fix(react): gate remote Clerk UI loader behind __BUILD_DISABLE_RHC__ (#8773)

Author: jacekradko

.changeset/chrome-extension-strip-ui-rhc-loader.md

@@ -0,0 +1,5 @@
+---
+'@clerk/chrome-extension': patch
+---
+
+Strip the remotely-hosted `@clerk/ui` script loader from the bundle. The extension SDK already ships Clerk UI bundled via `@clerk/ui/no-rhc`, but the CDN loader for `ui.browser.js` (a dynamically injected `<script>` tag) remained in the build as unreachable code. The Chrome Web Store rejects this under Manifest V3's prohibition on remotely hosted code even though it never runs. It is now removed at build time.

.changeset/react-gate-ui-loader-norhc.md

@@ -0,0 +1,5 @@
+---
+'@clerk/react': patch
+---
+
+Gate the remote Clerk UI script loader behind `__BUILD_DISABLE_RHC__` so no-remote-code builds (such as `@clerk/chrome-extension`) dead-code-eliminate the `ui.browser.js` CDN loader, matching the existing behavior for the clerk-js loader. Standard browser apps are unaffected and continue to hotload Clerk UI from the CDN.

packages/react/src/isomorphicClerk.ts

@@ -576,19 +576,25 @@ export class IsomorphicClerk implements IsomorphicLoadedClerk {
       return undefined;
     }
 
-    await loadClerkUIScript({
-      ...this.options,
-      publishableKey: this.#publishableKey,
-      proxyUrl: this.proxyUrl,
-      domain: this.domain,
-      nonce: this.options.nonce,
-    });
+    // Skip the remote UI loader in no-RHC builds (e.g. Chrome extensions) so the CDN script
+    // injector is dead-code-eliminated from the bundle, mirroring getClerkJsEntryChunk.
+    if (!__BUILD_DISABLE_RHC__) {
+      await loadClerkUIScript({
+        ...this.options,
+        publishableKey: this.#publishableKey,
+        proxyUrl: this.proxyUrl,
+        domain: this.domain,
+        nonce: this.options.nonce,
+      });
+
+      if (!global.__internal_ClerkUICtor) {
+        throw new Error('Failed to download latest Clerk UI. Contact support@clerk.com.');
+      }
 
-    if (!global.__internal_ClerkUICtor) {
-      throw new Error('Failed to download latest Clerk UI. Contact support@clerk.com.');
+      return global.__internal_ClerkUICtor;
     }
 
-    return global.__internal_ClerkUICtor;
+    return undefined;
   }
 
   public on: Clerk['on'] = (...args) => {

scripts/search-for-rhc.mjs

@@ -14,7 +14,7 @@ async function asyncSearchRHC(name, search, regex = false) {
   const flag = regex ? 'E' : 'F';
   const cmd = () =>
     targetType === 'directory'
-      ? $`grep -${flag}q --include=\\*.js --include=\\*.mjs ${search} ${target}`
+      ? $`grep -r${flag}q --include=\\*.js --include=\\*.mjs ${search} ${target}`
       : $`grep -${flag}q ${search} ${target}`;
 
   if ((await cmd().exitCode) === 0) {