Function getKey

packages/db/src/encryption.ts:8–20

()

const ENCODING = 'base64';

function getKey(): Buffer {
  const raw = process.env.ENCRYPTION_KEY;
  if (!raw) {
    throw new Error('ENCRYPTION_KEY environment variable is not set');
  }
  const buf = Buffer.from(raw, 'hex');
  if (buf.length !== 32) {
    throw new Error(
      'ENCRYPTION_KEY must be a 64-character hex string (32 bytes)'
    );
  }
  return buf;
}

export function encrypt(plaintext: string): string {
  const key = getKey();