coleam00/Archon · error

Workflow run config could not be decrypted.

Error message

Workflow run config could not be decrypted.

What it means

Error "Workflow run config could not be decrypted." thrown in coleam00/Archon.

Source

Thrown at packages/core/src/config/run-config-handoff.ts:18

import {
  workflowRunConfigLayerSchema,
  workflowRunConfigMetadataSchema,
  type WorkflowRunConfigInput,
  type WorkflowRunConfigLayer,
  type WorkflowRunConfigMetadata,
} from '@archon/workflows/schemas/run-config';
import { decryptToken, getEncryptionKey } from '../utils/token-crypto';

/** Decrypt and structurally validate a sealed layer without loading provider semantics. */
export function unsealWorkflowRunConfigStructure(
  metadata: WorkflowRunConfigMetadata
): WorkflowRunConfigLayer {
  let plaintext: string;
  try {
    plaintext = decryptToken(metadata.ciphertext, getEncryptionKey());
  } catch {
    throw new Error('Workflow run config could not be decrypted.');
  }

  let value: unknown;
  try {
    value = JSON.parse(plaintext) as unknown;
  } catch {
    throw new Error('Workflow run config payload is not valid JSON.');
  }

  const parsed = workflowRunConfigLayerSchema.safeParse(value);
  if (!parsed.success) {
    throw new Error('Workflow run config payload is invalid.');
  }
  return parsed.data;
}

/** Decode the detached parent handoff before command/provider dispatch. */
export function decodeWorkflowRunConfigHandoff(payload: string): WorkflowRunConfigInput {

View on GitHub (pinned to 0773b97458)

When it happens

Trigger: Thrown at packages/core/src/config/run-config-handoff.ts:18 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of coleam00/Archon@0773b97458 (2026-09-01). Data as JSON: /api/errors/c7224efbc4105f3f. Report an issue: GitHub.