@oxyhq/core 3.4.15 → 3.4.17

package/dist/esm/AuthManager.js

@@ -397,6 +397,7 @@ export class AuthManager {
                 user: {
                     id: session.user.id,
                     username: session.user.username,
+                    name: session.user.name,
                     avatar: session.user.avatar ?? null,
                 },
                 accessToken: session.accessToken,
@@ -628,6 +629,7 @@ export class AuthManager {
         return {
             id: account.user.id,
             username: account.user.username,
+            name: account.user.name,
             avatar: account.user.avatar ?? undefined,
         };
     }
@@ -672,6 +674,7 @@ export class AuthManager {
             this.currentUser = {
                 id: hydrated.id,
                 username: hydrated.username,
+                name: hydrated.name,
                 avatar: hydrated.avatar ?? undefined,
             };
             this.notifyListeners();
@@ -873,6 +876,7 @@ export class AuthManager {
             ? {
                 id: updated.user.id,
                 username: updated.user.username,
+                name: updated.user.name,
                 avatar: updated.user.avatar ?? undefined,
             }
             : null;
@@ -928,6 +932,7 @@ export class AuthManager {
                     ? {
                         id: next.user.id,
                         username: next.user.username,
+                        name: next.user.name,
                         avatar: next.user.avatar ?? undefined,
                     }
                     : null;

package/dist/esm/mixins/OxyServices.auth.js

@@ -489,7 +489,7 @@ export function OxyServicesAuthMixin(Base) {
                     continue;
                 }
                 const userId = e.user.id ?? e.user._id;
-                if (!userId || !e.user.username) {
+                if (!userId || !e.user.username || !e.user.name?.displayName) {
                     continue;
                 }
                 if (typeof e.authuser !== 'number') {

package/dist/esm/mixins/OxyServices.sso.js

@@ -111,12 +111,13 @@ export function OxyServicesSsoMixin(Base) {
                 throw this.handleError(new Error('SSO exchange returned no sessionId'));
             }
             const userId = payload.user?.id ?? payload.user?._id;
-            if (!userId || typeof payload.user?.username !== 'string') {
+            if (!userId || typeof payload.user?.username !== 'string' || typeof payload.user.name?.displayName !== 'string') {
                 throw this.handleError(new Error('SSO exchange returned an invalid user'));
             }
             const user = {
                 id: userId,
                 username: payload.user.username,
+                name: payload.user.name,
                 avatar: payload.user.avatar,
             };
             // Plant the access token exactly like exchangeIdTokenForSession does.

package/dist/esm/mixins/OxyServices.user.js

@@ -24,7 +24,7 @@ export function OxyServicesUserMixin(Base) {
         }
         /**
          * Lightweight username lookup for login flows.
-         * Returns minimal public info: exists, color, avatar, displayName.
+         * Returns minimal public info: exists, color, avatar, name.displayName.
          * Faster than getProfileByUsername — no stats, no formatting.
          */
         async lookupUsername(username) {

package/dist/esm/utils/accountUtils.js

@@ -17,16 +17,13 @@ export const formatPublicKeyHandle = (publicKey) => {
  * Resolve a friendly display name for a user.
  *
  * Order of preference:
- *  1. `name.full`, or composed `name.first name.last` (FIRST-NAME-ONLY SAFE —
- *     a user with only a first name resolves to that first name, never to the
- *     lowercase username; this is the exact drift bug the auth app hit).
- *  2. `name` (when stored as a plain string)
- *  3. `displayName` (server `displayName` virtual — `username || truncatedKey`).
- *     Placed AFTER the structured name on purpose: the server virtual ignores
- *     `name`, so preferring it first would re-introduce the first-only bug.
- *  4. `username`
- *  5. `Account 0x12345678…` (derived from publicKey, when present)
- *  6. Translated fallback (e.g. "Unnamed")
+ *  1. `name.displayName` from the API user contract.
+ *  2. `name.full`, or composed `name.first name.last` for local unsaved shapes.
+ *  3. `name` when passed as a plain string by local non-DTO call sites.
+ *  4. pre-normalized account-row `displayName`.
+ *  5. `username`
+ *  6. `Account 0x12345678…` (derived from publicKey, when present)
+ *  7. Translated fallback (e.g. "Unnamed")
  *
  * The translation key `common.unnamed` is used for the final fallback. If the
  * caller does not pass a locale, the default English translation is used.
@@ -36,6 +33,9 @@ export const getAccountDisplayName = (user, locale) => {
         return translate(locale, 'common.unnamed');
     const { name, displayName, username, publicKey } = user;
     if (name && typeof name === 'object') {
+        if (typeof name.displayName === 'string' && name.displayName.trim()) {
+            return name.displayName.trim();
+        }
         if (typeof name.full === 'string' && name.full.trim())
             return name.full.trim();
         const first = typeof name.first === 'string' ? name.first.trim() : '';
@@ -100,18 +100,19 @@ export const createQuickAccount = (sessionId, userData, existingAccount, getFile
     const userId = userData.id || (typeof userData._id === 'string' ? userData._id : userData._id?.toString());
     // Preserve existing avatarUrl if avatar hasn't changed (prevents image reload)
     let avatarUrl;
-    if (existingAccount && existingAccount.avatar === userData.avatar && existingAccount.avatarUrl) {
+    const avatar = userData.avatar ?? undefined;
+    if (existingAccount && existingAccount.avatar === avatar && existingAccount.avatarUrl) {
         avatarUrl = existingAccount.avatarUrl;
     }
-    else if (userData.avatar && getFileDownloadUrl) {
-        avatarUrl = getFileDownloadUrl(userData.avatar, 'thumb');
+    else if (avatar && getFileDownloadUrl) {
+        avatarUrl = getFileDownloadUrl(avatar, 'thumb');
     }
     return {
         sessionId,
         userId,
         username: userData.username || '',
         displayName,
-        avatar: userData.avatar,
+        avatar,
         avatarUrl,
     };
 };