kv-import: 1Password .1pux and CSV import, encrypted export (M5)

New crate kv-import (pure parsing, no store) and kv-ffi/src/import.rs:
- .1pux: accounts -> vaults -> items; Login/Password/Card/Note/Identity mapped, other categories
  as secure notes; unmapped fields appended to notes; attachments and password history reported.
- CSV: 1Password 8 export and generic headers (aliases, BOM, quotes, embedded newlines,
  extra columns into notes).
- Duplicates on (title, username, URL host): skip or add " (imported)".
- Encrypted export KVEX v1: Argon2id (>= account KDF minimum) + XChaCha20-Poly1305,
  authenticated header, padded JSON; restorable through import.
- Caps: 100 MB input, 64 MB decompressed export.data, 10k zip entries, 100k items.
- FFI: VaultCore.import_preview / import_commit / export_encrypted (unlocked only); items are
  sealed, seq-stamped and queued for sync like save_item.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

This commit is contained in:

sami

2026-10-17 00:36:21 +09:00

co-authored by

Claude Opus 5.5

parent 5eb2b622dd

commit 26664e141b

15 changed files with 2052 additions and 0 deletions

									
										Cargo.toml
									
		+1
		
												View File
												
				@@ -15,6 +15,7 @@ kv-crypto = { path = "crates/kv-crypto" }

				kv-model = { path = "crates/kv-model" }

				kv-store = { path = "crates/kv-store" }

				kv-sync = { path = "crates/kv-sync" }

				kv-import = { path = "crates/kv-import" }

				serde = { version = "1", features = ["derive"] }

				serde_json = "1"