@axiom-lattice/react-sdk 2.1.91 → 2.1.93

package/dist/index.d.mts

@@ -726,6 +726,8 @@ interface PersonalAssistantInfo {
     assistantId: string;
     projectId: string;
     workspaceId: string;
+    /** tenantId for debugging cross-tenant leakage */
+    tenantId?: string | null;
 }
 interface AuthContextValue {
     user: User | null;

package/dist/index.d.ts

@@ -726,6 +726,8 @@ interface PersonalAssistantInfo {
     assistantId: string;
     projectId: string;
     workspaceId: string;
+    /** tenantId for debugging cross-tenant leakage */
+    tenantId?: string | null;
 }
 interface AuthContextValue {
     user: User | null;

package/dist/index.js

@@ -164,18 +164,24 @@ var AuthProvider = ({
   const [personalAssistant, setPersonalAssistant] = (0, import_react.useState)(null);
   const [isLoading, setIsLoading] = (0, import_react.useState)(false);
   const [error, setError] = (0, import_react.useState)(null);
+  const getPAKey = (tenantId) => tenantId ? `lattice_personal_assistant_${tenantId}` : "lattice_personal_assistant";
+  const currentTenantRef = (0, import_react.useRef)(currentTenant);
+  currentTenantRef.current = currentTenant;
   (0, import_react.useEffect)(() => {
     const storedUser = sessionStorage.getItem("lattice_user");
     const storedTenants = sessionStorage.getItem("lattice_tenants");
     const storedCurrentTenant = sessionStorage.getItem("lattice_current_tenant");
-    const storedPA = sessionStorage.getItem("lattice_personal_assistant");
     if (storedUser) {
       try {
         const userData = JSON.parse(storedUser);
         setUser(userData);
         if (storedTenants) setTenants(JSON.parse(storedTenants));
-        if (storedCurrentTenant) setCurrentTenant(JSON.parse(storedCurrentTenant));
-        if (storedPA) setPersonalAssistant(JSON.parse(storedPA));
+        if (storedCurrentTenant) {
+          const ct = JSON.parse(storedCurrentTenant);
+          setCurrentTenant(ct);
+          const storedPA = sessionStorage.getItem(getPAKey(ct.id));
+          if (storedPA) setPersonalAssistant(JSON.parse(storedPA));
+        }
       } catch {
         sessionStorage.removeItem("lattice_user");
         sessionStorage.removeItem("lattice_tenants");
@@ -281,13 +287,18 @@ var AuthProvider = ({
       }
       const result = await response.json();
       const tenantData = result.data.tenant;
+      const oldTenantId = currentTenantRef.current?.id;
+      if (oldTenantId) {
+        sessionStorage.removeItem(getPAKey(oldTenantId));
+      }
       setCurrentTenant(tenantData);
       sessionStorage.setItem("lattice_current_tenant", JSON.stringify(tenantData));
       setPersonalAssistant(result.data.personalAssistant || null);
       if (result.data.personalAssistant) {
-        sessionStorage.setItem("lattice_personal_assistant", JSON.stringify(result.data.personalAssistant));
+        const paWithTenant = { ...result.data.personalAssistant, tenantId: tenantData.id };
+        sessionStorage.setItem(getPAKey(tenantData.id), JSON.stringify(paWithTenant));
       } else {
-        sessionStorage.removeItem("lattice_personal_assistant");
+        sessionStorage.removeItem(getPAKey(tenantData.id));
       }
       if (result.data.token) {
         sessionStorage.setItem("lattice_token", result.data.token);
@@ -411,9 +422,14 @@ var AuthProvider = ({
   }, [baseURL]);
   const wrappedSetPersonalAssistant = (0, import_react.useCallback)((info) => {
     setPersonalAssistant(info);
+    const tenantId = currentTenantRef.current?.id;
     if (info) {
-      sessionStorage.setItem("lattice_personal_assistant", JSON.stringify(info));
+      const paWithTenant = { ...info, tenantId: tenantId || info.tenantId };
+      sessionStorage.setItem(getPAKey(tenantId), JSON.stringify(paWithTenant));
     } else {
+      if (tenantId) {
+        sessionStorage.removeItem(getPAKey(tenantId));
+      }
       sessionStorage.removeItem("lattice_personal_assistant");
     }
   }, []);
@@ -30892,25 +30908,30 @@ var PersonalAssistantChannelModal = ({
   const [qrLoading, setQrLoading] = (0, import_react101.useState)(false);
   const [qrCodeUrl, setQrCodeUrl] = (0, import_react101.useState)(null);
   const [qrStatus, setQrStatus] = (0, import_react101.useState)("idle");
+  const [qrCountdown, setQrCountdown] = (0, import_react101.useState)(0);
   const qrCodeRef = (0, import_react101.useRef)(null);
-  const qrPollRef = (0, import_react101.useRef)(null);
-  const clearQrPoll = (0, import_react101.useCallback)(() => {
-    if (qrPollRef.current) {
-      clearInterval(qrPollRef.current);
-      qrPollRef.current = null;
+  const qrCountdownRef = (0, import_react101.useRef)(null);
+  const clearQrCountdown = (0, import_react101.useCallback)(() => {
+    if (qrCountdownRef.current) {
+      clearInterval(qrCountdownRef.current);
+      qrCountdownRef.current = null;
     }
   }, []);
   const resetQrState = (0, import_react101.useCallback)(() => {
-    clearQrPoll();
+    clearQrCountdown();
     setQrLoading(false);
     setQrCodeUrl(null);
     setQrStatus("idle");
+    setQrCountdown(0);
     qrCodeRef.current = null;
-  }, [clearQrPoll]);
+  }, [clearQrCountdown]);
+  const QR_EXPIRY_SECONDS = 300;
   const fetchQrCode = (0, import_react101.useCallback)(async () => {
     setQrLoading(true);
     setQrStatus("loading");
     setQrCodeUrl(null);
+    clearQrCountdown();
+    setQrCountdown(0);
     try {
       const res = await get(
         "/api/channels/wechat/setup/qrcode"
@@ -30919,32 +30940,17 @@ var PersonalAssistantChannelModal = ({
         qrCodeRef.current = res.data.qrcode;
         setQrCodeUrl(res.data.qrcodeImgUrl);
         setQrStatus("wait");
-        clearQrPoll();
-        qrPollRef.current = setInterval(async () => {
-          try {
-            const statusRes = await get(`/api/channels/wechat/setup/status?qrcode=${encodeURIComponent(qrCodeRef.current)}`);
-            if (statusRes.success && statusRes.data) {
-              const s = statusRes.data.status;
-              if (s === "confirmed" && statusRes.data.botToken) {
-                setQrStatus("confirmed");
-                clearQrPoll();
-                form.setFieldsValue({
-                  botToken: statusRes.data.botToken,
-                  uin: statusRes.data.uin
-                });
-                import_antd90.message.success("WeChat login confirmed!");
-              } else if (s === "expired") {
-                setQrStatus("expired");
-                clearQrPoll();
-              } else if (s === "scaned") {
-                setQrStatus("scaned");
-              } else if (s === "wait") {
-                setQrStatus("wait");
-              }
+        setQrCountdown(QR_EXPIRY_SECONDS);
+        qrCountdownRef.current = setInterval(() => {
+          setQrCountdown((prev) => {
+            if (prev <= 1) {
+              clearQrCountdown();
+              setQrStatus("expired");
+              return 0;
             }
-          } catch {
-          }
-        }, 2e3);
+            return prev - 1;
+          });
+        }, 1e3);
       } else {
         setQrStatus("error");
         import_antd90.message.error("Failed to get QR code");
@@ -30955,10 +30961,36 @@ var PersonalAssistantChannelModal = ({
     } finally {
       setQrLoading(false);
     }
-  }, [get, clearQrPoll, form]);
+  }, [get, clearQrCountdown]);
+  const checkQrStatus = (0, import_react101.useCallback)(async () => {
+    if (!qrCodeRef.current) return;
+    try {
+      const statusRes = await get(`/api/channels/wechat/setup/status?qrcode=${encodeURIComponent(qrCodeRef.current)}`);
+      if (statusRes.success && statusRes.data) {
+        const s = statusRes.data.status;
+        if (s === "confirmed" && statusRes.data.botToken) {
+          setQrStatus("confirmed");
+          clearQrCountdown();
+          form.setFieldsValue({
+            botToken: statusRes.data.botToken,
+            uin: statusRes.data.uin
+          });
+          import_antd90.message.success("WeChat login confirmed!");
+        } else if (s === "expired") {
+          setQrStatus("expired");
+          clearQrCountdown();
+          setQrCountdown(0);
+        } else if (s === "scaned") {
+          setQrStatus("scaned");
+        }
+      }
+    } catch {
+      import_antd90.message.error("Failed to check QR status");
+    }
+  }, [get, clearQrCountdown, form]);
   (0, import_react101.useEffect)(() => {
     return () => {
-      if (qrPollRef.current) clearInterval(qrPollRef.current);
+      if (qrCountdownRef.current) clearInterval(qrCountdownRef.current);
     };
   }, []);
   const loadInstallations = (0, import_react101.useCallback)(async () => {
@@ -31336,7 +31368,7 @@ var PersonalAssistantChannelModal = ({
                   /* @__PURE__ */ (0, import_jsx_runtime118.jsx)(import_antd90.Spin, {}),
                   /* @__PURE__ */ (0, import_jsx_runtime118.jsx)(Text48, { type: "secondary", style: { display: "block", marginTop: 8, fontSize: 12 }, children: "Generating QR code..." })
                 ] }),
-                (qrStatus === "wait" || qrStatus === "scaned") && qrCodeUrl && /* @__PURE__ */ (0, import_jsx_runtime118.jsxs)("div", { children: [
+                (qrStatus === "wait" || qrStatus === "scaned") && qrCodeUrl && /* @__PURE__ */ (0, import_jsx_runtime118.jsxs)("div", { style: { display: "flex", flexDirection: "column", alignItems: "center" }, children: [
                   /* @__PURE__ */ (0, import_jsx_runtime118.jsx)(import_antd90.QRCode, { value: qrCodeUrl, size: 180 }),
                   /* @__PURE__ */ (0, import_jsx_runtime118.jsx)(
                     Text48,
@@ -31351,7 +31383,16 @@ var PersonalAssistantChannelModal = ({
                       children: qrStatus === "scaned" ? "Scanned! Confirm on your phone..." : "Scan with WeChat"
                     }
                   ),
-                  /* @__PURE__ */ (0, import_jsx_runtime118.jsx)(Text48, { type: "secondary", style: { fontSize: 11, marginTop: 4, display: "block" }, children: "QR expires in 5 minutes" })
+                  /* @__PURE__ */ (0, import_jsx_runtime118.jsx)(Text48, { type: "secondary", style: { fontSize: 11, marginTop: 4, display: "block" }, children: qrCountdown > 0 ? `Expires in ${Math.floor(qrCountdown / 60)}:${String(qrCountdown % 60).padStart(2, "0")}` : "QR code expired" }),
+                  /* @__PURE__ */ (0, import_jsx_runtime118.jsx)(
+                    import_antd90.Button,
+                    {
+                      size: "small",
+                      style: { marginTop: 8 },
+                      onClick: checkQrStatus,
+                      children: "Refresh Status"
+                    }
+                  )
                 ] }),
                 qrStatus === "confirmed" && /* @__PURE__ */ (0, import_jsx_runtime118.jsxs)("div", { style: { padding: "12px 0" }, children: [
                   /* @__PURE__ */ (0, import_jsx_runtime118.jsx)(Text48, { strong: true, style: { fontSize: 14, color: "var(--color-success, #22c55e)", display: "block" }, children: "Login confirmed!" }),
@@ -31599,7 +31640,7 @@ var PERSONALITY_MAP = {
 var PersonalAssistantPage = () => {
   const { styles } = useStyles20();
   const { get, post, del } = useApi();
-  const { personalAssistant, setPersonalAssistant } = useAuth();
+  const { personalAssistant, setPersonalAssistant, currentTenant } = useAuth();
   const auth = useAuthOptional();
   const userName = auth?.user?.name || auth?.user?.email?.split("@")[0];
   const [creating, setCreating] = (0, import_react102.useState)(false);
@@ -31626,7 +31667,7 @@ var PersonalAssistantPage = () => {
         import_antd91.message.error(b.message);
         return;
       }
-      const info = { assistantId: b.data.id, projectId: b.data.projectId, workspaceId: b.data.workspaceId || "default" };
+      const info = { assistantId: b.data.id, projectId: b.data.projectId, workspaceId: b.data.workspaceId || "default", tenantId: currentTenant?.id };
       setPersonalAssistant(info);
       import_antd91.message.success("Done!");
     } catch {