@eshal-bot/chat-widget 0.1.75 → 0.1.76

package/dist/chat-widget.js

@@ -94490,12 +94490,37 @@
         const downloadKey = _downloadKey(source) || "attachment";
         setDownloadingId(downloadKey);
         try {
+          // 2026-07-03 — user reported the download dialog was
+          // suggesting the storage-key blob name (e.g. `<uuid>-
+          // RishabhResume.pdf`) instead of the original filename.
+          // Root cause: the server behind `/api/v1/files/...` sends
+          // a `Content-Disposition: attachment; filename=<blob>`
+          // header, and browsers give that precedence over the
+          // `<a download="…">` attribute. Workaround: fetch the
+          // bytes into a Blob, mint an object URL, and use `a.download`
+          // — object URLs have no `Content-Disposition` so the
+          // attribute wins and the user gets the pretty filename.
+          // Same pattern the KB /file-download branch below uses.
+          const fetchHeaders = {};
+          if (typeof getAuthToken === "function") {
+            const token = await getAuthToken();
+            if (token) fetchHeaders["Authorization"] = "Bearer ".concat(token);
+          }
+          const res = await fetch(source.url, {
+            method: "GET",
+            headers: fetchHeaders,
+            credentials: "include"
+          });
+          if (!res.ok) {
+            throw new Error("Attachment fetch failed: ".concat(res.status));
+          }
+          const blob = await res.blob();
+          const objectUrl = URL.createObjectURL(blob);
           const a = document.createElement("a");
-          a.href = source.url;
+          a.href = objectUrl;
           a.download = source.source_name || "download";
-          a.target = "_blank";
-          a.rel = "noopener noreferrer";
           a.click();
+          URL.revokeObjectURL(objectUrl);
         } catch (e) {
           console.error("Attachment download failed:", e);
         } finally {