@pylonsync/sync 0.4.1 → 0.4.3

package/dist/types.d.ts

@@ -27,6 +27,10 @@ export interface ResolvedSession {
     tenantId: string | null;
     isAdmin: boolean;
     roles: string[];
+    /** Provider profile picture (OAuth `picture` claim), refreshed each
+     *  login. `null` for password/magic-link users — render an initials
+     *  fallback. Absent on servers older than 0.4.2. */
+    avatarUrl?: string | null;
 }
 /**
  * Per-op result on /api/sync/push. Formal shape:

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.4.1",
+  "version": "0.4.3",
   "type": "module",
   "main": "./src/index.ts",
   "types": "./dist/index.d.ts",

package/src/index.ts

@@ -2348,12 +2348,14 @@ export class SyncEngine {
         tenant_id?: string | null;
         is_admin?: boolean;
         roles?: string[];
+        avatar_url?: string | null;
       };
       return {
         userId: raw.user_id ?? null,
         tenantId: raw.tenant_id ?? null,
         isAdmin: raw.is_admin ?? false,
         roles: raw.roles ?? [],
+        avatarUrl: raw.avatar_url ?? null,
       };
     } catch {
       // Swallow — /api/auth/me errors are transient and the next pull

package/src/session-resolver.ts

@@ -43,6 +43,7 @@ export interface TokenTransition {
 
 const EMPTY_SESSION: ResolvedSession = {
   userId: null,
+  avatarUrl: null,
   tenantId: null,
   isAdmin: false,
   roles: [],
@@ -138,5 +139,5 @@ export class SessionResolver {
  *  order doesn't trip the equality check. */
 export function sessionSignature(s: ResolvedSession): string {
   const roles = (s.roles ?? []).slice().sort().join(",");
-  return `${s.userId ?? ""}|${s.tenantId ?? ""}|${s.isAdmin ? "1" : "0"}|${roles}`;
+  return `${s.userId ?? ""}|${s.tenantId ?? ""}|${s.isAdmin ? "1" : "0"}|${roles}|${s.avatarUrl ?? ""}`;
 }

package/src/types.ts

@@ -35,6 +35,10 @@ export interface ResolvedSession {
   tenantId: string | null;
   isAdmin: boolean;
   roles: string[];
+  /** Provider profile picture (OAuth `picture` claim), refreshed each
+   *  login. `null` for password/magic-link users — render an initials
+   *  fallback. Absent on servers older than 0.4.2. */
+  avatarUrl?: string | null;
 }
 
 /**