<div id="lobbymesh-widget"></div>
<script
  src="https://widget.staging.lobbymesh.com/embed/lobbymesh-widget.js"
  data-widget="riadmazaya"
  data-supplier-account-id="886f28be-b6bf-4d67-b6a0-403f7387776e"
  data-api-base="https://api.staging.lobbymesh.com"
  data-target="#lobbymesh-widget"
  data-entry-mode="catalogue"
  data-display-mode="immersive"
  data-launcher-label="Book experiences"
  data-featured-count="4"
></script>

<!-- Iframe fallback (restrictive CSP hosts) -->
<div id="lobbymesh-widget-iframe" style="width:100%;min-height:100dvh"></div>
<iframe
  src="https://api.staging.lobbymesh.com/embed?widgetInstanceId=riadmazaya&supplierAccountId=886f28be-b6bf-4d67-b6a0-403f7387776e"
  title="LobbyMesh experiences"
  sandbox="allow-scripts allow-same-origin allow-forms allow-popups allow-top-navigation-by-user-activation"
  style="width:100%;min-height:100dvh;border:0;"
  loading="lazy"
  referrerpolicy="strict-origin-when-cross-origin"
></iframe>

Config URL: https://api.staging.lobbymesh.com/api/v1/widget/config?widgetInstanceId=riadmazaya&supplierAccountId=886f28be-b6bf-4d67-b6a0-403f7387776e

• Display mode is configured on the widget instance (embedConfig) and mirrored in data-entry-mode.
• Runtime bootstrap reads persisted widget config — script data-* attributes are early hints only.
• Default display mode for new widgets is Full catalogue (entryMode: catalogue → displayMode: immersive).
• Legacy inline widgets omit data-entry-mode and render the full in-page catalogue shell.
• Runtime bootstrap remains origin-gated via allowed_origins on the widget instance.
• Use POST /widgets/:id/activate after origins and provider mapping are freeze-ready.
• Changing display mode affects hotel-site presentation only — booking data and pricing are unchanged.
• See docs/contracts/widget-embed-mode-matrix.md for per-mode integration contract.