springbootAI 2.2.0__tar.gz → 2.2.1__tar.gz

{springbootai-2.2.0 → springbootai-2.2.1}/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [2.2.1] - 2026-08-13
+
+### 修复
+
+- 修复 ORM `@Entity`/`@entity` 实体解析、DDL 字段推断和 MyBatis 连接池初始化。
+- 加强 SQL 注入检测、敏感数据脱敏、Mapper XML 解析和 Web 根路由映射。
+- 增加对应回归测试，确保实体描述符、容器参数和静态资源路由行为稳定。
+
 本项目从 `2.1.0` 开始按 [Keep a Changelog](https://keepachangelog.com/zh-CN/1.1.0/) 记录面向使用者的变化，并使用语义化版本号。
 
 ## [2.2.0] - 2026-08-12

{springbootai-2.2.0/springbootAI.egg-info → springbootai-2.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: springbootAI
-Version: 2.2.0
+Version: 2.2.1
 Summary: Spring-style Python framework with Web, ORM, Cloud and AI integrations
 Author-email: YuConggen <1516933915@qq.com>
 License-Expression: MIT
@@ -151,7 +151,7 @@ SpringBootAI 是一个采用 Spring 风格注解和分层结构的 Python 应用
 | AI 与编排 | 模型调用、Tools、RAG、Chain、状态图、MCP client/server | LangChain / LangGraph / 官方 MCP SDK |
 | 生产治理 | 健康检查、Prometheus、限流熔断、追踪、Swagger | prometheus-client / OpenTelemetry / OpenAPI |
 
-当前版本是 `2.2.0`；支持 Python 3.10、3.11 和 3.12，许可证为 MIT。项目仍标记为 Beta。用于公网高并发、合规敏感或支付/订单/库存等核心系统前，必须完成目标数据库、流量模型、故障恢复和安全基线验证。内嵌 Gateway 适合内部路由，不替代公网 Nginx/Kong/WAF；Seata `distributed` 当前验证的是官方 TC + TCC 回调，不会为 Python 数据库操作自动生成 AT `undo_log`。
+当前版本是 `2.2.1`；支持 Python 3.10、3.11 和 3.12，许可证为 MIT。项目仍标记为 Beta。用于公网高并发、合规敏感或支付/订单/库存等核心系统前，必须完成目标数据库、流量模型、故障恢复和安全基线验证。内嵌 Gateway 适合内部路由，不替代公网 Nginx/Kong/WAF；Seata `distributed` 当前验证的是官方 TC + TCC 回调，不会为 Python 数据库操作自动生成 AT `undo_log`。
 
 [新手指南](https://github.com/YUCONGGEN/springbootAI/blob/master/doc/BEGINNER_GUIDE.md) | [全部文档](https://github.com/YUCONGGEN/springbootAI/tree/master/doc) | [变更日志](https://github.com/YUCONGGEN/springbootAI/blob/master/CHANGELOG.md) | [安全报告](https://github.com/YUCONGGEN/springbootAI/blob/master/SECURITY.md) | [发布检查](https://github.com/YUCONGGEN/springbootAI/blob/master/doc/RELEASE_CHECKLIST.md)
 
@@ -315,10 +315,10 @@ SpringBootAI 是一个 **Python Web 框架**。它把 Java Spring Boot 的"注
 
 | 组件 | 当前版本 |
 |------|----------|
-| `spring` 框架 API | 2.2.0 |
-| `spring.orm.pymybatis` | 2.2.0 |
-| `spring.ai` AI 模块 | 2.2.0 |
-| `spring.langchain` LangChain 模块 | 2.2.0 |
+| `spring` 框架 API | 2.2.1 |
+| `spring.orm.pymybatis` | 2.2.1 |
+| `spring.ai` AI 模块 | 2.2.1 |
+| `spring.langchain` LangChain 模块 | 2.2.1 |
 | Python | 3.10+ |
 
 ### 1.4 适合什么场景

{springbootai-2.2.0 → springbootai-2.2.1}/README.md

@@ -17,7 +17,7 @@ SpringBootAI 是一个采用 Spring 风格注解和分层结构的 Python 应用
 | AI 与编排 | 模型调用、Tools、RAG、Chain、状态图、MCP client/server | LangChain / LangGraph / 官方 MCP SDK |
 | 生产治理 | 健康检查、Prometheus、限流熔断、追踪、Swagger | prometheus-client / OpenTelemetry / OpenAPI |
 
-当前版本是 `2.2.0`；支持 Python 3.10、3.11 和 3.12，许可证为 MIT。项目仍标记为 Beta。用于公网高并发、合规敏感或支付/订单/库存等核心系统前，必须完成目标数据库、流量模型、故障恢复和安全基线验证。内嵌 Gateway 适合内部路由，不替代公网 Nginx/Kong/WAF；Seata `distributed` 当前验证的是官方 TC + TCC 回调，不会为 Python 数据库操作自动生成 AT `undo_log`。
+当前版本是 `2.2.1`；支持 Python 3.10、3.11 和 3.12，许可证为 MIT。项目仍标记为 Beta。用于公网高并发、合规敏感或支付/订单/库存等核心系统前，必须完成目标数据库、流量模型、故障恢复和安全基线验证。内嵌 Gateway 适合内部路由，不替代公网 Nginx/Kong/WAF；Seata `distributed` 当前验证的是官方 TC + TCC 回调，不会为 Python 数据库操作自动生成 AT `undo_log`。
 
 [新手指南](https://github.com/YUCONGGEN/springbootAI/blob/master/doc/BEGINNER_GUIDE.md) | [全部文档](https://github.com/YUCONGGEN/springbootAI/tree/master/doc) | [变更日志](https://github.com/YUCONGGEN/springbootAI/blob/master/CHANGELOG.md) | [安全报告](https://github.com/YUCONGGEN/springbootAI/blob/master/SECURITY.md) | [发布检查](https://github.com/YUCONGGEN/springbootAI/blob/master/doc/RELEASE_CHECKLIST.md)
 
@@ -181,10 +181,10 @@ SpringBootAI 是一个 **Python Web 框架**。它把 Java Spring Boot 的"注
 
 | 组件 | 当前版本 |
 |------|----------|
-| `spring` 框架 API | 2.2.0 |
-| `spring.orm.pymybatis` | 2.2.0 |
-| `spring.ai` AI 模块 | 2.2.0 |
-| `spring.langchain` LangChain 模块 | 2.2.0 |
+| `spring` 框架 API | 2.2.1 |
+| `spring.orm.pymybatis` | 2.2.1 |
+| `spring.ai` AI 模块 | 2.2.1 |
+| `spring.langchain` LangChain 模块 | 2.2.1 |
 | Python | 3.10+ |
 
 ### 1.4 适合什么场景

{springbootai-2.2.0 → springbootai-2.2.1}/pyproject.toml

@@ -12,7 +12,7 @@ build-backend = "setuptools.build_meta"
 [project]
 # 发行名 springbootAI（PyPI 包名，pip install springbootAI）；导入包名仍为 spring
 name = "springbootAI"
-version = "2.2.0"
+version = "2.2.1"
 description = "Spring-style Python framework with Web, ORM, Cloud and AI integrations"
 readme = "README.md"
 license = "MIT"

{springbootai-2.2.0 → springbootai-2.2.1}/spring/__init__.py

@@ -5,7 +5,7 @@ from .config import *
 from .utils import *
 from .main import create_app, run, SpringApplication, run_cli
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 __author__ = "yuconggen"
 __license__ = "MIT"
 

{springbootai-2.2.0 → springbootai-2.2.1}/spring/ai/__init__.py

@@ -47,7 +47,7 @@ from spring.ai.resilience import (
 from spring.ai.observability import AIMetrics, ai_metrics
 from spring.ai.autoconfig import AIProperties, bind_ai_config, configure_ai
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 
 __all__ = [
     # core

{springbootai-2.2.0 → springbootai-2.2.1}/spring/csv/__init__.py

@@ -33,7 +33,7 @@ from .reader import CsvReader
 from .writer import CsvWriter
 from .easy_csv import EasyCsv, read_csv, write_csv
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 
 __all__ = [
     # 异常

{springbootai-2.2.0 → springbootai-2.2.1}/spring/data/__init__.py

@@ -39,7 +39,7 @@ from spring.data.repository import (
     get_data_repository_entity,
 )
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 
 __all__ = [
     # 分页/排序

{springbootai-2.2.0 → springbootai-2.2.1}/spring/datasource/__init__.py

@@ -43,7 +43,7 @@ from .annotations import (
     ds_route_decorator, ds_decorator_factory, apply_ds_annotations, is_slave_placeholder,
 )
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 
 __all__ = [
     "DataSourceContextHolder",

{springbootai-2.2.0 → springbootai-2.2.1}/spring/excel/__init__.py

@@ -33,7 +33,7 @@ from .reader import ExcelReader
 from .writer import ExcelWriter
 from .easy_excel import EasyExcel, read_excel, write_excel
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 
 __all__ = [
     # 异常

{springbootai-2.2.0 → springbootai-2.2.1}/spring/i18n/__init__.py

@@ -65,7 +65,7 @@ from .properties import load_properties, parse_properties
 from .middleware import LocaleResolverMiddleware, get_request_locale
 from .auto_config import MessageSourceAutoConfiguration, configure_message_source
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 
 __all__ = [
     # Locale

{springbootai-2.2.0 → springbootai-2.2.1}/spring/langchain/__init__.py

@@ -90,7 +90,7 @@ from spring.langchain.annotations import (
     bind_langchain_client,
 )
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 
 __all__ = [
     # core

{springbootai-2.2.0 → springbootai-2.2.1}/spring/orm/__init__.py

@@ -146,6 +146,7 @@ from spring.orm.ddl_auto import (
     UpdateTime,
     Transient,
     Index,
+    Entity,
     entity,
     table as table_decorator,
     column as column_decorator,
@@ -247,6 +248,7 @@ __all__ = [
     'UpdateTime',
     'Transient',
     'Index',
+    'Entity',
     'entity',
     'table_decorator',
     'column_decorator',

{springbootai-2.2.0 → springbootai-2.2.1}/spring/orm/ddl_auto.py

@@ -480,37 +480,53 @@ class DdlAutoManager:
                 col_meta = self._get_field_meta(df)
                 columns.append(col_meta)
         else:
-            # 处理普通类：从 __init__ 方法中提取 self.xxx 字段
+            # 普通实体同时支持显式 self.xxx 赋值、类型注解和类级 Column 描述符。
+            # 只依赖源码中的 self.xxx 会漏掉循环赋值或动态赋值的实体。
             init_fields = self._extract_init_fields(cls)
-            # 同时检查类级别的类型注解（__init__ 的参数注解）
             init_hints = {}
             try:
                 init_hints = get_type_hints(cls.__init__)
             except Exception:
                 pass
-            cls_annotations = getattr(cls, '__annotations__', {})
-            for attr_name, default_val in init_fields.items():
+            try:
+                cls_annotations = get_type_hints(cls)
+            except Exception:
+                cls_annotations = getattr(cls, '__annotations__', {})
+
+            descriptor_fields = {}
+            for cls_base in reversed(cls.__mro__):
+                for attr_name, value in cls_base.__dict__.items():
+                    if isinstance(value, (Column, Transient)) or hasattr(value, '__column__'):
+                        descriptor_fields[attr_name] = value
+
+            field_names = dict(init_fields)
+            for attr_name in cls_annotations:
+                field_names.setdefault(attr_name, None)
+            for attr_name in descriptor_fields:
+                field_names.setdefault(attr_name, None)
+
+            for attr_name, default_val in field_names.items():
                 # @Transient 字段不持久化，跳过
                 if _is_transient_field(cls, attr_name):
                     continue
-                # 优先取 __init__ 注解，其次取类注解
                 py_type = init_hints.get(attr_name) or cls_annotations.get(attr_name)
                 # 解包 Optional[X]：Python 3.10 的 get_type_hints 会把带 None 默认值的
                 # 参数注解自动包装为 Optional[X]，3.11+ 不再包装。此处统一解包为承载类型，
                 # 否则 _get_sql_type 在 3.10 上识别失败回退到 TEXT，导致数值列被当字符串存储。
                 py_type = unwrap_optional_type(py_type)
+                descriptor = descriptor_fields.get(attr_name)
+                if py_type is None and isinstance(descriptor, Id):
+                    py_type = int
+                elif py_type is None and isinstance(descriptor, (CreateTime, UpdateTime)):
+                    py_type = str
+                elif py_type is None and isinstance(descriptor, Column) \
+                        and descriptor.default is not None:
+                    py_type = type(descriptor.default)
                 if py_type is None:
                     py_type = type(default_val) if default_val is not None and default_val != "" else str
-                # 检查Column注解
-                col_info = None
-                for cls_base in cls.__mro__:
-                    if attr_name in cls_base.__dict__:
-                        cval = cls_base.__dict__[attr_name]
-                        if isinstance(cval, Column):
-                            col_info = cval
-                        elif hasattr(cval, '__column__'):
-                            col_info = getattr(cval, '__column__')
-                        break
+                col_info = descriptor
+                if not isinstance(col_info, Column) and hasattr(col_info, '__column__'):
+                    col_info = getattr(col_info, '__column__')
                 col_meta = self._build_column_meta(attr_name, py_type, col_info)
                 columns.append(col_meta)
 
@@ -1030,12 +1046,12 @@ class DdlAutoManager:
 
 # ==================== 装饰器API（便捷使用） ====================
 
-def entity(table_name: str = "", indexes: List[Index] = None, comment: str = ""):
+def Entity(table_name: str = "", indexes: List[Index] = None, comment: str = ""):
     """
     @Entity 装饰器，标注一个类为JPA风格的实体类
     
     Usage:
-        @entity("sys_user")
+        @Entity("sys_user")
         class User:
             def __init__(self, id: int = None, username: str = "", email: str = ""):
                 self.id = id
@@ -1048,13 +1064,36 @@ def entity(table_name: str = "", indexes: List[Index] = None, comment: str = "")
         setattr(cls, '__table__', t)
         if not table_name:
             t.name = _camel_to_snake(cls.__name__)
+
+        # Descriptor-style entities do not need repetitive constructors.
+        # Keep an explicitly declared __init__ unchanged for compatibility.
+        if '__init__' not in cls.__dict__:
+            fields = {}
+            for cls_base in reversed(cls.__mro__):
+                for name, value in cls_base.__dict__.items():
+                    if isinstance(value, Column):
+                        fields[name] = value
+
+            def __init__(self, **values):
+                unknown = set(values) - set(fields)
+                if unknown:
+                    names = ', '.join(sorted(unknown))
+                    raise TypeError(f"Unexpected entity field(s): {names}")
+                for name, column in fields.items():
+                    setattr(self, name, values.get(name, column.default))
+
+            cls.__init__ = __init__
         return cls
     return decorator
 
 
+# Backward-compatible alias. New code should use the Spring-style @Entity name.
+entity = Entity
+
+
 def table(name: str = "", indexes: List[Index] = None, comment: str = ""):
     """@Table 装饰器，标注实体类对应的表（与@entity功能相同，别名）"""
-    return entity(name, indexes, comment)
+    return Entity(name, indexes, comment)
 
 
 # ==================== 全局集成 ====================
@@ -1106,12 +1145,6 @@ def init_ddl_auto(connection_pool, config: dict = None) -> Optional[DdlAutoManag
     
     # 执行DDL
     if manager._entities:
-        # 临时关闭DDL阻断
-        try:
-            if hasattr(connection_pool, 'config'):
-                connection_pool.config['security_block_ddl'] = False
-        except Exception:
-            pass
         manager.execute()
     
     _global_ddl_manager = manager

{springbootai-2.2.0 → springbootai-2.2.1}/spring/orm/mybatis_integration.py

@@ -247,9 +247,9 @@ class MyBatisConfigurer:
         try:
             from spring.orm.ddl_auto import init_ddl_auto
             # 获取连接池
-            pool = None
+            pool = getattr(self.sql_session_factory, 'connection_pool', None)
             if hasattr(self.sql_session_factory, 'configuration'):
-                pool = getattr(self.sql_session_factory.configuration, 'pool', None)
+                pool = pool or getattr(self.sql_session_factory.configuration, 'pool', None)
             if pool is None and hasattr(self.sql_session_factory, '_pool'):
                 pool = self.sql_session_factory._pool
             if pool is not None:

{springbootai-2.2.0 → springbootai-2.2.1}/spring/orm/pymybatis/__init__.py

@@ -34,7 +34,7 @@ from .security import SensitiveDataMasker, SQLInjectionDetector
 from .interceptor import Interceptor
 from .type_handler import TypeHandler
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 __author__ = "PyMyBatis Team"
 
 # 基础导出列表

{springbootai-2.2.0 → springbootai-2.2.1}/spring/orm/pymybatis/security/sensitive_data_masker.py

@@ -5,6 +5,7 @@ PyMyBatis敏感数据脱敏模块
 """
 
 import re
+from copy import copy
 from typing import Any, Dict, Optional, Callable
 from enum import Enum
 
@@ -159,6 +160,7 @@ class SensitiveDataMasker:
         if strategy is None:
             return value
 
+        original_value = value
         # 转换为字符串进行脱敏
         if not isinstance(value, str):
             value = str(value)
@@ -170,7 +172,7 @@ class SensitiveDataMasker:
         # 如果匹配失败，使用替换策略或返回原值
         if strategy.pattern.pattern == r'.+':
             return strategy.replacer(None)
-        return value
+        return original_value
 
     def mask_dict(self, data: Dict[str, Any], field_types: Optional[Dict[str, SensitiveDataType]] = None) -> Dict[str, Any]:
         """
@@ -227,7 +229,22 @@ class SensitiveDataMasker:
         if not self.enabled:
             return data_list
 
-        return [self.mask_dict(item, field_types) for item in data_list]
+        masked = []
+        for item in data_list:
+            if isinstance(item, dict):
+                masked.append(self.mask_dict(item, field_types))
+            elif hasattr(item, '__dict__'):
+                clone = copy(item)
+                attributes = {
+                    key: value for key, value in vars(item).items()
+                    if not key.startswith('_')
+                }
+                for key, value in self.mask_dict(attributes, field_types).items():
+                    setattr(clone, key, value)
+                masked.append(clone)
+            else:
+                masked.append(item)
+        return masked
 
     def mask_log(self, log_message: str) -> str:
         """

{springbootai-2.2.0 → springbootai-2.2.1}/spring/orm/pymybatis/security/sql_injection_detector.py

@@ -11,6 +11,7 @@ PyMyBatis SQL注入检测模块
 
 import re
 import logging
+from collections.abc import Mapping, Sequence, Set as AbstractSet
 from typing import Optional, Any, Dict, Set
 from enum import Enum
 
@@ -458,7 +459,11 @@ class SQLInjectionDetector:
 
     def is_safe(self, value: Any) -> bool:
         """
-        判断值是否安全
+        判断值是否安全。
+
+        Mapper XML 支持通过 ``#{entity.field}`` 绑定实体对象，因此这里需要检查
+        容器中的叶子值，而不是检查对象的 ``repr``（其中通常包含内存地址）。
+        循环引用通过对象 id 集合截断。
 
         Args:
             value: 待检测的值
@@ -466,6 +471,40 @@ class SQLInjectionDetector:
         Returns:
             是否安全
         """
+        return self._is_safe_value(value, set())
+
+    def _is_safe_value(self, value: Any, visited: Set[int]) -> bool:
+        if value is None or isinstance(value, (str, bytes, int, float, bool)):
+            return not self.is_blocked(value)
+
+        if isinstance(value, Mapping):
+            object_id = id(value)
+            if object_id in visited:
+                return True
+            visited.add(object_id)
+            return all(self._is_safe_value(item, visited) for item in value.values())
+
+        if isinstance(value, (Sequence, AbstractSet)) and not isinstance(
+            value, (str, bytes, bytearray)
+        ):
+            object_id = id(value)
+            if object_id in visited:
+                return True
+            visited.add(object_id)
+            return all(self._is_safe_value(item, visited) for item in value)
+
+        attributes = getattr(value, '__dict__', None)
+        if isinstance(attributes, Mapping):
+            object_id = id(value)
+            if object_id in visited:
+                return True
+            visited.add(object_id)
+            return all(
+                self._is_safe_value(item, visited)
+                for key, item in attributes.items()
+                if not str(key).startswith('_')
+            )
+
         return not self.is_blocked(value)
 
     def sanitize(self, value: Any) -> Any:

{springbootai-2.2.0 → springbootai-2.2.1}/spring/orm/pymybatis/version.py

@@ -2,7 +2,7 @@
 PyMyBatis版本信息
 """
 
-__version__ = '2.2.0'
+__version__ = '2.2.1'
 __author__ = 'PyMyBatis Team'
 __email__ = 'dev@pymybatis.org'
 __license__ = 'MIT'

{springbootai-2.2.0 → springbootai-2.2.1}/spring/orm/pymybatis/xml_parser/xml_parser.py

@@ -282,6 +282,19 @@ class XmlParser:
 
     @classmethod
     def _secure_fromstring(cls, xml_content: str):
+        # MyBatis mapper files conventionally contain this fixed public DTD.
+        # It is metadata only for this parser, so strip the exact allowlisted
+        # declaration without resolving the remote system identifier. Any
+        # other DTD or entity declaration remains forbidden by defusedxml.
+        xml_content = re.sub(
+            r'<!DOCTYPE\s+mapper\s+PUBLIC\s+'
+            r'["\']-//mybatis\.org//DTD Mapper 3\.0//EN["\']\s+'
+            r'["\']https?://mybatis\.org/dtd/mybatis-3-mapper\.dtd["\']\s*>',
+            '',
+            xml_content,
+            count=1,
+            flags=re.IGNORECASE,
+        )
         return DefusedET.fromstring(
             cls._normalize_comparison_operators(xml_content),
             forbid_dtd=True,

{springbootai-2.2.0 → springbootai-2.2.1}/spring/test/__init__.py

@@ -34,7 +34,7 @@
 """
 from .slicing import TestPool, SpringBootTest, WebMvcTest, DataJpaTest
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 
 __all__ = [
     "TestPool",

{springbootai-2.2.0 → springbootai-2.2.1}/spring/tx/__init__.py

@@ -39,7 +39,7 @@ from .synchronization import (
 )
 from .events import TransactionalEventListener, TransactionalEventPublisher
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 
 __all__ = [
     "TransactionPhase",

{springbootai-2.2.0 → springbootai-2.2.1}/spring/utils/banner.py

@@ -11,7 +11,7 @@ class BannerPrinter:
     |_|                 |___/                                  
     """
 
-    def __init__(self, version: str = "2.2.0"):  # v1.8.7 修复 import 时提前创建 logs/ 目录
+    def __init__(self, version: str = "2.2.1"):  # v1.8.7 修复 import 时提前创建 logs/ 目录
         self.version = version
         self.logger = SpringLogger()
 

{springbootai-2.2.0 → springbootai-2.2.1}/spring/validation/__init__.py

@@ -34,7 +34,7 @@ from .constraints import (
 from .validator import BeanValidator
 from .aop import BeanValidate, bean_validate_decorator
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 
 __all__ = [
     # 异常

{springbootai-2.2.0 → springbootai-2.2.1}/spring/web/swagger.py

@@ -268,7 +268,7 @@ class SwaggerConfig:
     enabled: bool = True
     title: str = "SpringBootAI Application"
     description: str = ""
-    version: str = "2.2.0"
+    version: str = "2.2.1"
     terms_of_service: str = ""
     contact_name: str = ""
     contact_email: str = ""
@@ -356,7 +356,7 @@ class SwaggerConfig:
             enabled=api_docs_enabled,
             title=_opt("title", "SpringBootAI Application"),
             description=_opt("description", ""),
-            version=_opt("version", "2.2.0"),
+            version=_opt("version", "2.2.1"),
             terms_of_service=_opt("terms-of-service", ""),
             contact_name=_opt("contact-name", "") or (contact.get("name", "") if isinstance(contact, dict) else ""),
             contact_email=_opt("contact-email", "") or (contact.get("email", "") if isinstance(contact, dict) else ""),

{springbootai-2.2.0 → springbootai-2.2.1}/spring/web/web_context.py

@@ -270,10 +270,14 @@ class WebApplicationContext:
                 class_paths = class_path if isinstance(class_path, list) else [class_path]
                 methods = annotation.method or ['GET']
                 for raw_path in paths or ['']:
-                    path = raw_path or '/' + method.__name__
+                    path = raw_path or ''
                     prefix = class_paths[0] if class_paths else ''
                     if prefix:
-                        path = prefix.rstrip('/') + '/' + path.lstrip('/')
+                        path = prefix.rstrip('/')
+                        if raw_path:
+                            path += '/' + str(raw_path).lstrip('/')
+                    elif not path:
+                        path = '/'
                     endpoint = self._create_endpoint(controller_instance, method, path)
                     for http_method in methods:
                         self._add_route(http_method.lower(), path, endpoint, openapi_meta)
@@ -651,7 +655,6 @@ class WebApplicationContext:
         if self._static_dir and os.path.isdir(self._static_dir):
             from fastapi.staticfiles import StaticFiles
             from fastapi.responses import FileResponse
-            import os
             
             # 获取静态目录的绝对路径，用于路径安全验证
             self._static_dir_abs = os.path.realpath(self._static_dir)

{springbootai-2.2.0 → springbootai-2.2.1}/spring/websocket/__init__.py

@@ -63,7 +63,7 @@ from .broker import (
 )
 from .router import WebSocketRouter, MessageEndpointDispatcher, install_websocket_routes
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 
 __all__ = [
     # 异常

{springbootai-2.2.0 → springbootai-2.2.1/springbootAI.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: springbootAI
-Version: 2.2.0
+Version: 2.2.1
 Summary: Spring-style Python framework with Web, ORM, Cloud and AI integrations
 Author-email: YuConggen <1516933915@qq.com>
 License-Expression: MIT
@@ -151,7 +151,7 @@ SpringBootAI 是一个采用 Spring 风格注解和分层结构的 Python 应用
 | AI 与编排 | 模型调用、Tools、RAG、Chain、状态图、MCP client/server | LangChain / LangGraph / 官方 MCP SDK |
 | 生产治理 | 健康检查、Prometheus、限流熔断、追踪、Swagger | prometheus-client / OpenTelemetry / OpenAPI |
 
-当前版本是 `2.2.0`；支持 Python 3.10、3.11 和 3.12，许可证为 MIT。项目仍标记为 Beta。用于公网高并发、合规敏感或支付/订单/库存等核心系统前，必须完成目标数据库、流量模型、故障恢复和安全基线验证。内嵌 Gateway 适合内部路由，不替代公网 Nginx/Kong/WAF；Seata `distributed` 当前验证的是官方 TC + TCC 回调，不会为 Python 数据库操作自动生成 AT `undo_log`。
+当前版本是 `2.2.1`；支持 Python 3.10、3.11 和 3.12，许可证为 MIT。项目仍标记为 Beta。用于公网高并发、合规敏感或支付/订单/库存等核心系统前，必须完成目标数据库、流量模型、故障恢复和安全基线验证。内嵌 Gateway 适合内部路由，不替代公网 Nginx/Kong/WAF；Seata `distributed` 当前验证的是官方 TC + TCC 回调，不会为 Python 数据库操作自动生成 AT `undo_log`。
 
 [新手指南](https://github.com/YUCONGGEN/springbootAI/blob/master/doc/BEGINNER_GUIDE.md) | [全部文档](https://github.com/YUCONGGEN/springbootAI/tree/master/doc) | [变更日志](https://github.com/YUCONGGEN/springbootAI/blob/master/CHANGELOG.md) | [安全报告](https://github.com/YUCONGGEN/springbootAI/blob/master/SECURITY.md) | [发布检查](https://github.com/YUCONGGEN/springbootAI/blob/master/doc/RELEASE_CHECKLIST.md)
 
@@ -315,10 +315,10 @@ SpringBootAI 是一个 **Python Web 框架**。它把 Java Spring Boot 的"注
 
 | 组件 | 当前版本 |
 |------|----------|
-| `spring` 框架 API | 2.2.0 |
-| `spring.orm.pymybatis` | 2.2.0 |
-| `spring.ai` AI 模块 | 2.2.0 |
-| `spring.langchain` LangChain 模块 | 2.2.0 |
+| `spring` 框架 API | 2.2.1 |
+| `spring.orm.pymybatis` | 2.2.1 |
+| `spring.ai` AI 模块 | 2.2.1 |
+| `spring.langchain` LangChain 模块 | 2.2.1 |
 | Python | 3.10+ |
 
 ### 1.4 适合什么场景

{springbootai-2.2.0 → springbootai-2.2.1}/springbootAI.egg-info/SOURCES.txt

@@ -283,4 +283,6 @@ tests/test_test_slicing.py
 tests/test_transactional_events.py
 tests/test_validation_module.py
 tests/test_web_annotations_full.py
+tests/test_web_root_mapping.py
+tests/test_web_static_files.py
 tests/test_websocket_module.py