kv-import: 1Password .1pux and CSV import, encrypted export (M5)

New crate kv-import (pure parsing, no store) and kv-ffi/src/import.rs:
- .1pux: accounts -> vaults -> items; Login/Password/Card/Note/Identity mapped, other categories
  as secure notes; unmapped fields appended to notes; attachments and password history reported.
- CSV: 1Password 8 export and generic headers (aliases, BOM, quotes, embedded newlines,
  extra columns into notes).
- Duplicates on (title, username, URL host): skip or add " (imported)".
- Encrypted export KVEX v1: Argon2id (>= account KDF minimum) + XChaCha20-Poly1305,
  authenticated header, padded JSON; restorable through import.
- Caps: 100 MB input, 64 MB decompressed export.data, 10k zip entries, 100k items.
- FFI: VaultCore.import_preview / import_commit / export_encrypted (unlocked only); items are
  sealed, seq-stamped and queued for sync like save_item.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

This commit is contained in:

sami

2026-10-17 00:36:21 +09:00

co-authored by

Claude Opus 5.5

parent 5eb2b622dd

commit 26664e141b

15 changed files with 2052 additions and 0 deletions

									
										crates/kv-import/tests/fixtures/generic-bom-crlf.csv
									
Vendored

		+4
		
												View File
												
				@@ -0,0 +1,4 @@

				NAME,Website,Login,PASSWORD,TOTP,Note,Security Question

				Mail,mail.example.com,alex,mail-synthetic-pw,JBSWY3DPEHPK3PXP,"multi

				line",Synthetic Fluffy

				,https://bank.example.com/login,alex,bank-synthetic-pw,,,

									NAME
								
									Website
								
									Login
								
									PASSWORD
								
									TOTP
								
									Note
								
									Security Question
								
									Mail
								
									mail.example.com
								
									alex
								
									mail-synthetic-pw
								
									JBSWY3DPEHPK3PXP
								
									multi
line
								
									Synthetic Fluffy
								
									https://bank.example.com/login
								
									alex
								
									bank-synthetic-pw