@burdenoff/website-sdk 2026.1104.3 → 2026.1104.4

package/README.md

@@ -387,9 +387,14 @@ publishes audio, video or data, and it sends the avatar nothing to say.
   browser's own note of a session today, kept in `localStorage` as
   `boff.explore.avatarUsedOn`), the box asks ordinary questions, without
   `surface`, and the answer shows in the tab as text, with "Read the answer and
-  sources in Chat". Pass `currentPath` to `ExplorePanel` (as
-  `SiteAssistantDock` does) so a page change calls off a "Start when ready"
-  at once; without it, the window's path is checked before the create.
+  sources in Chat". The text is the answer's words, not its markdown: the form
+  the chat's read-aloud says (`answerSpeechText`), so a link is its label, a
+  table its rows, and the marks of emphasis, headings and quotes go, and on
+  this screen list markers as well (each item keeps its own line); citation
+  markers such as `[1]` stay, as in the chat. Pass `currentPath` to
+  `ExplorePanel` (as `SiteAssistantDock` does) so a page change calls off a
+  "Start when ready" at once; without it, the window's path is checked before
+  the create.
 - **One answer: the first, to a suggested question.** The avatar service
   accepts a conversation only when it holds exactly two messages: the first user
   message (a suggested question) and the first assistant answer, completed. The
@@ -421,7 +426,22 @@ publishes audio, video or data, and it sends the avatar nothing to say.
   back (Safari, iOS), a "Tap to turn on sound" button appears. A refusal (busy,
   limits, region, language, paused, a question the avatar cannot read) is one
   short sentence and "Continue in Chat". A network or CORS failure, or a route
-  that is not there, shows the view as it was before.
+  that is not there, shows the view as it was before, until the create request
+  has been sent: from then on the server may have made the session, so a create
+  that gets no answer (its request failing on the way, its body cut off, or
+  nothing within 30 s) says "The live avatar couldn't start." with the way back
+  to Chat, never "Live avatar coming soon". The 30 s are a timer raced against
+  the request, so the view leaves "Connecting…" by then whatever the network
+  does. A create is never sent again by itself (the bot check's token is good
+  for one, and a second create could be paid twice), and a 201 that arrives
+  after the 30 s is never joined: its session is ended at once with its own
+  secret (reason `client_error`, or the visitor's own where they had stopped it
+  first). For that, only a request with no answer yet is aborted at 30 s: an
+  answer whose status is in by then is read to its end, so a 201 whose body is
+  still on its way keeps its secret. A request aborted with no answer at all
+  brings nothing back where the browser honours the abort, so a session the
+  server made for it is ended by the server's own deadlines (`no_show`). A 401,
+  403, 404 or 405 answer is still the view as it was before.
 - **Ending.** Stop, closing the panel, leaving the page (`pagehide`), and the
   live avatar going off under a session (the panel's locale changing to one
   whose strings have not been reviewed) all end the session with a `keepalive`

package/dist/avatar-live-view/index.js

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkWSEQ2I6I_js = require('../chunk-WSEQ2I6I.js');
-var chunkO4GS3XPZ_js = require('../chunk-O4GS3XPZ.js');
+var chunkN7E6Z2GF_js = require('../chunk-N7E6Z2GF.js');
 var chunkC6OJIHNO_js = require('../chunk-C6OJIHNO.js');
 require('../chunk-ZSTFX7FV.js');
 var react = require('react');
@@ -182,7 +182,7 @@ async function requestAvailability(target) {
     timer.done();
   }
 }
-async function requestCreate(target) {
+function requestCreate(target) {
   const { body } = target;
   const payload = JSON.stringify({
     site: body.site,
@@ -192,27 +192,45 @@ async function requestCreate(target) {
     consentVersion: body.consentVersion,
     manifestVersion: body.manifestVersion
   });
-  const timer = deadline(CREATE_TIMEOUT_MS);
-  try {
-    const response = await fetch(`${target.base}/sessions`, {
-      method: "POST",
-      credentials: "omit",
-      cache: "no-store",
-      headers: {
-        ...target.headers,
-        "Content-Type": "application/json",
-        "Idempotency-Key": target.idempotencyKey,
-        ...target.botToken === void 0 ? {} : { "x-web-avatar-bot-token": target.botToken }
-      },
-      body: payload,
-      signal: timer.signal
+  const controller = new AbortController();
+  let answered = false;
+  const answer = (async () => {
+    try {
+      const response = await fetch(`${target.base}/sessions`, {
+        method: "POST",
+        credentials: "omit",
+        cache: "no-store",
+        headers: {
+          ...target.headers,
+          "Content-Type": "application/json",
+          "Idempotency-Key": target.idempotencyKey,
+          ...target.botToken === void 0 ? {} : { "x-web-avatar-bot-token": target.botToken }
+        },
+        body: payload,
+        signal: controller.signal
+      });
+      answered = true;
+      return readCreate(response.status, await readJson(response));
+    } catch {
+      return FAILED;
+    }
+  })();
+  return new Promise((resolve) => {
+    let late = false;
+    const timer = setTimeout(() => {
+      late = true;
+      if (!answered) controller.abort();
+      resolve(FAILED);
+    }, CREATE_TIMEOUT_MS);
+    void answer.then((result) => {
+      if (late) {
+        target.onLate?.(result);
+        return;
+      }
+      clearTimeout(timer);
+      resolve(result);
     });
-    return readCreate(response.status, await readJson(response));
-  } catch {
-    return INERT;
-  } finally {
-    timer.done();
-  }
+  });
 }
 function sendEnd(target) {
   try {
@@ -1361,21 +1379,21 @@ function AvatarLiveView({
     [go]
   );
   const settle = react.useCallback(
-    (result, run, context) => {
+    (result, givenUp, context) => {
       const created = result.kind === "created" ? {
         sessionId: result.session.sessionId,
         secret: result.session.endSecret
       } : result.kind === "unusable" ? { sessionId: result.sessionId, secret: result.endSecret } : null;
       const claimed = created !== null || result.kind === "refused" && result.reason === "answer_claimed";
       if (claimed) claimedRef.current.add(context.messageId);
-      if (run.cancelled !== null) {
+      if (givenUp !== null) {
         if (created !== null) {
           sendEnd({
             base: context.base,
             headers: context.headers,
             sessionId: created.sessionId,
             secret: created.secret,
-            reason: run.cancelled
+            reason: givenUp
           });
         }
         const shown2 = phaseRef.current;
@@ -1484,21 +1502,21 @@ function AvatarLiveView({
           return;
         }
         if (turnstile !== null) go({ name: "creating" });
+        const context = { module: loaded, offer, messageId, base: base2, headers: headers2 };
         const result = await requestCreate({
           base: base2,
           headers: headers2,
           idempotencyKey,
           botToken,
-          body: body2
+          body: body2,
+          // An answer past the deadline, after the view has said the live avatar couldn't start: a session it made is
+          // ended at once with its own secret, and never joined. The reason is the visitor's own where they gave the
+          // start up first, else `client_error`. It reads `run` and never writes it, so the deadline's `failed` below is
+          // shown whichever of the two is handled first.
+          onLate: (late) => settle(late, run.cancelled ?? "client_error", context)
         });
         if (startRef.current === run) startRef.current = null;
-        settle(result, run, {
-          module: loaded,
-          offer,
-          messageId,
-          base: base2,
-          headers: headers2
-        });
+        settle(result, run.cancelled, context);
       })();
     },
     [exchangeNow, go, reoffer, settle]
@@ -2097,7 +2115,7 @@ function AvatarLiveView({
       className: "w-full max-w-sm rounded-lg border border-border p-4 text-start",
       children: [
         /* @__PURE__ */ jsxRuntime.jsx("h2", { id: consentTitleId, className: "text-base font-semibold", children: copy.title }),
-        /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm", children: productName === null || copy.introProduct === null ? copy.intro : chunkO4GS3XPZ_js.fill(copy.introProduct, { product: productName }) }),
+        /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm", children: productName === null || copy.introProduct === null ? copy.intro : chunkN7E6Z2GF_js.fill(copy.introProduct, { product: productName }) }),
         /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm text-muted-foreground", children: copy.processing }),
         /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm text-muted-foreground", children: copy.storage }),
         /* @__PURE__ */ jsxRuntime.jsxs(
@@ -2277,14 +2295,21 @@ function AvatarLiveView({
             children: lastQuestion.content
           }
         ),
-        lastAnswer === void 0 ? unanswered === "waiting" ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-xs text-muted-foreground", children: activity ?? S.gettingAnswer }) : unanswered === "failed" ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-muted-foreground", children: S.answerFailed }) : null : lastAnswer.status === "PENDING" || lastAnswer.status === "RUNNING" ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-xs text-muted-foreground", children: activity ?? S.gettingAnswer }) : lastAnswer.status === "FAILED" ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-muted-foreground", children: S.answerFailed }) : /* @__PURE__ */ jsxRuntime.jsx(
-          "p",
-          {
-            "data-boff-explore": "avatar-live-text-answer",
-            dir: "auto",
-            className: "line-clamp-6 w-full max-w-sm whitespace-pre-wrap break-words text-start text-sm",
-            children: lastAnswer.content
-          }
+        lastAnswer === void 0 ? unanswered === "waiting" ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-xs text-muted-foreground", children: activity ?? S.gettingAnswer }) : unanswered === "failed" ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-muted-foreground", children: S.answerFailed }) : null : lastAnswer.status === "PENDING" || lastAnswer.status === "RUNNING" ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-xs text-muted-foreground", children: activity ?? S.gettingAnswer }) : lastAnswer.status === "FAILED" ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-muted-foreground", children: S.answerFailed }) : (
+          // The answer's words, not its markdown: `content` is written for the chat's renderer, and shown as it is
+          // here a link reads `[label](https://…)`. In its spoken form, as the chat's read-aloud says it: a link is its
+          // label (the address is in Chat, one tap away), a table its rows, and the markers of emphasis, headings,
+          // quotes and list items go (`answerDisplayText`). The words are the ones the chat shows, citation markers
+          // included, which the sources in Chat answer to.
+          /* @__PURE__ */ jsxRuntime.jsx(
+            "p",
+            {
+              "data-boff-explore": "avatar-live-text-answer",
+              dir: "auto",
+              className: "line-clamp-6 w-full max-w-sm whitespace-pre-wrap break-words text-start text-sm",
+              children: chunkN7E6Z2GF_js.answerDisplayText(lastAnswer.content)
+            }
+          )
         )
       ] });
       const ended = phase.name === "ended";