@burdenoff/website-sdk 2026.1101.1 → 2026.1101.3

package/README.md

@@ -34,6 +34,38 @@ For UI components (if using separately):
 npm install @radix-ui/react-label @radix-ui/react-slot class-variance-authority clsx tailwind-merge
 ```
 
+## Bundle, sub-paths and context identity
+
+Since **2026.1101.2** (BOFF-8508) the ESM build is code-split (`splitting: true`
+in `tsup.config.ts`) and the package declares `"sideEffects": false`:
+
+- **One context identity.** Shared modules — the React contexts above all
+  (`WebSDKProvider`, `ProductProvider`, the explore conversation contexts) —
+  are built once into common chunks that every entry imports. A provider
+  installed from the package root is seen by components imported from a
+  sub-path (`@burdenoff/website-sdk/components/explore`, `/content`, …) and
+  the other way round. There is no duplicate-context failure mode any more.
+- **Smaller startup bundles.** Because the package is side-effect-free and
+  every entry is a thin graph over shared chunks, a bundler tree-shakes an
+  `import { PageHead } from '@burdenoff/website-sdk'` down to the SEO subtree:
+  the optional content/markdown, store, comparison, forms and reCAPTCHA code
+  stays out of the startup graph unless it is actually used. A site that
+  lazy-routes heavy SDK pages (`const sdk = () => import('@burdenoff/website-sdk')`
+  inside `React.lazy`) gets them as separate on-demand chunks — provided its
+  own build config does not force every SDK module into one eager manual
+  chunk.
+- **Exact-version adoption interface.** Root/sub-path context identity holds
+  when *all* of a site's imports resolve to the **same installed version**
+  `>= 2026.1101.2`. Duplicate installed copies of the package (for example a
+  second copy under a nested `node_modules`) still mean duplicate contexts —
+  dedupe the package in your lockfile. Versions `< 2026.1101.2` are built
+  flat: there, import providers **and** consumers from the package root only.
+
+The live-avatar guarantees are unchanged: `livekit-client` stays external to
+the `./avatar-live` entry alone, and the avatar's view remains a chunk of its
+own that only the root loads on demand (`scripts/validate-avatar-live.mjs`
+fails the build otherwise).
+
 ## Quick Start
 
 ### Contact Page
@@ -114,14 +146,16 @@ function Pricing() {
 English and gets an answer drawn from the product's own published documentation,
 with the source pages and next-step CTAs attached.
 
-> **Import from the package ROOT.** `ExplorePage`, `ExploreCta` and
-> `useExploreChat` **must** be imported from `@burdenoff/website-sdk`, never
-> from `@burdenoff/website-sdk/components/explore`. This package builds with
-> tsup `splitting: false`, so every sub-path entry bundles **its own copy of the
-> React context** — a sub-path `ExplorePage` cannot see your `WebSDKProvider`
-> and throws `useWebSDK must be used within a WebSDKProvider` even when it is
-> rendered inside one. The sub-path entries exist only for build parity with the
-> other components.
+> **Root and sub-path imports are interchangeable since `2026.1101.2`** (the
+> first release built with tsup `splitting: true` — see
+> [Bundle, sub-paths and context identity](#bundle-sub-paths-and-context-identity)).
+> On **older versions** `ExplorePage`, `ExploreCta` and `useExploreChat`
+> **must** be imported from the package ROOT, never from
+> `@burdenoff/website-sdk/components/explore`: those builds gave every
+> sub-path entry **its own copy of the React context**, so a sub-path
+> `ExplorePage` could not see your `WebSDKProvider` and threw
+> `useWebSDK must be used within a WebSDKProvider` even when it was rendered
+> inside one.
 
 ```tsx
 import { ExplorePage, ExploreCta } from '@burdenoff/website-sdk'
@@ -338,9 +372,16 @@ publishes audio, video or data, and it sends the avatar nothing to say.
   production nothing else is added, so no preflight has to complete while the
   page unloads. The server ends sessions on its own deadlines as well.
 - **Consent copy is versioned.** The panel shows a consent card only when it
-  holds reviewed copy for exactly the version the server names (the current
-  English copy is `web-consent-2026-10-31`, and `web-consent-2026-11` stays for
-  servers that still name it); otherwise the view stays as it was.
+  holds reviewed copy for exactly the version the server names; otherwise the
+  view stays as it was. `web-consent-2026-11-02` is product-neutral: its card
+  reads "a suggested question" on every site, whatever `productName` is, so
+  every product's site shows the same words and the server can bind one notice
+  digest for all of them (the card's title, intro, processing, storage and
+  privacy-link lines, each ending with a line feed: 760 bytes, SHA-256
+  `2e02b051ceb1163c14bc58fa63a954a12c0d1f2695029a6d4805922d74c793f7`).
+  `web-consent-2026-10-31` (which names the product, "a suggested Healthy Bowl
+  question") and `web-consent-2026-11` stay, unchanged, for servers that still
+  name them.
 - **How a session ended.** When the worker leaves, the server closes the room,
   or the session's time runs out with the room still open, the view says only
   "The live avatar has ended." (key `finished`). The browser

package/dist/analytics/index.js

@@ -1,76 +1,26 @@
 'use strict';
 
-var react = require('react');
+var chunkQMA6U6AU_js = require('../chunk-QMA6U6AU.js');
+var chunkXJOBZ4RJ_js = require('../chunk-XJOBZ4RJ.js');
+require('../chunk-ZSTFX7FV.js');
 
-function RybbitAnalytics({
-  siteId,
-  scriptUrl = "https://analytics.burdenoff.com/api/script.js",
-  enabled = true
-}) {
-  react.useEffect(() => {
-    if (!enabled || !siteId) return;
-    const existingScript = document.querySelector(
-      `script[data-site-id="${siteId}"]`
-    );
-    if (existingScript) return;
-    const script = document.createElement("script");
-    script.src = scriptUrl;
-    script.defer = true;
-    script.crossOrigin = "anonymous";
-    script.setAttribute("data-site-id", siteId);
-    document.head.appendChild(script);
-    return () => {
-      const scriptToRemove = document.querySelector(
-        `script[data-site-id="${siteId}"]`
-      );
-      if (scriptToRemove) {
-        document.head.removeChild(scriptToRemove);
-      }
-    };
-  }, [siteId, scriptUrl, enabled]);
-  return null;
-}
 
-// src/analytics/events.ts
-var MAX_PROPERTY_LENGTH = 64;
-var EMAIL_LIKE = /[^\s@]+@[^\s@]+/;
-function sanitizeWebsiteEventProperties(properties) {
-  const safe = {};
-  if (!properties) return safe;
-  for (const [key, value] of Object.entries(properties)) {
-    if (typeof value === "boolean") {
-      safe[key] = value;
-    } else if (typeof value === "number") {
-      if (Number.isFinite(value)) safe[key] = value;
-    } else if (typeof value === "string") {
-      const trimmed = value.trim();
-      if (trimmed.length > 0 && trimmed.length <= MAX_PROPERTY_LENGTH && !EMAIL_LIKE.test(trimmed)) {
-        safe[key] = trimmed;
-      }
-    }
-  }
-  return safe;
-}
-function trackWebsiteEvent(name, properties) {
-  if (typeof window === "undefined") return false;
-  try {
-    const rybbit = window.rybbit;
-    if (typeof rybbit?.event !== "function") return false;
-    const safe = sanitizeWebsiteEventProperties(properties);
-    if (Object.keys(safe).length > 0) {
-      rybbit.event(name, safe);
-    } else {
-      rybbit.event(name);
-    }
-    return true;
-  } catch {
-    return false;
-  }
-}
 
-exports.MAX_PROPERTY_LENGTH = MAX_PROPERTY_LENGTH;
-exports.RybbitAnalytics = RybbitAnalytics;
-exports.sanitizeWebsiteEventProperties = sanitizeWebsiteEventProperties;
-exports.trackWebsiteEvent = trackWebsiteEvent;
+Object.defineProperty(exports, "RybbitAnalytics", {
+  enumerable: true,
+  get: function () { return chunkQMA6U6AU_js.RybbitAnalytics; }
+});
+Object.defineProperty(exports, "MAX_PROPERTY_LENGTH", {
+  enumerable: true,
+  get: function () { return chunkXJOBZ4RJ_js.MAX_PROPERTY_LENGTH; }
+});
+Object.defineProperty(exports, "sanitizeWebsiteEventProperties", {
+  enumerable: true,
+  get: function () { return chunkXJOBZ4RJ_js.sanitizeWebsiteEventProperties; }
+});
+Object.defineProperty(exports, "trackWebsiteEvent", {
+  enumerable: true,
+  get: function () { return chunkXJOBZ4RJ_js.trackWebsiteEvent; }
+});
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/analytics/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/analytics/rybbit.tsx","../../src/analytics/events.ts"],"names":["useEffect"],"mappings":";;;;AAoDO,SAAS,eAAA,CAAgB;AAAA,EAC9B,MAAA;AAAA,EACA,SAAA,GAAY,+CAAA;AAAA,EACZ,OAAA,GAAU;AACZ,CAAA,EAAyB;AACvB,EAAAA,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,OAAA,IAAW,CAAC,MAAA,EAAQ;AAGzB,IAAA,MAAM,iBAAiB,QAAA,CAAS,aAAA;AAAA,MAC9B,wBAAwB,MAAM,CAAA,EAAA;AAAA,KAChC;AACA,IAAA,IAAI,cAAA,EAAgB;AAQpB,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAA,CAAO,GAAA,GAAM,SAAA;AACb,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AACf,IAAA,MAAA,CAAO,WAAA,GAAc,WAAA;AACrB,IAAA,MAAA,CAAO,YAAA,CAAa,gBAAgB,MAAM,CAAA;AAC1C,IAAA,QAAA,CAAS,IAAA,CAAK,YAAY,MAAM,CAAA;AAGhC,IAAA,OAAO,MAAM;AACX,MAAA,MAAM,iBAAiB,QAAA,CAAS,aAAA;AAAA,QAC9B,wBAAwB,MAAM,CAAA,EAAA;AAAA,OAChC;AACA,MAAA,IAAI,cAAA,EAAgB;AAClB,QAAA,QAAA,CAAS,IAAA,CAAK,YAAY,cAAc,CAAA;AAAA,MAC1C;AAAA,IACF,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,MAAA,EAAQ,SAAA,EAAW,OAAO,CAAC,CAAA;AAG/B,EAAA,OAAO,IAAA;AACT;;;ACvDO,IAAM,mBAAA,GAAsB;AAEnC,IAAM,UAAA,GAAa,iBAAA;AAKZ,SAAS,+BACd,UAAA,EACwB;AACxB,EAAA,MAAM,OAA+B,EAAC;AACtC,EAAA,IAAI,CAAC,YAAY,OAAO,IAAA;AACxB,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,UAAU,CAAA,EAAG;AACrD,IAAA,IAAI,OAAO,UAAU,SAAA,EAAW;AAC9B,MAAA,IAAA,CAAK,GAAG,CAAA,GAAI,KAAA;AAAA,IACd,CAAA,MAAA,IAAW,OAAO,KAAA,KAAU,QAAA,EAAU;AACpC,MAAA,IAAI,OAAO,QAAA,CAAS,KAAK,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,GAAI,KAAA;AAAA,IAC1C,CAAA,MAAA,IAAW,OAAO,KAAA,KAAU,QAAA,EAAU;AACpC,MAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,MAAA,IACE,OAAA,CAAQ,MAAA,GAAS,CAAA,IACjB,OAAA,CAAQ,MAAA,IAAU,uBAClB,CAAC,UAAA,CAAW,IAAA,CAAK,OAAO,CAAA,EACxB;AACA,QAAA,IAAA,CAAK,GAAG,CAAA,GAAI,OAAA;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,iBAAA,CACd,MACA,UAAA,EACS;AACT,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,KAAA;AAC1C,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,MAAA,CAAO,MAAA;AACtB,IAAA,IAAI,OAAO,MAAA,EAAQ,KAAA,KAAU,UAAA,EAAY,OAAO,KAAA;AAChD,IAAA,MAAM,IAAA,GAAO,+BAA+B,UAAU,CAAA;AACtD,IAAA,IAAI,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAE,SAAS,CAAA,EAAG;AAChC,MAAA,MAAA,CAAO,KAAA,CAAM,MAAM,IAAI,CAAA;AAAA,IACzB,CAAA,MAAO;AACL,MAAA,MAAA,CAAO,MAAM,IAAI,CAAA;AAAA,IACnB;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AAEN,IAAA,OAAO,KAAA;AAAA,EACT;AACF","file":"index.js","sourcesContent":["/**\n * Rybbit Analytics Component\n *\n * Injects the Rybbit tracking script into the page head.\n * Works with both Vite (CSR) and Next.js (SSR/CSR) applications.\n *\n * @example\n * ```tsx\n * // In your app layout or root component\n * import { RybbitAnalytics } from '@burdenoff/website-sdk/analytics'\n *\n * function App() {\n *   return (\n *     <>\n *       <RybbitAnalytics siteId=\"1\" />\n *       <Router>...</Router>\n *     </>\n *   )\n * }\n * ```\n */\n\"use client\";\n\nimport { useEffect } from \"react\";\n\nexport interface RybbitAnalyticsProps {\n  /**\n   * Rybbit site ID (obtained from the Rybbit dashboard)\n   */\n  siteId: string;\n\n  /**\n   * Rybbit script URL (defaults to the self-hosted instance)\n   * @default \"https://analytics.burdenoff.com/api/script.js\"\n   */\n  scriptUrl?: string;\n\n  /**\n   * Whether to enable tracking (useful for disabling in development)\n   * @default true\n   */\n  enabled?: boolean;\n}\n\n/**\n * RybbitAnalytics - Embeds the Rybbit analytics tracking script.\n *\n * The script is loaded asynchronously with `defer` to avoid blocking page load.\n * It automatically tracks page views and user interactions.\n *\n * In development mode (when `enabled` is false), no script is loaded.\n */\nexport function RybbitAnalytics({\n  siteId,\n  scriptUrl = \"https://analytics.burdenoff.com/api/script.js\",\n  enabled = true,\n}: RybbitAnalyticsProps) {\n  useEffect(() => {\n    if (!enabled || !siteId) return;\n\n    // Check if script already exists\n    const existingScript = document.querySelector(\n      `script[data-site-id=\"${siteId}\"]`,\n    );\n    if (existingScript) return;\n\n    // Create and inject the script. `crossOrigin=\"anonymous\"` puts the\n    // request in CORS-no-credentials mode so the browser does not include\n    // any third-party cookies the visitor may have on the analytics origin\n    // (e.g. `app.rybbit.io`'s own dashboard session cookie). Without this,\n    // Lighthouse `third-party-cookies` audit flags the page even though we\n    // never read those cookies ourselves.\n    const script = document.createElement(\"script\");\n    script.src = scriptUrl;\n    script.defer = true;\n    script.crossOrigin = \"anonymous\";\n    script.setAttribute(\"data-site-id\", siteId);\n    document.head.appendChild(script);\n\n    // Cleanup on unmount\n    return () => {\n      const scriptToRemove = document.querySelector(\n        `script[data-site-id=\"${siteId}\"]`,\n      );\n      if (scriptToRemove) {\n        document.head.removeChild(scriptToRemove);\n      }\n    };\n  }, [siteId, scriptUrl, enabled]);\n\n  // This component renders nothing - it only manages the script tag\n  return null;\n}\n","/**\n * Website analytics events (Rybbit custom events).\n *\n * Product websites load the Rybbit script, which records pageviews on its own.\n * Funnel facts that are not a pageview (for example a successful waitlist\n * signup) are sent through `trackWebsiteEvent`, which calls `window.rybbit.event`\n * when the script is present and does nothing otherwise.\n *\n * Privacy rules (BOFF-3167):\n * - Event names come from the closed `WebsiteEventName` union.\n * - Properties are short, low-cardinality strings, numbers or booleans. Strings\n *   longer than `MAX_PROPERTY_LENGTH`, values that look like an email address,\n *   and any other value type are dropped, so a caller cannot leak an email,\n *   name or free text into the analytics provider by mistake.\n * - Tracking never throws: analytics must not break a signup.\n */\n\n/** Custom events product websites emit. */\nexport type WebsiteEventName = \"waitlist.signed_up\";\n\nexport type WebsiteEventPropertyValue = string | number | boolean;\n\nexport type WebsiteEventProperties = Record<string, WebsiteEventPropertyValue>;\n\ndeclare global {\n  interface Window {\n    /** Set by the Rybbit tracking script (https://app.rybbit.io/api/script.js). */\n    rybbit?: {\n      event?: (\n        name: string,\n        properties?: Record<string, WebsiteEventPropertyValue>,\n      ) => void;\n    };\n  }\n}\n\n/** Longest string property value that is forwarded. */\nexport const MAX_PROPERTY_LENGTH = 64;\n\nconst EMAIL_LIKE = /[^\\s@]+@[^\\s@]+/;\n\n/**\n * Keeps only short, non-identifying primitive values. Exported for tests.\n */\nexport function sanitizeWebsiteEventProperties(\n  properties: WebsiteEventProperties | undefined,\n): WebsiteEventProperties {\n  const safe: WebsiteEventProperties = {};\n  if (!properties) return safe;\n  for (const [key, value] of Object.entries(properties)) {\n    if (typeof value === \"boolean\") {\n      safe[key] = value;\n    } else if (typeof value === \"number\") {\n      if (Number.isFinite(value)) safe[key] = value;\n    } else if (typeof value === \"string\") {\n      const trimmed = value.trim();\n      if (\n        trimmed.length > 0 &&\n        trimmed.length <= MAX_PROPERTY_LENGTH &&\n        !EMAIL_LIKE.test(trimmed)\n      ) {\n        safe[key] = trimmed;\n      }\n    }\n  }\n  return safe;\n}\n\n/**\n * Sends a custom event to Rybbit when the tracking script is loaded.\n * Returns true when the event was handed to Rybbit.\n */\nexport function trackWebsiteEvent(\n  name: WebsiteEventName,\n  properties?: WebsiteEventProperties,\n): boolean {\n  if (typeof window === \"undefined\") return false;\n  try {\n    const rybbit = window.rybbit;\n    if (typeof rybbit?.event !== \"function\") return false;\n    const safe = sanitizeWebsiteEventProperties(properties);\n    if (Object.keys(safe).length > 0) {\n      rybbit.event(name, safe);\n    } else {\n      rybbit.event(name);\n    }\n    return true;\n  } catch {\n    // Analytics is best-effort and must never break the page.\n    return false;\n  }\n}\n"]}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}

package/dist/analytics/index.mjs

@@ -1,71 +1,5 @@
-import { useEffect } from 'react';
-
-function RybbitAnalytics({
-  siteId,
-  scriptUrl = "https://analytics.burdenoff.com/api/script.js",
-  enabled = true
-}) {
-  useEffect(() => {
-    if (!enabled || !siteId) return;
-    const existingScript = document.querySelector(
-      `script[data-site-id="${siteId}"]`
-    );
-    if (existingScript) return;
-    const script = document.createElement("script");
-    script.src = scriptUrl;
-    script.defer = true;
-    script.crossOrigin = "anonymous";
-    script.setAttribute("data-site-id", siteId);
-    document.head.appendChild(script);
-    return () => {
-      const scriptToRemove = document.querySelector(
-        `script[data-site-id="${siteId}"]`
-      );
-      if (scriptToRemove) {
-        document.head.removeChild(scriptToRemove);
-      }
-    };
-  }, [siteId, scriptUrl, enabled]);
-  return null;
-}
-
-// src/analytics/events.ts
-var MAX_PROPERTY_LENGTH = 64;
-var EMAIL_LIKE = /[^\s@]+@[^\s@]+/;
-function sanitizeWebsiteEventProperties(properties) {
-  const safe = {};
-  if (!properties) return safe;
-  for (const [key, value] of Object.entries(properties)) {
-    if (typeof value === "boolean") {
-      safe[key] = value;
-    } else if (typeof value === "number") {
-      if (Number.isFinite(value)) safe[key] = value;
-    } else if (typeof value === "string") {
-      const trimmed = value.trim();
-      if (trimmed.length > 0 && trimmed.length <= MAX_PROPERTY_LENGTH && !EMAIL_LIKE.test(trimmed)) {
-        safe[key] = trimmed;
-      }
-    }
-  }
-  return safe;
-}
-function trackWebsiteEvent(name, properties) {
-  if (typeof window === "undefined") return false;
-  try {
-    const rybbit = window.rybbit;
-    if (typeof rybbit?.event !== "function") return false;
-    const safe = sanitizeWebsiteEventProperties(properties);
-    if (Object.keys(safe).length > 0) {
-      rybbit.event(name, safe);
-    } else {
-      rybbit.event(name);
-    }
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-export { MAX_PROPERTY_LENGTH, RybbitAnalytics, sanitizeWebsiteEventProperties, trackWebsiteEvent };
+export { RybbitAnalytics } from '../chunk-NZANQGDM.mjs';
+export { MAX_PROPERTY_LENGTH, sanitizeWebsiteEventProperties, trackWebsiteEvent } from '../chunk-6YZUFMK2.mjs';
+import '../chunk-VNS5WDWO.mjs';
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/analytics/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/analytics/rybbit.tsx","../../src/analytics/events.ts"],"names":[],"mappings":";;AAoDO,SAAS,eAAA,CAAgB;AAAA,EAC9B,MAAA;AAAA,EACA,SAAA,GAAY,+CAAA;AAAA,EACZ,OAAA,GAAU;AACZ,CAAA,EAAyB;AACvB,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,OAAA,IAAW,CAAC,MAAA,EAAQ;AAGzB,IAAA,MAAM,iBAAiB,QAAA,CAAS,aAAA;AAAA,MAC9B,wBAAwB,MAAM,CAAA,EAAA;AAAA,KAChC;AACA,IAAA,IAAI,cAAA,EAAgB;AAQpB,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAA,CAAO,GAAA,GAAM,SAAA;AACb,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AACf,IAAA,MAAA,CAAO,WAAA,GAAc,WAAA;AACrB,IAAA,MAAA,CAAO,YAAA,CAAa,gBAAgB,MAAM,CAAA;AAC1C,IAAA,QAAA,CAAS,IAAA,CAAK,YAAY,MAAM,CAAA;AAGhC,IAAA,OAAO,MAAM;AACX,MAAA,MAAM,iBAAiB,QAAA,CAAS,aAAA;AAAA,QAC9B,wBAAwB,MAAM,CAAA,EAAA;AAAA,OAChC;AACA,MAAA,IAAI,cAAA,EAAgB;AAClB,QAAA,QAAA,CAAS,IAAA,CAAK,YAAY,cAAc,CAAA;AAAA,MAC1C;AAAA,IACF,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,MAAA,EAAQ,SAAA,EAAW,OAAO,CAAC,CAAA;AAG/B,EAAA,OAAO,IAAA;AACT;;;ACvDO,IAAM,mBAAA,GAAsB;AAEnC,IAAM,UAAA,GAAa,iBAAA;AAKZ,SAAS,+BACd,UAAA,EACwB;AACxB,EAAA,MAAM,OAA+B,EAAC;AACtC,EAAA,IAAI,CAAC,YAAY,OAAO,IAAA;AACxB,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,UAAU,CAAA,EAAG;AACrD,IAAA,IAAI,OAAO,UAAU,SAAA,EAAW;AAC9B,MAAA,IAAA,CAAK,GAAG,CAAA,GAAI,KAAA;AAAA,IACd,CAAA,MAAA,IAAW,OAAO,KAAA,KAAU,QAAA,EAAU;AACpC,MAAA,IAAI,OAAO,QAAA,CAAS,KAAK,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,GAAI,KAAA;AAAA,IAC1C,CAAA,MAAA,IAAW,OAAO,KAAA,KAAU,QAAA,EAAU;AACpC,MAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,MAAA,IACE,OAAA,CAAQ,MAAA,GAAS,CAAA,IACjB,OAAA,CAAQ,MAAA,IAAU,uBAClB,CAAC,UAAA,CAAW,IAAA,CAAK,OAAO,CAAA,EACxB;AACA,QAAA,IAAA,CAAK,GAAG,CAAA,GAAI,OAAA;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,iBAAA,CACd,MACA,UAAA,EACS;AACT,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,KAAA;AAC1C,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,MAAA,CAAO,MAAA;AACtB,IAAA,IAAI,OAAO,MAAA,EAAQ,KAAA,KAAU,UAAA,EAAY,OAAO,KAAA;AAChD,IAAA,MAAM,IAAA,GAAO,+BAA+B,UAAU,CAAA;AACtD,IAAA,IAAI,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAE,SAAS,CAAA,EAAG;AAChC,MAAA,MAAA,CAAO,KAAA,CAAM,MAAM,IAAI,CAAA;AAAA,IACzB,CAAA,MAAO;AACL,MAAA,MAAA,CAAO,MAAM,IAAI,CAAA;AAAA,IACnB;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AAEN,IAAA,OAAO,KAAA;AAAA,EACT;AACF","file":"index.mjs","sourcesContent":["/**\n * Rybbit Analytics Component\n *\n * Injects the Rybbit tracking script into the page head.\n * Works with both Vite (CSR) and Next.js (SSR/CSR) applications.\n *\n * @example\n * ```tsx\n * // In your app layout or root component\n * import { RybbitAnalytics } from '@burdenoff/website-sdk/analytics'\n *\n * function App() {\n *   return (\n *     <>\n *       <RybbitAnalytics siteId=\"1\" />\n *       <Router>...</Router>\n *     </>\n *   )\n * }\n * ```\n */\n\"use client\";\n\nimport { useEffect } from \"react\";\n\nexport interface RybbitAnalyticsProps {\n  /**\n   * Rybbit site ID (obtained from the Rybbit dashboard)\n   */\n  siteId: string;\n\n  /**\n   * Rybbit script URL (defaults to the self-hosted instance)\n   * @default \"https://analytics.burdenoff.com/api/script.js\"\n   */\n  scriptUrl?: string;\n\n  /**\n   * Whether to enable tracking (useful for disabling in development)\n   * @default true\n   */\n  enabled?: boolean;\n}\n\n/**\n * RybbitAnalytics - Embeds the Rybbit analytics tracking script.\n *\n * The script is loaded asynchronously with `defer` to avoid blocking page load.\n * It automatically tracks page views and user interactions.\n *\n * In development mode (when `enabled` is false), no script is loaded.\n */\nexport function RybbitAnalytics({\n  siteId,\n  scriptUrl = \"https://analytics.burdenoff.com/api/script.js\",\n  enabled = true,\n}: RybbitAnalyticsProps) {\n  useEffect(() => {\n    if (!enabled || !siteId) return;\n\n    // Check if script already exists\n    const existingScript = document.querySelector(\n      `script[data-site-id=\"${siteId}\"]`,\n    );\n    if (existingScript) return;\n\n    // Create and inject the script. `crossOrigin=\"anonymous\"` puts the\n    // request in CORS-no-credentials mode so the browser does not include\n    // any third-party cookies the visitor may have on the analytics origin\n    // (e.g. `app.rybbit.io`'s own dashboard session cookie). Without this,\n    // Lighthouse `third-party-cookies` audit flags the page even though we\n    // never read those cookies ourselves.\n    const script = document.createElement(\"script\");\n    script.src = scriptUrl;\n    script.defer = true;\n    script.crossOrigin = \"anonymous\";\n    script.setAttribute(\"data-site-id\", siteId);\n    document.head.appendChild(script);\n\n    // Cleanup on unmount\n    return () => {\n      const scriptToRemove = document.querySelector(\n        `script[data-site-id=\"${siteId}\"]`,\n      );\n      if (scriptToRemove) {\n        document.head.removeChild(scriptToRemove);\n      }\n    };\n  }, [siteId, scriptUrl, enabled]);\n\n  // This component renders nothing - it only manages the script tag\n  return null;\n}\n","/**\n * Website analytics events (Rybbit custom events).\n *\n * Product websites load the Rybbit script, which records pageviews on its own.\n * Funnel facts that are not a pageview (for example a successful waitlist\n * signup) are sent through `trackWebsiteEvent`, which calls `window.rybbit.event`\n * when the script is present and does nothing otherwise.\n *\n * Privacy rules (BOFF-3167):\n * - Event names come from the closed `WebsiteEventName` union.\n * - Properties are short, low-cardinality strings, numbers or booleans. Strings\n *   longer than `MAX_PROPERTY_LENGTH`, values that look like an email address,\n *   and any other value type are dropped, so a caller cannot leak an email,\n *   name or free text into the analytics provider by mistake.\n * - Tracking never throws: analytics must not break a signup.\n */\n\n/** Custom events product websites emit. */\nexport type WebsiteEventName = \"waitlist.signed_up\";\n\nexport type WebsiteEventPropertyValue = string | number | boolean;\n\nexport type WebsiteEventProperties = Record<string, WebsiteEventPropertyValue>;\n\ndeclare global {\n  interface Window {\n    /** Set by the Rybbit tracking script (https://app.rybbit.io/api/script.js). */\n    rybbit?: {\n      event?: (\n        name: string,\n        properties?: Record<string, WebsiteEventPropertyValue>,\n      ) => void;\n    };\n  }\n}\n\n/** Longest string property value that is forwarded. */\nexport const MAX_PROPERTY_LENGTH = 64;\n\nconst EMAIL_LIKE = /[^\\s@]+@[^\\s@]+/;\n\n/**\n * Keeps only short, non-identifying primitive values. Exported for tests.\n */\nexport function sanitizeWebsiteEventProperties(\n  properties: WebsiteEventProperties | undefined,\n): WebsiteEventProperties {\n  const safe: WebsiteEventProperties = {};\n  if (!properties) return safe;\n  for (const [key, value] of Object.entries(properties)) {\n    if (typeof value === \"boolean\") {\n      safe[key] = value;\n    } else if (typeof value === \"number\") {\n      if (Number.isFinite(value)) safe[key] = value;\n    } else if (typeof value === \"string\") {\n      const trimmed = value.trim();\n      if (\n        trimmed.length > 0 &&\n        trimmed.length <= MAX_PROPERTY_LENGTH &&\n        !EMAIL_LIKE.test(trimmed)\n      ) {\n        safe[key] = trimmed;\n      }\n    }\n  }\n  return safe;\n}\n\n/**\n * Sends a custom event to Rybbit when the tracking script is loaded.\n * Returns true when the event was handed to Rybbit.\n */\nexport function trackWebsiteEvent(\n  name: WebsiteEventName,\n  properties?: WebsiteEventProperties,\n): boolean {\n  if (typeof window === \"undefined\") return false;\n  try {\n    const rybbit = window.rybbit;\n    if (typeof rybbit?.event !== \"function\") return false;\n    const safe = sanitizeWebsiteEventProperties(properties);\n    if (Object.keys(safe).length > 0) {\n      rybbit.event(name, safe);\n    } else {\n      rybbit.event(name);\n    }\n    return true;\n  } catch {\n    // Analytics is best-effort and must never break the page.\n    return false;\n  }\n}\n"]}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.mjs"}

package/dist/avatar-live/index.js

@@ -1,5 +1,6 @@
 'use strict';
 
+require('../chunk-ZSTFX7FV.js');
 var livekitClient = require('livekit-client');
 
 var CLOSED_BY_SERVER = /* @__PURE__ */ new Set([

package/dist/avatar-live/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/avatar-live/receive-only.ts"],"names":["DisconnectReason","Track","Room","RoomEvent"],"mappings":";;;;AA6BA,IAAM,gBAAA,uBAAsD,GAAA,CAAI;AAAA,EAC9DA,8BAAA,CAAiB,YAAA;AAAA,EACjBA,8BAAA,CAAiB,WAAA;AAAA,EACjBA,8BAAA,CAAiB;AACnB,CAAC,CAAA;AAED,SAAS,QAAQ,WAAA,EAA8C;AAC7D,EAAA,OACE,WAAA,CAAY,SAASC,mBAAA,CAAM,IAAA,CAAK,SAChC,WAAA,CAAY,IAAA,KAASA,oBAAM,IAAA,CAAK,KAAA;AAEpC;AAOA,eAAsB,gBACpB,OAAA,EAC6B;AAC7B,EAAA,MAAM,EAAE,GAAA,EAAK,KAAA,EAAO,gBAAgB,KAAA,EAAO,KAAA,EAAO,SAAQ,GAAI,OAAA;AAC9D,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,IAAI,MAAA,CAAO,aAAa,MAAA,EAAQ;AAC9B,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,IAAI,CAAC,KAAA,IAAS,CAAC,cAAA,EAAgB;AAC7B,IAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,IAAA,GAAO,IAAIC,kBAAA,CAAK;AAAA;AAAA,IAEpB,cAAA,EAAgB,KAAA;AAAA,IAChB,QAAA,EAAU,KAAA;AAAA;AAAA;AAAA,IAGV,qBAAA,EAAuB;AAAA,GACxB,CAAA;AACD,EAAA,IAAI,OAAA,GAAU,KAAA;AAEd,EAAA,MAAM,SAAA,GAAY,CAAC,WAAA,KACjB,WAAA,CAAY,QAAA,KAAa,cAAA;AAG3B,EAAA,MAAM,QAAA,GAAW,CACf,WAAA,EACA,WAAA,KACG;AACH,IAAA,IAAI,OAAA,IAAW,CAAC,SAAA,CAAU,WAAW,KAAK,CAAC,OAAA,CAAQ,WAAW,CAAA,EAAG;AACjE,IAAA,IAAI,CAAC,WAAA,CAAY,YAAA,EAAc,WAAA,CAAY,cAAc,IAAI,CAAA;AAAA,EAC/D,CAAA;AAEA,EAAA,MAAM,iBAAiB,MAAM;AAC3B,IAAA,IAAI,OAAA,EAAS;AACb,IAAA,OAAA,CAAQ;AAAA,MACN,IAAA,EAAM,kBAAA;AAAA,MACN,OAAA,EAAS,CAAC,IAAA,CAAK,gBAAA,IAAoB,CAAC,IAAA,CAAK;AAAA,KAC1C,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,IAAA,CACG,EAAA,CAAGC,uBAAA,CAAU,cAAA,EAAgB,QAAQ,CAAA,CACrC,EAAA;AAAA,IACCA,uBAAA,CAAU,eAAA;AAAA,IACV,CACE,KAAA,EACA,WAAA,EACA,WAAA,KACG;AACH,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,IAAI,CAAC,SAAA,CAAU,WAAW,KAAK,CAAC,OAAA,CAAQ,WAAW,CAAA,EAAG;AAEpD,QAAA,WAAA,CAAY,cAAc,KAAK,CAAA;AAC/B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,KAAA,CAAM,IAAA,KAASF,mBAAA,CAAM,IAAA,CAAK,KAAA,EAAO;AACnC,QAAA,KAAA,CAAM,OAAO,KAAK,CAAA;AAClB,QAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,eAAA,EAAiB,IAAA,EAAM,SAAS,CAAA;AAAA,MAClD,CAAA,MAAO;AACL,QAAA,KAAA,CAAM,OAAO,KAAK,CAAA;AAClB,QAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,eAAA,EAAiB,IAAA,EAAM,SAAS,CAAA;AAAA,MAClD;AAAA,IACF;AAAA,GACF,CACC,EAAA,CAAGE,uBAAA,CAAU,iBAAA,EAAmB,CAAC,KAAA,KAAuB;AACvD,IAAA,KAAA,CAAM,MAAA,EAAO;AAAA,EACf,CAAC,CAAA,CACA,EAAA,CAAGA,uBAAA,CAAU,uBAAA,EAAyB,CAAC,WAAA,KAAmC;AACzE,IAAA,IAAI,CAAC,OAAA,IAAW,SAAA,CAAU,WAAW,CAAA,EAAG;AACtC,MAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,cAAA,EAAgB,CAAA;AAAA,IAClC;AAAA,EACF,CAAC,CAAA,CACA,EAAA,CAAGA,uBAAA,CAAU,0BAAA,EAA4B,cAAc,CAAA,CACvD,EAAA,CAAGA,uBAAA,CAAU,0BAAA,EAA4B,cAAc,CAAA,CACvD,EAAA,CAAGA,uBAAA,CAAU,YAAA,EAAc,CAAC,MAAA,KAA8B;AACzD,IAAA,IAAI,OAAA,EAAS;AACb,IAAA,OAAA,CAAQ;AAAA,MACN,IAAA,EAAM,cAAA;AAAA,MACN,QAAA,EAAU,MAAA,KAAW,MAAA,IAAa,gBAAA,CAAiB,IAAI,MAAM;AAAA,KAC9D,CAAA;AAAA,EACH,CAAC,CAAA;AAEH,EAAA,MAAM,YAAY,MAAM;AACtB,IAAA,KAAA,MAAW,WAAA,IAAe,IAAA,CAAK,kBAAA,CAAmB,MAAA,EAAO,EAAG;AAC1D,MAAA,KAAA,MAAW,WAAA,IAAe,WAAA,CAAY,iBAAA,CAAkB,MAAA,EAAO,EAAG;AAChE,QAAA,WAAA,CAAY,OAAO,MAAA,EAAO;AAAA,MAC5B;AAAA,IACF;AACA,IAAA,KAAA,CAAM,SAAA,GAAY,IAAA;AAClB,IAAA,KAAA,CAAM,SAAA,GAAY,IAAA;AAAA,EACpB,CAAA;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,KAAK,OAAA,CAAQ,GAAA,EAAK,OAAO,EAAE,aAAA,EAAe,OAAO,CAAA;AAAA,EACzD,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,GAAU,IAAA;AACV,IAAA,IAAA,CAAK,kBAAA,EAAmB;AACxB,IAAA,SAAA,EAAU;AACV,IAAA,MAAM,KAAA;AAAA,EACR;AAGA,EAAA,KAAA,MAAW,WAAA,IAAe,IAAA,CAAK,kBAAA,CAAmB,MAAA,EAAO,EAAG;AAC1D,IAAA,KAAA,MAAW,WAAA,IAAe,WAAA,CAAY,iBAAA,CAAkB,MAAA,EAAO,EAAG;AAChE,MAAA,QAAA,CAAS,aAAa,WAAW,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,cAAA,EAAe;AAEf,EAAA,OAAO;AAAA,IACL,gBAAgB,YAAY;AAG1B,MAAA,MAAM,OAAA,CAAQ,WAAW,CAAC,IAAA,CAAK,YAAW,EAAG,IAAA,CAAK,UAAA,EAAY,CAAC,CAAA;AAC/D,MAAA,cAAA,EAAe;AAAA,IACjB,CAAA;AAAA,IACA,OAAO,YAAY;AACjB,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,SAAA,EAAU;AACV,MAAA,IAAI;AACF,QAAA,MAAM,KAAK,UAAA,EAAW;AAAA,MACxB,CAAA,SAAE;AACA,QAAA,IAAA,CAAK,kBAAA,EAAmB;AAAA,MAC1B;AAAA,IACF;AAAA,GACF;AACF","file":"index.js","sourcesContent":["/**\n * BOFF-9797. The live avatar's room, joined to watch and listen only.\n *\n * A visitor's browser on a product website holds a subscribe-only room token: it can receive the avatar worker's\n * video and voice and do nothing else. This adapter keeps to that from its side too:\n *\n * - **Nothing is subscribed automatically** (`autoSubscribe: false`). Only the tracks of `workerIdentity`, the avatar\n *   worker the create answer named, are subscribed, and only their video and audio. Any other participant's track\n *   (the server's own speaker included) is never asked for, and is dropped again should the server send it anyway.\n * - **Nothing is published.** No microphone, no camera, no data, no RPC method: this file never calls a publishing\n *   API, and the token would refuse one.\n * - **Safari and iOS** hold sound back until a gesture. The room reports it (`playback-blocked`) and the panel offers\n *   \"Tap to turn on sound\", whose tap calls `enablePlayback`.\n *\n * Written for the website from the media library's public API: nothing here is copied from the product apps.\n */\nimport {\n  DisconnectReason,\n  Room,\n  RoomEvent,\n  Track,\n  type RemoteParticipant,\n  type RemoteTrack,\n  type RemoteTrackPublication,\n} from \"livekit-client\";\n\nimport type { ReceiveOnlyJoinOptions, ReceiveOnlySession } from \"./types\";\n\n/** The reasons a room closes because the server closed it, rather than because the connection was lost. */\nconst CLOSED_BY_SERVER: ReadonlySet<DisconnectReason> = new Set([\n  DisconnectReason.ROOM_DELETED,\n  DisconnectReason.ROOM_CLOSED,\n  DisconnectReason.PARTICIPANT_REMOVED,\n]);\n\nfunction isMedia(publication: RemoteTrackPublication): boolean {\n  return (\n    publication.kind === Track.Kind.Video ||\n    publication.kind === Track.Kind.Audio\n  );\n}\n\n/**\n * Join the room in `options.url` with the receive-only `options.token`, and play the avatar worker's video and voice\n * in `options.video` and `options.audio`. Resolves once connected; rejects when the room cannot be joined (the panel\n * then ends the session).\n */\nexport async function joinReceiveOnly(\n  options: ReceiveOnlyJoinOptions,\n): Promise<ReceiveOnlySession> {\n  const { url, token, workerIdentity, video, audio, onEvent } = options;\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    throw new Error(\"live avatar: the room address is not a URL\");\n  }\n  if (parsed.protocol !== \"wss:\") {\n    throw new Error(\"live avatar: the room address must be wss:\");\n  }\n  if (!token || !workerIdentity) {\n    throw new Error(\"live avatar: the room token or speaker is missing\");\n  }\n\n  const room = new Room({\n    // One small video, always shown while the session lasts: no quality switching, no layer pausing.\n    adaptiveStream: false,\n    dynacast: false,\n    // Closing the tab or leaving the page leaves the room at once. Belt and braces with the panel's own page-hide\n    // handler, which also asks the server to end the session: either may run first, and both are safe to repeat.\n    disconnectOnPageLeave: true,\n  });\n  let leaving = false;\n\n  const isSpeaker = (participant: RemoteParticipant) =>\n    participant.identity === workerIdentity;\n\n  /** Subscribe to `publication` when it is the speaker's video or audio; leave everything else alone. */\n  const consider = (\n    publication: RemoteTrackPublication,\n    participant: RemoteParticipant,\n  ) => {\n    if (leaving || !isSpeaker(participant) || !isMedia(publication)) return;\n    if (!publication.isSubscribed) publication.setSubscribed(true);\n  };\n\n  const reportPlayback = () => {\n    if (leaving) return;\n    onEvent({\n      type: \"playback-blocked\",\n      blocked: !room.canPlaybackAudio || !room.canPlaybackVideo,\n    });\n  };\n\n  room\n    .on(RoomEvent.TrackPublished, consider)\n    .on(\n      RoomEvent.TrackSubscribed,\n      (\n        track: RemoteTrack,\n        publication: RemoteTrackPublication,\n        participant: RemoteParticipant,\n      ) => {\n        if (leaving) return;\n        if (!isSpeaker(participant) || !isMedia(publication)) {\n          // Never asked for: drop it rather than play it.\n          publication.setSubscribed(false);\n          return;\n        }\n        if (track.kind === Track.Kind.Video) {\n          track.attach(video);\n          onEvent({ type: \"speaker-track\", kind: \"video\" });\n        } else {\n          track.attach(audio);\n          onEvent({ type: \"speaker-track\", kind: \"audio\" });\n        }\n      },\n    )\n    .on(RoomEvent.TrackUnsubscribed, (track: RemoteTrack) => {\n      track.detach();\n    })\n    .on(RoomEvent.ParticipantDisconnected, (participant: RemoteParticipant) => {\n      if (!leaving && isSpeaker(participant)) {\n        onEvent({ type: \"speaker-left\" });\n      }\n    })\n    .on(RoomEvent.AudioPlaybackStatusChanged, reportPlayback)\n    .on(RoomEvent.VideoPlaybackStatusChanged, reportPlayback)\n    .on(RoomEvent.Disconnected, (reason?: DisconnectReason) => {\n      if (leaving) return;\n      onEvent({\n        type: \"disconnected\",\n        byServer: reason !== undefined && CLOSED_BY_SERVER.has(reason),\n      });\n    });\n\n  const detachAll = () => {\n    for (const participant of room.remoteParticipants.values()) {\n      for (const publication of participant.trackPublications.values()) {\n        publication.track?.detach();\n      }\n    }\n    video.srcObject = null;\n    audio.srcObject = null;\n  };\n\n  try {\n    await room.connect(url, token, { autoSubscribe: false });\n  } catch (error) {\n    leaving = true;\n    room.removeAllListeners();\n    detachAll();\n    throw error;\n  }\n\n  // Whoever was in the room before this viewer joined: their tracks were published before the listener above.\n  for (const participant of room.remoteParticipants.values()) {\n    for (const publication of participant.trackPublications.values()) {\n      consider(publication, participant);\n    }\n  }\n  reportPlayback();\n\n  return {\n    enablePlayback: async () => {\n      // Both started inside the visitor's gesture, before anything is awaited: Safari allows playback only there.\n      // A refusal leaves the room as it was, and the report below keeps the button offered.\n      await Promise.allSettled([room.startAudio(), room.startVideo()]);\n      reportPlayback();\n    },\n    leave: async () => {\n      if (leaving) return;\n      leaving = true;\n      detachAll();\n      try {\n        await room.disconnect();\n      } finally {\n        room.removeAllListeners();\n      }\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../../src/avatar-live/receive-only.ts"],"names":["DisconnectReason","Track","Room","RoomEvent"],"mappings":";;;;;AA6BA,IAAM,gBAAA,uBAAsD,GAAA,CAAI;AAAA,EAC9DA,8BAAA,CAAiB,YAAA;AAAA,EACjBA,8BAAA,CAAiB,WAAA;AAAA,EACjBA,8BAAA,CAAiB;AACnB,CAAC,CAAA;AAED,SAAS,QAAQ,WAAA,EAA8C;AAC7D,EAAA,OACE,WAAA,CAAY,SAASC,mBAAA,CAAM,IAAA,CAAK,SAChC,WAAA,CAAY,IAAA,KAASA,oBAAM,IAAA,CAAK,KAAA;AAEpC;AAOA,eAAsB,gBACpB,OAAA,EAC6B;AAC7B,EAAA,MAAM,EAAE,GAAA,EAAK,KAAA,EAAO,gBAAgB,KAAA,EAAO,KAAA,EAAO,SAAQ,GAAI,OAAA;AAC9D,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,IAAI,MAAA,CAAO,aAAa,MAAA,EAAQ;AAC9B,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,IAAI,CAAC,KAAA,IAAS,CAAC,cAAA,EAAgB;AAC7B,IAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,IAAA,GAAO,IAAIC,kBAAA,CAAK;AAAA;AAAA,IAEpB,cAAA,EAAgB,KAAA;AAAA,IAChB,QAAA,EAAU,KAAA;AAAA;AAAA;AAAA,IAGV,qBAAA,EAAuB;AAAA,GACxB,CAAA;AACD,EAAA,IAAI,OAAA,GAAU,KAAA;AAEd,EAAA,MAAM,SAAA,GAAY,CAAC,WAAA,KACjB,WAAA,CAAY,QAAA,KAAa,cAAA;AAG3B,EAAA,MAAM,QAAA,GAAW,CACf,WAAA,EACA,WAAA,KACG;AACH,IAAA,IAAI,OAAA,IAAW,CAAC,SAAA,CAAU,WAAW,KAAK,CAAC,OAAA,CAAQ,WAAW,CAAA,EAAG;AACjE,IAAA,IAAI,CAAC,WAAA,CAAY,YAAA,EAAc,WAAA,CAAY,cAAc,IAAI,CAAA;AAAA,EAC/D,CAAA;AAEA,EAAA,MAAM,iBAAiB,MAAM;AAC3B,IAAA,IAAI,OAAA,EAAS;AACb,IAAA,OAAA,CAAQ;AAAA,MACN,IAAA,EAAM,kBAAA;AAAA,MACN,OAAA,EAAS,CAAC,IAAA,CAAK,gBAAA,IAAoB,CAAC,IAAA,CAAK;AAAA,KAC1C,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,IAAA,CACG,EAAA,CAAGC,uBAAA,CAAU,cAAA,EAAgB,QAAQ,CAAA,CACrC,EAAA;AAAA,IACCA,uBAAA,CAAU,eAAA;AAAA,IACV,CACE,KAAA,EACA,WAAA,EACA,WAAA,KACG;AACH,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,IAAI,CAAC,SAAA,CAAU,WAAW,KAAK,CAAC,OAAA,CAAQ,WAAW,CAAA,EAAG;AAEpD,QAAA,WAAA,CAAY,cAAc,KAAK,CAAA;AAC/B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,KAAA,CAAM,IAAA,KAASF,mBAAA,CAAM,IAAA,CAAK,KAAA,EAAO;AACnC,QAAA,KAAA,CAAM,OAAO,KAAK,CAAA;AAClB,QAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,eAAA,EAAiB,IAAA,EAAM,SAAS,CAAA;AAAA,MAClD,CAAA,MAAO;AACL,QAAA,KAAA,CAAM,OAAO,KAAK,CAAA;AAClB,QAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,eAAA,EAAiB,IAAA,EAAM,SAAS,CAAA;AAAA,MAClD;AAAA,IACF;AAAA,GACF,CACC,EAAA,CAAGE,uBAAA,CAAU,iBAAA,EAAmB,CAAC,KAAA,KAAuB;AACvD,IAAA,KAAA,CAAM,MAAA,EAAO;AAAA,EACf,CAAC,CAAA,CACA,EAAA,CAAGA,uBAAA,CAAU,uBAAA,EAAyB,CAAC,WAAA,KAAmC;AACzE,IAAA,IAAI,CAAC,OAAA,IAAW,SAAA,CAAU,WAAW,CAAA,EAAG;AACtC,MAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,cAAA,EAAgB,CAAA;AAAA,IAClC;AAAA,EACF,CAAC,CAAA,CACA,EAAA,CAAGA,uBAAA,CAAU,0BAAA,EAA4B,cAAc,CAAA,CACvD,EAAA,CAAGA,uBAAA,CAAU,0BAAA,EAA4B,cAAc,CAAA,CACvD,EAAA,CAAGA,uBAAA,CAAU,YAAA,EAAc,CAAC,MAAA,KAA8B;AACzD,IAAA,IAAI,OAAA,EAAS;AACb,IAAA,OAAA,CAAQ;AAAA,MACN,IAAA,EAAM,cAAA;AAAA,MACN,QAAA,EAAU,MAAA,KAAW,MAAA,IAAa,gBAAA,CAAiB,IAAI,MAAM;AAAA,KAC9D,CAAA;AAAA,EACH,CAAC,CAAA;AAEH,EAAA,MAAM,YAAY,MAAM;AACtB,IAAA,KAAA,MAAW,WAAA,IAAe,IAAA,CAAK,kBAAA,CAAmB,MAAA,EAAO,EAAG;AAC1D,MAAA,KAAA,MAAW,WAAA,IAAe,WAAA,CAAY,iBAAA,CAAkB,MAAA,EAAO,EAAG;AAChE,QAAA,WAAA,CAAY,OAAO,MAAA,EAAO;AAAA,MAC5B;AAAA,IACF;AACA,IAAA,KAAA,CAAM,SAAA,GAAY,IAAA;AAClB,IAAA,KAAA,CAAM,SAAA,GAAY,IAAA;AAAA,EACpB,CAAA;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,KAAK,OAAA,CAAQ,GAAA,EAAK,OAAO,EAAE,aAAA,EAAe,OAAO,CAAA;AAAA,EACzD,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,GAAU,IAAA;AACV,IAAA,IAAA,CAAK,kBAAA,EAAmB;AACxB,IAAA,SAAA,EAAU;AACV,IAAA,MAAM,KAAA;AAAA,EACR;AAGA,EAAA,KAAA,MAAW,WAAA,IAAe,IAAA,CAAK,kBAAA,CAAmB,MAAA,EAAO,EAAG;AAC1D,IAAA,KAAA,MAAW,WAAA,IAAe,WAAA,CAAY,iBAAA,CAAkB,MAAA,EAAO,EAAG;AAChE,MAAA,QAAA,CAAS,aAAa,WAAW,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,cAAA,EAAe;AAEf,EAAA,OAAO;AAAA,IACL,gBAAgB,YAAY;AAG1B,MAAA,MAAM,OAAA,CAAQ,WAAW,CAAC,IAAA,CAAK,YAAW,EAAG,IAAA,CAAK,UAAA,EAAY,CAAC,CAAA;AAC/D,MAAA,cAAA,EAAe;AAAA,IACjB,CAAA;AAAA,IACA,OAAO,YAAY;AACjB,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,SAAA,EAAU;AACV,MAAA,IAAI;AACF,QAAA,MAAM,KAAK,UAAA,EAAW;AAAA,MACxB,CAAA,SAAE;AACA,QAAA,IAAA,CAAK,kBAAA,EAAmB;AAAA,MAC1B;AAAA,IACF;AAAA,GACF;AACF","file":"index.js","sourcesContent":["/**\n * BOFF-9797. The live avatar's room, joined to watch and listen only.\n *\n * A visitor's browser on a product website holds a subscribe-only room token: it can receive the avatar worker's\n * video and voice and do nothing else. This adapter keeps to that from its side too:\n *\n * - **Nothing is subscribed automatically** (`autoSubscribe: false`). Only the tracks of `workerIdentity`, the avatar\n *   worker the create answer named, are subscribed, and only their video and audio. Any other participant's track\n *   (the server's own speaker included) is never asked for, and is dropped again should the server send it anyway.\n * - **Nothing is published.** No microphone, no camera, no data, no RPC method: this file never calls a publishing\n *   API, and the token would refuse one.\n * - **Safari and iOS** hold sound back until a gesture. The room reports it (`playback-blocked`) and the panel offers\n *   \"Tap to turn on sound\", whose tap calls `enablePlayback`.\n *\n * Written for the website from the media library's public API: nothing here is copied from the product apps.\n */\nimport {\n  DisconnectReason,\n  Room,\n  RoomEvent,\n  Track,\n  type RemoteParticipant,\n  type RemoteTrack,\n  type RemoteTrackPublication,\n} from \"livekit-client\";\n\nimport type { ReceiveOnlyJoinOptions, ReceiveOnlySession } from \"./types\";\n\n/** The reasons a room closes because the server closed it, rather than because the connection was lost. */\nconst CLOSED_BY_SERVER: ReadonlySet<DisconnectReason> = new Set([\n  DisconnectReason.ROOM_DELETED,\n  DisconnectReason.ROOM_CLOSED,\n  DisconnectReason.PARTICIPANT_REMOVED,\n]);\n\nfunction isMedia(publication: RemoteTrackPublication): boolean {\n  return (\n    publication.kind === Track.Kind.Video ||\n    publication.kind === Track.Kind.Audio\n  );\n}\n\n/**\n * Join the room in `options.url` with the receive-only `options.token`, and play the avatar worker's video and voice\n * in `options.video` and `options.audio`. Resolves once connected; rejects when the room cannot be joined (the panel\n * then ends the session).\n */\nexport async function joinReceiveOnly(\n  options: ReceiveOnlyJoinOptions,\n): Promise<ReceiveOnlySession> {\n  const { url, token, workerIdentity, video, audio, onEvent } = options;\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    throw new Error(\"live avatar: the room address is not a URL\");\n  }\n  if (parsed.protocol !== \"wss:\") {\n    throw new Error(\"live avatar: the room address must be wss:\");\n  }\n  if (!token || !workerIdentity) {\n    throw new Error(\"live avatar: the room token or speaker is missing\");\n  }\n\n  const room = new Room({\n    // One small video, always shown while the session lasts: no quality switching, no layer pausing.\n    adaptiveStream: false,\n    dynacast: false,\n    // Closing the tab or leaving the page leaves the room at once. Belt and braces with the panel's own page-hide\n    // handler, which also asks the server to end the session: either may run first, and both are safe to repeat.\n    disconnectOnPageLeave: true,\n  });\n  let leaving = false;\n\n  const isSpeaker = (participant: RemoteParticipant) =>\n    participant.identity === workerIdentity;\n\n  /** Subscribe to `publication` when it is the speaker's video or audio; leave everything else alone. */\n  const consider = (\n    publication: RemoteTrackPublication,\n    participant: RemoteParticipant,\n  ) => {\n    if (leaving || !isSpeaker(participant) || !isMedia(publication)) return;\n    if (!publication.isSubscribed) publication.setSubscribed(true);\n  };\n\n  const reportPlayback = () => {\n    if (leaving) return;\n    onEvent({\n      type: \"playback-blocked\",\n      blocked: !room.canPlaybackAudio || !room.canPlaybackVideo,\n    });\n  };\n\n  room\n    .on(RoomEvent.TrackPublished, consider)\n    .on(\n      RoomEvent.TrackSubscribed,\n      (\n        track: RemoteTrack,\n        publication: RemoteTrackPublication,\n        participant: RemoteParticipant,\n      ) => {\n        if (leaving) return;\n        if (!isSpeaker(participant) || !isMedia(publication)) {\n          // Never asked for: drop it rather than play it.\n          publication.setSubscribed(false);\n          return;\n        }\n        if (track.kind === Track.Kind.Video) {\n          track.attach(video);\n          onEvent({ type: \"speaker-track\", kind: \"video\" });\n        } else {\n          track.attach(audio);\n          onEvent({ type: \"speaker-track\", kind: \"audio\" });\n        }\n      },\n    )\n    .on(RoomEvent.TrackUnsubscribed, (track: RemoteTrack) => {\n      track.detach();\n    })\n    .on(RoomEvent.ParticipantDisconnected, (participant: RemoteParticipant) => {\n      if (!leaving && isSpeaker(participant)) {\n        onEvent({ type: \"speaker-left\" });\n      }\n    })\n    .on(RoomEvent.AudioPlaybackStatusChanged, reportPlayback)\n    .on(RoomEvent.VideoPlaybackStatusChanged, reportPlayback)\n    .on(RoomEvent.Disconnected, (reason?: DisconnectReason) => {\n      if (leaving) return;\n      onEvent({\n        type: \"disconnected\",\n        byServer: reason !== undefined && CLOSED_BY_SERVER.has(reason),\n      });\n    });\n\n  const detachAll = () => {\n    for (const participant of room.remoteParticipants.values()) {\n      for (const publication of participant.trackPublications.values()) {\n        publication.track?.detach();\n      }\n    }\n    video.srcObject = null;\n    audio.srcObject = null;\n  };\n\n  try {\n    await room.connect(url, token, { autoSubscribe: false });\n  } catch (error) {\n    leaving = true;\n    room.removeAllListeners();\n    detachAll();\n    throw error;\n  }\n\n  // Whoever was in the room before this viewer joined: their tracks were published before the listener above.\n  for (const participant of room.remoteParticipants.values()) {\n    for (const publication of participant.trackPublications.values()) {\n      consider(publication, participant);\n    }\n  }\n  reportPlayback();\n\n  return {\n    enablePlayback: async () => {\n      // Both started inside the visitor's gesture, before anything is awaited: Safari allows playback only there.\n      // A refusal leaves the room as it was, and the report below keeps the button offered.\n      await Promise.allSettled([room.startAudio(), room.startVideo()]);\n      reportPlayback();\n    },\n    leave: async () => {\n      if (leaving) return;\n      leaving = true;\n      detachAll();\n      try {\n        await room.disconnect();\n      } finally {\n        room.removeAllListeners();\n      }\n    },\n  };\n}\n"]}

package/dist/avatar-live/index.mjs

@@ -1,3 +1,4 @@
+import '../chunk-VNS5WDWO.mjs';
 import { DisconnectReason, Room, RoomEvent, Track } from 'livekit-client';
 
 var CLOSED_BY_SERVER = /* @__PURE__ */ new Set([

package/dist/avatar-live/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/avatar-live/receive-only.ts"],"names":[],"mappings":";;AA6BA,IAAM,gBAAA,uBAAsD,GAAA,CAAI;AAAA,EAC9D,gBAAA,CAAiB,YAAA;AAAA,EACjB,gBAAA,CAAiB,WAAA;AAAA,EACjB,gBAAA,CAAiB;AACnB,CAAC,CAAA;AAED,SAAS,QAAQ,WAAA,EAA8C;AAC7D,EAAA,OACE,WAAA,CAAY,SAAS,KAAA,CAAM,IAAA,CAAK,SAChC,WAAA,CAAY,IAAA,KAAS,MAAM,IAAA,CAAK,KAAA;AAEpC;AAOA,eAAsB,gBACpB,OAAA,EAC6B;AAC7B,EAAA,MAAM,EAAE,GAAA,EAAK,KAAA,EAAO,gBAAgB,KAAA,EAAO,KAAA,EAAO,SAAQ,GAAI,OAAA;AAC9D,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,IAAI,MAAA,CAAO,aAAa,MAAA,EAAQ;AAC9B,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,IAAI,CAAC,KAAA,IAAS,CAAC,cAAA,EAAgB;AAC7B,IAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,IAAA,GAAO,IAAI,IAAA,CAAK;AAAA;AAAA,IAEpB,cAAA,EAAgB,KAAA;AAAA,IAChB,QAAA,EAAU,KAAA;AAAA;AAAA;AAAA,IAGV,qBAAA,EAAuB;AAAA,GACxB,CAAA;AACD,EAAA,IAAI,OAAA,GAAU,KAAA;AAEd,EAAA,MAAM,SAAA,GAAY,CAAC,WAAA,KACjB,WAAA,CAAY,QAAA,KAAa,cAAA;AAG3B,EAAA,MAAM,QAAA,GAAW,CACf,WAAA,EACA,WAAA,KACG;AACH,IAAA,IAAI,OAAA,IAAW,CAAC,SAAA,CAAU,WAAW,KAAK,CAAC,OAAA,CAAQ,WAAW,CAAA,EAAG;AACjE,IAAA,IAAI,CAAC,WAAA,CAAY,YAAA,EAAc,WAAA,CAAY,cAAc,IAAI,CAAA;AAAA,EAC/D,CAAA;AAEA,EAAA,MAAM,iBAAiB,MAAM;AAC3B,IAAA,IAAI,OAAA,EAAS;AACb,IAAA,OAAA,CAAQ;AAAA,MACN,IAAA,EAAM,kBAAA;AAAA,MACN,OAAA,EAAS,CAAC,IAAA,CAAK,gBAAA,IAAoB,CAAC,IAAA,CAAK;AAAA,KAC1C,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,IAAA,CACG,EAAA,CAAG,SAAA,CAAU,cAAA,EAAgB,QAAQ,CAAA,CACrC,EAAA;AAAA,IACC,SAAA,CAAU,eAAA;AAAA,IACV,CACE,KAAA,EACA,WAAA,EACA,WAAA,KACG;AACH,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,IAAI,CAAC,SAAA,CAAU,WAAW,KAAK,CAAC,OAAA,CAAQ,WAAW,CAAA,EAAG;AAEpD,QAAA,WAAA,CAAY,cAAc,KAAK,CAAA;AAC/B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,KAAA,CAAM,IAAA,KAAS,KAAA,CAAM,IAAA,CAAK,KAAA,EAAO;AACnC,QAAA,KAAA,CAAM,OAAO,KAAK,CAAA;AAClB,QAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,eAAA,EAAiB,IAAA,EAAM,SAAS,CAAA;AAAA,MAClD,CAAA,MAAO;AACL,QAAA,KAAA,CAAM,OAAO,KAAK,CAAA;AAClB,QAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,eAAA,EAAiB,IAAA,EAAM,SAAS,CAAA;AAAA,MAClD;AAAA,IACF;AAAA,GACF,CACC,EAAA,CAAG,SAAA,CAAU,iBAAA,EAAmB,CAAC,KAAA,KAAuB;AACvD,IAAA,KAAA,CAAM,MAAA,EAAO;AAAA,EACf,CAAC,CAAA,CACA,EAAA,CAAG,SAAA,CAAU,uBAAA,EAAyB,CAAC,WAAA,KAAmC;AACzE,IAAA,IAAI,CAAC,OAAA,IAAW,SAAA,CAAU,WAAW,CAAA,EAAG;AACtC,MAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,cAAA,EAAgB,CAAA;AAAA,IAClC;AAAA,EACF,CAAC,CAAA,CACA,EAAA,CAAG,SAAA,CAAU,0BAAA,EAA4B,cAAc,CAAA,CACvD,EAAA,CAAG,SAAA,CAAU,0BAAA,EAA4B,cAAc,CAAA,CACvD,EAAA,CAAG,SAAA,CAAU,YAAA,EAAc,CAAC,MAAA,KAA8B;AACzD,IAAA,IAAI,OAAA,EAAS;AACb,IAAA,OAAA,CAAQ;AAAA,MACN,IAAA,EAAM,cAAA;AAAA,MACN,QAAA,EAAU,MAAA,KAAW,MAAA,IAAa,gBAAA,CAAiB,IAAI,MAAM;AAAA,KAC9D,CAAA;AAAA,EACH,CAAC,CAAA;AAEH,EAAA,MAAM,YAAY,MAAM;AACtB,IAAA,KAAA,MAAW,WAAA,IAAe,IAAA,CAAK,kBAAA,CAAmB,MAAA,EAAO,EAAG;AAC1D,MAAA,KAAA,MAAW,WAAA,IAAe,WAAA,CAAY,iBAAA,CAAkB,MAAA,EAAO,EAAG;AAChE,QAAA,WAAA,CAAY,OAAO,MAAA,EAAO;AAAA,MAC5B;AAAA,IACF;AACA,IAAA,KAAA,CAAM,SAAA,GAAY,IAAA;AAClB,IAAA,KAAA,CAAM,SAAA,GAAY,IAAA;AAAA,EACpB,CAAA;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,KAAK,OAAA,CAAQ,GAAA,EAAK,OAAO,EAAE,aAAA,EAAe,OAAO,CAAA;AAAA,EACzD,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,GAAU,IAAA;AACV,IAAA,IAAA,CAAK,kBAAA,EAAmB;AACxB,IAAA,SAAA,EAAU;AACV,IAAA,MAAM,KAAA;AAAA,EACR;AAGA,EAAA,KAAA,MAAW,WAAA,IAAe,IAAA,CAAK,kBAAA,CAAmB,MAAA,EAAO,EAAG;AAC1D,IAAA,KAAA,MAAW,WAAA,IAAe,WAAA,CAAY,iBAAA,CAAkB,MAAA,EAAO,EAAG;AAChE,MAAA,QAAA,CAAS,aAAa,WAAW,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,cAAA,EAAe;AAEf,EAAA,OAAO;AAAA,IACL,gBAAgB,YAAY;AAG1B,MAAA,MAAM,OAAA,CAAQ,WAAW,CAAC,IAAA,CAAK,YAAW,EAAG,IAAA,CAAK,UAAA,EAAY,CAAC,CAAA;AAC/D,MAAA,cAAA,EAAe;AAAA,IACjB,CAAA;AAAA,IACA,OAAO,YAAY;AACjB,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,SAAA,EAAU;AACV,MAAA,IAAI;AACF,QAAA,MAAM,KAAK,UAAA,EAAW;AAAA,MACxB,CAAA,SAAE;AACA,QAAA,IAAA,CAAK,kBAAA,EAAmB;AAAA,MAC1B;AAAA,IACF;AAAA,GACF;AACF","file":"index.mjs","sourcesContent":["/**\n * BOFF-9797. The live avatar's room, joined to watch and listen only.\n *\n * A visitor's browser on a product website holds a subscribe-only room token: it can receive the avatar worker's\n * video and voice and do nothing else. This adapter keeps to that from its side too:\n *\n * - **Nothing is subscribed automatically** (`autoSubscribe: false`). Only the tracks of `workerIdentity`, the avatar\n *   worker the create answer named, are subscribed, and only their video and audio. Any other participant's track\n *   (the server's own speaker included) is never asked for, and is dropped again should the server send it anyway.\n * - **Nothing is published.** No microphone, no camera, no data, no RPC method: this file never calls a publishing\n *   API, and the token would refuse one.\n * - **Safari and iOS** hold sound back until a gesture. The room reports it (`playback-blocked`) and the panel offers\n *   \"Tap to turn on sound\", whose tap calls `enablePlayback`.\n *\n * Written for the website from the media library's public API: nothing here is copied from the product apps.\n */\nimport {\n  DisconnectReason,\n  Room,\n  RoomEvent,\n  Track,\n  type RemoteParticipant,\n  type RemoteTrack,\n  type RemoteTrackPublication,\n} from \"livekit-client\";\n\nimport type { ReceiveOnlyJoinOptions, ReceiveOnlySession } from \"./types\";\n\n/** The reasons a room closes because the server closed it, rather than because the connection was lost. */\nconst CLOSED_BY_SERVER: ReadonlySet<DisconnectReason> = new Set([\n  DisconnectReason.ROOM_DELETED,\n  DisconnectReason.ROOM_CLOSED,\n  DisconnectReason.PARTICIPANT_REMOVED,\n]);\n\nfunction isMedia(publication: RemoteTrackPublication): boolean {\n  return (\n    publication.kind === Track.Kind.Video ||\n    publication.kind === Track.Kind.Audio\n  );\n}\n\n/**\n * Join the room in `options.url` with the receive-only `options.token`, and play the avatar worker's video and voice\n * in `options.video` and `options.audio`. Resolves once connected; rejects when the room cannot be joined (the panel\n * then ends the session).\n */\nexport async function joinReceiveOnly(\n  options: ReceiveOnlyJoinOptions,\n): Promise<ReceiveOnlySession> {\n  const { url, token, workerIdentity, video, audio, onEvent } = options;\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    throw new Error(\"live avatar: the room address is not a URL\");\n  }\n  if (parsed.protocol !== \"wss:\") {\n    throw new Error(\"live avatar: the room address must be wss:\");\n  }\n  if (!token || !workerIdentity) {\n    throw new Error(\"live avatar: the room token or speaker is missing\");\n  }\n\n  const room = new Room({\n    // One small video, always shown while the session lasts: no quality switching, no layer pausing.\n    adaptiveStream: false,\n    dynacast: false,\n    // Closing the tab or leaving the page leaves the room at once. Belt and braces with the panel's own page-hide\n    // handler, which also asks the server to end the session: either may run first, and both are safe to repeat.\n    disconnectOnPageLeave: true,\n  });\n  let leaving = false;\n\n  const isSpeaker = (participant: RemoteParticipant) =>\n    participant.identity === workerIdentity;\n\n  /** Subscribe to `publication` when it is the speaker's video or audio; leave everything else alone. */\n  const consider = (\n    publication: RemoteTrackPublication,\n    participant: RemoteParticipant,\n  ) => {\n    if (leaving || !isSpeaker(participant) || !isMedia(publication)) return;\n    if (!publication.isSubscribed) publication.setSubscribed(true);\n  };\n\n  const reportPlayback = () => {\n    if (leaving) return;\n    onEvent({\n      type: \"playback-blocked\",\n      blocked: !room.canPlaybackAudio || !room.canPlaybackVideo,\n    });\n  };\n\n  room\n    .on(RoomEvent.TrackPublished, consider)\n    .on(\n      RoomEvent.TrackSubscribed,\n      (\n        track: RemoteTrack,\n        publication: RemoteTrackPublication,\n        participant: RemoteParticipant,\n      ) => {\n        if (leaving) return;\n        if (!isSpeaker(participant) || !isMedia(publication)) {\n          // Never asked for: drop it rather than play it.\n          publication.setSubscribed(false);\n          return;\n        }\n        if (track.kind === Track.Kind.Video) {\n          track.attach(video);\n          onEvent({ type: \"speaker-track\", kind: \"video\" });\n        } else {\n          track.attach(audio);\n          onEvent({ type: \"speaker-track\", kind: \"audio\" });\n        }\n      },\n    )\n    .on(RoomEvent.TrackUnsubscribed, (track: RemoteTrack) => {\n      track.detach();\n    })\n    .on(RoomEvent.ParticipantDisconnected, (participant: RemoteParticipant) => {\n      if (!leaving && isSpeaker(participant)) {\n        onEvent({ type: \"speaker-left\" });\n      }\n    })\n    .on(RoomEvent.AudioPlaybackStatusChanged, reportPlayback)\n    .on(RoomEvent.VideoPlaybackStatusChanged, reportPlayback)\n    .on(RoomEvent.Disconnected, (reason?: DisconnectReason) => {\n      if (leaving) return;\n      onEvent({\n        type: \"disconnected\",\n        byServer: reason !== undefined && CLOSED_BY_SERVER.has(reason),\n      });\n    });\n\n  const detachAll = () => {\n    for (const participant of room.remoteParticipants.values()) {\n      for (const publication of participant.trackPublications.values()) {\n        publication.track?.detach();\n      }\n    }\n    video.srcObject = null;\n    audio.srcObject = null;\n  };\n\n  try {\n    await room.connect(url, token, { autoSubscribe: false });\n  } catch (error) {\n    leaving = true;\n    room.removeAllListeners();\n    detachAll();\n    throw error;\n  }\n\n  // Whoever was in the room before this viewer joined: their tracks were published before the listener above.\n  for (const participant of room.remoteParticipants.values()) {\n    for (const publication of participant.trackPublications.values()) {\n      consider(publication, participant);\n    }\n  }\n  reportPlayback();\n\n  return {\n    enablePlayback: async () => {\n      // Both started inside the visitor's gesture, before anything is awaited: Safari allows playback only there.\n      // A refusal leaves the room as it was, and the report below keeps the button offered.\n      await Promise.allSettled([room.startAudio(), room.startVideo()]);\n      reportPlayback();\n    },\n    leave: async () => {\n      if (leaving) return;\n      leaving = true;\n      detachAll();\n      try {\n        await room.disconnect();\n      } finally {\n        room.removeAllListeners();\n      }\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../../src/avatar-live/receive-only.ts"],"names":[],"mappings":";;;AA6BA,IAAM,gBAAA,uBAAsD,GAAA,CAAI;AAAA,EAC9D,gBAAA,CAAiB,YAAA;AAAA,EACjB,gBAAA,CAAiB,WAAA;AAAA,EACjB,gBAAA,CAAiB;AACnB,CAAC,CAAA;AAED,SAAS,QAAQ,WAAA,EAA8C;AAC7D,EAAA,OACE,WAAA,CAAY,SAAS,KAAA,CAAM,IAAA,CAAK,SAChC,WAAA,CAAY,IAAA,KAAS,MAAM,IAAA,CAAK,KAAA;AAEpC;AAOA,eAAsB,gBACpB,OAAA,EAC6B;AAC7B,EAAA,MAAM,EAAE,GAAA,EAAK,KAAA,EAAO,gBAAgB,KAAA,EAAO,KAAA,EAAO,SAAQ,GAAI,OAAA;AAC9D,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,IAAI,MAAA,CAAO,aAAa,MAAA,EAAQ;AAC9B,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,IAAI,CAAC,KAAA,IAAS,CAAC,cAAA,EAAgB;AAC7B,IAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,IAAA,GAAO,IAAI,IAAA,CAAK;AAAA;AAAA,IAEpB,cAAA,EAAgB,KAAA;AAAA,IAChB,QAAA,EAAU,KAAA;AAAA;AAAA;AAAA,IAGV,qBAAA,EAAuB;AAAA,GACxB,CAAA;AACD,EAAA,IAAI,OAAA,GAAU,KAAA;AAEd,EAAA,MAAM,SAAA,GAAY,CAAC,WAAA,KACjB,WAAA,CAAY,QAAA,KAAa,cAAA;AAG3B,EAAA,MAAM,QAAA,GAAW,CACf,WAAA,EACA,WAAA,KACG;AACH,IAAA,IAAI,OAAA,IAAW,CAAC,SAAA,CAAU,WAAW,KAAK,CAAC,OAAA,CAAQ,WAAW,CAAA,EAAG;AACjE,IAAA,IAAI,CAAC,WAAA,CAAY,YAAA,EAAc,WAAA,CAAY,cAAc,IAAI,CAAA;AAAA,EAC/D,CAAA;AAEA,EAAA,MAAM,iBAAiB,MAAM;AAC3B,IAAA,IAAI,OAAA,EAAS;AACb,IAAA,OAAA,CAAQ;AAAA,MACN,IAAA,EAAM,kBAAA;AAAA,MACN,OAAA,EAAS,CAAC,IAAA,CAAK,gBAAA,IAAoB,CAAC,IAAA,CAAK;AAAA,KAC1C,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,IAAA,CACG,EAAA,CAAG,SAAA,CAAU,cAAA,EAAgB,QAAQ,CAAA,CACrC,EAAA;AAAA,IACC,SAAA,CAAU,eAAA;AAAA,IACV,CACE,KAAA,EACA,WAAA,EACA,WAAA,KACG;AACH,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,IAAI,CAAC,SAAA,CAAU,WAAW,KAAK,CAAC,OAAA,CAAQ,WAAW,CAAA,EAAG;AAEpD,QAAA,WAAA,CAAY,cAAc,KAAK,CAAA;AAC/B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,KAAA,CAAM,IAAA,KAAS,KAAA,CAAM,IAAA,CAAK,KAAA,EAAO;AACnC,QAAA,KAAA,CAAM,OAAO,KAAK,CAAA;AAClB,QAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,eAAA,EAAiB,IAAA,EAAM,SAAS,CAAA;AAAA,MAClD,CAAA,MAAO;AACL,QAAA,KAAA,CAAM,OAAO,KAAK,CAAA;AAClB,QAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,eAAA,EAAiB,IAAA,EAAM,SAAS,CAAA;AAAA,MAClD;AAAA,IACF;AAAA,GACF,CACC,EAAA,CAAG,SAAA,CAAU,iBAAA,EAAmB,CAAC,KAAA,KAAuB;AACvD,IAAA,KAAA,CAAM,MAAA,EAAO;AAAA,EACf,CAAC,CAAA,CACA,EAAA,CAAG,SAAA,CAAU,uBAAA,EAAyB,CAAC,WAAA,KAAmC;AACzE,IAAA,IAAI,CAAC,OAAA,IAAW,SAAA,CAAU,WAAW,CAAA,EAAG;AACtC,MAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,cAAA,EAAgB,CAAA;AAAA,IAClC;AAAA,EACF,CAAC,CAAA,CACA,EAAA,CAAG,SAAA,CAAU,0BAAA,EAA4B,cAAc,CAAA,CACvD,EAAA,CAAG,SAAA,CAAU,0BAAA,EAA4B,cAAc,CAAA,CACvD,EAAA,CAAG,SAAA,CAAU,YAAA,EAAc,CAAC,MAAA,KAA8B;AACzD,IAAA,IAAI,OAAA,EAAS;AACb,IAAA,OAAA,CAAQ;AAAA,MACN,IAAA,EAAM,cAAA;AAAA,MACN,QAAA,EAAU,MAAA,KAAW,MAAA,IAAa,gBAAA,CAAiB,IAAI,MAAM;AAAA,KAC9D,CAAA;AAAA,EACH,CAAC,CAAA;AAEH,EAAA,MAAM,YAAY,MAAM;AACtB,IAAA,KAAA,MAAW,WAAA,IAAe,IAAA,CAAK,kBAAA,CAAmB,MAAA,EAAO,EAAG;AAC1D,MAAA,KAAA,MAAW,WAAA,IAAe,WAAA,CAAY,iBAAA,CAAkB,MAAA,EAAO,EAAG;AAChE,QAAA,WAAA,CAAY,OAAO,MAAA,EAAO;AAAA,MAC5B;AAAA,IACF;AACA,IAAA,KAAA,CAAM,SAAA,GAAY,IAAA;AAClB,IAAA,KAAA,CAAM,SAAA,GAAY,IAAA;AAAA,EACpB,CAAA;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,KAAK,OAAA,CAAQ,GAAA,EAAK,OAAO,EAAE,aAAA,EAAe,OAAO,CAAA;AAAA,EACzD,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,GAAU,IAAA;AACV,IAAA,IAAA,CAAK,kBAAA,EAAmB;AACxB,IAAA,SAAA,EAAU;AACV,IAAA,MAAM,KAAA;AAAA,EACR;AAGA,EAAA,KAAA,MAAW,WAAA,IAAe,IAAA,CAAK,kBAAA,CAAmB,MAAA,EAAO,EAAG;AAC1D,IAAA,KAAA,MAAW,WAAA,IAAe,WAAA,CAAY,iBAAA,CAAkB,MAAA,EAAO,EAAG;AAChE,MAAA,QAAA,CAAS,aAAa,WAAW,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,cAAA,EAAe;AAEf,EAAA,OAAO;AAAA,IACL,gBAAgB,YAAY;AAG1B,MAAA,MAAM,OAAA,CAAQ,WAAW,CAAC,IAAA,CAAK,YAAW,EAAG,IAAA,CAAK,UAAA,EAAY,CAAC,CAAA;AAC/D,MAAA,cAAA,EAAe;AAAA,IACjB,CAAA;AAAA,IACA,OAAO,YAAY;AACjB,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,SAAA,EAAU;AACV,MAAA,IAAI;AACF,QAAA,MAAM,KAAK,UAAA,EAAW;AAAA,MACxB,CAAA,SAAE;AACA,QAAA,IAAA,CAAK,kBAAA,EAAmB;AAAA,MAC1B;AAAA,IACF;AAAA,GACF;AACF","file":"index.mjs","sourcesContent":["/**\n * BOFF-9797. The live avatar's room, joined to watch and listen only.\n *\n * A visitor's browser on a product website holds a subscribe-only room token: it can receive the avatar worker's\n * video and voice and do nothing else. This adapter keeps to that from its side too:\n *\n * - **Nothing is subscribed automatically** (`autoSubscribe: false`). Only the tracks of `workerIdentity`, the avatar\n *   worker the create answer named, are subscribed, and only their video and audio. Any other participant's track\n *   (the server's own speaker included) is never asked for, and is dropped again should the server send it anyway.\n * - **Nothing is published.** No microphone, no camera, no data, no RPC method: this file never calls a publishing\n *   API, and the token would refuse one.\n * - **Safari and iOS** hold sound back until a gesture. The room reports it (`playback-blocked`) and the panel offers\n *   \"Tap to turn on sound\", whose tap calls `enablePlayback`.\n *\n * Written for the website from the media library's public API: nothing here is copied from the product apps.\n */\nimport {\n  DisconnectReason,\n  Room,\n  RoomEvent,\n  Track,\n  type RemoteParticipant,\n  type RemoteTrack,\n  type RemoteTrackPublication,\n} from \"livekit-client\";\n\nimport type { ReceiveOnlyJoinOptions, ReceiveOnlySession } from \"./types\";\n\n/** The reasons a room closes because the server closed it, rather than because the connection was lost. */\nconst CLOSED_BY_SERVER: ReadonlySet<DisconnectReason> = new Set([\n  DisconnectReason.ROOM_DELETED,\n  DisconnectReason.ROOM_CLOSED,\n  DisconnectReason.PARTICIPANT_REMOVED,\n]);\n\nfunction isMedia(publication: RemoteTrackPublication): boolean {\n  return (\n    publication.kind === Track.Kind.Video ||\n    publication.kind === Track.Kind.Audio\n  );\n}\n\n/**\n * Join the room in `options.url` with the receive-only `options.token`, and play the avatar worker's video and voice\n * in `options.video` and `options.audio`. Resolves once connected; rejects when the room cannot be joined (the panel\n * then ends the session).\n */\nexport async function joinReceiveOnly(\n  options: ReceiveOnlyJoinOptions,\n): Promise<ReceiveOnlySession> {\n  const { url, token, workerIdentity, video, audio, onEvent } = options;\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    throw new Error(\"live avatar: the room address is not a URL\");\n  }\n  if (parsed.protocol !== \"wss:\") {\n    throw new Error(\"live avatar: the room address must be wss:\");\n  }\n  if (!token || !workerIdentity) {\n    throw new Error(\"live avatar: the room token or speaker is missing\");\n  }\n\n  const room = new Room({\n    // One small video, always shown while the session lasts: no quality switching, no layer pausing.\n    adaptiveStream: false,\n    dynacast: false,\n    // Closing the tab or leaving the page leaves the room at once. Belt and braces with the panel's own page-hide\n    // handler, which also asks the server to end the session: either may run first, and both are safe to repeat.\n    disconnectOnPageLeave: true,\n  });\n  let leaving = false;\n\n  const isSpeaker = (participant: RemoteParticipant) =>\n    participant.identity === workerIdentity;\n\n  /** Subscribe to `publication` when it is the speaker's video or audio; leave everything else alone. */\n  const consider = (\n    publication: RemoteTrackPublication,\n    participant: RemoteParticipant,\n  ) => {\n    if (leaving || !isSpeaker(participant) || !isMedia(publication)) return;\n    if (!publication.isSubscribed) publication.setSubscribed(true);\n  };\n\n  const reportPlayback = () => {\n    if (leaving) return;\n    onEvent({\n      type: \"playback-blocked\",\n      blocked: !room.canPlaybackAudio || !room.canPlaybackVideo,\n    });\n  };\n\n  room\n    .on(RoomEvent.TrackPublished, consider)\n    .on(\n      RoomEvent.TrackSubscribed,\n      (\n        track: RemoteTrack,\n        publication: RemoteTrackPublication,\n        participant: RemoteParticipant,\n      ) => {\n        if (leaving) return;\n        if (!isSpeaker(participant) || !isMedia(publication)) {\n          // Never asked for: drop it rather than play it.\n          publication.setSubscribed(false);\n          return;\n        }\n        if (track.kind === Track.Kind.Video) {\n          track.attach(video);\n          onEvent({ type: \"speaker-track\", kind: \"video\" });\n        } else {\n          track.attach(audio);\n          onEvent({ type: \"speaker-track\", kind: \"audio\" });\n        }\n      },\n    )\n    .on(RoomEvent.TrackUnsubscribed, (track: RemoteTrack) => {\n      track.detach();\n    })\n    .on(RoomEvent.ParticipantDisconnected, (participant: RemoteParticipant) => {\n      if (!leaving && isSpeaker(participant)) {\n        onEvent({ type: \"speaker-left\" });\n      }\n    })\n    .on(RoomEvent.AudioPlaybackStatusChanged, reportPlayback)\n    .on(RoomEvent.VideoPlaybackStatusChanged, reportPlayback)\n    .on(RoomEvent.Disconnected, (reason?: DisconnectReason) => {\n      if (leaving) return;\n      onEvent({\n        type: \"disconnected\",\n        byServer: reason !== undefined && CLOSED_BY_SERVER.has(reason),\n      });\n    });\n\n  const detachAll = () => {\n    for (const participant of room.remoteParticipants.values()) {\n      for (const publication of participant.trackPublications.values()) {\n        publication.track?.detach();\n      }\n    }\n    video.srcObject = null;\n    audio.srcObject = null;\n  };\n\n  try {\n    await room.connect(url, token, { autoSubscribe: false });\n  } catch (error) {\n    leaving = true;\n    room.removeAllListeners();\n    detachAll();\n    throw error;\n  }\n\n  // Whoever was in the room before this viewer joined: their tracks were published before the listener above.\n  for (const participant of room.remoteParticipants.values()) {\n    for (const publication of participant.trackPublications.values()) {\n      consider(publication, participant);\n    }\n  }\n  reportPlayback();\n\n  return {\n    enablePlayback: async () => {\n      // Both started inside the visitor's gesture, before anything is awaited: Safari allows playback only there.\n      // A refusal leaves the room as it was, and the report below keeps the button offered.\n      await Promise.allSettled([room.startAudio(), room.startVideo()]);\n      reportPlayback();\n    },\n    leave: async () => {\n      if (leaving) return;\n      leaving = true;\n      detachAll();\n      try {\n        await room.disconnect();\n      } finally {\n        room.removeAllListeners();\n      }\n    },\n  };\n}\n"]}

package/dist/avatar-live-view/index.js

@@ -1,24 +1,12 @@
 'use strict';
 
+var chunk23H4JUL4_js = require('../chunk-23H4JUL4.js');
+var chunkO4GS3XPZ_js = require('../chunk-O4GS3XPZ.js');
+var chunkC6OJIHNO_js = require('../chunk-C6OJIHNO.js');
+require('../chunk-ZSTFX7FV.js');
 var react = require('react');
-var clsx = require('clsx');
-var tailwindMerge = require('tailwind-merge');
 var jsxRuntime = require('react/jsx-runtime');
 
-// src/components/explore-avatar-live-config.ts
-var SITE = /^[a-z][a-z0-9-]{1,31}$/;
-var VERSION = /^[A-Za-z0-9._-]{1,32}$/;
-function isAvatarSite(value) {
-  return SITE.test(value);
-}
-function isAvatarVersion(value) {
-  return VERSION.test(value);
-}
-var REVIEWED = /* @__PURE__ */ new Set(["en"]);
-function isAvatarLiveLocaleReviewed(locale) {
-  return REVIEWED.has(locale);
-}
-
 // src/components/explore-avatar-api.ts
 var AVAILABILITY_TIMEOUT_MS = 8e3;
 var CREATE_TIMEOUT_MS = 3e4;
@@ -55,7 +43,7 @@ function readAvailability(status, body) {
   }
   if (reason === "ok") {
     const { consentVersion, maxSessionSeconds } = body;
-    if (available !== true || typeof consentVersion !== "string" || !isAvatarVersion(consentVersion) || typeof maxSessionSeconds !== "number" || !Number.isInteger(maxSessionSeconds) || maxSessionSeconds < 1) {
+    if (available !== true || typeof consentVersion !== "string" || !chunk23H4JUL4_js.isAvatarVersion(consentVersion) || typeof maxSessionSeconds !== "number" || !Number.isInteger(maxSessionSeconds) || maxSessionSeconds < 1) {
       return INERT;
     }
     return { kind: "available", offer: { consentVersion, maxSessionSeconds } };
@@ -140,7 +128,7 @@ function deadline(timeoutMs, outer) {
   };
 }
 async function requestAvailability(target) {
-  if (!isAvatarSite(target.site) || !LOCALE.test(target.locale)) return INERT;
+  if (!chunk23H4JUL4_js.isAvatarSite(target.site) || !LOCALE.test(target.locale)) return INERT;
   const query = new URLSearchParams({
     site: target.site,
     locale: target.locale
@@ -486,10 +474,25 @@ var CONSENT = /* @__PURE__ */ new Map([
         privacyLink: "How we handle this"
       }
     }
+  ],
+  [
+    // The words of web-consent-2026-10-31 with no product name in them: one notice, byte for byte, on every product's
+    // site, because the server binds one consent version and one notice digest for all of them.
+    "web-consent-2026-11-02",
+    {
+      en: {
+        title: "Live AI avatar (beta)",
+        introProduct: null,
+        intro: "This is an AI avatar, not a real person. It reads the assistant's first eligible answer to a suggested question aloud for up to a minute. The answer is AI-generated and can be wrong.",
+        processing: "When you start, Cloudflare checks for bots. The answer text goes to Google to create the voice. Our server sends that voice through LiveKit to Protoface, which makes the avatar video streamed through LiveKit. Your browser connects to LiveKit, which sees your IP address.",
+        storage: "Your microphone and camera are not used. We do not record the live session or store the generated voice. We keep a record of this consent. The privacy notice explains our safeguards, storage periods and the providers' processing. For people aged eighteen and over.",
+        privacyLink: "How we handle this"
+      }
+    }
   ]
 ]);
 function avatarConsentCopy(version, locale) {
-  if (!isAvatarLiveLocaleReviewed(locale)) return null;
+  if (!chunk23H4JUL4_js.isAvatarLiveLocaleReviewed(locale)) return null;
   return CONSENT.get(version)?.[locale] ?? null;
 }
 
@@ -607,14 +610,6 @@ function runTurnstile(container, siteKey, action, cData) {
     }
   };
 }
-
-// src/components/explore-fill.ts
-function fill(template, values) {
-  return template.replace(/\{(\w+)\}/g, (match, key) => values[key] ?? match);
-}
-function cn(...inputs) {
-  return tailwindMerge.twMerge(clsx.clsx(inputs));
-}
 var PRIVACY_HREF = "/privacy#live-avatar";
 var SPEAKER_WAIT_MS = 3e4;
 var END_GRACE_MS = 1e4;
@@ -1187,7 +1182,7 @@ function AvatarLiveView({
       decoding: "async",
       width: small ? 64 : 128,
       height: small ? 64 : 128,
-      className: cn(
+      className: chunkC6OJIHNO_js.cn(
         "shrink-0 rounded-full border border-border object-cover shadow-sm",
         small ? "h-16 w-16" : "h-32 w-32"
       )
@@ -1249,7 +1244,7 @@ function AvatarLiveView({
           className: "w-full max-w-sm rounded-lg border border-border p-4 text-start",
           children: [
             /* @__PURE__ */ jsxRuntime.jsx("h2", { id: consentTitleId, className: "text-base font-semibold", children: copy.title }),
-            /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm", children: productName === null ? copy.intro : fill(copy.introProduct, { product: productName }) }),
+            /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm", children: productName === null || copy.introProduct === null ? copy.intro : chunkO4GS3XPZ_js.fill(copy.introProduct, { product: productName }) }),
             /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm text-muted-foreground", children: copy.processing }),
             /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm text-muted-foreground", children: copy.storage }),
             /* @__PURE__ */ jsxRuntime.jsxs(
@@ -1327,7 +1322,7 @@ function AvatarLiveView({
             autoPlay: true,
             muted: true,
             onPlaying,
-            className: cn(
+            className: chunkC6OJIHNO_js.cn(
               "h-full w-full object-cover",
               !playing && "opacity-0"
             )