@oxy.so/core 1.18.1 → 3.0.0

package/src/mixins/__tests__/followCacheInvalidation.test.ts

@@ -1,173 +0,0 @@
-/**
- * Follow-status cache invalidation tests.
- *
- * Regression coverage for the "follow resets after navigating away and back"
- * bug. `getFollowStatus(userId)` caches `GET /users/<id>/follow-status` for
- * ~1 minute (identity-scoped). A follow/unfollow write must INVALIDATE that
- * cached entry, otherwise a `FollowButton` that remounts within the TTL window
- * re-reads the STALE pre-write status and reverts the optimistic UI.
- *
- * These tests pin down that:
- *  - a cached `follow-status` is NOT served after `followUser` /
- *    `unfollowUser` / `followUsers` / `unfollowUsers` — the next read
- *    re-fetches and observes the new server truth,
- *  - each mutation invalidates the exact logical key(s) for the affected ids.
- */
-
-import { OxyServices } from '../../OxyServices';
-
-/**
- * Build a non-verified JWT whose payload decodes to the given claims.
- * `jwtDecode` only base64url-decodes the middle segment (no signature check).
- */
-function makeJwt(payload: Record<string, unknown>): string {
-  const b64url = (obj: Record<string, unknown>): string =>
-    Buffer.from(JSON.stringify(obj)).toString('base64url');
-  const fullPayload = { exp: Math.floor(Date.now() / 1000) + 3600, ...payload };
-  return `${b64url({ alg: 'none', typ: 'JWT' })}.${b64url(fullPayload)}.sig`;
-}
-
-/** A JSON `Response` mimicking the API's `{ data: ... }` success envelope. */
-function jsonResponse(data: unknown): Response {
-  return new Response(JSON.stringify({ data }), {
-    status: 200,
-    headers: { 'content-type': 'application/json' },
-  });
-}
-
-describe('follow-status cache invalidation', () => {
-  let originalFetch: typeof globalThis.fetch;
-  let fetchMock: jest.Mock<Promise<Response>, [RequestInfo | URL, RequestInit?]>;
-  let oxy: OxyServices;
-
-  beforeEach(() => {
-    originalFetch = globalThis.fetch;
-    fetchMock = jest.fn();
-    globalThis.fetch = fetchMock as unknown as typeof globalThis.fetch;
-    oxy = new OxyServices({ baseURL: 'http://test.invalid' });
-    oxy.httpService.setTokens(makeJwt({ userId: 'me' }));
-  });
-
-  afterEach(() => {
-    globalThis.fetch = originalFetch;
-    jest.clearAllMocks();
-  });
-
-  it('does NOT serve a stale cached follow-status after followUser', async () => {
-    // 1) Warm the cache: not following yet.
-    fetchMock.mockResolvedValueOnce(jsonResponse({ isFollowing: false }));
-    const before = await oxy.getFollowStatus('target-1');
-    expect(before.isFollowing).toBe(false);
-    expect(fetchMock).toHaveBeenCalledTimes(1);
-
-    // A second read within the TTL is a cache hit (no extra network call).
-    await oxy.getFollowStatus('target-1');
-    expect(fetchMock).toHaveBeenCalledTimes(1);
-
-    // 2) Follow — write succeeds and must bust the cached follow-status.
-    fetchMock.mockResolvedValueOnce(jsonResponse({ success: true, message: 'ok' }));
-    await oxy.followUser('target-1');
-    expect(fetchMock).toHaveBeenCalledTimes(2);
-
-    // 3) Remount-style re-read MUST re-fetch and observe the fresh truth.
-    fetchMock.mockResolvedValueOnce(jsonResponse({ isFollowing: true }));
-    const after = await oxy.getFollowStatus('target-1');
-    expect(fetchMock).toHaveBeenCalledTimes(3);
-    expect(after.isFollowing).toBe(true);
-  });
-
-  it('does NOT serve a stale cached follow-status after unfollowUser', async () => {
-    fetchMock.mockResolvedValueOnce(jsonResponse({ isFollowing: true }));
-    const before = await oxy.getFollowStatus('target-2');
-    expect(before.isFollowing).toBe(true);
-    expect(fetchMock).toHaveBeenCalledTimes(1);
-
-    fetchMock.mockResolvedValueOnce(jsonResponse({ success: true, message: 'ok' }));
-    await oxy.unfollowUser('target-2');
-    expect(fetchMock).toHaveBeenCalledTimes(2);
-
-    fetchMock.mockResolvedValueOnce(jsonResponse({ isFollowing: false }));
-    const after = await oxy.getFollowStatus('target-2');
-    expect(fetchMock).toHaveBeenCalledTimes(3);
-    expect(after.isFollowing).toBe(false);
-  });
-
-  it('busts cached follow-status for every id after followUsers (bulk)', async () => {
-    fetchMock.mockResolvedValueOnce(jsonResponse({ isFollowing: false }));
-    fetchMock.mockResolvedValueOnce(jsonResponse({ isFollowing: false }));
-    await oxy.getFollowStatus('a');
-    await oxy.getFollowStatus('b');
-    expect(fetchMock).toHaveBeenCalledTimes(2);
-
-    fetchMock.mockResolvedValueOnce(
-      jsonResponse({
-        results: [
-          { userId: 'a', success: true, alreadyFollowing: false },
-          { userId: 'b', success: true, alreadyFollowing: false },
-        ],
-        followedCount: 2,
-      }),
-    );
-    await oxy.followUsers(['a', 'b']);
-    expect(fetchMock).toHaveBeenCalledTimes(3);
-
-    // Both ids must re-fetch.
-    fetchMock.mockResolvedValueOnce(jsonResponse({ isFollowing: true }));
-    fetchMock.mockResolvedValueOnce(jsonResponse({ isFollowing: true }));
-    expect((await oxy.getFollowStatus('a')).isFollowing).toBe(true);
-    expect((await oxy.getFollowStatus('b')).isFollowing).toBe(true);
-    expect(fetchMock).toHaveBeenCalledTimes(5);
-  });
-
-  it('busts cached follow-status for every id after unfollowUsers (bulk)', async () => {
-    fetchMock.mockResolvedValueOnce(jsonResponse({ isFollowing: true }));
-    fetchMock.mockResolvedValueOnce(jsonResponse({ isFollowing: true }));
-    await oxy.getFollowStatus('a');
-    await oxy.getFollowStatus('b');
-    expect(fetchMock).toHaveBeenCalledTimes(2);
-
-    fetchMock.mockResolvedValueOnce(
-      jsonResponse({
-        results: [
-          { userId: 'a', success: true, wasFollowing: true },
-          { userId: 'b', success: true, wasFollowing: true },
-        ],
-        unfollowedCount: 2,
-      }),
-    );
-    await oxy.unfollowUsers(['a', 'b']);
-    expect(fetchMock).toHaveBeenCalledTimes(3);
-
-    fetchMock.mockResolvedValueOnce(jsonResponse({ isFollowing: false }));
-    fetchMock.mockResolvedValueOnce(jsonResponse({ isFollowing: false }));
-    expect((await oxy.getFollowStatus('a')).isFollowing).toBe(false);
-    expect((await oxy.getFollowStatus('b')).isFollowing).toBe(false);
-    expect(fetchMock).toHaveBeenCalledTimes(5);
-  });
-
-  it('invalidates the exact logical follow-status key on a single follow', async () => {
-    const clearSpy = jest.spyOn(oxy, 'clearCacheEntry');
-    const clearPrefixSpy = jest.spyOn(oxy, 'clearCacheByPrefix');
-    fetchMock.mockResolvedValueOnce(jsonResponse({ success: true, message: 'ok' }));
-
-    await oxy.followUser('target-3');
-
-    expect(clearSpy).toHaveBeenCalledWith('GET:/users/target-3/follow-status');
-    expect(clearSpy).toHaveBeenCalledWith('GET:/users/target-3');
-    expect(clearPrefixSpy).toHaveBeenCalledWith('GET:/profiles/username/');
-    expect(clearPrefixSpy).toHaveBeenCalledWith('GET:/profiles/resolve');
-    clearSpy.mockRestore();
-    clearPrefixSpy.mockRestore();
-  });
-
-  it('does not invalidate or call the network when bulk follow gets an empty list', async () => {
-    const clearSpy = jest.spyOn(oxy, 'clearCacheEntry');
-
-    const result = await oxy.followUsers([]);
-
-    expect(result).toEqual({ results: [], followedCount: 0 });
-    expect(fetchMock).not.toHaveBeenCalled();
-    expect(clearSpy).not.toHaveBeenCalled();
-    clearSpy.mockRestore();
-  });
-});

package/src/mixins/__tests__/followGraph.test.ts

@@ -1,147 +0,0 @@
-/**
- * Follow Graph Mixin Tests
- *
- * `makeRequest` is stubbed, so what these assert is the CONTRACT this mixin
- * offers the applications above it: which request each method makes, and — the
- * part worth a test rather than a comment — the things it must never send.
- */
-
-import { OxyServices } from '../../OxyServices';
-
-describe('OxyServices.followGraph', () => {
-  let oxy: OxyServices;
-  let makeRequest: jest.SpyInstance;
-
-  beforeEach(() => {
-    oxy = new OxyServices({ baseURL: 'http://test.invalid' });
-    oxy.httpService.setTokens('test-token');
-    makeRequest = jest.spyOn(oxy, 'makeRequest').mockResolvedValue({} as never);
-  });
-
-  afterEach(() => {
-    makeRequest.mockRestore();
-  });
-
-  describe('the identities the client must not be able to state', () => {
-    it('never sends a follower id', async () => {
-      await oxy.followTarget('target-1');
-      await oxy.unfollowTarget('rel-1');
-      await oxy.listFollows();
-
-      // A client that could name the follower could forge a follow on somebody
-      // else's behalf. The server derives it from the session; there must be no
-      // parameter here that even looks like an alternative.
-      for (const call of makeRequest.mock.calls) {
-        expect(JSON.stringify(call)).not.toMatch(/user_?[Ii]d|follower/);
-      }
-    });
-
-    it('sends no application id unless the caller explicitly names another app', async () => {
-      await oxy.setFollowApplicationMode('rel-1', 'disabled');
-
-      // The ordinary case is "this application", derived server-side. Sending an
-      // id here by default would make every app's own writes indistinguishable
-      // from one app acting on another's behalf, which is the privileged
-      // operation.
-      expect(makeRequest.mock.calls[0][2]).toEqual({ mode: 'disabled' });
-    });
-
-    it('passes an explicitly named application through, for the privileged path', async () => {
-      await oxy.setFollowApplicationMode('rel-1', 'enabled', 'app-9');
-      expect(makeRequest.mock.calls[0][2]).toEqual({ mode: 'enabled', applicationId: 'app-9' });
-
-      await oxy.restoreFollowInheritance('rel-1', 'app-9');
-      expect(makeRequest.mock.calls[1][1]).toContain('applicationId=app-9');
-    });
-  });
-
-  describe('request shapes', () => {
-    it('follows with PUT and no body when the follow is permanent', async () => {
-      await oxy.followTarget('target-1');
-      const [method, path, body] = makeRequest.mock.calls[0];
-      expect(method).toBe('PUT');
-      expect(path).toBe('/v2/follows/target-1');
-      expect(body).toEqual({});
-    });
-
-    it('carries expiresIn for a timed follow', async () => {
-      await oxy.followTarget('target-1', { expiresIn: 72 * 60 * 60 });
-      expect(makeRequest.mock.calls[0][2]).toEqual({ expiresIn: 259200 });
-    });
-
-    it('unfollows by relationship id, not by target', async () => {
-      // The relationship is the thing that exists; addressing the unfollow by
-      // target would make the server re-derive which relationship was meant,
-      // and get it wrong for any target a user can follow more than one way.
-      await oxy.unfollowTarget('rel-1');
-      expect(makeRequest.mock.calls[0].slice(0, 2)).toEqual(['DELETE', '/v2/follows/rel-1']);
-    });
-
-    it('reads status per target', async () => {
-      await oxy.getFollowTargetStatus('target-1');
-      expect(makeRequest.mock.calls[0].slice(0, 2)).toEqual([
-        'GET',
-        '/v2/follows/target-1/status',
-      ]);
-    });
-
-    it('restores inheritance with no query string when the app means itself', async () => {
-      await oxy.restoreFollowInheritance('rel-1');
-      expect(makeRequest.mock.calls[0][1]).toBe('/v2/follows/rel-1/context');
-    });
-
-    it('paginates by cursor and filters by kind', async () => {
-      await oxy.listFollows({ kind: 'oxy.topic', cursor: '2026-01-01T00:00:00.000Z', limit: 20 });
-      const path = makeRequest.mock.calls[0][1] as string;
-      expect(path).toContain('kind=oxy.topic');
-      expect(path).toContain('limit=20');
-      expect(path).toContain('cursor=');
-      // Never an offset: the list changes while it is read, and an offset skips
-      // or repeats rows exactly when it does.
-      expect(path).not.toContain('offset');
-    });
-
-    it('escapes an id rather than letting it change the path', async () => {
-      await oxy.followTarget('../../admin');
-      expect(makeRequest.mock.calls[0][1]).toBe('/v2/follows/..%2F..%2Fadmin');
-    });
-
-    it('claims a namespace with POST', async () => {
-      await oxy.claimFollowNamespace('mention');
-      expect(makeRequest.mock.calls[0].slice(0, 3)).toEqual([
-        'POST',
-        '/v2/follow-targets/namespaces',
-        { namespace: 'mention' },
-      ]);
-    });
-
-    it('releases a namespace with DELETE and encodes the segment', async () => {
-      await oxy.releaseFollowNamespace('mention.dev');
-      expect(makeRequest.mock.calls[0].slice(0, 2)).toEqual([
-        'DELETE',
-        '/v2/follow-targets/namespaces/mention.dev',
-      ]);
-    });
-  });
-
-  describe('caching', () => {
-    it('caches nothing', async () => {
-      await oxy.followTarget('t');
-      await oxy.getFollowTargetStatus('t');
-      await oxy.listFollows();
-      await oxy.unfollowTarget('r');
-      await oxy.setFollowApplicationMode('r', 'disabled');
-      await oxy.restoreFollowInheritance('r');
-      await oxy.claimFollowNamespace('ns');
-      await oxy.releaseFollowNamespace('ns');
-
-      // A status cached across a write is the "follow reverts after navigating
-      // away and back" bug the legacy path had to fix with explicit
-      // invalidation. Not caching here leaves the app's own store as the single
-      // cache authority.
-      for (const call of makeRequest.mock.calls) {
-        expect(call[3]).toEqual({ cache: false });
-      }
-    });
-  });
-});

package/src/mixins/__tests__/followGraphPagination.test.ts

@@ -1,271 +0,0 @@
-/**
- * Follow-graph pagination + ordering tests.
- *
- * Regression coverage for the silent "every page is page one" bug.
- * `buildPaginationParams` used to return a `URLSearchParams`, which it then
- * handed to `makeRequest` as a GET's `params`. `HttpService` reads that object
- * with `Object.keys(...)` in TWO places — `buildURL` (decide whether to append
- * a query string) and `generateBaseCacheKey` (build the cache key) — and
- * `Object.keys(new URLSearchParams({ limit: '20' }))` is `[]`, because a
- * `URLSearchParams` exposes its entries through iterator methods rather than
- * own enumerable properties. The consequences were both invisible from the
- * call site:
- *
- *  - no query string was ever sent, so every caller silently got the server's
- *    DEFAULT page no matter which `limit`/`offset` it asked for, and
- *  - every page collapsed onto ONE cache key, so page 2 was served page 1's
- *    cached body without a network call.
- *
- * These tests assert on the URL `fetch` actually received (not on the helper's
- * return value), so they fail against the old `URLSearchParams` implementation
- * and cannot pass vacuously.
- */
-
-import { OxyServices } from '../../OxyServices';
-
-/**
- * Build a non-verified JWT whose payload decodes to the given claims.
- * `jwtDecode` only base64url-decodes the middle segment (no signature check).
- */
-function makeJwt(payload: Record<string, unknown>): string {
-  const b64url = (obj: Record<string, unknown>): string =>
-    Buffer.from(JSON.stringify(obj)).toString('base64url');
-  const fullPayload = { exp: Math.floor(Date.now() / 1000) + 3600, ...payload };
-  return `${b64url({ alg: 'none', typ: 'JWT' })}.${b64url(fullPayload)}.sig`;
-}
-
-/** A paginated `{ data, pagination }` body — passed through by `unwrapResponse`. */
-function pageResponse(data: unknown[], total = 100, hasMore = true): Response {
-  return new Response(JSON.stringify({ data, pagination: { total, hasMore } }), {
-    status: 200,
-    headers: { 'content-type': 'application/json' },
-  });
-}
-
-/** A JSON `{ data: ... }` success envelope. */
-function jsonResponse(data: unknown): Response {
-  return new Response(JSON.stringify({ data }), {
-    status: 200,
-    headers: { 'content-type': 'application/json' },
-  });
-}
-
-describe('follow-graph pagination and ordering', () => {
-  let originalFetch: typeof globalThis.fetch;
-  let fetchMock: jest.Mock<Promise<Response>, [RequestInfo | URL, RequestInit?]>;
-  let oxy: OxyServices;
-
-  /** The URL string passed to `fetch` on call `n` (0-based). */
-  const requestedUrl = (n: number): string => String(fetchMock.mock.calls[n][0]);
-
-  beforeEach(() => {
-    originalFetch = globalThis.fetch;
-    fetchMock = jest.fn();
-    globalThis.fetch = fetchMock as unknown as typeof globalThis.fetch;
-    oxy = new OxyServices({ baseURL: 'http://test.invalid' });
-    oxy.httpService.setTokens(makeJwt({ userId: 'me' }));
-  });
-
-  afterEach(() => {
-    globalThis.fetch = originalFetch;
-    jest.clearAllMocks();
-  });
-
-  describe('the request actually carries the pagination the caller asked for', () => {
-    it('sends limit and offset on getUserFollowers', async () => {
-      fetchMock.mockResolvedValueOnce(pageResponse([]));
-      await oxy.getUserFollowers('target-1', { limit: 20, offset: 40 });
-
-      const url = new URL(requestedUrl(0));
-      expect(url.pathname).toBe('/users/target-1/followers');
-      expect(url.searchParams.get('limit')).toBe('20');
-      expect(url.searchParams.get('offset')).toBe('40');
-    });
-
-    it('sends limit and offset on getUserFollowing', async () => {
-      fetchMock.mockResolvedValueOnce(pageResponse([]));
-      await oxy.getUserFollowing('target-1', { limit: 5, offset: 10 });
-
-      const url = new URL(requestedUrl(0));
-      expect(url.pathname).toBe('/users/target-1/following');
-      expect(url.searchParams.get('limit')).toBe('5');
-      expect(url.searchParams.get('offset')).toBe('10');
-    });
-
-    it('sends limit and offset on getUserMutuals', async () => {
-      fetchMock.mockResolvedValueOnce(pageResponse([]));
-      await oxy.getUserMutuals('target-1', { limit: 7, offset: 14 });
-
-      const url = new URL(requestedUrl(0));
-      expect(url.pathname).toBe('/users/target-1/mutuals');
-      expect(url.searchParams.get('limit')).toBe('7');
-      expect(url.searchParams.get('offset')).toBe('14');
-    });
-
-    it('sends limit on the id-only graph seeds', async () => {
-      fetchMock.mockResolvedValueOnce(jsonResponse([]));
-      await oxy.getMutualUserIds({ limit: 33 });
-      expect(new URL(requestedUrl(0)).searchParams.get('limit')).toBe('33');
-
-      fetchMock.mockResolvedValueOnce(jsonResponse([]));
-      await oxy.getFollowsOfFollowsIds({ limit: 44 });
-      expect(new URL(requestedUrl(1)).searchParams.get('limit')).toBe('44');
-    });
-
-    it('omits the query string entirely when no pagination is given', async () => {
-      fetchMock.mockResolvedValueOnce(pageResponse([]));
-      await oxy.getUserFollowers('target-1');
-
-      expect(requestedUrl(0)).toBe('http://test.invalid/users/target-1/followers');
-    });
-  });
-
-  describe('each page is its own cache entry', () => {
-    it('does NOT serve page 1 cached body to a page 2 request', async () => {
-      fetchMock.mockResolvedValueOnce(pageResponse([{ id: 'a' }]));
-      const first = await oxy.getUserFollowers('target-1', { limit: 1, offset: 0 });
-      expect(first.followers).toEqual([{ id: 'a' }]);
-      expect(fetchMock).toHaveBeenCalledTimes(1);
-
-      // Different offset ⇒ different cache key ⇒ a real second network call.
-      fetchMock.mockResolvedValueOnce(pageResponse([{ id: 'b' }]));
-      const second = await oxy.getUserFollowers('target-1', { limit: 1, offset: 1 });
-
-      expect(fetchMock).toHaveBeenCalledTimes(2);
-      expect(second.followers).toEqual([{ id: 'b' }]);
-      expect(new URL(requestedUrl(1)).searchParams.get('offset')).toBe('1');
-    });
-
-    it('still serves a warm cache hit for the SAME page', async () => {
-      fetchMock.mockResolvedValueOnce(pageResponse([{ id: 'a' }]));
-      await oxy.getUserFollowers('target-1', { limit: 1, offset: 0 });
-      await oxy.getUserFollowers('target-1', { limit: 1, offset: 0 });
-
-      expect(fetchMock).toHaveBeenCalledTimes(1);
-    });
-  });
-
-  describe('sort', () => {
-    it('sends sort=oldest and keeps it out of the request when unset', async () => {
-      fetchMock.mockResolvedValueOnce(pageResponse([]));
-      await oxy.getUserFollowers('target-1', { limit: 10, sort: 'oldest' });
-      expect(new URL(requestedUrl(0)).searchParams.get('sort')).toBe('oldest');
-
-      fetchMock.mockResolvedValueOnce(pageResponse([]));
-      await oxy.getUserFollowers('target-1', { limit: 10 });
-      expect(new URL(requestedUrl(1)).searchParams.has('sort')).toBe(false);
-    });
-
-    it('discriminates the cache key, so flipping sort re-fetches', async () => {
-      fetchMock.mockResolvedValueOnce(pageResponse([{ id: 'newest' }]));
-      const recent = await oxy.getUserFollowers('target-1', { limit: 2, offset: 0, sort: 'recent' });
-      expect(recent.followers).toEqual([{ id: 'newest' }]);
-      expect(fetchMock).toHaveBeenCalledTimes(1);
-
-      fetchMock.mockResolvedValueOnce(pageResponse([{ id: 'oldest' }]));
-      const oldest = await oxy.getUserFollowers('target-1', { limit: 2, offset: 0, sort: 'oldest' });
-
-      expect(fetchMock).toHaveBeenCalledTimes(2);
-      expect(oldest.followers).toEqual([{ id: 'oldest' }]);
-    });
-
-    it('threads sort through getUserFollowing and getUserMutuals', async () => {
-      fetchMock.mockResolvedValueOnce(pageResponse([]));
-      await oxy.getUserFollowing('target-1', { sort: 'oldest' });
-      expect(new URL(requestedUrl(0)).searchParams.get('sort')).toBe('oldest');
-
-      fetchMock.mockResolvedValueOnce(pageResponse([]));
-      await oxy.getUserMutuals('target-1', { sort: 'oldest' });
-      expect(new URL(requestedUrl(1)).searchParams.get('sort')).toBe('oldest');
-    });
-  });
-
-  describe('follow writes invalidate the cached follower/following lists', () => {
-    it('re-fetches the followers list after followUser', async () => {
-      fetchMock.mockResolvedValueOnce(pageResponse([{ id: 'a' }], 1, false));
-      await oxy.getUserFollowers('target-1', { limit: 10, offset: 0 });
-      expect(fetchMock).toHaveBeenCalledTimes(1);
-
-      fetchMock.mockResolvedValueOnce(jsonResponse({ success: true, message: 'ok' }));
-      await oxy.followUser('target-1');
-      expect(fetchMock).toHaveBeenCalledTimes(2);
-
-      // The viewer is now a follower — the list must not come from cache.
-      fetchMock.mockResolvedValueOnce(pageResponse([{ id: 'a' }, { id: 'me' }], 2, false));
-      const after = await oxy.getUserFollowers('target-1', { limit: 10, offset: 0 });
-
-      expect(fetchMock).toHaveBeenCalledTimes(3);
-      expect(after.followers).toHaveLength(2);
-    });
-
-    it('re-fetches the viewer own following list after followUser', async () => {
-      fetchMock.mockResolvedValueOnce(pageResponse([], 0, false));
-      await oxy.getUserFollowing('me', { limit: 10, offset: 0 });
-      expect(fetchMock).toHaveBeenCalledTimes(1);
-
-      fetchMock.mockResolvedValueOnce(jsonResponse({ success: true, message: 'ok' }));
-      await oxy.followUser('target-1');
-
-      fetchMock.mockResolvedValueOnce(pageResponse([{ id: 'target-1' }], 1, false));
-      const after = await oxy.getUserFollowing('me', { limit: 10, offset: 0 });
-
-      expect(fetchMock).toHaveBeenCalledTimes(3);
-      expect(after.following).toEqual([{ id: 'target-1' }]);
-    });
-
-    it('invalidates every page and sort variant, not just the one that was read', async () => {
-      const clearPrefixSpy = jest.spyOn(oxy, 'clearCacheByPrefix');
-      fetchMock.mockResolvedValueOnce(jsonResponse({ success: true, message: 'ok' }));
-
-      await oxy.followUser('target-1');
-
-      // Prefix invalidation is what makes this page/sort agnostic — an exact-key
-      // clear would only bust the single variant the caller happened to read.
-      expect(clearPrefixSpy).toHaveBeenCalledWith('GET:/users/target-1/followers');
-      expect(clearPrefixSpy).toHaveBeenCalledWith('GET:/users/target-1/mutuals');
-      expect(clearPrefixSpy).toHaveBeenCalledWith('GET:/users/me/following');
-      clearPrefixSpy.mockRestore();
-    });
-
-    it('invalidates the follower lists of every id in a bulk follow', async () => {
-      const clearPrefixSpy = jest.spyOn(oxy, 'clearCacheByPrefix');
-      fetchMock.mockResolvedValueOnce(
-        jsonResponse({
-          results: [
-            { userId: 'a', success: true, alreadyFollowing: false },
-            { userId: 'b', success: true, alreadyFollowing: false },
-          ],
-          followedCount: 2,
-        }),
-      );
-
-      await oxy.followUsers(['a', 'b']);
-
-      expect(clearPrefixSpy).toHaveBeenCalledWith('GET:/users/a/followers');
-      expect(clearPrefixSpy).toHaveBeenCalledWith('GET:/users/b/followers');
-      expect(clearPrefixSpy).toHaveBeenCalledWith('GET:/users/me/following');
-      clearPrefixSpy.mockRestore();
-    });
-  });
-
-  describe('getSimilarProfiles forwards pagination params', () => {
-    it('sends limit and offset on getSimilarProfiles', async () => {
-      fetchMock.mockResolvedValueOnce(jsonResponse([]));
-      await oxy.getSimilarProfiles('target-1', { limit: 15, offset: 30 });
-
-      const url = new URL(requestedUrl(0));
-      expect(url.pathname).toBe('/profiles/target-1/similar');
-      expect(url.searchParams.get('limit')).toBe('15');
-      expect(url.searchParams.get('offset')).toBe('30');
-    });
-
-    it('still accepts a bare limit number for backward compatibility', async () => {
-      fetchMock.mockResolvedValueOnce(jsonResponse([]));
-      await oxy.getSimilarProfiles('target-1', 5);
-
-      const url = new URL(requestedUrl(0));
-      expect(url.searchParams.get('limit')).toBe('5');
-      expect(url.searchParams.has('offset')).toBe(false);
-    });
-  });
-});