latest

internal/vault/vault.go

@@ -73,6 +73,10 @@ func (v *Vault) GetOrDeriveLongTermKey() (*age.X25519Identity, error) {
 			slog.String("public_key", ltIdentity.Recipient().String()),
 		)
 
+		// Cache the derived key by unlocking the vault
+		v.Unlock(ltIdentity)
+		secret.Debug("Vault is unlocked (lt key in memory) via mnemonic", "vault_name", v.Name)
+
 		return ltIdentity, nil
 	}
 
@@ -144,6 +148,10 @@ func (v *Vault) GetOrDeriveLongTermKey() (*age.X25519Identity, error) {
 		slog.String("public_key", ltIdentity.Recipient().String()),
 	)
 
+	// Cache the derived key by unlocking the vault
+	v.Unlock(ltIdentity)
+	secret.Debug("Vault is unlocked (lt key in memory) via unlock key", "vault_name", v.Name, "unlock_key_type", unlockKey.GetType())
+
 	return ltIdentity, nil
 }