@majikah/majik-key 0.4.0 → 0.5.0

package/dist/majik-key.d.ts

@@ -326,6 +326,32 @@ export declare class MajikKey {
     getMlKemSecretKey(): Uint8Array;
     getEdSecretKey(): Uint8Array;
     getMlDsaSecretKey(): Uint8Array;
+    /**
+     * Executes an operation against an already-unlocked MajikKey and
+     * automatically locks the key when the operation completes.
+     *
+     * The key is always locked after the operation, including when the
+     * operation throws or rejects.
+     *
+     * @param key - An already-unlocked MajikKey instance.
+     * @param operation - Synchronous or asynchronous operation to execute.
+     * @returns The result returned by the operation.
+     *
+     * @throws {MajikKeyError} If the key is locked.
+     * @throws {MajikKeyError} If `operation` is not a function.
+     *
+     * @example
+     * ```ts
+     * await key.unlock(passphrase);
+     *
+     * const signature = await MajikKey.withAutoLock(key, async (key) => {
+     *   return sign(key.getEdSecretKey(), message);
+     * });
+     *
+     * // key.isLocked === true
+     * ```
+     */
+    static withAutoLock<T>(key: MajikKey, operation: (key: MajikKey) => T | Promise<T>): Promise<T>;
     toJSON(): MajikKeyJSON;
     toString(pretty?: boolean): string;
     static generateMnemonic(strength?: 128 | 256, language?: MnemonicLanguage): Promise<string>;

package/dist/majik-key.js

@@ -8,7 +8,7 @@ import { aesGcmDecrypt, aesGcmEncrypt, deriveKeyFromPassphraseArgon2, deriveKeyF
 import { EncryptionEngine } from "./core/crypto/encryption-engine";
 import { MajikContact } from "@majikah/majik-contact";
 import { arrayBufferToBase64, arrayToBase64, base64ToArrayBuffer, concatUint8Arrays, utf8ToBase64, base64ToUtf8, seedStringToArray, seedArrayToString, base64ToUint8Array, } from "./core/utils";
-import { KDF_VERSION, MAJIK_MNEMONIC_SALT, } from "./core/crypto/constants";
+import { KDF_VERSION, MAJIK_MNEMONIC_SALT } from "./core/crypto/constants";
 import { MajikKeyValidator } from "./core/validator";
 import { MajikKeyError } from "./core/error";
 import { MajikMessageIdentity } from "./core/database/system/identity";
@@ -706,6 +706,48 @@ export class MajikKey {
             throw new MajikKeyError("No ML-DSA secret key — re-import via importFromMnemonicBackup() for full migration.");
         return this._mlDsaSecretKey;
     }
+    /**
+     * Executes an operation against an already-unlocked MajikKey and
+     * automatically locks the key when the operation completes.
+     *
+     * The key is always locked after the operation, including when the
+     * operation throws or rejects.
+     *
+     * @param key - An already-unlocked MajikKey instance.
+     * @param operation - Synchronous or asynchronous operation to execute.
+     * @returns The result returned by the operation.
+     *
+     * @throws {MajikKeyError} If the key is locked.
+     * @throws {MajikKeyError} If `operation` is not a function.
+     *
+     * @example
+     * ```ts
+     * await key.unlock(passphrase);
+     *
+     * const signature = await MajikKey.withAutoLock(key, async (key) => {
+     *   return sign(key.getEdSecretKey(), message);
+     * });
+     *
+     * // key.isLocked === true
+     * ```
+     */
+    static async withAutoLock(key, operation) {
+        if (!(key instanceof MajikKey)) {
+            throw new MajikKeyError("A valid MajikKey instance is required");
+        }
+        if (key.isLocked) {
+            throw new MajikKeyError("MajikKey must be unlocked before calling withAutoLock()");
+        }
+        if (typeof operation !== "function") {
+            throw new MajikKeyError("Operation must be a function");
+        }
+        try {
+            return await operation(key);
+        }
+        finally {
+            key.lock();
+        }
+    }
     // ── SERIALIZATION ────────────────────────────────────────────────────────────
     toJSON() {
         return {

package/package.json

@@ -2,7 +2,7 @@
   "name": "@majikah/majik-key",
   "type": "module",
   "description": "A post-quantum ready seed phrase account library for the Majikah ecosystem. Manages deterministic X25519 and ML-KEM-768 identities with Argon2id protection and seamless legacy account migration.",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "license": "Apache-2.0",
   "author": "Zelijah",
   "main": "./dist/index.js",
@@ -56,11 +56,11 @@
   },
   "dependencies": {
     "@majikah/majik-contact": "^0.0.6",
-    "@noble/curves": "^2.3.0",
-    "@noble/hashes": "^2.3.0",
-    "@noble/post-quantum": "^0.7.0",
-    "@scure/bip32": "^2.3.0",
-    "@scure/bip39": "^2.3.0",
+    "@noble/curves": "^2.4.0",
+    "@noble/hashes": "^2.4.0",
+    "@noble/post-quantum": "^0.7.1",
+    "@scure/bip32": "^2.4.0",
+    "@scure/bip39": "^2.4.0",
     "@stablelib/aes": "^2.0.1",
     "@stablelib/ed25519": "^2.1.0",
     "@stablelib/gcm": "^2.0.1",
@@ -72,16 +72,16 @@
     "hash-wasm": "^4.12.0"
   },
   "devDependencies": {
-    "@scure/btc-signer": "^2.3.0",
-    "@solana/kit": "^7.1.0",
+    "@scure/btc-signer": "^2.4.1",
+    "@solana/kit": "^8.3.0",
     "@types/ed2curve": "^0.2.4",
-    "@types/node": "^26.2.0",
+    "@types/node": "^26.6.2",
     "typescript": "^7.0.2",
-    "vitest": "^4.1.10"
+    "vitest": "^5.0.1"
   },
   "peerDependencies": {
-    "@scure/btc-signer": "^2.2.0",
-    "@solana/kit": "^7.0.0"
+    "@scure/btc-signer": "^2.4.1",
+    "@solana/kit": "^8.3.0"
   },
   "peerDependenciesMeta": {
     "@solana/kit": {