Add Ava systemd deployment with dedicated user and workspace

- Add Omni.Agent.Paths module for configurable AVA_DATA_ROOT
- Create ava Linux user in Users.nix with SSH key
- Add systemd service in Beryllium/Ava.nix with graceful shutdown
- Update Skills.hs and Outreach.hs to use configurable paths
- Add startup logging of resolved paths in Telegram.hs
- Create migration script for moving data from _/var/ava to /home/ava
- Add deployment documentation in Beryllium/AVA.md

In dev: AVA_DATA_ROOT unset uses _/var/ava/
In prod: AVA_DATA_ROOT=/home/ava via systemd

Amp-Thread-ID: https://ampcode.com/threads/T-019b2d7e-bd88-7355-8133-275c65157aaf
Co-authored-by: Amp <amp@ampcode.com>

1 files changed, 9 insertions, 7 deletions

diff --git a/Omni/Agent/Tools/Outreach.hs b/Omni/Agent/Tools/Outreach.hs
index d601b36..e576cbd 100644
--- a/Omni/Agent/Tools/Outreach.hs
+++ b/Omni/Agent/Tools/Outreach.hs
@@ -60,8 +60,10 @@ import Data.Time (UTCTime, getCurrentTime)
 import qualified Data.UUID as UUID
 import qualified Data.UUID.V4 as UUID
 import qualified Omni.Agent.Engine as Engine
+import qualified Omni.Agent.Paths as Paths
 import qualified Omni.Test as Test
 import qualified System.Directory as Directory
+import System.FilePath ((</>))
 
 main :: IO ()
 main = Test.run test
@@ -114,19 +116,19 @@ test =
     ]
 
 outreachDir :: FilePath
-outreachDir = "_/var/ava/outreach"
+outreachDir = Paths.outreachDir
 
 pendingDir :: FilePath
-pendingDir = outreachDir <> "/pending"
+pendingDir = outreachDir </> "pending"
 
 approvedDir :: FilePath
-approvedDir = outreachDir <> "/approved"
+approvedDir = outreachDir </> "approved"
 
 rejectedDir :: FilePath
-rejectedDir = outreachDir <> "/rejected"
+rejectedDir = outreachDir </> "rejected"
 
 sentDir :: FilePath
-sentDir = outreachDir <> "/sent"
+sentDir = outreachDir </> "sent"
 
 data OutreachType = Email | Message
   deriving (Show, Eq, Generic)
@@ -210,7 +212,7 @@ ensureDirs = do
   Directory.createDirectoryIfMissing True sentDir
 
 draftPath :: FilePath -> Text -> FilePath
-draftPath dir draftId' = dir <> "/" <> Text.unpack draftId' <> ".json"
+draftPath dir draftId' = dir </> (Text.unpack draftId' <> ".json")
 
 saveDraft :: OutreachDraft -> IO ()
 saveDraft draft = do
@@ -254,7 +256,7 @@ listDrafts status = do
   let jsonFiles = filter (".json" `isSuffixOf`) files
   drafts <-
     forM jsonFiles <| \f -> do
-      content <- TextIO.readFile (dir <> "/" <> f)
+      content <- TextIO.readFile (dir </> f)
       pure (Aeson.decode (BL.fromStrict (TE.encodeUtf8 content)))
   pure (catMaybes drafts)