@majikah/majik-key 0.2.0 → 0.2.1

package/dist/core/crypto/crypto-provider.js

@@ -51,7 +51,8 @@ export function aesGcmEncrypt(keyBytes, iv, plaintext) {
 export function aesGcmDecrypt(keyBytes, iv, ciphertext) {
     const aes = new AES(keyBytes);
     const gcm = new GCM(aes);
-    return gcm.open(iv, ciphertext);
+    const result = gcm.open(iv, ciphertext);
+    return result ? result.slice() : null;
 }
 // ─── WASM-first Argon2id with @noble/hashes fallback ─────────────────────────
 /**
@@ -132,7 +133,8 @@ async function _argon2id(input, salt, params) {
  */
 export async function deriveKeyFromPassphraseArgon2(passphrase, salt) {
     const pw = new TextEncoder().encode(passphrase);
-    return _argon2id(pw, salt, ARGON2_PARAMS.PASSPHRASE);
+    const result = await _argon2id(pw, salt, ARGON2_PARAMS.PASSPHRASE);
+    return result.slice(); // ← force a copy out of WASM memory
 }
 /**
  * Derive a 32-byte AES key from a BIP-39 mnemonic using Argon2id.
@@ -144,7 +146,8 @@ export async function deriveKeyFromPassphraseArgon2(passphrase, salt) {
  */
 export async function deriveKeyFromMnemonicArgon2(mnemonic, salt) {
     const m = new TextEncoder().encode(mnemonic);
-    return _argon2id(m, salt, ARGON2_PARAMS.MNEMONIC);
+    const result = await _argon2id(m, salt, ARGON2_PARAMS.MNEMONIC);
+    return result.slice(); // ← force a copy out of WASM memory
 }
 // ─── KDF v1: PBKDF2-SHA256 (legacy — do not use for new operations) ───────────
 /**

package/package.json

@@ -2,7 +2,7 @@
   "name": "@majikah/majik-key",
   "type": "module",
   "description": "A post-quantum ready seed phrase account library for the Majikah ecosystem. Manages deterministic X25519 and ML-KEM-768 identities with Argon2id protection and seamless legacy account migration.",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "license": "Apache-2.0",
   "author": "Zelijah",
   "main": "./dist/index.js",