@oxyhq/core 3.4.6 → 3.4.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/core",
-  "version": "3.4.6",
+  "version": "3.4.7",
   "description": "OxyHQ SDK Foundation — API client, authentication, cryptographic identity, and shared utilities",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",

package/src/OxyServices.base.ts

@@ -151,6 +151,13 @@ export class OxyServicesBase {
     const unsubscribe = this.onTokensChanged(syncToken);
     client.setAuthRefreshHandler(async (reason: AuthRefreshReason) => {
       const refreshed = await this.httpService.refreshAccessToken(reason);
+      if (!refreshed) {
+        if (reason === 'response-401') {
+          this.clearTokens();
+        }
+        return null;
+      }
+
       syncToken(refreshed);
       return refreshed;
     });

package/src/__tests__/linkedClient.test.ts

@@ -49,6 +49,34 @@ describe('OxyServices.createLinkedClient', () => {
     linked.dispose();
   });
 
+  it('clears the session owner when a linked response 401 cannot refresh', async () => {
+    const oxy = createServices();
+    oxy.setTokens('stale_access');
+    const linked = oxy.createLinkedClient({ baseURL: 'https://api.syra.fm' });
+
+    const refreshed = await linked.client.refreshAccessToken('response-401');
+
+    expect(refreshed).toBeNull();
+    expect(oxy.getAccessToken()).toBeNull();
+    expect(linked.client.getAccessToken()).toBeNull();
+
+    linked.dispose();
+  });
+
+  it('keeps the session owner intact when linked preflight refresh cannot refresh', async () => {
+    const oxy = createServices();
+    oxy.setTokens('existing_access');
+    const linked = oxy.createLinkedClient({ baseURL: 'https://api.syra.fm' });
+
+    const refreshed = await linked.client.refreshAccessToken('preflight');
+
+    expect(refreshed).toBeNull();
+    expect(oxy.getAccessToken()).toBe('existing_access');
+    expect(linked.client.getAccessToken()).toBe('existing_access');
+
+    linked.dispose();
+  });
+
   it('stops mirroring after dispose', () => {
     const oxy = createServices();
     const linked = oxy.createLinkedClient({ baseURL: 'https://api.syra.fm' });