@smooai/chat-widget 0.9.0 → 0.10.1

package/dist/chat-widget.global.js

@@ -11442,396 +11442,703 @@ var SmoothAgentChat = (function(exports) {
 	AsYouType.prototype = Object.create(AsYouType$1.prototype, {});
 	AsYouType.prototype.constructor = AsYouType;
 	//#endregion
-	//#region src/config.ts
-	/** Resolve a partial config against the built-in defaults. */
-	function resolveConfig(config) {
-		const theme = config.theme ?? {};
-		const primary = theme.primary ?? "#00a6a6";
-		const primaryText = theme.primaryText ?? "#f8fafc";
-		const assistantBubble = theme.chatBubbleInbound ?? theme.assistantBubble ?? "#06134b";
-		const assistantBubbleText = theme.chatBubbleInboundText ?? theme.assistantBubbleText ?? "#f8fafc";
-		const userBubble = theme.chatBubbleOutbound ?? theme.userBubble ?? primary;
-		const userBubbleText = theme.chatBubbleOutboundText ?? theme.userBubbleText ?? primaryText;
-		return {
-			endpoint: config.endpoint,
-			mode: config.mode ?? "popover",
-			agentId: config.agentId,
-			agentName: config.agentName ?? "Assistant",
-			userName: config.userName,
-			userEmail: config.userEmail,
-			userPhone: config.userPhone,
-			authContext: config.authContext,
-			placeholder: config.placeholder ?? "Type a message…",
-			greeting: config.greeting ?? "Hi! How can I help you today?",
-			connectionErrorMessage: config.connectionErrorMessage ?? "We couldn't reach the chat. Please try again in a moment.",
-			startOpen: config.startOpen ?? false,
-			examplePrompts: (config.examplePrompts ?? []).filter((p) => p.trim().length > 0).slice(0, 5),
-			requireName: config.requireName ?? false,
-			requireEmail: config.requireEmail ?? false,
-			requirePhone: config.requirePhone ?? false,
-			collectPhone: config.collectPhone ?? true,
-			collectConsent: config.collectConsent ?? true,
-			allowChatRestore: config.allowChatRestore ?? true,
-			allowAnonymous: config.allowAnonymous ?? false,
-			theme: {
-				text: theme.text ?? "#f8fafc",
-				background: theme.background ?? "#040d30",
-				primary,
-				primaryText,
-				secondary: theme.secondary ?? "#ff6b6c",
-				assistantBubble,
-				assistantBubbleText,
-				userBubble,
-				userBubbleText,
-				border: theme.border ?? "rgba(255, 255, 255, 0.1)"
+	//#region src/markdown.ts
+	/**
+	* A tiny, safe-by-default Markdown → HTML renderer for the chat widget.
+	*
+	* ## Why a hand-rolled renderer (and not markdown-it / snarkdown)?
+	*
+	* The widget renders **untrusted** text in two places: the assistant's reply
+	* (LLM output, which can echo attacker-supplied content) and citation snippets
+	* (raw scraped page chunks). Today both are written via `textContent`, so
+	* `**bold**`, numbered lists, and `[links](url)` show up literally. We want
+	* them rendered — without re-opening the XSS hole that `textContent` was
+	* guarding against.
+	*
+	* markdown-it with `html:false` is safe-by-default but ships ~30 kB min into
+	* what is an embeddable **global** bundle, where every kilobyte is on the host
+	* page's critical path. snarkdown is ~1 kB but emits raw HTML, so it would
+	* require bolting on a separate sanitizer. Instead, this renderer is
+	* **safe-by-construction**:
+	*
+	*   1. It is a *tokenizer*, not an HTML passthrough. It only ever emits a
+	*      fixed allowlist of tags (`p`, `br`, `strong`, `em`, `ul`/`ol`/`li`,
+	*      `code`/`pre`, `a`, `blockquote`). There is no code path that copies a
+	*      tag out of the input — a literal `<script>` in the input is treated as
+	*      plain text.
+	*   2. **Every** text run is HTML-escaped via {@link escapeHtml} before it
+	*      reaches the output. Raw `<`, `>`, `&`, `"`, `'` can never become markup.
+	*   3. **Images are dropped entirely** — `![alt](src)` renders as its alt text,
+	*      no `<img>` is ever produced (a scraped tracking pixel must not load).
+	*   4. **Links** are gated through {@link safeHttpUrl}: only absolute `http(s)`
+	*      URLs become anchors (with `target="_blank"` + a hardened `rel`);
+	*      `javascript:`/`data:`/relative/etc. fall back to plain (escaped) text.
+	*   5. **Headings** (`#`..`######`) are *downgraded* to bold lines — a full
+	*      `<h1>` is far too large inside a chat bubble or citation card.
+	*
+	* The output is a string of HTML that is only ever assigned to `innerHTML` of
+	* an element the caller controls; because of (1)–(4) it can only contain the
+	* allowlisted, attribute-sanitized tags.
+	*
+	* Supported subset (deliberately small):
+	*   - Paragraphs (blank-line separated) and hard/soft line breaks
+	*   - `**bold**` / `__bold__`, `*italic*` / `_italic_`
+	*   - `` `inline code` `` and fenced ``` ```code blocks``` ```
+	*   - `- ` / `* ` / `+ ` unordered lists, `1.` ordered lists
+	*   - `> ` blockquotes
+	*   - `[text](http(s)://url)` links (images dropped to alt text)
+	*   - `#`..`######` headings → bold line
+	*/
+	/** Escape the five HTML-significant characters so a text run can never be markup. */
+	function escapeHtml(value) {
+		return value.replace(/[&<>"']/g, (c) => {
+			switch (c) {
+				case "&": return "&amp;";
+				case "<": return "&lt;";
+				case ">": return "&gt;";
+				case "\"": return "&quot;";
+				default: return "&#39;";
 			}
-		};
+		});
 	}
 	/**
-	* Whether the pre-chat identity form should gate the conversation: at least one
-	* field is required and anonymous chat is not allowed.
+	* Return `url` only if it is a valid absolute `http(s)` URL, else `null`.
+	*
+	* SECURITY: link targets here originate from untrusted content (LLM output /
+	* scraped citation chunks). Allowing an arbitrary string as an `href` permits
+	* `javascript:`/`data:`/`vbscript:` URLs that execute on click — a stored-XSS
+	* vector. Only absolute http(s) links are rendered as anchors; anything else
+	* falls back to plain text upstream.
 	*/
-	function needsUserInfo(resolved) {
-		return !resolved.allowAnonymous && (resolved.requireName || resolved.requireEmail || resolved.requirePhone);
-	}
-	//#endregion
-	//#region \0@oxc-project+runtime@0.134.0/helpers/esm/typeof.js
-	function _typeof(o) {
-		"@babel/helpers - typeof";
-		return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(o) {
-			return typeof o;
-		} : function(o) {
-			return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o;
-		}, _typeof(o);
-	}
-	//#endregion
-	//#region \0@oxc-project+runtime@0.134.0/helpers/esm/toPrimitive.js
-	function toPrimitive(t, r) {
-		if ("object" != _typeof(t) || !t) return t;
-		var e = t[Symbol.toPrimitive];
-		if (void 0 !== e) {
-			var i = e.call(t, r || "default");
-			if ("object" != _typeof(i)) return i;
-			throw new TypeError("@@toPrimitive must return a primitive value.");
+	function safeHttpUrl(url) {
+		if (!url) return null;
+		try {
+			const parsed = new URL(url);
+			return parsed.protocol === "http:" || parsed.protocol === "https:" ? parsed.href : null;
+		} catch {
+			return null;
 		}
-		return ("string" === r ? String : Number)(t);
-	}
-	//#endregion
-	//#region \0@oxc-project+runtime@0.134.0/helpers/esm/toPropertyKey.js
-	function toPropertyKey(t) {
-		var i = toPrimitive(t, "string");
-		return "symbol" == _typeof(i) ? i : i + "";
-	}
-	//#endregion
-	//#region \0@oxc-project+runtime@0.134.0/helpers/esm/defineProperty.js
-	function _defineProperty(e, r, t) {
-		return (r = toPropertyKey(r)) in e ? Object.defineProperty(e, r, {
-			value: t,
-			enumerable: !0,
-			configurable: !0,
-			writable: !0
-		}) : e[r] = t, e;
 	}
-	//#endregion
-	//#region node_modules/.pnpm/@smooai+smooth-operator@1.8.0/node_modules/@smooai/smooth-operator/dist/transport.js
 	/**
-	* Transport abstraction for the client.
+	* Render the inline span grammar of a single line/segment to safe HTML.
 	*
-	* The client is deliberately decoupled from any concrete WebSocket implementation
-	* so it can be unit-tested with a mock and run on Node, the browser, or a custom
-	* socket. A transport is anything that can send a string frame and surface
-	* incoming string frames + lifecycle events.
-	*/
-	const WS_CONNECTING = 0;
-	const WS_OPEN = 1;
-	const WS_CLOSING = 2;
-	/** Default connect timeout (ms) for the WebSocket transport. */
-	const DEFAULT_CONNECT_TIMEOUT = 3e4;
-	/**
-	* Default transport backed by a `WebSocket`-like object. By default it uses the
-	* global `WebSocket`; pass a `factory` to inject one (e.g. the `ws` package on
-	* Node, or a mock in tests).
+	* Order matters: code spans are extracted first (their contents are *not*
+	* further parsed), then images are stripped to alt text, then links, then
+	* emphasis. Every literal text run is escaped on the way out.
 	*/
-	var WebSocketTransport = class {
-		constructor(url, factory, connectTimeout = DEFAULT_CONNECT_TIMEOUT) {
-			_defineProperty(this, "socket", null);
-			_defineProperty(this, "url", void 0);
-			_defineProperty(this, "factory", void 0);
-			_defineProperty(this, "connectTimeout", void 0);
-			_defineProperty(this, "messageHandlers", /* @__PURE__ */ new Set());
-			_defineProperty(this, "closeHandlers", /* @__PURE__ */ new Set());
-			_defineProperty(this, "errorHandlers", /* @__PURE__ */ new Set());
-			this.url = url;
-			this.connectTimeout = connectTimeout;
-			if (factory) this.factory = factory;
-			else {
-				const G = globalThis;
-				if (!G.WebSocket) throw new Error("No global WebSocket available; pass a WebSocketFactory to WebSocketTransport.");
-				const Ctor = G.WebSocket;
-				this.factory = (u) => new Ctor(u);
+	function renderInline(input) {
+		let out = "";
+		let i = 0;
+		const n = input.length;
+		let buf = "";
+		const flush = () => {
+			if (buf) {
+				out += escapeHtml(buf);
+				buf = "";
 			}
-		}
-		get state() {
-			if (!this.socket) return "closed";
-			switch (this.socket.readyState) {
-				case WS_CONNECTING: return "connecting";
-				case WS_OPEN: return "open";
-				case WS_CLOSING: return "closing";
-				default: return "closed";
+		};
+		while (i < n) {
+			const ch = input[i];
+			if (ch === "`") {
+				const end = input.indexOf("`", i + 1);
+				if (end > i) {
+					flush();
+					out += `<code>${escapeHtml(input.slice(i + 1, end))}</code>`;
+					i = end + 1;
+					continue;
+				}
 			}
-		}
-		connect() {
-			if (this.socket && this.socket.readyState === WS_OPEN) return Promise.resolve();
-			if (this.socket && this.socket.readyState !== WS_OPEN) {
-				const stale = this.socket;
-				this.socket = null;
-				try {
-					stale.close();
-				} catch {}
+			if (ch === "!" && input[i + 1] === "[") {
+				const m = imageAt(input, i);
+				if (m) {
+					flush();
+					out += renderInline(m.alt);
+					i = m.end;
+					continue;
+				}
 			}
-			return new Promise((resolve, reject) => {
-				const socket = this.factory(this.url);
-				this.socket = socket;
-				let settled = false;
-				const timer = this.connectTimeout > 0 ? setTimeout(() => {
-					if (settled) return;
-					settled = true;
-					if (this.socket === socket) this.socket = null;
-					try {
-						socket.close();
-					} catch {}
-					reject(/* @__PURE__ */ new Error(`WebSocket connect to ${this.url} timed out after ${this.connectTimeout}ms`));
-				}, this.connectTimeout) : void 0;
-				socket.addEventListener("open", () => {
-					if (this.socket !== socket) return;
-					if (settled) return;
-					settled = true;
-					if (timer) clearTimeout(timer);
-					resolve();
-				});
-				socket.addEventListener("error", (ev) => {
-					if (this.socket !== socket) return;
-					for (const h of this.errorHandlers) h(ev);
-					if (!settled && this.state !== "open") {
-						settled = true;
-						if (timer) clearTimeout(timer);
-						if (this.socket === socket) this.socket = null;
-						try {
-							socket.close();
-						} catch {}
-						reject(ev instanceof Error ? ev : /* @__PURE__ */ new Error("WebSocket connection error"));
-					}
-				});
-				socket.addEventListener("close", (ev) => {
-					if (this.socket !== socket) return;
-					if (timer) clearTimeout(timer);
-					for (const h of this.closeHandlers) h({
-						code: ev.code,
-						reason: ev.reason
-					});
-				});
-				socket.addEventListener("message", (ev) => {
-					if (this.socket !== socket) return;
-					const data = typeof ev.data === "string" ? ev.data : String(ev.data);
-					for (const h of this.messageHandlers) h(data);
-				});
-			});
-		}
-		send(data) {
-			if (!this.socket || this.socket.readyState !== WS_OPEN) throw new Error(`Cannot send: transport is "${this.state}"`);
-			this.socket.send(data);
-		}
-		close(code, reason) {
-			this.socket?.close(code, reason);
-		}
-		onMessage(handler) {
-			this.messageHandlers.add(handler);
-			return () => this.messageHandlers.delete(handler);
-		}
-		onClose(handler) {
-			this.closeHandlers.add(handler);
-			return () => this.closeHandlers.delete(handler);
+			if (ch === "[") {
+				const m = linkAt(input, i);
+				if (m) {
+					flush();
+					const safe = safeHttpUrl(m.href);
+					const inner = renderInline(m.text);
+					if (safe) out += `<a href="${escapeHtml(safe)}" target="_blank" rel="noopener noreferrer nofollow">${inner}</a>`;
+					else out += inner;
+					i = m.end;
+					continue;
+				}
+			}
+			if (ch === "*" && input[i + 1] === "*" || ch === "_" && input[i + 1] === "_") {
+				const marker = ch + ch;
+				const end = input.indexOf(marker, i + 2);
+				if (end > i + 1) {
+					flush();
+					out += `<strong>${renderInline(input.slice(i + 2, end))}</strong>`;
+					i = end + 2;
+					continue;
+				}
+			}
+			if (ch === "*" || ch === "_") {
+				const end = input.indexOf(ch, i + 1);
+				if (end > i + 1 && input[i + 1] !== ch) {
+					flush();
+					out += `<em>${renderInline(input.slice(i + 1, end))}</em>`;
+					i = end + 1;
+					continue;
+				}
+			}
+			buf += ch;
+			i++;
 		}
-		onError(handler) {
-			this.errorHandlers.add(handler);
-			return () => this.errorHandlers.delete(handler);
+		flush();
+		return out;
+	}
+	/** Parse a `[text](href)` link starting at `start` (`input[start] === '['`). */
+	function linkAt(input, start) {
+		const close = matchBracket(input, start);
+		if (close < 0 || input[close + 1] !== "(") return null;
+		const paren = input.indexOf(")", close + 2);
+		if (paren < 0) return null;
+		return {
+			text: input.slice(start + 1, close),
+			href: input.slice(close + 2, paren).trim().split(/\s+/)[0] ?? "",
+			end: paren + 1
+		};
+	}
+	/** Parse a `![alt](src)` image starting at `start` (`input[start] === '!'`). */
+	function imageAt(input, start) {
+		const link = linkAt(input, start + 1);
+		if (!link) return null;
+		return {
+			alt: link.text,
+			end: link.end
+		};
+	}
+	/** Find the matching `]` for a `[` at `open`, honoring one level of nesting. */
+	function matchBracket(input, open) {
+		let depth = 0;
+		for (let i = open; i < input.length; i++) {
+			const c = input[i];
+			if (c === "[") depth++;
+			else if (c === "]") {
+				depth--;
+				if (depth === 0) return i;
+			}
 		}
-	};
-	//#endregion
-	//#region node_modules/.pnpm/@smooai+smooth-operator@1.8.0/node_modules/@smooai/smooth-operator/dist/types.js
-	/** Every server→client `type` discriminator value. */
-	const EVENT_TYPES = [
-		"immediate_response",
-		"eventual_response",
-		"stream_chunk",
-		"stream_token",
-		"keepalive",
-		"write_confirmation_required",
-		"otp_verification_required",
-		"otp_sent",
-		"otp_verified",
-		"otp_invalid",
-		"error",
-		"pong"
-	];
-	/** True if `frame` looks like any server event (has a known `type` discriminator). */
-	function isServerEvent(frame) {
-		return typeof frame === "object" && frame !== null && "type" in frame && typeof frame.type === "string" && EVENT_TYPES.includes(frame.type);
+		return -1;
 	}
-	//#endregion
-	//#region node_modules/.pnpm/@smooai+smooth-operator@1.8.0/node_modules/@smooai/smooth-operator/dist/client.js
+	const UL_RE = /^\s*[-*+]\s+(.*)$/;
+	const OL_RE = /^\s*\d+[.)]\s+(.*)$/;
+	const HEADING_RE = /^\s{0,3}(#{1,6})\s+(.*)$/;
+	const QUOTE_RE = /^\s*>\s?(.*)$/;
+	const FENCE_RE = /^\s*(`{3,}|~{3,})\s*(.*)$/;
 	/**
-	* SmoothAgentClient — a minimal, idiomatic, transport-agnostic client for the
-	* smooth-operator WebSocket protocol.
+	* Render a full Markdown string to safe HTML.
 	*
-	* Design goals
-	* ------------
-	*  - **Transport-agnostic.** The client never touches a real socket directly; it
-	*    talks to an injectable {@link Transport}. The default ({@link WebSocketTransport})
-	*    uses the global `WebSocket`, but tests inject a mock and Node can inject `ws`.
-	*  - **Request/response correlation by `requestId`.** Every action gets a generated
-	*    `requestId`; the client routes incoming events back to the originating call.
-	*  - **Streaming as an async iterator.** `sendMessage` returns a {@link MessageTurn}
-	*    that is both awaitable (resolves with the terminal `eventual_response`) and
-	*    async-iterable (yields each `stream_token` / `stream_chunk` / HITL event in
-	*    order). This models the `stream_token`/`stream_chunk` → `eventual_response`
-	*    flow without forcing a callback style on the caller.
-	*  - **No live server required.** Correctness is fully unit-testable with a mock
-	*    transport (see `test/client.test.ts`).
+	* @returns a string containing only the allowlisted tags described in the
+	* module doc. Safe to assign to `innerHTML` of a caller-owned element.
 	*/
-	let _Symbol$asyncIterator;
-	/** A timeout that yields no terminal event. */
-	var RequestTimeoutError = class extends Error {
-		constructor(requestId, ms) {
-			super(`Request ${requestId} timed out after ${ms}ms`);
-			this.name = "RequestTimeoutError";
+	function renderMarkdown(src) {
+		const lines = src.replace(/\r\n?/g, "\n").split("\n");
+		const out = [];
+		let i = 0;
+		while (i < lines.length) {
+			const line = lines[i];
+			const fence = FENCE_RE.exec(line);
+			if (fence) {
+				const marker = fence[1];
+				const body = [];
+				i++;
+				while (i < lines.length && !lines[i].trimStart().startsWith(marker)) {
+					body.push(lines[i]);
+					i++;
+				}
+				if (i < lines.length) i++;
+				out.push(`<pre><code>${escapeHtml(body.join("\n"))}</code></pre>`);
+				continue;
+			}
+			if (line.trim() === "") {
+				i++;
+				continue;
+			}
+			const heading = HEADING_RE.exec(line);
+			if (heading) {
+				out.push(`<p><strong>${renderInline(heading[2])}</strong></p>`);
+				i++;
+				continue;
+			}
+			if (UL_RE.test(line) || OL_RE.test(line)) {
+				const ordered = OL_RE.test(line) && !UL_RE.test(line);
+				const re = ordered ? OL_RE : UL_RE;
+				const items = [];
+				while (i < lines.length) {
+					const m = re.exec(lines[i]);
+					if (!m) break;
+					items.push(`<li>${renderInline(m[1])}</li>`);
+					i++;
+				}
+				out.push(`<${ordered ? "ol" : "ul"}>${items.join("")}</${ordered ? "ol" : "ul"}>`);
+				continue;
+			}
+			if (QUOTE_RE.test(line)) {
+				const quoted = [];
+				while (i < lines.length) {
+					const m = QUOTE_RE.exec(lines[i]);
+					if (!m) break;
+					quoted.push(m[1]);
+					i++;
+				}
+				out.push(`<blockquote>${renderInline(quoted.join("\n")).replace(/\n/g, "<br>")}</blockquote>`);
+				continue;
+			}
+			const para = [];
+			while (i < lines.length) {
+				const l = lines[i];
+				if (l.trim() === "" || FENCE_RE.test(l) || HEADING_RE.test(l) || UL_RE.test(l) || OL_RE.test(l) || QUOTE_RE.test(l)) break;
+				para.push(l);
+				i++;
+			}
+			out.push(`<p>${renderInline(para.join("\n")).replace(/\n/g, "<br>")}</p>`);
 		}
-	};
+		return out.join("");
+	}
+	const SNIPPET_MAX = 260;
 	/**
-	* A streaming turn that received no terminal `eventual_response` / `error` within the
-	* configured {@link SmoothAgentClientOptions.turnTimeout}. The turn rejects with this
-	* and its async iteration throws it, so a stuck server can never hang the caller.
+	* Clean a raw scraped citation snippet into a short, readable excerpt.
+	*
+	* Scraped chunks frequently begin with page boilerplate — a logo image wrapped
+	* in a link, standalone nav, repeated whitespace — e.g.
+	* `[![Logo](…)](…) # Our Work We build…`. The source itself is already linked
+	* from the citation card, so the snippet only needs to be a clean teaser.
+	*
+	* Steps:
+	*   1. Strip a leading image / logo-link (`[![…](…)](…)` or `![…](…)`).
+	*   2. Drop a leading standalone heading marker (`#`/`##`).
+	*   3. Collapse all runs of whitespace to single spaces.
+	*   4. Truncate to ~{@link SNIPPET_MAX} chars at a word boundary, adding `…`.
+	*
+	* The result is still rendered through {@link renderMarkdown} downstream, so any
+	* remaining inline markup (bold/links) stays safe.
 	*/
-	var TurnTimeoutError = class extends Error {
-		constructor(requestId, ms) {
-			super(`Turn ${requestId} timed out after ${ms}ms without a terminal response`);
-			_defineProperty(this, "requestId", void 0);
-			this.name = "TurnTimeoutError";
-			this.requestId = requestId;
+	function cleanCitationSnippet(raw) {
+		let s = raw ?? "";
+		let changed = true;
+		while (changed) {
+			changed = false;
+			const before = s;
+			s = s.replace(/^\s*\[!\[[^\]]*\]\([^)]*\)\]\([^)]*\)\s*/, "");
+			s = s.replace(/^\s*!\[[^\]]*\]\([^)]*\)\s*/, "");
+			s = s.replace(/^\s*#{1,6}\s+/, "");
+			if (s !== before) changed = true;
 		}
-	};
-	/** A protocol-level error event surfaced as a throwable. */
-	var ProtocolError = class extends Error {
-		constructor(code, message, requestId) {
-			super(message);
-			_defineProperty(this, "code", void 0);
-			_defineProperty(this, "requestId", void 0);
-			this.name = "ProtocolError";
-			this.code = code;
-			this.requestId = requestId;
+		s = s.replace(/\s+/g, " ").trim();
+		if (s.length > SNIPPET_MAX) {
+			const cut = s.slice(0, SNIPPET_MAX);
+			const lastSpace = cut.lastIndexOf(" ");
+			s = (lastSpace > SNIPPET_MAX * .6 ? cut.slice(0, lastSpace) : cut).trimEnd() + "…";
 		}
-	};
-	_Symbol$asyncIterator = Symbol.asyncIterator;
+		return s;
+	}
+	//#endregion
+	//#region src/config.ts
 	/**
-	* A streaming message turn. Await it for the terminal {@link EventualResponse},
-	* or async-iterate it to receive every intermediate event in arrival order.
+	* Public configuration surface for the chat widget.
 	*
-	* ```ts
-	* const turn = client.sendMessage({ sessionId, message: 'hi' });
-	* for await (const ev of turn) {
-	*   if (ev.type === 'stream_token') process.stdout.write(ev.token ?? '');
-	* }
-	* const final = await turn; // EventualResponse
-	* ```
+	* A host page configures the widget either declaratively (HTML attributes on the
+	* `<smooth-agent-chat>` element) or programmatically (passing this object to
+	* {@link mountChatWidget} / `element.configure(...)`).
 	*/
-	var MessageTurn = class {
-		constructor(requestId, onClose, turnTimeout = 0) {
-			_defineProperty(
-				this,
-				/** The requestId this turn is correlated on. */
-				"requestId",
-				void 0
-			);
-			_defineProperty(this, "queue", []);
-			_defineProperty(this, "waiter", null);
-			_defineProperty(this, "done", false);
-			_defineProperty(this, "finalEvent", null);
-			_defineProperty(this, "error", null);
-			_defineProperty(this, "settled", void 0);
-			_defineProperty(this, "settle", void 0);
-			_defineProperty(this, "fail", void 0);
-			_defineProperty(this, "onClose", void 0);
-			_defineProperty(this, "timeoutTimer", void 0);
-			this.requestId = requestId;
-			this.onClose = onClose;
-			this.settled = new Promise((resolve, reject) => {
-				this.settle = resolve;
-				this.fail = reject;
-			});
-			this.settled.catch(() => {});
-			if (turnTimeout > 0) this.timeoutTimer = setTimeout(() => {
-				this.finish(null, new TurnTimeoutError(this.requestId, turnTimeout));
-			}, turnTimeout);
-		}
-		/** Feed an event into the turn (called by the client's dispatcher). */
-		push(event) {
-			if (this.done) return;
-			if (event.type === "error") {
-				const code = event.data?.error?.code ?? "INTERNAL_ERROR";
-				const message = event.data?.error?.message ?? "Unknown protocol error";
-				this.deliver(event);
-				this.finish(null, new ProtocolError(code, message, this.requestId));
-				return;
+	/** Resolve a partial config against the built-in defaults. */
+	function resolveConfig(config) {
+		const theme = config.theme ?? {};
+		const primary = theme.primary ?? "#00a6a6";
+		const primaryText = theme.primaryText ?? "#f8fafc";
+		const assistantBubble = theme.chatBubbleInbound ?? theme.assistantBubble ?? "#06134b";
+		const assistantBubbleText = theme.chatBubbleInboundText ?? theme.assistantBubbleText ?? "#f8fafc";
+		const userBubble = theme.chatBubbleOutbound ?? theme.userBubble ?? primary;
+		const userBubbleText = theme.chatBubbleOutboundText ?? theme.userBubbleText ?? primaryText;
+		return {
+			endpoint: config.endpoint,
+			mode: config.mode ?? "popover",
+			agentId: config.agentId,
+			agentName: config.agentName ?? "Assistant",
+			logoUrl: safeHttpUrl(config.logoUrl) ?? void 0,
+			userName: config.userName,
+			userEmail: config.userEmail,
+			userPhone: config.userPhone,
+			authContext: config.authContext,
+			placeholder: config.placeholder ?? "Type a message…",
+			greeting: config.greeting ?? "Hi! How can I help you today?",
+			connectionErrorMessage: config.connectionErrorMessage ?? "We couldn't reach the chat. Please try again in a moment.",
+			startOpen: config.startOpen ?? false,
+			examplePrompts: (config.examplePrompts ?? []).filter((p) => p.trim().length > 0).slice(0, 5),
+			requireName: config.requireName ?? false,
+			requireEmail: config.requireEmail ?? false,
+			requirePhone: config.requirePhone ?? false,
+			collectPhone: config.collectPhone ?? true,
+			collectConsent: config.collectConsent ?? true,
+			allowChatRestore: config.allowChatRestore ?? true,
+			allowAnonymous: config.allowAnonymous ?? false,
+			theme: {
+				text: theme.text ?? "#f8fafc",
+				background: theme.background ?? "#040d30",
+				primary,
+				primaryText,
+				secondary: theme.secondary ?? "#ff6b6c",
+				assistantBubble,
+				assistantBubbleText,
+				userBubble,
+				userBubbleText,
+				border: theme.border ?? "rgba(255, 255, 255, 0.1)"
 			}
-			this.deliver(event);
-			if (event.type === "eventual_response") this.finish(event, null);
-		}
-		/** Force-close the turn (e.g. on disconnect) with an error. */
-		abort(err) {
-			if (this.done) return;
-			this.finish(null, err);
-		}
-		deliver(event) {
-			if (this.waiter) {
-				const w = this.waiter;
-				this.waiter = null;
-				w.resolve({
-					value: event,
-					done: false
-				});
-			} else this.queue.push(event);
+		};
+	}
+	/**
+	* Whether the pre-chat identity form should gate the conversation: at least one
+	* field is required and anonymous chat is not allowed.
+	*/
+	function needsUserInfo(resolved) {
+		return !resolved.allowAnonymous && (resolved.requireName || resolved.requireEmail || resolved.requirePhone);
+	}
+	//#endregion
+	//#region \0@oxc-project+runtime@0.134.0/helpers/esm/typeof.js
+	function _typeof(o) {
+		"@babel/helpers - typeof";
+		return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(o) {
+			return typeof o;
+		} : function(o) {
+			return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o;
+		}, _typeof(o);
+	}
+	//#endregion
+	//#region \0@oxc-project+runtime@0.134.0/helpers/esm/toPrimitive.js
+	function toPrimitive(t, r) {
+		if ("object" != _typeof(t) || !t) return t;
+		var e = t[Symbol.toPrimitive];
+		if (void 0 !== e) {
+			var i = e.call(t, r || "default");
+			if ("object" != _typeof(i)) return i;
+			throw new TypeError("@@toPrimitive must return a primitive value.");
 		}
-		finish(final, err) {
-			if (this.done) return;
-			this.done = true;
-			this.finalEvent = final;
-			this.error = err;
-			if (this.timeoutTimer) {
-				clearTimeout(this.timeoutTimer);
-				this.timeoutTimer = void 0;
+		return ("string" === r ? String : Number)(t);
+	}
+	//#endregion
+	//#region \0@oxc-project+runtime@0.134.0/helpers/esm/toPropertyKey.js
+	function toPropertyKey(t) {
+		var i = toPrimitive(t, "string");
+		return "symbol" == _typeof(i) ? i : i + "";
+	}
+	//#endregion
+	//#region \0@oxc-project+runtime@0.134.0/helpers/esm/defineProperty.js
+	function _defineProperty(e, r, t) {
+		return (r = toPropertyKey(r)) in e ? Object.defineProperty(e, r, {
+			value: t,
+			enumerable: !0,
+			configurable: !0,
+			writable: !0
+		}) : e[r] = t, e;
+	}
+	//#endregion
+	//#region node_modules/.pnpm/@smooai+smooth-operator@1.8.0/node_modules/@smooai/smooth-operator/dist/transport.js
+	/**
+	* Transport abstraction for the client.
+	*
+	* The client is deliberately decoupled from any concrete WebSocket implementation
+	* so it can be unit-tested with a mock and run on Node, the browser, or a custom
+	* socket. A transport is anything that can send a string frame and surface
+	* incoming string frames + lifecycle events.
+	*/
+	const WS_CONNECTING = 0;
+	const WS_OPEN = 1;
+	const WS_CLOSING = 2;
+	/** Default connect timeout (ms) for the WebSocket transport. */
+	const DEFAULT_CONNECT_TIMEOUT = 3e4;
+	/**
+	* Default transport backed by a `WebSocket`-like object. By default it uses the
+	* global `WebSocket`; pass a `factory` to inject one (e.g. the `ws` package on
+	* Node, or a mock in tests).
+	*/
+	var WebSocketTransport = class {
+		constructor(url, factory, connectTimeout = DEFAULT_CONNECT_TIMEOUT) {
+			_defineProperty(this, "socket", null);
+			_defineProperty(this, "url", void 0);
+			_defineProperty(this, "factory", void 0);
+			_defineProperty(this, "connectTimeout", void 0);
+			_defineProperty(this, "messageHandlers", /* @__PURE__ */ new Set());
+			_defineProperty(this, "closeHandlers", /* @__PURE__ */ new Set());
+			_defineProperty(this, "errorHandlers", /* @__PURE__ */ new Set());
+			this.url = url;
+			this.connectTimeout = connectTimeout;
+			if (factory) this.factory = factory;
+			else {
+				const G = globalThis;
+				if (!G.WebSocket) throw new Error("No global WebSocket available; pass a WebSocketFactory to WebSocketTransport.");
+				const Ctor = G.WebSocket;
+				this.factory = (u) => new Ctor(u);
 			}
-			this.onClose();
-			if (err) this.fail(err);
-			else if (final) this.settle(final);
-			if (this.waiter) {
-				const w = this.waiter;
-				this.waiter = null;
-				if (err) w.reject(err);
-				else w.resolve({
-					value: void 0,
-					done: true
-				});
+		}
+		get state() {
+			if (!this.socket) return "closed";
+			switch (this.socket.readyState) {
+				case WS_CONNECTING: return "connecting";
+				case WS_OPEN: return "open";
+				case WS_CLOSING: return "closing";
+				default: return "closed";
 			}
 		}
-		[_Symbol$asyncIterator]() {
-			return { next: () => {
-				if (this.queue.length > 0) return Promise.resolve({
-					value: this.queue.shift(),
-					done: false
-				});
-				if (this.done) {
-					if (this.error) return Promise.reject(this.error);
-					return Promise.resolve({
+		connect() {
+			if (this.socket && this.socket.readyState === WS_OPEN) return Promise.resolve();
+			if (this.socket && this.socket.readyState !== WS_OPEN) {
+				const stale = this.socket;
+				this.socket = null;
+				try {
+					stale.close();
+				} catch {}
+			}
+			return new Promise((resolve, reject) => {
+				const socket = this.factory(this.url);
+				this.socket = socket;
+				let settled = false;
+				const timer = this.connectTimeout > 0 ? setTimeout(() => {
+					if (settled) return;
+					settled = true;
+					if (this.socket === socket) this.socket = null;
+					try {
+						socket.close();
+					} catch {}
+					reject(/* @__PURE__ */ new Error(`WebSocket connect to ${this.url} timed out after ${this.connectTimeout}ms`));
+				}, this.connectTimeout) : void 0;
+				socket.addEventListener("open", () => {
+					if (this.socket !== socket) return;
+					if (settled) return;
+					settled = true;
+					if (timer) clearTimeout(timer);
+					resolve();
+				});
+				socket.addEventListener("error", (ev) => {
+					if (this.socket !== socket) return;
+					for (const h of this.errorHandlers) h(ev);
+					if (!settled && this.state !== "open") {
+						settled = true;
+						if (timer) clearTimeout(timer);
+						if (this.socket === socket) this.socket = null;
+						try {
+							socket.close();
+						} catch {}
+						reject(ev instanceof Error ? ev : /* @__PURE__ */ new Error("WebSocket connection error"));
+					}
+				});
+				socket.addEventListener("close", (ev) => {
+					if (this.socket !== socket) return;
+					if (timer) clearTimeout(timer);
+					for (const h of this.closeHandlers) h({
+						code: ev.code,
+						reason: ev.reason
+					});
+				});
+				socket.addEventListener("message", (ev) => {
+					if (this.socket !== socket) return;
+					const data = typeof ev.data === "string" ? ev.data : String(ev.data);
+					for (const h of this.messageHandlers) h(data);
+				});
+			});
+		}
+		send(data) {
+			if (!this.socket || this.socket.readyState !== WS_OPEN) throw new Error(`Cannot send: transport is "${this.state}"`);
+			this.socket.send(data);
+		}
+		close(code, reason) {
+			this.socket?.close(code, reason);
+		}
+		onMessage(handler) {
+			this.messageHandlers.add(handler);
+			return () => this.messageHandlers.delete(handler);
+		}
+		onClose(handler) {
+			this.closeHandlers.add(handler);
+			return () => this.closeHandlers.delete(handler);
+		}
+		onError(handler) {
+			this.errorHandlers.add(handler);
+			return () => this.errorHandlers.delete(handler);
+		}
+	};
+	//#endregion
+	//#region node_modules/.pnpm/@smooai+smooth-operator@1.8.0/node_modules/@smooai/smooth-operator/dist/types.js
+	/** Every server→client `type` discriminator value. */
+	const EVENT_TYPES = [
+		"immediate_response",
+		"eventual_response",
+		"stream_chunk",
+		"stream_token",
+		"keepalive",
+		"write_confirmation_required",
+		"otp_verification_required",
+		"otp_sent",
+		"otp_verified",
+		"otp_invalid",
+		"error",
+		"pong"
+	];
+	/** True if `frame` looks like any server event (has a known `type` discriminator). */
+	function isServerEvent(frame) {
+		return typeof frame === "object" && frame !== null && "type" in frame && typeof frame.type === "string" && EVENT_TYPES.includes(frame.type);
+	}
+	//#endregion
+	//#region node_modules/.pnpm/@smooai+smooth-operator@1.8.0/node_modules/@smooai/smooth-operator/dist/client.js
+	/**
+	* SmoothAgentClient — a minimal, idiomatic, transport-agnostic client for the
+	* smooth-operator WebSocket protocol.
+	*
+	* Design goals
+	* ------------
+	*  - **Transport-agnostic.** The client never touches a real socket directly; it
+	*    talks to an injectable {@link Transport}. The default ({@link WebSocketTransport})
+	*    uses the global `WebSocket`, but tests inject a mock and Node can inject `ws`.
+	*  - **Request/response correlation by `requestId`.** Every action gets a generated
+	*    `requestId`; the client routes incoming events back to the originating call.
+	*  - **Streaming as an async iterator.** `sendMessage` returns a {@link MessageTurn}
+	*    that is both awaitable (resolves with the terminal `eventual_response`) and
+	*    async-iterable (yields each `stream_token` / `stream_chunk` / HITL event in
+	*    order). This models the `stream_token`/`stream_chunk` → `eventual_response`
+	*    flow without forcing a callback style on the caller.
+	*  - **No live server required.** Correctness is fully unit-testable with a mock
+	*    transport (see `test/client.test.ts`).
+	*/
+	let _Symbol$asyncIterator;
+	/** A timeout that yields no terminal event. */
+	var RequestTimeoutError = class extends Error {
+		constructor(requestId, ms) {
+			super(`Request ${requestId} timed out after ${ms}ms`);
+			this.name = "RequestTimeoutError";
+		}
+	};
+	/**
+	* A streaming turn that received no terminal `eventual_response` / `error` within the
+	* configured {@link SmoothAgentClientOptions.turnTimeout}. The turn rejects with this
+	* and its async iteration throws it, so a stuck server can never hang the caller.
+	*/
+	var TurnTimeoutError = class extends Error {
+		constructor(requestId, ms) {
+			super(`Turn ${requestId} timed out after ${ms}ms without a terminal response`);
+			_defineProperty(this, "requestId", void 0);
+			this.name = "TurnTimeoutError";
+			this.requestId = requestId;
+		}
+	};
+	/** A protocol-level error event surfaced as a throwable. */
+	var ProtocolError = class extends Error {
+		constructor(code, message, requestId) {
+			super(message);
+			_defineProperty(this, "code", void 0);
+			_defineProperty(this, "requestId", void 0);
+			this.name = "ProtocolError";
+			this.code = code;
+			this.requestId = requestId;
+		}
+	};
+	_Symbol$asyncIterator = Symbol.asyncIterator;
+	/**
+	* A streaming message turn. Await it for the terminal {@link EventualResponse},
+	* or async-iterate it to receive every intermediate event in arrival order.
+	*
+	* ```ts
+	* const turn = client.sendMessage({ sessionId, message: 'hi' });
+	* for await (const ev of turn) {
+	*   if (ev.type === 'stream_token') process.stdout.write(ev.token ?? '');
+	* }
+	* const final = await turn; // EventualResponse
+	* ```
+	*/
+	var MessageTurn = class {
+		constructor(requestId, onClose, turnTimeout = 0) {
+			_defineProperty(
+				this,
+				/** The requestId this turn is correlated on. */
+				"requestId",
+				void 0
+			);
+			_defineProperty(this, "queue", []);
+			_defineProperty(this, "waiter", null);
+			_defineProperty(this, "done", false);
+			_defineProperty(this, "finalEvent", null);
+			_defineProperty(this, "error", null);
+			_defineProperty(this, "settled", void 0);
+			_defineProperty(this, "settle", void 0);
+			_defineProperty(this, "fail", void 0);
+			_defineProperty(this, "onClose", void 0);
+			_defineProperty(this, "timeoutTimer", void 0);
+			this.requestId = requestId;
+			this.onClose = onClose;
+			this.settled = new Promise((resolve, reject) => {
+				this.settle = resolve;
+				this.fail = reject;
+			});
+			this.settled.catch(() => {});
+			if (turnTimeout > 0) this.timeoutTimer = setTimeout(() => {
+				this.finish(null, new TurnTimeoutError(this.requestId, turnTimeout));
+			}, turnTimeout);
+		}
+		/** Feed an event into the turn (called by the client's dispatcher). */
+		push(event) {
+			if (this.done) return;
+			if (event.type === "error") {
+				const code = event.data?.error?.code ?? "INTERNAL_ERROR";
+				const message = event.data?.error?.message ?? "Unknown protocol error";
+				this.deliver(event);
+				this.finish(null, new ProtocolError(code, message, this.requestId));
+				return;
+			}
+			this.deliver(event);
+			if (event.type === "eventual_response") this.finish(event, null);
+		}
+		/** Force-close the turn (e.g. on disconnect) with an error. */
+		abort(err) {
+			if (this.done) return;
+			this.finish(null, err);
+		}
+		deliver(event) {
+			if (this.waiter) {
+				const w = this.waiter;
+				this.waiter = null;
+				w.resolve({
+					value: event,
+					done: false
+				});
+			} else this.queue.push(event);
+		}
+		finish(final, err) {
+			if (this.done) return;
+			this.done = true;
+			this.finalEvent = final;
+			this.error = err;
+			if (this.timeoutTimer) {
+				clearTimeout(this.timeoutTimer);
+				this.timeoutTimer = void 0;
+			}
+			this.onClose();
+			if (err) this.fail(err);
+			else if (final) this.settle(final);
+			if (this.waiter) {
+				const w = this.waiter;
+				this.waiter = null;
+				if (err) w.reject(err);
+				else w.resolve({
+					value: void 0,
+					done: true
+				});
+			}
+		}
+		[_Symbol$asyncIterator]() {
+			return { next: () => {
+				if (this.queue.length > 0) return Promise.resolve({
+					value: this.queue.shift(),
+					done: false
+				});
+				if (this.done) {
+					if (this.error) return Promise.reject(this.error);
+					return Promise.resolve({
 						value: void 0,
 						done: true
 					});
@@ -12986,492 +13293,187 @@ var SmoothAgentChat = (function(exports) {
 					});
 					break;
 				case "write_confirmation_required":
-					this.setInterrupt({
-						kind: "confirm",
-						toolId: str(inner.toolId),
-						actionDescription: str(inner.actionDescription)
-					});
-					break;
-				default: break;
-			}
-		}
-		/**
-		* Begin the cross-device restore: POST `/internal/identity/request-otp` for
-		* `email` over `channel`. The view collects the email via an explicit affordance.
-		*/
-		async requestIdentityOtp(email, channel = "email") {
-			const trimmed = email.trim();
-			if (!trimmed) return;
-			this.setIdentityRestore({
-				phase: "requesting",
-				email: trimmed,
-				channel
-			});
-			if (!this.sessionId) try {
-				await this.connect();
-			} catch {}
-			if (!this.sessionId) {
-				this.setIdentityRestore({
-					phase: "error",
-					message: "No active session to verify against."
-				});
-				return;
-			}
-			try {
-				const json = await this.postInternal("/internal/identity/request-otp", {
-					sessionId: this.sessionId,
-					email: trimmed,
-					channel
-				});
-				const masked = typeof json.maskedDestination === "string" ? json.maskedDestination : void 0;
-				this.setIdentityRestore({
-					phase: "awaiting_code",
-					email: trimmed,
-					channel,
-					maskedDestination: masked
-				});
-			} catch (err) {
-				this.setIdentityRestore({
-					phase: "error",
-					message: err instanceof Error ? err.message : "Could not send a verification code."
-				});
-			}
-		}
-		/** Submit the code: POST `/internal/identity/verify-otp`, then resolve on success. */
-		async verifyIdentityOtp(code) {
-			const state = this.identityRestore;
-			const trimmed = code.trim();
-			if (!trimmed || state.phase !== "awaiting_code") return;
-			const { email, channel } = state;
-			if (!this.sessionId) {
-				this.setIdentityRestore({
-					phase: "error",
-					message: "No active session to verify against."
-				});
-				return;
-			}
-			this.setIdentityRestore({
-				phase: "verifying",
-				email,
-				channel
-			});
-			try {
-				const json = await this.postInternal("/internal/identity/verify-otp", {
-					sessionId: this.sessionId,
-					email,
-					code: trimmed
-				});
-				if (json.event === "otp_verified") {
-					this.store.getState().setVerifiedEmail(email, this.sessionId);
-					await this.resolveIdentity(email);
-				} else if (json.event === "otp_invalid") {
-					const remaining = typeof json.attemptsRemaining === "number" ? json.attemptsRemaining : void 0;
-					this.setIdentityRestore({
-						phase: "awaiting_code",
-						email,
-						channel,
-						error: "That code was incorrect.",
-						attemptsRemaining: remaining
-					});
-				} else this.setIdentityRestore({
-					phase: "error",
-					message: "Verification failed."
-				});
-			} catch (err) {
-				this.setIdentityRestore({
-					phase: "error",
-					message: err instanceof Error ? err.message : "Verification failed."
-				});
-			}
-		}
-		/** Resolve the verified identity → restorable conversations via POST `/internal/identity/resolve`. */
-		async resolveIdentity(email) {
-			if (!this.sessionId) return;
-			this.setIdentityRestore({
-				phase: "resolving",
-				email
-			});
-			try {
-				const json = await this.postInternal("/internal/identity/resolve", {
-					sessionId: this.sessionId,
-					email
-				});
-				if (json.resolved !== true) {
-					this.setIdentityRestore({
-						phase: "resolved",
-						email,
-						conversations: []
-					});
-					return;
-				}
-				const raw = json.conversations;
-				const conversations = Array.isArray(raw) ? raw.map((c) => {
-					if (!c || typeof c !== "object") return null;
-					const o = c;
-					const conversationId = typeof o.conversationId === "string" ? o.conversationId : "";
-					const sessionId = typeof o.sessionId === "string" ? o.sessionId : "";
-					if (!sessionId) return null;
-					return {
-						conversationId,
-						sessionId,
-						lastActivityAt: typeof o.lastActivityAt === "string" ? o.lastActivityAt : void 0,
-						preview: typeof o.preview === "string" ? o.preview : void 0
-					};
-				}).filter((c) => c !== null) : [];
-				this.setIdentityRestore({
-					phase: "resolved",
-					email,
-					conversations
-				});
-			} catch (err) {
-				this.setIdentityRestore({
-					phase: "error",
-					message: err instanceof Error ? err.message : "Could not load your chats."
-				});
-			}
-		}
-		/**
-		* Replay a chosen restorable conversation: point the live session at its
-		* sessionId, hydrate its transcript (get_session + get_messages), and persist
-		* the new pointer so the next `sendMessage` continues it.
-		*/
-		async restoreConversation(sessionId) {
-			if (!this.client) await this.ensureClient();
-			const proven = this.sessionId ? this.verifiedEmailForSession(this.sessionId) : null;
-			if (await this.tryResume(sessionId)) {
-				this.store.getState().setSessionId(sessionId);
-				if (proven) this.store.getState().setVerifiedEmail(proven, sessionId);
-				this.setIdentityRestore({ phase: "idle" });
-				this.setStatus("ready");
-			} else this.setIdentityRestore({
-				phase: "error",
-				message: "That conversation is no longer available."
-			});
-		}
-		/** Dismiss the cross-device restore panel. */
-		cancelIdentityRestore() {
-			this.setIdentityRestore({ phase: "idle" });
-		}
-		/** Tear down the underlying client. */
-		disconnect() {
-			this.client?.disconnect("widget closed");
-			this.client = null;
-			this.sessionId = null;
-			this.activeRequestId = null;
-			this.resumeAttempted = false;
-			this.setInterrupt(null);
-			this.setStatus("closed");
-		}
-	};
-	//#endregion
-	//#region src/logo.ts
-	/**
-	* The Smooth logo, inlined as an SVG string so the full-page header can render
-	* it without a separate network fetch (the IIFE bundle is self-contained).
-	*
-	* GENERATED from `assets/smooth-logo.svg` — do not edit by hand. Regenerate with:
-	*   node -e ...  (see the commit that added this file)
-	*/
-	const SMOOTH_LOGO_SVG = "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<svg id=\"Layer_1\" data-name=\"Layer 1\" xmlns=\"http://www.w3.org/2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\" viewBox=\"0 0 550 135\">\n  <defs>\n    <style>\n      .cls-1 {\n        fill: url(#linear-gradient-3);\n      }\n\n      .cls-2 {\n        fill: url(#linear-gradient-2);\n      }\n\n      .cls-3 {\n        fill: url(#linear-gradient);\n        fill-rule: evenodd;\n      }\n    </style>\n    <linearGradient id=\"linear-gradient\" x1=\"115.59\" y1=\"112.81\" x2=\"25.08\" y2=\"22.3\" gradientUnits=\"userSpaceOnUse\">\n      <stop offset=\".3\" stop-color=\"#f49f0a\"/>\n      <stop offset=\".79\" stop-color=\"#fb7a4d\"/>\n      <stop offset=\"1\" stop-color=\"#ff6b6c\"/>\n    </linearGradient>\n    <linearGradient id=\"linear-gradient-2\" x1=\"360.91\" y1=\"152.01\" x2=\"202.32\" y2=\"-6.59\" xlink:href=\"#linear-gradient\"/>\n    <linearGradient id=\"linear-gradient-3\" x1=\"443.91\" y1=\"30.15\" x2=\"531.36\" y2=\"117.59\" gradientUnits=\"userSpaceOnUse\">\n      <stop offset=\".43\" stop-color=\"#00a6a6\"/>\n      <stop offset=\"1\" stop-color=\"#1238dd\"/>\n    </linearGradient>\n  </defs>\n  <path class=\"cls-3\" d=\"M48.28,14.96c-12.39,5.21-22.54,14.64-28.65,26.61-6.12,11.97-7.8,25.72-4.77,38.81,3.04,13.09,10.6,24.69,21.36,32.75,10.76,8.06,24.02,12.05,37.44,11.28,13.42-.77,26.13-6.26,35.9-15.5,9.76-9.24,15.95-21.63,17.46-34.99,1.51-13.36-1.74-26.82-9.19-38.01-1.07-1.61-.64-3.78.97-4.85,1.61-1.07,3.78-.64,4.85.97,8.36,12.56,12.02,27.68,10.32,42.67-1.7,15-8.64,28.91-19.61,39.28-10.96,10.37-25.24,16.54-40.31,17.4-15.07.87-29.96-3.62-42.04-12.66-12.08-9.05-20.58-22.07-23.99-36.77-3.41-14.7-1.51-30.14,5.35-43.58,6.87-13.44,18.26-24.02,32.17-29.87,13.91-5.85,29.44-6.6,43.85-2.11,1.85.57,2.88,2.54,2.3,4.38-.57,1.85-2.54,2.88-4.38,2.3-12.83-4-26.67-3.33-39.06,1.88ZM111.39,19.75c0,2.07-1.68,3.75-3.75,3.75s-3.75-1.68-3.75-3.75,1.68-3.75,3.75-3.75,3.75,1.68,3.75,3.75ZM64.64,59.93c0,1.91,2.39,2.56,7.69,3.88,3.89.97,6.6,2.18,8.15,3.63,1.53,1.45,2.29,3.53,2.29,6.25,0,3.57-1.03,6.26-3.11,8.08-2.07,1.82-5.09,2.73-9.09,2.73h-9.6c-1.97,0-3.57-1.6-3.59-3.57-.01-1.99,1.6-3.61,3.59-3.61h9.41c3.15-.12,4.79-.95,4.91-2.47,0-1.3-1.03-2.21-3.07-2.73-6.91-1.72-11.11-3.44-12.6-5.15-1.48-1.71-2.23-3.77-2.23-6.19,0-6.59,3.2-9.85,9.59-9.8h10.77c1.99,0,3.6,1.61,3.6,3.59s-1.61,3.59-3.6,3.59h-9.69c-1.83,0-3.43.06-3.43,1.77Z\"/>\n  <path class=\"cls-2\" d=\"M205.52,48.44h-8.86c-.44-3.75-2.23-6.65-5.38-8.72-3.16-2.07-7.03-3.1-11.6-3.1h0c-3.35,0-6.27.54-8.78,1.62-2.49,1.09-4.44,2.59-5.84,4.48-1.39,1.89-2.08,4.05-2.08,6.46h0c0,2.01.49,3.75,1.46,5.2.97,1.44,2.22,2.63,3.74,3.58,1.53.95,3.13,1.72,4.8,2.32,1.68.6,3.22,1.09,4.62,1.46h0l7.68,2.06c1.97.52,4.17,1.23,6.6,2.14,2.43.92,4.75,2.16,6.98,3.72,2.23,1.56,4.07,3.56,5.52,6,1.45,2.44,2.18,5.43,2.18,8.98h0c0,4.08-1.07,7.77-3.2,11.08-2.12,3.29-5.22,5.91-9.3,7.86-4.08,1.95-9.02,2.92-14.82,2.92h0c-5.43,0-10.11-.87-14.06-2.62-3.95-1.75-7.05-4.19-9.3-7.32-2.25-3.12-3.53-6.75-3.84-10.88h9.46c.25,2.85,1.22,5.21,2.9,7.06,1.69,1.87,3.83,3.25,6.42,4.14,2.6.89,5.41,1.34,8.42,1.34h0c3.49,0,6.63-.57,9.4-1.72,2.79-1.13,4.99-2.73,6.62-4.8,1.63-2.05,2.44-4.46,2.44-7.22h0c0-2.51-.7-4.55-2.1-6.12-1.41-1.57-3.26-2.85-5.54-3.84-2.29-.99-4.77-1.85-7.44-2.58h0l-9.3-2.66c-5.91-1.71-10.59-4.13-14.04-7.28-3.44-3.16-5.16-7.29-5.16-12.38h0c0-4.23,1.15-7.93,3.46-11.1,2.29-3.16,5.39-5.62,9.3-7.38,3.91-1.76,8.27-2.64,13.08-2.64h0c4.88,0,9.21.87,13,2.6,3.8,1.73,6.81,4.11,9.04,7.12,2.23,3,3.4,6.41,3.52,10.22h0ZM229.16,105.18h-8.72v-56.74h8.42v8.86h.74c1.19-3.03,3.1-5.38,5.74-7.06,2.63-1.69,5.79-2.54,9.48-2.54h0c3.75,0,6.87.85,9.36,2.54,2.51,1.68,4.46,4.03,5.86,7.06h.58c1.45-2.92,3.63-5.25,6.54-7,2.91-1.73,6.39-2.6,10.46-2.6h0c5.07,0,9.21,1.58,12.44,4.74,3.23,3.17,4.84,8.09,4.84,14.76h0v37.98h-8.72v-37.98c0-4.19-1.14-7.18-3.42-8.98-2.29-1.79-4.99-2.68-8.1-2.68h0c-3.99,0-7.07,1.2-9.26,3.6-2.2,2.4-3.3,5.43-3.3,9.1h0v36.94h-8.86v-38.86c0-3.23-1.05-5.83-3.14-7.82-2.09-1.97-4.79-2.96-8.08-2.96h0c-2.27,0-4.38.6-6.34,1.8-1.96,1.21-3.53,2.88-4.72,5-1.2,2.13-1.8,4.59-1.8,7.38h0v35.46ZM333.9,106.36h0c-5.12,0-9.61-1.22-13.46-3.66-3.85-2.44-6.86-5.85-9.02-10.24-2.15-4.37-3.22-9.49-3.22-15.36h0c0-5.91,1.07-11.07,3.22-15.48,2.16-4.4,5.17-7.82,9.02-10.26,3.85-2.44,8.34-3.66,13.46-3.66h0c5.12,0,9.61,1.22,13.46,3.66,3.85,2.44,6.86,5.86,9.02,10.26,2.15,4.41,3.22,9.57,3.22,15.48h0c0,5.87-1.07,10.99-3.22,15.36-2.16,4.39-5.17,7.8-9.02,10.24-3.85,2.44-8.34,3.66-13.46,3.66ZM333.9,98.52h0c3.89,0,7.09-.99,9.6-2.98,2.52-2,4.38-4.63,5.58-7.88,1.21-3.25,1.82-6.77,1.82-10.56h0c0-3.79-.61-7.32-1.82-10.6-1.2-3.27-3.06-5.91-5.58-7.94-2.51-2.01-5.71-3.02-9.6-3.02h0c-3.89,0-7.09,1.01-9.6,3.02-2.51,2.03-4.37,4.67-5.58,7.94-1.2,3.28-1.8,6.81-1.8,10.6h0c0,3.79.6,7.31,1.8,10.56,1.21,3.25,3.07,5.88,5.58,7.88,2.51,1.99,5.71,2.98,9.6,2.98ZM395.94,106.36h0c-5.12,0-9.61-1.22-13.46-3.66-3.85-2.44-6.85-5.85-9-10.24-2.16-4.37-3.24-9.49-3.24-15.36h0c0-5.91,1.08-11.07,3.24-15.48,2.15-4.4,5.15-7.82,9-10.26,3.85-2.44,8.34-3.66,13.46-3.66h0c5.12,0,9.61,1.22,13.46,3.66,3.85,2.44,6.86,5.86,9.02,10.26,2.16,4.41,3.24,9.57,3.24,15.48h0c0,5.87-1.08,10.99-3.24,15.36-2.16,4.39-5.17,7.8-9.02,10.24-3.85,2.44-8.34,3.66-13.46,3.66ZM395.94,98.52h0c3.89,0,7.09-.99,9.6-2.98,2.52-2,4.38-4.63,5.58-7.88,1.21-3.25,1.82-6.77,1.82-10.56h0c0-3.79-.61-7.32-1.82-10.6-1.2-3.27-3.06-5.91-5.58-7.94-2.51-2.01-5.71-3.02-9.6-3.02h0c-3.88,0-7.08,1.01-9.6,3.02-2.51,2.03-4.37,4.67-5.58,7.94-1.2,3.28-1.8,6.81-1.8,10.6h0c0,3.79.6,7.31,1.8,10.56,1.21,3.25,3.07,5.88,5.58,7.88,2.52,1.99,5.72,2.98,9.6,2.98Z\"/>\n  <path class=\"cls-1\" d=\"M467.88,48.02v13.28h-35.79v-13.28h35.79ZM439.68,34.38h17.89v53.42c0,1.5.36,2.62,1.08,3.36.72.74,1.88,1.1,3.49,1.1.62,0,1.48-.07,2.59-.21,1.11-.14,1.91-.27,2.38-.41l2.31,13.02c-2.02.58-3.97.97-5.84,1.18-1.88.21-3.66.31-5.33.31-6.08,0-10.7-1.43-13.84-4.28-3.15-2.85-4.72-7.01-4.72-12.48v-55.01ZM506.59,72.63v32.71h-17.89V28.95h17.53v33.53h-1.13c1.4-4.55,3.6-8.21,6.59-11,2.99-2.79,7.01-4.18,12.07-4.18,4,0,7.48.89,10.46,2.67,2.97,1.78,5.28,4.29,6.92,7.54,1.64,3.25,2.46,7.02,2.46,11.33v36.5h-17.89v-33.02c0-3.21-.82-5.73-2.46-7.56-1.64-1.83-3.93-2.74-6.87-2.74-1.92,0-3.62.42-5.1,1.26-1.49.84-2.64,2.04-3.46,3.61-.82,1.57-1.23,3.49-1.23,5.74Z\"/>\n</svg>";
-	//#endregion
-	//#region src/markdown.ts
-	/**
-	* A tiny, safe-by-default Markdown → HTML renderer for the chat widget.
-	*
-	* ## Why a hand-rolled renderer (and not markdown-it / snarkdown)?
-	*
-	* The widget renders **untrusted** text in two places: the assistant's reply
-	* (LLM output, which can echo attacker-supplied content) and citation snippets
-	* (raw scraped page chunks). Today both are written via `textContent`, so
-	* `**bold**`, numbered lists, and `[links](url)` show up literally. We want
-	* them rendered — without re-opening the XSS hole that `textContent` was
-	* guarding against.
-	*
-	* markdown-it with `html:false` is safe-by-default but ships ~30 kB min into
-	* what is an embeddable **global** bundle, where every kilobyte is on the host
-	* page's critical path. snarkdown is ~1 kB but emits raw HTML, so it would
-	* require bolting on a separate sanitizer. Instead, this renderer is
-	* **safe-by-construction**:
-	*
-	*   1. It is a *tokenizer*, not an HTML passthrough. It only ever emits a
-	*      fixed allowlist of tags (`p`, `br`, `strong`, `em`, `ul`/`ol`/`li`,
-	*      `code`/`pre`, `a`, `blockquote`). There is no code path that copies a
-	*      tag out of the input — a literal `<script>` in the input is treated as
-	*      plain text.
-	*   2. **Every** text run is HTML-escaped via {@link escapeHtml} before it
-	*      reaches the output. Raw `<`, `>`, `&`, `"`, `'` can never become markup.
-	*   3. **Images are dropped entirely** — `![alt](src)` renders as its alt text,
-	*      no `<img>` is ever produced (a scraped tracking pixel must not load).
-	*   4. **Links** are gated through {@link safeHttpUrl}: only absolute `http(s)`
-	*      URLs become anchors (with `target="_blank"` + a hardened `rel`);
-	*      `javascript:`/`data:`/relative/etc. fall back to plain (escaped) text.
-	*   5. **Headings** (`#`..`######`) are *downgraded* to bold lines — a full
-	*      `<h1>` is far too large inside a chat bubble or citation card.
-	*
-	* The output is a string of HTML that is only ever assigned to `innerHTML` of
-	* an element the caller controls; because of (1)–(4) it can only contain the
-	* allowlisted, attribute-sanitized tags.
-	*
-	* Supported subset (deliberately small):
-	*   - Paragraphs (blank-line separated) and hard/soft line breaks
-	*   - `**bold**` / `__bold__`, `*italic*` / `_italic_`
-	*   - `` `inline code` `` and fenced ``` ```code blocks``` ```
-	*   - `- ` / `* ` / `+ ` unordered lists, `1.` ordered lists
-	*   - `> ` blockquotes
-	*   - `[text](http(s)://url)` links (images dropped to alt text)
-	*   - `#`..`######` headings → bold line
-	*/
-	/** Escape the five HTML-significant characters so a text run can never be markup. */
-	function escapeHtml(value) {
-		return value.replace(/[&<>"']/g, (c) => {
-			switch (c) {
-				case "&": return "&amp;";
-				case "<": return "&lt;";
-				case ">": return "&gt;";
-				case "\"": return "&quot;";
-				default: return "&#39;";
-			}
-		});
-	}
-	/**
-	* Return `url` only if it is a valid absolute `http(s)` URL, else `null`.
-	*
-	* SECURITY: link targets here originate from untrusted content (LLM output /
-	* scraped citation chunks). Allowing an arbitrary string as an `href` permits
-	* `javascript:`/`data:`/`vbscript:` URLs that execute on click — a stored-XSS
-	* vector. Only absolute http(s) links are rendered as anchors; anything else
-	* falls back to plain text upstream.
-	*/
-	function safeHttpUrl(url) {
-		if (!url) return null;
-		try {
-			const parsed = new URL(url);
-			return parsed.protocol === "http:" || parsed.protocol === "https:" ? parsed.href : null;
-		} catch {
-			return null;
-		}
-	}
-	/**
-	* Render the inline span grammar of a single line/segment to safe HTML.
-	*
-	* Order matters: code spans are extracted first (their contents are *not*
-	* further parsed), then images are stripped to alt text, then links, then
-	* emphasis. Every literal text run is escaped on the way out.
-	*/
-	function renderInline(input) {
-		let out = "";
-		let i = 0;
-		const n = input.length;
-		let buf = "";
-		const flush = () => {
-			if (buf) {
-				out += escapeHtml(buf);
-				buf = "";
-			}
-		};
-		while (i < n) {
-			const ch = input[i];
-			if (ch === "`") {
-				const end = input.indexOf("`", i + 1);
-				if (end > i) {
-					flush();
-					out += `<code>${escapeHtml(input.slice(i + 1, end))}</code>`;
-					i = end + 1;
-					continue;
-				}
-			}
-			if (ch === "!" && input[i + 1] === "[") {
-				const m = imageAt(input, i);
-				if (m) {
-					flush();
-					out += renderInline(m.alt);
-					i = m.end;
-					continue;
-				}
-			}
-			if (ch === "[") {
-				const m = linkAt(input, i);
-				if (m) {
-					flush();
-					const safe = safeHttpUrl(m.href);
-					const inner = renderInline(m.text);
-					if (safe) out += `<a href="${escapeHtml(safe)}" target="_blank" rel="noopener noreferrer nofollow">${inner}</a>`;
-					else out += inner;
-					i = m.end;
-					continue;
-				}
-			}
-			if (ch === "*" && input[i + 1] === "*" || ch === "_" && input[i + 1] === "_") {
-				const marker = ch + ch;
-				const end = input.indexOf(marker, i + 2);
-				if (end > i + 1) {
-					flush();
-					out += `<strong>${renderInline(input.slice(i + 2, end))}</strong>`;
-					i = end + 2;
-					continue;
-				}
-			}
-			if (ch === "*" || ch === "_") {
-				const end = input.indexOf(ch, i + 1);
-				if (end > i + 1 && input[i + 1] !== ch) {
-					flush();
-					out += `<em>${renderInline(input.slice(i + 1, end))}</em>`;
-					i = end + 1;
-					continue;
-				}
-			}
-			buf += ch;
-			i++;
-		}
-		flush();
-		return out;
-	}
-	/** Parse a `[text](href)` link starting at `start` (`input[start] === '['`). */
-	function linkAt(input, start) {
-		const close = matchBracket(input, start);
-		if (close < 0 || input[close + 1] !== "(") return null;
-		const paren = input.indexOf(")", close + 2);
-		if (paren < 0) return null;
-		return {
-			text: input.slice(start + 1, close),
-			href: input.slice(close + 2, paren).trim().split(/\s+/)[0] ?? "",
-			end: paren + 1
-		};
-	}
-	/** Parse a `![alt](src)` image starting at `start` (`input[start] === '!'`). */
-	function imageAt(input, start) {
-		const link = linkAt(input, start + 1);
-		if (!link) return null;
-		return {
-			alt: link.text,
-			end: link.end
-		};
-	}
-	/** Find the matching `]` for a `[` at `open`, honoring one level of nesting. */
-	function matchBracket(input, open) {
-		let depth = 0;
-		for (let i = open; i < input.length; i++) {
-			const c = input[i];
-			if (c === "[") depth++;
-			else if (c === "]") {
-				depth--;
-				if (depth === 0) return i;
-			}
-		}
-		return -1;
-	}
-	const UL_RE = /^\s*[-*+]\s+(.*)$/;
-	const OL_RE = /^\s*\d+[.)]\s+(.*)$/;
-	const HEADING_RE = /^\s{0,3}(#{1,6})\s+(.*)$/;
-	const QUOTE_RE = /^\s*>\s?(.*)$/;
-	const FENCE_RE = /^\s*(`{3,}|~{3,})\s*(.*)$/;
-	/**
-	* Render a full Markdown string to safe HTML.
-	*
-	* @returns a string containing only the allowlisted tags described in the
-	* module doc. Safe to assign to `innerHTML` of a caller-owned element.
-	*/
-	function renderMarkdown(src) {
-		const lines = src.replace(/\r\n?/g, "\n").split("\n");
-		const out = [];
-		let i = 0;
-		while (i < lines.length) {
-			const line = lines[i];
-			const fence = FENCE_RE.exec(line);
-			if (fence) {
-				const marker = fence[1];
-				const body = [];
-				i++;
-				while (i < lines.length && !lines[i].trimStart().startsWith(marker)) {
-					body.push(lines[i]);
-					i++;
-				}
-				if (i < lines.length) i++;
-				out.push(`<pre><code>${escapeHtml(body.join("\n"))}</code></pre>`);
-				continue;
+					this.setInterrupt({
+						kind: "confirm",
+						toolId: str(inner.toolId),
+						actionDescription: str(inner.actionDescription)
+					});
+					break;
+				default: break;
 			}
-			if (line.trim() === "") {
-				i++;
-				continue;
+		}
+		/**
+		* Begin the cross-device restore: POST `/internal/identity/request-otp` for
+		* `email` over `channel`. The view collects the email via an explicit affordance.
+		*/
+		async requestIdentityOtp(email, channel = "email") {
+			const trimmed = email.trim();
+			if (!trimmed) return;
+			this.setIdentityRestore({
+				phase: "requesting",
+				email: trimmed,
+				channel
+			});
+			if (!this.sessionId) try {
+				await this.connect();
+			} catch {}
+			if (!this.sessionId) {
+				this.setIdentityRestore({
+					phase: "error",
+					message: "No active session to verify against."
+				});
+				return;
 			}
-			const heading = HEADING_RE.exec(line);
-			if (heading) {
-				out.push(`<p><strong>${renderInline(heading[2])}</strong></p>`);
-				i++;
-				continue;
+			try {
+				const json = await this.postInternal("/internal/identity/request-otp", {
+					sessionId: this.sessionId,
+					email: trimmed,
+					channel
+				});
+				const masked = typeof json.maskedDestination === "string" ? json.maskedDestination : void 0;
+				this.setIdentityRestore({
+					phase: "awaiting_code",
+					email: trimmed,
+					channel,
+					maskedDestination: masked
+				});
+			} catch (err) {
+				this.setIdentityRestore({
+					phase: "error",
+					message: err instanceof Error ? err.message : "Could not send a verification code."
+				});
 			}
-			if (UL_RE.test(line) || OL_RE.test(line)) {
-				const ordered = OL_RE.test(line) && !UL_RE.test(line);
-				const re = ordered ? OL_RE : UL_RE;
-				const items = [];
-				while (i < lines.length) {
-					const m = re.exec(lines[i]);
-					if (!m) break;
-					items.push(`<li>${renderInline(m[1])}</li>`);
-					i++;
-				}
-				out.push(`<${ordered ? "ol" : "ul"}>${items.join("")}</${ordered ? "ol" : "ul"}>`);
-				continue;
+		}
+		/** Submit the code: POST `/internal/identity/verify-otp`, then resolve on success. */
+		async verifyIdentityOtp(code) {
+			const state = this.identityRestore;
+			const trimmed = code.trim();
+			if (!trimmed || state.phase !== "awaiting_code") return;
+			const { email, channel } = state;
+			if (!this.sessionId) {
+				this.setIdentityRestore({
+					phase: "error",
+					message: "No active session to verify against."
+				});
+				return;
 			}
-			if (QUOTE_RE.test(line)) {
-				const quoted = [];
-				while (i < lines.length) {
-					const m = QUOTE_RE.exec(lines[i]);
-					if (!m) break;
-					quoted.push(m[1]);
-					i++;
-				}
-				out.push(`<blockquote>${renderInline(quoted.join("\n")).replace(/\n/g, "<br>")}</blockquote>`);
-				continue;
+			this.setIdentityRestore({
+				phase: "verifying",
+				email,
+				channel
+			});
+			try {
+				const json = await this.postInternal("/internal/identity/verify-otp", {
+					sessionId: this.sessionId,
+					email,
+					code: trimmed
+				});
+				if (json.event === "otp_verified") {
+					this.store.getState().setVerifiedEmail(email, this.sessionId);
+					await this.resolveIdentity(email);
+				} else if (json.event === "otp_invalid") {
+					const remaining = typeof json.attemptsRemaining === "number" ? json.attemptsRemaining : void 0;
+					this.setIdentityRestore({
+						phase: "awaiting_code",
+						email,
+						channel,
+						error: "That code was incorrect.",
+						attemptsRemaining: remaining
+					});
+				} else this.setIdentityRestore({
+					phase: "error",
+					message: "Verification failed."
+				});
+			} catch (err) {
+				this.setIdentityRestore({
+					phase: "error",
+					message: err instanceof Error ? err.message : "Verification failed."
+				});
 			}
-			const para = [];
-			while (i < lines.length) {
-				const l = lines[i];
-				if (l.trim() === "" || FENCE_RE.test(l) || HEADING_RE.test(l) || UL_RE.test(l) || OL_RE.test(l) || QUOTE_RE.test(l)) break;
-				para.push(l);
-				i++;
+		}
+		/** Resolve the verified identity → restorable conversations via POST `/internal/identity/resolve`. */
+		async resolveIdentity(email) {
+			if (!this.sessionId) return;
+			this.setIdentityRestore({
+				phase: "resolving",
+				email
+			});
+			try {
+				const json = await this.postInternal("/internal/identity/resolve", {
+					sessionId: this.sessionId,
+					email
+				});
+				if (json.resolved !== true) {
+					this.setIdentityRestore({
+						phase: "resolved",
+						email,
+						conversations: []
+					});
+					return;
+				}
+				const raw = json.conversations;
+				const conversations = Array.isArray(raw) ? raw.map((c) => {
+					if (!c || typeof c !== "object") return null;
+					const o = c;
+					const conversationId = typeof o.conversationId === "string" ? o.conversationId : "";
+					const sessionId = typeof o.sessionId === "string" ? o.sessionId : "";
+					if (!sessionId) return null;
+					return {
+						conversationId,
+						sessionId,
+						lastActivityAt: typeof o.lastActivityAt === "string" ? o.lastActivityAt : void 0,
+						preview: typeof o.preview === "string" ? o.preview : void 0
+					};
+				}).filter((c) => c !== null) : [];
+				this.setIdentityRestore({
+					phase: "resolved",
+					email,
+					conversations
+				});
+			} catch (err) {
+				this.setIdentityRestore({
+					phase: "error",
+					message: err instanceof Error ? err.message : "Could not load your chats."
+				});
 			}
-			out.push(`<p>${renderInline(para.join("\n")).replace(/\n/g, "<br>")}</p>`);
 		}
-		return out.join("");
-	}
-	const SNIPPET_MAX = 260;
-	/**
-	* Clean a raw scraped citation snippet into a short, readable excerpt.
-	*
-	* Scraped chunks frequently begin with page boilerplate — a logo image wrapped
-	* in a link, standalone nav, repeated whitespace — e.g.
-	* `[![Logo](…)](…) # Our Work We build…`. The source itself is already linked
-	* from the citation card, so the snippet only needs to be a clean teaser.
-	*
-	* Steps:
-	*   1. Strip a leading image / logo-link (`[![…](…)](…)` or `![…](…)`).
-	*   2. Drop a leading standalone heading marker (`#`/`##`).
-	*   3. Collapse all runs of whitespace to single spaces.
-	*   4. Truncate to ~{@link SNIPPET_MAX} chars at a word boundary, adding `…`.
-	*
-	* The result is still rendered through {@link renderMarkdown} downstream, so any
-	* remaining inline markup (bold/links) stays safe.
-	*/
-	function cleanCitationSnippet(raw) {
-		let s = raw ?? "";
-		let changed = true;
-		while (changed) {
-			changed = false;
-			const before = s;
-			s = s.replace(/^\s*\[!\[[^\]]*\]\([^)]*\)\]\([^)]*\)\s*/, "");
-			s = s.replace(/^\s*!\[[^\]]*\]\([^)]*\)\s*/, "");
-			s = s.replace(/^\s*#{1,6}\s+/, "");
-			if (s !== before) changed = true;
+		/**
+		* Replay a chosen restorable conversation: point the live session at its
+		* sessionId, hydrate its transcript (get_session + get_messages), and persist
+		* the new pointer so the next `sendMessage` continues it.
+		*/
+		async restoreConversation(sessionId) {
+			if (!this.client) await this.ensureClient();
+			const proven = this.sessionId ? this.verifiedEmailForSession(this.sessionId) : null;
+			if (await this.tryResume(sessionId)) {
+				this.store.getState().setSessionId(sessionId);
+				if (proven) this.store.getState().setVerifiedEmail(proven, sessionId);
+				this.setIdentityRestore({ phase: "idle" });
+				this.setStatus("ready");
+			} else this.setIdentityRestore({
+				phase: "error",
+				message: "That conversation is no longer available."
+			});
 		}
-		s = s.replace(/\s+/g, " ").trim();
-		if (s.length > SNIPPET_MAX) {
-			const cut = s.slice(0, SNIPPET_MAX);
-			const lastSpace = cut.lastIndexOf(" ");
-			s = (lastSpace > SNIPPET_MAX * .6 ? cut.slice(0, lastSpace) : cut).trimEnd() + "…";
+		/** Dismiss the cross-device restore panel. */
+		cancelIdentityRestore() {
+			this.setIdentityRestore({ phase: "idle" });
 		}
-		return s;
-	}
+		/** Tear down the underlying client. */
+		disconnect() {
+			this.client?.disconnect("widget closed");
+			this.client = null;
+			this.sessionId = null;
+			this.activeRequestId = null;
+			this.resumeAttempted = false;
+			this.setInterrupt(null);
+			this.setStatus("closed");
+		}
+	};
+	//#endregion
+	//#region src/logo.ts
+	/** The square Smooth icon (the stylized `th` glyph) — used as the default full-page header avatar. */
+	const SMOOTH_ICON_SVG = "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<svg id=\"Layer_1\" data-name=\"Layer 1\" xmlns=\"http://www.w3.org/2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\" viewBox=\"0 0 150 150\">\n  <defs>\n    <style>\n      .cls-1 {\n        fill: url(#linear-gradient);\n      }\n    </style>\n    <linearGradient id=\"linear-gradient\" x1=\"31.06\" y1=\"37.6\" x2=\"118.5\" y2=\"125.04\" gradientUnits=\"userSpaceOnUse\">\n      <stop offset=\".43\" stop-color=\"#00a6a6\"/>\n      <stop offset=\"1\" stop-color=\"#1238dd\"/>\n    </linearGradient>\n  </defs>\n  <path class=\"cls-1\" d=\"M55.03,55.47v13.28H19.24v-13.28h35.79ZM26.83,41.83h17.89v53.42c0,1.5.36,2.62,1.08,3.36.72.74,1.88,1.1,3.49,1.1.62,0,1.48-.07,2.59-.21,1.11-.14,1.91-.27,2.38-.41l2.31,13.02c-2.02.58-3.97.97-5.84,1.18-1.88.21-3.66.31-5.33.31-6.08,0-10.7-1.43-13.84-4.28-3.15-2.85-4.72-7.01-4.72-12.48v-55.01ZM93.74,80.08v32.71h-17.89V36.39h17.53v33.53h-1.13c1.4-4.55,3.6-8.21,6.59-11,2.99-2.79,7.01-4.18,12.07-4.18,4,0,7.48.89,10.46,2.67,2.97,1.78,5.28,4.29,6.92,7.54,1.64,3.25,2.46,7.02,2.46,11.33v36.5h-17.89v-33.02c0-3.21-.82-5.73-2.46-7.56-1.64-1.83-3.93-2.74-6.87-2.74-1.92,0-3.62.42-5.1,1.26-1.49.84-2.64,2.04-3.46,3.61-.82,1.57-1.23,3.49-1.23,5.74Z\"/>\n</svg>";
 	//#endregion
 	//#region src/styles.ts
 	/**
@@ -13516,11 +13518,11 @@ var SmoothAgentChat = (function(exports) {
     --sac-ease: cubic-bezier(.16, 1, .3, 1);
 
     ${mode === "fullpage" ? `/* Full-page: fill the host's box (sized by its container, else the viewport). */
-    display: block;
+    display: flex;
+    flex-direction: column;
     position: relative;
     width: 100%;
-    height: 100%;
-    min-height: 100vh;` : `/* Popover: float in the bottom-right corner. */
+    height: 100%;` : `/* Popover: float in the bottom-right corner. */
     position: fixed;
     bottom: 24px;
     right: 24px;
@@ -13528,7 +13530,20 @@ var SmoothAgentChat = (function(exports) {
     font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;
     -webkit-font-smoothing: antialiased;
 }
-
+${mode === "fullpage" ? `
+/* Viewport fallback — the element sets this attribute only when the host's
+   container gives it no resolved height (e.g. mounted straight into an
+   auto-height <body>). A sized container always wins, so an embed inside a
+   fixed-height box never overflows it (composer stays visible). */
+:host([data-viewport-fallback]) { min-height: 100dvh; }
+/* The render wrapper passes the host's box down to the panel via flex. */
+.wrap {
+    flex: 1;
+    display: flex;
+    flex-direction: column;
+    min-height: 0;
+}
+` : ""}
 * { box-sizing: border-box; }
 
 /* ───────────────────────────── Launcher ───────────────────────────── */
@@ -13610,11 +13625,13 @@ var SmoothAgentChat = (function(exports) {
     pointer-events: none;
     background: radial-gradient(120% 100% at 50% 0%, color-mix(in srgb, var(--sac-primary) 22%, transparent), transparent 70%);
 }
-/* Full-page: the panel becomes the whole surface. */
+/* Full-page: the panel becomes the whole surface — it follows the host's box
+   (via the .wrap flex chain), never a hardcoded viewport unit. */
 .panel.fullpage {
     width: 100%;
-    height: 100%;
-    min-height: 100vh;
+    flex: 1;
+    height: auto;
+    min-height: 0;
     max-width: none;
     max-height: none;
     border: none;
@@ -13646,8 +13663,9 @@ var SmoothAgentChat = (function(exports) {
         0 1px 0 rgba(255, 255, 255, .25) inset;
 }
 .avatar svg { width: 22px; height: 22px; }
-.avatar .logo-wrap { display: flex; }
+.avatar .logo-wrap { display: flex; align-items: center; justify-content: center; width: 100%; height: 100%; }
 .avatar .logo { height: 22px; width: auto; display: block; }
+.avatar .logo-img { max-width: 100%; max-height: 100%; width: auto; height: auto; object-fit: contain; display: block; border-radius: 9px; }
 .meta { min-width: 0; flex: 1; display: flex; flex-direction: column; gap: 2px; }
 .title { font-weight: 650; font-size: 15.5px; letter-spacing: -.01em; line-height: 1.1; }
 .status {
@@ -13696,6 +13714,7 @@ var SmoothAgentChat = (function(exports) {
 .panel.fullpage .header { padding: 18px 22px; }
 .panel.fullpage .avatar { width: 44px; height: 44px; }
 .panel.fullpage .avatar .logo { height: 26px; }
+.panel.fullpage .avatar svg { width: 28px; height: 28px; }
 
 /* ────────────────────────────── Messages ──────────────────────────── */
 .messages {
@@ -14217,6 +14236,7 @@ var SmoothAgentChat = (function(exports) {
 		"endpoint",
 		"agent-id",
 		"agent-name",
+		"logo-url",
 		"placeholder",
 		"greeting",
 		"start-open",
@@ -14328,6 +14348,7 @@ var SmoothAgentChat = (function(exports) {
 				mode: this.overrides.mode ?? (modeAttr === "fullpage" ? "fullpage" : modeAttr === "popover" ? "popover" : void 0) ?? "popover",
 				agentId,
 				agentName: this.overrides.agentName ?? this.getAttribute("agent-name") ?? void 0,
+				logoUrl: this.overrides.logoUrl ?? this.getAttribute("logo-url") ?? void 0,
 				userName: this.overrides.userName,
 				userEmail: this.overrides.userEmail,
 				userPhone: this.overrides.userPhone,
@@ -14382,8 +14403,9 @@ var SmoothAgentChat = (function(exports) {
 			const style = document.createElement("style");
 			style.textContent = buildStyles(resolved.theme, resolved.mode);
 			const monogram = escapeHtml((resolved.agentName.trim().charAt(0) || "A").toUpperCase());
+			const headerLogo = resolved.logoUrl ? `<img src="${escapeHtml(resolved.logoUrl)}" alt="" class="logo-img" />` : SMOOTH_ICON_SVG;
 			const header = fullpage ? `<div class="header">
-                    <div class="avatar"><span class="logo-wrap">${SMOOTH_LOGO_SVG}</span></div>
+                    <div class="avatar"><span class="logo-wrap">${headerLogo}</span></div>
                     <div class="meta">
                         <span class="title">${escapeHtml(resolved.agentName)}</span>
                         <span class="status"><span class="dot off"></span><span class="status-text"></span></span>
@@ -14434,6 +14456,7 @@ var SmoothAgentChat = (function(exports) {
                     <div class="footer">powered by <b>smooth&#8209;operator</b>${restoreLink}</div>
                 </div>`;
 			const container = document.createElement("div");
+			container.className = "wrap";
 			container.innerHTML = `
             ${fullpage ? "" : `<button class="launcher" part="launcher" aria-label="Open chat">${ICON.spark}</button>`}
             <div class="panel${fullpage ? " fullpage" : " hidden"}" part="panel" role="${fullpage ? "region" : "dialog"}" aria-label="${escapeHtml(resolved.agentName)} chat">
@@ -14477,6 +14500,7 @@ var SmoothAgentChat = (function(exports) {
 					await this.controller?.connect().catch(() => {});
 				})();
 			});
+			if (fullpage) this.syncViewportFallback();
 			if (fullpage && !gating) this.controller?.connect().catch(() => {});
 			this.syncOpenState();
 			if (!gating) this.renderMessages();
@@ -14966,6 +14990,24 @@ var SmoothAgentChat = (function(exports) {
 				this.streamBubbleEl.textContent = this.streamTarget;
 			}
 		}
+		/**
+		* Full-page sizing probe: decide whether the host's container gives it a
+		* real box. With the `.wrap` flex chain hidden, `height: 100%` of a SIZED
+		* container still resolves (clientHeight > 0), while an auto-height parent
+		* (e.g. mounted straight into `<body>`) collapses to ~0. Only the latter
+		* gets `data-viewport-fallback`, whose CSS applies `min-height: 100dvh` —
+		* so an embed inside a fixed-height box never overflows it (the composer
+		* stays visible), and a bare full-page route still fills the viewport.
+		*/
+		syncViewportFallback() {
+			const wrap = this.shadowRoot?.querySelector(".wrap");
+			if (!wrap) return;
+			const prev = wrap.style.display;
+			wrap.style.display = "none";
+			const heightless = this.clientHeight < 8;
+			wrap.style.display = prev;
+			this.toggleAttribute("data-viewport-fallback", heightless);
+		}
 		/** Cancel any in-flight reveal loop and clear its state (called on full rebuild). */
 		resetReveal() {
 			if (this.rafId && typeof cancelAnimationFrame === "function") cancelAnimationFrame(this.rafId);