Create task task-025

backlog/tasks/task-025 - Google-Export-Local-First-Data-Sovereignty.md

@@ -0,0 +1,38 @@
+---
+id: task-025
+title: 'Google Export: Local-First Data Sovereignty'
+status: To Do
+assignee: []
+created_date: '2025-12-04 20:25'
+labels:
+  - feature
+  - google
+  - encryption
+  - privacy
+dependencies: []
+priority: medium
+---
+
+## Description
+
+<!-- SECTION:DESCRIPTION:BEGIN -->
+Import Google Workspace data (Gmail, Drive, Photos, Calendar) locally, encrypt with WebCrypto, store in IndexedDB. User controls what gets shared to board or backed up to R2.
+
+Worktree: /home/jeffe/Github/canvas-website-branch-worktrees/google-export
+Branch: feature/google-export
+
+Architecture docs in: docs/GOOGLE_DATA_SOVEREIGNTY.md
+<!-- SECTION:DESCRIPTION:END -->
+
+## Acceptance Criteria
+<!-- AC:BEGIN -->
+- [ ] #1 OAuth 2.0 with PKCE flow for Google APIs
+- [ ] #2 IndexedDB schema for encrypted data storage
+- [ ] #3 WebCrypto key derivation from master key
+- [ ] #4 Gmail import with pagination and progress
+- [ ] #5 Drive document import
+- [ ] #6 Photos thumbnail import
+- [ ] #7 Calendar event import
+- [ ] #8 Share to board functionality
+- [ ] #9 R2 encrypted backup/restore
+<!-- AC:END -->