fix(workflows): in-place updates, deletion-forgery fix, webhook-secret & channel immutability#1340

Open

AaronGoldsmith wants to merge 6 commits into

AaronGoldsmith:bugfix/workflow-update-delete

Commits on Jun 29, 2026

fix(workflows): update workflows in-place and support deletion by client UUID
AaronGoldsmith
committed
fix(workflows): resolve deletion forgery, preserve webhook secrets, and enforce channel immutability on updates
AaronGoldsmith
committed
security(workflows): prevent information leak and cover legacy NULL channel_id update scenario
AaronGoldsmith
committed
fix(workflows): apply NIP-33 stale-write protection on the command path

AaronGoldsmith
and
claude
committed
fix(workflows): soft-delete kind:30620 event on authorized deletion

npub15xw7rrn3u0cy0uq76ze2x9xvd99ezrcpjerhstttl8sqq23rnnsqu75v77
and
AaronGoldsmith
committed
fix(workflows): set updated_at = NOW() on workflow definition update

AaronGoldsmith
and
codex
committed