@project-ava-supernova/core 0.2.71

package/dist/portability/bundle.js

@@ -0,0 +1,155 @@
+/**
+ * Portability bundle — gather all on-device user data into one object, and
+ * restore it. This is the payload that gets sealed (crypto.ts) into a
+ * `.ava-backup` file or carried over a transfer.
+ *
+ * A bundle is a flat map of `relativePath -> file contents`, snapshotting the
+ * known user-data files/dirs under AVA_HOME. Snapshotting raw files (rather
+ * than going through each manager's API) keeps the bundle complete and
+ * format-agnostic: it captures the memory graph + edges, every history
+ * transcript, tasks, journal, learning, health, settings — whatever exists —
+ * without coupling to a dozen store schemas.
+ *
+ * NOTE: v1 covers the JSON/text stores. Large binary creative media
+ * (`creative/<kind>/*`) is intentionally excluded here — it's handled by the
+ * large-file transfer path (WebRTC / chunked) because a single bundle of
+ * multi-hundred-MB videos isn't the right shape. Creative *metadata* is included.
+ */
+import { readFile, writeFile, mkdir, readdir, stat } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { join, dirname, relative, resolve, sep } from 'node:path';
+export const BUNDLE_VERSION = 1;
+/**
+ * Allowlist of user-content paths under AVA_HOME (files or directories,
+ * collected recursively). Only what exists is included. Operational/cloud
+ * state (billing, usage, auth tokens) is deliberately NOT here.
+ */
+/**
+ * Per-ACCOUNT data. When signed in this lives under `~/.ava/users/<id>/`, and
+ * at the AVA_HOME root otherwise. Gather reads it from the scoped dir; restore
+ * writes it back to whichever scoped dir is active NOW — so a backup taken on
+ * one account restores into the account you're signed into, not over the root.
+ */
+export const ACCOUNT_DATA_PATHS = [
+    // Memory (v3 graph + legacy v2 + markdown mirror)
+    'memory', // graph.json, brain.json
+    'memory.json',
+    'memory.md',
+    'memory-v2-backup.json',
+    // Conversations
+    'history', // {id}.json transcripts
+    // Productivity + life data
+    'tasks', // tasks/tasks.json — a DIRECTORY. It was listed as
+    // 'tasks.json' (a file that has never existed), so
+    // every backup taken so far contained zero tasks.
+    'journal', // {date}.json
+    'learning.json',
+    'health', // profile.json, plans/, daily-plans/, sessions/
+    // A whole DIRECTORY, so the training log added on
+    // 28 Jul is swept without touching this list.
+    // Creative metadata only (binaries go via large-file transfer)
+    'creative/metadata.json',
+    // Personalisation
+    'personality.json',
+    'general.json', // GeneralProfile — name, pronouns, body basics
+    'config', // personality.json / app config that is user-set
+    'projects.json',
+];
+/**
+ * MACHINE-WIDE data. Always at the AVA_HOME root, never under `users/<id>/`.
+ * Gathering these from the scoped dir (as the extension did) finds nothing;
+ * gathering the account paths from the root (as the IDE did) finds the wrong
+ * account. They need different roots, which is why they're separate lists.
+ */
+export const GLOBAL_DATA_PATHS = [
+    // The learned layer. An earlier comment claimed these sat under memory/.
+    // They don't, so they were never actually backed up.
+    'procedures.json', // procedural memory
+    'self-improvement.json', // learnings from past failures
+    'feedback.json',
+    // Captured training data. It's generated FROM the user, so it leaves WITH them.
+    'datasets',
+];
+/** Every user-data path, both roots. Kept for back-compat with existing callers. */
+export const USER_DATA_PATHS = [...ACCOUNT_DATA_PATHS, ...GLOBAL_DATA_PATHS];
+/** Does this bundle entry belong to the account dir (vs the AVA_HOME root)? */
+function isAccountPath(rel) {
+    return ACCOUNT_DATA_PATHS.some(p => rel === p || rel.startsWith(p + '/'));
+}
+async function collectInto(absPath, root, out) {
+    const st = await stat(absPath);
+    if (st.isDirectory()) {
+        for (const name of await readdir(absPath)) {
+            await collectInto(join(absPath, name), root, out);
+        }
+    }
+    else if (st.isFile()) {
+        const rel = relative(root, absPath).split(sep).join('/');
+        out[rel] = await readFile(absPath, 'utf8');
+    }
+}
+/**
+ * Snapshot every user-data file into a bundle.
+ *
+ * Account data is read from `opts.scopedDir` (the signed-in user's
+ * `~/.ava/users/<id>/`); machine-wide data is always read from `avaHome`.
+ * Omit `scopedDir` and both collapse to `avaHome` — the signed-out case.
+ *
+ * Keys stay flat and root-relative either way, so a bundle is portable between
+ * a scoped and an unscoped install.
+ */
+export async function gatherBundle(avaHome, opts) {
+    const files = {};
+    const accountRoot = opts.scopedDir ?? avaHome;
+    for (const p of ACCOUNT_DATA_PATHS) {
+        const abs = join(accountRoot, p);
+        if (existsSync(abs))
+            await collectInto(abs, accountRoot, files);
+    }
+    for (const p of GLOBAL_DATA_PATHS) {
+        const abs = join(avaHome, p);
+        if (existsSync(abs))
+            await collectInto(abs, avaHome, files);
+    }
+    return {
+        v: BUNDLE_VERSION,
+        createdAt: opts.createdAt ?? new Date().toISOString(),
+        source: opts.source,
+        files,
+    };
+}
+/**
+ * Write a bundle's files back under `avaHome`. By default it does NOT overwrite
+ * existing files (safe merge — import onto a fresh device); pass `overwrite`
+ * to replace. Path-traversal is guarded: any entry that would resolve outside
+ * `avaHome` is rejected, never written (a bundle can come from an untrusted
+ * file).
+ */
+export async function restoreBundle(avaHome, bundle, opts) {
+    if (bundle?.v !== BUNDLE_VERSION)
+        throw new Error('Unsupported bundle version');
+    let written = 0, skipped = 0;
+    const rejected = [];
+    for (const [rel, content] of Object.entries(bundle.files)) {
+        // Route each entry back to the root it came from: account data into the
+        // account you are signed into now, machine-wide data to the AVA_HOME root.
+        const root = isAccountPath(rel) ? (opts?.scopedDir ?? avaHome) : avaHome;
+        const rootResolved = resolve(root);
+        const abs = resolve(root, rel);
+        // Containment check — abs must be inside its own root. A bundle can come
+        // from an untrusted file, so traversal is rejected, never written.
+        if (abs !== rootResolved && !abs.startsWith(rootResolved + sep)) {
+            rejected.push(rel);
+            continue;
+        }
+        if (!opts?.overwrite && existsSync(abs)) {
+            skipped++;
+            continue;
+        }
+        await mkdir(dirname(abs), { recursive: true });
+        await writeFile(abs, content, 'utf8');
+        written++;
+    }
+    return { written, skipped, rejected };
+}
+//# sourceMappingURL=bundle.js.map

package/dist/portability/bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../src/portability/bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAElE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAU,CAAC;AAEzC;;;;GAIG;AACH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,kDAAkD;IAClD,QAAQ,EAAkB,yBAAyB;IACnD,aAAa;IACb,WAAW;IACX,uBAAuB;IACvB,gBAAgB;IAChB,SAAS,EAAiB,wBAAwB;IAClD,2BAA2B;IAC3B,OAAO,EAAmB,mDAAmD;IACnD,mDAAmD;IACnD,kDAAkD;IAC5E,SAAS,EAAiB,cAAc;IACxC,eAAe;IACf,QAAQ,EAAkB,gDAAgD;IAChD,kDAAkD;IAClD,8CAA8C;IACxE,+DAA+D;IAC/D,wBAAwB;IACxB,kBAAkB;IAClB,kBAAkB;IAClB,cAAc,EAAY,+CAA+C;IACzE,QAAQ,EAAkB,iDAAiD;IAC3E,eAAe;CAChB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,yEAAyE;IACzE,qDAAqD;IACrD,iBAAiB,EAAS,oBAAoB;IAC9C,uBAAuB,EAAG,+BAA+B;IACzD,eAAe;IACf,gFAAgF;IAChF,UAAU;CACX,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAsB,CAAC,GAAG,kBAAkB,EAAE,GAAG,iBAAiB,CAAC,CAAC;AAEhG,+EAA+E;AAC/E,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAC5E,CAAC;AAYD,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,IAAY,EAAE,GAA2B;IACnF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACrB,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;SAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,IAAgE;IAEhE,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC;IAE9C,KAAK,MAAM,CAAC,IAAI,kBAAkB,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7B,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO;QACL,CAAC,EAAE,cAAc;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK;KACN,CAAC;AACJ,CAAC;AAID;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,MAAkB,EAClB,IAAkD;IAElD,IAAI,MAAM,EAAE,CAAC,KAAK,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChF,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,wEAAwE;QACxE,2EAA2E;QAC3E,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACzE,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/B,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC;YAChE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACjE,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC"}

package/dist/portability/crypto.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Portability crypto — seal/open an Ava data bundle with a user passphrase.
+ *
+ * This is the cryptographic core of data sovereignty: a bundle is encrypted
+ * ON-DEVICE so that whatever carries it (a `.ava-backup` file the user stores,
+ * or a transfer relay) only ever sees ciphertext it cannot read. The passphrase
+ * never leaves the device; the key is derived locally via scrypt.
+ *
+ * Format: a JSON envelope (so it's trivially portable across surfaces and
+ * inspectable as text) wrapping AES-256-GCM ciphertext. GCM gives us
+ * authenticated encryption — a tampered or truncated file fails to open rather
+ * than silently returning garbage.
+ */
+declare const MAGIC = "AVABKP";
+declare const ENVELOPE_VERSION: 1;
+interface KdfParams {
+    algo: 'scrypt';
+    N: number;
+    r: number;
+    p: number;
+    salt: string;
+}
+export interface SealedEnvelope {
+    magic: typeof MAGIC;
+    v: typeof ENVELOPE_VERSION;
+    kdf: KdfParams;
+    /** base64 AES-GCM nonce. */
+    iv: string;
+    /** base64 ciphertext. */
+    ct: string;
+    /** base64 GCM auth tag. */
+    tag: string;
+}
+/** Encrypt a plaintext string under a passphrase. Returns the JSON envelope. */
+export declare function seal(plaintext: string, passphrase: string): string;
+/** Decrypt a JSON envelope under a passphrase. Throws on wrong passphrase,
+ *  tampering, or unrecognised format — never returns partial/garbage data. */
+export declare function open(envelopeJson: string, passphrase: string): string;
+/** True if a string looks like an Ava sealed envelope (cheap pre-check). */
+export declare function isSealedEnvelope(s: string): boolean;
+export {};
+//# sourceMappingURL=crypto.d.ts.map

package/dist/portability/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/portability/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,QAAA,MAAM,KAAK,WAAW,CAAC;AACvB,QAAA,MAAM,gBAAgB,EAAG,CAAU,CAAC;AAUpC,UAAU,SAAS;IAAG,IAAI,EAAE,QAAQ,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAErF,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,CAAC,EAAE,OAAO,gBAAgB,CAAC;IAC3B,GAAG,EAAE,SAAS,CAAC;IACf,4BAA4B;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,yBAAyB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAC;CACb;AAUD,gFAAgF;AAChF,wBAAgB,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAiBlE;AAED;8EAC8E;AAC9E,wBAAgB,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAuBrE;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAOnD"}

package/dist/portability/crypto.js

@@ -0,0 +1,89 @@
+/**
+ * Portability crypto — seal/open an Ava data bundle with a user passphrase.
+ *
+ * This is the cryptographic core of data sovereignty: a bundle is encrypted
+ * ON-DEVICE so that whatever carries it (a `.ava-backup` file the user stores,
+ * or a transfer relay) only ever sees ciphertext it cannot read. The passphrase
+ * never leaves the device; the key is derived locally via scrypt.
+ *
+ * Format: a JSON envelope (so it's trivially portable across surfaces and
+ * inspectable as text) wrapping AES-256-GCM ciphertext. GCM gives us
+ * authenticated encryption — a tampered or truncated file fails to open rather
+ * than silently returning garbage.
+ */
+import { randomBytes, scryptSync, createCipheriv, createDecipheriv } from 'node:crypto';
+const MAGIC = 'AVABKP';
+const ENVELOPE_VERSION = 1;
+const KEY_LEN = 32; // AES-256
+// scrypt work factors. N=2^15 is a sane desktop default (~tens of ms) — strong
+// against brute force while staying snappy for an interactive export/import.
+const SCRYPT_N = 1 << 15;
+const SCRYPT_R = 8;
+const SCRYPT_P = 1;
+const SCRYPT_MAXMEM = 64 * 1024 * 1024;
+function deriveKey(passphrase, salt, p) {
+    // NFKC-normalise so the same typed passphrase derives the same key across
+    // platforms/keyboards.
+    return scryptSync(passphrase.normalize('NFKC'), salt, KEY_LEN, {
+        N: p.N, r: p.r, p: p.p, maxmem: SCRYPT_MAXMEM,
+    });
+}
+/** Encrypt a plaintext string under a passphrase. Returns the JSON envelope. */
+export function seal(plaintext, passphrase) {
+    if (!passphrase)
+        throw new Error('A passphrase is required to seal a backup');
+    const salt = randomBytes(16);
+    const iv = randomBytes(12);
+    const key = deriveKey(passphrase, salt, { N: SCRYPT_N, r: SCRYPT_R, p: SCRYPT_P });
+    const cipher = createCipheriv('aes-256-gcm', key, iv);
+    const ct = Buffer.concat([cipher.update(Buffer.from(plaintext, 'utf8')), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    const env = {
+        magic: MAGIC,
+        v: ENVELOPE_VERSION,
+        kdf: { algo: 'scrypt', N: SCRYPT_N, r: SCRYPT_R, p: SCRYPT_P, salt: salt.toString('base64') },
+        iv: iv.toString('base64'),
+        ct: ct.toString('base64'),
+        tag: tag.toString('base64'),
+    };
+    return JSON.stringify(env);
+}
+/** Decrypt a JSON envelope under a passphrase. Throws on wrong passphrase,
+ *  tampering, or unrecognised format — never returns partial/garbage data. */
+export function open(envelopeJson, passphrase) {
+    let env;
+    try {
+        env = JSON.parse(envelopeJson);
+    }
+    catch {
+        throw new Error('This is not a valid Ava backup file');
+    }
+    if (env?.magic !== MAGIC || env.v !== ENVELOPE_VERSION) {
+        throw new Error('Unrecognised backup format or version');
+    }
+    if (env.kdf?.algo !== 'scrypt')
+        throw new Error('Unsupported key-derivation in backup');
+    const salt = Buffer.from(env.kdf.salt, 'base64');
+    const key = deriveKey(passphrase, salt, { N: env.kdf.N, r: env.kdf.r, p: env.kdf.p });
+    const decipher = createDecipheriv('aes-256-gcm', key, Buffer.from(env.iv, 'base64'));
+    decipher.setAuthTag(Buffer.from(env.tag, 'base64'));
+    try {
+        const pt = Buffer.concat([decipher.update(Buffer.from(env.ct, 'base64')), decipher.final()]);
+        return pt.toString('utf8');
+    }
+    catch {
+        // GCM tag mismatch — wrong passphrase or the file was altered/corrupted.
+        throw new Error('Wrong passphrase, or the backup is corrupted');
+    }
+}
+/** True if a string looks like an Ava sealed envelope (cheap pre-check). */
+export function isSealedEnvelope(s) {
+    try {
+        const env = JSON.parse(s);
+        return env?.magic === MAGIC && typeof env.ct === 'string';
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=crypto.js.map

package/dist/portability/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/portability/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAExF,MAAM,KAAK,GAAG,QAAQ,CAAC;AACvB,MAAM,gBAAgB,GAAG,CAAU,CAAC;AACpC,MAAM,OAAO,GAAG,EAAE,CAAC,CAAC,UAAU;AAE9B,+EAA+E;AAC/E,6EAA6E;AAC7E,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;AACzB,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnB,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnB,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAgBvC,SAAS,SAAS,CAAC,UAAkB,EAAE,IAAY,EAAE,CAAmC;IACtF,0EAA0E;IAC1E,uBAAuB;IACvB,OAAO,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QAC7D,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,IAAI,CAAC,SAAiB,EAAE,UAAkB;IACxD,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAChC,MAAM,GAAG,GAAmB;QAC1B,KAAK,EAAE,KAAK;QACZ,CAAC,EAAE,gBAAgB;QACnB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAC7F,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzB,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzB,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC5B,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,IAAI,CAAC,YAAoB,EAAE,UAAkB;IAC3D,IAAI,GAAmB,CAAC;IACxB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAmB,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,GAAG,EAAE,KAAK,KAAK,KAAK,IAAI,GAAG,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAExF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrF,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7F,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAmB,CAAC;QAC5C,OAAO,GAAG,EAAE,KAAK,KAAK,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/portability/data-types.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Per-type export/import — "give me just my journal", as opposed to the
+ * whole-bundle backup in bundle.ts.
+ *
+ * This lives in core because BOTH surfaces need it and they must not drift.
+ * The extension and the IDE previously owned separate copies of this logic;
+ * that is precisely how one of them ended up reading `~/.ava/tasks.json`, a
+ * path that has never existed, for months without anyone noticing.
+ *
+ * Two roots, and the distinction matters:
+ *   • account data (memory, tasks, history, …) → `scopedDir`
+ *   • machine-wide data (datasets, procedures, …) → `avaHome`
+ * See ACCOUNT_DATA_PATHS / GLOBAL_DATA_PATHS in bundle.ts.
+ *
+ * NOT handled here, deliberately:
+ *   • `settings` — lives in the host's own config store (VS Code settings vs
+ *     the IDE's config.json), so each surface exports its own.
+ *   • `creative` — binary media; needs a zip, which is a surface concern.
+ *   • secret-vault keys — they live in the OS keychain, never under ~/.ava,
+ *     and are never exported. A restore brings back everything but the keys.
+ */
+/** A file ready to be written wherever the surface's save dialog points. */
+export interface ExportedFile {
+    /** Suggested filename, e.g. `ava-journal.json`. */
+    name: string;
+    /** UTF-8 contents. */
+    content: string;
+}
+/** Data types core can export on its own. Surfaces add `settings`/`creative`. */
+export declare const CORE_DATA_TYPES: readonly ["memory", "tasks", "journal", "learning", "history", "health", "personality", "profile", "brain", "datasets", "audit"];
+export type CoreDataType = typeof CORE_DATA_TYPES[number];
+export declare function isCoreDataType(t: string): t is CoreDataType;
+export interface DataRoots {
+    /** Machine root (~/.ava). */
+    avaHome: string;
+    /** Signed-in account dir (~/.ava/users/<id>). Defaults to avaHome. */
+    scopedDir?: string;
+}
+/**
+ * Export one data type. Never throws for missing data — an empty section is a
+ * truthful answer; a hard failure for "I never customised it" is not.
+ */
+export declare function exportDataType(type: CoreDataType, roots: DataRoots): Promise<ExportedFile>;
+/** Thrown when a caller tries to import a type that is deliberately export-only. */
+export declare class NotImportableError extends Error {
+}
+/**
+ * Restore one data type. Returns how many items were written.
+ * `audit` throws NotImportableError: it is an append-only record of what ran on
+ * THIS machine, and overwriting it with another machine's history would destroy
+ * the very thing it exists to prove.
+ */
+export declare function importDataType(type: CoreDataType, content: string, roots: DataRoots): Promise<number>;
+//# sourceMappingURL=data-types.d.ts.map

package/dist/portability/data-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-types.d.ts","sourceRoot":"","sources":["../../src/portability/data-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC3B,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,iFAAiF;AACjF,eAAO,MAAM,eAAe,kIAGlB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AAE1D,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,YAAY,CAE3D;AAyCD,MAAM,WAAW,SAAS;IACxB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAqFhG;AAED,oFAAoF;AACpF,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAEhD;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,MAAM,CAAC,CAsFjB"}

package/dist/portability/data-types.js

@@ -0,0 +1,281 @@
+/**
+ * Per-type export/import — "give me just my journal", as opposed to the
+ * whole-bundle backup in bundle.ts.
+ *
+ * This lives in core because BOTH surfaces need it and they must not drift.
+ * The extension and the IDE previously owned separate copies of this logic;
+ * that is precisely how one of them ended up reading `~/.ava/tasks.json`, a
+ * path that has never existed, for months without anyone noticing.
+ *
+ * Two roots, and the distinction matters:
+ *   • account data (memory, tasks, history, …) → `scopedDir`
+ *   • machine-wide data (datasets, procedures, …) → `avaHome`
+ * See ACCOUNT_DATA_PATHS / GLOBAL_DATA_PATHS in bundle.ts.
+ *
+ * NOT handled here, deliberately:
+ *   • `settings` — lives in the host's own config store (VS Code settings vs
+ *     the IDE's config.json), so each surface exports its own.
+ *   • `creative` — binary media; needs a zip, which is a surface concern.
+ *   • secret-vault keys — they live in the OS keychain, never under ~/.ava,
+ *     and are never exported. A restore brings back everything but the keys.
+ */
+import { readFile, readdir, mkdir, writeFile } from 'node:fs/promises';
+import { join, dirname, resolve, sep } from 'node:path';
+/** Data types core can export on its own. Surfaces add `settings`/`creative`. */
+export const CORE_DATA_TYPES = [
+    'memory', 'tasks', 'journal', 'learning', 'history',
+    'health', 'personality', 'profile', 'brain', 'datasets', 'audit',
+];
+export function isCoreDataType(t) {
+    return CORE_DATA_TYPES.includes(t);
+}
+/** Read a JSON file, or a fallback when it doesn't exist yet. */
+async function readJsonOr(path, fallback) {
+    try {
+        return await readFile(path, 'utf8');
+    }
+    catch {
+        // A missing file is the ordinary "I never used that feature" case. It is an
+        // empty section, not a failure — throwing here used to kill the whole export.
+        return JSON.stringify(fallback, null, 2);
+    }
+}
+/** Recursively collect .json/.jsonl under `dir`, keyed relative to `root`. */
+async function collectDir(dir, root) {
+    const out = {};
+    const walk = async (d) => {
+        let entries;
+        try {
+            entries = await readdir(d, { withFileTypes: true });
+        }
+        catch {
+            return; // directory absent — nothing to collect
+        }
+        for (const e of entries) {
+            const abs = join(d, e.name);
+            if (e.isDirectory()) {
+                await walk(abs);
+                continue;
+            }
+            // .jsonl too — dataset capture writes newline-delimited JSON, and a
+            // .json-only filter collected exactly none of it.
+            if (e.isFile() && (e.name.endsWith('.json') || e.name.endsWith('.jsonl'))) {
+                out[relPosix(root, abs)] = await readFile(abs, 'utf8');
+            }
+        }
+    };
+    await walk(dir);
+    return out;
+}
+function relPosix(root, abs) {
+    return abs.slice(root.length).replace(/^[\\/]+/, '').split(sep).join('/');
+}
+/**
+ * Export one data type. Never throws for missing data — an empty section is a
+ * truthful answer; a hard failure for "I never customised it" is not.
+ */
+export async function exportDataType(type, roots) {
+    const { avaHome } = roots;
+    const scoped = roots.scopedDir ?? avaHome;
+    switch (type) {
+        case 'memory': {
+            // BOTH the v2 flat store (memory.json) AND the v3 graph (memory/), which
+            // is where memories actually live now. Exporting memory.json alone handed
+            // back a near-empty file while the real memories sat in the graph.
+            const files = {};
+            try {
+                files['memory.json'] = await readFile(join(scoped, 'memory.json'), 'utf8');
+            }
+            catch { /* none */ }
+            try {
+                files['memory.md'] = await readFile(join(scoped, 'memory.md'), 'utf8');
+            }
+            catch { /* none */ }
+            Object.assign(files, await collectDir(join(scoped, 'memory'), scoped));
+            return { name: 'ava-memory.json', content: JSON.stringify({ memory: files }, null, 2) };
+        }
+        case 'tasks':
+            // tasks/tasks.json — a DIRECTORY. Read as `tasks.json` it silently
+            // exported nothing at all.
+            return {
+                name: 'ava-tasks.json',
+                content: await readJsonOr(join(scoped, 'tasks', 'tasks.json'), { entries: [] }),
+            };
+        case 'journal': {
+            const dir = join(scoped, 'journal');
+            const files = await collectDir(dir, dir);
+            const entries = [];
+            for (const raw of Object.values(files)) {
+                try {
+                    entries.push(JSON.parse(raw));
+                }
+                catch { /* skip unparseable day */ }
+            }
+            return { name: 'ava-journal.json', content: JSON.stringify({ journal: entries }, null, 2) };
+        }
+        case 'learning':
+            return {
+                name: 'ava-learning.json',
+                content: await readJsonOr(join(scoped, 'learning.json'), { curriculums: [] }),
+            };
+        case 'history': {
+            const dir = join(scoped, 'history');
+            const files = await collectDir(dir, dir);
+            const conversations = [];
+            for (const raw of Object.values(files)) {
+                try {
+                    conversations.push(JSON.parse(raw));
+                }
+                catch { /* skip */ }
+            }
+            return { name: 'ava-history.json', content: JSON.stringify({ conversations }, null, 2) };
+        }
+        case 'health': {
+            const dir = join(scoped, 'health');
+            return { name: 'ava-health.json', content: JSON.stringify({ health: await collectDir(dir, scoped) }, null, 2) };
+        }
+        case 'personality':
+            return {
+                name: 'ava-personality.json',
+                content: await readJsonOr(join(scoped, 'personality.json'), { personality: null }),
+            };
+        case 'profile':
+            // GeneralProfile — account-scoped (general.json), not the AVA_HOME root.
+            return {
+                name: 'ava-profile.json',
+                content: await readJsonOr(join(scoped, 'general.json'), { profile: null }),
+            };
+        case 'brain': {
+            // The learned layer lives at the AVA_HOME ROOT, not the scoped dir.
+            const read = async (f) => {
+                try {
+                    return JSON.parse(await readFile(join(avaHome, f), 'utf8'));
+                }
+                catch {
+                    return null;
+                }
+            };
+            return {
+                name: 'ava-brain.json',
+                content: JSON.stringify({
+                    procedures: await read('procedures.json'),
+                    selfImprovement: await read('self-improvement.json'),
+                    feedback: await read('feedback.json'),
+                }, null, 2),
+            };
+        }
+        case 'datasets': {
+            const files = await collectDir(join(avaHome, 'datasets'), avaHome);
+            return { name: 'ava-datasets.json', content: JSON.stringify({ datasets: files }, null, 2) };
+        }
+        case 'audit':
+            // Export-only — see importDataType.
+            return {
+                name: 'ava-audit-log.jsonl',
+                content: await readFile(join(avaHome, 'audit-log.jsonl'), 'utf8').catch(() => ''),
+            };
+    }
+}
+/** Thrown when a caller tries to import a type that is deliberately export-only. */
+export class NotImportableError extends Error {
+}
+/**
+ * Restore one data type. Returns how many items were written.
+ * `audit` throws NotImportableError: it is an append-only record of what ran on
+ * THIS machine, and overwriting it with another machine's history would destroy
+ * the very thing it exists to prove.
+ */
+export async function importDataType(type, content, roots) {
+    const { avaHome } = roots;
+    const scoped = roots.scopedDir ?? avaHome;
+    const writeOne = async (abs, body) => {
+        await mkdir(dirname(abs), { recursive: true });
+        await writeFile(abs, body, 'utf8');
+        return 1;
+    };
+    switch (type) {
+        case 'audit':
+            throw new NotImportableError("The activity log is export-only — it cannot be restored over this machine's own record.");
+        case 'tasks':
+            // Into the tasks/ DIRECTORY the TaskManager actually reads.
+            return writeOne(join(scoped, 'tasks', 'tasks.json'), content);
+        case 'learning':
+            return writeOne(join(scoped, 'learning.json'), content);
+        case 'personality':
+            return writeOne(join(scoped, 'personality.json'), content);
+        case 'profile':
+            return writeOne(join(scoped, 'general.json'), content);
+        case 'memory': {
+            const parsed = JSON.parse(content);
+            let n = 0;
+            for (const [rel, raw] of Object.entries(parsed.memory ?? {})) {
+                if (!contained(scoped, rel))
+                    continue;
+                n += await writeOne(join(scoped, rel), raw);
+            }
+            return n;
+        }
+        case 'health': {
+            const parsed = JSON.parse(content);
+            let n = 0;
+            for (const [rel, raw] of Object.entries(parsed.health ?? {})) {
+                if (!contained(scoped, rel))
+                    continue;
+                n += await writeOne(join(scoped, rel), raw);
+            }
+            return n;
+        }
+        case 'journal': {
+            const parsed = JSON.parse(content);
+            let n = 0;
+            for (const entry of parsed.journal ?? []) {
+                if (!entry?.date)
+                    continue;
+                n += await writeOne(join(scoped, 'journal', `${entry.date}.json`), JSON.stringify(entry, null, 2));
+            }
+            return n;
+        }
+        case 'history': {
+            const parsed = JSON.parse(content);
+            let n = 0;
+            for (const conv of parsed.conversations ?? []) {
+                if (!conv?.id)
+                    continue;
+                n += await writeOne(join(scoped, 'history', `${conv.id}.json`), JSON.stringify(conv, null, 2));
+            }
+            return n;
+        }
+        case 'brain': {
+            const parsed = JSON.parse(content);
+            const parts = [
+                ['procedures.json', parsed.procedures],
+                ['self-improvement.json', parsed.selfImprovement],
+                ['feedback.json', parsed.feedback],
+            ];
+            let n = 0;
+            for (const [file, value] of parts) {
+                if (value == null)
+                    continue;
+                n += await writeOne(join(avaHome, file), JSON.stringify(value, null, 2));
+            }
+            return n;
+        }
+        case 'datasets': {
+            const parsed = JSON.parse(content);
+            let n = 0;
+            for (const [rel, raw] of Object.entries(parsed.datasets ?? {})) {
+                if (!contained(avaHome, rel))
+                    continue;
+                n += await writeOne(join(avaHome, rel), raw);
+            }
+            return n;
+        }
+    }
+}
+/** Guard: never let a crafted export escape its root. */
+function contained(root, rel) {
+    const abs = resolve(root, rel);
+    const base = resolve(root);
+    return abs === base || abs.startsWith(base + sep);
+}
+//# sourceMappingURL=data-types.js.map