kcap setup: one agent-install prompt + import current-repo history

[realtonyyoung]

What & why

Two UX changes to the kcap setup onboarding wizard.

1. One agent-install prompt instead of nine

Step 4 previously asked a separate yes/no per detected harness. It now shows the detected agents and asks one default-yes prompt — "Install kcap for these agents (hooks, skills, instructions, MCP)?" — installing artifacts for every detected harness.

• A single InstallAgents decision (SetupDecisions.DecideInstallAgents) is threaded into CodingAgentsStep.Options.
• RunAsync has two ordered early-returns: no-agents (existing warning) and !InstallAgents (zero mutations — before any installer, SweepLegacyCodexSkills, or selected assignment).
• Every existing per-vendor --skip-* semantic is preserved unchanged (incl. the Kiro flag coupling). The Codex network-access and provider-API-key prompts remain separate.
• Kiro is annotated in the detected list ("installing sets kcap as your default Kiro agent") to keep consent informed.

2. New Step 6 — import current-repo history

After config is saved, setup offers (default-yes) to import the current repository's past sessions across all detected harnesses via the existing ImportCommand.HandleImport.

• Gated on a resolved current repo (owner+name from origin) and satisfied auth (provider None or a usable token).
• Imported new sessions honor the Step-3 default visibility, sent client-side like live recording (routed sources New-only + guarded by !ForcePrivate; chain zeroes it under force-private in the orchestrator to avoid a partial-failure leak). Existing per-source --private behavior is untouched.
• AppConfig.SetResolvedState refreshes the in-process server URL + profile to the exact saved values before the import, and HandleImport binds auth to the passed baseUrl.
• The embedded import auto-skips excluded repos/paths (never blocks on Console.ReadLine).

⚠️ Behavior change

kcap setup --no-prompt now auto-imports the current repo's history (consistent default-yes). Existing unattended/scripted invocations will begin uploading current-repo session history unless they pass the new --skip-import flag. Documented in README + help-setup.txt.

Testing

• Unit suite: 3480 total, 0 failed (2 skipped). New: ImportVisibilityTests, SetupDecisionsTests, AppConfigResolvedStateTests, plus CodingAgentsStepTests/SetupCommandTests additions.
• Integration suite: 142/142.
• AOT publish: no IL3050/IL2026 warnings.

Reviewer note

Unit runs occasionally log a post-summary ObjectDisposedException from the pre-existing title-generation backgroundTasks/concurrencyLimit orchestration in HandleImport (semaphore disposed before a fire-and-forget title task finishes). It fails no tests and is untouched by this PR; flagged for awareness — happy to address separately if wanted.

Closes #334
Linear: AI-1437

Design spec + plan: docs/superpowers/specs/2026-07-20-unified-agent-install-and-import-design.md, docs/superpowers/plans/2026-07-20-unified-agent-install-and-import.md.

🤖 Generated with Claude Code

[qodo-code-review]

PR Summary by Qodo

kcap setup: single agent-install prompt + import current-repo history

✨ Enhancement 📝 Documentation 🧪 Tests 🕐 40+ Minutes

AI Description

• Replaces nine per-vendor install prompts with one default-yes “install for detected agents”
 decision.
• Adds Step 6 (default-yes) to import current-repo history via existing kcap import pipeline.
• Threads Step-3 default visibility into newly imported sessions (New-only, force-private safe).
• Introduces --skip-import; --no-prompt now auto-imports when eligible.
• Adds pure decision helpers and broad unit coverage for gating/visibility/resolved-state.

Diagram

flowchart TD
    A["SetupCommand.HandleAsync"] --> B{"DecideInstallAgents"} --> C["CodingAgentsStep.RunAsync"] --> D{"InstallAgents?"}
    D -->|"No"| E["Early return (no mutations)"]
    D -->|"Yes"| F["Per-vendor installers"]
    A --> G["Save profile/config"] --> H["AppConfig.SetResolvedState"] --> I{"DecideImport"}
    I -->|"Run"| J["RunImportStepAsync"] --> K["ImportCommand.HandleImport"] --> L["IImportSource (vendors)"] --> M[("Capacitor server")]

    subgraph Legend
        direction LR
        _p(["Process"]) ~~~ _d{"Decision"} ~~~ _e[("External")]
    end

Loading

High-Level Assessment

Reusing the existing CodingAgentsStep installers and ImportCommand.HandleImport pipeline is the right approach: it avoids duplicating import logic, preserves per-vendor --skip-* semantics by only changing the outer consent gate, and keeps the new behaviors testable via extracted pure decisions (SetupDecisions) and a single Import runner seam. The remaining key reviewer focus should be verifying the “zero mutations on decline” ordering and the --no-prompt behavioral change + --skip-import escape hatch.

Files changed (22) +2665 / -225

Enhancement (10) +263 / -28

AppConfig.csAdd 'SetResolvedState' to pin resolved server/profile in-process +18/-0

Add 'SetResolvedState' to pin resolved server/profile in-process

• Adds 'AppConfig.SetResolvedState(serverUrl, profileName, profile)' which directly assigns 'ResolvedServerUrl' and 'ResolvedProfile' without re-running precedence resolution. Used to ensure same-process follow-on actions (Step 6 import) observe the just-saved config.

src/Capacitor.Cli.Core/Config/AppConfig.cs

AntigravityImportSource.csStamp 'default_visibility' for New Antigravity imports +9/-2

Stamp 'default_visibility' for New Antigravity imports

• Builds the session-start payload once and conditionally injects 'default_visibility' for New sessions when not force-private. Preserves existing force-private behavior by guarding injection with '!ForcePrivate'.

src/Capacitor.Cli/Commands/AntigravityImportSource.cs

CopilotImportSource.csStamp 'default_visibility' for New Copilot imports +8/-1

Stamp 'default_visibility' for New Copilot imports

• Injects 'default_visibility' into the session-start payload for New sessions when not force-private, leaving existing force-private semantics unchanged.

src/Capacitor.Cli/Commands/CopilotImportSource.cs

CursorImportSource.csStamp 'default_visibility' for New Cursor imports +10/-1

Stamp 'default_visibility' for New Cursor imports

• Adds 'default_visibility' injection to the session-start payload for New sessions when not force-private. Keeps Cursor’s existing privatization approach (post-hoc/privateScope ids) from conflicting by guarding injection behind '!ForcePrivate'.

src/Capacitor.Cli/Commands/CursorImportSource.cs

GeminiImportSource.csStamp 'default_visibility' for New Gemini imports +8/-1

Stamp 'default_visibility' for New Gemini imports

• Adds New-only 'default_visibility' injection guarded by '!ForcePrivate' to align imported session starts with setup’s visibility selection.

src/Capacitor.Cli/Commands/GeminiImportSource.cs

ImportCommand.csAdd embedded-import parameters and propagate default visibility safely +30/-10

Add embedded-import parameters and propagate default visibility safely

• Extends 'HandleImport' with 'autoSkipExclusions' (prevents exclusion prompts from blocking in embedded setup) and 'defaultVisibility'. Binds auth client creation to the provided 'baseUrl', derives 'chainDefaultVisibility = forcePrivate ? null : defaultVisibility', and threads it through 'ImportChainsAsync'/'ImportSingleSessionAsync' to stamp New chain session-start payloads without leaking non-private defaults under force-private.

src/Capacitor.Cli/Commands/ImportCommand.cs

KiroImportSource.csStamp 'default_visibility' for New Kiro imports +8/-1

Stamp 'default_visibility' for New Kiro imports

• Injects 'default_visibility' on New session-start payloads when not force-private, preserving existing Kiro import lifecycle behavior.

src/Capacitor.Cli/Commands/KiroImportSource.cs

OpenCodeImportSource.csStamp 'default_visibility' for New OpenCode imports +8/-2

Stamp 'default_visibility' for New OpenCode imports

• Adds New-only 'default_visibility' injection to the session-start payload, guarded by '!ForcePrivate' to preserve existing private-stamp precedence.

src/Capacitor.Cli/Commands/OpenCodeImportSource.cs

PiImportSource.csStamp 'default_visibility' for New Pi imports +8/-1

Stamp 'default_visibility' for New Pi imports

• Injects 'default_visibility' for New Pi session-start payloads when not force-private, keeping existing force-private behavior authoritative.

src/Capacitor.Cli/Commands/PiImportSource.cs

SetupCommand.csAdd single agent-install prompt and Step 6 repo-history import +156/-9

Add single agent-install prompt and Step 6 repo-history import

• Adds '--skip-import', renumbers steps to 1/6..6/6, prints a detected-agent summary, and captures a single InstallAgents decision via 'SetupDecisions.DecideInstallAgents' to thread into 'CodingAgentsStep.Options'. After saving config, calls 'AppConfig.SetResolvedState' and runs a new Step 6 that detects current repo + checks auth, then best-effort invokes 'ImportCommand.HandleImport' via an 'ImportRunnerOverride' test seam and an 'ImportInvocation' record.

src/Capacitor.Cli/Commands/SetupCommand.cs

Refactor (3) +115 / -118

CodingAgentsStep.csReplace per-vendor prompts with unified 'InstallAgents' gate +41/-116

Replace per-vendor prompts with unified 'InstallAgents' gate

• Adds 'Options.InstallAgents' and introduces ordered early returns for (1) no agents detected and (2) 'InstallAgents=false', ensuring zero installer mutations. Removes the nine per-vendor confirmation prompts and the separate shared-skills prompt while keeping all '--skip-*' semantics and downstream gating behavior intact.

src/Capacitor.Cli/Commands/CodingAgentsStep.cs

IImportSource.csExtend 'ImportContext' with 'DefaultVisibility' +6/-2

Extend 'ImportContext' with 'DefaultVisibility'

• Adds optional 'DefaultVisibility' to 'ImportContext' so sources can stamp visibility on New sessions (while respecting 'ForcePrivate'). Updates documentation comments accordingly.

src/Capacitor.Cli/Commands/IImportSource.cs

SetupDecisions.csAdd 'SetupDecisions' (install + import decision helpers) +68/-0

Add 'SetupDecisions' (install + import decision helpers)

• New pure helper module providing (1) a stable detected-agent summary string (with Kiro consent annotation), (2) a unified install-consent decision, and (3) an import eligibility/policy decision used by Step 6.

src/Capacitor.Cli/Commands/SetupDecisions.cs

Tests (5) +1352 / -73

AppConfigResolvedStateTests.csAdd unit tests for 'AppConfig.SetResolvedState' +50/-0

Add unit tests for 'AppConfig.SetResolvedState'

• Verifies 'SetResolvedState' assigns exact server/profile values and that it wins over conflicting environment precedence (does not re-resolve). Tests are serialized due to global static state mutation.

test/Capacitor.Cli.Tests.Unit/AppConfigResolvedStateTests.cs

CodingAgentsStepTests.csUpdate tests for unified install gating semantics +252/-73

Update tests for unified install gating semantics

• Reworks tests that previously validated per-vendor declines to assert installs proceed regardless of prompt delegate output (since per-vendor prompts are removed). Adjusts fixtures to avoid the new no-agents early return and adds assertions around no-prompt counts where applicable.

test/Capacitor.Cli.Tests.Unit/CodingAgentsStepTests.cs

ImportVisibilityTests.csAdd comprehensive tests for default visibility stamping during import +777/-0

Add comprehensive tests for default visibility stamping during import

• Adds a large WireMock-driven suite validating 'default_visibility' stamping for New sessions across the chain path, orchestrator ('HandleImport'), and routed vendor sources. Covers partial/already-loaded cases, force-private precedence (including mid-stream failure scenario), and non-interactive exclusion handling expectations.

test/Capacitor.Cli.Tests.Unit/ImportVisibilityTests.cs

SetupCommandTests.csAdd tests for Step 6 'RunImportStepAsync' wiring and best-effort behavior +150/-0

Add tests for Step 6 'RunImportStepAsync' wiring and best-effort behavior

• Adds tests asserting that Step 6 pins the expected import invocation arguments, runs under '--no-prompt' without prompting, skips under missing repo / '--skip-import', and never fails setup on exceptions or non-zero import exit codes. Uses the global 'ImportRunnerOverride' seam with serialized tests.

test/Capacitor.Cli.Tests.Unit/SetupCommandTests.cs

SetupDecisionsTests.csAdd unit tests for 'SetupDecisions' +123/-0

Add unit tests for 'SetupDecisions'

• Covers 'DetectedAgentsSummary' (including Kiro annotation), 'DecideInstallAgents' (no agents/no-prompt/interactive), and 'DecideImport' (repo/auth/flags/no-prompt/interactive accept/decline) without invoking real installers or import code.

test/Capacitor.Cli.Tests.Unit/SetupDecisionsTests.cs

Documentation (4) +935 / -6

README.mdDocument unified install prompt, Step 6 import, and '--no-prompt' behavior change +9/-3

Document unified install prompt, Step 6 import, and '--no-prompt' behavior change

• Updates the setup wizard walkthrough to describe the single install prompt and new Step 6 import step. Explicitly documents that 'kcap setup --no-prompt' now auto-imports current-repo history unless '--skip-import' is passed.

README.md

2026-07-20-unified-agent-install-and-import.mdAdd implementation plan for unified install + repo import +309/-0

Add implementation plan for unified install + repo import

• Introduces a detailed task checklist describing the InstallAgents gate, Step 6 import wiring, and the visibility/auth gating rules. Serves as execution guidance for the implementation.

docs/superpowers/plans/2026-07-20-unified-agent-install-and-import.md

2026-07-20-unified-agent-install-and-import-design.mdAdd approved design spec for setup UX changes +598/-0

Add approved design spec for setup UX changes

• Adds a comprehensive design document capturing current behavior, constraints (skip semantics, zero-mutation requirement), and the intended new wizard flow including Step 6 import and visibility rules.

docs/superpowers/specs/2026-07-20-unified-agent-install-and-import-design.md

help-setup.txtUpdate 'kcap setup' help for Step 6 and '--skip-import' +19/-3

Update 'kcap setup' help for Step 6 and '--skip-import'

• Documents the new '--skip-import' flag, the single install-consent prompt behavior, and the new import-past-sessions step. Calls out the '--no-prompt' auto-import behavior change.

src/Capacitor.Cli.Core/Resources/help-setup.txt

[qodo-code-review]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0) 🎨 UX issues (0) 🔗 Cross-repo conflicts (0) 📜 Skill insights (0)

1. Import skipped on expired token ✓ Resolved 🐞 Bug ☼ Reliability

Description

SetupCommand gates Step 6 import on TokenStore.LoadAsync() returning a non-expired token, but
ImportCommand/HttpClientExtensions can refresh expired tokens via
TokenStore.GetValidTokensAsync(). This can incorrectly skip the new default-yes auto-import for
users with refreshable expired credentials.

Code

src/Capacitor.Cli/Commands/SetupCommand.cs[R478-482]

+        // Auth requirements are satisfied when no login is required at all (provider
+        // None), or the login this run just did (or already had) produced a usable,
+        // non-expired token — not merely "provider != None" (Decision 9).
+        var authSatisfied = provider == AuthProvider.None || (finalTokens is not null && !finalTokens.IsExpired);
+

Evidence

The setup gate only checks for a non-expired stored token, while the HTTP client creation used by
import explicitly uses a refresh-capable token path (GetValidTokensAsync). This mismatch means
setup may skip import even though the subsequent import authentication path would succeed.

src/Capacitor.Cli/Commands/SetupCommand.cs[461-486]
src/Capacitor.Cli.Core/HttpClientExtensions.cs[37-57]
src/Capacitor.Cli.Core/Auth/TokenStore.cs[241-267]

Agent prompt

The issue below was found during a code review. Follow the provided context and guidance below and implement a solution

### Issue description
`kcap setup` Step 6 computes `authSatisfied` using `TokenStore.LoadAsync()` and `!IsExpired`, which treats expired-but-refreshable tokens as unauthenticated and skips import.

### Issue Context
The import path itself authenticates via `HttpClientExtensions.CreateAuthenticatedClientAsync(baseUrl)`, which uses `TokenStore.GetValidTokensAsync()` and can refresh tokens.

### Fix Focus Areas
- src/Capacitor.Cli/Commands/SetupCommand.cs[473-486]

### Suggested fix
Replace the `finalTokens`/`IsExpired` gate with a refresh-aware check, e.g.:
- `authSatisfied = provider == AuthProvider.None || (await TokenStore.GetValidTokensAsync()) is not null;`

Optionally add a unit test covering an expired token that is refreshable (i.e., `GetValidTokensAsync()` returns non-null) to ensure Step 6 runs rather than skipping.

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools

---

2. Setup import triggers PR detection ✓ Resolved 🐞 Bug ➹ Performance

Description

Step 6 calls RepositoryDetection.DetectRepositoryAsync(Environment.CurrentDirectory) with the
default detectPullRequest=true, even though it only needs owner/repo for gating import. This can
unnecessarily invoke provider probing/PR detection work (extra subprocesses/latency) during setup.

Code

src/Capacitor.Cli/Commands/SetupCommand.cs[R470-476]

+        // Step 6: Import past sessions
+        AnsiConsole.Write(new Rule("[yellow]Step 6/6 — Import past sessions[/]").LeftJustified());
+
+        var currentRepoDetected = await RepositoryDetection.DetectRepositoryAsync(Environment.CurrentDirectory);
+        (string Owner, string Name)? currentRepo = currentRepoDetected is { Owner: { } o, RepoName: { } n }
+            ? (o, n)
+            : null;

Evidence

The Step 6 call site uses the overload default (detectPullRequest=true). The repository detection
implementation documents and implements PR/provider probing behind that flag, and even notes that
import passes detectPullRequest:false to avoid wasted latency.

src/Capacitor.Cli/Commands/SetupCommand.cs[470-476]
src/Capacitor.Cli/RepositoryDetection.cs[119-216]

Agent prompt

The issue below was found during a code review. Follow the provided context and guidance below and implement a solution

### Issue description
Setup Step 6 only needs `(owner, repo)` from origin, but it calls `DetectRepositoryAsync` with default PR detection enabled.

### Issue Context
`RepositoryDetection.DetectRepositoryAsync(..., detectPullRequest=true)` may run provider probing + PR/MR detection; the code explicitly notes import disables this because it’s wasted work.

### Fix Focus Areas
- src/Capacitor.Cli/Commands/SetupCommand.cs[470-476]

### Suggested fix
Change the Step 6 call to:
- `await RepositoryDetection.DetectRepositoryAsync(Environment.CurrentDirectory, detectPullRequest: false)`

This keeps setup import eligibility focused on owner/repo resolution and avoids unnecessary provider tooling round-trips.

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools

---

[linear-code]

AI-1439