feat(rednote): add isolated persistent browser H5 entry

2026-10-19 22:59:10 +08:00
parent 9eec4369da
commit 4af825a5e4
24 changed files with 707 additions and 45 deletions
@@ -0,0 +1,33 @@
+'use strict';
+const path = require('node:path');
+const fs = require('node:fs');
+function physical(file) {
+  if (fs.existsSync(file)) return fs.realpathSync(file);
+  const parent = path.dirname(file);
+  return parent === file ? file : path.join(physical(parent), path.basename(file));
+}
+function inside(file, parent) {
+  if (process.platform === 'win32') { file = file.toLowerCase(); parent = parent.toLowerCase(); }
+  return file === parent || file.startsWith(parent + path.sep);
+}
+
+// One immutable entry mode per process. Never infer a channel from client input.
+module.exports = function entryConfig(env, root) {
+  const mode = env.JUZI_ENTRY_MODE || 'state';
+  if (!['state', 'rednote'].includes(mode)) throw Error('Unsupported JUZI_ENTRY_MODE');
+  const rednote = mode === 'rednote';
+  const dataRoot = env.JUZI_DATA_ROOT ? path.resolve(env.JUZI_DATA_ROOT) : path.join(root, 'data');
+  if (rednote) {
+    const protectedRoots = [root, env.JUZI_PROTECTED_DATA_ROOT].filter(Boolean).map(p => physical(path.resolve(p)));
+    if (!env.JUZI_DATA_ROOT || protectedRoots.some(p => inside(physical(dataRoot), p))) {
+      throw Error('Rednote requires its own JUZI_DATA_ROOT outside the shared h5 directory and protected data');
+    }
+    const base = new URL(env.PUBLIC_BASE_URL || '');
+    if (!['http:', 'https:'].includes(base.protocol) || base.pathname !== '/rednote/' || base.search || base.hash || base.username || base.password ||
+        (env.NODE_ENV === 'production' && base.protocol !== 'https:')) {
+      throw Error('Rednote PUBLIC_BASE_URL must end with /rednote/');
+    }
+  }
+  return { mode, rednote, dataRoot, channel: rednote ? 'rednote' : 'h5',
+    client: { mode, persistentBrowser: rednote } };
+};