mirror of
https://github.com/NanmiCoder/cc-haha
synced 2026-07-19 13:33:35 +08:00
Desktop file mentions should follow the workspace the user opened, but the filesystem browser only trusted the home and temp roots. Register workspace roots after repository context, session creation, and session git-info resolution so Windows projects on another drive can be searched without turning the browse API into arbitrary disk access. Constraint: Windows users can open repositories outside C:\\Users, such as D:\\workspace\\code\\cc-haha Constraint: Filesystem browse must not become an unbounded local disk reader Rejected: Add a global user-configurable filesystem whitelist | broader product and persistence surface than this bug needs Rejected: Allow every requested browse path | would bypass the intended filesystem boundary Confidence: high Scope-risk: moderate Directive: Register only workspace roots that the server has already resolved through session or repository flows Tested: bun test src/server/__tests__/filesystem.test.ts Tested: bun run check:server Not-tested: Windows packaged desktop smoke