- routes rewritten on OpenAPIHono with zod schemas; /openapi.json via doc31;
/api/* auth middleware runs before zod (401 before 422); problem+json kept
- multipart upload (worker-orchestrated R2): POST /multipart, PUT /parts/:n,
DELETE /multipart; finalize auto-completes multipart or falls back to single-shot
- GET /files/:id serves public/shared attachments inline with stored content-type;
responses include public_url when available + public/shared
- FakeR2 supports multipart; tests cover multipart, /files visibility, openapi
Co-Authored-By: Claude <noreply@anthropic.com>
9a0a2b1da7