fix(ios): land Databricks workspaces on /omnigent and hide the workspace chrome

[fanzeyi]

Related issue

N/A — no tracking issue; requested directly.

Summary

• A workspace-hosted Omnigent on iOS was unusable in two ways: connecting with a
  bare workspace URL landed on the Databricks landing page instead of the app,
  and once on the app the workspace's top-nav bar was still painted over it —
  wasting vertical space and letting the user navigate into another workspace app
  with no way back.
• Ports the desktop's chrome hide (web/electron/src/workspace-chrome.js) into a
  testable WorkspaceChromeScript, replacing the previous injection that was
  gated on path.starts(with: "/ml/omnigents") — a path gate skips auth-redirect
  landings and the /omnigent mount entirely. Keyed on the pinned origin, never
  on the path.
• Mirrors the Android /omnigent bounce from feat(android): land Databricks workspaces on the /omnigent mount #4543 on iOS: domain-matched with no
  probe, ?o=<org> and fragment preserved, one bounce per app-page load, wired
  into the three iOS equivalents of Android's callbacks — decidePolicyFor
  (link/redirect navs), didCommit (every committed load, incl. the login
  chain's POST hand-back) and KVO on webView.url (in-page pushState, which
  fires no navigation callback at all).
• Root cause both of the above depended on: with allowsInsecureHTTP (debug
  only), a schemeless host was normalized to http://, so the app pinned
  http:// while the server redirects to https://. Every pinned-origin
  comparison then failed silently — the chrome overlay, native bridge trust
  (isTrustedBridgeMessage, so the server switcher / Chat-Terminal bar / sidebar
  drag were dead), media-capture prompts, and load-success recording. A schemeless
  host now defaults to https unless it is loopback, mirroring the desktop's
  LOCAL_HOSTS, so the mismatch can't be created: release builds already reject
  http:// outright and App Transport Security blocks it at the network layer.
• Derives the pinned origin from the pinned URL instead of caching it in a second
  field, so the two can't drift, and re-arms the bare-root bounce budget when a
  new server is pinned. Drops loadSucceeded's URL argument: its only consumer
  discarded it.

ELI5: the app was told "the server is http://host", the server answered
"actually I'm https://host", and every later "is this page still my server?"
check compared the two strings, said no, and quietly skipped its work.

  connect "dbc-x.cloud.databricks.com"
        │
        ├─ before: http://dbc-x…            → pinned http://dbc-x
        │          server 301 → https://…   → page   https://dbc-x
        │          pinned != page  ─────────► chrome hide / bridge / recents SKIPPED
        │
        └─ after:  https://dbc-x…           → pinned https://dbc-x  (non-loopback ⇒ https)
                   bare root ⇒ /omnigent    → bounce once
                   pinned == page  ─────────► overlay covers the workspace bar

Test Plan

• cd web/ios && xcodebuild test -scheme Omnigent -destination 'platform=iOS Simulator,name=iPhone 17 Pro' -only-testing:OmnigentTests → all tests pass.
• New/updated unit tests: WorkspaceChromeScriptTests (CSS byte-identical to the
  desktop's WORKSPACE_CHROME_HIDE_CSS, the install-once guard, CSS embedded as
  an escaped literal); WorkspaceMountURLTests (bare roots on both workspace
  domains, query + fragment preserved, port and host-case, non-root paths left
  alone, databricksapps.com and a databricks.com.evil.example lookalike
  rejected, non-http schemes rejected); ServerURLTests (schemeless host → https
  even under the debug policy, loopback → http, explicit http:// honoured).
• Manual, iPhone 17 Pro simulator against a real Databricks workspace: a bare
  workspace URL lands on /omnigent and the workspace nav bar is gone. Confirmed
  during development with a temporary in-app probe (since removed) reporting
  styleTag:true, position:"fixed", rect:{y:0,h:874} — the embed root covers the
  viewport from y=0 — and independently by the maintainer on the same simulator.
• pre-commit run --files <touched files> clean.

Demo

Before:

After:

Type of change

• Bug fix
• Feature
• UI / frontend change
• Refactor / chore
• Docs
• Test / CI
• Breaking change

Test coverage

• Unit tests added / updated
• Integration tests added / updated
• E2E tests added / updated
• Manual verification completed
• Existing tests cover this change
• Not applicable

Coverage notes

The mount-URL rewriting, scheme defaulting and the injected script are
unit-tested. The navigation wiring is not: OmnigentWebView.Coordinator needs a
live WKWebView plus a SwiftUI context to construct, so the callbacks and the
overlay were verified on the simulator against a real workspace instead.

Changelog

Connecting the iOS app to a Databricks workspace now opens Omnigent directly and
hides the workspace navigation bar

Signed-off-by: Zeyi (Rice) Fan zeyi.f@databricks.com

[github-actions]

🏷️ Doc impact: no-doc-update

iOS/Electron shell changes to workspace-root bounce handling, chrome-hiding CSS refactor, and scheme defaults are internal client behavior with no change to documented setup, configuration, or user-facing surfaces.

_{Auto-classified on merge. Set the label manually before merging to override. · run}