fix(secrets-cli): contain file-source key IO/access errors in doctor + bundle-import flows

2026-07-19 10:38:16 -04:00
parent 6dbb372adf
commit 980b4a37f6
4 changed files with 103 additions and 4 deletions
@@ -232,6 +232,52 @@ public sealed class BundleFlowTests : IDisposable
        Assert.Null(await target.Store.GetAsync(new SecretName("svc/cross"), CancellationToken.None)); // untouched
    }

+    [Fact]
+    public async Task Import_source_key_file_permission_denied_renders_friendly_error_without_importing()
+    {
+        Skip.IfNot(!OperatingSystem.IsWindows(), "Unix permission bits are exercised via UnixFileMode.");
+
+        LiteralMasterKeyProvider kekA = NewKek(out _);
+        LiteralMasterKeyProvider kekB = NewKek(out _);
+
+        SecretsSession source = await NewSessionAsync("a.db", kekA);
+        await SealAsync(source, "svc/cross", "cross-value");
+
+        var exportConsole = NewConsole();
+        exportConsole.Input.PushTextWithEnter(BundlePath);
+        exportConsole.Input.PushTextWithEnter("n");
+        await new BundleExportFlow().RunAsync(exportConsole, source, CancellationToken.None);
+
+        SecretsSession target = await NewSessionAsync("b.db", kekB);
+
+        // A source-key file that exists (so FileMasterKeyProvider's File.Exists gate passes) but has no
+        // read permission: File.ReadAllBytes inside ResolveKeyBytes throws UnauthorizedAccessException,
+        // which FileMasterKeyProvider does not itself wrap into MasterKeyUnavailableException.
+        string keyFilePath = Path.Combine(_dir, $"nokey-{Guid.NewGuid():N}");
+        await File.WriteAllBytesAsync(keyFilePath, new byte[32], CancellationToken.None);
+        File.SetUnixFileMode(keyFilePath, UnixFileMode.None);
+        try
+        {
+            TestConsole console = NewConsole();
+            console.Input.PushTextWithEnter(BundlePath);         // path
+            console.Input.PushKey(ConsoleKey.DownArrow);         // source-key selection: skip "Paste base64 key"
+            console.Input.PushKey(ConsoleKey.DownArrow);         // skip "Environment variable"
+            console.Input.PushKey(ConsoleKey.Enter);             // choose "Key file path"
+            console.Input.PushTextWithEnter(keyFilePath);
+
+            await new BundleImportFlow().RunAsync(console, target, CancellationToken.None);
+
+            Assert.Contains("Source KEK unavailable", console.Output, StringComparison.Ordinal); // contained
+            Assert.DoesNotContain("Imported", console.Output, StringComparison.Ordinal); // no report rendered
+            Assert.Null(await target.Store.GetAsync(new SecretName("svc/cross"), CancellationToken.None)); // untouched
+        }
+        finally
+        {
+            File.SetUnixFileMode(keyFilePath, UnixFileMode.UserRead | UnixFileMode.UserWrite);
+            File.Delete(keyFilePath);
+        }
+    }
+
    [Fact]
    public async Task Import_rejects_unknown_format_version_before_prompting()
    {