fix(providers): correct defects found auditing the attachment and SDK changes

The mechanical rewrite that added `isFunctionToolCall` to every `tool_calls`
read also rewrote three truthiness guards, where the filtered array was
computed, discarded, and the unfiltered value used in the body. Filter once and
use that value. The helper also landed between `trackForcedToolUsage`'s TSDoc
block and its declaration, leaving that block documenting the wrong function.

Raise the Bedrock ceiling from 3.75 MB to 4.5 MB. Converse caps an image at
3.75 MB and a document at 4.5 MB, and a single `maxBytes` cannot express both.
Taking the lower bound looked conservative but regressed 3.75-4.5 MB documents,
which Converse accepts and which work today. At the document bound every size
that works now still works, and only genuinely-too-large files are rejected
early; oversized images in that band keep surfacing as a Bedrock API error,
exactly as they do without the entry.

Both limits re-verified verbatim against the primary docs: Converse's Message
reference ("Each image's size ... no more than 3.75 MB", "Each document's size
must be no more than 4.5 MB") and Fireworks' vision guide ("Total base64-encoded
images must be less than 10MB").

Author: waleedlatif1

apps/sim/providers/attachments.test.ts

@@ -310,8 +310,8 @@ describe('provider large-file capability', () => {
       INLINE_ATTACHMENT_THRESHOLD_BYTES
     )
     expect(getProviderAttachmentMaxBytes('azure-openai')).toBe(INLINE_ATTACHMENT_THRESHOLD_BYTES)
-    /** Bedrock Converse caps an image at 3.75MB — below the inline cap, so it needs its own entry. */
-    expect(getProviderAttachmentMaxBytes('bedrock')).toBe(3_750_000)
+    /** Bedrock Converse caps a document at 4.5MB — below the inline cap, so it needs its own entry. */
+    expect(getProviderAttachmentMaxBytes('bedrock')).toBe(4_500_000)
   })
 
   it('routes only oversized files on capable providers to the large-file path', () => {

apps/sim/providers/azure-openai/index.ts

@@ -13,10 +13,6 @@ import type {
   ChatCompletionToolChoiceOption,
 } from 'openai/resources/chat/completions'
 import type { ReasoningEffort } from 'openai/resources/shared'
-
-/** `verbosity` narrowed from `string` to a literal union in openai v5. */
-type ChatCompletionVerbosity = NonNullable<ChatCompletionCreateParams['verbosity']>
-
 import { env } from '@/lib/core/config/env'
 import { createPinnedFetch, validateUrlWithDNS } from '@/lib/core/security/input-validation.server'
 import type { StreamingExecution } from '@/executor/types'
@@ -55,6 +51,9 @@ import {
   sumToolCosts,
 } from '@/providers/utils'
 
+/** `verbosity` narrowed from `string` to a literal union in openai v5. */
+type ChatCompletionVerbosity = NonNullable<ChatCompletionCreateParams['verbosity']>
+
 const logger = createLogger('AzureOpenAIProvider')
 
 /**

apps/sim/providers/litellm/index.ts

@@ -268,11 +268,9 @@ export const litellmProvider: ProviderConfig = {
         response: any,
         toolChoice: string | { type: string; function?: { name: string }; name?: string; any?: any }
       ) => {
-        if (
-          typeof toolChoice === 'object' &&
+        const toolCallsResponse =
           response.choices[0]?.message?.tool_calls?.filter(isFunctionToolCall)
-        ) {
-          const toolCallsResponse = response.choices[0].message.tool_calls
+        if (typeof toolChoice === 'object' && toolCallsResponse?.length) {
           const result = trackForcedToolUsage(
             toolCallsResponse,
             toolChoice,

apps/sim/providers/mistral/index.ts

@@ -203,11 +203,9 @@ export const mistralProvider: ProviderConfig = {
         response: any,
         toolChoice: string | { type: string; function?: { name: string }; name?: string; any?: any }
       ) => {
-        if (
-          typeof toolChoice === 'object' &&
+        const toolCallsResponse =
           response.choices[0]?.message?.tool_calls?.filter(isFunctionToolCall)
-        ) {
-          const toolCallsResponse = response.choices[0].message.tool_calls
+        if (typeof toolChoice === 'object' && toolCallsResponse?.length) {
           const result = trackForcedToolUsage(
             toolCallsResponse,
             toolChoice,

apps/sim/providers/models.ts

@@ -3506,11 +3506,16 @@ export const PROVIDER_DEFINITIONS: Record<string, ProviderDefinition> = {
   bedrock: {
     id: 'bedrock',
     /**
-     * Converse caps an image at 3.75 MB and a document at 4.5 MB; the lower bound is the safe
-     * single ceiling. There is no large-file path: the only non-inline source is `s3Location`,
-     * which takes an `s3://` URI read with the caller's IAM role, not a presigned HTTPS URL.
+     * Converse caps an image at 3.75 MB and a document at 4.5 MB. A single `maxBytes` cannot
+     * express both, so it carries the higher (document) bound: clamping to 3.75 MB would reject
+     * 3.75-4.5 MB documents that Converse accepts today, whereas at 4.5 MB every size that works
+     * now still works and only the genuinely-too-large are rejected early. Oversized images in
+     * that band still surface as a Bedrock API error, exactly as they do without this entry.
+     *
+     * There is no large-file path: the only non-inline Converse source is `s3Location`, which
+     * takes an `s3://` URI read with the caller's IAM role, not a presigned HTTPS URL.
      */
-    fileAttachment: { maxBytes: 3_750_000, strategy: 'inline' },
+    fileAttachment: { maxBytes: 4_500_000, strategy: 'inline' },
     name: 'AWS Bedrock',
     description: 'AWS Bedrock foundation models',
     defaultModel: 'bedrock/anthropic.claude-sonnet-4-5-20250929-v1:0',

apps/sim/providers/utils.ts

@@ -1235,17 +1235,6 @@ export function prepareToolsWithUsageControl(
   }
 }
 
-/**
- * Checks if a forced tool has been used in a response and manages the tool_choice accordingly
- *
- * @param toolCallsResponse Array of tool calls in the response
- * @param originalToolChoice The original tool_choice setting used in the request
- * @param logger Logger instance to use for logging
- * @param provider Optional provider ID to adjust format for specific providers
- * @param forcedTools Array of all tool IDs that should be forced in sequence
- * @param usedForcedTools Array of tool IDs that have already been used
- * @returns Object containing tracking information and next tool choice
- */
 /**
  * Narrows the SDK's `ChatCompletionMessageToolCall` union to its function variant.
  *
@@ -1263,6 +1252,17 @@ export function isFunctionToolCall(
   return 'function' in toolCall && toolCall.function != null
 }
 
+/**
+ * Checks if a forced tool has been used in a response and manages the tool_choice accordingly
+ *
+ * @param toolCallsResponse Array of tool calls in the response
+ * @param originalToolChoice The original tool_choice setting used in the request
+ * @param logger Logger instance to use for logging
+ * @param provider Optional provider ID to adjust format for specific providers
+ * @param forcedTools Array of all tool IDs that should be forced in sequence
+ * @param usedForcedTools Array of tool IDs that have already been used
+ * @returns Object containing tracking information and next tool choice
+ */
 export function trackForcedToolUsage(
   toolCallsResponse: any[] | undefined,
   originalToolChoice: any,
@@ -1579,11 +1579,8 @@ export function checkForForcedToolUsageOpenAI(
   let hasUsedForcedTool = false
   let updatedUsedForcedTools = [...usedForcedTools]
 
-  if (
-    typeof toolChoice === 'object' &&
-    response.choices[0]?.message?.tool_calls?.filter(isFunctionToolCall)
-  ) {
-    const toolCallsResponse = response.choices[0].message.tool_calls
+  const toolCallsResponse = response.choices[0]?.message?.tool_calls?.filter(isFunctionToolCall)
+  if (typeof toolChoice === 'object' && toolCallsResponse?.length) {
     const result = trackForcedToolUsage(
       toolCallsResponse,
       toolChoice,