倪程伟 9d4041714f fix(chat): store chat-upload path as root-relative, not absolute server path (#455) ... After the workspace-aware chat-uploads change, the upload root became absolute (the resolver normalizes via toAbsolutePath/normalize, and the autoconfiguration rewrites baseDir to an absolute path). ChatController.upload then set ChatUploadResponse.path to that absolute path — despite the inline comment promising a relative path "to avoid exposing the server's absolute path". The field is rendered into the LLM prompt ("附件: foo (path)") and returned to the client, so this leaked the server filesystem layout into both the prompt and the response, and broke portability if the deploy dir moves. Extract toRelativeUploadPath(uploadRoot, convId, storedName) which makes the path relative to the upload root's parent (preserving the trailing sub-dir name, e.g. chat-uploads/{convId}/{storedName}) and normalizes separators to '/'. Retrieval is unaffected: it goes through the basename-based ChatUploadResolver and the /api/v1/chat/files/... URL, not this field. Adds ChatControllerUploadPathTest (default root, absolute workspace-scoped root, custom base-dir name) asserting the result is relative and leak-free. Addresses the blocker item in #452.		2026-07-02 17:40:59 +08:00
..
java/vip/mate	fix(chat): store chat-upload path as root-relative, not absolute server path (#455)	2026-07-02 17:40:59 +08:00
resources	feat(mcp): STDIO MCP server 透传认证用户身份（opt-in per server） (#460)	2026-07-01 18:51:08 +08:00