UX: replace flat start menu with a goal-based first-scan workflow

[jonathanweinberg]

Summary

Replace the current flat seven-task ShareSurfer start menu with a goal-based home screen optimized for a low-to-average-skill operator completing a safe first scan.

This follows the console-layer direction in #366. The current menu renders task labels twice, defaults to a preview-only dead end, exposes advanced implementation settings before the scan target, and has inconsistent cancel/back behavior.

Acceptance Criteria

• Render one goal-based home screen with Start a first scan as the recommended default, followed by saved scan, results review, ownership data, advanced tools, and exit.
• Show unavailable actions as non-selectable status rows with a short reason.
• Reduce the recommended first-scan path to target, review-location choice, recommended/custom settings, and final review/action.
• Keep advanced paths, AD/OBS/ACL details, and ownership imports behind progressive disclosure.
• Use one return-based Select/Accept/Back/Skip/Cancel prompt contract; cancellation must never become a field value.
• Return to a refreshed home screen after setup, validation, recoverable failure, or a declined action.
• Treat existing export files as unvalidated until Test-ShareSurferExport succeeds; block dashboard packaging after failed validation.
• Keep exact command previews available as technical details while leading with plain-language consequences.
• Preserve public parameters, non-interactive replay, Windows PowerShell 5.1, offline ZIP operation, plain numbered fallback, transcripts, and existing JSON/rerun outputs.
• Update first-run/operator docs and add focused renderer/state/flow tests, including 80/120-column output, cancellation, unavailable states, corrupt saved setup, and failed-validation recovery.

Validation

• git diff --check
• PowerShell parser/import checks
• Focused menu/startup flow tests
• pwsh -NoLogo -NoProfile -File tests/Invoke-ShareSurferTests.ps1
• Windows PowerShell 5.1 CI smoke after PR push

Delivery

Use a focused codex/ branch, preserve unrelated worktree files, and post commit/validation evidence back to this issue with body-file comments.

[jonathanweinberg]

Implementation ready

Implemented in commit 114e28b.

What changed

• Replaced the flat launcher menu with a six-goal home screen and visible, non-actionable unavailable states.
• Reduced the recommended first-scan path to target, review location, recommended/custom settings, and final review.
• Standardized prompt results on Select, Back, and Cancel; cancellation no longer becomes field data.
• Added safe saved-workflow context restoration, explicit replacement confirmation, current-export validation binding, and just-in-time validation before dashboard packaging.
• Deferred optional ownership/HR work from the first scan and offered an owner-mapping draft after successful validation.
• Updated the PS5.1 smoke contract and operator documentation for the new workflow.

Validation

• git diff --check — passed
• Changed-file parser check plus forced module import — passed
• tests/Invoke-ShareSurferTests.ps1 — 154/154 passed
• Standalone dashboard Vitest — 57/57 passed
• Standalone dashboard production build — passed

Validation logs: /private/tmp/sharesurfer-validation-20260709-tui/

The pre-existing AGENTS.md edit and unrelated untracked analysis/artifact files were not included.

[jonathanweinberg]

Closed

Merged PR #436 into main.

• Implementation commit: 114e28baa12b4830572ffa6df1ea563a176d35a2
• Main merge commit: ab678b17de35f4349c8260f2ab13c4d617ac40dd
• CI: both Build and test runs passed
• CI: both Windows PowerShell 5.1 smoke runs passed
• Local: PowerShell 154/154, dashboard 57/57, production build passed

The unrelated AGENTS.md edit and pre-existing untracked analysis/artifact files were preserved outside the implementation commit.