@standardagents/builder 0.40.1 → 0.40.3

package/dist/built-in-routes.js

@@ -68899,7 +68899,7 @@ var config_get_default = defineController2(async ({ config, env: env2, req }) =>
 });
 
 // src/version.ts
-var BUILDER_VERSION = "0.40.1".length > 0 ? "0.40.1" : "dev";
+var BUILDER_VERSION = "0.40.3".length > 0 ? "0.40.3" : "dev";
 
 // src/api/diagnostics.get.ts
 init_LLMRequest();
@@ -76507,13 +76507,6 @@ async function verifyDeviceConfirmationToken(env2, code, confirmationSubject, to
     return false;
   }
 }
-function isSameOriginApprovalPost(req) {
-  const url = new URL(req.url);
-  const origin = req.headers.get("Origin");
-  if (origin && origin !== url.origin) return false;
-  const fetchSite = req.headers.get("Sec-Fetch-Site");
-  return !fetchSite || fetchSite === "same-origin" || fetchSite === "none";
-}
 
 // src/api/auth/device/[code]/approve.get.ts
 var approve_get_default = defineController2(async ({ req, env: env2, params, config }) => {
@@ -76550,7 +76543,7 @@ var approve_post_default = defineController2(async ({ req, env: env2, params })
       body: "This device link is malformed."
     });
   }
-  if (!isSameOriginApprovalPost(req)) {
+  if (!isSameOriginBrowserRequest(req)) {
     return Response.json({ error: "Cross-origin device approval refused" }, { status: 403 });
   }
   const form = await req.clone().formData().catch(() => null);