@workflow/web 5.0.0-beta.1 → 5.0.0-beta.10

package/README.md

@@ -1,6 +1,6 @@
 # @workflow/web
 
-Observability Web UI Package bundled in the [Workflow SDK](https://useworkflow.dev/docs/observability).
+Observability Web UI Package bundled in the [Workflow SDK](https://workflow-sdk.dev/docs/observability).
 
 ## Self-hosting
 

package/build/client/assets/encryption-B7z5c3Mu.js

@@ -0,0 +1,51 @@
+import { W as WorkflowRuntimeError, R as RuntimeDecryptionError } from "./index-CIZByfnL.js";
+import "./index-BsV8i_Jn.js";
+const NONCE_LENGTH = 12;
+const TAG_LENGTH = 128;
+const KEY_LENGTH = 32;
+async function importKey(raw, usages = ["encrypt", "decrypt"]) {
+  if (raw.byteLength !== KEY_LENGTH) {
+    throw new WorkflowRuntimeError(`Encryption key must be exactly ${KEY_LENGTH} bytes, got ${raw.byteLength}`);
+  }
+  return globalThis.crypto.subtle.importKey(
+    "raw",
+    raw,
+    "AES-GCM",
+    false,
+    // `KeyUsage` is a DOM-lib type that's not in scope under `es2022`.
+    // The `ReadonlyArray<'encrypt' | 'decrypt'>` parameter type matches
+    // a strict subset of `KeyUsage[]`, so this cast is sound.
+    usages
+  );
+}
+async function decrypt(key, data) {
+  const minLength = NONCE_LENGTH + TAG_LENGTH / 8;
+  if (data.byteLength < minLength) {
+    throw new RuntimeDecryptionError(`Encrypted data too short: expected at least ${minLength} bytes, got ${data.byteLength}`, {
+      context: {
+        operation: "decrypt",
+        byteLength: data.byteLength
+      }
+    });
+  }
+  const nonce = data.subarray(0, NONCE_LENGTH);
+  const ciphertext = data.subarray(NONCE_LENGTH);
+  let plaintext;
+  try {
+    plaintext = await globalThis.crypto.subtle.decrypt({ name: "AES-GCM", iv: nonce, tagLength: TAG_LENGTH }, key, ciphertext);
+  } catch (cause) {
+    const causeMsg = cause instanceof Error ? cause.message : String(cause);
+    throw new RuntimeDecryptionError(`AES-256-GCM decryption failed: ${causeMsg}`, {
+      cause,
+      context: {
+        operation: "decrypt",
+        byteLength: data.byteLength
+      }
+    });
+  }
+  return new Uint8Array(plaintext);
+}
+export {
+  decrypt,
+  importKey
+};