From e54b94ee665944c5e8135e37315c3242811b1f41 Mon Sep 17 00:00:00 2001
From: Michael Mantos <miko.mantos@gmail.com>
Date: Mon, 16 Feb 2026 02:37:12 +0000
Subject: [PATCH 1/6] fix: Add multipart form-data support for Laravel HTTP
 server

---
 composer.json                                 |   1 +
 src/Drivers/LaravelHttpServer.php             | 197 +++++++++++++++++-
 tests/Fixtures/example.pdf                    | Bin 0 -> 46753 bytes
 tests/Fixtures/lorem-ipsum.txt                |   9 +
 .../Drivers/Laravel/LaravelHttpServerTest.php | 136 ++++++++++++
 5 files changed, 339 insertions(+), 4 deletions(-)
 create mode 100644 tests/Fixtures/example.pdf
 create mode 100644 tests/Fixtures/lorem-ipsum.txt

diff --git a/composer.json b/composer.json
index d8489c39..6c145291 100644
--- a/composer.json
+++ b/composer.json
@@ -16,6 +16,7 @@
         "ext-sockets": "*",
         "amphp/amp": "^3.1.1",
         "amphp/http-server": "^3.4.4",
+        "amphp/http-server-form-parser": "^2.0.0",
         "amphp/websocket-client": "^2.0.2",
         "pestphp/pest": "^4.3.2",
         "pestphp/pest-plugin": "^4.0.0",
diff --git a/src/Drivers/LaravelHttpServer.php b/src/Drivers/LaravelHttpServer.php
index 97ae5fdb..eb21fec4 100644
--- a/src/Drivers/LaravelHttpServer.php
+++ b/src/Drivers/LaravelHttpServer.php
@@ -4,9 +4,13 @@
 
 namespace Pest\Browser\Drivers;
 
+use const UPLOAD_ERR_OK;
+
 use Amp\ByteStream\ReadableResourceStream;
 use Amp\Http\Cookie\RequestCookie;
 use Amp\Http\Server\DefaultErrorHandler;
+use Amp\Http\Server\FormParser\BufferedFile;
+use Amp\Http\Server\FormParser\Form;
 use Amp\Http\Server\HttpServer as AmpHttpServer;
 use Amp\Http\Server\HttpServerStatus;
 use Amp\Http\Server\Request as AmpRequest;
@@ -25,6 +29,7 @@
 use Pest\Browser\GlobalState;
 use Pest\Browser\Playwright\Playwright;
 use Psr\Log\NullLogger;
+use Symfony\Component\HttpFoundation\File\UploadedFile;
 use Symfony\Component\Mime\MimeTypes;
 use Throwable;
 
@@ -239,11 +244,21 @@ private function handleRequest(AmpRequest $request): Response
 
         $contentType = $request->getHeader('content-type') ?? '';
         $method = mb_strtoupper($request->getMethod());
-        $rawBody = (string) $request->getBody();
         $parameters = [];
-        if ($method !== 'GET' && str_starts_with(mb_strtolower($contentType), 'application/x-www-form-urlencoded')) {
-            parse_str($rawBody, $parameters);
+        $files = [];
+
+        if ($method !== 'GET' && str_starts_with(mb_strtolower($contentType), 'multipart/form-data')) {
+            [$parameters, $files] = $this->parseMultipartFormData($request);
+
+            $rawBody = '';
+        } else {
+            $rawBody = (string) $request->getBody();
+
+            if ($method !== 'GET' && str_starts_with(mb_strtolower($contentType), 'application/x-www-form-urlencoded')) {
+                parse_str($rawBody, $parameters);
+            }
         }
+
         $cookies = array_map(fn (RequestCookie $cookie): string => urldecode($cookie->getValue()), $request->getCookies());
         $cookies = array_merge($cookies, test()->prepareCookiesForRequest()); // @phpstan-ignore-line
         /** @var array<string, string> $serverVariables */
@@ -254,7 +269,7 @@ private function handleRequest(AmpRequest $request): Response
             $method,
             $parameters,
             $cookies,
-            [], // @TODO files...
+            $files,
             $serverVariables,
             $rawBody
         );
@@ -362,4 +377,178 @@ private function rewriteAssetUrl(string $content): string
 
         return str_replace($this->originalAssetUrl, $this->url(), $content);
     }
+
+    /**
+     * Parse multipart form data and return request parameters and files.
+     *
+     * @return array{array<int|string, mixed>, array<int|string, mixed>}
+     */
+    private function parseMultipartFormData(AmpRequest $request): array
+    {
+        $form = Form::fromRequest($request);
+
+        $values = $form->getValues();
+        $files = $form->getFiles();
+
+        return [
+            $this->normalizeMultipartParameters($values),
+            $this->normalizeMultipartFiles($files),
+        ];
+    }
+
+    /**
+     * Normalize multipart field values to a Symfony request-compatible array.
+     *
+     * @param  array<string, list<string>>  $fields
+     * @return array<int|string, mixed>
+     */
+    private function normalizeMultipartParameters(array $fields): array
+    {
+        $normalized = [];
+
+        foreach ($fields as $field => $values) {
+            foreach ($values as $value) {
+                $this->setFieldValue($normalized, $field, $value);
+            }
+        }
+
+        return $normalized;
+    }
+
+    /**
+     * Normalize multipart files to a Symfony request-compatible files array.
+     *
+     * @param  array<string, list<BufferedFile>>  $files
+     * @return array<int|string, mixed>
+     */
+    private function normalizeMultipartFiles(array $files): array
+    {
+        $normalized = [];
+
+        foreach ($files as $field => $fileEntries) {
+            foreach ($fileEntries as $fileEntry) {
+                $this->setFieldValue($normalized, $field, $this->createUploadedFile($fileEntry));
+            }
+        }
+
+        return $normalized;
+    }
+
+    /**
+     * @param  array<int|string, mixed>  $target
+     */
+    private function setFieldValue(array &$target, string $field, string|UploadedFile $value): void
+    {
+        $segments = $this->fieldSegments($field);
+
+        if ($segments === []) {
+            return;
+        }
+
+        $this->setNestedFieldValue($target, $segments, $value);
+    }
+
+    /**
+     * @return list<string>
+     */
+    private function fieldSegments(string $field): array
+    {
+        if (! str_contains($field, '[')) {
+            return [$field];
+        }
+
+        $segments = [];
+        $head = mb_strstr($field, '[', true);
+
+        if ($head !== false && $head !== '') {
+            $segments[] = $head;
+        }
+
+        preg_match_all('/\[([^\]]*)\]/', $field, $matches);
+
+        foreach ($matches[1] as $segment) {
+            $segments[] = $segment;
+        }
+
+        return $segments;
+    }
+
+    /**
+     * @param  array<int|string, mixed>  $target
+     * @param  list<string>  $segments
+     */
+    private function setNestedFieldValue(array &$target, array $segments, string|UploadedFile $value): void
+    {
+        $segment = array_shift($segments);
+
+        if ($segment === null) {
+            return;
+        }
+
+        if ($segments === []) {
+            if ($segment === '') {
+                $target[] = $value;
+
+                return;
+            }
+
+            if (! array_key_exists($segment, $target)) {
+                $target[$segment] = $value;
+
+                return;
+            }
+
+            if (! is_array($target[$segment])) {
+                $target[$segment] = [$target[$segment]];
+            }
+
+            $target[$segment][] = $value;
+
+            return;
+        }
+
+        if ($segment === '') {
+            $target[] = [];
+
+            $lastKey = array_key_last($target);
+            if (! is_array($target[$lastKey])) {
+                return;
+            }
+
+            $this->setNestedFieldValue($target[$lastKey], $segments, $value);
+
+            return;
+        }
+
+        if (! isset($target[$segment]) || ! is_array($target[$segment])) {
+            $target[$segment] = [];
+        }
+
+        $this->setNestedFieldValue($target[$segment], $segments, $value);
+    }
+
+    private function createUploadedFile(object $fileEntry): UploadedFile
+    {
+        $tempPath = tempnam(sys_get_temp_dir(), 'pest-browser-upload-');
+        assert($tempPath !== false, 'Failed to create temporary upload file.');
+
+        $contents = method_exists($fileEntry, 'getContents') ? $fileEntry->getContents() : '';
+        $contents = is_string($contents) ? $contents : '';
+
+        file_put_contents($tempPath, $contents);
+
+        $clientFilename = method_exists($fileEntry, 'getName') ? $fileEntry->getName() : 'upload';
+        $clientFilename = is_string($clientFilename) && $clientFilename !== '' ? $clientFilename : 'upload';
+
+        $mimeType = method_exists($fileEntry, 'getMimeType') ? $fileEntry->getMimeType() : 'application/octet-stream';
+        $mimeType = is_string($mimeType) && $mimeType !== '' ? $mimeType : 'application/octet-stream';
+
+        return new UploadedFile(
+            $tempPath,
+            $clientFilename,
+            $mimeType,
+            UPLOAD_ERR_OK,
+            true,
+        );
+    }
 }
diff --git a/tests/Fixtures/example.pdf b/tests/Fixtures/example.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..afa36062bc605220a3d64e10f06abf0d801df772
GIT binary patch
literal 46753
zcmeFaWmsEVyDkic7D@}WSaE_CmmndyTXA<N5*&iNw765;p+yT6DDKcgafbrMi@Q4%
zIH6tZU8{SYz0disYw!0vKOiKTW6q)XyywW1=N>Z;rM!q31CWsog>qzbeI5k}U<N=9
z%u#rFn3T;NEFl1DQ5StH8`y>j)JosXng)eQ*bbua0JQ^9%Rt@CEG_k!*cq7t+SKYm
zAU8nT%-Ycf-~tBef!MTZ0D?BKl4=kGDKiHqc2*8XRuC+sl!UU3G(Eu5%mM-shZtHw
zVHt%@?Vwf=CLk-Ak@@xkP|`Qnw=?^*kes|C6Oe`F*D+WZ<n5qFj)o9eACxT2^qF8o
z09e7w{@FP*sI`c`1FY{NTrA8i>_BE_Fp!fK!~&vYW~PGu!}7^MjsEK_e0(SnYol8z
zSpR~=P#*w9VG@!7Fv&vgtn@Aa%Eb0pCS_L}2!Kgl&cGaE=zzkc<Y?gVbC0Bzz6k_{
zNzKg2!4$v(2C<?rNkGg@OdS9~APXl9SEwb_PRT~!5LQ|Q;$&tB5x3KKg*9j9U@s4`
z6NXyZK&>Ix4gfF;lbD&M18n$ABErfd5JRXDtlpo+mF@Jc?Tul512Cg7NkgnnZku8U
z0-5>v0QL^B6K92T^X=w4+>;k#l45Z1@NjVOum{}D6r3>JlShxy9-}-#Lq)@Q`UDe~
z8Xp%22Ny_ANkq-X%FDya3g!@y(3TYtQ4{3=%Uda^=^2=qn()cky4o1IXhTd4Z$802
zLPj)u!~_rj6z=8=9R6+n2)Awg>+k+O1Vnfw*fGEpc({A;h<`tdrH_e#hyjGZC-{`~
zW)cqhwje*;`Psh;|F>@-%(d?C&Y#)3e_5~vr^-@c2H$P`J3(Lqr^<C?1TKDpgCoA?
z-Jeg0RMq9ha~W|D-(kfIYc~WY_8Q-9{Ch!w0vir<I|i~y_&#`?xt{I8A(eQzKo&>K
z$A_xNC9B89Qg}?2_zB$HiPJkWd7rLDinx&v5eFTK-zDxa_&X0qI*&T~XA{o{bDOPj
zN~}O7P_gD)P8q;GZg4T#+?ZKkzgQa?zH(S!Q_35$lDV$ewA`=E)df|YFg!I4711Oc
z!U?Jn&Adz8VelId(p@J<NVqjEP9{ghn<i5ylSwiNCzJIepx$!rB~Vpj4<MZTd`3yY
zHox4sZhXRKy}0n{VzaoFY#(nCmnW!VYSBWv!OCpwj$n5e*?&IK@Elg=@;OzE?pEf3
zipNqlr_60OO}#v9HrBm3*?I9j8<-FF9_aFLxVhCGdGafRF7%o++IX7+_1bt*8@Vg0
zzOElljX=X2S?)d{?~H{1$~NMOl=j$OFPVeN>gZI09Z#-q;4nGxiGIH7W#nJXW<<z&
ztCr9U?gn@@5#j3=5O~YYwdoWmytuR?ZVpMtXWJPW%DsWpc|L#-wf*-Ri+9%fzrLcl
zuF8~5Ne<*^$r5=I-@paCr`^616fq806Q|X%dum_L;<~!<?oF-Fk7sS<RUNIHnB@)k
zkIUuo5^<R1WjRNxYRgj1pPk-)2mN<{5pP?C`2fJBhZ`gLYm4I}QZr^J;q@ci1orEb
z#?>XqUAyxoJ)aW-X86&z(TV7+c-=H7-Hs}&j@PBc$Imv7_69lv-~PAzCg9)@2Kex=
zesDTAdI#5+=ngr1HD+2jy1y9TzdBg>x;L`?y{FYFr5U<-Ij?87nA4XR5$`n1pN{3w
zz{RW4_&?AeIAT}*t(DRJAF|VD+XT*w6})p1!yLr?P1;=HeClD1T1PXN-k}6?p(%2q
z+|~`$X0U$n{*Uwncw)bClvcah4cgrx-re9^Y-S{qo#ait?L#c+1`Y?5@eGuK<22(U
zKfK;N8Z-Dm&<prQ5)-}>$;<SHEbHrcJJ(q|+y~#kZf8vd^^7)43R~?Pn(f=0?VDJQ
z`=c_ZT>VcXk?|W6sDB|bcL&5TO56eQ$F*?>#2pZ@+463V_~T>a4v0G-?mj-@h<{pC
zcR<_$@u#JH$A~|WxC7!2h(9liU+;H}xMRc}BYsEVjuF4(aW_ZYG2)I9zawzRh~M$J
zn<MTRamR??5x8T-?|9tJ5qFHZW5n+W+%e*JJnrU*J4W0w;&%k@81XwEcXPxYBkmaS
zI|6r%_#KbCIpU5HcZ~QQfjdV0j>p{`amR=|M*NPz9V33n<8F?)W5gXJen;Sr5x?Vc
zH%Htt;*Jr&BXGxv-|@JcBkmY+$B5q%xMRfcc>Evci2ny}1(unsJ}a*{tFAaJui9)0
zNRW+Gl@s`V5dSSHq%hCai$*GIw}bHdi@^GesG8j#U!|%@V{#_dD-Nf*0Vx7GUWRR+
zqw=c5AA4Cj%R?J|YyT}R|A$KU1Ishi2KG7ZS1YXM(uX*_+{LF|ug`5Z*v<`D_GWUo
z2M>p<My7Ha^Qxt|q1Le#p3M;@dJO42ul_?t{~bx#J@o4C=XRU!-k2PGGg;PG^&&Iw
zPBA5`m&<MMVYkqqwnFm~bR)}h$LDg=a`U9Pb!6k%9ErTrx0`sAyc)0g<wlO~UjARk
z;CS^ppJ#I8)wJ71uzQj0P_<iHmUZK$^w`ODE$@%Y+n?MR81KoGnh=KWo}U#}j;`xj
z6^$P&32T*X*2}3hkE>*ai`Nn_vEV%p5GH-oX>_;oZv=t7H<D+A`DE07!@S1vxc)k4
z$Fcr8+q%+Sa@zeQqi}2W<e;_Z6J)W+Ij_82d~RPHT6BJXr8Kp9e5Euvt<@}LYaJ=m
zR&_S5MSpV2o3u4x?9Muo-g{zFewVnz;5Q!3npE*Q<BaasRD+5arnxRdrKc@UucW5U
zudnkg++mZ&RkFvq0m9tlE05~+%WH17N^hb`t{b=vWj1Hf*6@s0-iV`B6Nl<R`$m`Q
ziAwZ`IHN*J4cac%7iD*eI}HBffh+9*ccK2Oqm}Mup}qM|QCm@M^@FPB-SG#-C7Ury
zbH`azJ?KnucrFJ6;}gvzbNeHCMQ0l$(^`3Q_Ey*Rg;x7@Rk|FiCpytv2}bpl6O3I>
zQe}6EI}Co~!K~}d6bW~s`N@oySnkSnUGmBD*U_tsmDAHJvy&73)t)Etn{&h(XD61&
zr&h<K*2iO213K;|i?){88f0A{$ugN}%NU~+iiziUi8~Db#)BxMP{UPQOWw-u!YR$k
z#!Ah`#>pR-%!kXcpXnw(JLu_%*X2!eIfX1L#0%3+=PJ>}c0*W_r0+KVoglczc6Ri`
zexrNK;}Uqd9J%=k4$kfN>#FVnCt-v*c~s|;-QC8&8w4I0{$7#)9d3(%cO6JK6Su)G
z{s<89N7xJYzam-~>H`>=ft;ZKedr6&Um5?i&=+E`h!iMHiV%CKqn#nd9sr9j0t?|`
zs048UX#I@d!K4gvaR4y=43Q!9$Gh+!?~*zwOrkCh;z|y;F+E^K#aRKjF*y`r(Kr4K
zvvIpyoegjsg#)(x_JEKO)CHggWMSn5uyBF_Y(Qof0FaG^16G;19n{h0w#2XQ{!GH+
zbO4xsM$fR(w}V(4!s2cS!}k0=4u>Sb!OjtKTlXJ<H9%~CMb)rHxsB)nYn~ava2w78
z@U!LH1_6dvD7U*|Jrn==#tg7CfpvlvU}6vJKN~Et3W@^CKk?^)W&Se~%g^{B|H1&)
zR~dbKi@!#2oBBBbX-6wFYpA`M1FZYvfZG%E3ynWcDfs_bB`mIq_3aS<C;(*nk0k`H
zt)YJpY61)R0&7|fzy?DcYG(wCNuu?0urQbvVc|~zTCA`Wz{&~>>B7Ou$q8TsvogZo
zIXM8V?67byuzes{PQky1B53FUi{A2cFe-|YC`_;y0JW)ugN;2G6O*&EGozWlwLT-%
z&V<S6XFM8vCdjY&G&Da?`=9;(Tg;X}L#2pW!szp7u#`W}Adr)V^RIL0k~*W_V{KIZ
zbY`yPJJ%<hjXv5>$lrnO<>>+fd;(qHn6u%Wu1SzXP6eyP{Ib<2L>?V)w;J=x^48PY
z9yQ;)-yO)+$nJ;2(9(Uicyjq1o8hLy``~2eYEf1AP4_W>_gqu#?ni#F2|lm+gP!K<
z2LG>`<}}_v>@TZ4XT0WOgS(OFBd3sh#{)emu^G`XCw@#1c+b2^rDKi30Ts>^9DrLp
zr%7t#0w0OXHmKY~WRPIQ#wW)%dX4WF5^O$N{8%IVg~W(m28*VDY+{WX^FZj5g2E>)
zLDdf;eno)$s?ZIyKs!{cnjYl*fI-D7%}PM*4~N3OFXRd(3_?W!1Xbfa54QJTTj(Lo
z5~w0lcmb7W70PJ3;SYHf3NYr+gBFM0=c3+2auPy+r~%nj)p5R$OzTpv5e{d|?psqS
z`AU-#CyD6E%lBK1<t6uevGZfVPsu-N>ZBRt+^-pBK2EZMkDxWE{`_=ppEaGF29TI<
zi+P0E(DjD#`zvuiUQ1!2gW(q5?)-v}V*V@BvMFC56{_C9KjFEtvPxC@V3(N4I#;-e
zJv{g+P9eakRFALIaK3xcO#m%g<0A%K8y5P?`|$5C4<8eit6{8pWdLOvFD}VZPfnB6
z)ylR8TS1UfG?^|A5xFETEnv<uvrECNp3;0xW0c%sd`lS>myhP#v>NfOaF@rrGZbps
zWnYWMn8_|IS!?IKX0ERj4oYS#00dLlgY`+q9G7P~%a1U`-|Y#dCk0@+TU?&C9iDAk
z)S1ekbpMESf0Xumh#yZ=-{;_4#&l2X^<V*;SrXzPEp;?jH9oDuEKs>hLK^(uwRXTg
z?(1NP1!^?$6H}G9_o<$LX%c=wtf_7Ok#5L#f;5wowp-&v63yH8B5>Yvq8XyDMk+H<
z1$$D(y)qr#k3H0PA}1z%xS&iBqRE9B=dXY<MRH(wbf`*rD2BioHn{9!K*M>TYzrS#
ziU2H}Y&vNi?34ToOH7)CIiz(b&WXOU?MvOwBvdJn@^gPooL@ArB>j1>k?0PO^W!*z
zDz7AW5w2w50(IChxf&r#)=JM6PW$=Z8*~-Pe3C%P`$N|ghi(SuFI}>zrRmrlQ>9->
zr-(`C25Q_FJ|G~$Q~_FH66hD*tEkvCU;sYVubt;maGpNrC40IOr`?qoL}_fk{k%e7
z;k8HPX%s?mX@FdQ^c$K<D@98D7Q9`$t4u-B0WZ)n8!%#v#$Jf3;I%dRA*OjtuF`9Y
z6$9{#^%{bOvE1ZMb&*cxlp$s*5Yx+&g+MEhu!j-q=(f^{q~nrSLgqFFGuwul#Cume
zJ7NZtk8SM|gIT|~bZn<3i>TN!K1NBRK$sQwj!sJqq9!sreNVBL&HzP>lw_S{xz9<e
zbXa`;0_k}Voe?Bk1_ot6VhmamalYqs10T}q%G8HFUx)KdmCUKy;h&1@Z;8Hn{{TKd
zOT8|f;oQ<LKF+*DJM5$d{D^tz2{ftQ#NUbDX~s-v*Z%$0x_<qJhlgc_FR3+KgvP!p
zu=PtJCaRoRPqHU*pVdd!<nJ$SD|&)=hSbE>#cqh^3Bujbj!f6p#KQXdF-&@c$Xh8Q
zdM?@UYQeevofE)}l`Udl%dektU9xoBO;b@UdIt;PB5U2-FA`g7Nj=<+dCwfGJ%4bD
z#@9m$cJxX=mPl#ZY1O(<d%*#2ENU;UT2+1FL{MVuy<<t>jz+w`tF*j2=Xx@Mp2>3V
z@pcd$xA4uYD%($2uPzAT-jQysdOfMcgIoV}^_57X9OWCO>$3J@XEB0#JxcKk99OMi
zUL~5>;#~J+j`zXH;TWyckHZ;RP9Z_}0DB=`@T!x`y#6b&Wwc!2181aEt4S3pQM*_3
zRhk`I>^*IDyp*)g4IZqL=6NXao%c^4DhxfO$juXZ_w^%|s9aL_1<R-P?qO~1vue=k
z6=9^;8;e>vmZlclZKU`()H4+9jYp^PW8JO@5^z(_!PgIjX2U15sP)2|XDqD5sWn%^
zd0WA?2!4&JW>N}L=?iaS!K7D7@@J$45HVh>R9(s$G;e=Q4(wcei+RyX+0Uj=_d>$z
zg4?q_YVw|16@(HzFv+!6w5t0Ue^ij3#afwA%0PBHWfEh>xIpQTNlI8N(y-Jn^J4kn
zh~Af(2tXWRG8z4)Cu~nnoOTOAAwz#DE}|r52$lROq_`+gfhJ_R7R%M{Egq;I{Je(}
z=?HQI1*e;f^Xa$-D#D{Wl>I>d6zUs4u)J~u`PQg2To72oMnAPyme!zGsEht4CxYYD
z{K_`cLa!BmvA$>rHTFY%g`*+^k@mX!Whp*#Aq28MTW`girN$pup}e2DlNauw(HY}j
zZ7*+Yd7#THUdl6YIlVB>3Y|#MBMguuKcihp=pER0)-f-Xq|AsUpgk}AmWiUvy0zRP
zDl(?^so_=3;f+t!aZ|<gJ!2y2LP>#8FK^*dgH}y(!=#47M(T3>l9H4-<`2qt(b4<_
zE;mEh+<QM5;B0|RQ^##b2O3e)`5f_E8Jj~;V(;D4xSeL)OX$r?DVzE7T%Rtd{pIlI
z)%xwt6OtVTqtt&IL;tWt<bTFe`|q|WVOA46;MVX}gl%yEZcVV;EimBLa{6g+ia}uk
z*kGok7$<=9*HJMbGXVDgGp8632n*)+EAOqLC<8Gv)BkCR-ev%@aBwg(vvP8>06@TB
z7ST`Z=hmdMzqM6w3&PAHVOSfmIB)g<;7>CbW(>g$PeTX!Tf-E#7Z%w~S>M1Oz@!8V
zg!gkF%&`5{=D+N=e}tpE#S3O`3PT-X{fEV{lQJ`cHTkQ>zu9|#Gx~oS$HMv!`j$|b
zz526)KN><|QZ<7(L+s@3AjXheYx$Q+|Et754xuoKnAzJ{>br_S4S&TH{AEY~t=YeQ
zh4^Ke0RbFr%zuk>_rEjV*nlj53v1_++Nfq_N!a1)W$XmqJ@XWwC89|)?Xz{I+OST@
zKBJt>%pPHErdM2wir&(ajJFn5%%pgcEuxXh&_+^<Nymo4Z53Nn>RTgl*?Jz;ujoY1
zEn3KbALahlz33m3@`xW5>P4U83evxS-)3QQDxnm=l=*r{Cuo=TkdJkDwKrV=PI-Y-
zqBC;G%8dKC*b@^_a<5Y^wQAKA!4d8N_^K=T(dtBTv&Y)%D{Z7F+ux@5N5r+db>V3F
z;b?mzrw;AmeBiDT1iqj3Ds_12&DWzL&celhUZ-)lTRgqlq7|@%tIN&H+dAO*(F`wv
z^s0S*WcAsGR1WU<%`1`=d)9Kys*A<|npZmrd$VTl`m)`K-sl293{AF1ls5D%y&uZY
zKIjy;FF#y;#4kc1&?3a|Y;DfSEq~1M3JWm^9Wh&809&Lt&<4{n8||rlLx9}A%qx$q
zGD3Jnz-LbsXi($M;S+(e1n>K?qcgQ0tE0n_GeqNjfzx;|V#m-y9=j4M15|rbBoEt4
zJZ~yS;vgkIw$plg5?=7fJ3gU)+ZM;dD|Umz_li+5Du+}qy49527mneP`~;N}t-F`U
z$>XpHv?mV&?hkNiP(6J0Lw?N^p^=8=Ug-;UjHdylwcLKB<eOs*YyGT8pWCryU!pzo
z_u(GVN=<so>VG=kbozxcy-#l=rS*~b_sjg#=%|IuhD)!6>33O2C|4!*die@Vmt5D@
zJgZL*7(!#5MLDE<Irj*X%J{wXiRHrd>ver%xiOnC)RCo;B8EF+XF^D;@8e%l=7^3K
zcH4KSviJ+zsqW-OQk!KIqTtte<FlYc#!NP>MXZ(QkY}lz6`}<nb}OQd;njD)sa?hH
zb{2)WrHR===sQ@|><oA&HrayrkKq~~9%%wiViMh$_6UPgYgtO6qNM54E()%iocYqx
zsXX+j!)TQ2botUcRQ@Hl=P78SyX<q>KC`ozpevHShJf*pukH`ISHM#vt`9t_ey>`i
zg6x$`H=S8+=9`$+Og)|H9CA@u6XM!C;`Pe-Q8hn7DBi1+k)f9D7Ax%*N@@KN>BVY)
zjz@xOUd>Om)8-^Vv&$XZnN-a-+iq3QnO_S&j#i$>V+oI(_T)lYRXe5KSRd$2ITChD
zwfsVNBz&NALCPyLHjka$IzL({cwH8Ky3BKgK=`%@ymw=M_(ah;T>M=LQ49mFwy$`$
zo`Ihi0r?S@!v&UDlMPgOI(%>ORZZg(23(+|#Zye>n81)kGJ#A{`ghnjnqOEz-;JMM
zekyGW!v287?4yy|L4VTHj@K(3_*$d)B}Sw^$|`dtW?~y2bHzKnB2!VMs@L;8{foGk
zJnO~j?GIBwyE3!Q->Z6yH)ATs4e}N2c#K=8<AC-!&D3%KRlSLYZ3SEa!<vmP6Rz>g
z#Rdzt4j^-?ZDXQc2MD*{fY@Y40qrrWsd~6yQG1K3p~mJVoER_!-tyAto7z&NdvanM
zVR{Q^>L*+2dSEDZ)mzNR2#Ia<5r*x@4!Et%LyrS=5^c+wo9fJGiDdL=`ws3)>tpo2
zUC@rY$<EaE%4SLVk`OAyh4up3lQ1@#oP{(t?4DN}m9P)i0Zrxli9AniP~bvf*Je*i
zRR40uP>OTi<T}NB@WUhVqvtQ4w6ym=a7KS(XNOMlP#i9`MS|xk^bOruo}{|MsJy!t
z+s3X$UC{N~?p)(}N-aPCneTdVsZKK)>+TP~+1@6v{e>;N&@*BZxK660=iMJUWBd>&
zsJc4FzwMo?TKav#RHg-GFYe3pU_@4kf0an}DB}^;)w@1&ZYF1GbUjB(C<)zlEU*a;
zcprfqT@#zHEpGJnsiZ2hLiRjq6JtsbvjqHt62;uZP8Lgk_?1%ug&>)Sq<NhZ^dl~M
zD5QCak&|za=!r^MHa9q)yx&Ldx-eoRETE;^?+S`imlS1_naqrOQzxl{RY^KAF;wYj
zVIr<*CI2I(uFf2b5+kCj+R@P|dWBU^cD!dpVmIqNFM}_WgB_Ks+B8oLsXj%$Q1F;s
zJfXQ<%VILa-J^tlG$+MeSgCR|;pTOfwfTGR8sTS8H~qCLqRfLbiH)BtiBZ!~VdS*#
zy_P58+@T_S&=&eyu`7TgElzC1{Gq|7#pdRQZycppMi_PQgOGIb1%>&!v7pVSz2?Fy
z!ToBgnC#`P&>raU>$J2;b`A~hjtsnMM=y%2kGmO?1f%KA;2L{oj5PFd%VrPojpd5b
zX;qa@i@0sz6?bDei?ZNAwg9qa5*(|$he)*SqiWfqr~^BngMx#CZj@$pNVar-P_6|G
z5F21%B`Nz6)&AI+i?CEruZo+yp*gEziV}gh>#Ck9LXbN_lN?l7Nai`RknsuDC6xr-
z#_+cJ`>U%$wRNjVnnr1Mw(n<CjuZj`4gEn~ev03`azyN6u#w-8^9AFi7?5KvAElG!
z_|3L{WZ6Xi)_$RG#fE{Vq7qxLVFf_VDZF~JAx{unS=Lz9SXkJ|K#O?QK^37*G&knt
z=po)SYCr#}u0zZ1M3in!Lz&yo;2gE=u%&5ec`iEbS-OiytpLG=QkP7Mk|Y!Uq#V1S
z?YHp7v?uQXtw2%;i>2%5Q2{XHrFKV7oNS3def@dhHn|0x>T{7N9|}HDqn;W0NvdmL
zir5vMF11Z}73QzZg60n|eChhFr>ZtqUL@?i#i#w)-zY^9{0(3<%ZmD)UJM^Ic(ne@
zCYNo-Swq$Weh#;8Et^N_saC?N_L`1Yez}QO-kEqoiARUa$@e&ZmL@wJ%iY=1(o&#&
z7?zL2w?33swMMMifS@o8ArA-e3K|7ezE{4{S&^cxuxMbl&PBBbEG2G`1Qscobxh^!
zC}pV}LKgI-Z^@)zW4BB6Q;Ucr7=O-=AB<&Bg{HDky9O8_<Z_-LthzP@*c|5v@z>RF
zMd3`AWqCdt)pb2zhUOXOFO}qMymr}a`#ke`=<2fEo7P%kzd2*O0v<wENEt#A+>LoJ
zb(Z|;sj`ZiTA+xkMfS;L(Y9iEU02C9yZ7c&es%n;yM@;^gQ8To*N??zx%ivyJpTKE
z?ckHu3;One;w(GMAUb#SB^U894vlj|OIz=V5x?!LZyEBD?F+VOp{>g92?8%yP}4BO
z%YOjVlw`sSZPTRiQyQN8lQT=}8kTv?+L(T0OZ79dGvCpA*`U4rm2F#+(d1b?b&m1u
z_x*fSTVTC19%=i7_WXQ&DfaC4UIJQi5C?=o^r0haH-5q}kHLx`FEM)`8EN}-yymE7
zyMs@PnEA|?&o63*6GH82^utMd+eTe1fgLWOl+eR4Y{Levx7Ixd5gk=ju1cV1OcA(H
z><iV;4N-liu>KDjH?XDjbl{o@snN<O2<V)v&z60_&3mY8Eo&3D3JyTz?C<IO_QYG_
zZD7FGrl2%(yCX@2=2*6sZFJQK14NvZB?TpR`m{^7v5uP5k5qW4DHDXJg%8l*i_sHT
zgS$4hZAbcY*isyRh@(D_C7VuMZ940bI`G7tP6%NoW}YC^TB6vlxWLesjaWXINaVF%
zR;IHCrcb0SQV?Of($r<zH@8dm9$~y!TY1$kr7R2~EYP=iJHn;HOkJww&pE^he+Z@P
z3*KajU@1iySYi<DI<1?HH<zM}W4;Vi_NcV&uBa!-pPus1RzZvD3Fg_<Qnpf1=9mZy
z_OZcPOd9pGrFl2mm>wL0M86t7k*c0rJD2&Q4|Ppblry`@l95<xQI)p%khbq#MWozh
zBNw`P>Jr|f%8GR<{Gv*M{{CCs@Ks#&x?>cxFr=C6kDDydaa2+QdwH~aS&0=<RaQqQ
z2b)sK<xVui8w_6P47!Gc*y0H$H)YxvRLM(hS6h>P&F#JW^NT^8rKrR&LdiSKT5Jlw
zWB_DvQ$<wTb3{O^K}WWn`t*z}`k=&+!qjhc;Fa|@jAR=VdR++G-doN$t4BKqyl?%`
z<g-rf4D7bl$^2?YLriT1E>D(SD$PIg>E`1%2rW~(`YwAbs);`lLVeu&1P{6J0aX<y
zTK0L*y1H-9;rkUp^q6bW$`jH}wm_6xS$hi7af=9gBWZgNA?rax(N4F%{YU3-RuKKB
z-*Zw5<+3|c-e`BBZ};SXNQ$BQVm4G;C5ES?l71X}fe*1$aqU-PL2aPD`UK`Io!b|}
zwk-~4D&~A?md0U<_Ed3{kk%+`MMCH~n>Y?jJ|`b3hgk%fQOwGj|MUk=cv7WgB{HM(
zcDLyOt0DFD@#Um^yJ(J?=x81&4)0XKemomga@`}e{TrOS0J}=P7WT8tXDkL}7gcc>
z+;J~5*1%1a%V!eVOylOY3RNYN1HND){7nbm-LLXXM>7^NF-M-BPY;8dwy%+@odYMg
z9o_^5RZ1E1T7HMWwoi1b?yolQtK{X{y`FoYnus~W<*jZ{o%wLA_raIAPi6~4ZEf(5
z0+kv&rqa`O1*KnQBq&mc&&lz{W5){~Bw%XG*0ALfK44-UQ3~y&HRKJQ;hJ;e2xoV{
zv=wDn{T8;`mKKfIqZ5-9*;d>oIp@~%gu^Po3rEG-e==h=<otXw`B`<^sY-O;kL+&G
zT;8NU+ldOpX_J*UnbULjs&3qb81v>CA|==S38p6XoLmdafgKZ(;~nL;-cW-x4AALJ
zIbA|bOR%4f(2FIiP>ywzD*Ck34@*A4cF!&Y#;@ttX;3|teMPmo5;Wwj%n)u>C2F62
zmcCM^@m{yDHJ6PHvMlpzrC8dMHhK#~mCZU0WV0nxp`(hTJ-gbA!L^FT4QH<p&)=xM
zNF7ohqc8h5V9}=y0$DGsM~-e)MB8Yt*6$2Qbd))pg<lq5Wn$;HlSq0;ebx<!N-?pF
zk-J%zUVc_CPV8%7FFNGoFdE8`WI6;fsi87C485h@)bBHQw!QJ{qlv?8?~cAPltTB=
z(4jZLI8~3FBnmBAPpDBjvKO%5lW?P?^G)`(TCdUUl>#P@V(}E%iZmEDBigoDB)h7;
zSgj{v=FjE?%;Pt)=N#&X^TW;%aa0>$9DDh-=%{YjSkQC)<Xy>44`r=;7b9E)=2C!r
zVP;Za((uOPgSgApY#t1A%~65xZ9OA|C&q+5$BW^aVfoC)zsTiP^fPSZ@2{Yljt6l#
z%kKpV1R@TI$|0wRqCH9vjX+NEG)r6cmw~s`S9+Dzk_(6F!<smDp8Xw}nG$@D5LQ`4
zz1MNBBj5G~<>13{rq{A{UJo6*kEPz?-6rZ`iFQ~*qfc<a9Da5B=|Hxl*O+hpFc&{n
z^iD)rMgJ;$AQtB;FEv=Mj!<z)dyvplZ{|3Y+fI$%MgD_Jx3AB2#mXD9`Dmp3^JTCn
zU9vAx;U({4g!V-_G1k#45B1uB1sV-T(}tj+%V%Goz08%Ds~cW=_Tr3Jo3IQCuncN!
zfmjdc_TB>M-Q=I>j>UIR>s4t7Gju6$^yKfWPnU(Up-bE51M5E?l#bmHoT7z4`KK=l
z_zz|6)~O=`u{X3cvvGjh!Q?DhT2|i*0$>vS`9~)Ub$}}ATiY`TK`o77$1U|u>~AG6
zL3=}(O9tlt0dc~-9IzU0Qw%JethYWJh?Ob;$iV`0y6D?TK+H@`VTU+?uu_sRmx`I8
zptXr5<kp#U+uAR+k^#iV24G+X!z4>E^Q~72#0hf;-5!UDSP+<g`G=zSFE`IW1ijn5
zze@Zy9#|)Cy+bg8PTwAKo8dnjmXf1^!%wAASW@IR->pCAw)>JI%207h5gC0Om?CQg
z8{$uW5w=^&)gCrVNo!;1txHT1Vqyl9kX-@Pf<{mS2n`C8+^ryJW^DqX{<9ctr;?+M
zjU~kD7Actf28BuORx#89!Nz<0U;#1f0AP}#7R>(xV82a(z_&+l9a^^!c21xU01PX@
z35I#m*g0UHG)@4Bl~o782?S`dbAWYVh>55HSee=X=3lyX)%~HR{#SA!3kUe`YM@Tk
zfVm&@llEQL5Y8Rqc#*<-ttapL$XwP)%unGBSSAI+N!xv)deR^Ki80Qi&YR9zgk3!g
z!%qa}W~d2{2F<bvWf!+7ghCrZ6q15w>l`T6gnpE<<JHDVJZP2cVv1OBM+ok`uGOFB
zCBqqrA9~uOq=9$|cN#b`CVR)c7GJd^kV77#a0{J>ek?H%cq`~sfQ?^rWmk8&QnFxQ
zifs0sA~!0lr3)okHj!BJGp->emWqlBrC`=|<Ep}_(}7ft{FS`WXZ7yxxH9@d&R~b|
zSn-7@Vua;^*No$XkV7f&nN#L<%1QA&`cPSww>(vRhkaxrW4)V}r>{FFINA8<0gv^s
znm{$Xoe@qdMXN}<S)sN6yqx}q?Jo!5FAn~TOt(8>EdM`|Pt@8FYIMt$e^HD<;?HZ!
zNFR0uzzBKkB>m}$g`Hz%sEV~2tOx`EBfu}`>>uJU%Pmj-INN`E6FEVwu+<Cy)wyQ}
z0bz^*{ILeYCACQNk)_tS>-Dug$=8(Zvsh}WgoaGZ(1bF}jX3pEGsQBa%_4PR2?<7i
zpk6fnl$~Op^+<(AvWVa$y;-T{%p@AopuSG2aIINdrU2@PR#2XBD8nPJ4;CYj+k7gK
zLkw6OGI6TynJ9Zo(_V^7sIT&`-t=?cTsGISAPZop`}u8kwsJeAxf&mE!!;rUxXTl{
zJNnC;;nvjPaEyuT-)~0=0|mz5SY%VVYr&0KKWN@A;mfPovQ&GZz1qC_*o-J|XE(o(
z>3tTucJKQQpZxJke(kg+!cBPzd@TH+?Z#K_;)RgKRk%ucQ=UqfeZ>xFEKmRsac!Yx
zSbFCjbc+sd3-{G7{R(4R%t`I_qgQ8nX?+a+R#!v1OmB4&aQhh;^yobv*25j3T-QFb
zUlqGdox7h65I{jzrvCKs-Jz|v_#2<S*YnsvaG2nZv{mlEkiYkEEN`!4;e)#e@|#7A
z8<bciXrsrbJ*2rzcKQdWbrG{7|Mj#Kf1;h!4F};cx6i)ea-e%r>5uXor_JTc9!PVv
zA)NBZ1=*zStY`1wEd3wSp?)KmF?f~(r&`Rc5rr3H#cAz*AtrV~{SY;Bs;tX4<lYhG
zXG1|J9d$&5gc?cHHGiYD@BWW%mDsi4e0uxte&9>8z!7j@$D{ies~3}xS8U(OQ~$V3
zo2#dP>0Rahz4}J@NBXz3;^}kBU<xh)?;at`;6}PisS=423I3?DC7Sbr<qR6(?l%Y6
z%ei%GR}~ipzJz@du8+0b=E6-5L^6P!jn6X;R<wyDl*@iB=f&H4JVtMm8nP^M$zZ5e
zwkt47=FKElRyrt-785tqh&s-^$aa%WYX!P0&khhP8-}#m<($NcM;~`h8to<TY96zX
zSB6;RNXBM1a7HG7ZL*`-y+B#9XtC!#7jtu>Z;cr+{^C(Z)hyFn68}k8AQG<|iY+zA
z=!!u>m666-(f=eP+gbGLy_;BCP8bjM=|@ndBu$Zd(+mH++8;vc?^Z)t3N!Oo(;2Ub
z_{43okZc6L03O}D|I9th##a=D1EqMXp#{|`=6)Og<tl8Wu#-Q)5cd<@<^y%;{K|H%
zI=ni^Ce1Ycbj6QmB=<F}SsIVp?`7@$v^AhHg7@=ioL(BSBGbn`3p(|s1P>mYGx7*>
zHdv*V7w+LMhnQfWZ#iDDxQ8ykhtGgOhv>E#oTAP5G~z!mi3Pv$=1@|&f5A^*?wv?t
z{C2CjG6MZuIVOWacJ*MFY-UX5yBHQ5%_BVNC#@g-54Dc`j#Q+B9G#|H<ka175HXLG
zDAw4tw;qeFRliaWw_6coFVaxycuk%e-IW9PJil22vmif9f>n8_ij3hMLNntq3)z`|
zl<KE<*k;)Huk`8X$>R5z?ZBasFTe=S)Gt};0%*_nkXLNrd%)q8sr~^vrh;^uLjf~`
zHcy|~-s9vkPqRhIv&DJ#PM?6-_oLJ^%{QN%OoI&J@$2X}?y*&5jb>hcVATpOmm2(t
zX@xU`&=)<Q=?EpHdOQDtvMrT;K(N)7ezAeQM?e@c3e~d$HN4`~v_iv|FYG0v=eMiZ
zPBr#UrwnHF!F)cCz~M1qh=$-=CFb_vU?3&^JOvK@1QIZaP4lfj2@ZXI7<5ZB!Fi(W
z(lD`=UK9K{+>mU<!hG_RigGxr&G9@r-Ym|-RPWY9D+pPu2Aj#VJv>h?EHwK>LbFB_
zY(EDO_NtK$gF9J&(!0Q8n^dU)kh|!?#hVxQa+*EHO0Fw1c?SwKeHs^ol;LV?sW~IH
z8jO*;nvk%ZavI|F!bhQ_qqHPB8*Kf<Zsw!H=?<VA`!M5`UKM`erqIN9#jwj^JX?~}
zyb)0WiImZ^N(Dv^B8?fbxb@j2-QpAD7VVJaMR8VrUP8?-Qx69=%oR!2?0rT-$E4i&
z>Y-YVCMz~f#(uV0+Owj2u2yVWX@jb&cKA#LeMZ9g<A^2F@<cuxodIRJW&z;PgOH=g
z9WDWe0<T&d$cXU2ANv%Lbm}<jivfyh6G43wsa-V2$)c#zR`Hi3Zrx$_ZG&#?j4-(b
z-#J^Hb^2YNOK>`hf9vx+%hba7+FGm;<HLyc*yo8tGjAB0&bp+^8(Fo@&@37#ii%9>
zQVq^kDZ7_*OQoIIVhK1{>+nGA=^o%#8XOEKnh=atG~a|=!@`$UDN>Jh3-TPoh2@sP
zDSV&J0+iyplNTGl4*FH7tS1$+<g(k|lQWiq?>bQ*j>jv^QIR;!O>QN4tz<ooCxLxJ
zgEhiAtQ}!oIg8Cpm1>ShKsx`V*x$vj^`&;mMlJDWNcW}XYIqi2DW_|Rj7mVxU|ctf
zL}ONxjRbm1-#pkE-?iQC+_IReU*|#Ihg@5ei??8bMOj{mT|#2G3EK{Az5>Bs!!mW^
zfaRI1HQZ^Vs%7}jn>4)rh2gJ-lNxxY3_%CooL7pe?qRP>dq1_F7*Jb+>>?|7*bm;z
z${8Juj+)8VVmWt+blc*{ET=65hKees{-|ruSu=gk)Z4LaY7P;_9Is1m<;t7pA}TvK
zcoeEh_uM)6vW9LZVR=i|WTwO4^;6cV%?tZ24N9^eEj|R-kF&yfx<z>vy1F@eE;;>D
z<unYJMK9lc4?xOSexd%UFb}+ZFdL2Q&4&|`XuHF4u-CT0^KwZtOptuwi@M<wC2$Pi
zRU?d)yd<c!zq8O_+F*&u-~-12rGX{$L5@Kf-bLM2Z88x!cBm3ZwnMb)OKoZJ`rOO(
z>ZE;{-dxm``ziT&-}}FL9xuhZkE*Jy)oL_<j0(gFJq(JX0&a+<2bT_YN*RRRwjm>?
z`*acJLJ6@=iE<9It&d`QYFHk{gl!o5&QS}#zICvSCvkL`E6;M$jt1fy8Z@EmyBoAm
z)Mwi?GFZX4%{TkiUZ;+FYc~}6;kI*8Jy<X2BqV5&JLM4N+>Ny;HwR)6<GK@Q##-Sd
zb>M^`D!n`7Y!@=4gj0%k!|?$rGo9B>tts3?XdF#=bL?V=oL`)49D6lQOzJIne?1>^
zHx2Iy_9{BA>jQ6Pi=hh<$?x=TFCjT{yCe3R##|Hy#p#;cWCyM(i$4T?TL%!_LV6S!
z#TnF_?$PL`NAwj{tR;^%4r8y@@A{cBoVaR_Ds7sEn~2ItMnH-?lQaE`J7r!JC1J!>
z(H9l1jiGsZ#}}@j=31yKbJx>#t#5tkk8`kgVryM?VEhv2psHMVy3@6u+`jzW)4P~1
z`>^cDYpAq)c#J_~TQ_0NNk(NvWBxH^@?y76o?WdZ@>6UfiJ>ja(&*Wyp0L9mM=jIj
z_PE?khNGQgu(zpiTMzxUSEHOZZ9|PotDg|w)G%Qn3xj4gan*&DtpcVUw$A5KYPC!x
z5P$tQ*#@<WXN@_bZ|3SHqmSz9%NF2Q8)-}G!Defkp&u8#h$T$Kgcps)HbGhkMN8pr
z=S|!-i|>ZGYx3Q9Je!HkeED(Rn;*G9ZsM-WG@Bu7SFPJYUpBAvuWnyx7+2Kz0$Un#
zPFOOiRJB1S;8>((F;pM2y326@v16-jTE4*>_9RiodXy$Yv^iEUG%vG{0SdJ{!E@!o
z)vA8c9M!R-uFf=>^S&?OAsQ|rANRHzDa-Uo3v7<~@!fL_DU7Fcb3U!lmd|t#DS6RD
zLcLUNT(jbe&dqv8vo!$Oln*QP@Tnp8H<Hjp1w(9#AfRE~hdA5Ym%#hEOgO87h+<DL
z?~w<I!`=hK>EMP-!2`HzU$T_w`(+kUCM?9m=!{B;u)!E#fv?NoFWxgzh=Dzo7W!w^
zQ%%~^d^&@<?*kcju)c(SI_g;PP<@FAq+<2~lfs^6U89(xhf49<K3rB^l<!$#8_Cs6
z7+-xT6W-!5)FL{LMN7#`i4o5bpz)aWxv=1@u3FjY(f2bUXK9ry)AuKY^I!v?St-6G
zu4GpJ!ehL&KiHm6QffRFAqApw;<1jocdbA!C;ADJg7qqLA{)+Qy3=r=-BnJV_0jdi
z6s$ceE5%RzW=r|VXR$IUpOio}aLp!5rOt~Dc|}S0Zz^O^&R9V--v{trY44?%OTw#{
zO2WI$sxwrlTh`)h#wC4C8ESp^(Ja@X!6-s1JS$-=#gS0D!Ta5f{y6F9*DFh^`?)cK
zTo1**p!oumql0n7;m}l~NCoZa%mMK>fipuNxp^e@)ZP6j$8}A{p^g;a=#j7d^%mV-
z2$%OL+ET2#U$60?a)_xzn8zl@qP{Jkx~lLFf1OiTA_yNFV{;PO+{_A3et@wnt)8e8
zi15xxo{S81zrFu4d}7DPscomOxXRLxJ7ZI=d}+htUfuWj^%KO!wodau`09v1+=yl`
z_=3#Vi40~%%yh*sE_RZNV+S5kP*m^4V_;o4?aYwx%8u~J6rp~&@|iwLcA1(|tPzBk
zG7FiuEE}nyb|FVo6lT*7e}^l<>!V<opv-<BZHG}7mg@Uzne;vFGOmWRe{}e%-;=&a
zggviI4=uk*k6GrEug%xxGRSz9OljyAbRsLfuNWrD((%gBnky)5QQx*AN=w_el5rDp
zwA^0XdtWfHDYvy@3Z=4gV_A<sewU6gL6y#R@zVY9B{<t8&?Jz{kXKy&EUK$A0V#at
z-TqK(S$58pxi*cQ>9$oZ-BTzrt~EBajr$SDT0Omwro;28?qG$tK9ckjZ?XlSBDVPV
z2*06NGP>7qnE3s$rr-t9`y9=jVG<=W86lDR=~r3#l9Atr9WRvQ!kTg#^AE44kbK|0
zEZYec_7$sRtSH&~94Xu9u_fr-_F8d#vo>Zlu2n@=|Ej+QRkhE$B@mhKrf);>Ih}IF
z1rBo+GomOB$`U|dLlP1%@eaPplP%_PGZLa?G837K)`>hzLvUXrn<Ga%Tg>ZM8S;9o
zk%(m03FY1IK8ZJBXpKA3g&_pz=ANARZD$p=Jd5}C(B*eEX5!_mH^~;Gq#RMBK@xYC
zJ<9EEYHBK5Ra4b9eW><46*^119$7&Q=37rr<L8g#Rr;EyjtKviJWX2lN!E*KTmrv)
z1}JF_3|S1WXweS3_{9$~HiSN3B)e6Ye-Kf5@>U?2NYE>TX-m)9U-w86kjd2|BlGne
z_ej&pWiO#j7#oyio6y5yZs+{U9Ua^$<F20VzAtb&L?d@BU+F#oVLcR)yHWQZ@C$lI
zB_LO-h5TK8SVOdI$$?o^^`WYdC5$)1Zy-{2{-jYp-B?(V(!{`bMyM2>Aru)+p(f9z
zc!%CkZ7b4k8f4dtW;){(S+&J&98#L@CG{>XmD(1~VA`->hJRx{YEKq~T9!b;juq2G
zg|XYSg;S+V2BY*oZeR9{hSw7k3zVZN)SkqQDRC+ah4>J1ssjU;360Jhf(YoO6293`
zPatNtkrLEKZ8;<K8HJAtn3`J#nUzkyEi7nIR*{!GZgW7R;KH<4xU8z0s+}4e%70eQ
z{bZtZt?Kzfh1^#<>`RiyAKyN8io1#9b`h=0@?NajU3`CiWr&2NVKjBpq{Xk(go|fE
zJhfXGln~K)^fkuY#>UHd<!C;2cPn;p81a+&2k8xOm9O?uVr0TU-YnmL%GW9Qo~$T=
z{$`uKlSKv_Z>4%VJ&3A6IlzFpgj}DpcA%(!%8z5Zj(guxw1|BwHxFHpE4trEy$|H+
zez+fFq4%yeBQ-_)@_s#y2kESKbGKK39eCg8IGr93E=orMCjcutTa@%G4`!0KEz;$*
z`^5g~RN7InXtY2cM@cCEk_#;@GIl?TiAs*JAZJ`*+;yT!Bk4n?8pqST22@mCZ_lfy
z$CnzWQaU<1Gx39Sb8dn6LqSDG9P@&DWnVQ^7`rlizBxH+&7-}vHO+d22#{oh$n1Vk
zoO5t5un=K7bWssEK;PVw2J>8~2Ff{8T`Q7lppM0QZ7(%9*sn~X6Y)tO7K7v@J%uL<
z`SmUX=PGW(Kfb4Y)YNY+)B@6aW%q;uOAFGOtlyoUG-p#Uaw&rhg|HA@=7_5!>J#1=
zd%l@~CsS-;ia|yU)Fca5m#0wunu}9V2UcE+|JWzZiU+WKc>f0<Y!cE?*pN5!qw%PZ
zwDRi_`-b>I9)o`(gP7OO#TM*&w)HJtS}#YD6=wIuU~u)5b;uQY`uEBax*BbZ8+jQx
z*=_S{><Jv6kTbMzBS(Jn9a7VA(1MS|?ksEBLEeQkavh3r_XpYbW~Y4rK#Q_X8tGO&
z82`}$%<Xv=JwYz=fmao4XOD^_n^twNh~DSL*SDk^R1M8TCLg|XMb5XIvXSw~%^v%t
z!X|z?rvoh_KPyk;S}4u=`Z9u)`}hh{d&dK$jt+Fi<q@Xs%bN3}&`ZV?B`GN-rALom
zCQ{d^(}jLQB09{}qdgF7p8g6*;Luz+e|KDf6VMsK?bhwiTwVW`cyM>iry`wQ%W=pk
z<T*xK8>68RHW%CB*<!hS`#sti)+=l~8<$m=<n5lV>8ZgEGP(i&(<CC)9ne5zPBens
z=4Zp0ouu=K#hH$N98al?QV;i*v0QC3A1ULoZ!aZ!vyYR^5DJQX09_xx5fy2EuXdQG
z#@>9)x?bU_n~4%h*LGo9ohU<0V!IKy9EYkhb!nJ%%~I=>DoSA{9ldBsWC1PzUJ->=
z_8f)7G*0v*5kr@H5QXaMONxBN=m+Cdtz`^;ME4Y0(O$o|`t0OAbSk5z^(}3tfAbV+
z1FuLobqC*KFk(l-`I5vG%3Wi%-q{~)>bdlNECR`#<ORh=3LgiL<~F{gzd^XJ%%NMg
zBOWgj@6MHqZsY9S$F|LhlUHxPs?-RgmnS?GVL6w_25OKoCm{>TYq)8WwlC4pDTs)C
z;BUb6(3Pv4f=tj!2#V+M<IEgMlh!$yv?T1UTbE?KXy}VmvHHBiXJ{h<y=-~rv}N0A
zCcYkj?fG@|gI>*axs&HA8fl-z{DZ?%01vK*3fa2Tb;!-f&p6vuvY7^gk3N*#I~3kb
za@1XdQo^D0JeAAR!VY%4%%4cJarZZy=^fXj87H>rkx3x|x@+u>aeMY@MP|IsuPou?
z<d%fLJVm--c+?VXQ#LF3n2mZzmoU0B1P@LYENrcTrARZMZvwAS!~1akc$|tUR#{E5
zZ0iWjDD9PTf4pgR_uIPD?#7<NX_2#E@iL(6v-y*!dE;D^4@G=23>Q8NRjD|Pf35S)
z>{C>Vk^e-xuGq48`mCh%eFU2AJ6Ug)bp@l^I$G|_gCXB#U5)sjLPDhp!(~2=cn@p@
zaX#;8Crgt3OY!9K>)`w2vk{Q08fV9ge8@Hld6t$r3xl%vCegl{-YXRPAUlPU7b=o<
zQo9=)=GCM5*&=UQNrM@4n)fHSy6ss@u8y~)GE&}|E0*Z#UG`1ZLz^CM-aM`~4Zp7t
zTGZ998A&Gj{`vFLh5VHCgiN>a<I8EHy8INy%<`D$OkBPNAI4M}WUs{2I0-F3&_ivi
zdA=7Iey$|3<bG0&HziwC-2`?Ki8^7eWf(*H!L+il@${cwZI;_ryuaOkb?bosOH}zK
zviuT>g#Lp_1QS9WE%ohSS^n>JA{O@lPdX8-d%x*Kx3{(3cJP-@^wR@=yIlECkN7{9
zPyh1K|2`zZ&oTd|6aA+n`<HkB|8J=Xrfq4lfWSHcc6ONj!w!P!MKE!Q9dx?^6OLeB
zeb{+q1H*JA4wl;_8-SIK4VHlA2Enuh7WP{`ft{7@=N2a`J4{ak!>VA1iA=C8Y_JvB
zY#gu~*kIM%9$;q%1317S06XjkKXxGVA6nB-<=|gf|6ksE#sdBiT9b@LEA!)k-D_;F
zsz8I)^2b7Nr3gCpN$5AxB`hgf=_72Xg|DxIrX4@}qDFo=jicW$;N%c<|GsM-&)|kz
zp@5cfzCs}snFXQ`foV;<BGsu}JuaiEQ;z#!cH=}11-LzQ!sCS*l=_%t_i5Ja6)Y|*
zv2QwsP6ICP<tGGGY{ZCkQu1JC-A0F#%9JPIF0^o=#Y#Q&@q(+KGi?STX+nSNr4Kfx
zX(HoEPc=yWo={>r>Wotg!^9>N!BO;sLi^aXSb5~9p>|o+C=R4AB1AOs-=iFf#O8{)
zim2>(b(LIZC9&mIu$dlGm@<8)iS5szNraH%vPACBaDc5yCLUZTMmKN<wvVWqvP?-=
zeC}A-vg8<b@`6JUiX8vv_4#wf{XeeHTXpdd4f7we(|^k4|4ZeG<<I5$e<@EaKiB8~
z?K=D0vim=kCk_zHt;TC+=>WSo@^(h}$4!WAEG!(qDNkw|mW1MN*98~2vrDF6VMXC6
zc1tu$8D}Lds1_T0GI2<(tEq&}3|F43WSNKp21LB7jBku?N~+a@s^9l1^kWJ_XDj0y
zbJ~bX!B=af=)ort62h0SE#Zm|4JgE3(qnvnNG7W|BOFq<1-5+#zEL~&Ryo#FnL&h?
z_g5n&ZNB*w(Z4#&a}E@kMR=2;VZ$_>ArS+2e(zIU(zD`^f}F(&EC@kB@BO2eqlkm?
z*BdDUDs5)Y>twI+;W7}YIX$o2&U=`M&gtGR<q5ps>P_XI>b+T_f-8kTO6O!<Rh>qj
zftTQTHOBf#t=QT+rT`xD7;t_V%F0+jNO*sZ{#D%l(+yFxw<~kk9XR_Pj5Uw!wY+QV
zapb*G<h8Z6>lDwPa=|Oo9X(?j(CI~0yI}{6B8b4l(_qP?&X<Qzy{9@3@>xLm@oW~p
z^R$pw-UmZsFQWy$O*7IJ8IV$V0~b3!=YBK08|OJ+QnO!r_4LJ8hXDfCyaJ?aBGPr%
zcV}@2p)*bN-lrtHjm>UFTaPr5-umE}bUUECqN4~T<OdC#0=gs}q8|(NVAImE<k-FJ
zxH56Mxz>+<&>Hs%G(jQx>W9RdDQ_bK**&1t76s1-|D_W7M|iG!V*);p1DwKI+j#m7
zo+jAl$nUK_$g&5A`oFB$lS8i-U-)=pc{2$*xG^ueVw&=P5H9_OA0wQ$4J3CH=Jh<8
zjT-gExac%=0h(tS`Gy3X`a>GFvPKmBopjxgtMLRI1B`*h9Eo%CN@$!m1E&&;40_=}
z0bXr+HoLN>s&ZpqQ-QAXs*QGkm;3riLGf8Za&P)Uyn~XPeciR{(O9k)do`_fT&_aM
zL2O_^Z@OJJiJ8zjYgFxr@fWkn6|NTyT1O`3v!J174WE~A8dN)0*uvf#2ed({UKT6g
zlZANJCn3j_$DEGw-wqN}b7ss_6gA`OBvHm|e?*8!HNNXD=rqoF(+mAU*b3Zg<x}vj
zAg2C0D2L)~CN*#UZl$T%Cc#T`vkmv^vPH+O<UN1HB5oTs5!{;me9xsP@ZKPNGJ}W4
z*>H&uY^gfy*@wMFp>QVeX8CfyS?OewkBf(ylm;aOq3+u)jJV7a1$!*E`}xhXCiC|f
zaK>*Jvv)<V6KzBrH%RTiL0=<sOJ@77W4^d_flYcdCnQSCd|>5&mBKeXWz*buye3=0
zKe#JKQmW86MumlmzIBra7RhKOb-U-enacl(R4@H_j*gTNyE<MQ<vRr)je(C$c6AU<
zL1z_N{9x!DR%sZ{kIW!!n~!9wpW&omK2`e|gkWO}FU1V>=S*!s1fxGou*J2n38TCb
zYk&)ot;j+kT5D&tU0gs}nO|`A4rc|2KB~DFVC4c&_Tb7?{8^Rn=P$0zN0)0XxNd{<
zi~8Pu5eB=oxK5c<9U9DY0d&_*&sRR%e6BX=->rXH<437|;10so94y;G*E$X2T^bTY
z4=5$M1cvG85d<Q+NA4KtKYg}O#<)l?yBJ1te|}u{=#@ThsQMSP)Ke>xR$TfDUw!oc
zOWP#Pj7sC(Xp+-s%z+vez9EOA*S@m>eoqwFi!x2Avq#?g4U+$_X3jhs>iz%YEhsKR
z>XMRm#x{&G#*8&WvPU&cgY5ej*~WH}rAUnBS|ZDpJ%tPnE;6<(p<(P}3E5S)aDN}2
z`@6sB`}_X+J>SncpE>9AJn!Z6`JDIrbIv?o&)4f&LV7%XmX#8V!8uO0+_G%)ya`nm
znQ|Je8-E6^#G_E8^t@{2tJiyDmT30C(E5f)Le~T!BGCk%X|@zQ=d8r9erDdTXj?H%
zkpsk;zl13b-`2@gQrni7XC-RMGfC7C_T#$Yq*JBd9!aA@65^e%c2`Rhm`FF9yrJ3@
z=cZjUQVbS=oPQKv>4we~?L9|s9IXvVRSn#dcqMR|urIpZwR!PD`(K(8GMNDm_mye`
zRxE2)OeMAnxQtQUuk1??-b^#=@H|Ffwb0TmoL^PrZ)J=04hp%pQtasp!h{NQ)5FD@
zm{{-HUo6zbnp03PR=q04B$ZZFLyovmttvR(vnfga1mykT>pvj3xk|+)Zdtv(POO0C
z;dQCaw{^~C&Cf3{EiBBt^kMpY$YW!Xh3bx$CQoY>6vA{ewIi&Z<=;sBwZ71jv3xy7
za1sOj`6TLfbN><51V)cvmNJ+!tmc39ws<)_Ra>BLr(k5<I!_%e`*uLnj4CczL3`gW
zBvBX5qA3!kI?ut*Quw5gm(O4S<Yl2mtVXY(eRfvHGfC6&{vP&HanT#+`r~Ti|6DhM
zr$*AB{FYs}*ZA95&3WkrJ4gPKt5OO@^;e%_2lo3nu;YWDab8b{-{8z5!`gV9IgJJf
zJQi<S^=;*?PDr-|qU2zxcm;vF=ECFavb7Pi7xmC+R^vkE8vy;;ee2XlnMYbts+M<=
zg2DF~9=@80FqzI(_74z__upWBiWiR&z*F5~FqHhWkm3iG8Fk$C@C6lTzEAJ%e&xjV
zDf+H&u`fjRf5^26-v@15ec;J-a&=JjD3*ukCM*q=MEN`n*^S)4Fq2P`%OQ%{K3}+U
z8k=%#w&fh(^<VfN&(5j(C!pn@)oqmx?G{qz^EucfCKpNWYxHad`8@ggrTL|WjKV_T
z83$|a*y2l-8OvieW#{)@oIO08iwo>yb%HL9_YMvY5(M|XHx+Zf@=TWST*`xJOuRLN
ze=t<J{&L3>mc{O(0f|#p7Gi^tyrpj5Hz(#pvbYj;YaZX#B8s0cVM3#CCxo+e(#I3b
zW~nZ$(@d|5N{gzhiVSyqmE^s?v^Iv_pKhFfrhqMgU;N}#trL~`3<B;d-j{SYMfv%B
zO@8ZZy)pessc$EsVCmX06AgC{-B8HsdzU{v`NpiuBbIP(T*ZFrEm=8f?^xrlR=OBG
z^Vyr|b1{#fMDFCjuX{PI5xCQO3oNQV;!m_2i5no7h-6fhRL~~cUGb=4jh`M5*J^lu
zOx!$MI>jkYRAwR9YiYvsKFLDUZDfxt*d@Tj-bZqe)LYj)S~RQv9MnR}%gYc<90>C6
z_D)||S*re+j={>`|FpZ!LpOaYkn!Wm*$zP!eSSmDIV0?s+{%ozEQsx9P+Nu1(4Oq0
zh8LxkFsvbR{u2*Eun@4>tLFJwAyjRGDsLN`Qm~Z)s#Vw8r#lTR)Z#&cl=MZDy#%rz
zmwnue)JBtg!F92IxqaO?Sw*yHZh~lfIRuPrN?9~#3<Fc&npAA?@kWx>5f2>wML%5+
z$cN>DWk%#D#WwG&y~)N95bBx^hKaXEzZRHVI$;;~SDP+{@=_QQT{tOMcMOMS94Q}$
z<-CtgKsj1?ajoV~UqFSRYt?=e`JHd3{L}E6wjB{px_Fn>*p6t#B|QP;MP{vz(%?Va
zZMAh7yVgI0o`)y(uz`{p5xA>`F?^P5k<IJd(bpVHqLUNEbW1|foG*Him15pW9o0pm
z2?nB>)TnAw7>7y0!+34}ss3J=C@b5`b<P-m+isMoq{<$Xb*PqXEavrKY>QZtMr64$
z$#sS>;^k@0RZtOb6Hbt|0uvHE^Bz;^A*^PvIlE^TY4qgWN#AHcd0+fU>*Sr}+Cho3
zh+SjOT48y22bI=YK4YC6^+^1(Z92V4%9Yv^Uq4RywzyBGgM1%IH%VH1Y*kr=ppDjU
zj0x!X<>Sifq(a;c8!D#W)i8r=rq~tS2E}5HF(k=qi!xr)Os-sqPis3xKG)hODk%!g
z#tinw7X=ckbIXk-;7`p}ghygdeSBnQntC~vswvXo6V;qVfq`oVvIMF}5cabk?%wS$
zrNLBahT>h1>=rfb!@S?+tyT@R%#JhlVl7q;AUTrEkg0pJ3f*mtU|(*{6k`9~#vu{M
zk9pDdpxYDkM1G;|Vpr#smj)PGM<Kjs@vpkoYj=5X(G;<mOqCJR-<4-scb>ccH8h5x
zaoW~B!}JVCa(rqU)9ZZyM$fU-^5*F;Q=nU%bysCXM0uEI7FDrY$bzu8BBt10Ud06)
z9aBrUc-v_7o$iOU952W)<`=BB!f9(4l+4USfnTA;yyz6`&KYyj?xfGr5tY$4>pG-4
z<zc*SxvuDo^uE$md5dV>p`2484L*(bGps>G@@iR|tQ9T|VVq9j<R&-AO~F&v3Y+zq
zbZn4O_R(5x=}S?o?x+-FQyYun)SD_(Z%vxku1Mtd<SI?BIynA5VASNRds&-&)?n^9
zE2JZ;S(2b~daeAN^u%w>mnybFkfv~-#3X9s1&K~uqy4EJzYr)NP_~xuL?tHt>_8FZ
z{r0dQv02jh-73om9aCE$)mFcz92EpdhQPE<6aGOoR|cO|4z)nVMUwdBiB32gu(MMW
z849?DFuT>Mmlf<Bi=X1pPFDOrGWaaIL{x%S(<AhivxzTCA9j+63Chk)CtRj2Wl)mY
zNruWpN2ej-*TVW4V;Lw8KJibk0~0t&$*Z-Ngg<Af?p#$-agiai@fwDsMXcU5(Cvnd
znwQDH=$6u&5^&uX7W5qxcX-`2A?I1gZ@vDM&a!Edp3*-OsDoWJYm5A4MQ*@g@m9gr
z?8&XJgy&D@o{UnrOud{>cjJ+xbPH>c6-oVRMui$Mc*oM2bt-bN`Y%0yFa3qhn(H^W
zh8)X|BX()Np~R}jrvub+qrq+8>L0g9N%y&~KWB{POR`#WGQ!fQgEk=&XB?YSI~L~&
zg!`56G?jSY4<)o^B9InD-3~WY+f1(BXOSn=nIy%kky1%S*@)}9$(ddwTp2gI^4*2B
zH6p>V7r()jA}kho)x{7Y$LZdeWb9=8+13vC8C%J%SnBIOOzSF0Y43Kxz8s;XcUpJE
zcr>>^N?WF)N=Y2a!xgnILD(s4vgsO0q<q(8ebGJ5uHk7R#y5^paQ@y*+^y;nP_zaE
zf38*FYajgBc!%WnpBOO?ORT*pNrh`pW?O1O#Ps9BrbCm3VO(>=R~81_5Dkxu6~mO^
zq}B1NW@XT#NM1<M^-_UN=Up%Q_$`8igpJl&!FpV%AQ@A$K6!H1JbAz%9RVkcXA_bK
zjJ?DaX9k`AwBMA~C~;X=IAiyGviej-N=w&XA!kxUCb{0Bskp&=z9X6`^1_|vAXsA2
zZMl^m9mVN4VxP((k;D$s3hjv+A^jMpGOv<)!oF#fC?20uDLh`58&O{(a$YeC=X7Nu
z7L4fEY7`zqIr;ct%pSEzQq7YydLFt9`;~Kt1khcBBR51@!1BFaI73j-2K`h{_$dP}
zYJf04mUFitp{+%YJpxYd+7NeK##De9Z}j+MWwrw?X$Ona<ZX+CPebjCS%R$Ejd=H4
zk2i3VbprL>XpjPc%l$mya_5jaW>nMWJQcp>*{ie6A)^8H>L)0NytE9tMk6ckqbSP@
zoWj5<xN)&pC*xNf!^A@c+TYLP7@+(}{+c#h+H1k62G+Z#z?e(Ji63+VNmW|U%Ii!{
zD9jEE_Mpbaf9v|@MPD%iT+jj+=b6r&T%ae;ZTetjw*NS`{9Y%}m}Ydv+7mCq$t`@Z
zlt$kzV-uCz>f5lo`fjJNer9u*6Ma(1hRAV6IjC(_BhC#H9I`rmoIPxXgPU$(07qHb
z{(?RsH1~o|zsF2U-ax=#258`SjFyTEj~HE8FxkW@?!_Eq*hxFi{-ugB7O>2p0W9;U
z^jXFbx7+t5?v#?yRw7Ik3}1#@dUTi8M?!z<o0^SRh`+d!kdGOErY*3a>H-`_hyUF)
z^nl9zNJD?9Ht?fk`S2qFK=7d3kH+QymmvKEo&IZRC>&s)D5%Vj5cIoy{(t%BcL)9d
z(N5q=0ZRJ4+ysC+|HhgC8~p)o{g5>A?_kzXSo5%j9{t9ICCiTX%-+={#b8hlQ$L4=
z{MJTu)F@C?Y8UjmQ@f6;W<vgsHRGB5<|=P6&)U1QWi=^too{|t@kQ=Eq=gJK?YA!P
z;%*uGa<&6@Z2z~=jM_WY)!aPh*ywuH1KqUa%vISa*q9h#p^qem-t}c>z>yv$lj~md
zp8!(|Zrc$z7UplmgE%vb)FPvDpfTy}U9S`8Fj71nVJv(R#f60;ws!sXn_Bw!Yj+(k
zS!a5*hDEB?-C(En1Ihl9ohzWpmK`Ca&pM|Gu+3y-kD$KF*~Qw)@vco}e2f161(83L
zx%~3nPbcA`c!u`Nw*zIg#JjTADlWq8%GJ4uE8V(YhR(C6c>3c0#YX#HJmf!%HNWSS
z95U1cHR}#-7$2a_2T;NehGc;La{##)(!lz$;rU0C1oq3p!Q=9`21820fWZ%GP$&!q
zthFPW)WM90G?+BvVE-M}5J$%Y(nX+v{r_+~1Qe*Sa#)j+LISxWhc!49Aq7MS4)ujg
zqyEJllJKMLU<j$7?+=Lp!UBiK1BwCyafG89@*th%(7Zr}yaS?rM1viaggK%egdmP+
zaNw;T)lf1}08St7i$eX>7Y>C1agoFA;7}Rh^Ke9yhN6y+2M3}cNACp=r0o3go;~lG
z1Bpxb7=Y{`Lwi5#gC!(k;OYuwO#S_F{hm8?5TZHwK6`kY-}C&w*x(3BNofW_K{Y*f
GhW`P&W6Jsf

literal 0
HcmV?d00001

diff --git a/tests/Fixtures/lorem-ipsum.txt b/tests/Fixtures/lorem-ipsum.txt
new file mode 100644
index 00000000..f1727858
--- /dev/null
+++ b/tests/Fixtures/lorem-ipsum.txt
@@ -0,0 +1,9 @@
+Lorem ipsum dolor sit amet, consectetur adipiscing elit. Vestibulum sit amet bibendum dui. Phasellus viverra justo quam, eu sollicitudin felis commodo eu. Integer at elit commodo, egestas ipsum eu, vestibulum libero. Donec ut metus sed sapien lobortis ultricies sit amet ac quam. Proin vitae dui non tortor laoreet laoreet quis rutrum leo. Ut pharetra nec arcu gravida egestas. Duis eget nisl pharetra, fermentum sapien vel, tempus ligula. Sed fringilla feugiat gravida. Mauris efficitur eu metus non consectetur. Vestibulum faucibus lacus tellus, ut vulputate nisl dapibus nec. Nunc eleifend nisl urna, ut imperdiet velit tristique nec. Nunc vel lacus libero. Praesent et pretium metus. Interdum et malesuada fames ac ante ipsum primis in faucibus.
+
+In urna tellus, interdum in molestie nec, venenatis ut turpis. Aliquam erat volutpat. Nulla dictum turpis et tellus iaculis egestas. Proin velit neque, posuere sit amet sapien eget, dapibus pharetra velit. Morbi ultricies arcu et orci tempus accumsan. Maecenas ullamcorper, tortor nec finibus iaculis, sapien ipsum varius turpis, sit amet rutrum turpis libero cursus lorem. Nam bibendum lectus odio, ut sollicitudin justo gravida in. Integer aliquam, dolor eu tempor rutrum, enim nisl fringilla eros, a eleifend lectus est in turpis.
+
+Nulla interdum mi erat, cursus ultricies nisi vulputate non. Cras at neque ex. Sed sodales vehicula dolor, ut dignissim eros convallis et. Vestibulum ornare sagittis eleifend. Mauris fermentum orci est, sed venenatis ex tincidunt id. Morbi ut nisi sagittis, egestas quam in, ornare tellus. Mauris molestie tincidunt lorem ac volutpat.
+
+Duis fermentum, tellus vitae mollis finibus, diam augue pretium sapien, sed mattis urna lorem a leo. Sed quis enim finibus, finibus dui sit amet, luctus elit. Nullam velit enim, fermentum sit amet sem vitae, elementum volutpat justo. Integer porttitor tellus non dictum vulputate. Donec vulputate eu mi sit amet maximus. Donec egestas metus sit amet ante egestas, in suscipit elit dapibus. Proin magna massa, fringilla placerat facilisis vel, eleifend quis erat. Praesent ultrices lectus ac condimentum consectetur.
+
+Ut vel venenatis augue, nec luctus neque. Nullam commodo urna a felis tempor posuere. Duis nec nisl eget leo efficitur feugiat. Nulla elementum massa a sapien finibus fermentum. Quisque pretium ligula in sapien auctor, in rhoncus ex eleifend. Sed id bibendum orci, sed ultrices sem. Curabitur sollicitudin quam odio, dignissim lacinia dolor ultrices vel.
diff --git a/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php b/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
index 7491d6a6..1e093977 100644
--- a/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
+++ b/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
@@ -3,6 +3,7 @@
 declare(strict_types=1);
 
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Route;
 
 use function Pest\Laravel\withServerVariables;
 use function Pest\Laravel\withUnencryptedCookie;
@@ -36,3 +37,138 @@
     visit('/server-variables')
         ->assertSee('"test-server-key":"test value"');
 });
+
+it('parse a URL-encoded body', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' action='/form'>
+                <label for='name'>Your name</label>
+                <input id='name' type='text' name='name'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+    Route::post('/form', static fn (Request $request): string => "
+        <html>
+        <head></head>
+        <body>
+            <h1>Hello {$request->post('name')}</h1>
+        </body>
+        </html>
+    ");
+
+    $page = visit('/');
+    $page->assertSee('Your name');
+
+    $page->fill('Your name', 'World');
+    $page->click('Send');
+
+    $page->assertSee('Hello World');
+});
+
+it('parse a multipart body with files', function (): void {
+    Route::get('favicon.ico', static fn (): string => '');
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='name'>Your name</label>
+                <input id='name' type='text' name='name'>
+
+                <label for='file1'>Your text file</label>
+                <input id='file1' type='file' name='file1'>
+
+                <label for='file2'>Your binary file</label>
+                <input id='file2' type='file' name='file2'>
+
+                <label for='file3'>Your empty file</label>
+                <input id='file3' type='file' name='file3'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+    Route::post('/form', static fn (Request $request): string => "
+        <html>
+        <head></head>
+        <body>
+            <h1>Hello {$request->post('name')}</h1>
+            <p>Text file: {$request->file('file1')?->getClientOriginalName()}</p>
+            <p>Binary file: {$request->file('file2')?->getClientOriginalName()}</p>
+            <p>Empty file: {$request->file('file3')?->getClientOriginalName()}</p>
+        </body>
+        </html>
+    ");
+
+    $page = visit('/');
+    $page->assertSee('Your name');
+
+    $page->fill('Your name', 'World');
+    $page->attach('Your text file', fixture('lorem-ipsum.txt'));
+    $page->attach('Your binary file', fixture('example.pdf'));
+    $page->submit();
+
+    $page->assertSee('Hello World');
+    $page->assertSee('Text file: lorem-ipsum.txt');
+    $page->assertSee('Binary file: example.pdf');
+    $page->assertSee('Empty file: ');
+});
+
+it('parse a multipart body with nested fields', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='person-first-name'>Your first name</label>
+                <input id='person-first-name' type='text' name='person[first_name]'>
+
+                <label for='person-last-name'>Your last name</label>
+                <input id='person-last-name' type='text' name='person[last_name]'>
+
+                <label for='children-name-1'>Child 1</label>
+                <input id='children-name-1' type='text' name='children[]'>
+
+                <label for='children-name-2'>Child 2</label>
+                <input id='children-name-2' type='text' name='children[]'>
+
+                <label for='children-name-3'>Child 3</label>
+                <input id='children-name-3' type='text' name='children[]'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+    Route::post('/form', static function (Request $request): string {
+        $childNames = implode(', ', (array) $request->input('children'));
+
+        return "
+            <html>
+            <head></head>
+            <body>
+                <h1>Hello {$request->input('person.first_name')} {$request->input('person.last_name')}</h1>
+                <p>and $childNames</p>
+            </body>
+            </html>
+        ";
+    });
+
+    $page = visit('/');
+
+    $page->fill('Your first name', 'Jane');
+    $page->fill('Your last name', 'Doe');
+    $page->fill('Child 2', 'Johnathan');
+    $page->fill('Child 3', 'Jamie');
+    $page->fill('Child 1', 'John');
+    $page->submit();
+
+    $page->assertSee('Hello Jane Doe')
+        ->assertSee('and John, Johnathan, Jamie');
+});

From 90a5998c9c42f65ebbc11c5ce2c83b9f032291e9 Mon Sep 17 00:00:00 2001
From: Michael Mantos <miko.mantos@gmail.com>
Date: Mon, 16 Feb 2026 06:04:26 +0000
Subject: [PATCH 2/6] fix: Use Illuminate\Http\UploadedFile to avoid conversion
 and ignore test property

---
 src/Drivers/LaravelHttpServer.php             |  4 +-
 .../Drivers/Laravel/LaravelHttpServerTest.php | 52 +++++++++++++++++++
 2 files changed, 53 insertions(+), 3 deletions(-)

diff --git a/src/Drivers/LaravelHttpServer.php b/src/Drivers/LaravelHttpServer.php
index eb21fec4..95b757b6 100644
--- a/src/Drivers/LaravelHttpServer.php
+++ b/src/Drivers/LaravelHttpServer.php
@@ -4,8 +4,6 @@
 
 namespace Pest\Browser\Drivers;
 
-use const UPLOAD_ERR_OK;
-
 use Amp\ByteStream\ReadableResourceStream;
 use Amp\Http\Cookie\RequestCookie;
 use Amp\Http\Server\DefaultErrorHandler;
@@ -21,6 +19,7 @@
 use Illuminate\Contracts\Http\Kernel as HttpKernel;
 use Illuminate\Foundation\Testing\Concerns\WithoutExceptionHandlingHandler;
 use Illuminate\Http\Request;
+use Illuminate\Http\UploadedFile;
 use Illuminate\Routing\UrlGenerator;
 use Illuminate\Support\Uri;
 use Pest\Browser\Contracts\HttpServer;
@@ -29,7 +28,6 @@
 use Pest\Browser\GlobalState;
 use Pest\Browser\Playwright\Playwright;
 use Psr\Log\NullLogger;
-use Symfony\Component\HttpFoundation\File\UploadedFile;
 use Symfony\Component\Mime\MimeTypes;
 use Throwable;
 
diff --git a/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php b/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
index 1e093977..2e02b19c 100644
--- a/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
+++ b/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
@@ -120,6 +120,58 @@
     $page->assertSee('Empty file: ');
 });
 
+it('validates multipart pdf upload metadata', function (): void {
+    Route::get('favicon.ico', static fn (): string => '');
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='pdf-file'>PDF file</label>
+                <input id='pdf-file' type='file' name='pdf_file'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    $expectedPdfSize = filesize(fixture('example.pdf'));
+    assert($expectedPdfSize !== false);
+
+    Route::post('/form', static function (Request $request) use ($expectedPdfSize): string {
+        $pdf = $request->file('pdf_file');
+        $name = $pdf?->getClientOriginalName() ?? '';
+        $extension = $pdf?->getClientOriginalExtension() ?? '';
+        $valid = $pdf?->isValid() ? 'yes' : 'no';
+        $size = (string) ($pdf?->getSize() ?? '');
+
+        return "
+            <html>
+            <head></head>
+            <body>
+                <p>Name: $name</p>
+                <p>Extension: $extension</p>
+                <p>Valid: $valid</p>
+                <p>Size: $size</p>
+                <p>Expected size: $expectedPdfSize</p>
+            </body>
+            </html>
+        ";
+    });
+
+    $page = visit('/');
+
+    $page->attach('PDF file', fixture('example.pdf'));
+    $page->submit();
+
+    $page->assertSee('Name: example.pdf')
+        ->assertSee('Extension: pdf')
+        ->assertSee('Valid: yes')
+        ->assertSee('Expected size: '.$expectedPdfSize)
+        ->assertSee('Size: '.$expectedPdfSize);
+});
+
 it('parse a multipart body with nested fields', function (): void {
     Route::get('/', static fn (): string => "
         <html>

From 6e72b2e92a5fad2d9ecf5dde40be1a411f1e1f62 Mon Sep 17 00:00:00 2001
From: Michael Mantos <miko.mantos@gmail.com>
Date: Thu, 26 Feb 2026 00:35:41 +0000
Subject: [PATCH 3/6] fix: improve multipart file parsing and upload error
 handling in LaravelHttpServer

---
 src/Drivers/LaravelHttpServer.php             | 185 +----------
 src/Http/ExtendedFormParser.php               | 287 ++++++++++++++++++
 tests/ArchTest.php                            |   1 +
 .../Drivers/Laravel/LaravelHttpServerTest.php | 262 ++++++++++++++--
 4 files changed, 548 insertions(+), 187 deletions(-)
 create mode 100644 src/Http/ExtendedFormParser.php

diff --git a/src/Drivers/LaravelHttpServer.php b/src/Drivers/LaravelHttpServer.php
index 95b757b6..0fdce8b8 100644
--- a/src/Drivers/LaravelHttpServer.php
+++ b/src/Drivers/LaravelHttpServer.php
@@ -7,8 +7,6 @@
 use Amp\ByteStream\ReadableResourceStream;
 use Amp\Http\Cookie\RequestCookie;
 use Amp\Http\Server\DefaultErrorHandler;
-use Amp\Http\Server\FormParser\BufferedFile;
-use Amp\Http\Server\FormParser\Form;
 use Amp\Http\Server\HttpServer as AmpHttpServer;
 use Amp\Http\Server\HttpServerStatus;
 use Amp\Http\Server\Request as AmpRequest;
@@ -19,13 +17,13 @@
 use Illuminate\Contracts\Http\Kernel as HttpKernel;
 use Illuminate\Foundation\Testing\Concerns\WithoutExceptionHandlingHandler;
 use Illuminate\Http\Request;
-use Illuminate\Http\UploadedFile;
 use Illuminate\Routing\UrlGenerator;
 use Illuminate\Support\Uri;
 use Pest\Browser\Contracts\HttpServer;
 use Pest\Browser\Exceptions\ServerNotFoundException;
 use Pest\Browser\Execution;
 use Pest\Browser\GlobalState;
+use Pest\Browser\Http\ExtendedFormParser;
 use Pest\Browser\Playwright\Playwright;
 use Psr\Log\NullLogger;
 use Symfony\Component\Mime\MimeTypes;
@@ -53,6 +51,11 @@ final class LaravelHttpServer implements HttpServer
      */
     private ?Throwable $lastThrowable = null;
 
+    /**
+     * The multipart parser wrapper with upload validation behavior.
+     */
+    private ExtendedFormParser $extendedFormParser;
+
     /**
      * Creates a new laravel http server instance.
      */
@@ -60,7 +63,7 @@ public function __construct(
         public readonly string $host,
         public readonly int $port,
     ) {
-        //
+        $this->extendedFormParser = ExtendedFormParser::fromIni();
     }
 
     /**
@@ -72,6 +75,14 @@ public function __destruct()
         // $this->stop();
     }
 
+    /**
+     * Overrides the multipart parser instance.
+     */
+    public function setExtendedFormParser(ExtendedFormParser $extendedFormParser): void
+    {
+        $this->extendedFormParser = $extendedFormParser;
+    }
+
     /**
      * Rewrite the given URL to match the server's host and port.
      */
@@ -383,170 +394,6 @@ private function rewriteAssetUrl(string $content): string
      */
     private function parseMultipartFormData(AmpRequest $request): array
     {
-        $form = Form::fromRequest($request);
-
-        $values = $form->getValues();
-        $files = $form->getFiles();
-
-        return [
-            $this->normalizeMultipartParameters($values),
-            $this->normalizeMultipartFiles($files),
-        ];
-    }
-
-    /**
-     * Normalize multipart field values to a Symfony request-compatible array.
-     *
-     * @param  array<string, list<string>>  $fields
-     * @return array<int|string, mixed>
-     */
-    private function normalizeMultipartParameters(array $fields): array
-    {
-        $normalized = [];
-
-        foreach ($fields as $field => $values) {
-            foreach ($values as $value) {
-                $this->setFieldValue($normalized, $field, $value);
-            }
-        }
-
-        return $normalized;
-    }
-
-    /**
-     * Normalize multipart files to a Symfony request-compatible files array.
-     *
-     * @param  array<string, list<BufferedFile>>  $files
-     * @return array<int|string, mixed>
-     */
-    private function normalizeMultipartFiles(array $files): array
-    {
-        $normalized = [];
-
-        foreach ($files as $field => $fileEntries) {
-            foreach ($fileEntries as $fileEntry) {
-                $this->setFieldValue($normalized, $field, $this->createUploadedFile($fileEntry));
-            }
-        }
-
-        return $normalized;
-    }
-
-    /**
-     * @param  array<int|string, mixed>  $target
-     */
-    private function setFieldValue(array &$target, string $field, string|UploadedFile $value): void
-    {
-        $segments = $this->fieldSegments($field);
-
-        if ($segments === []) {
-            return;
-        }
-
-        $this->setNestedFieldValue($target, $segments, $value);
-    }
-
-    /**
-     * @return list<string>
-     */
-    private function fieldSegments(string $field): array
-    {
-        if (! str_contains($field, '[')) {
-            return [$field];
-        }
-
-        $segments = [];
-        $head = mb_strstr($field, '[', true);
-
-        if ($head !== false && $head !== '') {
-            $segments[] = $head;
-        }
-
-        preg_match_all('/\[([^\]]*)\]/', $field, $matches);
-
-        foreach ($matches[1] as $segment) {
-            $segments[] = $segment;
-        }
-
-        return $segments;
-    }
-
-    /**
-     * @param  array<int|string, mixed>  $target
-     * @param  list<string>  $segments
-     */
-    private function setNestedFieldValue(array &$target, array $segments, string|UploadedFile $value): void
-    {
-        $segment = array_shift($segments);
-
-        if ($segment === null) {
-            return;
-        }
-
-        if ($segments === []) {
-            if ($segment === '') {
-                $target[] = $value;
-
-                return;
-            }
-
-            if (! array_key_exists($segment, $target)) {
-                $target[$segment] = $value;
-
-                return;
-            }
-
-            if (! is_array($target[$segment])) {
-                $target[$segment] = [$target[$segment]];
-            }
-
-            $target[$segment][] = $value;
-
-            return;
-        }
-
-        if ($segment === '') {
-            $target[] = [];
-
-            $lastKey = array_key_last($target);
-            if (! is_array($target[$lastKey])) {
-                return;
-            }
-
-            $this->setNestedFieldValue($target[$lastKey], $segments, $value);
-
-            return;
-        }
-
-        if (! isset($target[$segment]) || ! is_array($target[$segment])) {
-            $target[$segment] = [];
-        }
-
-        $this->setNestedFieldValue($target[$segment], $segments, $value);
-    }
-
-    private function createUploadedFile(object $fileEntry): UploadedFile
-    {
-        $tempPath = tempnam(sys_get_temp_dir(), 'pest-browser-upload-');
-        assert($tempPath !== false, 'Failed to create temporary upload file.');
-
-        $contents = method_exists($fileEntry, 'getContents') ? $fileEntry->getContents() : '';
-        $contents = is_string($contents) ? $contents : '';
-
-        file_put_contents($tempPath, $contents);
-
-        $clientFilename = method_exists($fileEntry, 'getName') ? $fileEntry->getName() : 'upload';
-        $clientFilename = is_string($clientFilename) && $clientFilename !== '' ? $clientFilename : 'upload';
-
-        $mimeType = method_exists($fileEntry, 'getMimeType') ? $fileEntry->getMimeType() : 'application/octet-stream';
-        $mimeType = is_string($mimeType) && $mimeType !== '' ? $mimeType : 'application/octet-stream';
-
-        return new UploadedFile(
-            $tempPath,
-            $clientFilename,
-            $mimeType,
-            UPLOAD_ERR_OK,
-            true,
-        );
+        return $this->extendedFormParser->parseMultipart($request);
     }
 }
diff --git a/src/Http/ExtendedFormParser.php b/src/Http/ExtendedFormParser.php
new file mode 100644
index 00000000..857fbfb2
--- /dev/null
+++ b/src/Http/ExtendedFormParser.php
@@ -0,0 +1,287 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Pest\Browser\Http;
+
+use const UPLOAD_ERR_CANT_WRITE;
+use const UPLOAD_ERR_FORM_SIZE;
+use const UPLOAD_ERR_INI_SIZE;
+use const UPLOAD_ERR_NO_FILE;
+use const UPLOAD_ERR_OK;
+
+use Amp\Http\Server\FormParser\BufferedFile;
+use Amp\Http\Server\FormParser\Form;
+use Amp\Http\Server\Request as AmpRequest;
+use Illuminate\Http\UploadedFile;
+
+final class ExtendedFormParser
+{
+    private int $filesCount = 0;
+
+    private int $emptyCount = 0;
+
+    private ?int $maxFileSize = null;
+
+    public function __construct(
+        private readonly int $maxInputVars = 1000,
+        private readonly int|float $uploadMaxFilesize = 0,
+        private readonly int $maxFileUploads = 20,
+    ) {}
+
+    public static function fromIni(): self
+    {
+        $maxInputVarsRaw = ini_get('max_input_vars');
+        $maxInputVars = (int) ($maxInputVarsRaw !== false ? $maxInputVarsRaw : 1000);
+        $uploadMaxFilesize = self::iniSizeToBytes((string) ini_get('upload_max_filesize'));
+        $maxFileUploadsRaw = ini_get('max_file_uploads');
+        $maxFileUploads = (int) ($maxFileUploadsRaw !== false ? $maxFileUploadsRaw : 20);
+
+        return new self($maxInputVars, $uploadMaxFilesize, $maxFileUploads);
+    }
+
+    /**
+     * @return array{array<int|string, mixed>, array<int|string, mixed>}
+     */
+    public function parseMultipart(AmpRequest $request): array
+    {
+        $this->filesCount = 0;
+        $this->emptyCount = 0;
+        $this->maxFileSize = null;
+
+        $form = Form::fromRequest($request);
+        $values = $form->getValues();
+
+        $maxFileSize = $values['MAX_FILE_SIZE'][0] ?? null;
+        if (is_string($maxFileSize) && is_numeric($maxFileSize)) {
+            $parsedMaxFileSize = (int) $maxFileSize;
+
+            if ($parsedMaxFileSize > 0) {
+                $this->maxFileSize = $parsedMaxFileSize;
+            }
+        }
+
+        $parameters = [];
+        foreach ($values as $field => $entries) {
+            foreach ($entries as $entry) {
+                $this->setFieldValue($parameters, $field, $entry);
+            }
+        }
+
+        $files = [];
+        foreach ($form->getFiles() as $field => $entries) {
+            foreach ($entries as $entry) {
+                $parsedFile = $this->parseUploadedFile($entry);
+
+                if ($parsedFile === null) {
+                    continue;
+                }
+
+                $this->setFieldValue($files, $field, $parsedFile);
+            }
+        }
+
+        return [$parameters, $files];
+    }
+
+    private static function iniSizeToBytes(string $size): int|float
+    {
+        if (is_numeric($size)) {
+            return (int) $size;
+        }
+
+        $suffix = mb_strtoupper(mb_substr($size, -1));
+        $strippedSize = mb_substr($size, 0, -1);
+
+        if (! is_numeric($strippedSize)) {
+            return 0;
+        }
+
+        $value = (float) $strippedSize;
+
+        return match ($suffix) {
+            'K' => $value * 1024,
+            'M' => $value * 1024 * 1024,
+            'G' => $value * 1024 * 1024 * 1024,
+            'T' => $value * 1024 * 1024 * 1024 * 1024,
+            default => (int) $size,
+        };
+    }
+
+    /**
+     * @return UploadedFile|array{name: string, type: string, tmp_name: string, error: int, size: int}|null
+     */
+    private function parseUploadedFile(BufferedFile $entry): UploadedFile|array|null
+    {
+        $contents = $entry->getContents();
+        $filename = $entry->getName();
+        $contentType = $entry->getMimeType();
+
+        if ($contentType === '') {
+            $contentType = 'application/octet-stream';
+        }
+
+        $size = mb_strlen($contents, '8bit');
+
+        if ($size === 0 && $filename === '') {
+            if (++$this->emptyCount + $this->filesCount > $this->maxInputVars) {
+                return null;
+            }
+
+            return [
+                'name' => $filename,
+                'type' => $contentType,
+                'tmp_name' => '',
+                'error' => UPLOAD_ERR_NO_FILE,
+                'size' => 0,
+            ];
+        }
+
+        if (++$this->filesCount > $this->maxFileUploads) {
+            return null;
+        }
+
+        if ($size > $this->uploadMaxFilesize) {
+            return [
+                'name' => $filename,
+                'type' => $contentType,
+                'tmp_name' => '',
+                'error' => UPLOAD_ERR_INI_SIZE,
+                'size' => $size,
+            ];
+        }
+
+        if ($this->maxFileSize !== null && $size > $this->maxFileSize) {
+            return [
+                'name' => $filename,
+                'type' => $contentType,
+                'tmp_name' => '',
+                'error' => UPLOAD_ERR_FORM_SIZE,
+                'size' => $size,
+            ];
+        }
+
+        $tempPath = tempnam(sys_get_temp_dir(), 'pest-browser-upload-');
+        if ($tempPath === false) {
+            return [
+                'name' => $filename,
+                'type' => $contentType,
+                'tmp_name' => '',
+                'error' => UPLOAD_ERR_CANT_WRITE,
+                'size' => $size,
+            ];
+        }
+
+        $written = file_put_contents($tempPath, $contents);
+        if ($written === false) {
+            return [
+                'name' => $filename,
+                'type' => $contentType,
+                'tmp_name' => '',
+                'error' => UPLOAD_ERR_CANT_WRITE,
+                'size' => $size,
+            ];
+        }
+
+        return new UploadedFile(
+            $tempPath,
+            $filename !== '' ? $filename : 'upload',
+            $contentType,
+            UPLOAD_ERR_OK,
+            true,
+        );
+    }
+
+    /**
+     * @param  array<int|string, mixed>  $target
+     */
+    private function setFieldValue(array &$target, string $field, mixed $value): void
+    {
+        $segments = $this->fieldSegments($field);
+
+        if ($segments === []) {
+            return;
+        }
+
+        $this->setNestedFieldValue($target, $segments, $value);
+    }
+
+    /**
+     * @return list<string>
+     */
+    private function fieldSegments(string $field): array
+    {
+        if (! str_contains($field, '[')) {
+            return [$field];
+        }
+
+        $segments = [];
+        $head = mb_strstr($field, '[', true);
+
+        if ($head !== false && $head !== '') {
+            $segments[] = $head;
+        }
+
+        preg_match_all('/\[([^\]]*)\]/', $field, $matches);
+
+        foreach ($matches[1] as $segment) {
+            $segments[] = $segment;
+        }
+
+        return $segments;
+    }
+
+    /**
+     * @param  array<int|string, mixed>  $target
+     * @param  list<string>  $segments
+     */
+    private function setNestedFieldValue(array &$target, array $segments, mixed $value): void
+    {
+        $segment = array_shift($segments);
+
+        if ($segment === null) {
+            return;
+        }
+
+        if ($segments === []) {
+            if ($segment === '') {
+                $target[] = $value;
+
+                return;
+            }
+
+            if (! array_key_exists($segment, $target)) {
+                $target[$segment] = $value;
+
+                return;
+            }
+
+            if (! is_array($target[$segment])) {
+                $target[$segment] = [$target[$segment]];
+            }
+
+            $target[$segment][] = $value;
+
+            return;
+        }
+
+        if ($segment === '') {
+            $target[] = [];
+
+            $lastKey = array_key_last($target);
+            if (! is_array($target[$lastKey])) {
+                return;
+            }
+
+            $this->setNestedFieldValue($target[$lastKey], $segments, $value);
+
+            return;
+        }
+
+        if (! isset($target[$segment]) || ! is_array($target[$segment])) {
+            $target[$segment] = [];
+        }
+
+        $this->setNestedFieldValue($target[$segment], $segments, $value);
+    }
+}
diff --git a/tests/ArchTest.php b/tests/ArchTest.php
index 2f5fe285..efb40497 100644
--- a/tests/ArchTest.php
+++ b/tests/ArchTest.php
@@ -9,5 +9,6 @@
         Pest\Browser\Api\TestableLivewire::class,
         Pest\Browser\Cleanables\Livewire::class,
         Pest\Browser\Drivers\LaravelHttpServer::class,
+        Pest\Browser\Http\ExtendedFormParser::class,
         'Workbench',
     ]);
diff --git a/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php b/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
index 2e02b19c..ac246a1c 100644
--- a/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
+++ b/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
@@ -4,6 +4,7 @@
 
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Route;
+use Pest\Browser\Playwright\Playwright;
 
 use function Pest\Laravel\withServerVariables;
 use function Pest\Laravel\withUnencryptedCookie;
@@ -106,18 +107,241 @@
         </html>
     ");
 
-    $page = visit('/');
-    $page->assertSee('Your name');
+    Playwright::usingTimeout(15_000, function (): void {
+        $page = visit('/');
+        $page->assertSee('Your name');
 
-    $page->fill('Your name', 'World');
-    $page->attach('Your text file', fixture('lorem-ipsum.txt'));
-    $page->attach('Your binary file', fixture('example.pdf'));
-    $page->submit();
+        $page->fill('Your name', 'World');
+        $page->attach('Your text file', fixture('lorem-ipsum.txt'));
+        $page->attach('Your binary file', fixture('example.pdf'));
+        $page->submit();
 
-    $page->assertSee('Hello World');
-    $page->assertSee('Text file: lorem-ipsum.txt');
-    $page->assertSee('Binary file: example.pdf');
-    $page->assertSee('Empty file: ');
+        $page->assertSee('Hello World');
+        $page->assertSee('Text file: lorem-ipsum.txt');
+        $page->assertSee('Binary file: example.pdf');
+        $page->assertSee('Empty file: ');
+    });
+});
+
+it('applies MAX_FILE_SIZE multipart validation error', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <input type='hidden' name='MAX_FILE_SIZE' value='1'>
+
+                <label for='document'>Document</label>
+                <input id='document' type='file' name='document'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/form', static function (Request $request): string {
+        $document = $request->file('document');
+
+        return '
+            <html>
+            <head></head>
+            <body>
+                <p>Has file: '.($document !== null ? 'yes' : 'no').'</p>
+                <p>Error: '.($document?->getError() ?? 'none').'</p>
+            </body>
+            </html>
+        ';
+    });
+
+    Playwright::usingTimeout(15_000, function (): void {
+        $page = visit('/');
+
+        $page->attach('Document', fixture('lorem-ipsum.txt'));
+        $page->submit();
+
+        $page->assertSee('Has file: yes')
+            ->assertSee('Error: '.UPLOAD_ERR_FORM_SIZE);
+    });
+});
+
+it('applies UPLOAD_ERR_NO_FILE when no file is selected', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='document'>Document</label>
+                <input id='document' type='file' name='document'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/form', static function (Request $request): string {
+        $file = $request->files->get('document');
+
+        $hasNoFileError = $file === null
+            || (
+                $file instanceof Illuminate\Http\UploadedFile
+                && $file->getError() === UPLOAD_ERR_NO_FILE
+            );
+
+        return '
+            <html>
+            <head></head>
+            <body>
+                <p>No file error: '.($hasNoFileError ? 'yes' : 'no').'</p>
+            </body>
+            </html>
+        ';
+    });
+
+    Playwright::usingTimeout(15_000, function (): void {
+        $page = visit('/');
+        $page->submit();
+
+        $page->assertSee('No file error: yes');
+    });
+});
+
+it('applies UPLOAD_ERR_INI_SIZE for oversized multipart upload', function (): void {
+    $http = Pest\Browser\ServerManager::instance()->http();
+    assert($http instanceof Pest\Browser\Drivers\LaravelHttpServer);
+
+    $http->setExtendedFormParser(new Pest\Browser\Http\ExtendedFormParser(
+        maxInputVars: 1000,
+        uploadMaxFilesize: 1,
+        maxFileUploads: 20,
+    ));
+
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='document'>Document</label>
+                <input id='document' type='file' name='document'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/form', static function (Request $request): string {
+        $document = $request->file('document');
+
+        return '
+            <html>
+            <head></head>
+            <body>
+                <p>Error: '.($document?->getError() ?? 'none').'</p>
+            </body>
+            </html>
+        ';
+    });
+
+    $oversizedFile = tempnam(sys_get_temp_dir(), 'multipart-oversized-');
+    assert($oversizedFile !== false);
+
+    try {
+        $written = file_put_contents($oversizedFile, 'AB');
+        assert($written !== false);
+
+        Playwright::usingTimeout(15_000, function () use ($oversizedFile): void {
+            $page = visit('/');
+            $page->attach('Document', $oversizedFile);
+            $page->submit();
+
+            $page->assertSee('Error: '.UPLOAD_ERR_INI_SIZE);
+        });
+    } finally {
+        $http->setExtendedFormParser(Pest\Browser\Http\ExtendedFormParser::fromIni());
+        unlink($oversizedFile);
+    }
+});
+
+it('enforces upload limits using byte size for multibyte file contents', function (): void {
+    $http = Pest\Browser\ServerManager::instance()->http();
+    assert($http instanceof Pest\Browser\Drivers\LaravelHttpServer);
+
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='document'>Document</label>
+                <input id='document' type='file' name='document'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/form', static function (Request $request): string {
+        $document = $request->file('document');
+
+        return '
+            <html>
+            <head></head>
+            <body>
+                <p>Error: '.($document?->getError() ?? 'none').'</p>
+                <p>Size: '.($document?->getSize() ?? 'none').'</p>
+            </body>
+            </html>
+        ';
+    });
+
+    $multibyteContents = str_repeat('¢', 3);
+    $charLength = mb_strlen($multibyteContents);
+    $byteLength = mb_strlen($multibyteContents, '8bit');
+
+    expect($charLength)->toBe(3);
+    expect($byteLength)->toBe(6);
+
+    $multibyteFile = tempnam(sys_get_temp_dir(), 'multipart-multibyte-');
+    assert($multibyteFile !== false);
+
+    try {
+        $written = file_put_contents($multibyteFile, $multibyteContents);
+        assert($written !== false);
+
+        $http->setExtendedFormParser(new Pest\Browser\Http\ExtendedFormParser(
+            maxInputVars: 1000,
+            uploadMaxFilesize: $byteLength - 1,
+            maxFileUploads: 20,
+        ));
+
+        Playwright::usingTimeout(15_000, function () use ($multibyteFile): void {
+            $page = visit('/');
+            $page->attach('Document', $multibyteFile);
+            $page->submit();
+
+            $page->assertSee('Error: '.UPLOAD_ERR_INI_SIZE);
+        });
+
+        $http->setExtendedFormParser(new Pest\Browser\Http\ExtendedFormParser(
+            maxInputVars: 1000,
+            uploadMaxFilesize: $byteLength,
+            maxFileUploads: 20,
+        ));
+
+        Playwright::usingTimeout(15_000, function () use ($multibyteFile, $byteLength): void {
+            $page = visit('/');
+            $page->attach('Document', $multibyteFile);
+            $page->submit();
+
+            $page->assertSee('Error: 0')
+                ->assertSee('Size: '.$byteLength);
+        });
+    } finally {
+        $http->setExtendedFormParser(Pest\Browser\Http\ExtendedFormParser::fromIni());
+        unlink($multibyteFile);
+    }
 });
 
 it('validates multipart pdf upload metadata', function (): void {
@@ -160,16 +384,18 @@
         ";
     });
 
-    $page = visit('/');
+    Playwright::usingTimeout(15000, function () use ($expectedPdfSize): void {
+        $page = visit('/');
 
-    $page->attach('PDF file', fixture('example.pdf'));
-    $page->submit();
+        $page->attach('PDF file', fixture('example.pdf'));
+        $page->submit();
 
-    $page->assertSee('Name: example.pdf')
-        ->assertSee('Extension: pdf')
-        ->assertSee('Valid: yes')
-        ->assertSee('Expected size: '.$expectedPdfSize)
-        ->assertSee('Size: '.$expectedPdfSize);
+        $page->assertSee('Name: example.pdf')
+            ->assertSee('Extension: pdf')
+            ->assertSee('Valid: yes')
+            ->assertSee('Expected size: '.$expectedPdfSize)
+            ->assertSee('Size: '.$expectedPdfSize);
+    });
 });
 
 it('parse a multipart body with nested fields', function (): void {

From f0400c02f1642889e9fbf3133d6bafd4b4526491 Mon Sep 17 00:00:00 2001
From: Michael Mantos <miko.mantos@gmail.com>
Date: Thu, 26 Feb 2026 21:47:06 +0000
Subject: [PATCH 4/6] feat(http): extract multipart parser tests and harden
 form parsing

---
 src/Http/ExtendedFormParser.php               |  12 +-
 .../Drivers/Laravel/LaravelHttpServerTest.php | 413 ------------
 tests/Unit/Http/ExtendedFormParserTest.php    | 631 ++++++++++++++++++
 3 files changed, 632 insertions(+), 424 deletions(-)
 create mode 100644 tests/Unit/Http/ExtendedFormParserTest.php

diff --git a/src/Http/ExtendedFormParser.php b/src/Http/ExtendedFormParser.php
index 857fbfb2..df662e78 100644
--- a/src/Http/ExtendedFormParser.php
+++ b/src/Http/ExtendedFormParser.php
@@ -250,17 +250,7 @@ private function setNestedFieldValue(array &$target, array $segments, mixed $val
                 return;
             }
 
-            if (! array_key_exists($segment, $target)) {
-                $target[$segment] = $value;
-
-                return;
-            }
-
-            if (! is_array($target[$segment])) {
-                $target[$segment] = [$target[$segment]];
-            }
-
-            $target[$segment][] = $value;
+            $target[$segment] = $value;
 
             return;
         }
diff --git a/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php b/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
index ac246a1c..08e0c879 100644
--- a/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
+++ b/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
@@ -4,7 +4,6 @@
 
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Route;
-use Pest\Browser\Playwright\Playwright;
 
 use function Pest\Laravel\withServerVariables;
 use function Pest\Laravel\withUnencryptedCookie;
@@ -38,415 +37,3 @@
     visit('/server-variables')
         ->assertSee('"test-server-key":"test value"');
 });
-
-it('parse a URL-encoded body', function (): void {
-    Route::get('/', static fn (): string => "
-        <html>
-        <head></head>
-        <body>
-            <form method='post' action='/form'>
-                <label for='name'>Your name</label>
-                <input id='name' type='text' name='name'>
-
-                <button type='submit'>Send</button>
-            </form>
-        </body>
-        </html>
-    ");
-    Route::post('/form', static fn (Request $request): string => "
-        <html>
-        <head></head>
-        <body>
-            <h1>Hello {$request->post('name')}</h1>
-        </body>
-        </html>
-    ");
-
-    $page = visit('/');
-    $page->assertSee('Your name');
-
-    $page->fill('Your name', 'World');
-    $page->click('Send');
-
-    $page->assertSee('Hello World');
-});
-
-it('parse a multipart body with files', function (): void {
-    Route::get('favicon.ico', static fn (): string => '');
-    Route::get('/', static fn (): string => "
-        <html>
-        <head></head>
-        <body>
-            <form method='post' enctype='multipart/form-data' action='/form'>
-                <label for='name'>Your name</label>
-                <input id='name' type='text' name='name'>
-
-                <label for='file1'>Your text file</label>
-                <input id='file1' type='file' name='file1'>
-
-                <label for='file2'>Your binary file</label>
-                <input id='file2' type='file' name='file2'>
-
-                <label for='file3'>Your empty file</label>
-                <input id='file3' type='file' name='file3'>
-
-                <button type='submit'>Send</button>
-            </form>
-        </body>
-        </html>
-    ");
-    Route::post('/form', static fn (Request $request): string => "
-        <html>
-        <head></head>
-        <body>
-            <h1>Hello {$request->post('name')}</h1>
-            <p>Text file: {$request->file('file1')?->getClientOriginalName()}</p>
-            <p>Binary file: {$request->file('file2')?->getClientOriginalName()}</p>
-            <p>Empty file: {$request->file('file3')?->getClientOriginalName()}</p>
-        </body>
-        </html>
-    ");
-
-    Playwright::usingTimeout(15_000, function (): void {
-        $page = visit('/');
-        $page->assertSee('Your name');
-
-        $page->fill('Your name', 'World');
-        $page->attach('Your text file', fixture('lorem-ipsum.txt'));
-        $page->attach('Your binary file', fixture('example.pdf'));
-        $page->submit();
-
-        $page->assertSee('Hello World');
-        $page->assertSee('Text file: lorem-ipsum.txt');
-        $page->assertSee('Binary file: example.pdf');
-        $page->assertSee('Empty file: ');
-    });
-});
-
-it('applies MAX_FILE_SIZE multipart validation error', function (): void {
-    Route::get('/', static fn (): string => "
-        <html>
-        <head></head>
-        <body>
-            <form method='post' enctype='multipart/form-data' action='/form'>
-                <input type='hidden' name='MAX_FILE_SIZE' value='1'>
-
-                <label for='document'>Document</label>
-                <input id='document' type='file' name='document'>
-
-                <button type='submit'>Send</button>
-            </form>
-        </body>
-        </html>
-    ");
-
-    Route::post('/form', static function (Request $request): string {
-        $document = $request->file('document');
-
-        return '
-            <html>
-            <head></head>
-            <body>
-                <p>Has file: '.($document !== null ? 'yes' : 'no').'</p>
-                <p>Error: '.($document?->getError() ?? 'none').'</p>
-            </body>
-            </html>
-        ';
-    });
-
-    Playwright::usingTimeout(15_000, function (): void {
-        $page = visit('/');
-
-        $page->attach('Document', fixture('lorem-ipsum.txt'));
-        $page->submit();
-
-        $page->assertSee('Has file: yes')
-            ->assertSee('Error: '.UPLOAD_ERR_FORM_SIZE);
-    });
-});
-
-it('applies UPLOAD_ERR_NO_FILE when no file is selected', function (): void {
-    Route::get('/', static fn (): string => "
-        <html>
-        <head></head>
-        <body>
-            <form method='post' enctype='multipart/form-data' action='/form'>
-                <label for='document'>Document</label>
-                <input id='document' type='file' name='document'>
-
-                <button type='submit'>Send</button>
-            </form>
-        </body>
-        </html>
-    ");
-
-    Route::post('/form', static function (Request $request): string {
-        $file = $request->files->get('document');
-
-        $hasNoFileError = $file === null
-            || (
-                $file instanceof Illuminate\Http\UploadedFile
-                && $file->getError() === UPLOAD_ERR_NO_FILE
-            );
-
-        return '
-            <html>
-            <head></head>
-            <body>
-                <p>No file error: '.($hasNoFileError ? 'yes' : 'no').'</p>
-            </body>
-            </html>
-        ';
-    });
-
-    Playwright::usingTimeout(15_000, function (): void {
-        $page = visit('/');
-        $page->submit();
-
-        $page->assertSee('No file error: yes');
-    });
-});
-
-it('applies UPLOAD_ERR_INI_SIZE for oversized multipart upload', function (): void {
-    $http = Pest\Browser\ServerManager::instance()->http();
-    assert($http instanceof Pest\Browser\Drivers\LaravelHttpServer);
-
-    $http->setExtendedFormParser(new Pest\Browser\Http\ExtendedFormParser(
-        maxInputVars: 1000,
-        uploadMaxFilesize: 1,
-        maxFileUploads: 20,
-    ));
-
-    Route::get('/', static fn (): string => "
-        <html>
-        <head></head>
-        <body>
-            <form method='post' enctype='multipart/form-data' action='/form'>
-                <label for='document'>Document</label>
-                <input id='document' type='file' name='document'>
-
-                <button type='submit'>Send</button>
-            </form>
-        </body>
-        </html>
-    ");
-
-    Route::post('/form', static function (Request $request): string {
-        $document = $request->file('document');
-
-        return '
-            <html>
-            <head></head>
-            <body>
-                <p>Error: '.($document?->getError() ?? 'none').'</p>
-            </body>
-            </html>
-        ';
-    });
-
-    $oversizedFile = tempnam(sys_get_temp_dir(), 'multipart-oversized-');
-    assert($oversizedFile !== false);
-
-    try {
-        $written = file_put_contents($oversizedFile, 'AB');
-        assert($written !== false);
-
-        Playwright::usingTimeout(15_000, function () use ($oversizedFile): void {
-            $page = visit('/');
-            $page->attach('Document', $oversizedFile);
-            $page->submit();
-
-            $page->assertSee('Error: '.UPLOAD_ERR_INI_SIZE);
-        });
-    } finally {
-        $http->setExtendedFormParser(Pest\Browser\Http\ExtendedFormParser::fromIni());
-        unlink($oversizedFile);
-    }
-});
-
-it('enforces upload limits using byte size for multibyte file contents', function (): void {
-    $http = Pest\Browser\ServerManager::instance()->http();
-    assert($http instanceof Pest\Browser\Drivers\LaravelHttpServer);
-
-    Route::get('/', static fn (): string => "
-        <html>
-        <head></head>
-        <body>
-            <form method='post' enctype='multipart/form-data' action='/form'>
-                <label for='document'>Document</label>
-                <input id='document' type='file' name='document'>
-
-                <button type='submit'>Send</button>
-            </form>
-        </body>
-        </html>
-    ");
-
-    Route::post('/form', static function (Request $request): string {
-        $document = $request->file('document');
-
-        return '
-            <html>
-            <head></head>
-            <body>
-                <p>Error: '.($document?->getError() ?? 'none').'</p>
-                <p>Size: '.($document?->getSize() ?? 'none').'</p>
-            </body>
-            </html>
-        ';
-    });
-
-    $multibyteContents = str_repeat('¢', 3);
-    $charLength = mb_strlen($multibyteContents);
-    $byteLength = mb_strlen($multibyteContents, '8bit');
-
-    expect($charLength)->toBe(3);
-    expect($byteLength)->toBe(6);
-
-    $multibyteFile = tempnam(sys_get_temp_dir(), 'multipart-multibyte-');
-    assert($multibyteFile !== false);
-
-    try {
-        $written = file_put_contents($multibyteFile, $multibyteContents);
-        assert($written !== false);
-
-        $http->setExtendedFormParser(new Pest\Browser\Http\ExtendedFormParser(
-            maxInputVars: 1000,
-            uploadMaxFilesize: $byteLength - 1,
-            maxFileUploads: 20,
-        ));
-
-        Playwright::usingTimeout(15_000, function () use ($multibyteFile): void {
-            $page = visit('/');
-            $page->attach('Document', $multibyteFile);
-            $page->submit();
-
-            $page->assertSee('Error: '.UPLOAD_ERR_INI_SIZE);
-        });
-
-        $http->setExtendedFormParser(new Pest\Browser\Http\ExtendedFormParser(
-            maxInputVars: 1000,
-            uploadMaxFilesize: $byteLength,
-            maxFileUploads: 20,
-        ));
-
-        Playwright::usingTimeout(15_000, function () use ($multibyteFile, $byteLength): void {
-            $page = visit('/');
-            $page->attach('Document', $multibyteFile);
-            $page->submit();
-
-            $page->assertSee('Error: 0')
-                ->assertSee('Size: '.$byteLength);
-        });
-    } finally {
-        $http->setExtendedFormParser(Pest\Browser\Http\ExtendedFormParser::fromIni());
-        unlink($multibyteFile);
-    }
-});
-
-it('validates multipart pdf upload metadata', function (): void {
-    Route::get('favicon.ico', static fn (): string => '');
-    Route::get('/', static fn (): string => "
-        <html>
-        <head></head>
-        <body>
-            <form method='post' enctype='multipart/form-data' action='/form'>
-                <label for='pdf-file'>PDF file</label>
-                <input id='pdf-file' type='file' name='pdf_file'>
-
-                <button type='submit'>Send</button>
-            </form>
-        </body>
-        </html>
-    ");
-
-    $expectedPdfSize = filesize(fixture('example.pdf'));
-    assert($expectedPdfSize !== false);
-
-    Route::post('/form', static function (Request $request) use ($expectedPdfSize): string {
-        $pdf = $request->file('pdf_file');
-        $name = $pdf?->getClientOriginalName() ?? '';
-        $extension = $pdf?->getClientOriginalExtension() ?? '';
-        $valid = $pdf?->isValid() ? 'yes' : 'no';
-        $size = (string) ($pdf?->getSize() ?? '');
-
-        return "
-            <html>
-            <head></head>
-            <body>
-                <p>Name: $name</p>
-                <p>Extension: $extension</p>
-                <p>Valid: $valid</p>
-                <p>Size: $size</p>
-                <p>Expected size: $expectedPdfSize</p>
-            </body>
-            </html>
-        ";
-    });
-
-    Playwright::usingTimeout(15000, function () use ($expectedPdfSize): void {
-        $page = visit('/');
-
-        $page->attach('PDF file', fixture('example.pdf'));
-        $page->submit();
-
-        $page->assertSee('Name: example.pdf')
-            ->assertSee('Extension: pdf')
-            ->assertSee('Valid: yes')
-            ->assertSee('Expected size: '.$expectedPdfSize)
-            ->assertSee('Size: '.$expectedPdfSize);
-    });
-});
-
-it('parse a multipart body with nested fields', function (): void {
-    Route::get('/', static fn (): string => "
-        <html>
-        <head></head>
-        <body>
-            <form method='post' enctype='multipart/form-data' action='/form'>
-                <label for='person-first-name'>Your first name</label>
-                <input id='person-first-name' type='text' name='person[first_name]'>
-
-                <label for='person-last-name'>Your last name</label>
-                <input id='person-last-name' type='text' name='person[last_name]'>
-
-                <label for='children-name-1'>Child 1</label>
-                <input id='children-name-1' type='text' name='children[]'>
-
-                <label for='children-name-2'>Child 2</label>
-                <input id='children-name-2' type='text' name='children[]'>
-
-                <label for='children-name-3'>Child 3</label>
-                <input id='children-name-3' type='text' name='children[]'>
-
-                <button type='submit'>Send</button>
-            </form>
-        </body>
-        </html>
-    ");
-    Route::post('/form', static function (Request $request): string {
-        $childNames = implode(', ', (array) $request->input('children'));
-
-        return "
-            <html>
-            <head></head>
-            <body>
-                <h1>Hello {$request->input('person.first_name')} {$request->input('person.last_name')}</h1>
-                <p>and $childNames</p>
-            </body>
-            </html>
-        ";
-    });
-
-    $page = visit('/');
-
-    $page->fill('Your first name', 'Jane');
-    $page->fill('Your last name', 'Doe');
-    $page->fill('Child 2', 'Johnathan');
-    $page->fill('Child 3', 'Jamie');
-    $page->fill('Child 1', 'John');
-    $page->submit();
-
-    $page->assertSee('Hello Jane Doe')
-        ->assertSee('and John, Johnathan, Jamie');
-});
diff --git a/tests/Unit/Http/ExtendedFormParserTest.php b/tests/Unit/Http/ExtendedFormParserTest.php
new file mode 100644
index 00000000..cac3b244
--- /dev/null
+++ b/tests/Unit/Http/ExtendedFormParserTest.php
@@ -0,0 +1,631 @@
+<?php
+
+declare(strict_types=1);
+
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Route;
+use Pest\Browser\Playwright\Playwright;
+
+it('parse a URL-encoded body', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' action='/form'>
+                <label for='name'>Your name</label>
+                <input id='name' type='text' name='name'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+    Route::post('/form', static fn (Request $request): string => "
+        <html>
+        <head></head>
+        <body>
+            <h1>Hello {$request->post('name')}</h1>
+        </body>
+        </html>
+    ");
+
+    $page = visit('/');
+    $page->assertSee('Your name');
+
+    $page->fill('Your name', 'World');
+    $page->click('Send');
+
+    $page->assertSee('Hello World');
+});
+
+it('parse a multipart body with files', function (): void {
+    Route::get('favicon.ico', static fn (): string => '');
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='name'>Your name</label>
+                <input id='name' type='text' name='name'>
+
+                <label for='file1'>Your text file</label>
+                <input id='file1' type='file' name='file1'>
+
+                <label for='file2'>Your binary file</label>
+                <input id='file2' type='file' name='file2'>
+
+                <label for='file3'>Your empty file</label>
+                <input id='file3' type='file' name='file3'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+    Route::post('/form', static fn (Request $request): string => "
+        <html>
+        <head></head>
+        <body>
+            <h1>Hello {$request->post('name')}</h1>
+            <p>Text file: {$request->file('file1')?->getClientOriginalName()}</p>
+            <p>Binary file: {$request->file('file2')?->getClientOriginalName()}</p>
+            <p>Empty file: {$request->file('file3')?->getClientOriginalName()}</p>
+        </body>
+        </html>
+    ");
+
+    Playwright::usingTimeout(15_000, function (): void {
+        $page = visit('/');
+        $page->assertSee('Your name');
+
+        $page->fill('Your name', 'World');
+        $page->attach('Your text file', fixture('lorem-ipsum.txt'));
+        $page->attach('Your binary file', fixture('example.pdf'));
+        $page->submit();
+
+        $page->assertSee('Hello World');
+        $page->assertSee('Text file: lorem-ipsum.txt');
+        $page->assertSee('Binary file: example.pdf');
+        $page->assertSee('Empty file: ');
+    });
+});
+
+it('applies MAX_FILE_SIZE multipart validation error', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <input type='hidden' name='MAX_FILE_SIZE' value='1'>
+
+                <label for='document'>Document</label>
+                <input id='document' type='file' name='document'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/form', static function (Request $request): string {
+        $document = $request->file('document');
+
+        return '
+            <html>
+            <head></head>
+            <body>
+                <p>Has file: '.($document !== null ? 'yes' : 'no').'</p>
+                <p>Error: '.($document?->getError() ?? 'none').'</p>
+            </body>
+            </html>
+        ';
+    });
+
+    Playwright::usingTimeout(15_000, function (): void {
+        $page = visit('/');
+
+        $page->attach('Document', fixture('lorem-ipsum.txt'));
+        $page->submit();
+
+        $page->assertSee('Has file: yes')
+            ->assertSee('Error: '.UPLOAD_ERR_FORM_SIZE);
+    });
+});
+
+it('applies UPLOAD_ERR_NO_FILE when no file is selected', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='document'>Document</label>
+                <input id='document' type='file' name='document'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/form', static function (Request $request): string {
+        $file = $request->files->get('document');
+
+        $hasNoFileError = $file === null
+            || (
+                $file instanceof Illuminate\Http\UploadedFile
+                && $file->getError() === UPLOAD_ERR_NO_FILE
+            );
+
+        return '
+            <html>
+            <head></head>
+            <body>
+                <p>No file error: '.($hasNoFileError ? 'yes' : 'no').'</p>
+            </body>
+            </html>
+        ';
+    });
+
+    Playwright::usingTimeout(15_000, function (): void {
+        $page = visit('/');
+        $page->submit();
+
+        $page->assertSee('No file error: yes');
+    });
+});
+
+it('applies UPLOAD_ERR_INI_SIZE for oversized multipart upload', function (): void {
+    $http = Pest\Browser\ServerManager::instance()->http();
+    assert($http instanceof Pest\Browser\Drivers\LaravelHttpServer);
+
+    $http->setExtendedFormParser(new Pest\Browser\Http\ExtendedFormParser(
+        maxInputVars: 1000,
+        uploadMaxFilesize: 1,
+        maxFileUploads: 20,
+    ));
+
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='document'>Document</label>
+                <input id='document' type='file' name='document'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/form', static function (Request $request): string {
+        $document = $request->file('document');
+
+        return '
+            <html>
+            <head></head>
+            <body>
+                <p>Error: '.($document?->getError() ?? 'none').'</p>
+            </body>
+            </html>
+        ';
+    });
+
+    $oversizedFile = tempnam(sys_get_temp_dir(), 'multipart-oversized-');
+    assert($oversizedFile !== false);
+
+    try {
+        $written = file_put_contents($oversizedFile, 'AB');
+        assert($written !== false);
+
+        Playwright::usingTimeout(15_000, function () use ($oversizedFile): void {
+            $page = visit('/');
+            $page->attach('Document', $oversizedFile);
+            $page->submit();
+
+            $page->assertSee('Error: '.UPLOAD_ERR_INI_SIZE);
+        });
+    } finally {
+        $http->setExtendedFormParser(Pest\Browser\Http\ExtendedFormParser::fromIni());
+        unlink($oversizedFile);
+    }
+});
+
+it('enforces upload limits using byte size for multibyte file contents', function (): void {
+    $http = Pest\Browser\ServerManager::instance()->http();
+    assert($http instanceof Pest\Browser\Drivers\LaravelHttpServer);
+
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='document'>Document</label>
+                <input id='document' type='file' name='document'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/form', static function (Request $request): string {
+        $document = $request->file('document');
+
+        return '
+            <html>
+            <head></head>
+            <body>
+                <p>Error: '.($document?->getError() ?? 'none').'</p>
+                <p>Size: '.($document?->getSize() ?? 'none').'</p>
+            </body>
+            </html>
+        ';
+    });
+
+    $multibyteContents = str_repeat('¢', 3);
+    $charLength = mb_strlen($multibyteContents);
+    $byteLength = mb_strlen($multibyteContents, '8bit');
+
+    expect($charLength)->toBe(3);
+    expect($byteLength)->toBe(6);
+
+    $multibyteFile = tempnam(sys_get_temp_dir(), 'multipart-multibyte-');
+    assert($multibyteFile !== false);
+
+    try {
+        $written = file_put_contents($multibyteFile, $multibyteContents);
+        assert($written !== false);
+
+        $http->setExtendedFormParser(new Pest\Browser\Http\ExtendedFormParser(
+            maxInputVars: 1000,
+            uploadMaxFilesize: $byteLength - 1,
+            maxFileUploads: 20,
+        ));
+
+        Playwright::usingTimeout(15_000, function () use ($multibyteFile): void {
+            $page = visit('/');
+            $page->attach('Document', $multibyteFile);
+            $page->submit();
+
+            $page->assertSee('Error: '.UPLOAD_ERR_INI_SIZE);
+        });
+
+        $http->setExtendedFormParser(new Pest\Browser\Http\ExtendedFormParser(
+            maxInputVars: 1000,
+            uploadMaxFilesize: $byteLength,
+            maxFileUploads: 20,
+        ));
+
+        Playwright::usingTimeout(15_000, function () use ($multibyteFile, $byteLength): void {
+            $page = visit('/');
+            $page->attach('Document', $multibyteFile);
+            $page->submit();
+
+            $page->assertSee('Error: 0')
+                ->assertSee('Size: '.$byteLength);
+        });
+    } finally {
+        $http->setExtendedFormParser(Pest\Browser\Http\ExtendedFormParser::fromIni());
+        unlink($multibyteFile);
+    }
+});
+
+it('validates multipart pdf upload metadata', function (): void {
+    Route::get('favicon.ico', static fn (): string => '');
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='pdf-file'>PDF file</label>
+                <input id='pdf-file' type='file' name='pdf_file'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    $expectedPdfSize = filesize(fixture('example.pdf'));
+    assert($expectedPdfSize !== false);
+
+    Route::post('/form', static function (Request $request) use ($expectedPdfSize): string {
+        $pdf = $request->file('pdf_file');
+        $name = $pdf?->getClientOriginalName() ?? '';
+        $extension = $pdf?->getClientOriginalExtension() ?? '';
+        $valid = $pdf?->isValid() ? 'yes' : 'no';
+        $size = (string) ($pdf?->getSize() ?? '');
+
+        return "
+            <html>
+            <head></head>
+            <body>
+                <p>Name: $name</p>
+                <p>Extension: $extension</p>
+                <p>Valid: $valid</p>
+                <p>Size: $size</p>
+                <p>Expected size: $expectedPdfSize</p>
+            </body>
+            </html>
+        ";
+    });
+
+    Playwright::usingTimeout(15000, function () use ($expectedPdfSize): void {
+        $page = visit('/');
+
+        $page->attach('PDF file', fixture('example.pdf'));
+        $page->submit();
+
+        $page->assertSee('Name: example.pdf')
+            ->assertSee('Extension: pdf')
+            ->assertSee('Valid: yes')
+            ->assertSee('Expected size: '.$expectedPdfSize)
+            ->assertSee('Size: '.$expectedPdfSize);
+    });
+});
+
+it('parse a multipart body with nested fields', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='person-first-name'>Your first name</label>
+                <input id='person-first-name' type='text' name='person[first_name]'>
+
+                <label for='person-last-name'>Your last name</label>
+                <input id='person-last-name' type='text' name='person[last_name]'>
+
+                <label for='children-name-1'>Child 1</label>
+                <input id='children-name-1' type='text' name='children[]'>
+
+                <label for='children-name-2'>Child 2</label>
+                <input id='children-name-2' type='text' name='children[]'>
+
+                <label for='children-name-3'>Child 3</label>
+                <input id='children-name-3' type='text' name='children[]'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+    Route::post('/form', static function (Request $request): string {
+        $childNames = implode(', ', (array) $request->input('children'));
+
+        return "
+            <html>
+            <head></head>
+            <body>
+                <h1>Hello {$request->input('person.first_name')} {$request->input('person.last_name')}</h1>
+                <p>and $childNames</p>
+            </body>
+            </html>
+        ";
+    });
+
+    $page = visit('/');
+
+    $page->fill('Your first name', 'Jane');
+    $page->fill('Your last name', 'Doe');
+    $page->fill('Child 2', 'Johnathan');
+    $page->fill('Child 3', 'Jamie');
+    $page->fill('Child 1', 'John');
+    $page->submit();
+
+    $page->assertSee('Hello Jane Doe')
+        ->assertSee('and John, Johnathan, Jamie');
+});
+
+it('parses linear nested indexed multipart fields without merging values', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='extra'>Extra</label>
+                <input id='extra' type='text' name='extra'>
+
+                <label for='data-0-field1'>Data 0 Field 1</label>
+                <input id='data-0-field1' type='text' name='data[0][field1]'>
+
+                <label for='data-0-field2'>Data 0 Field 2</label>
+                <input id='data-0-field2' type='text' name='data[0][field2]'>
+
+                <label for='data-1-field1'>Data 1 Field 1</label>
+                <input id='data-1-field1' type='text' name='data[1][field1]'>
+
+                <label for='data-1-field2'>Data 1 Field 2</label>
+                <input id='data-1-field2' type='text' name='data[1][field2]'>
+
+                <label for='matrix-1'>Matrix 1</label>
+                <input id='matrix-1' type='text' name='matrix[][]'>
+
+                <label for='matrix-2'>Matrix 2</label>
+                <input id='matrix-2' type='text' name='matrix[][]'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/form', static function (Request $request): string {
+        $payload = json_encode($request->all(), JSON_UNESCAPED_UNICODE);
+        assert($payload !== false);
+
+        return '
+            <html>
+            <head></head>
+            <body>
+                <pre id="payload">'.$payload.'</pre>
+            </body>
+            </html>
+        ';
+    });
+
+    Playwright::usingTimeout(15_000, function (): void {
+        $page = visit('/');
+
+        $page->fill('Extra', 'Test');
+        $page->fill('Data 0 Field 1', '1');
+        $page->fill('Data 0 Field 2', '1');
+        $page->fill('Data 1 Field 1', '2');
+        $page->fill('Data 1 Field 2', '0');
+        $page->fill('Matrix 1', 'A');
+        $page->fill('Matrix 2', 'B');
+        $page->submit();
+
+        $expectedPayload = json_encode([
+            'extra' => 'Test',
+            'data' => [
+                [
+                    'field1' => '1',
+                    'field2' => '1',
+                ],
+                [
+                    'field1' => '2',
+                    'field2' => '0',
+                ],
+            ],
+            'matrix' => [
+                ['A'],
+                ['B'],
+            ],
+        ], JSON_UNESCAPED_UNICODE);
+        assert($expectedPayload !== false);
+
+        $page->assertSee($expectedPayload)
+            ->assertSee('"extra":"Test"')
+            ->assertSee('"data":[{"field1":"1","field2":"1"},{"field1":"2","field2":"0"}]')
+            ->assertSee('"matrix":[["A"],["B"]]');
+    });
+});
+
+it('preserves sparse numeric indexes in multipart nested fields', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='data-2-field'>Data 2 Field</label>
+                <input id='data-2-field' type='text' name='data[2][field]'>
+
+                <label for='data-5-field'>Data 5 Field</label>
+                <input id='data-5-field' type='text' name='data[5][field]'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/form', static function (Request $request): string {
+        $payload = json_encode($request->all(), JSON_UNESCAPED_UNICODE);
+        assert($payload !== false);
+
+        return '<pre id="payload">'.$payload.'</pre>';
+    });
+
+    Playwright::usingTimeout(15_000, function (): void {
+        $page = visit('/');
+
+        $page->fill('Data 2 Field', 'A');
+        $page->fill('Data 5 Field', 'B');
+        $page->submit();
+
+        $page->assertSee('"data":{"2":{"field":"A"},"5":{"field":"B"}}');
+    });
+});
+
+it('overwrites duplicate explicit multipart keys with last value', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='field2-first'>Field2 first</label>
+                <input id='field2-first' type='text' name='data[0][field2]'>
+
+                <label for='field2-second'>Field2 second</label>
+                <input id='field2-second' type='text' name='data[0][field2]'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/form', static fn (Request $request): string => '<p>Field2: '.$request->input('data.0.field2').'</p>');
+
+    Playwright::usingTimeout(15_000, function (): void {
+        $page = visit('/');
+
+        $page->fill('Field2 first', 'first');
+        $page->fill('Field2 second', 'second');
+        $page->submit();
+
+        $page->assertSee('Field2: second');
+    });
+});
+
+it('handles mixed multipart payload with files and nested arrays', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' enctype='multipart/form-data' action='/form'>
+                <label for='extra'>Extra</label>
+                <input id='extra' type='text' name='extra'>
+
+                <label for='data-0-field1'>Data 0 Field 1</label>
+                <input id='data-0-field1' type='text' name='data[0][field1]'>
+
+                <label for='flags-1'>Flag 1</label>
+                <input id='flags-1' type='text' name='flags[][]'>
+
+                <label for='flags-2'>Flag 2</label>
+                <input id='flags-2' type='text' name='flags[][]'>
+
+                <label for='document'>Document</label>
+                <input id='document' type='file' name='document'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/form', static function (Request $request): string {
+        $payload = [
+            'fields' => $request->all(),
+            'file' => [
+                'name' => $request->file('document')?->getClientOriginalName(),
+                'error' => $request->file('document')?->getError(),
+            ],
+        ];
+
+        $json = json_encode($payload, JSON_UNESCAPED_UNICODE);
+        assert($json !== false);
+
+        return '<pre id="payload">'.$json.'</pre>';
+    });
+
+    Playwright::usingTimeout(15_000, function (): void {
+        $page = visit('/');
+
+        $page->fill('Extra', 'Mix');
+        $page->fill('Data 0 Field 1', '10');
+        $page->fill('Flag 1', 'X');
+        $page->fill('Flag 2', 'Y');
+        $page->attach('Document', fixture('lorem-ipsum.txt'));
+        $page->submit();
+
+        $page->assertSee('"extra":"Mix"')
+            ->assertSee('"data":[{"field1":"10"}]')
+            ->assertSee('"flags":[["X"],["Y"]]')
+            ->assertSee('"name":"lorem-ipsum.txt"')
+            ->assertSee('"error":0');
+    });
+});

From 8e3660fa2f51c84fb9680b81206809718d88d448 Mon Sep 17 00:00:00 2001
From: Michael Mantos <miko.mantos@gmail.com>
Date: Thu, 5 Mar 2026 10:55:34 +0000
Subject: [PATCH 5/6] fix(http): sync CONTENT_TYPE and CONTENT_LENGTH server
 vars with request headers

---
 src/Drivers/LaravelHttpServer.php          |   9 +
 tests/Unit/Http/ExtendedFormParserTest.php | 307 +++++++++++++++++++++
 2 files changed, 316 insertions(+)

diff --git a/src/Drivers/LaravelHttpServer.php b/src/Drivers/LaravelHttpServer.php
index 0fdce8b8..cbca8e89 100644
--- a/src/Drivers/LaravelHttpServer.php
+++ b/src/Drivers/LaravelHttpServer.php
@@ -273,6 +273,15 @@ private function handleRequest(AmpRequest $request): Response
         /** @var array<string, string> $serverVariables */
         $serverVariables = test()->serverVariables(); // @phpstan-ignore-line
 
+        if ($contentType !== '') {
+            $serverVariables['CONTENT_TYPE'] = $contentType;
+        }
+
+        $contentLength = $request->getHeader('content-length');
+        if ($contentLength !== null && $contentLength !== '') {
+            $serverVariables['CONTENT_LENGTH'] = $contentLength;
+        }
+
         $symfonyRequest = Request::create(
             $absoluteUrl,
             $method,
diff --git a/tests/Unit/Http/ExtendedFormParserTest.php b/tests/Unit/Http/ExtendedFormParserTest.php
index cac3b244..54d118e9 100644
--- a/tests/Unit/Http/ExtendedFormParserTest.php
+++ b/tests/Unit/Http/ExtendedFormParserTest.php
@@ -6,6 +6,8 @@
 use Illuminate\Support\Facades\Route;
 use Pest\Browser\Playwright\Playwright;
 
+use function Pest\Laravel\withServerVariables;
+
 it('parse a URL-encoded body', function (): void {
     Route::get('/', static fn (): string => "
         <html>
@@ -38,6 +40,134 @@
     $page->assertSee('Hello World');
 });
 
+it('matches content-type in server variables for URL-encoded form submissions', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' action='/content-type'>
+                <label for='name'>Your name</label>
+                <input id='name' type='text' name='name'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/content-type', static function (Request $request): string {
+        $matches = $request->server('CONTENT_TYPE') === $request->header('content-type');
+
+        return $matches ? 'true' : 'false';
+    });
+
+    $page = visit('/');
+
+    $page->fill('Your name', 'World');
+    $page->click('Send');
+
+    $page->assertSee('true');
+});
+
+it('overrides conflicting CONTENT_TYPE from server variables with request header', function (): void {
+    withServerVariables(['CONTENT_TYPE' => 'text/plain']);
+
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' action='/content-type'>
+                <label for='name'>Your name</label>
+                <input id='name' type='text' name='name'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/content-type', static function (Request $request): string {
+        $matches = $request->server('CONTENT_TYPE') === $request->header('content-type');
+
+        return $matches ? 'true' : 'false';
+    });
+
+    $page = visit('/');
+
+    $page->fill('Your name', 'World');
+    $page->click('Send');
+
+    $page->assertSee('true');
+});
+
+it('matches content-length in server variables for URL-encoded form submissions', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' action='/content-length'>
+                <label for='name'>Your name</label>
+                <input id='name' type='text' name='name'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/content-length', static function (Request $request): string {
+        $serverLength = (string) ($request->server('CONTENT_LENGTH') ?? '');
+        $headerLength = (string) ($request->header('content-length') ?? '');
+        $matches = $serverLength !== '' && $serverLength === $headerLength;
+
+        return $matches ? 'true' : 'false';
+    });
+
+    Playwright::usingTimeout(15_000, function (): void {
+        $page = visit('/');
+
+        $page->fill('Your name', 'World');
+        $page->click('Send');
+
+        $page->assertSee('true');
+    });
+});
+
+it('overrides conflicting CONTENT_LENGTH from server variables with request header', function (): void {
+    withServerVariables(['CONTENT_LENGTH' => '1']);
+
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' action='/content-length'>
+                <label for='name'>Your name</label>
+                <input id='name' type='text' name='name'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/content-length', static function (Request $request): string {
+        $serverLength = (string) ($request->server('CONTENT_LENGTH') ?? '');
+        $headerLength = (string) ($request->header('content-length') ?? '');
+        $matches = $serverLength !== '' && $serverLength === $headerLength;
+
+        return $matches ? 'true' : 'false';
+    });
+
+    Playwright::usingTimeout(15_000, function (): void {
+        $page = visit('/');
+
+        $page->fill('Your name', 'World');
+        $page->click('Send');
+
+        $page->assertSee('true');
+    });
+});
+
 it('parse a multipart body with files', function (): void {
     Route::get('favicon.ico', static fn (): string => '');
     Route::get('/', static fn (): string => "
@@ -90,6 +220,183 @@
     });
 });
 
+it('matches content-type in server variables when uploading files', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' action='/content-type' enctype='multipart/form-data'>
+                <label for='file1'>A file</label>
+                <input id='file1' type='file' name='file1'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/content-type', static function (Request $request): string {
+        $matches = $request->server('CONTENT_TYPE') === $request->header('content-type');
+
+        return $matches ? 'true' : 'false';
+    });
+
+    Playwright::usingTimeout(15_000, function (): void {
+        visit('/')
+            ->attach('A file', fixture('lorem-ipsum.txt'))
+            ->click('Send')
+            ->assertSee('true');
+    });
+});
+
+it('matches content-length in server variables when uploading files', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' action='/content-length' enctype='multipart/form-data'>
+                <label for='file1'>A file</label>
+                <input id='file1' type='file' name='file1'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/content-length', static function (Request $request): string {
+        $serverLength = (string) ($request->server('CONTENT_LENGTH') ?? '');
+        $headerLength = (string) ($request->header('content-length') ?? '');
+        $matches = $serverLength !== '' && $serverLength === $headerLength;
+
+        return $matches ? 'true' : 'false';
+    });
+
+    Playwright::usingTimeout(15_000, function (): void {
+        visit('/')
+            ->attach('A file', fixture('lorem-ipsum.txt'))
+            ->click('Send')
+            ->assertSee('true');
+    });
+});
+
+it('preserves custom server variables while synchronizing upload content headers', function (): void {
+    withServerVariables([
+        'X_CUSTOM_UPLOAD_FLAG' => 'enabled',
+        'CONTENT_TYPE' => 'text/plain',
+        'CONTENT_LENGTH' => '1',
+    ]);
+
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' action='/server-vars' enctype='multipart/form-data'>
+                <label for='file1'>A file</label>
+                <input id='file1' type='file' name='file1'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/server-vars', static function (Request $request): string {
+        $custom = (string) ($request->server('X_CUSTOM_UPLOAD_FLAG') ?? '');
+        $serverType = (string) ($request->server('CONTENT_TYPE') ?? '');
+        $headerType = (string) ($request->header('content-type') ?? '');
+        $serverLength = (string) ($request->server('CONTENT_LENGTH') ?? '');
+        $headerLength = (string) ($request->header('content-length') ?? '');
+
+        $payload = [
+            'custom_preserved' => $custom === 'enabled',
+            'type_matches_header' => $serverType === $headerType,
+            'length_matches_header' => $serverLength === $headerLength,
+        ];
+
+        $json = json_encode($payload, JSON_UNESCAPED_UNICODE);
+        assert($json !== false);
+
+        return '<pre id="payload">'.$json.'</pre>';
+    });
+
+    Playwright::usingTimeout(15_000, function (): void {
+        visit('/')
+            ->attach('A file', fixture('lorem-ipsum.txt'))
+            ->click('Send')
+            ->assertSee('"custom_preserved":true')
+            ->assertSee('"type_matches_header":true')
+            ->assertSee('"length_matches_header":true');
+    });
+});
+
+it('keeps content server variables empty on GET requests', function (): void {
+    Route::get('/server-content-vars', static function (Request $request): string {
+        $payload = [
+            'server_content_type' => $request->server('CONTENT_TYPE'),
+            'server_content_length' => $request->server('CONTENT_LENGTH'),
+            'header_content_type' => $request->header('content-type'),
+            'header_content_length' => $request->header('content-length'),
+        ];
+
+        $json = json_encode($payload, JSON_UNESCAPED_UNICODE);
+        assert($json !== false);
+
+        return '<pre id="payload">'.$json.'</pre>';
+    });
+
+    visit('/server-content-vars')
+        ->assertSee('"server_content_type":null')
+        ->assertSee('"server_content_length":null')
+        ->assertSee('"header_content_type":null')
+        ->assertSee('"header_content_length":null');
+});
+
+it('preserves multipart boundary and numeric content-length in server variables', function (): void {
+    Route::get('/', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <form method='post' action='/content-metadata' enctype='multipart/form-data'>
+                <label for='file1'>A file</label>
+                <input id='file1' type='file' name='file1'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ");
+
+    Route::post('/content-metadata', static function (Request $request): string {
+        $serverType = (string) ($request->server('CONTENT_TYPE') ?? '');
+        $headerType = (string) ($request->header('content-type') ?? '');
+        $serverLength = (string) ($request->server('CONTENT_LENGTH') ?? '');
+        $headerLength = (string) ($request->header('content-length') ?? '');
+
+        $payload = [
+            'type_matches' => $serverType === $headerType,
+            'length_matches' => $serverLength === $headerLength,
+            'has_boundary' => str_contains($serverType, 'boundary='),
+            'length_is_numeric' => $serverLength !== '' && ctype_digit($serverLength),
+        ];
+
+        $json = json_encode($payload, JSON_UNESCAPED_UNICODE);
+        assert($json !== false);
+
+        return '<pre id="payload">'.$json.'</pre>';
+    });
+
+    Playwright::usingTimeout(15_000, function (): void {
+        visit('/')
+            ->attach('A file', fixture('lorem-ipsum.txt'))
+            ->click('Send')
+            ->assertSee('"type_matches":true')
+            ->assertSee('"length_matches":true')
+            ->assertSee('"has_boundary":true')
+            ->assertSee('"length_is_numeric":true');
+    });
+});
+
 it('applies MAX_FILE_SIZE multipart validation error', function (): void {
     Route::get('/', static fn (): string => "
         <html>

From 83a2a9d9009b9233a986ea8e0c8fce46cf756893 Mon Sep 17 00:00:00 2001
From: Michael Mantos <miko.mantos@gmail.com>
Date: Thu, 5 Mar 2026 16:41:43 +0000
Subject: [PATCH 6/6] feat(http): sync CONTENT_MD5 and verify superglobal
 hydration/restore

---
 src/Drivers/LaravelHttpServer.php             | 35 +++++++
 .../Drivers/Laravel/LaravelHttpServerTest.php | 67 +++++++++++++
 tests/Unit/Http/ExtendedFormParserTest.php    | 96 +++++++++++++++++++
 3 files changed, 198 insertions(+)

diff --git a/src/Drivers/LaravelHttpServer.php b/src/Drivers/LaravelHttpServer.php
index cbca8e89..7ae1ec80 100644
--- a/src/Drivers/LaravelHttpServer.php
+++ b/src/Drivers/LaravelHttpServer.php
@@ -282,6 +282,11 @@ private function handleRequest(AmpRequest $request): Response
             $serverVariables['CONTENT_LENGTH'] = $contentLength;
         }
 
+        $contentMd5 = $request->getHeader('content-md5');
+        if ($contentMd5 !== null && $contentMd5 !== '') {
+            $serverVariables['CONTENT_MD5'] = $contentMd5;
+        }
+
         $symfonyRequest = Request::create(
             $absoluteUrl,
             $method,
@@ -304,6 +309,9 @@ private function handleRequest(AmpRequest $request): Response
             $symfonyRequest->server->set('HTTP_HOST', $hostHeader);
         }
 
+        $superglobalState = $this->captureRequestSuperglobals();
+        $symfonyRequest->overrideGlobals();
+
         $debug = config('app.debug');
 
         try {
@@ -316,6 +324,7 @@ private function handleRequest(AmpRequest $request): Response
             throw $e;
         } finally {
             config(['app.debug' => $debug]);
+            $this->restoreRequestSuperglobals($superglobalState);
         }
 
         $kernel->terminate($laravelRequest, $response);
@@ -405,4 +414,30 @@ private function parseMultipartFormData(AmpRequest $request): array
     {
         return $this->extendedFormParser->parseMultipart($request);
     }
+
+    /**
+     * @return array{get: array<int|string, mixed>, post: array<int|string, mixed>, request: array<int|string, mixed>, server: array<int|string, mixed>, cookie: array<int|string, mixed>}
+     */
+    private function captureRequestSuperglobals(): array
+    {
+        return [
+            'get' => $_GET,
+            'post' => $_POST,
+            'request' => $_REQUEST,
+            'server' => $_SERVER,
+            'cookie' => $_COOKIE,
+        ];
+    }
+
+    /**
+     * @param  array{get: array<int|string, mixed>, post: array<int|string, mixed>, request: array<int|string, mixed>, server: array<int|string, mixed>, cookie: array<int|string, mixed>}  $superglobalState
+     */
+    private function restoreRequestSuperglobals(array $superglobalState): void
+    {
+        $_GET = $superglobalState['get'];
+        $_POST = $superglobalState['post'];
+        $_REQUEST = $superglobalState['request'];
+        $_SERVER = $superglobalState['server'];
+        $_COOKIE = $superglobalState['cookie'];
+    }
 }
diff --git a/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php b/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
index 08e0c879..524db35b 100644
--- a/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
+++ b/tests/Unit/Drivers/Laravel/LaravelHttpServerTest.php
@@ -37,3 +37,70 @@
     visit('/server-variables')
         ->assertSee('"test-server-key":"test value"');
 });
+
+it('restores original superglobals after request handling', function (): void {
+    $originalGet = $_GET;
+    $originalPost = $_POST;
+    $originalRequest = $_REQUEST;
+    $originalServer = $_SERVER;
+    $originalCookie = $_COOKIE;
+
+    $_GET['__restore_probe_get'] = 'before-get';
+    $_POST['__restore_probe_post'] = 'before-post';
+    $_REQUEST['__restore_probe_request'] = 'before-request';
+    $_SERVER['__RESTORE_PROBE_SERVER'] = 'before-server';
+    $_COOKIE['__restore_probe_cookie'] = 'before-cookie';
+
+    try {
+        Route::get('/restore-superglobals', static fn () => response()->make(" 
+                <html>
+                <head></head>
+                <body>
+                    <form method='post' action='/restore-superglobals?source=query-value'>
+                        <label for='name'>Your name</label>
+                        <input id='name' type='text' name='name'>
+
+                        <button type='submit'>Send</button>
+                    </form>
+                </body>
+                </html>
+            ")->cookie('restore_cookie', 'cookie-value'));
+
+        Route::post('/restore-superglobals', static fn (Request $request): array => [
+            'during_get' => $_GET['source'] ?? null,
+            'during_post' => $_POST['name'] ?? null,
+            'during_request_post' => $_REQUEST['name'] ?? null,
+            'during_request_get' => $_REQUEST['source'] ?? null,
+            'during_cookie' => $_COOKIE['restore_cookie'] ?? null,
+            'during_server_probe' => $_SERVER['__RESTORE_PROBE_SERVER'] ?? null,
+            'during_query_string' => $_SERVER['QUERY_STRING'] ?? null,
+            'request_cookie' => $request->cookie('restore_cookie'),
+        ]);
+
+        $page = visit('/restore-superglobals');
+
+        $page->fill('Your name', 'World');
+        $page->click('Send');
+
+        $page->assertSee('"during_get":"query-value"')
+            ->assertSee('"during_post":"World"')
+            ->assertSee('"during_request_post":"World"')
+            ->assertSee('"during_request_get":"query-value"')
+            ->assertSee('"during_cookie":"cookie-value"')
+            ->assertSee('"during_server_probe":null')
+            ->assertSee('"during_query_string":"source=query-value"')
+            ->assertSee('"request_cookie":"cookie-value"');
+
+        expect($_GET['__restore_probe_get'] ?? null)->toBe('before-get');
+        expect($_POST['__restore_probe_post'] ?? null)->toBe('before-post');
+        expect($_REQUEST['__restore_probe_request'] ?? null)->toBe('before-request');
+        expect($_SERVER['__RESTORE_PROBE_SERVER'] ?? null)->toBe('before-server');
+        expect($_COOKIE['__restore_probe_cookie'] ?? null)->toBe('before-cookie');
+    } finally {
+        $_GET = $originalGet;
+        $_POST = $originalPost;
+        $_REQUEST = $originalRequest;
+        $_SERVER = $originalServer;
+        $_COOKIE = $originalCookie;
+    }
+});
diff --git a/tests/Unit/Http/ExtendedFormParserTest.php b/tests/Unit/Http/ExtendedFormParserTest.php
index 54d118e9..ae61bb65 100644
--- a/tests/Unit/Http/ExtendedFormParserTest.php
+++ b/tests/Unit/Http/ExtendedFormParserTest.php
@@ -168,6 +168,59 @@
     });
 });
 
+it('overrides conflicting CONTENT_MD5 from server variables with request header', function (): void {
+    withServerVariables(['CONTENT_MD5' => 'stale-md5']);
+
+    Route::get('/content-md5', static fn (): string => "
+        <html>
+        <head></head>
+        <body>
+            <button id='send' type='button'>Send</button>
+            <pre id='result'></pre>
+
+            <script>
+                document.getElementById('send').addEventListener('click', async () => {
+                    const response = await fetch('/content-md5', {
+                        method: 'POST',
+                        headers: {
+                            'Content-Type': 'application/x-www-form-urlencoded',
+                            'Content-MD5': 'abc123',
+                        },
+                        body: 'name=World',
+                    });
+
+                    document.getElementById('result').textContent = await response.text();
+                });
+            </script>
+        </body>
+        </html>
+    ");
+
+    Route::post('/content-md5', static function (Request $request): string {
+        $serverMd5 = (string) ($request->server('CONTENT_MD5') ?? '');
+        $headerMd5 = (string) ($request->header('content-md5') ?? '');
+
+        $payload = [
+            'server_md5' => $serverMd5,
+            'header_md5' => $headerMd5,
+            'md5_matches_header' => $serverMd5 !== '' && $serverMd5 === $headerMd5,
+        ];
+
+        $json = json_encode($payload, JSON_UNESCAPED_UNICODE);
+        assert($json !== false);
+
+        return '<pre id="payload">'.$json.'</pre>';
+    });
+
+    $page = visit('/content-md5');
+
+    $page->click('Send');
+
+    $page->assertSee('"server_md5":"abc123"')
+        ->assertSee('"header_md5":"abc123"')
+        ->assertSee('"md5_matches_header":true');
+});
+
 it('parse a multipart body with files', function (): void {
     Route::get('favicon.ico', static fn (): string => '');
     Route::get('/', static fn (): string => "
@@ -330,6 +383,49 @@
     });
 });
 
+it('hydrates request superglobals during kernel handling', function (): void {
+    Route::get('/superglobals', static fn () => response()->make(" 
+        <html>
+        <head></head>
+        <body>
+            <form method='post' action='/superglobals?source=query-value'>
+                <label for='name'>Your name</label>
+                <input id='name' type='text' name='name'>
+
+                <button type='submit'>Send</button>
+            </form>
+        </body>
+        </html>
+    ")->cookie('super_cookie', 'cookie-value'));
+
+    Route::post('/superglobals', static fn (Request $request) => response()->json([
+        'post_name' => $_POST['name'] ?? null,
+        'request_name' => $_REQUEST['name'] ?? null,
+        'get_source' => $_GET['source'] ?? null,
+        'cookie_super' => $_COOKIE['super_cookie'] ?? null,
+        'query_string' => $_SERVER['QUERY_STRING'] ?? null,
+        'request_query_source' => $request->query('source'),
+        'request_cookie_super' => $request->cookie('super_cookie'),
+        'type_has_form' => str_contains((string) ($_SERVER['CONTENT_TYPE'] ?? ''), 'application/x-www-form-urlencoded'),
+        'length_matches' => (string) ($_SERVER['CONTENT_LENGTH'] ?? '') === (string) ($request->header('content-length') ?? ''),
+    ]));
+
+    $page = visit('/superglobals');
+
+    $page->fill('Your name', 'World');
+    $page->click('Send');
+
+    $page->assertSee('"post_name":"World"')
+        ->assertSee('"request_name":"World"')
+        ->assertSee('"get_source":"query-value"')
+        ->assertSee('"cookie_super":"cookie-value"')
+        ->assertSee('"query_string":"source=query-value"')
+        ->assertSee('"request_query_source":"query-value"')
+        ->assertSee('"request_cookie_super":"cookie-value"')
+        ->assertSee('"type_has_form":true')
+        ->assertSee('"length_matches":true');
+});
+
 it('keeps content server variables empty on GET requests', function (): void {
     Route::get('/server-content-vars', static function (Request $request): string {
         $payload = [