@oxyhq/core 3.17.0 → 3.18.0

package/dist/cjs/mixins/OxyServices.auth.js

@@ -694,7 +694,9 @@ function OxyServicesAuthMixin(Base) {
                     continue;
                 }
                 const userId = e.user.id ?? e.user._id;
-                if (!userId || !e.user.username || !e.user.name?.displayName) {
+                // `name.displayName` is optional on the contract — do NOT drop no-name
+                // accounts. Only an absent userId or username makes the entry unusable.
+                if (!userId || !e.user.username) {
                     continue;
                 }
                 if (typeof e.authuser !== 'number') {
@@ -708,7 +710,9 @@ function OxyServicesAuthMixin(Base) {
                     user: {
                         id: userId,
                         username: e.user.username,
-                        name: e.user.name,
+                        // `name.displayName` is optional; carry whatever structured name the
+                        // server sent (possibly an empty object) and let consumers fall back.
+                        name: e.user.name ?? {},
                         avatar: e.user.avatar ?? null,
                         email: e.user.email,
                         color: e.user.color ?? null,

package/dist/cjs/mixins/OxyServices.links.js

@@ -38,11 +38,15 @@ function OxyServicesLinksMixin(Base) {
          * Resolve multiple link previews via `POST /links/previews` (body `{ urls }`).
          *
          * Inputs are de-duplicated and split into chunks of {@link LINK_PREVIEWS_CHUNK_SIZE}
-         * (the server-side cap). Chunks run concurrently and their `data` maps are
+         * (the server-side cap). Chunks run concurrently and their result maps are
          * merged into a single result keyed by the REQUESTED url (the exact string
          * passed in `urls`) — matching the batch contract — so a caller can always
          * look its own input back up.
          *
+         * `makeRequest` unwraps the API's top-level `{ data }` envelope (same as
+         * `getUsersByIds`'s `makeServiceRequest<User[]>`), so each chunk response is
+         * already the `Record<url, LinkPreview>` map — merge it directly.
+         *
          * An empty / whitespace-only input resolves immediately with `{}` and
          * performs no network call. A failure in any chunk surfaces (via
          * `handleError`) rather than being swallowed.
@@ -58,7 +62,7 @@ function OxyServicesLinksMixin(Base) {
             }
             try {
                 const responses = await Promise.all(chunks.map((chunk) => this.makeRequest('POST', '/links/previews', { urls: chunk }, { cache: false })));
-                return responses.reduce((merged, response) => Object.assign(merged, response?.data ?? {}), {});
+                return responses.reduce((merged, response) => Object.assign(merged, response ?? {}), {});
             }
             catch (error) {
                 throw this.handleError(error);

package/dist/cjs/mixins/OxyServices.sso.js

@@ -142,13 +142,16 @@ function OxyServicesSsoMixin(Base) {
                 throw this.handleError(new Error('SSO exchange returned no sessionId'));
             }
             const userId = payload.user?.id ?? payload.user?._id;
-            if (!userId || typeof payload.user?.username !== 'string' || typeof payload.user.name?.displayName !== 'string') {
+            if (!userId || typeof payload.user?.username !== 'string') {
                 throw this.handleError(new Error('SSO exchange returned an invalid user'));
             }
             const user = {
                 id: userId,
                 username: payload.user.username,
-                name: payload.user.name,
+                // `name.displayName` is optional on the contract. A no-name user is
+                // valid; carry whatever structured name the server sent (possibly an
+                // empty object) and let consumers fall back to a handle.
+                name: payload.user.name ?? {},
                 avatar: payload.user.avatar,
             };
             // Plant the access token exactly like exchangeIdTokenForSession does.