Mastra 1.53.0 adds read-only local sandboxes using macOS Seatbelt and Linux Bubblewrap

GitHub (mastra-ai/mastra)·medium signalXBlueskyLinkedInCopy link

The @mastra/core 1.53.0 release, published July 29, adds a readOnly option to both LocalFilesystem and NativeSandboxConfig so an agent's working directory can be mounted read-only on macOS via Seatbelt or Linux via Bubblewrap. The release also stops auto-injecting channel reaction tools (add_reaction, remove_reaction) into channel-bearing agents, a breaking change that trims implicit tool surface, and replaces distributed advisory locks in Factory work-item processing with atomic claims and idempotent replay. @mastra/libsql also fixes concurrent-write data loss in observational memory.