Protect private bank configuration from drift reconciliation (Refs #152)

2026-10-12 23:32:20 -04:00
parent 4e3df81786
commit d9fa15cdf6
23 changed files with 597 additions and 28 deletions
@@ -1,3 +1,4 @@
+import { isPrivateConfigEvidencePath } from '$lib/server/fleet/private-config.js';
 import { blobContent } from '$lib/server/db/file-blobs.js';
 import { json, error } from '@sveltejs/kit';
 import { db } from '$lib/server/db/index.js';
@@ -22,7 +23,7 @@ export async function GET({ params }: { params: { id: string; fileId: string } }
              content_after: Buffer | null;
          }
        | undefined;
-    if (!row) throw error(404, 'file not found');
+    if (!row || isPrivateConfigEvidencePath(row.rel_path)) throw error(404, 'file not found');

    return json({
        verb: row.verb,