@microsoft/omnichannel-chat-widget 1.8.7 → 2.0.0-main.ba244dd

package/lib/esm/components/livechatwidget/common/initWebChatComposer.js

@@ -11,6 +11,7 @@ import { LiveChatWidgetActionType } from "../../../contexts/common/LiveChatWidge
 import { TelemetryHelper } from "../../../common/telemetry/TelemetryHelper";
 import { WebChatStoreLoader } from "../../webchatcontainerstateful/webchatcontroller/WebChatStoreLoader";
 import attachmentProcessingMiddleware from "../../webchatcontainerstateful/webchatcontroller/middlewares/storemiddlewares/attachmentProcessingMiddleware";
+import attachmentSentAnnouncementMiddleware from "../../webchatcontainerstateful/webchatcontroller/middlewares/storemiddlewares/attachmentSentAnnouncementMiddleware";
 import channelDataMiddleware from "../../webchatcontainerstateful/webchatcontroller/middlewares/storemiddlewares/channelDataMiddleware";
 import { createActivityMiddleware } from "../../webchatcontainerstateful/webchatcontroller/middlewares/renderingmiddlewares/activityMiddleware";
 import { createActivityStatusMiddleware } from "../../webchatcontainerstateful/webchatcontroller/middlewares/renderingmiddlewares/activityStatusMiddleware";
@@ -120,7 +121,7 @@ export const initWebChatComposer = (props, state, dispatch, facadeChatSDK, endCh
     };
     webChatStore = createStore({},
     //initial state
-    preProcessingMiddleware, attachmentProcessingMiddleware, createAttachmentUploadValidatorMiddleware((_state$domainStates$l = state.domainStates.liveChatConfig) === null || _state$domainStates$l === void 0 ? void 0 : _state$domainStates$l.allowedFileExtensions, (_state$domainStates$l2 = state.domainStates.liveChatConfig) === null || _state$domainStates$l2 === void 0 ? void 0 : _state$domainStates$l2.maxUploadFileSize, localizedTexts), createCustomEventMiddleware(BroadcastService), createQueueOverflowMiddleware(state, dispatch), channelDataMiddleware(addConversationalSurveyTagsCallback), createConversationEndMiddleware(conversationEndCallback, startConversationalSurveyCallback, endConversationalSurveyCallback), createDataMaskingMiddleware((_state$domainStates$l3 = state.domainStates.liveChatConfig) === null || _state$domainStates$l3 === void 0 ? void 0 : _state$domainStates$l3.DataMaskingInfo), createMessageTimeStampMiddleware, createMessageSequenceIdOverrideMiddleware, createCitationsMiddleware(state, dispatch), gifUploadMiddleware, htmlPlayerMiddleware, htmlTextMiddleware(honorsTargetInHTMLLinks), createMaxMessageSizeValidator(localizedTexts), sanitizationMiddleware, createCallActionMiddleware(),
+    preProcessingMiddleware, attachmentProcessingMiddleware, createAttachmentUploadValidatorMiddleware((_state$domainStates$l = state.domainStates.liveChatConfig) === null || _state$domainStates$l === void 0 ? void 0 : _state$domainStates$l.allowedFileExtensions, (_state$domainStates$l2 = state.domainStates.liveChatConfig) === null || _state$domainStates$l2 === void 0 ? void 0 : _state$domainStates$l2.maxUploadFileSize, localizedTexts), attachmentSentAnnouncementMiddleware, createCustomEventMiddleware(BroadcastService), createQueueOverflowMiddleware(state, dispatch), channelDataMiddleware(addConversationalSurveyTagsCallback), createConversationEndMiddleware(conversationEndCallback, startConversationalSurveyCallback, endConversationalSurveyCallback), createDataMaskingMiddleware((_state$domainStates$l3 = state.domainStates.liveChatConfig) === null || _state$domainStates$l3 === void 0 ? void 0 : _state$domainStates$l3.DataMaskingInfo), createMessageTimeStampMiddleware, createMessageSequenceIdOverrideMiddleware, createCitationsMiddleware(state, dispatch), gifUploadMiddleware, htmlPlayerMiddleware, htmlTextMiddleware(honorsTargetInHTMLLinks), createMaxMessageSizeValidator(localizedTexts), sanitizationMiddleware, createCallActionMiddleware(),
     // Pass a callback so middleware can push initials into React context for reactivity
     localizedStringsBotInitialsMiddleware(initials => {
       dispatch({
@@ -146,14 +147,194 @@ export const initWebChatComposer = (props, state, dispatch, facadeChatSDK, endCh
     markdownRenderers.forEach(renderer => {
       text = renderer.render(text);
     });
+
+    // EXISTING sanitization (continues to work as before)
     const config = {
       FORBID_TAGS: ["form", "button", "script", "div", "input"],
       FORBID_ATTR: ["action"],
       ADD_ATTR: ["target"]
     };
     text = DOMPurify.sanitize(text, config);
+
+    // MONITOR-ONLY: Test what the stricter allowlist would remove (Phase 1)
+    // This does NOT modify the text, only logs telemetry
+    // Run during browser idle time to avoid blocking message flow and adding latency
+    const textToMonitor = text; // Capture current text value
+
+    // Schedule monitoring to run during browser idle time
+    const scheduleMonitoring = () => {
+      try {
+        monitorStrictSanitization(textToMonitor, state);
+      } catch (error) {
+        // Silently catch errors to prevent blocking message flow
+        if (process.env.NODE_ENV === "development") {
+          console.error("[Monitor] HTML sanitization monitoring failed:", error);
+        }
+      }
+    };
+
+    // Use requestIdleCallback for truly idle execution, fallback to setTimeout for older browsers
+    if (typeof window !== "undefined" && "requestIdleCallback" in window) {
+      window.requestIdleCallback(scheduleMonitoring);
+    } else {
+      setTimeout(scheduleMonitoring, 0);
+    }
     return text;
   };
+
+  /**
+   * Monitor-only sanitization (Phase 1: Gather telemetry)
+   * Tests what a stricter allowlist-based sanitization would remove
+   * WITHOUT actually removing it. Logs telemetry for analysis.
+   *
+   * IMPORTANT: This function is wrapped in try-catch and runs asynchronously
+   * to ensure failures don't block message flow or add latency.
+   *
+   * ISOLATION: Uses a separate DOMPurify instance to completely isolate
+   * monitoring hooks from other sanitization paths (e.g., postDomPurifyActivities).
+   * The instance is garbage collected after use, no cleanup needed.
+   *
+   * @param html - The HTML text that was already sanitized with existing config
+   * @param state - Widget state containing orgId and chatId
+   */
+  const monitorStrictSanitization = (html, state) => {
+    // Early exit for empty content
+    if (!html) return;
+
+    // Track execution time for performance monitoring
+    const startTime = performance.now();
+    try {
+      // Create a separate DOMPurify instance for monitoring
+      // This completely isolates monitoring from other sanitization paths
+      const monitorDOMPurify = DOMPurify(window);
+
+      // Strict allowlist configuration (proposed new rules)
+      // Note: DOMPurify blocks event handlers (onclick, onerror, etc.) by default
+      const strictConfig = {
+        ALLOWED_TAGS: ["b", "strong",
+        // Bold text
+        "i", "em", "u",
+        // Italic, emphasis, underline
+        "br", "p",
+        // Line breaks and paragraphs
+        "ul", "ol", "li",
+        // Lists
+        "a" // Links (with restricted attributes)
+        ],
+        ALLOWED_ATTR: ["href",
+        // For links (will be restricted to http/https)
+        "target",
+        // For link behavior
+        "rel" // For security (noopener, noreferrer)
+        ],
+        FORBID_TAGS: ["img", "video", "audio",
+        // Media (tracking beacons)
+        "iframe", "object", "embed",
+        // Embedded content
+        "script", "style",
+        // Script and styling
+        "form", "input", "textarea", "button",
+        // Form elements
+        "link", "meta", "base",
+        // Document metadata
+        "div", "span" // Layout elements
+        ],
+        FORBID_ATTR: ["style",
+        // Inline CSS
+        "action" // Form action attribute (event handlers blocked by default)
+        ],
+        ALLOWED_URI_REGEXP: /^https?:/i,
+        ALLOW_DATA_ATTR: false,
+        ALLOW_UNKNOWN_PROTOCOLS: false
+      };
+
+      // Track what would be removed
+      const removedTags = [];
+      const removedAttributes = [];
+
+      // Add hooks to the isolated monitoring instance
+      monitorDOMPurify.addHook("uponSanitizeElement", (node, data) => {
+        try {
+          const tagName = data.tagName.toLowerCase();
+          // Filter out "body" tag which is DOMPurify's internal wrapper
+          if (node.nodeType === 1 && !strictConfig.ALLOWED_TAGS.includes(tagName) && tagName !== "body") {
+            removedTags.push(tagName);
+          }
+        } catch (hookError) {
+          // Silently ignore hook errors
+        }
+      });
+      monitorDOMPurify.addHook("uponSanitizeAttribute", (node, data) => {
+        try {
+          const attrName = data.attrName.toLowerCase();
+          if (!strictConfig.ALLOWED_ATTR.includes(attrName) && attrName !== "class" && attrName !== "id") {
+            removedAttributes.push(attrName);
+          }
+        } catch (hookError) {
+          // Silently ignore hook errors
+        }
+      });
+
+      // Run sanitization on the isolated instance (we discard the result)
+      // No cleanup needed - the instance will be garbage collected with its hooks
+      monitorDOMPurify.sanitize(html, strictConfig);
+
+      // Log telemetry if content would be affected by strict rules
+      if (removedTags.length > 0 || removedAttributes.length > 0) {
+        try {
+          var _state$domainStates, _state$domainStates2;
+          const uniqueTags = [...new Set(removedTags)];
+          const uniqueAttrs = [...new Set(removedAttributes)];
+
+          // Calculate execution time
+          const endTime = performance.now();
+          const executionTimeMs = Math.round((endTime - startTime) * 100) / 100; // Round to 2 decimal places
+
+          // Get context for telemetry (with safe fallbacks)
+          const orgId = (state === null || state === void 0 || (_state$domainStates = state.domainStates) === null || _state$domainStates === void 0 || (_state$domainStates = _state$domainStates.telemetryInternalData) === null || _state$domainStates === void 0 ? void 0 : _state$domainStates.orgId) || "unknown";
+          const conversationId = (state === null || state === void 0 || (_state$domainStates2 = state.domainStates) === null || _state$domainStates2 === void 0 || (_state$domainStates2 = _state$domainStates2.chatToken) === null || _state$domainStates2 === void 0 ? void 0 : _state$domainStates2.chatId) || "unknown";
+          TelemetryHelper.logActionEvent(LogLevel.INFO, {
+            Event: TelemetryEvent.HTMLSanitized,
+            Description: JSON.stringify({
+              message: "HTML content would be sanitized by stricter allowlist (monitor-only)",
+              removedTags: uniqueTags,
+              removedAttributes: uniqueAttrs,
+              phase: "Monitor",
+              organizationId: orgId,
+              conversationId: conversationId
+            }),
+            ElapsedTimeInMilliseconds: executionTimeMs
+          });
+
+          // Log to console in development for debugging
+          if (process.env.NODE_ENV === "development") {
+            console.warn("[Monitor] Stricter HTML sanitization telemetry:", {
+              description: JSON.parse(JSON.stringify({
+                message: "HTML content would be sanitized by stricter allowlist (monitor-only)",
+                removedTags: uniqueTags,
+                removedAttributes: uniqueAttrs,
+                phase: "Monitor"
+              })),
+              orgId,
+              conversationId,
+              executionTimeMs
+            });
+          }
+        } catch (telemetryError) {
+          // Silently ignore telemetry errors to prevent blocking
+          if (process.env.NODE_ENV === "development") {
+            console.error("[Monitor] Telemetry logging failed:", telemetryError);
+          }
+        }
+      }
+    } catch (error) {
+      // Catch-all for any unexpected errors
+      // Silently fail to ensure monitoring never blocks message flow
+      if (process.env.NODE_ENV === "development") {
+        console.error("[Monitor] Monitoring failed:", error);
+      }
+    }
+  };
   function postDomPurifyActivities() {
     DOMPurify.addHook("afterSanitizeAttributes", function (node) {
       const target = node.getAttribute(Constants.Target);

package/lib/esm/components/livechatwidget/common/startChat.js

@@ -14,6 +14,7 @@ import { createAdapter } from "./createAdapter";
 import { createOnNewAdapterActivityHandler } from "../../../plugins/newMessageEventHandler";
 import { createTrackingForFirstMessage } from "../../../firstresponselatency/FirstMessageTrackerFromBot";
 import { isPersistentChatEnabled } from "./liveChatConfigUtils";
+import { isMidAuthEnabled } from "./authHelper";
 import { setPostChatContextAndLoadSurvey } from "./setPostChatContextAndLoadSurvey";
 import { shouldSetPreChatIfPersistentChat } from "./persistentChatHelper";
 import { updateTelemetryData } from "./updateSessionDataForTelemetry";
@@ -59,7 +60,7 @@ const prepareStartChat = async (props, facadeChatSDK, state, dispatch, setAdapte
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 const setPreChatAndInitiateChat = async (facadeChatSDK, dispatch, setAdapter, isProactiveChat, proactiveChatEnablePrechatState, state, props) => {
   var _props$preChatSurveyP, _props$controlProps, _state$domainStates, _state$appStates2;
-  // This reset needs to be done before to load prechat, because the conversation state changes from close to prechat
+  // Reset before loading prechat to avoid starting chat with previous requestId
   if ((state === null || state === void 0 ? void 0 : state.appStates.conversationState) === ConversationState.Closed) {
     // Preventive reset to avoid starting chat with previous requestId which could potentially cause problems
     chatSDKStateCleanUp(facadeChatSDK.getChatSDK());
@@ -192,7 +193,7 @@ const initStartChat = async (facadeChatSDK, dispatch, setAdapter, state, props,
       });
     }
     try {
-      var _window$Microsoft;
+      var _window$Microsoft, _state$domainStates8;
       // Set custom context params
       await setCustomContextParams(state, props);
       const defaultOptionalParams = {
@@ -201,9 +202,25 @@ const initStartChat = async (facadeChatSDK, dispatch, setAdapter, state, props,
         portalContactId: (_window$Microsoft = window.Microsoft) === null || _window$Microsoft === void 0 || (_window$Microsoft = _window$Microsoft.Dynamic365) === null || _window$Microsoft === void 0 || (_window$Microsoft = _window$Microsoft.Portal) === null || _window$Microsoft === void 0 || (_window$Microsoft = _window$Microsoft.User) === null || _window$Microsoft === void 0 ? void 0 : _window$Microsoft.contactId
       };
       const startChatOptionalParams = Object.assign({}, params, optionalParams, defaultOptionalParams);
+
+      // MID-AUTH: Add wasAuthenticated flag for reconnect scenarios
+      // Tells FacadeChatSDK whether the previous session was authenticated
+      // Used to detect auth transitions (Auth->Unauth) and decide whether to call authenticateChat
+      const midAuthEnabled = isMidAuthEnabled(state === null || state === void 0 || (_state$domainStates8 = state.domainStates) === null || _state$domainStates8 === void 0 ? void 0 : _state$domainStates8.liveChatConfig);
+      if (midAuthEnabled) {
+        var _state$appStates4, _persistedState$appSt;
+        const isUserAuthenticated = (state === null || state === void 0 || (_state$appStates4 = state.appStates) === null || _state$appStates4 === void 0 ? void 0 : _state$appStates4.isUserAuthenticated) === true || (persistedState === null || persistedState === void 0 || (_persistedState$appSt = persistedState.appStates) === null || _persistedState$appSt === void 0 ? void 0 : _persistedState$appSt.isUserAuthenticated) === true;
+        startChatOptionalParams.wasAuthenticated = isUserAuthenticated;
+      }
+
       // startTime is used to determine if a message is history or new, better to be set before creating the adapter to get bandwidth
       const startTime = new Date().getTime();
       createTrackingForFirstMessage();
+
+      // FacadeChatSDK.startChat() handles:
+      // 1. tokenRing() - checks authentication, calls handleAuthentication() if needed
+      // 2. Mid-auth: If no token, sets deferInitialAuth=true for unauthenticated flow
+      // 3. Mid-auth: On reconnect with valid token, calls authenticateChat to upgrade conversation
       await facadeChatSDK.startChat(startChatOptionalParams);
       logStartChatComplete();
       isStartChatSuccessful = true;
@@ -290,15 +307,15 @@ const createAdapterAndSubscribe = async (facadeChatSDK, dispatch, setAdapter, st
 };
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 const canConnectToExistingChat = async (props, facadeChatSDK, state, dispatch, setAdapter) => {
-  var _state$appStates4, _persistedState$domai3, _persistedState$appSt;
+  var _state$appStates5, _persistedState$domai3, _persistedState$appSt2;
   // By pass this function in case of popout chat
-  if ((state === null || state === void 0 || (_state$appStates4 = state.appStates) === null || _state$appStates4 === void 0 ? void 0 : _state$appStates4.hideStartChatButton) === true) {
+  if ((state === null || state === void 0 || (_state$appStates5 = state.appStates) === null || _state$appStates5 === void 0 ? void 0 : _state$appStates5.hideStartChatButton) === true) {
     return false;
   }
   const persistedState = getStateFromCache(getWidgetCacheIdfromProps(props));
 
   //Connect to only active chat session
-  if (persistedState && !isUndefinedOrEmpty(persistedState === null || persistedState === void 0 || (_persistedState$domai3 = persistedState.domainStates) === null || _persistedState$domai3 === void 0 ? void 0 : _persistedState$domai3.liveChatContext) && (persistedState === null || persistedState === void 0 || (_persistedState$appSt = persistedState.appStates) === null || _persistedState$appSt === void 0 ? void 0 : _persistedState$appSt.conversationState) === ConversationState.Active) {
+  if (persistedState && !isUndefinedOrEmpty(persistedState === null || persistedState === void 0 || (_persistedState$domai3 = persistedState.domainStates) === null || _persistedState$domai3 === void 0 ? void 0 : _persistedState$domai3.liveChatContext) && (persistedState === null || persistedState === void 0 || (_persistedState$appSt2 = persistedState.appStates) === null || _persistedState$appSt2 === void 0 ? void 0 : _persistedState$appSt2.conversationState) === ConversationState.Active) {
     var _persistedState$domai4;
     dispatch({
       type: LiveChatWidgetActionType.SET_CONVERSATION_STATE,
@@ -315,11 +332,11 @@ const canConnectToExistingChat = async (props, facadeChatSDK, state, dispatch, s
 
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 const setCustomContextParams = async (state, props) => {
-  var _state$domainStates8, _persistedState$domai5;
-  if (state !== null && state !== void 0 && (_state$domainStates8 = state.domainStates) !== null && _state$domainStates8 !== void 0 && _state$domainStates8.customContext) {
-    var _state$domainStates9;
+  var _state$domainStates9, _persistedState$domai5;
+  if (state !== null && state !== void 0 && (_state$domainStates9 = state.domainStates) !== null && _state$domainStates9 !== void 0 && _state$domainStates9.customContext) {
+    var _state$domainStates0;
     optionalParams = Object.assign({}, optionalParams, {
-      customContext: JSON.parse(JSON.stringify(state === null || state === void 0 || (_state$domainStates9 = state.domainStates) === null || _state$domainStates9 === void 0 ? void 0 : _state$domainStates9.customContext))
+      customContext: JSON.parse(JSON.stringify(state === null || state === void 0 || (_state$domainStates0 = state.domainStates) === null || _state$domainStates0 === void 0 ? void 0 : _state$domainStates0.customContext))
     });
     return;
   }
@@ -352,9 +369,9 @@ const canStartPopoutChat = async props => {
   }
   popoutWidgetInstanceId = getWidgetCacheIdfromProps(props, true);
   if (!isNullOrEmptyString(popoutWidgetInstanceId)) {
-    var _persistedState$domai6, _persistedState$appSt2;
+    var _persistedState$domai6, _persistedState$appSt3;
     const persistedState = getStateFromCache(popoutWidgetInstanceId);
-    if (persistedState && !isUndefinedOrEmpty(persistedState === null || persistedState === void 0 || (_persistedState$domai6 = persistedState.domainStates) === null || _persistedState$domai6 === void 0 ? void 0 : _persistedState$domai6.liveChatContext) && (persistedState === null || persistedState === void 0 || (_persistedState$appSt2 = persistedState.appStates) === null || _persistedState$appSt2 === void 0 ? void 0 : _persistedState$appSt2.conversationState) === ConversationState.Active) {
+    if (persistedState && !isUndefinedOrEmpty(persistedState === null || persistedState === void 0 || (_persistedState$domai6 = persistedState.domainStates) === null || _persistedState$domai6 === void 0 ? void 0 : _persistedState$domai6.liveChatContext) && (persistedState === null || persistedState === void 0 || (_persistedState$appSt3 = persistedState.appStates) === null || _persistedState$appSt3 === void 0 ? void 0 : _persistedState$appSt3.conversationState) === ConversationState.Active) {
       // Initiate popout chat
       BroadcastService.postMessage({
         eventName: BroadcastEvent.InitiateStartChatInPopoutMode
@@ -367,9 +384,9 @@ const canStartPopoutChat = async props => {
 
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 const checkIfConversationStillValid = async (facadeChatSDK, dispatch, state) => {
-  var _state$domainStates0, _state$domainStates1;
-  const requestIdFromCache = (_state$domainStates0 = state.domainStates) === null || _state$domainStates0 === void 0 || (_state$domainStates0 = _state$domainStates0.liveChatContext) === null || _state$domainStates0 === void 0 ? void 0 : _state$domainStates0.requestId;
-  const liveChatContext = state === null || state === void 0 || (_state$domainStates1 = state.domainStates) === null || _state$domainStates1 === void 0 ? void 0 : _state$domainStates1.liveChatContext;
+  var _state$domainStates1, _state$domainStates10;
+  const requestIdFromCache = (_state$domainStates1 = state.domainStates) === null || _state$domainStates1 === void 0 || (_state$domainStates1 = _state$domainStates1.liveChatContext) === null || _state$domainStates1 === void 0 ? void 0 : _state$domainStates1.requestId;
+  const liveChatContext = state === null || state === void 0 || (_state$domainStates10 = state.domainStates) === null || _state$domainStates10 === void 0 ? void 0 : _state$domainStates10.liveChatContext;
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
   let conversationDetails = undefined;
   // Preserve current requestId

package/lib/esm/components/livechatwidget/livechatwidgetstateful/LiveChatWidgetStateful.js

@@ -1,4 +1,10 @@
 function _extends() { return _extends = Object.assign ? Object.assign.bind() : function (n) { for (var e = 1; e < arguments.length; e++) { var t = arguments[e]; for (var r in t) ({}).hasOwnProperty.call(t, r) && (n[r] = t[r]); } return n; }, _extends.apply(null, arguments); }
+function _slicedToArray(r, e) { return _arrayWithHoles(r) || _iterableToArrayLimit(r, e) || _unsupportedIterableToArray(r, e) || _nonIterableRest(); }
+function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }
+function _unsupportedIterableToArray(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0; } }
+function _arrayLikeToArray(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _iterableToArrayLimit(r, l) { var t = null == r ? null : "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (null != t) { var e, n, i, u, a = [], f = !0, o = !1; try { if (i = (t = t.call(r)).next, 0 === l) { if (Object(t) !== t) return; f = !1; } else for (; !(f = (e = i.call(t)).done) && (a.push(e.value), a.length !== l); f = !0); } catch (r) { o = !0, n = r; } finally { try { if (!f && null != t.return && (u = t.return(), Object(u) !== u)) return; } finally { if (o) throw n; } } return a; } }
+function _arrayWithHoles(r) { if (Array.isArray(r)) return r; }
 import { BroadcastEvent, ConversationStage, LogLevel, TelemetryEvent } from "../../../common/telemetry/TelemetryConstants";
 import { BroadcastService, BroadcastServiceInitialize, decodeComponentString } from "@microsoft/omnichannel-chat-components";
 import { Components } from "botframework-webchat";
@@ -8,7 +14,7 @@ import React, { useEffect, useRef, useState } from "react";
 import { TelemetryManager, TelemetryTimers } from "../../../common/telemetry/TelemetryManager";
 import { chatSDKStateCleanUp, endChat, endChatStateCleanUp, prepareEndChat } from "../common/endChat";
 import { checkIfConversationStillValid, initStartChat, prepareStartChat, setPreChatAndInitiateChat } from "../common/startChat";
-import { createTimer, getBroadcastChannelName, getConversationDetailsCall, getLocaleDirection, getStateFromCache, getWidgetCacheIdfromProps, getWidgetEndChatEventName, isNullOrEmptyString, isNullOrUndefined, isThisSessionPopout, isUndefinedOrEmpty, setOcUserAgent } from "../../../common/utils";
+import { createTimer, getBroadcastChannelName, getConversationDetailsCall, getLocaleDirection, getStateFromCache, getWidgetCacheIdfromProps, getWidgetEndChatEventName, isNullOrEmptyString, isNullOrUndefined, isThisSessionPopout, isUndefinedOrEmpty, setAriaHiddenForSiblings, setOcUserAgent } from "../../../common/utils";
 import { customEventCallback, subscribeToSendCustomEvent } from "../common/customEventHandler";
 import { defaultClientDataStoreProvider, isCookieAllowed } from "../../../common/storage/default/defaultClientDataStoreProvider";
 import { handleChatReconnect, isPersistentEnabled, isReconnectEnabled } from "../common/reconnectChatHelper";
@@ -50,6 +56,7 @@ import { initConfirmationPropsComposer } from "../common/initConfirmationPropsCo
 import { initWebChatComposer } from "../common/initWebChatComposer";
 import { registerBroadcastServiceForStorage } from "../../../common/storage/default/defaultCacheManager";
 import { setPostChatContextAndLoadSurvey } from "../common/setPostChatContextAndLoadSurvey";
+import { shouldLoadPersistentChatHistory } from "../common/liveChatConfigUtils";
 import { startProactiveChat } from "../common/startProactiveChat";
 import useChatAdapterStore from "../../../hooks/useChatAdapterStore";
 import useChatContextStore from "../../../hooks/useChatContextStore";
@@ -57,7 +64,7 @@ import useFacadeSDKStore from "../../../hooks/useFacadeChatSDKStore";
 import { getPostChatContext, initiatePostChat } from "../common/renderSurveyHelpers";
 let uiTimer;
 export const LiveChatWidgetStateful = props => {
-  var _props$webChatContain, _props$webChatContain2, _props$webChatContain3, _props$webChatContain4, _props$webChatContain5, _props$styleProps, _props$webChatContain6, _props$controlProps, _props$controlProps3, _state$appStates7, _props$webChatContain9, _state$appStates8, _props$webChatContain1, _props$webChatContain10, _props$controlProps10, _props$draggableChatW, _props$draggableChatW2, _props$draggableChatW3, _props$draggableChatW4, _props$draggableChatW5, _livechatProps$webCha, _livechatProps$styleP, _livechatProps$contro, _livechatProps$contro2, _livechatProps$compon, _livechatProps$contro3, _livechatProps$compon2, _livechatProps$contro4, _livechatProps$compon3, _livechatProps$contro5, _livechatProps$compon4, _livechatProps$contro6, _livechatProps$compon5, _livechatProps$contro7, _livechatProps$compon6, _livechatProps$contro8, _livechatProps$compon7, _livechatProps$contro9, _livechatProps$compon8, _livechatProps$contro0, _livechatProps$contro1, _livechatProps$compon9, _livechatProps$contro10, _livechatProps$compon0, _livechatProps$contro11, _livechatProps$compon1, _livechatProps$compon10, _livechatProps$compon11;
+  var _props$webChatContain, _props$webChatContain2, _props$webChatContain3, _props$webChatContain4, _props$webChatContain5, _props$styleProps, _props$webChatContain6, _props$controlProps, _props$controlProps3, _state$appStates7, _props$webChatContain9, _state$appStates8, _props$webChatContain1, _props$webChatContain10, _props$controlProps10, _props$draggableChatW, _props$draggableChatW2, _props$draggableChatW3, _props$draggableChatW4, _props$draggableChatW5, _livechatProps$webCha, _livechatProps$styleP, _props$headerProps, _livechatProps$contro, _livechatProps$contro2, _livechatProps$compon, _livechatProps$contro3, _livechatProps$compon2, _livechatProps$contro4, _livechatProps$compon3, _livechatProps$contro5, _livechatProps$compon4, _livechatProps$contro6, _livechatProps$compon5, _livechatProps$contro7, _livechatProps$compon6, _livechatProps$contro8, _livechatProps$compon7, _livechatProps$contro9, _livechatProps$compon8, _livechatProps$contro0, _livechatProps$contro1, _livechatProps$compon9, _livechatProps$contro10, _livechatProps$compon0, _livechatProps$contro11, _livechatProps$compon1, _livechatProps$compon10, _livechatProps$compon11;
   useEffect(() => {
     uiTimer = createTimer();
     TelemetryHelper.logLoadingEventToAllTelemetry(LogLevel.INFO, {
@@ -68,21 +75,36 @@ export const LiveChatWidgetStateful = props => {
       }
     });
   }, []);
-  const [state, dispatch] = useChatContextStore();
+  const _useChatContextStore = useChatContextStore(),
+    _useChatContextStore2 = _slicedToArray(_useChatContextStore, 2),
+    state = _useChatContextStore2[0],
+    dispatch = _useChatContextStore2[1];
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  const [adapter, setAdapter] = useChatAdapterStore();
-  const [webChatStyles, setWebChatStyles] = useState({
-    ...defaultWebChatContainerStatefulProps.webChatStyles,
-    ...((_props$webChatContain = props.webChatContainerProps) === null || _props$webChatContain === void 0 ? void 0 : _props$webChatContain.webChatStyles)
-  });
+  const _useChatAdapterStore = useChatAdapterStore(),
+    _useChatAdapterStore2 = _slicedToArray(_useChatAdapterStore, 2),
+    adapter = _useChatAdapterStore2[0],
+    setAdapter = _useChatAdapterStore2[1];
+  const _useState = useState({
+      ...defaultWebChatContainerStatefulProps.webChatStyles,
+      ...((_props$webChatContain = props.webChatContainerProps) === null || _props$webChatContain === void 0 ? void 0 : _props$webChatContain.webChatStyles)
+    }),
+    _useState2 = _slicedToArray(_useState, 2),
+    webChatStyles = _useState2[0],
+    setWebChatStyles = _useState2[1];
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  const [facadeChatSDK] = useFacadeSDKStore();
+  const _useFacadeSDKStore = useFacadeSDKStore(),
+    _useFacadeSDKStore2 = _slicedToArray(_useFacadeSDKStore, 1),
+    facadeChatSDK = _useFacadeSDKStore2[0];
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  const [voiceVideoCallingSDK, setVoiceVideoCallingSDK] = useState(undefined);
-  const [conversationId, setConversationId] = useState("");
-  const {
-    Composer
-  } = Components;
+  const _useState3 = useState(undefined),
+    _useState4 = _slicedToArray(_useState3, 2),
+    voiceVideoCallingSDK = _useState4[0],
+    setVoiceVideoCallingSDK = _useState4[1];
+  const _useState5 = useState(""),
+    _useState6 = _slicedToArray(_useState5, 2),
+    conversationId = _useState6[0],
+    setConversationId = _useState6[1];
+  const Composer = Components.Composer;
   const canStartProactiveChat = useRef(true);
   const bubbleBackground = ((_props$webChatContain2 = props.webChatContainerProps) === null || _props$webChatContain2 === void 0 || (_props$webChatContain2 = _props$webChatContain2.webChatStyles) === null || _props$webChatContain2 === void 0 ? void 0 : _props$webChatContain2.bubbleBackground) ?? ((_props$webChatContain3 = props.webChatContainerProps) === null || _props$webChatContain3 === void 0 || (_props$webChatContain3 = _props$webChatContain3.adaptiveCardStyles) === null || _props$webChatContain3 === void 0 ? void 0 : _props$webChatContain3.background) ?? defaultAdaptiveCardStyles.background;
   const bubbleTextColor = ((_props$webChatContain4 = props.webChatContainerProps) === null || _props$webChatContain4 === void 0 || (_props$webChatContain4 = _props$webChatContain4.webChatStyles) === null || _props$webChatContain4 === void 0 ? void 0 : _props$webChatContain4.bubbleTextColor) ?? ((_props$webChatContain5 = props.webChatContainerProps) === null || _props$webChatContain5 === void 0 || (_props$webChatContain5 = _props$webChatContain5.adaptiveCardStyles) === null || _props$webChatContain5 === void 0 ? void 0 : _props$webChatContain5.color) ?? defaultAdaptiveCardStyles.color;
@@ -553,9 +575,7 @@ export const LiveChatWidgetStateful = props => {
         }
       });
       const conversationDetails = await getConversationDetailsCall(facadeChatSDK);
-      const {
-        chatConfig
-      } = props;
+      const chatConfig = props.chatConfig;
       const isPersistent = isPersistentEnabled(chatConfig);
       TelemetryHelper.logSDKEventToAllTelemetry(LogLevel.INFO, {
         Event: TelemetryEvent.EndChatEventReceived,
@@ -728,7 +748,15 @@ export const LiveChatWidgetStateful = props => {
     if (state.appStates.isMinimized) {
       ActivityStreamHandler.cork();
     } else {
-      setTimeout(() => ActivityStreamHandler.uncork(), 500);
+      var _state$domainStates4;
+      const extendedChatConfig = state === null || state === void 0 || (_state$domainStates4 = state.domainStates) === null || _state$domainStates4 === void 0 ? void 0 : _state$domainStates4.liveChatConfig;
+      if (shouldLoadPersistentChatHistory(extendedChatConfig)) {
+        requestAnimationFrame(() => {
+          setTimeout(() => ActivityStreamHandler.uncork(), 500);
+        });
+      } else {
+        setTimeout(() => ActivityStreamHandler.uncork(), 500);
+      }
     }
   }, [state.appStates.isMinimized]);
 
@@ -867,6 +895,37 @@ export const LiveChatWidgetStateful = props => {
     }
   }, [state.appStates.chatDisconnectEventReceived]);
 
+  // Auth state change listeners (broadcast by FacadeChatSDK.startChat())
+  useEffect(() => {
+    const authSucceededSub = BroadcastService.getMessageByEventName(BroadcastEvent.MidConversationAuthSucceeded).subscribe(msg => {
+      var _msg$payload13;
+      if (msg !== null && msg !== void 0 && (_msg$payload13 = msg.payload) !== null && _msg$payload13 !== void 0 && _msg$payload13.isAuthenticated) {
+        // Only store boolean flag, NOT the token - token is managed by FacadeChatSDK
+        dispatch({
+          type: LiveChatWidgetActionType.SET_USER_AUTHENTICATED,
+          payload: true
+        });
+      }
+    });
+
+    // Auth reset: only update the boolean flag here.
+    // We do NOT clear widget state/cache/adapter because this fires DURING startChat(),
+    // which will handle state transitions. FacadeChatSDK has already cleared SDK internals.
+    const authResetSub = BroadcastService.getMessageByEventName(BroadcastEvent.MidConversationAuthReset).subscribe(msg => {
+      var _msg$payload14;
+      if ((msg === null || msg === void 0 || (_msg$payload14 = msg.payload) === null || _msg$payload14 === void 0 ? void 0 : _msg$payload14.isAuthenticated) === false) {
+        dispatch({
+          type: LiveChatWidgetActionType.SET_USER_AUTHENTICATED,
+          payload: false
+        });
+      }
+    });
+    return () => {
+      authSucceededSub.unsubscribe();
+      authResetSub.unsubscribe();
+    };
+  }, [dispatch]);
+
   // if props state gets updates we need to update the renderingMiddlewareProps in the state
   useEffect(() => {
     var _props$webChatContain0;
@@ -885,6 +944,25 @@ export const LiveChatWidgetStateful = props => {
       }
     });
   }, []);
+
+  // Reliable browser close detection via visibilitychange + sendBeacon
+  // visibilitychange fires while the page is still alive (unlike beforeunload),
+  // so telemetry calls complete reliably. False positives (tab switch, minimize)
+  // are filtered in Kusto by checking if this is the last event in the session.
+  useEffect(() => {
+    const handleVisibilityChange = () => {
+      if (document.visibilityState === "hidden" && state.appStates.conversationState === ConversationState.Active) {
+        TelemetryHelper.logActionEvent(LogLevel.INFO, {
+          Event: TelemetryEvent.BrowserTabHidden,
+          Description: "Browser tab hidden during active conversation"
+        });
+      }
+    };
+    document.addEventListener("visibilitychange", handleVisibilityChange);
+    return () => {
+      document.removeEventListener("visibilitychange", handleVisibilityChange);
+    };
+  }, [state.appStates.conversationState]);
   const initiateEndChatOnBrowserUnload = () => {
     var _DataStoreManager$cli;
     TelemetryHelper.logActionEvent(LogLevel.INFO, {
@@ -962,6 +1040,15 @@ export const LiveChatWidgetStateful = props => {
       }));
     }
   }, [state.domainStates.botAvatarInitials]);
+  const isWidgetOpen = !state.appStates.isMinimized && state.appStates.conversationState !== ConversationState.Closed;
+  const siblingAriaHiddenMapRef = useRef(new Map());
+  useEffect(() => {
+    const map = siblingAriaHiddenMapRef.current;
+    setAriaHiddenForSiblings(widgetElementId, isWidgetOpen, map);
+    return () => {
+      setAriaHiddenForSiblings(widgetElementId, false, map);
+    };
+  }, [isWidgetOpen]);
 
   // WebChat's Composer can only be rendered if a directLine object is defined
   return directLine && /*#__PURE__*/React.createElement(React.Fragment, null, /*#__PURE__*/React.createElement("style", null, `
@@ -1008,10 +1095,31 @@ export const LiveChatWidgetStateful = props => {
             .webchat__basic-transcript__activity-markdown-body > :last-child {
                 margin-bottom: 0px;
             }
-           
+
             .webchat__basic-transcript__activity-markdown-body > :first-child {
                 margin-top: 0px;
             }
+
+            /* Remove browser-default <p> margins inside system messages.
+               Without this, each markdown paragraph adds ~1em top+bottom gap
+               which causes the oversized line spacing visible on iOS Safari.
+               Also disable iOS Safari's auto font-size scaling (-webkit-text-size-adjust)
+               which inflates font sizes and causes line-height to grow over time
+               when the layout is viewed in a narrow viewport. */
+            .webchat__basic-transcript__activity-markdown-body {
+                -webkit-text-size-adjust: 100%;
+                text-size-adjust: 100%;
+            }
+
+            .webchat__basic-transcript__activity-markdown-body p {
+                margin-top: 0;
+                margin-bottom: 4px;
+                line-height: 1.4;
+            }
+
+            .webchat__basic-transcript__activity-markdown-body p:last-child {
+                margin-bottom: 0;
+            }
                 
             .webchat__basic-transcript__activity-markdown-body img.webchat__render-markdown__external-link-icon {
                 background-image : url(data:image/svg+xml;base64,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) !important;
@@ -1019,6 +1127,32 @@ export const LiveChatWidgetStateful = props => {
                 margin-left: .25em;
             }
 
+            /* ── iOS Safari: underline + number alignment fixes ────────────────
+               1. Position underlines below all glyphs (not at alphabetic baseline)
+                  so they never intersect numbers in links or auto-detected tel: hrefs.
+               2. Use a solid underline (skip-ink: none) so numbers aren't split by
+                  gaps the browser renders around descenders.
+               3. Prevent ::marker pseudo-element from inheriting text-decoration,
+                  which Safari applies to ol/ul counters causing them to appear
+                  underlined and misaligned.
+               4. Normalise ordered-list indentation across Safari/WebKit. */
+            .webchat__basic-transcript__activity-markdown-body a {
+                -webkit-text-underline-position: under;
+                text-underline-position: under;
+                text-decoration-skip-ink: none;
+                -webkit-text-decoration-skip: none;
+            }
+
+            .webchat__basic-transcript__activity-markdown-body ol li::marker,
+            .webchat__basic-transcript__activity-markdown-body ul li::marker {
+                text-decoration: none;
+            }
+
+            .webchat__basic-transcript__activity-markdown-body ol {
+                -webkit-padding-start: 1.5em;
+                padding-inline-start: 1.5em;
+            }
+
             .webchat__link-definitions__header-text {
                 color: ${bubbleBackground}
             }
@@ -1038,7 +1172,10 @@ export const LiveChatWidgetStateful = props => {
   }), /*#__PURE__*/React.createElement(Stack, {
     id: widgetElementId,
     styles: generalStyles,
-    className: (_livechatProps$styleP = livechatProps.styleProps) === null || _livechatProps$styleP === void 0 ? void 0 : _livechatProps$styleP.className
+    className: (_livechatProps$styleP = livechatProps.styleProps) === null || _livechatProps$styleP === void 0 ? void 0 : _livechatProps$styleP.className,
+    role: isWidgetOpen ? "dialog" : undefined,
+    "aria-modal": isWidgetOpen ? true : undefined,
+    "aria-label": isWidgetOpen ? ((_props$headerProps = props.headerProps) === null || _props$headerProps === void 0 || (_props$headerProps = _props$headerProps.controlProps) === null || _props$headerProps === void 0 || (_props$headerProps = _props$headerProps.headerTitleProps) === null || _props$headerProps === void 0 ? void 0 : _props$headerProps.text) ?? "Live Chat" : undefined
   }, !((_livechatProps$contro = livechatProps.controlProps) !== null && _livechatProps$contro !== void 0 && _livechatProps$contro.hideChatButton) && !((_livechatProps$contro2 = livechatProps.controlProps) !== null && _livechatProps$contro2 !== void 0 && _livechatProps$contro2.hideStartChatButton) && shouldShowChatButton(state) && (decodeComponentString((_livechatProps$compon = livechatProps.componentOverrides) === null || _livechatProps$compon === void 0 ? void 0 : _livechatProps$compon.chatButton) || /*#__PURE__*/React.createElement(ChatButtonStateful, {
     buttonProps: livechatProps.chatButtonProps,
     outOfOfficeButtonProps: livechatProps.outOfOfficeChatButtonProps,