skarbiec import

Invocation#

skarbiec import <export-file> [--format auto|canonical|1password|bitwarden|browser-csv] [--conflict keep|replace|error]
skarbiec import --help

Purpose#

Seed the selected vault from a real password-manager, browser, or canonical Skarbiec export.

Required inputs and options#

• Accepts 1Password 1PUX version 3, export.data JSON or CSV; unencrypted Bitwarden JSON or CSV; browser password CSV; and canonical rows with id, payload, optional recipients/tags. Format defaults to auto and conflict policy to keep. Input and uncompressed archive data are limited to 256 MiB, with 100000 resulting items per import.

Output and state effects#

• Validates and encrypts the complete accepted batch before one generation-checked vault save. Prints the actual vault path, detected format, total/imported/updated/unchanged/conflicts counts and per-item ids, titles, statuses and warnings; never credential values. Repeated source identities reuse saved ids, including after a local rename. Existing source-item recipients and tags survive replacement. Custom data remains encrypted under extensions.import.source; 1PUX files become downloadable bundle items.

Refusals#

• Refuses encrypted Bitwarden JSON, unsupported ZIP/version/header formats, duplicate source identities, malformed canonical rows, unknown recipients, unregistered namespaced tags and all lifecycle-managed or non-owner-controlled overwrites. --conflict error refuses a changed existing item before any write; keep preserves it and reports kept_existing; replace explicitly writes a new revision. An encryption or concurrent-generation failure commits no imported items.