@oxyhq/core 3.4.6 → 3.4.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/core",
-  "version": "3.4.6",
+  "version": "3.4.8",
   "description": "OxyHQ SDK Foundation — API client, authentication, cryptographic identity, and shared utilities",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",

package/src/HttpService.ts

@@ -756,7 +756,9 @@ export class HttpService {
    * Build full URL with query params
    */
   private buildURL(url: string, params?: Record<string, unknown>): string {
-    const base = url.startsWith('http') ? url : `${this.baseURL}${url}`;
+    const base = /^https?:\/\//i.test(url)
+      ? url
+      : `${this.baseURL.replace(/\/+$/, '')}/${url.replace(/^\/+/, '')}`;
     
     if (!params || Object.keys(params).length === 0) {
       return base;

package/src/OxyServices.base.ts

@@ -151,6 +151,13 @@ export class OxyServicesBase {
     const unsubscribe = this.onTokensChanged(syncToken);
     client.setAuthRefreshHandler(async (reason: AuthRefreshReason) => {
       const refreshed = await this.httpService.refreshAccessToken(reason);
+      if (!refreshed) {
+        if (reason === 'response-401') {
+          this.clearTokens();
+        }
+        return null;
+      }
+
       syncToken(refreshed);
       return refreshed;
     });

package/src/__tests__/linkedClient.test.ts

@@ -4,6 +4,13 @@ function createServices(): OxyServices {
   return new OxyServices({ baseURL: 'https://api.oxy.so' });
 }
 
+function jsonResponse(data: unknown): Response {
+  return new Response(JSON.stringify({ data }), {
+    status: 200,
+    headers: { 'content-type': 'application/json' },
+  });
+}
+
 describe('OxyServices.createLinkedClient', () => {
   it('mirrors token changes from the session owner', () => {
     const oxy = createServices();
@@ -49,6 +56,34 @@ describe('OxyServices.createLinkedClient', () => {
     linked.dispose();
   });
 
+  it('clears the session owner when a linked response 401 cannot refresh', async () => {
+    const oxy = createServices();
+    oxy.setTokens('stale_access');
+    const linked = oxy.createLinkedClient({ baseURL: 'https://api.syra.fm' });
+
+    const refreshed = await linked.client.refreshAccessToken('response-401');
+
+    expect(refreshed).toBeNull();
+    expect(oxy.getAccessToken()).toBeNull();
+    expect(linked.client.getAccessToken()).toBeNull();
+
+    linked.dispose();
+  });
+
+  it('keeps the session owner intact when linked preflight refresh cannot refresh', async () => {
+    const oxy = createServices();
+    oxy.setTokens('existing_access');
+    const linked = oxy.createLinkedClient({ baseURL: 'https://api.syra.fm' });
+
+    const refreshed = await linked.client.refreshAccessToken('preflight');
+
+    expect(refreshed).toBeNull();
+    expect(oxy.getAccessToken()).toBe('existing_access');
+    expect(linked.client.getAccessToken()).toBe('existing_access');
+
+    linked.dispose();
+  });
+
   it('stops mirroring after dispose', () => {
     const oxy = createServices();
     const linked = oxy.createLinkedClient({ baseURL: 'https://api.syra.fm' });
@@ -61,4 +96,24 @@ describe('OxyServices.createLinkedClient', () => {
 
     expect(linked.client.getAccessToken()).toBeNull();
   });
+
+  it('joins linked base URLs with relative paths that omit the leading slash', async () => {
+    const originalFetch = globalThis.fetch;
+    const fetchMock = jest.fn(async () => jsonResponse({ ok: true }));
+    globalThis.fetch = fetchMock as unknown as typeof globalThis.fetch;
+
+    try {
+      const oxy = createServices();
+      const linked = oxy.createLinkedClient({ baseURL: 'https://api.mention.earth' });
+
+      await linked.client.get('profile/settings/me');
+
+      expect(fetchMock).toHaveBeenCalledTimes(1);
+      expect(String(fetchMock.mock.calls[0]?.[0])).toBe('https://api.mention.earth/profile/settings/me');
+
+      linked.dispose();
+    } finally {
+      globalThis.fetch = originalFetch;
+    }
+  });
 });