Source-code protection: gate raw source (thinking trace + citation fragments) behind source:view (#66) - #67

Merged

gangtao merged 9 commits into

mainfrom

feat/source-code-protection

Aug 20, 2026

Commits on Aug 20, 2026

docs(spec): source-code protection design (#66)

gangtao
and
claude
committed
e24703a
docs(plan): source-code protection implementation plan (#66)

gangtao
and
claude
committed
8f89ac4
feat(auth): add default-deny source:view capability (#66)

gangtao
and
claude
committed
0d62f84
feat(graph-api): require source:view for /api/graph/source (#66)

gangtao
and
claude
committed
97b82ec
feat(server): suppress thinking trace without source:view (#66)

gangtao
and
claude
committed
32d826f
feat(agent): system-prompt rule against dumping complete source (#66)

gangtao
and
claude
committed
51412f6
feat(web): gate thinking trace & citation preview behind source:view (#66)

gangtao
and
claude
committed
686e322
fix(chat): withhold reasoning trace + source refs from restricted users at the API (#66)

gangtao
and
claude
committed
f70b62e
fix(chat): address code review — answer-only stream, dedupe cap logic, drop dead code (#66)

gangtao
and
claude
committed
e7866bb