[APPS-2792] Add: local-file resolution for Custom Credentials - #512

Open

tyffical wants to merge 8 commits into

tiffany.trinh/apps-2792-env-guard-hardeningfrom

tiffany.trinh/apps-2792-custom-credentials-local-resolution

Commits on Sep 11, 2026

feat(apps): resolve Custom Credentials from a local override file
tyffical
committed
aaa1725
fix(apps): stop Custom Credentials leaking into JSON parse-error messages
tyffical
committed
63a5629
fix(apps): deny dev-server access to the local Custom Credentials file
tyffical
committed
5dce58e
fix(apps): never package the local Custom Credentials file into a shipped app
tyffical
committed
6c573d1
fix(apps): reject direct imports of the local Custom Credentials file
tyffical
committed
0218dfb
fix(apps): strip resource query before matching the Custom Credentials filename
tyffical
committed
c0a1e35
fix(apps): close hash-suffix and symlink/hardlink bypasses of the Custom Credentials guard
tyffical
committed
bbffb45
fix(apps): resolve real Custom Credentials for the priming/cold-load path
tyffical
committed
3c2c4d1