@tokenoftrust/storefront-runner 3.3.3 → 3.3.4

package/apps/storefront/src/lib/observability/diag/serverResponseTime.ts

@@ -2,9 +2,14 @@
  * The document's server response time for the evidence panel: the `total` the Worker stamps in
  * `Server-Timing` (`lib/observability/shared/serverTiming.ts`) next to the time this self-fetch
  * waited for the response headers (TTFB as seen from the Worker). Advisory — never gates promotion.
+ *
+ * The self-fetch carries the viewer's preview grant so it measures the render a reviewer gets. A
+ * gate page or any non-200 answer is not that render, so it is reported as not measured rather
+ * than as a number.
  */
 
 export interface ServerResponseTime {
+  measured: true;
   /** `total;dur` from the document's `Server-Timing`, or null when the header is absent. */
   serverTotalMs: number | null;
   /** Wall time until the response headers arrived. */
@@ -13,6 +18,11 @@ export interface ServerResponseTime {
   cold: boolean;
 }
 
+export interface ServerResponseTimeUnmeasured {
+  measured: false;
+  reason: string;
+}
+
 /** Pull `total;dur` and the cold marker out of a `Server-Timing` header value. */
 export function parseServerTiming(header: string | null | undefined): Pick<ServerResponseTime, "serverTotalMs" | "cold"> {
   if (!header) return { serverTotalMs: null, cold: false };
@@ -24,18 +34,35 @@ export function parseServerTiming(header: string | null | undefined): Pick<Serve
   };
 }
 
-/** Self-fetch `url` and report its server response time; null when the fetch fails. */
+/**
+ * The URL and headers that make a self-fetch of `path` the viewer's own render: the request's
+ * `__preview` grant (query) and cookies are forwarded.
+ */
+export function viewerRenderRequest(requestUrl: string, path: string, cookie: string | null): { url: URL; headers: Headers } {
+  const source = new URL(requestUrl);
+  const url = new URL(path, source.origin);
+  const grant = source.searchParams.get("__preview");
+  if (grant) url.searchParams.set("__preview", grant);
+  const headers = new Headers();
+  if (cookie) headers.set("cookie", cookie);
+  return { url, headers };
+}
+
+/** Self-fetch and report the server response time, or why it could not be measured. */
 export async function measureServerResponseTime(
-  url: URL,
+  request: { url: URL; headers: Headers },
   now: () => number = () => performance.now(),
-): Promise<ServerResponseTime | null> {
+): Promise<ServerResponseTime | ServerResponseTimeUnmeasured> {
   try {
     const started = now();
-    const res = await fetch(url, { redirect: "manual" });
+    const res = await fetch(request.url, { headers: request.headers, redirect: "manual" });
     const ttfbMs = now() - started;
     await res.body?.cancel();
-    return { ...parseServerTiming(res.headers.get("server-timing")), ttfbMs: Math.round(ttfbMs) };
+    const gate = res.headers.get("x-tot-gate");
+    if (gate) return { measured: false, reason: `the fetch was answered by the access gate (${gate}), not the store render` };
+    if (res.status !== 200) return { measured: false, reason: `the home document answered ${res.status}, not a render` };
+    return { measured: true, ...parseServerTiming(res.headers.get("server-timing")), ttfbMs: Math.round(ttfbMs) };
   } catch {
-    return null;
+    return { measured: false, reason: "the home document could not be fetched" };
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "3.3.3",
+  "version": "3.3.4",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",