Reveal Embedded Analytics Integration Manual

// Mount the embedded analytics viewer after the host app validates session state.
import { RevealView } from "reveal-sdk";

const viewer = new RevealView("#analytics-view", {
  baseUrl: "/api/analytics",
  dashboardId: selectedDashboardId,
  theme: "tenant-branded",
  canEdit: currentUser.permissions.includes("dashboard:edit")
});

viewer.onDashboardLoaded = dashboard => {
  telemetry.track("dashboard_loaded", {
    dashboardId: dashboard.id,
    tenantId: currentUser.tenantId
  });
};

// Keep authorization on the server. The client never decides which data a user can access.
app.get("/api/analytics/dashboards/:id", requireUser, async (req, res) => {
  const user = req.user;
  const dashboardId = req.params.id;

  await entitlementService.assertCanViewDashboard({
    userId: user.id,
    tenantId: user.tenantId,
    dashboardId
  });

  const dashboard = await revealService.loadDashboard({
    dashboardId,
    tenantId: user.tenantId,
    roles: user.roles
  });

  res.json(dashboard);
});

// Apply tenant-aware filters before data is returned to the embedded dashboard.
function buildRevenueQuery(context) {
  return {
    sql: `
      SELECT month, region, product_line, revenue
      FROM analytics.revenue_summary
      WHERE tenant_id = @tenantId
        AND region IN (@allowedRegions)
      ORDER BY month DESC
    `,
    parameters: {
      tenantId: context.tenantId,
      allowedRegions: context.allowedRegions
    }
  };
}