@mastra/deployer 1.76.0-alpha.7 → 1.76.0-alpha.9

package/dist/server/index.js

@@ -13,7 +13,7 @@ import process$1, { versions } from "process";
 import { getMimeType } from "hono/utils/mime";
 import { html } from "hono/html";
 import { Tool } from "@mastra/core/tools";
-import { MASTRA_FRAMEWORK_PUBLIC_KEY, MastraServer, applyMcpRequestAuth, checkRouteFGA, getCustomHTTPExceptionResponse, getFGAProvider, isZodError, normalizeQueryParams, redactStreamChunk, serializeStreamChunk } from "@mastra/server/server-adapter";
+import { MASTRA_FRAMEWORK_PUBLIC_KEY, MastraServer, applyMcpRequestAuth, checkRouteFGA, getCustomHTTPExceptionResponse, getFGAProvider, isSafeObjectKey, isZodError, normalizeQueryParams, redactStreamChunk, serializeStreamChunk } from "@mastra/server/server-adapter";
 import util from "util";
 import { Buffer as Buffer$1 } from "buffer";
 import { bodyLimit } from "hono/body-limit";
@@ -3497,15 +3497,18 @@ var MastraServer$1 = class extends MastraServer {
 	*/
 	async parseFormData(formData) {
 		const result = {};
-		for (const [key, value] of formData.entries()) if (value instanceof File) {
-			const arrayBuffer = await value.arrayBuffer();
-			result[key] = Buffer.from(arrayBuffer);
-		} else if (typeof value === "string") try {
-			result[key] = JSON.parse(value);
-		} catch {
-			result[key] = value;
+		for (const [key, value] of formData.entries()) {
+			if (!isSafeObjectKey(key)) continue;
+			if (value instanceof File) {
+				const arrayBuffer = await value.arrayBuffer();
+				result[key] = Buffer.from(arrayBuffer);
+			} else if (typeof value === "string") try {
+				result[key] = JSON.parse(value);
+			} catch {
+				result[key] = value;
+			}
+			else result[key] = value;
 		}
-		else result[key] = value;
 		return result;
 	}
 	async sendResponse(route, response, result, prefix) {
@@ -4027,7 +4030,7 @@ async function healthHandler(c) {
 async function restartAllActiveWorkflowRunsHandler(c) {
 	try {
 		const mastra = c.get("mastra");
-		mastra.restartAllActiveWorkflowRuns().catch((error) => {
+		if (mastra.recoveryConfig?.workflows !== "off") mastra.restartAllActiveWorkflowRuns().catch((error) => {
 			mastra.getLogger().error("Failed to restart active workflow runs during server startup", { error });
 		});
 		if (mastra.recoveryConfig?.durableAgents === "auto") mastra.recoverAllDurableAgents().catch((error) => {