Alain BrenzikoferandClaude Opus 5 619434626c core: store the seed as bytes, and bind one account per profile ...

On Postgres a bare ByteString binds as a text literal, so entropy with a
backslash or a high bit was rejected and entropy with a zero byte was
truncated: the BIP-39 test vector stored as an empty seed. Blob columns go
through DB.Binary here, as every other one does.

/_wallet bind with no account moved a profile that already had one to a
fresh account, abandoning the old one without saying so. It refuses now;
moving is asked for by number.

The counter could walk past 2^31, where BIP-32 hardening folds every index
back onto a low one, so a profile handed 2147483648 derived account 0's
keys and printed account 0's path. Binding refuses once the counter is
there, and a very long index is now rejected on its digit count rather than
after reading it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rvc3HbiWBTqbAvRT45G5oX

2026-09-10 14:28:06 +00:00

..

Simplex

core: store the seed as bytes, and bind one account per profile

2026-09-10 14:28:06 +00:00

.hspec

core: support deleting the last profile (always create user record in agent when user is created) (#3654)

2024-01-17 15:20:13 +00:00