@mastra/deployer 1.76.0-alpha.7 → 1.76.0-alpha.9

package/dist/docs/SKILL.md

@@ -3,7 +3,7 @@ name: mastra-deployer
 description: Documentation for @mastra/deployer. Use when working with @mastra/deployer APIs, configuration, or implementation.
 metadata:
   package: "@mastra/deployer"
-  version: "1.76.0-alpha.7"
+  version: "1.76.0-alpha.9"
 ---
 
 ## When to use

package/dist/docs/assets/SOURCE_MAP.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.76.0-alpha.7",
+  "version": "1.76.0-alpha.9",
   "package": "@mastra/deployer",
   "exports": {},
   "modules": {}

package/dist/docs/references/docs-deployment-mastra-server.md

@@ -143,7 +143,7 @@ To add your own endpoints, see [Custom API Routes](https://mastra.ai/docs/server
 
 ## Graceful shutdown and rolling deploys
 
-By default, the generated server handles `SIGINT` and `SIGTERM`. It stops accepting connections, waits up to [`server.drainTimeout`](https://mastra.ai/reference/configuration) for active requests and streams, then runs `mastra.shutdown()`. Shutdown gives in-flight workflow runs (including durable agent runs) the same drain window to finish before workers and pub/sub subscriptions are torn down. The drain timeout defaults to 5 seconds. A second signal terminates the process immediately. See [`server.handleShutdownSignals`](https://mastra.ai/reference/configuration) if you need to manage signals yourself.
+By default, the generated server handles `SIGINT` and `SIGTERM`. It stops accepting connections, waits up to [`server.drainTimeout`](https://mastra.ai/reference/configuration) for active requests and streams, then runs `mastra.shutdown()`. Shutdown gives in-flight workflow runs (including durable agent runs) the same drain window to finish before workers and pub/sub subscriptions are torn down. A durable agent run still executing after the window stops and releases its claim on the run, so the next boot can recover it right away. The drain timeout defaults to 5 seconds. A second signal terminates the process immediately. See [`server.handleShutdownSignals`](https://mastra.ai/reference/configuration) if you need to manage signals yourself.
 
 Increase `drainTimeout` when your hosting platform's termination grace period can accommodate longer turns. The HTTP drain and the workflow drain run one after the other, so keep enough time for both plus shutdown cleanup.
 
@@ -163,7 +163,7 @@ export const mastra = new Mastra({
 })
 ```
 
-A plain `agent.stream()` call can't resume after its server process exits. If a stream ends without its expected terminal event, treat the turn as interrupted and let the client retry or reconcile it. Use [durable agents](https://mastra.ai/docs/harness/durable-agents) when turns must survive process replacement. [Crash recovery](https://mastra.ai/docs/harness/durable-agents) requires shared persistent run storage and idempotent tools. Replaying missed events after a restart also requires a shared persistent cache such as Redis because the default event cache is in-memory. Multi-replica recovery doesn't yet use a distributed lease.
+A plain `agent.stream()` call can't resume after its server process exits. If a stream ends without its expected terminal event, treat the turn as interrupted and let the client retry or reconcile it. Use [durable agents](https://mastra.ai/docs/harness/durable-agents) when turns must survive process replacement. [Crash recovery](https://mastra.ai/docs/harness/durable-agents) requires shared persistent run storage and idempotent tools. Replaying missed events after a restart also requires a shared persistent cache such as Redis because the default event cache is in-memory. Recovering from multiple replicas requires a storage adapter that supports run fencing or a PubSub backend whose lease every replica shares. See [multi-instance deployments](https://mastra.ai/docs/harness/durable-agents).
 
 ## Troubleshooting
 

package/dist/server/handlers/restart-active-runs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"restart-active-runs.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/restart-active-runs.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAIpC,wBAAsB,mCAAmC,CAAC,CAAC,EAAE,OAAO,qBAoBnE"}
+{"version":3,"file":"restart-active-runs.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/restart-active-runs.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAIpC,wBAAsB,mCAAmC,CAAC,CAAC,EAAE,OAAO,qBAsBnE"}

package/dist/server/index.cjs

@@ -3502,15 +3502,18 @@ var MastraServer = class extends _mastra_server_server_adapter.MastraServer {
 	*/
 	async parseFormData(formData) {
 		const result = {};
-		for (const [key, value] of formData.entries()) if (value instanceof File) {
-			const arrayBuffer = await value.arrayBuffer();
-			result[key] = Buffer.from(arrayBuffer);
-		} else if (typeof value === "string") try {
-			result[key] = JSON.parse(value);
-		} catch {
-			result[key] = value;
+		for (const [key, value] of formData.entries()) {
+			if (!(0, _mastra_server_server_adapter.isSafeObjectKey)(key)) continue;
+			if (value instanceof File) {
+				const arrayBuffer = await value.arrayBuffer();
+				result[key] = Buffer.from(arrayBuffer);
+			} else if (typeof value === "string") try {
+				result[key] = JSON.parse(value);
+			} catch {
+				result[key] = value;
+			}
+			else result[key] = value;
 		}
-		else result[key] = value;
 		return result;
 	}
 	async sendResponse(route, response, result, prefix) {
@@ -4032,7 +4035,7 @@ async function healthHandler(c) {
 async function restartAllActiveWorkflowRunsHandler(c) {
 	try {
 		const mastra = c.get("mastra");
-		mastra.restartAllActiveWorkflowRuns().catch((error) => {
+		if (mastra.recoveryConfig?.workflows !== "off") mastra.restartAllActiveWorkflowRuns().catch((error) => {
 			mastra.getLogger().error("Failed to restart active workflow runs during server startup", { error });
 		});
 		if (mastra.recoveryConfig?.durableAgents === "auto") mastra.recoverAllDurableAgents().catch((error) => {