← All changes | js/chat-script.js +132 -1228 3.2.11 → 3.1.7 View file →

		@@ -1,163 +1,20 @@
1	1	jQuery(document).ready(function($) {
2	2
3		- // Nonce refresh — v2 (plan-6a68c9).
4		- //
5		- // The widget no longer relies on a nonce embedded in inline cached HTML.
6		- // Before each chat-send / stream-send / upload, we call the REST endpoint
7		- // GET /wp-json/mxchat/v1/nonce and use the freshly-issued value. The
8		- // endpoint creates the nonce with action `mxchat_chat_send`; the server-side
9		- // verifier ALSO still accepts the legacy `mxchat_chat_nonce` action for a
10		- // 30-day backwards-compat window so cached pages still in users' browsers
11		- // (which carry the legacy inline-localized nonce) keep working.
12		- //
13		- // Cache: a single module-scoped slot. TTL 12h conservatively (WP nonces are
14		- // 24h but we refetch at half-life so a freshly-cached-page user never sees
15		- // a borderline-stale nonce).
16		- var cachedFreshNonce = null;
17		- var cachedFreshNonceFetchedAt = 0;
18		- var NONCE_TTL_MS = 12 * 60 * 60 * 1000;
19		- var nonceRefreshState = 'idle'; // 'idle' | 'pending' | 'done'
20		- var nonceRefreshCallbacks = [];
21		-
22		- function getRestNonceUrl() {
23		- if (typeof mxchatChat !== 'undefined' && mxchatChat.rest_url) {
24		- return mxchatChat.rest_url.replace(/\/+$/, '') + '/nonce';
25		- }
26		- // Fallback: derive from current origin if mxchatChat.rest_url isn't set.
27		- return window.location.origin + '/wp-json/mxchat/v1/nonce';
28		- }
29		-
30		- function fetchFreshNonceFromRest() {
31		- return fetch(getRestNonceUrl(), {
32		- credentials: 'same-origin',
33		- headers: { 'Accept': 'application/json' }
34		- }).then(function (resp) {
35		- if (!resp.ok) {
36		- throw new Error('REST nonce fetch failed: ' + resp.status);
37		- }
38		- return resp.json();
39		- }).then(function (data) {
40		- if (data && data.nonce) {
41		- return data.nonce;
42		- }
43		- throw new Error('REST nonce response had no nonce field.');
44		- });
45		- }
46		-
47		- /**
48		- * withFreshNonce(cb) — invoke cb() after ensuring mxchatChat.nonce is fresh.
49		- * Tries REST endpoint first (cache-bypass design); falls back to the legacy
50		- * admin-ajax refresh path if REST is unavailable. Idempotent — concurrent
51		- * calls share the same in-flight refresh.
52		- */
53		- function withFreshNonce(callback) {
54		- if (typeof mxchatChat === 'undefined') {
	3	+ // Nonce refresh is deferred until first user interaction (ensureSession)
	4	+ // to avoid admin-ajax calls on passive page loads.
	5	+ var nonceRefreshed = false;
	6	+ function refreshNonceIfNeeded(callback) {
	7	+ if (nonceRefreshed || typeof mxchatChat === 'undefined' || !mxchatChat.ajax_url) {
55	8	if (callback) callback();
56	9	return;
57	10	}
58		- var now = Date.now();
59		- if (cachedFreshNonce && (now - cachedFreshNonceFetchedAt) < NONCE_TTL_MS) {
60		- mxchatChat.nonce = cachedFreshNonce;
	11	+ nonceRefreshed = true;
	12	+ $.post(mxchatChat.ajax_url, { action: 'mxchat_refresh_nonce' }, function(res) {
	13	+ if (res && res.success && res.data && res.data.nonce) {
	14	+ mxchatChat.nonce = res.data.nonce;
	15	+ }
61	16	if (callback) callback();
62		- return;
63		- }
64		- if (callback) nonceRefreshCallbacks.push(callback);
65		- if (nonceRefreshState === 'pending') return;
66		- nonceRefreshState = 'pending';
67		-
68		- var resolved = function (nonce) {
69		- if (nonce) {
70		- cachedFreshNonce = nonce;
71		- cachedFreshNonceFetchedAt = Date.now();
72		- mxchatChat.nonce = nonce;
73		- }
74		- nonceRefreshState = 'done';
75		- var pending = nonceRefreshCallbacks;
76		- nonceRefreshCallbacks = [];
77		- pending.forEach(function (cb) { try { cb(); } catch (e) {} });
78		- };
79		-
80		- fetchFreshNonceFromRest()
81		- .then(resolved)
82		- .catch(function () {
83		- // Fallback to the legacy admin-ajax refresh path (issued with the
84		- // old action `mxchat_chat_nonce`; the server still accepts both
85		- // during the compat window).
86		- if (mxchatChat.ajax_url) {
87		- $.post(mxchatChat.ajax_url, { action: 'mxchat_refresh_nonce' })
88		- .done(function (res) {
89		- if (res && res.success && res.data && res.data.nonce) {
90		- resolved(res.data.nonce);
91		- return;
92		- }
93		- resolved(null);
94		- })
95		- .fail(function () { resolved(null); });
96		- } else {
97		- resolved(null);
98		- }
99		- });
100		- }
101		-
102		- // Backwards-compat alias — every existing caller in this file (and any
103		- // out-of-tree consumer that hit this internal API) keeps working unchanged.
104		- function refreshNonceIfNeeded(callback) {
105		- return withFreshNonce(callback);
106		- }
107		-
108		- // Dynamic-settings refresh (plan-32db95).
109		- //
110		- // Every widget setting ships inline in cached page HTML, so behind a
111		- // full-page cache the site owner can't purge (host cache, CDN, the
112		- // browser itself) a toggled setting looks broken until the cache turns
113		- // over. Same distrust-cached-HTML reasoning as the per-request nonce:
114		- // on the FIRST widget open per page load we ask the nonce endpoint for
115		- // the current behavior-gate settings (?with_settings=1), merge them over
116		- // mxchatChat, and rebuild the header menu. Colors are NOT refreshed —
117		- // they're server-inline-styled, so a runtime swap would visibly flash.
118		- // On any failure we keep the inline values silently (nonce-fallback
119		- // posture). At most one request per page load, only if a widget opens.
120		- var dynamicSettingsState = 'idle'; // 'idle' | 'pending' | 'done'
121		-
122		- function mxchatRefreshDynamicSettings() {
123		- if (dynamicSettingsState !== 'idle') return;
124		- if (typeof mxchatChat === 'undefined') return;
125		- dynamicSettingsState = 'pending';
126		-
127		- var applied = function (data) {
128		- dynamicSettingsState = 'done';
129		- if (!data) return; // endpoint unavailable — inline values stand.
130		- if (data.nonce) {
131		- // Seed the nonce cache too: saves the first send's REST
132		- // round-trip and keeps us under the endpoint's rate limit.
133		- cachedFreshNonce = data.nonce;
134		- cachedFreshNonceFetchedAt = Date.now();
135		- mxchatChat.nonce = data.nonce;
136		- }
137		- if (data.settings && typeof data.settings === 'object') {
138		- $.extend(mxchatChat, data.settings);
139		- mxchatRebuildHeaderMenus();
140		- }
141		- };
142		-
143		- fetch(getRestNonceUrl() + '?with_settings=1', {
144		- credentials: 'same-origin',
145		- headers: { 'Accept': 'application/json' }
146		- }).then(function (resp) {
147		- if (!resp.ok) throw new Error('settings refresh failed: ' + resp.status);
148		- return resp.json();
149		- }).then(applied).catch(function () {
150		- // Fallback: legacy admin-ajax refresh path, same as withFreshNonce.
151		- if (mxchatChat.ajax_url) {
152		- $.post(mxchatChat.ajax_url, { action: 'mxchat_refresh_nonce', with_settings: 1 })
153		- .done(function (res) {
154		- applied(res && res.success && res.data ? res.data : null);
155		- })
156		- .fail(function () { applied(null); });
157		- } else {
158		- applied(null);
159		- }
160	17	});
161	18	}
162	19
163	20	// ====================================
		@@ -203,10 +60,10 @@
203	60	return Object.keys(this.instances);
204	61	},
205	62
206	63	// Session management per bot
207		- // Returns existing session ID from cookie or localStorage (with in-memory fallback),
208		- // or null if none exists. Does NOT create a new session — use ensureSession() for that.
	64	+ // Returns existing session ID from cookie or localStorage, or null if none exists.
	65	+ // Does NOT create a new session — use ensureSession() for that.
209	66	getChatSession: function(botId) {
210	67	var cookieName = 'mxchat_session_id_' + botId;
211	68	var storageKey = 'mxchat_session_id_' + botId;
212	69	var sessionId = getCookie(cookieName);
		@@ -215,21 +72,8 @@
215	72	if (!sessionId) {
216	73	try { sessionId = localStorage.getItem(storageKey); } catch (e) {}
217	74	}
218	75
219		- // Fallback to in-memory instance when cookie AND localStorage are both blocked
220		- // (Safari ITP, strict tracking prevention, cross-origin iframes with partitioned
221		- // storage). Without this, ensureSession() can generate and store an ID that
222		- // getChatSession() then can't read back, causing null session_ids on send.
223		- if (!sessionId && this.instances[botId] && this.instances[botId].sessionId) {
224		- sessionId = this.instances[botId].sessionId;
225		- }
226		-
227		- // Guard against stored sentinel values that indicate earlier broken writes.
228		- if (sessionId === 'null' || sessionId === 'undefined') {
229		- sessionId = null;
230		- }
231		-
232	76	// Re-sync cookie from localStorage if cookie was lost
233	77	if (sessionId && !getCookie(cookieName)) {
234	78	document.cookie = cookieName + "=" + sessionId + "; path=/; max-age=86400; SameSite=Lax";
235	79	}
		@@ -261,10 +105,12 @@
261	105	// Now that we have a session, do the deferred work
262	106	refreshNonceIfNeeded();
263	107	trackOriginatingPage();
264	108
265		- // Note: loadChatHistory is handled by showChatContainerForBot with loader UI,
266		- // so we do NOT call it here to avoid a race condition.
	109	+ var chatPersistenceEnabled = typeof mxchatChat !== 'undefined' && mxchatChat.chat_persistence_toggle === 'on';
	110	+ if (chatPersistenceEnabled && mxchatChat.email_collection_enabled !== 'on') {
	111	+ loadChatHistory(botId);
	112	+ }
267	113
268	114	return instance.sessionId;
269	115	},
270	116
		@@ -603,102 +449,10 @@
603	449	sendButton.disabled = false;
604	450	sendButton.style.opacity = '1';
605	451	sendButton.style.pointerEvents = 'auto';
606	452	}
607		- // Every completion path re-enables input, so this is the single restore
608		- // point for the streaming Stop affordance (no-op when not in stop mode).
609		- mxchatRestoreSendButton(botId);
610	453	}
611	454
612		-// --- Streaming Stop control -------------------------------------------------
613		-// One live stream handle per bot instance, so Stop on one widget never aborts
614		-// another bot on the same page.
615		-var mxchatActiveStreams = {};
616		-// Original send-button markup, captured once per bot the first time the Stop
617		-// state is shown (never captured while already in stop mode, so a rapid
618		-// stop-then-resend can't save the stop glyph as the "original").
619		-var mxchatSendMarkup = {};
620		-
621		-function mxchatShowStopButton(botId) {
622		- var btn = getElementDOM(botId, 'send-button');
623		- if (!btn) return;
624		- if (!btn.classList.contains('mxchat-stop-mode')) {
625		- mxchatSendMarkup[botId] = {
626		- html: btn.innerHTML,
627		- label: btn.getAttribute('aria-label')
628		- };
629		- }
630		-
631		- // Mirror the send icon's rendered size + color so the stop glyph looks
632		- // native, including custom send images/colors and theme overrides.
633		- var child = btn.querySelector('svg, img');
634		- var size = 25;
635		- var color = '';
636		- if (child) {
637		- var rect = child.getBoundingClientRect();
638		- if (rect.width) {
639		- size = Math.round(Math.min(rect.width, rect.height));
640		- }
641		- var cs = window.getComputedStyle(child);
642		- color = (child.tagName.toLowerCase() === 'svg' ? cs.fill : cs.color) || '';
643		- }
644		- var stopLabel = (typeof mxchatChat !== 'undefined' && mxchatChat.stop_button_label) || 'Stop response';
645		- btn.innerHTML = '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" aria-hidden="true" style="width:' + size + 'px;height:' + size + 'px;' + (color ? 'fill:' + color + ';' : '') + '"><rect x="5" y="5" width="14" height="14" rx="3"></rect></svg>';
646		- // An add-on's DIRECT send-button handler (e.g. mxchat-vision's rebind) can
647		- // start a stream synchronously while the originating click is still
648		- // bubbling up to our delegated handler. Without this guard, that handler
649		- // reads the just-added stop-mode class as a user Stop press and aborts the
650		- // brand-new stream — the user's message renders but no reply ever fires
651		- // (plan-4bba64 silent message loss). The flag only spans the current event
652		- // dispatch: cleared on the next macrotask, long before a real Stop click.
653		- btn.__mxchatStopJustShown = true;
654		- setTimeout(function () { btn.__mxchatStopJustShown = false; }, 0);
655		- btn.classList.add('mxchat-stop-mode');
656		- btn.setAttribute('aria-label', stopLabel);
657		- btn.setAttribute('title', stopLabel);
658		- // disableChatInput() ran when the turn was sent; the Stop control itself
659		- // must stay clickable while the textarea remains disabled.
660		- btn.disabled = false;
661		- btn.style.opacity = '1';
662		- btn.style.pointerEvents = 'auto';
663		-}
664		-
665		-function mxchatRestoreSendButton(botId) {
666		- var btn = getElementDOM(botId, 'send-button');
667		- var saved = mxchatSendMarkup[botId];
668		- if (!btn || !btn.classList.contains('mxchat-stop-mode') || !saved) return;
669		- btn.innerHTML = saved.html;
670		- btn.classList.remove('mxchat-stop-mode');
671		- btn.removeAttribute('title');
672		- if (saved.label) {
673		- btn.setAttribute('aria-label', saved.label);
674		- }
675		-}
676		-
677		-function mxchatStopStreaming(botId) {
678		- var entry = mxchatActiveStreams[botId];
679		- if (!entry || !entry.controller) return;
680		- entry.aborted = true;
681		- try { entry.controller.abort(); } catch (e) {}
682		-}
683		-
684		-// Returns true when a stream rejection came from an intentional Stop click:
685		-// keep the partial text as the turn's answer — no error UI, no fallback resend.
686		-function mxchatHandleStreamAbort(botId, accumulatedContent, callback) {
687		- var entry = mxchatActiveStreams[botId];
688		- if (!entry || !entry.aborted) return false;
689		- delete mxchatActiveStreams[botId];
690		- if (!accumulatedContent) {
691		- // Stopped before the first chunk: drop the thinking bubble, no orphan message.
692		- getElement(botId, 'chat-box').find('.bot-message.temporary-message').remove();
693		- }
694		- enableChatInput(botId); // also restores the send icon
695		- if (callback) {
696		- callback(accumulatedContent || '');
697		- }
698		- return true;
699		-}
700		-
701	455	// Update your existing sendMessage function
702	456	function sendMessage(botId) {
703	457	botId = botId || 'default';
704	458	MxChatInstances.ensureSession(botId);
		@@ -719,9 +473,8 @@
719	473	}
720	474
721	475	appendMessage("user", message, '', [], false, botId);
722	476	$chatInput.val('');
723		- mxchatUpdateCharCounter($chatInput[0]); // reset the char counter after send (plan 7091a2)
724	477	$chatInput.css('height', 'auto');
725	478
726	479	if (hasQuickQuestions(botId)) {
727	480	collapseQuickQuestions(botId);
		@@ -839,15 +592,8 @@
839	592
840	593	function callMxChat(message, callback, botId) {
841	594	botId = botId || getMxChatBotId();
842	595
843		- // Streaming fallbacks land here: drop any leftover stream handle and
844		- // return the button to its send state (no-op for plain non-stream turns).
845		- if (mxchatActiveStreams[botId]) {
846		- delete mxchatActiveStreams[botId];
847		- }
848		- mxchatRestoreSendButton(botId);
849		-
850	596	// Store the message in case we need to retry after session reset
851	597	getElement(botId, 'mxchat-chatbot-wrapper').find('.mxchat-input-holder textarea').data('pending-message', message);
852	598
853	599	// Get page context if contextual awareness is enabled
		@@ -855,28 +601,13 @@
855	601
856	602	// Get instance for session start timestamp (used when persistence is OFF)
857	603	var instance = MxChatInstances.get(botId);
858	604
859		- // Guarantee a non-null session_id before the AJAX leaves. ensureSession() is idempotent
860		- // and returns the guaranteed-present session id from the in-memory instance even when
861		- // cookie/localStorage writes are silently blocked by the browser.
862		- var sessionId = MxChatInstances.ensureSession(botId);
863		- if (!sessionId || sessionId === 'null' || sessionId === 'undefined') {
864		- // Last-resort generation to ensure we never POST a null marker.
865		- sessionId = generateSessionId();
866		- MxChatInstances.setChatSession(botId, sessionId);
867		- }
868		-
869		- // Wait for the page-cache nonce refresh to complete before firing the
870		- // chat-send AJAX. On cached pages the inline mxchatChat.nonce is stale
871		- // until refreshNonceIfNeeded() returns; constructing ajaxData inside the
872		- // callback guarantees we read the fresh value. See plan-c5457f.
873		- refreshNonceIfNeeded(function() {
874	605	// Prepare AJAX data
875	606	const ajaxData = {
876	607	action: 'mxchat_handle_chat_request',
877	608	message: message,
878		- session_id: sessionId,
	609	+ session_id: getChatSession(botId),
879	610	nonce: mxchatChat.nonce,
880	611	current_page_url: window.location.href,
881	612	current_page_title: document.title,
882	613	bot_id: botId,
		@@ -882,14 +613,14 @@
882	613	bot_id: botId,
883	614	// Pass session start timestamp so AI context matches what user sees
884	615	session_start_timestamp: instance.sessionStartTimestamp || 0
885	616	};
886		-
	617	+
887	618	// Add page context if available
888	619	if (pageContext) {
889	620	ajaxData.page_context = JSON.stringify(pageContext);
890	621	}
891		-
	622	+
892	623	// CHECK FOR VISION FLAGS AND ADD THEM
893	624	if (window.mxchatVisionProcessed) {
894	625	ajaxData.vision_processed = true;
895	626	ajaxData.original_user_message = window.mxchatOriginalMessage || message;
		@@ -898,9 +629,9 @@
898	629	window.mxchatVisionProcessed = false;
899	630	window.mxchatOriginalMessage = null;
900	631	window.mxchatVisionImagesCount = 0;
901	632	}
902		-
	633	+
903	634	$.ajax({
904	635	url: mxchatChat.ajax_url,
905	636	type: 'POST',
906	637	dataType: 'json',
		@@ -1089,9 +820,8 @@
1089	820
1090	821	replaceLastMessage("bot", errorMessage, '', [], botId);
1091	822	}
1092	823	});
1093		- }); // refreshNonceIfNeeded
1094	824	}
1095	825
1096	826	function callMxChatStream(message, callback, botId) {
1097	827	botId = botId || getMxChatBotId();
		@@ -1110,25 +840,12 @@
1110	840
1111	841	// Get instance for session start timestamp (used when persistence is OFF)
1112	842	var instance = MxChatInstances.get(botId);
1113	843
1114		- // Guarantee a non-null session_id before the fetch. FormData.append() stringifies any
1115		- // non-string value via String(), so passing `null` would POST the literal string "null"
1116		- // and land in the transcripts table as a ghost session. ensureSession() always returns
1117		- // a real string even when cookies/localStorage are blocked.
1118		- var streamSessionId = MxChatInstances.ensureSession(botId);
1119		- if (!streamSessionId || streamSessionId === 'null' || streamSessionId === 'undefined') {
1120		- streamSessionId = generateSessionId();
1121		- MxChatInstances.setChatSession(botId, streamSessionId);
1122		- }
1123		-
1124		- // Wait for the page-cache nonce refresh before constructing formData (which
1125		- // captures mxchatChat.nonce by value). Mirrors callMxChat's wrapping. See plan-c5457f.
1126		- refreshNonceIfNeeded(function() {
1127	844	const formData = new FormData();
1128	845	formData.append('action', 'mxchat_stream_chat');
1129	846	formData.append('message', message);
1130		- formData.append('session_id', streamSessionId);
	847	+ formData.append('session_id', getChatSession(botId));
1131	848	formData.append('nonce', mxchatChat.nonce);
1132	849	formData.append('current_page_url', window.location.href);
1133	850	formData.append('current_page_title', document.title);
1134	851	formData.append('bot_id', botId);
		@@ -1154,20 +871,12 @@
1154	871	let accumulatedContent = '';
1155	872	let testingDataReceived = false;
1156	873	let streamingStarted = false;
1157	874
1158		- // Abortable stream: a fresh controller per turn, keyed by bot instance.
1159		- // The Stop control (send button swapped in place) aborts both the read
1160		- // loop and the underlying request.
1161		- var streamControl = { controller: new AbortController(), aborted: false };
1162		- mxchatActiveStreams[botId] = streamControl;
1163		- mxchatShowStopButton(botId);
1164		-
1165	875	fetch(mxchatChat.ajax_url, {
1166	876	method: 'POST',
1167	877	body: formData,
1168		- credentials: 'same-origin',
1169		- signal: streamControl.controller.signal
	878	+ credentials: 'same-origin'
1170	879	})
1171	880	.then(response => {
1172	881	// Store the response for potential fallback handling
1173	882	const responseClone = response.clone();
		@@ -1236,16 +945,8 @@
1236	945
1237	946	// Re-enable chat input when stream ends with content
1238	947	enableChatInput(botId);
1239	948
1240		- // Scroll the user's last message to the top now that the
1241		- // bot's full reply has rendered (gives max reading room).
1242		- var $chatBoxDone = getElement(botId, 'chat-box');
1243		- var $lastUserMsgDone = $chatBoxDone.find('.user-message').last();
1244		- if ($lastUserMsgDone.length) {
1245		- scrollElementToTop($lastUserMsgDone, botId);
1246		- }
1247		-
1248	949	if (callback) {
1249	950	callback(accumulatedContent);
1250	951	}
1251	952	return;
		@@ -1268,16 +969,8 @@
1268	969
1269	970	// Re-enable chat input after streaming completes
1270	971	enableChatInput(botId);
1271	972
1272		- // Scroll the user's last message to the top now
1273		- // that the bot's full reply has rendered.
1274		- var $chatBoxStreamDone = getElement(botId, 'chat-box');
1275		- var $lastUserMsgStreamDone = $chatBoxStreamDone.find('.user-message').last();
1276		- if ($lastUserMsgStreamDone.length) {
1277		- scrollElementToTop($lastUserMsgStreamDone, botId);
1278		- }
1279		-
1280	973	if (callback) {
1281	974	callback(accumulatedContent);
1282	975	}
1283	976	return;
		@@ -1334,9 +1027,8 @@
1334	1027	}
1335	1028
1336	1029	processStream();
1337	1030	}).catch(streamError => {
1338		- if (mxchatHandleStreamAbort(botId, accumulatedContent, callback)) return;
1339	1031	getElement(botId, 'chat-box').find('.bot-message.temporary-message').remove();
1340	1032	callMxChat(message, callback, botId);
1341	1033	});
1342	1034	}
		@@ -1343,9 +1035,8 @@
1343	1035
1344	1036	processStream();
1345	1037	})
1346	1038	.catch(error => {
1347		- if (mxchatHandleStreamAbort(botId, accumulatedContent, callback)) return;
1348	1039	// Check if we have server error data with chat mode
1349	1040	if (error && error.isServerError && error.data) {
1350	1041	// Check for chat mode in error data
1351	1042	if (error.data.chat_mode) {
		@@ -1358,9 +1049,8 @@
1358	1049	getElement(botId, 'chat-box').find('.bot-message.temporary-message').remove();
1359	1050	callMxChat(message, callback, botId);
1360	1051	}
1361	1052	});
1362		- }); // refreshNonceIfNeeded
1363	1053	}
1364	1054
1365	1055	// Helper function to handle non-streaming responses
1366	1056	function handleNonStreamResponse(data, callback, botId) {
		@@ -1569,17 +1259,8 @@
1569	1259	// Update the event handlers to use the correct function names (using event delegation)
1570	1260	// Use class-based selectors for multi-instance support
1571	1261	$(document).on('click', '.send-button', function() {
1572	1262	var botId = getBotIdFromElement(this);
1573		- // While a response is streaming the button is a Stop control.
1574		- if (this.classList.contains('mxchat-stop-mode')) {
1575		- // Same click that just started this stream (an add-on's direct handler
1576		- // ran before this delegated one) — not a Stop press. See
1577		- // mxchatShowStopButton for the full story (plan-4bba64).
1578		- if (this.__mxchatStopJustShown) return;
1579		- mxchatStopStreaming(botId);
1580		- return;
1581		- }
1582	1263	var modeIndicator = getElementDOM(botId, 'chat-mode-indicator');
1583	1264	if (!(modeIndicator && modeIndicator.textContent === 'Live Agent')) {
1584	1265	disableChatInput(botId);
1585	1266	}
		@@ -1598,370 +1279,9 @@
1598	1279	sendMessage(botId);
1599	1280	}
1600	1281	});
1601	1282
1602		-// Chat input character counter + soft limit feedback (plan 7091a2).
1603		-// Language-neutral: numbers + color only, no translatable strings. The counter
1604		-// reveals near the cap and ramps neutral -> amber -> red; an over-limit keystroke
1605		-// or trimmed paste produces a brief border-flash/shake so the maxlength cap (plan
1606		-// a3fae2) is never a silent "input jumps back". Per-bot scoped via .input-container.
1607		-function mxchatUpdateCharCounter(inputEl) {
1608		- if (!inputEl || !inputEl.closest) return;
1609		- var max = parseInt(inputEl.getAttribute('maxlength'), 10);
1610		- var container = inputEl.closest('.input-container');
1611		- if (!container || !max || max <= 0) return;
1612		- var counter = container.querySelector('.mxchat-char-counter');
1613		- if (!counter) return;
1614		- var len = inputEl.value.length;
1615		- var ratio = len / max;
1616		- var nearThreshold = 0.8; // start surfacing the counter at 80% of the cap
1617		- var cur = counter.querySelector('.mxchat-char-counter-current');
1618		- if (cur) cur.textContent = len;
1619		- var warn = ratio >= nearThreshold && len < max;
1620		- var full = len >= max;
1621		- counter.classList.toggle('is-visible', ratio >= nearThreshold);
1622		- counter.classList.toggle('is-warn', warn);
1623		- counter.classList.toggle('is-full', full);
1624		- container.classList.toggle('mxchat-input-near-limit', warn);
1625		- container.classList.toggle('mxchat-input-at-limit', full);
1626		-}
1627		-
1628		-function mxchatBumpInput(inputEl) {
1629		- var container = inputEl && inputEl.closest ? inputEl.closest('.input-container') : null;
1630		- if (!container) return;
1631		- container.classList.remove('mxchat-input-bump');
1632		- void container.offsetWidth; // reflow so a rapid second hit retriggers the animation
1633		- container.classList.add('mxchat-input-bump');
1634		- clearTimeout($(container).data('mxchatBumpTimeout'));
1635		- var t = setTimeout(function() { container.classList.remove('mxchat-input-bump'); }, 220);
1636		- $(container).data('mxchatBumpTimeout', t);
1637		-}
1638		-
1639		-// Live counter update on every input.
1640		-$(document).on('input', '.chat-input', function() {
1641		- mxchatUpdateCharCounter(this);
1642		-});
1643		-
1644		-// Visible "you've hit the edge" feedback when a printable keystroke is about to be
1645		-// rejected at the cap (maxlength silently swallows it otherwise).
1646		-$(document).on('keydown', '.chat-input', function(e) {
1647		- var max = parseInt(this.getAttribute('maxlength'), 10);
1648		- if (!max || max <= 0 || this.value.length < max) return;
1649		- if (e.ctrlKey || e.metaKey || e.altKey) return;
1650		- // A single printable char with no selection to overwrite WILL be rejected.
1651		- if (e.key && e.key.length === 1 && this.selectionStart === this.selectionEnd) {
1652		- mxchatBumpInput(this);
1653		- }
1654		-});
1655		-
1656		-// A paste that gets trimmed to the cap also bumps, so truncation is never silent.
1657		-$(document).on('paste', '.chat-input', function() {
1658		- var el = this;
1659		- var max = parseInt(el.getAttribute('maxlength'), 10);
1660		- if (!max || max <= 0) return;
1661		- setTimeout(function() {
1662		- mxchatUpdateCharCounter(el);
1663		- if (el.value.length >= max) mxchatBumpInput(el);
1664		- }, 0);
1665		-});
1666		-
1667		-// Builds the list of overflow-menu items for a given bot.
1668		-// Adding a future item is one push to this array — do NOT hardcode "only download."
1669		-function mxchatGetHeaderMenuItems(botId) {
1670		- var items = [];
1671		- var settings = (typeof mxchatChat !== 'undefined') ? mxchatChat : {};
1672		-
1673		- // The `print_button_*` keys still gate this item for back-compat with
1674		- // existing user options. The action is now a transcript download, not print.
1675		- if (settings.print_button_enabled === 'on') {
1676		- items.push({
1677		- id: 'download-transcript',
1678		- label: settings.print_button_label || 'Download Transcript',
1679		- icon: '<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"/><polyline points="7 10 12 15 17 10"/><line x1="12" y1="15" x2="12" y2="3"/></svg>',
1680		- action: function() {
1681		- mxchatDownloadTranscript(botId);
1682		- }
1683		- });
1684		- }
1685		-
1686		- // "Start new chat" — surfaces the EXISTING per-conversation reset
1687		- // (MxChatInstances.resetChatSession) so a visitor can start a fresh thread
1688		- // without the site owner disabling chat persistence globally. Default OFF;
1689		- // gated by the reset_chat_enabled option. plan ac2e81.
1690		- if (settings.reset_chat_enabled === 'on') {
1691		- items.push({
1692		- id: 'reset-chat',
1693		- label: settings.reset_chat_label || 'Start new chat',
1694		- icon: '<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="1 4 1 10 7 10"/><path d="M3.51 15a9 9 0 1 0 2.13-9.36L1 10"/></svg>',
1695		- action: function() {
1696		- var confirmMsg = settings.reset_chat_confirm || 'Start a new chat? This clears the current conversation.';
1697		- if (window.confirm(confirmMsg)) {
1698		- MxChatInstances.resetChatSession(botId);
1699		- }
1700		- }
1701		- });
1702		- }
1703		-
1704		- return items;
1705		-}
1706		-
1707		-// Builds a clean markdown transcript of the current conversation and triggers
1708		-// a file download. Used by the "Download Transcript" menu item.
1709		-function mxchatDownloadTranscript(botId) {
1710		- var $chatBox = getElement(botId, 'chat-box');
1711		- if (!$chatBox || !$chatBox.length) return;
1712		-
1713		- var settings = (typeof mxchatChat !== 'undefined') ? mxchatChat : {};
1714		- var headerTitle = settings.print_header_title || 'Chat transcript';
1715		- var now = new Date();
1716		- var stamp = now.toLocaleString();
1717		-
1718		- var lines = [];
1719		- lines.push('# ' + headerTitle);
1720		- lines.push('');
1721		- lines.push('Exported: ' + stamp);
1722		- lines.push('');
1723		- lines.push('---');
1724		- lines.push('');
1725		-
1726		- $chatBox.find('.user-message, .bot-message, .agent-message').each(function() {
1727		- var $msg = $(this);
1728		- // Skip thinking placeholders and any in-flight temporary messages.
1729		- if ($msg.find('.thinking-dots').length) return;
1730		- if ($msg.hasClass('temporary-message')) return;
1731		-
1732		- var sender;
1733		- if ($msg.hasClass('user-message')) sender = 'User';
1734		- else if ($msg.hasClass('agent-message')) sender = 'Live Agent';
1735		- else sender = 'AI Agent';
1736		-
1737		- // Strip interactive UI from the cloned message so we get the conversation text.
1738		- var $clone = $msg.clone();
1739		- $clone.find('.copy-button, .message-toolbar, .mxchat-copy, button, script, style').remove();
1740		- var text = $clone.text().replace(/ /g, ' ').replace(/[ \t]+\n/g, '\n').replace(/\n{3,}/g, '\n\n').trim();
1741		- if (!text) return;
1742		-
1743		- lines.push('**' + sender + '**');
1744		- lines.push('');
1745		- lines.push(text);
1746		- lines.push('');
1747		- });
1748		-
1749		- var content = lines.join('\n');
1750		- var iso = now.toISOString().replace(/[:.]/g, '-').slice(0, 19);
1751		- var fname = 'mxchat-transcript-' + iso + '.md';
1752		- var blob = new Blob([content], { type: 'text/markdown;charset=utf-8' });
1753		- var url = URL.createObjectURL(blob);
1754		- var a = document.createElement('a');
1755		- a.href = url;
1756		- a.download = fname;
1757		- a.style.display = 'none';
1758		- document.body.appendChild(a);
1759		- a.click();
1760		- setTimeout(function() {
1761		- if (a.parentNode) a.parentNode.removeChild(a);
1762		- URL.revokeObjectURL(url);
1763		- }, 100);
1764		-}
1765		-
1766		-// Reads the bot bubble's actual computed bg+fg and writes them as CSS vars
1767		-// on the menu wrap, so the dropdown matches whatever paints the bubble —
1768		-// saved options, AI theme CSS, or the mxchat-theme add-on.
1769		-function mxchatSyncMenuColors(botId, $wrap) {
1770		- if (!$wrap || !$wrap.length) return;
1771		- var $bot = $wrap.closest('.mxchat-chatbot-wrapper').find('.bot-message').not('.temporary-message').first();
1772		- if (!$bot.length) return;
1773		- var cs = window.getComputedStyle($bot[0]);
1774		- if (cs.backgroundColor && cs.backgroundColor !== 'rgba(0, 0, 0, 0)' && cs.backgroundColor !== 'transparent') {
1775		- $wrap[0].style.setProperty('--mxchat-menu-bg', cs.backgroundColor);
1776		- }
1777		- // Bot text color usually lives on a child div, not .bot-message itself.
1778		- var $textChild = $bot.find('[style*="color"]').first();
1779		- var fg = ($textChild.length ? window.getComputedStyle($textChild[0]).color : cs.color);
1780		- if (fg) $wrap[0].style.setProperty('--mxchat-menu-fg', fg);
1781		-}
1782		-
1783		-// Renders (or re-renders) the item list for one menu wrap. Split out of
1784		-// mxchatInitHeaderMenu so the dynamic-settings merge (plan-32db95) can
1785		-// rebuild items + trigger visibility WITHOUT re-binding the one-time
1786		-// open/close/keyboard wiring. closeMenu is passed in by the init closure;
1787		-// a rebuild before init (never happens, but harmless) just skips it.
1788		-function mxchatRenderHeaderMenuItems(botId, $wrap, closeMenuFn) {
1789		- var $trigger = $wrap.find('.mxchat-menu-trigger');
1790		- var $menu = $wrap.find('.mxchat-header-menu');
1791		- var items = mxchatGetHeaderMenuItems(botId);
1792		-
1793		- $menu.empty();
1794		-
1795		- if (!items.length) {
1796		- $trigger.hide();
1797		- $menu.hide();
1798		- return;
1799		- }
1800		-
1801		- // Clear any inline display:none a previous zero-item render left behind —
1802		- // open/close visibility is governed by the hidden prop + is-open class.
1803		- $trigger.css('display', '');
1804		- $menu.css('display', '');
1805		-
1806		- items.forEach(function(item, idx) {
1807		- var $btn = $('<button>', {
1808		- type: 'button',
1809		- 'class': 'mxchat-menu-item',
1810		- 'role': 'menuitem',
1811		- 'tabindex': '-1',
1812		- 'data-menu-id': item.id,
1813		- html: '<span class="mxchat-menu-item-icon">' + item.icon + '</span>' +
1814		- '<span class="mxchat-menu-item-label"></span>'
1815		- });
1816		- $btn.find('.mxchat-menu-item-label').text(item.label);
1817		- $btn.on('click', function(e) {
1818		- e.preventDefault();
1819		- e.stopPropagation();
1820		- if (closeMenuFn) closeMenuFn();
1821		- try { item.action(); } catch (err) { /* no-op */ }
1822		- });
1823		- $menu.append($btn);
1824		- });
1825		-}
1826		-
1827		-// Re-render every menu on the page after a dynamic-settings merge
1828		-// (multi-bot: each wrap re-reads its items). An OPEN menu is left alone —
1829		-// swapping items under the user mid-interaction yanks focus — and the
1830		-// rebuild runs when it closes instead (closeMenu checks the pending flag).
1831		-function mxchatRebuildHeaderMenus() {
1832		- $('.mxchat-header-menu-wrap').each(function() {
1833		- var $wrap = $(this);
1834		- var botId = $wrap.data('bot-id');
1835		- if (!botId) return;
1836		- if (!$wrap.data('mxchatMenuReady')) {
1837		- mxchatInitHeaderMenu(botId);
1838		- return;
1839		- }
1840		- if ($wrap.find('.mxchat-header-menu').hasClass('is-open')) {
1841		- $wrap.data('mxchatMenuRebuildPending', true);
1842		- return;
1843		- }
1844		- mxchatRenderHeaderMenuItems(botId, $wrap, $wrap.data('mxchatMenuClose'));
1845		- });
1846		-}
1847		-
1848		-// One-time per-widget init: renders menu items, wires open/close,
1849		-// outside-click, Escape, and arrow-key navigation. If no items, hides the
1850		-// trigger. Wiring happens even when there are zero items at init, so a
1851		-// later dynamic-settings rebuild that adds items has a working trigger.
1852		-function mxchatInitHeaderMenu(botId) {
1853		- var $wrap = $('.mxchat-header-menu-wrap[data-bot-id="' + botId + '"]').first();
1854		- if (!$wrap.length || $wrap.data('mxchatMenuReady')) return;
1855		-
1856		- var $trigger = $wrap.find('.mxchat-menu-trigger');
1857		- var $menu = $wrap.find('.mxchat-header-menu');
1858		-
1859		- // Initial color sync — covers normal page load.
1860		- mxchatSyncMenuColors(botId, $wrap);
1861		-
1862		- function openMenu() {
1863		- // Re-sync each open in case the active theme changed since init.
1864		- mxchatSyncMenuColors(botId, $wrap);
1865		- $menu.prop('hidden', false).attr('aria-hidden', 'false').addClass('is-open');
1866		- $trigger.attr('aria-expanded', 'true');
1867		- // Focus the first item for keyboard users
1868		- setTimeout(function() {
1869		- $menu.find('.mxchat-menu-item').first().attr('tabindex', '0').trigger('focus');
1870		- }, 0);
1871		- }
1872		- function closeMenu(returnFocus) {
1873		- $menu.prop('hidden', true).attr('aria-hidden', 'true').removeClass('is-open');
1874		- $trigger.attr('aria-expanded', 'false');
1875		- $menu.find('.mxchat-menu-item').attr('tabindex', '-1');
1876		- if (returnFocus) $trigger.trigger('focus');
1877		- // A dynamic-settings rebuild that arrived while the menu was open
1878		- // was deferred (mxchatRebuildHeaderMenus) — run it now.
1879		- if ($wrap.data('mxchatMenuRebuildPending')) {
1880		- $wrap.removeData('mxchatMenuRebuildPending');
1881		- mxchatRenderHeaderMenuItems(botId, $wrap, closeMenu);
1882		- }
1883		- }
1884		-
1885		- // Toggle on trigger click — stop propagation so the .chatbot-top-bar
1886		- // click-to-collapse handler does not fire.
1887		- $trigger.on('click', function(e) {
1888		- e.preventDefault();
1889		- e.stopPropagation();
1890		- if ($menu.hasClass('is-open')) closeMenu();
1891		- else openMenu();
1892		- });
1893		-
1894		- // Don't let clicks inside the menu bubble to the top-bar collapse handler.
1895		- $menu.on('click', function(e) {
1896		- e.stopPropagation();
1897		- });
1898		-
1899		- // Outside click closes the menu.
1900		- $(document).on('click.mxchatMenu-' + botId, function(e) {
1901		- if (!$menu.hasClass('is-open')) return;
1902		- if ($wrap.has(e.target).length || $wrap.is(e.target)) return;
1903		- closeMenu();
1904		- });
1905		-
1906		- // Keyboard: Escape closes and returns focus; arrow keys move focus; Enter activates.
1907		- $menu.on('keydown', '.mxchat-menu-item', function(e) {
1908		- var $items = $menu.find('.mxchat-menu-item');
1909		- var idx = $items.index(this);
1910		- if (e.key === 'Escape') {
1911		- e.preventDefault();
1912		- closeMenu(true);
1913		- } else if (e.key === 'ArrowDown') {
1914		- e.preventDefault();
1915		- var $next = $items.eq((idx + 1) % $items.length);
1916		- $items.attr('tabindex', '-1');
1917		- $next.attr('tabindex', '0').trigger('focus');
1918		- } else if (e.key === 'ArrowUp') {
1919		- e.preventDefault();
1920		- var $prev = $items.eq((idx - 1 + $items.length) % $items.length);
1921		- $items.attr('tabindex', '-1');
1922		- $prev.attr('tabindex', '0').trigger('focus');
1923		- } else if (e.key === 'Enter' || e.key === ' ') {
1924		- e.preventDefault();
1925		- $(this).trigger('click');
1926		- }
1927		- });
1928		- $trigger.on('keydown', function(e) {
1929		- if (e.key === 'Escape' && $menu.hasClass('is-open')) {
1930		- e.preventDefault();
1931		- closeMenu(true);
1932		- } else if ((e.key === 'ArrowDown' || e.key === 'Enter' || e.key === ' ') && !$menu.hasClass('is-open')) {
1933		- e.preventDefault();
1934		- openMenu();
1935		- }
1936		- });
1937		-
1938		- // Expose closeMenu for out-of-closure re-renders (mxchatRebuildHeaderMenus),
1939		- // then do the initial item render.
1940		- $wrap.data('mxchatMenuClose', closeMenu);
1941		- mxchatRenderHeaderMenuItems(botId, $wrap, closeMenu);
1942		-
1943		- $wrap.data('mxchatMenuReady', true);
1944		-}
1945		-
1946		-// Initialize header menus for every rendered widget on DOM ready.
1947		-$(function() {
1948		- $('.mxchat-header-menu-wrap').each(function() {
1949		- var botId = $(this).data('bot-id');
1950		- if (botId) mxchatInitHeaderMenu(botId);
1951		- });
1952		-
1953		- // Embedded (non-floating) widgets are open from the moment the page
1954		- // renders — refresh dynamic settings at init (plan-32db95). Floating
1955		- // widgets refresh on first launcher open instead.
1956		- var hasEmbeddedWidget = $('.mxchat-chatbot-wrapper').filter(function() {
1957		- return !$(this).closest('.floating-chatbot').length;
1958		- }).length > 0;
1959		- if (hasEmbeddedWidget) {
1960		- mxchatRefreshDynamicSettings();
1961		- }
1962		-});
1963		-
	1283	+
1964	1284	function appendMessage(sender, messageText = '', messageHtml = '', images = [], isTemporary = false, botId = 'default') {
1965	1285	try {
1966	1286	// Determine styles based on sender type
1967	1287	let messageClass, bgColor, fontColor;
		@@ -2053,12 +1373,8 @@
2053	1373	if (lastUserMessage.length) {
2054	1374	scrollElementToTop(lastUserMessage, botId);
2055	1375	}
2056	1376	}
2057		-
2058		- if ((sender === "bot" || sender === "agent") && !isTemporary) {
2059		- if (typeof mxchatInitHeaderMenu === 'function') mxchatInitHeaderMenu(botId);
2060		- }
2061	1377	});
2062	1378
2063	1379	if (messageText.id) {
2064	1380	var instance = MxChatInstances.get(botId);
		@@ -2205,12 +1521,8 @@
2205	1521	}
2206	1522
2207	1523	// Re-enable chat input after response is displayed
2208	1524	enableChatInput(botId);
2209		-
2210		- if (sender === "bot" || sender === "agent") {
2211		- if (typeof mxchatInitHeaderMenu === 'function') mxchatInitHeaderMenu(botId);
2212		- }
2213	1525	} else {
2214	1526	appendMessage(sender, responseText, responseHtml, images, false, botId);
2215	1527	// Re-enable chat input after response is displayed
2216	1528	enableChatInput(botId);
		@@ -2663,14 +1975,13 @@
2663	1975	requestAnimationFrame(smoothScroll);
2664	1976	}
2665	1977	}
2666	1978
2667		- function scrollElementToTop(element, botId, topOffset) {
	1979	+ function scrollElementToTop(element, botId) {
2668	1980	botId = botId || 'default';
2669		- topOffset = (typeof topOffset === 'number') ? topOffset : 2;
2670	1981	var chatBox = getElement(botId, 'chat-box');
2671	1982	var elementTop = element.position().top + chatBox.scrollTop();
2672		- chatBox.animate({ scrollTop: Math.max(0, elementTop - topOffset) }, 500);
	1983	+ chatBox.animate({ scrollTop: elementTop }, 500);
2673	1984	}
2674	1985
2675	1986	function showChatWidget(botId) {
2676	1987	botId = botId || 'default';
		@@ -2981,19 +2292,9 @@
2981	2292	var content = message.content;
2982	2293	content = content.replace(/\\'/g, "'").replace(/\\"/g, '"');
2983	2294	content = decodeHTMLEntities(content);
2984	2295
2985		- // Skip linkify for messages containing structured HTML
2986		- // (forms, product cards, galleries, etc.) to avoid
2987		- // markdown formatting corrupting HTML attributes
2988		- // (e.g. underscores in name="field_name" becoming <em> tags)
2989		- if (content.includes("mxchat-product-card") ||
2990		- content.includes("mxchat-image-gallery") ||
2991		- content.includes("mxchat-featured-products") ||
2992		- content.includes("<form") ||
2993		- content.includes("<input") ||
2994		- content.includes("<select") ||
2995		- content.includes("<textarea")) {
	2296	+ if (content.includes("mxchat-product-card") || content.includes("mxchat-image-gallery")) {
2996	2297	messageElement.html(content);
2997	2298	} else {
2998	2299	var formattedContent = linkify(content);
2999	2300	messageElement.html(formattedContent);
		@@ -3107,10 +2408,10 @@
3107	2408	.then(data => {
3108	2409	if (data.success) {
3109	2410	container.style.display = 'none';
3110	2411	nameElement.textContent = '';
3111		- instance.activePdfFile = null;
3112		- appendMessage('bot', 'PDF removed.', '', [], false, botId);
	2412	+ activePdfFile = null;
	2413	+ appendMessage('bot', 'PDF removed.');
3113	2414	}
3114	2415	})
3115	2416	.catch(error => {
3116	2417	// Error removing PDF - silently continue
		@@ -3116,16 +2417,14 @@
3116	2417	// Error removing PDF - silently continue
3117	2418	});
3118	2419	}
3119	2420
3120		- function removeActiveWord(botId) {
3121		- botId = botId || 'default';
3122		- var instance = MxChatInstances.get(botId);
3123		- const container = getElementDOM(botId, 'active-word-container');
3124		- const nameElement = getElementDOM(botId, 'active-word-name');
3125		-
3126		- if (!container || !nameElement || !instance.activeWordFile) return;
3127		-
	2421	+ function removeActiveWord() {
	2422	+ const container = document.getElementById('active-word-container');
	2423	+ const nameElement = document.getElementById('active-word-name');
	2424	+
	2425	+ if (!container || !nameElement || !activeWordFile) return;
	2426	+
3128	2427	fetch(mxchatChat.ajax_url, {
3129	2428	method: 'POST',
3130	2429	headers: {
3131	2430	'Content-Type': 'application/x-www-form-urlencoded',
		@@ -3131,9 +2430,9 @@
3131	2430	'Content-Type': 'application/x-www-form-urlencoded',
3132	2431	},
3133	2432	body: new URLSearchParams({
3134	2433	'action': 'mxchat_remove_word',
3135		- 'session_id': getChatSession(botId),
	2434	+ 'session_id': sessionId,
3136	2435	'nonce': mxchatChat.nonce
3137	2436	})
3138	2437	})
3139	2438	.then(response => response.json())
		@@ -3140,10 +2439,10 @@
3140	2439	.then(data => {
3141	2440	if (data.success) {
3142	2441	container.style.display = 'none';
3143	2442	nameElement.textContent = '';
3144		- instance.activeWordFile = null;
3145		- appendMessage('bot', 'Word document removed.', '', [], false, botId);
	2443	+ activeWordFile = null;
	2444	+ appendMessage('bot', 'Word document removed.');
3146	2445	}
3147	2446	})
3148	2447	.catch(error => {
3149	2448	// Error removing Word document - silently continue
		@@ -3304,14 +2603,9 @@
3304	2603	collapseQuickQuestions(botId);
3305	2604	});
3306	2605
3307	2606	// Chatbot visibility toggle handlers - use class selector for multi-instance support
3308		- // Handles click + Enter/Space keypresses for keyboard accessibility (WCAG 2.1 SC 2.1.1).
3309		- $(document).on('click keydown', '.floating-chatbot-button', function(e) {
3310		- if (e.type === 'keydown') {
3311		- if (e.key !== 'Enter' && e.key !== ' ' && e.key !== 'Spacebar') return;
3312		- e.preventDefault();
3313		- }
	2607	+ $(document).on('click', '.floating-chatbot-button', function() {
3314	2608	var botId = getBotIdFromElement(this);
3315	2609	var $chatbot = getElement(botId, 'floating-chatbot');
3316	2610	var $badge = getElement(botId, 'chat-notification-badge');
3317	2611	var $preChat = getElement(botId, 'pre-chat-message');
		@@ -3316,20 +2610,14 @@
3316	2610	var $badge = getElement(botId, 'chat-notification-badge');
3317	2611	var $preChat = getElement(botId, 'pre-chat-message');
3318	2612
3319	2613	if ($chatbot.hasClass('hidden')) {
3320		- $chatbot.removeClass('hidden').addClass('visible')
3321		- .attr('aria-modal', 'true').attr('role', 'dialog');
3322		- $(this).addClass('hidden').attr('aria-expanded', 'true');
	2614	+ $chatbot.removeClass('hidden').addClass('visible');
	2615	+ $(this).addClass('hidden');
3323	2616	$badge.hide(); // Hide notification when opening chat
3324	2617	disableScroll();
3325	2618	$preChat.fadeOut(250);
3326	2619
3327		- // First open per page load: re-fetch behavior settings in case
3328		- // this page's inline values came from a stale full-page cache
3329		- // (plan-32db95). Idempotent — later opens are a no-op.
3330		- mxchatRefreshDynamicSettings();
3331		-
3332	2620	// Load chat history for returning visitors (persistence)
3333	2621	var chatPersistenceEnabled = typeof mxchatChat !== 'undefined' && mxchatChat.chat_persistence_toggle === 'on';
3334	2622	if (chatPersistenceEnabled) {
3335	2623	MxChatInstances.ensureSession(botId);
		@@ -3340,60 +2628,25 @@
3340	2628	var instance = MxChatInstances.get(botId);
3341	2629	if (emailBlocker && !instance.emailCheckDone) {
3342	2630	instance.emailCheckDone = true;
3343	2631	resolveEmailState(botId);
3344		- } else if (!emailBlocker) {
3345		- // No email collection — still route through showChatContainerForBot
3346		- // so the loader is shown while chat history loads
3347		- showChatContainerForBot(botId);
3348	2632	}
3349		-
3350		- // Move keyboard focus into the message input after the open transition.
3351		- setTimeout(function() {
3352		- var chatInput = getElementDOM(botId, 'chat-input');
3353		- if (chatInput && !chatInput.disabled) {
3354		- try { chatInput.focus({ preventScroll: true }); } catch (err) { chatInput.focus(); }
3355		- }
3356		- }, 300);
3357	2633	} else {
3358		- $chatbot.removeClass('visible').addClass('hidden').removeAttr('aria-modal');
3359		- $(this).removeClass('hidden').attr('aria-expanded', 'false');
	2634	+ $chatbot.removeClass('visible').addClass('hidden');
	2635	+ $(this).removeClass('hidden');
3360	2636	enableScroll();
3361	2637	checkPreChatDismissal(botId);
3362	2638	}
3363	2639	});
3364	2640
3365		- // Allow clicking anywhere on the title bar to close the chatbot.
3366		- // Returns keyboard focus to the launcher so keyboard users don't get
3367		- // stranded at <body> (WCAG SC 2.4.3 Focus Order). :focus-visible is
3368		- // heuristic-based so mouse-triggered close won't show a focus ring.
	2641	+ // Allow clicking anywhere on the title bar to close the chatbot
3369	2642	$(document).on('click', '.chatbot-top-bar', function() {
3370	2643	var botId = getBotIdFromElement(this);
3371		- getElement(botId, 'floating-chatbot').addClass('hidden').removeClass('visible').removeAttr('aria-modal');
3372		- var $launcher = getElement(botId, 'floating-chatbot-button');
3373		- $launcher.removeClass('hidden').attr('aria-expanded', 'false');
	2644	+ getElement(botId, 'floating-chatbot').addClass('hidden').removeClass('visible');
	2645	+ getElement(botId, 'floating-chatbot-button').removeClass('hidden');
3374	2646	enableScroll();
3375		- try { $launcher.trigger('focus'); } catch (err) { /* no-op */ }
3376	2647	});
3377	2648
3378		- // Global Escape-key handler — closes any visible chat widget and
3379		- // returns focus to its launcher. Standard modal-dismissal pattern;
3380		- // pairs with aria-modal="true" set on the widget when it opens.
3381		- $(document).on('keydown', function(e) {
3382		- if (e.key !== 'Escape' && e.key !== 'Esc') return;
3383		- var $visible = $('.floating-chatbot.visible');
3384		- if (!$visible.length) return;
3385		- e.preventDefault();
3386		- $visible.each(function() {
3387		- var botId = getBotIdFromElement(this);
3388		- $(this).addClass('hidden').removeClass('visible').removeAttr('aria-modal');
3389		- var $launcher = getElement(botId, 'floating-chatbot-button');
3390		- $launcher.removeClass('hidden').attr('aria-expanded', 'false');
3391		- try { $launcher.trigger('focus'); } catch (err) { /* no-op */ }
3392		- });
3393		- enableScroll();
3394		- });
3395		-
3396	2649	$(document).on('click', '.close-pre-chat-message', function(e) {
3397	2650	e.stopPropagation(); // Prevent triggering the parent .pre-chat-message click
3398	2651	var botId = getBotIdFromElement(this);
3399	2652	handlePreChatDismissal(botId);
		@@ -3413,20 +2666,17 @@
3413	2666	var wordInput = getElementDOM(botId, 'word-upload');
3414	2667	if (wordInput) wordInput.click();
3415	2668	});
3416	2669
3417		- // PDF file input change handler - delegated, bot-aware (was bound to stale un-suffixed id 'pdf-upload')
3418		- $(document).on('change', '.pdf-upload', async function(e) {
3419		- var botId = getBotIdFromElement(this);
3420		- var instance = MxChatInstances.get(botId);
3421		- const file = this.files[0];
3422		- const sessionId = MxChatInstances.ensureSession(botId);
3423		-
	2670	+ // PDF file input change handler
	2671	+ addSafeEventListener('pdf-upload', 'change', async function(e) {
	2672	+ const file = e.target.files[0];
	2673	+
3424	2674	if (!file || file.type !== 'application/pdf') {
3425	2675	alert('Please select a valid PDF file.');
3426	2676	return;
3427	2677	}
3428		-
	2678	+
3429	2679	if (!sessionId) {
3430	2680	alert('Error: No session ID found');
3431	2681	return;
3432	2682	}
		@@ -3434,49 +2684,47 @@
3434	2684	if (!mxchatChat || !mxchatChat.ajax_url || !mxchatChat.nonce) {
3435	2685	alert('Error: Ajax configuration missing');
3436	2686	return;
3437	2687	}
3438		-
	2688	+
3439	2689	// Disable buttons and show loading state
3440		- const uploadBtn = getElementDOM(botId, 'pdf-upload-btn');
3441		- const sendBtn = getElementDOM(botId, 'send-button');
3442		- if (!uploadBtn) return;
	2690	+ const uploadBtn = document.getElementById('pdf-upload-btn');
	2691	+ const sendBtn = document.getElementById('send-button');
3443	2692	const originalBtnContent = uploadBtn.innerHTML;
3444		-
	2693	+
3445	2694	try {
3446		- // Wait for page-cache nonce refresh before reading mxchatChat.nonce. See plan-c5457f.
3447		- await new Promise(function(resolve) { refreshNonceIfNeeded(resolve); });
3448	2695	const formData = new FormData();
3449	2696	formData.append('action', 'mxchat_upload_pdf');
3450	2697	formData.append('pdf_file', file);
3451	2698	formData.append('session_id', sessionId);
3452	2699	formData.append('nonce', mxchatChat.nonce);
3453		-
	2700	+
3454	2701	uploadBtn.disabled = true;
3455		- if (sendBtn) sendBtn.disabled = true;
	2702	+ sendBtn.disabled = true;
3456	2703	uploadBtn.innerHTML = `<svg class="spinner" viewBox="0 0 50 50">
3457	2704	<circle cx="25" cy="25" r="20" fill="none" stroke-width="5"></circle>
3458	2705	</svg>`;
3459		-
	2706	+
3460	2707	const response = await fetch(mxchatChat.ajax_url, {
3461	2708	method: 'POST',
3462	2709	body: formData
3463	2710	});
3464		-
	2711	+
3465	2712	const data = await response.json();
3466		-
	2713	+
3467	2714	if (data.success) {
3468	2715	// Hide popular questions if they exist
3469		- if (hasQuickQuestions(botId)) {
3470		- collapseQuickQuestions(botId);
	2716	+ const popularQuestionsContainer = document.getElementById('mxchat-popular-questions');
	2717	+ if (hasQuickQuestions()) {
	2718	+ collapseQuickQuestions();
3471	2719	}
3472		-
	2720	+
3473	2721	// Show the active PDF name
3474		- showActivePdf(data.data.filename, botId);
3475		-
3476		- appendMessage('bot', data.data.message, '', [], false, botId);
3477		- scrollToBottom(botId);
3478		- instance.activePdfFile = data.data.filename;
	2722	+ showActivePdf(data.data.filename);
	2723	+
	2724	+ appendMessage('bot', data.data.message);
	2725	+ scrollToBottom();
	2726	+ activePdfFile = data.data.filename;
3479	2727	} else {
3480	2728	alert('Failed to upload PDF. Please try again.');
3481	2729	}
3482	2730	} catch (error) {
		@@ -3482,76 +2730,66 @@
3482	2730	} catch (error) {
3483	2731	alert('Error uploading file. Please try again.');
3484	2732	} finally {
3485	2733	uploadBtn.disabled = false;
3486		- if (sendBtn) sendBtn.disabled = false;
	2734	+ sendBtn.disabled = false;
3487	2735	uploadBtn.innerHTML = originalBtnContent;
3488	2736	this.value = ''; // Reset file input
3489	2737	}
3490	2738	});
3491	2739
3492		- // Word file input change handler - delegated, bot-aware (was bound to stale un-suffixed id 'word-upload')
3493		- $(document).on('change', '.word-upload', async function(e) {
3494		- var botId = getBotIdFromElement(this);
3495		- var instance = MxChatInstances.get(botId);
3496		- const file = this.files[0];
3497		- const sessionId = MxChatInstances.ensureSession(botId);
3498		-
	2740	+ // Word file input change handler
	2741	+ addSafeEventListener('word-upload', 'change', async function(e) {
	2742	+ const file = e.target.files[0];
	2743	+
3499	2744	if (!file || file.type !== 'application/vnd.openxmlformats-officedocument.wordprocessingml.document') {
3500	2745	alert('Please select a valid Word document (.docx).');
3501	2746	return;
3502	2747	}
3503		-
	2748	+
3504	2749	if (!sessionId) {
3505	2750	alert('Error: No session ID found');
3506	2751	return;
3507	2752	}
3508	2753
3509		- if (!mxchatChat || !mxchatChat.ajax_url || !mxchatChat.nonce) {
3510		- alert('Error: Ajax configuration missing');
3511		- return;
3512		- }
3513		-
3514	2754	// Disable buttons and show loading state
3515		- const uploadBtn = getElementDOM(botId, 'word-upload-btn');
3516		- const sendBtn = getElementDOM(botId, 'send-button');
3517		- if (!uploadBtn) return;
	2755	+ const uploadBtn = document.getElementById('word-upload-btn');
	2756	+ const sendBtn = document.getElementById('send-button');
3518	2757	const originalBtnContent = uploadBtn.innerHTML;
3519		-
	2758	+
3520	2759	try {
3521		- // Wait for page-cache nonce refresh before reading mxchatChat.nonce. See plan-c5457f.
3522		- await new Promise(function(resolve) { refreshNonceIfNeeded(resolve); });
3523	2760	const formData = new FormData();
3524	2761	formData.append('action', 'mxchat_upload_word');
3525	2762	formData.append('word_file', file);
3526	2763	formData.append('session_id', sessionId);
3527	2764	formData.append('nonce', mxchatChat.nonce);
3528		-
	2765	+
3529	2766	uploadBtn.disabled = true;
3530		- if (sendBtn) sendBtn.disabled = true;
	2767	+ sendBtn.disabled = true;
3531	2768	uploadBtn.innerHTML = `<svg class="spinner" viewBox="0 0 50 50">
3532	2769	<circle cx="25" cy="25" r="20" fill="none" stroke-width="5"></circle>
3533	2770	</svg>`;
3534		-
	2771	+
3535	2772	const response = await fetch(mxchatChat.ajax_url, {
3536	2773	method: 'POST',
3537	2774	body: formData
3538	2775	});
3539		-
	2776	+
3540	2777	const data = await response.json();
3541		-
	2778	+
3542	2779	if (data.success) {
3543	2780	// Hide popular questions if they exist
3544		- if (hasQuickQuestions(botId)) {
3545		- collapseQuickQuestions(botId);
	2781	+ const popularQuestionsContainer = document.getElementById('mxchat-popular-questions');
	2782	+ if (hasQuickQuestions()) {
	2783	+ collapseQuickQuestions();
3546	2784	}
3547		-
	2785	+
3548	2786	// Show the active Word document name
3549		- showActiveWord(data.data.filename, botId);
3550		-
3551		- appendMessage('bot', data.data.message, '', [], false, botId);
3552		- scrollToBottom(botId);
3553		- instance.activeWordFile = data.data.filename;
	2787	+ showActiveWord(data.data.filename);
	2788	+
	2789	+ appendMessage('bot', data.data.message);
	2790	+ scrollToBottom();
	2791	+ activeWordFile = data.data.filename;
3554	2792	} else {
3555	2793	alert('Failed to upload Word document. Please try again.');
3556	2794	}
3557	2795	} catch (error) {
		@@ -3557,25 +2795,25 @@
3557	2795	} catch (error) {
3558	2796	alert('Error uploading file. Please try again.');
3559	2797	} finally {
3560	2798	uploadBtn.disabled = false;
3561		- if (sendBtn) sendBtn.disabled = false;
	2799	+ sendBtn.disabled = false;
3562	2800	uploadBtn.innerHTML = originalBtnContent;
3563	2801	this.value = ''; // Reset file input
3564	2802	}
3565	2803	});
3566	2804
3567		- // Remove button click handlers - delegated, bot-aware (were bound to stale un-suffixed ids)
3568		- $(document).on('click', '.remove-pdf-btn', function(e) {
	2805	+ // Remove button click handlers
	2806	+ document.getElementById('remove-pdf-btn')?.addEventListener('click', function(e) {
3569	2807	e.preventDefault();
3570	2808	e.stopPropagation();
3571		- removeActivePdf(getBotIdFromElement(this));
	2809	+ removeActivePdf();
3572	2810	});
3573		-
3574		- $(document).on('click', '.remove-word-btn', function(e) {
	2811	+
	2812	+ document.getElementById('remove-word-btn')?.addEventListener('click', function(e) {
3575	2813	e.preventDefault();
3576	2814	e.stopPropagation();
3577		- removeActiveWord(getBotIdFromElement(this));
	2815	+ removeActiveWord();
3578	2816	});
3579	2817
3580	2818	// Window resize handlers
3581	2819	$(window).on('resize orientationchange', function() {
		@@ -3613,59 +2851,8 @@
3613	2851	});
3614	2852
3615	2853
3616	2854	// ====================================
3617		-// INIT LOADER & CHAT CONTAINER HELPERS
3618		-// ====================================
3619		-// These must be outside the email collection block so they're always available
3620		-// (used by persistence loading even when email collection is off)
3621		-
3622		-function showInitLoader(botId) {
3623		- var loader = getElementDOM(botId, 'mxchat-init-loader');
3624		- if (loader) loader.style.display = 'flex';
3625		-}
3626		-
3627		-function hideInitLoader(botId) {
3628		- var loader = getElementDOM(botId, 'mxchat-init-loader');
3629		- if (loader) loader.style.display = 'none';
3630		-}
3631		-
3632		-function showEmailFormForBot(botId) {
3633		- hideInitLoader(botId);
3634		- var emailBlocker = getElementDOM(botId, 'email-blocker');
3635		- var chatContainer = getElementDOM(botId, 'chat-container');
3636		- if (emailBlocker) emailBlocker.style.display = 'flex';
3637		- if (chatContainer) chatContainer.style.display = 'none';
3638		-}
3639		-
3640		-function showChatContainerForBot(botId) {
3641		- var emailBlocker = getElementDOM(botId, 'email-blocker');
3642		- var chatContainer = getElementDOM(botId, 'chat-container');
3643		- if (emailBlocker) emailBlocker.style.display = 'none';
3644		-
3645		- var instance = MxChatInstances.get(botId);
3646		- var chatPersistenceEnabled = mxchatChat.chat_persistence_toggle === 'on';
3647		-
3648		- // If persistence is on and history hasn't loaded yet, show loader
3649		- // while history loads to prevent flash of empty chat
3650		- if (chatPersistenceEnabled && !instance.chatHistoryLoaded) {
3651		- if (chatContainer) chatContainer.style.display = 'none';
3652		- showInitLoader(botId);
3653		- loadChatHistory(botId, function() {
3654		- hideInitLoader(botId);
3655		- if (chatContainer) chatContainer.style.display = 'flex';
3656		- scrollToBottom(botId, true);
3657		- });
3658		- } else {
3659		- hideInitLoader(botId);
3660		- if (chatContainer) chatContainer.style.display = 'flex';
3661		- if (typeof loadChatHistory === 'function') {
3662		- loadChatHistory(botId);
3663		- }
3664		- }
3665		-}
3666		-
3667		-// ====================================
3668	2855	// EMAIL COLLECTION SETUP - MULTI-INSTANCE VERSION
3669	2856	// ====================================
3670	2857	// Only run email collection setup if it's enabled
3671	2858	if (mxchatChat && mxchatChat.email_collection_enabled === 'on') {
		@@ -3701,8 +2888,40 @@
3701	2888	`;
3702	2889	document.head.appendChild(style);
3703	2890	}
3704	2891
	2892	+ // Helper functions for email collection (multi-instance aware)
	2893	+ function showEmailFormForBot(botId) {
	2894	+ var emailBlocker = getElementDOM(botId, 'email-blocker');
	2895	+ var chatContainer = getElementDOM(botId, 'chat-container');
	2896	+ if (emailBlocker) emailBlocker.style.display = 'flex';
	2897	+ if (chatContainer) chatContainer.style.display = 'none';
	2898	+ }
	2899	+
	2900	+ function showChatContainerForBot(botId) {
	2901	+ var emailBlocker = getElementDOM(botId, 'email-blocker');
	2902	+ var chatContainer = getElementDOM(botId, 'chat-container');
	2903	+ if (emailBlocker) emailBlocker.style.display = 'none';
	2904	+
	2905	+ var instance = MxChatInstances.get(botId);
	2906	+ var chatPersistenceEnabled = mxchatChat.chat_persistence_toggle === 'on';
	2907	+
	2908	+ // If persistence is on and history hasn't loaded yet, keep container
	2909	+ // hidden until history loads to prevent flash of empty chat
	2910	+ if (chatPersistenceEnabled && !instance.chatHistoryLoaded) {
	2911	+ if (chatContainer) chatContainer.style.display = 'none';
	2912	+ loadChatHistory(botId, function() {
	2913	+ if (chatContainer) chatContainer.style.display = 'flex';
	2914	+ scrollToBottom(botId, true);
	2915	+ });
	2916	+ } else {
	2917	+ if (chatContainer) chatContainer.style.display = 'flex';
	2918	+ if (typeof loadChatHistory === 'function') {
	2919	+ loadChatHistory(botId);
	2920	+ }
	2921	+ }
	2922	+ }
	2923	+
3705	2924	function isValidEmailAddress(email) {
3706	2925	const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
3707	2926	return emailRegex.test(email.trim()) && email.length <= 254;
3708	2927	}
		@@ -3840,14 +3059,13 @@
3840	3059
3841	3060	function checkSessionAndEmailForBot(botId) {
3842	3061	const sessionId = MxChatInstances.ensureSession(botId);
3843	3062
3844		- // Hide both panels while we check — show loader instead
	3063	+ // Hide both panels while we check — prevents flash of wrong state
3845	3064	var emailBlocker = getElementDOM(botId, 'email-blocker');
3846	3065	var chatContainer = getElementDOM(botId, 'chat-container');
3847	3066	if (emailBlocker) emailBlocker.style.display = 'none';
3848	3067	if (chatContainer) chatContainer.style.display = 'none';
3849		- showInitLoader(botId);
3850	3068
3851	3069	fetch(mxchatChat.ajax_url, {
3852	3070	method: 'POST',
3853	3071	headers: {
		@@ -4027,8 +3245,9 @@
4027	3245	$('.mxchat-chatbot-wrapper').each(function() {
4028	3246	var botId = $(this).data('bot-id') || 'default';
4029	3247	var emailBlocker = getElementDOM(botId, 'email-blocker');
4030	3248
	3249	+ // Only check if email blocker exists for this bot
4031	3250	if (emailBlocker) {
4032	3251	if (isEmbeddedBot(botId)) {
4033	3252	// Embedded bots are always visible — check now
4034	3253	resolveEmailState(botId);
		@@ -4033,15 +3252,8 @@
4033	3252	// Embedded bots are always visible — check now
4034	3253	resolveEmailState(botId);
4035	3254	}
4036	3255	// Floating bots: handled in the widget open handler
4037		- } else if (isEmbeddedBot(botId)) {
4038		- // Embedded bot, no email collection — load history with loader
4039		- var chatPersistenceEnabled = typeof mxchatChat !== 'undefined' && mxchatChat.chat_persistence_toggle === 'on';
4040		- if (chatPersistenceEnabled) {
4041		- MxChatInstances.ensureSession(botId);
4042		- showChatContainerForBot(botId);
4043		- }
4044	3256	}
4045	3257	});
4046	3258	}
4047	3259
		@@ -4066,10 +3278,8 @@
4066	3278	var instance = MxChatInstances.get(botId);
4067	3279	if (emailBlocker && !instance.emailCheckDone) {
4068	3280	instance.emailCheckDone = true;
4069	3281	resolveEmailState(botId);
4070		- } else if (!emailBlocker) {
4071		- showChatContainerForBot(botId);
4072	3282	}
4073	3283	}
4074	3284	});
4075	3285
		@@ -4269,312 +3479,6 @@
4269	3479	}, 2000);
4270	3480	});
4271	3481	}
4272	3482	}
4273		-});
4274		-
4275		-// ============================================================================
4276		-// SATISFACTION RATING (v3.2.6)
4277		-// ============================================================================
4278		-// Per-session 👍/👎 prompt that appears in the chat-box after 60s of user
4279		-// inactivity following a bot reply. One prompt per session, deduped via
4280		-// localStorage. Runs ONLY when the satisfaction_rating_enabled option is on —
4281		-// the option (default off) is authoritative.
4282		-jQuery(function($) {
4283		- if (typeof mxchatChat === 'undefined') return;
4284		- // wp_localize_script stringifies scalars: a PHP boolean false arrives as
4285		- // '' and true as '1', so this must be an explicit-enable allowlist — the
4286		- // old "disabled when exactly false/'off'" check let '' through and the
4287		- // bubble rendered on sites with the option off/unset (plan-4bba64). PHP
4288		- // now emits 'on'/'off' strings; true/'1'/1 keep cached pre-fix HTML
4289		- // (boolean-true localizations) working.
4290		- // NOTE (plan-32db95): this gate reads the INLINE value at DOM ready and is
4291		- // deliberately NOT re-evaluated after the widget's dynamic-settings refresh
4292		- // merges fresh values over mxchatChat (that merge fires on first widget
4293		- // open, after this module has already decided). Re-evaluating would mean
4294		- // restructuring the whole module to late-bind its listeners — not worth it
4295		- // for a prompt that is at worst stale for one page load on a cached page.
4296		- var sre = mxchatChat.satisfaction_rating_enabled;
4297		- if (sre !== 'on' && sre !== true && sre !== '1' && sre !== 1) return;
4298		-
4299		- // wp_localize_script stringifies ints, so accept both number and numeric string.
4300		- var idleRaw = mxchatChat.satisfaction_rating_idle_seconds;
4301		- var idleSeconds = (typeof idleRaw === 'number') ? idleRaw : parseInt(idleRaw, 10);
4302		- if (!isFinite(idleSeconds)) idleSeconds = 60;
4303		- if (idleSeconds < 5) idleSeconds = 5;
4304		- if (idleSeconds > 600) idleSeconds = 600;
4305		- var IDLE_MS = idleSeconds * 1000;
4306		- var MIN_BOT_REPLIES = 2;
4307		- var ratingState = {};
4308		-
4309		- function getState(botId) {
4310		- if (!ratingState[botId]) {
4311		- ratingState[botId] = { idleTimer: null, botReplies: 0, promptShown: false, dismissed: false };
4312		- }
4313		- return ratingState[botId];
4314		- }
4315		-
4316		- function getSessionId(botId) {
4317		- if (typeof MxChatInstances !== 'undefined' && MxChatInstances.getChatSession) {
4318		- return MxChatInstances.getChatSession(botId);
4319		- }
4320		- return null;
4321		- }
4322		-
4323		- function isAlreadyRated(sessionId) {
4324		- if (!sessionId) return false;
4325		- try { return localStorage.getItem('mxchat_rated:' + sessionId) === '1'; } catch (e) { return false; }
4326		- }
4327		-
4328		- function markRated(sessionId) {
4329		- if (!sessionId) return;
4330		- try { localStorage.setItem('mxchat_rated:' + sessionId, '1'); } catch (e) {}
4331		- }
4332		-
4333		- function esc(s) {
4334		- return String(s == null ? '' : s)
4335		- .replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')
4336		- .replace(/"/g, '&quot;').replace(/'/g, '&#039;');
4337		- }
4338		-
4339		- // Mirror shouldSkipInlineColors so rating bubbles defer to AI-theme CSS.
4340		- function ratingSkipInlineColors(botId) {
4341		- if (mxchatChat.skip_inline_colors) return true;
4342		- var botAssignments = mxchatChat.bot_theme_assignments || {};
4343		- return botAssignments.hasOwnProperty(botId);
4344		- }
4345		-
4346		- function botBubbleStyleAttr(botId) {
4347		- if (ratingSkipInlineColors(botId)) return '';
4348		- var bg = mxchatChat.bot_message_bg_color;
4349		- var fg = mxchatChat.bot_message_font_color;
4350		- if (!bg && !fg) return '';
4351		- return ' style="background-color: ' + esc(bg || '') + '; color: ' + esc(fg || '') + ';"';
4352		- }
4353		-
4354		- // Reads the rating bubble's actual computed fg+bg (whatever paints it —
4355		- // the inline color pickers OR the mxchat-theme AI customizer's injected CSS)
4356		- // and paints the filled "Send" pill so it fills with the bot font color and
4357		- // labels in the bubble bg. Mirrors mxchatSyncMenuColors(~:1512) for the read.
4358		- // We paint the submit button DIRECTLY (inline longhand) rather than relying
4359		- // on the CSS rule's var()s: Chromium resolves an INHERITED custom property
4360		- // unreliably inside a descendant's `background`, so a bubble-level var would
4361		- // silently fall back to the literal (white-block bug all over again). Inline
4362		- // longhand always wins. Same transparent-guard as the menu so we never paint
4363		- // a see-through value — in that case the CSS literal fallbacks keep it legible.
4364		- function syncRatingBubbleColors(botId) {
4365		- var $chatBox = getChatBoxByBotId(botId);
4366		- if (!$chatBox || !$chatBox.length) return;
4367		- var bubbleEl = $chatBox.find('.mxchat-rating-bot-bubble').last()[0];
4368		- if (!bubbleEl) return;
4369		- var cs = window.getComputedStyle(bubbleEl);
4370		- var fg = cs.color;
4371		- var bg = cs.backgroundColor;
4372		- var hasFg = fg && fg !== 'rgba(0, 0, 0, 0)' && fg !== 'transparent';
4373		- var hasBg = bg && bg !== 'rgba(0, 0, 0, 0)' && bg !== 'transparent';
4374		- // Expose on the bubble too, for any inheriting styles / future use.
4375		- if (hasFg) bubbleEl.style.setProperty('--mxchat-bot-fg', fg);
4376		- if (hasBg) bubbleEl.style.setProperty('--mxchat-bot-bg', bg);
4377		- // Paint the Send pill directly — the part that actually fixes the bug.
4378		- var submitEl = bubbleEl.querySelector('.mxchat-rating-submit');
4379		- if (submitEl) {
4380		- if (hasFg) submitEl.style.backgroundColor = fg; // fill = bot font color
4381		- if (hasBg) submitEl.style.color = bg; // label = bubble background
4382		- }
4383		- }
4384		-
4385		- function copy(key) {
4386		- var c = mxchatChat.satisfaction_rating_copy || {};
4387		- var d = {
4388		- question: 'Was this helpful?',
4389		- helpful: 'Helpful',
4390		- not_helpful: 'Not helpful',
4391		- dismiss: 'Dismiss',
4392		- thanks: 'Thanks! Anything we should improve? (optional)',
4393		- placeholder: 'Tell us what could be better…',
4394		- send: 'Send',
4395		- skip: 'Skip',
4396		- saved: 'Thanks for the feedback.'
4397		- };
4398		- return c[key] || d[key];
4399		- }
4400		-
4401		- function thumbUpSvg() {
4402		- return '<svg viewBox="0 0 24 24" width="18" height="18" fill="currentColor" aria-hidden="true"><path d="M7.493 18.75c-.425 0-.82-.236-.975-.632A7.48 7.48 0 0 1 6 15.375c0-1.75.599-3.358 1.602-4.634.151-.192.373-.309.6-.397.473-.183.89-.514 1.212-.924a9.042 9.042 0 0 1 2.861-2.4c.723-.384 1.35-.956 1.653-1.715a4.498 4.498 0 0 0 .322-1.672V2.75A.75.75 0 0 1 15 2a2.25 2.25 0 0 1 2.25 2.25c0 1.152-.26 2.243-.723 3.218-.266.558.107 1.282.725 1.282h3.126c1.026 0 1.945.694 2.054 1.715.045.422.068.85.068 1.285a11.95 11.95 0 0 1-2.649 7.521c-.388.482-.987.729-1.605.729H14.23c-.483 0-.964-.078-1.423-.23l-3.114-1.04a4.501 4.501 0 0 0-1.423-.23h-.777Z"/><path d="M2.331 10.977a11.969 11.969 0 0 0-.831 4.398 12 12 0 0 0 .52 3.507c.26.85 1.084 1.368 1.973 1.368H4.9c.445 0 .72-.498.523-.898a8.963 8.963 0 0 1-.924-3.977c0-1.708.476-3.305 1.302-4.666.245-.403-.028-.959-.5-.959H4.25c-.832 0-1.612.453-1.918 1.227Z"/></svg>';
4403		- }
4404		- function thumbDownSvg() {
4405		- return '<svg viewBox="0 0 24 24" width="18" height="18" fill="currentColor" aria-hidden="true"><path d="M15.73 5.25h1.035A7.465 7.465 0 0 1 18 9.375a7.465 7.465 0 0 1-1.235 4.125h-.148c-.806 0-1.534.446-2.031 1.08a9.04 9.04 0 0 1-2.861 2.4c-.723.384-1.35.956-1.653 1.715a4.498 4.498 0 0 0-.322 1.672V21a.75.75 0 0 1-.75.75 2.25 2.25 0 0 1-2.25-2.25c0-1.152.26-2.243.723-3.218.266-.558-.107-1.282-.725-1.282H3.622c-1.026 0-1.945-.694-2.054-1.715A12.137 12.137 0 0 1 1.5 12c0-2.848.992-5.464 2.649-7.521C4.537 3.997 5.136 3.75 5.754 3.75h4.541c.483 0 .964.078 1.423.23l3.114 1.04c.46.152.94.23 1.423.23Z"/><path d="M21.669 13.023c.536-1.362.831-2.845.831-4.398 0-1.22-.182-2.398-.52-3.507-.26-.85-1.084-1.368-1.973-1.368H19.1c-.445 0-.72.498-.523.898.591 1.2.924 2.55.924 3.977a8.958 8.958 0 0 1-1.302 4.666c-.245.403.028.959.5.959h1.053c.832 0 1.612-.453 1.918-1.227Z"/></svg>';
4406		- }
4407		-
4408		- function buildPromptHtml(botId) {
4409		- var styleAttr = botBubbleStyleAttr(botId);
4410		- return ''
4411		- + '<div class="bot-message mxchat-rating-bot-bubble"' + styleAttr + '>'
4412		- + '<div class="mxchat-rating-prompt" data-bot-id="' + esc(botId) + '" role="group" aria-label="' + esc(copy('question')) + '">'
4413		- + '<div class="mxchat-rating-question">' + esc(copy('question')) + '</div>'
4414		- + '<div class="mxchat-rating-actions">'
4415		- + '<span class="mxchat-rating-buttons">'
4416		- + '<button type="button" class="mxchat-rating-btn" data-rating="1" aria-label="' + esc(copy('helpful')) + '">' + thumbUpSvg() + '</button>'
4417		- + '<button type="button" class="mxchat-rating-btn" data-rating="-1" aria-label="' + esc(copy('not_helpful')) + '">' + thumbDownSvg() + '</button>'
4418		- + '</span>'
4419		- + '<button type="button" class="mxchat-rating-dismiss" aria-label="' + esc(copy('dismiss')) + '">×</button>'
4420		- + '</div>'
4421		- + '</div>'
4422		- + '</div>';
4423		- }
4424		-
4425		- function buildFeedbackHtml(botId, rating) {
4426		- var styleAttr = botBubbleStyleAttr(botId);
4427		- return ''
4428		- + '<div class="bot-message mxchat-rating-bot-bubble"' + styleAttr + '>'
4429		- + '<div class="mxchat-rating-feedback" data-bot-id="' + esc(botId) + '" data-rating="' + esc(String(rating)) + '">'
4430		- + '<div class="mxchat-rating-feedback-label">' + esc(copy('thanks')) + '</div>'
4431		- + '<textarea class="mxchat-rating-feedback-input" maxlength="500" placeholder="' + esc(copy('placeholder')) + '" rows="2"></textarea>'
4432		- + '<div class="mxchat-rating-feedback-actions">'
4433		- + '<button type="button" class="mxchat-rating-skip">' + esc(copy('skip')) + '</button>'
4434		- + '<button type="button" class="mxchat-rating-submit">' + esc(copy('send')) + '</button>'
4435		- + '</div>'
4436		- + '</div>'
4437		- + '</div>';
4438		- }
4439		-
4440		- function buildSavedHtml(botId) {
4441		- var styleAttr = botBubbleStyleAttr(botId);
4442		- return ''
4443		- + '<div class="bot-message mxchat-rating-bot-bubble"' + styleAttr + '>'
4444		- + '<div class="mxchat-rating-saved">' + esc(copy('saved')) + '</div>'
4445		- + '</div>';
4446		- }
4447		-
4448		- function getChatBoxByBotId(botId) {
4449		- var $byId = $('#chat-box-' + botId);
4450		- if ($byId.length) return $byId.first();
4451		- return $('.chat-box').first();
4452		- }
4453		-
4454		- function scrollChatBoxToBottom($chatBox) {
4455		- if (!$chatBox || !$chatBox.length) return;
4456		- $chatBox.scrollTop($chatBox[0].scrollHeight);
4457		- }
4458		-
4459		- function showPrompt(botId) {
4460		- var s = getState(botId);
4461		- if (s.promptShown || s.dismissed) return;
4462		- var sessionId = getSessionId(botId);
4463		- if (!sessionId) return;
4464		- if (isAlreadyRated(sessionId)) { s.promptShown = true; return; }
4465		- var $chatBox = getChatBoxByBotId(botId);
4466		- if (!$chatBox.length) return;
4467		- if ($chatBox.find('.mxchat-rating-prompt').length) { s.promptShown = true; return; }
4468		- $chatBox.append(buildPromptHtml(botId));
4469		- syncRatingBubbleColors(botId);
4470		- s.promptShown = true;
4471		- scrollChatBoxToBottom($chatBox);
4472		- }
4473		-
4474		- function submitRating(botId, rating, feedback) {
4475		- var sessionId = getSessionId(botId);
4476		- if (!sessionId) return;
4477		- $.post(mxchatChat.ajax_url, {
4478		- action: 'mxchat_save_rating',
4479		- session_id: sessionId,
4480		- bot_id: botId,
4481		- rating: rating,
4482		- feedback: feedback || ''
4483		- });
4484		- markRated(sessionId);
4485		- }
4486		-
4487		- function onBotReply(botId) {
4488		- var s = getState(botId);
4489		- s.botReplies += 1;
4490		- if (s.promptShown || s.dismissed) return;
4491		- var sessionId = getSessionId(botId);
4492		- if (sessionId && isAlreadyRated(sessionId)) { s.promptShown = true; return; }
4493		- if (s.botReplies < MIN_BOT_REPLIES) return;
4494		- if (s.idleTimer) clearTimeout(s.idleTimer);
4495		- s.idleTimer = setTimeout(function() { showPrompt(botId); }, IDLE_MS);
4496		- }
4497		-
4498		- function onUserMessage(botId) {
4499		- var s = getState(botId);
4500		- if (s.idleTimer) { clearTimeout(s.idleTimer); s.idleTimer = null; }
4501		- }
4502		-
4503		- function botIdFromChatBox(el) {
4504		- var id = el && el.id ? el.id : '';
4505		- return id.indexOf('chat-box-') === 0 ? id.substring('chat-box-'.length) : 'default';
4506		- }
4507		-
4508		- function setupObserver(chatBox) {
4509		- var botId = botIdFromChatBox(chatBox);
4510		- try {
4511		- var observer = new MutationObserver(function(mutations) {
4512		- mutations.forEach(function(m) {
4513		- for (var i = 0; i < m.addedNodes.length; i++) {
4514		- var node = m.addedNodes[i];
4515		- if (!node || node.nodeType !== 1) continue;
4516		- var $n = $(node);
4517		- if ($n.hasClass('mxchat-rating-bot-bubble') || $n.hasClass('mxchat-rating-prompt') || $n.hasClass('mxchat-rating-feedback') || $n.hasClass('mxchat-rating-saved')) continue;
4518		- if ($n.hasClass('bot-message')) onBotReply(botId); // count at insert time — streaming providers append with .temporary-message first, then remove later (childList observer can't see attr changes)
4519		- else if ($n.hasClass('user-message')) onUserMessage(botId);
4520		- }
4521		- });
4522		- });
4523		- observer.observe(chatBox, { childList: true });
4524		- } catch (e) { /* noop */ }
4525		- }
4526		-
4527		- $('.chat-box').each(function() { setupObserver(this); });
4528		-
4529		- $(document).on('click', '.mxchat-rating-btn', function(e) {
4530		- e.preventDefault();
4531		- var $btn = $(this);
4532		- var $prompt = $btn.closest('.mxchat-rating-prompt');
4533		- var $wrap = $btn.closest('.mxchat-rating-bot-bubble');
4534		- var botId = $prompt.data('bot-id') || 'default';
4535		- var rating = parseInt($btn.attr('data-rating'), 10);
4536		- if (rating !== 1 && rating !== -1) return;
4537		- submitRating(botId, rating, '');
4538		- ($wrap.length ? $wrap : $prompt).replaceWith(buildFeedbackHtml(botId, rating));
4539		- syncRatingBubbleColors(botId);
4540		- scrollChatBoxToBottom(getChatBoxByBotId(botId));
4541		- });
4542		-
4543		- $(document).on('click', '.mxchat-rating-dismiss', function(e) {
4544		- e.preventDefault();
4545		- var $prompt = $(this).closest('.mxchat-rating-prompt');
4546		- var $wrap = $(this).closest('.mxchat-rating-bot-bubble');
4547		- var botId = $prompt.data('bot-id') || 'default';
4548		- var s = getState(botId);
4549		- s.dismissed = true;
4550		- markRated(getSessionId(botId));
4551		- ($wrap.length ? $wrap : $prompt).remove();
4552		- });
4553		-
4554		- function closeFeedback($fb) {
4555		- var botId = $fb.data('bot-id') || 'default';
4556		- var $wrap = $fb.closest('.mxchat-rating-bot-bubble');
4557		- ($wrap.length ? $wrap : $fb).replaceWith(buildSavedHtml(botId));
4558		- syncRatingBubbleColors(botId);
4559		- scrollChatBoxToBottom(getChatBoxByBotId(botId));
4560		- }
4561		-
4562		- $(document).on('click', '.mxchat-rating-skip', function(e) {
4563		- e.preventDefault();
4564		- closeFeedback($(this).closest('.mxchat-rating-feedback'));
4565		- });
4566		-
4567		- $(document).on('click', '.mxchat-rating-submit', function(e) {
4568		- e.preventDefault();
4569		- var $fb = $(this).closest('.mxchat-rating-feedback');
4570		- var botId = $fb.data('bot-id') || 'default';
4571		- var rating = parseInt($fb.attr('data-rating'), 10);
4572		- if (rating !== 1 && rating !== -1) { closeFeedback($fb); return; }
4573		- var text = String($fb.find('.mxchat-rating-feedback-input').val() || '').trim();
4574		- if (text !== '') {
4575		- submitRating(botId, rating, text);
4576		- }
4577		- closeFeedback($fb);
4578		- });
4579	3483	});
4580	3484