dandri/simplex-chat
1
0
Fork 0
mirror of https://github.com/simplex-chat/simplex-chat.git synced 2026-09-30 08:48:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

core: one command for the seed, whichever way it arrives

Browse Source 
create and import differed only in where the entropy came from and already
shared one store function, so they are one command with the source named:
/_wallet create new, or /_wallet create seed=<phrase>. Naming it means no
seed is generated by typing a prefix.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rvc3HbiWBTqbAvRT45G5oX
This commit is contained in:
Alain Brenzikofer
2026-09-11 12:28:46 +00:00
co-authored by Claude Opus 5
parent bfa510cdb1
commit 443fd43545
5 changed files with 32 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/rfcs/2026-09-10-wallet-keys.md
+12 -9
View File
@@ -66,17 +66,20 @@ at the profile level, while what a profile buys sits at the address level.
Internal API. The names commands will call these; users will not.
```
/_wallet the next name addresses
/_wallet create generate the seed. Refused if the device has one
/_wallet import <phrase> store a seed. Refused if the device has one
/_wallet export the seed mnemonic
/_wallet export <name> one derived secret, as 0x and 64 hex digits
/_wallet delete delete the seed
/_wallet the next name addresses
/_wallet create new generate the seed
/_wallet create seed=<phrase> take the seed from a phrase
/_wallet export the seed mnemonic
/_wallet export <name> one derived secret, as 0x and 64 hex digits
/_wallet delete delete the seed
```
A seed is created only when asked for, never at startup and never as a side
effect of reading. None of these is forwarded to a remote host: the recovery
phrase must not leave the device, and the raw command would be logged there.
Creating and importing are one command, because they differ only in where the
entropy comes from, and either is refused if the device already has a seed. The
source is always named, so no seed is generated by typing a prefix. A seed is
created only when asked for, never at startup and never as a side effect of
reading. None of these is forwarded to a remote host: the recovery phrase must
not leave the device, and the raw command would be logged there.
## Schema