@pellux/goodvibes-tui 0.19.27 → 0.19.28

package/CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [0.19.28] — 2026-04-24
+
+### Changes
+- 89221c1 fix: mark onboarding checked when opened
+
 ## [0.19.27] — 2026-04-24
 
 ### Changes

package/README.md

@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-0.19.27-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-0.19.28-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 A terminal-native AI coding, operations, automation, knowledge, and integration console with a typed runtime, omnichannel surfaces, structured memory/knowledge, and a raw ANSI renderer.
 

package/docs/foundation-artifacts/operator-contract.json

@@ -3,7 +3,7 @@
   "product": {
     "id": "goodvibes",
     "surface": "operator",
-    "version": "0.25.1"
+    "version": "0.25.2"
   },
   "auth": {
     "modes": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "0.19.27",
+  "version": "0.19.28",
   "description": "Terminal-native GoodVibes product for coding, operations, automation, knowledge, channels, and daemon-backed control-plane workflows.",
   "type": "module",
   "main": "src/main.ts",
@@ -91,7 +91,7 @@
     "@anthropic-ai/vertex-sdk": "^0.16.0",
     "@ast-grep/napi": "^0.42.0",
     "@aws/bedrock-token-generator": "^1.1.0",
-    "@pellux/goodvibes-sdk": "^0.25.1",
+    "@pellux/goodvibes-sdk": "^0.25.2",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
     "graphql": "^16.13.2",

package/src/cli/bundle-command.ts

@@ -5,6 +5,7 @@ import { createShellPathService } from '@pellux/goodvibes-sdk/platform/runtime/s
 import { listProviderRuntimeSnapshots } from '@pellux/goodvibes-sdk/platform/providers/runtime-snapshot';
 import { createRuntimeServices } from '../runtime/services.ts';
 import { createRuntimeStore } from '../runtime/store/index.ts';
+import { getOnboardingCheckMarkerPath } from '../runtime/onboarding/index.ts';
 import { CONFIG_SCHEMA } from '../config/index.ts';
 import { SecretsManager } from '../config/secrets.ts';
 import type { ConfigKey } from '../config/index.ts';
@@ -178,8 +179,8 @@ export async function handleBundleCommand(runtime: CliCommandRuntime): Promise<C
       },
       secrets: await secrets.inspect(),
       onboarding: {
-        projectMarker: existsSync(shellPaths.resolveProjectPath('tui', 'onboarding.json')),
-        userMarker: existsSync(shellPaths.resolveUserPath('tui', 'onboarding.json')),
+        userMarker: existsSync(getOnboardingCheckMarkerPath(shellPaths, 'user')),
+        projectMarker: existsSync(getOnboardingCheckMarkerPath(shellPaths, 'project')),
       },
     };
     const targetPath = shellPaths.resolveWorkspacePath(outputPath);

package/src/cli/entrypoint.ts

@@ -1,7 +1,7 @@
 import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { ConfigManager } from '../config/index.ts';
-import { readOnboardingCompletionMarkers } from '../runtime/onboarding/index.ts';
+import { readOnboardingCheckMarkers } from '../runtime/onboarding/index.ts';
 import { GlobalNetworkTransportInstaller } from '@pellux/goodvibes-sdk/platform/runtime/network/index';
 import { createShellPathService } from '@pellux/goodvibes-sdk/platform/runtime/shell-paths';
 import { configureActivityLogger } from '@pellux/goodvibes-sdk/platform/utils/logger';
@@ -125,7 +125,7 @@ export async function prepareShellCliRuntime(
     const userStorePath = shellPaths.resolveUserPath('tui', 'auth-users.json');
     const bootstrapCredentialPath = shellPaths.resolveUserPath('tui', 'auth-bootstrap.txt');
     const operatorTokenPath = join(bootstrapHomeDirectory, '.goodvibes', 'daemon', 'operator-tokens.json');
-    const onboardingMarkers = readOnboardingCompletionMarkers(shellPaths);
+    const onboardingMarkers = readOnboardingCheckMarkers(shellPaths);
     const service = await buildCliServicePosture({
       configManager,
       workingDirectory: bootstrapWorkingDir,

package/src/cli/help.ts

@@ -124,7 +124,7 @@ const COMMAND_HELP: Record<string, CommandHelp> = {
   },
   onboarding: {
     usage: ['onboarding', 'setup', 'onboarding status'],
-    summary: 'Open the setup wizard on the next TUI startup, or inspect onboarding marker status from the CLI.',
+    summary: 'Open the setup wizard, or inspect whether onboarding has already been shown for this user.',
     examples: ['onboarding', 'onboarding status'],
   },
   status: {

package/src/cli/status.ts

@@ -1,5 +1,5 @@
 import type { ConfigManager } from '@pellux/goodvibes-sdk/platform/config/manager';
-import type { OnboardingCompletionMarkersState } from '../runtime/onboarding/index.ts';
+import type { OnboardingCheckMarkersState } from '../runtime/onboarding/index.ts';
 import { resolveRuntimeEndpointBinding } from './endpoints.ts';
 import { isNetworkFacing } from './network-posture.ts';
 import type { GoodVibesCliOutputFormat } from './types.ts';
@@ -9,7 +9,7 @@ export interface CliStatusOptions {
   readonly configManager: Pick<ConfigManager, 'get'>;
   readonly workingDirectory: string;
   readonly homeDirectory: string;
-  readonly onboardingMarkers?: OnboardingCompletionMarkersState;
+  readonly onboardingMarkers?: OnboardingCheckMarkersState;
   readonly auth?: CliAuthStatus;
   readonly service?: CliServicePosture;
   readonly doctor?: boolean;
@@ -63,7 +63,7 @@ export interface CliStatusSnapshot {
     readonly web: ReturnType<typeof resolveRuntimeEndpointBinding> & { readonly enabled: unknown };
   };
   readonly onboarding: {
-    readonly completed: boolean;
+    readonly checked: boolean;
     readonly scope: string;
     readonly updatedAt: number | null;
   };
@@ -167,13 +167,13 @@ export function buildCliDoctorFindings(options: CliStatusOptions): readonly CliD
     }
   }
 
-  if (!marker?.payload) {
+  if (!marker?.exists) {
     findings.push({
       id: 'onboarding-incomplete',
       area: 'onboarding',
       severity: 'warning',
-      summary: 'Onboarding has not been completed for this user/project.',
-      cause: 'No effective onboarding completion marker was found.',
+      summary: 'Onboarding has not been shown for this user.',
+      cause: 'No global user onboarding check marker was found.',
       impact: 'Important service, network, provider, auth, or permission choices may still be implicit defaults.',
       action: 'Run /onboarding in the TUI or goodvibes onboarding status to review setup state.',
     });
@@ -277,7 +277,7 @@ export function buildCliStatusSnapshot(options: CliStatusOptions): CliStatusSnap
       web: { enabled: config.get('web.enabled'), ...webBinding },
     },
     onboarding: {
-      completed: Boolean(marker?.payload),
+      checked: Boolean(marker?.exists),
       scope: marker?.scope ?? 'none',
       updatedAt: marker?.payload?.updatedAt ?? null,
     },
@@ -344,7 +344,7 @@ export function renderCliStatus(options: CliStatusOptions): string {
     bindLine('web', webEnabled, webBinding),
     '',
     'Onboarding:',
-    `  completed: ${marker?.payload ? 'yes' : 'no'}`,
+    `  checked: ${marker?.exists ? 'yes' : 'no'}`,
     `  scope: ${marker?.scope ?? 'none'}`,
     `  updatedAt: ${marker?.payload ? new Date(marker.payload.updatedAt).toISOString() : 'n/a'}`,
   ];
@@ -372,7 +372,7 @@ export function renderOnboardingCliStatus(options: CliStatusOptions): string {
   const marker = options.onboardingMarkers?.effective;
   return [
     'GoodVibes onboarding status',
-    `  completed: ${marker?.payload ? 'yes' : 'no'}`,
+    `  checked: ${marker?.exists ? 'yes' : 'no'}`,
     `  scope: ${marker?.scope ?? 'none'}`,
     `  source: ${marker?.payload?.source ?? 'n/a'}`,
     `  mode: ${marker?.payload?.mode ?? 'n/a'}`,

package/src/cli/tui-startup.ts

@@ -1,6 +1,6 @@
 import type { CommandContext, CommandRegistry } from '../input/command-registry.ts';
 import type { InputHandler } from '../input/handler.ts';
-import { readOnboardingCompletionMarkers } from '../runtime/onboarding/index.ts';
+import { readOnboardingCheckMarker } from '../runtime/onboarding/index.ts';
 import type { GoodVibesCliParseResult } from './types.ts';
 
 export function applyInitialTuiCliState(options: {
@@ -8,11 +8,11 @@ export function applyInitialTuiCliState(options: {
   readonly input: InputHandler;
   readonly commandRegistry: CommandRegistry;
   readonly commandContext: CommandContext;
-  readonly shellPaths: Parameters<typeof readOnboardingCompletionMarkers>[0];
+  readonly shellPaths: Parameters<typeof readOnboardingCheckMarker>[0];
   readonly render: () => void;
 }): void {
   const { cli, input, commandRegistry, commandContext, shellPaths, render } = options;
-  const onboardingMarkers = readOnboardingCompletionMarkers(shellPaths);
+  const globalOnboardingMarker = readOnboardingCheckMarker(shellPaths, 'user');
   if (cli.command === 'onboarding') {
     input.openOnboardingWizard({ mode: 'edit', reset: true });
   } else if (cli.command === 'sessions' && cli.commandArgs[0] === 'resume') {
@@ -20,7 +20,7 @@ export function applyInitialTuiCliState(options: {
     if (target) {
       void commandRegistry.execute('session', ['resume', target], commandContext).then(() => render());
     }
-  } else if (!onboardingMarkers.effective?.payload) {
+  } else if (!globalOnboardingMarker.exists) {
     input.openOnboardingWizard({ mode: 'new', reset: true });
   }
 

package/src/input/handler-interactions.ts

@@ -1,6 +1,6 @@
 import { buildProviderAccountSnapshot } from '@pellux/goodvibes-sdk/platform/runtime/provider-accounts/registry';
 import type { OnboardingWizardMode } from './onboarding/onboarding-wizard.ts';
-import { collectOnboardingSnapshot } from '../runtime/onboarding/index.ts';
+import { collectOnboardingSnapshot, readOnboardingCheckMarker, writeOnboardingCheckMarker } from '../runtime/onboarding/index.ts';
 import { cleanupMarkerRegistry, expandPrompt, findMarkerAtPos, handleBlockCopy, handleBlockRerun, handleBlockSave, handleBlockToggle, handleBookmark, handleClipboardPaste, handleCopy, handleCtrlC, handleDiffApply, registerPaste } from './handler-content-actions.ts';
 import { clearModalStack, handleEscape, modalOpened } from './handler-modal-stack.ts';
 import { openOnboardingWizardState, type OpenOnboardingWizardOptions } from './handler-ui-state.ts';
@@ -11,6 +11,19 @@ export function openOnboardingWizardForHandler(
     modeOrOptions: OnboardingWizardMode | OpenOnboardingWizardOptions = 'new',
   ): void {
     const options = typeof modeOrOptions === 'string' ? { mode: modeOrOptions } : modeOrOptions;
+    const userMarker = readOnboardingCheckMarker(handler.uiServices.environment.shellPaths, 'user');
+    if (!userMarker.payload) {
+      try {
+        writeOnboardingCheckMarker(handler.uiServices.environment.shellPaths, {
+          scope: 'user',
+          source: 'wizard',
+          mode: options.mode ?? 'new',
+        });
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        handler.commandContext?.print?.(`Onboarding check marker could not be written: ${message}`);
+      }
+    }
     if (!handler.modalStack.includes('onboarding')) handler.modalOpened('onboarding');
     handler.clearOnboardingModelPickerCancelState();
     openOnboardingWizardState(handler.onboardingWizard, options);

package/src/input/handler-onboarding.ts

@@ -1,21 +1,14 @@
-import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
-import { dirname } from 'node:path';
 import { createOAuthLocalListener } from '@pellux/goodvibes-sdk/platform/config/oauth-local-listener';
 import { beginOpenAICodexLogin, exchangeOpenAICodexCode } from '@pellux/goodvibes-sdk/platform/config/openai-codex-auth';
 import { openExternalUrl } from '@pellux/goodvibes-sdk/platform/utils/open-external';
 import { buildProviderAccountSnapshot } from '@pellux/goodvibes-sdk/platform/runtime/provider-accounts/registry';
 import { OnboardingWizardController, type OnboardingWizardAction } from './onboarding/onboarding-wizard.ts';
-import { applyOnboardingRequest, collectOnboardingSnapshot, getOnboardingCompletionMarkerPath, verifyOnboardingRequest } from '../runtime/onboarding/index.ts';
-import type { OnboardingApplyOperation, OnboardingApplyRequest, OnboardingShellPaths, OnboardingVerificationItem } from '../runtime/onboarding/index.ts';
+import { applyOnboardingRequest, collectOnboardingSnapshot, verifyOnboardingRequest } from '../runtime/onboarding/index.ts';
+import type { OnboardingApplyRequest, OnboardingVerificationItem } from '../runtime/onboarding/index.ts';
 import type { ModelPickerTarget } from './model-picker.ts';
 import { captureOnboardingWizardSnapshot, restoreOnboardingWizardSnapshot } from './handler-ui-state.ts';
 import type { InputHandler } from './handler.ts';
 
-interface CompletionMarkerSnapshot {
-  readonly path: string;
-  readonly previous: string | null;
-}
-
 export interface OnboardingRuntimePosture {
   readonly serviceEnabled: boolean;
   readonly serviceAutostart: boolean;
@@ -38,44 +31,6 @@ function extractAuthorizationCode(input: string): string | null {
   }
 }
 
-function splitCompletionMarkerOperations(request: OnboardingApplyRequest): {
-  readonly settingsRequest: OnboardingApplyRequest;
-  readonly markerRequest: OnboardingApplyRequest;
-} {
-  const markerOperations = request.operations.filter((operation) => operation.kind === 'set-completion-marker');
-  const settingsOperations = request.operations.filter((operation) => operation.kind !== 'set-completion-marker');
-  return {
-    settingsRequest: { ...request, operations: settingsOperations },
-    markerRequest: { ...request, operations: markerOperations },
-  };
-}
-
-function snapshotCompletionMarkers(
-  shellPaths: OnboardingShellPaths,
-  operations: readonly OnboardingApplyOperation[],
-): readonly CompletionMarkerSnapshot[] {
-  return operations
-    .filter((operation) => operation.kind === 'set-completion-marker')
-    .map((operation) => {
-      const path = getOnboardingCompletionMarkerPath(shellPaths, operation.scope);
-      return {
-        path,
-        previous: existsSync(path) ? readFileSync(path, 'utf-8') : null,
-      };
-    });
-}
-
-function restoreCompletionMarkers(snapshots: readonly CompletionMarkerSnapshot[]): void {
-  for (const snapshot of snapshots) {
-    if (snapshot.previous === null) {
-      rmSync(snapshot.path, { force: true });
-      continue;
-    }
-    mkdirSync(dirname(snapshot.path), { recursive: true });
-    writeFileSync(snapshot.path, snapshot.previous, 'utf-8');
-  }
-}
-
 function isLoopbackHostValue(value: string | null | undefined): boolean {
   const normalized = (value ?? '').trim().toLowerCase();
   if (normalized.length === 0) return false;
@@ -161,7 +116,7 @@ export async function handleOnboardingActionForHandler(handler: InputHandler, ac
     const blockers = handler.onboardingWizard.getBlockingFieldLabels();
     if (blockers.length > 0) {
       handler.commandContext?.print?.([
-        'Onboarding needs required confirmations before applying.',
+        'Onboarding needs these fields before applying.',
         ...blockers.map((label) => `  ${label}`),
       ].join('\n'));
       handler.requestRender();
@@ -169,7 +124,6 @@ export async function handleOnboardingActionForHandler(handler: InputHandler, ac
     }
 
     const request = handler.onboardingWizard.buildApplyRequest();
-    const { settingsRequest, markerRequest } = splitCompletionMarkerOperations(request);
     const deps = {
       config: handler.uiServices.platform.configManager,
       secrets: handler.uiServices.platform.secretsManager,
@@ -181,12 +135,12 @@ export async function handleOnboardingActionForHandler(handler: InputHandler, ac
     let verificationItems: readonly OnboardingVerificationItem[] = [];
     handler.onboardingApplyPending = true;
     try {
-      const settingsApplied = await applyOnboardingRequest(deps, settingsRequest);
-      const settingsVerification = await verifyOnboardingRequest(deps, settingsRequest);
-      verificationItems = settingsVerification.items;
+      const applied = await applyOnboardingRequest(deps, request);
+      const verification = await verifyOnboardingRequest(deps, request);
+      verificationItems = verification.items;
       appliedErrors = [
-        ...settingsApplied.errors.map((error) => `apply ${error.kind}: ${error.message}`),
-        ...settingsVerification.items
+        ...applied.errors.map((error) => `apply ${error.kind}: ${error.message}`),
+        ...verification.items
           .filter((item) => item.status !== 'pass')
           .map((item) => `verify ${item.id}: ${item.message}`),
       ];
@@ -194,29 +148,11 @@ export async function handleOnboardingActionForHandler(handler: InputHandler, ac
       if (appliedErrors.length === 0) {
         const activationVerification = await handler.restartOnboardingExternalServicesIfNeeded(request);
         const runtimeVerification = [...activationVerification, ...handler.verifyOnboardingRuntimePosture(request)];
-        verificationItems = [...settingsVerification.items, ...runtimeVerification];
+        verificationItems = [...verification.items, ...runtimeVerification];
         appliedErrors = runtimeVerification
           .filter((item) => item.status === 'fail')
           .map((item) => `verify ${item.id}: ${item.message}`);
       }
-
-      if (appliedErrors.length === 0 && markerRequest.operations.length > 0) {
-        const markerSnapshots = snapshotCompletionMarkers(deps.shellPaths, markerRequest.operations);
-        const markerApplied = await applyOnboardingRequest(deps, markerRequest);
-        const finalVerification = await verifyOnboardingRequest(deps, request);
-        const runtimeVerification = handler.verifyOnboardingRuntimePosture(request);
-        verificationItems = [...finalVerification.items, ...runtimeVerification];
-        appliedErrors = [
-          ...markerApplied.errors.map((error) => `apply ${error.kind}: ${error.message}`),
-          ...finalVerification.items
-            .filter((item) => item.status !== 'pass')
-            .map((item) => `verify ${item.id}: ${item.message}`),
-          ...runtimeVerification
-            .filter((item) => item.status === 'fail')
-            .map((item) => `verify ${item.id}: ${item.message}`),
-        ];
-        if (appliedErrors.length > 0) restoreCompletionMarkers(markerSnapshots);
-      }
     } catch (error) {
       handler.commandContext?.print?.([
         'Onboarding apply did not complete.',
@@ -625,7 +561,7 @@ export function verifyOnboardingRuntimePostureForHandler(handler: InputHandler,
     }
 
     const auth = handler.uiServices.platform.localUserAuthManager.inspect();
-    const hasAdmin = auth.users.some((user) => user.roles.includes('admin'));
+    const hasLocalAuth = auth.users.length > 0;
     const items: OnboardingVerificationItem[] = [];
 
     items.push({
@@ -638,19 +574,19 @@ export function verifyOnboardingRuntimePostureForHandler(handler: InputHandler,
     });
     items.push({
       id: 'runtime:auth-posture',
-      status: hasAdmin && !auth.bootstrapCredentialPresent ? 'pass' : 'fail',
-      message: hasAdmin && !auth.bootstrapCredentialPresent
-        ? 'Local admin auth is configured and bootstrap credentials are not present.'
-        : 'Network-capable surfaces require local admin auth with no bootstrap credential file.',
+      status: hasLocalAuth && !auth.bootstrapCredentialPresent ? 'pass' : 'fail',
+      message: hasLocalAuth && !auth.bootstrapCredentialPresent
+        ? 'Local auth is configured and bootstrap credentials are not present.'
+        : 'Network-capable surfaces require local auth with no bootstrap credential file.',
       target: 'auth',
     });
     if (posture.remoteExposure) {
       items.push({
         id: 'runtime:remote-auth-gate',
-        status: hasAdmin ? 'pass' : 'fail',
-        message: hasAdmin
-          ? 'Remote-capable bind settings have local admin auth available.'
-          : 'Remote-capable bind settings cannot be applied without local admin auth.',
+        status: hasLocalAuth ? 'pass' : 'fail',
+        message: hasLocalAuth
+          ? 'Remote-capable bind settings have local auth available.'
+          : 'Remote-capable bind settings cannot be applied without local auth.',
         target: 'auth',
       });
     }

package/src/input/handler.ts

@@ -31,7 +31,7 @@ import { OnboardingWizardController, type OnboardingWizardAction, type Onboardin
 import {
   applyOnboardingRequest,
   collectOnboardingSnapshot,
-  getOnboardingCompletionMarkerPath,
+  getOnboardingCheckMarkerPath,
   verifyOnboardingRequest,
 } from '../runtime/onboarding/index.ts';
 import type {

package/src/input/onboarding/handler-onboarding-routes.ts

@@ -28,6 +28,20 @@ function activateSelection(state: OnboardingRouteState): void {
   if (action !== null) state.onAction?.(action);
 }
 
+function isEnterKey(token: InputToken): boolean {
+  return token.type === 'key' && (token.logicalName === 'enter' || token.logicalName === 'return');
+}
+
+function getKeyTextInput(token: Extract<InputToken, { type: 'key' }>): string | null {
+  if (token.ctrl || token.meta) return null;
+  if (token.logicalName === 'space') return ' ';
+  if (token.logicalName.length !== 1) return null;
+  if (token.shift && token.logicalName >= 'a' && token.logicalName <= 'z') {
+    return token.logicalName.toUpperCase();
+  }
+  return token.logicalName;
+}
+
 export function handleOnboardingWizardToken(state: OnboardingRouteState, token: InputToken): boolean {
   if (!state.onboardingWizard.active) return false;
 
@@ -48,12 +62,13 @@ export function handleOnboardingWizardToken(state: OnboardingRouteState, token:
     }
 
     if (editing) {
-      if (token.logicalName === 'enter') {
+      if (isEnterKey(token)) {
         state.onboardingWizard.commitEdit();
       } else if (token.logicalName === 'backspace') {
         state.onboardingWizard.editBackspace();
-      } else if (token.logicalName === 'space') {
-        state.onboardingWizard.editChar(' ');
+      } else {
+        const textInput = getKeyTextInput(token);
+        if (textInput !== null) state.onboardingWizard.editChar(textInput);
       }
     } else if (token.logicalName === 'left') {
       state.onboardingWizard.prevStep();
@@ -74,22 +89,23 @@ export function handleOnboardingWizardToken(state: OnboardingRouteState, token:
       state.onboardingWizard.selectFirst(visibleFields);
     } else if (token.logicalName === 'end') {
       state.onboardingWizard.selectLast(visibleFields);
-    } else if (token.logicalName === 'enter' || token.logicalName === 'space') {
-      activateSelection(state);
-    } else if (token.logicalName === 'backspace') {
-      state.onboardingWizard.editBackspace();
+    } else {
+      const textInput = getKeyTextInput(token);
+      if (textInput !== null && state.onboardingWizard.beginSelectedTextInput(textInput)) {
+        state.requestRender();
+        return true;
+      }
+      if (isEnterKey(token) || token.logicalName === 'space') {
+        activateSelection(state);
+      } else if (token.logicalName === 'backspace') {
+        state.onboardingWizard.editBackspace();
+      }
     }
   } else if (token.type === 'text') {
     if (editing) {
       state.onboardingWizard.editChar(token.value);
-    } else if (token.value === 'h') {
-      state.onboardingWizard.prevStep();
-    } else if (token.value === 'l') {
-      state.onboardingWizard.nextStep();
-    } else if (token.value === 'k') {
-      state.onboardingWizard.moveSelection(-1, visibleFields);
-    } else if (token.value === 'j') {
-      state.onboardingWizard.moveSelection(1, visibleFields);
+    } else if (state.onboardingWizard.beginSelectedTextInput(token.value)) {
+      // Direct typing into selected inputs behaves like a real form field.
     } else if (token.value === ' ') {
       activateSelection(state);
     } else if (/^[1-9]$/.test(token.value)) {

package/src/input/onboarding/onboarding-wizard-apply.ts

@@ -131,23 +131,6 @@ export function buildOnboardingApplyRequest(controller: OnboardingWizardControll
     acknowledge('subscriptions', 'accounts.subscriptions');
     acknowledge('auth', 'accounts.auth');
 
-    if (controller.getBooleanFieldValue('review.project-marker', true)) {
-      operations.push({
-        kind: 'set-completion-marker',
-        scope: 'project',
-        completed: true,
-        payload: { source: 'wizard', mode: controller.mode },
-      });
-    }
-    if (controller.getBooleanFieldValue('review.user-marker', controller.defaultReviewUserMarker())) {
-      operations.push({
-        kind: 'set-completion-marker',
-        scope: 'user',
-        completed: true,
-        payload: { source: 'wizard', mode: controller.mode },
-      });
-    }
-
     return {
       mode: controller.mode,
       source: 'wizard',

package/src/input/onboarding/onboarding-wizard-helpers.ts

@@ -213,6 +213,5 @@ export function getOnboardingWizardBodyRows(viewportHeight: number): number {
 }
 
 export function getOnboardingWizardVisibleFieldCount(viewportHeight: number): number {
-  return Math.max(1, Math.floor((getOnboardingWizardBodyRows(viewportHeight) - 5) / 2));
+  return Math.max(1, getOnboardingWizardBodyRows(viewportHeight) - 5);
 }
-

package/src/input/onboarding/onboarding-wizard-rules.ts

@@ -30,10 +30,6 @@ export function getSharedIpHostDefault(
     return hosts[0] ?? '0.0.0.0';
   }
 
-export function defaultReviewUserMarker(controller: OnboardingWizardController): boolean {
-    return controller.mode === 'new';
-  }
-
 export function toggleCapability(controller: OnboardingWizardController, capabilityId: OnboardingStep1CapabilityId): void {
     if (capabilityId === 'local-tui-only') {
       for (const capability of controller.getCurrentCapabilities()) {
@@ -69,6 +65,18 @@ export function selectLocalTuiOnly(controller: OnboardingWizardController): void
     }
   }
 
+export function selectAllExternalSurfaces(controller: OnboardingWizardController): void {
+    for (const surface of EXTERNAL_SURFACE_SPECS) {
+      controller.toggleState.set(surface.enabledFieldId, true);
+    }
+  }
+
+export function clearExternalSurfaces(controller: OnboardingWizardController): void {
+    for (const surface of EXTERNAL_SURFACE_SPECS) {
+      controller.toggleState.set(surface.enabledFieldId, false);
+    }
+  }
+
 export function setCapabilityValue(controller: OnboardingWizardController, capabilityId: OnboardingStep1CapabilityId, selected: boolean): void {
     if (capabilityId === 'local-tui-only') {
       if (selected) {
@@ -172,7 +180,7 @@ export function shouldExposeControlPlaneNetwork(controller: OnboardingWizardCont
 
 export function requiresAuthBootstrap(controller: OnboardingWizardController): boolean {
     return controller.hasServerCapabilitiesSelected()
-      && (!controller.hasAdminAuthUser() || controller.hasBootstrapCredentialPresent());
+      && (!controller.hasLocalAuthUser() || controller.hasBootstrapCredentialPresent());
   }
 
 export function hasAdminAuthUser(controller: OnboardingWizardController): boolean {
@@ -180,6 +188,11 @@ export function hasAdminAuthUser(controller: OnboardingWizardController): boolea
       .some((user) => user.roles.includes('admin'));
   }
 
+export function hasLocalAuthUser(controller: OnboardingWizardController): boolean {
+    return (controller.runtimeSnapshot?.auth.snapshot.userCount ?? 0) > 0
+      || (controller.runtimeSnapshot?.auth.snapshot.users ?? []).length > 0;
+  }
+
 export function hasBootstrapCredentialPresent(controller: OnboardingWizardController): boolean {
     return controller.runtimeSnapshot?.auth.snapshot.bootstrapCredentialPresent === true;
   }

package/src/input/onboarding/onboarding-wizard-state.ts

@@ -313,14 +313,20 @@ export function isFieldDirtyByDefinition(controller: OnboardingWizardController,
   }
 
 export function isFieldSatisfied(controller: OnboardingWizardController, field: OnboardingWizardFieldDefinition): boolean {
-    if (field.kind === 'checklist' || field.kind === 'acknowledgement') {
-      if (field.kind === 'acknowledgement' && !field.required) return true;
+    if (field.kind === 'checklist') {
+      return true;
+    }
+
+    if (field.kind === 'acknowledgement') {
+      if (!field.required) return true;
       return Boolean(controller.getFieldValue(field));
     }
 
     if (field.kind === 'radio') return true;
 
     if (field.kind === 'text' || field.kind === 'masked') {
+      const required = field.required === true || controller.isRequiredExternalSetupField(field.id);
+      if (!required) return true;
       return normalizeText(controller.getFieldValue(field) as string).length > 0;
     }