@brust/core 2.0.0-alpha.30 → 2.0.0-alpha.31

package/native/index.d.ts

@@ -99,6 +99,16 @@ export interface NapiActionsOptions {
   maxResponseBytes?: number
   /** `"reject"` (default) or `"allow"` (F87): cross-site mutating action requests. */
   crossSite?: string
+  /** F475: `["POST /upload", "PUT /files/*"]`, relative to the prefix: these bodies stream. */
+  stream?: Array<string>
+  /** F475: the streamed-body ceiling (default 268435456, at most 4294967296). */
+  maxStreamBytes?: number
+  /** F475: the longest wait for the client's next byte (default 30000). */
+  streamIdleMs?: number
+  /** F475: the whole streamed call (default 900000). */
+  streamTotalMs?: number
+  /** F475: streamed bodies at once (default a quarter of the worker slots, at least 1). */
+  maxStreams?: number
 }
 
 /**
@@ -163,6 +173,15 @@ export declare function planJobs(slot: number, len: number): string
  */
 export declare function planJobsBuf(slot: number, buf: Uint8Array): string
 
+/**
+ * F475: the next chunk of the streamed request body of the calling worker's in-flight `fetch`
+ * call for `slot`, whose A1 carried `token`. Resolves with the bytes, `null` at the end, or the
+ * reason the stream failed (`"max_stream_bytes"`, `"idle"`, `"io"`); never rejects. The stream is
+ * looked up here, on the worker's JS thread where `BOUND` is that worker's binding; only the read
+ * runs off it.
+ */
+export declare function pullFetchBody(slot: number, token: number): Promise<Uint8Array | string | null>
+
 /**
  * F82: hand Rust the response body of the calling worker's in-flight `fetch` call for `slot`
  * (too large for the SAB slot). `false` = declined (over `max_response_bytes`, not in a `fetch`

package/native/index.js

@@ -89,8 +89,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-android-arm64')
         const bindingPackageVersion = require('@brust/native-android-arm64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -105,8 +105,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-android-arm-eabi')
         const bindingPackageVersion = require('@brust/native-android-arm-eabi/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -126,8 +126,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-win32-x64-gnu')
           const bindingPackageVersion = require('@brust/native-win32-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -142,8 +142,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-win32-x64-msvc')
           const bindingPackageVersion = require('@brust/native-win32-x64-msvc/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -159,8 +159,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-win32-ia32-msvc')
         const bindingPackageVersion = require('@brust/native-win32-ia32-msvc/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -175,8 +175,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-win32-arm64-msvc')
         const bindingPackageVersion = require('@brust/native-win32-arm64-msvc/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -194,8 +194,8 @@ function requireNative() {
     try {
       const binding = require('@brust/native-darwin-universal')
       const bindingPackageVersion = require('@brust/native-darwin-universal/package.json').version
-      if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-        throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
       }
       return binding
     } catch (e) {
@@ -210,8 +210,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-darwin-x64')
         const bindingPackageVersion = require('@brust/native-darwin-x64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -226,8 +226,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-darwin-arm64')
         const bindingPackageVersion = require('@brust/native-darwin-arm64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -246,8 +246,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-freebsd-x64')
         const bindingPackageVersion = require('@brust/native-freebsd-x64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -262,8 +262,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-freebsd-arm64')
         const bindingPackageVersion = require('@brust/native-freebsd-arm64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -283,8 +283,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-x64-musl')
           const bindingPackageVersion = require('@brust/native-linux-x64-musl/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -299,8 +299,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-x64-gnu')
           const bindingPackageVersion = require('@brust/native-linux-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -317,8 +317,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-arm64-musl')
           const bindingPackageVersion = require('@brust/native-linux-arm64-musl/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -333,8 +333,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-arm64-gnu')
           const bindingPackageVersion = require('@brust/native-linux-arm64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -351,8 +351,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-arm-musleabihf')
           const bindingPackageVersion = require('@brust/native-linux-arm-musleabihf/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -367,8 +367,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-arm-gnueabihf')
           const bindingPackageVersion = require('@brust/native-linux-arm-gnueabihf/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -385,8 +385,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-loong64-musl')
           const bindingPackageVersion = require('@brust/native-linux-loong64-musl/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -401,8 +401,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-loong64-gnu')
           const bindingPackageVersion = require('@brust/native-linux-loong64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -419,8 +419,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-riscv64-musl')
           const bindingPackageVersion = require('@brust/native-linux-riscv64-musl/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -435,8 +435,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-riscv64-gnu')
           const bindingPackageVersion = require('@brust/native-linux-riscv64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -452,8 +452,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-linux-ppc64-gnu')
         const bindingPackageVersion = require('@brust/native-linux-ppc64-gnu/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -468,8 +468,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-linux-s390x-gnu')
         const bindingPackageVersion = require('@brust/native-linux-s390x-gnu/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -488,8 +488,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-openharmony-arm64')
         const bindingPackageVersion = require('@brust/native-openharmony-arm64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -504,8 +504,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-openharmony-x64')
         const bindingPackageVersion = require('@brust/native-openharmony-x64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -520,8 +520,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-openharmony-arm')
         const bindingPackageVersion = require('@brust/native-openharmony-arm/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.30' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.31' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -661,8 +661,8 @@ if (!nativeBinding || forceWasi) {
       if (!candidateFailed) {
         if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
           const bindingPackageVersion = require('@brust/native-wasm32-wasi/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.30') {
-            throw new Error(`WASI binding package version mismatch, expected 2.0.0-alpha.30 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.31') {
+            throw new Error(`WASI binding package version mismatch, expected 2.0.0-alpha.31 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
         }
         wasiBinding = require('@brust/native-wasm32-wasi')
@@ -789,6 +789,7 @@ module.exports.compileTree = nativeBinding.compileTree
 module.exports.localAddr = nativeBinding.localAddr
 module.exports.planJobs = nativeBinding.planJobs
 module.exports.planJobsBuf = nativeBinding.planJobsBuf
+module.exports.pullFetchBody = nativeBinding.pullFetchBody
 module.exports.putFetchReply = nativeBinding.putFetchReply
 module.exports.registerWorker = nativeBinding.registerWorker
 module.exports.scanLoadWrites = nativeBinding.scanLoadWrites

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brust/core",
-  "version": "2.0.0-alpha.30",
+  "version": "2.0.0-alpha.31",
   "description": "brust v2 — React components compiled to Rust-rendered templates",
   "license": "MIT",
   "homepage": "https://brust.dev",
@@ -56,7 +56,7 @@
     ]
   },
   "dependencies": {
-    "@brust/runtime-dom": "2.0.0-alpha.30",
+    "@brust/runtime-dom": "2.0.0-alpha.31",
     "tsconfig-paths": "4.2.0"
   },
   "peerDependencies": {
@@ -100,12 +100,12 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "@brust/native-darwin-x64": "2.0.0-alpha.30",
-    "@brust/native-darwin-arm64": "2.0.0-alpha.30",
-    "@brust/native-linux-x64-gnu": "2.0.0-alpha.30",
-    "@brust/native-linux-arm64-gnu": "2.0.0-alpha.30",
-    "@brust/native-linux-x64-musl": "2.0.0-alpha.30",
-    "@brust/native-linux-arm64-musl": "2.0.0-alpha.30",
-    "@brust/core-cf": "2.0.0-alpha.30"
+    "@brust/native-darwin-x64": "2.0.0-alpha.31",
+    "@brust/native-darwin-arm64": "2.0.0-alpha.31",
+    "@brust/native-linux-x64-gnu": "2.0.0-alpha.31",
+    "@brust/native-linux-arm64-gnu": "2.0.0-alpha.31",
+    "@brust/native-linux-x64-musl": "2.0.0-alpha.31",
+    "@brust/native-linux-arm64-musl": "2.0.0-alpha.31",
+    "@brust/core-cf": "2.0.0-alpha.31"
   }
 }

package/src/actions/load.ts

@@ -43,3 +43,61 @@ export function shadowedGetActions(app: AnyElysia, patterns: string[], prefix: s
   }
   return out
 }
+
+/** F475: the route parses nothing (`{ parse: 'none' }`): Elysia 2 keeps `'none'`, Elysia 1 kept `[{ fn: 'none' }]`. */
+function parsesNone(r: { hooks?: unknown }): boolean {
+  const p = (r.hooks as { parse?: unknown } | undefined)?.parse
+  const none = (x: unknown) => x === 'none' || (x as { fn?: unknown } | null)?.fn === 'none'
+  return Array.isArray(p) ? p.some(none) : none(p)
+}
+
+/** Same route path: segments equal, a parameter (`:x`, `{x}`) matches a parameter, `*` matches `*`. */
+function samePath(a: string, b: string): boolean {
+  const x = a.split('/')
+  const y = b.split('/')
+  const param = (s: string) => /^(:|\{)/.test(s)
+  return x.length === y.length && x.every((s, i) => s === y[i] || (param(s) && param(y[i]!)))
+}
+
+const STREAM_METHODS = new Set(['POST', 'PUT', 'PATCH'])
+/** A route answers `method`: its own, or every method (Elysia 2's `.all()` registers `*`; `ALL` too). */
+const answers = (route: string, method: string) => route === method || route === 'ALL' || route === '*'
+
+/** Could one request path match both `listed` (a stream entry, prefix included) and `route` (an Elysia path)? A
+ * parameter on either side matches any one segment; a final `*` on either side matches one or more. */
+function overlaps(listed: string, route: string): boolean {
+  const a = listed.split('/')
+  const b = route.split('/')
+  const param = (s: string) => /^(:|\{)/.test(s)
+  for (let i = 0; ; i++) {
+    const x = a[i]
+    const y = b[i]
+    if (x === undefined || y === undefined) return x === y
+    if ((x === '*' && i === a.length - 1) || (y === '*' && i === b.length - 1)) return x !== '' && y !== ''
+    if (x !== y && !param(x) && !param(y)) return false
+  }
+}
+
+/**
+ * F475: `[actions] stream` against the app. `missing`: listed entries with no `{ parse: 'none' }` route of that method and
+ * path. `parsed`: routes that parse their body although a listed entry can match their path (a static route under a
+ * `:param` or `*` entry). Both fail boot: Rust would stream those bodies up to `max_stream_bytes` into a route that parses
+ * them whole, past `max_body_bytes`. `unlisted`: `{ parse: 'none' }` POST/PUT/PATCH routes not on the list (their bodies
+ * stay buffered, capped at `max_body_bytes`).
+ */
+export function streamRouteCheck(app: AnyElysia, entries: string[], prefix: string): { missing: string[]; parsed: string[]; unlisted: string[] } {
+  const full = (p: string) => (prefix === '/' ? p : p === '/' ? prefix : prefix + p)
+  const listed = entries.map((e) => {
+    const [m, p] = e.trim().split(/ +/)
+    return { entry: e, method: m!.toUpperCase(), path: full(p!) }
+  })
+  const routes = app.routes.map((r) => ({ method: r.method.toUpperCase(), path: r.path, none: parsesNone(r) }))
+  const missing = listed.filter((l) => !routes.some((r) => r.none && answers(r.method, l.method) && samePath(r.path, l.path))).map((l) => l.entry)
+  const parsed = routes
+    .filter((r) => !r.none && listed.some((l) => answers(r.method, l.method) && overlaps(l.path, r.path)))
+    .map((r) => `${r.method} ${r.path}`)
+  const unlisted = routes
+    .filter((r) => r.none && (STREAM_METHODS.has(r.method) || answers(r.method, '')) && !listed.some((l) => answers(r.method, l.method) && samePath(r.path, l.path)))
+    .map((r) => `${r.method} ${r.path}`)
+  return { missing, parsed, unlisted }
+}

package/src/actions/prefix.ts

@@ -3,6 +3,11 @@ export const DEFAULT_ACTION_PREFIX = '/_brust/action'
 export const DEFAULT_MAX_BODY_BYTES = 1_048_576
 export const DEFAULT_MAX_RESPONSE_BYTES = 8_388_608
 export const MAX_ACTION_BYTES = 67_108_864
+/** F475: `max_stream_bytes` default (256 MiB) and hard max (4 GiB); `stream_idle_ms` / `stream_total_ms` defaults. */
+export const DEFAULT_MAX_STREAM_BYTES = 268_435_456
+export const MAX_STREAM_BYTES = 4_294_967_296
+export const DEFAULT_STREAM_IDLE_MS = 30_000
+export const DEFAULT_STREAM_TOTAL_MS = 900_000
 const SEG = /^[A-Za-z0-9._~-]+$/
 
 /** Why `p` cannot be the actions prefix, or null. Segment-safe like the server's match. `root`: an actions-only
@@ -43,3 +48,18 @@ export function baseUrlError(v: unknown): string | null {
 /** L16 R16.2: the default `RequestInit.credentials` of the browser client. */
 export const ACTION_CREDENTIALS = ['same-origin', 'include', 'omit'] as const
 export type ActionCredentials = (typeof ACTION_CREDENTIALS)[number]
+
+/** F475: why `e` is not a `[actions] stream` entry (`"POST /upload"`, path relative to the prefix, `:name` one segment,
+ * a final `*` the rest), or null. Mirrors Rust `StreamRoute::parse`. */
+export function streamEntryError(e: unknown): string | null {
+  if (typeof e !== 'string') return `must be a string "<METHOD> <path>" (got ${JSON.stringify(e)})`
+  const m = /^\s*(\S+) +(\S+)\s*$/.exec(e)
+  if (!m) return `must be "<METHOD> <path>" (got ${JSON.stringify(e)})`
+  if (!['POST', 'PUT', 'PATCH'].includes(m[1]!.toUpperCase())) return `method must be POST, PUT or PATCH (got ${JSON.stringify(e)})`
+  const path = m[2]!
+  const segs = path.split('/').slice(1)
+  const badStar = segs.some((s, i) => s.includes('*') && (s !== '*' || i !== segs.length - 1))
+  if (!path.startsWith('/') || (path !== '/' && segs.some((s) => s === '')) || badStar)
+    return `path must start with '/', have no empty segment, and use '*' only as the last segment (got ${JSON.stringify(e)})`
+  return null
+}

package/src/actions-bridge.ts

@@ -1,7 +1,7 @@
 // The worker side of the `fetch` call kind (design E4/E5, contracts A1/A2). Rust forwards the actions prefix subtree
 // here; the app registered with `setActionsApp` (Elysia 2 via brust() — m3f-actions-elysia) answers a web Request
 // with a web Response, framed into this worker's SAB slot. No Elysia import: the app is anything with `fetch`.
-import { putFetchReply, takeFetchBody } from './native'
+import { pullFetchBody, putFetchReply, takeFetchBody } from './native'
 import type { LoaderReq } from './routes'
 import { runInStoreContext } from './store/server-context'
 
@@ -22,8 +22,10 @@ export interface FetchRequest {
   method: string
   url: string
   headers: [string, string][]
-  /** `{heap: n}` (F82): more than 262144 bytes (`ACTION_INLINE_BODY_BYTES`, independent of the slot size), fetched with `takeFetchBody(slot)`. */
-  body: { text: string } | { b64: string } | { heap: number } | null
+  /** `{heap: n}` (F82): more than 262144 bytes (`ACTION_INLINE_BODY_BYTES`, independent of the slot size), fetched with `takeFetchBody(slot)`.
+   * `{stream}` (F475): a `[actions] stream` route's body, pulled chunk by chunk with `pullFetchBody(slot, token)`; `length` is the
+   * declared Content-Length, if any. */
+  body: { text: string } | { b64: string } | { heap: number } | { stream: { length: number | null; token: number } } | null
   req: LoaderReq
 }
 /** A2 meta: `status`, `headers`, and (F82) `heap` — the byte length of a response body that crossed by
@@ -39,8 +41,36 @@ export interface FetchMeta {
 export interface HeapIo {
   takeBody(slot: number): Uint8Array | null
   putReply(slot: number, body: Uint8Array): boolean
+  /** F475: the next chunk of the slot's streamed body (`pullFetchBody`); only `fetch` calls with A1 `{stream}` use it. */
+  pullBody?(slot: number, token: number): Promise<Uint8Array | string | null>
+}
+const nativeHeapIo: HeapIo = {
+  takeBody: (slot) => takeFetchBody(slot),
+  putReply: (slot, body) => putFetchReply(slot, body),
+  pullBody: (slot, token) => pullFetchBody(slot, token),
+}
+
+/** F475: what a failed pull means to the app; Rust answers 413 / 408 / 400 whatever the app then returns. */
+const STREAM_FAILED: Record<string, string> = {
+  max_stream_bytes: 'brust: the request body exceeds max_stream_bytes',
+  idle: 'brust: the request body stalled longer than stream_idle_ms',
+}
+
+/** F475: the request body as the app reads it: each read pulls one chunk from Rust, and nothing is pulled before a read
+ * (`highWaterMark: 0`), so the client is read only as fast as the app consumes. */
+export function pulledBody(pull: () => Promise<Uint8Array | string | null>): ReadableStream<Uint8Array> {
+  return new ReadableStream<Uint8Array>(
+    {
+      async pull(c) {
+        const r = await pull()
+        if (r === null) c.close()
+        else if (typeof r === 'string') c.error(new TypeError(STREAM_FAILED[r] ?? 'brust: the request body broke off or ended short'))
+        else c.enqueue(r)
+      },
+    },
+    { highWaterMark: 0 },
+  )
 }
-const nativeHeapIo: HeapIo = { takeBody: (slot) => takeFetchBody(slot), putReply: (slot, body) => putFetchReply(slot, body) }
 
 let maxResponseBytes = 8_388_608
 /** `startWorker` sets the manifest's `actions.maxResponseBytes` (R5). Default 8388608. */
@@ -68,13 +98,13 @@ const TEXT_PLAIN: [string, string][] = [['content-type', 'text/plain; charset=ut
 
 /** A1 → web Request (R8 origin: `http://<host>` when the host pair is sane, else `localhost`). Bytes, never a
  * string body, so no content-type is invented. GET/HEAD never carry a body (R4; `new Request` forbids one). */
-export function toRequest(r: FetchRequest, heapBody?: Uint8Array): Request {
+export function toRequest(r: FetchRequest, heapBody?: Uint8Array | ReadableStream<Uint8Array>): Request {
   const host = r.headers.find(([k]) => k === 'host')?.[1]
   const origin = `http://${host && HOST.test(host) ? host : 'localhost'}`
   const bodyless = r.method === 'GET' || r.method === 'HEAD'
   const b = r.body
-  const body = bodyless || !b ? undefined : 'heap' in b ? (heapBody as BodyInit | undefined) : 'text' in b ? enc.encode(b.text) : Buffer.from(b.b64, 'base64')
-  return new Request(origin + r.url, { method: r.method, headers: r.headers, body })
+  const body = bodyless || !b ? undefined : 'heap' in b || 'stream' in b ? (heapBody as BodyInit | undefined) : 'text' in b ? enc.encode(b.text) : Buffer.from(b.b64, 'base64')
+  return new Request(origin + r.url, { method: r.method, headers: r.headers, body, ...(body instanceof ReadableStream ? { duplex: 'half' } : {}) } as RequestInit)
 }
 
 /** A2 writer at `slot`'s sub-region `[slot*sub, slot*sub+sub)`, `sub = floor(view.byteLength / slots)`:
@@ -146,11 +176,16 @@ export async function runFetch(requestJson: string, view: Uint8Array, slot: numb
   if (!a) return fail(view, slot, slots, 'brust: actions are not configured in this worker')
   try {
     const fr = JSON.parse(requestJson) as FetchRequest
-    let heapBody: Uint8Array | undefined
+    let heapBody: Uint8Array | ReadableStream<Uint8Array> | undefined
     if (fr.body && 'heap' in fr.body) {
       const got = io.takeBody(slot)
       if (!got || got.length !== fr.body.heap) throw new Error(`heap request body ${got ? `${got.length} != ${fr.body.heap}` : 'missing'} bytes (F82)`)
       heapBody = got
+    } else if (fr.body && 'stream' in fr.body) {
+      const { pullBody } = io
+      if (!pullBody) throw new Error('streamed request body without a pull channel (F475)')
+      const { token } = fr.body.stream
+      heapBody = pulledBody(() => pullBody(slot, token))
     }
     const req = toRequest(fr, heapBody)
     // R1/E5: one store scope around the handler AND the body read (a lazy body may still touch stores).

package/src/build/actions-only.ts

@@ -45,7 +45,7 @@ export async function runActionsOnly(o: {
       components: {},
       assets: { runtime: '', features: {} },
       jobs_module: 'jobs.js',
-      actions: { entry: await buildActions(tmp, entry), prefix: actions.prefix, maxBodyBytes: actions.maxBodyBytes, maxResponseBytes: actions.maxResponseBytes, crossSite: actions.crossSite },
+      actions: { entry: await buildActions(tmp, entry), prefix: actions.prefix, maxBodyBytes: actions.maxBodyBytes, maxResponseBytes: actions.maxResponseBytes, crossSite: actions.crossSite, ...actions.stream },
       actions_only: true,
     }
     mkdirSync(join(tmp, 'jinja'), { recursive: true })

package/src/build/cf-entry.ts

@@ -8,7 +8,8 @@ export interface CfConfigJson {
   stats: boolean
   edgeCache: 'off'
   cors?: unknown
-  actions?: { prefix: string; maxBodyBytes: number; maxResponseBytes: number; crossSite: 'reject' | 'allow' }
+  /** F475: `stream` + `maxStreamBytes` only when the app lists streamed routes; the idle/total timeouts and `maxStreams` are the platform's on Workers. */
+  actions?: { prefix: string; maxBodyBytes: number; maxResponseBytes: number; crossSite: 'reject' | 'allow'; stream?: string[]; maxStreamBytes?: number }
   /** The cache adapter (optional under abi 1, cache adapters R13). */
   cache?: { adapter: string; getTimeoutMs: number; maxBodyBytes: number; namespace: string; buildId: string; epochIntervalMs: number }
 }

package/src/build/cloudflare.ts

@@ -76,7 +76,7 @@ export interface CfBuildCtx {
   /** the FINAL dist dir (`out` is a tmp sibling that is renamed to it): wrangler paths are relative to `<dist>/cf` */
   dist: string
   compiled: Map<string, Compiled>
-  manifest: { components: Record<string, { template: string }>; actions?: { prefix: string; maxBodyBytes: number; maxResponseBytes?: number; crossSite?: 'reject' | 'allow' } | null; cache?: CacheRecord }
+  manifest: { components: Record<string, { template: string }>; actions?: { prefix: string; maxBodyBytes: number; maxResponseBytes?: number; crossSite?: 'reject' | 'allow'; stream?: string[]; maxStreamBytes?: number } | null; cache?: CacheRecord }
   sourceOf: SourceOf
   actionsEntry: string | null
   /** L16 R16.3: an actions-only Worker: no pages (no routes entry, no jobs, no templates), no Static Assets. */
@@ -215,6 +215,17 @@ if (bad.length) { console.error(bad.join('\\n')); process.exit(1) }
   return { preload, smoke }
 }
 
+/** The `actions` block of the Worker's CONFIG. F475: the `stream` list and its ceiling only when the app lists streamed routes; the idle and total timeouts and `maxStreams` are the platform's on Workers, so they are not sent. */
+export function cfActions(a: NonNullable<CfBuildCtx['manifest']['actions']>): NonNullable<CfConfigJson['actions']> {
+  return {
+    prefix: a.prefix,
+    maxBodyBytes: a.maxBodyBytes,
+    maxResponseBytes: a.maxResponseBytes ?? 8_388_608,
+    crossSite: a.crossSite ?? 'reject',
+    ...(a.stream?.length ? { stream: a.stream, ...(a.maxStreamBytes !== undefined ? { maxStreamBytes: a.maxStreamBytes } : {}) } : {}),
+  }
+}
+
 export async function buildCloudflare(out: string, ctx: CfBuildCtx, p: CfPrepared): Promise<string[]> {
   const cfDir = join(out, 'cf')
   const stage = join(cfDir, '.stage')
@@ -250,7 +261,7 @@ export async function buildCloudflare(out: string, ctx: CfBuildCtx, p: CfPrepare
     stats: p.cfg.stats,
     edgeCache: p.cfg.edgeCache,
     ...(cors ? { cors } : {}),
-    ...(a ? { actions: { prefix: a.prefix, maxBodyBytes: a.maxBodyBytes, maxResponseBytes: a.maxResponseBytes ?? 8_388_608, crossSite: a.crossSite ?? 'reject' } } : {}),
+    ...(a ? { actions: cfActions(a) } : {}),
     ...(cache ? { cache: { adapter: cache.adapter, getTimeoutMs: cache.getTimeoutMs, maxBodyBytes: cache.maxBodyBytes, namespace: cache.namespace, buildId: cache.buildId, epochIntervalMs: cache.epochIntervalMs } } : {}),
   }
   const entryPath = join(stage, 'brust-app.entry.js')

package/src/build/config.ts

@@ -6,7 +6,21 @@
 // such an import in client code, and every browser bundle refuses to include it.
 import { statSync } from 'node:fs'
 import { isAbsolute, join, relative, resolve, sep } from 'node:path'
-import { ACTION_CREDENTIALS, type ActionCredentials, DEFAULT_ACTION_PREFIX, DEFAULT_MAX_BODY_BYTES, DEFAULT_MAX_RESPONSE_BYTES, MAX_ACTION_BYTES, baseUrlError, prefixError } from '../actions/prefix'
+import {
+  ACTION_CREDENTIALS,
+  type ActionCredentials,
+  DEFAULT_ACTION_PREFIX,
+  DEFAULT_MAX_BODY_BYTES,
+  DEFAULT_MAX_RESPONSE_BYTES,
+  DEFAULT_MAX_STREAM_BYTES,
+  DEFAULT_STREAM_IDLE_MS,
+  DEFAULT_STREAM_TOTAL_MS,
+  MAX_ACTION_BYTES,
+  MAX_STREAM_BYTES,
+  baseUrlError,
+  prefixError,
+  streamEntryError,
+} from '../actions/prefix'
 import { ADAPTER_NAMES, BUILTINS, installHint } from '../cache-adapter/load'
 import { BuildError } from './errors'
 
@@ -15,6 +29,8 @@ import { BuildError } from './errors'
 //   entry = "actions.ts"   prefix = "/_brust/action"   max_body_bytes = 1048576  max_response_bytes = 8388608   cross_site = "reject" | "allow" (F87)
 //   base_url = "https://api.example.com"  credentials = "same-origin" | "include" | "omit"   (L16: the browser client's target; runtime settings, validated here too)
 // `prefix = "/"` is accepted only for an actions-only build (L16 R16.4).
+// F475: stream = ["POST /upload", "PUT /files/*"] (relative to the prefix; each a `{ parse: 'none' }` route) streams those bodies
+//   max_stream_bytes = 268435456 (<= 4294967296)  stream_idle_ms = 30000  stream_total_ms = 900000  max_streams = <workers x slots / 4>
 // `ACTION_INLINE_BODY_BYTES` (Rust): the inline/heap threshold of an action body, independent of the response slot size (`slotBytes`).
 const MIN_RESPONSE_BYTES = 262_144
 
@@ -29,6 +45,17 @@ export interface ActionsBuildConfig {
   credentials: ActionCredentials
   /** `entry` was written in brust.toml (a missing file is then an error, never a page-only build). */
   entryExplicit: boolean
+  /** F475: the streamed routes and their bounds; absent = no `stream` list (or an empty one). */
+  stream?: ActionsStreamConfig
+}
+
+/** F475 `[actions] stream` and its bounds, as the manifest carries them. */
+export interface ActionsStreamConfig {
+  stream: string[]
+  maxStreamBytes: number
+  streamIdleMs: number
+  streamTotalMs: number
+  maxStreams?: number
 }
 
 // [cloudflare] (M4-CF; only read by `--target cloudflare`, validated always so errors surface early):
@@ -293,7 +320,33 @@ function parseActions(file: string, raw: unknown, actionsOnly: boolean): Actions
       throw new BuildError('config', `${file}: actions.credentials must be one of ${ACTION_CREDENTIALS.join(', ')} (got ${JSON.stringify(t.credentials)})`)
     credentials = t.credentials as ActionCredentials
   }
-  return { entry, prefix, maxBodyBytes, maxResponseBytes, crossSite, baseUrl, credentials, entryExplicit: t.entry !== undefined }
+  const stream = parseStream(file, t)
+  return { entry, prefix, maxBodyBytes, maxResponseBytes, crossSite, baseUrl, credentials, entryExplicit: t.entry !== undefined, ...(stream ? { stream } : {}) }
+}
+
+/** F475: `stream` + its bounds; the bounds are validated even without a list, and dropped with it. */
+function parseStream(file: string, t: Record<string, unknown>): ActionsStreamConfig | undefined {
+  const int = (key: string, min: number, max: number, dflt: number): number => {
+    const n = t[key]
+    if (n === undefined) return dflt
+    if (typeof n !== 'number' || !Number.isInteger(n) || n < min || n > max) throw new BuildError('config', `${file}: actions.${key} must be an integer in ${min}..${max} (got ${String(n)})`)
+    return n
+  }
+  const maxStreamBytes = int('max_stream_bytes', 1, MAX_STREAM_BYTES, DEFAULT_MAX_STREAM_BYTES)
+  const streamIdleMs = int('stream_idle_ms', 1, U32_MAX, DEFAULT_STREAM_IDLE_MS)
+  const streamTotalMs = int('stream_total_ms', 1, U32_MAX, DEFAULT_STREAM_TOTAL_MS)
+  const maxStreams = t.max_streams === undefined ? undefined : int('max_streams', 1, U32_MAX, 1)
+  if (t.stream === undefined) return undefined
+  if (!Array.isArray(t.stream)) throw new BuildError('config', `${file}: actions.stream must be an array of "<METHOD> <path>" strings`)
+  const stream: string[] = []
+  for (const e of t.stream) {
+    const why = streamEntryError(e)
+    if (why) throw new BuildError('config', `${file}: actions.stream entry ${why}`)
+    const [m, p] = (e as string).trim().split(/ +/)
+    stream.push(`${m!.toUpperCase()} ${p}`)
+  }
+  if (stream.length === 0) return undefined
+  return { stream, maxStreamBytes, streamIdleMs, streamTotalMs, ...(maxStreams !== undefined ? { maxStreams } : {}) }
 }
 
 const DEFAULT_ENTRY = 'actions.ts'

package/src/build/index.ts

@@ -337,7 +337,7 @@ async function buildInto(
   await buildJobs(out, compiled, ctx.sourceOf, appRoot, storeModules(manifest), css.maps, routeRoots, reachedJobs(manifest), writers)
   manifest.actions =
     o.actions && o.actionsEntry
-      ? { entry: await buildActions(out, o.actionsEntry, css.maps), prefix: o.actions.prefix, maxBodyBytes: o.actions.maxBodyBytes, maxResponseBytes: o.actions.maxResponseBytes, crossSite: o.actions.crossSite }
+      ? { entry: await buildActions(out, o.actionsEntry, css.maps), prefix: o.actions.prefix, maxBodyBytes: o.actions.maxBodyBytes, maxResponseBytes: o.actions.maxResponseBytes, crossSite: o.actions.crossSite, ...o.actions.stream }
       : null
   if (o.actionsRemote !== null) manifest.actions_remote = { prefix: o.actionsRemote }
   if (o.cache) manifest.cache = await cacheRecord(out, manifest, o.cache, o.cacheModule, css.maps)

package/src/build/manifest.ts

@@ -69,6 +69,12 @@ export interface ActionsRecord {
   maxBodyBytes: number
   maxResponseBytes: number
   crossSite: 'reject' | 'allow'
+  /** F475: `[actions] stream` and its bounds; all absent without a `stream` list. */
+  stream?: string[]
+  maxStreamBytes?: number
+  streamIdleMs?: number
+  streamTotalMs?: number
+  maxStreams?: number
 }
 
 /** The manifest format the Rust loader accepts (`MANIFEST_VERSION` in brust-core `manifest.rs`): the one place TS names it. */

package/src/dev/bun.ts

@@ -150,6 +150,13 @@ export async function runBunDev(o: BunDevOptions): Promise<number> {
       diag: () => diag,
       upstream: () => active?.port ?? null,
       meta: devMeta,
+      actionsPrefix: () => {
+        try {
+          return active ? ((JSON.parse(readFileSync(join(active.dir, 'manifest.json'), 'utf8')) as { actions?: { prefix?: string } | null }).actions?.prefix ?? null) : null
+        } catch {
+          return null
+        }
+      },
       onRequest(r) {
         tui.log(`${r.method} ${r.path} ${r.status} ${r.ms}ms${r.cache ? ` ${r.cache}` : ''}`)
         if (!r.path.startsWith('/_brust/')) {

package/src/dev/proxy.ts

@@ -16,6 +16,19 @@ export interface DevView {
   onRequest(r: { method: string; path: string; status: number; ms: number; cache: string | null; trace: unknown | null }): void
   /** The active build's `dev.json` (L14), or null before the first build. */
   meta(): unknown | null
+  /** F475: the active build's actions prefix, or null (no actions / before the first build). */
+  actionsPrefix(): string | null
+}
+
+/** F475: the largest `max_stream_bytes` (4 GiB), what the proxy admits: Bun's own default for `maxRequestBodySize` is 128 MiB,
+ * which would refuse a streamed upload the child itself admits. The child enforces the real ceilings (`max_body_bytes`,
+ * `max_stream_bytes`), as in production. */
+export const PROXY_MAX_BODY_BYTES = 2 ** 32
+
+/** Is `pathname` the actions prefix or under it? (`/` = everything.) */
+export function underPrefix(pathname: string, prefix: string): boolean {
+  if (prefix === '/') return true
+  return pathname === prefix || pathname.startsWith(`${prefix}/`)
 }
 
 /** One entry of the dev trace list (`/_brust/dev/traces`, newest last, at most [`MAX_TRACES`]). */
@@ -191,8 +204,15 @@ export function startProxy(o: { hostname: string; port: number; allowedHosts?: s
   const server = Bun.serve<undefined>({
     hostname: o.hostname,
     port: o.port,
+    maxRequestBodySize: PROXY_MAX_BODY_BYTES,
     async fetch(req, srv) {
       const url = new URL(req.url)
+      // F475: a body-carrying call under the actions prefix may be a streamed upload that pauses or runs for minutes; Bun's
+      // 10 s idle timeout would cut it. The child owns the real bounds (`stream_idle_ms`, `stream_total_ms`).
+      if (req.method !== 'GET' && req.method !== 'HEAD' && req.body !== null) {
+        const prefix = view.actionsPrefix()
+        if (prefix !== null && underPrefix(url.pathname, prefix)) srv.timeout(req, 0)
+      }
       // DNS rebinding: a page on evil.example whose name resolves to 127.0.0.1 would otherwise read the app and the
       // source paths in build errors. Only the dev server's own names are answered.
       if (!allowed.has(hostName(req.headers.get('host') ?? ''))) return new Response('brust dev: unexpected Host header (set BRUST_DEV_ALLOWED_HOSTS to allow it)', { status: 421 })

package/src/handlers.ts

@@ -72,7 +72,7 @@ export interface ManifestLike {
   >
   jobs_module?: string
   /** `brust build` (M3-F A3): the actions entry, relative to dist. Absent/null = no actions. */
-  actions?: { entry: string; prefix: string; maxBodyBytes: number; maxResponseBytes?: number } | null
+  actions?: { entry: string; prefix: string; maxBodyBytes: number; maxResponseBytes?: number; stream?: string[] } | null
 }
 
 export function toJson(out: unknown): string {

package/src/native.ts

@@ -64,7 +64,7 @@ export interface ActionsClientOptions {
   credentials?: 'same-origin' | 'include' | 'omit'
 }
 /** napi `NapiActionsOptions`; defaults `/_brust/action`, 1048576, 8388608. */
-export interface ActionsOptions {
+export interface ActionsOptions extends StreamOptions {
   prefix?: string
   maxBodyBytes?: number
   /** F82: response body cap (bytes). Default 8388608. */
@@ -72,6 +72,15 @@ export interface ActionsOptions {
   /** F87: cross-site mutating requests. Default `reject`. */
   crossSite?: 'reject' | 'allow'
 }
+/** F475: the streamed action bodies (napi `NapiActionsOptions`): `["POST /upload"]` relative to the prefix, and the bounds
+ * (defaults 268435456 bytes, 30000 ms idle, 900000 ms in all, a quarter of the worker slots at once). */
+export interface StreamOptions {
+  stream?: string[]
+  maxStreamBytes?: number
+  streamIdleMs?: number
+  streamTotalMs?: number
+  maxStreams?: number
+}
 export type WorkerFn = (kind: 'loader' | 'jobs' | 'fetch' | 'cache', requestJson: string, slot: number) => Promise<number>
 export interface NativeBinding {
   startServer(opts: StartOptions): void
@@ -89,6 +98,9 @@ export interface NativeBinding {
   takeFetchBody(slot: number): Uint8Array | null
   /** F82 — hand Rust a response body too large for the slot; false = declined. Never throws. */
   putFetchReply(slot: number, body: Uint8Array): boolean
+  /** F475 — the next chunk of the in-flight `fetch` call's streamed body (A1 `{stream: {token}}`): bytes, `null` at the end,
+   * or why it failed (`max_stream_bytes` | `idle` | `io`). Never rejects. */
+  pullFetchBody(slot: number, token: number): Promise<Uint8Array | string | null>
   /** cache adapter R10 — a foreign broadcast event: tier 1 + the floor at `seq`; never re-published. */
   cacheReplay(args: InvalidateArgs, seq: number | null): InvalidateResult
   /** cache adapter R9 — bump `stats.l2[name]`; false = unknown name / no adapter / no server. Never throws. */
@@ -126,6 +138,7 @@ export const planJobs = (slot: number, len: number): string => native().planJobs
 export const planJobsBuf = (slot: number, buf: Uint8Array): string => native().planJobsBuf(slot, buf)
 export const takeFetchBody = (slot: number): Uint8Array | null => native().takeFetchBody(slot)
 export const putFetchReply = (slot: number, body: Uint8Array): boolean => native().putFetchReply(slot, body)
+export const pullFetchBody = (slot: number, token: number): Promise<Uint8Array | string | null> => native().pullFetchBody(slot, token)
 export const cacheReplay = (args: InvalidateArgs, seq: number | null): InvalidateResult => native().cacheReplay(args, seq)
 export const cacheL2Count = (name: string): boolean => native().cacheL2Count(name)
 export const cacheClear = (): number => native().cacheClear()

package/src/run.ts

@@ -11,7 +11,7 @@
 import { existsSync, readFileSync } from 'node:fs'
 import { join, resolve } from 'node:path'
 import { type BrustConfig, type ConfigOverrides, loadConfig } from './config'
-import { beginDrain, localAddr, type StartOptions, startServer, untilReady } from './native'
+import { beginDrain, localAddr, type StartOptions, type StreamOptions, startServer, untilReady } from './native'
 import { DEFAULT_MAX_LOADER_RESPONSE_BYTES } from './worker'
 
 export interface RunOptions {
@@ -27,7 +27,7 @@ export interface RunOptions {
 
 /** The manifest fields `run` needs (build/manifest.ts owns the full shape). */
 export interface RunManifest {
-  actions?: { entry: string; prefix: string; maxBodyBytes: number; maxResponseBytes?: number; crossSite?: 'reject' | 'allow' } | null
+  actions?: { entry: string; prefix: string; maxBodyBytes: number; maxResponseBytes?: number; crossSite?: 'reject' | 'allow' } & StreamKeys | null
   /** L16 R16.3: `brust build --actions-only`: no page routes and no routes entry. */
   actions_only?: boolean
   /** L16 R16.4b: a page-only build; the actions app is deployed elsewhere (`[actions] base_url`). */
@@ -38,6 +38,16 @@ export interface RunManifest {
   needs_workers?: boolean
 }
 
+/** F475: the `[actions] stream` keys of `manifest.actions`, passed to napi as they are. */
+type StreamKeys = Pick<StreamOptions, 'stream' | 'maxStreamBytes' | 'streamIdleMs' | 'streamTotalMs' | 'maxStreams'>
+
+/** F475: the stream keys `a` carries; none without a `stream` list, so an app without one starts as before. */
+function streamOptions(a: StreamKeys): StreamKeys {
+  if (!a.stream?.length) return {}
+  const { stream, maxStreamBytes, streamIdleMs, streamTotalMs, maxStreams } = a
+  return { stream, maxStreamBytes, streamIdleMs, streamTotalMs, ...(maxStreams !== undefined ? { maxStreams } : {}) }
+}
+
 /** F165 (R40.1): the pool size `run` spawns: none only when the build said no request needs one. */
 export function workerCount(cfg: BrustConfig, m: RunManifest): number {
   return m.needs_workers === false ? 0 : cfg.workers
@@ -54,7 +64,7 @@ export function startOptions(cfg: BrustConfig, distDir: string, m: RunManifest,
     ...(cfg.maxLoaderResponseBytes !== undefined && cfg.maxLoaderResponseBytes !== DEFAULT_MAX_LOADER_RESPONSE_BYTES ? { maxLoaderResponseBytes: cfg.maxLoaderResponseBytes } : {}),
     workerThreads: cfg.ioThreads,
     generator: `brust/${version}`,
-    ...(m.actions ? { actions: { prefix: m.actions.prefix, maxBodyBytes: m.actions.maxBodyBytes, ...(m.actions.maxResponseBytes !== undefined ? { maxResponseBytes: m.actions.maxResponseBytes } : {}), ...(m.actions.crossSite ? { crossSite: m.actions.crossSite } : {}) } } : {}),
+    ...(m.actions ? { actions: { prefix: m.actions.prefix, maxBodyBytes: m.actions.maxBodyBytes, ...(m.actions.maxResponseBytes !== undefined ? { maxResponseBytes: m.actions.maxResponseBytes } : {}), ...(m.actions.crossSite ? { crossSite: m.actions.crossSite } : {}), ...streamOptions(m.actions) } } : {}),
     ...(actionsClient(cfg, m) ? { actionsClient: actionsClient(cfg, m) } : {}),
     ...(cfg.cors ? { cors: cfg.cors } : {}),
     ...(devToken ? { devToken } : {}),

package/src/worker.ts

@@ -199,12 +199,19 @@ export async function startWorker(opts: StartWorkerOptions = {}): Promise<number
   const jobs = (jobsMod.default ?? jobsMod) as JobsModule
   if (manifest.actions) {
     // Lazy: elysia is an optional peer, so an app without [actions] must boot without it installed (R7).
-    const { loadActionsApp, shadowedGetActions } = await import('./actions/load')
+    const { loadActionsApp, shadowedGetActions, streamRouteCheck } = await import('./actions/load')
     const actionsApp = await loadActionsApp(join(dist, manifest.actions.entry), manifest.actions.prefix)
     setActionsApp(actionsApp)
     // F470: a GET under the prefix that a route there matches is the route's; say which GET actions that hides (once)
     const shadowed = env.BRUST_WORKER_ID && env.BRUST_WORKER_ID !== '0' ? [] : shadowedGetActions(actionsApp, flattenRoutes(routes).leaves.map((l) => l.pattern), manifest.actions.prefix)
     if (shadowed.length) console.warn(`[brust] warning: a route under the actions prefix answers GET there, so these GET actions are never reached: ${shadowed.join(', ')}`)
+    // F475: a listed route must parse nothing (the app reads the stream itself); an unlisted parse-none route stays buffered.
+    const { missing, parsed, unlisted } = streamRouteCheck(actionsApp, manifest.actions.stream ?? [], manifest.actions.prefix)
+    if (missing.length) throw new Error(`[actions] stream lists ${missing.join(', ')}, but no { parse: 'none' } action route of that method and path exists`)
+    if (parsed.length)
+      throw new Error(`[actions] stream covers ${parsed.join(', ')}, which parse their body; give them { parse: 'none' } or narrow the stream entry`)
+    if (unlisted.length && (!env.BRUST_WORKER_ID || env.BRUST_WORKER_ID === '0'))
+      console.warn(`[brust] warning: these { parse: 'none' } actions are not in [actions] stream, so their bodies are buffered, capped at max_body_bytes: ${unlisted.join(', ')}`)
     setActionsLimits({ maxResponseBytes: manifest.actions.maxResponseBytes ?? DEFAULT_MAX_RESPONSE_BYTES })
   }
   loaderCap = Number.parseInt(env.BRUST_MAX_LOADER_RESPONSE_BYTES ?? '', 10) || DEFAULT_MAX_LOADER_RESPONSE_BYTES