The body commands took a path from the client, so a token holder could
read any file the process could. They now take a response id and resolve
the location themselves, and the UI never sees a path at all: the desktop
host asks the backend where the file is, and the bridge fetches
/responses/:id/body.
Ephemeral responses (GraphQL introspection) never reach the database, so
resolution falls back to the path send writes them to.
Gregory Schier