core: make the wallet an API, not a user-facing feature

Names commands will use the wallet; users do not. The commands move to
/_wallet, and the help section, its topic and the changelog entry are
removed. The tests drive the API end to end.

Comments cut to what the code does not say, dead exports removed.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rvc3HbiWBTqbAvRT45G5oX

src/Simplex/Chat/Wallet.hs

@@ -1,39 +1,20 @@
 {-# LANGUAGE OverloadedStrings #-}
 
--- | The wallet: BIP-39 seeds, and the keys derived from them.
+-- | BIP-39 seeds and the keys derived from them.
 --
---   * __seed__: BIP-39 entropy. Generic, /not/ name-specific.
---   * __account__: a profile's slot in a seed, BIP-44 account index @i@.
---   * __name key__: @m\/44'\/60'\/i'\/0\/k@: one key per name, at BIP-44
---     address index @k@ under the profile that buys it. This is what the
---     registry records as the name's owner.
---   * __wallet__: this module, creation and derivation.
---
--- One key per name, not one per profile. A per-profile key would mean exporting
--- it hands over every name that profile owns, and would put every name's signed
--- record edits behind one shared nonce counter on the resolver. Both are avoided
--- by giving each name its own address index. @k = 0@ is the profile's first
--- name.
---
--- The schema allows several seeds; a profile binds to exactly one plus its own
--- account index. Only one seed per device is reachable today.
---
--- This module is pure. Persistence lives in "Simplex.Chat.Store.Wallets".
---
--- There is no signing here yet, so nothing can be bought or edited: this is the
--- key material and the derivation only.
+-- One key per name, not one per profile, so that exporting a name's key hands
+-- over that name only.
 module Simplex.Chat.Wallet
   ( SeedId (..),
     WalletSeed (..),
     AccountIndex,
     NameIndex,
     AccountRef (..),
-    WalletAccount (..),
+    WalletAccount,
     newSeed,
     importRecoveryKey,
     recoveryKeyPhrase,
     deriveNameKey,
-    nameKeyPath,
     renderNameKeyPath,
     accountAddress,
   )
@@ -54,16 +35,12 @@ import Simplex.Messaging.Eth.Address (Address, addressFromPrivateKey)
 newtype SeedId = SeedId Int64
   deriving (Eq, Ord, Show)
 
--- | BIP-44 account index within a seed. One per chat profile.
+-- | BIP-44 account index, one per chat profile.
 type AccountIndex = Word32
 
--- | BIP-44 address index within a profile account. One per name.
+-- | BIP-44 address index, one per name.
 type NameIndex = Word32
 
--- | A seed, held as BIP-39 entropy. Stored in the chat database so it rides the
--- existing archive export and Migrate-to-another-device flows.
---
--- 'Show' is redacting: this is the root secret behind every name it owns.
 data WalletSeed = WalletSeed
   { wsId :: SeedId,
     wsEntropy :: ByteString
@@ -73,14 +50,12 @@ data WalletSeed = WalletSeed
 instance Show WalletSeed where
   show s = "WalletSeed " <> show (wsId s) <> " <redacted>"
 
--- | What a chat profile stores: which seed, and which account index within it.
 data AccountRef = AccountRef
   { arSeedId :: SeedId,
     arIndex :: AccountIndex
   }
   deriving (Eq, Show)
 
--- | A derived account: the reference plus the key it resolves to.
 data WalletAccount = WalletAccount
   { waRef :: AccountRef,
     waKey :: S.PrivateKey
@@ -90,35 +65,23 @@ data WalletAccount = WalletAccount
 instance Show WalletAccount where
   show a = "WalletAccount " <> show (waRef a) <> " <redacted>"
 
--- | Fresh seed entropy. The caller stores it; this module never persists.
--- A 25th-word passphrase is deliberately not used: it would be a second secret
--- to back up.
+-- | No 25th-word passphrase: it would be a second secret to back up.
 newSeed :: B39.MnemonicStrength -> TVar ChaChaDRG -> STM ByteString
 newSeed strength g = B39.mnemonicToEntropy <$> B39.randomMnemonic strength g
 
--- | Import from a recovery phrase, validating the wordlist and the BIP-39
--- checksum. Returns the entropy; the caller persists it.
 importRecoveryKey :: ByteString -> Either String ByteString
 importRecoveryKey phrase = B39.mnemonicToEntropy <$> B39.parseMnemonic phrase
 
--- | The phrase to show under "recovery key". Anyone who knows these words
--- controls every name this seed owns, so the risk to state is theft, not loss.
 recoveryKeyPhrase :: WalletSeed -> Either String ByteString
 recoveryKeyPhrase s = B39.mnemonicPhrase <$> B39.entropyToMnemonic (wsEntropy s)
 
--- | @m\/44'\/60'\/i'\/0\/k@ is the standard BIP-44 layout, with the profile at
--- the account level and the name at the address level. Nothing here is a custom
--- path, so profile @i@'s names are the account list an ordinary Ethereum wallet
--- would show for that account.
+-- | Standard BIP-44, so the phrase reaches the same addresses in other wallets.
 nameKeyPath :: AccountIndex -> NameIndex -> [Word32]
 nameKeyPath acc nm = [B32.hardened 44, B32.hardened 60, B32.hardened acc, 0, nm]
 
--- | The path a name's key was derived at, for display. Users need it only to
--- import a single name into a third-party wallet.
 renderNameKeyPath :: AccountIndex -> NameIndex -> Text
 renderNameKeyPath acc nm = decodeLatin1 . B32.renderPath $ nameKeyPath acc nm
 
--- | Derive the key that owns one name.
 deriveNameKey :: WalletSeed -> AccountIndex -> NameIndex -> Either String WalletAccount
 deriveNameKey s acc nm = do
   m <- B39.entropyToMnemonic (wsEntropy s)
@@ -126,6 +89,5 @@ deriveNameKey s acc nm = do
   xk <- B32.derivePath master (nameKeyPath acc nm)
   pure WalletAccount {waRef = AccountRef {arSeedId = wsId s, arIndex = acc}, waKey = B32.xkKey xk}
 
--- | The Ethereum address that owns the name this key was derived for.
 accountAddress :: WalletAccount -> Address
 accountAddress = addressFromPrivateKey . waKey