chore: import upstream snapshot with attribution

2026-07-13 12:49:17 +08:00
commit 7243d5823b
2201 changed files with 257291 additions and 0 deletions
@@ -0,0 +1,92 @@
+using System;
+using System.IO;
+using MCPForUnity.Editor.Security;
+using NUnit.Framework;
+
+namespace MCPForUnityTests.Editor.AssetGen
+{
+    /// <summary>
+    /// Targets the CI-safe EncryptedFileKeyStore directly against a throwaway temp dir
+    /// (never the user's real store). Proves round-trip, deletion, overwrite, multi-secret
+    /// blobs, and that the on-disk file is actually encrypted.
+    /// </summary>
+    public class SecureKeyStoreTests
+    {
+        private string _dir;
+        private EncryptedFileKeyStore _store;
+
+        [SetUp]
+        public void SetUp()
+        {
+            _dir = Path.Combine(Path.GetTempPath(), "mcp_assetgen_keys_" + Guid.NewGuid().ToString("N"));
+            _store = new EncryptedFileKeyStore(_dir);
+        }
+
+        [TearDown]
+        public void TearDown()
+        {
+            try { if (Directory.Exists(_dir)) Directory.Delete(_dir, true); } catch { /* ignore */ }
+        }
+
+        [Test]
+        public void SetThenGet_RoundTrips()
+        {
+            _store.Set("tripo", "tsk_secret_value_123");
+            Assert.IsTrue(_store.Has("tripo"));
+            Assert.IsTrue(_store.TryGet("tripo", out string v));
+            Assert.AreEqual("tsk_secret_value_123", v);
+        }
+
+        [Test]
+        public void Get_Missing_ReturnsFalse()
+        {
+            Assert.IsFalse(_store.Has("meshy"));
+            Assert.IsFalse(_store.TryGet("meshy", out string v));
+            Assert.IsNull(v);
+        }
+
+        [Test]
+        public void Delete_RemovesKey()
+        {
+            _store.Set("fal", "k-123456");
+            _store.Delete("fal");
+            Assert.IsFalse(_store.Has("fal"));
+            Assert.IsFalse(_store.TryGet("fal", out _));
+        }
+
+        [Test]
+        public void Overwrite_ReplacesValue()
+        {
+            _store.Set("tripo", "first_value");
+            _store.Set("tripo", "second_value");
+            Assert.IsTrue(_store.TryGet("tripo", out string v));
+            Assert.AreEqual("second_value", v);
+        }
+
+        [Test]
+        public void MultiSecret_JsonBlob_RoundTrips()
+        {
+            string blob = "{\"secretId\":\"AKID123\",\"secretKey\":\"SK456\"}";
+            _store.Set("tripo", blob);
+            Assert.IsTrue(_store.TryGet("tripo", out string v));
+            Assert.AreEqual(blob, v);
+        }
+
+        [Test]
+        public void Set_Empty_DeletesKey()
+        {
+            _store.Set("tripo", "abc");
+            _store.Set("tripo", "");
+            Assert.IsFalse(_store.Has("tripo"));
+        }
+
+        [Test]
+        public void Ciphertext_OnDisk_DoesNotContainPlaintext()
+        {
+            _store.Set("tripo", "PLAINTEXT_SECRET_XYZ");
+            string file = Path.Combine(_dir, "key_tripo.bin");
+            Assert.IsTrue(File.Exists(file));
+            StringAssert.DoesNotContain("PLAINTEXT_SECRET_XYZ", File.ReadAllText(file));
+        }
+    }
+}