Session Import

Every package is untrusted until validation completes. The validator checks the manifest size and schema, required files, relative paths, path traversal, symbolic links, executable content, duplicate names, declared video size, JSONL readability, sequence ordering, and recording completion state. Unsafe packages are rejected; suspicious recoverable input is reported for quarantine rather than silently indexed.

Supported Phase 4 core input is an OrganicVision session directory. The import boundary also defines provenance for Files, Mac, paired-iPhone, restored archive, external recording, simulator, and legacy sources. UI adapters for Files, share sheets, ZIP extraction, drag-and-drop, and raw-video inspection remain explicit platform work and do not fabricate GPS or sensor metadata.

Import flow: choose input, copy to a staging location, validate, verify integrity when present, assess duplicates, let the user decide how to handle any match, then insert into the catalog. Catalog insertion must be the last step.