List Project Sources
Projects
List Project Sources
List the active sources of a project owned by the authenticated user.
Read-only view that backs the workspace Sources panel (Stage 4). Returns
404 (not 403) when the project is missing, soft-deleted, or owned by
another user, so cross-tenant existence is not leaked. Only active
(is_active = True) sources are returned, newest first.
IDOR AUDIT PASS - project ownership is verified and the source query
filters by the authenticated user_id and project_id.
GET
List Project Sources
