@mastra/daytona 0.2.1 → 0.3.0-alpha.0

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # @mastra/daytona
 
+## 0.3.0-alpha.0
+
+### Minor Changes
+
+- Added S3 prefix (subdirectory) mount support. You can now mount a specific folder within an S3 bucket instead of the entire bucket by setting the `prefix` option on your S3 filesystem. ([#15171](https://github.com/mastra-ai/mastra/pull/15171))
+
+  **Example:**
+
+  ```typescript
+  const fs = new S3Filesystem({
+    bucket: 'my-bucket',
+    region: 'us-east-1',
+    prefix: 'workspace/data',
+    accessKeyId: process.env.AWS_ACCESS_KEY_ID!,
+    secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY!,
+  });
+  ```
+
+  When mounted in a sandbox, only the contents under `workspace/data/` in the bucket will be visible at the mount path. This uses the s3fs `bucket:/path` syntax under the hood.
+
+  Closes #15147.
+
+### Patch Changes
+
+- Updated dependencies [[`f112db1`](https://github.com/mastra-ai/mastra/commit/f112db179557ae9b5a0f1d25dc47f928d7d61cd9), [`21d9706`](https://github.com/mastra-ai/mastra/commit/21d970604d89eee970cbf8013d26d7551aff6ea5)]:
+  - @mastra/core@1.26.1-alpha.0
+
 ## 0.2.1
 
 ### Patch Changes

package/dist/index.cjs

@@ -38,6 +38,21 @@ function validateEndpoint(endpoint) {
     throw new Error(`Invalid endpoint URL scheme: "${parsed.protocol}". Only http: and https: are allowed.`);
   }
 }
+function validatePrefix(prefix) {
+  let normalized = prefix;
+  while (normalized.startsWith("/")) normalized = normalized.slice(1);
+  while (normalized.endsWith("/")) normalized = normalized.slice(0, -1);
+  if (!normalized) {
+    throw new Error("Mount prefix cannot be empty after normalization.");
+  }
+  if (normalized.includes("//") || normalized.split("/").some((s) => s === "." || s === "..")) {
+    throw new Error(`Invalid mount prefix: "${prefix}". Path traversal is not allowed.`);
+  }
+  if (/[\x00-\x1f\x7f]/.test(normalized)) {
+    throw new Error(`Invalid mount prefix: "${prefix}". Control characters are not allowed.`);
+  }
+  return normalized;
+}
 async function runCommand(sandbox, command, options) {
   const result = await sandbox.process.executeCommand(
     command,
@@ -131,7 +146,12 @@ Sandbox network response: ${checkOutput}` : "")
     mountOptions.push("ro");
     logger.debug(`${LOG_PREFIX} Mounting as read-only`);
   }
-  const mountCmd = `s3fs ${shellQuote(config.bucket)} ${quotedMountPath} -o ${mountOptions.join(" -o ")}`;
+  let bucketArg = config.bucket;
+  if (config.prefix) {
+    const normalizedPrefix = validatePrefix(config.prefix);
+    bucketArg = `${config.bucket}:/${normalizedPrefix}`;
+  }
+  const mountCmd = `s3fs ${shellQuote(bucketArg)} ${quotedMountPath} -o ${mountOptions.join(" -o ")}`;
   logger.debug(`${LOG_PREFIX} Mounting S3:`, hasCredentials ? mountCmd.replace(credentialsPath, "***") : mountCmd);
   const result = await run(mountCmd, 6e4);
   logger.debug(`${LOG_PREFIX} s3fs result:`, {