Import portable browser profile data

[IlyaasK]

What

Extend kernel profiles import-local beyond cookies to import approved portable browser data from Chrome and Helium on macOS:

• bookmarks, selected by default
• browsing history from the configured --days window, selected by default
• localStorage, selected by default with a 64 MiB review boundary
• Chrome Web Store extension IDs, selected under the profile and organization plan limits
• a final summary and approval before cookie/localStorage values are decrypted and uploaded

Passwords and supported TOTP seeds remain a separate Managed Auth step. IndexedDB, cache, arbitrary preferences, and extension state are intentionally excluded.

Why

A useful imported profile needs more than cookies. This keeps the moment-to-magic flow simple while preserving a portable, bounded contract and making sensitive categories visible before upload. History uses actual visits in the chosen time window instead of lifetime URL counters.

How

• snapshot live Chromium SQLite and LevelDB data before reading
• translate bookmarks, recent history, and localStorage into the existing portable bundle format
• inspect only metadata before approval; export values only after selection
• enforce the API 100,000-record, 1 MiB-record, 16/64 MiB-category, and 128 MiB-bundle limits locally
• query stored-extension capacity and constrain non-interactive/default selection
• preserve the existing cookies_imported JSON field while adding per-category results

Depends on kernel/kernel PR #3244 for server-side extension persistence and entitlement enforcement.

Verification

• go test ./internal/browserimport ./cmd -count=1
• go vet ./internal/browserimport ./cmd
• go mod tidy -diff
• git diff --check
• make build
• verified the generated help shows history enabled by default
• exercised the LevelDB reader against the local Helium profile without exposing stored values

---

Note

Medium Risk
Touches sensitive local browser data (cookies, history, storage) and upload paths with new decryption/export timing; connector env injection affects auth for kernel:// launches.

Overview
kernel profiles import-local now imports bookmarks, browsing history (within --days, default on via --history), and localStorage in addition to cookies, not just cookies.

The flow gathers metadata first (counts/sizes), lets users multi-select categories and trim localStorage origins when total size exceeds 64 MiB, then shows a summary and confirmation before decrypting cookies and exporting values. Upload uses BuildProfileBundle with inventory/selection categories ordered cookies → storage → bookmarks → history; JSON output adds browser_data_imported while keeping cookies_imported.

internal/browserimport adds Chromium readers for Bookmarks, History (SQLite snapshots), and LevelDB local storage (with origin filtering and size caps), plus bundle encoding limits (records, per-file MiB, 128 MiB bundle). goleveldb is a new dependency.

internal/connector macOS handler now exports KERNEL_* env vars from launchctl before running the CLI so deep-linked imports inherit auth config.

Extension import mentioned in the PR description is not in this diff.

^{Reviewed by Cursor Bugbot for commit b2201c8. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​github.com/​syndtr/​goleveldb@​v1.0.0

View full report

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit c1ea80c. Configure here.}

[cursor]

History skip count mislabels unique URLs

Medium Severity

The bundle-fallback confirmation reports skipped history as visits using len(data.History). Exported history is grouped by URL, with per-URL VisitCount, while the earlier import summary uses HistoryCount visit rows. The skip prompt can show a much smaller number than the visits the user just approved, so they can undercount how much history will be dropped.

Additional Locations (1)

• cmd/browser_import_profile_data.go#L82-L83

 

^{Reviewed by Cursor Bugbot for commit c1ea80c. Configure here.}