@everworker/oneringai 0.2.1 → 0.2.2

package/README.md

@@ -55,6 +55,15 @@
 
 ---
 
+## HOSEA APP
+We realize that library alone in these times is not enough to get you excited, so we built a FREE FOREVER desktop app on top of this library to showcase its power! It's as easy to start using as cloning this library's repo, and then `cd apps/hosea` and then `npm install` and then `npm run dev`. Or watch the video first:
+
+![Watch the demo](https://img.youtube.com/vi/_LzDiuOQD8Y/maxresdefault.jpg)](https://www.youtube.com/watch?v=_LzDiuOQD8Y)
+
+Or read the more detailed installation / setup instructions [here](https://github.com/Integrail/oneringai/blob/main/apps/hosea/README.md)
+
+Better to see once and then dig in the code! :)
+
 ## Features
 
 - ✨ **Unified API** - One interface for 10+ AI providers (OpenAI, Anthropic, Google, Groq, DeepSeek, and more)

package/dist/capabilities/images/index.cjs

@@ -342,14 +342,32 @@ var AuthCodePKCEFlow = class {
     if (this.config.usePKCE !== false && verifierData) {
       params.append("code_verifier", verifierData.verifier);
     }
-    const response = await fetch(this.config.tokenUrl, {
+    let response = await fetch(this.config.tokenUrl, {
       method: "POST",
       headers: {
         "Content-Type": "application/x-www-form-urlencoded"
       },
       body: params
     });
-    if (!response.ok) {
+    if (!response.ok && this.config.clientSecret) {
+      const errorText = await response.text();
+      if (isPublicClientError(errorText)) {
+        params.delete("client_secret");
+        response = await fetch(this.config.tokenUrl, {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/x-www-form-urlencoded"
+          },
+          body: params
+        });
+        if (!response.ok) {
+          const retryError = await response.text();
+          throw new Error(`Token exchange failed: ${response.status} ${response.statusText} - ${retryError}`);
+        }
+      } else {
+        throw new Error(`Token exchange failed: ${response.status} ${response.statusText} - ${errorText}`);
+      }
+    } else if (!response.ok) {
       const error = await response.text();
       throw new Error(`Token exchange failed: ${response.status} ${response.statusText} - ${error}`);
     }
@@ -395,14 +413,32 @@ var AuthCodePKCEFlow = class {
     if (this.config.clientSecret) {
       params.append("client_secret", this.config.clientSecret);
     }
-    const response = await fetch(this.config.tokenUrl, {
+    let response = await fetch(this.config.tokenUrl, {
       method: "POST",
       headers: {
         "Content-Type": "application/x-www-form-urlencoded"
       },
       body: params
     });
-    if (!response.ok) {
+    if (!response.ok && this.config.clientSecret) {
+      const errorText = await response.text();
+      if (isPublicClientError(errorText)) {
+        params.delete("client_secret");
+        response = await fetch(this.config.tokenUrl, {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/x-www-form-urlencoded"
+          },
+          body: params
+        });
+        if (!response.ok) {
+          const retryError = await response.text();
+          throw new Error(`Token refresh failed: ${response.status} ${response.statusText} - ${retryError}`);
+        }
+      } else {
+        throw new Error(`Token refresh failed: ${response.status} ${response.statusText} - ${errorText}`);
+      }
+    } else if (!response.ok) {
       const error = await response.text();
       throw new Error(`Token refresh failed: ${response.status} ${response.statusText} - ${error}`);
     }
@@ -457,6 +493,10 @@ var AuthCodePKCEFlow = class {
     }
   }
 };
+function isPublicClientError(responseBody) {
+  const lower = responseBody.toLowerCase();
+  return lower.includes("aadsts700025") || lower.includes("invalid_client") && lower.includes("public");
+}
 
 // src/connectors/oauth/flows/ClientCredentials.ts
 var ClientCredentialsFlow = class {