From 51f6a4893dab9c34d7c627eba03887f6e2a71096 Mon Sep 17 00:00:00 2001
From: moonD4rk <moond4rk13@gmail.com>
Date: Sun, 24 May 2026 20:27:58 +0800
Subject: [PATCH] fix(keys): validate keysPath non-empty in loadAndApplyKeys

Programmatic callers (or cobra MarkFlagRequired bypass) would
otherwise trigger os.Open("") with a confusing error message.
Matches existing profilePath / browserName validation style.
---
 cmd/hack-browser-data/keys.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/cmd/hack-browser-data/keys.go b/cmd/hack-browser-data/keys.go
index 519b1d4..e397ebf 100644
--- a/cmd/hack-browser-data/keys.go
+++ b/cmd/hack-browser-data/keys.go
@@ -122,6 +122,9 @@ func loadAndApplyKeys(browserName, profilePath, keysPath string) ([]browser.Brow
 	if name == "" || name == "all" {
 		return nil, fmt.Errorf(`requires -b <browser> (single, not "all")`)
 	}
+	if keysPath == "" {
+		return nil, fmt.Errorf("requires -i <keys-file> (or - for stdin)")
+	}
 
 	var r io.Reader = os.Stdin
 	if keysPath != "-" {