feat(security): encrypt NotificationChannel.config secrets at rest#198

Merged

TerrifiedBug merged 9 commits intomainfrom

feat/encrypt-channel-secrets

Apr 28, 2026

Commits on Apr 28, 2026

feat(security): add channel-secrets encrypt/decrypt helpers
TerrifiedBug
committed
test(security): round-trip + idempotency coverage for channel-secrets
TerrifiedBug
committed
feat(security): encrypt channel secrets on create
TerrifiedBug
committed
feat(security): encrypt channel secrets on update with rotation support
TerrifiedBug
committed
feat(security): decrypt channel config in deliverToChannels dispatcher
TerrifiedBug
committed
feat(security): decrypt channel config in testChannel
TerrifiedBug
committed
feat(security): one-shot backfill script for existing channel secrets
TerrifiedBug
committed
chore: use eslint-disable directive for explicit-any in channel tests
TerrifiedBug
committed
fix(security): address Codex review on encrypt-channel-secrets
TerrifiedBug
committed