Function generateAndSaveWallet

src/auth.ts:126–207

* Generate a new wallet with BIP-39 mnemonic, save to disk. * New users get both EVM and Solana keys derived from the same mnemonic. * CRITICAL: Verifies the file was actually written after generation.

()

 * CRITICAL: Verifies the file was actually written after generation.
 */
async function generateAndSaveWallet(): Promise<{
  key: string;
  address: string;
  mnemonic: string;
  solanaPrivateKeyBytes: Uint8Array;
}> {
  // Safety: if a mnemonic file already exists, a Solana wallet was derived from it.
  // Generating a new wallet would overwrite the mnemonic and lose Solana funds.
  const existingMnemonic = await loadMnemonic();
  if (existingMnemonic) {
    throw new Error(
      `Mnemonic file exists at ${MNEMONIC_FILE} but wallet.key is missing.\n` +
        `Refusing to generate a new wallet to protect existing funds.\n\n` +
        `Restore your EVM private key using one of:\n` +
        `  Windows:   set BLOCKRUN_WALLET_KEY=0x<your_key>\n` +
        `  Mac/Linux: export BLOCKRUN_WALLET_KEY=0x<your_key>\n\n` +
        `Then run: npx @blockrun/clawrouter`,
    );
  }

  const mnemonic = generateWalletMnemonic();
  const derived = deriveAllKeys(mnemonic);

  // Create directory
  await mkdir(WALLET_DIR, { recursive: true });

  // Write wallet key file (EVM private key)
  await writeFile(WALLET_FILE, derived.evmPrivateKey + "\n", { mode: 0o600 });

  // Write mnemonic file
  await writeFile(MNEMONIC_FILE, mnemonic + "\n", { mode: 0o600 });

  // CRITICAL: Verify the file was actually written
  try {
    const verification = (await readTextFile(WALLET_FILE)).trim();
    if (verification !== derived.evmPrivateKey) {
      throw new Error("Wallet file verification failed - content mismatch");
    }
    console.log(`[ClawRouter] Wallet saved and verified at ${WALLET_FILE}`);
  } catch (err) {
    throw new Error(
      `Failed to verify wallet file after creation: ${err instanceof Error ? err.message : String(err)}`,
      { cause: err },
    );
  }

  // Derive Solana address for display
  let solanaAddress: string | undefined;
  try {
    solanaAddress = await getSolanaAddress(derived.solanaPrivateKeyBytes);
  } catch {
    // Non-fatal — Solana address display is best-effort
  }

  // Print prominent backup reminder after generating a new wallet
  console.log(`[ClawRouter]`);
  console.log(`[ClawRouter] ════════════════════════════════════════════════`);
  console.log(`[ClawRouter]   NEW WALLET GENERATED — BACK UP YOUR KEY NOW`);