fontdue-js 3.0.0-alpha9 → 3.0.0

package/dist/__generated__/TypeTestersSlugQuery.graphql.d.ts

@@ -1,5 +1,5 @@
 /**
- * @generated SignedSource<<4baa139e690a04efc53c833f3dcd913b>>
+ * @generated SignedSource<<a94d6158d79c64567c40e76f81d7008d>>
  * @lightSyntaxTransform
  * @nogrep
  */

package/dist/__generated__/TypeTestersSlugQuery.graphql.js

@@ -1,5 +1,5 @@
 /**
- * @generated SignedSource<<4baa139e690a04efc53c833f3dcd913b>>
+ * @generated SignedSource<<a94d6158d79c64567c40e76f81d7008d>>
  * @lightSyntaxTransform
  * @nogrep
  */
@@ -462,6 +462,12 @@ const node = function () {
                         "kind": "ScalarField",
                         "name": "lineGap",
                         "storageKey": null
+                      }, {
+                        "alias": null,
+                        "args": null,
+                        "kind": "ScalarField",
+                        "name": "avgCharWidth",
+                        "storageKey": null
                       }],
                       "storageKey": null
                     }, {
@@ -554,12 +560,12 @@ const node = function () {
       }]
     },
     "params": {
-      "cacheID": "0846a9f2356431e317f88fd2c442500e",
+      "cacheID": "1e8ea8e801f6c97ced8499dc87a6afad",
       "id": null,
       "metadata": {},
       "name": "TypeTestersSlugQuery",
       "operationKind": "query",
-      "text": "query TypeTestersSlugQuery(\n  $collectionSlug: String!\n  $tags: [String!]\n  $excludeTags: [String!]\n) {\n  viewer {\n    slug(name: $collectionSlug) {\n      collection: fontCollection {\n        ...TypeTesters_collection_4Goyz5\n        id\n      }\n      id\n    }\n    id\n  }\n}\n\nfragment FontStyle_fontStyle on FontStyle {\n  ...useFontStyle_fontStyle\n}\n\nfragment PriceBarSection_node_3BtHDv on FontCollection {\n  id\n  name\n  collectionType\n  sku {\n    ...SelectButton_sku_3BtHDv\n    id\n    priceWithLicenseOptions: price(licenseOptions: [], orderVariables: []) {\n      ...Price_price\n    }\n  }\n  totalStyles\n  totalStylesPrice(licenseOptions: []) {\n    ...Price_price\n  }\n}\n\nfragment PriceBar_node_3BtHDv on FontCollection {\n  ...PriceBarSection_node_3BtHDv\n  parent {\n    ...PriceBarSection_node_3BtHDv\n    id\n  }\n}\n\nfragment Price_price on Money {\n  amount\n  currency\n}\n\nfragment SKUPrice_sku_3BtHDv on Sku {\n  id\n  price(licenseOptions: [], orderVariables: []) {\n    amount\n    ...Price_price\n  }\n}\n\nfragment SelectButton_sku_3BtHDv on Sku {\n  id\n  ...SKUPrice_sku_3BtHDv\n}\n\nfragment TypeTesterFeaturesButton_fontStyle on FontStyle {\n  ...useFeaturesData_fontStyle\n}\n\nfragment TypeTesterFeatures_fontStyle on FontStyle {\n  ...useFeaturesData_fontStyle\n  ...TypeTesterVariableAxes_fontStyle\n}\n\nfragment TypeTesterFloatingToolbar_testers on TypeTester {\n  id\n  fontStyle {\n    ...TypeTesterToolbar_fontStyle\n    ...TypeTesterFeatures_fontStyle\n    id\n  }\n}\n\nfragment TypeTesterStyleSelectData_fontStyle on FontStyle {\n  id\n  name\n  supportedLanguages\n  cssWeight\n  cssStyle\n  cssStretch\n  variableInstances {\n    name\n    coordinates {\n      axis\n      value\n    }\n  }\n  family {\n    id\n    name\n  }\n}\n\nfragment TypeTesterToolbar_fontStyle on FontStyle {\n  ...TypeTesterVariableAxes_fontStyle\n  ...TypeTesterFeaturesButton_fontStyle\n}\n\nfragment TypeTesterVariableAxes_fontStyle on FontStyle {\n  variableAxes {\n    axis\n    name\n    minValue\n    maxValue\n  }\n}\n\nfragment TypeTester_fontStyle_3BtHDv on FontStyle {\n  id\n  ...TypeTesterFeatures_fontStyle\n  ...TypeTesterStyleSelectData_fontStyle\n  ...FontStyle_fontStyle\n  ...TypeTesterVariableAxes_fontStyle\n  ...TypeTesterToolbar_fontStyle\n  sku {\n    ...SelectButton_sku_3BtHDv\n    ...SKUPrice_sku_3BtHDv\n    id\n    basePrice: price {\n      amount\n    }\n  }\n}\n\nfragment TypeTesters_collection_4Goyz5 on FontCollection {\n  typeTesters(first: 999, tags: $tags, excludeTags: $excludeTags) {\n    edges {\n      node {\n        id\n        content\n        size\n        lineHeight\n        letterSpacing\n        autofit\n        direction\n        fontStyle {\n          ...TypeTester_fontStyle_3BtHDv\n          id\n          family {\n            id\n          }\n        }\n        variableSettings {\n          axis\n          value\n        }\n        featureSettings {\n          feature\n          value\n        }\n        tags\n        ...TypeTesterFloatingToolbar_testers\n      }\n    }\n  }\n  typeTesterFeatures\n  typeTesterAxes\n  id\n  ...PriceBar_node_3BtHDv\n  families: children(collectionTypes: [FAMILY]) {\n    id\n    ...PriceBar_node_3BtHDv\n  }\n  parent {\n    id\n  }\n}\n\nfragment useFeaturesData_fontStyle on FontStyle {\n  fontFeatures {\n    supportedFeatures\n    stylisticSetNames {\n      featureName\n      humanName\n    }\n  }\n}\n\nfragment useFontStyle_fontStyle on FontStyle {\n  cssFamily\n  name\n  webfontSources {\n    url\n    format\n    tech\n  }\n  verticalMetrics {\n    unitsPerEm\n    ascender\n    descender\n    lineGap\n  }\n}\n"
+      "text": "query TypeTestersSlugQuery(\n  $collectionSlug: String!\n  $tags: [String!]\n  $excludeTags: [String!]\n) {\n  viewer {\n    slug(name: $collectionSlug) {\n      collection: fontCollection {\n        ...TypeTesters_collection_4Goyz5\n        id\n      }\n      id\n    }\n    id\n  }\n}\n\nfragment FontStyle_fontStyle on FontStyle {\n  ...useFontStyle_fontStyle\n}\n\nfragment PriceBarSection_node_3BtHDv on FontCollection {\n  id\n  name\n  collectionType\n  sku {\n    ...SelectButton_sku_3BtHDv\n    id\n    priceWithLicenseOptions: price(licenseOptions: [], orderVariables: []) {\n      ...Price_price\n    }\n  }\n  totalStyles\n  totalStylesPrice(licenseOptions: []) {\n    ...Price_price\n  }\n}\n\nfragment PriceBar_node_3BtHDv on FontCollection {\n  ...PriceBarSection_node_3BtHDv\n  parent {\n    ...PriceBarSection_node_3BtHDv\n    id\n  }\n}\n\nfragment Price_price on Money {\n  amount\n  currency\n}\n\nfragment SKUPrice_sku_3BtHDv on Sku {\n  id\n  price(licenseOptions: [], orderVariables: []) {\n    amount\n    ...Price_price\n  }\n}\n\nfragment SelectButton_sku_3BtHDv on Sku {\n  id\n  ...SKUPrice_sku_3BtHDv\n}\n\nfragment TypeTesterFeaturesButton_fontStyle on FontStyle {\n  ...useFeaturesData_fontStyle\n}\n\nfragment TypeTesterFeatures_fontStyle on FontStyle {\n  ...useFeaturesData_fontStyle\n  ...TypeTesterVariableAxes_fontStyle\n}\n\nfragment TypeTesterFloatingToolbar_testers on TypeTester {\n  id\n  fontStyle {\n    ...TypeTesterToolbar_fontStyle\n    ...TypeTesterFeatures_fontStyle\n    id\n  }\n}\n\nfragment TypeTesterStyleSelectData_fontStyle on FontStyle {\n  id\n  name\n  supportedLanguages\n  cssWeight\n  cssStyle\n  cssStretch\n  variableInstances {\n    name\n    coordinates {\n      axis\n      value\n    }\n  }\n  family {\n    id\n    name\n  }\n}\n\nfragment TypeTesterToolbar_fontStyle on FontStyle {\n  ...TypeTesterVariableAxes_fontStyle\n  ...TypeTesterFeaturesButton_fontStyle\n}\n\nfragment TypeTesterVariableAxes_fontStyle on FontStyle {\n  variableAxes {\n    axis\n    name\n    minValue\n    maxValue\n  }\n}\n\nfragment TypeTester_fontStyle_3BtHDv on FontStyle {\n  id\n  ...TypeTesterFeatures_fontStyle\n  ...TypeTesterStyleSelectData_fontStyle\n  ...FontStyle_fontStyle\n  ...TypeTesterVariableAxes_fontStyle\n  ...TypeTesterToolbar_fontStyle\n  sku {\n    ...SelectButton_sku_3BtHDv\n    ...SKUPrice_sku_3BtHDv\n    id\n    basePrice: price {\n      amount\n    }\n  }\n}\n\nfragment TypeTesters_collection_4Goyz5 on FontCollection {\n  typeTesters(first: 999, tags: $tags, excludeTags: $excludeTags) {\n    edges {\n      node {\n        id\n        content\n        size\n        lineHeight\n        letterSpacing\n        autofit\n        direction\n        fontStyle {\n          ...TypeTester_fontStyle_3BtHDv\n          id\n          family {\n            id\n          }\n        }\n        variableSettings {\n          axis\n          value\n        }\n        featureSettings {\n          feature\n          value\n        }\n        tags\n        ...TypeTesterFloatingToolbar_testers\n      }\n    }\n  }\n  typeTesterFeatures\n  typeTesterAxes\n  id\n  ...PriceBar_node_3BtHDv\n  families: children(collectionTypes: [FAMILY]) {\n    id\n    ...PriceBar_node_3BtHDv\n  }\n  parent {\n    id\n  }\n}\n\nfragment useFeaturesData_fontStyle on FontStyle {\n  fontFeatures {\n    supportedFeatures\n    stylisticSetNames {\n      featureName\n      humanName\n    }\n  }\n}\n\nfragment useFontStyle_fontStyle on FontStyle {\n  cssFamily\n  name\n  webfontSources {\n    url\n    format\n    tech\n  }\n  verticalMetrics {\n    unitsPerEm\n    ascender\n    descender\n    lineGap\n    avgCharWidth\n  }\n}\n"
     }
   };
 }();

package/dist/__generated__/useFontStyle_fontStyle.graphql.d.ts

@@ -1,5 +1,5 @@
 /**
- * @generated SignedSource<<83fdf14f0519371d109651e3e11c221b>>
+ * @generated SignedSource<<fdda61b158e716b142895d69f2c1fae9>>
  * @lightSyntaxTransform
  * @nogrep
  */
@@ -10,6 +10,7 @@ export type useFontStyle_fontStyle$data = {
     readonly name: string;
     readonly verticalMetrics: {
         readonly ascender: number;
+        readonly avgCharWidth: number | null;
         readonly descender: number;
         readonly lineGap: number | null;
         readonly unitsPerEm: number;

package/dist/__generated__/useFontStyle_fontStyle.graphql.js

@@ -1,5 +1,5 @@
 /**
- * @generated SignedSource<<83fdf14f0519371d109651e3e11c221b>>
+ * @generated SignedSource<<fdda61b158e716b142895d69f2c1fae9>>
  * @lightSyntaxTransform
  * @nogrep
  */
@@ -83,11 +83,17 @@ const node = {
       "kind": "ScalarField",
       "name": "lineGap",
       "storageKey": null
+    }, {
+      "alias": null,
+      "args": null,
+      "kind": "ScalarField",
+      "name": "avgCharWidth",
+      "storageKey": null
     }],
     "storageKey": null
   }],
   "type": "FontStyle",
   "abstractKey": null
 };
-node.hash = "df4c7160c29373e86bea8b6082d19994";
+node.hash = "171c546f40909692656c5e143a98d8a3";
 export default node;

package/dist/__tests__/createFontdueFetch.test.js

@@ -0,0 +1,276 @@
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import { createFontdueFetch, FontdueNotFoundError } from '../server/index.js';
+import { registerAmbientConfigResolver } from '../relay/serverConfig.js';
+beforeEach(() => {
+  vi.unstubAllEnvs();
+  vi.unstubAllGlobals();
+});
+
+// Several tests inject a per-render config through the ambient resolver seam
+// (the same seam runWithPreview and the Next slot use). Always clear it.
+afterEach(() => {
+  registerAmbientConfigResolver(() => undefined);
+});
+function withConfig(config) {
+  registerAmbientConfigResolver(() => config);
+}
+function mockFetch(impl) {
+  const fetchMock = vi.fn(async (url, init) => impl(url, init));
+  vi.stubGlobal('fetch', fetchMock);
+  return fetchMock;
+}
+describe('createFontdueFetch', () => {
+  it('posts the query to the configured URL and unwraps data', async () => {
+    const fetchMock = mockFetch(() => ({
+      status: 200,
+      json: async () => ({
+        data: {
+          viewer: {
+            id: '1'
+          }
+        }
+      })
+    }));
+    const fetchGraphql = createFontdueFetch({
+      url: 'https://acme.fontdue.com'
+    });
+    const data = await fetchGraphql('Index', 'query Index { viewer { id } }', {
+      a: 1
+    });
+    expect(data).toEqual({
+      viewer: {
+        id: '1'
+      }
+    });
+    const [url, init] = fetchMock.mock.calls[0];
+    expect(url).toBe('https://acme.fontdue.com/graphql?query=Index');
+    expect(init.method).toBe('POST');
+    expect(JSON.parse(init.body)).toEqual({
+      query: 'query Index { viewer { id } }',
+      variables: {
+        a: 1
+      }
+    });
+  });
+  it('forwards bound headers (the preview Bearer token) on every call', async () => {
+    const fetchMock = mockFetch(() => ({
+      status: 200,
+      json: async () => ({
+        data: {}
+      })
+    }));
+    const fetchGraphql = createFontdueFetch({
+      url: 'https://acme.fontdue.com',
+      headers: {
+        authorization: 'Bearer admin-tok'
+      }
+    });
+    await fetchGraphql('A', 'query A { __typename }');
+    await fetchGraphql('B', 'query B { __typename }');
+    for (const call of fetchMock.mock.calls) {
+      const init = call[1];
+      expect(init.headers.authorization).toBe('Bearer admin-tok');
+    }
+  });
+  it('throws FontdueNotFoundError on a 404 (host did not resolve)', async () => {
+    mockFetch(() => ({
+      status: 404,
+      json: async () => ({})
+    }));
+    const fetchGraphql = createFontdueFetch({
+      url: 'https://acme.fontdue.com'
+    });
+    await expect(fetchGraphql('X', 'query X { __typename }')).rejects.toBeInstanceOf(FontdueNotFoundError);
+  });
+  it('throws on GraphQL errors in a 200 response', async () => {
+    mockFetch(() => ({
+      status: 200,
+      json: async () => ({
+        errors: [{
+          message: 'boom'
+        }]
+      })
+    }));
+    const fetchGraphql = createFontdueFetch({
+      url: 'https://acme.fontdue.com'
+    });
+    await expect(fetchGraphql('X', 'query X { __typename }')).rejects.toThrow('boom');
+  });
+  it('resolves the URL from the environment when none is passed', async () => {
+    vi.stubEnv('FONTDUE_URL', 'https://env.fontdue.com');
+    const fetchMock = mockFetch(() => ({
+      status: 200,
+      json: async () => ({
+        data: {}
+      })
+    }));
+    const fetchGraphql = createFontdueFetch();
+    await fetchGraphql('Q', 'query Q { __typename }');
+    expect(fetchMock.mock.calls[0][0]).toBe('https://env.fontdue.com/graphql?query=Q');
+  });
+  it('throws a helpful error when no URL is configured (resolved per call)', async () => {
+    mockFetch(() => ({
+      status: 200,
+      json: async () => ({
+        data: {}
+      })
+    }));
+    const fetchGraphql = createFontdueFetch();
+    await expect(fetchGraphql('Q', 'query Q { __typename }')).rejects.toThrow(/no Fontdue URL configured/);
+  });
+  describe('Next data cache tags', () => {
+    it('opts into force-cache + tags when cacheTags are given (production)', async () => {
+      var _init$next;
+      vi.stubEnv('NODE_ENV', 'production');
+      const fetchMock = mockFetch(() => ({
+        status: 200,
+        json: async () => ({
+          data: {}
+        })
+      }));
+      const fetchGraphql = createFontdueFetch({
+        url: 'https://acme.fontdue.com',
+        cacheTags: ['graphql:acme.fontdue.com']
+      });
+      await fetchGraphql('Q', 'query Q { __typename }');
+      const init = fetchMock.mock.calls[0][1];
+      expect(init.cache).toBe('force-cache');
+      // The global `graphql` tag is prepended automatically.
+      expect((_init$next = init.next) === null || _init$next === void 0 ? void 0 : _init$next.tags).toEqual(['graphql', 'graphql:acme.fontdue.com']);
+    });
+    it('leaves the fetch uncached in development even with cacheTags', async () => {
+      // In `next dev` the data cache + revalidateTag don't reliably refresh, so
+      // we skip the cache opt-in outside production and let every render be fresh.
+      vi.stubEnv('NODE_ENV', 'development');
+      const fetchMock = mockFetch(() => ({
+        status: 200,
+        json: async () => ({
+          data: {}
+        })
+      }));
+      const fetchGraphql = createFontdueFetch({
+        url: 'https://acme.fontdue.com',
+        cacheTags: ['graphql:acme.fontdue.com']
+      });
+      await fetchGraphql('Q', 'query Q { __typename }');
+      const init = fetchMock.mock.calls[0][1];
+      expect(init.cache).toBeUndefined();
+      expect(init.next).toBeUndefined();
+    });
+    it('leaves the fetch uncached when no cacheTags are given', async () => {
+      const fetchMock = mockFetch(() => ({
+        status: 200,
+        json: async () => ({
+          data: {}
+        })
+      }));
+      const fetchGraphql = createFontdueFetch({
+        url: 'https://acme.fontdue.com'
+      });
+      await fetchGraphql('Q', 'query Q { __typename }');
+      const init = fetchMock.mock.calls[0][1];
+      expect(init.cache).toBeUndefined();
+      expect(init.next).toBeUndefined();
+    });
+    it('treats an empty cacheTags list as uncached (preview renders)', async () => {
+      const fetchMock = mockFetch(() => ({
+        status: 200,
+        json: async () => ({
+          data: {}
+        })
+      }));
+      const fetchGraphql = createFontdueFetch({
+        url: 'https://acme.fontdue.com',
+        cacheTags: []
+      });
+      await fetchGraphql('Q', 'query Q { __typename }');
+      const init = fetchMock.mock.calls[0][1];
+      expect(init.cache).toBeUndefined();
+      expect(init.next).toBeUndefined();
+    });
+  });
+  describe('per-render config (the Next slot / ambient resolver)', () => {
+    it('resolves url, headers and cacheTags from the config', async () => {
+      var _init$next2;
+      vi.stubEnv('NODE_ENV', 'production');
+      const fetchMock = mockFetch(() => ({
+        status: 200,
+        json: async () => ({
+          data: {}
+        })
+      }));
+      withConfig({
+        url: 'https://tenant.fontdue.com',
+        headers: {
+          'x-forwarded-host': 'tenant.fontdue.com'
+        },
+        cacheTags: ['graphql:tenant.fontdue.com']
+      });
+
+      // No options: a module-level fetcher picks up the current render's config.
+      const fetchGraphql = createFontdueFetch();
+      await fetchGraphql('Q', 'query Q { __typename }');
+      const [url, init] = fetchMock.mock.calls[0];
+      expect(url).toBe('https://tenant.fontdue.com/graphql?query=Q');
+      expect(init.headers['x-forwarded-host']).toBe('tenant.fontdue.com');
+      expect(init.cache).toBe('force-cache');
+      expect((_init$next2 = init.next) === null || _init$next2 === void 0 ? void 0 : _init$next2.tags).toEqual(['graphql', 'graphql:tenant.fontdue.com']);
+    });
+    it('explicit options override the config (url and cacheTags)', async () => {
+      const fetchMock = mockFetch(() => ({
+        status: 200,
+        json: async () => ({
+          data: {}
+        })
+      }));
+      withConfig({
+        url: 'https://tenant.fontdue.com',
+        cacheTags: ['graphql:tenant.fontdue.com']
+      });
+
+      // Explicit url + empty cacheTags (e.g. a preview render) win.
+      const fetchGraphql = createFontdueFetch({
+        url: 'https://explicit.fontdue.com',
+        cacheTags: []
+      });
+      await fetchGraphql('Q', 'query Q { __typename }');
+      const [url, init] = fetchMock.mock.calls[0];
+      expect(url).toBe('https://explicit.fontdue.com/graphql?query=Q');
+      expect(init.cache).toBeUndefined();
+      expect(init.next).toBeUndefined();
+    });
+  });
+  describe('fontdue-preview header', () => {
+    it('sends "false" by default so a public/session-only request never reveals hidden fonts', async () => {
+      const fetchMock = mockFetch(() => ({
+        status: 200,
+        json: async () => ({
+          data: {}
+        })
+      }));
+      const fetchGraphql = createFontdueFetch({
+        url: 'https://acme.fontdue.com'
+      });
+      await fetchGraphql('Q', 'query Q { __typename }');
+      const init = fetchMock.mock.calls[0][1];
+      expect(init.headers['fontdue-preview']).toBe('false');
+    });
+    it('sends "true" when bound with a preview Bearer token (reveal hidden fonts)', async () => {
+      const fetchMock = mockFetch(() => ({
+        status: 200,
+        json: async () => ({
+          data: {}
+        })
+      }));
+      const fetchGraphql = createFontdueFetch({
+        url: 'https://acme.fontdue.com',
+        headers: {
+          authorization: 'Bearer admin-tok'
+        }
+      });
+      await fetchGraphql('Q', 'query Q { __typename }');
+      const init = fetchMock.mock.calls[0][1];
+      expect(init.headers['fontdue-preview']).toBe('true');
+    });
+  });
+});

package/dist/__tests__/imageLoader.test.js

@@ -0,0 +1,62 @@
+import { describe, it, expect, afterEach, vi } from 'vitest';
+import fontdueImageLoader from '../next/image-loader.js';
+
+// The loader reads NEXT_PUBLIC_FONTDUE_IMAGE_HOST / _ORIGINS at call time, so
+// each test stubs them and we clear stubs afterwards.
+afterEach(() => {
+  vi.unstubAllEnvs();
+});
+function load(src) {
+  let origins = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : '';
+  let host = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 'img.fontdue.xyz';
+  vi.stubEnv('NEXT_PUBLIC_FONTDUE_IMAGE_HOST', host);
+  vi.stubEnv('NEXT_PUBLIC_FONTDUE_IMAGE_ORIGINS', origins);
+  return fontdueImageLoader({
+    src,
+    width: 800,
+    quality: 75
+  });
+}
+const transformed = src => `https://img.fontdue.xyz/cdn-cgi/image/width=800,quality=75,format=auto/${src}`;
+describe('fontdueImageLoader', () => {
+  it('transforms any absolute src when no allowlist is set', () => {
+    const src = 'https://anywhere.example/a.jpg';
+    expect(load(src)).toBe(transformed(src));
+  });
+  it('serves relative srcs as-is', () => {
+    expect(load('/logo.svg', 'cdn.fontdue.xyz')).toBe('/logo.svg');
+  });
+  it('serves srcs as-is when no transform host is configured', () => {
+    const src = 'https://cdn.fontdue.xyz/a.jpg';
+    expect(load(src, 'cdn.fontdue.xyz', '')).toBe(src);
+  });
+  describe('origins allowlist', () => {
+    it('transforms an exact hostname match and skips a non-match', () => {
+      const ok = 'https://cdn.fontdue.xyz/a.jpg';
+      const no = 'https://other.example/a.jpg';
+      expect(load(ok, 'cdn.fontdue.xyz')).toBe(transformed(ok));
+      expect(load(no, 'cdn.fontdue.xyz')).toBe(no);
+    });
+    it('matches a "*." wildcard against any subdomain', () => {
+      const cdn = 'https://cdn.fontdue.xyz/a.jpg';
+      const assets = 'https://assets.fontdue.xyz/a.jpg';
+      expect(load(cdn, '*.fontdue.xyz')).toBe(transformed(cdn));
+      expect(load(assets, '*.fontdue.xyz')).toBe(transformed(assets));
+    });
+    it('does not let a wildcard match the apex or a lookalike domain', () => {
+      const apex = 'https://fontdue.xyz/a.jpg';
+      const lookalike = 'https://evilfontdue.xyz/a.jpg';
+      expect(load(apex, '*.fontdue.xyz')).toBe(apex);
+      expect(load(lookalike, '*.fontdue.xyz')).toBe(lookalike);
+    });
+    it('ignores an optional scheme on allowlist entries', () => {
+      const src = 'https://cdn.fontdue.xyz/a.jpg';
+      expect(load(src, 'https://cdn.fontdue.xyz')).toBe(transformed(src));
+      expect(load(src, 'https://*.fontdue.xyz')).toBe(transformed(src));
+    });
+    it('supports a comma-separated list', () => {
+      const src = 'https://assets.fontdue.xyz/a.jpg';
+      expect(load(src, 'cdn.fontdue.xyz, assets.fontdue.xyz')).toBe(transformed(src));
+    });
+  });
+});

package/dist/__tests__/metricFallback.test.js

@@ -0,0 +1,74 @@
+import { describe, it, expect } from 'vitest';
+import { fallbackDescriptors, metricFallbackFamily } from "../metricFallback.js";
+describe('fallbackDescriptors', () => {
+  it('matches average width via size-adjust and divides overrides by it', () => {
+    // Browser-validated (see the metric-fallback render test): at 1000px this
+    // renders ascent 800, descent 200, advance 600 — the target's exact box.
+    const d = fallbackDescriptors({
+      unitsPerEm: 1000,
+      ascender: 800,
+      descender: -200,
+      lineGap: 0,
+      avgCharWidth: 600
+    });
+    // size-adjust = (600/1000) / 0.458
+    expect(d.sizeAdjust).toBe(`${0.6 / 0.458 * 100}%`);
+    // ascent-override = (800/1000) / sizeAdjust  ->  effective ascent = 0.8em
+    expect(d.ascentOverride).toBe(`${0.8 / (0.6 / 0.458) * 100}%`);
+    expect(d.descentOverride).toBe(`${0.2 / (0.6 / 0.458) * 100}%`);
+    expect(d.lineGapOverride).toBe('0%');
+    expect(d.display).toBe('block');
+  });
+  it('scales correctly for a non-1000 unitsPerEm', () => {
+    const d = fallbackDescriptors({
+      unitsPerEm: 2048,
+      ascender: 1536,
+      descender: -512,
+      lineGap: 0,
+      avgCharWidth: 820
+    });
+    const s = 820 / 2048 / 0.458;
+    expect(d.sizeAdjust).toBe(`${s * 100}%`);
+    expect(d.ascentOverride).toBe(`${1536 / 2048 / s * 100}%`);
+    expect(d.descentOverride).toBe(`${512 / 2048 / s * 100}%`);
+  });
+  it('omits size-adjust and uses raw ratios when avgCharWidth is missing', () => {
+    const d = fallbackDescriptors({
+      unitsPerEm: 1000,
+      ascender: 750,
+      descender: -250,
+      lineGap: 0,
+      avgCharWidth: null
+    });
+    expect(d.sizeAdjust).toBeUndefined();
+    expect(d.ascentOverride).toBe('75%');
+    expect(d.descentOverride).toBe('25%');
+  });
+  it('treats a zero/absent avgCharWidth like no width match', () => {
+    const d = fallbackDescriptors({
+      unitsPerEm: 1000,
+      ascender: 900,
+      descender: -100,
+      lineGap: 200,
+      avgCharWidth: 0
+    });
+    expect(d.sizeAdjust).toBeUndefined();
+    expect(d.lineGapOverride).toBe('20%');
+  });
+  it('returns null for unusable metrics', () => {
+    expect(fallbackDescriptors(null)).toBeNull();
+    expect(fallbackDescriptors(undefined)).toBeNull();
+    expect(fallbackDescriptors({
+      unitsPerEm: 0,
+      ascender: 800,
+      descender: -200,
+      lineGap: 0,
+      avgCharWidth: 500
+    })).toBeNull();
+  });
+});
+describe('metricFallbackFamily', () => {
+  it('derives a per-family name', () => {
+    expect(metricFallbackFamily('Archivo Bold')).toBe('Archivo Bold fallback');
+  });
+});

package/dist/__tests__/networkFetch.test.js

@@ -10,8 +10,9 @@ const request = {
   text: 'query TestQuery { viewer { id } }'
 };
 describe('createNetworkFetch (server)', () => {
-  it('opts fetches into the Next data cache, tagged for revalidation', async () => {
+  it('opts fetches into the Next data cache, tagged for revalidation (production)', async () => {
     vi.stubEnv('FONTDUE_URL', 'https://acme.fontdue.com');
+    vi.stubEnv('NODE_ENV', 'production');
     const fetchMock = vi.fn(async () => ({
       json: async () => ({
         data: {}
@@ -32,8 +33,28 @@ describe('createNetworkFetch (server)', () => {
     expect(options.next.tags).toContain('graphql');
     expect(options.next.tags).toContain('operation:TestQuery');
   });
+  it('skips the data cache in development so local dev is always fresh', async () => {
+    vi.stubEnv('FONTDUE_URL', 'https://acme.fontdue.com');
+    vi.stubEnv('NODE_ENV', 'development');
+    const fetchMock = vi.fn(async () => ({
+      json: async () => ({
+        data: {}
+      })
+    }));
+    vi.stubGlobal('fetch', fetchMock);
+    const {
+      createNetworkFetch
+    } = await import("../relay/environment.js");
+    await createNetworkFetch()(request, {});
+    const [, options] = fetchMock.mock.calls[0];
+    // `next dev`'s data cache + revalidateTag don't reliably refresh, so dev
+    // fetches stay out of it (no-store) and every render fetches fresh.
+    expect(options.cache).toBe('no-store');
+    expect(options.next).toBeUndefined();
+  });
   it('applies the per-render server config tags and headers', async () => {
     vi.stubEnv('FONTDUE_URL', 'https://acme.fontdue.com');
+    vi.stubEnv('NODE_ENV', 'production');
     const fetchMock = vi.fn(async () => ({
       json: async () => ({
         data: {}
@@ -42,10 +63,11 @@ describe('createNetworkFetch (server)', () => {
     vi.stubGlobal('fetch', fetchMock);
 
     // React.cache doesn't memoize outside a React render, so the store is
-    // mocked rather than set through setFontdueServerConfig.
+    // mocked rather than set through setFontdueServerConfig. The network layer
+    // reads it through resolveFontdueServerConfig (awaited per fetch).
     vi.doMock('../relay/serverConfig', async importActual => ({
       ...(await importActual()),
-      getFontdueServerConfig: () => ({
+      resolveFontdueServerConfig: async () => ({
         url: 'http://app:4000',
         headers: {
           'x-forwarded-host': 'acme.fontdue.com'
@@ -63,4 +85,104 @@ describe('createNetworkFetch (server)', () => {
     expect(options.headers['x-forwarded-host']).toBe('acme.fontdue.com');
     expect(options.next.tags).toContain('graphql:acme.fontdue.com');
   });
+  it('forwards per-call options.headers (e.g. a preview Bearer token)', async () => {
+    vi.stubEnv('FONTDUE_URL', 'https://acme.fontdue.com');
+    const fetchMock = vi.fn(async () => ({
+      json: async () => ({
+        data: {}
+      })
+    }));
+    vi.stubGlobal('fetch', fetchMock);
+
+    // This is the non-RSC path: the render-scoped serverConfig store is a
+    // no-op outside an RSC render, so apps forward the token per call instead.
+    const {
+      createNetworkFetch
+    } = await import("../relay/environment.js");
+    await createNetworkFetch({
+      headers: {
+        authorization: 'Bearer preview-tok'
+      }
+    })(request, {});
+    const [, options] = fetchMock.mock.calls[0];
+    expect(options.headers.authorization).toBe('Bearer preview-tok');
+  });
+});
+function headersOf(fetchMock) {
+  return fetchMock.mock.calls[0][1].headers;
+}
+describe('createNetworkFetch (fontdue-preview header)', () => {
+  it('sends fontdue-preview: false on a public server fetch (no token)', async () => {
+    vi.stubEnv('FONTDUE_URL', 'https://acme.fontdue.com');
+    const fetchMock = vi.fn(async () => ({
+      json: async () => ({
+        data: {}
+      })
+    }));
+    vi.stubGlobal('fetch', fetchMock);
+    const {
+      createNetworkFetch
+    } = await import("../relay/environment.js");
+    await createNetworkFetch()(request, {});
+    expect(headersOf(fetchMock)['fontdue-preview']).toBe('false');
+  });
+  it('sends fontdue-preview: true when a preview Bearer token is forwarded (server)', async () => {
+    vi.stubEnv('FONTDUE_URL', 'https://acme.fontdue.com');
+    const fetchMock = vi.fn(async () => ({
+      json: async () => ({
+        data: {}
+      })
+    }));
+    vi.stubGlobal('fetch', fetchMock);
+    const {
+      createNetworkFetch
+    } = await import("../relay/environment.js");
+    await createNetworkFetch({
+      headers: {
+        authorization: 'Bearer tok'
+      }
+    })(request, {});
+    expect(headersOf(fetchMock)['fontdue-preview']).toBe('true');
+  });
+  it('on the client, sends true only when the preview marker cookie is set', async () => {
+    // typeof window must be defined at module load for IS_SERVER to be false.
+    vi.stubGlobal('window', {
+      addEventListener: () => {}
+    });
+    vi.stubGlobal('document', {
+      cookie: 'fontdue_preview=1'
+    });
+    vi.stubEnv('NEXT_PUBLIC_FONTDUE_URL', 'https://acme.fontdue.com');
+    const fetchMock = vi.fn(async () => ({
+      json: async () => ({
+        data: {}
+      })
+    }));
+    vi.stubGlobal('fetch', fetchMock);
+    const {
+      createNetworkFetch
+    } = await import("../relay/environment.js");
+    await createNetworkFetch()(request, {});
+    expect(headersOf(fetchMock)['fontdue-preview']).toBe('true');
+  });
+  it('on the client, sends false when the marker cookie is absent (logged-in admin browsing normally)', async () => {
+    vi.stubGlobal('window', {
+      addEventListener: () => {}
+    });
+    vi.stubGlobal('document', {
+      cookie: 'other=1'
+    });
+    vi.stubEnv('NEXT_PUBLIC_FONTDUE_URL', 'https://acme.fontdue.com');
+    const fetchMock = vi.fn(async () => ({
+      json: async () => ({
+        data: {}
+      })
+    }));
+    vi.stubGlobal('fetch', fetchMock);
+    const {
+      createNetworkFetch
+    } = await import("../relay/environment.js");
+    await createNetworkFetch()(request, {});
+    expect(headersOf(fetchMock)['fontdue-preview']).toBe('false');
+  });
 });