@microsoft/omnichannel-chat-widget 1.8.4-main.6b93408 → 1.8.4-main.7e15cb1

package/lib/cjs/common/Constants.js

@@ -158,7 +158,6 @@ let HtmlIdNames = /*#__PURE__*/_createClass(function HtmlIdNames() {
 });
 exports.HtmlIdNames = HtmlIdNames;
 _defineProperty(HtmlIdNames, "MSLiveChatWidget", "MSLiveChatWidget");
-_defineProperty(HtmlIdNames, "fileSentAnnouncementRegionId", "ms_lcw_file_sent_announcement");
 let HtmlClassNames = /*#__PURE__*/_createClass(function HtmlClassNames() {
   _classCallCheck(this, HtmlClassNames);
 });

package/lib/cjs/common/telemetry/TelemetryManager.js

@@ -11,6 +11,7 @@ var _appInsightsLogger = require("./loggers/appInsightsLogger");
 var _ariaTelemetryLogger = require("./loggers/ariaTelemetryLogger");
 var _consoleLogger = require("./loggers/consoleLogger");
 var _defaultAriaConfig = require("./defaultConfigs/defaultAriaConfig");
+var _sanitizeSasInPayload = require("./sanitizeSasInPayload");
 function _defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable || false; descriptor.configurable = true; if ("value" in descriptor) descriptor.writable = true; Object.defineProperty(target, _toPropertyKey(descriptor.key), descriptor); } }
 function _createClass(Constructor, protoProps, staticProps) { if (protoProps) _defineProperties(Constructor.prototype, protoProps); if (staticProps) _defineProperties(Constructor, staticProps); Object.defineProperty(Constructor, "prototype", { writable: false }); return Constructor; }
 function _classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError("Cannot call a class as a function"); } }
@@ -81,11 +82,15 @@ const RegisterLoggers = () => {
     };
   };
   const logTelemetry = telemetryEvent => {
+    // Redact Azure SAS credentials in any URL embedded in the payload (e.g.
+    // customer-supplied blob asset URLs in widget customization props) before
+    // it fans out to console, Aria, AppInsights, or any custom logger.
+    const sanitizedPayload = (0, _sanitizeSasInPayload.sanitizeSasInPayload)(telemetryEvent === null || telemetryEvent === void 0 ? void 0 : telemetryEvent.payload);
     loggers.map(logger => {
       var _payload, _telemetryInput$paylo;
       const logLevel = telemetryEvent.logLevel ?? _TelemetryConstants.LogLevel.INFO;
       const scenarioType = ((_payload = telemetryEvent.payload) === null || _payload === void 0 ? void 0 : _payload.scenarioType) ?? _TelemetryConstants.ScenarioType.UNDEFINED;
-      const telemetryInput = parseInput(telemetryEvent === null || telemetryEvent === void 0 ? void 0 : telemetryEvent.payload, scenarioType);
+      const telemetryInput = parseInput(sanitizedPayload, scenarioType);
       telemetryInput.telemetryInfo = {
         telemetryInfo: _TelemetryHelper.TelemetryHelper.buildTelemetryEvent(logLevel, telemetryInput)
       };

package/lib/cjs/common/telemetry/sanitizeSasInPayload.js

@@ -0,0 +1,82 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.sanitizeSasInPayload = void 0;
+/**
+ * Redacts the values of Azure Shared Access Signature (SAS) query parameters in any
+ * URL embedded in a telemetry payload, so customer-supplied SAS URLs (e.g. blob asset
+ * URLs in widget customization props) cannot leak credentials through Aria/AppInsights.
+ *
+ * Trigger: any URL whose query string contains `sig=`. When detected, every well-known
+ * SAS parameter value in that query is replaced with `[REDACTED]`. Other URLs and other
+ * substrings of the payload pass through unchanged.
+ *
+ * Coverage of SAS parameter names:
+ *  - Service/Blob SAS:        sig, sv, se, st, sp, spr, sr, sip
+ *  - Account SAS:             ss, srt
+ *  - User-delegation key SAS: skoid, sktid, skt, ske, sks, skv, saoid, suoid, sce, sdd
+ *  - Response header overrides: rscc, rscd, rsce, rscl, rsct
+ *
+ * Reference: https://learn.microsoft.com/en-us/rest/api/storageservices/create-service-sas
+ */
+
+const SAS_PARAM_NAMES = new Set(["sig", "sv", "se", "st", "sp", "spr", "sr", "sip", "ss", "srt", "skoid", "sktid", "skt", "ske", "sks", "skv", "saoid", "suoid", "sce", "sdd", "rscc", "rscd", "rsce", "rscl", "rsct"]);
+const REDACTED_VALUE = "[REDACTED]";
+
+// Matches any http(s) URL substring up to whitespace / closing quote / angle-bracket / paren.
+const URL_REGEX = /\bhttps?:\/\/[^\s"'<>)]+/gi;
+const redactQueryIfSas = url => {
+  const queryIdx = url.indexOf("?");
+  if (queryIdx < 0) {
+    return url;
+  }
+  // Separate the fragment (#...) before processing the query — fragments come
+  // after the query string in URL syntax and must not be folded into the last
+  // query parameter's value when we split on `&`.
+  const afterQuestionMark = url.slice(queryIdx + 1);
+  const fragIdx = afterQuestionMark.indexOf("#");
+  const query = fragIdx < 0 ? afterQuestionMark : afterQuestionMark.slice(0, fragIdx);
+  const fragment = fragIdx < 0 ? "" : afterQuestionMark.slice(fragIdx); // includes the leading '#'
+  if (!/(^|&)sig=/i.test(query)) {
+    // No SAS signature present — leave the URL alone so legitimate non-SAS query
+    // strings (e.g. ?utm_source=...) are not mangled.
+    return url;
+  }
+  const base = url.slice(0, queryIdx);
+  const sanitizedQuery = query.split("&").map(pair => {
+    const eqIdx = pair.indexOf("=");
+    if (eqIdx < 0) {
+      return pair;
+    }
+    const name = pair.slice(0, eqIdx).toLowerCase();
+    return SAS_PARAM_NAMES.has(name) ? `${pair.slice(0, eqIdx)}=${REDACTED_VALUE}` : pair;
+  }).join("&");
+  return `${base}?${sanitizedQuery}${fragment}`;
+};
+const sanitizeString = s => s.replace(URL_REGEX, redactQueryIfSas);
+
+/**
+ * Deep-walk a value and redact SAS credentials in any string it contains.
+ * Returns a new object/array (originals are not mutated); non-string leaves are
+ * passed through. Tree-shaped, JSON-like values only — not designed for class
+ * instances, prototype-bound objects, or cyclic graphs.
+ */
+const sanitizeSasInPayload = value => {
+  if (typeof value === "string") {
+    return sanitizeString(value);
+  }
+  if (Array.isArray(value)) {
+    return value.map(sanitizeSasInPayload);
+  }
+  if (value !== null && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      out[k] = sanitizeSasInPayload(v);
+    }
+    return out;
+  }
+  return value;
+};
+exports.sanitizeSasInPayload = sanitizeSasInPayload;

package/lib/cjs/components/citationpanestateful/CitationPaneStateful.js

@@ -62,7 +62,13 @@ const CitationPaneStateful = props => {
       Event: _TelemetryConstants.TelemetryEvent.UXCitationPaneCompleted,
       ElapsedTimeInMilliseconds: uiTimer.milliSecondsElapsed
     });
-    return cleanup;
+    return () => {
+      // internal tracking: restore parent tab indices on unmount so focus
+      // can escape the widget even if the pane is dismissed by an
+      // external state change rather than a user button click.
+      (0, _utils.setTabIndices)(elements, initialTabIndexMap, true);
+      cleanup();
+    };
   }, []);
 
   // Retry focus once pane is actually visible (isReady) in case initial attempt occurred while wrapper was visibility:hidden

package/lib/cjs/components/confirmationpanestateful/ConfirmationPaneStateful.js

@@ -100,7 +100,17 @@ const ConfirmationPaneStateful = props => {
       Event: _TelemetryConstants.TelemetryEvent.UXConfirmationPaneCompleted,
       ElapsedTimeInMilliseconds: uiTimer.milliSecondsElapsed
     });
-    return cleanup;
+    return () => {
+      // internal tracking: when the confirmation pane unmounts (page reload,
+      // parent state change, or any path that bypasses onConfirm /
+      // onCancel) the tab indices that were forced to -1 on sibling
+      // focusable elements must be restored, otherwise Tab order
+      // remains broken and focus can be trapped inside the widget.
+      // setTabIndices is a no-op when initialTabIndexMap is already
+      // empty (onConfirm / onCancel already restored).
+      (0, _utils.setTabIndices)(elements, initialTabIndexMap, true);
+      cleanup();
+    };
   }, []);
   return /*#__PURE__*/_react.default.createElement(_react.default.Fragment, null, /*#__PURE__*/_react.default.createElement(_DimLayer.DimLayer, {
     brightness: (controlProps === null || controlProps === void 0 ? void 0 : controlProps.brightnessValueOnDim) ?? "0.2"

package/lib/cjs/components/emailtranscriptpanestateful/EmailTranscriptPaneStateful.js

@@ -136,7 +136,11 @@ const EmailTranscriptPaneStateful = props => {
       Event: _TelemetryConstants.TelemetryEvent.UXEmailTranscriptPaneCompleted,
       ElapsedTimeInMilliseconds: uiTimer.milliSecondsElapsed
     });
-    return cleanup;
+    return () => {
+      // internal tracking: restore parent tab indices on unmount.
+      (0, _utils.setTabIndices)(elements, initialTabIndexMap, true);
+      cleanup();
+    };
   }, [initialEmail]);
   return /*#__PURE__*/_react.default.createElement(_react.default.Fragment, null, /*#__PURE__*/_react.default.createElement(_DimLayer.DimLayer, {
     brightness: (controlProps === null || controlProps === void 0 ? void 0 : controlProps.brightnessValueOnDim) ?? "0.2"

package/lib/cjs/components/livechatwidget/common/createMarkdown.js

@@ -173,14 +173,16 @@ const createMarkdown = (disableMarkdownMessageFormatting, disableNewLineMarkdown
 
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     md.render = function (text, env) {
+      const safeEnv = env ?? {};
       const processedText = preprocessText(text);
-      return md.renderer.render(md.parse(processedText, env), md.options, env);
+      return md.renderer.render(md.parse(processedText, safeEnv), md.options, safeEnv);
     };
 
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     md.renderInline = function (text, env) {
+      const safeEnv = env ?? {};
       const processedText = preprocessText(text);
-      return md.renderer.render(md.parseInline(processedText, env), md.options, env);
+      return md.renderer.render(md.parseInline(processedText, safeEnv), md.options, safeEnv);
     };
   });
 

package/lib/cjs/components/livechatwidget/common/initWebChatComposer.js

@@ -304,24 +304,28 @@ const initWebChatComposer = (props, state, dispatch, facadeChatSDK, endChat) =>
           const conversationId = (state === null || state === void 0 ? void 0 : (_state$domainStates2 = state.domainStates) === null || _state$domainStates2 === void 0 ? void 0 : (_state$domainStates2$ = _state$domainStates2.chatToken) === null || _state$domainStates2$ === void 0 ? void 0 : _state$domainStates2$.chatId) || "unknown";
           _TelemetryHelper.TelemetryHelper.logActionEvent(_TelemetryConstants.LogLevel.INFO, {
             Event: _TelemetryConstants.TelemetryEvent.HTMLSanitized,
-            Description: "HTML content would be sanitized by stricter allowlist (monitor-only)",
-            ElapsedTimeInMilliseconds: executionTimeMs,
-            CustomProperties: {
-              OrganizationId: orgId,
-              ConversationId: conversationId,
-              RemovedTags: uniqueTags.join(", "),
-              RemovedAttributes: uniqueAttrs.join(", "),
-              Phase: "Monitor"
-            }
+            Description: JSON.stringify({
+              message: "HTML content would be sanitized by stricter allowlist (monitor-only)",
+              removedTags: uniqueTags,
+              removedAttributes: uniqueAttrs,
+              phase: "Monitor",
+              organizationId: orgId,
+              conversationId: conversationId
+            }),
+            ElapsedTimeInMilliseconds: executionTimeMs
           });
 
           // Log to console in development for debugging
           if (process.env.NODE_ENV === "development") {
-            console.warn("[Monitor] Stricter HTML sanitization would remove:", {
+            console.warn("[Monitor] Stricter HTML sanitization telemetry:", {
+              description: JSON.parse(JSON.stringify({
+                message: "HTML content would be sanitized by stricter allowlist (monitor-only)",
+                removedTags: uniqueTags,
+                removedAttributes: uniqueAttrs,
+                phase: "Monitor"
+              })),
               orgId,
               conversationId,
-              removedTags: uniqueTags,
-              removedAttributes: uniqueAttrs,
               executionTimeMs
             });
           }

package/lib/cjs/components/postchatsurveypanestateful/PostChatSurveyPaneStateful.js

@@ -67,6 +67,7 @@ const PostChatSurveyPaneStateful = props => {
   };
   const controlProps = {
     id: "oc-lcw-postchatsurvey-pane",
+    title: "Post-chat survey",
     surveyURL: ((_props$controlProps = props.controlProps) === null || _props$controlProps === void 0 ? void 0 : _props$controlProps.surveyURL) ?? surveyInviteLink,
     ...props.controlProps
   };

package/lib/cjs/components/prechatsurveypanestateful/PreChatSurveyPaneStateful.js

@@ -20,6 +20,34 @@ function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { de
 function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
 function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
 let uiTimer;
+const getFocusedElementAnnouncement = element => {
+  var _element$textContent;
+  const ariaLabel = element.getAttribute(_Constants.HtmlAttributeNames.ariaLabel);
+  if (ariaLabel) {
+    return ariaLabel.trim();
+  }
+  const ariaLabelledBy = element.getAttribute(_Constants.HtmlAttributeNames.ariaLabelledby);
+  if (ariaLabelledBy) {
+    const labelledByText = ariaLabelledBy.split(/\s+/).map(id => {
+      var _document$getElementB, _document$getElementB2;
+      return (_document$getElementB = document.getElementById(id)) === null || _document$getElementB === void 0 ? void 0 : (_document$getElementB2 = _document$getElementB.textContent) === null || _document$getElementB2 === void 0 ? void 0 : _document$getElementB2.trim();
+    }).filter(Boolean).join(" ");
+    if (labelledByText) {
+      return labelledByText;
+    }
+  }
+  if (element.id) {
+    const label = Array.from(document.querySelectorAll("label")).find(candidate => candidate.htmlFor === element.id || candidate.getAttribute("for") === element.id);
+    if (label !== null && label !== void 0 && label.textContent) {
+      return label.textContent.trim();
+    }
+  }
+  const parentLabel = element.closest("label");
+  if (parentLabel !== null && parentLabel !== void 0 && parentLabel.textContent) {
+    return parentLabel.textContent.trim();
+  }
+  return ((_element$textContent = element.textContent) === null || _element$textContent === void 0 ? void 0 : _element$textContent.trim()) ?? "";
+};
 
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 const PreChatSurveyPaneStateful = props => {
@@ -42,6 +70,8 @@ const PreChatSurveyPaneStateful = props => {
     surveyProps,
     initStartChat
   } = props;
+  const [preChatFocusAnnouncement, setPreChatFocusAnnouncement] = (0, _react.useState)("");
+  const liveRegionUpdateTimeout = (0, _react.useRef)();
   const generalStyleProps = Object.assign({}, _defaultGeneralPreChatSurveyPaneStyleProps.defaultGeneralPreChatSurveyPaneStyleProps, surveyProps === null || surveyProps === void 0 ? void 0 : (_surveyProps$stylePro = surveyProps.styleProps) === null || _surveyProps$stylePro === void 0 ? void 0 : _surveyProps$stylePro.generalStyleProps, {
     display: state.appStates.isMinimized ? "none" : ""
   });
@@ -128,6 +158,16 @@ const PreChatSurveyPaneStateful = props => {
     ...(surveyProps === null || surveyProps === void 0 ? void 0 : surveyProps.styleProps),
     generalStyleProps: generalStyleProps
   };
+  const announceFocusedElement = event => {
+    if (liveRegionUpdateTimeout.current) {
+      window.clearTimeout(liveRegionUpdateTimeout.current);
+    }
+    const announcement = getFocusedElementAnnouncement(event.target);
+    setPreChatFocusAnnouncement("");
+    liveRegionUpdateTimeout.current = window.setTimeout(() => {
+      setPreChatFocusAnnouncement(announcement);
+    }, 0);
+  };
   (0, _react.useEffect)(() => {
     // Set Aria-Label Attribute for Inputs
     const adaptiveCardElements = document.getElementsByClassName(_Constants.HtmlAttributeNames.adaptiveCardClassName);
@@ -175,10 +215,54 @@ const PreChatSurveyPaneStateful = props => {
       }
     }
   }, [state.appStates.isMinimized]);
-  return /*#__PURE__*/_react.default.createElement(_omnichannelChatComponents.PreChatSurveyPane, {
-    controlProps: controlProps,
-    styleProps: styleProps
-  });
+  (0, _react.useEffect)(() => () => {
+    if (liveRegionUpdateTimeout.current) {
+      window.clearTimeout(liveRegionUpdateTimeout.current);
+    }
+  }, []);
+  return (
+    /*#__PURE__*/
+    // Bug 6525143 / Bug 6423684: the LiveChatWidget container is a centered
+    // flex column (HeaderStateful first, this pane second) with
+    // justifyContent: center and clipped overflow. Sizing this focus-capture
+    // wrapper to height: 100% makes it 100% of the ENTIRE container rather than
+    // the space remaining below the header, so header + pane overflow the
+    // container and the centered column splits the overflow top & bottom -
+    // clipping the header's top edge. Instead, fill only the remaining space
+    // with flex (flex: 1 1 auto + minHeight: 0) and lay out as a column so the
+    // header stays fully visible while the inner pane (a flex child that grows
+    // via flexGrow/flexBasis - see defaultGeneralPreChatSurveyPaneStyleProps)
+    // fills the leftover area and scrolls, instead of collapsing to its
+    // intrinsic content size.
+    _react.default.createElement("div", {
+      onFocusCapture: announceFocusedElement,
+      style: {
+        width: "100%",
+        flex: "1 1 auto",
+        minHeight: 0,
+        display: "flex",
+        flexDirection: "column"
+      }
+    }, /*#__PURE__*/_react.default.createElement("div", {
+      role: "status",
+      "aria-live": "polite",
+      "aria-atomic": "true",
+      style: {
+        position: "absolute",
+        width: "1px",
+        height: "1px",
+        margin: "-1px",
+        padding: 0,
+        border: 0,
+        clip: "rect(0, 0, 0, 0)",
+        overflow: "hidden",
+        whiteSpace: "nowrap"
+      }
+    }, preChatFocusAnnouncement), /*#__PURE__*/_react.default.createElement(_omnichannelChatComponents.PreChatSurveyPane, {
+      controlProps: controlProps,
+      styleProps: styleProps
+    }))
+  );
 };
 exports.PreChatSurveyPaneStateful = PreChatSurveyPaneStateful;
 var _default = PreChatSurveyPaneStateful;

package/lib/cjs/components/prechatsurveypanestateful/common/defaultStyles/defaultGeneralPreChatSurveyPaneStyleProps.js

@@ -11,8 +11,18 @@ const defaultGeneralPreChatSurveyPaneStyleProps = {
   backgroundColor: "#FFFFFF",
   borderColor: "#F1F1F1",
   overflowY: "auto",
-  height: "inherit",
-  width: "inherit",
-  overscrollBehavior: "none"
+  // Bug 6525143 / Bug 6423684: the focus-capture wrapper is a flex column sized to
+  // the space remaining below the header (flex: 1 1 auto). Fill that space via flex
+  // (flexGrow: 1 / flexBasis: 0 / minHeight: 0) instead of height: 100%, which
+  // resolved against the whole centered #oc-lcw container and pushed the header out
+  // (the clip). minHeight: 0 keeps the pane shrinkable so its overflowY scroll
+  // engages for tall surveys rather than growing the column and clipping the header.
+  // Note: the shared PreChatSurveyPane default (chat-components) still merges
+  // height: "inherit" underneath these props; under this flex parent that resolves
+  // to auto and is overridden by the flex main-size, so the pane still fills via flex.
+  flexGrow: 1,
+  flexBasis: 0,
+  minHeight: 0,
+  width: "inherit"
 };
 exports.defaultGeneralPreChatSurveyPaneStyleProps = defaultGeneralPreChatSurveyPaneStyleProps;

package/lib/cjs/components/webchatcontainerstateful/WebChatContainerStateful.js

@@ -232,6 +232,48 @@ const WebChatContainerStateful = props => {
         chatHistoryElement.setAttribute(_Constants.HtmlAttributeNames.ariaLabel, webChatContainerProps.webChatHistoryMobileAccessibilityLabel);
       }
     }
+
+    // internal tracking: WebChats BasicToaster renders a `role="log"` container
+    // with no accessible name. When the toaster is empty (typical idle
+    // state) screen readers traversing the page announce it as "blank".
+    // Inject an aria-label so the region has a meaningful name; the
+    // consumer can override via the new
+    // `webChatNotificationRegionAccessibilityLabel` prop. The toaster
+    // may not be rendered yet when this effect first runs, so observe
+    // for it via a MutationObserver scoped to the widget root (or, if
+    // not yet mounted, the widget container's parent) so we never fire
+    // on host-page mutations outside the widget subtree.
+    const toasterLabel = (webChatContainerProps === null || webChatContainerProps === void 0 ? void 0 : webChatContainerProps.webChatNotificationRegionAccessibilityLabel) ?? _defaultWebChatContainerStatefulProps.defaultWebChatContainerStatefulProps.webChatNotificationRegionAccessibilityLabel ?? "Chat notifications";
+    const labelToaster = root => {
+      const toaster = root.querySelector(".webchat__toaster[role='log']");
+      if (toaster && !toaster.getAttribute(_Constants.HtmlAttributeNames.ariaLabel)) {
+        toaster.setAttribute(_Constants.HtmlAttributeNames.ariaLabel, toasterLabel);
+        return true;
+      }
+      return false;
+    };
+    // Prefer the widget root; if it is not yet in the DOM, fall back to
+    // `document` for the *initial* lookup only, then observe the most
+    // specific available scope (widget root if present, otherwise the
+    // widget's parent / document.body as a last resort). The observer
+    // re-resolves the widget root on every callback so we tighten scope
+    // as soon as it mounts.
+    let toasterObserver;
+    const resolveScope = () => document.getElementById("ms_lcw_webchat_root") ?? document.body;
+    if (!labelToaster(resolveScope())) {
+      toasterObserver = new MutationObserver(() => {
+        const scope = resolveScope();
+        if (labelToaster(scope)) {
+          var _toasterObserver;
+          (_toasterObserver = toasterObserver) === null || _toasterObserver === void 0 ? void 0 : _toasterObserver.disconnect();
+          toasterObserver = undefined;
+        }
+      });
+      toasterObserver.observe(resolveScope(), {
+        childList: true,
+        subtree: true
+      });
+    }
     dispatch({
       type: _LiveChatWidgetActionType.LiveChatWidgetActionType.SET_RENDERING_MIDDLEWARE_PROPS,
       payload: webChatContainerProps === null || webChatContainerProps === void 0 ? void 0 : webChatContainerProps.renderingMiddlewareProps
@@ -256,6 +298,10 @@ const WebChatContainerStateful = props => {
         }
       }
     }
+    return () => {
+      var _toasterObserver2;
+      (_toasterObserver2 = toasterObserver) === null || _toasterObserver2 === void 0 ? void 0 : _toasterObserver2.disconnect();
+    };
   }, []);
   (0, _react2.useEffect)(() => {
     var _props$webChatContain6, _props$webChatContain7;
@@ -496,23 +542,7 @@ const WebChatContainerStateful = props => {
       height: "100%",
       width: "100%"
     }
-  }, shouldLoadPersistentHistoryMessages && /*#__PURE__*/_react2.default.createElement(_WebChatEventSubscribers.default, null), /*#__PURE__*/_react2.default.createElement(BasicWebChat, null))), /*#__PURE__*/_react2.default.createElement("div", {
-    id: _Constants.HtmlIdNames.fileSentAnnouncementRegionId,
-    role: "alert",
-    "aria-live": "assertive",
-    "aria-atomic": "true",
-    style: {
-      position: "absolute",
-      width: "1px",
-      height: "1px",
-      padding: "0",
-      margin: "-1px",
-      overflow: "hidden",
-      clip: "rect(0, 0, 0, 0)",
-      whiteSpace: "nowrap",
-      border: "0"
-    }
-  }), citationPaneOpen && /*#__PURE__*/_react2.default.createElement(_CitationPaneStateful.default, {
+  }, shouldLoadPersistentHistoryMessages && /*#__PURE__*/_react2.default.createElement(_WebChatEventSubscribers.default, null), /*#__PURE__*/_react2.default.createElement(BasicWebChat, null))), citationPaneOpen && /*#__PURE__*/_react2.default.createElement(_CitationPaneStateful.default, {
     id: ((_props$citationPanePr = props.citationPaneProps) === null || _props$citationPanePr === void 0 ? void 0 : _props$citationPanePr.id) || _Constants.HtmlAttributeNames.ocwCitationPaneClassName,
     title: ((_props$citationPanePr2 = props.citationPaneProps) === null || _props$citationPanePr2 === void 0 ? void 0 : _props$citationPanePr2.title) || _Constants.HtmlAttributeNames.ocwCitationPaneTitle,
     contentHtml: citationPaneText,

package/lib/cjs/components/webchatcontainerstateful/common/DesignerChatAdapter.js

@@ -59,6 +59,16 @@ let DesignerChatAdapter = /*#__PURE__*/function (_MockAdapter) {
       if (msg.text) {
         if (msg.suggestedActions) {
           (0, _chatAdapterUtils.postAgentSuggestedActionsActivity)(this.activityObserver, msg.text, msg.suggestedActions, index * 100);
+        } else if (msg.from && msg.from.role) {
+          // Route caller-supplied `from` through the shared
+          // postBotMessageActivity helper so the activity shape
+          // (id, channelData.tags, timestamp, type) matches every
+          // other designer-mode path and downstream middleware
+          // (localizedStringsBotInitialsMiddleware, telemetry,
+          // attachment plumbing) behaves identically. The override
+          // narrows only the fields the caller cares about (e.g.
+          // from.name / from.role) — base botUser fields remain.
+          (0, _chatAdapterUtils.postBotMessageActivity)(this.activityObserver, msg.text, undefined, index * 100, msg.from);
         } else {
           (0, _chatAdapterUtils.postBotMessageActivity)(this.activityObserver, msg.text, undefined, index * 100);
         }

package/lib/cjs/components/webchatcontainerstateful/common/defaultProps/defaultWebChatContainerStatefulProps.js

@@ -20,6 +20,7 @@ const defaultWebChatContainerStatefulProps = {
   honorsTargetInHTMLLinks: false,
   hyperlinkTextOverride: false,
   directLine: new _mockadapter.default(),
-  adaptiveCardStyles: _defaultAdaptiveCardStyles.defaultAdaptiveCardStyles
+  adaptiveCardStyles: _defaultAdaptiveCardStyles.defaultAdaptiveCardStyles,
+  webChatNotificationRegionAccessibilityLabel: "Chat notifications"
 };
 exports.defaultWebChatContainerStatefulProps = defaultWebChatContainerStatefulProps;

package/lib/cjs/components/webchatcontainerstateful/common/utils/chatAdapterUtils.js

@@ -44,11 +44,13 @@ exports.postEchoActivity = postEchoActivity;
 const postBotMessageActivity = function (activityObserver, text) {
   let tags = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : "";
   let delay = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : 1000;
+  let fromOverride = arguments.length > 4 ? arguments[4] : undefined;
   setTimeout(() => {
     activityObserver === null || activityObserver === void 0 ? void 0 : activityObserver.next({
       id: (0, _omnichannelChatSdk.uuidv4)(),
       from: {
-        ...botUser
+        ...botUser,
+        ...(fromOverride ?? {})
       },
       text,
       type: "message",

package/lib/cjs/components/webchatcontainerstateful/webchatcontroller/middlewares/renderingmiddlewares/activityMiddleware.js

@@ -32,13 +32,9 @@ function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj &&
 
 const loggedSystemMessages = new Array();
 let lastRenderedAt = 0; // Track last rendered receivedAt timestamp for deduplication
-// Cache original (pre-render) text per activity ID to prevent exponential <br> growth.
-// BotFramework WebChat can mutate card.activity.text between renders (e.g. on minimize/open),
-// so we always render from the original markdown source, not the possibly-HTML-mutated text.
-const originalSystemMessageTexts = new Map();
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 const handleSystemMessage = (next, args, card, renderMarkdown, systemMessageStyleProps) => {
-  var _card$activity, _card$activity$channe, _card$activity$channe2, _card$activity2, _card$activity2$chann, _card$activity3, _card$activity3$chann, _card$activity3$chann2, _card$activity4, _card$activity4$chann, _card$activity5, _card$activity5$chann, _card$nextVisibleActi, _card$nextVisibleActi2, _card$activity6, _card$activity6$chann, _card$activity7, _card$nextVisibleActi3, _card$activity8, _card$activity9, _card$activity9$chann;
+  var _card$activity, _card$activity$channe, _card$activity$channe2, _card$activity2, _card$activity2$chann, _card$activity3, _card$activity3$chann, _card$activity3$chann2, _card$activity4, _card$activity4$chann, _card$activity5, _card$activity5$chann, _card$nextVisibleActi, _card$nextVisibleActi2, _card$activity6, _card$activity6$chann, _card$activity7, _card$nextVisibleActi3, _card$activity8;
   const systemMessageStyles = {
     ..._defaultSystemMessageStyles.defaultSystemMessageStyles,
     ...systemMessageStyleProps
@@ -60,14 +56,16 @@ const handleSystemMessage = (next, args, card, renderMarkdown, systemMessageStyl
   if ((_card$activity5 = card.activity) !== null && _card$activity5 !== void 0 && (_card$activity5$chann = _card$activity5.channelData) !== null && _card$activity5$chann !== void 0 && _card$activity5$chann.clientmessageid && ((_card$nextVisibleActi = card.nextVisibleActivity) === null || _card$nextVisibleActi === void 0 ? void 0 : (_card$nextVisibleActi2 = _card$nextVisibleActi.channelData) === null || _card$nextVisibleActi2 === void 0 ? void 0 : _card$nextVisibleActi2.clientmessageid) === ((_card$activity6 = card.activity) === null || _card$activity6 === void 0 ? void 0 : (_card$activity6$chann = _card$activity6.channelData) === null || _card$activity6$chann === void 0 ? void 0 : _card$activity6$chann.clientmessageid) || (_card$activity7 = card.activity) !== null && _card$activity7 !== void 0 && _card$activity7.messageid && ((_card$nextVisibleActi3 = card.nextVisibleActivity) === null || _card$nextVisibleActi3 === void 0 ? void 0 : _card$nextVisibleActi3.messageid) === ((_card$activity8 = card.activity) === null || _card$activity8 === void 0 ? void 0 : _card$activity8.messageid)) {
     return () => false;
   }
-  const activityKey = card.activity.id || ((_card$activity9 = card.activity) === null || _card$activity9 === void 0 ? void 0 : (_card$activity9$chann = _card$activity9.channelData) === null || _card$activity9$chann === void 0 ? void 0 : _card$activity9$chann.clientmessageid);
-  if (activityKey && !originalSystemMessageTexts.has(activityKey)) {
-    originalSystemMessageTexts.set(activityKey, card.activity.text);
-  }
-  const sourceText = (activityKey && originalSystemMessageTexts.get(activityKey)) ?? card.activity.text;
+
+  // Render latest text on every pass. We deliberately do NOT cache the pre-render text
+  // (removed post-PR #895), because:
+  //  1. card.activity.text is no longer mutated (renderedHtml is a local variable), so
+  //     exponential <br> growth from repeated markdown rendering is not possible.
+  //  2. Caching the first-seen text prevents edited system messages (same id, updated
+  //     text/version) from ever re-rendering with the latest content.
   // renderMarkdown sanitizes the HTML using DOMPurify with allowlist-based configuration
   // See initWebChatComposer.ts for sanitization details
-  const renderedHtml = renderMarkdown(sourceText);
+  const renderedHtml = renderMarkdown(card.activity.text);
   // eslint-disable-next-line react/display-name
   return () => /*#__PURE__*/_react.default.createElement("div", {
     key: card.activity.id,
@@ -108,12 +106,12 @@ const createActivityMiddleware = (renderMarkdown, systemMessageStyleProps, userM
       return handleSystemMessage(next, args, card, renderMarkdown, systemMessageStyleProps);
     }
     if (isTagIncluded(card, _Constants.Constants.persistentChatHistoryMessagePullTriggerTag)) {
-      var _card$activity10, _card$activity10$chan, _card$activity10$chan2;
+      var _card$activity9, _card$activity9$chann, _card$activity9$chann2;
       // Safety check: if this is a new chat session and flag is false, auto-correct it
       if (!_LazyLoadActivity.LazyLoadHandler.hasMoreHistoryAvailable) {
         _LazyLoadActivity.LazyLoadHandler.setHasMoreHistoryAvailable(true);
       }
-      const receivedAt = card === null || card === void 0 ? void 0 : (_card$activity10 = card.activity) === null || _card$activity10 === void 0 ? void 0 : (_card$activity10$chan = _card$activity10.channelData) === null || _card$activity10$chan === void 0 ? void 0 : (_card$activity10$chan2 = _card$activity10$chan.webChat) === null || _card$activity10$chan2 === void 0 ? void 0 : _card$activity10$chan2.receivedAt;
+      const receivedAt = card === null || card === void 0 ? void 0 : (_card$activity9 = card.activity) === null || _card$activity9 === void 0 ? void 0 : (_card$activity9$chann = _card$activity9.channelData) === null || _card$activity9$chann === void 0 ? void 0 : (_card$activity9$chann2 = _card$activity9$chann.webChat) === null || _card$activity9$chann2 === void 0 ? void 0 : _card$activity9$chann2.receivedAt;
       if (receivedAt < lastRenderedAt) {
         card.activity = null;
         return () => false;
@@ -174,6 +172,5 @@ exports.createActivityMiddleware = createActivityMiddleware;
 const resetActivityMiddlewareCache = () => {
   loggedSystemMessages.length = 0;
   lastRenderedAt = 0;
-  originalSystemMessageTexts.clear();
 };
 exports.resetActivityMiddlewareCache = resetActivityMiddlewareCache;

package/lib/cjs/components/webchatcontainerstateful/webchatcontroller/middlewares/renderingmiddlewares/attachments/AdaptiveCardAccessibilityWrapper.js

@@ -32,6 +32,56 @@ const AdaptiveCardAccessibilityWrapper = _ref => {
       const container = containerRef.current;
       if (!container) return;
 
+      // dropdown-double-label: compact Input.ChoiceSet renders as a native
+      // <select> with both aria-labelledby and a sibling visible <label for>.
+      // Only remove aria-labelledby when it points solely at that same visible
+      // label; preserve composite labels that include required/error/context text.
+      const compactSelects = container.querySelectorAll(".ac-input-container select.ac-input.ac-multichoiceInput[aria-labelledby]");
+      compactSelects.forEach(select => {
+        const id = select.id;
+        if (!id) return;
+        const visibleLabel = container.querySelector(`label[for="${CSS.escape(id)}"]:not([aria-hidden='true'])`);
+        const labelledBy = (select.getAttribute("aria-labelledby") || "").trim().split(/\s+/);
+        if (visibleLabel !== null && visibleLabel !== void 0 && visibleLabel.id && labelledBy.length === 1 && labelledBy[0] === visibleLabel.id) {
+          select.removeAttribute("aria-labelledby");
+        }
+      });
+
+      // internal tracking: non-radio inputs (Input.Text including
+      // isMultiline=true which renders as <textarea>, Input.Date,
+      // Input.Number, Input.Toggle, Input.ChoiceSet multi-select
+      // checkbox) rendered by adaptivecards can have THREE accessible-
+      // name sources resolving to the same string: a visible
+      // <label for>, aria-label, AND aria-labelledby. TalkBack walks
+      // each accessibility node independently and reads the duplicated
+      // name. When a visible <label for> exists and names the control,
+      // strip the redundant aria-label / aria-labelledby on the input
+      // so only one announceable source remains.
+      const labelledInputs = container.querySelectorAll(".ac-input-container input.ac-input[id]:not([type='radio']), .ac-input-container textarea.ac-input[id]");
+      labelledInputs.forEach(input => {
+        const id = input.id;
+        if (!id) return;
+        const visibleLabel = container.querySelector(`label[for="${CSS.escape(id)}"]:not([aria-hidden='true'])`);
+        if (!visibleLabel) return;
+        const labelText = (visibleLabel.textContent || "").trim();
+        if (!labelText) return;
+        const ariaLabel = input.getAttribute("aria-label");
+        if (ariaLabel && ariaLabel.trim() === labelText) {
+          input.removeAttribute("aria-label");
+        }
+        const labelledBy = (input.getAttribute("aria-labelledby") || "").trim();
+        if (labelledBy) {
+          const ids = labelledBy.split(/\s+/);
+          const resolved = ids.map(rid => {
+            var _document$getElementB;
+            return (((_document$getElementB = document.getElementById(rid)) === null || _document$getElementB === void 0 ? void 0 : _document$getElementB.textContent) || "").trim();
+          }).filter(Boolean).join(" ");
+          if (resolved === labelText) {
+            input.removeAttribute("aria-labelledby");
+          }
+        }
+      });
+
       // action-button-toggle / login-button-toggle: submit/login action buttons can be
       // rendered with toggle-only ARIA that causes screen readers to announce them as
       // switches instead of plain push buttons. Preserve Action.ToggleVisibility buttons,