@athenaintel/react 0.9.19 → 0.9.20

package/dist/index.d.ts

@@ -87,6 +87,24 @@ export declare interface AthenaAssistantMessageProps {
     ActionBarComponent?: FC<AthenaAssistantActionBarProps>;
 }
 
+/**
+ * Auth state exposed by `useAthenaAuth()`.
+ */
+export declare interface AthenaAuthState {
+    /** Whether the user is currently logged in. */
+    isLoggedIn: boolean;
+    /** Whether the auth state is still loading. */
+    isLoading: boolean;
+    /** The authenticated user, or `null` when not logged in. */
+    user: AthenaUser | null;
+    /** The current access token, or `null` when not logged in. */
+    accessToken: string | null;
+    /** Organizations the user belongs to. */
+    orgs: AthenaOrg[];
+    /** Log the user out. Redirects to the login page by default. */
+    logout: (redirectOnLogout?: boolean) => Promise<void>;
+}
+
 export declare const AthenaChat: FC<AthenaChatProps>;
 
 export declare interface AthenaChatComponents {
@@ -216,6 +234,15 @@ export declare interface AthenaLinkClickOptions {
 
 export declare type AthenaLinkKind = 'athena-citation' | 'athena-app' | 'external';
 
+/**
+ * Athena organization membership.
+ */
+export declare interface AthenaOrg {
+    orgId: string;
+    orgName: string;
+    urlSafeOrgName: string;
+}
+
 export declare function AthenaProvider({ children, config, apiKey, token: tokenProp, agent, model, tools, frontendTools, apiUrl, backendUrl, appUrl, environment, workbench, knowledgeBase, systemPrompt, threadId: threadIdProp, enableThreadList, theme, linkClicks, citationLinks, }: AthenaProviderProps): JSX.Element | null;
 
 export declare interface AthenaProviderConfig {
@@ -229,6 +256,8 @@ export declare interface AthenaProviderConfig {
     backendUrl?: string;
     /** URL for the Athena frontend app origin. Defaults to the matching Athena environment. */
     appUrl?: string;
+    /** Exact parent origins allowed to send embedded auth/config via postMessage. */
+    trustedParentOrigins?: string[];
     /** Athena environment preset used when URLs are not explicitly provided. */
     environment?: AthenaEnvironment;
 }
@@ -323,6 +352,38 @@ export declare interface AthenaRuntimeConfig {
     threadId?: string;
 }
 
+/**
+ * Organization membership returned by the SSO endpoint.
+ */
+export declare interface AthenaSSOOrgInfo {
+    orgId: string;
+    orgName: string;
+    urlSafeOrgName: string;
+}
+
+/**
+ * User data returned by the Athena SSO `/api/sso/userinfo` endpoint.
+ * Field names use snake_case to match the backend response format.
+ */
+export declare interface AthenaSSOUserData {
+    user_id: string;
+    email: string;
+    first_name: string;
+    last_name: string;
+    username: string;
+    picture_url: string;
+    properties: Record<string, unknown>;
+}
+
+/**
+ * Full response from the Athena SSO `/api/sso/userinfo` endpoint.
+ */
+export declare interface AthenaSSOUserInfo {
+    user: AthenaSSOUserData;
+    orgMemberInfos: AthenaSSOOrgInfo[];
+    accessToken: string;
+}
+
 /**
  * Athena SDK Theming System
  *
@@ -403,6 +464,19 @@ export declare interface AthenaTheme {
     threadMaxWidth?: string;
 }
 
+/**
+ * Athena user information — a simplified, PropelAuth-agnostic representation.
+ */
+export declare interface AthenaUser {
+    userId: string;
+    email: string;
+    firstName?: string;
+    lastName?: string;
+    username?: string;
+    pictureUrl?: string;
+    properties?: Record<string, unknown>;
+}
+
 export declare const AthenaUserMessage: FC<AthenaUserMessageProps>;
 
 export declare interface AthenaUserMessageProps {
@@ -563,6 +637,14 @@ export declare function normalizeResult(result: unknown): Record<string, unknown
 
 export declare const OpenAssetToolUI: ToolCallMessagePartComponent;
 
+declare interface ParentBridgeOptions {
+    /**
+     * Exact parent origins that are allowed to send auth/config via postMessage.
+     * Useful for private-cloud or custom-domain deployments.
+     */
+    trustedOrigins?: string[];
+}
+
 export declare interface ParentBridgeState {
     /** PropelAuth access token from the parent window. */
     token: string | null;
@@ -1110,7 +1192,7 @@ export declare function useParentAuth(): string | null;
  *   Parent -> iframe: { type: 'athena-auth', token: '<propel-access-token>' }
  *   iframe -> Parent: { type: 'athena-auth-ready' }
  */
-export declare function useParentBridge(): ParentBridgeState;
+export declare function useParentBridge({ trustedOrigins, }?: ParentBridgeOptions): ParentBridgeState;
 
 export declare function useQuote(): QuoteContextValue;
 

package/dist/index.js

@@ -4,6 +4,7 @@ var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "sy
 import { jsx, jsxs, Fragment as Fragment$2 } from "react/jsx-runtime";
 import * as React from "react";
 import React__default, { useMemo, useReducer, useLayoutEffect, useRef, useState, useContext, createContext, useSyncExternalStore, useDebugValue, useEffect, useCallback, memo, Fragment as Fragment$1, useId as useId$2, forwardRef, createRef, createElement, version as version$1, useImperativeHandle } from "react";
+import { A as AthenaAuthContext } from "./AthenaAuthContext-DQsdayH2.js";
 import * as ReactDOM from "react-dom";
 import ReactDOM__default, { flushSync } from "react-dom";
 function commitAllEffects(renderResult) {
@@ -16565,17 +16566,50 @@ function createAthenaSpacesUrl({
   }
   return url.toString();
 }
-function isTrustedOrigin(origin) {
+function isTrustedOrigin({
+  origin,
+  trustedOrigins
+}) {
   try {
-    const { hostname } = new URL(origin);
+    const normalizedOrigin = new URL(origin).origin;
+    if (trustedOrigins.includes(normalizedOrigin)) {
+      return true;
+    }
+    const { hostname } = new URL(normalizedOrigin);
     return hostname === "athenaintel.com" || hostname.endsWith(".athenaintel.com") || hostname === "localhost";
   } catch {
     return false;
   }
 }
 const BRIDGE_TIMEOUT_MS = 2e3;
-function useParentBridge() {
+const normalizeOrigin = (value) => {
+  try {
+    return new URL(value).origin;
+  } catch {
+    return null;
+  }
+};
+function useParentBridge({
+  trustedOrigins = []
+} = {}) {
   const isInIframe = typeof window !== "undefined" && window.parent !== window;
+  const runtimeTrustedOrigins = useMemo(() => {
+    const origins = /* @__PURE__ */ new Set();
+    if (typeof window !== "undefined") {
+      origins.add(window.location.origin);
+      const referrerOrigin = normalizeOrigin(document.referrer);
+      if (referrerOrigin) {
+        origins.add(referrerOrigin);
+      }
+    }
+    for (const trustedOrigin of trustedOrigins) {
+      const normalizedOrigin = normalizeOrigin(trustedOrigin);
+      if (normalizedOrigin) {
+        origins.add(normalizedOrigin);
+      }
+    }
+    return [...origins];
+  }, [trustedOrigins]);
   const [state, setState] = useState({
     token: null,
     apiUrl: null,
@@ -16589,7 +16623,9 @@ function useParentBridge() {
   useEffect(() => {
     if (!isInIframe) return;
     const handler = (event) => {
-      if (!isTrustedOrigin(event.origin)) return;
+      if (!isTrustedOrigin({ origin: event.origin, trustedOrigins: runtimeTrustedOrigins })) {
+        return;
+      }
       if (!event.data || typeof event.data !== "object") return;
       if (event.data.type === "athena-config") {
         configReceived.current = true;
@@ -16624,7 +16660,7 @@ function useParentBridge() {
       window.removeEventListener("message", handler);
       clearTimeout(timer);
     };
-  }, [isInIframe]);
+  }, [isInIframe, runtimeTrustedOrigins]);
   return state;
 }
 function useParentAuth() {
@@ -24972,8 +25008,13 @@ function AthenaProvider({
   const configuredApiUrl = (config2 == null ? void 0 : config2.apiUrl) ?? apiUrl;
   const configuredBackendUrl = (config2 == null ? void 0 : config2.backendUrl) ?? backendUrl;
   const configuredAppUrl = (config2 == null ? void 0 : config2.appUrl) ?? appUrl;
-  const bridge = useParentBridge();
-  const effectiveToken = configuredToken !== void 0 ? configuredToken : bridge.token;
+  const configuredTrustedParentOrigins = config2 == null ? void 0 : config2.trustedParentOrigins;
+  const bridge = useParentBridge({
+    trustedOrigins: configuredTrustedParentOrigins
+  });
+  const authContext = useContext(AthenaAuthContext);
+  const authProviderToken = (authContext == null ? void 0 : authContext.accessToken) ?? null;
+  const effectiveToken = configuredToken !== void 0 ? configuredToken : authProviderToken ?? bridge.token;
   const effectiveApiUrl = configuredApiUrl ?? bridge.apiUrl ?? environmentUrls.apiUrl;
   const effectiveBackendUrl = configuredBackendUrl ?? bridge.backendUrl ?? environmentUrls.backendUrl;
   const effectiveAppUrl = configuredAppUrl ?? bridge.appUrl ?? deriveAthenaAppUrl({ apiUrl: effectiveApiUrl, backendUrl: effectiveBackendUrl }) ?? environmentUrls.appUrl;
@@ -62356,7 +62397,9 @@ const TOOL_META = {
   create_email_draft: { displayName: "Drafting email", icon: Mail },
   unified_email_create_draft: { displayName: "Drafting email", icon: Mail },
   edit_email_draft: { displayName: "Editing email draft", icon: Mail },
-  unified_edit_email_draft: { displayName: "Editing email draft", icon: Mail },
+  unified_email_edit_draft: { displayName: "Editing email draft", icon: Mail },
+  unified_email_fetch_attachments: { displayName: "Fetching email attachments", icon: Mail },
+  unified_email_forward: { displayName: "Forwarding email", icon: Mail },
   // Documents
   read_full_asset: { displayName: "Reading document", icon: BookOpen },
   create_new_document: { displayName: "Creating document", icon: FileText },