@productbrain/cli 0.1.0-beta.102 → 0.1.0-beta.1040

package/dist/commands/admin/seed.d.ts

@@ -3,6 +3,10 @@
  *
  * Seed metadata is duplicated from `convex/admin/commandManifest.ts` for CLI help
  * and ordering only — behavior is enforced server-side (STD-101).
+ *
+ * WP-433 S1b D13: the 4 substrate-repair migrations + backfill-default-team are
+ * generated from `convex/admin/seed/registry.ts` (single SSOT) into
+ * `seedRegistryEntries.generated.ts`. Run `npm run codegen` to refresh after registry edits.
  */
 import { Command } from 'commander';
 export type SeedCommandMeta = {
@@ -18,9 +22,35 @@ export type SeedCommandMeta = {
  * Order matches `ADMIN_COMMANDS` seed block in commandManifest.ts — dependency order for `seed all`.
  */
 export declare const SEED_COMMAND_ENTRIES: readonly SeedCommandMeta[];
-/** Manifest order for `pb admin seed all`. */
+/**
+ * Manifest order for `pb admin seed all`.
+ *
+ * Includes the static legacy seeds plus the registry-generated runnable entries so
+ * `seed all` exercises the full surface (D13 SSOT).
+ */
 export declare const SEED_MANIFEST_ORDER: readonly string[];
-/** Accept `knowledge` or `seed:knowledge`. */
+/**
+ * Accept short-form or long-form seed op names; return the canonical backend command name.
+ *
+ * Static entries (legacy) are stored as `seed:<slug>` (e.g. `seed:knowledge`).
+ * Registry-generated entries (WP-433 S1b) are stored as bare slugs (e.g.
+ * `seed-system-glossary`) to avoid the double-prefix `seed:seed-*` trap that
+ * arose when slugs like `seed-system-glossary` were naively stored as
+ * `seed:seed-system-glossary`.
+ *
+ * Both forms always return the backend command name (`seed:<bare-slug>`):
+ *   - `'system-glossary'` or `'seed-system-glossary'` → `'seed:seed-system-glossary'`
+ *     would be wrong; instead the bare slug stored in the map IS `seed-system-glossary`
+ *     and the backend command is `seed:seed-system-glossary`.
+ *
+ * Resolution order:
+ *   1. Try `seed:<t>` — covers legacy static entries (`seed:knowledge`) and any input
+ *      that normalises to a key already stored with the `seed:` prefix.
+ *   2. Try bare `<t>` (stripping a leading `seed:` from the input if present) —
+ *      covers registry entries stored without the prefix.
+ *      When found via bare slug, return `seed:<bare>` so the caller always gets a
+ *      backend-compatible command name.
+ */
 export declare function normalizeSeedCommandName(input: string): string;
 /**
  * Build args for seed:backfill-starter with CLI-side validation.

package/dist/commands/admin/seed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"seed.d.ts","sourceRoot":"","sources":["../../../src/commands/admin/seed.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+BpC,MAAM,MAAM,eAAe,GAAG;IAC5B,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,eAAe,EA+GjD,CAAC;AAIX,8CAA8C;AAC9C,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAA4C,CAAC;AAM9F,8CAA8C;AAC9C,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiB9D;AAID;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuB1B;AAkBD,wBAAgB,aAAa,CAC3B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAClE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmCzB;AA2FD,4DAA4D;AAC5D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAshBtD"}
+{"version":3,"file":"seed.d.ts","sourceRoot":"","sources":["../../../src/commands/admin/seed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiCpC,MAAM,MAAM,eAAe,GAAG;IAC5B,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,eAAe,EAkHjD,CAAC;AAwBX;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAEhD,CAAC;AAkBF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CA4B9D;AAID;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuB1B;AAkBD,wBAAgB,aAAa,CAC3B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAClE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsCzB;AAuRD,4DAA4D;AAC5D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAikBtD"}

package/dist/commands/admin/seed.js

@@ -3,6 +3,10 @@
  *
  * Seed metadata is duplicated from `convex/admin/commandManifest.ts` for CLI help
  * and ordering only — behavior is enforced server-side (STD-101).
+ *
+ * WP-433 S1b D13: the 4 substrate-repair migrations + backfill-default-team are
+ * generated from `convex/admin/seed/registry.ts` (single SSOT) into
+ * `seedRegistryEntries.generated.ts`. Run `npm run codegen` to refresh after registry edits.
  */
 import * as clack from '@clack/prompts';
 import { adminCall } from '../../lib/client.js';
@@ -11,9 +15,10 @@ import { CLIError, ErrorCode } from '../../lib/errors.js';
 import { ask, confirm, intro, isInteractive, log, multiselect, note, outro } from '../../lib/prompts.js';
 import { readSession } from '../../lib/session.js';
 import { isJsonMode } from '../../lib/runner.js';
+import { REGISTRY_SEED_COMMAND_ENTRIES } from './seedRegistryEntries.generated.js';
 import { confirmRiskNoteTitle, requiresAdminDestructiveConfirmation, seedAllConfirmMessage, seedMultiselectConfirmMessage, seedRunConfirmMessage, } from '../../lib/deployment.js';
 import { withSpinner } from '../../lib/spinner.js';
-import { adminBanner, bold, confirmProdAction, cyan, dim, green, heading, hint, icons, red, } from '../../lib/style.js';
+import { adminBanner, bold, confirmProdAction, cyan, dim, green, heading, hint, icons, red, yellow, } from '../../lib/style.js';
 /**
  * Order matches `ADMIN_COMMANDS` seed block in commandManifest.ts — dependency order for `seed all`.
  */
@@ -128,14 +133,70 @@ export const SEED_COMMAND_ENTRIES = [
         requiresWorkspaceId: true,
         dryRunSupported: true,
     },
+    // WP-433 S1b D13: `seed:migrate-setup-skill-entryid` migrated to the SSOT registry.
+    // It now appears via REGISTRY_SEED_COMMAND_ENTRIES below (alongside the 3 new repair ops
+    // and `backfill-default-team`).
+];
+// WP-433 S1b D13: registry-generated entries appended to the static list. These are the
+// 11 ops registered in `convex/admin/seed/registry.ts`. Filter out the prestep
+// (`align-workspace-collections`) — it cannot be invoked via `pb admin seed run`.
+const REGISTRY_RUNNABLE_ENTRIES = REGISTRY_SEED_COMMAND_ENTRIES
+    .filter((e) => e.runnable)
+    .map((e) => ({
+    name: e.name,
+    description: e.description,
+    requiresWorkspaceId: e.requiresWorkspaceId,
+    dryRunSupported: e.dryRunSupported,
+}));
+/** Combined list: static manifest entries (legacy seeds) + registry-generated entries. */
+const ALL_SEED_COMMAND_ENTRIES = [
+    ...SEED_COMMAND_ENTRIES,
+    ...REGISTRY_RUNNABLE_ENTRIES,
 ];
-const SEED_BY_NAME = new Map(SEED_COMMAND_ENTRIES.map((e) => [e.name, e]));
-/** Manifest order for `pb admin seed all`. */
-export const SEED_MANIFEST_ORDER = SEED_COMMAND_ENTRIES.map((e) => e.name);
+const SEED_BY_NAME = new Map(ALL_SEED_COMMAND_ENTRIES.map((e) => [e.name, e]));
+/**
+ * Manifest order for `pb admin seed all`.
+ *
+ * Includes the static legacy seeds plus the registry-generated runnable entries so
+ * `seed all` exercises the full surface (D13 SSOT).
+ */
+export const SEED_MANIFEST_ORDER = ALL_SEED_COMMAND_ENTRIES.map((e) => e.name);
 function shortLabel(manifestName) {
     return manifestName.startsWith('seed:') ? manifestName.slice('seed:'.length) : manifestName;
 }
-/** Accept `knowledge` or `seed:knowledge`. */
+/**
+ * Convert a manifest name (which may be a bare slug for registry-generated entries)
+ * to the backend command name expected by the admin dispatch layer.
+ *
+ * Legacy static entries are already stored as `seed:<slug>` — returned as-is.
+ * Registry-generated entries are stored as bare slugs (e.g. `seed-system-glossary`);
+ * the backend COMMAND_MAP expects `seed:<slug>`, so we add the prefix here.
+ */
+function toBackendCommand(manifestName) {
+    return manifestName.startsWith('seed:') ? manifestName : `seed:${manifestName}`;
+}
+/**
+ * Accept short-form or long-form seed op names; return the canonical backend command name.
+ *
+ * Static entries (legacy) are stored as `seed:<slug>` (e.g. `seed:knowledge`).
+ * Registry-generated entries (WP-433 S1b) are stored as bare slugs (e.g.
+ * `seed-system-glossary`) to avoid the double-prefix `seed:seed-*` trap that
+ * arose when slugs like `seed-system-glossary` were naively stored as
+ * `seed:seed-system-glossary`.
+ *
+ * Both forms always return the backend command name (`seed:<bare-slug>`):
+ *   - `'system-glossary'` or `'seed-system-glossary'` → `'seed:seed-system-glossary'`
+ *     would be wrong; instead the bare slug stored in the map IS `seed-system-glossary`
+ *     and the backend command is `seed:seed-system-glossary`.
+ *
+ * Resolution order:
+ *   1. Try `seed:<t>` — covers legacy static entries (`seed:knowledge`) and any input
+ *      that normalises to a key already stored with the `seed:` prefix.
+ *   2. Try bare `<t>` (stripping a leading `seed:` from the input if present) —
+ *      covers registry entries stored without the prefix.
+ *      When found via bare slug, return `seed:<bare>` so the caller always gets a
+ *      backend-compatible command name.
+ */
 export function normalizeSeedCommandName(input) {
     const t = input.trim();
     if (!t) {
@@ -144,15 +205,24 @@ export function normalizeSeedCommandName(input) {
             category: 'validation',
         });
     }
-    const full = t.startsWith('seed:') ? t : `seed:${t}`;
-    if (!SEED_BY_NAME.has(full)) {
-        const known = SEED_MANIFEST_ORDER.map((n) => shortLabel(n)).join(', ');
-        throw new CLIError(`Unknown seed operation "${input}". Known short names: ${known}`, {
-            code: ErrorCode.VALIDATION_FAILED,
-            category: 'validation',
-        });
+    // 1. Try the `seed:`-prefixed form (covers all legacy static entries).
+    const withPrefix = t.startsWith('seed:') ? t : `seed:${t}`;
+    if (SEED_BY_NAME.has(withPrefix))
+        return withPrefix;
+    // 2. Try the bare-slug form (covers registry-generated entries stored without `seed:`).
+    //    Strip one leading `seed:` if the input has it, so both
+    //    `seed-system-glossary` and `seed:seed-system-glossary` resolve to `seed-system-glossary`.
+    const bare = t.startsWith('seed:') ? t.slice('seed:'.length) : t;
+    if (SEED_BY_NAME.has(bare)) {
+        // Return the backend-compatible `seed:` form so callers can pass this directly
+        // to adminCall and the backend COMMAND_MAP will find it.
+        return `seed:${bare}`;
     }
-    return full;
+    const known = SEED_MANIFEST_ORDER.map((n) => shortLabel(n)).join(', ');
+    throw new CLIError(`Unknown seed operation "${input}". Known short names: ${known}`, {
+        code: ErrorCode.VALIDATION_FAILED,
+        category: 'validation',
+    });
 }
 // ─── WP-379 S5a: Starter-specific arg builders ───────────────────────────────
 /**
@@ -193,7 +263,10 @@ function requireWorkspaceId(explicit) {
     return id;
 }
 export function buildSeedArgs(manifestName, opts) {
-    const def = SEED_BY_NAME.get(manifestName);
+    // Try exact match first (legacy static entries stored as `seed:<slug>`).
+    // Fall back to bare-slug lookup (registry-generated entries stored without `seed:` prefix).
+    const bare = manifestName.startsWith('seed:') ? manifestName.slice('seed:'.length) : manifestName;
+    const def = SEED_BY_NAME.get(manifestName) ?? SEED_BY_NAME.get(bare);
     if (!def) {
         throw new CLIError(`Unknown seed command: ${manifestName}`, {
             code: ErrorCode.VALIDATION_FAILED,
@@ -225,7 +298,7 @@ export function buildSeedArgs(manifestName, opts) {
     return args;
 }
 function printSeedList() {
-    const rows = SEED_COMMAND_ENTRIES.map((e) => ({
+    const rows = ALL_SEED_COMMAND_ENTRIES.map((e) => ({
         name: shortLabel(e.name),
         description: e.description,
         workspace: e.requiresWorkspaceId ? 'yes' : 'no',
@@ -249,7 +322,7 @@ function printSeedList() {
         process.stdout.write(`${cyan(r.name.padEnd(wName))}  ${r.workspace.padEnd(wWs)}  ${dryRunStr}  ${dim(r.description)}\n`);
     }
     process.stdout.write('\n');
-    hint(`${SEED_COMMAND_ENTRIES.length} operations — behavior enforced server-side (commandManifest.ts)`);
+    hint(`${ALL_SEED_COMMAND_ENTRIES.length} operations — behavior enforced server-side (commandManifest.ts + WP-433 S1b registry)`);
     hint('pb admin seed run <name>     Run one operation');
     hint('pb admin seed all            Run all in manifest order');
 }
@@ -288,13 +361,153 @@ async function runSeedOperation(manifestName, opts) {
     const args = buildSeedArgs(manifestName, opts);
     return adminCall(manifestName, args);
 }
+/**
+ * WP-433 S1b D16 — render the system/fleet seed status report.
+ *
+ * Frame: this is a system-admin (operator) command. Output never says "your workspace" —
+ * always "the system" / "X workspaces" / a specific named workspace.
+ */
+function renderSeedStatusReport(data) {
+    if (!data || typeof data !== 'object') {
+        process.stdout.write(`${dim('No data returned.')}\n`);
+        return;
+    }
+    const report = data;
+    const mode = report.mode;
+    if (mode === 'fleet') {
+        const summary = report.summary;
+        const failures = report.failures ?? [];
+        process.stdout.write(`${bold(`System: ${summary.total} workspace${summary.total === 1 ? '' : 's'} total`)}\n\n`);
+        process.stdout.write(`  ${green(icons.pass)} ${summary.healthy} healthy (all assertions passed)\n`);
+        if (summary.failed > 0) {
+            process.stdout.write(`  ${red(icons.fail)} ${summary.failed} with failed assertions\n`);
+        }
+        if (summary.neverRun > 0) {
+            process.stdout.write(`  ${dim('!')} ${summary.neverRun} with never-run ops (likely created pre-registry)\n`);
+        }
+        if (failures.length === 0) {
+            process.stdout.write(`\n${dim('No failures or never-run ops to report.')}\n`);
+            return;
+        }
+        // Group failures by status for readable output.
+        const failedRows = failures.filter((f) => f.status === 'failed');
+        const neverRunRows = failures.filter((f) => f.status === 'never-run');
+        if (failedRows.length > 0) {
+            process.stdout.write(`\n${red('Failures:')}\n`);
+            for (const f of failedRows) {
+                process.stdout.write(`  - ${cyan(`workspace-${f.workspaceId}`)} (${bold(f.workspaceName)}) — ${f.slug}: ${f.detail}\n`);
+                if (f.recommendedRepairOp) {
+                    process.stdout.write(`    repair: ${dim(`pb admin seed run ${f.recommendedRepairOp} --workspace-id ${f.workspaceId}`)}\n`);
+                }
+            }
+        }
+        if (neverRunRows.length > 0) {
+            process.stdout.write(`\n${dim('Never-run ops:')}\n`);
+            for (const f of neverRunRows) {
+                process.stdout.write(`  - ${cyan(`workspace-${f.workspaceId}`)} (${bold(f.workspaceName)}) — ${f.slug} never invoked\n`);
+                if (f.recommendedRepairOp) {
+                    process.stdout.write(`    repair: ${dim(`pb admin seed run ${f.recommendedRepairOp} --workspace-id ${f.workspaceId}`)}\n`);
+                }
+            }
+        }
+        return;
+    }
+    if (mode === 'drilldown') {
+        const workspaceName = report.workspaceName;
+        const workspaceId = report.workspaceId;
+        const rows = report.rows ?? [];
+        if (rows.length === 0) {
+            process.stdout.write(`${bold(`Workspace: ${workspaceName}`)} ${dim(`(${workspaceId})`)}\n\n`);
+            process.stdout.write(`${dim('No registered ops.')}\n`);
+            return;
+        }
+        // TEN-2021: group by level so non-tech operators don't conflate
+        // platform-substrate ops with on-demand repair tools.
+        const levelBySlug = new Map(REGISTRY_SEED_COMMAND_ENTRIES.map((e) => [e.name, e.level]));
+        const platformRows = rows.filter((r) => levelBySlug.get(r.slug) === 'platform');
+        const workspaceRows = rows.filter((r) => levelBySlug.get(r.slug) === 'workspace');
+        const repairRows = rows.filter((r) => levelBySlug.get(r.slug) === 'repair');
+        // TEN-2019 known soft-failure: platform-source workspace has no curated
+        // methods/skills entries to project. Not a workspace bug — render as ⚠.
+        const PLATFORM_SOURCE_EMPTY_MARKER = 'neither methods nor skills collection found';
+        const isPlatformSourceEmptyRow = (r) => r.status === 'failed' && r.detail.includes(PLATFORM_SOURCE_EMPTY_MARKER);
+        // ── Header: workspace identity + at-a-glance health summary ────────────────
+        const isSeedRow = (r) => {
+            const lvl = levelBySlug.get(r.slug);
+            return lvl === 'platform' || lvl === 'workspace';
+        };
+        const seedRows = rows.filter(isSeedRow);
+        const passCount = seedRows.filter((r) => r.status === 'passed').length;
+        const warnCount = seedRows.filter(isPlatformSourceEmptyRow).length;
+        const failCount = seedRows.filter((r) => r.status === 'failed' && !isPlatformSourceEmptyRow(r)).length;
+        process.stdout.write(`${bold('Workspace:')}  ${workspaceName}\n`);
+        process.stdout.write(`${bold('ID:')}         ${dim(workspaceId)}\n`);
+        process.stdout.write(`${bold('Health:')}     ${green(`${passCount} ${icons.pass}`)}   ${yellow(`${warnCount} ⚠`)}   ${red(`${failCount} ${icons.fail}`)}\n\n`);
+        // ── Row renderer: only show detail on ⚠ / ✗ via indented sub-line ──────────
+        const renderRow = (r) => {
+            const isWarn = isPlatformSourceEmptyRow(r);
+            const icon = isWarn ? yellow('⚠')
+                : r.status === 'passed' ? green(icons.pass)
+                    : r.status === 'failed' ? red(icons.fail)
+                        : dim('-');
+            process.stdout.write(`  ${icon}  ${cyan(r.slug)}\n`);
+            // Detail sub-line only for genuine signals (⚠ or ✗). ✓ and "-" are noise.
+            if (isWarn) {
+                process.stdout.write(`     ${dim('└─ Platform-curated content not yet published (TEN-2019).')}\n`);
+            }
+            else if (r.status === 'failed') {
+                const cleaned = r.detail.replace(new RegExp(`^${r.slug} assertion failed:\\s*`), '');
+                process.stdout.write(`     ${dim(`└─ ${cleaned}`)}\n`);
+            }
+        };
+        if (platformRows.length > 0) {
+            process.stdout.write(`${bold('Seeded on workspace creation')}\n`);
+            process.stdout.write(`${dim('Runs automatically when a new workspace is created.')}\n\n`);
+            for (const r of platformRows)
+                renderRow(r);
+            process.stdout.write('\n');
+        }
+        if (workspaceRows.length > 0) {
+            process.stdout.write(`${bold('Owner-level defaults')}\n`);
+            process.stdout.write(`${dim('Per-workspace state seeded for the owner.')}\n\n`);
+            for (const r of workspaceRows)
+                renderRow(r);
+            process.stdout.write('\n');
+        }
+        if (repairRows.length > 0) {
+            process.stdout.write(`${bold('Repair commands (manual)')}\n`);
+            process.stdout.write(`${dim('Used to fix older or drifted workspaces. Usually nothing to do.')}\n\n`);
+            for (const r of repairRows)
+                renderRow(r);
+        }
+        return;
+    }
+    if (mode === 'op-filter') {
+        const slug = report.slug;
+        const rows = report.rows ?? [];
+        process.stdout.write(`${bold(`Op: ${slug}`)} ${dim(`(${rows.length} workspace${rows.length === 1 ? '' : 's'})`)}\n\n`);
+        if (rows.length === 0) {
+            process.stdout.write(`${dim('Op not found in registry, or no workspaces exist.')}\n`);
+            return;
+        }
+        for (const r of rows) {
+            const icon = r.status === 'passed' ? green(icons.pass)
+                : r.status === 'failed' ? red(icons.fail)
+                    : dim('-');
+            const detail = r.detail ? `  ${dim(r.detail)}` : '';
+            process.stdout.write(`  ${icon}  ${cyan(`workspace-${r.workspaceId}`)} (${bold(r.workspaceName)})${detail}\n`);
+        }
+        return;
+    }
+    process.stdout.write(`${dim('Unknown report mode.')}\n`);
+}
 /** Attach seed subcommands to the `seed` Commander node. */
 export function attachSeedCommands(seed) {
     // Default action when `pb admin seed` is invoked with no subcommand.
     seed.action(async () => {
         if (isJsonMode()) {
             process.stdout.write(JSON.stringify({
-                operations: SEED_COMMAND_ENTRIES.map((e) => ({
+                operations: ALL_SEED_COMMAND_ENTRIES.map((e) => ({
                     name: shortLabel(e.name),
                     requiresWorkspaceId: e.requiresWorkspaceId,
                     dryRunSupported: e.dryRunSupported,
@@ -313,7 +526,7 @@ export function attachSeedCommands(seed) {
         if (isInteractive()) {
             intro('Seed Operations');
             // methodology-preset needs --preset-id, not suitable for interactive menu
-            const menuEntries = SEED_COMMAND_ENTRIES.filter((e) => e.name !== 'seed:methodology-preset');
+            const menuEntries = ALL_SEED_COMMAND_ENTRIES.filter((e) => e.name !== 'seed:methodology-preset');
             const selected = await multiselect({
                 message: 'Select operations to run (space to toggle, enter to confirm):',
                 options: menuEntries.map((e) => ({
@@ -363,7 +576,7 @@ export function attachSeedCommands(seed) {
                 try {
                     await withSpinner(`Running ${shortLabel(name)}`, async () => {
                         const args = buildSeedArgs(name, { workspaceId });
-                        await adminCall(name, args);
+                        await adminCall(toBackendCommand(name), args);
                     });
                     results.push({ name, ok: true });
                 }
@@ -389,23 +602,23 @@ export function attachSeedCommands(seed) {
             return;
         }
         // Non-interactive (non-JSON) fallback — existing static preview
-        process.stdout.write(`${heading('Seed operations')}  ${dim(`(${SEED_COMMAND_ENTRIES.length})`)}\n\n`);
+        process.stdout.write(`${heading('Seed operations')}  ${dim(`(${ALL_SEED_COMMAND_ENTRIES.length})`)}\n\n`);
         // Show first 6 entries as a preview
-        const preview = SEED_COMMAND_ENTRIES.slice(0, 6);
+        const preview = ALL_SEED_COMMAND_ENTRIES.slice(0, 6);
         const wName = Math.max(...preview.map((e) => shortLabel(e.name).length));
         for (const e of preview) {
             const label = shortLabel(e.name);
             const flags = e.dryRunSupported ? dim('  dry-run ✓') : '';
             process.stdout.write(`  ${cyan(label.padEnd(wName))}  ${dim(e.description)}${flags}\n`);
         }
-        if (SEED_COMMAND_ENTRIES.length > 6) {
-            process.stdout.write(`  ${dim(`... ${SEED_COMMAND_ENTRIES.length - 6} more — run pb admin seed list`)}\n`);
+        if (ALL_SEED_COMMAND_ENTRIES.length > 6) {
+            process.stdout.write(`  ${dim(`... ${ALL_SEED_COMMAND_ENTRIES.length - 6} more — run pb admin seed list`)}\n`);
         }
         process.stdout.write('\n');
         process.stdout.write(`  ${cyan('pb admin seed list')}             ${dim('Full list with workspace + dry-run flags')}\n`);
         process.stdout.write(`  ${cyan('pb admin seed run <name>')}       ${dim('Run one operation')}\n`);
         process.stdout.write(`  ${cyan('pb admin seed all')}              ${dim('Run all in manifest order')}\n`);
-        process.stdout.write(`  ${cyan('pb admin seed status')}           ${dim('Workspace readiness signals')}\n`);
+        process.stdout.write(`  ${cyan('pb admin seed status')}           ${dim('Fleet-wide seed health (system admin)')}\n`);
         process.stdout.write('\n');
     });
     seed
@@ -414,22 +627,56 @@ export function attachSeedCommands(seed) {
         .action(() => {
         printSeedList();
     });
+    // WP-433 S1b D16 — fleet-wide seed status (system-admin command).
+    // Default behaviour: scan ALL workspaces in the deployment and report summary + failures.
+    // `--workspace-id <id>` drilldown flag triages a single workspace.
+    // `--op <slug>` fleet view filtered to one op.
+    // `--failed-only` fleet view skipping healthy workspaces.
+    // `--legacy-readiness` falls back to the pre-S1b workspace-readiness signals view.
     seed
         .command('status')
-        .description('Readiness + workspace collection signals (no per-seed run log yet)')
-        .option('--workspace-id <id>', 'Workspace id (defaults to session workspace when set)')
+        .description('WP-433 S1b D16: Fleet-wide seed health (system admin). Default scans ALL workspaces. ' +
+        'Use --workspace-id to drill down, --op to filter one op, --failed-only for failures only.')
+        .option('--workspace-id <id>', 'Drill down to one workspace (operator triage)')
+        .option('--op <slug>', 'Filter fleet view to one op slug')
+        .option('--failed-only', 'Skip healthy workspaces; show failures only', false)
+        .option('--legacy-readiness', 'Use pre-S1b workspace readiness signals view', false)
         .action(async (options) => {
+        if (options.legacyReadiness) {
+            if (!isJsonMode()) {
+                try {
+                    adminBanner(resolveAdminConfig().siteUrl);
+                }
+                catch { /* not configured */ }
+                intro('Seed: status (legacy readiness)');
+            }
+            await printSeedStatus(options.workspaceId);
+            if (!isJsonMode()) {
+                outro('Read-only status check complete');
+            }
+            return;
+        }
         if (!isJsonMode()) {
             try {
                 adminBanner(resolveAdminConfig().siteUrl);
             }
             catch { /* not configured */ }
-            intro('Seed: status');
+            intro('Seed status — system / fleet view');
         }
-        await printSeedStatus(options.workspaceId);
-        if (!isJsonMode()) {
-            outro('Read-only status check complete');
+        const callArgs = {};
+        if (options.workspaceId)
+            callArgs.workspaceId = options.workspaceId;
+        if (options.op)
+            callArgs.opSlug = options.op;
+        if (options.failedOnly)
+            callArgs.failedOnly = true;
+        const data = await withSpinner('Scanning the system', () => adminCall('admin:seed-status', callArgs));
+        if (isJsonMode()) {
+            process.stdout.write(JSON.stringify(data, null, 2) + '\n');
+            return;
         }
+        renderSeedStatusReport(data);
+        outro('Done');
     });
     seed
         .command('run')
@@ -442,7 +689,6 @@ export function attachSeedCommands(seed) {
         .action(async (name, options) => {
         const { siteUrl } = resolveAdminConfig();
         const manifestName = normalizeSeedCommandName(name);
-        const meta = SEED_BY_NAME.get(manifestName);
         const needsConfirm = requiresAdminDestructiveConfirmation(siteUrl);
         // Remote / prod deployments require confirmation — not local or known dev-cloud.
         if (needsConfirm) {
@@ -663,7 +909,7 @@ export function attachSeedCommands(seed) {
                 }
                 try {
                     const args = buildSeedArgs(cmd, { workspaceId: options.workspaceId, dryRun: options.dryRun, presetId: options.presetId });
-                    await adminCall(cmd, args);
+                    await adminCall(toBackendCommand(cmd), args);
                     results.push({ command: cmd, ok: true });
                 }
                 catch (e) {
@@ -695,7 +941,7 @@ export function attachSeedCommands(seed) {
             s.start(`${current}/${total}  ${label}`);
             try {
                 const args = buildSeedArgs(cmd, { workspaceId: options.workspaceId, dryRun: options.dryRun, presetId: options.presetId });
-                await adminCall(cmd, args);
+                await adminCall(toBackendCommand(cmd), args);
                 s.stop(`${green(icons.pass)} ${label}`);
                 results.push({ command: cmd, ok: true });
             }