fix(grant): resolve repos by name, github:handle grantees, repo clone URL (COR-699)

[toothbrush]

https://entire.io/gh/entireio/cli/trails/681

Fixes COR-699. Server side: https://github.com/entirehq/entiredb/pull/2232.

Granting a friend repo access via the CLI was broken and awkward. Now:

Resolve repos by name (the actual bug). entire grant repo {list,add,remove} <name> --project <name> used to always fail with no repo named "X" even when it existed — it read the wrong field off the name-filtered list response. Fixed.

Address grantees by provider:handle, not flag soup. Add/remove now take a positional grantee; the CLI resolves the handle to the provider account for you.

# before
entire grant repo add 01KW6766RDCQGB0PXSRSAK24P9 --project paul --role writer --provider github --provider-user-id 1000323

# now
entire grant repo add dogbark github:friend --project paul --role writer
entire grant repo remove dogbark github:friend --project paul

Same positional grantee for grant org and grant project add/remove. remove also still accepts an account ULID.

grant … list shows friendly names + effective access. Listings now render a GRANTEE name (handle/org name) alongside the ID (ULID, kept for revoke), plus a SOURCE column distinguishing direct grants from those inherited via the owning project and from the owning account/org. Backed by the server change in entiredb#2232.

entire repo get shows the clone URL. New REMOTE field with the entire:// URL to paste into git clone.

---

Note

Medium Risk
Touches access-grant CLI flows and API client grant shapes; behavior changes for how users grant/revoke access, though logic is mostly resolution and routing rather than new authorization rules.

Overview
Fixes COR-699 CLI pain around repo grants and discovery: repo-by-name resolution, grantee addressing, richer grant listings, and clone URLs on repo get.

Repo name resolution. resolveRepoRef now reads the singular repo field from a name-filtered ListProjectRepos response instead of the plural repos array, so entire grant repo … <name> --project … can find repos that exist.

Grant CLI UX. Org/project/repo add and remove take a positional grantee (github:alice) instead of --provider / --provider-user-id (and the old dual revoke flag modes). resolveGranteeProvider resolves handles to provider user ids for by-provider API routes; remove still accepts an account ULID via typed-id revoke helpers. Grant list tables add friendly GRANTEE, ID, and SOURCE (using new granteeName / source on generated grant types).

entire repo get. Adds a REMOTE column with the synthesized entire:// clone URL (or - when not provisioned).

Lint. Drops the ireturn linter and related nolint/exclusions from .golangci.yaml.

^{Reviewed by Cursor Bugbot for commit b6e9729. Configure here.}

[Copilot]

Pull request overview

Fixes COR-699 by correcting repo-by-name resolution in control-plane grant flows, simplifying grantee addressing to provider:handle, and enhancing entire repo get output with a copy-pastable clone URL.

Changes:

• Fix resolveRepoRef to read the server’s singular repo field for name-filtered repo lookups (avoids false “no repo named …” failures).
• Update grant org/project/repo add/remove UX to accept a positional provider:handle grantee, resolving it to (provider, providerUserId) before calling by-provider routes (with project/repo remove still accepting an account ULID).
• Add a REMOTE field to entire repo get output showing the synthesized entire:// clone URL when available; remove the ireturn linter configuration.

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
cmd/entire/cli/resolveref.go	Adds grantee handle→provider-ID resolver and fixes repo-by-name resolution to use singular repo.
cmd/entire/cli/resolveref_test.go	Updates repo resolution fixture and adds regression tests for grantee provider resolution.
cmd/entire/cli/repo.go	Extends repo get output with a REMOTE column for the entire:// clone URL.
cmd/entire/cli/repo_test.go	Adds tests validating repo get row includes REMOTE and falls back to -.
cmd/entire/cli/grant.go	Switches grant add/remove commands to positional provider:handle grantees; simplifies revoke routing helpers.
cmd/entire/cli/grant_wiring_test.go	Updates route-wiring tests to cover handle resolution + by-provider vs ULID typed-id revoke paths.
cmd/entire/cli/grant_test.go	Removes tests for deleted parseGranteeMode helper.
cmd/entire/cli/agentimport/agentimport.go	Removes //nolint:ireturn now that the linter is dropped.
.golangci.yaml	Disables ireturn linter and removes its configuration/exclusions.

[toothbrush]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit b6e9729. Configure here.}