Fix onboarding wizard UX and post-wizard issues

[ptone]

Summary

• Runtime priority: Apple container now auto-detected ahead of podman on macOS
• Runtime labels: "Container (generic)" replaced with "Container (Apple Virtualization)"; undetected runtimes shown as disabled with "(not detected)" hint
• Registry input: Wizard images step now has an in-wizard input field (default: ghcr.io/homebrew-scion) instead of requiring a CLI command
• Dir browser: New folders are auto-selected after creation; added inline typeahead filter for faster path navigation
• Template bootstrap: Local storage fallback always initialized so default templates register in Hub DB
• Linked folders: .scion/ directory structure now initialized when linking a local folder as a project

Test plan

• Run scion server start on fresh install — verify wizard opens with correct runtime detection priority
• Verify "Container (Apple Virtualization)" label on macOS, Docker/Podman disabled if not installed
• Enter registry in wizard images step, verify images can be pulled
• Create new folder in dir browser — verify auto-navigation into it
• Type in filter box to filter directory entries
• After wizard completes, verify default template appears in Hub Resources and agent creation
• Link a local directory, verify .scion/ structure is created

[gemini-code-assist]

Code Review

This pull request introduces a comprehensive workstation onboarding wizard and supporting APIs, enabling first-run detection, cosmetic identity configuration, Go-native image pulling/building, and linked groves support with a server-side directory browser. Feedback on the changes highlights a critical path traversal vulnerability in the workspace template import path validation, an incorrect port number in the README quickstart, a command-parsing bug where scion server start incorrectly triggers git version checks, and a Windows-specific directory navigation bug when resolving drive roots.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

Using strings.HasPrefix(absDir, absRoot) for path validation is vulnerable to a sibling directory traversal bypass. For example, if absRoot is /home/user/project and absDir is /home/user/project-backup, the prefix check will succeed even though the directory is outside the project workspace. To prevent this, ensure that absDir is either equal to absRoot or starts with absRoot followed by the path separator.

Suggested change

	if !strings.HasPrefix(absDir, absRoot) {
	sep := string(filepath.Separator)
	if absDir != absRoot && !strings.HasPrefix(absDir, absRoot+sep) {

[gemini-code-assist]

The default port for the Web UI is 8080, not 9810 (which is the default port for the broker gRPC service). Pointing users to port 9810 in the Quick Start will result in a connection error. Please update the URL to use port 8080.

Suggested change

	Your browser will open to the onboarding wizard at `http://127.0.0.1:9810/onboarding`, which walks you through machine setup, runtime detection, harness selection, and creating your first project.
	Your browser will open to the onboarding wizard at `http://127.0.0.1:8080/onboarding`, which walks you through machine setup, runtime detection, harness selection, and creating your first project.

[gemini-code-assist]

The usesWorktrees function checks cmd.Name() to identify agent launch commands like start or run. However, scion server start also has the leaf name start, meaning it will incorrectly return true and trigger the git version check. Since server commands do not use worktrees, we should explicitly exclude commands that have server in their command path.

func usesWorktrees(cmd *cobra.Command) bool {
	if cmd.Name() == "start" || cmd.Name() == "run" {
		for c := cmd; c != nil; c = c.Parent() {
			if c.Name() == "server" {
				return false
			}
		}
		return true
	}
	return false
}

[gemini-code-assist]

On Windows, if currentPath is C:/Users, navigating up will resolve parent to C:. However, C: is treated as a drive-relative path rather than the absolute drive root C:/. To ensure correct navigation to the drive root on Windows, append a trailing slash if the parent path matches a drive letter pattern.

  private navigateUp(): void {
    const lastSlash = this.currentPath.lastIndexOf('/');
    if (lastSlash < 0) return;
    let parent = lastSlash === 0 ? '/' : this.currentPath.substring(0, lastSlash);
    if (/^[a-zA-Z]:$/.test(parent)) {
      parent += '/';
    }
    void this.navigate(parent);
  }