@standardagents/builder 0.40.1 → 0.40.3

package/dist/runtime.d.ts

@@ -2787,8 +2787,10 @@ declare class DurableAgentBuilder<Env extends AgentBuilderEnv = AgentBuilderEnv>
     /** Deny a pending device login without creating a user or API key. */
     denyDeviceLogin(codeHash: string): Promise<boolean>;
     /** Approve a pending device login: mint a personal API key for the user and
-     *  park its plaintext for the single claim. Returns false when the code is
-     *  unknown, expired, or not pending. */
+     *  park its plaintext for the single claim. A retry by the same user remains
+     *  successful after the row is approved or claimed, without minting another
+     *  key. Returns false for unknown, expired, denied, or differently-owned
+     *  logins. */
     approveDeviceLogin(params: {
         code_hash: string;
         user_id: string;

package/dist/runtime.js

@@ -21902,17 +21902,23 @@ ${result ?? error ?? "No result content."}${attachmentSummary}`;
     return cursor.rowsWritten > 0;
   }
   /** Approve a pending device login: mint a personal API key for the user and
-   *  park its plaintext for the single claim. Returns false when the code is
-   *  unknown, expired, or not pending. */
+   *  park its plaintext for the single claim. A retry by the same user remains
+   *  successful after the row is approved or claimed, without minting another
+   *  key. Returns false for unknown, expired, denied, or differently-owned
+   *  logins. */
   async approveDeviceLogin(params) {
     await this.ensureMigrated();
     await this.sweepDeviceLogins();
     const cursor = await this.ctx.storage.sql.exec(
-      `SELECT status FROM device_logins WHERE code_hash = ?`,
+      `SELECT status, user_id FROM device_logins WHERE code_hash = ?`,
       params.code_hash
     );
     const row = cursor.toArray()[0];
-    if (!row || row.status !== "pending") return false;
+    if (!row) return false;
+    if (row.status === "approved" || row.status === "claimed") {
+      return row.user_id === params.user_id;
+    }
+    if (row.status !== "pending") return false;
     await this.createApiKey({
       name: params.key_name,
       key_hash: params.token_hash,