fix(builder): allow all origins