feat(onboarding): guided setup ladder — enable walks login/mirror/import, status shows the checklist, re-enable resumes

[peyton-alt]

What

entire enable currently ends at "hooks installed" and calls it success, leaving users with local checkpoints, an empty web UI, and no signal that login + mirroring even exist as steps. This PR turns onboarding into a converging setup ladder:

• entire enable finishes with a single consent prompt — "Finish setup?" (set up everything / choose step by step / skip for now) — that walks login → mirror → history import for whatever is missing, then prints a checklist:

  Setup 1/3 complete
    ✓ Agent hooks    Claude Code
    ✗ Logged in
    ✗ Repo mirrored  needs login
  → Run `entire enable` to finish setup (2 steps left)
    run later: entire auth login
  

• entire status renders the same checklist from the same source (plus a setup object in --json), collapsing to one quiet Connected: <handle> · mirrored to <slug> line once done.

• Re-running entire enable is the resume path: rung state is recomputed from ground truth (hooks on disk, stored login, control-plane mirror list, local transcript discovery), so an interrupted setup — or a rung completed out-of-band — is picked up exactly where it left off, with no progress state to corrupt. The previous hard short-circuit at "Entire is already enabled." now re-offers only the missing rungs.

Design decisions

• One consent prompt, not a wizard: the happy path is one keypress + one browser tab. Step-by-step is opt-in for cautious users.
• Best-effort offers: a failed login or mirror create prints a notice and a retry hint; enable never fails because of a connect rung.
• Blocked ≠ missing: mirror without login renders as "needs login" instead of offering a command that would 401; run-later hints are deduped so the fix-command appears once.
• Skipping isn't a mode: the skip option reads "Skip for now — finish anytime with entire enable". Tracking continues either way; on an already-mirrored repo a skipper's sessions still reach the UI on their next push.
• Non-interactive contract (--yes / no TTY): never prompts, never creates a mirror implicitly; the checklist hints carry the follow-up commands.
• Mirror probe is bounded (5s) and degrades to "unknown" offline; the auth check is deliberately offline (stored context, not token refresh). A mirror created this pass renders as "created — sync in progress" while the server-side clone finishes, instead of a false ✗.

Relationship to #1595

The import rung ships with a minimal inline offer (same flow as entire import <agent>: checkpoint policy honored, redaction config loaded, agentimport.Run per discoverable agent) — live testing showed that a ladder which dead-ends at 3/4 with a run-later hint undercuts the whole flow. When #1595 lands, its richer enable-time offer (per-agent selection, first-run gating) replaces the internals of this rung — the rung interface doesn't change, and the remaining overlap is a small setup.go conflict for whichever merges second.

Tests & verification

• TDD throughout: unit tests for the ladder model, each rung, the renderer, the offer runner (mode/decline/best-effort/dedupe/sync-lag/import), status wiring, and the re-enable resume paths.
• mise run lint clean; mise run test:ci fully green (unit + integration + e2e canary).
• Live smoke-tested end-to-end, including: real browser OAuth through the consent prompt, a real mirror created via the flow (entirehq/tmp-onboarding-smoke on aws-us-east-2), interrupted-setup resume, out-of-band entire import reflected automatically, step-by-step declines honored, and the full one-pass ladder ending at Connected. The walkthrough caught and this PR fixes: the dead resume path on already-enabled repos, the false ✗ Repo mirrored right after a successful create, and the misleading skip-option copy.

🤖 Generated with Claude Code

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 3fbeea0. Configure here.}

[Copilot]

Pull request overview

This PR introduces a shared “setup ladder” onboarding model so entire enable and entire status can consistently compute and present setup progress (hooks, auth, mirroring, import) from ground truth, and so re-running entire enable resumes any incomplete onboarding steps.

Changes:

• Add a new onboarding model package (rungs, states, results) plus ladder helpers (Summary, Complete, Missing) with unit tests.
• Wire entire status (human + --json) to render the onboarding checklist/collapsed “Connected” line when enabled.
• Update entire enable to run the onboarding ladder after setup and when re-run on already-enabled / re-enabled repos, with offer-runner logic and tests.

Reviewed changes

Copilot reviewed 13 out of 13 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
cmd/entire/cli/status.go	Renders onboarding checklist in human output and exposes rung states via setup in --json.
cmd/entire/cli/status_test.go	Adds coverage for checklist rendering and JSON setup wiring via stubs.
cmd/entire/cli/setup.go	Runs onboarding ladder at the end of enable flows and on re-enable resume paths.
cmd/entire/cli/setup_test.go	Verifies already-enabled and re-enable paths invoke the onboarding ladder.
cmd/entire/cli/onboarding/onboarding.go	New canonical onboarding ladder model: rungs, states, checks, and summary helpers.
cmd/entire/cli/onboarding/onboarding_test.go	Unit tests for ladder ordering and summary/missing/complete semantics.
cmd/entire/cli/onboarding_rungs.go	Implements ground-truth probes for hooks/auth/mirror/import rungs (incl. bounded mirror probe).
cmd/entire/cli/onboarding_rungs_test.go	Unit tests for rung probe logic and state transitions.
cmd/entire/cli/onboarding_render.go	Shared renderer for checklist vs collapsed connected line (status + enable summary).
cmd/entire/cli/onboarding_render_test.go	Output-shape tests for mid-setup, complete collapse, and special states.
cmd/entire/cli/onboarding_offer.go	Offer-runner: single consent prompt, best-effort offers, deduped “run later” hints.
cmd/entire/cli/onboarding_offer_test.go	Tests for runner modes (all/skip/step-by-step), non-interactive behavior, and hint dedupe.
cmd/entire/cli/onboarding_offer_actions.go	Implements the concrete login and mirror-create offers used by the runner.