Add download-attachment-files endpoint to complete Devin API support

[devin-ai-integration]

Add download-attachment-files endpoint to complete Devin API support

Summary

This PR implements the missing download-attachment-files endpoint, completing support for all 19 Devin API endpoints. The action previously supported 18 endpoints; this adds the 19th endpoint for downloading files that were previously uploaded to Devin sessions.

Changes:

• Added download_attachment_files() function to devin-api.sh that calls GET /v1/attachments/{uuid}/{name}
• Added two new inputs: attachment-uuid and attachment-name to action.yml
• Updated documentation in README.md with usage examples and input descriptions
• Added case statement entry for the new action

The implementation follows the same pattern as existing endpoints and handles both 200 and 307 (redirect) HTTP responses.

Review & Testing Checklist for Human

⚠️ Important: This implementation is untested with real API calls. Please verify thoroughly before merging.

• Test downloading a real file: Create a session, upload a file using the existing upload-files action, then try to download it using the new download-attachment-files action with the returned UUID
• Test with binary files: Verify that binary files (PDFs, images, zip files) download correctly without corruption
• Verify the README.md example: The example shows using echo to save files, which won't work for binary files. Test if there's a better way to handle the downloaded content in GitHub Actions
• Test error handling: Verify error messages when providing invalid UUID or non-existent filename
• Check HTTP redirect handling: The API returns a 307 redirect to a presigned URL - verify the -L curl flag correctly follows redirects and captures the file content

Test Plan Recommendation

1. Create a test workflow that:
   • Creates a Devin session
   • Uploads a test file (both text and binary)
   • Gets the attachment UUID from the response
   • Downloads the file using the new action
   • Verifies the downloaded content matches the original
2. Test with various file types (text, PDF, image, binary)
3. Test error cases (invalid UUID, missing file)

Notes

• The bash implementation captures the response using curl -s -L, which should follow redirects
• HTTP status codes 200 and 307 are treated as success
• Binary file handling in bash and GitHub Actions outputs might be problematic - this needs practical testing

---

Link to Devin run: https://app.devin.ai/sessions/de834578e708491d9e12a84dffc5d1c0
Requested by: Sam Fertig (@samfert-codeium)

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring