PostMessage API Quickstart

// State management
let iframe = null;
let isReady = false;
let currentInteractionId = null;
let pendingRequests = new Map();

// Initialize the integration
function initializeCortiEmbeddedIntegration(iframeElement) {
  iframe = iframeElement;
  isReady = false;
  currentInteractionId = null;

  setupEventListeners();
}

function setupEventListeners() {
  window.addEventListener('message', (event) => {
    // Handle responses
    if (event.data?.type === 'CORTI_EMBEDDED_RESPONSE') {
      handleResponse(event.data);
    }
    
    // Handle events
    if (event.data?.type === 'CORTI_EMBEDDED_EVENT') {
      handleEvent(event.data);
    }
  });
}

function handleResponse(responseData) {
  const { requestId, success, data, error } = responseData;
  const pendingRequest = pendingRequests.get(requestId);
  
  if (pendingRequest) {
    pendingRequests.delete(requestId);
    if (success) {
      pendingRequest.resolve(data);
    } else {
      pendingRequest.reject(new Error(error?.message || 'Request failed'));
    }
  }
}

function handleEvent(eventData) {
  switch (eventData.event) {
    case 'ready':
      isReady = true;
      startIntegrationFlow();
      break;
    case 'documentGenerated':
      onDocumentGenerated(eventData.payload.document);
      break;
    case 'recordingStarted':
      console.log('Recording started');
      break;
    case 'recordingStopped':
      console.log('Recording stopped');
      break;
    // ... handle other events
  }
}

function generateRequestId() {
  return `req-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
}

async function startIntegrationFlow() {
  try {
    // 1. Authenticate
    await authenticate();

    // 2. Configure session
    await configureSession();

    // 3. Create interaction
    const interaction = await createInteraction();

    // 4. Add relevant facts
    await addFacts();

    // 5. Navigate to interaction UI
    await navigateToSession(interaction.id);

    console.log('Integration flow completed successfully');
  } catch (error) {
    console.error('Integration flow failed:', error);
  }
}

function sendMessage(action, payload = {}) {
  return new Promise((resolve, reject) => {
    const requestId = generateRequestId();
    pendingRequests.set(requestId, { resolve, reject });

    iframe.contentWindow.postMessage({
      type: 'CORTI_EMBEDDED',
      version: 'v1',
      action,
      requestId,
      payload
    }, '*');

    // Optional: Add timeout
    setTimeout(() => {
      if (pendingRequests.has(requestId)) {
        pendingRequests.delete(requestId);
        reject(new Error('Request timeout'));
      }
    }, 30000);
  });
}

async function authenticate() {
  // Requires OAuth2 tokens from user authentication
  return sendMessage('auth', {
    mode: 'stateful',
    access_token: 'your-access-token', // From OAuth2 flow
    refresh_token: 'your-refresh-token' // From OAuth2 flow
  });
}

async function configureSession() {
  return sendMessage('configureSession', {
    defaultLanguage: 'en',
    defaultOutputLanguage: 'en',
    defaultTemplateKey: 'corti-soap',
    defaultMode: 'virtual'
  });
}

async function createInteraction() {
  return sendMessage('createInteraction', {
    assignedUserId: null,
    encounter: {
      identifier: `encounter-${Date.now()}`,
      status: "planned",
      type: "first_consultation",
      period: {
        startedAt: new Date().toISOString(),
      },
      title: "Initial Consultation",
    },
  });
}

async function addFacts() {
  return sendMessage('addFacts', {
    facts: [
      { text: "Chest pain", group: "other" },
      { text: "Shortness of breath", group: "other" },
    ]
  });
}

async function navigateToSession(interactionId) {
  return sendMessage('navigate', {
    path: `/session/${interactionId}`
  });
}

function onDocumentGenerated(document) {
  console.log('Document generated:', document);
}

// Usage example:
const iframeElement = document.getElementById('corti-iframe');
initializeCortiEmbeddedIntegration(iframeElement);

try {
  const result = await sendMessage('auth', {
    mode: 'stateful',
    accessToken: 'your-access-token',
    refreshToken: 'your-refresh-token'
  });
  console.log('Authentication successful:', result);
} catch (error) {
  console.error('Authentication failed:', error.message);
  // Handle authentication failure
}

const ALLOWED_ORIGINS = [
  'https://assistant.eu.corti.app',
  'https://assistantmd.eu.corti.app',
  'https://assistant.us.corti.app'
];

window.addEventListener('message', (event) => {
  // Validate origin
  if (!ALLOWED_ORIGINS.includes(event.origin)) {
    console.warn('Message from untrusted origin:', event.origin);
    return;
  }

  // Process message
  if (event.data?.type === 'CORTI_EMBEDDED_EVENT') {
    // Handle event
  }
});

// Send messages with specific origin
iframe.contentWindow.postMessage({
  type: 'CORTI_EMBEDDED',
  version: 'v1',
  action: 'auth',
  payload: { /* ... */ }
}, 'https://assistant.eu.corti.app'); // Specific origin instead of '*'