@standardagents/builder 0.40.1 → 0.40.3

package/dist/index.js

@@ -30657,17 +30657,23 @@ ${result ?? error ?? "No result content."}${attachmentSummary}`;
     return cursor.rowsWritten > 0;
   }
   /** Approve a pending device login: mint a personal API key for the user and
-   *  park its plaintext for the single claim. Returns false when the code is
-   *  unknown, expired, or not pending. */
+   *  park its plaintext for the single claim. A retry by the same user remains
+   *  successful after the row is approved or claimed, without minting another
+   *  key. Returns false for unknown, expired, denied, or differently-owned
+   *  logins. */
   async approveDeviceLogin(params) {
     await this.ensureMigrated();
     await this.sweepDeviceLogins();
     const cursor = await this.ctx.storage.sql.exec(
-      `SELECT status FROM device_logins WHERE code_hash = ?`,
+      `SELECT status, user_id FROM device_logins WHERE code_hash = ?`,
       params.code_hash
     );
     const row = cursor.toArray()[0];
-    if (!row || row.status !== "pending") return false;
+    if (!row) return false;
+    if (row.status === "approved" || row.status === "claimed") {
+      return row.user_id === params.user_id;
+    }
+    if (row.status !== "pending") return false;
     await this.createApiKey({
       name: params.key_name,
       key_hash: params.token_hash,