Add kwallet-parser and kwallet-cli

Implements a read-only parser for KWallet file format (.kwl) supporting
both legacy (Blowfish-ECB + SHA1) and modern (Blowfish-CBC +
PBKDF2-SHA512) formats. Includes a CLI tool for reading and exporting
wallet contents as JSON.

This enables server-side auto-migration of KWallet keyring files to
oo7-daemon format, similar to existing v0 format migration.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: bilelmoussaoui

.github/workflows/CI.yml

@@ -39,6 +39,14 @@ jobs:
         run: |
           cargo build --manifest-path ./cli/Cargo.toml
 
+      - name: Build kwallet-parser
+        run: |
+          cargo build --manifest-path ./kwallet-parser/Cargo.toml --features serde
+
+      - name: Build kwallet-cli
+        run: |
+          cargo build --manifest-path ./kwallet-cli/Cargo.toml
+
       - name: Build Server (native)
         run: |
           cargo build --manifest-path ./server/Cargo.toml
@@ -85,6 +93,10 @@ jobs:
         run: |
           cargo test --manifest-path ./server/Cargo.toml --no-default-features --features openssl_crypto
 
+      - name: Test kwallet-parser
+        run: |
+          cargo test --manifest-path ./kwallet-parser/Cargo.toml --features serde
+
   cargo-deny:
       runs-on: ubuntu-latest
       steps:

Cargo.lock

@@ -5,6 +5,8 @@ members = [
   "cargo-credential",
   "client",
   "cli",
+  "kwallet-cli",
+  "kwallet-parser",
   "macros",
   "pam",
   "portal",

Cargo.toml

@@ -58,6 +58,8 @@ grcov coverage-raw/combined.info \
   --ignore "**/pam/*" \
   --ignore "**/tests/*" \
   --ignore "**/examples/*" \
+  --ignore "**/kwallet-cli/*" \
+  --ignore "**/kwallet-parser/*" \
   --ignore "**/target/*" \
   --ignore "**/error.rs"
 
@@ -75,6 +77,8 @@ grcov coverage-raw/combined.info \
   --ignore "**/pam/*" \
   --ignore "**/tests/*" \
   --ignore "**/examples/*" \
+  --ignore "**/kwallet-cli/*" \
+  --ignore "**/kwallet-parser/*" \
   --ignore "**/target/*" \
   --ignore "**/error.rs"
 

coverage.sh

@@ -27,4 +27,6 @@ multiple-versions = "deny"
 wildcards = "deny"
 highlight = "all"
 skip = [
+    { name = "rand_core" },
+    { name = "winnow" },
 ]

deny.toml

@@ -0,0 +1,17 @@
+[package]
+name = "kwallet-cli"
+description = "CLI tool for reading KWallet files"
+version.workspace = true
+edition.workspace = true
+authors.workspace = true
+repository.workspace = true
+homepage.workspace = true
+license.workspace = true
+rust-version.workspace = true
+
+[dependencies]
+kwallet-parser = { version = "0.6.0-alpha", path = "../kwallet-parser", features = ["serde"] }
+clap = { workspace = true }
+serde = { workspace = true }
+serde_json = "1.0"
+rpassword = "7.3"