@mastra/e2b 0.3.2 → 0.3.3-alpha.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @mastra/e2b
 
+## 0.3.3-alpha.0
+
+### Patch Changes
+
+- Add prefix-scoped GCS sandbox mounts (parity with S3 and Azure) ([#17613](https://github.com/mastra-ai/mastra/pull/17613))
+
+  `GCSFilesystem.getMountConfig()` now includes its `prefix` (trailing slash
+  stripped), and the E2B `mountGCS` adds the corresponding `gcsfuse --only-dir`
+  flag when a prefix is set. This scopes the FUSE mount to the prefixed
+  subdirectory so sandbox paths map directly to prefixed GCS keys — matching the
+  existing S3 (`bucket:/prefix`) and Azure (`--subdirectory`) mounts. Previously a
+  prefixed `GCSFilesystem` dropped the prefix at both layers and mounted the entire
+  bucket inside the sandbox.
+
+  The prefix is validated with the existing `validatePrefix` (path-traversal guard)
+  and shell-escaped with `shellQuote`.
+
+- Updated dependencies [[`d468acb`](https://github.com/mastra-ai/mastra/commit/d468acb07aec1bb19a2cb0ada8042b05b46746b2), [`e9be4e7`](https://github.com/mastra-ai/mastra/commit/e9be4e747ec3d8b65548bff92f9377db06105376), [`d53cfc2`](https://github.com/mastra-ai/mastra/commit/d53cfc2c7f8d78343a4aa84ec4e129ba25f3325e), [`65799d4`](https://github.com/mastra-ai/mastra/commit/65799d4d549e5ebb9c848fbe3f51ac090f64becf), [`c268c89`](https://github.com/mastra-ai/mastra/commit/c268c89f4c63a93ee474d3cffdf3ea60bf00d4f2), [`d468acb`](https://github.com/mastra-ai/mastra/commit/d468acb07aec1bb19a2cb0ada8042b05b46746b2), [`0c72f03`](https://github.com/mastra-ai/mastra/commit/0c72f032abb13254df5a7856d64be2f207b8006d), [`3b45ea9`](https://github.com/mastra-ai/mastra/commit/3b45ea95015557a6cb9d70dc5252af54ab1b78ac), [`f084be1`](https://github.com/mastra-ai/mastra/commit/f084be1fcbe33ad7480913e44d6130c421c0976f)]:
+  - @mastra/core@1.42.0-alpha.0
+
 ## 0.3.2
 
 ### Patch Changes

package/dist/index.cjs

@@ -182,6 +182,7 @@ async function mountGCS(mountPath, config, ctx) {
   const idResult = await sandbox.commands.run("id -u && id -g");
   const [uid, gid] = idResult.stdout.trim().split("\n");
   const uidGidFlags = uid && gid ? `--uid=${uid} --gid=${gid}` : "";
+  const onlyDirFlag = config.prefix ? ` --only-dir=${shellQuote(validatePrefix(config.prefix))}` : "";
   const hasCredentials = !!config.serviceAccountKey;
   let mountCmd;
   if (hasCredentials) {
@@ -189,10 +190,10 @@ async function mountGCS(mountPath, config, ctx) {
     await sandbox.commands.run(`sudo rm -f ${keyPath}`);
     await sandbox.files.write(keyPath, config.serviceAccountKey);
     await sandbox.commands.run(`sudo chown root:root ${keyPath} && sudo chmod 600 ${keyPath}`);
-    mountCmd = `sudo gcsfuse --key-file=${keyPath} -o allow_other ${uidGidFlags} ${config.bucket} ${mountPath}`;
+    mountCmd = `sudo gcsfuse --key-file=${keyPath} -o allow_other ${uidGidFlags}${onlyDirFlag} ${config.bucket} ${mountPath}`;
   } else {
     logger.debug(`${LOG_PREFIX} No credentials provided, mounting GCS as public bucket (read-only)`);
-    mountCmd = `sudo gcsfuse --anonymous-access -o allow_other ${uidGidFlags} ${config.bucket} ${mountPath}`;
+    mountCmd = `sudo gcsfuse --anonymous-access -o allow_other ${uidGidFlags}${onlyDirFlag} ${config.bucket} ${mountPath}`;
   }
   logger.debug(`${LOG_PREFIX} Mounting GCS:`, mountCmd);
   try {