Feat v0.2.6 admin settings audit (#10)

Co-authored-by: Jeffrey Smith <jasafpro@gmail.com>
Co-committed-by: Jeffrey Smith <jasafpro@gmail.com>

server/handlers/admin.go

@@ -361,47 +361,15 @@ func (h *AdminHandler) PublicSettings(c *gin.Context) {
 	// Banner config, branding, etc. — safe subset for non-admin users
 	banner, _ := h.stores.GlobalConfig.Get(c.Request.Context(), "banner")
 	branding, _ := h.stores.GlobalConfig.Get(c.Request.Context(), "branding")
-	systemPrompt, _ := h.stores.GlobalConfig.Get(c.Request.Context(), "system_prompt")
 	policies, _ := h.stores.Policies.GetAll(c.Request.Context())
 
-	// Paste-to-file threshold (admin-configurable via storage.paste_to_file_chars, default 2000)
-	pasteChars := 2000
-	if storageSettings, err := h.stores.GlobalConfig.Get(c.Request.Context(), "storage"); err == nil {
-		if v, ok := storageSettings["paste_to_file_chars"]; ok {
-			switch n := v.(type) {
-			case float64:
-				pasteChars = int(n)
-			case int:
-				pasteChars = n
-			}
-		}
-	}
-
-	// Only tell the user whether admin prompt exists — don't expose content
-	hasAdminPrompt := false
-	if content, ok := systemPrompt["content"].(string); ok && content != "" {
-		hasAdminPrompt = true
-	}
-
-	// Retention TTL (v0.37.14 — days before purge for global/team channels)
-	retentionTTL := 0
-	if ttlCfg, err := h.stores.GlobalConfig.Get(c.Request.Context(), "retention_ttl_days"); err == nil {
-		if v, ok := ttlCfg["value"].(float64); ok {
-			retentionTTL = int(v)
-		}
-	}
-
 	c.JSON(http.StatusOK, gin.H{
-		"banner":              banner,
-		"branding":            branding,
-		"has_admin_prompt":    hasAdminPrompt,
-		"storage_configured":  storageConfigured,
-		"paste_to_file_chars": pasteChars,
+		"banner":             banner,
+		"branding":           branding,
+		"storage_configured": storageConfigured,
 		"policies": gin.H{
-			"allow_registration":      policies["allow_registration"],
-			"allow_user_byok":         policies["allow_user_byok"],
-			"allow_user_personas":     policies["allow_user_personas"],
-			"retention_ttl_days":      retentionTTL,
+			"allow_registration": policies["allow_registration"],
+			"allow_user_byok":    policies["allow_user_byok"],
 		},
 	})
 }

server/handlers/profile_bootstrap.go

@@ -86,8 +86,6 @@ func (h *ProfileBootstrapHandler) GetBootstrap(c *gin.Context) {
 	if ps := h.stores.Policies; ps != nil {
 		policies["allow_user_byok"], _ = ps.GetBool(ctx, "allow_user_byok")
 		policies["allow_user_personas"], _ = ps.GetBool(ctx, "allow_user_personas")
-		policies["allow_raw_model_access"], _ = ps.GetBool(ctx, "allow_raw_model_access")
-		policies["kb_direct_access"], _ = ps.GetBool(ctx, "kb_direct_access")
 	}
 
 	// ── Settings ────────────────────────────

server/handlers/profile_permissions.go

@@ -67,8 +67,6 @@ func (h *ProfilePermissionsHandler) GetMyPermissions(c *gin.Context) {
 	if ps := h.stores.Policies; ps != nil {
 		policies["allow_user_byok"], _ = ps.GetBool(ctx, "allow_user_byok")
 		policies["allow_user_personas"], _ = ps.GetBool(ctx, "allow_user_personas")
-		policies["allow_raw_model_access"], _ = ps.GetBool(ctx, "allow_raw_model_access")
-		policies["kb_direct_access"], _ = ps.GetBool(ctx, "kb_direct_access")
 	}
 
 	c.JSON(http.StatusOK, gin.H{