"""One-time ops bootstrap: generate and encrypt the server's master xprv.

Usage:
    python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
    # put that value in XPRV_ENCRYPTION_KEY (.env), then:
    python scripts/generate_master_key.py
"""

from app.config import settings
from app.wallet.hd import generate_master_key

if __name__ == "__main__":
    if not settings.xprv_encryption_key:
        raise SystemExit("XPRV_ENCRYPTION_KEY is not set")
    generate_master_key()
    print(f"Master key written (encrypted) to {settings.master_key_path}")