Conversation UI widget sandbox

Agent connection Project ID Signing key (PEM) Retrieval idle

The Project ID becomes the JWT iss; the key signs it in-browser (ES256). The key is kept in this browser's localStorage only — never sent anywhere, never committed. Locally it falls back to /dev-private.pem, which the deployed build does not ship. Project ID is also settable as ?projectId=, and retrieval as ?retrievalMode=vector|pageindex — the switch the answer-quality suite flips to score one strategy against the other. Connect remounts the widget against these values; starting a conversation and opening or closing the panel are the FAB's job, and ending one is the panel's End button. Every minted token's claims are logged to the console, since a 403 from the backend doesn't say whether it rejected the claims or the signature.

The signing key is optional. The project decides whether a JWT is needed: one whose auth_mode is origin connects without one from this page (, the widget's own origin, which the origin tier always accepts), and nothing is minted — those conversations are recorded as preview, not live. Any other project needs the key.

Appearance (applied on reload — the load-time install model)

These are the install snippet's data-* attributes, and they OUTRANK the project's stored appearance. Clear a field (or tick “use project colour”) to send nothing for it and see what the project's own config paints — which only works against a deploy, since pnpm dev runs no Pages Function. FAB size and corner radius are the exceptions: the loader applies both to the iframes it owns in this page, so they stay install-only and a project value for them is ignored. Every field is also settable as a query param under its real wire name — this page owns only its connection params and forwards every other one as appearance — so a field added to the registry before a control is added here is still reachable, and Reset clears it.

Colour use project colour Icon URL Icon scale FAB size (px) Corner radius (px) Font Title colour Widget name Launcher Fill Pill label Fill colour Orb palette Interactive Idle animation Idle type Idle interval (s) Expanding message Message text Message duration (s) Message interval (s)

Page navigation Page URL

Blank sends nothing, which is the default. This fixture isn't the Client's site, so an invented path is meaningless to the agent — knowledge chunks are keyed by the absolute URL they were crawled from, so a made-up one matches nothing and only biases retrieval with noise. To exercise page-anchored retrieval, paste a real page of the Project's site (https://…); to test the knowledge base on its own, leave it blank. Retrieval by query works either way.

Whatever you enter is forwarded as VoiceWidget('update', { pageContext: { url } }), the way a real integrator's SPA does on every navigation, and the loader resolves a relative path against this page. Nothing is rendered for it — the page context is a claim the host makes, not something derived from a page. Also settable at load time as ?pageUrl= (percent-encode a nested query).