@athenaintel/react 0.10.35 → 0.10.36

package/dist/assets/asset-embed-messages.d.ts

@@ -23,5 +23,9 @@ export interface AthenaAssetEmbedConfigEvent {
     token?: string;
     citationBehavior: AthenaAssetCitationBehavior;
 }
+export declare function resolveAthenaAssetCitationBehavior({ citationBehavior, hasCitationClickHandler, }: {
+    citationBehavior?: AthenaAssetCitationBehavior;
+    hasCitationClickHandler: boolean;
+}): AthenaAssetCitationBehavior;
 export declare function isAthenaAssetEmbedReadyEvent(value: unknown): value is AthenaAssetEmbedReadyEvent;
 export declare function isAthenaAssetCitationClickEvent(value: unknown): value is AthenaAssetCitationClickEvent;

package/dist/assets/use-asset-embed.d.ts

@@ -26,6 +26,11 @@ export declare function resolveAssetEmbedUrl({ embedUrl, appUrl, backendUrl, cur
     backendUrl?: string | null;
     currentOrigin?: string | null;
 }): string;
+export declare function buildSdkAssetEmbedUrl(embedUrl: string): string;
+export declare function getAssetEmbedAuthContext({ token, apiKey }: {
+    token?: string | null;
+    apiKey?: string;
+}): string;
 /**
  * Hook to generate an embed URL for rendering an asset in an iframe.
  * Calls the Athena embed token endpoint.

package/dist/index.cjs

@@ -56254,6 +56254,13 @@ const AthenaUserMessage = ({
 const ATHENA_ASSET_EMBED_READY_MESSAGE = "athena:asset-embed-ready";
 const ATHENA_ASSET_EMBED_CONFIG_MESSAGE = "athena:asset-embed-config";
 const ATHENA_ASSET_CITATION_CLICK_MESSAGE = "athena:asset-citation-click";
+function resolveAthenaAssetCitationBehavior({
+  citationBehavior,
+  hasCitationClickHandler
+}) {
+  if (citationBehavior === "host" && !hasCitationClickHandler) return "browser";
+  return citationBehavior ?? (hasCitationClickHandler ? "host" : "browser");
+}
 function isAthenaAssetEmbedReadyEvent(value) {
   return typeof value === "object" && value !== null && "type" in value && value.type === ATHENA_ASSET_EMBED_READY_MESSAGE && "version" in value && value.version === 1;
 }
@@ -56356,7 +56363,11 @@ function resolveAssetEmbedUrl({
     if (!resolvedEmbedUrl.pathname.startsWith("/embed/")) {
       return embedUrl;
     }
-    const embedAppUrl = resolveEmbedAppUrl({ appUrl, backendUrl, currentOrigin });
+    const embedAppUrl = resolveEmbedAppUrl({
+      appUrl,
+      backendUrl,
+      currentOrigin
+    });
     if (!embedAppUrl) {
       return embedUrl;
     }
@@ -56368,6 +56379,41 @@ function resolveAssetEmbedUrl({
     return embedUrl;
   }
 }
+function buildSdkAssetEmbedUrl(embedUrl) {
+  try {
+    const url = new URL(embedUrl);
+    url.searchParams.set("athena_sdk_bridge", "1");
+    return url.toString();
+  } catch {
+    return embedUrl;
+  }
+}
+const getJwtPayload = (token) => {
+  try {
+    const payloadSegment = token.split(".")[1];
+    if (!payloadSegment || typeof atob !== "function") return null;
+    const normalized = payloadSegment.replace(/-/g, "+").replace(/_/g, "/");
+    const payload = JSON.parse(
+      atob(normalized.padEnd(normalized.length + (4 - normalized.length % 4) % 4, "="))
+    );
+    return payload && typeof payload === "object" ? payload : null;
+  } catch {
+    return null;
+  }
+};
+function getAssetEmbedAuthContext({ token, apiKey }) {
+  if (!token) return apiKey ? `api-key:${apiKey}` : "anonymous";
+  const payload = getJwtPayload(token);
+  const userId = (payload == null ? void 0 : payload.user_id) ?? (payload == null ? void 0 : payload.sub);
+  if (typeof userId !== "string" || !userId) return `opaque-token:${token}`;
+  return `jwt:${JSON.stringify({
+    issuer: (payload == null ? void 0 : payload.iss) ?? null,
+    userId,
+    activeOrgId: (payload == null ? void 0 : payload.active_org_id) ?? (payload == null ? void 0 : payload.org_id) ?? null,
+    workspaceId: (payload == null ? void 0 : payload.workspace_id) ?? null,
+    orgMemberships: (payload == null ? void 0 : payload.org_id_to_org_member_info) ?? null
+  })}`;
+}
 function useAssetEmbed(assetId, options = {
   backendUrl: ""
 }) {
@@ -56386,7 +56432,7 @@ function useAssetEmbed(assetId, options = {
   const abortRef = React.useRef(null);
   const tokenRef = React.useRef(token);
   tokenRef.current = token;
-  const hasToken = !!token;
+  const authContext = getAssetEmbedAuthContext({ token, apiKey });
   React.useEffect(() => {
     var _a2;
     if (!assetId || !backendUrl) {
@@ -56395,7 +56441,6 @@ function useAssetEmbed(assetId, options = {
       setError(null);
       return;
     }
-    const authContext = hasToken ? "token" : apiKey ?? "anon";
     const cacheKey = `${assetId}:${readOnly}:${displayMode}:${authContext}:${backendUrl}:${appUrl ?? ""}`;
     const cached2 = embedCache.get(cacheKey);
     if (cached2 && cached2.expiresAt > Date.now() / 1e3) {
@@ -56411,10 +56456,12 @@ function useAssetEmbed(assetId, options = {
     abortRef.current = controller;
     setIsLoading(true);
     setError(null);
-    const headers = { "Content-Type": "application/json" };
+    const headers = {
+      "Content-Type": "application/json"
+    };
     const currentToken = tokenRef.current;
     if (currentToken) {
-      headers["Authorization"] = `Bearer ${currentToken}`;
+      headers.Authorization = `Bearer ${currentToken}`;
     } else if (apiKey) {
       headers["X-API-KEY"] = apiKey;
     }
@@ -56422,7 +56469,12 @@ function useAssetEmbed(assetId, options = {
       method: "POST",
       headers,
       body: JSON.stringify(
-        buildAssetEmbedRequestBody({ assetId, readOnly, expiresInSeconds, displayMode })
+        buildAssetEmbedRequestBody({
+          assetId,
+          readOnly,
+          expiresInSeconds,
+          displayMode
+        })
       ),
       signal: controller.signal
     }).then(async (res) => {
@@ -56437,7 +56489,10 @@ function useAssetEmbed(assetId, options = {
         appUrl,
         backendUrl
       });
-      embedCache.set(cacheKey, { url: resolvedEmbedUrl, expiresAt: data.expires_at });
+      embedCache.set(cacheKey, {
+        url: resolvedEmbedUrl,
+        expiresAt: data.expires_at
+      });
       setEmbedUrl(resolvedEmbedUrl);
       setIsLoading(false);
     }).catch((err) => {
@@ -56446,7 +56501,7 @@ function useAssetEmbed(assetId, options = {
       setIsLoading(false);
     });
     return () => controller.abort();
-  }, [assetId, readOnly, expiresInSeconds, displayMode, backendUrl, appUrl, apiKey, hasToken]);
+  }, [assetId, readOnly, expiresInSeconds, displayMode, backendUrl, appUrl, authContext, apiKey]);
   return { embedUrl, isLoading, error: error2 };
 }
 const DEFAULT_STYLE = {
@@ -56492,7 +56547,11 @@ const AthenaAssetEmbed = ({
       return null;
     }
   }, [embedUrl]);
-  const effectiveCitationBehavior = citationBehavior ?? (onCitationClick ? "host" : "browser");
+  const iframeSrc = React.useMemo(() => embedUrl ? buildSdkAssetEmbedUrl(embedUrl) : null, [embedUrl]);
+  const effectiveCitationBehavior = resolveAthenaAssetCitationBehavior({
+    citationBehavior,
+    hasCitationClickHandler: !!onCitationClick
+  });
   const sendConfig = React.useCallback(() => {
     var _a2, _b;
     if (!targetOrigin) return;
@@ -56510,8 +56569,7 @@ const AthenaAssetEmbed = ({
     if (!embedUrl || !targetOrigin) return;
     const handleMessage = (event) => {
       var _a2;
-      if (event.origin !== targetOrigin || event.source !== ((_a2 = iframeRef.current) == null ? void 0 : _a2.contentWindow))
-        return;
+      if (event.origin !== targetOrigin || event.source !== ((_a2 = iframeRef.current) == null ? void 0 : _a2.contentWindow)) return;
       if (isAthenaAssetEmbedReadyEvent(event.data)) {
         sendConfig();
         return;
@@ -56559,7 +56617,7 @@ const AthenaAssetEmbed = ({
     {
       ...iframeProps,
       ref: iframeRef,
-      src: embedUrl,
+      src: iframeSrc ?? void 0,
       title: title ?? `Athena asset ${assetId}`,
       allow,
       className: cn("block h-full w-full", className),