToJSON(opts.security.network) : opts.security.network;
       }
-      const data = await client.post("/sandboxes", {
-        json: body,
-        timeout: opts?.requestTimeout
-      });
-      const sandboxId = data.sandbox_id;
-      assertValidId(sandboxId, "sandbox ID (from server)");
-      return new _Sandbox(
-        sandboxId,
-        config,
-        client,
-        data.envd_access_token,
-        data.sandbox_domain,
-        data.traffic_access_token
-      );
-    } catch (error) {
-      client.close();
-      throw error;
     }
+    if (opts?.lifecycle) {
+      body.lifecycle = lifecycleToJSON(opts.lifecycle);
+    }
+    if (opts?.volumes && opts.volumes.length > 0) {
+      body.volumes = opts.volumes.map(volumeAttachmentToJSON);
+    }
+    const data = await client.post("/sandboxes", {
+      json: body,
+      timeout: opts?.requestTimeout
+    });
+    const sandboxId = data.sandbox_id;
+    assertValidId(sandboxId, "sandbox ID (from server)");
+    return new _Sandbox(
+      sandboxId,
+      config,
+      client,
+      data.envd_access_token,
+      data.sandbox_domain,
+      data.traffic_access_token
+    );
   }
   /**
    * Connect to an existing sandbox.
@@ -1903,23 +1926,18 @@ var Sandbox = class _Sandbox {
       apiUrl: opts?.apiUrl,
       requestTimeout: opts?.requestTimeout
     });
-    const client = new ApiClient(config);
-    try {
-      const data = await client.get(`/sandboxes/${sandboxId}`, {
-        timeout: opts?.requestTimeout
-      });
-      return new _Sandbox(
-        data.sandbox_id,
-        config,
-        client,
-        data.envd_access_token,
-        data.sandbox_domain,
-        data.traffic_access_token
-      );
-    } catch (error) {
-      client.close();
-      throw error;
-    }
+    const client = getSharedClient(config);
+    const data = await client.get(`/sandboxes/${sandboxId}`, {
+      timeout: opts?.requestTimeout
+    });
+    return new _Sandbox(
+      data.sandbox_id,
+      config,
+      client,
+      data.envd_access_token,
+      data.sandbox_domain,
+      data.traffic_access_token
+    );
   }
   /**
    * List sandboxes.
@@ -1936,35 +1954,31 @@ var Sandbox = class _Sandbox {
       apiUrl: opts?.apiUrl,
       requestTimeout: opts?.requestTimeout
     });
-    const client = new ApiClient(config);
-    try {
-      const params = {};
-      if (opts?.query) {
-        for (const [key, value] of Object.entries(opts.query)) {
-          params[key] = value;
-        }
-      }
-      if (opts?.limit !== void 0) {
-        params.limit = String(opts.limit);
-      }
-      if (opts?.nextToken) {
-        params.next_token = opts.nextToken;
+    const client = getSharedClient(config);
+    const params = {};
+    if (opts?.query) {
+      for (const [key, value] of Object.entries(opts.query)) {
+        params[key] = value;
       }
-      const data = await client.get("/sandboxes", {
-        params,
-        timeout: opts?.requestTimeout
-      });
-      const rawSandboxes = data.sandboxes ?? [];
-      const sandboxes = rawSandboxes.map(
-        (s) => parseSandboxInfo(s)
-      );
-      return {
-        sandboxes,
-        nextToken: data.next_token ?? void 0
-      };
-    } finally {
-      client.close();
     }
+    if (opts?.limit !== void 0) {
+      params.limit = String(opts.limit);
+    }
+    if (opts?.nextToken) {
+      params.next_token = opts.nextToken;
+    }
+    const data = await client.get("/sandboxes", {
+      params,
+      timeout: opts?.requestTimeout
+    });
+    const rawSandboxes = data.sandboxes ?? [];
+    const sandboxes = rawSandboxes.map(
+      (s) => parseSandboxInfo(s)
+    );
+    return {
+      sandboxes,
+      nextToken: data.next_token ?? void 0
+    };
   }
   /**
    * Kill this sandbox.
@@ -2116,33 +2130,31 @@ var Sandbox = class _Sandbox {
       apiUrl: options.apiUrl,
       requestTimeout: options.requestTimeout
     });
-    const client = new ApiClient(config);
-    try {
-      const query = options.snapshotId ? `?snapshot_id=${encodeURIComponent(options.snapshotId)}` : "";
-      await client.post(`/sandboxes/${sandboxId}/restore${query}`, {
-        timeout: options.requestTimeout
-      });
-      const data = await client.get(`/sandboxes/${sandboxId}`, {
-        timeout: options.requestTimeout
-      });
-      return new _Sandbox(
-        data.sandbox_id,
-        config,
-        client,
-        data.envd_access_token,
-        data.sandbox_domain,
-        data.traffic_access_token
-      );
-    } catch (error) {
-      client.close();
-      throw error;
-    }
+    const client = getSharedClient(config);
+    const query = options.snapshotId ? `?snapshot_id=${encodeURIComponent(options.snapshotId)}` : "";
+    await client.post(`/sandboxes/${sandboxId}/restore${query}`, {
+      timeout: options.requestTimeout
+    });
+    const data = await client.get(`/sandboxes/${sandboxId}`, {
+      timeout: options.requestTimeout
+    });
+    return new _Sandbox(
+      data.sandbox_id,
+      config,
+      client,
+      data.envd_access_token,
+      data.sandbox_domain,
+      data.traffic_access_token
+    );
   }
   /**
-   * Close the underlying HTTP client and release resources.
+   * Historically closed the sandbox's HTTP client; since 1.1.1 the SDK
+   * maintains a process-wide shared ApiClient (see `getSharedClient` in
+   * api/client.ts) so per-sandbox close no longer tears the connection
+   * pool down. Kept as a no-op for backwards compatibility — call
+   * `resetSharedClients()` if you want to force a full teardown.
    */
   close() {
-    this._client.close();
   }
   /**
    * Support `await using sandbox = await Sandbox.create(...)` for automatic cleanup.
@@ -2372,36 +2384,32 @@ var Template = class {
       domain: opts?.domain,
       requestTimeout: opts?.requestTimeout
     });
-    const client = new ApiClient(config);
-    try {
-      const body = {
-        template: template.toJSON(),
-        alias
-      };
-      if (opts?.cpuCount !== void 0) {
-        body.cpu_count = opts.cpuCount;
-      }
-      if (opts?.memoryMb !== void 0) {
-        body.memory_mb = opts.memoryMb;
-      }
-      if (opts?.diskMb !== void 0) {
-        body.disk_mb = opts.diskMb;
-      }
-      const data = await client.post("/templates/build", {
-        json: body,
-        timeout: opts?.requestTimeout
-      });
-      const response = data;
-      const result = parseBuildInfo(response);
-      if (opts?.onBuildLogs && Array.isArray(response.logs)) {
-        for (const log of response.logs) {
-          opts.onBuildLogs(log);
-        }
+    const client = getSharedClient(config);
+    const body = {
+      template: template.toJSON(),
+      alias
+    };
+    if (opts?.cpuCount !== void 0) {
+      body.cpu_count = opts.cpuCount;
+    }
+    if (opts?.memoryMb !== void 0) {
+      body.memory_mb = opts.memoryMb;
+    }
+    if (opts?.diskMb !== void 0) {
+      body.disk_mb = opts.diskMb;
+    }
+    const data = await client.post("/templates/build", {
+      json: body,
+      timeout: opts?.requestTimeout
+    });
+    const response = data;
+    const result = parseBuildInfo(response);
+    if (opts?.onBuildLogs && Array.isArray(response.logs)) {
+      for (const log of response.logs) {
+        opts.onBuildLogs(log);
       }
-      return result;
-    } finally {
-      client.close();
     }
+    return result;
   }
   /**
    * Start a template build in the background.
@@ -2414,30 +2422,26 @@ var Template = class {
       domain: opts?.domain,
       requestTimeout: opts?.requestTimeout
     });
-    const client = new ApiClient(config);
-    try {
-      const body = {
-        template: template.toJSON(),
-        alias,
-        background: true
-      };
-      if (opts?.cpuCount !== void 0) {
-        body.cpu_count = opts.cpuCount;
-      }
-      if (opts?.memoryMb !== void 0) {
-        body.memory_mb = opts.memoryMb;
-      }
-      if (opts?.diskMb !== void 0) {
-        body.disk_mb = opts.diskMb;
-      }
-      const data = await client.post("/templates/build", {
-        json: body,
-        timeout: opts?.requestTimeout
-      });
-      return parseBuildInfo(data);
-    } finally {
-      client.close();
+    const client = getSharedClient(config);
+    const body = {
+      template: template.toJSON(),
+      alias,
+      background: true
+    };
+    if (opts?.cpuCount !== void 0) {
+      body.cpu_count = opts.cpuCount;
     }
+    if (opts?.memoryMb !== void 0) {
+      body.memory_mb = opts.memoryMb;
+    }
+    if (opts?.diskMb !== void 0) {
+      body.disk_mb = opts.diskMb;
+    }
+    const data = await client.post("/templates/build", {
+      json: body,
+      timeout: opts?.requestTimeout
+    });
+    return parseBuildInfo(data);
   }
   /**
    * Get the status of a template build.
@@ -2451,15 +2455,11 @@ var Template = class {
       domain: opts?.domain,
       requestTimeout: opts?.requestTimeout
     });
-    const client = new ApiClient(config);
-    try {
-      const data = await client.get(`/templates/builds/${buildId}`, {
-        timeout: opts?.requestTimeout
-      });
-      return parseTemplateBuildStatus(data);
-    } finally {
-      client.close();
-    }
+    const client = getSharedClient(config);
+    const data = await client.get(`/templates/builds/${buildId}`, {
+      timeout: opts?.requestTimeout
+    });
+    return parseTemplateBuildStatus(data);
   }
 };
 
@@ -2484,19 +2484,15 @@ var Volumes = class {
       apiUrl: opts?.apiUrl,
       requestTimeout: opts?.requestTimeout
     });
-    const client = new ApiClient(config);
-    try {
-      const body = data instanceof Uint8Array ? data : new Uint8Array(data);
-      const resp = await client.post("/volumes", {
-        params: { name },
-        body,
-        headers: { "Content-Type": opts?.contentType ?? "application/gzip" },
-        timeout: opts?.requestTimeout
-      });
-      return parseVolumeInfo(resp);
-    } finally {
-      client.close();
-    }
+    const client = getSharedClient(config);
+    const body = data instanceof Uint8Array ? data : new Uint8Array(data);
+    const resp = await client.post("/volumes", {
+      params: { name },
+      body,
+      headers: { "Content-Type": opts?.contentType ?? "application/gzip" },
+      timeout: opts?.requestTimeout
+    });
+    return parseVolumeInfo(resp);
   }
   /** Fetch metadata for a single volume. */
   static async get(volumeId, opts) {
@@ -2507,15 +2503,11 @@ var Volumes = class {
       apiUrl: opts?.apiUrl,
       requestTimeout: opts?.requestTimeout
     });
-    const client = new ApiClient(config);
-    try {
-      const resp = await client.get(`/volumes/${volumeId}`, {
-        timeout: opts?.requestTimeout
-      });
-      return parseVolumeInfo(resp);
-    } finally {
-      client.close();
-    }
+    const client = getSharedClient(config);
+    const resp = await client.get(`/volumes/${volumeId}`, {
+      timeout: opts?.requestTimeout
+    });
+    return parseVolumeInfo(resp);
   }
   /** List all volumes owned by the caller, newest first. */
   static async list(opts) {
@@ -2525,16 +2517,12 @@ var Volumes = class {
       apiUrl: opts?.apiUrl,
       requestTimeout: opts?.requestTimeout
     });
-    const client = new ApiClient(config);
-    try {
-      const resp = await client.get("/volumes", {
-        timeout: opts?.requestTimeout
-      });
-      const rows = resp.volumes ?? [];
-      return rows.map(parseVolumeInfo);
-    } finally {
-      client.close();
-    }
+    const client = getSharedClient(config);
+    const resp = await client.get("/volumes", {
+      timeout: opts?.requestTimeout
+    });
+    const rows = resp.volumes ?? [];
+    return rows.map(parseVolumeInfo);
   }
   /** Delete a volume and its blob. Idempotent on the wire. */
   static async delete(volumeId, opts) {
@@ -2545,12 +2533,8 @@ var Volumes = class {
       apiUrl: opts?.apiUrl,
       requestTimeout: opts?.requestTimeout
     });
-    const client = new ApiClient(config);
-    try {
-      await client.delete(`/volumes/${volumeId}`, { timeout: opts?.requestTimeout });
-    } finally {
-      client.close();
-    }
+    const client = getSharedClient(config);
+    await client.delete(`/volumes/${volumeId}`, { timeout: opts?.requestTimeout });
   }
 };
 export {
@@ -2603,6 +2587,7 @@ export {
   createToxicityConfig,
   createTransformationRule,
   domainMatches,
+  getSharedClient,
   invisibleTextConfigToJSON,
   isSensitive,
   networkPolicyToOpts,
@@ -2630,6 +2615,7 @@ export {
   parseVolumeInfo,
   parseWriteInfo,
   requiresTlsInterception,
+  resetSharedClients,
   securityPolicyToJSON,
   toxicityConfigToJSON,
   validateNetworkEntry,