Function downloadFileForUpload

apps/sim/providers/file-attachments.server.ts:180–190

* Reads the file bytes straight from storage via the storage SDK (not by HTTP-fetching the * signed URL), so there is no server-side URL fetch to be an SSRF vector and internal * object storage works. Bounded by the provider's attachment ceiling.

(file: UserFile, maxBytes: number)

 * object storage works. Bounded by the provider's attachment ceiling.
 */
async function downloadFileForUpload(file: UserFile, maxBytes: number): Promise<Blob> {
  const { buffer, contentType } = await downloadServableFileFromStorage(
    file,
    'provider-file-upload',
    logger,
    { maxBytes }
  )
  return new Blob([new Uint8Array(buffer)], {
    type: contentType || file.type || inferAttachmentMimeType(file),
  })
}

/**
 * Uploads to `POST /v1/files` via multipart directly (not the SDK), because the installed