amalgm 0.1.97 → 0.1.98

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "amalgm",
-  "version": "0.1.97",
+  "version": "0.1.98",
   "description": "Amalgm local computer runtime: login, MCP, chat, events, previews, and tunnels.",
   "license": "UNLICENSED",
   "private": false,

package/runtime/scripts/amalgm-mcp/fs/rest.js

@@ -317,6 +317,18 @@ function inlineFilename(targetPath) {
   return path.basename(targetPath).replace(/["\\\r\n]/g, '_') || 'file';
 }
 
+function contentDispositionInline(targetPath) {
+  const name = inlineFilename(targetPath);
+  // Header values must be ISO-8859-1; non-ASCII names (e.g. the narrow
+  // no-break space in macOS screenshot names) make res.writeHead throw.
+  // ASCII fallback plus RFC 5987 filename* carries the real name.
+  const asciiFallback = name.replace(/[^\x20-\x7e]/g, '_');
+  if (asciiFallback === name) {
+    return `inline; filename="${name}"`;
+  }
+  return `inline; filename="${asciiFallback}"; filename*=UTF-8''${encodeURIComponent(name)}`;
+}
+
 function sendContentError(res, statusCode, message) {
   if (!res.headersSent) {
     res.writeHead(statusCode, { 'Content-Type': 'application/json' });
@@ -605,7 +617,7 @@ async function handleContent(query, req, res) {
     const baseHeaders = {
       'Accept-Ranges': 'bytes',
       'Cache-Control': 'no-store',
-      'Content-Disposition': `inline; filename="${inlineFilename(targetPath)}"`,
+      'Content-Disposition': contentDispositionInline(targetPath),
       'Content-Type': mimeTypeForPath(targetPath),
     };
     const range = parseByteRange(req.headers.range, totalSize);