fontdue-js 3.0.6 → 3.1.0

package/dist/components/FeatureTester/index.js

@@ -0,0 +1,66 @@
+'use client';
+
+function _extends() { return _extends = Object.assign ? Object.assign.bind() : function (n) { for (var e = 1; e < arguments.length; e++) { var t = arguments[e]; for (var r in t) ({}).hasOwnProperty.call(t, r) && (n[r] = t[r]); } return n; }, _extends.apply(null, arguments); }
+import _FeatureTesterStandaloneQuery from "../../__generated__/FeatureTesterStandaloneQuery.graphql.js";
+import React from 'react';
+import { graphql, useLazyLoadQuery, usePreloadedQuery } from 'react-relay';
+import FeatureTesterCard from './FeatureTesterCard.js';
+import { EnsureFontdueContext } from '../FontdueContextProvider/index.js';
+import loadSerializableQuery from '../../relay/loadSerializableQuery.js';
+import useSerializablePreloadedQuery from '../../relay/useSerializablePreloadedQuery.js';
+import FeatureTesterStandaloneQueryNode from '../../__generated__/FeatureTesterStandaloneQuery.graphql.js';
+const query = (_FeatureTesterStandaloneQuery.hash && _FeatureTesterStandaloneQuery.hash !== "eddba300b2fd5e283ab1f8f787edc518" && console.error("The definition of 'FeatureTesterStandaloneQuery' appears to have changed. Run `relay-compiler` to update the generated files to receive the expected data."), _FeatureTesterStandaloneQuery);
+function FeatureTesterRender(_ref) {
+  var _data$viewer;
+  let {
+    data,
+    ...rest
+  } = _ref;
+  const fontStyle = (_data$viewer = data.viewer) === null || _data$viewer === void 0 ? void 0 : _data$viewer.fontStyle;
+  if (!fontStyle) {
+    console.log('[FeatureTester]: No FontStyle found');
+    return null;
+  }
+  return /*#__PURE__*/React.createElement(FeatureTesterCard, _extends({
+    fontStyle: fontStyle
+  }, rest));
+}
+export async function loadFeatureTesterQuery(variables, options) {
+  return loadSerializableQuery(FeatureTesterStandaloneQueryNode, {
+    familyName: variables.familyName,
+    styleName: variables.styleName
+  }, options);
+}
+export function FeatureTesterPreloadedRenderer(_ref2) {
+  let {
+    preloadedQuery,
+    ...rest
+  } = _ref2;
+  const queryRef = useSerializablePreloadedQuery(preloadedQuery, 'store-or-network', query);
+  const data = usePreloadedQuery(query, queryRef);
+  return /*#__PURE__*/React.createElement(FeatureTesterRender, _extends({
+    data: data
+  }, rest));
+}
+function FeatureTesterLazyRenderer(_ref3) {
+  let {
+    familyName,
+    styleName,
+    ...rest
+  } = _ref3;
+  const data = useLazyLoadQuery(query, {
+    familyName,
+    styleName
+  });
+  return /*#__PURE__*/React.createElement(FeatureTesterRender, _extends({
+    data: data
+  }, rest));
+}
+// Unified FeatureTester entry point. Accepts either a preloaded query
+// (server-side preload path) or `{familyName, styleName}` (lazy path, used by
+// the CDN custom element and inside an existing `<FontdueProvider>` tree).
+export default function FeatureTester(props) {
+  return /*#__PURE__*/React.createElement(EnsureFontdueContext, {
+    config: props.config
+  }, 'preloadedQuery' in props && props.preloadedQuery ? /*#__PURE__*/React.createElement(FeatureTesterPreloadedRenderer, props) : /*#__PURE__*/React.createElement(FeatureTesterLazyRenderer, props));
+}

package/dist/components/FeatureTester/index.server.d.ts

@@ -0,0 +1,7 @@
+import React from 'react';
+import type { FeatureTesterProps } from './index.js';
+export type { FeatureTesterPreloadedQuery } from './index.js';
+export declare function loadFeatureTesterQuery(): never;
+export default function FeatureTester(props: Extract<FeatureTesterProps, {
+    familyName: string;
+}>): Promise<React.JSX.Element>;

package/dist/components/FeatureTester/index.server.js

@@ -0,0 +1,30 @@
+function _extends() { return _extends = Object.assign ? Object.assign.bind() : function (n) { for (var e = 1; e < arguments.length; e++) { var t = arguments[e]; for (var r in t) ({}).hasOwnProperty.call(t, r) && (n[r] = t[r]); } return n; }, _extends.apply(null, arguments); }
+import React from 'react';
+import loadSerializableQuery from '../../relay/loadSerializableQuery.js';
+import { FeatureTesterPreloadedRenderer } from './index.js';
+import FeatureTesterStandaloneQueryNode from '../../__generated__/FeatureTesterStandaloneQuery.graphql.js';
+// Stub for the RSC export condition. See FontdueProvider/index.server.tsx
+// for the rationale.
+export function loadFeatureTesterQuery() {
+  throw new Error("loadFeatureTesterQuery isn't needed in React Server Components — " + 'the <FeatureTester> server entrypoint awaits its query automatically. ' + 'Drop the manual call.');
+}
+
+// Next RSC variant: awaits the query on the server and hands the response to
+// the client `FeatureTesterPreloadedRenderer`. Lets pages just write
+// `<FeatureTester familyName="..." styleName="..." feature="..." content="..." />`
+// in an RSC without manually invoking `loadFeatureTesterQuery` + threading
+// `preloadedQuery` through props.
+export default async function FeatureTester(props) {
+  const {
+    familyName,
+    styleName,
+    ...rest
+  } = props;
+  const preloadedQuery = await loadSerializableQuery(FeatureTesterStandaloneQueryNode, {
+    familyName,
+    styleName
+  });
+  return /*#__PURE__*/React.createElement(FeatureTesterPreloadedRenderer, _extends({
+    preloadedQuery: preloadedQuery
+  }, rest));
+}

package/dist/components/NodePasswordForm/NodePasswordFormElement.d.ts

@@ -0,0 +1,3 @@
+import React from 'react';
+import { NodePasswordForm_props } from './index.js';
+export default function NodePasswordFormElement({ collectionId, collectionSlug, ...rest }: NodePasswordForm_props): React.JSX.Element;

package/dist/components/NodePasswordForm/NodePasswordFormElement.js

@@ -0,0 +1,65 @@
+'use client';
+
+function _extends() { return _extends = Object.assign ? Object.assign.bind() : function (n) { for (var e = 1; e < arguments.length; e++) { var t = arguments[e]; for (var r in t) ({}).hasOwnProperty.call(t, r) && (n[r] = t[r]); } return n; }, _extends.apply(null, arguments); }
+import _NodePasswordFormElementSlugQuery from "../../__generated__/NodePasswordFormElementSlugQuery.graphql.js";
+import _NodePasswordFormElementIDQuery from "../../__generated__/NodePasswordFormElementIDQuery.graphql.js";
+import React from 'react';
+import { graphql, useLazyLoadQuery } from 'react-relay';
+import NodePasswordForm from './index.js';
+// Auto-detecting wrapper behind the <fontdue-node-password-form> custom element.
+// Unlike the presentational React component (the default export of ./index, used
+// when the server has already detected the lock), this queries the collection
+// itself and renders the form only when access is denied — so it works dropped
+// onto any page, hiding itself for a visitor who already has access.
+
+const idQuery = (_NodePasswordFormElementIDQuery.hash && _NodePasswordFormElementIDQuery.hash !== "213a61ae079e4f57b7b197b0d2f5256a" && console.error("The definition of 'NodePasswordFormElementIDQuery' appears to have changed. Run `relay-compiler` to update the generated files to receive the expected data."), _NodePasswordFormElementIDQuery);
+function NodePasswordFormIDQueryRenderer(_ref) {
+  let {
+    collectionId,
+    ...rest
+  } = _ref;
+  const data = useLazyLoadQuery(idQuery, {
+    collectionId
+  });
+  // The @catch directive surfaces the password-protection error as ok:false; the
+  // node is only locked then, so only then do we render the form (we don't want
+  // to show it to a visitor who already has access).
+  if (data.collection.ok === false) return /*#__PURE__*/React.createElement(NodePasswordForm, _extends({}, rest, {
+    collectionId: collectionId
+  }));
+  return null;
+}
+const slugQuery = (_NodePasswordFormElementSlugQuery.hash && _NodePasswordFormElementSlugQuery.hash !== "200a33ca6a1f9e4e7e95b7100bbdd261" && console.error("The definition of 'NodePasswordFormElementSlugQuery' appears to have changed. Run `relay-compiler` to update the generated files to receive the expected data."), _NodePasswordFormElementSlugQuery);
+function NodePasswordFormSlugQueryRenderer(_ref2) {
+  var _data$viewer$slug;
+  let {
+    collectionSlug,
+    ...rest
+  } = _ref2;
+  const data = useLazyLoadQuery(slugQuery, {
+    collectionSlug
+  });
+  // see note in NodePasswordFormIDQueryRenderer
+  if (((_data$viewer$slug = data.viewer.slug) === null || _data$viewer$slug === void 0 ? void 0 : _data$viewer$slug.collection.ok) === false) return /*#__PURE__*/React.createElement(NodePasswordForm, _extends({}, rest, {
+    collectionSlug: collectionSlug
+  }));
+  return null;
+}
+export default function NodePasswordFormElement(_ref3) {
+  let {
+    collectionId,
+    collectionSlug,
+    ...rest
+  } = _ref3;
+  if (collectionId) {
+    return /*#__PURE__*/React.createElement(NodePasswordFormIDQueryRenderer, _extends({
+      collectionId: collectionId
+    }, rest));
+  }
+  if (collectionSlug) {
+    return /*#__PURE__*/React.createElement(NodePasswordFormSlugQueryRenderer, _extends({
+      collectionSlug: collectionSlug
+    }, rest));
+  }
+  throw new Error('NodePasswordForm expected either a collectionId or collectionSlug prop');
+}

package/dist/components/NodePasswordForm/index.d.ts

@@ -3,4 +3,19 @@ export interface NodePasswordForm_props {
     collectionId?: string | null;
     collectionSlug?: string | null;
 }
-export default function NodePasswordForm({ collectionId, collectionSlug, ...rest }: NodePasswordForm_props): React.JSX.Element;
+/**
+ * Password form for a collection you already know is locked. Render it when a
+ * collection comes back password-protected (see the per-framework guides): it
+ * commits the `accessNode` mutation, remembers the returned access token, and
+ * reloads so the now-unlocked collection renders.
+ *
+ * Unlike the `<fontdue-node-password-form>` custom element (which detects the
+ * locked state itself), this does no data fetching of its own, so it renders
+ * immediately on the server with no Suspense flash — the server already detected
+ * the lock.
+ *
+ * Self-wraps in `EnsureFontdueContext` so it works as a standalone island (e.g.
+ * an Astro `client:load`) without its own provider, and no-ops inside an outer
+ * `<FontdueProvider>` (Next/RR7/TanStack).
+ */
+export default function NodePasswordForm(props: NodePasswordForm_props): React.JSX.Element;

package/dist/components/NodePasswordForm/index.js

@@ -1,14 +1,31 @@
 'use client';
 
-function _extends() { return _extends = Object.assign ? Object.assign.bind() : function (n) { for (var e = 1; e < arguments.length; e++) { var t = arguments[e]; for (var r in t) ({}).hasOwnProperty.call(t, r) && (n[r] = t[r]); } return n; }, _extends.apply(null, arguments); }
-import _NodePasswordFormSlugQuery from "../../__generated__/NodePasswordFormSlugQuery.graphql.js";
-import _NodePasswordFormIDQuery from "../../__generated__/NodePasswordFormIDQuery.graphql.js";
 import _NodePasswordFormAccessNodeMutation from "../../__generated__/NodePasswordFormAccessNodeMutation.graphql.js";
 import React, { useState } from 'react';
-import { graphql, useLazyLoadQuery, useMutation } from 'react-relay';
+import { graphql, useMutation } from 'react-relay';
 import TextField from '../TextField/index.js';
-const accessNodeMutation = (_NodePasswordFormAccessNodeMutation.hash && _NodePasswordFormAccessNodeMutation.hash !== "d0beeb729c358ef4eebd1c8be47ec68e" && console.error("The definition of 'NodePasswordFormAccessNodeMutation' appears to have changed. Run `relay-compiler` to update the generated files to receive the expected data."), _NodePasswordFormAccessNodeMutation);
-function NodePasswordFormComponent(props) {
+import { EnsureFontdueContext } from '../FontdueContextProvider/index.js';
+import { rememberNodeAccessToken } from '../../nodeAccess.js';
+const accessNodeMutation = (_NodePasswordFormAccessNodeMutation.hash && _NodePasswordFormAccessNodeMutation.hash !== "eb0d3828d65a52c727ef60caa67709a1" && console.error("The definition of 'NodePasswordFormAccessNodeMutation' appears to have changed. Run `relay-compiler` to update the generated files to receive the expected data."), _NodePasswordFormAccessNodeMutation);
+/**
+ * Password form for a collection you already know is locked. Render it when a
+ * collection comes back password-protected (see the per-framework guides): it
+ * commits the `accessNode` mutation, remembers the returned access token, and
+ * reloads so the now-unlocked collection renders.
+ *
+ * Unlike the `<fontdue-node-password-form>` custom element (which detects the
+ * locked state itself), this does no data fetching of its own, so it renders
+ * immediately on the server with no Suspense flash — the server already detected
+ * the lock.
+ *
+ * Self-wraps in `EnsureFontdueContext` so it works as a standalone island (e.g.
+ * an Astro `client:load`) without its own provider, and no-ops inside an outer
+ * `<FontdueProvider>` (Next/RR7/TanStack).
+ */
+export default function NodePasswordForm(props) {
+  return /*#__PURE__*/React.createElement(EnsureFontdueContext, null, /*#__PURE__*/React.createElement(NodePasswordFormFields, props));
+}
+function NodePasswordFormFields(props) {
   const [password, setPassword] = useState('');
   const [error, setError] = useState(null);
   const [commitMutation, submitting] = useMutation(accessNodeMutation);
@@ -27,7 +44,14 @@ function NodePasswordFormComponent(props) {
       onCompleted: res => {
         var _res$accessNode;
         if ((_res$accessNode = res.accessNode) !== null && _res$accessNode !== void 0 && _res$accessNode.success) {
+          // Persist the token so the next server render unlocks the collection:
+          // the Fontdue session cookie that does this for script-tag sites can't
+          // ride a proxied or cross-origin server fetch, so we forward this
+          // token as a header instead (see fontdue-js nodeAccess).
+          rememberNodeAccessToken(res.accessNode.token);
           location.reload();
+        } else {
+          setError('Incorrect password');
         }
       },
       onError: error => {
@@ -55,57 +79,4 @@ function NodePasswordFormComponent(props) {
     disabled: disabled,
     className: "submit-button"
   }, "Submit")));
-}
-const idQuery = (_NodePasswordFormIDQuery.hash && _NodePasswordFormIDQuery.hash !== "2af86f8f6df3d2e6061ea1c9dd777a26" && console.error("The definition of 'NodePasswordFormIDQuery' appears to have changed. Run `relay-compiler` to update the generated files to receive the expected data."), _NodePasswordFormIDQuery);
-function NodePasswordFormIDQueryRenderer(_ref) {
-  let {
-    collectionId,
-    ...rest
-  } = _ref;
-  const data = useLazyLoadQuery(idQuery, {
-    collectionId
-  });
-  // this is counterintuitive, but we've added the @catch directive on the collection,
-  // and we're expecting it to respond with an error if the node is inaccessible due to being
-  // password-protected. so, when we encounter the error we're safe to render the password form.
-  // (we don't want to show the form if the user has already gained access)
-  if (data.collection.ok === false) return /*#__PURE__*/React.createElement(NodePasswordFormComponent, _extends({}, rest, {
-    collectionId: collectionId
-  }));
-}
-const slugQuery = (_NodePasswordFormSlugQuery.hash && _NodePasswordFormSlugQuery.hash !== "c40faf067007027fa9ba6673350c7202" && console.error("The definition of 'NodePasswordFormSlugQuery' appears to have changed. Run `relay-compiler` to update the generated files to receive the expected data."), _NodePasswordFormSlugQuery);
-function NodePasswordFormSlugQueryRenderer(_ref2) {
-  var _data$viewer$slug;
-  let {
-    collectionSlug,
-    ...rest
-  } = _ref2;
-  const data = useLazyLoadQuery(slugQuery, {
-    collectionSlug
-  });
-  // see note in NodePasswordFormIDQueryRenderer
-  if (((_data$viewer$slug = data.viewer.slug) === null || _data$viewer$slug === void 0 ? void 0 : _data$viewer$slug.collection.ok) === false) return /*#__PURE__*/React.createElement(NodePasswordFormComponent, _extends({}, rest, {
-    collectionSlug: collectionSlug
-  }));
-  return null;
-}
-
-// default client export
-export default function NodePasswordForm(_ref3) {
-  let {
-    collectionId,
-    collectionSlug,
-    ...rest
-  } = _ref3;
-  if (collectionId) {
-    return /*#__PURE__*/React.createElement(NodePasswordFormIDQueryRenderer, _extends({
-      collectionId: collectionId
-    }, rest));
-  }
-  if (collectionSlug) {
-    return /*#__PURE__*/React.createElement(NodePasswordFormSlugQueryRenderer, _extends({
-      collectionSlug: collectionSlug
-    }, rest));
-  }
-  throw new Error('NodePasswordForm expected either a collectionId or collectionSlug prop');
 }

package/dist/components/Root/index.js

@@ -16,6 +16,7 @@ const customElementMap = {
   'fontdue-cart': /*#__PURE__*/lazy(() => retryImport(() => import('../Cart/index.js'))),
   'fontdue-cart-button': /*#__PURE__*/lazy(() => retryImport(() => import('../CartButton/index.js'))),
   'fontdue-character-viewer': /*#__PURE__*/lazy(() => retryImport(() => import('../CharacterViewer/index.js'))),
+  'fontdue-feature-testers': /*#__PURE__*/lazy(() => retryImport(() => import('../FeatureTester/FeatureTestersElement.js'))),
   // @ts-ignore
   'fontdue-collection-aa': /*#__PURE__*/lazy(() => retryImport(() => import('../CollectionAa/index.js'))),
   // @ts-ignore
@@ -23,7 +24,7 @@ const customElementMap = {
   'fontdue-font-families': /*#__PURE__*/lazy(() => retryImport(() => import('../FontFamilies/index.js'))),
   'fontdue-customer-login-form': /*#__PURE__*/lazy(() => retryImport(() => import('../CustomerLoginForm/index.js'))),
   'fontdue-newsletter-signup': /*#__PURE__*/lazy(() => retryImport(() => import('../NewsletterSignup/NewsletterSignupElement.js'))),
-  'fontdue-node-password-form': /*#__PURE__*/lazy(() => retryImport(() => import('../NodePasswordForm/index.js'))),
+  'fontdue-node-password-form': /*#__PURE__*/lazy(() => retryImport(() => import('../NodePasswordForm/NodePasswordFormElement.js'))),
   // @ts-ignore
   'fontdue-precart': /*#__PURE__*/lazy(() => retryImport(() => import('../Precart/index.js'))),
   // @ts-ignore

package/dist/fontdue.css

@@ -807,6 +807,151 @@ fontdue-type-tester {
   font-weight: inherit;
 }
 
+fontdue-feature-tester,
+fontdue-feature-testers {
+  display: block;
+  max-width: 100%;
+  min-width: 0;
+}
+
+.fontdue-feature-tester {
+  --_ft-text: var(--fontdue-feature-tester-text, var(--primary_text_color, currentColor));
+  --_ft-muted: var(
+    --fontdue-feature-tester-muted,
+    color-mix(in srgb, var(--_ft-text) 50%, transparent)
+  );
+  --_ft-highlight: var(--fontdue-feature-tester-highlight, var(--_ft-text));
+  --_ft-bg: var(--fontdue-feature-tester-bg, transparent);
+  --_ft-border: var(
+    --fontdue-feature-tester-border,
+    1px solid var(--horizontal_rule_color, color-mix(in srgb, currentColor 15%, transparent))
+  );
+  --_ft-radius: var(--fontdue-feature-tester-radius, 0);
+  --_ft-padding: var(--fontdue-feature-tester-padding, 18px 0 30px);
+  --_ft-align: var(--fontdue-feature-tester-align, left);
+  font-size: 1rem;
+  color: var(--_ft-text);
+  background: var(--_ft-bg);
+  border-top: var(--_ft-border);
+  border-radius: var(--_ft-radius);
+  padding: var(--_ft-padding);
+  min-width: 0;
+  max-width: 100%;
+}
+.fontdue-feature-tester__bar {
+  display: flex;
+  align-items: center;
+  gap: 14px;
+  margin-bottom: 16px;
+}
+.fontdue-feature-tester__toggle {
+  background: none;
+  color: inherit;
+  font: inherit;
+  text-decoration: inherit;
+  text-align: inherit;
+  border: 0;
+  border-radius: 0;
+  padding: 0;
+  margin: 0;
+  appearance: none;
+  text-transform: inherit;
+}
+.fontdue-feature-tester__toggle:active, .fontdue-feature-tester__toggle:focus {
+  outline: none;
+}
+.fontdue-feature-tester__toggle:not(:disabled) {
+  cursor: pointer;
+}
+.fontdue-feature-tester__toggle {
+  display: inline-flex;
+  align-items: center;
+  flex: none;
+  color: inherit;
+  font: inherit;
+}
+.fontdue-feature-tester__toggle:focus-visible .fontdue-feature-tester__switch {
+  outline: 1px solid currentcolor;
+  outline-offset: 2px;
+}
+.fontdue-feature-tester__switch {
+  --_sw-w: var(--fontdue-feature-tester-switch-width, 40px);
+  --_sw-h: var(--fontdue-feature-tester-switch-height, 20px);
+  --_sw-r: var(--fontdue-feature-tester-switch-radius, 0);
+  --_sw-p: var(--fontdue-feature-tester-switch-padding, 2px);
+  --_sw-b: var(--fontdue-feature-tester-switch-border-width, 1px);
+  --_sw-color: var(--fontdue-feature-tester-switch-color, currentColor);
+  --_sw-knob: var(--fontdue-feature-tester-switch-knob, var(--primary_background_color, canvas));
+  --_sw-track: var(--fontdue-feature-tester-switch-track, transparent);
+  --_sw-travel: calc(var(--_sw-w) - var(--_sw-h));
+  position: relative;
+  box-sizing: border-box;
+  width: var(--_sw-w);
+  height: var(--_sw-h);
+  flex: none;
+  border: var(--_sw-b) solid var(--_sw-color);
+  border-radius: var(--_sw-r);
+  background: var(--_sw-track);
+  transition: background 120ms ease-out;
+}
+.fontdue-feature-tester__switch::after {
+  content: "";
+  position: absolute;
+  box-sizing: border-box;
+  top: var(--_sw-p);
+  left: var(--_sw-p);
+  bottom: var(--_sw-p);
+  aspect-ratio: 1;
+  border: var(--_sw-b) solid var(--_sw-color);
+  border-radius: var(--_sw-r);
+  background: transparent;
+  transition: transform 120ms ease-out, background 120ms ease-out;
+}
+@media (hover: hover) {
+  .fontdue-feature-tester[data-on=false] .fontdue-feature-tester__toggle:hover .fontdue-feature-tester__switch::after {
+    background: var(--_sw-color);
+  }
+}
+.fontdue-feature-tester__label {
+  white-space: nowrap;
+}
+.fontdue-feature-tester[data-toggle=button] .fontdue-feature-tester__label {
+  cursor: pointer;
+}
+.fontdue-feature-tester__tag {
+  margin-left: auto;
+  color: inherit;
+}
+.fontdue-feature-tester[data-on=true] .fontdue-feature-tester__switch {
+  background: var(--_sw-color);
+}
+.fontdue-feature-tester[data-on=true] .fontdue-feature-tester__switch::after {
+  transform: translateX(var(--_sw-travel));
+  border-color: transparent;
+  background: var(--_sw-knob);
+}
+.fontdue-feature-tester[data-toggle=hover] .fontdue-feature-tester__switch,
+.fontdue-feature-tester[data-toggle=hover] .fontdue-feature-tester__toggle {
+  display: none;
+}
+@media (hover: none) {
+  .fontdue-feature-tester[data-toggle=hover] .fontdue-feature-tester__switch,
+  .fontdue-feature-tester[data-toggle=hover] .fontdue-feature-tester__toggle {
+    display: inline-flex;
+  }
+}
+.fontdue-feature-tester__sample {
+  white-space: pre-wrap;
+  text-align: var(--_ft-align);
+  color: var(--_ft-text);
+}
+.fontdue-feature-tester[data-highlighted=true] .fontdue-feature-tester__sample {
+  color: var(--_ft-muted);
+}
+.fontdue-feature-tester__hit {
+  color: var(--_ft-highlight);
+}
+
 .select-button {
   background: none;
   color: inherit;

package/dist/hooks/useFeatureTesterAutofit.d.ts

@@ -0,0 +1,17 @@
+export interface UseFeatureTesterAutofitProps {
+    enabled: boolean;
+    text: string;
+    fontFamily: string | null;
+    feature: string;
+    fontSize: number;
+    min?: number;
+    max?: number;
+    letterSpacing?: number;
+    fontVariationSettings?: string;
+    padding?: number;
+}
+export interface UseFeatureTesterAutofitResult {
+    ref: React.RefObject<HTMLDivElement | null>;
+    fontSize: number;
+}
+export default function useFeatureTesterAutofit({ enabled, text, fontFamily, feature, fontSize, min, max, letterSpacing, fontVariationSettings, padding, }: UseFeatureTesterAutofitProps): UseFeatureTesterAutofitResult;

package/dist/hooks/useFeatureTesterAutofit.js

@@ -0,0 +1,106 @@
+import { useRef, useState, useLayoutEffect } from 'react';
+import useResizeObserver from './useResizeObserver.js';
+
+// Autofit for the Feature Tester. Unlike the plain type-tester autofit, the
+// rendered width depends on the toggle state — an alternate glyph is wider or
+// narrower, a ligature collapses, a fraction shrinks. So we measure the sample
+// in BOTH states (feature off and on) and size to fit the WIDER one. The size
+// is then fixed across toggles, so the tester never reflows or overflows when
+// the feature is switched.
+//
+// Measurement must use the DOM (not canvas): canvas `measureText` can't apply
+// `font-feature-settings`, which is exactly the thing that changes the width.
+// Measuring the whole string with the feature applied is exact here, not an
+// over-estimate: a character the feature doesn't touch renders identically
+// whether the feature is on or off, so the two measurements are precisely the
+// tester's two real states.
+
+const REF_SIZE = 100;
+let measureEl = null;
+function getMeasureElement() {
+  if (!measureEl) {
+    measureEl = document.createElement('span');
+    measureEl.style.position = 'absolute';
+    measureEl.style.top = '-9999px';
+    measureEl.style.left = '-9999px';
+    measureEl.style.whiteSpace = 'pre';
+    measureEl.style.visibility = 'hidden';
+    document.body.appendChild(measureEl);
+  }
+  return measureEl;
+}
+function measure(text, fontFamily, letterSpacing, fontFeatureSettings, fontVariationSettings) {
+  const el = getMeasureElement();
+  el.style.fontFamily = fontFamily;
+  el.style.fontSize = `${REF_SIZE}px`;
+  el.style.letterSpacing = `${letterSpacing}em`;
+  el.style.fontFeatureSettings = fontFeatureSettings;
+  el.style.fontVariationSettings = fontVariationSettings;
+  el.textContent = text;
+  return el.getBoundingClientRect().width;
+}
+export default function useFeatureTesterAutofit(_ref) {
+  let {
+    enabled,
+    text,
+    fontFamily,
+    feature,
+    fontSize,
+    min = 8,
+    max = 999,
+    letterSpacing = 0,
+    fontVariationSettings = '',
+    padding = 0
+  } = _ref;
+  const ref = useRef(null);
+  const [size, setSize] = useState(fontSize);
+  const [containerWidth, setContainerWidth] = useState(0);
+  const [fontVersion, setFontVersion] = useState(0);
+  useResizeObserver(ref, entry => setContainerWidth(entry.contentRect.width));
+
+  // Re-measure once the webfont is available (measuring the fallback would size
+  // to the wrong metrics). The font is often already cached — other cards on the
+  // page load the same family — so `document.fonts.load` can resolve in a
+  // microtask *before* a freshly-measured element reflects the loaded font in
+  // layout. Re-measuring on the next animation frame, when layout is font-ready,
+  // avoids sizing to a stale fallback measurement that then never gets corrected.
+  // Re-measure until the sizing lands on the real webfont metrics. A fresh DOM
+  // measurement can lag the font becoming available — the family is often
+  // already cached (other cards on the page load it), so `fonts.load`/
+  // `fonts.ready` can settle a frame or two before a measured element actually
+  // reflects it. Sizing to that stale fallback measurement would then stick.
+  // Re-measuring across a short schedule lets the size settle onto the real
+  // metrics whenever they land; the extra `fonts.ready` bump covers slow loads
+  // beyond the schedule.
+  useLayoutEffect(() => {
+    if (!enabled || !fontFamily) return;
+    let cancelled = false;
+    const bump = () => {
+      if (!cancelled) setFontVersion(v => v + 1);
+    };
+    const timers = [0, 80, 200, 500, 1000].map(ms => window.setTimeout(bump, ms));
+    document.fonts.ready.then(bump);
+    return () => {
+      cancelled = true;
+      timers.forEach(clearTimeout);
+    };
+  }, [enabled, fontFamily]);
+  useLayoutEffect(() => {
+    if (!enabled || !fontFamily) return;
+    const available = containerWidth - padding;
+    if (available <= 0 || !text) return;
+    const off = `"${feature}" 0`;
+    const on = `"${feature}" 1`;
+    // Widest line across both states — samples can carry authored newlines.
+    const refWidth = Math.max(...text.split('\n').flatMap(line => [measure(line, fontFamily, letterSpacing, off, fontVariationSettings), measure(line, fontFamily, letterSpacing, on, fontVariationSettings)]));
+    if (refWidth <= 0) return;
+
+    // Width scales linearly with font-size; floor to avoid a sub-pixel wrap.
+    const next = Math.min(Math.max(min, Math.floor(available / (refWidth / REF_SIZE))), max);
+    setSize(next);
+  }, [enabled, text, fontFamily, feature, letterSpacing, fontVariationSettings, containerWidth, min, max, padding, fontVersion]);
+  return {
+    ref,
+    fontSize: enabled ? size : fontSize
+  };
+}

package/dist/next/index.d.ts

@@ -1 +1,3 @@
 export { __prepareFontdueRender, type FontdueEndpoint } from './tenant.js';
+import { nodeAccessHeaders } from './tenant.js';
+export { nodeAccessHeaders };

package/dist/next/index.js

@@ -15,4 +15,19 @@
 // configureFontdueRender, setFontdueServerConfig) are deliberately not
 // re-exported here; the modules that need them import them directly from
 // './tenant.js' / '../relay/serverConfig.js'.
-export { __prepareFontdueRender } from './tenant.js';
+export { __prepareFontdueRender } from './tenant.js';
+import { registerNodeAccessRecovery } from '../relay/serverConfig.js';
+import { nodeAccessHeaders } from './tenant.js';
+
+// Wire up automatic node-access recovery: when a server fetch comes back
+// `password_protected`, createFontdueFetch calls this to read the visitor's
+// node-access cookie and (if they've unlocked the collection) fold the token
+// into the per-render config + retry — so the page fetch and the embedded server
+// components' preloads resolve, with no per-fetch plumbing in the app. Importing
+// this entry (the next-template does, via __prepareFontdueRender) registers it.
+registerNodeAccessRecovery(() => nodeAccessHeaders());
+
+// Escape hatch (rarely needed now recovery is automatic): the visitor's
+// per-collection node-access header for this request, or {} when none. See the
+// password-protected-collections guide.
+export { nodeAccessHeaders };

package/dist/next/registerSingleTenantResolver.js

@@ -15,7 +15,19 @@
 // stays safe for any non-Next RSC consumer. (Today only Next resolves the
 // react-server export condition, but the decoupling makes that a structural
 // invariant rather than an incidental one.)
-import { registerAmbientConfigResolver } from '../relay/serverConfig.js';
+import { registerAmbientConfigResolver, registerNodeAccessRecovery } from '../relay/serverConfig.js';
+
+// Automatic node-access recovery for single-tenant Next apps (the same hook the
+// multi-tenant entry registers). createFontdueFetch calls this when a fetch
+// comes back `password_protected`; it reads the visitor's node-access cookie via
+// Next's request APIs. Lazy-imported, for the same reason as the resolver below:
+// keep next/headers off this module's static graph.
+registerNodeAccessRecovery(async () => {
+  const {
+    nodeAccessHeaders
+  } = await import('./tenant.js');
+  return nodeAccessHeaders();
+});
 registerAmbientConfigResolver(async () => {
   // Loaded lazily so next/headers + next/navigation never enter the
   // provider's static graph; config is read per fetch from Next's request

package/dist/next/tenant.d.ts

@@ -23,4 +23,5 @@ interface RenderProps {
 }
 export declare function buildRenderConfig(domain: string): Promise<FontdueServerConfig>;
 export declare function __prepareFontdueRender(props: RenderProps): Promise<FontdueEndpoint>;
+export declare function nodeAccessHeaders(): Promise<Record<string, string>>;
 export {};