mirror of
https://github.com/multica-ai/multica.git
synced 2026-07-13 05:16:29 +02:00
The CLI auth callback was hardcoded to localhost, breaking self-hosted setups where the browser runs on a different machine than the CLI. - CLI: derive callback host from configured app URL; bind to 0.0.0.0 when the app URL is not localhost so remote browsers can reach it - Frontend: expand validateCliCallback to accept RFC 1918 private IPs (10.x, 172.16-31.x, 192.168.x) in addition to localhost Closes #923