@burdenoff/fe-libs 2026.1024.3 → 2026.1026.1

package/dist/shared/assistant/avatar/live/avatarTransport.js

@@ -65,6 +65,7 @@ var p = class {
 	videoPresent = !1;
 	degraded = !1;
 	audioElement = null;
+	elementPaused = !1;
 	disposed = !1;
 	rejectReady = null;
 	mediaReady = !1;
@@ -85,7 +86,10 @@ var p = class {
 		return this.readinessStatus;
 	}
 	get audioBlocked() {
-		return this.state === "ready" && !this.options.room.canPlaybackAudio();
+		return this.state === "ready" && (!this.options.room.canPlaybackAudio() || this.elementPaused);
+	}
+	get videoBlocked() {
+		return this.state === "ready" && this.options.room.canPlaybackVideo?.() === !1;
 	}
 	subscribe(e) {
 		return this.listeners.add(e), () => {
@@ -100,6 +104,26 @@ var p = class {
 	async resumeAudio() {
 		await this.options.room.startAudio();
 	}
+	async resumeVideo() {
+		await this.options.room.startVideo?.();
+	}
+	watchAudioElement(e) {
+		if (e === null || typeof e.addEventListener != "function") return;
+		let t = () => {
+			this.disposed || this.state !== "ready" || e.srcObject === null || this.elementPaused || (this.elementPaused = !0, this.emit({
+				type: "audioPlayback",
+				canPlay: !1
+			}));
+		}, n = () => {
+			this.elementPaused && (this.elementPaused = !1, this.emit({
+				type: "audioPlayback",
+				canPlay: this.options.room.canPlaybackAudio()
+			}));
+		};
+		e.addEventListener("pause", t), e.addEventListener("playing", n), this.unsubscribes.push(() => {
+			e.removeEventListener("pause", t), e.removeEventListener("playing", n);
+		});
+	}
 	setOutputMuted(e) {
 		this.audioElement && (this.audioElement.muted = e);
 	}
@@ -107,7 +131,7 @@ var p = class {
 		if (this.state !== "idle") throw Error("transport already used");
 		this.state = "connecting";
 		let { room: t, avatarIdentity: i } = this.options;
-		this.audioElement = e.audioElement ?? null, t.registerRpc(n, (e, t) => this.handleFinished(e, t)), t.registerRpc(r, (e) => this.handleStarted(e)), this.unsubscribes.push(t.onParticipantConnected((e) => {
+		this.audioElement = e.audioElement ?? null, this.watchAudioElement(this.audioElement), t.registerRpc(n, (e, t) => this.handleFinished(e, t)), t.registerRpc(r, (e) => this.handleStarted(e)), this.unsubscribes.push(t.onParticipantConnected((e) => {
 			e === i && (this.avatarPresent = !0, this.checkReady());
 		}), t.onParticipantDisconnected((e) => {
 			e === i && (this.avatarPresent = !1, this.videoPresent = !1, this.avatarDepartures += 1, this.owedFinishes = 0, this.endAllSegments(), this.emit({ type: "avatarLeft" }));
@@ -122,6 +146,9 @@ var p = class {
 		}), t.onAudioPlaybackChanged((e) => this.emit({
 			type: "audioPlayback",
 			canPlay: e
+		}))), t.onVideoPlaybackChanged && this.unsubscribes.push(t.onVideoPlaybackChanged((e) => this.emit({
+			type: "videoPlayback",
+			canPlay: e
 		})));
 		try {
 			await t.connect(e.url, e.token);

package/dist/shared/assistant/avatar/live/createLiveAvatarSeam.d.ts

@@ -7,6 +7,7 @@ import { AvatarRoom, AvatarScheduler } from './avatarPorts';
 import { AvatarSessionClient } from './avatarSessionClient';
 import { LiveAvatarVoiceStore } from './LiveAvatarTabView';
 import { LiveAvatarController, LiveAvatarControllerDeps, LiveAvatarLogEvent, LiveAvatarPreferences } from './liveAvatarController';
+import { LiveAvatarMinutesPurchase } from './liveAvatarMinutesView';
 export interface LiveAvatarSeamOptions {
     /** Display names for the avatar ids the server offers (it sends ids only); without one the chooser numbers them. */
     readonly avatarNames?: Readonly<Record<string, string>>;
@@ -33,6 +34,18 @@ export interface LiveAvatarSeamOptions {
      * person's stored choice always wins.
      */
     readonly defaultAvatarVoiceMode?: AvatarVoiceDefault;
+    /**
+     * ★ BOFF-9446: whether this person may buy a plan (`access`, the host's purchase check, which follows `billing:create` on the
+     * organization's billing account): fe-libs cannot import billing. The Avatar tab asks it only where "See plans" could be offered (none
+     * left, or running low, while the server says a plan with more credits exists), and opens the app's plans page with the panel's own
+     * navigator (`onNavigate`), never by itself. Absent: nobody is offered "See plans" in the tab, and a person who has run out is told to
+     * ask their billing administrator about a plan with more avatar credits. Only `canPurchase` is read. Copied once, here: a host that
+     * changes its object later changes nothing.
+     *
+     * The host knows its own routes, so it says when the person comes back: from any billing page, `controller.refreshMinutes()`; from a
+     * plan checkout, `controller.checkMinutesPurchase()` (the tab then says "Checking your plan…" while it checks).
+     */
+    readonly minutesPurchase?: LiveAvatarMinutesPurchase;
     readonly onLog?: (event: LiveAvatarLogEvent) => void;
     /** Overrides, for tests and for hosts with their own plumbing. Each defaults to the assistant's own. */
     readonly client?: () => AvatarSessionClient | null;
@@ -45,7 +58,7 @@ export interface LiveAvatarSeamOptions {
     readonly avatarVoiceStore?: LiveAvatarVoiceStore;
     readonly scheduler?: AvatarScheduler;
     readonly browserSupported?: () => boolean;
-    readonly controller?: Partial<Pick<LiveAvatarControllerDeps, 'createAudioElement' | 'releaseAudioElement' | 'startMeter' | 'decode' | 'now' | 'newIdempotencyKey' | 'subscribeWorkspaceChange' | 'subscribePageHide' | 'subscribePageShow' | 'idleMs' | 'endBeforeDeadlineMs' | 'connectTimeoutMs' | 'trackerConfig' | 'maxDrainMs' | 'stallMs' | 'readinessProbe'>>;
+    readonly controller?: Partial<Pick<LiveAvatarControllerDeps, 'createAudioElement' | 'releaseAudioElement' | 'startMeter' | 'decode' | 'now' | 'newIdempotencyKey' | 'subscribeWorkspaceChange' | 'subscribePageHide' | 'subscribePageHidden' | 'endOnHide' | 'subscribeUserGesture' | 'isPageVisible' | 'subscribePageVisible' | 'subscribePageShow' | 'idleMs' | 'endBeforeDeadlineMs' | 'connectTimeoutMs' | 'trackerConfig' | 'maxDrainMs' | 'stallMs' | 'readinessProbe'>>;
 }
 /** The seam, plus what a host or a test may need of it. */
 export interface LiveAvatarSeamHandle extends AssistantLiveAvatarSeam {
@@ -58,9 +71,12 @@ export interface LiveAvatarSeamHandle extends AssistantLiveAvatarSeam {
     dispose(): void;
 }
 /**
- * Whether this browser may show the avatar. Desktop Chrome first (GATE1B §10: no other browser or phone is offered until it is tested,
- * Chromium builds included, other Chromium-based browsers not), with the platform pieces the avatar needs: WebRTC, Web Audio (the level
- * meter and the MP3 decode) and MediaStream.
+ * Whether this browser can show the avatar: a check of what the avatar needs, on every browser and phone (BOFF-9696, the operator's
+ * decision of 2026-10-25; until then desktop Chrome only, GATE1B §10). The pieces: WebRTC (the room), an AudioContext (the level meter),
+ * MediaStream, and an OfflineAudioContext at the reply audio's rate (the MP3 decode makes one: avatarAudioDecode.ts). All four are
+ * unprefixed: Safari shipped the unprefixed audio contexts together (14.1), and the prefixed offline context's callback-only decode
+ * could not serve the avatar anyway. The user agent is never read: a browser that has these runs the avatar, one that lacks any cannot.
+ * Where autoplay needs a tap for sound (Safari and every iOS browser), the sound-blocked state asks for it.
  */
 export declare function isLiveAvatarBrowserSupported(scope?: typeof globalThis): boolean;
 /** The `Authorization` the hosted TTS requests carry (the host's `getHeaders`), else the stored access token. Nothing else is read. */
@@ -78,4 +94,19 @@ export declare function liveAvatarWorkspaceAuthorization(options: {
     readonly fresh: boolean;
     readonly refused?: string;
 }): Promise<string | null>;
+/**
+ * ★ BOFF-9696 (S5): a touch-first device (a phone or tablet without a hovering pointer), where a hidden page ends the session. A
+ * capability query, never the user agent. Exported for tests only.
+ */
+export declare function isTouchFirstDevice(scope?: {
+    readonly matchMedia?: (query: string) => {
+        readonly matches: boolean;
+    };
+}): boolean;
+/**
+ * ★ BOFF-9696: the person's taps, clicks and keys anywhere on the page, in the capture phase so no handler can stop them first. Each
+ * is a user gesture, inside which a browser lets a refused video start (iOS unlocks media on `touchend` and `click`). Only trusted
+ * events count: a script's synthetic click is no gesture. Exported for tests only.
+ */
+export declare function documentUserGesture(doc?: Pick<Document, 'addEventListener' | 'removeEventListener'> | null): ((listener: () => void) => () => void) | undefined;
 export declare function createLiveAvatarSeam(options?: LiveAvatarSeamOptions): LiveAvatarSeamHandle;

package/dist/shared/assistant/avatar/live/createLiveAvatarSeam.js

@@ -4,36 +4,41 @@ import { readSpeechEngineConfig as a } from "../../speech/createSpeechEngine.js"
 import { useAvatarPreferencesStore as o } from "../avatarPreferences.js";
 import { realAvatarScheduler as s } from "./avatarPorts.js";
 import { startAvatarAudioMeter as c } from "./avatarAudioMeter.js";
-import { decodeMp3ToPcm16k as l } from "./avatarAudioDecode.js";
-import { avatarApiBaseFromTtsEndpoint as u, avatarIdempotencyKey as d, createAvatarSessionClient as f } from "./avatarSessionClient.js";
-import { createLiveAvatarController as p } from "./liveAvatarController.js";
-import { openLiveKitAvatarRoom as m } from "./liveKitAvatarRoom.js";
-import { liveAvatarAskState as h } from "./liveAvatarStatus.js";
-import { LiveAvatarStageView as g } from "./LiveAvatarStage.js";
-import { sanitizeAvatarImages as _ } from "./avatarFaces.js";
-import { avatarSpeakerFor as v, hostedAvatarVoice as y, liveAvatarVoicesFrom as b, restoreVoiceWhenOutputLeaves as x } from "./avatarVoice.js";
-import { LiveAvatarTabView as S } from "./LiveAvatarTabView.js";
-import { jsx as C } from "react/jsx-runtime";
+import { AVATAR_SAMPLE_RATE as l } from "./avatarPcm16.js";
+import { decodeMp3ToPcm16k as u } from "./avatarAudioDecode.js";
+import { avatarApiBaseFromTtsEndpoint as d, avatarIdempotencyKey as f, createAvatarSessionClient as p } from "./avatarSessionClient.js";
+import { createLiveAvatarController as m } from "./liveAvatarController.js";
+import { openLiveKitAvatarRoom as h } from "./liveKitAvatarRoom.js";
+import { liveAvatarAskState as g } from "./liveAvatarStatus.js";
+import { LiveAvatarStageView as _ } from "./LiveAvatarStage.js";
+import { sanitizeAvatarImages as v } from "./avatarFaces.js";
+import { avatarSpeakerFor as y, hostedAvatarVoice as b, liveAvatarVoicesFrom as x, restoreVoiceWhenOutputLeaves as S } from "./avatarVoice.js";
+import { LiveAvatarTabView as C } from "./LiveAvatarTabView.js";
+import { jsx as w } from "react/jsx-runtime";
 //#region src/shared/assistant/avatar/live/createLiveAvatarSeam.tsx
-function w(e = globalThis) {
-	let t = e;
-	if (typeof t.RTCPeerConnection != "function" || typeof t.OfflineAudioContext != "function" || typeof t.AudioContext != "function" || typeof t.MediaStream != "function") return !1;
-	let n = t.navigator, r = n?.userAgentData;
-	if (r?.brands !== void 0) {
-		let e = r.brands.map((e) => e.brand);
-		return r.mobile === !1 && e.some((e) => e === "Google Chrome" || e === "Chromium") && !e.some((e) => /Edge|Opera|Brave|Vivaldi|Samsung/i.test(e));
+var T = /* @__PURE__ */ new WeakMap();
+function E(e = globalThis) {
+	let t = T.get(e);
+	if (t !== void 0) return t;
+	let n = D(e);
+	return T.set(e, n), n;
+}
+function D(e) {
+	if (typeof e.RTCPeerConnection != "function" || typeof e.AudioContext != "function" || typeof e.MediaStream != "function" || typeof e.OfflineAudioContext != "function") return !1;
+	try {
+		return new e.OfflineAudioContext(1, 1, l), !0;
+	} catch {
+		return !1;
 	}
-	let i = n?.userAgent ?? "";
-	return /\b(?:Chrome|Chromium)\//.test(i) && !/\b(?:Edg|OPR|SamsungBrowser)\/|Mobile|Android|iPhone|iPad/.test(i);
 }
-function T() {
+function O() {
 	let e = a().getHeaders?.() ?? {};
 	for (let [t, n] of Object.entries(e)) if (t.toLowerCase() === "authorization" && typeof n == "string" && n.trim() !== "") return n.trim();
 	let n = t();
 	return n ? `Bearer ${n}` : null;
 }
-async function E(t) {
-	let i = n(), a = T(), o = a?.replace(/^Bearer\s+/i, "") ?? null;
+async function k(t) {
+	let i = n(), a = O(), o = a?.replace(/^Bearer\s+/i, "") ?? null;
 	if (!i || !o) return null;
 	let s = t.refused?.replace(/^Bearer\s+/i, ""), c = await e({
 		url: r("workspace"),
@@ -42,38 +47,38 @@ async function E(t) {
 		currentQuery: "liveAvatarSession",
 		...t.fresh ? { issuanceGuard: {
 			identityKey: "liveAvatarSession",
-			isCurrent: () => n() === i && T() === a,
+			isCurrent: () => n() === i && O() === a,
 			accepts: (e, t) => e !== s && t === i
 		} } : {}
 	});
 	return c ? `Bearer ${c}` : null;
 }
-function D() {
+function A() {
 	let e = null;
 	return () => {
-		let t = typeof location > "u" ? void 0 : location.href, n = u(a().endpoint, t);
+		let t = typeof location > "u" ? void 0 : location.href, n = d(a().endpoint, t);
 		return n === null ? null : (e?.base !== n && (e = {
 			base: n,
-			client: f({
+			client: p({
 				baseUrl: n,
-				getAuthorization: T,
-				getWorkspaceAuthorization: E
+				getAuthorization: O,
+				getWorkspaceAuthorization: k
 			})
 		}), e.client);
 	};
 }
-var O = {
+var j = {
 	getState: () => o.getState(),
 	setAvatarEnabled: (e) => o.getState().setAvatarEnabled(e),
 	setAvatarId: (e) => o.getState().setAvatarId(e),
 	subscribe: (e) => o.subscribe(() => e())
-}, k = {
+}, M = {
 	getState: () => o.getState(),
 	subscribe: (e) => o.subscribe(() => e()),
 	setVoiceMode: (e) => o.getState().setVoiceMode(e),
 	setAvatarSpeaker: (e) => o.getState().setAvatarSpeaker(e)
 };
-function A(e, t) {
+function N(e, t) {
 	let n = (e) => {
 		i(e) || t();
 	};
@@ -90,15 +95,61 @@ function A(e, t) {
 		cancel: () => e.cancel()
 	};
 }
-function j() {
+function P(e) {
+	if (e === void 0) return;
+	let { access: t } = e;
+	return { access: () => t.call(e) };
+}
+function F() {
 	if (typeof document > "u") return null;
 	let e = document.createElement("audio");
 	return e.autoplay = !0, e.hidden = !0, e.setAttribute("data-testid", "assistant-live-avatar-audio"), document.body.appendChild(e), e;
 }
-function M(e) {
+function I(e) {
 	if (!(typeof window > "u")) return (t) => (window.addEventListener(e, t), () => window.removeEventListener(e, t));
 }
-function N() {
+function L() {
+	if (typeof document > "u" || typeof document.addEventListener != "function") return;
+	let e = () => document.visibilityState !== "hidden";
+	return {
+		isVisible: e,
+		onHidden: (t) => {
+			let n = () => {
+				e() || t();
+			};
+			return document.addEventListener("visibilitychange", n), () => {
+				document.removeEventListener("visibilitychange", n);
+			};
+		},
+		onShown: (t) => {
+			let n = () => {
+				e() && t();
+			}, r = (n) => {
+				"persisted" in n && n.persisted === !0 && e() && t();
+			}, i = typeof window < "u" && typeof window.addEventListener == "function" ? window : void 0;
+			return document.addEventListener("visibilitychange", n), i?.addEventListener("pageshow", r), () => {
+				document.removeEventListener("visibilitychange", n), i?.removeEventListener("pageshow", r);
+			};
+		}
+	};
+}
+function R(e = globalThis) {
+	return typeof e.matchMedia == "function" && e.matchMedia("(hover: none) and (pointer: coarse)").matches;
+}
+function z(e = typeof document > "u" ? null : document) {
+	if (!(e === null || typeof e.addEventListener != "function")) return (t) => {
+		let n = (e) => {
+			e.isTrusted && t();
+		};
+		return e.addEventListener("touchend", n, {
+			capture: !0,
+			passive: !0
+		}), e.addEventListener("click", n, !0), e.addEventListener("keydown", n, !0), () => {
+			e.removeEventListener("touchend", n, { capture: !0 }), e.removeEventListener("click", n, !0), e.removeEventListener("keydown", n, !0);
+		};
+	};
+}
+function B() {
 	if (!(typeof window > "u" || typeof document > "u")) return (e) => {
 		let t = window, n = document, r = () => {
 			n.visibilityState === "visible" && e();
@@ -108,24 +159,29 @@ function N() {
 		};
 	};
 }
-function P(e = {}) {
-	let t = e.preferences ?? O, n = e.controller ?? {}, r = n.subscribeWorkspaceChange ?? M("burdenoff:workspace-changed"), i = n.subscribePageHide ?? M("pagehide"), a = n.subscribePageShow ?? N(), o = n.now ?? (() => Date.now()), u = p({
-		client: e.client ?? D(),
-		openRoom: e.openRoom ?? m,
+function V(e = {}) {
+	let t = e.preferences ?? j, n = e.controller ?? {}, r = n.subscribeWorkspaceChange ?? I("burdenoff:workspace-changed"), i = n.subscribePageHide ?? I("pagehide"), a = L(), o = n.isPageVisible ?? a?.isVisible, l = n.subscribePageVisible ?? a?.onShown, d = n.subscribePageHidden ?? a?.onHidden, p = n.endOnHide ?? R, T = n.subscribeUserGesture ?? z(), D = n.subscribePageShow ?? B(), O = n.now ?? (() => Date.now()), k = m({
+		client: e.client ?? A(),
+		openRoom: e.openRoom ?? h,
 		scheduler: e.scheduler ?? s,
 		preferences: t,
-		decode: n.decode ?? ((e, t) => l(e, { signal: t })),
-		createAudioElement: n.createAudioElement ?? j,
+		decode: n.decode ?? ((e, t) => u(e, { signal: t })),
+		createAudioElement: n.createAudioElement ?? F,
 		releaseAudioElement: n.releaseAudioElement ?? ((e) => {
 			e.srcObject = null, e.remove();
 		}),
 		startMeter: n.startMeter ?? ((e, t) => typeof MediaStream > "u" ? null : c(new MediaStream([e]), t)),
-		browserSupported: e.browserSupported ?? (() => w()),
-		now: o,
-		newIdempotencyKey: n.newIdempotencyKey ?? (() => d()),
+		browserSupported: e.browserSupported ?? (() => E()),
+		now: O,
+		newIdempotencyKey: n.newIdempotencyKey ?? (() => f()),
 		...r ? { subscribeWorkspaceChange: r } : {},
 		...i ? { subscribePageHide: i } : {},
-		...a ? { subscribePageShow: a } : {},
+		...o ? { isPageVisible: o } : {},
+		...l ? { subscribePageVisible: l } : {},
+		...d ? { subscribePageHidden: d } : {},
+		endOnHide: p,
+		...T ? { subscribeUserGesture: T } : {},
+		...D ? { subscribePageShow: D } : {},
 		...n.idleMs === void 0 ? {} : { idleMs: n.idleMs },
 		...n.endBeforeDeadlineMs === void 0 ? {} : { endBeforeDeadlineMs: n.endBeforeDeadlineMs },
 		...n.connectTimeoutMs === void 0 ? {} : { connectTimeoutMs: n.connectTimeoutMs },
@@ -134,34 +190,34 @@ function P(e = {}) {
 		...n.stallMs === void 0 ? {} : { stallMs: n.stallMs },
 		...n.readinessProbe === void 0 ? {} : { readinessProbe: n.readinessProbe },
 		...e.onLog ? { onLog: e.onLog } : {}
-	}), f = b(e.avatarVoices), T = e.avatarImages === void 0 ? null : _(e.avatarImages), E = e.avatarVoiceStore ?? k, P = () => E.getState(), F = (n, r) => {
-		let i = v(P(), {
-			avatarVoices: f,
+	}), V = x(e.avatarVoices), H = e.avatarImages === void 0 ? null : v(e.avatarImages), U = e.avatarVoiceStore ?? M, W = () => U.getState(), G = P(e.minutesPurchase), K = (n, r) => {
+		let i = y(W(), {
+			avatarVoices: V,
 			avatarId: t.getState().avatarId,
 			...e.defaultAvatarVoiceMode ? { hostDefault: e.defaultAvatarVoiceMode } : {}
 		});
-		return i === null ? null : y(i, n, r.listVoices());
-	}, I = (e, t) => {
+		return i === null ? null : b(i, n, r.listVoices());
+	}, q = (e, t) => {
 		let n = {
 			...e,
 			voice: t
 		};
-		return n.audioOutput = x(u.createOutput(), () => {
+		return n.audioOutput = S(k.createOutput(), () => {
 			n.voice = e.voice;
-		}, (e) => u.subscribe(() => {
-			u.getSnapshot().phase !== "ready" && e();
+		}, (e) => k.subscribe(() => {
+			k.getSnapshot().phase !== "ready" && e();
 		})), n;
 	};
 	return {
 		decorateSpeechEngine: (e) => {
 			let t = (t) => {
-				let n = F(t.lang, e), r = n === null ? t : {
+				let n = K(t.lang, e), r = n === null ? t : {
 					...t,
 					voice: n
 				};
 				return {
 					voice: n,
-					target: u.route(r, e)
+					target: k.route(r, e)
 				};
 			}, n = null, r = () => {
 				let e = n;
@@ -169,12 +225,12 @@ function P(e = {}) {
 			}, i = (t, r, i) => {
 				let a = !0, o = !1, s = () => void 0, c = () => {
 					a && (a = !1, n === c && (n = null), s());
-				}, l = () => o ? !1 : (o = !0, c(), !0), d = () => {
+				}, l = () => o ? !1 : (o = !0, c(), !0), u = () => {
 					!a || !l() || (e.cancel(), i?.onError?.("output-left"));
 				};
-				s = u.subscribe(() => {
-					u.getSnapshot().phase !== "ready" && d();
-				}), n = c, r.audioOutput &&= A(r.audioOutput, d), r.fallback = !1, e.speak(t, r, {
+				s = k.subscribe(() => {
+					k.getSnapshot().phase !== "ready" && u();
+				}), n = c, r.audioOutput &&= N(r.audioOutput, u), r.fallback = !1, e.speak(t, r, {
 					...i,
 					onEnd: () => {
 						l() && i?.onEnd?.();
@@ -203,8 +259,8 @@ function P(e = {}) {
 					}
 					let l = s === null ? {
 						...a,
-						audioOutput: u.createOutput()
-					} : I(a, s);
+						audioOutput: k.createOutput()
+					} : q(a, s);
 					if (a.avatarOnly === !0) {
 						i(n, l, o);
 						return;
@@ -216,8 +272,8 @@ function P(e = {}) {
 				}
 			};
 		},
-		Stage: ({ expanded: t, fallback: n }) => /* @__PURE__ */ C(g, {
-			controller: u,
+		Stage: ({ expanded: t, fallback: n }) => /* @__PURE__ */ w(_, {
+			controller: k,
 			expanded: t,
 			fallback: n,
 			...e.avatarNames ? { avatarNames: e.avatarNames } : {}
@@ -225,33 +281,34 @@ function P(e = {}) {
 		enabled: {
 			subscribe: (e) => t.subscribe(e),
 			getSnapshot: () => t.getState().avatarEnabled,
-			switchOff: () => u.switchOff(),
-			voiceLive: (e) => u.setVoiceLive(e)
+			switchOff: () => k.switchOff(),
+			voiceLive: (e) => k.setVoiceLive(e)
 		},
 		tab: {
 			offered: {
-				subscribe: (e) => u.subscribe(e),
-				getSnapshot: () => u.getSnapshot().tabOffered
+				subscribe: (e) => k.subscribe(e),
+				getSnapshot: () => k.getSnapshot().tabOffered
 			},
 			ask: {
-				subscribe: (e) => u.subscribe(e),
-				getSnapshot: () => h(u.getSnapshot(), o())
+				subscribe: (e) => k.subscribe(e),
+				getSnapshot: () => g(k.getSnapshot(), O())
 			},
-			setOpen: (e) => u.setTabOpen(e),
-			heldByVoice: () => u.getSnapshot().heldByVoice,
-			View: (t) => /* @__PURE__ */ C(S, {
+			setOpen: (e) => k.setTabOpen(e),
+			heldByVoice: () => k.getSnapshot().heldByVoice,
+			View: (t) => /* @__PURE__ */ w(C, {
 				...t,
-				controller: u,
-				avatarVoices: f,
-				voiceStore: E,
+				controller: k,
+				avatarVoices: V,
+				voiceStore: U,
 				...e.avatarNames ? { avatarNames: e.avatarNames } : {},
-				...T ? { avatarImages: T } : {},
-				...e.defaultAvatarVoiceMode ? { defaultAvatarVoiceMode: e.defaultAvatarVoiceMode } : {}
+				...H ? { avatarImages: H } : {},
+				...e.defaultAvatarVoiceMode ? { defaultAvatarVoiceMode: e.defaultAvatarVoiceMode } : {},
+				...G ? { minutesPurchase: G } : {}
 			})
 		},
-		controller: u,
-		dispose: () => u.dispose()
+		controller: k,
+		dispose: () => k.dispose()
 	};
 }
 //#endregion
-export { P as createLiveAvatarSeam, w as isLiveAvatarBrowserSupported, T as liveAvatarAuthorization, E as liveAvatarWorkspaceAuthorization };
+export { V as createLiveAvatarSeam, z as documentUserGesture, E as isLiveAvatarBrowserSupported, R as isTouchFirstDevice, O as liveAvatarAuthorization, k as liveAvatarWorkspaceAuthorization };

package/dist/shared/assistant/avatar/live/liveAvatarController.d.ts

@@ -4,7 +4,7 @@ import { AvatarMeterHandle } from './avatarAudioMeter';
 import { AvatarRoom, AvatarScheduler } from './avatarPorts';
 import { AvatarTrackerConfig } from './avatarPlaybackTracker';
 import { AvatarDecodedPiece, AvatarNotice, AvatarReplyOutputs } from './avatarReplyOutputs';
-import { AvatarBudgetScope, AvatarClientEndReason, AvatarSessionClient } from './avatarSessionClient';
+import { AvatarBudgetScope, AvatarClientEndReason, AvatarMinutes, AvatarMinutesReason, AvatarSessionClient, AvatarSessionMinutes } from './avatarSessionClient';
 import { AvatarReadinessProbeOptions } from './avatarTransport';
 /** End after this long without a reply on the avatar while it is on (OD8, BACKEND-DESIGN §8.7). */
 export declare const LIVE_AVATAR_IDLE_MS = 120000;
@@ -14,6 +14,20 @@ export declare const LIVE_AVATAR_END_BEFORE_DEADLINE_MS = 10000;
 export declare const LIVE_AVATAR_REQUEST_TIMEOUT_MS = 8000;
 /** The longest a connect may take (the avatar's own wait for its video, 8 s, plus the readiness probe, 6 s, plus slack). */
 export declare const LIVE_AVATAR_CONNECT_TIMEOUT_MS = 20000;
+/**
+ * ★ BOFF-9446: quiet minutes questions are at least this far apart, counted from the last availability question of any kind; one asked
+ * sooner waits for it. The check after a purchase keeps its own bounded pace (`LIVE_AVATAR_PURCHASE_POLL_MS`).
+ */
+export declare const LIVE_AVATAR_MINUTES_REFRESH_MS = 15000;
+/** ★ BOFF-9446: a quiet minutes question answered 429 is asked again after its Retry-After, at most this many times in a row. */
+export declare const LIVE_AVATAR_MINUTES_BUSY_RETRIES = 2;
+/** ★ BOFF-9446: the check after a plan purchase asks at most this many times… */
+export declare const LIVE_AVATAR_PURCHASE_POLLS = 5;
+/**
+ * …this far apart (0, 6, 12, 18 and 24 s from its first question, which itself comes at least this long after the last availability
+ * question of any kind), and stops as soon as the credits available rise.
+ */
+export declare const LIVE_AVATAR_PURCHASE_POLL_MS = 6000;
 export type LiveAvatarPhase = 
 /** Nothing running. */
 'off'
@@ -29,7 +43,10 @@ export type LiveAvatarPhase =
  | 'ready'
 /** Ending the session. */
  | 'ending';
-export type LiveAvatarNotice = 'interrupted' | 'voice-only' | 'time-limit';
+/** `minutes-ended` (★ BOFF-9446): the time limit of a session whose length was its minutes (D' < D): its minutes ran out. */
+export type LiveAvatarNotice = 'interrupted' | 'voice-only' | 'time-limit' | 'minutes-ended';
+/** ★ BOFF-9446: the bounded check after a plan purchase (`checkMinutesPurchase`): `checking` while it runs. */
+export type LiveAvatarPurchaseCheck = 'idle' | 'checking';
 /** A Turn off this soon after the tab's start click is the second click of a double click, not a choice (BOFF-9341, critic #2). */
 export declare const LIVE_AVATAR_TAB_OFF_GUARD_MS = 1000;
 export interface LiveAvatarSnapshot {
@@ -76,6 +93,30 @@ export interface LiveAvatarSnapshot {
     readonly audioBlocked: boolean;
     /** The avatar's video has arrived. */
     readonly videoReady: boolean;
+    /**
+     * ★ BOFF-9696: the browser refuses to play the avatar's video (iOS in Low Power Mode, until a user gesture): the views show the stage's
+     * placeholder instead of a frozen face. The sound tap (`resumeAudio`) plays it too, and so does the person's next tap or key on the page.
+     */
+    readonly videoBlocked: boolean;
+    /**
+     * ★ BOFF-9446: the minutes block of the latest availability answer (the server sends one in `enforce` only), or null: no answer with
+     * one yet (today's answers never have one), an answer with none since, or cleared by a workspace switch or a "not offered" answer.
+     * A quiet question (`refreshMinutes`) replaces it; it never changes the phase, and changes the problem only to settle a minutes
+     * problem that has no time of its own (see `refreshMinutes`).
+     */
+    readonly minutes: AvatarMinutes | null;
+    /** ★ BOFF-9446: with the problem `minutes-exhausted`, the reason the server or the minutes answer gave; null otherwise. Goes with it. */
+    readonly minutesReason: AvatarMinutesReason | null;
+    /** ★ BOFF-9446: the running session's minutes, from its start answer (enforce only); null otherwise. Set at `ready`. */
+    readonly sessionMinutes: AvatarSessionMinutes | null;
+    /**
+     * ★ BOFF-9446: wall-clock ms at which the server ends the running session (create sent + D' - 5 s). Measured on the local scheduler
+     * from the moment the create was sent, and placed on the local clock once, at `ready`: never the server's wall clock. Null unless the
+     * start answered D'.
+     */
+    readonly sessionEndsAt: number | null;
+    /** ★ BOFF-9446: the bounded check after a plan purchase (`checkMinutesPurchase`). */
+    readonly purchase: LiveAvatarPurchaseCheck;
 }
 /** The person's stored choices (P4), read and written through this narrow port so tests need no storage. */
 export interface LiveAvatarPreferences {
@@ -115,7 +156,7 @@ export interface LiveAvatarControllerDeps {
     readonly releaseAudioElement: (element: HTMLAudioElement) => void;
     /** A level meter on the avatar's received audio; null when none can be built (the output then cannot prove silence). */
     readonly startMeter: (track: MediaStreamTrack, onChange: (audible: boolean) => void) => AvatarMeterHandle | null;
-    /** The browser can show the avatar at all (desktop Chromium first: GATE1B §10). */
+    /** The browser can show the avatar at all: what it needs is there (any browser or phone since BOFF-9696). */
     readonly browserSupported: () => boolean;
     /**
      * Wall-clock milliseconds: a refusal's retry time (`retryAt`), its lock and its re-check (`recheckRetry`); also the fallback for
@@ -125,6 +166,19 @@ export interface LiveAvatarControllerDeps {
     readonly newIdempotencyKey: () => string;
     readonly subscribeWorkspaceChange?: (listener: () => void) => () => void;
     readonly subscribePageHide?: (listener: () => void) => () => void;
+    /**
+     * ★ BOFF-9696 (S5): the page was hidden (its document hidden). A phone hides a page without `pagehide` when the person switches apps or
+     * locks the screen, and freezes its timers then, so a session left on there would run on unseen until its idle rule or deadline.
+     */
+    readonly subscribePageHidden?: (listener: () => void) => () => void;
+    /** ★ BOFF-9696 (S5): whether a hidden page ends the session at once (touch devices); absent or false: only `pagehide` does. */
+    readonly endOnHide?: () => boolean;
+    /** ★ BOFF-9696: the person's next tap or key anywhere on the page (a user gesture), once: it plays a refused video. */
+    readonly subscribeUserGesture?: (listener: () => void) => () => void;
+    /** ★ BOFF-9446: the page is shown now; no quiet minutes question is asked while it is hidden. Absent: always shown. */
+    readonly isPageVisible?: () => boolean;
+    /** ★ BOFF-9446: called when the page is shown again (after it was hidden): the minutes are asked again then, quietly. */
+    readonly subscribePageVisible?: (listener: () => void) => () => void;
     /**
      * The page is shown again (its document visible again, or shown from the back/forward cache): the listener is `recheckRetry`. The
      * scheduler's monotonic clock does not count a system sleep, so after one a refusal's timer fires late; the wall clock (`now`) does.
@@ -180,6 +234,28 @@ export interface LiveAvatarController {
     setTabOpen(open: boolean): void;
     /** The person declined the disclosure. */
     cancelChoice(): void;
+    /**
+     * ★ BOFF-9446: ask availability again, QUIETLY, for its minutes only (the host's own reasons, such as the app coming back from its
+     * billing pages; the controller asks by itself after an end, when the tab opens and when the page is shown again). The phase and the
+     * chooser never change, no problem is raised, and a failure, a 429 included, keeps the last answer. The newer minutes settle a minutes
+     * problem that has no time of its own (none left, in use, not set up: Turn on cannot start), as `confirm` would find them: it says
+     * what they rule out, or goes when they leave room for a start (AVAILABLE, UNAVAILABLE, no block). A refusal with a time (`retryAt`)
+     * waits for it, and the zero-session limit stays (no minutes answer reports it). It asks only once the server has sent minutes (with
+     * today's answers it asks nothing), only while the avatar is offered and off or choosing, never while the page is hidden, never before
+     * the Retry-After of the last 429 to an availability question, and at most once per `LIVE_AVATAR_MINUTES_REFRESH_MS` (one asked sooner
+     * waits for it).
+     */
+    refreshMinutes(): void;
+    /**
+     * ★ BOFF-9446: the person came back from a plan checkout. `purchase` is `checking` while up to `LIVE_AVATAR_PURCHASE_POLLS`
+     * quiet questions are asked, `LIVE_AVATAR_PURCHASE_POLL_MS` apart, the first no sooner than that after the last availability question
+     * of any kind; it stops as soon as the credits available rise above what they were when it began. Its answers settle the credits
+     * problem as a quiet question's do (`refreshMinutes`). Called while a check runs, the check starts again with all its questions, at
+     * the same pace. A tick is skipped, and counted, while the page is hidden, while another availability question is out, or before the
+     * Retry-After of the last 429 to one. Only once the server has sent minutes (`minutes` not null): a call before then is dropped, not
+     * remembered, so the host calls it once the snapshot has minutes.
+     */
+    checkMinutesPurchase(): void;
     selectAvatar(avatarId: string): void;
     /**
      * Avatar OFF: the toggle, the compact view's stop, the tab's Turn off, the end of the voice conversation (P2). Idempotent. In the tab,