Surface ChatKit domain verification failure

static/app.js

@@ -211,6 +211,47 @@ let activeScenario = scenarios[0];
 let activeJailbreakPrompt = jailbreakPrompts[0];
 let activePatientDataPrompt = patientDataCompletePrompts[0];
 
+function setChatError(message) {
+  if (!chatStatus) return;
+  chatStatus.textContent = message;
+  chatStatus.style.color = "#b42318";
+}
+
+function setChatInfo(message) {
+  if (!chatStatus) return;
+  chatStatus.textContent = message;
+  chatStatus.style.color = "#4d5b64";
+}
+
+function formatChatKitError(error) {
+  const message =
+    typeof error === "string"
+      ? error
+      : error?.message || error?.reason?.message || "Unknown ChatKit error";
+
+  if (message.includes("Domain verification failed")) {
+    return [
+      "ChatKit domain verification failed.",
+      "Add https://pharma-ia-mit-summer-2026.hf.space to the OpenAI domain allowlist, then reload this Space.",
+    ].join(" ");
+  }
+
+  return `ChatKit error: ${message}`;
+}
+
+function installChatKitErrorHandlers() {
+  window.addEventListener("unhandledrejection", (event) => {
+    setChatError(formatChatKitError(event.reason));
+  });
+
+  window.addEventListener("error", (event) => {
+    const message = event.message || event.error?.message || "";
+    if (message.includes("ChatKit") || message.includes("Domain verification failed")) {
+      setChatError(formatChatKitError(event.error || message));
+    }
+  });
+}
+
 function maybeShowEmbedWarning() {
   // On Hugging Face, /spaces/... wraps the app in an iframe.
   // Some embedded widgets work better from the direct *.hf.space URL.
@@ -220,7 +261,7 @@ function maybeShowEmbedWarning() {
   if (!inIframe || host.endsWith(".hf.space")) return;
 
   const directUrl = "https://pharma-ia-mit-summer-2026.hf.space";
-  embedWarning.innerHTML = `If chat appears blank here, open the direct Space URL: <a href="${directUrl}" target="_blank" rel="noopener noreferrer">${directUrl}</a>`;
+  embedWarning.innerHTML = `If chat appears blank here, open the direct Space URL: <a href="${directUrl}" target="_blank" rel="noopener noreferrer">${directUrl}</a>. ChatKit also requires this exact domain in the OpenAI domain allowlist.`;
   embedWarning.style.display = "block";
   embedWarning.style.color = "#7a271a";
 }
@@ -414,11 +455,9 @@ async function initChatKit() {
       },
     });
 
-    chatStatus.textContent = "ChatKit is ready. Select a scenario or type a case.";
-    chatStatus.style.color = "#4d5b64";
+    setChatInfo("ChatKit is connecting. Select a scenario once the input appears.");
   } catch (error) {
-    chatStatus.textContent = `ChatKit init error: ${error.message}`;
-    chatStatus.style.color = "#b42318";
+    setChatError(formatChatKitError(error));
   }
 }
 
@@ -460,6 +499,7 @@ renderScenarioButtons();
 setScenario(activeScenario.id);
 setJailbreakPrompt(activeJailbreakPrompt);
 setPatientDataPrompt(activePatientDataPrompt);
+installChatKitErrorHandlers();
 maybeShowEmbedWarning();
 prefillButton?.addEventListener("click", prefillPrompt);
 prefillJailbreakButton?.addEventListener("click", () =>