@eshal-bot/chat-widget 0.2.27 → 0.2.28

package/dist/chat-widget.esm.js

@@ -1 +1 @@
-export{e as default}from"./chat-widget-index-DjOa8SJO.esm.js";import"react";import"react-dom/client";import"react/jsx-runtime";import"react-dom";
+export{e as default}from"./chat-widget-index-BPiJscyi.esm.js";import"react";import"react-dom/client";import"react/jsx-runtime";import"react-dom";

package/dist/chat-widget.js

@@ -15644,6 +15644,53 @@
     return `${String(apiBaseUrl).replace(/\/$/, "")}${url.startsWith("/") ? "" : "/"}${url}`;
   }
 
+  /**
+   * The filename a download's `Content-Disposition` header names, or null.
+   *
+   * A copy of `filenameFromContentDisposition` in @eshal/shared, which the
+   * widget (published standalone) cannot import. Both run the cases in
+   * packages/shared/fixtures/content-disposition-cases.json.
+   *
+   * Replaces `/filename\*?=(?:UTF-8'')?["']?([^"'\s;]+)["']?/`, whose
+   * `[^"'\s;]+` stopped at the first space: every SharePoint citation saved
+   * under the first word of its name ("Tech Textile Park Guidelines.pdf" came
+   * down as "Tech.pdf"; dev, 27 Oct 2026).
+   *
+   * `filename*` wins (RFC 6266), then a quoted `filename="..."` read whole,
+   * then a bare token.
+   */
+
+  function decodeExtValue(charset, encoded) {
+    try {
+      if (/^utf-8$/i.test(charset)) return decodeURIComponent(encoded);
+      return encoded.replace(/%([0-9a-f]{2})/gi, (_, hex) => String.fromCharCode(parseInt(hex, 16)));
+    } catch {
+      return null;
+    }
+  }
+  function maybePercentDecoded(value) {
+    if (!/%[0-9a-f]{2}/i.test(value)) return value;
+    try {
+      return decodeURIComponent(value);
+    } catch {
+      return value;
+    }
+  }
+  function filenameFromContentDisposition(header) {
+    if (!header) return null;
+    const star = /(?:^|;)\s*filename\*\s*=\s*([^;]+)/i.exec(header);
+    if (star) {
+      const ext = /^\s*"?([^']*)'[^']*'([^"]*)"?\s*$/.exec(star[1]);
+      const decoded = ext ? decodeExtValue(ext[1], ext[2]) : null;
+      if (decoded) return decoded;
+    }
+    const quoted = /(?:^|;)\s*filename\s*=\s*"((?:[^"\\]|\\.)*)"/i.exec(header);
+    if (quoted) return maybePercentDecoded(quoted[1].replace(/\\(.)/g, "$1")) || null;
+    const token = /(?:^|;)\s*filename\s*=\s*([^;]+)/i.exec(header);
+    if (token) return maybePercentDecoded(token[1].trim()) || null;
+    return null;
+  }
+
   // Runtime loader for the lazy markdown/chart chunk in the vanilla/IIFE
   // build (EV-2023). Rollup's IIFE output format has no module system of its
   // own, so it can't code-split a native `import()` the way the ESM build
@@ -16167,14 +16214,7 @@
         // Content-Disposition holds the UUID-prefixed storage key we
         // don't want to show. Skip CD parsing for those.
         if (!isAttachment) {
-          const match = disposition && /filename\*?=(?:UTF-8'')?["']?([^"'\s;]+)["']?/i.exec(disposition);
-          if (match) {
-            try {
-              filename = decodeURIComponent(match[1].replace(/\\"/g, '"'));
-            } catch {
-              /* keep fallback */
-            }
-          }
+          filename = filenameFromContentDisposition(disposition) || filename;
         }
         const a = document.createElement("a");
         const objectUrl = URL.createObjectURL(blob);
@@ -21903,7 +21943,7 @@
    * value by its own test (that constant sat at 0.1.113 while this package was
    * at 0.2.2 precisely because nothing enforced it - EV-2431).
    */
-  const WIDGET_VERSION = '0.2.27';
+  const WIDGET_VERSION = '0.2.28';
 
   /**
    * API utility functions