@zintrust/core 2.5.8 → 2.7.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zintrust/core",
-  "version": "2.5.8",
+  "version": "2.7.1",
   "description": "Production-grade TypeScript backend framework for JavaScript",
   "homepage": "https://zintrust.com",
   "repository": {
@@ -268,6 +268,7 @@
     "ws": "^8.20.0",
     "micromatch": "^4.0.8",
     "brace-expansion": "^5.0.6",
+    "esbuild": "0.28.1",
     "qs": "^6.15.2"
   },
   "bin": {

package/src/cli/commands/D1MigrateCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"D1MigrateCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/D1MigrateCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA0IrE;;;GAGG;AAEH;;GAEG;AACH,eAAO,MAAM,gBAAgB;IAC3B;;OAEG;cACO,YAAY;EAgCtB,CAAC"}
+{"version":3,"file":"D1MigrateCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/D1MigrateCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA4IrE;;;GAGG;AAEH;;GAEG;AACH,eAAO,MAAM,gBAAgB;IAC3B;;OAEG;cACO,YAAY;EAgCtB,CAAC"}

package/src/cli/commands/D1MigrateCommand.js

@@ -37,8 +37,10 @@ const buildExecutionContext = (options) => {
     const dbName = getDbName(projectRoot, options);
     const env = typeof options['env'] === 'string' ? options['env'].trim() : undefined;
     const config = (typeof options['config'] === 'string' ? options['config'].trim() : undefined) ??
-        (typeof options.wranglerConfig === 'string' ? options.wranglerConfig.trim() : undefined) ??
-        (typeof options.wc === 'string' ? options.wc.trim() : undefined);
+        (typeof options['wranglerConfig'] === 'string'
+            ? options['wranglerConfig'].trim()
+            : undefined) ??
+        (typeof options['wc'] === 'string' ? options['wc'].trim() : undefined);
     const migrationsRelDir = isWorkerCommand
         ? path.join('database', 'migrations', 'd1')
         : WranglerConfig.getD1MigrationsDir(projectRoot, dbName);

package/src/http/middleware/BodyParsingMiddleware.d.ts

@@ -2,7 +2,35 @@
  * Content Type Detection & Body Parsing Middleware
  * Detects content-type and parses non-JSON request bodies
  */
+import type { IRequest } from '../Request';
 import type { Middleware } from '../../middleware/MiddlewareStack';
+type ReadBodyResult = {
+    ok: true;
+    bytes: Buffer;
+    text?: string;
+} | {
+    ok: false;
+    statusCode: 400 | 413;
+    message: string;
+};
+/**
+ * Attempt to recover a JSON string that was stored as raw text or bytes
+ * due to a missing or incorrect Content-Type header.
+ *
+ * Only plain objects `{...}` are considered for recovery — arrays, strings,
+ * and primitives are left unchanged. This minimizes false positives for
+ * legitimate text or binary payloads that happen to start with `{`.
+ */
+export declare const tryRecoverTextJsonBody: (body: string) => string | Record<string, unknown>;
+export declare const setRequestBody: (req: IRequest, rawResult: ReadBodyResult & {
+    ok: true;
+}, contentType: string) => void;
+/**
+ * Attempt to parse a string as a JSON object.
+ * Returns the parsed object on success, or null if the string is not
+ * a valid JSON object literal (plain object `{...}`, not array or primitive).
+ */
+export declare const tryParseJsonObject: (text: string) => Record<string, unknown> | null;
 /**
  * Body parsing middleware
  * Automatically detects content-type and parses non-JSON bodies

package/src/http/middleware/BodyParsingMiddleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BodyParsingMiddleware.d.ts","sourceRoot":"","sources":["../../../../src/http/middleware/BodyParsingMiddleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAwV9D;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,UA4CnC,CAAC;AAEF,eAAe,qBAAqB,CAAC"}
+{"version":3,"file":"BodyParsingMiddleware.d.ts","sourceRoot":"","sources":["../../../../src/http/middleware/BodyParsingMiddleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAG9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,KAAK,cAAc,GACf;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,GAAG,GAAG,GAAG,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AA+J1D;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GAAI,MAAM,MAAM,KAAG,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAapF,CAAC;AAEF,eAAO,MAAM,cAAc,GACzB,KAAK,QAAQ,EACb,WAAW,cAAc,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACxC,aAAa,MAAM,KAClB,IA4BF,CAAC;AA+CF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAY3E,CAAC;AAwGF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,UA4CnC,CAAC;AAEF,eAAe,qBAAqB,CAAC"}

package/src/http/middleware/BodyParsingMiddleware.js

@@ -164,7 +164,7 @@ const parseJsonBody = (text, contentType, res) => {
  * and primitives are left unchanged. This minimizes false positives for
  * legitimate text or binary payloads that happen to start with `{`.
  */
-const tryRecoverTextJsonBody = (body) => {
+export const tryRecoverTextJsonBody = (body) => {
     const trimmed = body.trim();
     if (trimmed.startsWith('{') && trimmed.endsWith('}')) {
         try {
@@ -179,7 +179,7 @@ const tryRecoverTextJsonBody = (body) => {
     }
     return body;
 };
-const setRequestBody = (req, rawResult, contentType) => {
+export const setRequestBody = (req, rawResult, contentType) => {
     const isUrlEncoded = contentType.includes('application/x-www-form-urlencoded');
     const isText = contentType.startsWith('text/') || contentType.includes('application/xml');
     const text = getTextFromRaw(rawResult);
@@ -238,39 +238,79 @@ const reuseExistingRawBody = (req, res, contentType, existingBytes, existingText
     }
     return applyParsedRequestBody(req, res, rawResult, contentType);
 };
-const parseUrlEncodedBody = (text) => {
+/**
+ * Attempt to parse a string as a JSON object.
+ * Returns the parsed object on success, or null if the string is not
+ * a valid JSON object literal (plain object `{...}`, not array or primitive).
+ */
+export const tryParseJsonObject = (text) => {
+    const trimmed = text.trim();
+    if (!trimmed.startsWith('{') || !trimmed.endsWith('}'))
+        return null;
+    try {
+        const parsed = JSON.parse(trimmed);
+        if (typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)) {
+            return parsed;
+        }
+    }
+    catch {
+        // Not valid JSON
+    }
+    return null;
+};
+/**
+ * Parse URL-encoded form data into a key-value record.
+ * Multiple values for the same key are collected into an array.
+ */
+const parseUrlEncodedParams = (text) => {
     const out = {};
     const params = new URLSearchParams(text);
     for (const [key, value] of params.entries()) {
         const existing = out[key];
         if (existing === undefined) {
             out[key] = value;
-            continue;
         }
-        if (Array.isArray(existing)) {
+        else if (Array.isArray(existing)) {
             existing.push(value);
-            continue;
         }
-        out[key] = [existing, value];
+        else {
+            out[key] = [existing, value];
+        }
+    }
+    return out;
+};
+/**
+ * Detect and recover from a degenerate case where a JSON payload was sent
+ * with a url-encoded Content-Type header. URLSearchParams treats the entire
+ * JSON string as a single key with an empty value, so we try parsing that key.
+ */
+const tryRecoverDegenerateJson = (out) => {
+    const keys = Object.keys(out);
+    if (keys.length !== 1 || out[keys[0]] !== '')
+        return null;
+    const maybeJson = keys[0].trim();
+    const parsed = tryParseJsonObject(maybeJson);
+    if (parsed !== null) {
+        return parsed;
     }
+    return null;
+};
+const parseUrlEncodedBody = (text) => {
+    // JSON-first recovery: parse raw text before URLSearchParams touches it.
+    // URLSearchParams splits on the first '=' (corrupting base64-padded values)
+    // and converts '+' to spaces, making encrypted/base64 fields unrecoverable.
+    const jsonResult = tryParseJsonObject(text);
+    if (jsonResult !== null) {
+        return jsonResult;
+    }
+    const out = parseUrlEncodedParams(text);
     // Recovery: if a JSON payload is sent with the wrong Content-Type header
     // (e.g. application/x-www-form-urlencoded instead of application/json),
     // URLSearchParams will treat the entire JSON string as a single key with
     // an empty value. Detect this degenerate case and fall back to JSON.parse.
-    const keys = Object.keys(out);
-    if (keys.length === 1 && out[keys[0]] === '') {
-        const maybeJson = keys[0].trim();
-        if (maybeJson.startsWith('{') && maybeJson.endsWith('}')) {
-            try {
-                const parsed = JSON.parse(maybeJson);
-                if (typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)) {
-                    return parsed;
-                }
-            }
-            catch {
-                // Not valid JSON — leave original result unchanged
-            }
-        }
+    const recovered = tryRecoverDegenerateJson(out);
+    if (recovered !== null) {
+        return recovered;
     }
     return out;
 };

package/src/http/middleware/FileUploadMiddleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FileUploadMiddleware.d.ts","sourceRoot":"","sources":["../../../../src/http/middleware/FileUploadMiddleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAW9D;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,UA8DlC,CAAC;AAEF,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"FileUploadMiddleware.d.ts","sourceRoot":"","sources":["../../../../src/http/middleware/FileUploadMiddleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AA0H9D;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,UAsDlC,CAAC;AAEF,eAAe,oBAAoB,CAAC"}

package/src/http/middleware/FileUploadMiddleware.js

@@ -6,69 +6,154 @@ import { Env } from '../../config/env.js';
 import { Logger } from '../../config/logger.js';
 import { ErrorFactory } from '../../exceptions/ZintrustError.js';
 import { MultipartParser } from '../parsers/MultipartParser.js';
-import { MultipartParserRegistry } from '../parsers/MultipartParserRegistry.js';
+import { MultipartParserRegistry, } from '../parsers/MultipartParserRegistry.js';
 /**
- * Extract content-type header safely
+ * Extract the original content-type header value.
+ *
+ * The value is NOT lowercased: multipart boundaries are case-sensitive, so a
+ * browser boundary containing uppercase characters must be preserved verbatim.
+ * Only the multipart check (MultipartParser.isMultipart) is case-insensitive.
  */
 const getContentType = (req) => {
     const contentType = req.getHeader('content-type');
     if (typeof contentType === 'string')
-        return contentType.toLowerCase().trim();
+        return contentType.trim();
+    if (Array.isArray(contentType) && typeof contentType[0] === 'string') {
+        return contentType[0].trim();
+    }
     return '';
 };
+/**
+ * Convert a buffered request body (Buffer or string) to a Buffer, if present.
+ * Worker adapters often expose a buffered body rather than a Node stream.
+ */
+const getBufferedBody = (req) => {
+    const raw = req.getRaw();
+    const body = raw.body;
+    if (Buffer.isBuffer(body))
+        return body;
+    if (typeof body === 'string')
+        return Buffer.from(body);
+    return undefined;
+};
+/**
+ * A raw request is pipeable when it exposes a Node-style readable stream, which
+ * the registered streaming parser (e.g. busboy) consumes via `.pipe(...)`.
+ */
+const isPipeable = (req) => {
+    const raw = req.getRaw();
+    return typeof raw.pipe === 'function';
+};
+/**
+ * Convert a bracket-notation field name to dotted notation.
+ * e.g. `doc[reg_cer]` -> `doc.reg_cer`, `doc[reg_cer][file]` -> `doc.reg_cer.file`.
+ * Empty brackets (`files[]`) collapse to the base name (`files`).
+ */
+const toDottedName = (name) => name.replaceAll(/\[([^\]]*)\]/g, (_match, inner) => (inner === '' ? '' : `.${inner}`));
+/**
+ * Add dotted-notation aliases for any bracket-notation keys, without removing
+ * the original field names. Existing keys are never overwritten.
+ */
+const addDottedAliases = (record) => {
+    const out = { ...record };
+    for (const [key, value] of Object.entries(record)) {
+        if (!key.includes('['))
+            continue;
+        const dotted = toDottedName(key);
+        if (dotted !== '' && dotted !== key && !(dotted in out)) {
+            out[dotted] = value;
+        }
+    }
+    return out;
+};
+/**
+ * Parse a buffered multipart body using the built-in parser and the original
+ * (case-sensitive) boundary from the content-type header.
+ */
+const parseBufferedMultipart = (body, contentType) => {
+    const boundary = MultipartParser.getBoundary(contentType);
+    if (boundary === undefined || boundary === '') {
+        throw ErrorFactory.createValidationError('Multipart upload is missing a boundary.', {
+            contentType,
+        });
+    }
+    return MultipartParser.parse(body, boundary);
+};
+/**
+ * Resolve parsed multipart data from the request.
+ *
+ * Prefers a buffered binary body (Worker adapters) parsed with the built-in
+ * parser. Falls back to a registered streaming parser only when the raw request
+ * is pipeable (Node-style request streams).
+ */
+const resolveParsedMultipart = async (req, contentType, limits) => {
+    const bufferedBody = getBufferedBody(req);
+    if (bufferedBody !== undefined) {
+        return parseBufferedMultipart(bufferedBody, contentType);
+    }
+    if (isPipeable(req)) {
+        const provider = MultipartParserRegistry.get();
+        if (provider === null) {
+            throw ErrorFactory.createConfigError('Multipart upload parser is not configured.', {
+                contentType,
+                hint: 'Install @zintrust/storage to enable multipart/form-data uploads.',
+            });
+        }
+        return provider({ req: req.getRaw(), contentType, limits });
+    }
+    throw ErrorFactory.createValidationError('Multipart upload has no readable body.', {
+        contentType,
+    });
+};
+const isConfigError = (error) => typeof error === 'object' &&
+    error !== null &&
+    error.code === 'CONFIG_ERROR';
 /**
  * File upload middleware
  * Automatically parses multipart/form-data and makes files available
  */
 export const fileUploadMiddleware = async (req, _res, next) => {
     const contentType = getContentType(req);
-    // Only process multipart/form-data requests
+    // Only process multipart/form-data requests (case-insensitive check).
     if (!MultipartParser.isMultipart(contentType)) {
         await next();
         return;
     }
-    // Phase 4 default behavior: multipart requires external streaming parser.
-    const provider = MultipartParserRegistry.get();
-    if (provider === null) {
-        throw ErrorFactory.createConfigError('Multipart upload parser is not configured.', {
-            contentType,
-            hint: 'Install @zintrust/storage to enable multipart/form-data uploads.',
-        });
-    }
     try {
-        const maxFileSizeBytes = Env.getInt('MAX_FILE_SIZE', 50 * 1024 * 1024);
-        const maxFiles = Env.getInt('MAX_FILES', 20);
-        const maxFields = Env.getInt('MAX_FIELDS', 200);
-        const maxFieldSizeBytes = Env.getInt('MAX_FIELD_SIZE', 128 * 1024);
-        const parsed = await provider({
-            req: req.getRaw(),
-            contentType,
-            limits: {
-                maxFileSizeBytes,
-                maxFiles,
-                maxFields,
-                maxFieldSizeBytes,
-            },
-        });
+        const limits = {
+            maxFileSizeBytes: Env.getInt('MAX_FILE_SIZE', 50 * 1024 * 1024),
+            maxFiles: Env.getInt('MAX_FILES', 20),
+            maxFields: Env.getInt('MAX_FIELDS', 200),
+            maxFieldSizeBytes: Env.getInt('MAX_FIELD_SIZE', 128 * 1024),
+        };
+        const parsed = await resolveParsedMultipart(req, contentType, limits);
+        // Add dotted aliases for bracket-notation names without dropping originals,
+        // so `doc[reg_cer]` is also addressable as `doc.reg_cer`.
+        const fields = addDottedAliases(parsed.fields);
+        const files = addDottedAliases(parsed.files);
         const currentBody = req.getBody?.();
         const updatedBody = typeof currentBody === 'object' && currentBody !== null ? currentBody : {};
         // Merge fields directly into the request body for ergonomics.
         // Files remain under __files for FileUpload helper compatibility.
         req.setBody({
             ...updatedBody,
-            ...parsed.fields,
-            __files: parsed.files,
+            ...fields,
+            __files: files,
         });
         if (Env.getBool('ZIN_DEBUG_FILE_UPLOAD', false)) {
             Logger.debug('[File Upload] Successfully parsed multipart data', {
-                fieldsCount: Object.keys(parsed.fields).length,
-                filesCount: Object.keys(parsed.files).length,
+                fieldsCount: Object.keys(fields).length,
+                filesCount: Object.keys(files).length,
             });
         }
     }
     catch (error) {
+        // A missing streaming parser is a hard configuration error (e.g. multipart
+        // arrives as a Node stream but @zintrust/storage is not installed): surface it.
+        if (isConfigError(error))
+            throw error;
+        // Other parse failures are non-fatal: log and continue with the unparsed body.
         Logger.error('[File Upload] Error parsing multipart data', error);
-        // Continue with unparsed body
     }
     await next();
 };

package/src/http/parsers/BodyParsers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BodyParsers.d.ts","sourceRoot":"","sources":["../../../../src/http/parsers/BodyParsers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,UAAU,gBAAgB;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,OAAO,EAAE,CAAC;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,WAAW;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IACvC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,CAAC;CAChD;AAiLD,eAAO,MAAM,WAAW;;;;IAKtB;;OAEG;cACO,WAAW,EAAE;IAIvB;;OAEG;4BACqB,MAAM,GAAG,WAAW,GAAG,SAAS;IAIxD;;OAEG;uBACgB,MAAM,QAAQ,MAAM,GAAG,MAAM,GAAG,gBAAgB;EAQnE,CAAC;AAEH,eAAe,WAAW,CAAC"}
+{"version":3,"file":"BodyParsers.d.ts","sourceRoot":"","sources":["../../../../src/http/parsers/BodyParsers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,UAAU,gBAAgB;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,OAAO,EAAE,CAAC;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,WAAW;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IACvC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,CAAC;CAChD;AAoND,eAAO,MAAM,WAAW;;;;IAKtB;;OAEG;cACO,WAAW,EAAE;IAIvB;;OAEG;4BACqB,MAAM,GAAG,WAAW,GAAG,SAAS;IAIxD;;OAEG;uBACgB,MAAM,QAAQ,MAAM,GAAG,MAAM,GAAG,gBAAgB;EAQnE,CAAC;AAEH,eAAe,WAAW,CAAC"}

package/src/http/parsers/BodyParsers.js

@@ -27,6 +27,48 @@ const tryRecoverJsonBody = (result) => {
     }
     return undefined;
 };
+/**
+ * Try to parse raw text as JSON before URLSearchParams touches it.
+ * This handles cases where JSON is sent with application/x-www-form-urlencoded Content-Type,
+ * which would be corrupted by URLSearchParams (splits on '=', converts '+' to spaces).
+ */
+const tryParseJsonRaw = (text) => {
+    const trimmed = text.trim();
+    if (!trimmed.startsWith('{') || !trimmed.endsWith('}'))
+        return undefined;
+    try {
+        const parsed = JSON.parse(trimmed);
+        if (typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)) {
+            return parsed;
+        }
+    }
+    catch {
+        // Not valid JSON
+    }
+    return undefined;
+};
+/**
+ * Parse URL-encoded string into key-value pairs, handling duplicate keys as arrays.
+ */
+const parseUrlEncodedParams = (text) => {
+    const params = new URLSearchParams(text);
+    const result = {};
+    for (const [key, value] of params.entries()) {
+        if (Object.prototype.hasOwnProperty.call(result, key)) {
+            const existing = result[key];
+            if (Array.isArray(existing)) {
+                existing.push(value);
+            }
+            else {
+                result[key] = [existing, value];
+            }
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+};
 /**
  * URL-encoded form data parser
  * Content-Type: application/x-www-form-urlencoded
@@ -38,25 +80,14 @@ const FormDataParser = {
             const text = typeof body === 'string' ? body : body.toString('utf-8');
             if (!text.trim())
                 return { ok: true, data: {} };
-            const params = new URLSearchParams(text);
-            const result = {};
-            for (const [key, value] of params.entries()) {
-                if (Object.prototype.hasOwnProperty.call(result, key)) {
-                    // Handle multiple values with same key
-                    const existing = result[key];
-                    if (Array.isArray(existing)) {
-                        existing.push(value);
-                    }
-                    else {
-                        result[key] = [existing, value];
-                    }
-                }
-                else {
-                    result[key] = value;
-                }
+            // JSON-first recovery: parse raw text before URLSearchParams touches it.
+            const rawJsonResult = tryParseJsonRaw(text);
+            if (rawJsonResult !== undefined) {
+                return { ok: true, data: rawJsonResult };
             }
-            // Recovery: if a JSON payload is sent with the wrong Content-Type header,
-            // URLSearchParams will treat the entire JSON string as a single key with
+            const result = parseUrlEncodedParams(text);
+            // Recovery: if a JSON payload was sent with wrong Content-Type,
+            // URLSearchParams treats the whole JSON string as a single key with
             // an empty value. Detect this degenerate case and fall back to JSON.parse.
             const recovered = tryRecoverJsonBody(result);
             if (recovered !== undefined) {

package/src/http/parsers/MultipartParser.d.ts

@@ -17,7 +17,9 @@ export declare const parseMultipartFormData: (body: Buffer | string, boundary: s
  */
 export declare const MultipartParser: Readonly<{
     /**
-     * Check if content-type is multipart/form-data
+     * Check if content-type is multipart/form-data.
+     * The check is case-insensitive so callers can preserve the original
+     * content-type value (and its case-sensitive boundary) for parsing.
      */
     isMultipart(contentType: string): boolean;
     /**

package/src/http/parsers/MultipartParser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MultipartParser.d.ts","sourceRoot":"","sources":["../../../../src/http/parsers/MultipartParser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,UAAU,mBAAmB;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;CACvC;AAwJD;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GACjC,MAAM,MAAM,GAAG,MAAM,EACrB,UAAU,MAAM,KACf,mBAaF,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe;IAC1B;;OAEG;6BACsB,MAAM,GAAG,OAAO;IAIzC;;OAEG;6BACsB,MAAM,GAAG,MAAM,GAAG,SAAS;IAIpD;;OAEG;gBACS,MAAM,GAAG,MAAM,YAAY,MAAM,GAAG,mBAAmB;EAGnE,CAAC;AAEH,eAAe,eAAe,CAAC"}
+{"version":3,"file":"MultipartParser.d.ts","sourceRoot":"","sources":["../../../../src/http/parsers/MultipartParser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,UAAU,mBAAmB;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;CACvC;AAwJD;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GACjC,MAAM,MAAM,GAAG,MAAM,EACrB,UAAU,MAAM,KACf,mBAaF,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe;IAC1B;;;;OAIG;6BACsB,MAAM,GAAG,OAAO;IAIzC;;OAEG;6BACsB,MAAM,GAAG,MAAM,GAAG,SAAS;IAIpD;;OAEG;gBACS,MAAM,GAAG,MAAM,YAAY,MAAM,GAAG,mBAAmB;EAGnE,CAAC;AAEH,eAAe,eAAe,CAAC"}

package/src/http/parsers/MultipartParser.js

@@ -135,10 +135,12 @@ export const parseMultipartFormData = (body, boundary) => {
  */
 export const MultipartParser = Object.freeze({
     /**
-     * Check if content-type is multipart/form-data
+     * Check if content-type is multipart/form-data.
+     * The check is case-insensitive so callers can preserve the original
+     * content-type value (and its case-sensitive boundary) for parsing.
      */
     isMultipart(contentType) {
-        return contentType.includes('multipart/form-data');
+        return contentType.toLowerCase().includes('multipart/form-data');
     },
     /**
      * Get boundary from content-type header

package/src/index.js

@@ -1,11 +1,11 @@
 /**
- * @zintrust/core v2.5.8
+ * @zintrust/core v2.7.1
  *
  * ZinTrust Framework - Production-Grade TypeScript Backend
  * Built for performance, type safety, and exceptional developer experience
  *
  * Build Information:
- *   Built: 2026-06-12T18:44:49.274Z
+ *   Built: 2026-06-15T10:44:07.685Z
  *   Node: >=20.0.0
  *   License: MIT
  *
@@ -21,7 +21,7 @@
  * Available at runtime for debugging and health checks
  */
 export const ZINTRUST_VERSION = '0.1.41';
-export const ZINTRUST_BUILD_DATE = '2026-06-12T18:44:49.232Z'; // Replaced during build
+export const ZINTRUST_BUILD_DATE = '2026-06-15T10:44:07.641Z'; // Replaced during build
 export { Application } from './boot/Application.js';
 export { AwsSigV4 } from './common/index.js';
 export { SignedRequest } from './security/SignedRequest.js';

package/src/proxy/d1/ZintrustD1Proxy.d.ts

@@ -39,6 +39,13 @@ type D1Env = {
     ZT_MAX_PARAMS?: string;
     ZT_D1_STATEMENTS_JSON?: string;
 };
+/**
+ * Normalize bind parameters before passing to D1's bind().
+ *
+ * D1 rejects JS objects and needs integer-valued numbers serialized for TEXT
+ * column compatibility, Dates as ISO strings, while blobs must be untouched.
+ */
+export declare const normalizeParams: (params: unknown[]) => unknown[];
 export declare const ZintrustD1Proxy: Readonly<{
     _ZINTRUST_CLOUDFLARE_D1_PROXY_VERSION: "0.1.15";
     _ZINTRUST_CLOUDFLARE_D1_PROXY_BUILD_DATE: "__BUILD_DATE__";

package/src/proxy/d1/ZintrustD1Proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ZintrustD1Proxy.d.ts","sourceRoot":"","sources":["../../../../src/proxy/d1/ZintrustD1Proxy.ts"],"names":[],"mappings":"AAUA,KAAK,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,aAAa,CAAC;AAEjD,KAAK,qBAAqB,GAAG;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,GAAG,EAAE;QACH,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QACtC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QACrE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;QAChE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC;KAChG,CAAC;IACF,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrF,CAAC;AAEF,KAAK,WAAW,CAAC,CAAC,IAAI;IACpB,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;CACf,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,KAAK,mBAAmB,GAAG;IACzB,IAAI,EAAE,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,mBAAmB,CAAC;IACpD,GAAG,EAAE,CAAC,CAAC,GAAG,OAAO,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,GAAG,OAAO,OAAO,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5C,GAAG,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;CACjC,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,mBAAmB,CAAC;CAC/C,CAAC;AAEF,KAAK,KAAK,GAAG;IACX,EAAE,CAAC,EAAE,UAAU,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAsWF,eAAO,MAAM,eAAe;;;mBAGL,OAAO,OAAO,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC;EAqB5D,CAAC;AAEH,eAAe,eAAe,CAAC"}
+{"version":3,"file":"ZintrustD1Proxy.d.ts","sourceRoot":"","sources":["../../../../src/proxy/d1/ZintrustD1Proxy.ts"],"names":[],"mappings":"AAUA,KAAK,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,aAAa,CAAC;AAEjD,KAAK,qBAAqB,GAAG;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,GAAG,EAAE;QACH,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QACtC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QACrE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;QAChE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC;KAChG,CAAC;IACF,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrF,CAAC;AAEF,KAAK,WAAW,CAAC,CAAC,IAAI;IACpB,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;CACf,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,KAAK,mBAAmB,GAAG;IACzB,IAAI,EAAE,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,mBAAmB,CAAC;IACpD,GAAG,EAAE,CAAC,CAAC,GAAG,OAAO,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,GAAG,OAAO,OAAO,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5C,GAAG,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;CACjC,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,mBAAmB,CAAC;CAC/C,CAAC;AAEF,KAAK,KAAK,GAAG;IACX,EAAE,CAAC,EAAE,UAAU,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AA2LF;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAAI,QAAQ,OAAO,EAAE,KAAG,OAAO,EAe1D,CAAC;AAsJF,eAAO,MAAM,eAAe;;;mBAGL,OAAO,OAAO,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC;EAqB5D,CAAC;AAEH,eAAe,eAAe,CAAC"}

package/src/proxy/d1/ZintrustD1Proxy.js

@@ -157,7 +157,7 @@ const resolveSqlRequest = async (request, env) => {
  * D1 rejects JS objects and needs integer-valued numbers serialized for TEXT
  * column compatibility, Dates as ISO strings, while blobs must be untouched.
  */
-const normalizeParams = (params) => {
+export const normalizeParams = (params) => {
     if (!Array.isArray(params))
         return params;
     return params.map((value) => {

package/src/runtime/adapters/CloudflareAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CloudflareAdapter.d.ts","sourceRoot":"","sources":["../../../../src/runtime/adapters/CloudflareAdapter.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,aAAa,EAGb,cAAc,EACf,MAAM,yBAAyB,CAAC;AAIjC;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;IAC5B;;OAEG;mBACY,aAAa,GAAG,cAAc;IA8D7C;;;OAGG;qBACc,OAAO;IAKxB;;;OAGG;qBACc,MAAM,GAAG,OAAO;EAIjC,CAAC;AA8KH;;;;GAIG;AACH,MAAM,WAAW,iBAAkB,SAAQ,OAAO;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACjC,EAAE,CAAC,EAAE;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH"}
+{"version":3,"file":"CloudflareAdapter.d.ts","sourceRoot":"","sources":["../../../../src/runtime/adapters/CloudflareAdapter.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,aAAa,EAGb,cAAc,EACf,MAAM,yBAAyB,CAAC;AAIjC;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;IAC5B;;OAEG;mBACY,aAAa,GAAG,cAAc;IA8D7C;;;OAGG;qBACc,OAAO;IAKxB;;;OAGG;qBACc,MAAM,GAAG,OAAO;EAIjC,CAAC;AAyMH;;;;GAIG;AACH,MAAM,WAAW,iBAAkB,SAAQ,OAAO;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACjC,EAAE,CAAC,EAAE;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH"}

package/src/runtime/adapters/CloudflareAdapter.js

@@ -74,6 +74,26 @@ export const CloudflareAdapter = Object.freeze({
         return globalThis.env?.[namespace] ?? null;
     },
 });
+/**
+ * Read the Cloudflare request body in a content-type aware way.
+ *
+ * Multipart bodies are read as a binary Buffer (via arrayBuffer) so uploaded
+ * files are not corrupted by text decoding. All other bodies are read as text,
+ * preserving the previous behavior for JSON / urlencoded / text payloads.
+ */
+async function readCloudflareRequestBody(request, platformRequest) {
+    if (request.method === 'GET' || request.method === 'HEAD')
+        return null;
+    const rawContentType = platformRequest.headers['content-type'];
+    const contentType = Array.isArray(rawContentType)
+        ? (rawContentType[0] ?? '')
+        : (rawContentType ?? '');
+    if (contentType.toLowerCase().includes('multipart/form-data')) {
+        const arrayBuffer = await request.arrayBuffer();
+        return Buffer.from(arrayBuffer);
+    }
+    return request.text();
+}
 /**
  * Handle Cloudflare request
  */
@@ -82,8 +102,10 @@ async function handleCloudflareRequest(adapter, config, logger, event) {
         const request = event;
         // Parse incoming request
         const platformRequest = adapter.parseRequest(request);
-        // Read request body
-        const body = request.method !== 'GET' && request.method !== 'HEAD' ? await request.text() : null;
+        // Read request body. Multipart bodies may contain binary bytes, so read them
+        // as an ArrayBuffer and keep a binary Buffer — converting to text first would
+        // corrupt uploaded files. Other content types remain text for downstream parsing.
+        const body = await readCloudflareRequestBody(request, platformRequest);
         platformRequest.body = body;
         // Create mock Node.js request/response objects
         const { req, res, responseData } = createMockHttpObjects(platformRequest);

package/src/runtime/adapters/DenoAdapter.js

@@ -175,7 +175,7 @@ function formatDenoResponse(response) {
  */
 function getDenoEnvironment() {
     // @ts-ignore - Deno.env is available in Deno runtime
-    const env = (typeof Deno === 'undefined' ? {} : Deno.env.toObject?.() ?? {});
+    const env = (typeof Deno === 'undefined' ? {} : (Deno.env.toObject?.() ?? {}));
     return {
         nodeEnv: (env['DENO_ENV'] ?? 'production'),
         runtime: 'deno',

package/src/tools/storage/drivers/R2.d.ts

@@ -4,6 +4,7 @@ export type R2Config = {
     accessKeyId: string;
     secretAccessKey: string;
     endpoint?: string;
+    url?: string;
     binding?: string;
 };
 export type R2MultipartUploadInfo = {

package/src/tools/storage/drivers/R2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"R2.d.ts","sourceRoot":"","sources":["../../../../../src/tools/storage/drivers/R2.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,QAAQ,GAAG;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AA6EF,eAAO,MAAM,QAAQ;kCAET,QAAQ,OACX,MAAM,YACD,OAAO,GAChB,OAAO,CAAC,qBAAqB,CAAC;uBAOvB,QAAQ,OACX,MAAM,YACD,MAAM,cACJ,MAAM,SACX,OAAO,YACJ,OAAO,GAChB,OAAO,CAAC,cAAc,CAAC;oCAOhB,QAAQ,OACX,MAAM,YACD,MAAM,iBACD,cAAc,EAAE,GAC9B,OAAO,CAAC,MAAM,CAAC;iCAOiB,QAAQ,OAAO,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;gBAMxE,QAAQ,OAAO,MAAM,WAAW,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBAyBjE,QAAQ,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;mBAmBpC,QAAQ,OAAO,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;mBAmBxC,QAAQ,OAAO,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;gBAmB9C,QAAQ,OAAO,MAAM,GAAG,MAAM;oBAQhC,QAAQ,OACX,MAAM,YACD;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,CAAA;KAAE,GACvD,MAAM;EAgBT,CAAC;AAEH,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"R2.d.ts","sourceRoot":"","sources":["../../../../../src/tools/storage/drivers/R2.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,QAAQ,GAAG;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AA6EF,eAAO,MAAM,QAAQ;kCAET,QAAQ,OACX,MAAM,YACD,OAAO,GAChB,OAAO,CAAC,qBAAqB,CAAC;uBAOvB,QAAQ,OACX,MAAM,YACD,MAAM,cACJ,MAAM,SACX,OAAO,YACJ,OAAO,GAChB,OAAO,CAAC,cAAc,CAAC;oCAOhB,QAAQ,OACX,MAAM,YACD,MAAM,iBACD,cAAc,EAAE,GAC9B,OAAO,CAAC,MAAM,CAAC;iCAOiB,QAAQ,OAAO,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;gBAMxE,QAAQ,OAAO,MAAM,WAAW,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBA4BjE,QAAQ,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;mBAmBpC,QAAQ,OAAO,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;mBAmBxC,QAAQ,OAAO,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;gBAmB9C,QAAQ,OAAO,MAAM,GAAG,MAAM;oBAchC,QAAQ,OACX,MAAM,YACD;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,CAAA;KAAE,GACvD,MAAM;EAgBT,CAAC;AAEH,eAAe,QAAQ,CAAC"}

package/src/tools/storage/drivers/R2.js

@@ -77,7 +77,10 @@ export const R2Driver = Object.freeze({
             endpoint: config.endpoint,
             usePathStyle: true,
         };
-        return S3Driver.put(s3Config, key, content);
+        await S3Driver.put(s3Config, key, content);
+        // Return the public-facing URL (custom domain when configured), not the
+        // path-style signing URL produced by S3Driver.put.
+        return R2Driver.url(config, key);
     },
     async get(config, key) {
         if (hasWorkersBucketBinding(config)) {
@@ -128,6 +131,12 @@ export const R2Driver = Object.freeze({
         return S3Driver.delete(s3Config, key);
     },
     url(config, key) {
+        // Prefer an explicit public base URL (custom domain CNAME'd to the bucket root):
+        // no bucket segment, since the domain already resolves to the bucket. The signing
+        // `endpoint` (used by tempUrl/put/get) stays path-style and independent.
+        const publicBase = config.url?.trim() ?? '';
+        if (publicBase !== '')
+            return `${publicBase.replace(/\/$/, '')}/${key}`;
         if (config.endpoint !== undefined && config.endpoint.trim() !== '') {
             return `${config.endpoint.replace(/\/$/, '')}/${config.bucket}/${key}`;
         }

package/src/tools/storage/drivers/S3.d.ts

@@ -5,6 +5,7 @@ export type S3Config = {
     secretAccessKey: string;
     endpoint?: string;
     usePathStyle?: boolean;
+    url?: string;
 };
 export type GS3Cred = {
     accessKeyId: string;

package/src/tools/storage/drivers/S3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"S3.d.ts","sourceRoot":"","sources":["../../../../../src/tools/storage/drivers/S3.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,QAAQ,GAAG;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,CAAC;AAwGF,eAAO,MAAM,QAAQ;gBACD,QAAQ,OAAO,MAAM,WAAW,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBAkDjE,QAAQ,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;mBA8CpC,QAAQ,OAAO,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;mBAsCxC,QAAQ,OAAO,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;gBAwC9C,QAAQ,OAAO,MAAM,GAAG,MAAM;oBAOhC,QAAQ,OACX,MAAM,YACD;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,CAAA;KAAE,GACvD,MAAM;EAqDT,CAAC;AAEH,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"S3.d.ts","sourceRoot":"","sources":["../../../../../src/tools/storage/drivers/S3.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,QAAQ,GAAG;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IAIvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,CAAC;AAwGF,eAAO,MAAM,QAAQ;gBACD,QAAQ,OAAO,MAAM,WAAW,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBAkDjE,QAAQ,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;mBA8CpC,QAAQ,OAAO,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;mBAsCxC,QAAQ,OAAO,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;gBAwC9C,QAAQ,OAAO,MAAM,GAAG,MAAM;oBAYhC,QAAQ,OACX,MAAM,YACD;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,CAAA;KAAE,GACvD,MAAM;EAqDT,CAAC;AAEH,eAAe,QAAQ,CAAC"}

package/src/tools/storage/drivers/S3.js

@@ -209,6 +209,11 @@ export const S3Driver = Object.freeze({
         }
     },
     url(config, key) {
+        // Prefer an explicit public base URL (custom domain mapped to the bucket root):
+        // no bucket segment, since the domain already resolves to the bucket.
+        const publicBase = config.url?.trim() ?? '';
+        if (publicBase !== '')
+            return `${publicBase.replace(/\/$/, '')}/${key}`;
         const endpoint = config.endpoint?.trim() ?? '';
         if (endpoint !== '')
             return `${endpoint.replace(/\/$/, '')}/${config.bucket}/${key}`;

package/src/tools/storage/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/tools/storage/index.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC;AAErD,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,KAAK,cAAc,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,CAAA;CAAE,CAAC;AAuFrE,eAAO,MAAM,OAAO;mBACH,MAAM,GAAG,WAAW;cAuCnB,MAAM,GAAG,SAAS,QAAQ,MAAM,YAAY,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;cAW7E,MAAM,GAAG,SAAS,QAAQ,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;iBAW/C,MAAM,GAAG,SAAS,QAAQ,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;iBASnD,MAAM,GAAG,SAAS,QAAQ,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;cASzD,MAAM,GAAG,SAAS,QAAQ,MAAM,GAAG,MAAM;kBAY/B,MAAM,GAAG,SAAS,QAAQ,MAAM,YAAY,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;EAqBhG,CAAC;AAEH,eAAe,OAAO,CAAC;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/tools/storage/index.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC;AAErD,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,KAAK,cAAc,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,CAAA;CAAE,CAAC;AAwFrE,eAAO,MAAM,OAAO;mBACH,MAAM,GAAG,WAAW;cAuCnB,MAAM,GAAG,SAAS,QAAQ,MAAM,YAAY,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;cAW7E,MAAM,GAAG,SAAS,QAAQ,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;iBAW/C,MAAM,GAAG,SAAS,QAAQ,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;iBASnD,MAAM,GAAG,SAAS,QAAQ,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;cASzD,MAAM,GAAG,SAAS,QAAQ,MAAM,GAAG,MAAM;kBAY/B,MAAM,GAAG,SAAS,QAAQ,MAAM,YAAY,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;EAqBhG,CAAC;AAEH,eAAe,OAAO,CAAC;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC"}

package/src/tools/storage/index.js

@@ -14,6 +14,7 @@ const normalizers = {
         accessKeyId: String(raw['accessKeyId'] ?? raw['key'] ?? ''),
         secretAccessKey: String(raw['secretAccessKey'] ?? raw['secret'] ?? ''),
         endpoint: typeof raw['endpoint'] === 'string' ? raw['endpoint'] : undefined,
+        url: typeof raw['url'] === 'string' ? raw['url'] : undefined,
         usePathStyle: Boolean(raw['usePathStyle'] ?? raw['usePathStyleUrl'] ?? false),
     }),
     r2: (raw) => ({

package/src/worker-runtime/drain.d.ts

@@ -1,4 +1,15 @@
 import type { WorkerModule } from './processor-registry';
+export declare const csvEnvSet: (key: string) => Set<string>;
+type DrainTarget = {
+    queueName: string;
+    processorSpec: string;
+};
+/**
+ * Narrow drain targets by env allowlist/denylist:
+ * - `WORKER_DRAIN_QUEUES`: if set, only these queues are drained.
+ * - `WORKER_DRAIN_EXCLUDE_QUEUES`: these queues are always skipped.
+ */
+export declare const filterDrainTargetsByEnv: (targets: DrainTarget[]) => DrainTarget[];
 export type AppWorkerDefinition = Readonly<{
     name: string;
     queueName: string;
@@ -8,6 +19,13 @@ export type AppWorkerDefinition = Readonly<{
     concurrency: number;
     processorSpec: string;
 }>;
+/**
+ * Resolve which queues this Worker should drain: app manifest workers that have a bundled
+ * processor and are not disabled. The backend lifecycle registry is authoritative for
+ * start/stop — a worker explicitly `stopped` there is skipped; otherwise the manifest's
+ * `autoStart` decides.
+ */
+export declare const resolveDrainTargets: (appWorkerDefinitions: AppWorkerDefinition[], workerModules: ReadonlyArray<WorkerModule>) => Promise<DrainTarget[]>;
 /**
  * Ensure a drain loop is running. Returns immediately. If a loop is already active this is
  * a no-op (concurrent-PING guard). The returned promise resolves when the active loop ends
@@ -15,4 +33,5 @@ export type AppWorkerDefinition = Readonly<{
  */
 export declare const ensureDraining: (appWorkerDefinitions: AppWorkerDefinition[], workerModules: ReadonlyArray<WorkerModule>) => Promise<void>;
 export declare const isDraining: () => boolean;
+export {};
 //# sourceMappingURL=drain.d.ts.map

package/src/worker-runtime/drain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"drain.d.ts","sourceRoot":"","sources":["../../../src/worker-runtime/drain.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAgCvE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC,CAAC;AAsKH;;;;GAIG;AACH,eAAO,MAAM,cAAc,GACzB,sBAAsB,mBAAmB,EAAE,EAC3C,eAAe,aAAa,CAAC,YAAY,CAAC,KACzC,OAAO,CAAC,IAAI,CAUd,CAAC;AAEF,eAAO,MAAM,UAAU,QAAO,OAA+B,CAAC"}
+{"version":3,"file":"drain.d.ts","sourceRoot":"","sources":["../../../src/worker-runtime/drain.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAoBvE,eAAO,MAAM,SAAS,GAAI,KAAK,MAAM,KAAG,GAAG,CAAC,MAAM,CAM/C,CAAC;AAEJ,KAAK,WAAW,GAAG;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,GAAI,SAAS,WAAW,EAAE,KAAG,WAAW,EAW3E,CAAC;AASF,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAC9B,sBAAsB,mBAAmB,EAAE,EAC3C,eAAe,aAAa,CAAC,YAAY,CAAC,KACzC,OAAO,CAAC,WAAW,EAAE,CA6BvB,CAAC;AA8HF;;;;GAIG;AACH,eAAO,MAAM,cAAc,GACzB,sBAAsB,mBAAmB,EAAE,EAC3C,eAAe,aAAa,CAAC,YAAY,CAAC,KACzC,OAAO,CAAC,IAAI,CAUd,CAAC;AAEF,eAAO,MAAM,UAAU,QAAO,OAA+B,CAAC"}

package/src/worker-runtime/drain.js

@@ -21,13 +21,32 @@ const intEnv = (key, fallback) => {
     const parsed = Number.parseInt(Env.get(key, '').trim(), 10);
     return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
 };
+export const csvEnvSet = (key) => new Set(Env.get(key, '')
+    .split(',')
+    .map((value) => value.trim())
+    .filter((value) => value.length > 0));
+/**
+ * Narrow drain targets by env allowlist/denylist:
+ * - `WORKER_DRAIN_QUEUES`: if set, only these queues are drained.
+ * - `WORKER_DRAIN_EXCLUDE_QUEUES`: these queues are always skipped.
+ */
+export const filterDrainTargetsByEnv = (targets) => {
+    const onlyQueues = csvEnvSet('WORKER_DRAIN_QUEUES');
+    const excludeQueues = csvEnvSet('WORKER_DRAIN_EXCLUDE_QUEUES');
+    return targets.filter((target) => {
+        if (onlyQueues.size > 0 && !onlyQueues.has(target.queueName)) {
+            return false;
+        }
+        return !excludeQueues.has(target.queueName);
+    });
+};
 /**
  * Resolve which queues this Worker should drain: app manifest workers that have a bundled
  * processor and are not disabled. The backend lifecycle registry is authoritative for
  * start/stop — a worker explicitly `stopped` there is skipped; otherwise the manifest's
  * `autoStart` decides.
  */
-const resolveDrainTargets = async (appWorkerDefinitions, workerModules) => {
+export const resolveDrainTargets = async (appWorkerDefinitions, workerModules) => {
     let statusByQueue = new Map();
     try {
         const registered = await listWorkers();
@@ -50,7 +69,7 @@ const resolveDrainTargets = async (appWorkerDefinitions, workerModules) => {
             targets.push({ queueName: definition.queueName, processorSpec: definition.processorSpec });
         }
     }
-    return targets;
+    return filterDrainTargetsByEnv(targets);
 };
 const toJob = (queueName, pulled) => {
     return {