core: wallet review fixes, and show the derived addresses

mirror of https://github.com/simplex-chat/simplex-chat.git synced 2026-10-08 20:28:20 +00:00

Concurrency: the account index is incremented in SQL and read back in the
same transaction, so two profiles cannot be handed the same key. Importing
a phrase is one transaction and single_seed is UNIQUE, so a phrase cannot
be discarded in favour of a key created meanwhile, and a device cannot end
up with two keys.

Wallet commands are no longer forwarded to a remote host: the recovery
phrase must not leave the device, and the raw command is logged there.

/wallet delete removes the key, confirmed by the last word of the phrase,
so creating a key before importing your own is no longer a dead end.

/wallet now shows every profile on the key with the first two name
addresses each, to check derivation against other wallets. Hidden profiles
are left out, as they are by /users. A bad phrase no longer says which word
was wrong. /wallet export uses the profile's own key.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rvc3HbiWBTqbAvRT45G5oX

This commit is contained in:

Alain Brenzikofer

2026-09-09 09:05:47 +00:00

co-authored by

Claude Opus 5

parent 257cdc02c8

commit ee11b368b6

13 changed files with 232 additions and 152 deletions

									
										bots/src/API/Docs/Commands.hs
									
		+1
		
												View File
												
				@@ -452,6 +452,7 @@ undocumentedCommands =

				    "APIVerifyToken",

				    "APIWallet",

				    "APIWalletCreate",

				    "APIWalletDelete",

				    "APIWalletExport",

				    "APIWalletImport",

				    "CheckChatRunning",