Card metadata: title, tags, thumbnail, pinned

Embedded chat works signed-in: SameSite=None + Origin allowlist; hf.space sign-ins land on the huggingface.co Space page

OAuth always runs on hf.orivox.org; embed steers visitors there

Card: point visitors at hf.orivox.org

301 the flagged hf.space host to hf.orivox.org (kill-switch: ORIVOX_RETIRE_HF_HOST=0)

Sites list: explicit light text colors (names were dark-on-dark)

Fix OAuth after custom domain: SPACE_HOST is now a comma list; derive redirect_uri per request host

Drop unused hf_oauth declaration (no HF login since local inference was removed)

Build preloader (spinner pane + in-place chat bubble) and existing-sites panel

Fix boot: Gradio 6 Chatbot has no type= kwarg (messages is the default)

Card: chat flow

Drop fastmcp + huggingface_hub (no MCP, no local inference)

Chat in the Space; each turn drives the parent's /api/space/chat (Gemini builds)

Card: one sign-in; Orivox builds the site

Stop generating locally; hand off to Orivox's own build flow

Use target=_blank: HF iframe sandbox omits allow-top-navigation so _top is ignored

Break OAuth out of the HF iframe: Google blocks framed consent, Lax cookie unusable cross-site

Disable SSR: mounted Gradio apps have no Node server, so /_app assets 404

Fix startup: bind 7860, move theme/css to mount_gradio_app (Gradio 6)

Thin client to Orivox: per-visitor OAuth 2.1 + PKCE, MCP-backed site creation

initial commit

Duplicate from gradio-templates/chatbot