Import portable browser profile data

[IlyaasK]

What

Extend kernel profiles import-local beyond cookies to import approved portable browser data from Chrome and Helium on macOS:

• bookmarks, selected by default
• browsing history from the configured --days window, selected by default
• localStorage, selected by default with a 64 MiB review boundary
• Chrome Web Store extension IDs, selected under the profile and organization plan limits
• a final summary and approval before cookie/localStorage values are decrypted and uploaded

Passwords and supported TOTP seeds remain a separate Managed Auth step. IndexedDB, cache, arbitrary preferences, and extension state are intentionally excluded.

Why

A useful imported profile needs more than cookies. This keeps the moment-to-magic flow simple while preserving a portable, bounded contract and making sensitive categories visible before upload. History uses actual visits in the chosen time window instead of lifetime URL counters.

How

• snapshot live Chromium SQLite and LevelDB data before reading
• translate bookmarks, recent history, and localStorage into the existing portable bundle format
• inspect only metadata before approval; export values only after selection
• enforce the API 100,000-record, 1 MiB-record, 16/64 MiB-category, and 128 MiB-bundle limits locally
• query stored-extension capacity and constrain non-interactive/default selection
• preserve the existing cookies_imported JSON field while adding per-category results

Depends on kernel/kernel PR #3244 for server-side extension persistence and entitlement enforcement.

Verification

• go test ./internal/browserimport ./cmd -count=1
• go vet ./internal/browserimport ./cmd
• go mod tidy -diff
• git diff --check
• make build
• verified the generated help shows history enabled by default
• exercised the LevelDB reader against the local Helium profile without exposing stored values

---

Note

High Risk
Reads and uploads additional sensitive browser data (history, localStorage) from live Chromium stores, and tightens the upload size contract. Bugs here can leak extra personal data or fail imports.

Overview
kernel profiles import-local now imports bookmarks, history (from --days, default on), and localStorage alongside cookies, with interactive category/site selection and a pre-upload confirmation.

The portable bundle is rebuilt as BuildProfileBundle (replacing cookie-only packing). Compressed upload limit is 64 MiB. Oversized imports drop largest storage origins first, then history, and ask the user to continue; cookies/bookmarks stay required.

Chromium readers snapshot History SQLite and Local Storage LevelDB, export only http(s) data, and enforce record/size caps. JSON output adds browser_data_imported. Connector kernel:// launches inherit KERNEL_* env from launchctl and default history on.

^{Reviewed by Cursor Bugbot for commit e3e3948. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​github.com/​syndtr/​goleveldb@​v1.0.0

View full report

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit e3e3948. Configure here.}

[cursor]

Storage size gate uses raw bytes

Medium Severity

The 64 MiB local storage review uses raw LevelDB key/value (or META) sizes, while export enforces the same cap on JSONL-encoded records. Selections that pass the picker, including the automatic “all sites” path, can still fail later with a 64 MiB limit error, blocking the rest of the import.

Additional Locations (2)

• internal/browserimport/chromium.go#L420-L422
• internal/browserimport/chromium.go#L489-L500

 

^{Reviewed by Cursor Bugbot for commit e3e3948. Configure here.}