@majikah/majik-key 0.2.12 → 0.2.14

package/dist/majik-key.d.ts

@@ -1,86 +1,135 @@
 /**
  * MajikKey.ts
+ * Seed phrase account library for the Majikah ecosystem.
  *
- * Seed phrase account library for Majik Message.
- *
- * Every account stores TWO keypairs derived deterministically from the mnemonic:
- *   1. X25519 (Curve25519)   — fingerprint, contact identity, legacy message compat
- *   2. ML-KEM-768 (FIPS-203) — post-quantum key encapsulation for v3 envelopes
- *
- * Both are derived from the 64-byte BIP-39 seed:
- *   seed[0..32]  → Ed25519 → X25519 via ed2curve
- *   seed[0..64]  → ml_kem768.keygen(seed) — full seed, deterministic
- *
- * KDF versioning (passphrase encryption at rest):
- *   v1 — PBKDF2-SHA256, 250k iterations   (legacy read-only)
- *   v2 — Argon2id, 128 MB / 4t / 4p       (all new accounts)
- *
- * Migration policy:
- *   Old accounts (v1, no ML-KEM keys) are fully upgraded on first import
- *   via importFromMnemonicBackup(). The mnemonic is always available at that
- *   point, so ML-KEM keys can be deterministically re-derived and stored.
- *   No partial migration — either fully upgraded or not upgraded yet.
  */
 import { MajikContact, MajikContactMeta } from "@majikah/majik-contact";
 import { KDF_VERSION } from "./core/crypto/constants";
-import type { MajikKeyDangerousJSON, MajikKeyJSON, MajikKeyMetadata, MnemonicJSON } from "./core/types";
+import type { MajikKeyAddress, MajikKeyDangerousJSON, MajikKeyFingerprint, MajikKeyJSON, MajikKeyMetadata, MnemonicJSON } from "./core/types";
 import { MajikMessageIdentity } from "./core/database/system/identity";
 import { MajikUser } from "@thezelijah/majik-user";
 import { MnemonicLanguage } from "./core/crypto/wordlist";
-import { SolanaKeypairMaterial } from "./core/web3/solana";
-import { MajikKeyWeb3Namespace } from "./core/web3/types";
+import { MajikKeyWeb3Namespace, BitcoinDerivationOptions, BitcoinKeypairMaterial, SolanaKeypairMaterial } from "./core/web3";
+/**
+ * In-memory identity bundle for an *unlocked* MajikKey — the raw CryptoKey/
+ * Uint8Array material, not the encrypted-at-rest form. This is what
+ * `toKeyIdentity()` returns, and what backup export starts from.
+ *
+ * `mlKemPublicKey`/`mlKemSecretKey` are required here because every account
+ * (even ones mid-migration) is expected to carry ML-KEM material by the time
+ * this shape is used. `ed*`, `mlDsa*`, and `btc*` are optional because
+ * accounts imported before those key types existed may not have them yet —
+ * check `hasSigningKeys` / `hasBitcoin` on the `MajikKey` instance before
+ * relying on them.
+ */
 export interface MajikKeyIdentity {
+    /** Account identifier. Equal to `fingerprint` for accounts created by this library. */
     id: string;
+    /** X25519 public key — native `CryptoKey` where WebCrypto supports it, otherwise a raw-bytes wrapper. */
     publicKey: CryptoKey | {
         raw: Uint8Array;
     };
-    fingerprint: string;
+    /** SHA-256 fingerprint of `publicKey`. */
+    fingerprint: MajikKeyFingerprint;
+    /** X25519 private key, decrypted into memory. ⚠️ Live key material — do not log or serialize directly. */
     privateKey: CryptoKey | {
         raw: Uint8Array;
     };
+    /** AES-256-GCM-encrypted X25519 private key (IV + ciphertext), as stored at rest. */
     encryptedPrivateKey: ArrayBuffer;
+    /** Random salt used to derive the passphrase-based encryption key. Base64. */
     salt: string;
+    /** KDF used to encrypt the keys on this identity: `1` = legacy PBKDF2, `2` = Argon2id. */
     kdfVersion: KDF_VERSION;
+    /** ML-KEM-768 (FIPS-203) public key. Post-quantum key encapsulation. */
     mlKemPublicKey: Uint8Array;
+    /** ML-KEM-768 secret key, decrypted into memory. ⚠️ Live key material. */
     mlKemSecretKey?: Uint8Array;
+    /** Ed25519 public key. Classical signing — same keypair the X25519 identity key is converted from. */
     edPublicKey?: Uint8Array;
+    /** Ed25519 secret key, decrypted into memory. ⚠️ Live key material. */
     edSecretKey?: Uint8Array;
+    /** ML-DSA-87 (FIPS-204) public key. Post-quantum signing. */
     mlDsaPublicKey?: Uint8Array;
+    /** ML-DSA-87 secret key, decrypted into memory. ⚠️ Live key material. */
     mlDsaSecretKey?: Uint8Array;
+    /** @experimental secp256k1 Bitcoin public key. Domain-separated BIP-32/84 derivation by default. */
+    btcPublicKey?: Uint8Array;
+    /** @experimental Bitcoin private key, decrypted into memory. ⚠️ Live key material. */
+    btcSecretKey?: Uint8Array;
 }
+/**
+ * `MajikKeyIdentity` immediately after fresh derivation from a mnemonic —
+ * i.e. what `create()` and `importFromMnemonicBackup()` produce internally,
+ * before the result is wrapped into a `MajikKey` instance.
+ *
+ * Unlike the base `MajikKeyIdentity`, every `encrypted*` field here is
+ * required: a fresh derivation always re-derives and re-encrypts the full
+ * key set (ML-KEM, Ed25519, ML-DSA, and Bitcoin) in one pass, so there's no
+ * "partially migrated" state at this point in the flow.
+ */
 export type MajikKeyDerivedIdentity = MajikKeyIdentity & {
+    /** AES-256-GCM-encrypted ML-KEM-768 secret key, freshly re-encrypted. */
     encryptedMlKemSecretKey: ArrayBuffer;
+    /** AES-256-GCM-encrypted Ed25519 secret key, freshly re-encrypted. */
     encryptedEdSecretKey: ArrayBuffer;
+    /** AES-256-GCM-encrypted ML-DSA-87 secret key, freshly re-encrypted. */
     encryptedMlDsaSecretKey: ArrayBuffer;
+    /** @experimental AES-256-GCM-encrypted Bitcoin secret key, freshly re-encrypted. */
+    encryptedBtcSecretKey?: ArrayBuffer;
 };
+/**
+ * Minimal identity export — just enough to identify the account and, if
+ * present, re-derive access to it. Lighter than `MajikKeyJSON`: no ML-KEM,
+ * Ed25519, ML-DSA, or Bitcoin fields at all. Produced by
+ * `toSerializedIdentity()` (unlocked keys only).
+ */
 export interface SerializedIdentity {
     id: string;
-    publicKey: string;
-    fingerprint: string;
+    /** X25519 public key, base64. */
+    publicKey: MajikKeyAddress;
+    fingerprint: MajikKeyFingerprint;
+    /** AES-256-GCM-encrypted X25519 private key, base64. Omitted in some contexts — check before use. */
     encryptedPrivateKey?: string;
+    /** Base64 salt paired with `encryptedPrivateKey`. Omitted in some contexts — check before use. */
     salt?: string;
 }
+/**
+ * Internal constructor payload for `MajikKey` — every static factory
+ * (`create()`, `fromJSON()`, `fromDangerousJSON()`, `importFromMnemonicBackup()`,
+ * etc.) builds one of these and passes it to the private constructor.
+ *
+ * You won't normally build this by hand; it's exported mainly for type
+ * inference around the factory methods. Fields mirror `MajikKeyJSON` plus
+ * the live (decrypted) counterparts where a factory is constructing an
+ * already-unlocked instance.
+ */
 export interface MajikKeyConstructorOptions {
     id: string;
     publicKey: CryptoKey | {
         raw: Uint8Array;
     };
-    publicKeyBase64: string;
-    fingerprint: string;
+    publicKeyBase64: MajikKeyAddress;
+    fingerprint: MajikKeyFingerprint;
     encryptedPrivateKey: ArrayBuffer;
     encryptedPrivateKeyBase64: string;
     salt: string;
+    /** Encrypted mnemonic-verification blob — see `MajikKeyJSON.backup`. */
     backup: string;
     label?: string;
     timestamp?: Date;
+    /** Defaults to legacy PBKDF2 (`KDF_VERSION.PBKDF2`) if omitted — see the private constructor. */
     kdfVersion?: KDF_VERSION;
     mlKemPublicKey: Uint8Array;
+    /** Present only when constructing an already-unlocked instance. ⚠️ Live key material. */
     mlKemSecretKey?: Uint8Array;
     encryptedMlKemSecretKey?: ArrayBuffer;
     encryptedMlKemSecretKeyBase64?: string;
+    /** Present only when constructing an already-unlocked instance. ⚠️ Live key material. */
     privateKey?: CryptoKey | {
         raw: Uint8Array;
     };
+    /** Present only when constructing an already-unlocked instance. ⚠️ Live key material. */
     privateKeyBase64?: string;
     edPublicKey?: Uint8Array;
     encryptedEdSecretKey?: ArrayBuffer;
@@ -88,10 +137,43 @@ export interface MajikKeyConstructorOptions {
     mlDsaPublicKey?: Uint8Array;
     encryptedMlDsaSecretKey?: ArrayBuffer;
     encryptedMlDsaSecretKeyBase64?: string;
+    /** Present only when constructing an already-unlocked instance. ⚠️ Live key material. */
     edSecretKey?: Uint8Array;
+    /** Present only when constructing an already-unlocked instance. ⚠️ Live key material. */
     mlDsaSecretKey?: Uint8Array;
+    /** @experimental secp256k1 Bitcoin public key. */
+    btcPublicKey?: Uint8Array;
+    /** @experimental AES-256-GCM-encrypted Bitcoin private key. */
+    encryptedBtcSecretKey?: ArrayBuffer;
+    /** @experimental Base64 form of `encryptedBtcSecretKey`. */
+    encryptedBtcSecretKeyBase64?: string;
+    /** @experimental Present only when constructing an already-unlocked instance. ⚠️ Live key material. */
+    btcSecretKey?: Uint8Array;
     mnemonicLanguage?: MnemonicLanguage;
 }
+/**
+ * MajikKey
+ * ---
+ *
+ * Seed phrase account library for the Majikah ecosystem.
+ *
+ * Every account stores FIVE keypairs, all deterministically derived from a
+ * single BIP-39 mnemonic:
+ *   1. X25519 (Curve25519)   — fingerprint, contact identity, legacy message compat
+ *   2. ML-KEM-768 (FIPS-203) — post-quantum key encapsulation for v3 envelopes
+ *   3. Ed25519               — classical signing
+ *   4. ML-DSA-87 (FIPS-204)  — post-quantum signing
+ *   5. Bitcoin (secp256k1)   — BIP-32/84 HD key, domain-separated by default (experimental)
+ *
+ * All derived from the 64-byte BIP-39 seed:
+ *   seed[0..32]  → Ed25519 keypair — used directly for signing, AND converted
+ *                  to X25519 via ed2curve for the encryption/identity keypair
+ *                  (one Ed25519 keypair, two roles)
+ *   seed[0..64]  → ml_kem768.keygen(seed) — full seed, deterministic
+ *   hash(seed || "MajikSignatureSeedDSA") → 32-byte seed → ml_dsa87.keygen()
+ *   seed[0..64]  → HDKey.fromMasterSeed(seed).derive(path) — BIP-32/84 Bitcoin key
+ *
+ */
 export declare class MajikKey {
     private readonly _id;
     private readonly _publicKey;
@@ -119,31 +201,108 @@ export declare class MajikKey {
     private _mlDsaSecretKey?;
     private _encryptedMlDsaSecretKey?;
     private _encryptedMlDsaSecretKeyBase64?;
+    /**
+     * @experimental
+     */
     private _solanaKeypairMaterial?;
+    /**
+     * @experimental
+     */
+    private _btcPublicKey?;
+    /**
+     * @experimental
+     */
+    private _btcSecretKey?;
+    /**
+     * @experimental
+     */
+    private _encryptedBtcSecretKey?;
+    /**
+     * @experimental
+     */
+    private _encryptedBtcSecretKeyBase64?;
     private constructor();
+    /** Account identifier. Equal to `fingerprint` for accounts created by this library. */
     get id(): string;
-    get fingerprint(): string;
+    /** SHA-256 fingerprint of the X25519 public key. Stable identity anchor for the account. */
+    get fingerprint(): MajikKeyFingerprint;
+    /** X25519 public key — native `CryptoKey` where WebCrypto supports it, otherwise a raw-bytes wrapper. Always available, even when locked. */
     get publicKey(): CryptoKey | {
         raw: Uint8Array;
     };
-    get publicKeyBase64(): string;
+    /** X25519 public key, base64-encoded. Always available, even when locked. */
+    get publicKeyBase64(): MajikKeyAddress;
+    /** Human-readable, user-editable account name. Update via `updateLabel()`. */
     get label(): string;
+    /** BIP-39 wordlist language this account's mnemonic was generated/validated against. */
     get mnemonicLanguage(): MnemonicLanguage;
+    /**
+     * Encrypted mnemonic-verification blob (base64 JSON). Decryptable only
+     * with the original mnemonic — used internally to verify a supplied
+     * mnemonic before `importFromMnemonicBackup()` re-derives the full
+     * identity. Not a general-purpose private-key backup.
+     */
     get backup(): string;
+    /** Account creation time. */
     get timestamp(): Date;
+    /** KDF currently protecting every `encrypted*` field on this account: `1` = legacy PBKDF2, `2` = Argon2id. */
     get kdfVersion(): KDF_VERSION;
+    /** `true` if this account is on the current KDF (Argon2id). `false` means it's still on legacy PBKDF2 — see `migrate()` or `importFromMnemonicBackup()`. */
     get isArgon2id(): boolean;
+    /** `true` if private key material is currently purged from memory (i.e. `lock()` was called, or `unlock()` hasn't been called yet). */
     get isLocked(): boolean;
+    /** `true` if private key material is currently decrypted in memory. The inverse of `isLocked`. */
     get isUnlocked(): boolean;
+    /** ML-KEM-768 (FIPS-203) public key. Post-quantum key encapsulation. Always available, even when locked. */
     get mlKemPublicKey(): Uint8Array;
+    /** ML-KEM-768 secret key. `undefined` unless the account is unlocked. ⚠️ Live key material — prefer `getMlKemSecretKey()` if you want a thrown error instead of `undefined` on locked accounts. */
     get mlKemSecretKey(): Uint8Array | undefined;
+    /** `true` if this account has ML-KEM-768 keys (i.e. is post-quantum-encryption capable). `false` means it's a legacy account pending migration. */
     get hasMlKem(): boolean;
+    /** `true` if this account is on Argon2id *and* has ML-KEM-768 keys — i.e. fully migrated, nothing left to upgrade. */
     get isFullyUpgraded(): boolean;
+    /**
+     * @experimental secp256k1 Bitcoin public key. `undefined` if this account
+     * has no stored Bitcoin key material (e.g. it predates Web3 support and
+     * hasn't been re-imported via `importFromMnemonicBackup()`).
+     */
+    get btcPublicKey(): Uint8Array | undefined;
+    /** @experimental `true` if this account has a stored Bitcoin keypair. */
+    get hasBitcoin(): boolean;
+    /**
+     * Lightweight, non-secret snapshot of this account's state — no key bytes
+     * at all, encrypted or otherwise. Useful for account pickers, dashboards,
+     * or anywhere you want to display status without touching key material.
+     */
     get metadata(): MajikKeyMetadata;
+    /** Ed25519 public key. Classical signing — same keypair the X25519 identity key is converted from. Always available, even when locked. */
     get edPublicKey(): Uint8Array | undefined;
+    /** ML-DSA-87 (FIPS-204) public key. Post-quantum signing. Always available, even when locked. */
     get mlDsaPublicKey(): Uint8Array | undefined;
+    /** `true` if this account has both Ed25519 and ML-DSA-87 signing keys. `false` means it's a legacy account pending migration. */
     get hasSigningKeys(): boolean;
-    static create(mnemonic: string, passphrase: string, label?: string, mnemonicLanguage?: MnemonicLanguage): Promise<MajikKey>;
+    /**
+     * Creates a brand-new MajikKey account from a BIP-39 mnemonic.
+     *
+     * Derives the full key set in one pass — X25519, ML-KEM-768, Ed25519,
+     * ML-DSA-87, and a domain-separated Bitcoin key (see `MAJIK_BITCOIN_DOMAIN_PATH`)
+     * — encrypts every private key with Argon2id (KDF v2), and returns an
+     * **already-unlocked** instance (no `unlock()` call needed right after
+     * `create()`).
+     *
+     * @param mnemonic - A valid BIP-39 mnemonic phrase (12 or 24 words), matching `mnemonicLanguage`. Generate one with `MajikKey.generateMnemonic()`.
+     * @param passphrase - Passphrase used to derive the Argon2id encryption key for every private key on this account. This is *not* the mnemonic — losing it without the mnemonic makes the account unrecoverable.
+     * @param label - Optional human-readable account name. Defaults to an empty string. Update later via `updateLabel()`.
+     * @param mnemonicLanguage - BIP-39 wordlist to validate `mnemonic` against. Defaults to `"en"`.
+     * @param options.deriveBitcoin - @experimental Set `false` to skip deriving the Bitcoin keypair. Defaults to `true`.
+     * @returns An unlocked `MajikKey` instance, ready for immediate use — call `.lock()` when you're done with it.
+     * @throws {MajikKeyError} If `mnemonic` fails validation, `passphrase`/`label` fail their validators, or `mnemonic` doesn't match `mnemonicLanguage`'s wordlist.
+     */
+    static create(mnemonic: string, passphrase: string, label?: string, options?: {
+        mnemonicLanguage?: MnemonicLanguage;
+        /** @experimental Set `false` to skip deriving the Bitcoin keypair. Defaults to `true` for backward compatibility. */
+        deriveBitcoin?: boolean;
+    }): Promise<MajikKey>;
     static fromJSON(json: MajikKeyJSON | string): MajikKey;
     /**
      * Export a fully unlocked MajikKey with all raw private keys.
@@ -197,17 +356,18 @@ export declare class MajikKey {
     /**
      * Import a MajikKey from a mnemonic-encrypted backup.
      *
-     * This is the FULL MIGRATION PATH for old accounts — Argon2id + ML-KEM in one step:
-     *   1. Verify the backup decrypts correctly (proves mnemonic is correct)
-     *   2. Re-derive the complete identity from the mnemonic (X25519 + ML-KEM-768)
-     *   3. Encrypt both private keys with Argon2id (v2) + fresh 32-byte salt
-     *   4. Return a fully-upgraded MajikKey with hasMlKem: true, isArgon2id: true
-     *
-     * Old accounts without ML-KEM keys become fully post-quantum capable
-     * automatically — no extra user steps. The mnemonic is the source of truth.
      */
-    static importFromMnemonicBackup(backup: string, mnemonic: string, passphrase: string, label?: string, mnemonicLanguage?: MnemonicLanguage): Promise<MajikKey>;
+    static importFromMnemonicBackup(backup: string, mnemonic: string, passphrase: string, label?: string, options?: {
+        mnemonicLanguage?: MnemonicLanguage;
+        /** @experimental Set `false` to skip deriving the Bitcoin keypair. Defaults to `true` for backward compatibility. */
+        deriveBitcoin?: boolean;
+    }): Promise<MajikKey>;
     private static _getWordlist;
+    /**
+     * @param mnemonic - BIP-39 mnemonic to derive the full key set from.
+     * @param passphrase - Passphrase used to derive the Argon2id encryption key shared by every private key produced here.
+     * @param options.deriveBitcoin - @experimental Set `false` to skip deriving the Bitcoin keypair. Defaults to `true`.
+     */
     private static _deriveAndEncryptFromMnemonic;
     private static _encryptPrivateKey;
     /**
@@ -225,16 +385,41 @@ export declare class MajikKey {
     private static _deriveLegacyMnemonicKey;
     private static _exportKeyToBase64;
     /**
-     * @experimental Blockchain/web3 integrations are experimental — this API
-     * may change without notice. `undefined` when the MajikKey is locked or
-     * has no Ed25519 signing key to derive from.
-     *
-     * By default `web3.solana` is DOMAIN-SEPARATED from the MajikKey's message
-     * signing key (see deriveSolanaKeypairFromEdSecretKey). Use
-     * `getSolanaKeypairMaterial({ reuseMessageKey: true })` if you specifically
-     * want the identical key reused for Solana instead.
+     * @experimental
+     */
+    getBtcSecretKey(): Uint8Array;
+    /**
+     * @experimental
      */
     get web3(): MajikKeyWeb3Namespace | undefined;
+    /**
+     * @experimental True if this MajikKey can currently produce Bitcoin
+     * material (i.e. it's unlocked and has a Bitcoin secret key).
+     */
+    get hasBitcoinKeypair(): boolean;
+    /**
+     * @experimental Raw Bitcoin keypair material. Pass `{ standard: true }` to
+     * get the REAL BIP-84 mainnet key (recoverable in any standard wallet from
+     * the mnemonic alone) instead of Majik's default domain-separated key.
+     *
+     * NOTE: `{ standard: true }` re-derives from the raw seed on demand and is
+     * NOT the same key as `web3.bitcoin` (which is always the stored,
+     * domain-separated default) — it requires the mnemonic to reproduce again
+     * outside Majik, whereas the stored default does not.
+     */
+    getBitcoinKeypairMaterial(options?: BitcoinDerivationOptions): BitcoinKeypairMaterial;
+    /**
+     * @experimental Derive the REAL BIP-84 mainnet Bitcoin keypair straight
+     * from a mnemonic — for one-off export/verification. Does not require
+     * an unlocked MajikKey instance.
+     */
+    static deriveStandardBitcoinFromMnemonic(mnemonic: string, mnemonicLanguage?: MnemonicLanguage): Promise<BitcoinKeypairMaterial>;
+    /**
+     * @experimental WIF export of the default (domain-separated) Bitcoin key.
+     */
+    getBitcoinWIF(options?: {
+        compressed?: boolean;
+    }): string;
     /**
      * @experimental True if this MajikKey can currently produce a Solana
      * keypair (i.e. it's unlocked and has an Ed25519 signing key).