openclaw/src
Peter Lee 2b773a65f6
fix(anthropic): keep OAuth callback on loopback (#96917)
* fix(anthropic): restrict OAuth callback host to loopback addresses and derive redirect URI

* fix(anthropic): restore localhost as default OAuth callback host to match shipped behavior

* fix(anthropic): defer OAuth callback host validation to login path

* refactor(anthropic): bind callback host independently

Co-authored-by: xialonglee <li.xialong@xydigit.com>

* docs(changelog): note Anthropic callback fix

Co-authored-by: xialonglee <li.xialong@xydigit.com>

* fix(oauth): satisfy Anthropic callback lint

Co-authored-by: xialonglee <li.xialong@xydigit.com>

* chore: defer Anthropic OAuth changelog

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-07-06 02:52:15 +01:00
..
acp refactor: consolidate exact keyed async queues (#99691) 2026-07-04 16:45:07 -07:00
agents fix(agents): preserve media side merges during prompt release (#100490) 2026-07-06 02:37:54 +01:00
auto-reply refactor(auto-reply): harden empty reply delivery (#100474) 2026-07-06 01:18:27 +01:00
bindings
bootstrap
channels [codex] Honor all ack scope for room events (#87433) 2026-07-06 01:28:41 +01:00
chat refactor: consolidate safe json parsing (#99688) 2026-07-04 16:33:27 -07:00
cli fix #98107: Gateway regenerates service-env file on every restart, wiping Telegram bot tokens (#99124) 2026-07-06 02:24:39 +01:00
commands fix #98107: Gateway regenerates service-env file on every restart, wiping Telegram bot tokens (#99124) 2026-07-06 02:24:39 +01:00
commitments
compat
config fix(browser): time out remote tab enumeration (#80147) 2026-07-06 00:56:05 +01:00
context-engine fix(compaction): preserve Anthropic context usage (#99864) 2026-07-05 02:33:43 -07:00
crestodian feat: verify AI access during macOS onboarding before the first chat (#100288) 2026-07-05 06:59:30 -07:00
cron fix: land ten small reliability fixes (#100483) 2026-07-06 00:08:51 +01:00
daemon fix #98107: Gateway regenerates service-env file on every restart, wiping Telegram bot tokens (#99124) 2026-07-06 02:24:39 +01:00
docs test(docs): align rewrite guards with current wording (#100183) 2026-07-04 22:23:10 -07:00
flows Doctor: expose write-config blocker findings (#100093) 2026-07-05 09:18:34 -07:00
gateway fix(ui): bind stale run state to run identity (#100527) 2026-07-06 02:33:40 +01:00
hooks refactor(shared): consolidate core leaf lazy loaders (#99278) 2026-07-02 18:06:00 -07:00
i18n
image-generation improve: keep isolated tests under one second (#100019) 2026-07-05 10:57:19 -07:00
infra fix: apply thread routing to plugin actions (#80293) 2026-07-06 02:02:06 +01:00
interactive fix(feishu): preserve button command values in fallback text and add Feishu comment guidance with callback privacy (#94385) 2026-07-02 12:42:31 -07:00
link-understanding refactor(infra): consolidate bounded HTTP body reads (#99744) 2026-07-04 12:15:57 -07:00
llm fix(anthropic): keep OAuth callback on loopback (#96917) 2026-07-06 02:52:15 +01:00
logging test(logging): reset diagnostic capture state 2026-07-05 07:15:07 -07:00
mcp fix: harden small runtime and installer edge cases (#100258) 2026-07-05 05:33:11 -07:00
media refactor(infra): consolidate bounded HTTP body reads (#99744) 2026-07-04 12:15:57 -07:00
media-generation
media-understanding fix: avoid English audio prompt for non-English STT hints (#99023) 2026-07-06 01:34:20 +01:00
memory
memory-host-sdk refactor: consolidate exact boolean coercion (#99750) 2026-07-03 19:42:06 -07:00
model-catalog
music-generation refactor(infra): consolidate bounded HTTP body reads (#99744) 2026-07-04 12:15:57 -07:00
node-host fix(build): restore package artifact declarations (#100249) 2026-07-05 02:22:11 -07:00
pairing fix(pairing): advertise reachable Tailnet routes (#100317) 2026-07-05 07:43:43 -07:00
plugin-sdk Preserve provider settings during onboarding updates (#100107) 2026-07-05 21:49:58 +01:00
plugin-state
plugins feat: publish plugins with extended-stable releases (#100448) 2026-07-05 16:16:26 -07:00
process fix: harden subprocess, maintenance, and output paths (#100440) 2026-07-05 22:21:54 +01:00
provider-runtime
proxy-capture chore: update dependencies (#100027) 2026-07-04 14:56:50 -04:00
realtime-transcription
routing
scripts fix(test): bound local full-suite RAM (#100437) 2026-07-05 12:16:41 -07:00
secrets improve: keep isolated tests under one second (#100019) 2026-07-05 10:57:19 -07:00
security fix: land ten small reliability fixes (#100483) 2026-07-06 00:08:51 +01:00
sessions fix(tui): preserve queued prompt lifecycle (#100123) 2026-07-04 21:15:28 -04:00
shared fix: harden subprocess, maintenance, and output paths (#100440) 2026-07-05 22:21:54 +01:00
skills fix(skills): apply command description limits per channel (#99593) 2026-07-05 18:12:51 -07:00
state fix(cron): preserve delivery thread id type across SQLite round-trip (#98699) 2026-07-05 12:53:02 -07:00
status fix: harden small runtime and installer edge cases (#100258) 2026-07-05 05:33:11 -07:00
talk fix(talk): quarantine unreadable realtime tool names 2026-07-05 23:34:56 +02:00
tasks fix(subagents): killed subagent runs stay running in the task list (#99806) 2026-07-05 02:17:10 -07:00
test-helpers test: make the local pnpm test gate green on macOS hosts (#100069) 2026-07-04 17:17:42 -04:00
test-utils test: speed up and stabilize full suite 2026-07-05 08:00:23 -04:00
tools
trajectory refactor: consolidate exact keyed async queues (#99691) 2026-07-04 16:45:07 -07:00
transcripts refactor: consolidate number coercion callers (#99671) 2026-07-03 16:24:43 -07:00
tts
tui perf(test): shorten TUI PTY cleanup 2026-07-05 21:14:38 -04:00
types
utils fix(core): preserve UTF-8 byte truncation boundaries 2026-07-04 17:48:21 -07:00
video-generation refactor(infra): consolidate bounded HTTP body reads (#99744) 2026-07-04 12:15:57 -07:00
web-fetch improve(web-fetch): speed up provider fallback loading (#98559) 2026-07-04 12:47:10 -07:00
web-search
wizard [codex] Fix doctor completion cache plugin loading (#76235) 2026-07-05 07:33:54 -07:00
browser-lifecycle-cleanup.test.ts
browser-lifecycle-cleanup.ts
docker-build-cache.test.ts
docker-image-digests.test.ts
docker-setup.e2e.test.ts fix(docker): reduce local build memory pressure 2026-07-01 03:58:21 -07:00
dockerfile.test.ts fix(docker): materialize ai runtime package 2026-07-05 13:10:15 +02:00
entry.compile-cache.test.ts
entry.compile-cache.ts
entry.respawn.test.ts
entry.respawn.ts
entry.root-help-fast-path.test.ts
entry.test.ts
entry.ts
entry.version-fast-path.test.ts
entry.version-fast-path.ts
extensionAPI.ts
global-state.ts
globals.test.ts
globals.ts
index.test.ts
index.ts
install-sh-version.test.ts
library.test.ts
library.ts refactor(shared): establish lazy runtime loader foundation (#99261) 2026-07-02 17:24:59 -07:00
logger.test.ts
logger.ts
logging.ts
param-key.ts
plugin-activation-boundary.test.ts
poll-params.test.ts
poll-params.ts
polls.test.ts
polls.ts
runtime.test.ts
runtime.ts
utils.test.ts fix(channels): normalize phone identities with stray plus signs (#100467) 2026-07-06 02:19:11 +01:00
utils.ts fix(channels): normalize phone identities with stray plus signs (#100467) 2026-07-06 02:19:11 +01:00
version.test.ts
version.ts