setup-lifecycle-agent

name	setup-lifecycle-agent
description	Residual-honest agent-native setup lifecycle (init/preflight · dual_write OFF · not Memory GA · catalog ≠ Connected · portal HITL · not invent install green · continuous pull/analyze opt-in · drift report-only · guided repair apply --yes)

Setup lifecycle agent (residual-honest · s1526 P3 + s1530 P5 + s1534 P6 + s1538 P7 + s1542 closeout + s1558 Wave B first-run)

Agent-native path to bootstrap local TUI config planes via managed fragment write + preflight probes + in-session opt-in continuous pull / analyze ticks + report-only drift + guided repair (safe steps only with explicit --yes) — not invent Connected / Memory GA / INSTALL_STORE green.

Prefer slash /setup (alias /setup-lifecycle) or CLI iomesh setup when the operator is at a terminal. Use this skill when planning setup steps in chat.

Onboard companion (s1542): residual-honest offline map via /onboard next setup (aliases setup-lifecycle / lifecycle / setup_lifecycle) → AionAgentOnboardingNextSetupLane — consolidates P1–P7 map story · setup_not_probed · dual_write OFF · package wire ≠ Connected · repair apply ≠ invent Connected · dual_write never auto ON · E10 Open · offline static ≠ live dogfood · setup closeout residual ≠ invent Edge Memory GA.

Wave B first-run (s1558): setup is stage 4 of the 7-stage edge-user-journey. Full first-run map via companion /onboard next journey (aliases edge-journey / user-journey / first-run / edge_user_journey) → AionAgentOnboardingNextJourneyLane — Signup → Download TUI → TUI auth/keys → Setup wizard → Connectors → Local store → Analyze · dual_write OFF · not Memory GA · Edge Memory GA candidacy only · residual PASS ≠ invent Edge Memory GA · portal HITL · host not auto · no invent TUI portal SSO · free eng s1558 · free-floor peer s1560+ mention only · docs edge-user-journey.md · setup-lifecycle.md · memory-edge-usage-demo.md.

Wave C first-run wizard residual (s1570): deeper guided residual via companion /onboard next wizard (aliases first-run-wizard / guided / wave-c / wave_c / wizard-residual) → AionAgentOnboardingNextWizardLane · soft /onboard next wizard dogfood · NOT invent full interactive auto wizard · free eng s1570 · free-floor peer s1572+ mention only.

Workflow

1. Init managed config — write residual-honest fragment into user config.toml.

   • CLI: iomesh setup init [profiles]
   • Slash: /setup init [profiles] [--stdio] [--print-only] [--plugins-dir path] [--memory-url URL] [--mesh-endpoint URL] [--mesh-tenant id] [--platform-mcp-url URL]
   • Mesh flags write hooks (not portal /v7/mcp). apiv1 portal URL infers https://hooks.iome.sh. Infer ≠ Connected.
   • After mesh / platform-mcp write: export IOMESH_TOKEN → /setup reload → iomesh mesh streams --create --yes → --messages (create ≠ PULSE · mesh pub ephemeral ≠ /dashboard consume)
   • Profiles: local-memory (default) · plugins · mesh · platform-mcp · all
   • Managed block markers: # BEGIN iomesh-setup-managed … # END iomesh-setup-managed
   • dual_write = false always — setup path refuses dual_write = true
   • pull_continuous = false default — continuous pull is opt-in only
   • analyze_continuous = false default — analyze ticks are opt-in only
   • Secrets as env names only (api_key_env, oauth_token_env) — never commit secret values
   • After write (s1686 dual path · s1723 slash parity · same helper SetupInitNextStepLines for CLI and slash /setup init):
     • TUI/session already running → start memory host if local-memory · set env vars · /setup preflight · /setup reload (hot-swaps MCP + re-scans skills via ReplaceSkills · s1670 · package wire ≠ Connected · skills re-scan ≠ invent Connected · not Agent Plugins GA · restart no longer required for skill-only path changes)
     • Cold CLI / no session → start memory host if local-memory · set env vars · restart iomesh · iomesh setup preflight
     • CLI has no — in-session only · free eng · slash next-step parity free eng

Honesty locks (never violate)

Lock	Rule
dual_write OFF	Managed fragment + setup path never force dual_write ON
not Memory GA	Preflight / init never stamp Memory GA
catalog ≠ Connected	Setup PASS / probe_ok ≠ invent install Connected
portal HITL	OAuth / INSTALL_STORE APPLY stay browser
secrets env names only	api_key_env / oauth_token_env — no secret values in config
continuous pull opt-in	/setup pull · pull_continuous · CLI iomesh memory pull still valid · pull ≠ invent Connected · s1711 dual-path next-step
analyze ticks opt-in	/setup analyze · analyze_continuous · /memory digest still valid · analyze tick ≠ invent Connected · s1711 dual-path next-step
reload in-session only	/setup reload · CLI has no setup reload · package wire ≠ Connected · s1711 next-step
drift report-only	/setup drift · /setup maintain · residual next steps · drift ≠ invent install green · package wire ≠ Connected
guided repair explicit	/setup repair · /setup repair apply --yes only · safe steps · repair apply ≠ invent Connected · no auto-repair without --yes
never invent green	No Connected / INSTALL_STORE green / Memory GA from setup alone

Non-goals (never do)

• Do not invent Connected / INSTALL_STORE APPLY green from setup PASS, pull status, analyze ticks, drift OK, or repair apply.
• Do not claim Memory GA or dual_write ON.
• Do not mint OAuth tokens or write connector installs from agent MCP.
• Do not auto-start continuous pull without opt-in (/setup pull start · pull_continuous=true · or CLI).
• Do not auto-start analyze ticks without opt-in (/setup analyze start · analyze_continuous=true).
• Do not auto-repair without explicit /setup repair apply --yes (plan is dry; notes stay human).
• Do not auto-flip dual_write ON or invent host/mesh green from repair.
• Do not treat catalog Beta/available as org Connected counts.

Operator surfaces

Surface	Action
Slash /setup	help · init · preflight · portal · reload · pull · analyze · drift · repair
Alias /setup-lifecycle	same
/setup init	write managed fragment · s1723 next-step via SetupInitNextStepLines (CLI parity with s1686)
/setup portal	browser HITL URLs · s1723 next-step via SetupPortalNextStepLines
/setup reload	hot-swap MCP + skills (s1670 · s1711 next-step · in-session only)
/setup pull	status · start · once · stop (s1530 P5 residual-honest · s1711 dual-path next-step)
/setup analyze	status · start · once · stop (s1534 P6 residual-honest · s1711 dual-path next-step)
/setup drift / /setup maintain	report-only FormatDriftText (s1534 P6 · s1707 dual-path next-step)
/setup repair	plan (default) · apply --yes (s1538 P7 guided safe steps · s1707 dual-path next-step)
CLI iomesh setup	init · preflight only (s1525 P1–P2 · s1686/s1699/s1707/s1711/s1723: no CLI setup reload/drift/repair/portal · dual-path next-step after init · preflight · drift · repair · reload/pull/analyze · slash init/portal parity)
CLI iomesh memory pull	still valid continuous / once pull path (s1711 pull dual path peer)
/memory digest	still valid one-shot ops pulse (s1711 analyze dual path peer)
IOMESH_PLATFORM_RESIDUAL=1	optional label only (PlatformResidualEnvOn) · does not hide Edge OSS lanes · residual PASS ≠ invent control plane · free eng s1723
System note	<setup-lifecycle> on AttachMCP

Related

• Docs: docs/architecture/setup-lifecycle.md · docs/architecture/edge-user-journey.md · demo polish docs/architecture/memory-edge-usage-demo.md
• Builtin always merged when skills enabled (go:embed)
• Integrations residual path: skill connector-integrations-setup · /integrations
• Memory advanced residual: skill memory-advanced-agent · /memory
• Onboarding continuum: skill aion-agent-onboarding · /onboard · /onboard next setup (s1542 P1–P7 closeout residual · stage 4) · /onboard next journey (s1558 Wave B first-run map)