/**
* Shared builder for extension UI iframe src URLs.
* Enforces content hash format and handles RUNNER_PUBLIC_BASE when EXT_UI_HOST_MODE === "rust".
*
* Example:
* const src = buildExtUiSrc("ext-123", "sha256:...64hex...", "/");
*
*/
export function buildExtUiSrc(
extensionId: string,
contentHash: string,
clientPath: string,
opts?: { tenantId?: string; publicBaseOverride?: string }
): string {
if (!/^sha256:[0-9a-f]{64}$/i.test(contentHash)) {
throw new Error("Invalid content hash; expected format 'sha256:'");
}
const mode = (process.env.EXT_UI_HOST_MODE || 'rust').toLowerCase();
const overrideBase = normalizePublicBase(opts?.publicBaseOverride);
const configuredBase = normalizePublicBase(process.env.RUNNER_PUBLIC_BASE);
const defaultRustBase = mode === 'rust' ? '/runner' : null;
const publicBase = overrideBase ?? configuredBase ?? defaultRustBase;
if (process.env.NODE_ENV !== 'production') {
console.log('[ext-ui][buildExtUiSrc]', {
extensionId,
mode,
clientPath,
tenantId: opts?.tenantId,
overrideBase,
runnerBase: process.env.RUNNER_PUBLIC_BASE,
publicBase,
});
}
const params = new URLSearchParams({ path: clientPath || '/' });
if (opts?.tenantId) {
params.set('tenant', opts.tenantId);
}
params.set('extensionId', extensionId);
const qs = params.toString();
const suffix = `/ext-ui/${encodeURIComponent(extensionId)}/${encodeURIComponent(contentHash)}/index.html?${qs}`;
if (!publicBase) {
return suffix;
}
return `${publicBase}${suffix}`;
}
function normalizePublicBase(raw: string | undefined): string | null {
if (!raw) return null;
const trimmed = raw.trim();
if (!trimmed) return null;
if (/^https?:\/\//i.test(trimmed)) {
return trimmed.replace(/\/+$/, '');
}
if (trimmed.startsWith('/')) {
return trimmed.replace(/\/+$/, '');
}
// Treat other values (e.g., custom schemes) as provided but remove trailing slash.
return trimmed.replace(/\/+$/, '');
}