magic_encryption 1.0.2

AES-256-CBC encryption for Magic apps: the Crypt facade, encrypter and key:generate.

Changelog

All notable changes to this project will be documented in this file.

[Unreleased]

1.0.2 - 2026-11-15

Changed

• The package page is https://anilcancakir.com/magic/encryption and the documentation links sit under https://anilcancakir.com/magic/docs/encryption.

Fixed

• The device-key page and the skill no longer say that uninstalling the app always removes the key: on Android it does, while on iOS the Keychain item can survive a reinstall.

1.0.1 - 2026-11-15

Fixed

• Two device-key calls that start together on a first launch now share one generated key, so neither payload is lost after a restart.
• key:generate no longer prints the new key; it prints a success line, and --show still prints the key and leaves .env alone.
• A raw key is checked by its UTF-8 byte length, so a 32-character non-ASCII key is refused at construction instead of failing later in encrypt and decrypt, and a raw key shorter than 32 characters that encodes to 32 bytes is now accepted.
• Error messages and doc comments now name the real command, dart run magic:dowel key:generate.
• key:generate keeps .env well-formed when it appends the key (one newline before it, a trailing newline) and replaces the value of an export APP_KEY= line, keeping the export prefix. It writes .env in place, so the file mode and a symlink at its path are kept.
• generateDeviceKey and clearDeviceKey now wait for a device key creation that is still running, so Vault and the in-memory key cannot disagree and a late write cannot undo a clear.

1.0.0 - 2026-11-14

Added

• First release. AES-256-CBC encryption for Magic apps, moved out of magic core.
• Crypt facade: encrypt and decrypt with the app key (APP_KEY), and encryptWithDeviceKey, decryptWithDeviceKey, hasDeviceKey, generateDeviceKey and clearDeviceKey with a per-device key kept in Vault.
• MagicEncrypter (the cipher), MagicDecryptException and EncryptionServiceProvider (wiring).
• key:generate command, run as dart run magic:dowel key:generate, and a dowel plugin provider (MagicEncryptionDowelProvider) that dart run magic:dowel plugin:install magic_encryption registers.
• Built on dowel ^1.0.0 and pointycastle ^4.0.0. Requires Dart 3.13, Flutter 3.47 and magic ^1.0.0.