PostMessage API Quickstart

// State management
let iframe = null;
let isReady = false;
let currentInteractionId = null;
let pendingRequests = new Map();

// Initialize the integration
function initializeCortiEmbeddedIntegration(iframeElement) {
  iframe = iframeElement;
  isReady = false;
  currentInteractionId = null;

  setupEventListeners();
}

function setupEventListeners() {
  window.addEventListener("message", (event) => {
    // Handle responses
    if (event.data?.type === "CORTI_EMBEDDED_RESPONSE") {
      handleResponse(event.data);
    }

    // Handle events
    if (event.data?.type === "CORTI_EMBEDDED_EVENT") {
      handleEvent(event.data);
    }
  });
}

function handleResponse(responseData) {
  const { requestId, success, data, error } = responseData;
  const pendingRequest = pendingRequests.get(requestId);

  if (pendingRequest) {
    pendingRequests.delete(requestId);
    if (success) {
      pendingRequest.resolve(data);
    } else {
      pendingRequest.reject(new Error(error?.message || "Request failed"));
    }
  }
}

function handleEvent(eventData) {
  switch (eventData.event) {
    case "embedded.ready":
      isReady = true;
      startIntegrationFlow();
      break;
    case "document.generated":
      onDocumentGenerated(eventData.payload.document);
      break;
    case "recording.started":
      console.log("Recording started");
      break;
    case "recording.stopped":
      console.log("Recording stopped");
      break;
    // ... handle other events
  }
}

function generateRequestId() {
  return `req-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
}

async function startIntegrationFlow() {
  try {
    // 1. Authenticate
    await authenticate();

    // 2. Configure session
    await configureSession();

    // 3. Create interaction
    const interaction = await createInteraction();

    // 4. Add relevant facts
    await addFacts();

    // 5. Navigate to interaction UI
    await navigateToSession(interaction.id);

    console.log("Integration flow completed successfully");
  } catch (error) {
    console.error("Integration flow failed:", error);
  }
}

function sendMessage(action, payload = {}) {
  return new Promise((resolve, reject) => {
    const requestId = generateRequestId();
    pendingRequests.set(requestId, { resolve, reject });

    iframe.contentWindow.postMessage(
      {
        type: "CORTI_EMBEDDED",
        version: "v1",
        action,
        requestId,
        payload,
      },
      "*",
    );

    // Optional: Add timeout
    setTimeout(() => {
      if (pendingRequests.has(requestId)) {
        pendingRequests.delete(requestId);
        reject(new Error("Request timeout"));
      }
    }, 30000);
  });
}

async function authenticate() {
  // Requires OAuth2 tokens from user authentication
  return sendMessage("auth", {
    access_token: "your-access-token", // From OAuth2 flow
    refresh_token: "your-refresh-token", // From OAuth2 flow
    id_token: "your-id-token", // From OAuth2 flow
    token_type: "Bearer",
  });
}

async function configureSession() {
  return sendMessage("configureSession", {
    defaultLanguage: "en",
    defaultOutputLanguage: "en",
    defaultTemplateKey: "corti-soap",
    defaultMode: "virtual",
  });
}

async function createInteraction() {
  return sendMessage("createInteraction", {
    assignedUserId: null,
    encounter: {
      identifier: `encounter-${Date.now()}`,
      status: "planned",
      type: "first_consultation",
      period: {
        startedAt: new Date().toISOString(),
      },
      title: "Initial Consultation",
    },
  });
}

async function addFacts() {
  return sendMessage("addFacts", {
    facts: [
      { text: "Chest pain", group: "other" },
      { text: "Shortness of breath", group: "other" },
    ],
  });
}

async function navigateToSession(interactionId) {
  return sendMessage("navigate", {
    path: `/session/${interactionId}`,
  });
}

function onDocumentGenerated(document) {
  console.log("Document generated:", document);
}

// Usage example:
const iframeElement = document.getElementById("corti-iframe");
initializeCortiEmbeddedIntegration(iframeElement);

const ALLOWED_ORIGINS = [
  "https://assistant.eu.corti.app",
  "https://assistantmd.eu.corti.app",
  "https://assistant.us.corti.app",
];

window.addEventListener("message", (event) => {
  // Validate origin for security
  if (!ALLOWED_ORIGINS.includes(event.origin)) {
    return;
  }

  // Check for Corti events
  if (event.data?.type === "CORTI_EMBEDDED_EVENT") {
    const { event: eventName, confidential, payload } = event.data;

    // Handle different event types
    switch (eventName) {
      case "recording.started":
        console.log("Recording started:", payload);
        break;
      case "recording.paused":
        console.log("Recording paused:", payload);
        break;
      case "document.generated":
        console.log("Document generated:", payload);
        handleDocumentGenerated(payload);
        break;
      case "error.triggered":
        console.error("Error occurred:", payload);
        break;
      default:
        console.log("Unknown event:", eventName, payload);
    }
  }
});

function handleDocumentGenerated(payload) {
  const { documentId, documentName, interactionId } = payload;
  // Update your UI, sync to backend, etc.
}

try {
  const result = await sendMessage("auth", {
    accessToken: "your-access-token",
    refreshToken: "your-refresh-token",
    id_token: "your-id-token",
    token_type: "Bearer",
  });
  console.log("Authentication successful:", result);
} catch (error) {
  console.error("Authentication failed:", error.message);
  // Handle authentication failure
}

const ALLOWED_ORIGINS = [
  "https://assistant.eu.corti.app",
  "https://assistantmd.eu.corti.app",
  "https://assistant.us.corti.app",
];

window.addEventListener("message", (event) => {
  // Validate origin
  if (!ALLOWED_ORIGINS.includes(event.origin)) {
    console.warn("Message from untrusted origin:", event.origin);
    return;
  }

  // Process message
  if (event.data?.type === "CORTI_EMBEDDED_EVENT") {
    // Handle event
  }
});

// Send messages with specific origin
iframe.contentWindow.postMessage(
  {
    type: "CORTI_EMBEDDED",
    version: "v1",
    action: "auth",
    payload: {
      /* ... */
    },
  },
  "https://assistant.eu.corti.app",
); // Specific origin instead of '*'