@thoughtspot/visual-embed-sdk 1.53.1 → 1.53.2-beta

package/dist/tsembed.js

@@ -1,4 +1,4 @@
-/* @thoughtspot/visual-embed-sdk version 1.53.1 */
+/* @thoughtspot/visual-embed-sdk version 1.53.2-beta */
 'use client';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -477,6 +477,7 @@
          * })
          * ```
          * @returns isLoggedIn - A Boolean specifying whether authentication was successful.
+         * Payload: {@link AuthInitPayload}.
          */
         EmbedEvent["AuthInit"] = "authInit";
         /**
@@ -496,6 +497,7 @@
         /**
          * Data pertaining to an Answer, Liveboard or Spotter visualization is received.
          * The event payload includes the raw data of the object.
+         * Payload: {@link DataEventPayload}.
          * @return data -  Answer of Liveboard data
          * @version SDK: 1.1.0 | ThoughtSpot: ts7.may.cl, 8.4.1.sw
          * @example
@@ -509,6 +511,7 @@
         EmbedEvent["Data"] = "data";
         /**
          * Search query has been updated by the user.
+         * Payload: {@link QueryChangedPayload} or a string.
          * @version SDK: 1.4.0 | ThoughtSpot: ts7.sep.cl, 8.4.1.sw
          * @example
          * ```js
@@ -551,6 +554,7 @@
          *     })
          * })
          * ```
+         * Payload: {@link DrilldownPayload}.
          */
         EmbedEvent["Drilldown"] = "drillDown";
         /**
@@ -563,6 +567,7 @@
          *    console.log('DataSourceSelected', payload);
          * })
          * ```
+         * Payload: {@link DataSourceSelectedPayload} or string[].
          */
         EmbedEvent["DataSourceSelected"] = "dataSourceSelected";
         /**
@@ -575,6 +580,7 @@
          *   console.log('AddRemoveColumns', payload);
          * })
          * ```
+         * Payload: string[].
          */
         EmbedEvent["AddRemoveColumns"] = "addRemoveColumns";
         /**
@@ -592,6 +598,7 @@
          *     }
          * })
          * ```
+         * Payload: {@link CustomActionPayload} (on() enriches it to {@link CustomActionEventPayload}).
          */
         EmbedEvent["CustomAction"] = "customAction";
         /**
@@ -604,6 +611,7 @@
          *      console.log('VizPointDoubleClick', payload);
          * })
          * ```
+         * Payload: {@link VizInteractionPayload}.
          */
         EmbedEvent["VizPointDoubleClick"] = "vizPointDoubleClick";
         /**
@@ -623,6 +631,7 @@
          *   )
          * });
          * ```
+         * Payload: {@link VizInteractionPayload}.
          */
         EmbedEvent["VizPointClick"] = "vizPointClick";
         /**
@@ -675,6 +684,7 @@
          *   // { errorType: "API", message: '...', code: '...' }
          * });
          * ```
+         * Payload: {@link EmbedErrorPayload} or a string.
          */
         EmbedEvent["Error"] = "Error";
         /**
@@ -725,6 +735,7 @@
          * The center of visible iframe viewport is calculated.
          * @returns data - The center of the visible Iframe viewport.
          * @hidden
+         * Payload: none.
          */
         EmbedEvent["EmbedIframeCenter"] = "EmbedIframeCenter";
         /**
@@ -781,6 +792,7 @@
          *    console.log('dialog open', payload);
          *  })
          * ```
+         * Payload: none.
          */
         EmbedEvent["DialogOpen"] = "dialog-open";
         /**
@@ -792,6 +804,7 @@
          *     console.log('dialog close', payload);
          * })
          * ```
+         * Payload: none.
          */
         EmbedEvent["DialogClose"] = "dialog-close";
         /**
@@ -814,6 +827,7 @@
          * embed.trigger(HostEvent.SetVisibleVizs, ['viz1', 'viz2']);
          * };
          * ```
+         * Payload: none.
          */
         EmbedEvent["LiveboardRendered"] = "PinboardRendered";
         /**
@@ -844,6 +858,7 @@
          *    console.log('Save', payload)
          * })
          * ```
+         * Payload: {@link SaveEventPayload}.
          */
         EmbedEvent["Save"] = "save";
         /**
@@ -860,6 +875,7 @@
          * vizId: '730496d6-6903-4601-937e-2c691821af3c'
          * })
          * ```
+         * Payload: {@link VizScope}.
          */
         EmbedEvent["Download"] = "download";
         /**
@@ -879,6 +895,7 @@
          * searchEmbed.on(EmbedEvent.DownloadAsPng, payload => {
          *   console.log('download PNG', payload)})
          * ```
+         * Payload: {@link DownloadEventPayload}.
          */
         EmbedEvent["DownloadAsPng"] = "downloadAsPng";
         /**
@@ -898,6 +915,7 @@
          * searchEmbed.on(EmbedEvent.DownloadAsPdf, payload => {
          *   console.log('download PDF', payload)})
          * ```
+         * Payload: {@link DownloadEventPayload}.
          */
         EmbedEvent["DownloadAsPdf"] = "downloadAsPdf";
         /**
@@ -917,6 +935,7 @@
          * searchEmbed.on(EmbedEvent.DownloadAsCsv, payload => {
          *    console.log('download CSV', payload)})
          * ```
+         * Payload: {@link DownloadEventPayload}.
          */
         EmbedEvent["DownloadAsCsv"] = "downloadAsCsv";
         /**
@@ -936,6 +955,7 @@
          * searchEmbed.on(EmbedEvent.DownloadAsXlsx, payload => {
          *   console.log('download Xlsx', payload)})
          * ```
+         * Payload: {@link DownloadEventPayload}.
          */
         EmbedEvent["DownloadAsXlsx"] = "downloadAsXlsx";
         /**
@@ -947,6 +967,7 @@
          * liveboardEmbed.on(EmbedEvent.DownloadLiveboardAsContinuousPDF, payload => {
          *   console.log('download liveboard as continuous PDF', payload)})
          * ```
+         * Payload: {@link LiveboardScope}.
          */
         EmbedEvent["DownloadLiveboardAsContinuousPDF"] = "downloadLiveboardAsContinuousPDF";
         /**
@@ -963,6 +984,7 @@
          * appEmbed.on(EmbedEvent.AnswerDelete, payload => {
          *    console.log('delete answer', payload)})
          * ```
+         * Payload: {@link AnswerScope}.
          */
         EmbedEvent["AnswerDelete"] = "answerDelete";
         /**
@@ -974,6 +996,7 @@
          *   console.log('AI Highlights', payload);
          * })
          * ```
+         * Payload: {@link LiveboardScope}.
          */
         EmbedEvent["AIHighlights"] = "AIHighlights";
         /**
@@ -995,6 +1018,7 @@
          *    console.log('pin', payload)
          * })
          * ```
+         * Payload: {@link PinEventPayload}.
          */
         EmbedEvent["Pin"] = "pin";
         /**
@@ -1013,6 +1037,7 @@
          *   console.log('SpotIQ analyze', payload)
          * })
          * ```
+         * Payload: {@link AnswerScope}.
          */
         EmbedEvent["SpotIQAnalyze"] = "spotIQAnalyze";
         /**
@@ -1066,6 +1091,7 @@
          *    console.log('copy to clipboard', payload);
          * })
          * ```
+         * Payload: {@link CopyToClipboardPayload}.
          */
         EmbedEvent["CopyToClipboard"] = "context-menu-item-copy-to-clipboard";
         /**
@@ -1077,6 +1103,7 @@
          * liveboardEmbed.on(EmbedEvent.UpdateTML)
          * })
          * ```
+         * Payload: {@link TmlEventPayload}.
          */
         EmbedEvent["UpdateTML"] = "updateTSL";
         /**
@@ -1089,6 +1116,7 @@
          *    console.log('Edit TML', payload);
          * })
          * ```
+         * Payload: {@link TmlEventPayload}.
          */
         EmbedEvent["EditTML"] = "editTSL";
         /**
@@ -1106,6 +1134,7 @@
          * searchEmbed.on(EmbedEvent.ExportTML, payload => {
          *     console.log('Export TML', payload)})
          * ```
+         * Payload: {@link TmlEventPayload}.
          */
         EmbedEvent["ExportTML"] = "exportTSL";
         /**
@@ -1144,6 +1173,7 @@
          *    console.log('show data', payload);
          * })
          * ```
+         * Payload: {@link AnswerScope}.
          */
         EmbedEvent["ShowUnderlyingData"] = "showUnderlyingData";
         /**
@@ -1155,6 +1185,7 @@
          *    console.log('switch view', payload);
          * })
          * ```
+         * Payload: {@link AnswerChartSwitcherPayload}.
          */
         EmbedEvent["AnswerChartSwitcher"] = "answerChartSwitcher";
         /**
@@ -1176,6 +1207,7 @@
          *    console.log('Liveboard details', payload);
          * })
          * ```
+         * Payload: {@link LiveboardScope}.
          */
         EmbedEvent["LiveboardInfo"] = "pinboardInfo";
         /**
@@ -1187,6 +1219,7 @@
          *    console.log('favorites', payload);
          * })
          * ```
+         * Payload: {@link FavoritePayload}.
          */
         EmbedEvent["AddToFavorites"] = "addToFavorites";
         /**
@@ -1198,6 +1231,7 @@
          *    console.log('Liveboard schedule', payload);
          * })
          * ```
+         * Payload: {@link LiveboardScope}.
          */
         EmbedEvent["Schedule"] = "subscription";
         /**
@@ -1212,6 +1246,7 @@
          *    console.log('Liveboard edit', payload);
          * })
          * ```
+         * Payload: {@link LiveboardVizScope}.
          */
         EmbedEvent["Edit"] = "edit";
         /**
@@ -1253,6 +1288,7 @@
          *    console.log('Copy', payload);
          * })
          * ```
+         * Payload: {@link MakeACopyPayload}.
          */
         EmbedEvent["MakeACopy"] = "makeACopy";
         /**
@@ -1268,6 +1304,7 @@
          *   vizId: '730496d6-6903-4601-937e-2c691821af3c'})
          * })
          * ```
+         * Payload: {@link LiveboardVizScope}.
          */
         EmbedEvent["Present"] = "present";
         /**
@@ -1278,6 +1315,7 @@
          * liveboardEmbed.on(EmbedEvent.Delete,
          *   {vizId: '730496d6-6903-4601-937e-2c691821af3c'})
          * ```
+         * Payload: {@link LiveboardScope}.
          */
         EmbedEvent["Delete"] = "delete";
         /**
@@ -1287,6 +1325,7 @@
          * ```js
          * liveboardEmbed.on(EmbedEvent.SchedulesList)
          * ```
+         * Payload: {@link LiveboardScope}.
          */
         EmbedEvent["SchedulesList"] = "schedule-list";
         /**
@@ -1296,6 +1335,7 @@
          * ```js
          * liveboardEmbed.on(EmbedEvent.Cancel)
          * ```
+         * Payload: {@link LiveboardScope}.
          */
         EmbedEvent["Cancel"] = "cancel";
         /**
@@ -1306,6 +1346,7 @@
          * liveboardEmbed.on(EmbedEvent.Explore,  {
          *   vizId: '730496d6-6903-4601-937e-2c691821af3c'})
          * ```
+         * Payload: {@link LiveboardVizScope}.
          */
         EmbedEvent["Explore"] = "explore";
         /**
@@ -1316,6 +1357,7 @@
          * liveboardEmbed.on(EmbedEvent.CopyLink, {
          *   vizId: '730496d6-6903-4601-937e-2c691821af3c'})
          * ```
+         * Payload: {@link CopyLinkPayload}.
          */
         EmbedEvent["CopyLink"] = "embedDocument";
         /**
@@ -1327,6 +1369,7 @@
          * liveboardEmbed.on(EmbedEvent.CrossFilterChanged, {
          *    vizId: '730496d6-6903-4601-937e-2c691821af3c'})
          * ```
+         * Payload: {@link CrossFilterChangedPayload}.
          */
         EmbedEvent["CrossFilterChanged"] = "cross-filter-changed";
         /**
@@ -1338,6 +1381,7 @@
          *    console.log('VizPointClick', payload)
          * })
          * ```
+         * Payload: {@link VizInteractionPayload}.
          */
         EmbedEvent["VizPointRightClick"] = "vizPointRightClick";
         /**
@@ -1365,6 +1409,7 @@
          * })
          * ```
          * @version SDK: 1.23.0 | ThoughtSpot: 9.4.0.cl, 9.5.0.sw
+         * Payload: {@link FilterChangedPayload}.
          */
         EmbedEvent["FilterChanged"] = "filterChanged";
         /**
@@ -1387,6 +1432,7 @@
          * @returns isPublic: boolean
          * @version SDK: 1.26.0 | ThoughtSpot: 9.7.0.cl, 9.8.0.sw
          * @deprecated SDK: 1.48.0 | ThoughtSpot: 26.5.0.cl
+         * Payload: {@link PersonalisedViewPayload}.
          */
         EmbedEvent["UpdatePersonalisedView"] = "updatePersonalisedView";
         /**
@@ -1408,6 +1454,7 @@
          * @returns isPublic: boolean
          * @version SDK: 1.26.0 | ThoughtSpot: 9.7.0.cl, 9.8.0.sw
          * @deprecated SDK: 1.48.0 | ThoughtSpot: 26.5.0.cl
+         * Payload: {@link PersonalisedViewPayload}.
          */
         EmbedEvent["SavePersonalisedView"] = "savePersonalisedView";
         /**
@@ -1482,6 +1529,7 @@
         /**
          * Emitted when a Liveboard or visualization is renamed.
          * @version SDK: 1.28.0 | ThoughtSpot: 9.10.5.cl, 10.1.0.sw
+         * Payload: {@link RenamePayload}.
          */
         EmbedEvent["Rename"] = "rename";
         /**
@@ -1567,6 +1615,7 @@
          * })
          * ```
          * @version SDK: 1.29.0 | ThoughtSpot: 10.3.0.cl
+         * Payload: {@link ParameterChangedPayload}.
          */
         EmbedEvent["ParameterChanged"] = "parameterChanged";
         /**
@@ -1610,6 +1659,7 @@
          * })
          * ```
          * @version SDK: 1.37.0 | ThoughtSpot: 10.8.0.cl
+         * Payload: {@link TableVizRenderedPayload}.
          */
         EmbedEvent["TableVizRendered"] = "TableVizRendered";
         /**
@@ -1634,12 +1684,14 @@
          * @hidden
          * Emitted when a user exits present mode.
          * @version SDK: 1.40.0 | ThoughtSpot: 10.11.0.cl
+         * Payload: {@link ExitPresentModePayload}.
          */
         EmbedEvent["ExitPresentMode"] = "exitPresentMode";
         /**
          * Emitted when a user requests the full height lazy load data.
          * @version SDK: 1.39.0 | ThoughtSpot: 10.10.0.cl
          * @hidden
+         * Payload: none.
          */
         EmbedEvent["RequestVisibleEmbedCoordinates"] = "requestVisibleEmbedCoordinates";
         /**
@@ -1673,6 +1725,7 @@
          * })
          * ```
          * @version SDK: 1.45.0 | ThoughtSpot: 26.2.0.cl
+         * Payload: {@link VizScope}.
          */
         EmbedEvent["AddToCoaching"] = "addToCoaching";
         /**
@@ -1762,6 +1815,7 @@
          *     console.log('EmbedListenerReady');
          * })
          * ```
+         * Payload: none.
          */
         EmbedEvent["EmbedListenerReady"] = "EmbedListenerReady";
         /**
@@ -2136,6 +2190,7 @@
          * })
          * ```
          * @version SDK: 1.48.0 | ThoughtSpot Cloud: 26.5.0.cl
+         * Payload: {@link TestScheduleEmailPayload}.
          */
         EmbedEvent["SendTestScheduleEmail"] = "sendTestScheduleEmail";
         /**
@@ -2647,6 +2702,19 @@
          * ```
          */
         HostEvent["OpenAddParameterModal"] = "openAddParameterModal";
+        /**
+         * Add a tab to the Liveboard, the same action as the *Tab* option in the
+         * *Add* dropdown in the Liveboard edit header.
+         *
+         * The Liveboard must be in edit mode; the event is ignored otherwise.
+         *
+         * @version SDK: 1.56.0 | ThoughtSpot Cloud: 27.1.0.cl
+         * @example
+         * ```js
+         * liveboardEmbed.trigger(HostEvent.OpenAddTabModal);
+         * ```
+         */
+        HostEvent["OpenAddTabModal"] = "openAddTabModal";
         /**
          * Open the parameter panel for a particular parameter on a Liveboard.
          * Mirrors {@link HostEvent.OpenFilter} for parameters.
@@ -4866,6 +4934,7 @@
          * @version SDK: 1.52.2 | ThoughtSpot Cloud: 26.9.0.cl
          */
         Param["TsmcpAnswerIndex"] = "tsmcpAnswerIndex";
+        Param["IsMcpAnswerEmbed"] = "isMcpAnswerEmbed";
         Param["EmbedApp"] = "embedApp";
         Param["DataSources"] = "dataSources";
         Param["DataSourceMode"] = "dataSourceMode";
@@ -5068,6 +5137,21 @@
     exports.Action = void 0;
     (function (Action) {
         /**
+         * The **Add** button on a Liveboard in edit mode.
+         * Controls the visibility and disabled state of the Add panel button
+         * in the Liveboard edit toolbar, which allows users to add
+         * visualizations, filters, parameters, and tabs.
+         * @example
+         * ```js
+         * hiddenActions: [Action.LiveboardAddPanel]
+         * // or
+         * disabledActions: [Action.LiveboardAddPanel]
+         * ```
+         * @version SDK: 1.56.0 | ThoughtSpot Cloud: 27.1.0.cl
+         */
+        Action["LiveboardAddPanel"] = "liveboardAddPanel";
+        /**
+         *
          * The **Save** action on an Answer or Liveboard.
          * Allows users to save the changes.
          * @example
@@ -7321,6 +7405,102 @@
          * ```
          */
         Action["Cancel"] = "cancel";
+        /**
+         * Controls the visibility and disabled state of the "Version history" menu item for a Liveboard or Answer.
+         * @version SDK: 1.54.0 | ThoughtSpot Cloud: 9.8.0.cl
+         * @example
+         * ```js
+         * {
+         *     hiddenActions: [Action.ShowVersionHistory],
+         *     disabledActions: [Action.ShowVersionHistory],
+         * }
+         * ```
+         */
+        Action["ShowVersionHistory"] = "showVersionHistory";
+        /**
+         * Controls the visibility and disabled state of the "Enable version control" menu item for a Liveboard or Answer.
+         * @version SDK: 1.54.0 | ThoughtSpot Cloud: 9.10.0.cl
+         * @example
+         * ```js
+         * {
+         *     hiddenActions: [Action.EnableVersionControl],
+         *     disabledActions: [Action.EnableVersionControl],
+         * }
+         * ```
+         */
+        Action["EnableVersionControl"] = "enableVersionControl";
+        /**
+         * Controls the visibility and disabled state of the "Disable version control" menu item for a Liveboard or Answer.
+         * @version SDK: 1.54.0 | ThoughtSpot Cloud: 9.10.0.cl
+         * @example
+         * ```js
+         * {
+         *     hiddenActions: [Action.DisableVersionControl],
+         *     disabledActions: [Action.DisableVersionControl],
+         * }
+         * ```
+         */
+        Action["DisableVersionControl"] = "disableVersionControl";
+        /**
+         * Controls the visibility and disabled state of the "Withdraw verification" menu item for a verified Liveboard.
+         * @version SDK: 1.54.0 | ThoughtSpot Cloud: 9.8.0.cl
+         * @example
+         * ```js
+         * {
+         *     hiddenActions: [Action.WithdrawVerification],
+         *     disabledActions: [Action.WithdrawVerification],
+         * }
+         * ```
+         */
+        Action["WithdrawVerification"] = "withdrawVerification";
+        /**
+         * Controls the visibility and disabled state of the "Switch to new chart experience" menu item on an Answer.
+         * @version SDK: 1.54.0 | ThoughtSpot Cloud: 10.10.0.cl
+         * @example
+         * ```js
+         * {
+         *     hiddenActions: [Action.SwitchToNewChartExperience],
+         *     disabledActions: [Action.SwitchToNewChartExperience],
+         * }
+         * ```
+         */
+        Action["SwitchToNewChartExperience"] = "switchToNewChartExperience";
+        /**
+         * Controls the visibility and disabled state of the "Switch to classic chart experience" menu item on an Answer.
+         * @version SDK: 1.54.0 | ThoughtSpot Cloud: 10.10.0.cl
+         * @example
+         * ```js
+         * {
+         *     hiddenActions: [Action.SwitchToClassicChartExperience],
+         *     disabledActions: [Action.SwitchToClassicChartExperience],
+         * }
+         * ```
+         */
+        Action["SwitchToClassicChartExperience"] = "switchToClassicChartExperience";
+        /**
+         * Controls the visibility and disabled state of the "Monitor" menu item on an Answer, which includes the alert options.
+         * @version SDK: 1.54.0 | ThoughtSpot Cloud: 10.5.0.cl
+         * @example
+         * ```js
+         * {
+         *     hiddenActions: [Action.Monitor],
+         *     disabledActions: [Action.Monitor],
+         * }
+         * ```
+         */
+        Action["Monitor"] = "monitor";
+        /**
+         * Controls the visibility and disabled state of the "View explanation" button in the footer of a Spotter answer, which opens the explanation and verification details.
+         * @version SDK: 1.54.0 | ThoughtSpot Cloud: 26.11.0.cl
+         * @example
+         * ```js
+         * {
+         *     hiddenActions: [Action.SpotterViewExplanation],
+         *     disabledActions: [Action.SpotterViewExplanation],
+         * }
+         * ```
+         */
+        Action["SpotterViewExplanation"] = "spotterViewExplanation";
     })(exports.Action || (exports.Action = {}));
     exports.PrefetchFeatures = void 0;
     (function (PrefetchFeatures) {
@@ -7825,7 +8005,7 @@
         TableContentDensity["Compact"] = "COMPACT";
     })(exports.TableContentDensity || (exports.TableContentDensity = {}));
 
-    var version$1="1.53.1";var pkg = {version:version$1};
+    var version$1="1.53.2-beta";var pkg = {version:version$1};
 
     const { version } = pkg;
 
@@ -21096,11 +21276,13 @@ mutation GetUnsavedAnswerTML($session: BachSessionIdInput!, $exportDependencies:
      * @param ssoURL
      * @param triggerContainer
      * @param triggerText
+     * @param thoughtSpotHost
      */
-    async function samlPopupFlow(ssoURL, triggerContainer, triggerText) {
+    async function samlPopupFlow(ssoURL, triggerContainer, triggerText, thoughtSpotHost) {
+        const thoughtSpotOrigin = new URL(thoughtSpotHost).origin;
         let popupClosedCheck;
         const openPopup = () => {
-            if (samlAuthWindow === null || samlAuthWindow.closed) {
+            if (!samlAuthWindow || samlAuthWindow.closed) {
                 samlAuthWindow = window.open(ssoURL, '_blank', 'location=no,height=570,width=520,scrollbars=yes,status=yes');
                 if (samlAuthWindow) {
                     popupClosedCheck = setInterval(() => {
@@ -21128,7 +21310,14 @@ mutation GetUnsavedAnswerTML($session: BachSessionIdInput!, $exportDependencies:
         }
         samlCompletionPromise = samlCompletionPromise || new Promise((resolve, reject) => {
             window.addEventListener('message', (e) => {
-                if (e.data.type === exports.EmbedEvent.SAMLComplete) {
+                var _a;
+                // Only the SSO popup we opened, on the ThoughtSpot origin, may
+                // complete the flow or hand us a token; anything else could
+                // inject an attacker's token into the auth cache.
+                if (e.origin !== thoughtSpotOrigin || !samlAuthWindow || e.source !== samlAuthWindow) {
+                    return;
+                }
+                if (((_a = e.data) === null || _a === void 0 ? void 0 : _a.type) === exports.EmbedEvent.SAMLComplete) {
                     if (e.data.accessToken) {
                         const decodedToken = decodeURIComponent(e.data.accessToken);
                         storeAuthTokenInCache(decodedToken);
@@ -21169,7 +21358,7 @@ mutation GetUnsavedAnswerTML($session: BachSessionIdInput!, $exportDependencies:
         }
         const ssoURL = `${thoughtSpotHost}${ssoEndPoint}`;
         if (embedConfig.inPopup) {
-            await samlPopupFlow(ssoURL, embedConfig.authTriggerContainer, embedConfig.authTriggerText);
+            await samlPopupFlow(ssoURL, embedConfig.authTriggerContainer, embedConfig.authTriggerText, thoughtSpotHost);
             const cachedToken = getCacheAuthToken();
             if (cachedToken) {
                 loggedInStatus = true;
@@ -21181,12 +21370,22 @@ mutation GetUnsavedAnswerTML($session: BachSessionIdInput!, $exportDependencies:
         }
         window.location.href = ssoURL;
     };
+    /**
+     * The popup's SSO completion page. hostAppOrigin tells ThoughtSpot which
+     * origin opened the popup; the cluster only posts a token back to it if it
+     * is an allowed redirect domain.
+     * @param thoughtSpotHost
+     */
+    const getSSOCompletePageUrl = (thoughtSpotHost) => {
+        const hostAppOrigin = encodeURIComponent(window.location.origin);
+        return `${thoughtSpotHost}/v2/#/embed/saml-complete?hostAppOrigin=${hostAppOrigin}`;
+    };
     const doSamlAuth = async (embedConfig) => {
         const { thoughtSpotHost } = embedConfig;
         // redirect for SSO, when the SSO authentication is done, this page will be
         // loaded again and the same JS will execute again.
         const ssoRedirectUrl = embedConfig.inPopup
-            ? `${thoughtSpotHost}/v2/#/embed/saml-complete`
+            ? getSSOCompletePageUrl(thoughtSpotHost)
             : getRedirectUrl(window.location.href, SSO_REDIRECTION_MARKER_GUID, embedConfig.redirectPath);
         // bring back the page to the same URL
         const ssoEndPoint = `${EndPoints.SAML_LOGIN_TEMPLATE(encodeURIComponent(ssoRedirectUrl))}`;
@@ -21198,7 +21397,7 @@ mutation GetUnsavedAnswerTML($session: BachSessionIdInput!, $exportDependencies:
         // redirect for SSO, when the SSO authentication is done, this page will be
         // loaded again and the same JS will execute again.
         const ssoRedirectUrl = embedConfig.noRedirect || embedConfig.inPopup
-            ? `${thoughtSpotHost}/v2/#/embed/saml-complete`
+            ? getSSOCompletePageUrl(thoughtSpotHost)
             : getRedirectUrl(window.location.href, SSO_REDIRECTION_MARKER_GUID, embedConfig.redirectPath);
         // bring back the page to the same URL
         const baseEndpoint = `${EndPoints.OIDC_LOGIN_TEMPLATE(encodeURIComponent(ssoRedirectUrl))}`;
@@ -27460,6 +27659,27 @@ query GetEurekaResults($params: Input_eureka_SearchRequest) {
      */
     const CONVERSATION_SERVICE_PATH = '/conversation/v2';
     const DEFAULT_STALE_ANSWER_NOTICE = 'This data may have changed since the last time you had a chat.';
+    /**
+     * Actions hidden by default on Answers rendered by the ThoughtSpot MCP server
+     * (iframes carrying the `tsmcp=true` marker). Applied automatically by
+     * {@link AutoFrameRenderer} so the auto-rendered answer exposes a curated set of
+     * controls: Pin/Save/Download at the top level, Aggregate/Filter/Sort/Position in
+     * the column menu, and Exclude/Only include/Drill down/Show underlying data in the
+     * axis menu remain visible, while the actions below are removed.
+     *
+     * This is a denylist merged into {@link Param.HideActions}; anything not listed
+     * here stays visible. It is skipped when the caller supplies a `visibleActions`
+     * allowlist (see {@link AutoFrameRenderer.getEmbedParamsObject}).
+     */
+    const HiddenActionItemByDefaultForMCPAnswers = [
+        exports.Action.Edit,
+        exports.Action.InConversationTraining,
+        exports.Action.AxisMenuConditionalFormat,
+        exports.Action.AxisMenuRename,
+        exports.Action.AxisMenuEdit,
+        exports.Action.AxisMenuRemove,
+        exports.Action.MakeACopy,
+    ];
     /**
      * Starts an automatic renderer that watches the DOM for iframes containing
      * the `tsmcp=true` query parameter and replaces them with fully configured
@@ -27627,6 +27847,36 @@ query GetEurekaResults($params: Input_eureka_SearchRequest) {
         request.then(release, release);
         return request;
     }
+    /**
+     * Normalizes a `hideAction` value into an array of action ids. The SDK-side value
+     * is already an `Action[]`; a value coming off the source iframe URL is a string
+     * that may be a JSON array (`["edit","save"]`) or a comma-separated list.
+     */
+    function parseHideActions(value) {
+        if (Array.isArray(value)) {
+            return value;
+        }
+        if (typeof value !== 'string' || value === '') {
+            return [];
+        }
+        try {
+            const parsed = JSON.parse(value);
+            if (Array.isArray(parsed)) {
+                return parsed.map(String);
+            }
+        }
+        catch (e) {
+            // Not JSON — fall back to a comma-separated list.
+        }
+        return value.split(',').map((s) => s.trim()).filter(Boolean);
+    }
+    /**
+     * Unions two `hideAction` values (SDK-computed and source-iframe) into a single
+     * de-duplicated array of action ids.
+     */
+    function unionHideActions(sdkValue, sourceValue) {
+        return Array.from(new Set([...parseHideActions(sdkValue), ...parseHideActions(sourceValue)]));
+    }
     function isTSMCPIframe(iframe) {
         try {
             const url = new URL(iframe.src);
@@ -27653,11 +27903,41 @@ query GetEurekaResults($params: Input_eureka_SearchRequest) {
             super(container, viewConfig);
             this.viewConfig = viewConfig;
         }
+        /**
+         * Extends the base embed params with the curated MCP-answer denylist
+         * ({@link HiddenActionItemByDefaultForMCPAnswers}) and a marker letting
+         * the ThoughtSpot app detect this answer was rendered via the MCP
+         * auto-frame-renderer ({@link Param.IsMcpAnswerEmbed}).
+         *
+         * Precedence — merge, allowlist wins:
+         * - When the caller supplies a `visibleActions` allowlist, the base already
+         *   set {@link Param.VisibleActions}; the denylist is skipped so the allowlist
+         *   fully controls visibility.
+         * - Otherwise the denylist is unioned onto {@link Param.HideActions}, which the
+         *   base has already populated with the default hidden actions plus any
+         *   caller-supplied `hiddenActions`.
+         */
+        getEmbedParamsObject() {
+            const queryParams = super.getEmbedParamsObject();
+            if (!queryParams[Param.VisibleActions]) {
+                // `additionalFlags` can override this with a non-array value, so
+                // normalize it rather than spreading it directly.
+                queryParams[Param.HideActions] = unionHideActions(queryParams[Param.HideActions], HiddenActionItemByDefaultForMCPAnswers);
+            }
+            queryParams[Param.IsMcpAnswerEmbed] = true;
+            return queryParams;
+        }
         /**
          * Builds the final iframe `src` by merging the SDK embed parameters
          * with the query parameters already present on the source iframe URL.
+         *
          * The `tsmcp` marker param is removed so it does not propagate to the
-         * ThoughtSpot application.
+         * ThoughtSpot application. This is not just cosmetic: `tsmcp=true` is
+         * also how {@link isTSMCPIframe} recognizes an iframe as one this
+         * renderer must process. If the marker survived onto the iframe this
+         * class inserts, the same {@link MutationObserver} would immediately
+         * detect its own output as a new MCP iframe and re-process it, causing
+         * infinite recursive replacement. Do not re-add `tsmcp` here.
          *
          * @param sourceSrc - The original iframe's `src` URL string.
          * @param preserveSourceUrl - When true, return the source URL unchanged.
@@ -27675,7 +27955,15 @@ query GetEurekaResults($params: Input_eureka_SearchRequest) {
             // Replay markers address the SDK, not the ThoughtSpot application.
             delete existingQueryParamsObject[Param.TsmcpConversationId];
             delete existingQueryParamsObject[Param.TsmcpAnswerIndex];
+            // Source-iframe params win over SDK params on merge. Hidden actions
+            // are the exception: union them so a `hideAction` on the source iframe
+            // does not clobber the SDK-computed denylist (and vice versa).
+            const mergedHideActions = unionHideActions(queryParams[Param.HideActions], existingQueryParamsObject[Param.HideActions]);
+            delete existingQueryParamsObject[Param.HideActions];
             const mergedQueryParams = { ...queryParams, ...existingQueryParamsObject };
+            if (mergedHideActions.length) {
+                mergedQueryParams[Param.HideActions] = mergedHideActions;
+            }
             const mergedQueryParamsString = getQueryParamString(mergedQueryParams, true);
             const queryString = mergedQueryParamsString ? `?${mergedQueryParamsString}` : '';
             const hash = resolved