@oxyhq/core 5.3.0 → 5.4.1

package/dist/cjs/mixins/OxyServices.user.js

@@ -657,6 +657,32 @@ function OxyServicesUserMixin(Base) {
                 throw this.handleError(error);
             }
         }
+        /**
+         * Get the authenticated VIEWER's bounded "follows-of-follows" user ids — the
+         * union of the accounts followed by the accounts the viewer follows (a
+         * two-hop walk of the follow graph), MINUS the viewer's own follows and the
+         * viewer themselves. The viewer is derived server-side from the SDK's auth
+         * token (never a param), so there is no target id to pass.
+         *
+         * Returns a bounded, lean list of ids meant to SEED a friends-of-friends
+         * feed (the consumer hydrates/ranks the posts itself), ordered by frequency
+         * (accounts followed by more of the viewer's follows first), then recency.
+         * An anonymous caller resolves to an empty array. Mirrors
+         * {@link getMutualUserIds}'s caching posture.
+         */
+        async getFollowsOfFollowsIds(params) {
+            try {
+                const query = (0, apiUtils_1.buildPaginationParams)(params || {});
+                const response = await this.makeRequest('GET', '/users/follows-of-follows-ids', query, {
+                    cache: true,
+                    cacheTTL: 2 * 60 * 1000, // 2 minutes cache
+                });
+                return response.data || [];
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
         /**
          * Get notifications
          */

package/dist/cjs/session/SessionClient.js

@@ -62,7 +62,17 @@ class SessionClient {
     applySync(raw) {
         const sync = (0, contracts_1.safeParseContract)(contracts_1.deviceSessionSyncSchema, raw);
         if (!sync) {
-            loggerUtils_1.logger.warn('[SessionClient] discarded invalid session sync');
+            const parsed = contracts_1.deviceSessionSyncSchema.safeParse(raw);
+            // Log field-level type diagnostics ONLY — never values. The payload carries tokens and
+            // session ids; issue.path/code and the invalid_type expected/received TYPE names are safe,
+            // but zod messages can embed offending values for other codes, so they are omitted.
+            const issues = parsed.success
+                ? []
+                : parsed.error.issues.map((issue) => issue.code === 'invalid_type'
+                    ? { path: issue.path.join('.'), code: issue.code, expected: issue.expected, received: issue.received }
+                    : { path: issue.path.join('.'), code: issue.code });
+            const keys = raw && typeof raw === 'object' ? Object.keys(raw) : [];
+            loggerUtils_1.logger.warn('[SessionClient] discarded invalid session sync', { component: 'SessionClient', issues, keys });
             return;
         }
         this.applyState(sync.state);
@@ -72,19 +82,19 @@ class SessionClient {
     }
     async bootstrap() {
         const res = await this.host.makeRequest('GET', '/session/device/state', undefined, { cache: false });
-        this.applySync(res?.data);
+        this.applySync(res);
     }
     async switchAccount(accountId) {
         const res = await this.host.makeRequest('POST', '/session/device/switch', { accountId }, { cache: false });
-        this.applySync(res?.data);
+        this.applySync(res);
     }
     async signOut(target) {
         const res = await this.host.makeRequest('POST', '/session/device/signout', target, { cache: false });
-        this.applySync(res?.data);
+        this.applySync(res);
     }
     async addCurrentAccount() {
         const res = await this.host.makeRequest('POST', '/session/device/add', undefined, { cache: false });
-        this.applySync(res?.data);
+        this.applySync(res);
     }
     async start() {
         if (this.started)