feat(server): native safe fetch (#14931)

packages/backend/server/src/plugins/copilot/storage.ts

@@ -7,7 +7,6 @@ import {
   BlobQuotaExceeded,
   CallMetric,
   Config,
-  fetchBuffer,
   type FileUpload,
   OneMB,
   OnEvent,
@@ -17,6 +16,7 @@ import {
   URLHelper,
 } from '../../base';
 import { QuotaService } from '../../core/quota';
+import { fetchRemoteAttachment } from '../../native';
 
 const REMOTE_BLOB_MAX_BYTES = 20 * OneMB;
 
@@ -93,12 +93,15 @@ export class CopilotStorage {
 
   @CallMetric('ai', 'blob_proxy_remote_url')
   async handleRemoteLink(userId: string, workspaceId: string, link: string) {
-    const { buffer, type } = await fetchBuffer(
-      link,
-      REMOTE_BLOB_MAX_BYTES,
-      'image/'
-    );
+    const { body, mimeType } = await fetchRemoteAttachment({
+      url: link,
+      maxBytes: REMOTE_BLOB_MAX_BYTES,
+      expectedContentTypePrefix: 'image/',
+      maxImageHeight: 4096,
+      maxImageWidth: 4096,
+    });
+    const buffer = Buffer.from(body);
     const filename = createHash('sha256').update(buffer).digest('base64url');
-    return this.put(userId, workspaceId, filename, buffer, type);
+    return this.put(userId, workspaceId, filename, buffer, mimeType);
   }
 }