@microsoft/omnichannel-chat-widget 2.0.0 → 2.0.1-main.6ca1911

package/README.md

@@ -53,10 +53,12 @@ This package requires Node.js `>=22.12.0` for consumer builds. Node 20 is not su
 For a production application, pin the exact stable versions:
 
 ```bash
-npm install --save-exact @microsoft/omnichannel-chat-widget@2.0.0 @microsoft/omnichannel-chat-components@1.2.0 @microsoft/omnichannel-chat-sdk@2.0.0
+npm install --save-exact @microsoft/omnichannel-chat-widget@2.0.1 @microsoft/omnichannel-chat-components@1.2.0 @microsoft/omnichannel-chat-sdk@2.0.1
 ```
 
-`2.0.0` release date is 2026-08-18. Official support ends on 2027-08-18. See the [root support table](https://github.com/microsoft/omnichannel-chat-widget#chat-widget).
+`2.0.1` release date is 2026-10-05. Official support ends on 2027-10-05. See the [root support table](https://github.com/microsoft/omnichannel-chat-widget#chat-widget).
+
+_**Known issue:**_ Chat SDK versions earlier than `1.11.6` can start duplicate conversations when `startChat()` is called again before the previous call is complete. Chat Widget `1.8.1` and earlier can use these versions. Upgrade the Chat SDK to `1.11.8` or later. See [Duplicate conversations with Chat SDK versions before 1.11.6](https://github.com/microsoft/omnichannel-chat-widget/blob/main/docs/KNOWN_ISSUE_CONCURRENT_STARTCHAT.md).
 
 TypeScript consumers that imported the exported Web Chat middleware factories now receive Redux 5 `unknown` actions. Narrow with `isWebChatAction` before reading `type` or `payload`. Runtime behavior is unchanged.
 
@@ -79,6 +81,7 @@ This hotfix still declares these vulnerable transitive versions:
 | `swiper` | `8.4.7` |
 | `valibot` | `1.1.0` |
 | `uuid` | `3.4.0`, `8.3.2`, and `9.0.1` |
+| `deepmerge` (via `sanitize-html@2.14.0`) | `4.3.1` |
 
 The consumer audit permits only the reviewed advisories from this hotfix. It rejects each new advisory.
 

package/lib/cjs/common/telemetry/TelemetryConstants.js

@@ -111,6 +111,7 @@ let TelemetryEvent = exports.TelemetryEvent = /*#__PURE__*/function (TelemetryEv
   TelemetryEvent["MidConversationAuthSucceeded"] = "MidConversationAuthSucceeded";
   TelemetryEvent["MidConversationAuthFailed"] = "MidConversationAuthFailed";
   TelemetryEvent["MidConversationAuthReset"] = "MidConversationAuthReset";
+  TelemetryEvent["RecoveryEligibilityEvaluated"] = "RecoveryEligibilityEvaluated";
   TelemetryEvent["GetConversationDetailsCallStarted"] = "GetConversationDetailsCallStarted";
   TelemetryEvent["GetConversationDetailsCallFailed"] = "GetConversationDetailsCallFailed";
   TelemetryEvent["EndChatSDKCallFailed"] = "EndChatSDKCallFailed";
@@ -142,6 +143,8 @@ let TelemetryEvent = exports.TelemetryEvent = /*#__PURE__*/function (TelemetryEv
   TelemetryEvent["PrechatSubmitted"] = "PrechatSubmitted";
   TelemetryEvent["StartChatSDKCall"] = "StartChatCall";
   TelemetryEvent["StartChatEventReceived"] = "StartChatEventReceived";
+  TelemetryEvent["ConcurrentStartChatRejected"] = "ConcurrentStartChatRejected";
+  TelemetryEvent["ChatSDKStateCleanUpDisconnectFailed"] = "ChatSDKStateCleanUpDisconnectFailed";
   TelemetryEvent["EndChatSDKCall"] = "EndChatSDKCall";
   TelemetryEvent["PrepareEndChat"] = "PrepareEndChat";
   TelemetryEvent["EndChatEventReceived"] = "EndChatEventReceived";
@@ -414,6 +417,9 @@ let TelemetryConstants = exports.TelemetryConstants = /*#__PURE__*/function () {
         case TelemetryEvent.SecureEventBusDispatchError:
         case TelemetryEvent.AgentJoinedConversation:
         case TelemetryEvent.BrowserTabHidden:
+        case TelemetryEvent.ConcurrentStartChatRejected:
+        case TelemetryEvent.ChatSDKStateCleanUpDisconnectFailed:
+        case TelemetryEvent.RecoveryEligibilityEvaluated:
           return ScenarioType.ACTIONS;
         case TelemetryEvent.StartChatSDKCall:
         case TelemetryEvent.StartChatEventReceived:

package/lib/cjs/components/chatbuttonstateful/ChatButtonStateful.js

@@ -58,37 +58,54 @@ const ChatButtonStateful = props => {
   const ref = (0, _react.useRef)(() => {
     return;
   });
+  // Optimistic guard against rapid double-clicks. `conversationState` only flips to
+  // `Loading` after React re-renders, so the button stays visible and clickable for the
+  // whole duration of the first click's async work. Without this ref two concurrent
+  // startChat() calls can create two conversations on the backend.
+  const startChatInProgressRef = (0, _react.useRef)(false);
   ref.current = async () => {
-    _TelemetryHelper.TelemetryHelper.logActionEventToAllTelemetry(_TelemetryConstants.LogLevel.INFO, {
-      Event: _TelemetryConstants.TelemetryEvent.LCWChatButtonClicked,
-      Description: "Chat button click action started",
-      CustomProperties: {
-        ConversationStage: _TelemetryConstants.ConversationStage.Initialization
-      }
-    });
-    if (state.appStates.isMinimized) {
-      dispatch({
-        type: _LiveChatWidgetActionType.LiveChatWidgetActionType.SET_MINIMIZED,
-        payload: false
+    if (startChatInProgressRef.current) {
+      _TelemetryHelper.TelemetryHelper.logActionEvent(_TelemetryConstants.LogLevel.WARN, {
+        Event: _TelemetryConstants.TelemetryEvent.ConcurrentStartChatRejected,
+        Description: "Chat button click ignored, a start chat operation is already in progress."
       });
-      dispatch({
-        type: _LiveChatWidgetActionType.LiveChatWidgetActionType.SET_UNREAD_MESSAGE_COUNT,
-        payload: 0
+      return;
+    }
+    startChatInProgressRef.current = true;
+    try {
+      _TelemetryHelper.TelemetryHelper.logActionEventToAllTelemetry(_TelemetryConstants.LogLevel.INFO, {
+        Event: _TelemetryConstants.TelemetryEvent.LCWChatButtonClicked,
+        Description: "Chat button click action started",
+        CustomProperties: {
+          ConversationStage: _TelemetryConstants.ConversationStage.Initialization
+        }
       });
-      // If chat is minimized and then unminimized, start a chat if convesation state is closed.
-      if (state.appStates.conversationState === _ConversationState.ConversationState.Closed) {
+      if (state.appStates.isMinimized) {
+        dispatch({
+          type: _LiveChatWidgetActionType.LiveChatWidgetActionType.SET_MINIMIZED,
+          payload: false
+        });
+        dispatch({
+          type: _LiveChatWidgetActionType.LiveChatWidgetActionType.SET_UNREAD_MESSAGE_COUNT,
+          payload: 0
+        });
+        // If chat is minimized and then unminimized, start a chat if convesation state is closed.
+        if (state.appStates.conversationState === _ConversationState.ConversationState.Closed) {
+          await startChat();
+        }
+      } else {
         await startChat();
       }
-    } else {
-      await startChat();
+      _TelemetryHelper.TelemetryHelper.logActionEventToAllTelemetry(_TelemetryConstants.LogLevel.INFO, {
+        Event: _TelemetryConstants.TelemetryEvent.LCWChatButtonActionCompleted,
+        Description: "Chat button action completed",
+        CustomProperties: {
+          ConversationStage: _TelemetryConstants.ConversationStage.Initialization
+        }
+      });
+    } finally {
+      startChatInProgressRef.current = false;
     }
-    _TelemetryHelper.TelemetryHelper.logActionEventToAllTelemetry(_TelemetryConstants.LogLevel.INFO, {
-      Event: _TelemetryConstants.TelemetryEvent.LCWChatButtonActionCompleted,
-      Description: "Chat button action completed",
-      CustomProperties: {
-        ConversationStage: _TelemetryConstants.ConversationStage.Initialization
-      }
-    });
   };
   const outOfOfficeStyleProps = Object.assign({}, _defaultOutOfOfficeChatButtonStyleProps.defaultOutOfOfficeChatButtonStyleProps, outOfOfficeButtonProps === null || outOfOfficeButtonProps === void 0 ? void 0 : outOfOfficeButtonProps.styleProps);
   const controlProps = {

package/lib/cjs/components/livechatwidget/common/endChat.js

@@ -360,13 +360,52 @@ const closeChatStateCleanUp = dispatch => {
 
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 exports.closeChatStateCleanUp = closeChatStateCleanUp;
+const logCleanUpDisconnectFailure = error => {
+  _TelemetryHelper.TelemetryHelper.logActionEvent(_TelemetryConstants.LogLevel.WARN, {
+    Event: _TelemetryConstants.TelemetryEvent.ChatSDKStateCleanUpDisconnectFailed,
+    Description: "Failed to disconnect the previous conversation during chat SDK state clean up.",
+    ExceptionDetails: {
+      exception: (error === null || error === void 0 ? void 0 : error.message) ?? error
+    }
+  });
+};
+
+// Releases the previous session's conversation. Mirrors the cleanup OmnichannelChatSDK.endChat()
+// runs in its finally block (disconnect, then drop the reference). Without it, a conversation
+// left over from a failed or orphaned start chat, or from a chat ended in another tab (which
+// skips the SDK endChat), keeps its messaging session open and leaks into the next chat.
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const disconnectConversation = chatSDK => {
+  const conversation = chatSDK.conversation;
+  if (!conversation || typeof conversation.disconnect !== "function") {
+    return;
+  }
+  try {
+    // ACS conversations disconnect asynchronously; legacy IC3 conversations may not return a promise.
+    const result = conversation.disconnect();
+    if (result && typeof result.catch === "function") {
+      result.catch(logCleanUpDisconnectFailure);
+    }
+  } catch (error) {
+    logCleanUpDisconnectFailure(error);
+  }
+};
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
 const chatSDKStateCleanUp = chatSDK => {
+  if (!chatSDK) {
+    return;
+  }
+
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
   chatSDK.requestId = (0, _omnichannelChatSdk.uuidv4)();
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
   chatSDK.chatToken = {};
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
   chatSDK.reconnectId = null;
+  disconnectConversation(chatSDK);
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  chatSDK.conversation = null;
 };
 
 // eslint-disable-next-line @typescript-eslint/no-explicit-any

package/lib/cjs/components/livechatwidget/common/initWebChatComposer.js

@@ -67,7 +67,7 @@ const initWebChatComposer = (props, state, dispatch, facadeChatSDK, endChat) =>
   // Initialize Web Chat's redux store
   let webChatStore = _WebChatStoreLoader.WebChatStoreLoader.store;
   if (!webChatStore) {
-    var _state$domainStates$l, _state$domainStates$l2, _state$domainStates$l3, _props$webChatContain7;
+    var _state$domainStates$l, _state$domainStates$l2, _props$controlProps, _state$domainStates$l3, _props$webChatContain7;
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     const addConversationalSurveyTagsCallback = action => {
       var _inMemoryState$appSta;
@@ -126,7 +126,7 @@ const initWebChatComposer = (props, state, dispatch, facadeChatSDK, endChat) =>
     };
     webChatStore = (0, _botframeworkWebchat.createStore)({},
     //initial state
-    _preProcessingMiddleware.default, _attachmentProcessingMiddleware.default, (0, _attachmentUploadValidatorMiddleware.default)((_state$domainStates$l = state.domainStates.liveChatConfig) === null || _state$domainStates$l === void 0 ? void 0 : _state$domainStates$l.allowedFileExtensions, (_state$domainStates$l2 = state.domainStates.liveChatConfig) === null || _state$domainStates$l2 === void 0 ? void 0 : _state$domainStates$l2.maxUploadFileSize, localizedTexts), _attachmentSentAnnouncementMiddleware.default, (0, _customEventMiddleware.default)(_omnichannelChatComponents.BroadcastService), (0, _queueOverflowHandlerMiddleware.createQueueOverflowMiddleware)(state, dispatch), (0, _channelDataMiddleware.default)(addConversationalSurveyTagsCallback), (0, _conversationEndMiddleware.default)(conversationEndCallback, startConversationalSurveyCallback, endConversationalSurveyCallback), (0, _dataMaskingMiddleware.default)((_state$domainStates$l3 = state.domainStates.liveChatConfig) === null || _state$domainStates$l3 === void 0 ? void 0 : _state$domainStates$l3.DataMaskingInfo), _messageTimestampMiddleware.createMessageTimeStampMiddleware, _messageSequenceIdOverrideMiddleware.createMessageSequenceIdOverrideMiddleware, (0, _citationsMiddleware.createCitationsMiddleware)(state, dispatch), _gifUploadMiddleware.default, _htmlPlayerMiddleware.default, (0, _htmlTextMiddleware.default)(honorsTargetInHTMLLinks), (0, _maxMessageSizeValidator.default)(localizedTexts), _sanitizationMiddleware.default, (0, _callActionMiddleware.default)(),
+    _preProcessingMiddleware.default, _attachmentProcessingMiddleware.default, (0, _attachmentUploadValidatorMiddleware.default)((_state$domainStates$l = state.domainStates.liveChatConfig) === null || _state$domainStates$l === void 0 ? void 0 : _state$domainStates$l.allowedFileExtensions, (_state$domainStates$l2 = state.domainStates.liveChatConfig) === null || _state$domainStates$l2 === void 0 ? void 0 : _state$domainStates$l2.maxUploadFileSize, localizedTexts), (0, _attachmentSentAnnouncementMiddleware.default)(localizedTexts, ((_props$controlProps = props.controlProps) === null || _props$controlProps === void 0 ? void 0 : _props$controlProps.id) || "oc-lcw"), (0, _customEventMiddleware.default)(_omnichannelChatComponents.BroadcastService), (0, _queueOverflowHandlerMiddleware.createQueueOverflowMiddleware)(state, dispatch), (0, _channelDataMiddleware.default)(addConversationalSurveyTagsCallback), (0, _conversationEndMiddleware.default)(conversationEndCallback, startConversationalSurveyCallback, endConversationalSurveyCallback), (0, _dataMaskingMiddleware.default)((_state$domainStates$l3 = state.domainStates.liveChatConfig) === null || _state$domainStates$l3 === void 0 ? void 0 : _state$domainStates$l3.DataMaskingInfo), _messageTimestampMiddleware.createMessageTimeStampMiddleware, _messageSequenceIdOverrideMiddleware.createMessageSequenceIdOverrideMiddleware, (0, _citationsMiddleware.createCitationsMiddleware)(state, dispatch), _gifUploadMiddleware.default, _htmlPlayerMiddleware.default, (0, _htmlTextMiddleware.default)(honorsTargetInHTMLLinks), (0, _maxMessageSizeValidator.default)(localizedTexts), _sanitizationMiddleware.default, (0, _callActionMiddleware.default)(),
     // Pass a callback so middleware can push initials into React context for reactivity
     (0, _localizedStringsBotInitialsMiddleware.localizedStringsBotInitialsMiddleware)(initials => {
       dispatch({
@@ -256,6 +256,12 @@ const initWebChatComposer = (props, state, dispatch, facadeChatSDK, endChat) =>
       // Track what would be removed
       const removedTags = [];
       const removedAttributes = [];
+      const trackAttribute = name => {
+        const attrName = name.toLowerCase();
+        if (!strictConfig.ALLOWED_ATTR.includes(attrName) && attrName !== "class" && attrName !== "id") {
+          removedAttributes.push(attrName);
+        }
+      };
 
       // Add hooks to the isolated monitoring instance
       monitorDOMPurify.addHook("uponSanitizeElement", (node, data) => {
@@ -264,6 +270,8 @@ const initWebChatComposer = (props, state, dispatch, facadeChatSDK, endChat) =>
           // Filter out "body" tag which is DOMPurify's internal wrapper
           if (node.nodeType === 1 && !strictConfig.ALLOWED_TAGS.includes(tagName) && tagName !== "body") {
             removedTags.push(tagName);
+            // DOMPurify 3.4.16+ skips uponSanitizeAttribute for removed elements
+            Array.from(node.attributes ?? []).forEach(attr => trackAttribute(attr.name));
           }
         } catch (hookError) {
           // Silently ignore hook errors
@@ -271,10 +279,7 @@ const initWebChatComposer = (props, state, dispatch, facadeChatSDK, endChat) =>
       });
       monitorDOMPurify.addHook("uponSanitizeAttribute", (node, data) => {
         try {
-          const attrName = data.attrName.toLowerCase();
-          if (!strictConfig.ALLOWED_ATTR.includes(attrName) && attrName !== "class" && attrName !== "id") {
-            removedAttributes.push(attrName);
-          }
+          trackAttribute(data.attrName);
         } catch (hookError) {
           // Silently ignore hook errors
         }

package/lib/cjs/components/livechatwidget/common/recoveryEligibilityTelemetry.js

@@ -0,0 +1,60 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.logRecoveryEligibilityTelemetry = exports.getRecoveryEligibilityTelemetryProperties = exports.RecoveryEligibilityReason = void 0;
+var _ConversationState = require("../../../contexts/common/ConversationState");
+var _TelemetryConstants = require("../../../common/telemetry/TelemetryConstants");
+var _TelemetryHelper = require("../../../common/telemetry/TelemetryHelper");
+var _utils = require("../../../common/utils");
+let RecoveryEligibilityReason = exports.RecoveryEligibilityReason = /*#__PURE__*/function (RecoveryEligibilityReason) {
+  RecoveryEligibilityReason["ReconnectIdPresent"] = "ReconnectIdPresent";
+  RecoveryEligibilityReason["ActiveContextPresent"] = "ActiveContextPresent";
+  RecoveryEligibilityReason["MissingContext"] = "MissingContext";
+  RecoveryEligibilityReason["CachedContextNonActive"] = "CachedContextNonActive";
+  return RecoveryEligibilityReason;
+}({});
+const getConversationStateName = conversationState => {
+  if (typeof conversationState !== "number") {
+    return "Unknown";
+  }
+  const stateName = _ConversationState.ConversationState[conversationState];
+  return typeof stateName === "string" ? stateName : "Unknown";
+};
+const getRecoveryEligibilityTelemetryProperties = (state, eligible) => {
+  var _state$appStates, _state$domainStates, _state$appStates2, _state$appStates3;
+  const reconnectId = (_state$appStates = state.appStates) === null || _state$appStates === void 0 ? void 0 : _state$appStates.reconnectId;
+  const liveChatContext = (_state$domainStates = state.domainStates) === null || _state$domainStates === void 0 ? void 0 : _state$domainStates.liveChatContext;
+  const hasReconnectId = !(0, _utils.isUndefinedOrEmpty)(reconnectId);
+  const hasLiveChatContext = !(0, _utils.isUndefinedOrEmpty)(liveChatContext);
+  const hasRequestId = !(0, _utils.isUndefinedOrEmpty)(liveChatContext === null || liveChatContext === void 0 ? void 0 : liveChatContext.requestId);
+  let reason = RecoveryEligibilityReason.ActiveContextPresent;
+  if (hasReconnectId) {
+    reason = RecoveryEligibilityReason.ReconnectIdPresent;
+  } else if (!hasLiveChatContext) {
+    reason = RecoveryEligibilityReason.MissingContext;
+  } else if (((_state$appStates2 = state.appStates) === null || _state$appStates2 === void 0 ? void 0 : _state$appStates2.conversationState) !== _ConversationState.ConversationState.Active) {
+    reason = RecoveryEligibilityReason.CachedContextNonActive;
+  }
+  return {
+    conversationState: getConversationStateName((_state$appStates3 = state.appStates) === null || _state$appStates3 === void 0 ? void 0 : _state$appStates3.conversationState),
+    hasReconnectId,
+    hasLiveChatContext,
+    hasRequestId,
+    eligible,
+    reason
+  };
+};
+exports.getRecoveryEligibilityTelemetryProperties = getRecoveryEligibilityTelemetryProperties;
+const logRecoveryEligibilityTelemetry = (state, eligible) => {
+  try {
+    _TelemetryHelper.TelemetryHelper.logActionEvent(_TelemetryConstants.LogLevel.INFO, {
+      Event: _TelemetryConstants.TelemetryEvent.RecoveryEligibilityEvaluated,
+      CustomProperties: getRecoveryEligibilityTelemetryProperties(state, eligible)
+    });
+  } catch (error) {
+    console.warn(error);
+  }
+};
+exports.logRecoveryEligibilityTelemetry = logRecoveryEligibilityTelemetry;

package/lib/cjs/components/livechatwidget/common/startChat.js

@@ -24,18 +24,87 @@ var _authHelper = require("./authHelper");
 var _setPostChatContextAndLoadSurvey = require("./setPostChatContextAndLoadSurvey");
 var _persistentChatHelper = require("./persistentChatHelper");
 var _updateSessionDataForTelemetry = require("./updateSessionDataForTelemetry");
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-let optionalParams = {};
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-let widgetInstanceId;
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-let popoutWidgetInstanceId;
+/**
+ * Per widget instance mutexes for the two chat creation entry points.
+ *
+ * Every guard in the prepareStartChat -> setPreChatAndInitiateChat -> initStartChat chain
+ * checks `conversationState === Closed`, but React state is updated asynchronously. A second
+ * invocation fired within the same render cycle (for example a rapid double click on the chat
+ * button, or a chat button click racing a BroadcastEvent.StartChat) therefore still observes
+ * the stale `Closed` state, reaches `facadeChatSDK.startChat()` and creates a second
+ * conversation on the backend which is then orphaned and never ended.
+ *
+ * The locks are keyed by FacadeChatSDK instance rather than being module wide, because a host
+ * page can mount several independent widgets, each with its own widgetInstanceId and its own
+ * FacadeChatSDK (created once per widget in LiveChatWidget.tsx). A module wide lock would make
+ * widget A's start chat silently drop widget B's legitimate simultaneous start chat.
+ *
+ * The two maps are separate because prepareStartChat calls initStartChat; sharing a single lock
+ * would make the nested call see its own parent as in flight and drop it. prepareStartChat is
+ * additionally blocked by an in flight initStartChat (pre-chat submit, reconnect, or the
+ * hideStartChatButton bootstrap call initStartChat directly). Otherwise a later prepareStartChat
+ * would dispatch Loading and maximize the widget, and only then have its nested initStartChat
+ * dropped.
+ */
+const prepareStartChatGuards = new WeakMap();
+const initStartChatGuards = new WeakMap();
+
+// Fallback owner used only when no FacadeChatSDK instance is available to key on, so the guard
+// degrades to the module wide behaviour instead of disappearing altogether.
+const unkeyedGuardOwner = {};
+const getGuard = (guards, facadeChatSDK) => {
+  const owner = facadeChatSDK ?? unkeyedGuardOwner;
+  let guard = guards.get(owner);
+  if (!guard) {
+    guard = {
+      inFlight: false
+    };
+    guards.set(owner, guard);
+  }
+  return guard;
+};
+
+/**
+ * Runs `operation` only if no other invocation for the same widget instance is already in
+ * flight. Concurrent invocations are dropped (and reported through telemetry) rather than
+ * awaiting the in-flight promise, so a future re-entrant call can never deadlock on itself.
+ * No caller acts on the resolved value, so dropping is safe.
+ *
+ * `blockedBy` lets an operation also yield to a different, already running operation for the
+ * same widget instance without claiming that operation's lock.
+ */
+const runExclusively = async (guards, facadeChatSDK, description, operation, props, blockedBy) => {
+  const guard = getGuard(guards, facadeChatSDK);
+  const blockingGuard = blockedBy ? getGuard(blockedBy, facadeChatSDK) : undefined;
+  if (guard.inFlight || blockingGuard !== null && blockingGuard !== void 0 && blockingGuard.inFlight) {
+    _TelemetryHelper.TelemetryHelper.logActionEvent(_TelemetryConstants.LogLevel.WARN, {
+      Event: _TelemetryConstants.TelemetryEvent.ConcurrentStartChatRejected,
+      Description: description,
+      CustomProperties: {
+        WidgetCacheId: props ? (0, _utils.getWidgetCacheIdfromProps)(props) : undefined
+      }
+    });
+    return;
+  }
+
+  // Claim the lock before invoking the operation, so a re-entrant call made from the
+  // operation's synchronous preamble (before its first await) cannot slip past the check above.
+  guard.inFlight = true;
+  try {
+    await operation();
+  } finally {
+    guard.inFlight = false;
+  }
+};
 
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 const prepareStartChat = async (props, facadeChatSDK, state, dispatch, setAdapter) => {
-  optionalParams = {}; //Resetting to ensure no stale values
-  widgetInstanceId = (0, _utils.getWidgetCacheIdfromProps)(props);
+  return runExclusively(prepareStartChatGuards, facadeChatSDK, "Concurrent prepareStartChat call ignored, a start chat operation is already in progress for this widget instance.", () => prepareStartChatInternal(props, facadeChatSDK, state, dispatch, setAdapter), props, initStartChatGuards);
+};
 
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+exports.prepareStartChat = prepareStartChat;
+const prepareStartChatInternal = async (props, facadeChatSDK, state, dispatch, setAdapter) => {
   // reconnect > chat from cache
   if ((0, _reconnectChatHelper.isReconnectEnabled)(props.chatConfig) === true && !(0, _reconnectChatHelper.isPersistentEnabled)(props.chatConfig)) {
     const shouldStartChatNormally = await (0, _reconnectChatHelper.handleChatReconnect)(facadeChatSDK, props, dispatch, setAdapter, initStartChat, state);
@@ -63,7 +132,6 @@ const prepareStartChat = async (props, facadeChatSDK, state, dispatch, setAdapte
 };
 
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
-exports.prepareStartChat = prepareStartChat;
 const setPreChatAndInitiateChat = async (facadeChatSDK, dispatch, setAdapter, isProactiveChat, proactiveChatEnablePrechatState, state, props) => {
   var _props$preChatSurveyP, _props$controlProps, _state$domainStates, _state$appStates2;
   // Reset before loading prechat to avoid starting chat with previous requestId
@@ -163,6 +231,12 @@ const setPreChatAndInitiateChat = async (facadeChatSDK, dispatch, setAdapter, is
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 exports.setPreChatAndInitiateChat = setPreChatAndInitiateChat;
 const initStartChat = async (facadeChatSDK, dispatch, setAdapter, state, props, params, persistedState) => {
+  return runExclusively(initStartChatGuards, facadeChatSDK, "Concurrent initStartChat call ignored, a start chat operation is already in progress for this widget instance.", () => initStartChatInternal(facadeChatSDK, dispatch, setAdapter, state, props, params, persistedState), props);
+};
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+exports.initStartChat = initStartChat;
+const initStartChatInternal = async (facadeChatSDK, dispatch, setAdapter, state, props, params, persistedState) => {
   var _state$domainStates7;
   let isStartChatSuccessful = false;
   const persistentChatEnabled = (0, _liveChatConfigUtils.isPersistentChatEnabled)(state === null || state === void 0 || (_state$domainStates7 = state.domainStates) === null || _state$domainStates7 === void 0 || (_state$domainStates7 = _state$domainStates7.liveChatConfig) === null || _state$domainStates7 === void 0 || (_state$domainStates7 = _state$domainStates7.LiveWSAndLiveChatEngJoin) === null || _state$domainStates7 === void 0 ? void 0 : _state$domainStates7.msdyn_conversationmode);
@@ -201,14 +275,15 @@ const initStartChat = async (facadeChatSDK, dispatch, setAdapter, state, props,
     }
     try {
       var _window$Microsoft, _state$domainStates8;
-      // Set custom context params
-      await setCustomContextParams(state, props);
+      // Set custom context params. Returned (not stored module-side) so that concurrent
+      // widget instances cannot overwrite each other's custom context.
+      const customContextParams = await setCustomContextParams(state, props);
       const defaultOptionalParams = {
         sendDefaultInitContext: true,
         isProactiveChat: !!(params !== null && params !== void 0 && params.isProactiveChat),
         portalContactId: (_window$Microsoft = window.Microsoft) === null || _window$Microsoft === void 0 || (_window$Microsoft = _window$Microsoft.Dynamic365) === null || _window$Microsoft === void 0 || (_window$Microsoft = _window$Microsoft.Portal) === null || _window$Microsoft === void 0 || (_window$Microsoft = _window$Microsoft.User) === null || _window$Microsoft === void 0 ? void 0 : _window$Microsoft.contactId
       };
-      const startChatOptionalParams = Object.assign({}, params, optionalParams, defaultOptionalParams);
+      const startChatOptionalParams = Object.assign({}, params, customContextParams, defaultOptionalParams);
 
       // MID-AUTH: Add wasAuthenticated flag for reconnect scenarios
       // Tells FacadeChatSDK whether the previous session was authenticated
@@ -291,14 +366,10 @@ const initStartChat = async (facadeChatSDK, dispatch, setAdapter, state, props,
     await (0, _updateSessionDataForTelemetry.updateTelemetryData)(facadeChatSDK, dispatch);
   } catch (ex) {
     (0, _startChatErrorHandler.handleStartChatError)(dispatch, facadeChatSDK, props, ex, isStartChatSuccessful);
-  } finally {
-    optionalParams = {};
-    widgetInstanceId = "";
   }
 };
 
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
-exports.initStartChat = initStartChat;
 const createAdapterAndSubscribe = async (facadeChatSDK, dispatch, setAdapter, startTime, props) => {
   // New adapter creation
   const newAdapter = await (0, _createAdapter.createAdapter)(facadeChatSDK, props);
@@ -338,19 +409,22 @@ const canConnectToExistingChat = async (props, facadeChatSDK, state, dispatch, s
   return false;
 };
 
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
+/**
+ * Resolves the custom context to start the chat with.
+ *
+ * Returns the resolved params instead of mutating module-level state: a page can host several
+ * independent widgets, and once per-instance start-chat guards allow them to run concurrently,
+ * shared mutable state would let one widget overwrite another widget's custom context.
+ */
 const setCustomContextParams = async (state, props) => {
   var _state$domainStates9, _persistedState$domai5;
   if (state !== null && state !== void 0 && (_state$domainStates9 = state.domainStates) !== null && _state$domainStates9 !== void 0 && _state$domainStates9.customContext) {
     var _state$domainStates0;
-    optionalParams = Object.assign({}, optionalParams, {
+    return {
       customContext: JSON.parse(JSON.stringify(state === null || state === void 0 || (_state$domainStates0 = state.domainStates) === null || _state$domainStates0 === void 0 ? void 0 : _state$domainStates0.customContext))
-    });
-    return;
-  }
-  if ((0, _utils.isNullOrEmptyString)(widgetInstanceId)) {
-    widgetInstanceId = (0, _utils.getWidgetCacheIdfromProps)(props);
+    };
   }
+  const widgetInstanceId = props ? (0, _utils.getWidgetCacheIdfromProps)(props) : "";
   // Add custom context only for unauthenticated chat
   const persistedState = (0, _utils.getStateFromCache)(widgetInstanceId);
   const customContextLocal = (persistedState === null || persistedState === void 0 || (_persistedState$domai5 = persistedState.domainStates) === null || _persistedState$domai5 === void 0 ? void 0 : _persistedState$domai5.customContext) ?? (props === null || props === void 0 ? void 0 : props.initialCustomContext);
@@ -359,23 +433,23 @@ const setCustomContextParams = async (state, props) => {
       Event: _TelemetryConstants.TelemetryEvent.SettingCustomContext,
       Description: "Setting custom context for unauthenticated chat"
     });
-    optionalParams = Object.assign({}, optionalParams, {
+    return {
       customContext: JSON.parse(JSON.stringify(customContextLocal))
-    });
-  } else {
-    const customContextFromParent = await getInitContextParamsForPopout();
-    if (!(0, _utils.isUndefinedOrEmpty)(customContextFromParent === null || customContextFromParent === void 0 ? void 0 : customContextFromParent.contextVariables)) {
-      optionalParams = Object.assign({}, optionalParams, {
-        customContext: JSON.parse(JSON.stringify(customContextFromParent.contextVariables))
-      });
-    }
+    };
+  }
+  const customContextFromParent = await getInitContextParamsForPopout();
+  if (!(0, _utils.isUndefinedOrEmpty)(customContextFromParent === null || customContextFromParent === void 0 ? void 0 : customContextFromParent.contextVariables)) {
+    return {
+      customContext: JSON.parse(JSON.stringify(customContextFromParent.contextVariables))
+    };
   }
+  return {};
 };
 const canStartPopoutChat = async props => {
   if (props.allowSdkChatSupport === false) {
     return false;
   }
-  popoutWidgetInstanceId = (0, _utils.getWidgetCacheIdfromProps)(props, true);
+  const popoutWidgetInstanceId = (0, _utils.getWidgetCacheIdfromProps)(props, true);
   if (!(0, _utils.isNullOrEmptyString)(popoutWidgetInstanceId)) {
     var _persistedState$domai6, _persistedState$appSt3;
     const persistedState = (0, _utils.getStateFromCache)(popoutWidgetInstanceId);

package/lib/cjs/components/livechatwidget/livechatwidgetstateful/LiveChatWidgetStateful.js

@@ -60,6 +60,7 @@ var _useChatAdapterStore3 = _interopRequireDefault(require("../../../hooks/useCh
 var _useChatContextStore3 = _interopRequireDefault(require("../../../hooks/useChatContextStore"));
 var _useFacadeChatSDKStore = _interopRequireDefault(require("../../../hooks/useFacadeChatSDKStore"));
 var _renderSurveyHelpers = require("../common/renderSurveyHelpers");
+var _recoveryEligibilityTelemetry = require("../common/recoveryEligibilityTelemetry");
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
 function _extends() { return _extends = Object.assign ? Object.assign.bind() : function (n) { for (var e = 1; e < arguments.length; e++) { var t = arguments[e]; for (var r in t) ({}).hasOwnProperty.call(t, r) && (n[r] = t[r]); } return n; }, _extends.apply(null, arguments); }
@@ -157,6 +158,7 @@ const LiveChatWidgetStateful = props => {
       activeCachedChatExist = false;
       optionalParams = {};
     }
+    (0, _recoveryEligibilityTelemetry.logRecoveryEligibilityTelemetry)(state, activeCachedChatExist);
   };
 
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
@@ -1172,18 +1174,18 @@ const LiveChatWidgetStateful = props => {
             .webchat__auto-resize-textarea.webchat__send-box-text-box__text-area {
                 min-height: ${sendBoxTextArea === null || sendBoxTextArea === void 0 ? void 0 : sendBoxTextArea.minHeight} !important;
             }`}
-            `), /*#__PURE__*/_react2.default.createElement(_DraggableChatWidget.default, chatWidgetDraggableConfig, /*#__PURE__*/_react2.default.createElement(Composer, _extends({}, webChatProps, {
-    userID: userID,
-    styleOptions: styleOptions,
-    directLine: directLine
-  }), /*#__PURE__*/_react2.default.createElement(_react.Stack, {
+            `), /*#__PURE__*/_react2.default.createElement(_DraggableChatWidget.default, chatWidgetDraggableConfig, /*#__PURE__*/_react2.default.createElement(_react.Stack, {
     id: widgetElementId,
     styles: generalStyles,
     className: (_livechatProps$styleP = livechatProps.styleProps) === null || _livechatProps$styleP === void 0 ? void 0 : _livechatProps$styleP.className,
     role: isWidgetOpen ? "dialog" : undefined,
     "aria-modal": isWidgetOpen ? true : undefined,
     "aria-label": isWidgetOpen ? ((_props$headerProps = props.headerProps) === null || _props$headerProps === void 0 || (_props$headerProps = _props$headerProps.controlProps) === null || _props$headerProps === void 0 || (_props$headerProps = _props$headerProps.headerTitleProps) === null || _props$headerProps === void 0 ? void 0 : _props$headerProps.text) ?? "Live Chat" : undefined
-  }, !((_livechatProps$contro = livechatProps.controlProps) !== null && _livechatProps$contro !== void 0 && _livechatProps$contro.hideChatButton) && !((_livechatProps$contro2 = livechatProps.controlProps) !== null && _livechatProps$contro2 !== void 0 && _livechatProps$contro2.hideStartChatButton) && (0, _componentController.shouldShowChatButton)(state) && ((0, _omnichannelChatComponents.decodeComponentString)((_livechatProps$compon = livechatProps.componentOverrides) === null || _livechatProps$compon === void 0 ? void 0 : _livechatProps$compon.chatButton) || /*#__PURE__*/_react2.default.createElement(_ChatButtonStateful.default, {
+  }, /*#__PURE__*/_react2.default.createElement(Composer, _extends({}, webChatProps, {
+    userID: userID,
+    styleOptions: styleOptions,
+    directLine: directLine
+  }), !((_livechatProps$contro = livechatProps.controlProps) !== null && _livechatProps$contro !== void 0 && _livechatProps$contro.hideChatButton) && !((_livechatProps$contro2 = livechatProps.controlProps) !== null && _livechatProps$contro2 !== void 0 && _livechatProps$contro2.hideStartChatButton) && (0, _componentController.shouldShowChatButton)(state) && ((0, _omnichannelChatComponents.decodeComponentString)((_livechatProps$compon = livechatProps.componentOverrides) === null || _livechatProps$compon === void 0 ? void 0 : _livechatProps$compon.chatButton) || /*#__PURE__*/_react2.default.createElement(_ChatButtonStateful.default, {
     buttonProps: livechatProps.chatButtonProps,
     outOfOfficeButtonProps: livechatProps.outOfOfficeChatButtonProps,
     startChat: prepareStartChatRelay

package/lib/cjs/components/webchatcontainerstateful/WebChatContainerStateful.js

@@ -537,9 +537,9 @@ const WebChatContainerStateful = props => {
 
         /* Suggested actions carousel previous/next navigation focus */
         .webchat__suggested-actions .webchat__suggested-actions__carousel .react-film__flipper:focus-visible .react-film__flipper__body {
-            outline: ${(webChatContainerProps === null || webChatContainerProps === void 0 || (_webChatContainerProp20 = webChatContainerProps.webChatStyles) === null || _webChatContainerProp20 === void 0 ? void 0 : _webChatContainerProp20.suggestedActionKeyboardFocusIndicatorBorderStyle) ?? "dashed"} ${(webChatContainerProps === null || webChatContainerProps === void 0 || (_webChatContainerProp21 = webChatContainerProps.webChatStyles) === null || _webChatContainerProp21 === void 0 ? void 0 : _webChatContainerProp21.suggestedActionKeyboardFocusIndicatorBorderWidth) ?? "1px"} ${(webChatContainerProps === null || webChatContainerProps === void 0 || (_webChatContainerProp22 = webChatContainerProps.webChatStyles) === null || _webChatContainerProp22 === void 0 ? void 0 : _webChatContainerProp22.suggestedActionKeyboardFocusIndicatorBorderColor) ?? "#605E5C"} !important;
+            outline: ${(webChatContainerProps === null || webChatContainerProps === void 0 || (_webChatContainerProp20 = webChatContainerProps.webChatStyles) === null || _webChatContainerProp20 === void 0 ? void 0 : _webChatContainerProp20.suggestedActionKeyboardFocusIndicatorBorderStyle) ?? "solid"} ${(webChatContainerProps === null || webChatContainerProps === void 0 || (_webChatContainerProp21 = webChatContainerProps.webChatStyles) === null || _webChatContainerProp21 === void 0 ? void 0 : _webChatContainerProp21.suggestedActionKeyboardFocusIndicatorBorderWidth) ?? "2px"} ${(webChatContainerProps === null || webChatContainerProps === void 0 || (_webChatContainerProp22 = webChatContainerProps.webChatStyles) === null || _webChatContainerProp22 === void 0 ? void 0 : _webChatContainerProp22.suggestedActionKeyboardFocusIndicatorBorderColor) ?? "#605E5C"} !important;
             outline-offset: ${(webChatContainerProps === null || webChatContainerProps === void 0 || (_webChatContainerProp23 = webChatContainerProps.webChatStyles) === null || _webChatContainerProp23 === void 0 ? void 0 : _webChatContainerProp23.suggestedActionKeyboardFocusIndicatorInset) ?? "2px"} !important;
-
+        }
         `), /*#__PURE__*/_react2.default.createElement(_react.Stack, {
     styles: containerStyles,
     className: "webchat__stacked-layout_container"

package/lib/cjs/components/webchatcontainerstateful/common/defaultProps/defaultMiddlewareLocalizedTexts.js

@@ -33,7 +33,8 @@ const defaultMiddlewareLocalizedTexts = exports.defaultMiddlewareLocalizedTexts
   MIDDLEWARE_BANNER_CHAT_DISCONNECT: "Your conversation has been disconnected. For additional assistance, please start a new chat.",
   THIRD_PARTY_COOKIES_BLOCKED_ALERT_MESSAGE: "Allow sites to save/read cookies in browser settings. Reloading page starts a new chat.",
   MIDDLEWARE_BANNER_FILE_IS_MALICIOUS: "{0} has been blocked because the file may contain a malware.",
-  MIDDLEWARE_BANNER_FILE_SENT: "File sent successfully.",
+  MIDDLEWARE_BANNER_FILE_SENT: "File {2} sent",
+  MIDDLEWARE_BANNER_FILES_SENT: "{0} files sent",
   MIDDLEWARE_BANNER_FILE_EMAIL_ADDRESS_RECORDED_SUCCESS: "Email will be sent after chat ends!",
   MIDDLEWARE_BANNER_FILE_EMAIL_ADDRESS_RECORDED_ERROR: "Email {0} could not be saved, try again later.",
   MIDDLEWARE_SR_PREFIX_SUCCESS: "Success. ",

package/lib/cjs/components/webchatcontainerstateful/webchatcontroller/middlewares/renderingmiddlewares/attachments/AdaptiveCardAccessibilityWrapper.js

@@ -94,6 +94,19 @@ const AdaptiveCardAccessibilityWrapper = _ref => {
         }
       });
 
+      // action-button-double-read: the adaptivecards renderer writes the action
+      // title to the button text, aria-label AND title. The title becomes the
+      // accessible description, so TalkBack reads the label twice ("Submit,
+      // button, Submit"). Drop the title only when it repeats the button name;
+      // a distinct title (an action tooltip) adds information and is kept.
+      container.querySelectorAll("button[title]").forEach(btn => {
+        const title = (btn.getAttribute("title") || "").trim();
+        const name = (btn.getAttribute("aria-label") ?? btn.textContent ?? "").trim();
+        if (title && title === name) {
+          btn.removeAttribute("title");
+        }
+      });
+
       // Find all radio inputs inside the adaptive card
       const radios = container.querySelectorAll("input[type='radio']");
       if (radios.length === 0) return;
@@ -175,7 +188,8 @@ const AdaptiveCardAccessibilityWrapper = _ref => {
 
     // Use MutationObserver to patch after WebChat finishes rendering the card.
     // Also watch attribute changes on aria-hidden so we can re-apply if React
-    // reconciliation removes it from labels.
+    // reconciliation removes it from labels, and on title so a re-added
+    // duplicate button title is removed again.
     const observer = new MutationObserver(() => {
       patchRadioGroups();
     });
@@ -183,7 +197,7 @@ const AdaptiveCardAccessibilityWrapper = _ref => {
       childList: true,
       subtree: true,
       attributes: true,
-      attributeFilter: ["aria-hidden"]
+      attributeFilter: ["aria-hidden", "title"]
     });
 
     // Also run immediately in case the card is already rendered