feat(sdk): support custom API key prefix for client-side validation

[mishushakov]

Summary

• Both SDKs now accept a custom API key prefix via E2B_API_KEY_PREFIX env var or the apiKeyPrefix (JS) / api_key_prefix (Python) connection option, defaulting to e2b_.
• validateApiKey / validate_api_key use the configured prefix (regex-escaped) so deployments issuing keys with a non-default prefix pass client-side validation; the prefix is threaded through ApiClient from ConnectionConfig.
• Added unit tests covering prefix override, regex-metacharacter escaping, and env/arg precedence on ConnectionConfig; extracted the JS escapeRegExp helper into utils.ts.

Test plan

• pnpm run format, pnpm run lint, pnpm run typecheck
• pnpm exec vitest run tests/api/validateApiKey.test.ts tests/api/handleApiError.test.ts tests/connectionConfig.test.ts tests/sandbox/abortSignal.test.ts tests/template/abortSignal.test.ts tests/sandbox/configPropagation.test.ts
• poetry run pytest tests/test_validate_api_key.py tests/test_connection_config.py tests/test_api_client_transport.py tests/sync/sandbox_sync/test_config_propagation.py tests/async/sandbox_async/test_config_propagation.py

🤖 Generated with Claude Code

[changeset-bot]

🦋 Changeset detected

Latest commit: 764bfd2

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
e2b	Patch
@e2b/python-sdk	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[cursor]

PR Summary

Low Risk
Backward-compatible default prefix; changes only local format validation before requests, not server auth behavior.

Overview
Both JS and Python SDKs now take a configurable API key prefix for client-side format checks instead of hard-coding e2b_. The default stays e2b_; overrides use E2B_API_KEY_PREFIX or apiKeyPrefix / api_key_prefix on connection options, with constructor args beating the env var.

validateApiKey / validate_api_key build the check from that prefix (regex-escaped in JS via new escapeRegExp, re.escape in Python) and use it in error text. ApiClient validation reads the prefix from ConnectionConfig, and Python get_api_params propagates api_key_prefix. Unit tests cover custom prefixes, metacharacters in the prefix, and precedence. A patch changeset documents the release.

^{Reviewed by Cursor Bugbot for commit 764bfd2. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

Package Artifacts

Built from a00fcd3. Download artifacts from this workflow run.

JS SDK (e2b@2.28.1-mishushakov-custom-api-key-prefix.0):

npm install ./e2b-2.28.1-mishushakov-custom-api-key-prefix.0.tgz

CLI (@e2b/cli@2.10.5-mishushakov-custom-api-key-prefix.0):

npm install ./e2b-cli-2.10.5-mishushakov-custom-api-key-prefix.0.tgz

Python SDK (e2b==2.26.0+mishushakov-custom-api-key-prefix):

pip install ./e2b-2.26.0+mishushakov.custom.api.key.prefix-py3-none-any.whl