@cognigy/webchat 3.50.0 → 3.52.0

package/dist/webchat.esm.js

@@ -1,7 +1,7 @@
 /*!
- * webchat.esm.js v3.50.0
- * https://github.com/Cognigy/Webchat/tree/v3.50.0
- * https://github.com/Cognigy/Webchat/tree/v3.50.0/OSS_LICENSES.txt
+ * webchat.esm.js v3.52.0
+ * https://github.com/Cognigy/Webchat/tree/v3.52.0
+ * https://github.com/Cognigy/Webchat/tree/v3.52.0/OSS_LICENSES.txt
  */
 import * as __WEBPACK_EXTERNAL_MODULE_react__ from "react";
 import * as __WEBPACK_EXTERNAL_MODULE_react_dom_7dac9eee__ from "react-dom";
@@ -35390,17 +35390,19 @@ const DeleteConfirmModal = props => {
     cancelButtonBackground,
     confirmButtonBackground
   } = props;
+
+  // Focus the safe default (Cancel) action via the Modal's deferred focus
+  // path, not React's autoFocus: autoFocus fires in the same task that
+  // inserts the dialog subtree, and VoiceOver then reads a stale
+  // accessibility tree — the dialog role/title and the focused button are
+  // never announced (CGY-3274). The deferral lets the tree settle first.
+  const cancelButtonRef = react__WEBPACK_IMPORTED_MODULE_0__["default"].useRef(null);
   return /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_Modal__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A, {
     footer: /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(react__WEBPACK_IMPORTED_MODULE_0__["default"].Fragment, null, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(CancelButton, {
+      ref: cancelButtonRef,
       className: "webchat-delete-confirmation-cancel-button",
       onClick: () => onClose(false),
       background: cancelButtonBackground
-      // Intentional: move focus to the safe default (Cancel) action
-      // when this confirmation modal opens — expected dialog focus
-      // management, not an unexpected focus shift.
-      // eslint-disable-next-line jsx-a11y/no-autofocus
-      ,
-      autoFocus: true
     }, cancelText), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(DeleteConfirmation, {
       className: "webchat-delete-confirmation-confirm-button",
       onClick: onConfirmDelete,
@@ -35408,7 +35410,8 @@ const DeleteConfirmModal = props => {
     }, confirmText)),
     isOpen: isOpen,
     onClose: onClose,
-    title: title
+    title: title,
+    initialFocusRef: cancelButtonRef
   }, children);
 };
 /* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = (DeleteConfirmModal);
@@ -35774,21 +35777,23 @@ const Modal = ({
 /* harmony import */ var _plugins_input_file_DropZone__WEBPACK_IMPORTED_MODULE_40__ = __webpack_require__(1339);
 /* harmony import */ var react_transition_group__WEBPACK_IMPORTED_MODULE_41__ = __webpack_require__(66492);
 /* harmony import */ var _presentational_TeaserMessage__WEBPACK_IMPORTED_MODULE_42__ = __webpack_require__(49888);
-/* harmony import */ var _functional_xapp_overlay_XAppOverlay__WEBPACK_IMPORTED_MODULE_43__ = __webpack_require__(12381);
-/* harmony import */ var _utils_sourceMapping__WEBPACK_IMPORTED_MODULE_44__ = __webpack_require__(25091);
-/* harmony import */ var _plugins_speech_output__WEBPACK_IMPORTED_MODULE_45__ = __webpack_require__(83679);
-/* harmony import */ var _utils_filter_out_control_commands__WEBPACK_IMPORTED_MODULE_46__ = __webpack_require__(70562);
-/* harmony import */ var _utils_isMobile__WEBPACK_IMPORTED_MODULE_47__ = __webpack_require__(40794);
-/* harmony import */ var _webchat_helper_handleMarkdown__WEBPACK_IMPORTED_MODULE_48__ = __webpack_require__(71621);
-/* harmony import */ var _presentational_previous_conversations_DeleteAllConversations__WEBPACK_IMPORTED_MODULE_49__ = __webpack_require__(5196);
-/* harmony import */ var _presentational_ScreenReaderLiveRegion__WEBPACK_IMPORTED_MODULE_50__ = __webpack_require__(41426);
-/* harmony import */ var _presentational_StatusLiveRegion__WEBPACK_IMPORTED_MODULE_51__ = __webpack_require__(63813);
-/* harmony import */ var _presentational_FreezeOnExit__WEBPACK_IMPORTED_MODULE_52__ = __webpack_require__(97475);
-/* harmony import */ var _presentational_HomeScreenAnnouncer__WEBPACK_IMPORTED_MODULE_53__ = __webpack_require__(55115);
-/* harmony import */ var _utils_ai_agent_notice__WEBPACK_IMPORTED_MODULE_54__ = __webpack_require__(39191);
-/* harmony import */ var _utils_screen_visibility__WEBPACK_IMPORTED_MODULE_55__ = __webpack_require__(48245);
-/* harmony import */ var classnames__WEBPACK_IMPORTED_MODULE_56__ = __webpack_require__(14176);
-/* harmony import */ var classnames__WEBPACK_IMPORTED_MODULE_56___default = /*#__PURE__*/__webpack_require__.n(classnames__WEBPACK_IMPORTED_MODULE_56__);
+/* harmony import */ var _presentational_TeaserMessageAnnouncer__WEBPACK_IMPORTED_MODULE_43__ = __webpack_require__(59359);
+/* harmony import */ var _presentational_UnreadMessagesAnnouncer__WEBPACK_IMPORTED_MODULE_44__ = __webpack_require__(1715);
+/* harmony import */ var _functional_xapp_overlay_XAppOverlay__WEBPACK_IMPORTED_MODULE_45__ = __webpack_require__(12381);
+/* harmony import */ var _utils_sourceMapping__WEBPACK_IMPORTED_MODULE_46__ = __webpack_require__(25091);
+/* harmony import */ var _plugins_speech_output__WEBPACK_IMPORTED_MODULE_47__ = __webpack_require__(83679);
+/* harmony import */ var _utils_filter_out_control_commands__WEBPACK_IMPORTED_MODULE_48__ = __webpack_require__(70562);
+/* harmony import */ var _utils_isMobile__WEBPACK_IMPORTED_MODULE_49__ = __webpack_require__(40794);
+/* harmony import */ var _webchat_helper_handleMarkdown__WEBPACK_IMPORTED_MODULE_50__ = __webpack_require__(71621);
+/* harmony import */ var _presentational_previous_conversations_DeleteAllConversations__WEBPACK_IMPORTED_MODULE_51__ = __webpack_require__(5196);
+/* harmony import */ var _presentational_ScreenReaderLiveRegion__WEBPACK_IMPORTED_MODULE_52__ = __webpack_require__(41426);
+/* harmony import */ var _presentational_StatusLiveRegion__WEBPACK_IMPORTED_MODULE_53__ = __webpack_require__(63813);
+/* harmony import */ var _presentational_FreezeOnExit__WEBPACK_IMPORTED_MODULE_54__ = __webpack_require__(97475);
+/* harmony import */ var _presentational_HomeScreenAnnouncer__WEBPACK_IMPORTED_MODULE_55__ = __webpack_require__(55115);
+/* harmony import */ var _utils_ai_agent_notice__WEBPACK_IMPORTED_MODULE_56__ = __webpack_require__(39191);
+/* harmony import */ var _utils_screen_visibility__WEBPACK_IMPORTED_MODULE_57__ = __webpack_require__(48245);
+/* harmony import */ var classnames__WEBPACK_IMPORTED_MODULE_58__ = __webpack_require__(14176);
+/* harmony import */ var classnames__WEBPACK_IMPORTED_MODULE_58___default = /*#__PURE__*/__webpack_require__.n(classnames__WEBPACK_IMPORTED_MODULE_58__);
 function _extends() { return _extends = Object.assign ? Object.assign.bind() : function (n) { for (var e = 1; e < arguments.length; e++) { var t = arguments[e]; for (var r in t) ({}).hasOwnProperty.call(t, r) && (n[r] = t[r]); } return n; }, _extends.apply(null, arguments); }
 
 
@@ -35844,6 +35849,8 @@ function _extends() { return _extends = Object.assign ? Object.assign.bind() : f
 
 
 
+
+
 
 
 
@@ -35949,7 +35956,7 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
     deleteConversationsModalState: false,
     liveContent: {},
     isMobile: false,
-    noticeSession: _utils_ai_agent_notice__WEBPACK_IMPORTED_MODULE_54__/* .INITIAL_NOTICE_SESSION */ .j_
+    noticeSession: _utils_ai_agent_notice__WEBPACK_IMPORTED_MODULE_56__/* .INITIAL_NOTICE_SESSION */ .j_
   };
   unreadTitleIndicatorInterval = null;
   originalTitle = window.document.title;
@@ -35960,6 +35967,7 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
   engagementMessageTimeout = null;
   ratingFocusTimeout = null;
   homeScreenExitFocusTimeout = null;
+  xAppOverlayCloseFocusTimeout = null;
 
   // Disarms the pending home-screen exit focus fallback. Also registered as
   // a capture-phase document pointerdown listener while the fallback is
@@ -35997,9 +36005,9 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
     const secondaryColor = props?.config?.settings?.colors?.secondaryColor;
     const chatInterfaceColor = props?.config?.settings?.colors?.chatInterfaceColor;
     const sourceColorMapping = props?.config?.settings?.widgetSettings?.sourceColorMapping;
-    const overrideBotMessageColor = (0,_utils_sourceMapping__WEBPACK_IMPORTED_MODULE_44__/* .getSourceBackgroundColor */ .N)(sourceColorMapping?.bot, props?.config?.settings?.colors);
-    const overrideUserMessageColor = (0,_utils_sourceMapping__WEBPACK_IMPORTED_MODULE_44__/* .getSourceBackgroundColor */ .N)(sourceColorMapping?.user, props?.config?.settings?.colors);
-    const overrideAgentMessageColor = (0,_utils_sourceMapping__WEBPACK_IMPORTED_MODULE_44__/* .getSourceBackgroundColor */ .N)(sourceColorMapping?.agent, props?.config?.settings?.colors);
+    const overrideBotMessageColor = (0,_utils_sourceMapping__WEBPACK_IMPORTED_MODULE_46__/* .getSourceBackgroundColor */ .N)(sourceColorMapping?.bot, props?.config?.settings?.colors);
+    const overrideUserMessageColor = (0,_utils_sourceMapping__WEBPACK_IMPORTED_MODULE_46__/* .getSourceBackgroundColor */ .N)(sourceColorMapping?.user, props?.config?.settings?.colors);
+    const overrideAgentMessageColor = (0,_utils_sourceMapping__WEBPACK_IMPORTED_MODULE_46__/* .getSourceBackgroundColor */ .N)(sourceColorMapping?.agent, props?.config?.settings?.colors);
     const overrideBotMessageBorderColor = sourceColorMapping?.bot === "user" ? "transparent" : null;
     const overrideUserMessageBorderColor = sourceColorMapping?.user === "bot" ? state.theme.black80 : null;
     const overrideAgentMessageBorderColor = sourceColorMapping?.agent === "user" ? "transparent" : null;
@@ -36103,14 +36111,14 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
   evaluateNoticeSession(prevConversationsSnapshot) {
     const id = this.props.currentSession || "";
     this.setState(prev => ({
-      noticeSession: (0,_utils_ai_agent_notice__WEBPACK_IMPORTED_MODULE_54__/* .computeNoticeSession */ .Kr)(prev.noticeSession, id, prevConversationsSnapshot, this.props.hasRestoredPersistedHistory)
+      noticeSession: (0,_utils_ai_agent_notice__WEBPACK_IMPORTED_MODULE_56__/* .computeNoticeSession */ .Kr)(prev.noticeSession, id, prevConversationsSnapshot, this.props.hasRestoredPersistedHistory, this.props.willRestorePersistedConversation)
     }));
   }
   handleNoticeIntroAnnounced = introKey => {
     this.announcedNoticeKeys.add(introKey);
   };
   getNoticeIntro() {
-    const text = (0,_utils_ai_agent_notice__WEBPACK_IMPORTED_MODULE_54__/* .getAIAgentNoticeIntroText */ .bu)({
+    const text = (0,_utils_ai_agent_notice__WEBPACK_IMPORTED_MODULE_56__/* .getAIAgentNoticeIntroText */ .bu)({
       behavior: this.props.config.settings.behavior,
       showDisconnectOverlay: this.showDisconnectOverlay,
       noticeSession: this.state.noticeSession,
@@ -36126,12 +36134,12 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
   componentDidMount() {
     const defaultMessagePlugins = [];
     if (this.props.ttsActive) {
-      defaultMessagePlugins.push(_plugins_speech_output__WEBPACK_IMPORTED_MODULE_45__/* ["default"] */ .A);
+      defaultMessagePlugins.push(_plugins_speech_output__WEBPACK_IMPORTED_MODULE_47__/* ["default"] */ .A);
     }
     this.setState({
       inputPlugins: [...(this.props.inputPlugins || []), _plugins_input_base__WEBPACK_IMPORTED_MODULE_11__/* ["default"] */ .A],
       messagePlugins: [...(this.props.messagePlugins || []), ...defaultMessagePlugins],
-      isMobile: (0,_utils_isMobile__WEBPACK_IMPORTED_MODULE_47__/* .isMobileViewport */ .$)()
+      isMobile: (0,_utils_isMobile__WEBPACK_IMPORTED_MODULE_49__/* .isMobileViewport */ .$)()
     });
     this.setupIconAnimationInterval();
 
@@ -36203,13 +36211,53 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
         }
       }, 450);
     }
+
+    // Closing the xApp overlay unmounts the dialog together with whatever
+    // was focused in it (its close button, or the frame), and the screen it
+    // covered re-mounts — so focus cannot be "restored" to a surviving
+    // element and would drop to document.body (SC 2.4.3). The chat screen
+    // re-focuses itself via the message input's 200ms autofocus; when that
+    // is disabled (`disableInputAutofocus`), or for any other view, this
+    // late check moves focus to the re-mounted header title, mirroring the
+    // home-screen exit fallback above. It never overrides focus that
+    // landed anywhere else.
+    if (prevProps.isXAppOverlayOpen && !this.props.isXAppOverlayOpen) {
+      if (this.xAppOverlayCloseFocusTimeout) clearTimeout(this.xAppOverlayCloseFocusTimeout);
+      this.xAppOverlayCloseFocusTimeout = setTimeout(() => {
+        this.xAppOverlayCloseFocusTimeout = null;
+        const webchatWindowEl = this.webchatWindowRef?.current;
+        if (!webchatWindowEl) return;
+        const active = document.activeElement;
+        if (active === document.body || active === null) {
+          (webchatWindowEl.querySelector(".webchat-header-bar .webchat-header-title") ?? (0,_utils_find_focusable__WEBPACK_IMPORTED_MODULE_23__/* ["default"] */ .A)(webchatWindowEl).firstFocusable)?.focus();
+        }
+      }, 450);
+    }
     if (prevProps.currentSession !== this.props.currentSession) {
       this.evaluateNoticeSession(prevProps.prevConversations);
     }
+
+    // The persisted-conversation prediction is read from storage under a
+    // key that contains the endpoint config's URLToken, so it only
+    // becomes meaningful once that config has loaded — after this
+    // component has already mounted. Re-evaluating on the flip is in
+    // time for every case the notice can observe, and normally with
+    // room to spare: `open()` waits for the config before showing
+    // anything, and even if it gives up waiting (~1s by default, then
+    // it opens regardless) the flip still lands within the intro's own
+    // 600ms delay and its effect cleanup cancels the pending timer. A
+    // config slower than roughly the sum of the two would let the
+    // notice announce before the prediction arrives — the remaining
+    // gap, and the reason the notice is not gated on the connect on
+    // top of this. No session id exists yet at this point, so current
+    // props are the pre-change snapshot.
+    if (prevProps.willRestorePersistedConversation !== this.props.willRestorePersistedConversation && !this.props.currentSession) {
+      this.evaluateNoticeSession(this.props.prevConversations);
+    }
     if (prevProps.ttsActive !== this.props.ttsActive || prevProps.inputPlugins !== this.props.inputPlugins || prevProps.messagePlugins !== this.props.messagePlugins) {
       const defaultMessagePlugins = [];
       if (this.props.ttsActive) {
-        defaultMessagePlugins.push(_plugins_speech_output__WEBPACK_IMPORTED_MODULE_45__/* ["default"] */ .A);
+        defaultMessagePlugins.push(_plugins_speech_output__WEBPACK_IMPORTED_MODULE_47__/* ["default"] */ .A);
       }
       this.setState({
         inputPlugins: [...(this.props.inputPlugins || []), _plugins_input_base__WEBPACK_IMPORTED_MODULE_11__/* ["default"] */ .A],
@@ -36259,7 +36307,7 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
         // TODO: Add markdown rendering if there is valid markdown and renderMarkdown is enabled
         // adding react-markdown is blocked by updating React to v18
         if (!this.props.config.settings.widgetSettings.disableTeaserMarkdownRemoval) {
-          lastUnseenMessageText = (0,_webchat_helper_handleMarkdown__WEBPACK_IMPORTED_MODULE_48__/* .removeMarkdownChars */ .$)(lastUnseenMessageText);
+          lastUnseenMessageText = (0,_webchat_helper_handleMarkdown__WEBPACK_IMPORTED_MODULE_50__/* .removeMarkdownChars */ .$)(lastUnseenMessageText);
         }
         this.setState({
           lastUnseenMessageText
@@ -36319,6 +36367,10 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
 
     // also removes the fallback's document pointerdown listener
     this.cancelHomeScreenExitFocusFallback();
+    if (this.xAppOverlayCloseFocusTimeout) {
+      clearTimeout(this.xAppOverlayCloseFocusTimeout);
+      this.xAppOverlayCloseFocusTimeout = null;
+    }
 
     // Teardown icon animation interval
     if (this.iconAnimationIntervalHandle) {
@@ -36328,7 +36380,7 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
     window.removeEventListener("resize", this.handleResize);
   }
   handleResize() {
-    const isMobile = (0,_utils_isMobile__WEBPACK_IMPORTED_MODULE_47__/* .isMobileViewport */ .$)();
+    const isMobile = (0,_utils_isMobile__WEBPACK_IMPORTED_MODULE_49__/* .isMobileViewport */ .$)();
     if (isMobile !== this.state.isMobile) {
       this.setState({
         isMobile
@@ -36462,7 +36514,10 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
     // behind it is inert, so this trap would agree with it only by virtue
     // of getKeyboardFocusableElements skipping inert subtrees. Excluded
     // explicitly instead of relying on that coupling.
-    !this.showDisconnectOverlay) {
+    !this.showDisconnectOverlay &&
+    // The xApp overlay dialog traps focus with its own focus guards
+    // (Tab presses inside its cross-origin frame are invisible here).
+    !this.props.isXAppOverlayOpen) {
       // Get the first and last focusable elements within the webchat window and add focus
       const webchatWindowEl = this.webchatWindowRef?.current;
       const {
@@ -36738,7 +36793,7 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
     // while the webchat is open, so no `open` check is needed here.
     const {
       showHomeScreenView
-    } = (0,_utils_screen_visibility__WEBPACK_IMPORTED_MODULE_55__/* .getScreenVisibility */ .p)(this.props, isInforming);
+    } = (0,_utils_screen_visibility__WEBPACK_IMPORTED_MODULE_57__/* .getScreenVisibility */ .p)(this.props, isInforming);
     const openChatAriaLabel = () => {
       if (open) return config.settings.customTranslations?.ariaLabels?.closeChat ?? "Close chat";
       const openChat = config.settings.customTranslations?.ariaLabels?.openChat ?? "Open chat";
@@ -36813,7 +36868,7 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
           el.removeAttribute("inert");
         }
       }
-    }, !fullscreenMessage ? this.renderRegularLayout(isInforming) : this.renderFullscreenMessageLayout()), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_StatusLiveRegion__WEBPACK_IMPORTED_MODULE_51__/* .StatusLiveRegion */ .t, null), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_HomeScreenAnnouncer__WEBPACK_IMPORTED_MODULE_53__/* ["default"] */ .A, {
+    }, !fullscreenMessage ? this.renderRegularLayout(isInforming) : this.renderFullscreenMessageLayout()), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_StatusLiveRegion__WEBPACK_IMPORTED_MODULE_53__/* .StatusLiveRegion */ .t, null), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_HomeScreenAnnouncer__WEBPACK_IMPORTED_MODULE_55__/* ["default"] */ .A, {
       active: showHomeScreenView,
       label: config.settings.customTranslations?.ariaLabels?.homeScreen ?? "Chat window home screen"
     }), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_DisconnectOverlay__WEBPACK_IMPORTED_MODULE_20__/* ["default"] */ .A, {
@@ -36823,7 +36878,16 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
       isConnecting: !!this.props.connecting,
       onClose: handleClose,
       config: config
-    })), !disableToggleButton && /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement("div", null,
+    })), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_UnreadMessagesAnnouncer__WEBPACK_IMPORTED_MODULE_44__/* ["default"] */ .A, {
+      active: config.settings.unreadMessages.enableBadge || config.settings.unreadMessages.enableIndicator,
+      count: unseenMessages.length,
+      singularText: config.settings.customTranslations?.ariaLabels?.unreadMessageSingularText ?? "One unread message in chat.",
+      pluralText: config.settings.customTranslations?.ariaLabels?.unreadMessagePluralText ?? "unread messages in chat."
+    }), !disableToggleButton && /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement("div", null, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_TeaserMessageAnnouncer__WEBPACK_IMPORTED_MODULE_43__/* ["default"] */ .A, {
+      active: !!lastUnseenMessageText && !open,
+      text: lastUnseenMessageText,
+      label: config.settings.customTranslations?.ariaLabels?.newMessagePreview ?? "New message preview"
+    }),
     // Show the message teaser if there is a last bot message and the webchat is closed
     lastUnseenMessageText && !open && /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_TeaserMessage__WEBPACK_IMPORTED_MODULE_42__/* .TeaserMessage */ .I, {
       messageText: lastUnseenMessageText,
@@ -36853,7 +36917,7 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
       onClick: this.handleFabClick
     }, webchatToggleProps, {
       type: "button",
-      className: classnames__WEBPACK_IMPORTED_MODULE_56___default()("webchat-toggle-button burst", config.settings?.layout?.iconAnimation),
+      className: classnames__WEBPACK_IMPORTED_MODULE_58___default()("webchat-toggle-button burst", config.settings?.layout?.iconAnimation),
       id: "webchatWindowToggleButton",
       "aria-label": openChatAriaLabel(),
       ref: this.chatToggleButtonRef,
@@ -36862,10 +36926,17 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
       }
     }), open ? /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_assets_collapse_20px_svg__WEBPACK_IMPORTED_MODULE_19__/* ["default"] */ .A, null) : /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_ChatIcon__WEBPACK_IMPORTED_MODULE_18__/* ["default"] */ .A, {
       config: config
-    }), config.settings.unreadMessages.enableBadge ? /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_Badge__WEBPACK_IMPORTED_MODULE_21__/* ["default"] */ .A, {
+    }), config.settings.unreadMessages.enableBadge ?
+    /*#__PURE__*/
+    // The count is already in the button's
+    // accessible name (and announced live by
+    // UnreadMessagesAnnouncer); the badge is a
+    // visual duplicate. aria-label is prohibited
+    // on a generic <span>.
+    react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_Badge__WEBPACK_IMPORTED_MODULE_21__/* ["default"] */ .A, {
       _content: unseenMessages.length,
       className: "webchat-unread-message-badge",
-      "aria-label": `${unseenMessages.length} ${config.settings.customTranslations?.ariaLabels?.unreadMessages ?? "unread messages"}`
+      "aria-hidden": "true"
     }) : null))))))));
   }
   renderRegularLayout(isInforming) {
@@ -36991,7 +37062,7 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
         onAcceptTerms: handleAcceptTerms,
         isHomeScreenEnabled: isHomeScreenEnabled
       });
-      if (isXAppOverlayOpen) return /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_functional_xapp_overlay_XAppOverlay__WEBPACK_IMPORTED_MODULE_43__/* ["default"] */ .A, null);
+      if (isXAppOverlayOpen) return /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_functional_xapp_overlay_XAppOverlay__WEBPACK_IMPORTED_MODULE_45__/* ["default"] */ .A, null);
       if (showPrevConversations) return /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_previous_conversations_ConversationsList__WEBPACK_IMPORTED_MODULE_33__/* .PrevConversationsList */ .K, {
         conversations: this.props.prevConversations,
         onSetShowPrevConversations: onSetShowPrevConversations,
@@ -37030,7 +37101,7 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
       }, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement("h3", {
         className: "sr-only",
         id: "webchatChatHistoryHeading"
-      }, config.settings.customTranslations?.ariaLabels?.chatHistory ?? "Chat history"), this.renderHistory()), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_ScreenReaderLiveRegion__WEBPACK_IMPORTED_MODULE_50__/* ["default"] */ .A, {
+      }, config.settings.customTranslations?.ariaLabels?.chatHistory ?? "Chat history"), this.renderHistory()), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_ScreenReaderLiveRegion__WEBPACK_IMPORTED_MODULE_52__/* ["default"] */ .A, {
         liveContent: this.state.liveContent,
         intro: this.getNoticeIntro(),
         onIntroAnnounced: this.handleNoticeIntroAnnounced
@@ -37061,7 +37132,7 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
     const {
       showEnabledHomeScreen,
       showChatScreen
-    } = (0,_utils_screen_visibility__WEBPACK_IMPORTED_MODULE_55__/* .getScreenVisibility */ .p)(this.props, isInforming);
+    } = (0,_utils_screen_visibility__WEBPACK_IMPORTED_MODULE_57__/* .getScreenVisibility */ .p)(this.props, isInforming);
     const isChatOptionsButtonVisible = config.settings.chatOptions.enabled && showChatScreen;
     const hideBackButton = showChatScreen && !isHomeScreenEnabled;
     const showDeleteAllConversationButton = !!((config.settings.privacyNotice.enabled && this.props.hasAcceptedTerms || !config.settings.privacyNotice.enabled) && config.settings.homeScreen.previousConversations.enableDeleteAllConversations && showPrevConversations && Object.keys(this.props.prevConversations).length);
@@ -37133,9 +37204,9 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
       className: "webchat-regular-layout-content",
       "aria-hidden": isRegularLayoutActiveView ? undefined : true,
       inert: isRegularLayoutActiveView ? undefined : ""
-    }, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_FreezeOnExit__WEBPACK_IMPORTED_MODULE_52__/* ["default"] */ .A, {
+    }, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_FreezeOnExit__WEBPACK_IMPORTED_MODULE_54__/* ["default"] */ .A, {
       active: isRegularLayoutActiveView
-    }, getRegularLayoutContent()), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_previous_conversations_DeleteAllConversations__WEBPACK_IMPORTED_MODULE_49__/* ["default"] */ .A, {
+    }, getRegularLayoutContent()), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_previous_conversations_DeleteAllConversations__WEBPACK_IMPORTED_MODULE_51__/* ["default"] */ .A, {
       config: config,
       isOpen: this.state.showDeleteAllConversationsModal,
       onOpenChange: (open, confirmDelete) => {
@@ -37198,7 +37269,7 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
 
     // Find privacy message and remove it from the messages list (these message types are not displayed in the chat log).
     // If we do not remove, it will cause the collatation of the first user message.
-    const messagesExcludingPrivacyMessage = (0,_utils_filter_out_control_commands__WEBPACK_IMPORTED_MODULE_46__/* ["default"] */ .A)(messages, ["acceptPrivacyPolicy"]);
+    const messagesExcludingPrivacyMessage = (0,_utils_filter_out_control_commands__WEBPACK_IMPORTED_MODULE_48__/* ["default"] */ .A)(messages, ["acceptPrivacyPolicy"]);
 
     // Filter messages based on progressive rendering settings
     const visibleMessages = progressiveMessageRendering ? messagesExcludingPrivacyMessage.filter(message => {
@@ -37219,7 +37290,7 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
       variant: "body-regular",
       component: "div",
       className: "webchat-log-ai-agent-notice-text"
-    }, AIAgentNoticeText || _utils_ai_agent_notice__WEBPACK_IMPORTED_MODULE_54__/* .DEFAULT_AI_AGENT_NOTICE_TEXT */ .S5), visibleMessages.map((message, index) => {
+    }, AIAgentNoticeText || _utils_ai_agent_notice__WEBPACK_IMPORTED_MODULE_56__/* .DEFAULT_AI_AGENT_NOTICE_TEXT */ .S5), visibleMessages.map((message, index) => {
       // Lookahead if there is a user reply that includes text or attachments
       const hasReply = visibleMessages.slice(index + 1).some(message => {
         const isUser = message.source === "user";
@@ -37256,7 +37327,8 @@ class WebchatUI extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
       active: isTyping,
       delay: messageDelay,
       direction: config?.settings?.widgetSettings?.sourceDirectionMapping?.bot || "incoming",
-      disableBorder: config?.settings?.layout?.disableBotOutputBorder
+      disableBorder: config?.settings?.layout?.disableBotOutputBorder,
+      announcementText: config?.settings?.customTranslations?.ariaLabels?.typingIndicator
     }));
   }
 }
@@ -37411,6 +37483,8 @@ const MobileScrollLock = ({
 /* harmony import */ var _webchat_helper_useSelector__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(3862);
 /* harmony import */ var _presentational_Header__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(55922);
 /* harmony import */ var _webchat_store_messages_message_middleware__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(20570);
+/* harmony import */ var _utils_find_focusable__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(41098);
+
 
 
 
@@ -37420,12 +37494,17 @@ const MobileScrollLock = ({
 
 
 
+const TITLE_ID = "webchatXAppOverlayTitle";
+const FOCUS_GUARD_ATTRIBUTE = "data-xapp-overlay-focus-guard";
 const Root = _emotion_styled__WEBPACK_IMPORTED_MODULE_2__/* ["default"] */ .A.div(() => ({
   display: "flex",
   flexDirection: "column",
   height: "100%",
   width: "100%",
   animation: "fade-in-xapp .25s ease-out",
+  "@media (prefers-reduced-motion: reduce)": {
+    animation: "none"
+  },
   "@keyframes fade-in-xapp": {
     from: {
       transform: "scale(.875)",
@@ -37443,6 +37522,9 @@ const Iframe = _emotion_styled__WEBPACK_IMPORTED_MODULE_2__/* ["default"] */ .A.
   height: "100%",
   width: "100%",
   animation: "fade-in-xapp-2 .325s ease-in",
+  "@media (prefers-reduced-motion: reduce)": {
+    animation: "none"
+  },
   "@keyframes fade-in-xapp-2": {
     from: {
       opacity: 0.87,
@@ -37456,6 +37538,21 @@ const Iframe = _emotion_styled__WEBPACK_IMPORTED_MODULE_2__/* ["default"] */ .A.
     }
   }
 }));
+
+// Visually hidden but reachable by sequential focus navigation. Not
+// `aria-hidden`: a focusable aria-hidden node is an axe violation
+// (aria-hidden-focus) — and focus never rests here anyway, the onFocus
+// handler redirects it immediately.
+const FocusGuard = _emotion_styled__WEBPACK_IMPORTED_MODULE_2__/* ["default"] */ .A.div(() => ({
+  position: "absolute",
+  width: 1,
+  height: 1,
+  margin: -1,
+  padding: 0,
+  overflow: "hidden",
+  clip: "rect(0, 0, 0, 0)",
+  outline: "none"
+}));
 const xAppOverlay = () => {
   const url = (0,_webchat_helper_useSelector__WEBPACK_IMPORTED_MODULE_6__/* .useSelector */ .d)(state => state.xAppOverlay.currentUrl) || "";
   const {
@@ -37465,7 +37562,17 @@ const xAppOverlay = () => {
     sendEventOnCloseIconClick,
     showCloseIcon
   } = (0,_webchat_store_xapp_overlay_hooks__WEBPACK_IMPORTED_MODULE_5__/* .useOverlaySettingsByUrl */ .Z)(url);
+  const ariaLabels = (0,_webchat_helper_useSelector__WEBPACK_IMPORTED_MODULE_6__/* .useSelector */ .d)(state => state.config.settings.customTranslations?.ariaLabels);
+  // A whitespace-only screen title has no accessible text: it would render
+  // an empty heading and name the dialog after it. Treat it as absent.
+  const title = screenTitle?.trim() ?? "";
+  // Names the dialog and its frame when the xApp has no screen title.
+  const fallbackName = ariaLabels?.xAppOverlay ?? "Embedded app";
+  const closeButtonAriaLabel = ariaLabels?.closeDialog ?? "Close dialog";
   const dispatch = (0,react_redux__WEBPACK_IMPORTED_MODULE_0__/* .useDispatch */ .wA)();
+  const rootRef = (0,react__WEBPACK_IMPORTED_MODULE_1__.useRef)(null);
+  const closeButtonRef = (0,react__WEBPACK_IMPORTED_MODULE_1__.useRef)(null);
+  const iframeRef = (0,react__WEBPACK_IMPORTED_MODULE_1__.useRef)(null);
   const handleClose = () => {
     if (closeOnSubmit) {
       dispatch((0,_webchat_store_xapp_overlay_slice__WEBPACK_IMPORTED_MODULE_4__/* .closeOverlay */ .L9)());
@@ -37482,7 +37589,20 @@ const xAppOverlay = () => {
     dispatch((0,_webchat_store_xapp_overlay_slice__WEBPACK_IMPORTED_MODULE_4__/* .closeOverlay */ .L9)());
   };
   const handleSubmit = event => {
-    if (url.startsWith(event.origin) === false) {
+    // WCH-SI10-004: compare canonical origins, not raw URL strings.
+    // The previous url.startsWith(event.origin) check was semantically backwards —
+    // a domain that is a string-prefix of url (e.g. "https://xapp.cognigy.a" for
+    // "https://xapp.cognigy.ai/form") could pass the check despite being a different
+    // origin. new URL(url).origin extracts the canonical scheme+host+port for an
+    // exact match, which is the correct cross-origin security boundary.
+    let urlOrigin;
+    try {
+      urlOrigin = new URL(url).origin;
+    } catch {
+      // url is empty or not a valid absolute URL — reject all postMessages.
+      return;
+    }
+    if (urlOrigin !== event.origin) {
       return;
     }
     if (event.data.type !== "x-app-submit") {
@@ -37508,8 +37628,12 @@ const xAppOverlay = () => {
     handleClose();
   };
 
-  // We revieve a MessageEvent from the xApp iframe when submission happens
+  // We receive a MessageEvent from the xApp iframe when submission happens.
   // https://developer.mozilla.org/en-US/docs/Web/API/MessageEvent
+  // url and feedbackMessage are included in deps so the handler is re-registered
+  // whenever either changes — both affect the handleSubmit closure and can change
+  // independently (e.g. a subsequent RECEIVE_MESSAGE can update overlay settings
+  // for the same URL, which would change feedbackMessage without changing url).
   (0,react__WEBPACK_IMPORTED_MODULE_1__.useEffect)(() => {
     function unsubscribe() {
       window.removeEventListener("message", handleSubmit);
@@ -37518,19 +37642,88 @@ const xAppOverlay = () => {
     return () => {
       unsubscribe();
     };
-  }, [closeOnSubmit]);
-  const showHeader = screenTitle || showCloseIcon;
+  }, [closeOnSubmit, url, feedbackMessage]);
+
+  // APG modal dialog: move focus into the dialog once on open — to the
+  // close button (the first control, as Modal does), else the frame itself.
+  // Deliberately NOT the title: the dialog is named by that heading, so
+  // focusing it makes NVDA read the same text as dialog name, as focused
+  // heading, and again on its browse-mode pass. Deferred like
+  // Modal.initialFocusRef: focusing in the same task that inserted the
+  // subtree is not announced by VoiceOver (CGY-3274).
+  (0,react__WEBPACK_IMPORTED_MODULE_1__.useEffect)(() => {
+    const focusTimer = window.setTimeout(() => {
+      const root = rootRef.current;
+      if (!root || root.closest("[inert]")) return;
+      (closeButtonRef.current ?? iframeRef.current)?.focus();
+    }, 200);
+    return () => window.clearTimeout(focusTimer);
+  }, []);
+
+  // Escape dismisses the dialog exactly like the close icon (same side
+  // effects), and only when the xApp is dismissable — without a close icon
+  // the overlay is a blocking step that ends on submission inside the app.
+  // Keys pressed inside the cross-origin frame never reach this document.
+  (0,react__WEBPACK_IMPORTED_MODULE_1__.useEffect)(() => {
+    if (!showCloseIcon) return;
+    const handleKeyDown = event => {
+      if (event.key !== "Escape") return;
+      // Another modal surface (e.g. the disconnect overlay) is stacked on
+      // top — leave Esc to that surface.
+      if (rootRef.current?.closest("[inert]")) return;
+      handleCloseIconClick();
+    };
+    document.addEventListener("keydown", handleKeyDown);
+    return () => document.removeEventListener("keydown", handleKeyDown);
+  }, [showCloseIcon, sendEventOnCloseIconClick]);
+
+  // Focus trap. A keydown-based trap (Modal) cannot see Tab presses inside
+  // the cross-origin frame, so the dialog is bracketed by two focus guards
+  // instead: tabbing out of the frame lands on a guard, which sends focus
+  // back to the opposite edge of the dialog. Arriving at a guard from
+  // outside the dialog (e.g. Tab from the host page) enters at the nearest
+  // edge instead of wrapping. `relatedTarget` is null when focus comes from
+  // the frame's document, which is the wrap case.
+  const handleFocusGuard = edge => event => {
+    const root = rootRef.current;
+    if (!root) return;
+    const focusable = (0,_utils_find_focusable__WEBPACK_IMPORTED_MODULE_9__/* ["default"] */ .A)(root).focusable.filter(el => !el.hasAttribute(FOCUS_GUARD_ATTRIBUTE));
+    const first = focusable[0];
+    const last = focusable[focusable.length - 1];
+    const relatedTarget = event.relatedTarget;
+    const cameFromInside = !relatedTarget || root.contains(relatedTarget);
+    const target = edge === "start" ? cameFromInside ? last : first : cameFromInside ? first : last;
+    target?.focus();
+  };
+  const showHeader = title || showCloseIcon;
   return /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_1__["default"].createElement(Root, {
-    tabIndex: 0,
+    ref: rootRef,
     role: "dialog",
-    "aria-modal": "true"
-  }, showHeader && /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_1__["default"].createElement(_presentational_Header__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .A, {
-    title: screenTitle,
+    "aria-modal": "true",
+    "aria-labelledby": title ? TITLE_ID : undefined,
+    "aria-label": title ? undefined : fallbackName,
+    className: "webchat-xapp-overlay-root",
+    "data-xapp-overlay": true
+  }, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_1__["default"].createElement(FocusGuard, {
+    tabIndex: 0,
+    onFocus: handleFocusGuard("start"),
+    [FOCUS_GUARD_ATTRIBUTE]: "start"
+  }), showHeader && /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_1__["default"].createElement(_presentational_Header__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .A, {
+    title: title,
+    titleId: TITLE_ID,
     hideBackButton: true,
-    onClose: showCloseIcon ? handleCloseIconClick : undefined
+    onClose: showCloseIcon ? handleCloseIconClick : undefined,
+    closeButtonAriaLabel: closeButtonAriaLabel,
+    closeButtonRef: closeButtonRef
   }), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_1__["default"].createElement(Iframe, {
+    ref: iframeRef,
     src: url,
-    allow: " accelerometer; ambient-light-sensor; autoplay; battery; bluetooth; camera;  cross-origin-isolated; display-capture; document-domain; encrypted-media;  execution-while-not-rendered; execution-while-out-of-viewport;  fullscreen; gamepad; geolocation; gyroscope; hid; idle-detection;  interest-cohort; local-fonts; magnetometer; microphone; midi;  otp-credentials; payment; picture-in-picture; publickey-credentials-get;  screen-wake-lock; serial; speaker-selection; usb; web-share;  xr-spatial-tracking"
+    title: title || fallbackName,
+    allow: " accelerometer; ambient-light-sensor; autoplay; battery; bluetooth; camera; cross-origin-isolated; display-capture; document-domain; encrypted-media; execution-while-not-rendered; execution-while-out-of-viewport; fullscreen; gamepad; geolocation; gyroscope; hid; idle-detection; interest-cohort; local-fonts; magnetometer; microphone; midi; otp-credentials; payment; picture-in-picture; publickey-credentials-get; screen-wake-lock; serial; speaker-selection; usb; web-share; xr-spatial-tracking"
+  }), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_1__["default"].createElement(FocusGuard, {
+    tabIndex: 0,
+    onFocus: handleFocusGuard("end"),
+    [FOCUS_GUARD_ATTRIBUTE]: "end"
   }));
 };
 /* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = (xAppOverlay);
@@ -37848,10 +38041,23 @@ const QueueUpdates = props => {
 /* harmony import */ var _emotion_styled__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(84937);
 /* harmony import */ var _cognigy_chat_components__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(2854);
 /* harmony import */ var _utils_is_mounted__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(3657);
+/* harmony import */ var _presentational_SrOnlyLiveRegion__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(65766);
+
 
 
 
 
+// How long typing must be continuously visible before it is announced to
+// screen readers (CGY-3146). Short bursts stay silent on purpose: when the
+// reply lands within this window, its own announcement (through
+// <ScreenReaderLiveRegion>) supersedes a "typing" heads-up, which would only
+// add noise to the polite queue.
+const ANNOUNCE_DELAY_MS = 2000;
+
+// Module-global so every typing session gets a fresh LiveRegionMessage id —
+// a repeated announcement with the same text still needs a new node to be
+// re-announced (see SrOnlyLiveRegion's keying).
+let announcementCounter = 0;
 const ChatTypingIndicator = (0,_emotion_styled__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A)(_cognigy_chat_components__WEBPACK_IMPORTED_MODULE_2__/* .TypingIndicator */ .Vp)({
   marginBlock: 0
 });
@@ -37863,7 +38069,8 @@ const TypingIndicator = props => {
     active,
     delay,
     direction,
-    disableBorder
+    disableBorder,
+    announcementText
   } = props;
   const isMounted = (0,_utils_is_mounted__WEBPACK_IMPORTED_MODULE_3__/* .useIsMounted */ .a)();
 
@@ -37878,6 +38085,7 @@ const TypingIndicator = props => {
    * -----++++++++++++++++++++++--------++++++++-
    */
   const [isVisible, setIsVisible] = (0,react__WEBPACK_IMPORTED_MODULE_0__.useState)(active);
+  const [announcement, setAnnouncement] = (0,react__WEBPACK_IMPORTED_MODULE_0__.useState)(null);
   (0,react__WEBPACK_IMPORTED_MODULE_0__.useEffect)(() => {
     let timeout;
     if (active) {
@@ -37891,11 +38099,51 @@ const TypingIndicator = props => {
       if (timeout) clearTimeout(timeout);
     };
   }, [active]);
-  if (!isVisible) return /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(HiddenChatTypingIndicator, null);
-  return /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(ChatTypingIndicator, {
+
+  // Read at fire time through a ref so a translations/config update while
+  // typing is visible neither restarts the delay nor emits a duplicate
+  // announcement mid-session.
+  const announcementTextRef = (0,react__WEBPACK_IMPORTED_MODULE_0__.useRef)(announcementText);
+  announcementTextRef.current = announcementText;
+
+  // Announce a sustained typing session once (WCAG 4.1.3 Status Messages).
+  //
+  // The delay counts continuous typing ("active"): typing stopping (typingOff,
+  // or an output removing the indicator) cancels the pending announcement,
+  // resuming restarts it. The indicator's visible hide tail (`delay`) is not
+  // typing, so nothing can be announced after the reply has already landed.
+  //
+  // The emitted announcement lives as long as the indicator is visible: at
+  // most one per visible session, so typing flapping off/on between queued
+  // delayed messages of one bot turn doesn't re-announce. When the indicator
+  // hides, the text is removed silently (removals aren't announced) so it
+  // can't be read later as stale status. Typing-stopped itself is not
+  // announced — the arriving message covers it.
+  const hasAnnouncedRef = (0,react__WEBPACK_IMPORTED_MODULE_0__.useRef)(false);
+  (0,react__WEBPACK_IMPORTED_MODULE_0__.useEffect)(() => {
+    if (isVisible) return;
+    hasAnnouncedRef.current = false;
+    setAnnouncement(null);
+  }, [isVisible]);
+  (0,react__WEBPACK_IMPORTED_MODULE_0__.useEffect)(() => {
+    if (!active || hasAnnouncedRef.current) return;
+    const timeout = setTimeout(() => {
+      hasAnnouncedRef.current = true;
+      setAnnouncement({
+        id: `typing-${++announcementCounter}`,
+        text: announcementTextRef.current ?? "A reply is being typed"
+      });
+    }, ANNOUNCE_DELAY_MS);
+    return () => clearTimeout(timeout);
+  }, [active]);
+  return /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(react__WEBPACK_IMPORTED_MODULE_0__["default"].Fragment, null, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_presentational_SrOnlyLiveRegion__WEBPACK_IMPORTED_MODULE_4__/* .SrOnlyLiveRegion */ .Y, {
+    id: "webchatTypingIndicatorLiveRegion",
+    role: "status",
+    message: announcement
+  }), isVisible ? /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(ChatTypingIndicator, {
     direction: direction,
     disableBorder: disableBorder
-  });
+  }) : /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(HiddenChatTypingIndicator, null));
 };
 /* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = (TypingIndicator);
 
@@ -38100,6 +38348,10 @@ const InputPluginRenderer = ({
 /* harmony import */ var react_responsive__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(react_responsive__WEBPACK_IMPORTED_MODULE_9__);
 /* harmony import */ var _menu_PersistentMenu__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(71117);
 /* harmony import */ var _FloatingLabel__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(93277);
+/* harmony import */ var _presentational_Notifications__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(82833);
+/* harmony import */ var _utils_speech_recognition__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(44120);
+
+
 
 
 
@@ -38249,46 +38501,66 @@ const InputContainer = _emotion_styled__WEBPACK_IMPORTED_MODULE_1__/* ["default"
 const Label = (0,_emotion_styled__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A)(_FloatingLabel__WEBPACK_IMPORTED_MODULE_11__/* ["default"] */ .A)({
   padding: "8px 2px"
 });
-const getSpeechRecognition = () => {
-  try {
-    return new SpeechRecognition();
-  } catch (e) {}
-  try {
-    return new webkitSpeechRecognition();
-  } catch (e) {}
-  return null;
-};
 const combineStrings = (str1, str2) => {
   if (!str1) return str2;
   if (!str2) return str1;
   return str1 + " " + str2;
 };
-let webchatSpeechTimeoutRef = null;
 class BaseInput extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureComponent {
   constructor(props) {
     super(props);
-    const speechRecognition = getSpeechRecognition();
-    if (speechRecognition) {
-      speechRecognition.continuous = true;
-      speechRecognition.interimResults = true;
-      speechRecognition.onresult = this.handleSpeechResult;
-      if (props.config.settings.widgetSettings.STTLanguage) {
-        speechRecognition.lang = props.config.settings.widgetSettings.STTLanguage;
-      }
-    }
     this.state = {
       text: "",
-      speechRecognition,
       speechResult: "",
-      isFinalResult: false,
       isMenuOpen: false,
       selectionStart: 0,
       selectionEnd: 0
     };
+    this.configureSpeechRecognition();
   }
   inputRef = /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createRef();
   menuRef = /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createRef();
   fileInputRef = /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createRef();
+
+  /**
+   * The live recognizer, or null where the browser has no Web Speech API.
+   *
+   * Deliberately NOT component state: it is a mutable host object whose
+   * identity never changes, and keeping it in state invited
+   * `setState({ speechRecognition: { ...recognizer, lang } })` to apply the
+   * language. Native properties live on the prototype, so that spread
+   * copied nothing but `lang` — `start`, `stop` and every event handler
+   * disappeared, and the next click threw "start is not a function"
+   * (CGY-37417).
+   */
+  speechRecognition = (0,_utils_speech_recognition__WEBPACK_IMPORTED_MODULE_13__/* .createSpeechRecognition */ .oC)();
+
+  /** The warm-up or idle stop timer, whichever phase recognition is in. */
+  speechTimeout = null;
+
+  /** Whether the engine has produced any transcript since `start()`. */
+  hasTranscript = false;
+
+  /**
+   * Set while we are the ones ending recognition, so `onend` can tell an
+   * engine-initiated end (which has to reconcile the UI) from our own.
+   */
+  endingDeliberately = false;
+
+  /**
+   * Set on the submit path, where a transcript arriving afterwards belongs
+   * to the message that was already sent. `abort()` should prevent one, but
+   * a result already dispatched can still be delivered, so the handler
+   * checks this too.
+   */
+  discardResults = false;
+
+  /**
+   * A start() the engine rejected because a previous stop() had not reached
+   * `onend` yet. Retried once from `onend`, so a stop-then-start inside that
+   * window isn't silently dropped.
+   */
+  restartPending = false;
   componentDidMount() {
     // Global handler to modify the input text
     window.WebChatInputTextCallback = text => {
@@ -38297,98 +38569,311 @@ class BaseInput extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
       });
     };
     setTimeout(() => {
+      // Don't pull focus away from a modal dialog the widget has opened in
+      // the meantime (date picker, xApp overlay, Modal). Scoped to the
+      // widget root: a dialog elsewhere on the host page (cookie banner, a
+      // modal that embeds the launcher) must not suppress the autofocus.
+      const root = this.inputRef.current?.closest("[data-cognigy-webchat-root]");
+      const hasOpenDialog = !!root?.querySelector('[role="dialog"][aria-modal="true"], dialog[open]');
+      if (hasOpenDialog) return;
       if (!this.props.config.settings.widgetSettings.disableInputAutofocus) {
         this.inputRef.current?.focus?.();
       }
     }, 200);
   }
   componentDidUpdate() {
+    this.applySTTLanguage();
+  }
+  componentWillUnmount() {
+    this.clearSpeechTimeout();
+
+    // The input unmounts on every screen change (back to the home screen,
+    // into the previous-conversations list). Without releasing the engine
+    // here the microphone stays open — browser recording indicator and
+    // all — with nothing left to receive the transcript.
+    if (this.speechRecognition) {
+      this.endingDeliberately = true;
+      this.speechRecognition.onresult = null;
+      this.speechRecognition.onerror = null;
+      this.speechRecognition.onend = null;
+      try {
+        // abort(), not stop(): a final transcript can no longer be
+        // delivered anywhere, so don't wait for one.
+        this.speechRecognition.abort();
+      } catch {
+        // Never started, or already finished.
+      }
+    }
+
+    // `sttActive` lives in the store, which outlives this component —
+    // leaving it set would show an active mic button on the next visit to
+    // the chat screen with nothing actually listening.
+    if (this.props.sttActive) this.props.onSetSTTActive(false);
+  }
+  configureSpeechRecognition() {
+    const recognition = this.speechRecognition;
+    if (!recognition) return;
+    recognition.continuous = true;
+    recognition.interimResults = true;
+    recognition.onresult = this.handleSpeechResult;
+    recognition.onerror = this.handleSpeechError;
+    recognition.onend = this.handleSpeechEnd;
+    this.applySTTLanguage();
+  }
+
+  /**
+   * Applies the configured STT language to the live recognizer.
+   *
+   * Runs on every update because the endpoint config is fetched
+   * asynchronously, so `STTLanguage` is typically absent when this
+   * component first mounts. While it is unset we leave the engine's own
+   * default (which follows the page's `lang`) rather than forcing a locale,
+   * so an unconfigured German page keeps transcribing German.
+   */
+  applySTTLanguage() {
     const sttLanguage = this.props.config.settings.widgetSettings.STTLanguage;
-    if (this.state.speechRecognition && sttLanguage && this.state.speechRecognition.lang !== sttLanguage) {
-      this.setState({
-        speechRecognition: {
-          ...this.state.speechRecognition,
-          lang: sttLanguage
-        }
-      });
+    if (this.speechRecognition && sttLanguage && this.speechRecognition.lang !== sttLanguage) {
+      this.speechRecognition.lang = sttLanguage;
     }
   }
-  componentWillUnmount() {
-    if (webchatSpeechTimeoutRef) {
-      clearTimeout(webchatSpeechTimeoutRef);
+  clearSpeechTimeout() {
+    if (this.speechTimeout) {
+      clearTimeout(this.speechTimeout);
+      this.speechTimeout = null;
     }
   }
+
+  /**
+   * Arms the single stop timer. `delay` is the warm-up budget before the
+   * first transcript and the idle budget after it — the two differ by an
+   * order of magnitude, see the constants' rationale.
+   */
+  armSpeechTimeout(delay) {
+    this.clearSpeechTimeout();
+    this.speechTimeout = setTimeout(() => {
+      this.speechTimeout = null;
+      const recognizedNothing = !this.hasTranscript;
+
+      // A dictation that produced text ended normally, and the user's
+      // next move is to edit or send it, so focus goes to the input.
+      // Having heard nothing is a failure like any other: leave focus
+      // wherever the user put it (SC 3.2.1).
+      this.endSpeech({
+        restoreFocus: !recognizedNothing
+      });
+
+      // The whole warm-up budget spent without a single word: the
+      // engine never reached its speech service, or the user never
+      // spoke. Either way, say so — this path used to stop the
+      // microphone silently (CGY-37417).
+      if (recognizedNothing) this.notifySpeechFailure("no-transcript");
+    }, delay);
+  }
+  notifySpeechFailure(failure) {
+    (0,_presentational_Notifications__WEBPACK_IMPORTED_MODULE_12__/* .createErrorNotification */ .gi)((0,_utils_speech_recognition__WEBPACK_IMPORTED_MODULE_13__/* .getSpeechRecognitionErrorMessage */ .JO)(failure, this.props.config.settings.customTranslations));
+  }
   handleSpeechResult = e => {
+    // A result that raced the abort() on the submit path. The message it
+    // belongs to has already been sent and `text` cleared, so committing
+    // it would refill the input with what the user just sent — and their
+    // next Enter would send it a second time.
+    if (this.discardResults) return;
     const result = e.results[e.resultIndex];
-    const {
-      isFinal
-    } = result;
     const {
       transcript
     } = result[0];
 
-    // Reset the 3s timeout for active speech recognition
-    if (webchatSpeechTimeoutRef) {
-      clearTimeout(webchatSpeechTimeoutRef);
+    // Edge emits placeholder results — `isFinal` with an empty transcript
+    // — when speech starts and again on stop(); Chrome never does.
+    // Committing one would wipe the interim transcript on screen, and
+    // counting one as "the engine is producing output" would start the
+    // short idle countdown seconds before the first real word arrives.
+    if (!transcript) return;
+    this.hasTranscript = true;
+
+    // Only while listening: stop() lets one last result land afterwards,
+    // and re-arming then would stop recognition and steal focus back to
+    // the input seconds after the user had moved on.
+    if (this.props.sttActive) this.armSpeechTimeout(_utils_speech_recognition__WEBPACK_IMPORTED_MODULE_13__/* .TRANSCRIPT_IDLE_TIMEOUT_MS */ .r0);
+
+    // Interim results are shown next to the typed text but not committed;
+    // only a final result becomes part of the message.
+    if (result.isFinal) {
+      this.setState(({
+        text
+      }) => ({
+        speechResult: "",
+        text: combineStrings(text, transcript)
+      }));
+      return;
     }
-    webchatSpeechTimeoutRef = setTimeout(() => {
-      this.handleCancelSpeech();
-    }, 3000);
     this.setState({
-      speechResult: transcript,
-      isFinalResult: isFinal
+      speechResult: transcript
+    });
+  };
+  handleSpeechError = event => {
+    // `aborted` is just the engine acknowledging our own stop()/abort().
+    if (event.error === "aborted") return;
+    if (event.error === "language-not-supported" || event.error === "bad-grammar") {
+      // Misconfiguration the end user cannot act on: they get the
+      // generic message, the operator gets the detail.
+      console.warn(`[cognigy-webchat] speech recognition rejected the configured STT language "${this.speechRecognition?.lang}" (${event.error})`);
+    }
+
+    // A failure is not a user-initiated stop: leave focus alone. The
+    // button's `aria-pressed` change and the notification convey it.
+    this.endSpeech({
+      restoreFocus: false
+    });
+    this.notifySpeechFailure(event.error);
+  };
+  handleSpeechEnd = () => {
+    const wasDeliberate = this.endingDeliberately;
+    this.endingDeliberately = false;
+
+    // The engine is finished, so anything still held as an interim never
+    // got a final result. Commit it rather than let the user's visible
+    // words vanish. A real final would already have moved it into `text`
+    // and emptied this, so there is nothing to duplicate.
+    this.commitPendingTranscript();
+
+    // The user pressed the button again while the engine was still
+    // winding down from the previous stop, so `start()` was rejected.
+    // Honour it now that the engine has actually ended — once, because
+    // only a rejected start sets the flag.
+    if (this.restartPending) {
+      this.restartPending = false;
+      this.startSpeech();
+      return;
+    }
+    if (wasDeliberate) return;
+
+    // The engine ended on its own — its service dropped the connection,
+    // or it decided the utterance was over despite `continuous`.
+    // Reconcile, so the button can never claim to be listening when
+    // nothing is (SC 4.1.2).
+    if (!this.props.sttActive) return;
+    const recognizedNothing = !this.hasTranscript;
+    this.endSpeech({
+      restoreFocus: false
     });
 
-    // only send messages that are not 'interim'
-    if (isFinal) {
-      this.setState({
-        speechResult: "",
-        text: combineStrings(this.state.text, transcript)
-      });
-    }
+    // Ending with nothing to show for it is exactly the silent failure
+    // this change exists to remove, so say so. `onerror` cannot reach
+    // here — it ends recognition itself, which marks the end deliberate.
+    if (recognizedNothing) this.notifySpeechFailure("no-transcript");
   };
+
+  /**
+   * Moves an un-finalized transcript into the message text. No-op when the
+   * engine already finalized it (or when the submit path discarded it).
+   */
+  commitPendingTranscript() {
+    this.setState(({
+      text,
+      speechResult
+    }) => speechResult ? {
+      text: combineStrings(text, speechResult),
+      speechResult: ""
+    } : null);
+  }
+
+  /** The user pressed the microphone button to stop dictating. */
   handleCancelSpeech = () => {
-    const {
-      speechRecognition
-    } = this.state;
-    speechRecognition.stop();
-    if (webchatSpeechTimeoutRef) {
-      clearTimeout(webchatSpeechTimeoutRef);
+    this.endSpeech({
+      restoreFocus: true
+    });
+  };
+
+  /**
+   * Ends recognition and reconciles the UI.
+   *
+   * `discardPending` is for the submit path only: the message has been sent
+   * and `text` cleared, so a transcript arriving afterwards has to be
+   * thrown away rather than committed. Everywhere else a late final is
+   * welcome — it is the engine's better-punctuated version of the interim
+   * that was on screen, and dropping it would lose the user's words.
+   *
+   * `restoreFocus` is true only when the user themselves stopped: they are
+   * likely to carry on typing. On an error or a timeout the stop was not
+   * requested, and moving focus then would take it from wherever the user
+   * had put it (SC 3.2.1).
+   */
+  endSpeech({
+    discardPending = false,
+    restoreFocus
+  }) {
+    this.clearSpeechTimeout();
+    this.endingDeliberately = true;
+    this.discardResults = discardPending;
+    try {
+      if (discardPending) {
+        // abort() asks the engine not to return a result at all,
+        // unlike stop(), which finalizes what it heard.
+        this.speechRecognition?.abort();
+      } else {
+        this.speechRecognition?.stop();
+      }
+    } catch {
+      // Not currently running.
     }
     this.props.onSetSTTActive(false);
-    this.setState({
-      speechResult: "",
-      isFinalResult: false
+
+    // The interim transcript deliberately stays on screen. The engine may
+    // still upgrade it to a final; if it never does, `onend` commits it.
+    // Clearing it here would lose the words the user watched appear —
+    // Edge answers stop() with an empty placeholder final, which carries
+    // no text to put back. Only the submit path clears it, because that
+    // text is already on its way.
+    if (discardPending) this.setState({
+      speechResult: ""
     });
-    if (this.inputRef.current) {
+    if (restoreFocus && this.inputRef.current) {
       this.inputRef.current.focus();
     }
-  };
+  }
   isSTTSupported() {
-    return !!this.state.speechRecognition;
+    return !!this.speechRecognition;
   }
   toggleSTT = e => {
     e.preventDefault();
-    const {
-      speechRecognition
-    } = this.state;
-    const {
-      sttActive,
-      onSetSTTActive
-    } = this.props;
-    if (sttActive) {
+    if (this.props.sttActive) {
       this.handleCancelSpeech();
-    } else {
-      speechRecognition.start();
-      if (webchatSpeechTimeoutRef) {
-        clearTimeout(webchatSpeechTimeoutRef);
-      }
-      webchatSpeechTimeoutRef = setTimeout(() => {
-        this.handleCancelSpeech();
-      }, 3000);
+      return;
     }
-    onSetSTTActive(!sttActive);
+    this.startSpeech();
   };
+  startSpeech() {
+    const recognition = this.speechRecognition;
+    if (!recognition) return;
+    try {
+      recognition.start();
+    } catch (error) {
+      if (error?.name === "InvalidStateError") {
+        // The engine is still winding down from a previous stop()
+        // whose `onend` hasn't arrived. Claiming to listen here would
+        // leave the button on with nothing running, so wait for the
+        // end and start then.
+        this.restartPending = true;
+        return;
+      }
+
+      // The engine never started listening, so the button must not
+      // claim that it did.
+      this.notifySpeechFailure("start-failed");
+      return;
+    }
+
+    // Only now that a session is really running: a rejected start above
+    // leaves the previous session's flags in place, so a stale result
+    // still in flight from an aborted submit stays discarded instead of
+    // refilling the input with the message that was just sent.
+    this.hasTranscript = false;
+    this.endingDeliberately = false;
+    this.discardResults = false;
+    this.armSpeechTimeout(_utils_speech_recognition__WEBPACK_IMPORTED_MODULE_13__/* .FIRST_TRANSCRIPT_TIMEOUT_MS */ .rt);
+    this.props.onSetSTTActive(true);
+  }
   handleChangeTextValue = e => {
     this.setState({
       text: e.target.value
@@ -38404,16 +38889,39 @@ class BaseInput extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
     } = this.state;
     const {
       sttActive,
-      fileList
+      fileList,
+      fileUploadError
     } = this.props;
-    let messageText = text;
+
+    // Exactly what the field shows, which is `text` plus any transcript
+    // not yet finalized — including after recognition stopped, while the
+    // interim waits for `onend` to commit it.
+    const messageText = combineStrings(text, speechResult);
     if (sttActive) {
-      if (text && speechResult) {
-        messageText = text + " " + speechResult;
-      }
-      this.handleCancelSpeech();
+      // Discard whatever the engine still owes us: it belongs to this
+      // message, which is on its way. handleSubmit restores focus to
+      // the input itself once the message is sent.
+      this.endSpeech({
+        discardPending: true,
+        restoreFocus: false
+      });
     }
-    if (!text && !fileList) return;
+
+    /**
+     * Enter reaches `handleSubmit` straight from `handleInputKeyDown`, which does
+     * not consult the Send button — so both of the button's `disabled` conditions
+     * have to be repeated here or Enter bypasses them.
+     *
+     * `fileList` is always an array (it defaults to `[]`), so emptiness has to be
+     * checked by length: `!fileList` would never be true.
+     *
+     * The text half checks `messageText` rather than the button's `state.text`
+     * on purpose: while dictating, the pending transcript is shown in the field
+     * but is not in `text` yet, and a dictation the user never typed a word of
+     * must still submit (CGY-37417).
+     */
+    if (fileUploadError) return;
+    if (!messageText && !fileList?.length) return;
     const attachments = [];
     fileList.forEach(fileItem => {
       if (fileItem.uploadFileMeta) {
@@ -38430,7 +38938,8 @@ class BaseInput extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
     }
     this.props.onSetFileList([]);
     this.setState({
-      text: ""
+      text: "",
+      speechResult: ""
     }, () => {
       this.props.onSendMessage(messageText, data, {
         collate: true
@@ -38592,8 +39101,15 @@ class BaseInput extends react__WEBPACK_IMPORTED_MODULE_0__["default"].PureCompon
         } : undefined
       }));
     }), props.config.settings.behavior.enableSTT && /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(SpeechButton, {
+      type: "button",
       className: classnames__WEBPACK_IMPORTED_MODULE_2___default()("webchat-input-button-speech", sttActive && "webchat-input-button-speech-active"),
-      "aria-label": customTranslations?.ariaLabels?.speechToText ?? "Speech to text",
+      "aria-label": customTranslations?.ariaLabels?.speechToText ?? "Speech to text"
+      // APG toggle button: the "listening"
+      // state is otherwise conveyed only by
+      // the animated background, which is
+      // aria-hidden (SC 4.1.2).
+      ,
+      "aria-pressed": sttActive,
       id: "webchatInputMessageSpeechButton",
       onClick: this.toggleSTT,
       disabled: !this.isSTTSupported()
@@ -38934,6 +39450,7 @@ const PreviewUploadedFiles = () => {
     key: index,
     id: `filePreview${index}`
   }, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(UploadedFilePreview, null, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(RemoveFileButton, {
+    type: "button",
     onClick: () => onRemoveFileButtonClick(index),
     onFocus: () => {
       if (removeFileButtonRefs.current[index]) {
@@ -39914,6 +40431,8 @@ const Header = props => {
     showChatScreen,
     autoFocusScreenTitle,
     onDeleteAllConversations,
+    titleId = "webchatHeaderTitle",
+    closeButtonAriaLabel,
     ...rest
   } = props;
   const ariaLabels = (0,_webchat_helper_useSelector__WEBPACK_IMPORTED_MODULE_13__/* .useSelector */ .d)(state => state.config.settings.customTranslations?.ariaLabels);
@@ -39958,10 +40477,10 @@ const Header = props => {
     title: "Cognigy.AI Logo",
     role: "img",
     className: classnames__WEBPACK_IMPORTED_MODULE_8___default()("webchat-header-cognigy-logo")
-  })), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(HeaderText, {
+  })), title?.trim() && /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(HeaderText, {
     ref: headerTextRef,
     variant: "h2-semibold",
-    id: "webchatHeaderTitle",
+    id: titleId,
     className: "webchat-header-title",
     margin: 0,
     tabIndex: -1
@@ -39993,7 +40512,7 @@ const Header = props => {
     "data-header-close-button": true,
     onClick: handleCloseClick,
     className: "webchat-header-close-button",
-    "aria-label": ariaLabels?.closeChat ?? "Close chat",
+    "aria-label": closeButtonAriaLabel ?? ariaLabels?.closeChat ?? "Close chat",
     ref: closeButtonRef
   }, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_assets_close_16px_svg__WEBPACK_IMPORTED_MODULE_3__/* ["default"] */ .A, null)))), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_Notifications__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .Ay, null));
 };
@@ -40581,7 +41100,8 @@ MultilineInput.displayName = "MultilineInput";
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
 /* harmony export */   Ay: () => (__WEBPACK_DEFAULT_EXPORT__),
-/* harmony export */   UI: () => (/* binding */ createNotification)
+/* harmony export */   UI: () => (/* binding */ createNotification),
+/* harmony export */   gi: () => (/* binding */ createErrorNotification)
 /* harmony export */ });
 /* unused harmony export createPersistentNotification */
 /* unused harmony import specifier */ var toast;
@@ -40597,6 +41117,25 @@ const Notifications = () => {
     gutter: 1,
     toastOptions: {
       duration: 1500,
+      // Failures stay up much longer than confirmations: the user has
+      // to read a remedy and act on it, not just register that
+      // something worked. The longest of these ("Microphone access
+      // is blocked. Allow it in your browser settings…") is ~95
+      // characters, which needs well over 5s to notice and read
+      // (SC 2.2.1).
+      // red40 on red10 is 5.27:1, mirroring the vetted green pairing
+      // below (SC 1.4.3).
+      error: {
+        duration: 12000,
+        style: {
+          backgroundColor: theme.red10,
+          color: theme.red40
+        },
+        iconTheme: {
+          primary: theme.red40,
+          secondary: theme.red10
+        }
+      },
       style: {
         backgroundColor: theme.green10,
         borderRadius: 0,
@@ -40648,6 +41187,20 @@ function createNotification(message, options = {}) {
   });
 }
 
+/**
+ * Same as `createNotification`, styled as a failure and shown for longer.
+ * Use for anything the user needs to act on (e.g. a dictation that could not
+ * be started) — the message is mirrored into <StatusLiveRegion> like every
+ * other toast, so it reaches screen readers too (SC 3.3.1 / 4.1.3).
+ */
+function createErrorNotification(message, options = {}) {
+  react_hot_toast__WEBPACK_IMPORTED_MODULE_2__/* ["default"] */ .Ay.error(message, {
+    ...options,
+    className: "webchat-toast-notification webchat-toast-notification-error",
+    ariaProps: silencedAriaProps
+  });
+}
+
 /**
  * Creates a persistent notification.
  * Can be dismissed by calling the returned function.
@@ -41388,8 +41941,7 @@ const TeaserMessage = props => {
     className: "webchat-teaser-message-root"
   }, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_UnreadMessagePreview__WEBPACK_IMPORTED_MODULE_3__/* ["default"] */ .A, {
     className: "webchat-teaser-message-bubble",
-    onClick: handleMessageClick,
-    "aria-live": "polite"
+    onClick: handleMessageClick
   }, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(TeaserMessageHeader, {
     className: "webchat-teaser-message-header"
   }, config?.settings?.layout?.logoUrl ? /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(HeaderLogo, {
@@ -41430,6 +41982,63 @@ const TeaserMessage = props => {
 
 /***/ },
 
+/***/ 59359
+(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   A: () => (__WEBPACK_DEFAULT_EXPORT__)
+/* harmony export */ });
+/* harmony import */ var react__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(51649);
+/* harmony import */ var _SrOnlyLiveRegion__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(65766);
+
+
+let teaserAnnouncementCounter = 0;
+
+/**
+ * Announces the teaser message popup when it appears next to the toggle
+ * button (WCAG 4.1.3 Status Messages, CGY-3270). The teaser shows while the
+ * webchat is CLOSED, so it cannot announce through <StatusLiveRegion> —
+ * that region lives inside the open chat window and is unmounted at that
+ * point. This announcer therefore owns a separate region that is mounted
+ * with the toggle button for the whole page lifetime, so it pre-exists any
+ * teaser (a live region only announces changes to a node already in the
+ * accessibility tree — an `aria-live` attribute on the teaser bubble itself
+ * mounts together with its content and is never voiced).
+ *
+ * role="status" (polite), not role="alert": a proactive teaser is advisory
+ * and must not interrupt what the user is currently doing on the host page.
+ *
+ * Announces again when the preview text changes while the teaser is showing
+ * (a newer bot message replaces the preview). Hiding the teaser (dismissed,
+ * chat opened) clears the region silently so users browsing the page later
+ * don't find stale preview text.
+ */
+const TeaserMessageAnnouncer = ({
+  active,
+  text,
+  label
+}) => {
+  const [message, setMessage] = (0,react__WEBPACK_IMPORTED_MODULE_0__.useState)(null);
+  (0,react__WEBPACK_IMPORTED_MODULE_0__.useEffect)(() => {
+    if (!active || !text) {
+      setMessage(null);
+      return;
+    }
+    setMessage({
+      id: `webchatTeaserMessage-${++teaserAnnouncementCounter}`,
+      text: `${label}: ${text}`
+    });
+  }, [active, text, label]);
+  return /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_SrOnlyLiveRegion__WEBPACK_IMPORTED_MODULE_1__/* .SrOnlyLiveRegion */ .Y, {
+    id: "webchatTeaserMessageLiveRegion",
+    role: "status",
+    message: message
+  });
+};
+/* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = (TeaserMessageAnnouncer);
+
+/***/ },
+
 /***/ 52077
 (__unused_webpack_module, __webpack_exports__, __webpack_require__) {
 
@@ -41454,10 +42063,28 @@ const StyledToggleButtonOuter = _emotion_styled__WEBPACK_IMPORTED_MODULE_1__/* [
   width: 30,
   height: 16,
   borderRadius: 15,
-  border: `1px solid ${theme.black80}`,
+  // black50 (#808080) keeps the track boundary ≥ 3:1 on white (WCAG 1.4.11) — black80 was ~1.6:1
+  border: `1px solid ${theme.black50}`,
   backgroundColor: theme.white,
   cursor: disabled ? "default" : "pointer",
   transition: "background-color 0.2s ease-in-out",
+  // Invisible hit-area extension so the pointer target is ≥ 24x24px (WCAG 2.2 SC 2.5.8)
+  position: "relative",
+  "&::before": {
+    content: '""',
+    position: "absolute",
+    top: -5,
+    bottom: -5,
+    left: 0,
+    right: 0
+  },
+  "&:focus-visible": {
+    outline: `2px solid ${theme.primaryColorFocus}`,
+    outlineOffset: 2
+  },
+  "@media (prefers-reduced-motion: reduce)": {
+    transition: "none"
+  },
   "&.active": {
     backgroundColor: disabled ? theme.secondaryColorDisabled : theme.secondaryColor,
     "&:hover": {
@@ -41477,6 +42104,9 @@ const StyledToggleButtonInner = _emotion_styled__WEBPACK_IMPORTED_MODULE_1__/* [
   cursor: disabled ? "default" : "pointer",
   transform: isActive ? "translateX(14px)" : "translateX(0px)",
   transition: "transform 0.2s ease-in-out, background-color 0.2s ease-in-out",
+  "@media (prefers-reduced-motion: reduce)": {
+    transition: "none"
+  },
   "&:hover": {
     backgroundColor: disabled ? theme.secondaryColorDisabled : theme.secondaryColorHover
   },
@@ -41493,10 +42123,13 @@ const ToggleButton = props => {
     isActive,
     className,
     disabled,
+    id,
     "aria-labelledby": ariaLabelledBy
   } = props;
   const [isHovered, setIsHovered] = react__WEBPACK_IMPORTED_MODULE_0__["default"].useState(false);
   return /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(StyledToggleButtonOuter, {
+    type: "button",
+    id: id,
     className: classnames__WEBPACK_IMPORTED_MODULE_2___default()(className, "webchat-toggle-button-root", isActive && "active"),
     onClick: onClick,
     isActive: isActive,
@@ -41508,7 +42141,6 @@ const ToggleButton = props => {
     onMouseLeave: () => setIsHovered(false)
   }, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(StyledToggleButtonInner, {
     className: classnames__WEBPACK_IMPORTED_MODULE_2___default()("webchat-toggle-button-inner-circle", isActive && "active", isHovered && "hovered"),
-    onClick: onClick,
     isActive: isActive,
     disabled: disabled
   }));
@@ -41572,6 +42204,68 @@ const UnreadMessagePreview = _emotion_styled__WEBPACK_IMPORTED_MODULE_0__/* ["de
 
 /***/ },
 
+/***/ 1715
+(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   A: () => (__WEBPACK_DEFAULT_EXPORT__)
+/* harmony export */ });
+/* harmony import */ var react__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(51649);
+/* harmony import */ var _SrOnlyLiveRegion__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(65766);
+
+
+let unreadAnnouncementCounter = 0;
+
+/**
+ * Announces the unread-message count when it changes (WCAG 4.1.3 Status
+ * Messages, technique ARIA22, CGY-3163). Sighted users get this count from
+ * the badge on the toggle button and from the page title indicator; neither
+ * reaches a screen reader on its own — the badge only changes the toggle
+ * button's accessible name (read on focus, never live) and browsers do not
+ * announce `document.title` changes at all.
+ *
+ * Unread messages only accumulate while the chat window is closed or the
+ * page is hidden, so <StatusLiveRegion> (inside the open window) cannot
+ * carry this. The region is mounted for the page lifetime — next to the
+ * toggle button, independent of it — so it pre-exists the first count
+ * change (a live region only announces changes to a node already in the
+ * accessibility tree).
+ *
+ * role="status" (polite), not role="alert": a new-message notice is
+ * advisory and must not interrupt what the user is doing on the host page.
+ *
+ * `active` mirrors the visual indicators (badge or title indicator
+ * enabled): when neither is shown, screen-reader users are not notified
+ * either. Clearing the count (chat opened, page visible again) empties the
+ * region silently so users browsing the page later don't find stale text.
+ */
+const UnreadMessagesAnnouncer = ({
+  active,
+  count,
+  singularText,
+  pluralText
+}) => {
+  const [message, setMessage] = (0,react__WEBPACK_IMPORTED_MODULE_0__.useState)(null);
+  (0,react__WEBPACK_IMPORTED_MODULE_0__.useEffect)(() => {
+    if (!active || count === 0) {
+      setMessage(null);
+      return;
+    }
+    setMessage({
+      id: `webchatUnreadMessages-${++unreadAnnouncementCounter}`,
+      text: count === 1 ? singularText : `${count} ${pluralText}`
+    });
+  }, [active, count, singularText, pluralText]);
+  return /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_SrOnlyLiveRegion__WEBPACK_IMPORTED_MODULE_1__/* .SrOnlyLiveRegion */ .Y, {
+    id: "webchatUnreadMessagesLiveRegion",
+    role: "status",
+    message: message
+  });
+};
+/* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = (UnreadMessagesAnnouncer);
+
+/***/ },
+
 /***/ 31961
 (__unused_webpack_module, __webpack_exports__, __webpack_require__) {
 
@@ -41845,8 +42539,7 @@ const ChatOptionsFooter = props => {
 /* harmony import */ var _emotion_styled__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(84937);
 /* harmony import */ var _webchat_store_messages_message_reducer__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(22284);
 /* harmony import */ var _Modal_DeleteConfirmModal__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(75691);
-/* harmony import */ var _webchat_store_previous_conversations_previous_conversations_middleware__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(92101);
-/* harmony import */ var _webchat_store_options_options__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(48242);
+/* harmony import */ var _webchat_store_options_options__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(48242);
 
 
 
@@ -41888,14 +42581,14 @@ const DeleteConversation = props => {
   const handleConfirmDelete = () => {
     dispatch((0,_webchat_store_previous_conversations_previous_conversations_reducer__WEBPACK_IMPORTED_MODULE_3__/* .deletePrevConversation */ .YD)(sessionId));
     dispatch((0,_webchat_store_messages_message_reducer__WEBPACK_IMPORTED_MODULE_7__/* .clearMessages */ .oI)());
-    dispatch((0,_webchat_store_previous_conversations_previous_conversations_middleware__WEBPACK_IMPORTED_MODULE_9__/* .switchSession */ .r)());
+    dispatch((0,_webchat_store_previous_conversations_previous_conversations_reducer__WEBPACK_IMPORTED_MODULE_3__/* .switchSession */ .rm)());
     const storage = (0,_webchat_helper_storage__WEBPACK_IMPORTED_MODULE_4__/* .getStorage */ .c)({
       disableLocalStorage: props.config.settings.embeddingConfiguration?.disableLocalStorage ?? false,
       useSessionStorage: props.config.settings.embeddingConfiguration?.useSessionStorage ?? false
     });
     if (storage) {
       Object.keys(storage).forEach(_ => {
-        const key = (0,_webchat_store_options_options__WEBPACK_IMPORTED_MODULE_10__/* .getOptionsKey */ .W)({
+        const key = (0,_webchat_store_options_options__WEBPACK_IMPORTED_MODULE_9__/* .getOptionsKey */ .W)({
           channel,
           userId,
           sessionId
@@ -42190,6 +42883,11 @@ const TTSOptionRoot = _emotion_styled__WEBPACK_IMPORTED_MODULE_1__/* ["default"]
   alignItems: "center",
   height: 50
 }));
+
+// Native <label for> so clicking the visible text also activates the switch (WCAG technique H44)
+const ToggleLabel = _emotion_styled__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A.label(() => ({
+  cursor: "pointer"
+}));
 const TTSOption = props => {
   const {
     config,
@@ -42197,6 +42895,7 @@ const TTSOption = props => {
   } = props;
   const isActive = (0,_webchat_helper_useSelector__WEBPACK_IMPORTED_MODULE_4__/* .useSelector */ .d)(state => state.ui.ttsActive);
   const labelId = react__WEBPACK_IMPORTED_MODULE_0__["default"].useId();
+  const toggleId = react__WEBPACK_IMPORTED_MODULE_0__["default"].useId();
   const label = config.settings.chatOptions.labelTTSToggle || "Enable Text-to-Speech";
   return /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(TTSOptionRoot, {
     className: "webchat-tts-option-root"
@@ -42205,7 +42904,10 @@ const TTSOption = props => {
     variant: "title1-semibold",
     margin: 0,
     className: "webchat-chat-options-tts-option-label"
-  }, label), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_ToggleButton__WEBPACK_IMPORTED_MODULE_3__/* .ToggleButton */ .f, {
+  }, /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(ToggleLabel, {
+    htmlFor: toggleId
+  }, label)), /*#__PURE__*/react__WEBPACK_IMPORTED_MODULE_0__["default"].createElement(_ToggleButton__WEBPACK_IMPORTED_MODULE_3__/* .ToggleButton */ .f, {
+    id: toggleId,
     onClick: onToggle,
     className: "webchat-chat-options-tts-option-toggle",
     isActive: isActive,
@@ -42532,7 +43234,6 @@ const ConversationsListItem = props => {
 /* harmony import */ var _cognigy_chat_components__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(2854);
 /* harmony import */ var _webchat_store_connection_connection_middleware__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(12193);
 /* harmony import */ var _webchat_store_messages_message_reducer__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(22284);
-/* harmony import */ var _webchat_store_previous_conversations_previous_conversations_middleware__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(92101);
 
 
 
@@ -42556,7 +43257,7 @@ const DeleteAllConversationsModal = props => {
   const handleConfirmDelete = () => {
     dispatch((0,_webchat_store_previous_conversations_previous_conversations_reducer__WEBPACK_IMPORTED_MODULE_2__/* .setConversations */ .dU)({}));
     dispatch((0,_webchat_store_messages_message_reducer__WEBPACK_IMPORTED_MODULE_7__/* .clearMessages */ .oI)()); // Clear any existing messages
-    dispatch((0,_webchat_store_previous_conversations_previous_conversations_middleware__WEBPACK_IMPORTED_MODULE_8__/* .switchSession */ .r)()); // Switch the session to a new one
+    dispatch((0,_webchat_store_previous_conversations_previous_conversations_reducer__WEBPACK_IMPORTED_MODULE_2__/* .switchSession */ .rm)()); // Switch the session to a new one
     dispatch((0,_webchat_store_connection_connection_middleware__WEBPACK_IMPORTED_MODULE_6__/* .disconnect */ .Zf)()); // Disconnect the socket to prevent from receiving any new messages. Socket will be reconnected upon starting a new conversation
     const storage = (0,_webchat_helper_storage__WEBPACK_IMPORTED_MODULE_3__/* .getStorage */ .c)({
       disableLocalStorage: config.settings.embeddingConfiguration?.disableLocalStorage ?? false,
@@ -43045,9 +43746,18 @@ const INITIAL_NOTICE_SESSION = {
  * only — later restores (reopening a previous conversation) are already
  * covered by the snapshot lookup, and the flag must not silence a
  * brand-new conversation started afterwards.
- */
-function computeNoticeSession(prev, currentSessionId, prevConversationsSnapshot, hasRestoredPersistedHistory) {
-  const isRestoredFirstConnect = prev.id === "" && !!hasRestoredPersistedHistory;
+ *
+ * `willRestorePersistedConversation` is that same page-reload case seen
+ * BEFORE the connect: the restore only happens when the connect
+ * resolves, which can take longer than the notice's 600ms announce
+ * delay, and by then an announcement can no longer be taken back. It is
+ * read from storage through the very helpers the restore uses (see
+ * `hasPersistedConversationForInitialSession`), so it cannot disagree
+ * with the restore that follows. Same first-connect-only scope as the
+ * flag above, for the same reason.
+ */
+function computeNoticeSession(prev, currentSessionId, prevConversationsSnapshot, hasRestoredPersistedHistory, willRestorePersistedConversation) {
+  const isRestoredFirstConnect = prev.id === "" && (!!hasRestoredPersistedHistory || !!willRestorePersistedConversation);
   const isNew = !prevConversationsSnapshot?.[currentSessionId] && !isRestoredFirstConnect;
   const isFirstConnectOfNewConversation = prev.id === "" && prev.isNew && isNew;
   return {
@@ -43065,6 +43775,12 @@ function computeNoticeSession(prev, currentSessionId, prevConversationsSnapshot,
  * reconnect the socket and open it — its dialog and focus utterances
  * would cancel the notice; on close, the intro becomes pending again
  * and is announced after the "Connection restored" utterances).
+ *
+ * Eligibility only — WHEN an eligible notice is spoken is the live
+ * region's business (it defers the intro past the screen's focus
+ * utterances). That deferral is why the verdict must be final before the
+ * first connect resolves rather than after it, which is what
+ * `willRestorePersistedConversation` in `computeNoticeSession` provides.
  */
 function getAIAgentNoticeIntroText(args) {
   const {
@@ -43192,8 +43908,10 @@ const getMessagesListWithoutControlCommands = (messages, types = EXCLUDE_CC_TYPE
  * @returns {Array}
  */
 const getKeyboardFocusableElements = element => {
-  // Get all interactive elements in given element
-  const interactiveEls = element?.querySelectorAll('a[href], button, input, textarea, select, details,[tabindex]:not([tabindex="-1"])');
+  // Get all interactive elements in given element. An <iframe> is a
+  // sequential-focus stop in every browser (Tab enters the frame's
+  // document), so it counts as focusable — e.g. the xApp overlay's frame.
+  const interactiveEls = element?.querySelectorAll('a[href], button, input, textarea, select, details, iframe, [tabindex]:not([tabindex="-1"])');
   const interactiveElsArray = interactiveEls && Array.from(interactiveEls);
 
   // Two lists are derived from the interactive elements:
@@ -43536,6 +44254,113 @@ function getSourceBackgroundColor(mappedValue, colors) {
 
 /***/ },
 
+/***/ 44120
+(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   JO: () => (/* binding */ getSpeechRecognitionErrorMessage),
+/* harmony export */   oC: () => (/* binding */ createSpeechRecognition),
+/* harmony export */   r0: () => (/* binding */ TRANSCRIPT_IDLE_TIMEOUT_MS),
+/* harmony export */   rt: () => (/* binding */ FIRST_TRANSCRIPT_TIMEOUT_MS)
+/* harmony export */ });
+/**
+ * Web Speech API plumbing for the message input's speech-to-text button.
+ *
+ * The spec says nothing about latency, and engines differ by seconds — which
+ * is what CGY-37417 turned out to be. Measured on macOS with a real
+ * microphone, one spoken sentence, `continuous`/`interimResults` both on:
+ *
+ * | event                       | Chrome 152 | Edge 152      |
+ * | --------------------------- | ---------- | ------------- |
+ * | `audiostart` after `start()`| 0.55 s     | 0.52 s        |
+ * | `speechstart` -> 1st result | 0.00 s     | 0.32 - 4.25 s |
+ * | `start()` -> 1st transcript | 1.37 s     | 5.02 - 6.65 s |
+ *
+ * Chrome streams an interim result in the same tick as `speechstart`; Edge
+ * buffers whole phrases against its cloud service and can take over six
+ * seconds to hand back the first word. Edge also emits *placeholder* results
+ * — `isFinal` with an empty transcript — when speech starts and again on
+ * `stop()`, which Chrome never does. Any timing budget here has to hold for
+ * the slow engine, and any result handler has to tolerate empty transcripts.
+ */
+
+/**
+ * How long to wait after `start()` for the engine's first transcript before
+ * giving up and telling the user nothing was heard.
+ *
+ * This has to cover the permission prompt (on first use the clock is already
+ * running while the user hunts for the browser's "Allow" button), the
+ * engine's connection to its speech service, the user pausing to collect
+ * their thoughts, and then the engine's own recognition latency — 6.65 s of
+ * it on Edge. The previous budget was 3 s counted from `start()`, so on Edge
+ * recognition was routinely cancelled before it had produced a single word,
+ * and the failure was silent (CGY-37417).
+ */
+const FIRST_TRANSCRIPT_TIMEOUT_MS = 15000;
+
+/**
+ * How long to keep listening after the last transcript before auto-stopping,
+ * so the user doesn't have to press the button a second time.
+ *
+ * Only armed once the engine has actually produced a transcript, which is
+ * what makes 3 s safe: while speech is flowing, consecutive results arrive
+ * ~0.2 - 0.7 s apart on both engines. Before the first transcript,
+ * FIRST_TRANSCRIPT_TIMEOUT_MS applies instead.
+ */
+const TRANSCRIPT_IDLE_TIMEOUT_MS = 3000;
+
+/** Reasons recognition can fail, beyond the spec's own error codes. */
+
+/**
+ * Creates a recognizer, or `null` where the browser has no Web Speech API
+ * (Firefox, and WebViews that drop it). Callers treat `null` as
+ * "speech-to-text unsupported" and disable the button.
+ */
+const createSpeechRecognition = () => {
+  const Recognition = typeof SpeechRecognition !== "undefined" ? SpeechRecognition : typeof webkitSpeechRecognition !== "undefined" ? webkitSpeechRecognition : null;
+  if (!Recognition) return null;
+  try {
+    return new Recognition();
+  } catch {
+    // Constructing can still throw where the API is present but disabled
+    // by policy or an unsupported embedding context.
+    return null;
+  }
+};
+
+/**
+ * Maps a failure onto the message shown to the user, so a failed dictation
+ * says what went wrong and what to do instead of failing silently
+ * (SC 3.3.1 Error Identification).
+ */
+const getSpeechRecognitionErrorMessage = (failure, customTranslations) => {
+  switch (failure) {
+    // The user (or a policy) blocked the microphone. Only they can undo
+    // it, and only in browser settings — the prompt won't come back.
+    // NOT `service-not-allowed`, which per the spec means the recognition
+    // *service* was refused and says nothing about microphone access;
+    // sending those users to their microphone settings would be a wrong
+    // remedy, so it falls through to the generic message below.
+    case "not-allowed":
+      return customTranslations?.speech_recognition_not_allowed ?? "Microphone access is blocked. Allow it in your browser settings to use speech input.";
+    case "audio-capture":
+      return customTranslations?.speech_recognition_no_microphone ?? "No microphone was found. Connect one to use speech input.";
+    case "no-speech":
+    case "no-transcript":
+      return customTranslations?.speech_recognition_no_speech ?? "No speech was detected. Please try again.";
+
+    // "network" is the engine's speech service being unreachable;
+    // "service-not-allowed" is that service being refused to this page;
+    // "language-not-supported" and "bad-grammar" are misconfiguration the
+    // end user cannot act on (both are logged for the operator instead).
+    // None of these have a remedy the user can apply beyond typing.
+    default:
+      return customTranslations?.speech_recognition_error ?? "Speech input is currently unavailable. Please type your message instead.";
+  }
+};
+
+/***/ },
+
 /***/ 61395
 (__unused_webpack_module, __webpack_exports__, __webpack_require__) {
 
@@ -43547,12 +44372,14 @@ function getSourceBackgroundColor(mappedValue, colors) {
 /* harmony import */ var _store_messages_message_middleware__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(20570);
 /* harmony import */ var _store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(55361);
 /* harmony import */ var _plugins_helper__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(59977);
-/* harmony import */ var _store_connection_connection_middleware__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(12193);
+/* harmony import */ var _store_connection_connection_reducer__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(64789);
 /* harmony import */ var _store_rating_rating_reducer__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(69823);
-/* harmony import */ var _store_previous_conversations_previous_conversations_middleware__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(92101);
+/* harmony import */ var _store_previous_conversations_previous_conversations_reducer__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(39801);
 /* harmony import */ var _store_input_input_reducer__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(16967);
 /* harmony import */ var _store_xapp_overlay_slice__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(97114);
 /* harmony import */ var _store_messages_message_reducer__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(22284);
+/* harmony import */ var _store_options_persisted_conversation__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(57589);
+
 
 
 
@@ -43622,6 +44449,7 @@ const ConnectedWebchatUI = (0,react_redux__WEBPACK_IMPORTED_MODULE_1__/* .connec
     unseenMessages,
     prevConversations,
     hasRestoredPersistedHistory,
+    willRestorePersistedConversation: (0,_store_options_persisted_conversation__WEBPACK_IMPORTED_MODULE_11__/* .hasPersistedConversationForInitialSession */ ._)(state),
     open,
     typingIndicator: typing,
     inputMode,
@@ -43663,14 +44491,14 @@ const ConnectedWebchatUI = (0,react_redux__WEBPACK_IMPORTED_MODULE_1__/* .connec
   onMinimize: () => dispatch((0,_store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_3__/* .setMinimize */ .R1)()),
   onToggle: () => dispatch((0,_store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_3__/* .toggleOpen */ .nL)()),
   onTriggerEngagementMessage: () => dispatch((0,_store_messages_message_middleware__WEBPACK_IMPORTED_MODULE_2__/* .triggerEngagementMessage */ .Nh)()),
-  onConnect: () => dispatch((0,_store_connection_connection_middleware__WEBPACK_IMPORTED_MODULE_5__/* .connect */ .Ng)()),
+  onConnect: () => dispatch((0,_store_connection_connection_reducer__WEBPACK_IMPORTED_MODULE_5__/* .connect */ .Ng)()),
   onShowRatingScreen: show => dispatch((0,_store_rating_rating_reducer__WEBPACK_IMPORTED_MODULE_6__/* .showRatingScreen */ .xW)(show)),
   onSetHasGivenRating: () => dispatch((0,_store_rating_rating_reducer__WEBPACK_IMPORTED_MODULE_6__/* .setHasGivenRating */ .n_)()),
   onSetShowHomeScreen: show => dispatch((0,_store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_3__/* .setShowHomeScreen */ .zn)(show)),
   onSetShowPrevConversations: show => dispatch((0,_store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_3__/* .setShowPrevConversations */ .Rg)(show)),
   onSetShowChatOptionsScreen: show => dispatch((0,_store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_3__/* .setShowChatOptionsScreen */ .QE)(show)),
   onShowChatScreen: () => dispatch((0,_store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_3__/* .showChatScreen */ .YW)()),
-  onSwitchSession: (sessionId, conversation) => dispatch((0,_store_previous_conversations_previous_conversations_middleware__WEBPACK_IMPORTED_MODULE_7__/* .switchSession */ .r)(sessionId, conversation)),
+  onSwitchSession: (sessionId, conversation) => dispatch((0,_store_previous_conversations_previous_conversations_reducer__WEBPACK_IMPORTED_MODULE_7__/* .switchSession */ .rm)(sessionId, conversation)),
   onAcceptTerms: userId => dispatch((0,_store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_3__/* .setHasAcceptedTerms */ .Pk)(userId)),
   onSetStoredMessage: message => dispatch((0,_store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_3__/* .setStoredMessage */ .LK)(message)),
   onSetDropZoneVisible: isVisible => dispatch((0,_store_input_input_reducer__WEBPACK_IMPORTED_MODULE_8__/* .setDropZoneVisible */ .aJ)(isVisible)),
@@ -43712,19 +44540,20 @@ const ConnectedWebchatUI = (0,react_redux__WEBPACK_IMPORTED_MODULE_1__/* .connec
 /* harmony import */ var _store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(55361);
 /* harmony import */ var _store_config_config_middleware__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(56121);
 /* harmony import */ var _store_connection_connection_middleware__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(12193);
-/* harmony import */ var events__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(98657);
-/* harmony import */ var events__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(events__WEBPACK_IMPORTED_MODULE_8__);
-/* harmony import */ var _cognigy_socket_client__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(72166);
-/* harmony import */ var _cognigy_socket_client__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(_cognigy_socket_client__WEBPACK_IMPORTED_MODULE_9__);
-/* harmony import */ var _helper_endpoint__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(11351);
-/* harmony import */ var _store_config_config_reducer__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(46509);
-/* harmony import */ var _store_messages_message_handler__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(59788);
-/* harmony import */ var _webchat_ui_components_presentational_Notifications__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(82833);
-/* harmony import */ var _helper_storage__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(62473);
-/* harmony import */ var _helper_privacyPolicy__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(8470);
-/* harmony import */ var _store_options_options_reducer__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(74327);
-/* harmony import */ var _store_previous_conversations_previous_conversations_middleware__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(92101);
-/* harmony import */ var _store_messages_message_reducer__WEBPACK_IMPORTED_MODULE_18__ = __webpack_require__(22284);
+/* harmony import */ var _store_connection_connection_reducer__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(64789);
+/* harmony import */ var events__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(98657);
+/* harmony import */ var events__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(events__WEBPACK_IMPORTED_MODULE_9__);
+/* harmony import */ var _cognigy_socket_client__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(72166);
+/* harmony import */ var _cognigy_socket_client__WEBPACK_IMPORTED_MODULE_10___default = /*#__PURE__*/__webpack_require__.n(_cognigy_socket_client__WEBPACK_IMPORTED_MODULE_10__);
+/* harmony import */ var _helper_endpoint__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(11351);
+/* harmony import */ var _store_config_config_reducer__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(46509);
+/* harmony import */ var _store_messages_message_handler__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(59788);
+/* harmony import */ var _webchat_ui_components_presentational_Notifications__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(82833);
+/* harmony import */ var _helper_storage__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(62473);
+/* harmony import */ var _helper_privacyPolicy__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(8470);
+/* harmony import */ var _store_options_options_reducer__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(74327);
+/* harmony import */ var _store_previous_conversations_previous_conversations_reducer__WEBPACK_IMPORTED_MODULE_18__ = __webpack_require__(39801);
+/* harmony import */ var _store_messages_message_reducer__WEBPACK_IMPORTED_MODULE_19__ = __webpack_require__(22284);
 function _extends() { return _extends = Object.assign ? Object.assign.bind() : function (n) { for (var e = 1; e < arguments.length; e++) { var t = arguments[e]; for (var r in t) ({}).hasOwnProperty.call(t, r) && (n[r] = t[r]); } return n; }, _extends.apply(null, arguments); }
 
 
@@ -43745,8 +44574,9 @@ function _extends() { return _extends = Object.assign ? Object.assign.bind() : f
 
 
 
+
 class Webchat extends react__WEBPACK_IMPORTED_MODULE_0__.PureComponent {
-  analytics = new events__WEBPACK_IMPORTED_MODULE_8__.EventEmitter();
+  analytics = new events__WEBPACK_IMPORTED_MODULE_9__.EventEmitter();
   // component lifecycle methods
   constructor(props) {
     super(props);
@@ -43755,17 +44585,17 @@ class Webchat extends react__WEBPACK_IMPORTED_MODULE_0__.PureComponent {
       options,
       settings
     } = props;
-    const baseUrl = (0,_helper_endpoint__WEBPACK_IMPORTED_MODULE_10__/* .getEndpointBaseUrl */ .Ul)(url);
-    const token = (0,_helper_endpoint__WEBPACK_IMPORTED_MODULE_10__/* .getEndpointUrlToken */ .a4)(url);
+    const baseUrl = (0,_helper_endpoint__WEBPACK_IMPORTED_MODULE_11__/* .getEndpointBaseUrl */ .Ul)(url);
+    const token = (0,_helper_endpoint__WEBPACK_IMPORTED_MODULE_11__/* .getEndpointUrlToken */ .a4)(url);
     const socketOptions = {
       channel: options?.channel || "webchat3",
       ...options
     };
-    const client = new _cognigy_socket_client__WEBPACK_IMPORTED_MODULE_9__.SocketClient(baseUrl, token, socketOptions);
+    const client = new _cognigy_socket_client__WEBPACK_IMPORTED_MODULE_10__.SocketClient(baseUrl, token, socketOptions);
     this.client = client;
     const store = (0,_store_store__WEBPACK_IMPORTED_MODULE_1__/* .createWebchatStore */ .E7)(this, url, settings);
     this.store = store;
-    this._handleOutput = (0,_store_messages_message_handler__WEBPACK_IMPORTED_MODULE_12__/* .createOutputHandler */ .i0)(this.store);
+    this._handleOutput = (0,_store_messages_message_handler__WEBPACK_IMPORTED_MODULE_13__/* .createOutputHandler */ .i0)(this.store);
   }
   UNSAFE_componentWillMount() {
     const {
@@ -43773,20 +44603,20 @@ class Webchat extends react__WEBPACK_IMPORTED_MODULE_0__.PureComponent {
     } = this.props;
     const disableLocalStorage = settings?.embeddingConfiguration?.disableLocalStorage ?? false;
     const useSessionStorage = settings?.embeddingConfiguration?.useSessionStorage ?? false;
-    const browserStorage = (0,_helper_storage__WEBPACK_IMPORTED_MODULE_14__/* .getStorage */ .c)({
+    const browserStorage = (0,_helper_storage__WEBPACK_IMPORTED_MODULE_15__/* .getStorage */ .c)({
       disableLocalStorage,
       useSessionStorage
     });
     const userId = this.client.socketOptions.userId;
-    if ((0,_helper_privacyPolicy__WEBPACK_IMPORTED_MODULE_15__/* .hasAcceptedTermsInStorage */ .z)(browserStorage, userId)) {
+    if ((0,_helper_privacyPolicy__WEBPACK_IMPORTED_MODULE_16__/* .hasAcceptedTermsInStorage */ .z)(browserStorage, userId)) {
       this.store.dispatch((0,_store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_5__/* .setHasAcceptedTerms */ .Pk)(userId));
     }
     this.store.dispatch((0,_store_config_config_middleware__WEBPACK_IMPORTED_MODULE_6__/* .loadConfig */ .Z)());
     if (this.props.options?.sessionId) {
-      this.store.dispatch((0,_store_config_config_reducer__WEBPACK_IMPORTED_MODULE_11__/* .setInitialSessionId */ .mD)(this.props.options.sessionId));
+      this.store.dispatch((0,_store_config_config_reducer__WEBPACK_IMPORTED_MODULE_12__/* .setInitialSessionId */ .mD)(this.props.options.sessionId));
     }
     if (this.props.options?.userId) {
-      this.store.dispatch((0,_store_options_options_reducer__WEBPACK_IMPORTED_MODULE_16__/* .setUserId */ ["do"])(this.props.options?.userId));
+      this.store.dispatch((0,_store_options_options_reducer__WEBPACK_IMPORTED_MODULE_17__/* .setUserId */ ["do"])(this.props.options?.userId));
     }
   }
   componentWillUnmount() {
@@ -43804,7 +44634,7 @@ class Webchat extends react__WEBPACK_IMPORTED_MODULE_0__.PureComponent {
 
   // component API (for usage via ref)
   connect = async () => {
-    this.store.dispatch((0,_store_connection_connection_middleware__WEBPACK_IMPORTED_MODULE_7__/* .connect */ .Ng)());
+    this.store.dispatch((0,_store_connection_connection_reducer__WEBPACK_IMPORTED_MODULE_8__/* .connect */ .Ng)());
   };
 
   /**
@@ -43836,14 +44666,14 @@ class Webchat extends react__WEBPACK_IMPORTED_MODULE_0__.PureComponent {
     } = this.store.getState().config;
     const disableLocalStorage = settings?.embeddingConfiguration?.disableLocalStorage ?? false;
     const useSessionStorage = settings?.embeddingConfiguration?.useSessionStorage ?? false;
-    const browserStorage = (0,_helper_storage__WEBPACK_IMPORTED_MODULE_14__/* .getStorage */ .c)({
+    const browserStorage = (0,_helper_storage__WEBPACK_IMPORTED_MODULE_15__/* .getStorage */ .c)({
       disableLocalStorage,
       useSessionStorage
     });
     const userId = this.client.socketOptions.userId;
     const homeScreenEnabled = settings?.homeScreen?.enabled === true;
     const privacyNoticeEnabled = settings?.privacyNotice?.enabled === true;
-    const skipPrivacyNotice = !privacyNoticeEnabled || (0,_helper_privacyPolicy__WEBPACK_IMPORTED_MODULE_15__/* .hasAcceptedTermsInStorage */ .z)(browserStorage, userId);
+    const skipPrivacyNotice = !privacyNoticeEnabled || (0,_helper_privacyPolicy__WEBPACK_IMPORTED_MODULE_16__/* .hasAcceptedTermsInStorage */ .z)(browserStorage, userId);
     if (!homeScreenEnabled && skipPrivacyNotice) {
       this.store.dispatch((0,_store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_5__/* .setShowHomeScreen */ .zn)(false));
       this.store.dispatch((0,_store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_5__/* .setShowChatOptionsScreen */ .QE)(false));
@@ -43881,7 +44711,7 @@ class Webchat extends react__WEBPACK_IMPORTED_MODULE_0__.PureComponent {
     this.store.dispatch((0,_store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_5__/* .toggleOpen */ .nL)());
   };
   showNotification = message => {
-    (0,_webchat_ui_components_presentational_Notifications__WEBPACK_IMPORTED_MODULE_13__/* .createNotification */ .UI)(message);
+    (0,_webchat_ui_components_presentational_Notifications__WEBPACK_IMPORTED_MODULE_14__/* .createNotification */ .UI)(message);
   };
   startConversation = () => {
     this.store.dispatch((0,_store_ui_ui_reducer__WEBPACK_IMPORTED_MODULE_5__/* .setShowHomeScreen */ .zn)(false));
@@ -43894,15 +44724,15 @@ class Webchat extends react__WEBPACK_IMPORTED_MODULE_0__.PureComponent {
     this.client.on("output", handler);
   };
   updateSettings = settings => {
-    this.store.dispatch((0,_store_config_config_reducer__WEBPACK_IMPORTED_MODULE_11__/* .updateSettings */ .Xx)(settings));
+    this.store.dispatch((0,_store_config_config_reducer__WEBPACK_IMPORTED_MODULE_12__/* .updateSettings */ .Xx)(settings));
   };
 
   /**
    * This method will switch to a new session and clear the messages in the current session.
    */
   endSession = () => {
-    this.store.dispatch((0,_store_previous_conversations_previous_conversations_middleware__WEBPACK_IMPORTED_MODULE_17__/* .switchSession */ .r)());
-    this.store.dispatch((0,_store_messages_message_reducer__WEBPACK_IMPORTED_MODULE_18__/* .clearMessages */ .oI)());
+    this.store.dispatch((0,_store_previous_conversations_previous_conversations_reducer__WEBPACK_IMPORTED_MODULE_18__/* .switchSession */ .rm)());
+    this.store.dispatch((0,_store_messages_message_reducer__WEBPACK_IMPORTED_MODULE_19__/* .clearMessages */ .oI)());
   };
   render() {
     const {
@@ -44029,7 +44859,7 @@ const isInformingOutOfBusinessHours = businessHours => {
 /* harmony export */   R: () => (/* binding */ onNetworkOn),
 /* harmony export */   s: () => (/* binding */ shouldReestablishConnection)
 /* harmony export */ });
-const shouldReestablishConnection = store => store?.autoInject?.isConnectedOnce;
+const shouldReestablishConnection = store => store?.connection?.hasAttemptedConnection;
 const onNetworkOn = handler => {
   window.addEventListener("online", handler, false);
   return () => {
@@ -44367,8 +45197,33 @@ function setHasAcceptedTermsInStorage(browserStorage, userId) {
 /* harmony import */ var _store_store__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(6236);
 
 
-const allowedHtmlTags = ["a", "abbr", "acronym", "address", "applet", "area", "article", "aside", "audio", "b", "base", "basefont", "bdi", "bdo", "big", "blockquote", "body", "br", "button", "canvas", "caption", "center", "cite", "code", "col", "colgroup", "data", "datalist", "dd", "del", "details", "dfn", "dialog", "dir", "div", "dl", "dt", "em", "embed", "fieldset", "figcaption", "figure", "font", "footer", "form", "frame", "frameset", "h1", "h2", "h3", "h4", "h5", "h6", "head", "header", "hr", "html", "i", "iframe", "img", "input", "ins", "kbd", "label", "legend", "li", "link", "main", "map", "mark", "meta", "meter", "nav", "noframes", "object", "ol", "optgroup", "option", "output", "p", "param", "picture", "pre", "progress", "q", "rp", "rt", "ruby", "s", "samp", "section", "select", "small", "source", "span", "strike", "strong", "style", "sub", "summary", "sup", "svg", "table", "tbody", "td", "template", "textarea", "tfoot", "th", "thead", "time", "title", "tr", "track", "tt", "u", "ul", "var", "video", "wbr"];
-const allowedHtmlAttributes = ["accept", "accept-charset", "accesskey", "action", "align", "alt", "autocomplete", "autofocus", "autoplay", "bgcolor", "border", "charset", "checked", "cite", "class", "color", "cols", "colspan", "content", "contenteditable", "controls", "coords", "data", "data-*", "datetime", "default", "dir", "dirname", "disabled", "download", "draggable", "dropzone", "enctype", "for", "form", "formaction", "headers", "height", "hidden", "high", "href", "hreflang", "http-equiv", "id", "ismap", "kind", "label", "lang", "list", "loop", "low", "max", "maxlength", "media", "method", "min", "multiple", "muted", "name", "novalidate", "open", "optimum", "pattern", "placeholder", "poster", "preload", "readonly", "rel", "required", "reversed", "rows", "rowspan", "sandbox", "scope", "selected", "shape", "size", "sizes", "span", "spellcheck", "src", "srcdoc", "srclang", "srcset", "start", "step", "style", "tabindex", "target", "title", "translate", "type", "usemap", "value", "width", "wrap"];
+
+// Tags removed from the previous allow-list to align with DOMPurify's secure defaults
+// (WCH-SI10-001). Each tag enables a distinct attack vector:
+//   applet          — Java applet execution
+//   base            — rewrites all relative URLs on the host page
+//   body / html / head — structural document elements; no legitimate use in sanitised fragments
+//   embed           — loads arbitrary external content / plugins
+//   form            — posts user data to attacker-controlled URLs
+//   frame / frameset / noframes — clickjacking and legacy frame injection
+//   iframe          — inline HTML documents; srcdoc = direct XSS vector
+//   link            — loads external stylesheets
+//   meta            — HTTP redirects and CSP bypass via http-equiv
+//   object          — loads Flash, PDFs, and arbitrary external content
+//   style           — CSS injection and attribute-value exfiltration
+// These tags are blocked by default when no custom tag list is configured.
+// Tenants can supply a replacement list via widgetSettings.customAllowedHtmlTags,
+// but dangerous tags are always stripped from that list before it is applied (PR #309).
+const allowedHtmlTags = ["a", "abbr", "acronym", "address", "area", "article", "aside", "audio", "b", "basefont", "bdi", "bdo", "big", "blockquote", "br", "button", "canvas", "caption", "center", "cite", "code", "col", "colgroup", "data", "datalist", "dd", "del", "details", "dfn", "dialog", "dir", "div", "dl", "dt", "em", "fieldset", "figcaption", "figure", "font", "footer", "h1", "h2", "h3", "h4", "h5", "h6", "header", "hr", "i", "img", "input", "ins", "kbd", "label", "legend", "li", "main", "map", "mark", "meter", "nav", "ol", "optgroup", "option", "output", "p", "param", "picture", "pre", "progress", "q", "rp", "rt", "ruby", "s", "samp", "section", "select", "small", "source", "span", "strike", "strong", "sub", "summary", "sup", "svg", "table", "tbody", "td", "template", "textarea", "tfoot", "th", "thead", "time", "title", "tr", "track", "tt", "u", "ul", "var", "video", "wbr"];
+
+// Attributes that are always blocked regardless of caller configuration (WCH-SI10-001).
+// Removed from the previous allow-list:
+//   action / formaction — form submission to attacker-controlled URLs
+//   sandbox             — giving content control over its own sandbox policy
+//   srcdoc              — inline HTML document in an iframe (direct XSS vector)
+//   style               — inline CSS injection and attribute-value exfiltration
+//   target              — controls navigation target (_blank without rel is risky)
+const allowedHtmlAttributes = ["accept", "accept-charset", "accesskey", "align", "alt", "autocomplete", "autofocus", "autoplay", "bgcolor", "border", "charset", "checked", "cite", "class", "color", "cols", "colspan", "content", "contenteditable", "controls", "coords", "data", "data-*", "datetime", "default", "dir", "dirname", "disabled", "download", "draggable", "dropzone", "enctype", "for", "form", "headers", "height", "hidden", "high", "href", "hreflang", "http-equiv", "id", "ismap", "kind", "label", "lang", "list", "loop", "low", "max", "maxlength", "media", "method", "min", "multiple", "muted", "name", "novalidate", "open", "optimum", "pattern", "placeholder", "poster", "preload", "readonly", "rel", "required", "reversed", "rows", "rowspan", "scope", "selected", "shape", "size", "sizes", "span", "spellcheck", "src", "srclang", "srcset", "start", "step", "tabindex", "title", "translate", "type", "usemap", "value", "width", "wrap"];
 const config = {
   ALLOWED_TAGS: allowedHtmlTags,
   ALLOWED_ATTR: allowedHtmlAttributes
@@ -45058,7 +45913,6 @@ const registerConnectionHandler = (store, client) => {
 (__unused_webpack_module, __webpack_exports__, __webpack_require__) {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   Ng: () => (/* binding */ connect),
 /* harmony export */   PJ: () => (/* binding */ createConnectionMiddleware),
 /* harmony export */   Zf: () => (/* binding */ disconnect),
 /* harmony export */   vD: () => (/* binding */ announceNetworkOn)
@@ -45073,10 +45927,6 @@ const registerConnectionHandler = (store, client) => {
 
 
 
-const CONNECT = "CONNECT";
-const connect = () => ({
-  type: CONNECT
-});
 const DISCONNECT = "DISCONNECT";
 const disconnect = () => ({
   type: DISCONNECT
@@ -45116,19 +45966,19 @@ const createConnectionMiddleware = client => store => next => action => {
     case "SHOW_CHAT_SCREEN":
       {
         if (!client.connected) {
-          store.dispatch(connect());
+          store.dispatch((0,_connection_reducer__WEBPACK_IMPORTED_MODULE_3__/* .connect */ .Ng)());
         }
         break;
       }
     case "SEND_MESSAGE":
       {
-        store.dispatch(connect());
+        store.dispatch((0,_connection_reducer__WEBPACK_IMPORTED_MODULE_3__/* .connect */ .Ng)());
         break;
       }
     case "SET_PAGE_VISIBLE":
       {
         if (action.visible && (0,_helper_connection_watchdog__WEBPACK_IMPORTED_MODULE_4__/* .shouldReestablishConnection */ .s)(store.getState())) {
-          store.dispatch(connect());
+          store.dispatch((0,_connection_reducer__WEBPACK_IMPORTED_MODULE_3__/* .connect */ .Ng)());
         }
         break;
       }
@@ -45140,7 +45990,7 @@ const createConnectionMiddleware = client => store => next => action => {
     case "NETWORK_ON":
       {
         if ((0,_helper_connection_watchdog__WEBPACK_IMPORTED_MODULE_4__/* .shouldReestablishConnection */ .s)(store.getState())) {
-          store.dispatch(connect());
+          store.dispatch((0,_connection_reducer__WEBPACK_IMPORTED_MODULE_3__/* .connect */ .Ng)());
         }
         break;
       }
@@ -45155,16 +46005,22 @@ const createConnectionMiddleware = client => store => next => action => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
 /* harmony export */   FI: () => (/* binding */ connection),
+/* harmony export */   Ng: () => (/* binding */ connect),
 /* harmony export */   Pr: () => (/* binding */ setReconnectionLimit),
 /* harmony export */   pE: () => (/* binding */ setConnecting),
 /* harmony export */   qJ: () => (/* binding */ setConnected)
 /* harmony export */ });
-/* unused harmony exports SET_CONNECTING, SET_CONNECTED, SET_RECONNECTION_LIMIT */
+/* unused harmony exports CONNECT, SET_CONNECTING, SET_CONNECTED, SET_RECONNECTION_LIMIT */
 const initialState = {
   connected: false,
   connecting: false,
-  reconnectionLimit: false
+  reconnectionLimit: false,
+  hasAttemptedConnection: false
 };
+const CONNECT = "CONNECT";
+const connect = () => ({
+  type: CONNECT
+});
 const SET_CONNECTING = "SET_CONNECTING";
 const setConnecting = connecting => ({
   type: SET_CONNECTING,
@@ -45186,7 +46042,10 @@ const connection = (state = initialState, action) => {
       {
         return {
           ...state,
-          connected: action.connected
+          connected: action.connected,
+          // Never reset once true: a past connection attempt is what gates
+          // automatic reconnection, regardless of the current connected state.
+          hasAttemptedConnection: state.hasAttemptedConnection || action.connected
         };
       }
     case "SET_CONNECTING":
@@ -45203,6 +46062,18 @@ const connection = (state = initialState, action) => {
           reconnectionLimit: action.reconnectionLimit
         };
       }
+    case "CONNECT":
+    case "SWITCH_SESSION":
+      {
+        // A session switch connects the socket directly, bypassing CONNECT.
+        // It is still a deliberate connection request, so it must arm the
+        // reconnect latch even if this first attempt fails (e.g. offline).
+        if (state.hasAttemptedConnection) return state;
+        return {
+          ...state,
+          hasAttemptedConnection: true
+        };
+      }
     default:
       {
         return state;
@@ -45583,8 +46454,10 @@ const input = (state = getInitialState(), action) => {
 /* harmony export */   mN: () => (/* binding */ isAnimatedRichBotMessage),
 /* harmony export */   oy: () => (/* binding */ isTextOnlyEscapeSequence)
 /* harmony export */ });
+/* harmony import */ var uuid__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(55252);
+
 function generateRandomId() {
-  return String(Math.random()).slice(2, 18);
+  return crypto.randomUUID?.() ?? (0,uuid__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A)();
 }
 function isAnimatedRichBotMessage(message) {
   const {
@@ -45884,7 +46757,7 @@ const createMessageMiddleware = client => store => next => action => {
         if (text) {
           store.dispatch((0,_message_handler__WEBPACK_IMPORTED_MODULE_2__/* .receiveMessage */ .VI)({
             source: "engagement",
-            traceId: `engagement-${Math.random()}`,
+            traceId: `engagement-${(0,_helper__WEBPACK_IMPORTED_MODULE_5__/* .generateRandomId */ .MZ)()}`,
             text
           }));
         }
@@ -46326,11 +47199,128 @@ const getOptionsKey = ({
 
 /***/ },
 
+/***/ 57589
+(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   _: () => (/* binding */ hasPersistedConversationForInitialSession)
+/* harmony export */ });
+/* harmony import */ var _options__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(48242);
+/* harmony import */ var _helper_storage__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(62473);
+
+
+
+/**
+ * Whether browser storage already holds a non-empty conversation for the
+ * session this page load will connect with — i.e. whether the first
+ * connect is going to restore a conversation rather than start one.
+ *
+ * This answers, BEFORE the socket connects, the question the AI-agent
+ * notice needs answered (CGY-3519): a restored conversation is a
+ * continuation and must not be announced. Waiting for the connect to
+ * tell us instead is not an option — it can take longer than the
+ * notice's 600ms announce delay, and an announcement cannot be taken
+ * back.
+ *
+ * It deliberately mirrors the restore in `optionsMiddleware`'s
+ * `SET_OPTIONS` handler: same `getStorage`, same `getOptionsKey`, same
+ * "non-empty messages" condition that `RESET_STATE` uses to set
+ * `hasRestoredPersistedHistory`. Reading the same inputs through the
+ * same helpers is what keeps the prediction and the restore aligned —
+ * including when they agree on "no": if the endpoint config (and with it
+ * `URLToken`) has not loaded yet, the key misses here exactly as it
+ * misses there, and nothing is restored either. The one case where they
+ * part company is benign: a message sent before the first connect is
+ * dispatched ahead of `setOptions`, so `RESET_STATE` finds a non-empty
+ * history and skips the restore while this still says "continued" — the
+ * session IS a continuation for the backend, so staying silent remains
+ * the right outcome.
+ *
+ * `config.initialSessionId` is the pinned `sessionId` from the embedding
+ * options. Without one, the socket client mints a fresh session id per
+ * page load, which no stored entry can match, so there is nothing to
+ * predict.
+ */
+// mapStateToProps runs on every dispatch and a persisted conversation can
+// be sizeable, so this must not sit on the hot path: the parse is cached
+// against the raw string it was derived from, and the read stops
+// altogether once the answer is spent (see below). Until then `getItem`
+// runs on every call, which is what keeps the answer current — the key
+// changes once the endpoint config supplies its URLToken.
+let lastRead = null;
+const hasPersistedConversationForInitialSession = state => {
+  const sessionId = state.config.initialSessionId;
+  if (!sessionId) return false;
+
+  // This page load ended up on a session other than the pinned one, so
+  // nothing stored under the pinned key is being restored into it and
+  // there is nothing to predict. "Start new conversation" from the
+  // conversations list does this before the first connect
+  // (`SWITCH_SESSION` with no id mints a fresh session id), and without
+  // this guard that brand-new conversation would inherit the pinned
+  // session's "continued" verdict and never be announced — the mirror
+  // image of the bug this predicate exists for. A REopened previous
+  // conversation also lands here, and is correctly silenced by the
+  // `prevConversations` snapshot instead.
+  if (state.options.sessionId && state.options.sessionId !== sessionId) return false;
+  const {
+    disableLocalStorage,
+    useSessionStorage
+  } = state.config.settings.embeddingConfiguration;
+  try {
+    const browserStorage = (0,_helper_storage__WEBPACK_IMPORTED_MODULE_1__/* .getStorage */ .c)({
+      disableLocalStorage,
+      useSessionStorage
+    });
+    if (!browserStorage) return false;
+
+    // `channel` is not part of the storage key; it is only in the type.
+    const key = (0,_options__WEBPACK_IMPORTED_MODULE_0__/* .getOptionsKey */ .W)({
+      userId: state.options.userId,
+      sessionId,
+      channel: state.options.channel
+    }, state.config);
+
+    // Once the first connect has assigned a session id the answer is
+    // spent: `computeNoticeSession` consults it only while its own
+    // `prev.id` is still "". The key is final well before that (userId
+    // is dispatched on mount, URLToken with the config, and the connect
+    // waits for the config), so the cache is populated by then and every
+    // later dispatch is served without touching storage.
+    if (state.options.sessionId && lastRead?.key === key) return lastRead.result;
+    const persistedString = browserStorage.getItem(key);
+    if (lastRead && lastRead.key === key && lastRead.raw === persistedString) {
+      return lastRead.result;
+    }
+    let result = false;
+    if (persistedString) {
+      try {
+        const messages = JSON.parse(persistedString)?.messages;
+        result = Array.isArray(messages) && messages.length > 0;
+      } catch {
+        result = false;
+      }
+    }
+    lastRead = {
+      key,
+      raw: persistedString,
+      result
+    };
+    return result;
+  } catch {
+    // Restricted embeddings can throw on merely touching storage. The
+    // restore reads it the same way, so nothing would be restored there
+    // either — "no persisted conversation" is the truthful answer.
+    return false;
+  }
+};
+
+/***/ },
+
 /***/ 92101
 (__unused_webpack_module, __webpack_exports__, __webpack_require__) {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   r: () => (/* binding */ switchSession),
 /* harmony export */   w: () => (/* binding */ createPrevConversationsMiddleware)
 /* harmony export */ });
 /* harmony import */ var _previous_conversations_reducer__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(39801);
@@ -46345,12 +47335,6 @@ const getOptionsKey = ({
 
 
 
-const SWITCH_SESSION = "SWITCH_SESSION";
-const switchSession = (sessionId = self.crypto?.randomUUID?.(), conversation) => ({
-  type: SWITCH_SESSION,
-  sessionId,
-  conversation
-});
 const createPrevConversationsMiddleware = client => store => next => action => {
   switch (action.type) {
     case "SWITCH_SESSION":
@@ -46407,9 +47391,16 @@ const createPrevConversationsMiddleware = client => store => next => action => {
 /* harmony export */   CK: () => (/* binding */ prevConversations),
 /* harmony export */   Wu: () => (/* binding */ upsertPrevConversation),
 /* harmony export */   YD: () => (/* binding */ deletePrevConversation),
-/* harmony export */   dU: () => (/* binding */ setConversations)
+/* harmony export */   dU: () => (/* binding */ setConversations),
+/* harmony export */   rm: () => (/* binding */ switchSession)
 /* harmony export */ });
 const getInitialState = () => ({});
+const SWITCH_SESSION = "SWITCH_SESSION";
+const switchSession = (sessionId = self.crypto?.randomUUID?.(), conversation) => ({
+  type: SWITCH_SESSION,
+  sessionId,
+  conversation
+});
 const SET_CONVERSATIONS = "SET_CONVERSATIONS";
 const setConversations = conversations => ({
   type: SET_CONVERSATIONS,
@@ -52246,7 +53237,7 @@ function deconstructPacket(packet) {
     buffers: buffers
   };
 }
-function _deconstructPacket(data, buffers) {
+function _deconstructPacket(data, buffers, toJSON) {
   if (!data) return data;
   if ((0, is_binary_js_1.isBinary)(data)) {
     const placeholder = {
@@ -52262,6 +53253,9 @@ function _deconstructPacket(data, buffers) {
     }
     return newData;
   } else if (typeof data === "object" && !(data instanceof Date)) {
+    if (data.toJSON && typeof data.toJSON === "function" && !toJSON) {
+      return _deconstructPacket(data.toJSON(), buffers, true);
+    }
     const newData = {};
     for (const key in data) {
       if (Object.prototype.hasOwnProperty.call(data, key)) {
@@ -52315,6 +53309,11 @@ function _reconstructPacket(data, buffers) {
 
 
 
+var __importDefault = this && this.__importDefault || function (mod) {
+  return mod && mod.__esModule ? mod : {
+    "default": mod
+  };
+};
 Object.defineProperty(exports, "__esModule", ({
   value: true
 }));
@@ -52323,7 +53322,7 @@ exports.isPacketValid = isPacketValid;
 const component_emitter_1 = __webpack_require__(40368);
 const binary_js_1 = __webpack_require__(56156);
 const is_binary_js_1 = __webpack_require__(10003);
-const debug_1 = __webpack_require__(30887); // debug()
+const debug_1 = __importDefault(__webpack_require__(30887)); // debug()
 const debug = (0, debug_1.default)("socket.io-parser"); // debug()
 /**
  * These strings must not be used as event names, as they have a special meaning.
@@ -52463,10 +53462,6 @@ class Decoder extends component_emitter_1.Emitter {
         packet.type = isBinaryEvent ? PacketType.EVENT : PacketType.ACK;
         // binary packet's json
         this.reconstructor = new BinaryReconstructor(packet);
-        // no attachments, labeled binary but no binary data to follow
-        if (packet.attachments === 0) {
-          super.emitReserved("decoded", packet);
-        }
       } else {
         // non-binary full packet
         super.emitReserved("decoded", packet);
@@ -52511,7 +53506,7 @@ class Decoder extends component_emitter_1.Emitter {
         throw new Error("Illegal attachments");
       }
       const n = Number(buf);
-      if (!isInteger(n) || n < 0) {
+      if (!isInteger(n) || n < 1) {
         throw new Error("Illegal attachments");
       } else if (n > this.opts.maxAttachments) {
         throw new Error("too many attachments");
@@ -56748,19 +57743,19 @@ article ._wrapper_zhv80_1 ._list_zhv80_8 ._listItemRoot_zhv80_8 {
 ._mainButtonWrapper_zhv80_144 {
 	padding: 16px;
 }
-._slideItem_ldua9_1 {
+._slideItem_fa7bu_1 {
 	position: relative;
 	width: 206px;
 	/* height: 150px; */
 	overflow: hidden;
 }
 
-._slideItem_ldua9_1 ._top_ldua9_8 {
+._slideItem_fa7bu_1 ._top_fa7bu_8 {
 	position: relative;
 	border-radius: var(--cc-bubble-border-radius);
 }
 
-._slideItem_ldua9_1 ._bottom_ldua9_13 {
+._slideItem_fa7bu_1 ._bottom_fa7bu_13 {
 	border-bottom-left-radius: var(--cc-bubble-border-radius);
 	border-bottom-right-radius: var(--cc-bubble-border-radius);
 	border: 1px solid var(--cc-black-80);
@@ -56771,7 +57766,7 @@ article ._wrapper_zhv80_1 ._list_zhv80_8 ._listItemRoot_zhv80_8 {
 	padding: 8px;
 }
 
-._slideItem_ldua9_1 ._top_ldua9_8 img {
+._slideItem_fa7bu_1 ._top_fa7bu_8 img {
 	aspect-ratio: 206/150;
 	object-fit: cover;
 	object-position: left;
@@ -56781,7 +57776,7 @@ article ._wrapper_zhv80_1 ._list_zhv80_8 ._listItemRoot_zhv80_8 {
 	outline: none;
 }
 
-._slideItem_ldua9_1 ._brokenImage_ldua9_34 {
+._slideItem_fa7bu_1 ._brokenImage_fa7bu_34 {
 	aspect-ratio: 206/150;
 	width: 100%;
 	display: block;
@@ -56790,9 +57785,9 @@ article ._wrapper_zhv80_1 ._list_zhv80_8 ._listItemRoot_zhv80_8 {
 	background-color: var(--cc-black-80);
 }
 
-._slideItem_ldua9_1 ._hasExtraInfo_ldua9_43,
-._slideItem_ldua9_1 ._hasExtraInfo_ldua9_43 img,
-._slideItem_ldua9_1 ._brokenImage_ldua9_34 {
+._slideItem_fa7bu_1 ._hasExtraInfo_fa7bu_43,
+._slideItem_fa7bu_1 ._hasExtraInfo_fa7bu_43 img,
+._slideItem_fa7bu_1 ._brokenImage_fa7bu_34 {
 	border-bottom-left-radius: 0px;
 	border-bottom-right-radius: 0px;
 }
@@ -56801,7 +57796,7 @@ article ._wrapper_zhv80_1 ._list_zhv80_8 ._listItemRoot_zhv80_8 {
 ** Default (legacy) layout: the title overlays the bottom of the image.
 ** Used when \`galleryCardTitleBelowImage\` is not enabled.
 */
-._slideItem_ldua9_1 ._top_ldua9_8 h4 {
+._slideItem_fa7bu_1 ._top_fa7bu_8 h4 {
 	position: absolute;
 	margin: 0px;
 	margin-inline-start: 8px;
@@ -56809,32 +57804,69 @@ article ._wrapper_zhv80_1 ._list_zhv80_8 ._listItemRoot_zhv80_8 {
 	color: var(--cc-white);
 }
 
+/*
+** A card whose image is missing or failed to load shows the grey
+** \`.brokenImage\` placeholder instead. White text on it is 1.6:1, so the
+** overlaid title switches to dark text there (WCAG 1.4.3 Contrast Minimum,
+** CGY-37634).
+*/
+._slideItem_fa7bu_1 ._top_fa7bu_8:has(._brokenImage_fa7bu_34) h4 {
+	color: var(--cc-black-10);
+}
+
 /*
 ** Opt-in layout (galleryCardTitleBelowImage): the title moves into the content
 ** block beneath the image, so it shares the subtitle's flush margins/padding.
 */
-._slideItem_ldua9_1 ._bottom_ldua9_13 p,
-._slideItem_ldua9_1 ._bottom_ldua9_13 h4 {
+._slideItem_fa7bu_1 ._bottom_fa7bu_13 p,
+._slideItem_fa7bu_1 ._bottom_fa7bu_13 h4 {
 	padding: 0px;
 	margin: 0px;
 }
 
-._slideItem_ldua9_1 ._bottom_ldua9_13 ._buttonListItem_ldua9_72 {
+._slideItem_fa7bu_1 ._bottom_fa7bu_13 ._buttonListItem_fa7bu_82 {
 	width: 100%;
 }
 
+/*
+** default_action link (CGY-37634): wraps the card text inside the content
+** block (keeping the block's column gap), or sits on the image area when the
+** block has no text. Buttons are never inside it.
+*/
+._slideItem_fa7bu_1 ._link_fa7bu_91 {
+	display: flex;
+	flex-direction: column;
+	gap: 8px;
+}
+._slideItem_fa7bu_1 [role="link"] {
+	cursor: pointer;
+}
+._slideItem_fa7bu_1 [role="link"]:focus-visible {
+	outline: 2px solid var(--cc-primary-color-focus);
+	outline-offset: 2px;
+}
+/* .slideItem is overflow:hidden and the image area fills it edge to edge, so
+   the focus ring is drawn inside the card; an outset ring there is clipped
+   away entirely (WCAG 2.4.7 Focus Visible). The text link sits inside the
+   content block's 8px padding, so its outset ring is never clipped. */
+._slideItem_fa7bu_1 ._top_fa7bu_8[role="link"]:focus-visible {
+	outline-offset: -2px;
+}
+
 /* 
 ** SWIPER MAIN
 ** The following styles are a porting from the original swiper/css and related modules.
 ** The idea is to integrate with modules CSS in order to increase the specificity
 ** and avoid conflicts on consumer apps
 */
-article .swiper._wrapper_ldua9_82 {
+article .swiper._wrapper_fa7bu_117 {
 	margin-left: -20px;
 	margin-right: -20px;
 	padding-left: 20px;
 	padding-right: 20px;
-	padding-bottom: 22px;
+	/* The pagination row is in normal flow below the slides (see
+	   .swiper-pagination); 2px clearance under it, matching the gap above it. */
+	padding-bottom: 2px;
 	padding-top: 0px;
 	position: relative;
 	overflow: hidden;
@@ -56843,7 +57875,7 @@ article .swiper._wrapper_ldua9_82 {
 	z-index: 1;
 	display: block;
 }
-article .swiper._wrapper_ldua9_82 .swiper-wrapper {
+article .swiper._wrapper_fa7bu_117 .swiper-wrapper {
 	position: relative;
 	width: 100%;
 	/* height: 100%; */
@@ -56853,15 +57885,15 @@ article .swiper._wrapper_ldua9_82 .swiper-wrapper {
 	transition-timing-function: initial;
 	box-sizing: content-box;
 }
-article .swiper._wrapper_ldua9_82 .swiper-android .swiper-slide,
-article .swiper._wrapper_ldua9_82 .swiper-ios .swiper-slide,
-article .swiper._wrapper_ldua9_82 .swiper-wrapper {
+article .swiper._wrapper_fa7bu_117 .swiper-android .swiper-slide,
+article .swiper._wrapper_fa7bu_117 .swiper-ios .swiper-slide,
+article .swiper._wrapper_fa7bu_117 .swiper-wrapper {
 	transform: translate3d(0px, 0, 0);
 }
-article .swiper._wrapper_ldua9_82 .swiper-horizontal {
+article .swiper._wrapper_fa7bu_117 .swiper-horizontal {
 	touch-action: pan-y;
 }
-article .swiper._wrapper_ldua9_82 .swiper-slide {
+article .swiper._wrapper_fa7bu_117 .swiper-slide {
 	flex-shrink: 0;
 	width: 100%;
 	height: 100%;
@@ -56869,15 +57901,15 @@ article .swiper._wrapper_ldua9_82 .swiper-slide {
 	transition-property: transform;
 	display: block;
 }
-article .swiper._wrapper_ldua9_82 .swiper-slide-invisible-blank {
+article .swiper._wrapper_fa7bu_117 .swiper-slide-invisible-blank {
 	visibility: hidden;
 }
 
 /*
 ** SWIPER PAGINATION
 */
-article .swiper._wrapper_ldua9_82 .gallery-button-prev,
-article .swiper._wrapper_ldua9_82 .gallery-button-next {
+article .swiper._wrapper_fa7bu_117 .gallery-button-prev,
+article .swiper._wrapper_fa7bu_117 .gallery-button-next {
 	position: absolute;
 	top: calc(150px / 2 - 8px);
 	z-index: 10;
@@ -56890,68 +57922,104 @@ article .swiper._wrapper_ldua9_82 .gallery-button-next {
 	display: flex;
 	align-items: center;
 }
-article .swiper._wrapper_ldua9_82 .gallery-button-prev {
+article .swiper._wrapper_fa7bu_117 .gallery-button-prev {
 	left: 20px;
 }
-article .swiper._wrapper_ldua9_82 .gallery-button-next {
+article .swiper._wrapper_fa7bu_117 .gallery-button-next {
 	right: 20px;
 	transform: rotate(180deg);
 }
-article .swiper._wrapper_ldua9_82 .gallery-button-prev:dir(rtl) {
+article .swiper._wrapper_fa7bu_117 .gallery-button-prev:dir(rtl) {
 	left: unset;
 	right: 20px;
 	transform: rotate(180deg);
 }
-article .swiper._wrapper_ldua9_82 .gallery-button-next:dir(rtl) {
+article .swiper._wrapper_fa7bu_117 .gallery-button-next:dir(rtl) {
 	right: unset;
 	left: 20px;
 	transform: rotate(0deg);
 }
-article .swiper._wrapper_ldua9_82 .swiper-button-disabled {
+article .swiper._wrapper_fa7bu_117 .swiper-button-disabled {
 	opacity: 0;
 }
 
 /*
 ** SWIPER NAVIGATION
 */
-article .swiper._wrapper_ldua9_82 .swiper-pagination {
-	position: absolute;
+/*
+** The pagination row is in normal flow beneath the slides. Bullets are fixed
+** 24px targets (WCAG 2.5.8) and wrap onto further rows when more than fit in
+** one; in flow, extra rows grow the gallery downwards rather than overlapping
+** the cards. A single row adds 28px: 2px gap + 24px row + 2px container
+** padding.
+*/
+article .swiper._wrapper_fa7bu_117 .swiper-pagination {
+	position: relative;
 	text-align: center;
 	transition: 300ms opacity;
 	transform: translate3d(0, 0, 0);
 	z-index: 10;
 }
-article .swiper._wrapper_ldua9_82 .swiper-pagination.swiper-pagination-hidden {
+article .swiper._wrapper_fa7bu_117 .swiper-pagination.swiper-pagination-hidden {
 	opacity: 0;
 }
-article .swiper._wrapper_ldua9_82 .swiper-pagination-disabled > .swiper-pagination,
-article .swiper._wrapper_ldua9_82 .swiper-pagination.swiper-pagination-disabled {
+article .swiper._wrapper_fa7bu_117 .swiper-pagination-disabled > .swiper-pagination,
+article .swiper._wrapper_fa7bu_117 .swiper-pagination.swiper-pagination-disabled {
 	display: none !important;
 }
-article .swiper._wrapper_ldua9_82 .swiper-horizontal > .swiper-pagination-bullets,
-article .swiper._wrapper_ldua9_82 .swiper-pagination-bullets.swiper-pagination-horizontal {
-	bottom: 4px;
-	left: 0;
+article .swiper._wrapper_fa7bu_117 .swiper-horizontal > .swiper-pagination-bullets,
+article .swiper._wrapper_fa7bu_117 .swiper-pagination-bullets.swiper-pagination-horizontal {
+	margin-top: 2px;
 	width: 100%;
+	display: flex;
+	flex-wrap: wrap;
+	justify-content: center;
+	align-items: center;
+}
+/*
+** Each bullet is a 24×24px pointer/focus target (WCAG 2.5.8 Target Size
+** Minimum, CGY-37634). The visible 6px dot is drawn by ::before, so the look
+** is unchanged while the hit area grows around it; focus styling therefore
+** targets ::before too.
+*/
+article .swiper._wrapper_fa7bu_117 .swiper-pagination-bullet {
+	/* Fixed-size flex item: the 24px target never shrinks when the row is
+	   full; overflowing bullets wrap (see .swiper-pagination). */
+	flex: 0 0 24px;
+	width: 24px;
+	height: 24px;
+	display: inline-flex;
+	align-items: center;
+	justify-content: center;
+	/* No border-radius here: browsers clip pointer hit-testing to the rounded
+	   shape, which would shrink the target back below 24×24. */
+	background: transparent;
+	opacity: 1;
 }
-article .swiper._wrapper_ldua9_82 .swiper-pagination-bullet {
+article .swiper._wrapper_fa7bu_117 .swiper-pagination-bullet::before {
+	content: "";
 	width: 6px;
 	height: 6px;
-	display: inline-block;
 	border-radius: 50%;
-	background: var(--cc-black-50);
-	opacity: 1;
+	background-color: var(--cc-black-50);
 }
-article .swiper._wrapper_ldua9_82 .swiper-pagination-bullet:focus {
+/* Declared before the focus rules (and lower in specificity) so a focused
+   active bullet always shows the focus colour, not the active black. */
+article .swiper._wrapper_fa7bu_117 .swiper-pagination-bullet-active::before {
+	background-color: black;
+}
+article .swiper._wrapper_fa7bu_117 .swiper-pagination-bullet:focus {
+	outline: none;
+}
+article .swiper._wrapper_fa7bu_117 .swiper-pagination-bullet:focus::before {
 	background-color: var(--cc-primary-color-focus);
 	box-shadow: 0 0 0 4px var(--cc-primary-color-opacity-10);
-	outline: none;
 }
-article .swiper._wrapper_ldua9_82 .swiper-pagination-bullet:focus-visible {
+article .swiper._wrapper_fa7bu_117 .swiper-pagination-bullet:focus-visible::before {
 	outline: 2px solid var(--cc-primary-color-focus);
 	outline-offset: 2px;
 }
-article .swiper._wrapper_ldua9_82 button.swiper-pagination-bullet {
+article .swiper._wrapper_fa7bu_117 button.swiper-pagination-bullet {
 	border: none;
 	margin: 0;
 	padding: 0;
@@ -56959,23 +58027,20 @@ article .swiper._wrapper_ldua9_82 button.swiper-pagination-bullet {
 	-webkit-appearance: none;
 	appearance: none;
 }
-article .swiper._wrapper_ldua9_82 .swiper-pagination-clickable .swiper-pagination-bullet {
+article .swiper._wrapper_fa7bu_117 .swiper-pagination-clickable .swiper-pagination-bullet {
 	cursor: pointer;
 }
-article .swiper._wrapper_ldua9_82 .swiper-pagination-bullet:only-child {
+article .swiper._wrapper_fa7bu_117 .swiper-pagination-bullet:only-child {
 	display: none !important;
 }
-article .swiper._wrapper_ldua9_82 .swiper-pagination-bullet-active {
-	opacity: 1;
-	background-color: black;
-}
 article
-	.swiper._wrapper_ldua9_82
+	.swiper._wrapper_fa7bu_117
 	.swiper-horizontal > .swiper-pagination-bullets .swiper-pagination-bullet,
 article
-	.swiper._wrapper_ldua9_82
+	.swiper._wrapper_fa7bu_117
 	.swiper-pagination-horizontal.swiper-pagination-bullets .swiper-pagination-bullet {
-	margin: 0 4px;
+	/* Adjacent 24px targets touch but never overlap (WCAG 2.5.8). */
+	margin: 0;
 }
 ._wrapper_1h4l4_1 {
 	background-color: white;
@@ -59151,6 +60216,14 @@ const replaceUrlsWithHTMLanchorElem = text2 => {
   });
   return enhancedText;
 };
+const htmlToPlainText = html2 => {
+  if (!html2) return "";
+  if (typeof DOMParser !== "undefined") {
+    const doc = new DOMParser().parseFromString(html2, "text/html");
+    return (doc.body?.textContent ?? "").trim();
+  }
+  return html2.replace(/<[^>]*>/g, "").trim();
+};
 const getFocusableElements = element2 => {
   const interactiveEls = element2?.querySelectorAll('a[href], button, input, textarea, select, details,[tabindex]:not([tabindex="-1"])');
   const interactiveElsArray = interactiveEls && Array.from(interactiveEls);
@@ -59715,7 +60788,7 @@ function createDOMPurify() {
     NodeFilter: NodeFilter2,
     NamedNodeMap = window2.NamedNodeMap || window2.MozNamedAttrMap,
     HTMLFormElement,
-    DOMParser,
+    DOMParser: DOMParser2,
     trustedTypes: trustedTypes2
   } = window2;
   const ElementPrototype = Element2.prototype;
@@ -60077,7 +61150,7 @@ function createDOMPurify() {
     const dirtyPayload = trustedTypesPolicy ? trustedTypesPolicy.createHTML(dirty) : dirty;
     if (NAMESPACE === HTML_NAMESPACE) {
       try {
-        doc = new DOMParser().parseFromString(dirtyPayload, PARSER_MEDIA_TYPE);
+        doc = new DOMParser2().parseFromString(dirtyPayload, PARSER_MEDIA_TYPE);
       } catch (_) {}
     }
     if (!doc || !doc.documentElement) {
@@ -68806,7 +69879,7 @@ function linkReference$1(state, node2) {
   state.patch(node2, result);
   return state.applyData(node2, result);
 }
-function link$1(state, node2) {
+function link$2(state, node2) {
   const properties = {
     href: normalizeUri(node2.url)
   };
@@ -69109,7 +70182,7 @@ const handlers = {
   image: image$1,
   inlineCode: inlineCode$1,
   linkReference: linkReference$1,
-  link: link$1,
+  link: link$2,
   listItem: listItem$1,
   list: list$3,
   paragraph: paragraph$2,
@@ -82630,8 +83703,8 @@ function formatLinkAsAutolink(node2, state) {
   // references don’t work), space, or angle brackets…
   !/[\0- <>\u007F]/.test(node2.url));
 }
-link.peek = linkPeek;
-function link(node2, _, state, info) {
+link$1.peek = linkPeek;
+function link$1(node2, _, state, info) {
   const quote = checkQuote(state);
   const suffix = quote === '"' ? "Quote" : "Apostrophe";
   const tracker = state.createTracker(info);
@@ -82937,7 +84010,7 @@ const handle = {
   image,
   imageReference,
   inlineCode,
-  link,
+  link: link$1,
   linkReference,
   list: list$2,
   listItem,
@@ -84804,25 +85877,15 @@ const LightboxHeader = () => {
   const {
     config: config2
   } = useMessageContext();
-  const firstButton = (0,react__WEBPACK_IMPORTED_MODULE_1__.useRef)(null);
+  const downloadButton2 = (0,react__WEBPACK_IMPORTED_MODULE_1__.useRef)(null);
   (0,react__WEBPACK_IMPORTED_MODULE_1__.useEffect)(() => {
     setTimeout(() => {
-      firstButton.current?.focus();
+      downloadButton2.current?.focus();
     }, 100);
   }, []);
   const handleDownload = () => {
     window.open(url, "_blank");
   };
-  const handleKeyDownload = event => {
-    event.key === "Enter" && handleDownload();
-  };
-  const handleKeyClose = event => {
-    if (event.key === "Tab" || event.shiftKey) {
-      firstButton.current?.focus();
-      event.preventDefault();
-    }
-    event.code === "Enter" && onClose && onClose();
-  };
   const downloadFullsizeImageLabel = config2?.settings.customTranslations?.ariaLabels?.downloadFullsizeImage || "Download full-size image";
   const closeFullsizeImageModalLabel = config2?.settings.customTranslations?.ariaLabels?.closeFullsizeImageModal || "Close full-size image viewer";
   return /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)("div", {
@@ -84833,15 +85896,13 @@ const LightboxHeader = () => {
     }), /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)("div", {
       className: classes$h.iconsGroup,
       children: [/* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("button", {
-        ref: firstButton,
+        ref: downloadButton2,
         onClick: handleDownload,
-        onKeyDown: handleKeyDownload,
         "aria-label": downloadFullsizeImageLabel,
         className: classes$h.icon,
         children: /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(SvgDownload, {})
       }), /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("button", {
         onClick: onClose,
-        onKeyDown: handleKeyClose,
         "aria-label": closeFullsizeImageModalLabel,
         className: classes$h.icon,
         children: /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(SvgClose, {})
@@ -84858,12 +85919,34 @@ const Lightbox = () => {
   const {
     config: config2
   } = useMessageContext();
+  const dialogRef = (0,react__WEBPACK_IMPORTED_MODULE_1__.useRef)(null);
   (0,react__WEBPACK_IMPORTED_MODULE_1__.useEffect)(() => {
-    const close = event => {
-      event.code === "Escape" && onClose && onClose();
+    const handleKeyDown = event => {
+      if (event.key === "Escape" || event.code === "Escape") {
+        onClose && onClose();
+        return;
+      }
+      if (event.key !== "Tab" || !dialogRef.current) return;
+      const {
+        firstFocusable,
+        lastFocusable
+      } = getFocusableElements(dialogRef.current);
+      if (!firstFocusable || !lastFocusable) return;
+      const active = document.activeElement;
+      const focusInsideDialog = !!active && dialogRef.current.contains(active);
+      if (!focusInsideDialog) {
+        event.preventDefault();
+        (event.shiftKey ? lastFocusable : firstFocusable).focus();
+      } else if (event.shiftKey && active === firstFocusable) {
+        event.preventDefault();
+        lastFocusable.focus();
+      } else if (!event.shiftKey && active === lastFocusable) {
+        event.preventDefault();
+        firstFocusable.focus();
+      }
     };
-    window.addEventListener("keydown", close);
-    return () => window.removeEventListener("keydown", close);
+    window.addEventListener("keydown", handleKeyDown);
+    return () => window.removeEventListener("keydown", handleKeyDown);
   }, [onClose]);
   const handleOnClickBackdrop = event => {
     event.preventDefault();
@@ -84878,7 +85961,9 @@ const Lightbox = () => {
   };
   const lightboxLabel = config2?.settings.customTranslations?.ariaLabels?.fullSizeImageViewerTitle || "Full-size image viewer";
   return /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)("div", {
+    ref: dialogRef,
     role: "dialog",
+    "aria-modal": "true",
     "aria-label": lightboxLabel,
     className: classes$h.wrapper,
     children: [/* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("div", {
@@ -84887,7 +85972,7 @@ const Lightbox = () => {
       children: /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("img", {
         className: classes$h.fullImage,
         "data-test": "image-lightbox",
-        alt: altText,
+        alt: altText || "",
         src: url,
         onClick: handleOnClickImage,
         onTouchMove: handleOnSwipeImage
@@ -85376,9 +86461,11 @@ const ActionButtons = props2 => {
     }, index2) : actionButton2;
   });
   const Component = buttons2.length > 1 ? "ul" : "div";
+  const singleButtonRole = Component === "div" && templateTextId ? "group" : void 0;
   return /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(Component, {
     className: classnames$1(className, classes$d.buttons, containerClassName),
     style: containerStyle || {},
+    role: singleButtonRole,
     "aria-labelledby": templateTextId,
     "data-testid": "action-buttons",
     children: buttonElements
@@ -92495,13 +93582,14 @@ const List = () => {
     })]
   });
 };
-const slideItem = "_slideItem_ldua9_1";
-const top = "_top_ldua9_8";
-const bottom = "_bottom_ldua9_13";
-const brokenImage = "_brokenImage_ldua9_34";
-const hasExtraInfo = "_hasExtraInfo_ldua9_43";
-const buttonListItem = "_buttonListItem_ldua9_72";
-const wrapper$1 = "_wrapper_ldua9_82";
+const slideItem = "_slideItem_fa7bu_1";
+const top = "_top_fa7bu_8";
+const bottom = "_bottom_fa7bu_13";
+const brokenImage = "_brokenImage_fa7bu_34";
+const hasExtraInfo = "_hasExtraInfo_fa7bu_43";
+const buttonListItem = "_buttonListItem_fa7bu_82";
+const link = "_link_fa7bu_91";
+const wrapper$1 = "_wrapper_fa7bu_117";
 const classes$8 = {
   slideItem,
   top,
@@ -92509,6 +93597,7 @@ const classes$8 = {
   brokenImage,
   hasExtraInfo,
   buttonListItem,
+  link,
   wrapper: wrapper$1
 };
 const getGalleryContent = (elements, isSanitizeEnabled, customAllowedHtmlTags) => {
@@ -98275,6 +99364,18 @@ const SwiperSlide = /* @__PURE__ */(0,react__WEBPACK_IMPORTED_MODULE_1__.forward
   })));
 });
 SwiperSlide.displayName = "SwiperSlide";
+const getHostname = url => {
+  try {
+    const {
+      protocol,
+      hostname
+    } = new URL(url);
+    return protocol === "http:" || protocol === "https:" ? hostname : "";
+  } catch {
+    return "";
+  }
+};
+const NESTED_CONTROL_SELECTOR = "a[href], button, input, select, textarea, summary";
 const GalleryItem = props2 => {
   const {
     slide: slide2,
@@ -98295,7 +99396,6 @@ const GalleryItem = props2 => {
     messageParams,
     "data-message-id": dataMessageId
   } = useMessageContext();
-  const hasExtraInfo2 = subtitle || buttons2 && buttons2?.length > 0;
   const titleBelowImage = !!config2?.settings?.layout?.galleryCardTitleBelowImage;
   const [isImageBroken, setImageBroken] = (0,react__WEBPACK_IMPORTED_MODULE_1__.useState)(false);
   const {
@@ -98303,22 +99403,25 @@ const GalleryItem = props2 => {
   } = useSanitize();
   const titleHtml = processHTML(title || "");
   const subtitleHtml = processHTML(subtitle || "");
-  const hasTitle = !!titleHtml;
+  const hasTitle = !!titleHtml.trim();
+  const hasSubtitle = !!subtitleHtml.trim();
+  const hasButtons = !!buttons2 && buttons2.length > 0;
+  const hasExtraInfo2 = hasSubtitle || hasButtons;
   const showContentBlock = titleBelowImage && hasTitle || hasExtraInfo2;
   const titleId = useRandomId("webchatCarouselTemplateTitle");
   const subtitleId = useRandomId("webchatCarouselTemplateSubtitle");
   const shouldBeDisabled = messageParams?.isConversationEnded;
   const opensInNewTab = config2?.settings.customTranslations?.ariaLabels?.opensInNewTab ?? "Opens in new tab";
-  const handleClick = () => {
-    if (!default_action?.url) return;
-    const url = config2?.settings?.layout?.disableUrlButtonSanitization ? default_action.url : distExports.sanitizeUrl(default_action.url);
-    if (url === "about:blank") return;
-    window.open(url);
-    return;
+  const linkUrl = default_action?.url ? config2?.settings?.layout?.disableUrlButtonSanitization ? default_action.url : distExports.sanitizeUrl(default_action.url) : "";
+  const handleClick = event => {
+    const target = event.target;
+    if (target !== event.currentTarget && target.closest(NESTED_CONTROL_SELECTOR)) return;
+    if (!linkUrl || linkUrl === "about:blank") return;
+    window.open(linkUrl);
   };
   const handleKeyDown = event => {
     if (default_action && event.key === "Enter") {
-      handleClick();
+      handleClick(event);
     }
   };
   const titleElement = /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(Typography, {
@@ -98330,35 +99433,54 @@ const GalleryItem = props2 => {
     className: "webchat-carousel-template-title",
     id: titleId
   });
+  const subtitleElement = hasSubtitle && /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(Typography, {
+    variant: "body-regular",
+    dangerouslySetInnerHTML: {
+      __html: subtitleHtml
+    },
+    id: subtitleId,
+    className: "webchat-carousel-template-subtitle"
+  });
+  const hasBlockText = hasSubtitle || titleBelowImage && hasTitle;
+  const linkTarget = linkUrl && linkUrl !== "about:blank" ? hasBlockText ? "text" : "top" : null;
+  const titleText = linkTarget ? htmlToPlainText(titleHtml) : "";
+  const subtitleText = linkTarget ? htmlToPlainText(subtitleHtml) : "";
+  const linkName = titleText || subtitleText || image_alt_text || getHostname(linkUrl);
+  const linkLabel = [linkName, opensInNewTab].filter(Boolean).join(". ");
+  const linkDescribedBy = hasSubtitle && linkName !== subtitleText ? subtitleId : void 0;
+  const cardLink = (className, children) => /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("div", {
+    className,
+    role: "link",
+    tabIndex: 0,
+    onClick: handleClick,
+    onKeyDown: handleKeyDown,
+    "aria-label": linkLabel,
+    "aria-describedby": linkDescribedBy,
+    children
+  });
+  const topClassName = classnames$1(classes$8.top, showContentBlock && classes$8.hasExtraInfo);
+  const imageArea = /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)(react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.Fragment, {
+    children: [!titleBelowImage && hasTitle && titleElement, isImageBroken ? /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("span", {
+      className: classes$8.brokenImage
+    }) : /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("img", {
+      src: image_url,
+      alt: image_alt_text || "",
+      className: classes$8.slideImage,
+      onError: () => setImageBroken(true)
+    })]
+  });
+  const blockText = /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)(react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.Fragment, {
+    children: [titleBelowImage && hasTitle && titleElement, subtitleElement]
+  });
   return /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)("div", {
     className: classnames$1("webchat-carousel-template-frame", classes$8.slideItem),
-    children: [/* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)("div", {
-      className: classnames$1(classes$8.top, showContentBlock && classes$8.hasExtraInfo),
-      children: [!titleBelowImage && hasTitle && titleElement, isImageBroken ? /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("span", {
-        className: classes$8.brokenImage
-      }) : /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("img", {
-        src: image_url,
-        alt: image_alt_text || "",
-        className: classes$8.slideImage,
-        onError: () => setImageBroken(true)
-      })]
+    children: [linkTarget === "top" ? cardLink(topClassName, imageArea) : /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("div", {
+      className: topClassName,
+      children: imageArea
     }), showContentBlock && /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)("div", {
       className: classnames$1("webchat-carousel-template-content", classes$8.bottom),
-      onClick: handleClick,
-      onKeyDown: handleKeyDown,
-      role: default_action?.url ? "link" : void 0,
       id: contentId,
-      "aria-describedby": default_action?.url && subtitle ? subtitleId : void 0,
-      "aria-labelledby": default_action?.url && hasTitle ? titleId : void 0,
-      "aria-label": default_action?.url ? `${titleHtml}. ${opensInNewTab}` : void 0,
-      children: [titleBelowImage && hasTitle && titleElement, subtitle && /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(Typography, {
-        variant: "body-regular",
-        dangerouslySetInnerHTML: {
-          __html: subtitleHtml
-        },
-        id: subtitleId,
-        className: "webchat-carousel-template-subtitle"
-      }), buttons2 && buttons2?.length > 0 && /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(ActionButtons, {
+      children: [linkTarget === "text" ? cardLink(classnames$1("webchat-carousel-template-link", classes$8.link), blockText) : blockText, hasButtons && /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(ActionButtons, {
         dataMessageId,
         buttonClassName: classnames$1(buttonClasses.primaryButton, buttonClasses.actionButton, "webchat-carousel-template-button"),
         buttonListItemClassName: classes$8.buttonListItem,
@@ -98390,22 +99512,24 @@ const Gallery = () => {
   const carouselContentId = useRandomId("webchatCarouselContentButton");
   (0,react__WEBPACK_IMPORTED_MODULE_1__.useEffect)(() => {
     const chatHistory = document.getElementById("webchatChatHistoryWrapperLiveLogPanel");
-    const firstCardContent = document.getElementById(`${carouselContentId}-0`);
-    const firstButton = firstCardContent?.getElementsByTagName("button")?.[0];
+    const messageRoot = dataMessageId ? document.querySelector(`[data-message-id="${dataMessageId.replace(/["\\]/g, "\\$&")}"]`) : null;
+    const firstCard = messageRoot?.querySelector(".webchat-carousel-template-frame") ?? document.getElementById(`${carouselContentId}-0`)?.closest(".webchat-carousel-template-frame");
+    const firstLink = firstCard?.querySelector('[role="link"]');
+    const firstButton = firstCard?.getElementsByTagName("button")?.[0];
     if (!config2?.settings?.widgetSettings?.enableAutoFocus) return;
     if (!chatHistory?.contains(document.activeElement)) return;
-    if (firstCardContent?.getAttribute("role") === "link") {
+    if (firstLink) {
       setTimeout(() => {
-        firstCardContent?.focus();
+        firstLink.focus();
       }, 200);
     } else if (firstButton) {
       setTimeout(() => {
         firstButton?.focus();
       }, 200);
     }
-  }, [carouselContentId, config2?.settings?.widgetSettings?.enableAutoFocus]);
+  }, [carouselContentId, dataMessageId, config2?.settings?.widgetSettings?.enableAutoFocus]);
   (0,react__WEBPACK_IMPORTED_MODULE_1__.useEffect)(() => {
-    const galleryMessage = document.querySelector(`[data-message-id="${dataMessageId}"]`);
+    const galleryMessage = dataMessageId ? document.querySelector(`[data-message-id="${dataMessageId.replace(/["\\]/g, "\\$&")}"]`) : null;
     const swiperWrapper = galleryMessage?.querySelector(".swiper-wrapper");
     if (swiperWrapper) {
       swiperWrapper.removeAttribute("aria-live");
@@ -98447,7 +99571,8 @@ const Gallery = () => {
       nextEl: ".gallery-button-next"
     },
     pagination: {
-      clickable: true
+      clickable: true,
+      el: ".gallery-pagination"
     },
     className: classnames$1("webchat-carousel-template-root", classes$8.wrapper),
     "data-testid": "gallery-message",
@@ -98468,6 +99593,8 @@ const Gallery = () => {
     }), /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("button", {
       className: "gallery-button-next",
       children: /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(SvgArrowBack, {})
+    }), /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("div", {
+      className: "gallery-pagination swiper-pagination"
     })]
   });
 };
@@ -117179,12 +118306,23 @@ function requireL10n() {
 }
 var l10nExports = requireL10n();
 const l10n = /* @__PURE__ */getDefaultExportFromCjs(l10nExports);
+let instanceSeq = 0;
+function visuallyHide(element2) {
+  element2.style.position = "absolute";
+  element2.style.width = "1px";
+  element2.style.height = "1px";
+  element2.style.overflow = "hidden";
+  element2.style.clip = "rect(0, 0, 0, 0)";
+  element2.style.whiteSpace = "nowrap";
+}
 function customElements(pluginConfig) {
   return function (fp) {
     const {
       arrowIcon: arrowIcon2,
-      customTranslations
+      customTranslations,
+      localeId
     } = pluginConfig;
+    const instanceId = ++instanceSeq;
     const navKeydownHandlers = /* @__PURE__ */new WeakMap();
     const observers = [];
     const timeouts = [];
@@ -117196,12 +118334,7 @@ function customElements(pluginConfig) {
       liveRegion.setAttribute("aria-live", "assertive");
       liveRegion.setAttribute("aria-atomic", "true");
       liveRegion.setAttribute("role", "alert");
-      liveRegion.style.position = "absolute";
-      liveRegion.style.width = "1px";
-      liveRegion.style.height = "1px";
-      liveRegion.style.overflow = "hidden";
-      liveRegion.style.clip = "rect(0, 0, 0, 0)";
-      liveRegion.style.whiteSpace = "nowrap";
+      visuallyHide(liveRegion);
       fp.calendarContainer.appendChild(liveRegion);
     }
     function announce(message2) {
@@ -117344,51 +118477,150 @@ function customElements(pluginConfig) {
       }
     }
     const GRID_COLS = 7;
+    const hasWeekNumbers = () => !!fp?.config?.weekNumbers;
+    const colOffset = () => hasWeekNumbers() ? 1 : 0;
+    const weekHeaderId = rowIndex => `webchat-datepicker-${instanceId}-week-${rowIndex}`;
+    const weekNumberLabel = () => customTranslations?.ariaLabels?.datePickerWeekNumber || "Week";
+    const dayCellId = index2 => `webchat-datepicker-${instanceId}-day-${index2}`;
     function setDateSelectAlly() {
       fp?.calendarContainer?.setAttribute("tabindex", "-1");
-      const grid = fp?.calendarContainer?.querySelector(".flatpickr-rContainer");
+      const rContainer = fp?.calendarContainer?.querySelector(".flatpickr-rContainer");
+      const innerContainer = fp?.calendarContainer?.querySelector(".flatpickr-innerContainer");
+      const grid = hasWeekNumbers() ? innerContainer : rContainer;
+      const layoutWrapper = hasWeekNumbers() ? rContainer : innerContainer;
       if (grid) {
         grid.setAttribute("role", "grid");
         grid.setAttribute("aria-label", customTranslations?.ariaLabels?.datePickerGridLabel || "Calendar");
         grid.setAttribute("aria-description", customTranslations?.ariaLabels?.datePickerGridDescription || "Use arrow keys to navigate through dates");
-        grid.setAttribute("aria-colcount", String(GRID_COLS));
+        grid.setAttribute("aria-colcount", String(GRID_COLS + colOffset()));
         grid.setAttribute("aria-rowcount", "7");
       }
-      const innerContainer = fp?.calendarContainer?.getElementsByClassName("flatpickr-innerContainer")[0];
-      innerContainer?.removeAttribute("tabindex");
-      innerContainer?.removeAttribute("role");
-      innerContainer?.removeAttribute("aria-activedescendant");
-      const weekdayContainer = fp?.calendarContainer?.querySelector(".flatpickr-weekdays");
-      if (weekdayContainer) {
-        weekdayContainer.setAttribute("role", "row");
-        weekdayContainer.setAttribute("aria-rowindex", "1");
-      }
-      const weekdaySpans = fp?.calendarContainer?.querySelectorAll(".flatpickr-weekday");
+      layoutWrapper?.removeAttribute("tabindex");
+      layoutWrapper?.removeAttribute("aria-activedescendant");
+      layoutWrapper?.setAttribute("role", "presentation");
+      if (hasWeekNumbers()) fp?.weekWrapper?.setAttribute("role", "presentation");
+      const weekdayRow = fp?.calendarContainer?.querySelector(".flatpickr-weekdays");
+      if (weekdayRow) {
+        weekdayRow.setAttribute("role", "row");
+        weekdayRow.setAttribute("aria-rowindex", "1");
+      }
+      weekdayRow?.querySelector(".flatpickr-weekdaycontainer")?.setAttribute("role", "presentation");
+      const weekdaySpans = fp?.calendarContainer?.querySelectorAll(".flatpickr-weekdaycontainer .flatpickr-weekday");
       weekdaySpans?.forEach((span, index2) => {
         span.setAttribute("role", "columnheader");
         span.setAttribute("abbr", span.textContent?.trim() || "");
-        span.setAttribute("aria-colindex", String(index2 % GRID_COLS + 1));
+        span.setAttribute("aria-colindex", String(index2 % GRID_COLS + 1 + colOffset()));
+      });
+      const visualWeekHeader = fp?.weekWrapper?.querySelector(".flatpickr-weekday");
+      if (visualWeekHeader && weekdayRow) {
+        visualWeekHeader.setAttribute("aria-hidden", "true");
+        let weekHeader = weekdayRow.querySelector(":scope > [data-week-header]");
+        if (!weekHeader) {
+          weekHeader = document.createElement("span");
+          weekHeader.dataset.weekHeader = "true";
+          visuallyHide(weekHeader);
+          weekdayRow.prepend(weekHeader);
+        }
+        weekHeader.id = weekHeaderId(1);
+        weekHeader.setAttribute("role", "columnheader");
+        weekHeader.setAttribute("abbr", visualWeekHeader.textContent?.trim() || "");
+        weekHeader.setAttribute("aria-colindex", "1");
+        weekHeader.textContent = weekNumberLabel();
+      }
+    }
+    function syncWeekNumbers() {
+      if (!hasWeekNumbers() || !fp?.weekNumbers) return;
+      fp.weekNumbers.setAttribute("role", "presentation");
+      const weekCells = Array.from(fp.weekNumbers.querySelectorAll(":scope > .flatpickr-day"));
+      weekCells.forEach((cell, i) => {
+        const rowIndex = i + 2;
+        cell.id = weekHeaderId(rowIndex);
+        cell.setAttribute("role", "rowheader");
+        cell.setAttribute("aria-rowindex", String(rowIndex));
+        cell.setAttribute("aria-colindex", "1");
+        cell.setAttribute("aria-label", `${weekNumberLabel()} ${cell.textContent?.trim()}`);
       });
     }
     function applyDayGridIndices() {
       const dayContainer = fp?.calendarContainer?.querySelector(".dayContainer");
       if (!dayContainer) return;
-      dayContainer.setAttribute("role", "rowgroup");
+      dayContainer.setAttribute("role", "presentation");
       const dayCells = Array.from(dayContainer.querySelectorAll(":scope > .flatpickr-day"));
       dayCells.forEach((cell, i) => {
-        cell.setAttribute("aria-rowindex", String(Math.floor(i / GRID_COLS) + 2));
-        cell.setAttribute("aria-colindex", String(i % GRID_COLS + 1));
-      });
-    }
-    function markSelectedCells() {
-      getDayCells().forEach(day => {
-        if (day.classList.contains("selected")) {
-          day.setAttribute("aria-selected", "true");
+        cell.id = dayCellId(i);
+        const rowIndex = Math.floor(i / GRID_COLS) + 2;
+        cell.setAttribute("aria-rowindex", String(rowIndex));
+        cell.setAttribute("aria-colindex", String(i % GRID_COLS + 1 + colOffset()));
+        const weekHeader = hasWeekNumbers() ? fp?.weekNumbers?.querySelector(`[aria-rowindex="${rowIndex}"]`) : null;
+        if (weekHeader?.id) {
+          cell.setAttribute("aria-describedby", weekHeader.id);
         } else {
-          day.removeAttribute("aria-selected");
+          cell.removeAttribute("aria-describedby");
         }
       });
     }
+    function syncGridRows() {
+      const daysContainer = fp?.calendarContainer?.querySelector(".flatpickr-days");
+      const dayContainer = daysContainer?.querySelector(":scope > .dayContainer");
+      if (!daysContainer || !dayContainer) return;
+      daysContainer.setAttribute("role", "rowgroup");
+      const dayCells = Array.from(dayContainer.querySelectorAll(":scope > .flatpickr-day"));
+      const rowCount = Math.ceil(dayCells.length / GRID_COLS);
+      for (let r = 0; r < rowCount; r++) {
+        const rowIndex = r + 2;
+        let row = daysContainer.querySelector(`:scope > [data-grid-row="${rowIndex}"]`);
+        if (!row) {
+          row = document.createElement("div");
+          row.dataset.gridRow = String(rowIndex);
+          row.setAttribute("role", "row");
+          visuallyHide(row);
+          daysContainer.appendChild(row);
+        }
+        row.setAttribute("aria-rowindex", String(rowIndex));
+        const owned = dayCells.slice(r * GRID_COLS, (r + 1) * GRID_COLS).map(c => c.id);
+        const weekHeader = hasWeekNumbers() ? fp?.weekNumbers?.querySelector(`[aria-rowindex="${rowIndex}"]`) : null;
+        if (weekHeader?.id) owned.unshift(weekHeader.id);
+        row.setAttribute("aria-owns", owned.join(" "));
+      }
+    }
+    function isSelectedCell(cell) {
+      return cell.classList.contains("selected") || cell.classList.contains("inRange") || cell.classList.contains("startRange") || cell.classList.contains("endRange");
+    }
+    const pendingLabelRestore = /* @__PURE__ */new Set();
+    function syncDayCellState(cell) {
+      if (isSelectedCell(cell)) {
+        cell.setAttribute("aria-selected", "true");
+      } else {
+        cell.removeAttribute("aria-selected");
+      }
+      if (pendingLabelRestore.has(cell)) return;
+      const date = cellDate(cell);
+      if (date) cell.setAttribute("aria-label", getDayLabel(cell, date));
+    }
+    function syncAllDayCells() {
+      getDayCells().forEach(syncDayCellState);
+    }
+    function observeDayCellClasses() {
+      const daysContainer = fp?.calendarContainer?.querySelector(".flatpickr-days");
+      if (!daysContainer || daysContainer.dataset.classObserved === "true") return;
+      daysContainer.dataset.classObserved = "true";
+      const observer = new MutationObserver(records => {
+        const touched = /* @__PURE__ */new Set();
+        records.forEach(record => {
+          const cell = record.target;
+          if (cell.classList?.contains("flatpickr-day") && cell.closest(".dayContainer")) {
+            touched.add(cell);
+          }
+        });
+        touched.forEach(syncDayCellState);
+      });
+      observer.observe(daysContainer, {
+        attributes: true,
+        attributeFilter: ["class"],
+        subtree: true
+      });
+      observers.push(observer);
+    }
     function restoreRovingDay() {
       const existing = fp?.calendarContainer?.querySelector(".dayContainer .flatpickr-day[tabindex='0']");
       setActiveDay(existing || getInitialActiveDay(), {
@@ -117396,8 +118628,10 @@ function customElements(pluginConfig) {
       });
     }
     function refreshGridAfterRebuild() {
+      syncWeekNumbers();
       applyDayGridIndices();
-      markSelectedCells();
+      syncGridRows();
+      syncAllDayCells();
       restoreRovingDay();
     }
     function observeDayGrid() {
@@ -117480,6 +118714,10 @@ function customElements(pluginConfig) {
         yearInput.setAttribute("tabindex", "0");
       }
     }
+    function setValueInputAlly() {
+      const headingId = fp?.calendarContainer?.closest('[role="dialog"]')?.getAttribute("aria-labelledby");
+      if (headingId) fp?.input?.setAttribute("aria-labelledby", headingId);
+    }
     function setTimeAlly() {
       fp?.calendarContainer?.setAttribute("aria-labelledby", "webchatDatePickerHeaderLabel");
       if (fp?.config?.enableTime) {
@@ -117489,17 +118727,95 @@ function customElements(pluginConfig) {
         minutesField?.setAttribute("tabIndex", "0");
         const amPmField = fp?.timeContainer?.getElementsByClassName("flatpickr-am-pm")?.[0];
         amPmField?.setAttribute("tabIndex", "0");
-        amPmField?.setAttribute("role", "button");
       }
     }
+    function getAmPmValue() {
+      return Array.from(fp?.amPM?.childNodes || []).filter(node2 => node2.nodeType === Node.TEXT_NODE).map(node2 => node2.textContent || "").join("").trim();
+    }
+    function setAmPmAlly() {
+      const amPm = fp?.amPM;
+      if (!amPm || amPm.dataset.a11yBound === "true") return;
+      amPm.dataset.a11yBound = "true";
+      const [am, pm] = fp.l10n.amPM;
+      amPm.setAttribute("role", "spinbutton");
+      amPm.setAttribute("aria-label", customTranslations?.ariaLabels?.datePickerAmPm || "AM/PM");
+      amPm.removeAttribute("title");
+      amPm.setAttribute("aria-valuemin", "0");
+      amPm.setAttribute("aria-valuemax", "1");
+      const syncValue = () => {
+        const value = getAmPmValue();
+        if (!value) return;
+        amPm.setAttribute("aria-valuenow", value === am ? "1" : "0");
+        amPm.setAttribute("aria-valuetext", value);
+      };
+      syncValue();
+      const toggle = () => {
+        amPm.click();
+        syncValue();
+      };
+      const setTo = target => {
+        if (getAmPmValue() !== target) toggle();
+      };
+      amPm.addEventListener("keydown", event => {
+        const actions = {
+          ArrowUp: () => setTo(am),
+          ArrowDown: () => setTo(pm),
+          // APG spinbutton: Home = minimum (aria-valuenow 0 = PM), End = maximum (1 = AM).
+          Home: () => setTo(pm),
+          End: () => setTo(am),
+          Enter: toggle,
+          " ": toggle,
+          Spacebar: toggle
+        };
+        const action = actions[event.key];
+        if (!action) return;
+        event.preventDefault();
+        event.stopPropagation();
+        action();
+      });
+      const observer = new MutationObserver(syncValue);
+      observer.observe(amPm, {
+        childList: true,
+        characterData: true,
+        subtree: true
+      });
+      observers.push(observer);
+    }
     function getInMonthCells() {
       return getDayCells().filter(c => !c.classList.contains("prevMonthDay") && !c.classList.contains("nextMonthDay"));
     }
     function cellDate(cell) {
       return cell.dateObj;
     }
-    function getDayLabel(date) {
-      return `${fp.l10n.months.longhand[date.getMonth()]} ${date.getDate()}, ${date.getFullYear()}`;
+    const dateFormatter = (() => {
+      if (!localeId) return null;
+      try {
+        return new Intl.DateTimeFormat(localeId.replace("_", "-"), {
+          weekday: "long",
+          year: "numeric",
+          month: "long",
+          day: "numeric"
+        });
+      } catch {
+        return null;
+      }
+    })();
+    function formatSpokenDate(date) {
+      if (dateFormatter) return dateFormatter.format(date);
+      const weekday = fp.l10n.weekdays.longhand[date.getDay()];
+      const month = fp.l10n.months.longhand[date.getMonth()];
+      return `${weekday}, ${month} ${date.getDate()}, ${date.getFullYear()}`;
+    }
+    function getDayLabel(cell, date) {
+      const labels = customTranslations?.ariaLabels;
+      const parts = [formatSpokenDate(date)];
+      if (cell.classList.contains("startRange")) {
+        parts.push(labels?.datePickerRangeStart || "start of range");
+      }
+      if (cell.classList.contains("endRange")) {
+        parts.push(labels?.datePickerRangeEnd || "end of range");
+      }
+      return parts.join(", ");
     }
     function sameYMD(a, b) {
       return !!a && a.getFullYear() === b.getFullYear() && a.getMonth() === b.getMonth() && a.getDate() === b.getDate();
@@ -117652,11 +118968,12 @@ function customElements(pluginConfig) {
             day.setAttribute("tabindex", day === target ? "0" : "-1");
           });
         }
-        const dateLabel = target.getAttribute("aria-label");
-        if (dateLabel) {
+        if (target.getAttribute("aria-label") && !pendingLabelRestore.has(target)) {
+          pendingLabelRestore.add(target);
           target.setAttribute("aria-label", "");
           setTimeout(() => {
-            if (target.isConnected) target.setAttribute("aria-label", dateLabel);
+            pendingLabelRestore.delete(target);
+            if (target.isConnected) syncDayCellState(target);
           }, 0);
         }
       });
@@ -117670,7 +118987,7 @@ function customElements(pluginConfig) {
       liveRegion = null;
     }
     return {
-      onReady: [upsertTimeArrows, buildTimeArrows, setDateSelectAlly, setTimeAlly, setMonthSelectAlly, setYearSelectAlly, setNavButtonsAlly, observeNavButtons, observeMonthSelector, createLiveRegion, setGridKeyNavigation, syncRovingTabindex,
+      onReady: [upsertTimeArrows, buildTimeArrows, setDateSelectAlly, setValueInputAlly, setTimeAlly, setMonthSelectAlly, setYearSelectAlly, setNavButtonsAlly, observeNavButtons, observeMonthSelector, createLiveRegion, setAmPmAlly, setGridKeyNavigation, syncRovingTabindex, observeDayCellClasses,
       // Apply grid row roles + the initial roving-focus day, and keep them correct
       // across every flatpickr rebuild. Does not steal focus — the dialog focuses its
       // heading on open; the first Tab into the grid lands on the focusable day.
@@ -117688,13 +119005,7 @@ function customElements(pluginConfig) {
         dayElem.innerHTML = `<span class='dayInner'>${dayElem.innerHTML}</span>`;
         dayElem.setAttribute("role", "gridcell");
         dayElem.setAttribute("tabindex", "-1");
-        if (dayElem.classList.contains("selected")) {
-          dayElem.setAttribute("aria-selected", "true");
-        } else {
-          dayElem.removeAttribute("aria-selected");
-        }
-        const date = cellDate(dayElem);
-        if (date) dayElem.setAttribute("aria-label", getDayLabel(date));
+        syncDayCellState(dayElem);
       }, handleWeekNumbers],
       onValueUpdate: [upsertTimeArrows,
       // Selecting a date rebuilds the day grid synchronously (flatpickr calls buildDays()
@@ -117796,7 +119107,8 @@ const getOptionsFromMessage = (message2, customTranslations) => {
     formatDate: !data.dateFormat ? date => moment(date).locale(momentLocaleId).format(dateFormatLocalString) : void 0,
     plugins: [customElements({
       arrowIcon,
-      customTranslations: customTranslations || {}
+      customTranslations: customTranslations || {},
+      localeId: momentLocaleId
     })]
   };
   const enable_disable = Array.isArray(data?.enable_disable) && data.enable_disable.length > 0 ? data.enable_disable : null;
@@ -118091,7 +119403,7 @@ const TextWithButtons = props2 => {
       showUrlIcon: true,
       config: config2,
       onEmitAnalytics,
-      templateTextId: webchatButtonTemplateTextId,
+      templateTextId: text2 ? webchatButtonTemplateTextId : void 0,
       openXAppOverlay
     })]
   });
@@ -133782,12 +135094,14 @@ const AdaptiveCards = () => {
         }
       case "Action.OpenUrl":
         {
-          const url = action._propertyBag?.url;
-          window.open(url, "_blank");
+          const rawUrl = action._propertyBag?.url;
+          const url = config2?.settings?.layout?.disableUrlButtonSanitization ? rawUrl : distExports.sanitizeUrl(rawUrl);
+          if (!url || url === "about:blank") return;
+          window.open(url, "_blank", "noopener");
           return;
         }
     }
-  }, [onSendMessage, shouldBeDisabled]);
+  }, [onSendMessage, shouldBeDisabled, config2?.settings?.layout?.disableUrlButtonSanitization]);
   return /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(ChatBubble, {
     className: classnames$1(styles["adaptivecard-wrapper"], "adaptivecard-wrapper internal", shouldBeDisabled && styles.chatDisabled),
     children: /* @__PURE__ */(0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(AdaptiveCard, {
@@ -138626,6 +139940,17 @@ function getAdapter(adapters, config) {
 
 
 const DEFAULT_CHUNK_SIZE = 64 * 1024;
+const DEFAULT_REQUEST_OPTIONS = {
+  cache: 'default',
+  redirect: 'follow',
+  referrer: 'about:client',
+  referrerPolicy: '',
+  mode: 'cors',
+  integrity: '',
+  keepalive: false,
+  priority: 'auto',
+  window: null
+};
 const {
   isFunction
 } = _utils_js__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A;
@@ -138768,7 +140093,8 @@ const factory = env => {
       withCredentials = 'same-origin',
       fetchOptions,
       maxContentLength,
-      maxBodyLength
+      maxBodyLength,
+      maxRedirects
     } = (0,_helpers_resolveConfig_js__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .A)(config);
     const hasMaxContentLength = _utils_js__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A.isNumber(maxContentLength) && maxContentLength > -1;
     const hasMaxBodyLength = _utils_js__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A.isNumber(maxBodyLength) && maxBodyLength > -1;
@@ -138899,17 +140225,46 @@ const factory = env => {
 
       // Set User-Agent header if not already set (fetch defaults to 'node' in Node.js)
       headers.set('User-Agent', 'axios/' + _env_data_js__WEBPACK_IMPORTED_MODULE_10__/* .VERSION */ .x, false);
-      const resolvedOptions = {
-        ...fetchOptions,
+      const safeFetchOptions = fetchOptions == null ? fetchOptions : Object.assign(Object.create(null), fetchOptions);
+      if (safeFetchOptions) {
+        // These options are owned by Axios and are already reflected in the
+        // resolved Request passed to fetch.
+        delete safeFetchOptions.body;
+        delete safeFetchOptions.headers;
+        delete safeFetchOptions.method;
+        delete safeFetchOptions.signal;
+        delete safeFetchOptions.duplex;
+        delete safeFetchOptions.credentials;
+      }
+      const resolvedOptions = Object.assign(Object.create(null), safeFetchOptions, {
         signal: composedSignal,
         method: method.toUpperCase(),
         headers: (0,_helpers_sanitizeHeaderValue_js__WEBPACK_IMPORTED_MODULE_11__/* .toByteStringHeaderObject */ .$$)(headers.normalize()),
         body: data,
         duplex: 'half',
         credentials: isCredentialsSupported ? withCredentials : undefined
-      };
+      });
+      if (isRequestSupported) {
+        _utils_js__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A.forEach(DEFAULT_REQUEST_OPTIONS, (value, key) => {
+          if (resolvedOptions[key] === undefined) {
+            resolvedOptions[key] = value;
+          }
+        });
+        if (resolvedOptions.signal === undefined) {
+          resolvedOptions.signal = null;
+        }
+        if (resolvedOptions.body === undefined) {
+          resolvedOptions.body = null;
+        }
+      }
+      if (maxRedirects === 0) {
+        resolvedOptions.redirect = 'manual';
+        if (safeFetchOptions) {
+          safeFetchOptions.redirect = 'manual';
+        }
+      }
       request = isRequestSupported && new Request(url, resolvedOptions);
-      let response = await (isRequestSupported ? _fetch(request, fetchOptions) : _fetch(url, resolvedOptions));
+      let response = await (isRequestSupported ? _fetch(request, safeFetchOptions) : _fetch(url, resolvedOptions));
       const responseHeaders = _core_AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_5__/* ["default"] */ .A.from(response.headers);
 
       // Cheap pre-check: if the server honestly declares a content-length that
@@ -139070,12 +140425,14 @@ const adapter = getFetch();
 /* harmony import */ var _defaults_transitional_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(96458);
 /* harmony import */ var _core_AxiosError_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(7996);
 /* harmony import */ var _cancel_CanceledError_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(62200);
-/* harmony import */ var _helpers_parseProtocol_js__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(58177);
-/* harmony import */ var _platform_index_js__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(75194);
-/* harmony import */ var _core_AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(88580);
-/* harmony import */ var _helpers_progressEventReducer_js__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(41487);
-/* harmony import */ var _helpers_resolveConfig_js__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(38652);
-/* harmony import */ var _helpers_sanitizeHeaderValue_js__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(5681);
+/* harmony import */ var _helpers_normalizeURLForProtocolCheck_js__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(69893);
+/* harmony import */ var _helpers_parseProtocol_js__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(58177);
+/* harmony import */ var _platform_index_js__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(75194);
+/* harmony import */ var _core_AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(88580);
+/* harmony import */ var _helpers_progressEventReducer_js__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(41487);
+/* harmony import */ var _helpers_resolveConfig_js__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(38652);
+/* harmony import */ var _helpers_sanitizeHeaderValue_js__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(5681);
+
 
 
 
@@ -139090,9 +140447,9 @@ const adapter = getFetch();
 const isXHRAdapterSupported = typeof XMLHttpRequest !== 'undefined';
 /* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = (isXHRAdapterSupported && function (config) {
   return new Promise(function dispatchXhrRequest(resolve, reject) {
-    const _config = (0,_helpers_resolveConfig_js__WEBPACK_IMPORTED_MODULE_9__/* ["default"] */ .A)(config);
+    const _config = (0,_helpers_resolveConfig_js__WEBPACK_IMPORTED_MODULE_10__/* ["default"] */ .A)(config);
     let requestData = _config.data;
-    const requestHeaders = _core_AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .A.from(_config.headers).normalize();
+    const requestHeaders = _core_AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_8__/* ["default"] */ .A.from(_config.headers).normalize();
     let {
       responseType,
       onUploadProgress,
@@ -139100,7 +140457,7 @@ const isXHRAdapterSupported = typeof XMLHttpRequest !== 'undefined';
     } = _config;
     let onCanceled;
     let uploadThrottled, downloadThrottled;
-    let flushUpload, flushDownload;
+    let flushUpload, flushDownload, flushDownloadWithEvent;
     function done() {
       flushUpload && flushUpload(); // flush events
       flushDownload && flushDownload(); // flush events
@@ -139113,12 +140470,52 @@ const isXHRAdapterSupported = typeof XMLHttpRequest !== 'undefined';
 
     // Set the request timeout in MS
     request.timeout = _config.timeout;
-    function onloadend() {
+    function onloadend(event) {
+      if (!request) {
+        return;
+      }
+
+      // Status 0 means no response was received, which onerror and onabort normally
+      // reject before this runs. Firefox 152 fires only readystatechange and loadend for
+      // navigation-canceled requests (https://bugzilla.mozilla.org/show_bug.cgi?id=1505389),
+      // leaving settle() to resolve them as an empty success. ECONNABORTED is the error
+      // onabort raised on Firefox 151. Reads over file:, which some environments report as
+      // status 0 on success, are excluded by the request URL's scheme after browser-style
+      // preprocessing, by the page origin's scheme for relative URLs (which inherit it), or
+      // by responseURL where implemented.
+      if (request.status === 0 && ((0,_helpers_parseProtocol_js__WEBPACK_IMPORTED_MODULE_6__/* ["default"] */ .A)((0,_helpers_normalizeURLForProtocolCheck_js__WEBPACK_IMPORTED_MODULE_5__/* ["default"] */ .A)(_config.url)) || (0,_helpers_parseProtocol_js__WEBPACK_IMPORTED_MODULE_6__/* ["default"] */ .A)(_platform_index_js__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .A.origin)) !== 'file' && !(request.responseURL && request.responseURL.startsWith('file:'))) {
+        reject(new _core_AxiosError_js__WEBPACK_IMPORTED_MODULE_3__/* ["default"] */ .A('Request aborted', _core_AxiosError_js__WEBPACK_IMPORTED_MODULE_3__/* ["default"] */ .A.ECONNABORTED, config, request));
+        done();
+
+        // Clean up request
+        request = null;
+        return;
+      }
+
+      // When loadend is still dispatching, flushing with it gives progress
+      // listeners a final delivery whose event has a live target. The legacy
+      // ready-state fallback has no event, so replay its pending progress.
+      // A throwing listener must not block settlement; rethrow asynchronously,
+      // matching how listener errors surface on the throttle timer path.
+      try {
+        if (event) {
+          flushDownloadWithEvent && flushDownloadWithEvent(event);
+        } else {
+          flushDownload && flushDownload();
+        }
+      } catch (err) {
+        setTimeout(() => {
+          throw err;
+        });
+      }
+
+      // A final progress callback can cancel the request synchronously.
       if (!request) {
         return;
       }
+
       // Prepare the response
-      const responseHeaders = _core_AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .A.from('getAllResponseHeaders' in request && request.getAllResponseHeaders());
+      const responseHeaders = _core_AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_8__/* ["default"] */ .A.from('getAllResponseHeaders' in request && request.getAllResponseHeaders());
       const responseData = !responseType || responseType === 'text' || responseType === 'json' ? request.responseText : request.response;
       const response = {
         data: responseData,
@@ -139207,7 +140604,7 @@ const isXHRAdapterSupported = typeof XMLHttpRequest !== 'undefined';
 
     // Add headers to the request
     if ('setRequestHeader' in request) {
-      _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.forEach((0,_helpers_sanitizeHeaderValue_js__WEBPACK_IMPORTED_MODULE_10__/* .toByteStringHeaderObject */ .$$)(requestHeaders), function setRequestHeader(val, key) {
+      _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.forEach((0,_helpers_sanitizeHeaderValue_js__WEBPACK_IMPORTED_MODULE_11__/* .toByteStringHeaderObject */ .$$)(requestHeaders), function setRequestHeader(val, key) {
         request.setRequestHeader(key, val);
       });
     }
@@ -139224,13 +140621,13 @@ const isXHRAdapterSupported = typeof XMLHttpRequest !== 'undefined';
 
     // Handle progress if needed
     if (onDownloadProgress) {
-      [downloadThrottled, flushDownload] = (0,_helpers_progressEventReducer_js__WEBPACK_IMPORTED_MODULE_8__/* .progressEventReducer */ .C1)(onDownloadProgress, true);
+      [downloadThrottled, flushDownload, flushDownloadWithEvent] = (0,_helpers_progressEventReducer_js__WEBPACK_IMPORTED_MODULE_9__/* .progressEventReducer */ .C1)(onDownloadProgress, true);
       request.addEventListener('progress', downloadThrottled);
     }
 
     // Not all browsers support upload events
     if (onUploadProgress && request.upload) {
-      [uploadThrottled, flushUpload] = (0,_helpers_progressEventReducer_js__WEBPACK_IMPORTED_MODULE_8__/* .progressEventReducer */ .C1)(onUploadProgress);
+      [uploadThrottled, flushUpload] = (0,_helpers_progressEventReducer_js__WEBPACK_IMPORTED_MODULE_9__/* .progressEventReducer */ .C1)(onUploadProgress);
       request.upload.addEventListener('progress', uploadThrottled);
       request.upload.addEventListener('loadend', flushUpload);
     }
@@ -139251,8 +140648,8 @@ const isXHRAdapterSupported = typeof XMLHttpRequest !== 'undefined';
         _config.signal.aborted ? onCanceled() : _config.signal.addEventListener('abort', onCanceled);
       }
     }
-    const protocol = (0,_helpers_parseProtocol_js__WEBPACK_IMPORTED_MODULE_5__/* ["default"] */ .A)(_config.url);
-    if (protocol && !_platform_index_js__WEBPACK_IMPORTED_MODULE_6__/* ["default"] */ .A.protocols.includes(protocol)) {
+    const protocol = (0,_helpers_parseProtocol_js__WEBPACK_IMPORTED_MODULE_6__/* ["default"] */ .A)(_config.url);
+    if (protocol && !_platform_index_js__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .A.protocols.includes(protocol)) {
       reject(new _core_AxiosError_js__WEBPACK_IMPORTED_MODULE_3__/* ["default"] */ .A('Unsupported protocol ' + protocol + ':', _core_AxiosError_js__WEBPACK_IMPORTED_MODULE_3__/* ["default"] */ .A.ERR_BAD_REQUEST, config));
       done();
       return;
@@ -139562,9 +140959,10 @@ function isCancel(value) {
 /* harmony import */ var _dispatchRequest_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(11669);
 /* harmony import */ var _mergeConfig_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(6068);
 /* harmony import */ var _buildFullPath_js__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(1216);
-/* harmony import */ var _helpers_validator_js__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(83092);
-/* harmony import */ var _AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(88580);
-/* harmony import */ var _defaults_transitional_js__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(96458);
+/* harmony import */ var _methodList_js__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(31109);
+/* harmony import */ var _helpers_validator_js__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(83092);
+/* harmony import */ var _AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(88580);
+/* harmony import */ var _defaults_transitional_js__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(96458);
 
 
 
@@ -139576,7 +140974,8 @@ function isCancel(value) {
 
 
 
-const validators = _helpers_validator_js__WEBPACK_IMPORTED_MODULE_6__/* ["default"] */ .A.validators;
+
+const validators = _helpers_validator_js__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .A.validators;
 
 /**
  * Create a new instance of Axios
@@ -139607,18 +141006,17 @@ class Axios {
       return await this._request(configOrUrl, config);
     } catch (err) {
       if (err instanceof Error) {
-        let dummy = {};
-        Error.captureStackTrace ? Error.captureStackTrace(dummy) : dummy = new Error();
+        try {
+          let dummy = {};
+          Error.captureStackTrace ? Error.captureStackTrace(dummy) : dummy = new Error();
+          const dummyStack = dummy.stack;
+          let stack = '';
 
-        // slice off the Error: ... line
-        const stack = (() => {
-          if (!dummy.stack) {
-            return '';
+          // slice off the Error: ... line
+          if (typeof dummyStack === 'string') {
+            const firstNewlineIndex = dummyStack.indexOf('\n');
+            stack = firstNewlineIndex === -1 ? '' : dummyStack.slice(firstNewlineIndex + 1);
           }
-          const firstNewlineIndex = dummy.stack.indexOf('\n');
-          return firstNewlineIndex === -1 ? '' : dummy.stack.slice(firstNewlineIndex + 1);
-        })();
-        try {
           if (!err.stack) {
             err.stack = stack;
             // match without the 2 top stack lines
@@ -139631,7 +141029,7 @@ class Axios {
             }
           }
         } catch (e) {
-          // ignore the case where "stack" is an un-writable property
+          // Ignore failures from custom stack hooks or un-writable stack properties.
         }
       }
       throw err;
@@ -139653,7 +141051,7 @@ class Axios {
       headers
     } = config;
     if (transitional !== undefined) {
-      _helpers_validator_js__WEBPACK_IMPORTED_MODULE_6__/* ["default"] */ .A.assertOptions(transitional, {
+      _helpers_validator_js__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .A.assertOptions(transitional, {
         silentJSONParsing: validators.transitional(validators.boolean),
         forcedJSONParsing: validators.transitional(validators.boolean),
         clarifyTimeoutError: validators.transitional(validators.boolean),
@@ -139668,7 +141066,7 @@ class Axios {
           serialize: paramsSerializer
         };
       } else {
-        _helpers_validator_js__WEBPACK_IMPORTED_MODULE_6__/* ["default"] */ .A.assertOptions(paramsSerializer, {
+        _helpers_validator_js__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .A.assertOptions(paramsSerializer, {
           encode: validators.function,
           serialize: validators.function
         }, true);
@@ -139683,20 +141081,20 @@ class Axios {
     } else {
       config.allowAbsoluteUrls = true;
     }
-    _helpers_validator_js__WEBPACK_IMPORTED_MODULE_6__/* ["default"] */ .A.assertOptions(config, {
+    _helpers_validator_js__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .A.assertOptions(config, {
       baseUrl: validators.spelling('baseURL'),
       withXsrfToken: validators.spelling('withXSRFToken')
     }, true);
 
     // Set config.method
-    config.method = (config.method || this.defaults.method || 'get').toLowerCase();
+    config.method = (_utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.getSafeProp(config, 'method') || _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.getSafeProp(this.defaults, 'method') || 'get').toLowerCase();
 
     // Flatten headers
     let contextHeaders = headers && _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.merge(headers.common, headers[config.method]);
-    headers && _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.forEach(['delete', 'get', 'head', 'post', 'put', 'patch', 'query', 'common'], method => {
+    headers && _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.forEach(_methodList_js__WEBPACK_IMPORTED_MODULE_6__/* ["default"] */ .A.concat('common'), method => {
       delete headers[method];
     });
-    config.headers = _AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .A.concat(contextHeaders, headers);
+    config.headers = _AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_8__/* ["default"] */ .A.concat(contextHeaders, headers);
 
     // filter out skipped interceptors
     const requestInterceptorChain = [];
@@ -139706,7 +141104,7 @@ class Axios {
         return;
       }
       synchronousRequestInterceptors = synchronousRequestInterceptors && interceptor.synchronous;
-      const transitional = config.transitional || _defaults_transitional_js__WEBPACK_IMPORTED_MODULE_8__/* ["default"] */ .A;
+      const transitional = config.transitional || _defaults_transitional_js__WEBPACK_IMPORTED_MODULE_9__/* ["default"] */ .A;
       const legacyInterceptorReqResOrdering = transitional && transitional.legacyInterceptorReqResOrdering;
       if (legacyInterceptorReqResOrdering) {
         requestInterceptorChain.unshift(interceptor.fulfilled, interceptor.rejected);
@@ -140371,9 +141769,51 @@ _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.freezeMethods(AxiosHe
 
 
 
+const $internals = Symbol('internals');
+
+// `handlers` is public and may be replaced with a nullish value by user code;
+// `clear()` has always tolerated that. Treat it as an empty stack rather than
+// dereferencing it.
+function countHandlers(handlers) {
+  return handlers ? handlers.length : 0;
+}
+function trimHandlers(handlers) {
+  if (!handlers) {
+    return;
+  }
+  while (handlers.length && handlers[handlers.length - 1] === null) {
+    handlers.pop();
+  }
+}
+function syncHandlerEntries(manager, internals) {
+  const handlers = manager.handlers;
+  const length = countHandlers(handlers);
+  if (handlers !== internals.handlersRef) {
+    internals.handlersRef = handlers;
+    internals.handlerEntries.clear();
+  } else if (length !== internals.handlersLength) {
+    if (!length) {
+      internals.handlerEntries.clear();
+    } else {
+      internals.handlerEntries.forEach(function removeStaleEntry(entry, id) {
+        if (handlers[entry.index] !== entry.handler) {
+          internals.handlerEntries.delete(id);
+        }
+      });
+    }
+  }
+  internals.handlersLength = length;
+}
 class InterceptorManager {
   constructor() {
     this.handlers = [];
+    this[$internals] = {
+      handlersRef: this.handlers,
+      handlersLength: this.handlers.length,
+      handlerEntries: new Map(),
+      iterationDepth: 0,
+      nextId: 0
+    };
   }
 
   /**
@@ -140386,13 +141826,25 @@ class InterceptorManager {
    * @return {Number} An ID used to remove interceptor later
    */
   use(fulfilled, rejected, options) {
-    this.handlers.push({
+    const handler = {
       fulfilled,
       rejected,
       synchronous: options ? options.synchronous : false,
       runWhen: options ? options.runWhen : null
+    };
+    const internals = this[$internals];
+    if (this.handlers == null) {
+      this.handlers = [];
+    }
+    syncHandlerEntries(this, internals);
+    const id = internals.nextId++;
+    this.handlers.push(handler);
+    internals.handlerEntries.set(id, {
+      handler,
+      index: this.handlers.length - 1
     });
-    return this.handlers.length - 1;
+    internals.handlersLength = this.handlers.length;
+    return id;
   }
 
   /**
@@ -140403,8 +141855,23 @@ class InterceptorManager {
    * @returns {void}
    */
   eject(id) {
-    if (this.handlers[id]) {
-      this.handlers[id] = null;
+    const internals = this[$internals];
+    syncHandlerEntries(this, internals);
+    const entry = internals.handlerEntries.get(id);
+    if (entry) {
+      internals.handlerEntries.delete(id);
+
+      // Ignore IDs invalidated by clear or direct replacement of handlers.
+      if (this.handlers[entry.index] !== entry.handler) {
+        return;
+      }
+      this.handlers[entry.index] = null;
+
+      // Do not reuse an index while forEach is walking its length snapshot.
+      if (!internals.iterationDepth) {
+        trimHandlers(this.handlers);
+        internals.handlersLength = this.handlers.length;
+      }
     }
   }
 
@@ -140416,6 +141883,7 @@ class InterceptorManager {
   clear() {
     if (this.handlers) {
       this.handlers = [];
+      syncHandlerEntries(this, this[$internals]);
     }
   }
 
@@ -140430,11 +141898,22 @@ class InterceptorManager {
    * @returns {void}
    */
   forEach(fn) {
-    _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.forEach(this.handlers, function forEachHandler(h) {
-      if (h !== null) {
-        fn(h);
+    const internals = this[$internals];
+    syncHandlerEntries(this, internals);
+    internals.iterationDepth++;
+    try {
+      _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.forEach(this.handlers, function forEachHandler(h) {
+        if (h !== null) {
+          fn(h);
+        }
+      });
+    } finally {
+      if (! --internals.iterationDepth) {
+        syncHandlerEntries(this, internals);
+        trimHandlers(this.handlers);
+        internals.handlersLength = countHandlers(this.handlers);
       }
-    });
+    }
   }
 }
 /* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = (InterceptorManager);
@@ -140450,23 +141929,14 @@ class InterceptorManager {
 /* harmony import */ var _AxiosError_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(7996);
 /* harmony import */ var _helpers_isAbsoluteURL_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(6392);
 /* harmony import */ var _helpers_combineURLs_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(64133);
+/* harmony import */ var _helpers_normalizeURLForProtocolCheck_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(69893);
+
 
 
 
 
 
 const malformedHttpProtocol = /^https?:(?!\/\/)/i;
-const httpProtocolControlCharacters = /[\t\n\r]/g;
-function stripLeadingC0ControlOrSpace(url) {
-  let i = 0;
-  while (i < url.length && url.charCodeAt(i) <= 0x20) {
-    i++;
-  }
-  return url.slice(i);
-}
-function normalizeURLForProtocolCheck(url) {
-  return stripLeadingC0ControlOrSpace(url).replace(httpProtocolControlCharacters, '');
-}
 
 // Redact the parts of a URL that can carry secrets before it is embedded in an
 // error message. AxiosError.toJSON() serializes `message` verbatim and errors
@@ -140496,7 +141966,7 @@ function redactSensitiveURLParts(url) {
 }
 function assertValidHttpProtocolURL(url, config) {
   if (typeof url === 'string') {
-    const normalizedURL = normalizeURLForProtocolCheck(url);
+    const normalizedURL = (0,_helpers_normalizeURLForProtocolCheck_js__WEBPACK_IMPORTED_MODULE_3__/* ["default"] */ .A)(url);
     if (malformedHttpProtocol.test(normalizedURL)) {
       throw new _AxiosError_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A(`Invalid URL ${JSON.stringify(redactSensitiveURLParts(normalizedURL))}: missing "//" after protocol`, _AxiosError_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.ERR_INVALID_URL, config);
     }
@@ -140537,6 +142007,8 @@ function buildFullPath(baseURL, requestedURL, allowAbsoluteUrls, config) {
 /* harmony import */ var _cancel_CanceledError_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(62200);
 /* harmony import */ var _core_AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(88580);
 /* harmony import */ var _adapters_adapters_js__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(93129);
+/* harmony import */ var _utils_js__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(21285);
+
 
 
 
@@ -140569,9 +142041,13 @@ function throwIfCancellationRequested(config) {
  *
  * @returns {Promise} The Promise to be fulfilled
  */
-function dispatchRequest(config) {
+function dispatchRequest(_config) {
+  // Interceptors may replace the merged config with an ordinary object. Flatten
+  // it at the dispatch boundary so shared prototype members cannot become
+  // request behavior, while preserving intentional template/class members.
+  const config = _utils_js__WEBPACK_IMPORTED_MODULE_6__/* ["default"] */ .A.toSafeFlatObject(_config);
   throwIfCancellationRequested(config);
-  config.headers = _core_AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_4__/* ["default"] */ .A.from(config.headers);
+  config.headers = _core_AxiosHeaders_js__WEBPACK_IMPORTED_MODULE_4__/* ["default"] */ .A.from(_utils_js__WEBPACK_IMPORTED_MODULE_6__/* ["default"] */ .A.getSafeProp(config, 'headers'));
 
   // Transform request data
   config.data = _transformData_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.call(config, config.transformRequest);
@@ -140734,7 +142210,7 @@ function mergeConfig(config1, config2) {
     transformResponse: defaultToConfig2,
     paramsSerializer: defaultToConfig2,
     timeout: defaultToConfig2,
-    timeoutMessage: defaultToConfig2,
+    timeoutErrorMessage: defaultToConfig2,
     withCredentials: defaultToConfig2,
     withXSRFToken: defaultToConfig2,
     adapter: defaultToConfig2,
@@ -140780,6 +142256,19 @@ function mergeConfig(config1, config2) {
 
 /***/ },
 
+/***/ 31109
+(__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   A: () => (__WEBPACK_DEFAULT_EXPORT__)
+/* harmony export */ });
+
+
+const methodList = Object.freeze(['get', 'delete', 'head', 'options', 'post', 'put', 'patch', 'purge', 'link', 'unlink', 'query']);
+/* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = (methodList);
+
+/***/ },
+
 /***/ 19524
 (__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) {
 
@@ -140896,6 +142385,8 @@ function transformData(fns, response) {
 /* harmony import */ var _helpers_toURLEncodedForm_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(88898);
 /* harmony import */ var _platform_index_js__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(75194);
 /* harmony import */ var _helpers_formDataToJSON_js__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(17757);
+/* harmony import */ var _core_methodList_js__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(31109);
+
 
 
 
@@ -141021,7 +142512,7 @@ const defaults = {
     }
   }
 };
-_utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.forEach(['delete', 'get', 'head', 'post', 'put', 'patch', 'query'], method => {
+_utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.forEach(_core_methodList_js__WEBPACK_IMPORTED_MODULE_7__/* ["default"] */ .A, method => {
   defaults.headers[method] = {};
 });
 /* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = (defaults);
@@ -141053,7 +142544,7 @@ _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.forEach(['delete', 'g
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
 /* harmony export */   x: () => (/* binding */ VERSION)
 /* harmony export */ });
-const VERSION = "1.19.0";
+const VERSION = "1.20.0";
 
 /***/ },
 
@@ -141159,14 +142650,22 @@ const HttpStatusCode = {
   Gone: 410,
   LengthRequired: 411,
   PreconditionFailed: 412,
+  /**
+   * @deprecated Use `ContentTooLarge` instead.
+   */
   PayloadTooLarge: 413,
+  ContentTooLarge: 413,
   UriTooLong: 414,
   UnsupportedMediaType: 415,
   RangeNotSatisfiable: 416,
   ExpectationFailed: 417,
   ImATeapot: 418,
   MisdirectedRequest: 421,
+  /**
+   * @deprecated Use `UnprocessableContent` instead.
+   */
   UnprocessableEntity: 422,
+  UnprocessableContent: 422,
   Locked: 423,
   FailedDependency: 424,
   TooEarly: 425,
@@ -141195,7 +142694,9 @@ const HttpStatusCode = {
   InvalidSslCertificate: 526
 };
 Object.entries(HttpStatusCode).forEach(([key, value]) => {
-  HttpStatusCode[value] = key;
+  if (HttpStatusCode[value] === undefined) {
+    HttpStatusCode[value] = key;
+  }
 });
 /* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = (HttpStatusCode);
 
@@ -141781,6 +143282,36 @@ function isAxiosError(payload) {
 
 /***/ },
 
+/***/ 69893
+(__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   A: () => (/* binding */ normalizeURLForProtocolCheck)
+/* harmony export */ });
+
+
+const urlParserControlCharacters = /[\t\n\r]/g;
+
+/**
+ * Match WHATWG URL preprocessing before checking a URL's protocol.
+ *
+ * @param {string} url
+ *
+ * @returns {string}
+ */
+function normalizeURLForProtocolCheck(url) {
+  if (typeof url !== 'string') {
+    return url;
+  }
+  let start = 0;
+  while (start < url.length && url.charCodeAt(start) <= 0x20) {
+    start++;
+  }
+  return url.slice(start).replace(urlParserControlCharacters, '');
+}
+
+/***/ },
+
 /***/ 65265
 (__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) {
 
@@ -141883,7 +143414,7 @@ const progressEventReducer = (listener, isDownloadStream, freq = 3) => {
   let bytesNotified = 0;
   const _speedometer = (0,_speedometer_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A)(50, 250);
   return (0,_throttle_js__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A)(e => {
-    if (!e || typeof e.loaded !== 'number') {
+    if (!e || !_utils_js__WEBPACK_IMPORTED_MODULE_2__/* ["default"] */ .A.isNumber(e.loaded)) {
       return;
     }
     const rawLoaded = e.loaded;
@@ -141983,11 +143514,12 @@ function resolveConfig(config) {
     }
   }
   if (_utils_js__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A.isFormData(data)) {
+    const getHeaders = _utils_js__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A.getSafeProp(data, 'getHeaders');
     if (_platform_index_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.hasStandardBrowserEnv || _platform_index_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.hasStandardBrowserWebWorkerEnv || _utils_js__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A.isReactNative(data)) {
       headers.setContentType(undefined); // browser/web worker/RN handles it
-    } else if (_utils_js__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A.isFunction(data.getHeaders)) {
+    } else if (_utils_js__WEBPACK_IMPORTED_MODULE_1__/* ["default"] */ .A.isFunction(getHeaders)) {
       // Node.js FormData (like form-data package)
-      (0,_core_setFormDataHeaders_js__WEBPACK_IMPORTED_MODULE_8__/* ["default"] */ .A)(headers, data.getHeaders(), own('formDataHeaderPolicy'));
+      (0,_core_setFormDataHeaders_js__WEBPACK_IMPORTED_MODULE_8__/* ["default"] */ .A)(headers, getHeaders.call(data), own('formDataHeaderPolicy'));
     }
   }
 
@@ -142170,7 +143702,7 @@ function spread(callback) {
  * Throttle decorator
  * @param {Function} fn
  * @param {Number} freq
- * @return {Function}
+ * @return {Array<Function>}
  */
 function throttle(fn, freq) {
   let timestamp = 0;
@@ -142202,7 +143734,8 @@ function throttle(fn, freq) {
     }
   };
   const flush = () => lastArgs && invoke(lastArgs);
-  return [throttled, flush];
+  const flushWith = (...args) => invoke(args);
+  return [throttled, flush, flushWith];
 }
 /* harmony default export */ const __WEBPACK_DEFAULT_EXPORT__ = (throttle);
 
@@ -142314,23 +143847,17 @@ function toFormData(obj, formData, options) {
 
   // eslint-disable-next-line no-param-reassign
   formData = formData || new (_platform_node_classes_FormData_js__WEBPACK_IMPORTED_MODULE_2__/* ["default"] */ .A || FormData)();
-
-  // eslint-disable-next-line no-param-reassign
-  options = _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.toFlatObject(options, {
-    metaTokens: true,
-    dots: false,
-    indexes: false
-  }, false, function defined(option, source) {
-    // eslint-disable-next-line no-eq-null,eqeqeq
-    return !_utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.isUndefined(source[option]);
-  });
-  const metaTokens = options.metaTokens;
+  const option = (name, fallback) => {
+    const value = _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.getSafeProp(options, name);
+    return _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.isUndefined(value) ? fallback : value;
+  };
+  const metaTokens = option('metaTokens', true);
   // eslint-disable-next-line no-use-before-define
-  const visitor = options.visitor || defaultVisitor;
-  const dots = options.dots;
-  const indexes = options.indexes;
-  const _Blob = options.Blob || typeof Blob !== 'undefined' && Blob;
-  const maxDepth = options.maxDepth === undefined ? DEFAULT_FORM_DATA_MAX_DEPTH : options.maxDepth;
+  const visitor = option('visitor') || defaultVisitor;
+  const dots = option('dots', false);
+  const indexes = option('indexes', false);
+  const _Blob = option('Blob') || typeof Blob !== 'undefined' && Blob;
+  const maxDepth = option('maxDepth', DEFAULT_FORM_DATA_MAX_DEPTH);
   const useBlob = _Blob && _utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.isSpecCompliantForm(formData);
   const stack = [];
   if (!_utils_js__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .A.isFunction(visitor)) {
@@ -142827,13 +144354,57 @@ const {
 const hasOwnProperty = (({
   hasOwnProperty
 }) => (obj, prop) => hasOwnProperty.call(obj, prop))(Object.prototype);
+const isUnsafeObjectKey = prop => typeof prop === 'string' && (prop === '__proto__' || prop === 'constructor' || prop === 'prototype');
+
+/**
+ * Determine whether an inherited object must be treated as a shared-prototype
+ * boundary. Cross-realm Object.prototype objects cannot be distinguished
+ * reliably from application-created null-prototype objects because their
+ * properties are mutable, so all inherited terminal prototypes are excluded
+ * as a fail-closed boundary. A null-prototype source still keeps its own
+ * properties, as produced by mergeConfig and other safe materialization paths.
+ *
+ * @param {*} obj The object to inspect
+ * @param {*} prototype The object's prototype
+ * @param {boolean} source Whether obj is the original traversal source
+ *
+ * @returns {boolean} True when obj is a safe prototype traversal boundary
+ */
+const isPrototypeBoundary = (obj, prototype, source) => obj === Object.prototype || !source && prototype === null;
+
+/**
+ * Determine whether an object can retain its identity through code paths that
+ * add, replace, and remove config properties without bypassing unsafe-key
+ * filtering. Immutable objects, unsafe-key-bearing objects, and objects with
+ * accessor or restricted data properties must be materialized instead.
+ *
+ * @param {*} obj The object to inspect
+ *
+ * @returns {boolean} True when every own property is safe and fully mutable
+ */
+const isSafeAndFullyMutable = obj => {
+  if (!Object.isExtensible(obj)) {
+    return false;
+  }
+  const props = Object.getOwnPropertyNames(obj);
+  if (Object.getOwnPropertySymbols) {
+    props.push(...Object.getOwnPropertySymbols(obj));
+  }
+  return props.every(prop => {
+    if (isUnsafeObjectKey(prop)) {
+      return false;
+    }
+    const descriptor = Object.getOwnPropertyDescriptor(obj, prop);
+    return !!descriptor && descriptor.configurable && descriptor.writable === true;
+  });
+};
 
 /**
- * Walk the prototype chain (excluding the shared Object.prototype) looking for
- * an own `prop`. This distinguishes genuine own/inherited members — including
- * class accessors and template prototypes — from members injected via
- * Object.prototype pollution (e.g. `Object.prototype.username = '...'`), which
- * live on Object.prototype itself and are therefore never matched.
+ * Walk the prototype chain (excluding the source realm's Object.prototype)
+ * looking for an own `prop`. This distinguishes genuine own/inherited members
+ * — including class accessors and template prototypes — from members injected
+ * via Object.prototype pollution (e.g. `Object.prototype.username = '...'`),
+ * which live on Object.prototype itself and are therefore never matched.
  *
  * @param {*} thing The value whose chain to inspect
  * @param {string|symbol} prop The property key to look for
@@ -142843,15 +144414,19 @@ const hasOwnProperty = (({
 const hasOwnInPrototypeChain = (thing, prop) => {
   let obj = thing;
   const seen = [];
-  while (obj != null && obj !== Object.prototype) {
+  while (obj != null) {
     if (seen.indexOf(obj) !== -1) {
       return false;
     }
     seen.push(obj);
+    const prototype = getPrototypeOf(obj);
+    if (isPrototypeBoundary(obj, prototype, obj === thing)) {
+      return false;
+    }
     if (hasOwnProperty(obj, prop)) {
       return true;
     }
-    obj = getPrototypeOf(obj);
+    obj = prototype;
   }
   return false;
 };
@@ -142868,6 +144443,56 @@ const hasOwnInPrototypeChain = (thing, prop) => {
  * @returns {*} The resolved value, or undefined when unsafe/absent
  */
 const getSafeProp = (obj, prop) => obj != null && hasOwnInPrototypeChain(obj, prop) ? obj[prop] : undefined;
+
+/**
+ * Flatten an object and its application-defined prototype chain into a
+ * null-prototype object. Members inherited only from the source realm's
+ * Object.prototype are deliberately excluded, while class/template members
+ * below that boundary are preserved.
+ *
+ * @param {*} thing The value to flatten
+ *
+ * @returns {*} A null-prototype copy, or the original value when it is already
+ * structurally safe or is not an object
+ */
+const toSafeFlatObject = thing => {
+  if (thing == null || typeof thing !== 'object' && typeof thing !== 'function') {
+    return thing;
+  }
+  const sourcePrototype = getPrototypeOf(thing);
+  if (sourcePrototype === null && isSafeAndFullyMutable(thing)) {
+    return thing;
+  }
+  const result = Object.create(null);
+  const merged = Object.create(null);
+  const seen = [];
+  let current = thing;
+  while (current != null) {
+    if (seen.indexOf(current) !== -1) {
+      break;
+    }
+    seen.push(current);
+    const prototype = current === thing ? sourcePrototype : getPrototypeOf(current);
+    if (isPrototypeBoundary(current, prototype, current === thing)) {
+      break;
+    }
+    const props = Object.getOwnPropertyNames(current);
+    if (Object.getOwnPropertySymbols) {
+      props.push(...Object.getOwnPropertySymbols(current));
+    }
+    for (const prop of props) {
+      if (isUnsafeObjectKey(prop)) {
+        continue;
+      }
+      if (!hasOwnProperty(merged, prop)) {
+        result[prop] = thing[prop];
+        merged[prop] = true;
+      }
+    }
+    current = prototype;
+  }
+  return result;
+};
 const kindOf = (cache => thing => {
   const str = toString.call(thing);
   return cache[str] || (cache[str] = str.slice(8, -1).toLowerCase());
@@ -142991,9 +144616,9 @@ const isPlainObject = val => {
   }
   const prototype = getPrototypeOf(val);
   return (prototype === null || prototype === Object.prototype || getPrototypeOf(prototype) === null) &&
-  // Treat any genuine (non-Object.prototype-polluted) Symbol.toStringTag or
-  // Symbol.iterator as evidence the value is a tagged/iterable type rather
-  // than a plain object, while ignoring keys injected onto Object.prototype.
+  // Treat safe own/inherited Symbol.toStringTag or Symbol.iterator members as
+  // evidence the value is tagged/iterable, while ignoring members reachable
+  // only through shared or terminal prototype boundaries.
   !hasOwnInPrototypeChain(val, toStringTag) && !hasOwnInPrototypeChain(val, iterator);
 };
 
@@ -143741,6 +145366,7 @@ const isSafeIterable = thing => thing != null && hasOwnInPrototypeChain(thing, i
   // an alias to avoid ESLint no-prototype-builtins detection
   hasOwnInPrototypeChain,
   getSafeProp,
+  toSafeFlatObject,
   reduceDescriptors,
   freezeMethods,
   toObjectSet,