Aide Chat locks itself to your website

Your Aide Chat key is visible in your page source, so anyone could copy it onto their own site and spend your AI replies or fill your inbox. Aide Chat now locks itself to the first website it appears on, with nothing to set up, and the Installation tab shows which sites can show it.

How it behaves

The first site wins: the first time a visitor opens a chat on your website, Aide Chat is locked to that site. Both www. and the bare domain count, so https://www.shop.com and https://shop.com both keep working.
Someone copies your key: on any other site the chat bubble doesn't appear, and Aide records the site under "Blocked recently" in the Installation tab.
You run more than one site: add it under "Where Aide Chat can appear", or press Allow next to it in "Blocked recently" once it has tried to load the chat.
Testing on your own computer: localhost and other local addresses always work and never lock the chat.
Shopify stores: your myshopify.com address, your custom domains (including ones you add later), the theme editor and theme previews always work.
Previews in the dashboard: testing Aide Chat inside Aide never locks it.
You want it everywhere: turn on "Allow any website". The chat then works on any site, and anyone who copies your key can use it.
Starting over: remove every site from the list and Aide Chat locks to the next site it appears on.
Already installed: a chat that is already live locks to the site where a visitor next opens a chat. If it runs on more than one website, add the others in the Installation tab.

For developers

GET /v1/widgets/:id adds allowAnyOrigin (boolean) and blockedOrigins (up to 10 { origin, lastSeenAt }, newest first) beside allowedOrigins.
PATCH /v1/widgets/:id accepts allowAnyOrigin. allowedOrigins entries must be scheme://host[:port] over http or https with no path; they are stored lowercased without a trailing slash. Allowing an origin removes it from blockedOrigins.
/widget/* answers 403 origin_not_allowed from other sites, as before; it now applies once the widget has locked itself, not only when the list was filled in by hand.

All changes