@majikah/majik-key 0.2.0 → 0.2.2

package/dist/core/crypto/crypto-provider.js

@@ -51,7 +51,8 @@ export function aesGcmEncrypt(keyBytes, iv, plaintext) {
 export function aesGcmDecrypt(keyBytes, iv, ciphertext) {
     const aes = new AES(keyBytes);
     const gcm = new GCM(aes);
-    return gcm.open(iv, ciphertext);
+    const result = gcm.open(iv, ciphertext);
+    return result ? result.slice() : null;
 }
 // ─── WASM-first Argon2id with @noble/hashes fallback ─────────────────────────
 /**
@@ -132,7 +133,8 @@ async function _argon2id(input, salt, params) {
  */
 export async function deriveKeyFromPassphraseArgon2(passphrase, salt) {
     const pw = new TextEncoder().encode(passphrase);
-    return _argon2id(pw, salt, ARGON2_PARAMS.PASSPHRASE);
+    const result = await _argon2id(pw, salt, ARGON2_PARAMS.PASSPHRASE);
+    return result.slice(); // ← force a copy out of WASM memory
 }
 /**
  * Derive a 32-byte AES key from a BIP-39 mnemonic using Argon2id.
@@ -144,7 +146,8 @@ export async function deriveKeyFromPassphraseArgon2(passphrase, salt) {
  */
 export async function deriveKeyFromMnemonicArgon2(mnemonic, salt) {
     const m = new TextEncoder().encode(mnemonic);
-    return _argon2id(m, salt, ARGON2_PARAMS.MNEMONIC);
+    const result = await _argon2id(m, salt, ARGON2_PARAMS.MNEMONIC);
+    return result.slice(); // ← force a copy out of WASM memory
 }
 // ─── KDF v1: PBKDF2-SHA256 (legacy — do not use for new operations) ───────────
 /**

package/dist/core/majik-contact.d.ts

@@ -7,6 +7,8 @@ export type SerializedMajikContact = {
     publicKeyBase64: string;
     mlKey: string;
     majikah_registered?: boolean;
+    edPublicKeyBase64?: string;
+    mlDsaPublicKeyBase64?: string;
 };
 export interface MajikContactMeta {
     label?: string;
@@ -24,6 +26,8 @@ export interface MajikContactData {
     mlKey: string;
     meta?: MajikContactMeta;
     majikah_registered?: boolean;
+    edPublicKeyBase64?: string;
+    mlDsaPublicKeyBase64?: string;
 }
 export interface MajikContactCard {
     id: string;
@@ -31,6 +35,8 @@ export interface MajikContactCard {
     fingerprint: string;
     label: string;
     mlKey: string;
+    edPublicKeyBase64?: string;
+    mlDsaPublicKeyBase64?: string;
 }
 export declare class MajikContactError extends Error {
     cause?: unknown;
@@ -43,6 +49,8 @@ export declare class MajikContact {
     };
     readonly fingerprint: string;
     readonly mlKey: string;
+    readonly edPublicKeyBase64: string;
+    readonly mlDsaPublicKeyBase64: string;
     meta: MajikContactMeta;
     private majikah_registered?;
     constructor(data: MajikContactData);

package/dist/core/majik-contact.js

@@ -18,6 +18,8 @@ export class MajikContact {
     publicKey;
     fingerprint;
     mlKey;
+    edPublicKeyBase64;
+    mlDsaPublicKeyBase64;
     meta;
     majikah_registered;
     constructor(data) {
@@ -29,6 +31,8 @@ export class MajikContact {
         this.publicKey = data.publicKey;
         this.fingerprint = data.fingerprint;
         this.mlKey = data.mlKey;
+        this.edPublicKeyBase64 = data.edPublicKeyBase64 || "";
+        this.mlDsaPublicKeyBase64 = data.mlDsaPublicKeyBase64 || "";
         this.meta = {
             label: data.meta?.label || "",
             notes: data.meta?.notes || "",
@@ -152,6 +156,8 @@ export class MajikContact {
             publicKeyBase64: await this.getPublicKeyBase64(),
             majikah_registered: this.majikah_registered,
             mlKey: this.mlKey,
+            edPublicKeyBase64: this.edPublicKeyBase64,
+            mlDsaPublicKeyBase64: this.mlDsaPublicKeyBase64,
         };
     }
     /**
@@ -167,6 +173,8 @@ export class MajikContact {
                 publicKey: { raw: publicKeyRaw },
                 majikah_registered: serialized.majikah_registered,
                 mlKey: serialized.mlKey,
+                edPublicKeyBase64: serialized.edPublicKeyBase64,
+                mlDsaPublicKeyBase64: serialized.mlDsaPublicKeyBase64,
             });
         }
         catch (err) {

package/dist/majik-key.js

@@ -499,6 +499,12 @@ export class MajikKey {
             fingerprint: this._fingerprint,
             meta: { label: this._label },
             mlKey: mlKeyBase64,
+            edPublicKeyBase64: this._edPublicKey
+                ? arrayToBase64(this._edPublicKey)
+                : undefined,
+            mlDsaPublicKeyBase64: this._mlDsaPublicKey
+                ? arrayToBase64(this._mlDsaPublicKey)
+                : undefined,
         });
     }
     toKeyIdentity() {

package/package.json

@@ -2,7 +2,7 @@
   "name": "@majikah/majik-key",
   "type": "module",
   "description": "A post-quantum ready seed phrase account library for the Majikah ecosystem. Manages deterministic X25519 and ML-KEM-768 identities with Argon2id protection and seamless legacy account migration.",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "license": "Apache-2.0",
   "author": "Zelijah",
   "main": "./dist/index.js",
@@ -56,7 +56,7 @@
     "@stablelib/pbkdf2": "^2.0.1",
     "@stablelib/sha256": "^2.0.1",
     "@stablelib/x25519": "^2.0.1",
-    "@thezelijah/majik-user": "^1.0.3",
+    "@thezelijah/majik-user": "^1.0.6",
     "ed2curve": "^0.3.0",
     "hash-wasm": "^4.12.0"
   },