/** * Shared builder for extension UI iframe src URLs. * Enforces content hash format and handles RUNNER_PUBLIC_BASE when EXT_UI_HOST_MODE === "rust". * * Example: * const src = buildExtUiSrc("ext-123", "sha256:...64hex...", "/"); * */ export function buildExtUiSrc( extensionId: string, contentHash: string, clientPath: string, opts?: { tenantId?: string; publicBaseOverride?: string } ): string { if (!/^sha256:[0-9a-f]{64}$/i.test(contentHash)) { throw new Error("Invalid content hash; expected format 'sha256:'"); } const mode = (process.env.EXT_UI_HOST_MODE || 'rust').toLowerCase(); const overrideBase = normalizePublicBase(opts?.publicBaseOverride); const configuredBase = normalizePublicBase(process.env.RUNNER_PUBLIC_BASE); const defaultRustBase = mode === 'rust' ? '/runner' : null; const publicBase = overrideBase ?? configuredBase ?? defaultRustBase; if (process.env.NODE_ENV !== 'production') { console.log('[ext-ui][buildExtUiSrc]', { extensionId, mode, clientPath, tenantId: opts?.tenantId, overrideBase, runnerBase: process.env.RUNNER_PUBLIC_BASE, publicBase, }); } const params = new URLSearchParams({ path: clientPath || '/' }); if (opts?.tenantId) { params.set('tenant', opts.tenantId); } params.set('extensionId', extensionId); const qs = params.toString(); const suffix = `/ext-ui/${encodeURIComponent(extensionId)}/${encodeURIComponent(contentHash)}/index.html?${qs}`; if (!publicBase) { return suffix; } return `${publicBase}${suffix}`; } function normalizePublicBase(raw: string | undefined): string | null { if (!raw) return null; const trimmed = raw.trim(); if (!trimmed) return null; if (/^https?:\/\//i.test(trimmed)) { return trimmed.replace(/\/+$/, ''); } if (trimmed.startsWith('/')) { return trimmed.replace(/\/+$/, ''); } // Treat other values (e.g., custom schemes) as provided but remove trailing slash. return trimmed.replace(/\/+$/, ''); }