john kevin asprec c4634d4965 refactor: consolidate API-key crypto into src/lib/crypto with compat tests ...

Encrypt (Options) and decrypt (background) now share one module; wire
format unchanged. Tests include fixtures proving values encrypted by the
old inline Options code still decrypt, plus tamper/wrong-key cases. The
module documents the honest threat model (key co-located with ciphertext
= obfuscation, not encryption).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-14 21:38:42 +08:00

20 KiB

Raw Blame History

View Raw