envoy_ai 0.0.1 → 0.0.3

data/app/assets/stylesheets/envoy/console.css

@@ -1,3 +1,17 @@
+/* Console chrome only. The reusable chat rules live in chat.css so a host can
+ * load them without inheriting body-level styling.
+ *
+ * url(), not a bare string: Propshaft only fingerprints CSS url(...)
+ * references (lib/propshaft/compiler/css_asset_urls.rb), not @import
+ * strings. A plain `@import "chat.css"` would ship the literal, undigested
+ * filename straight into the served CSS, and Propshaft's asset server 404s
+ * on undigested paths -- so the browser would silently never load chat.css.
+ * The path is relative to this file's own directory (both live in
+ * app/assets/stylesheets/envoy/), which is what the compiler's resolver
+ * expects.
+ */
+@import url("chat.css");
+
 /*
  * Envoy debug console — self-contained stylesheet.
  *
@@ -23,6 +37,23 @@
   --envoy-btn-ink: #ffffff;
   --envoy-danger: #b91c1c;
   --envoy-header-bg: rgba(255, 255, 255, 0.8);
+
+  /* chat.css's public vars (see its header comment). These mirror the
+   * console-only names above one-for-one -- chat.css was split out of this
+   * file and renamed its custom properties in the process, so without these
+   * the chat rules fall back to chat.css's own light-mode literals even
+   * under `prefers-color-scheme: dark` below. --envoy-radius is deliberately
+   * NOT defined: pre-split, radius was hardcoded per rule (0.5rem for
+   * .envoy-msg, 0.375rem everywhere else) rather than themed, so a single
+   * value here would change one or the other instead of leaving both as
+   * they were. Radius doesn't vary with color scheme, so it needs no dark
+   * override either.
+   */
+  --envoy-line: #e5e7eb;         /* = --envoy-border */
+  --envoy-subtle: #6b7280;       /* = --envoy-muted */
+  --envoy-accent: #111827;       /* = --envoy-btn-bg */
+  --envoy-accent-ink: #ffffff;   /* = --envoy-btn-ink */
+  --envoy-warn: #b91c1c;         /* = --envoy-danger (same in both schemes) */
 }
 
 @media (prefers-color-scheme: dark) {
@@ -38,7 +69,25 @@
     --envoy-btn-bg: #f3f4f6;
     --envoy-btn-ink: #111827;
     --envoy-header-bg: rgba(17, 24, 39, 0.8);
+
+    --envoy-line: #374151;       /* = --envoy-border (dark) */
+    --envoy-subtle: #9ca3af;     /* = --envoy-muted (dark) */
+    --envoy-accent: #f3f4f6;     /* = --envoy-btn-bg (dark) */
+    --envoy-accent-ink: #111827; /* = --envoy-btn-ink (dark) */
+    /* --envoy-warn is not redefined here: --envoy-danger, its predecessor,
+     * was never overridden for dark mode either, so it keeps its light
+     * value in both schemes. */
   }
+
+  /* --envoy-surface-alt has two distinct pre-split predecessors --
+   * --envoy-surface-assistant for chat bubbles, --envoy-surface-muted for
+   * tool panels -- that chat.css's rename collapsed into one property (see
+   * its differing per-rule fallbacks, #eff6ff vs #f9fafb). One :root value
+   * can't restore both original colors at once, so scope the override to
+   * each element that chat.css actually uses it on instead.
+   */
+  .envoy-msg--assistant { --envoy-surface-alt: #1f2937; } /* = --envoy-surface-assistant (dark) */
+  .envoy-tool { --envoy-surface-alt: #111827; }            /* = --envoy-surface-muted (dark) */
 }
 
 /* ---------------------------------------------------------------------- */
@@ -141,174 +190,10 @@ body.envoy-body {
 .envoy-mb-4 { margin-bottom: 1rem; }
 .envoy-mt-4 { margin-top: 1rem; }
 
-.envoy-stack > * + * { margin-top: 1rem; }
-.envoy-stack--sm > * + * { margin-top: 0.75rem; }
-
-/* ---------------------------------------------------------------------- */
-/* Messages                                                               */
-/* ---------------------------------------------------------------------- */
-
-.envoy-msg {
-  border: 1px solid var(--envoy-border);
-  border-radius: 0.5rem;
-  padding: 1rem;
-  background: var(--envoy-surface);
-}
-.envoy-msg--assistant { background: var(--envoy-surface-assistant); }
-
-.envoy-msg__role {
-  font-size: 0.75rem;
-  text-transform: uppercase;
-  color: var(--envoy-muted);
-  margin-bottom: 0.25rem;
-}
-
-/* Subtle "working…" shimmer while a reply is being generated. */
-.envoy-working { animation: envoy-working 1.4s ease-in-out infinite; }
-@keyframes envoy-working {
-  0%, 100% { opacity: 0.4; }
-  50%      { opacity: 0.95; }
-}
-@media (prefers-reduced-motion: reduce) {
-  .envoy-working { animation: none; opacity: 0.7; }
-}
-
-/* ---------------------------------------------------------------------- */
-/* Rendered markdown body                                                 */
-/* ---------------------------------------------------------------------- */
-
-.envoy-md { font-size: 0.9rem; line-height: 1.6; }
-.envoy-md > * + * { margin-top: 0.7rem; }
-.envoy-md h1 { font-size: 1.3em; font-weight: 700; }
-.envoy-md h2 { font-size: 1.15em; font-weight: 700; }
-.envoy-md h3, .envoy-md h4 { font-size: 1em; font-weight: 700; }
-.envoy-md ul { padding-left: 1.25rem; list-style: disc; }
-.envoy-md ol { padding-left: 1.25rem; list-style: decimal; }
-.envoy-md li + li { margin-top: 0.2rem; }
-.envoy-md a { text-decoration: underline; }
-.envoy-md blockquote { border-left: 3px solid rgba(128, 128, 128, 0.4); padding-left: 0.75rem; }
-.envoy-md hr { border: 0; border-top: 1px solid rgba(128, 128, 128, 0.3); }
-/* Fenced code (comrak carries its own dark background + inline styles). */
-.envoy-md pre { padding: 0.75rem 1rem; border-radius: 0.5rem; }
-/* Inline code gets a subtle theme-agnostic chip. */
-.envoy-md :not(pre) > code {
-  font-size: 0.9em;
-  overflow-wrap: anywhere;
-  background: rgba(128, 128, 128, 0.15);
-  padding: 0.1em 0.3em;
-  border-radius: 0.25rem;
-}
-
-/* Code blocks scroll within the message instead of spilling past it, with a
-   thin, theme-agnostic overlay scrollbar (mid-gray at 50% reads on both the
-   light tool-call panels and the dark highlighted blocks). */
-#envoy_messages pre {
-  overflow-x: auto;
-  max-width: 100%;
-  scrollbar-width: thin;
-  scrollbar-color: rgba(128, 128, 128, 0.5) transparent;
-}
-#envoy_messages pre::-webkit-scrollbar { height: 8px; }
-#envoy_messages pre::-webkit-scrollbar-track { background: transparent; }
-#envoy_messages pre::-webkit-scrollbar-thumb {
-  background: rgba(128, 128, 128, 0.5);
-  border-radius: 9999px;
-}
-#envoy_messages pre::-webkit-scrollbar-thumb:hover { background: rgba(128, 128, 128, 0.8); }
-
-/* ---------------------------------------------------------------------- */
-/* Tool calls                                                             */
-/* ---------------------------------------------------------------------- */
-
-.envoy-tool {
-  margin-top: 0.5rem;
-  font-size: 0.875rem;
-  border: 1px solid var(--envoy-border);
-  border-radius: 0.375rem;
-  padding: 0.5rem;
-  background: var(--envoy-surface-muted);
-}
-
-.envoy-tool__summary {
-  cursor: pointer;
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-}
-
-.envoy-tool pre {
-  font-size: 0.75rem;
-  margin-top: 0.5rem;
-  overflow-x: auto;
-  max-width: 100%;
-}
-
-.envoy-mono {
-  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
-}
-
-/* Tool-call outcome badge (rendered by Envoy::Badges.outcome). Colors match
-   the original Tailwind red-100/amber-100/green-100 pairs; intentionally
-   scheme-independent, as the original badge had no dark variant. */
-.envoy-badge {
-  display: inline-block;
-  font-size: 0.75rem;
-  padding: 0.125rem 0.5rem;
-  border-radius: 0.375rem;
-  font-weight: 500;
-}
-.envoy-badge--ok     { background: #dcfce7; color: #166534; }
-.envoy-badge--failed { background: #fef3c7; color: #92400e; }
-.envoy-badge--denied { background: #fee2e2; color: #991b1b; }
-
-/* ---------------------------------------------------------------------- */
-/* Composer                                                               */
-/* ---------------------------------------------------------------------- */
-
-.envoy-composer {
-  display: flex;
-  gap: 0.5rem;
-  align-items: flex-end;
-}
-
-.envoy-input {
-  flex: 1;
-  border: 1px solid var(--envoy-border);
-  border-radius: 0.375rem;
-  padding: 0.5rem;
-  background: var(--envoy-surface);
-  color: var(--envoy-ink);
-}
-.envoy-input::placeholder { color: var(--envoy-muted); opacity: 1; }
-
-.envoy-hint {
-  font-size: 0.75rem;
-  color: var(--envoy-muted);
-  margin-top: 0.25rem;
-}
-
 /* ---------------------------------------------------------------------- */
-/* Buttons / links                                                        */
+/* Links                                                                  */
 /* ---------------------------------------------------------------------- */
 
-.envoy-btn {
-  padding: 0.375rem 0.75rem;
-  border-radius: 0.375rem;
-  background: var(--envoy-btn-bg);
-  color: var(--envoy-btn-ink);
-  border: 0;
-  cursor: pointer;
-  text-decoration: none;
-  display: inline-block;
-  flex-shrink: 0;
-  font: inherit;
-}
-.envoy-btn--secondary {
-  background: transparent;
-  color: inherit;
-  border: 1px solid var(--envoy-border);
-}
-
 .envoy-link {
   color: var(--envoy-link);
   text-decoration: none;
@@ -350,12 +235,6 @@ body.envoy-body {
   font-size: 0.875rem;
 }
 
-.envoy-error {
-  color: var(--envoy-danger);
-  font-size: 0.875rem;
-  margin-bottom: 0.75rem;
-}
-
 .envoy-prose-box {
   border: 1px solid var(--envoy-border);
   border-radius: 0.375rem;
@@ -364,8 +243,3 @@ body.envoy-body {
   white-space: pre-wrap;
   font-size: 0.875rem;
 }
-
-.envoy-muted {
-  color: var(--envoy-muted);
-  font-size: 0.875rem;
-}

data/app/controllers/envoy/conversations_controller.rb

@@ -13,9 +13,6 @@ module Envoy
       @conversation.actor = envoy_current_actor
       @conversation.model_id ||= Envoy.config.default_model
       @conversation.provider = Envoy.config.provider.to_s
-      if (pid = params.dig(:conversation, :system_prompt_id)).present?
-        @conversation.system_prompt_version = Envoy::SystemPrompt.find(pid).latest_version
-      end
       if @conversation.save
         redirect_to conversation_path(@conversation)
       else
@@ -30,7 +27,7 @@ module Envoy
     private
 
     def conversation_params
-      params.require(:conversation).permit(:title, :model_id, :toolset_key, :system_prompt)
+      params.require(:conversation).permit(:title, :model_id, :toolset_key, :system_prompt, :prompt_key)
     end
   end
 end

data/app/controllers/envoy/panels_controller.rb

@@ -0,0 +1,30 @@
+module Envoy
+  class PanelsController < ApplicationController
+    # POST, not GET behind a lazy frame: this creates a record. The semantics
+    # genuinely are "create or resume", so one path serves open and reopen and a
+    # reopen always re-fetches a current transcript.
+    def create
+      surface = Envoy.surface(params.require(:surface))
+      conversation = find_or_resume(surface)
+      render partial: "envoy/panels/panel", locals: { conversation: conversation }
+    rescue Envoy::UnknownSurface
+      # surface and context_key arrive from the browser; only registered
+      # surfaces are addressable. Whether this ACTOR may see this SUBJECT is the
+      # surface's context block to enforce.
+      head :not_found
+    end
+
+    private
+
+    def find_or_resume(surface)
+      Conversation.find_or_create_by!(
+        actor: envoy_current_actor,
+        surface_key: surface.key,
+        context_key: params[:context_key].presence
+      ) do |conversation|
+        conversation.provider = Envoy.config.provider.to_s
+        conversation.model_id = surface.model_id || Envoy.config.default_model
+      end
+    end
+  end
+end

data/app/javascript/envoy/controllers/autoscroll_controller.js

@@ -1,46 +1,40 @@
 import { Controller } from "@hotwired/stimulus"
 
-// Wraps the message region. Keeps the window scrolled to the newest content as
-// it streams in. If the user scrolls away from the bottom, autoscroll pauses;
-// it resumes when they scroll back to the bottom or send a new message.
+// Sticks the transcript to the bottom as messages stream in, unless the reader
+// has scrolled up to read back.
+//
+// Scrolls its own log container rather than the window: in an embedded panel
+// the window is the host page, so scrolling it jumps the page the user is
+// reading AND never moves the panel.
 export default class extends Controller {
-  connect() {
-    this.stick = true
-
-    // Content changes (appends + streaming replaces) trigger a scroll-to-bottom.
-    this.observer = new MutationObserver(() => {
-      if (this.stick) this.toBottom()
-    })
-    this.observer.observe(this.element, {
-      childList: true, subtree: true, characterData: true
-    })
-
-    // wheel/touch are unambiguously user-initiated (our own scrollTo doesn't
-    // fire them), so use them to decide whether to keep sticking to the bottom.
-    this.onUserScroll = () => { this.stick = this.atBottom() }
-    window.addEventListener("wheel", this.onUserScroll, { passive: true })
-    window.addEventListener("touchmove", this.onUserScroll, { passive: true })
+  static targets = ["log"]
 
-    // A new message re-enables autoscroll for that response.
-    this.onSubmit = () => { this.stick = true; this.toBottom() }
-    document.addEventListener("turbo:submit-end", this.onSubmit)
-
-    this.toBottom()
+  connect() {
+    this.observer = new MutationObserver(() => this.stick())
+    this.observer.observe(this.scroller, { childList: true, subtree: true, characterData: true })
+    this.scrollToBottom()
   }
 
   disconnect() {
     this.observer?.disconnect()
-    window.removeEventListener("wheel", this.onUserScroll)
-    window.removeEventListener("touchmove", this.onUserScroll)
-    document.removeEventListener("turbo:submit-end", this.onSubmit)
   }
 
-  atBottom() {
-    const doc = document.documentElement
-    return window.innerHeight + window.scrollY >= doc.scrollHeight - 48
+  stick() {
+    if (this.atBottom) this.scrollToBottom()
+  }
+
+  scrollToBottom() {
+    this.scroller.scrollTop = this.scroller.scrollHeight
+  }
+
+  // A tolerance, because a streaming reply grows under the reader; without it
+  // one stray pixel would strand them mid-transcript for the rest of the turn.
+  get atBottom() {
+    const { scrollTop, clientHeight, scrollHeight } = this.scroller
+    return scrollHeight - (scrollTop + clientHeight) < 48
   }
 
-  toBottom() {
-    window.scrollTo({ top: document.documentElement.scrollHeight })
+  get scroller() {
+    return this.hasLogTarget ? this.logTarget : this.element
   }
 }

data/app/jobs/envoy/run_job.rb

@@ -1,6 +1,12 @@
 module Envoy
   class RunJob < ApplicationJob
-    STREAM_TARGET = "envoy_streaming_reply"
+    extend ActionView::RecordIdentifier
+
+    # Scoped per conversation: a flat constant meant two panels — or a panel and
+    # a console tab — would fight over the same target on one page.
+    def self.stream_target(conversation)
+      dom_id(conversation, :streaming)
+    end
 
     # GlobalID serialization of the Conversation (and its polymorphic actor)
     # is handled by ActiveJob automatically.
@@ -14,6 +20,12 @@ module Envoy
         stream(conversation, event)
       end
       finalize(conversation)
+    rescue StandardError
+      # Without this the panel sits on "working…" forever: nothing else ever
+      # replaces the streaming target. Re-raise so the queue still records the
+      # failure and any retry policy applies.
+      broadcast_error(conversation)
+      raise
     end
 
     private
@@ -28,9 +40,9 @@ module Envoy
       @streamed << payload.to_s
       Turbo::StreamsChannel.broadcast_replace_to(
         conversation, "messages",
-        target: STREAM_TARGET,
+        target: self.class.stream_target(conversation),
         partial: "envoy/messages/streaming",
-        locals: { content: @streamed }
+        locals: { content: @streamed, conversation: conversation }
       )
     end
 
@@ -44,7 +56,7 @@ module Envoy
 
       Turbo::StreamsChannel.broadcast_replace_to(
         conversation, "messages",
-        target: STREAM_TARGET,
+        target: self.class.stream_target(conversation),
         partial: "envoy/messages/message",
         collection: messages,
         as: :message
@@ -61,5 +73,14 @@ module Envoy
       scope = scope.where("id > ?", last_user_id) if last_user_id
       scope.to_a
     end
+
+    def broadcast_error(conversation)
+      Turbo::StreamsChannel.broadcast_replace_to(
+        conversation, "messages",
+        target: self.class.stream_target(conversation),
+        partial: "envoy/messages/error",
+        locals: { conversation: conversation }
+      )
+    end
   end
 end

data/app/models/envoy/conversation.rb

@@ -3,18 +3,45 @@ module Envoy
     acts_as_chat message_class: "Envoy::Message", tool_call_class: "Envoy::ToolCall"
 
     belongs_to :actor, polymorphic: true
-    belongs_to :system_prompt_version, class_name: "Envoy::SystemPromptVersion", optional: true
 
-    validates :model_id, :toolset_key, presence: true
+    validates :model_id, presence: true
+    validate :toolset_or_surface_present
+
+    # Embed conversations resolve everything through their surface, so editing a
+    # surface reaches chats that already exist. Console conversations have no
+    # surface and fall back to their own columns.
+    def surface
+      surface_key.present? ? Envoy.surface(surface_key) : nil
+    end
 
     def toolset
-      Envoy.toolset(toolset_key)
+      Envoy.toolset(surface&.toolset_key || toolset_key)
+    end
+
+    def resolved_model_id
+      surface&.model_id || model_id || Envoy.config.default_model
+    end
+
+    def prompt_body
+      return surface.prompt_body if surface
+      prompt_key.present? ? Envoy.prompt(prompt_key).full_body : nil
     end
 
-    # Version body (if pinned) is primary; custom text (if any) is appended as
-    # chat-specific context. Either stands alone; both compose; neither -> nil.
+    # A surface may pin a chat read-only; so may the conversation's own status.
+    def read_only?
+      status == "read_only" || !!surface&.read_only?
+    end
+
+    # Per-conversation ad-hoc instructions, appended last by Runner.
     def effective_system_prompt
-      [ system_prompt_version&.body, system_prompt ].compact_blank.join("\n\n").presence
+      system_prompt.presence
+    end
+
+    private
+
+    def toolset_or_surface_present
+      return if toolset_key.present? || surface_key.present?
+      errors.add(:base, "toolset_key or surface_key must be present")
     end
   end
 end

data/app/views/envoy/conversations/_composer_input.html.erb

@@ -1,4 +1,4 @@
 <%= text_area_tag "message[content]", nil,
-      id: "envoy_composer_input", rows: 2, autofocus: true,
+      id: dom_id(conversation, :composer), rows: 2, autofocus: true,
       class: "envoy-input",
       data: { controller: "envoy-composer", action: "keydown.enter->envoy-composer#submit" } %>

data/app/views/envoy/conversations/index.html.erb

@@ -1,8 +1,6 @@
 <div class="envoy-header-row envoy-mb-4">
   <h1 class="envoy-title">Envoy chats</h1>
   <div class="envoy-btn-group">
-    <%= link_to "System prompts", system_prompts_path,
-          class: "envoy-btn envoy-btn--secondary" %>
     <%= link_to "New chat", new_conversation_path,
           class: "envoy-btn" %>
   </div>

data/app/views/envoy/conversations/new.html.erb

@@ -5,14 +5,8 @@
     <%= f.text_field :title, placeholder: "Title (optional)", class: field %>
     <%= f.select :toolset_key, Envoy.toolsets.keys, {}, class: field %>
     <%= f.select :model_id, Envoy.config.available_models, {}, class: field %>
-    <div>
-      <label class="envoy-label">Saved system prompt</label>
-      <%= select_tag "conversation[system_prompt_id]",
-            options_for_select([["None", ""]] + Envoy::SystemPrompt.order(:name).map { |p| [p.name, p.id] }),
-            class: field %>
-    </div>
     <%= f.text_area :system_prompt, rows: 4,
-          placeholder: "Additional instructions (optional) — appended to the selected saved prompt, or used alone as a custom prompt",
+          placeholder: "Additional instructions (optional)",
           class: field %>
     <%= f.submit "Start", class: "envoy-btn" %>
   </div>

data/app/views/envoy/conversations/show.html.erb

@@ -1,18 +1,2 @@
-<%= turbo_stream_from @conversation, "messages" %>
 <h1 class="envoy-title--sm envoy-mb-3"><%= @conversation.title.presence || "Chat ##{@conversation.id}" %></h1>
-
-<div data-controller="envoy-autoscroll">
-  <div id="envoy_messages" class="envoy-stack envoy-mb-4">
-    <% @conversation.messages.where(role: %w[user assistant]).each do |message| %>
-      <%= render "envoy/messages/message", message: message %>
-    <% end %>
-  </div>
-</div>
-
-<%= form_with url: conversation_messages_path(@conversation), method: :post do |f| %>
-  <div class="envoy-composer">
-    <%= render "envoy/conversations/composer_input" %>
-    <%= f.submit "Send", class: "envoy-btn" %>
-  </div>
-  <p class="envoy-hint">Enter to send · Shift/Option+Enter for a new line</p>
-<% end %>
+<%= render "envoy/panels/transcript", conversation: @conversation %>

data/app/views/envoy/messages/_error.html.erb

@@ -0,0 +1,6 @@
+<div id="<%= Envoy::RunJob.stream_target(conversation) %>">
+  <div class="envoy-msg envoy-msg--assistant envoy-error">
+    <div class="envoy-msg__role">assistant</div>
+    <div class="envoy-md">Something went wrong on my side — your message was not answered. Try again.</div>
+  </div>
+</div>

data/app/views/envoy/messages/_streaming.html.erb

@@ -1,4 +1,4 @@
-<div id="envoy_streaming_reply">
+<div id="<%= Envoy::RunJob.stream_target(conversation) %>">
   <div class="envoy-msg envoy-msg--assistant">
     <div class="envoy-msg__role">assistant</div>
     <div class="envoy-md"><%= Envoy::Markdown.render(content) %></div>

data/app/views/envoy/messages/create.turbo_stream.erb

@@ -1,7 +1,7 @@
 <%# Append the user message, then a fresh streaming target — both into the ordered
     message list so the assistant reply commits in place and the next turn appends
     after it (fixes cross-turn ordering). %>
-<%= turbo_stream.append "envoy_messages" do %>
+<%= turbo_stream.append dom_id(@conversation, :messages) do %>
   <div class="envoy-msg">
     <div class="envoy-msg__role">user</div>
     <div class="envoy-md"><%= Envoy::Markdown.render(@user_content) %></div>
@@ -10,8 +10,8 @@
 <%# The streaming target starts with a subtle "working…" indicator so there is a
     live sign of activity before the first token (e.g. during tool calls, which
     emit no text deltas). The first delta / finalize replaces this. %>
-<%= turbo_stream.append "envoy_messages" do %>
-  <div id="envoy_streaming_reply">
+<%= turbo_stream.append dom_id(@conversation, :messages) do %>
+  <div id="<%= Envoy::RunJob.stream_target(@conversation) %>">
     <div class="envoy-msg envoy-msg--assistant">
       <div class="envoy-msg__role">assistant</div>
       <div class="envoy-working envoy-muted">working…</div>
@@ -20,6 +20,6 @@
 <% end %>
 <%# Clear the composer by replacing it with a fresh, empty textarea (server-driven,
     so it works even if the Stimulus controller didn't load). %>
-<%= turbo_stream.replace "envoy_composer_input" do %>
-  <%= render "envoy/conversations/composer_input" %>
+<%= turbo_stream.replace dom_id(@conversation, :composer) do %>
+  <%= render "envoy/conversations/composer_input", conversation: @conversation %>
 <% end %>

data/app/views/envoy/panels/_panel.html.erb

@@ -0,0 +1,3 @@
+<%= turbo_frame_tag "envoy_panel" do %>
+  <%= render "envoy/panels/transcript", conversation: conversation %>
+<% end %>

data/app/views/envoy/panels/_transcript.html.erb

@@ -0,0 +1,21 @@
+<%# The single definition of a chat transcript, used by both the embedded panel
+    and the full-page console. Ids are conversation-scoped so more than one may
+    live on a page. Styling is CSS-var driven — the host owns the chrome. %>
+<%= turbo_stream_from conversation, "messages" %>
+
+<div class="envoy-chat" data-controller="envoy-autoscroll">
+  <div id="<%= dom_id(conversation, :messages) %>" class="envoy-stack envoy-chat__log"
+       data-envoy-autoscroll-target="log">
+    <% conversation.messages.where(role: %w[user assistant]).each do |message| %>
+      <%= render "envoy/messages/message", message: message %>
+    <% end %>
+  </div>
+
+  <%= form_with url: conversation_messages_path(conversation), method: :post do |f| %>
+    <div class="envoy-composer">
+      <%= render "envoy/conversations/composer_input", conversation: conversation %>
+      <%= f.submit "Send", class: "envoy-btn" %>
+    </div>
+    <p class="envoy-hint">Enter to send · Shift/Option+Enter for a new line</p>
+  <% end %>
+</div>

data/config/routes.rb

@@ -1,7 +1,7 @@
 Envoy::Engine.routes.draw do
+  resource :panel, only: :create
   resources :conversations, only: %i[index new create show] do
     resources :messages, only: :create
   end
-  resources :system_prompts, except: :destroy
   root to: "conversations#index"
 end

data/db/migrate/20260716000001_drop_envoy_system_prompts.rb

@@ -0,0 +1,12 @@
+class DropEnvoySystemPrompts < ActiveRecord::Migration[8.1]
+  def change
+    # The DB-backed prompt store never held a row and its controller was the one
+    # unscoped surface in the engine. Prompts are program behaviour and now live
+    # in the DSL registry, versioned by git.
+    remove_reference :envoy_conversations, :system_prompt_version, foreign_key: false, index: true
+    add_column :envoy_conversations, :prompt_key, :string
+
+    drop_table :envoy_system_prompt_versions
+    drop_table :envoy_system_prompts
+  end
+end

data/db/migrate/20260716000002_add_surface_to_envoy_conversations.rb

@@ -0,0 +1,15 @@
+class AddSurfaceToEnvoyConversations < ActiveRecord::Migration[8.1]
+  def change
+    add_column :envoy_conversations, :surface_key, :string
+    add_column :envoy_conversations, :context_key, :string
+    change_column_null :envoy_conversations, :toolset_key, true
+
+    # Resumption is a uniqueness rule, so let the database hold it rather than a
+    # racy find_or_create_by. Partial: console conversations have no surface and
+    # must stay unconstrained.
+    add_index :envoy_conversations,
+              %i[actor_type actor_id surface_key context_key],
+              unique: true, where: "surface_key IS NOT NULL",
+              name: "index_envoy_conversations_on_surface_subject"
+  end
+end