Wire encryption into serialization and fix EventsConsumer for async replay#957

Closed

TooTallNate wants to merge 15 commits into

fix/async-deserialization-orderingfrom

nate/wire-encryption

Commits on Mar 3, 2026

Add browser-compatible AES-GCM to core and HKDF key derivation to world-vercel
TooTallNate
committed
update changeset
TooTallNate
committed
Move HKDF key derivation server-side: API returns per-run derived key
TooTallNate
committed
Refactor encrypt/decrypt to accept CryptoKey, export importKey for callers to import once per run
TooTallNate
committed
Overload getEncryptionKeyForRun: accept context for start(), fetch WorkflowRun in resume-hook
TooTallNate
committed
Split changeset into per-package descriptions for world, world-vercel, and core
TooTallNate
committed
Remove unnecessary Uint8Array.from() wrapper around Buffer.from()
TooTallNate
committed
Use zod to parse Vercel API response
TooTallNate
committed
Wire encryption into serialization layer
TooTallNate
committed
Wire AES-GCM encryption into serialization layer
TooTallNate
committed
update changeset
TooTallNate
committed
Add encryption unit tests: primitives, maybeEncrypt/maybeDecrypt, isEncrypted, complex type round-trips
TooTallNate
committed
Accept CryptoKey in encrypt/decrypt, export importKey for callers to import once per run
TooTallNate
committed
Fix review comments: cache stream encryption key, remove redundant casts, fix stale comments
TooTallNate
committed
Trying to clean up some type non-sense
TooTallNate
committed