@burdenoff/website-sdk 2026.1101.2 → 2026.1101.3

package/README.md

@@ -372,9 +372,16 @@ publishes audio, video or data, and it sends the avatar nothing to say.
   production nothing else is added, so no preflight has to complete while the
   page unloads. The server ends sessions on its own deadlines as well.
 - **Consent copy is versioned.** The panel shows a consent card only when it
-  holds reviewed copy for exactly the version the server names (the current
-  English copy is `web-consent-2026-10-31`, and `web-consent-2026-11` stays for
-  servers that still name it); otherwise the view stays as it was.
+  holds reviewed copy for exactly the version the server names; otherwise the
+  view stays as it was. `web-consent-2026-11-02` is product-neutral: its card
+  reads "a suggested question" on every site, whatever `productName` is, so
+  every product's site shows the same words and the server can bind one notice
+  digest for all of them (the card's title, intro, processing, storage and
+  privacy-link lines, each ending with a line feed: 760 bytes, SHA-256
+  `2e02b051ceb1163c14bc58fa63a954a12c0d1f2695029a6d4805922d74c793f7`).
+  `web-consent-2026-10-31` (which names the product, "a suggested Healthy Bowl
+  question") and `web-consent-2026-11` stay, unchanged, for servers that still
+  name them.
 - **How a session ended.** When the worker leaves, the server closes the room,
   or the session's time runs out with the room still open, the view says only
   "The live avatar has ended." (key `finished`). The browser

package/dist/avatar-live-view/index.js

@@ -474,6 +474,21 @@ var CONSENT = /* @__PURE__ */ new Map([
         privacyLink: "How we handle this"
       }
     }
+  ],
+  [
+    // The words of web-consent-2026-10-31 with no product name in them: one notice, byte for byte, on every product's
+    // site, because the server binds one consent version and one notice digest for all of them.
+    "web-consent-2026-11-02",
+    {
+      en: {
+        title: "Live AI avatar (beta)",
+        introProduct: null,
+        intro: "This is an AI avatar, not a real person. It reads the assistant's first eligible answer to a suggested question aloud for up to a minute. The answer is AI-generated and can be wrong.",
+        processing: "When you start, Cloudflare checks for bots. The answer text goes to Google to create the voice. Our server sends that voice through LiveKit to Protoface, which makes the avatar video streamed through LiveKit. Your browser connects to LiveKit, which sees your IP address.",
+        storage: "Your microphone and camera are not used. We do not record the live session or store the generated voice. We keep a record of this consent. The privacy notice explains our safeguards, storage periods and the providers' processing. For people aged eighteen and over.",
+        privacyLink: "How we handle this"
+      }
+    }
   ]
 ]);
 function avatarConsentCopy(version, locale) {
@@ -1229,7 +1244,7 @@ function AvatarLiveView({
           className: "w-full max-w-sm rounded-lg border border-border p-4 text-start",
           children: [
             /* @__PURE__ */ jsxRuntime.jsx("h2", { id: consentTitleId, className: "text-base font-semibold", children: copy.title }),
-            /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm", children: productName === null ? copy.intro : chunkO4GS3XPZ_js.fill(copy.introProduct, { product: productName }) }),
+            /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm", children: productName === null || copy.introProduct === null ? copy.intro : chunkO4GS3XPZ_js.fill(copy.introProduct, { product: productName }) }),
             /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm text-muted-foreground", children: copy.processing }),
             /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm text-muted-foreground", children: copy.storage }),
             /* @__PURE__ */ jsxRuntime.jsxs(