core: /_wallet delete takes no confirmation word

The wallet is an API, and no other API command takes a typed confirmation:
/_delete user takes the profile password. The word was also no barrier to a
caller, which can read it from /_wallet export. Confirming belongs in the
command that will wrap this one.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rvc3HbiWBTqbAvRT45G5oX
This commit is contained in:
Alain Brenzikofer
2026-09-10 08:43:43 +00:00
co-authored by Claude Opus 5
parent e5d18bd59e
commit fe9c20370f
3 changed files with 8 additions and 14 deletions
+2 -2
View File
@@ -421,7 +421,7 @@ data ChatCommand
| APIWalletCreate
| APIWalletImport {recoveryPhrase :: Text}
| APIWalletExport
| APIWalletDelete {confirmWord :: Text}
| APIWalletDelete
| APISendCallInvitation ContactId CallType
| SendCallInvitation ContactName CallType
| APIRejectCall ContactId
@@ -751,7 +751,7 @@ allowRemoteCommand = \case
APIWalletCreate -> False
APIWalletImport _ -> False
APIWalletExport -> False
APIWalletDelete _ -> False
APIWalletDelete -> False
_ -> True
data RelayConnectionResult = RelayConnectionResult