@standardagents/builder 0.33.0 → 0.33.1

package/dist/built-in-routes.js

@@ -66647,7 +66647,7 @@ var config_get_default = defineController2(async ({ config, env: env2, req }) =>
 });
 
 // src/version.ts
-var BUILDER_VERSION = "0.33.0".length > 0 ? "0.33.0" : "dev";
+var BUILDER_VERSION = "0.33.1".length > 0 ? "0.33.1" : "dev";
 
 // src/api/diagnostics.get.ts
 init_LLMRequest();
@@ -72528,13 +72528,13 @@ function safeReturnTo2(value) {
   if (!value || !value.startsWith("/") || value.startsWith("//")) return "/";
   return value;
 }
-function failRedirect(req, env2, reason) {
+function failRedirect(req, env2, reason, returnTo) {
   const origin = new URL(req.url).origin;
   if (isPlatformHosted(env2)) {
-    const target = new URL(platformLoginUrl(req, env2, "/"));
+    const target = new URL(platformLoginUrl(req, env2, returnTo ?? "/"));
     target.searchParams.set(
       "error",
-      reason === "forbidden" ? "no_instance_access" : reason === "api_only_account" ? "api_only_account" : "instance_login_failed"
+      reason === "api_only_account" ? "api_only_account" : "instance_login_failed"
     );
     return new Response(null, {
       status: 302,
@@ -72551,9 +72551,10 @@ var callback_get_default = defineController2(async ({ req, env: env2 }) => {
     return failRedirect(req, env2, "not_hosted");
   }
   const url = new URL(req.url);
+  const failReturnTo = safeReturnTo2(url.searchParams.get("return_to"));
   const handoff = url.searchParams.get("handoff") || url.searchParams.get("token");
   if (!handoff) {
-    return failRedirect(req, env2, "invalid_response");
+    return failRedirect(req, env2, "invalid_response", failReturnTo);
   }
   const configuredProjectId = typeof env2.STANDARD_AGENTS_PROJECT_ID === "string" ? env2.STANDARD_AGENTS_PROJECT_ID : void 0;
   const payload = await verifyPlatformSignedPayload(
@@ -72565,10 +72566,10 @@ var callback_get_default = defineController2(async ({ req, env: env2 }) => {
     }
   );
   if (!payload || !payload.platform_user_id || !payload.role) {
-    return failRedirect(req, env2, "forbidden");
+    return failRedirect(req, env2, "invalid_handoff", failReturnTo);
   }
   if (!configuredProjectId && payload.project_id !== hostedInstanceRedirectId(req, env2)) {
-    return failRedirect(req, env2, "forbidden");
+    return failRedirect(req, env2, "invalid_handoff", failReturnTo);
   }
   if (payload.role === "api") {
     const apiReturnTo = safeReturnTo2(url.searchParams.get("return_to"));