[herber]

Note

Medium Risk
Introduces multipart HTTP handling and direct-to-storage uploads; small direct uploads buffer the full file in memory for retry safety, and misconfigured content types could break presigned PUTs.

Overview
Adds metorial.files.upload so clients can upload paths, bytes, or binary streams, with README examples for common cases.

Uploads ≤100 MB go to POST /files as multipart (MetorialRequest now supports files/data; the endpoint manager forwards them via requests files + data). Larger files use a three-step flow: get_upload_url, unsigned PUT to presigned storage (matching Content-Type, no API auth), then complete. Optional metadata covers purpose, title, instance_id, and store placement (store_id/store_path/store_replace) with client-side validation.

New integration tests cover multipart payloads, presigned flow, validation errors, and API/storage failures.

^{Reviewed by Cursor Bugbot for commit ba041b1. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 9c9f090. Configure here.}