fix(files): keep an embed id spelled as the document spells it

Decoding the id let a percent-encoded embed resolve and bundle its asset while
the rewrite, which searches the document for that id, found nothing — the zip
kept an API URL that renders as a broken image offline. Keys stay decoded;
they are matched against stored keys, not against document text.

Author: waleedlatif1

apps/sim/lib/uploads/utils/embedded-image-ref.test.ts

@@ -21,9 +21,13 @@ describe('extractEmbeddedFileRef', () => {
     expect(extractEmbeddedFileRef('/workspace/W1/files/wf_abc')).toEqual({ fileId: 'wf_abc' })
   })
 
-  it('percent-decodes the id, like it already does the key', () => {
-    expect(extractEmbeddedFileRef('/api/files/view/wf%5Fabc')).toEqual({ fileId: 'wf_abc' })
-    expect(extractEmbeddedFileRef('/workspace/W1/files/wf%5Fabc')).toEqual({ fileId: 'wf_abc' })
+  /**
+   * The export bundler rewrites an embed by searching the document for the id it was handed, so a
+   * decoded id would bundle the asset and leave the markdown pointing at the API URL.
+   */
+  it('returns the id as spelled in the src, so the export can find it again', () => {
+    expect(extractEmbeddedFileRef('/api/files/view/wf%5Fabc')).toEqual({ fileId: 'wf%5Fabc' })
+    expect(extractEmbeddedFileRef('/workspace/W1/files/wf%5Fabc')).toEqual({ fileId: 'wf%5Fabc' })
   })
 
   it('returns null for external, data, and non-workspace serve urls', () => {

apps/sim/lib/uploads/utils/embedded-image-ref.ts

@@ -18,7 +18,10 @@ export type EmbeddedFileRef = { key: string } | { fileId: string } | null
  * and the in-app path `/workspace/<wsId>/files/<id>`. Returns null for absolute, `data:`, or non-workspace
  * URLs (e.g. public `profile-pictures/` assets), which render as-is.
  *
- * Path segments are percent-decoded, so callers always receive the real key or id.
+ * A key is percent-decoded — it is matched against stored keys. An id is returned exactly as it is
+ * spelled in the `src`, because the export bundler rewrites embeds by searching the document for
+ * that spelling; handing it a decoded id it cannot find would bundle an asset and leave the markdown
+ * pointing at the API URL, which renders as a broken image offline.
  */
 export function extractEmbeddedFileRef(src: string): EmbeddedFileRef {
   try {
@@ -36,10 +39,10 @@ export function extractEmbeddedFileRef(src: string): EmbeddedFileRef {
       return key.startsWith('workspace/') ? { key } : null
     }
     if (segs[1] === 'api' && segs[2] === 'files' && segs[3] === 'view' && segs[4]) {
-      return { fileId: decodeURIComponent(segs[4]) }
+      return { fileId: segs[4] }
     }
     if (segs[1] === 'workspace' && segs[3] === 'files' && segs[4]) {
-      return { fileId: decodeURIComponent(segs[4]) }
+      return { fileId: segs[4] }
     }
     return null
   } catch {