@eshal-bot/chat-widget 0.1.96 → 0.1.98

package/dist/chat-widget.esm.js

@@ -1 +1 @@
-export{S as default}from"./chat-widget-index-CHqB62M7.esm.js";import"react";import"react-dom/client";import"react-dom";import"react/jsx-runtime";
+export{S as default}from"./chat-widget-index-C4KMbduJ.esm.js";import"react";import"react-dom/client";import"react-dom";import"react/jsx-runtime";

package/dist/chat-widget.js

@@ -16546,13 +16546,43 @@
       message: backendMsg
     };
   }
-  function putWithProgress(_ref2) {
+
+  // Give back session budget the backend reserved at /presign admission time
+  // (EV-2791) - fired when a chip is removed or its upload fails AFTER that
+  // reservation succeeded, so a not-actually-sent file doesn't permanently
+  // inflate the conversation's "used" total for the rest of the session TTL.
+  // Fire-and-forget: a failed release just leaves the budget a bit tighter
+  // than it truly is, never more permissive, so it's safe to ignore errors.
+  function releaseSessionBytes(_ref2) {
+    let {
+      apiEndpoint,
+      conversationId,
+      size,
+      authHeader
+    } = _ref2;
+    fetch(joinUrl(apiEndpoint, "/api/v1/chat-attachments/release"), {
+      method: "POST",
+      credentials: "include",
+      headers: _objectSpread2({
+        "Content-Type": "application/json"
+      }, authHeader ? {
+        Authorization: authHeader
+      } : {}),
+      body: JSON.stringify({
+        conversationId,
+        size
+      })
+    }).catch(() => {
+      /* best-effort - see comment above */
+    });
+  }
+  function putWithProgress(_ref3) {
     let {
       url,
       file,
       onProgress,
       registerXhr
-    } = _ref2;
+    } = _ref3;
     return new Promise((resolve, reject) => {
       const xhr = new XMLHttpRequest();
       registerXhr(xhr);
@@ -16583,7 +16613,7 @@
   // `url` is consumed today (READ SAS URL that knowledge-api's
   // attachment_ingest fetches bytes from). Malformed / empty JSON
   // resolves to `{}` - the upload succeeded, the read URL is best-effort.
-  function postMultipartWithProgress(_ref3) {
+  function postMultipartWithProgress(_ref4) {
     let {
       url,
       file,
@@ -16591,7 +16621,7 @@
       authHeader,
       onProgress,
       registerXhr
-    } = _ref3;
+    } = _ref4;
     return new Promise((resolve, reject) => {
       const xhr = new XMLHttpRequest();
       registerXhr(xhr);
@@ -16636,14 +16666,14 @@
       xhr.send(form);
     });
   }
-  function useFileUpload(_ref4) {
+  function useFileUpload(_ref5) {
     let {
       conversationId,
       config,
       apiEndpoint,
       authHeader,
       onError
-    } = _ref4;
+    } = _ref5;
     const [attachments, setAttachments] = reactExports.useState([]);
     const inflightRef = reactExports.useRef(new Map());
     const idCounterRef = reactExports.useRef(0);
@@ -16746,6 +16776,9 @@
           })
         });
       } catch (err) {
+        // Never reached the server - no reservation was ever made, so just
+        // undo this attachment's optimistic client-side estimate (EV-2791).
+        sessionBytesRef.current.bytes = Math.max(0, sessionBytesRef.current.bytes - file.size);
         errorPatch(attachmentId, "network", "Network error while requesting upload.");
         return;
       }
@@ -16759,13 +16792,34 @@
         } catch (_unused4) {
           /* body not JSON - keep defaults */
         }
+        // decideAttachmentPolicy rejects BEFORE reserving budget, so there's
+        // nothing to release server-side - only undo the client estimate.
+        sessionBytesRef.current.bytes = Math.max(0, sessionBytesRef.current.bytes - file.size);
         errorPatch(attachmentId, backendCode, backendMsg);
         return;
       }
+
+      // presignRes.ok means decideAttachmentPolicy's LAST step ran -
+      // addSessionBytes already reserved this file's bytes server-side.
+      // Mark it so removeAttachment (and every error path below) knows to
+      // call /release rather than just correcting the client estimate.
+      patchAttachment(attachmentId, {
+        reservedBytes: file.size
+      });
       let presign;
       try {
         presign = await presignRes.json();
       } catch (_unused5) {
+        releaseSessionBytes({
+          apiEndpoint,
+          conversationId,
+          size: file.size,
+          authHeader
+        });
+        sessionBytesRef.current.bytes = Math.max(0, sessionBytesRef.current.bytes - file.size);
+        patchAttachment(attachmentId, {
+          reservedBytes: 0
+        });
         errorPatch(attachmentId, "unknown", "Malformed presign response.");
         return;
       }
@@ -16824,6 +16878,16 @@
           });
           if (!confirmed.ok) {
             inflightRef.current.delete(attachmentId);
+            releaseSessionBytes({
+              apiEndpoint,
+              conversationId,
+              size: file.size,
+              authHeader
+            });
+            sessionBytesRef.current.bytes = Math.max(0, sessionBytesRef.current.bytes - file.size);
+            patchAttachment(attachmentId, {
+              reservedBytes: 0
+            });
             errorPatch(attachmentId, confirmed.code, confirmed.message);
             return;
           }
@@ -16832,7 +16896,19 @@
         }
       } catch (err) {
         inflightRef.current.delete(attachmentId);
+        // Aborted means removeAttachment already released this reservation -
+        // releasing again here would double-count the give-back.
         if (err && err.aborted) return;
+        releaseSessionBytes({
+          apiEndpoint,
+          conversationId,
+          size: file.size,
+          authHeader
+        });
+        sessionBytesRef.current.bytes = Math.max(0, sessionBytesRef.current.bytes - file.size);
+        patchAttachment(attachmentId, {
+          reservedBytes: 0
+        });
         errorPatch(attachmentId, "network", "Upload failed. Please retry.");
         return;
       }
@@ -16875,7 +16951,11 @@
           size: file.size,
           mimeType: file.type,
           status: "uploading",
-          progress: 0
+          progress: 0,
+          // Set once /presign confirms the server actually reserved this
+          // file's bytes (EV-2791) - removeAttachment uses it to decide
+          // whether a removal needs to call /release.
+          reservedBytes: 0
         };
         setAttachments(prev => [...prev, entry]);
         // Reserve session budget at ADMISSION, not upload completion -
@@ -16892,8 +16972,22 @@
         xhr.abort();
         inflightRef.current.delete(id);
       }
+      // EV-2791: a chip removed before Send had its bytes reserved server-side
+      // at /presign admission time - give them back, or the session's "used"
+      // total stays inflated by every file the user attached-then-removed,
+      // for the rest of the 24h session TTL.
+      const removed = attachmentsRef.current.find(a => a.id === id);
+      if (removed && removed.reservedBytes > 0) {
+        releaseSessionBytes({
+          apiEndpoint,
+          conversationId,
+          size: removed.reservedBytes,
+          authHeader
+        });
+        sessionBytesRef.current.bytes = Math.max(0, sessionBytesRef.current.bytes - removed.reservedBytes);
+      }
       setAttachments(prev => prev.filter(a => a.id !== id));
-    }, []);
+    }, [apiEndpoint, authHeader, conversationId]);
     const clearAll = reactExports.useCallback(() => {
       for (const xhr of inflightRef.current.values()) xhr.abort();
       inflightRef.current.clear();