@productbrain/cli 0.1.0-beta.1406 → 0.1.0-beta.14069

package/dist/commands/admin/seed.js

@@ -1,160 +1,32 @@
 /**
  * pb admin seed — workspace and platform seed operations (WP-312 S3, FEAT-970).
  *
- * Seed metadata is duplicated from `convex/admin/commandManifest.ts` for CLI help
- * and ordering only — behavior is enforced server-side (STD-101).
- *
- * WP-433 S1b D13: the 4 substrate-repair migrations + backfill-default-team are
- * generated from `convex/admin/seed/registry.ts` (single SSOT) into
- * `seedRegistryEntries.generated.ts`. Run `npm run codegen` to refresh after registry edits.
+ * The seed list is generated from `convex/admin/commandManifestSeeds.ts` and
+ * `convex/admin/seed/registry.ts` into `seedRegistryEntries.generated.ts` (`npm run codegen`)
+ * for CLI help and ordering only — behavior is enforced server-side (STD-101).
  */
 import * as clack from '@clack/prompts';
 import { adminCall } from '../../lib/client.js';
-import { resolveAdminConfig } from '../../lib/config.js';
+import { resolveAdminConfig } from '../../lib/adminConfig.js';
 import { CLIError, ErrorCode } from '../../lib/errors.js';
 import { ask, confirm, intro, isInteractive, log, multiselect, note, outro } from '../../lib/prompts.js';
 import { readSession } from '../../lib/session.js';
 import { isJsonMode } from '../../lib/runner.js';
-import { REGISTRY_SEED_COMMAND_ENTRIES } from './seedRegistryEntries.generated.js';
+import { MANIFEST_SEED_COMMAND_ENTRIES, REGISTRY_SEED_COMMAND_ENTRIES } from './seedRegistryEntries.generated.js';
 import { confirmRiskNoteTitle, requiresAdminDestructiveConfirmation, seedAllConfirmMessage, seedMultiselectConfirmMessage, seedRunConfirmMessage, } from '../../lib/deployment.js';
 import { withSpinner } from '../../lib/spinner.js';
 import { adminBanner, bold, confirmProdAction, cyan, dim, green, heading, hint, icons, red, yellow, } from '../../lib/style.js';
 /**
- * Order matches `ADMIN_COMMANDS` seed block in commandManifest.ts — dependency order for `seed all`.
+ * Every seed operation `pb admin seed` can run, in `seed all` dependency order: the manifest
+ * seeds, then the registry ops that can run from the CLI (a transactional prestep cannot).
  */
 export const SEED_COMMAND_ENTRIES = [
-    {
-        name: 'seed:artifacts',
-        description: 'Seed Artifacts collection and related glossary entries (chainId, format, audience)',
-        requiresWorkspaceId: true,
-        dryRunSupported: false,
-    },
-    {
-        name: 'seed:chain-native-bet-constellation',
-        description: 'Seed the chain-native bet constellation for a workspace',
-        requiresWorkspaceId: false,
-        dryRunSupported: false,
-    },
-    {
-        name: 'seed:definitions-chain',
-        description: 'Seed the definitions chain collection',
-        requiresWorkspaceId: true,
-        dryRunSupported: false,
-    },
-    {
-        name: 'seed:domain-teams',
-        description: 'Seed domain teams collection entries',
-        requiresWorkspaceId: true,
-        dryRunSupported: true,
-    },
-    {
-        name: 'seed:features',
-        description: 'Seed Features collection and initial trust-audit entries',
-        requiresWorkspaceId: true,
-        dryRunSupported: false,
-    },
-    {
-        name: 'seed:hierarchy-tier1',
-        description: 'Apply Tier 1 hierarchy migrations (landscape thinkingLayer, key-results fields)',
-        requiresWorkspaceId: false,
-        dryRunSupported: true,
-    },
-    {
-        name: 'seed:id-prefixes',
-        description: 'Seed collection ID prefixes for a workspace',
-        requiresWorkspaceId: true,
-        dryRunSupported: false,
-    },
-    {
-        name: 'seed:knowledge',
-        description: 'Seed initial knowledge base (Standards, Features collections + labels)',
-        requiresWorkspaceId: true,
-        dryRunSupported: false,
-    },
-    {
-        name: 'seed:process-templates',
-        description: 'Seed process templates collection for a workspace',
-        requiresWorkspaceId: true,
-        dryRunSupported: false,
-    },
-    {
-        name: 'seed:proposals',
-        description: 'Seed governance proposals collection',
-        requiresWorkspaceId: true,
-        dryRunSupported: false,
-    },
-    {
-        name: 'seed:readiness-config',
-        description: 'Migrate readiness config (readinessFloor, readinessWeight, readinessLayer) on all collections',
-        requiresWorkspaceId: false,
-        dryRunSupported: true,
-    },
-    {
-        name: 'seed:semantic-types-all',
-        description: 'Seed semantic types into all workspaces (cross-workspace action)',
-        requiresWorkspaceId: false,
-        dryRunSupported: false,
-    },
-    {
-        name: 'seed:migrate-scope-required-fields',
-        description: 'Fix scope semantic type: update requiredFields from description to purpose across all workspaces (TEN-346)',
-        requiresWorkspaceId: false,
-        dryRunSupported: true,
-    },
-    {
-        name: 'seed:writing-guidance',
-        description: 'Seed writing guidance entries for a workspace',
-        requiresWorkspaceId: true,
-        dryRunSupported: true,
-    },
-    // ─── WP-379 S5a: Starter Setup seed operations ─────────────────────────────
-    {
-        name: 'seed:show-starter',
-        description: 'List 18 Starter Setup assets for a workspace with body previews, lockLevel, and gate summary',
-        requiresWorkspaceId: true,
-        dryRunSupported: false,
-    },
-    {
-        name: 'seed:backfill-starter',
-        description: 'Idempotent bulk seed of Starter Setup bundle across workspaces. Defaults to dry-run.',
-        requiresWorkspaceId: false,
-        dryRunSupported: true,
-        dangerous: true,
-    },
-    {
-        name: 'seed:migrate-starter-fields',
-        description: 'STUB (WP-379 S5b): backfill explicit lockLevel + gate columns on existing setup-assets entries.',
-        requiresWorkspaceId: true,
-        dryRunSupported: true,
-    },
-    // WP-433 S1b D13: `seed:migrate-setup-skill-entryid` migrated to the SSOT registry.
-    // It now appears via REGISTRY_SEED_COMMAND_ENTRIES below (alongside the 3 new repair ops
-    // and `backfill-default-team`).
-];
-// WP-433 S1b D13: registry-generated entries appended to the static list. These are the
-// 11 ops registered in `convex/admin/seed/registry.ts`. Filter out the prestep
-// (`align-workspace-collections`) — it cannot be invoked via `pb admin seed run`.
-const REGISTRY_RUNNABLE_ENTRIES = REGISTRY_SEED_COMMAND_ENTRIES
-    .filter((e) => e.runnable)
-    .map((e) => ({
-    name: e.name,
-    description: e.description,
-    requiresWorkspaceId: e.requiresWorkspaceId,
-    dryRunSupported: e.dryRunSupported,
-}));
-/** Combined list: static manifest entries (legacy seeds) + registry-generated entries. */
-const ALL_SEED_COMMAND_ENTRIES = [
-    ...SEED_COMMAND_ENTRIES,
-    ...REGISTRY_RUNNABLE_ENTRIES,
+    ...MANIFEST_SEED_COMMAND_ENTRIES,
+    ...REGISTRY_SEED_COMMAND_ENTRIES.filter((e) => e.runnable).map(({ name, description, requiresWorkspaceId, dryRunSupported }) => ({ name, description, requiresWorkspaceId, dryRunSupported })),
 ];
-const SEED_BY_NAME = new Map(ALL_SEED_COMMAND_ENTRIES.map((e) => [e.name, e]));
-/**
- * Manifest order for `pb admin seed all`.
- *
- * Includes the static legacy seeds plus the registry-generated runnable entries so
- * `seed all` exercises the full surface (D13 SSOT).
- */
-export const SEED_MANIFEST_ORDER = ALL_SEED_COMMAND_ENTRIES.map((e) => e.name);
+const SEED_BY_NAME = new Map(SEED_COMMAND_ENTRIES.map((e) => [e.name, e]));
+/** Manifest order for `pb admin seed all`. */
+export const SEED_MANIFEST_ORDER = SEED_COMMAND_ENTRIES.map((e) => e.name);
 function shortLabel(manifestName) {
     return manifestName.startsWith('seed:') ? manifestName.slice('seed:'.length) : manifestName;
 }
@@ -162,8 +34,8 @@ function shortLabel(manifestName) {
  * Convert a manifest name (which may be a bare slug for registry-generated entries)
  * to the backend command name expected by the admin dispatch layer.
  *
- * Legacy static entries are already stored as `seed:<slug>` — returned as-is.
- * Registry-generated entries are stored as bare slugs (e.g. `seed-system-glossary`);
+ * Manifest entries are already stored as `seed:<slug>` — returned as-is.
+ * Registry-generated entries are stored as bare slugs (e.g. `seed-default-team`);
  * the backend COMMAND_MAP expects `seed:<slug>`, so we add the prefix here.
  */
 function toBackendCommand(manifestName) {
@@ -172,19 +44,19 @@ function toBackendCommand(manifestName) {
 /**
  * Accept short-form or long-form seed op names; return the canonical backend command name.
  *
- * Static entries (legacy) are stored as `seed:<slug>` (e.g. `seed:knowledge`).
+ * Manifest entries are stored as `seed:<slug>` (e.g. `seed:knowledge`).
  * Registry-generated entries (WP-433 S1b) are stored as bare slugs (e.g.
- * `seed-system-glossary`) to avoid the double-prefix `seed:seed-*` trap that
- * arose when slugs like `seed-system-glossary` were naively stored as
- * `seed:seed-system-glossary`.
+ * `seed-default-team`) to avoid the double-prefix `seed:seed-*` trap that
+ * arose when slugs like `seed-default-team` were naively stored as
+ * `seed:seed-default-team`.
  *
  * Both forms always return the backend command name (`seed:<bare-slug>`):
- *   - `'system-glossary'` or `'seed-system-glossary'` → `'seed:seed-system-glossary'`
- *     would be wrong; instead the bare slug stored in the map IS `seed-system-glossary`
- *     and the backend command is `seed:seed-system-glossary`.
+ *   - `'default-team'` or `'seed-default-team'` → `'seed:seed-default-team'`
+ *     would be wrong; instead the bare slug stored in the map IS `seed-default-team`
+ *     and the backend command is `seed:seed-default-team`.
  *
  * Resolution order:
- *   1. Try `seed:<t>` — covers legacy static entries (`seed:knowledge`) and any input
+ *   1. Try `seed:<t>` — covers manifest entries (`seed:knowledge`) and any input
  *      that normalises to a key already stored with the `seed:` prefix.
  *   2. Try bare `<t>` (stripping a leading `seed:` from the input if present) —
  *      covers registry entries stored without the prefix.
@@ -199,13 +71,13 @@ export function normalizeSeedCommandName(input) {
             category: 'validation',
         });
     }
-    // 1. Try the `seed:`-prefixed form (covers all legacy static entries).
+    // 1. Try the `seed:`-prefixed form (covers all manifest entries).
     const withPrefix = t.startsWith('seed:') ? t : `seed:${t}`;
     if (SEED_BY_NAME.has(withPrefix))
         return withPrefix;
     // 2. Try the bare-slug form (covers registry-generated entries stored without `seed:`).
     //    Strip one leading `seed:` if the input has it, so both
-    //    `seed-system-glossary` and `seed:seed-system-glossary` resolve to `seed-system-glossary`.
+    //    `seed-default-team` and `seed:seed-default-team` resolve to `seed-default-team`.
     const bare = t.startsWith('seed:') ? t.slice('seed:'.length) : t;
     if (SEED_BY_NAME.has(bare)) {
         // Return the backend-compatible `seed:` form so callers can pass this directly
@@ -218,32 +90,8 @@ export function normalizeSeedCommandName(input) {
         category: 'validation',
     });
 }
-// ─── WP-379 S5a: Starter-specific arg builders ───────────────────────────────
-/**
- * Build args for seed:backfill-starter with CLI-side validation.
- *
- * Rules:
- *   - confirm:true requires workspaceScope to be explicitly provided
- *   - dryRun defaults to true when confirm is false
- *
- * Exported for testing.
- */
-export function buildBackfillStarterArgs(opts) {
-    const confirm = opts.confirm ?? false;
-    const dryRun = opts.dryRun ?? !confirm;
-    if (confirm && !opts.workspaceScope) {
-        throw new CLIError('backfill-starter: --workspace-scope (dev|prod|all) is required when --confirm is passed. ' +
-            'Specify which deployment scope to seed to prevent accidental cross-scope writes.', { code: ErrorCode.VALIDATION_FAILED, category: 'validation' });
-    }
-    const validScopes = ['dev', 'prod', 'all'];
-    if (opts.workspaceScope && !validScopes.includes(opts.workspaceScope)) {
-        throw new CLIError(`backfill-starter: --workspace-scope must be one of: ${validScopes.join(', ')}. Got: "${opts.workspaceScope}"`, { code: ErrorCode.VALIDATION_FAILED, category: 'validation' });
-    }
-    const args = { dryRun, confirm };
-    if (opts.workspaceScope)
-        args.workspaceScope = opts.workspaceScope;
-    return args;
-}
+// WP-379 S5a's backfill-starter arg builder (buildBackfillStarterArgs) deleted at WP-776
+// S0 along with the seed:backfill-starter command it validated for.
 function resolveWorkspaceId(explicit) {
     if (explicit)
         return explicit;
@@ -257,7 +105,7 @@ function requireWorkspaceId(explicit) {
     return id;
 }
 export function buildSeedArgs(manifestName, opts) {
-    // Try exact match first (legacy static entries stored as `seed:<slug>`).
+    // Try exact match first (manifest entries stored as `seed:<slug>`).
     // Fall back to bare-slug lookup (registry-generated entries stored without `seed:` prefix).
     const bare = manifestName.startsWith('seed:') ? manifestName.slice('seed:'.length) : manifestName;
     const def = SEED_BY_NAME.get(manifestName) ?? SEED_BY_NAME.get(bare);
@@ -268,19 +116,14 @@ export function buildSeedArgs(manifestName, opts) {
         });
     }
     const args = {};
-    if (def.requiresWorkspaceId) {
+    if (def.requiresWorkspaceId)
         args.workspaceId = requireWorkspaceId(opts.workspaceId);
-    }
-    else if (opts.workspaceId && manifestName === 'seed:chain-native-bet-constellation') {
-        args.workspaceId = opts.workspaceId;
-    }
-    if (def.dryRunSupported && opts.dryRun) {
+    if (def.dryRunSupported && opts.dryRun)
         args.dryRun = true;
-    }
     return args;
 }
 function printSeedList() {
-    const rows = ALL_SEED_COMMAND_ENTRIES.map((e) => ({
+    const rows = SEED_COMMAND_ENTRIES.map((e) => ({
         name: shortLabel(e.name),
         description: e.description,
         workspace: e.requiresWorkspaceId ? 'yes' : 'no',
@@ -304,7 +147,7 @@ function printSeedList() {
         process.stdout.write(`${cyan(r.name.padEnd(wName))}  ${r.workspace.padEnd(wWs)}  ${dryRunStr}  ${dim(r.description)}\n`);
     }
     process.stdout.write('\n');
-    hint(`${ALL_SEED_COMMAND_ENTRIES.length} operations — behavior enforced server-side (commandManifest.ts + WP-433 S1b registry)`);
+    hint(`${SEED_COMMAND_ENTRIES.length} operations — behavior enforced server-side (commandManifest.ts + WP-433 S1b registry)`);
     hint('pb admin seed run <name>     Run one operation');
     hint('pb admin seed all            Run all in manifest order');
 }
@@ -371,15 +214,15 @@ function renderSeedStatusReport(data) {
             process.stdout.write(`\n${dim('No failures or never-run ops to report.')}\n`);
             return;
         }
-        // Group failures by status for readable output.
-        const failedRows = failures.filter((f) => f.status === 'failed');
+        const failedRows = failures.filter((f) => f.status === 'failed' || f.status === 'stale'); // 'stale' rides with 'failed'
         const neverRunRows = failures.filter((f) => f.status === 'never-run');
+        const repairOpLine = (op, wsId) => `pb admin seed run ${op} --workspace-id ${wsId}`;
         if (failedRows.length > 0) {
             process.stdout.write(`\n${red('Failures:')}\n`);
             for (const f of failedRows) {
                 process.stdout.write(`  - ${cyan(`workspace-${f.workspaceId}`)} (${bold(f.workspaceName)}) — ${f.slug}: ${f.detail}\n`);
                 if (f.recommendedRepairOp) {
-                    process.stdout.write(`    repair: ${dim(`pb admin seed run ${f.recommendedRepairOp} --workspace-id ${f.workspaceId}`)}\n`);
+                    process.stdout.write(`    repair: ${dim(repairOpLine(f.recommendedRepairOp, f.workspaceId))}\n`);
                 }
             }
         }
@@ -388,7 +231,7 @@ function renderSeedStatusReport(data) {
             for (const f of neverRunRows) {
                 process.stdout.write(`  - ${cyan(`workspace-${f.workspaceId}`)} (${bold(f.workspaceName)}) — ${f.slug} never invoked\n`);
                 if (f.recommendedRepairOp) {
-                    process.stdout.write(`    repair: ${dim(`pb admin seed run ${f.recommendedRepairOp} --workspace-id ${f.workspaceId}`)}\n`);
+                    process.stdout.write(`    repair: ${dim(repairOpLine(f.recommendedRepairOp, f.workspaceId))}\n`);
                 }
             }
         }
@@ -430,13 +273,16 @@ function renderSeedStatusReport(data) {
             const isWarn = isPlatformSourceEmptyRow(r);
             const icon = isWarn ? yellow('⚠')
                 : r.status === 'passed' ? green(icons.pass)
-                    : r.status === 'failed' ? red(icons.fail)
+                    : (r.status === 'failed' || r.status === 'stale') ? red(icons.fail) // 'stale' (round 24): same action, different cause
                         : dim('-');
             process.stdout.write(`  ${icon}  ${cyan(r.slug)}\n`);
             // Detail sub-line only for genuine signals (⚠ or ✗). ✓ and "-" are noise.
             if (isWarn) {
                 process.stdout.write(`     ${dim('└─ Platform-curated content not yet published (TEN-2019).')}\n`);
             }
+            else if (r.status === 'stale') {
+                process.stdout.write(`     ${dim(`└─ ${r.detail}`)}\n`);
+            }
             else if (r.status === 'failed') {
                 const cleaned = r.detail.replace(new RegExp(`^${r.slug} assertion failed:\\s*`), '');
                 process.stdout.write(`     ${dim(`└─ ${cleaned}`)}\n`);
@@ -474,7 +320,7 @@ function renderSeedStatusReport(data) {
         }
         for (const r of rows) {
             const icon = r.status === 'passed' ? green(icons.pass)
-                : r.status === 'failed' ? red(icons.fail)
+                : (r.status === 'failed' || r.status === 'stale') ? red(icons.fail)
                     : dim('-');
             const detail = r.detail ? `  ${dim(r.detail)}` : '';
             process.stdout.write(`  ${icon}  ${cyan(`workspace-${r.workspaceId}`)} (${bold(r.workspaceName)})${detail}\n`);
@@ -489,7 +335,7 @@ export function attachSeedCommands(seed) {
     seed.action(async () => {
         if (isJsonMode()) {
             process.stdout.write(JSON.stringify({
-                operations: ALL_SEED_COMMAND_ENTRIES.map((e) => ({
+                operations: SEED_COMMAND_ENTRIES.map((e) => ({
                     name: shortLabel(e.name),
                     requiresWorkspaceId: e.requiresWorkspaceId,
                     dryRunSupported: e.dryRunSupported,
@@ -507,7 +353,7 @@ export function attachSeedCommands(seed) {
             adminBanner(siteUrl);
         if (isInteractive()) {
             intro('Seed Operations');
-            const menuEntries = ALL_SEED_COMMAND_ENTRIES;
+            const menuEntries = SEED_COMMAND_ENTRIES;
             const selected = await multiselect({
                 message: 'Select operations to run (space to toggle, enter to confirm):',
                 options: menuEntries.map((e) => ({
@@ -583,17 +429,17 @@ export function attachSeedCommands(seed) {
             return;
         }
         // Non-interactive (non-JSON) fallback — existing static preview
-        process.stdout.write(`${heading('Seed operations')}  ${dim(`(${ALL_SEED_COMMAND_ENTRIES.length})`)}\n\n`);
+        process.stdout.write(`${heading('Seed operations')}  ${dim(`(${SEED_COMMAND_ENTRIES.length})`)}\n\n`);
         // Show first 6 entries as a preview
-        const preview = ALL_SEED_COMMAND_ENTRIES.slice(0, 6);
+        const preview = SEED_COMMAND_ENTRIES.slice(0, 6);
         const wName = Math.max(...preview.map((e) => shortLabel(e.name).length));
         for (const e of preview) {
             const label = shortLabel(e.name);
             const flags = e.dryRunSupported ? dim('  dry-run ✓') : '';
             process.stdout.write(`  ${cyan(label.padEnd(wName))}  ${dim(e.description)}${flags}\n`);
         }
-        if (ALL_SEED_COMMAND_ENTRIES.length > 6) {
-            process.stdout.write(`  ${dim(`... ${ALL_SEED_COMMAND_ENTRIES.length - 6} more — run pb admin seed list`)}\n`);
+        if (SEED_COMMAND_ENTRIES.length > 6) {
+            process.stdout.write(`  ${dim(`... ${SEED_COMMAND_ENTRIES.length - 6} more — run pb admin seed list`)}\n`);
         }
         process.stdout.write('\n');
         process.stdout.write(`  ${cyan('pb admin seed list')}             ${dim('Full list with workspace + dry-run flags')}\n`);
@@ -616,12 +462,12 @@ export function attachSeedCommands(seed) {
     // `--legacy-readiness` falls back to the pre-S1b workspace-readiness signals view.
     seed
         .command('status')
-        .description('WP-433 S1b D16: Fleet-wide seed health (system admin). Default scans ALL workspaces. ' +
+        .description('Fleet-wide seed health (system admin). Default scans ALL workspaces. ' +
         'Use --workspace-id to drill down, --op to filter one op, --failed-only for failures only.')
         .option('--workspace-id <id>', 'Drill down to one workspace (operator triage)')
         .option('--op <slug>', 'Filter fleet view to one op slug')
         .option('--failed-only', 'Skip healthy workspaces; show failures only', false)
-        .option('--legacy-readiness', 'Use pre-S1b workspace readiness signals view', false)
+        .option('--legacy-readiness', 'Use the older workspace readiness view', false)
         .action(async (options) => {
         if (options.legacyReadiness) {
             if (!isJsonMode()) {
@@ -705,156 +551,8 @@ export function attachSeedCommands(seed) {
         note(summaryLines || 'No response data', manifestName);
         outro('Complete');
     });
-    // ─── WP-379 S5a: Starter Setup subcommands ─────────────────────────────────
-    seed
-        .command('show-starter')
-        .description('List 18 Starter Setup assets for a workspace with body previews, lockLevel, and gate summary')
-        .option('--workspace-id <id>', 'Workspace id (required; defaults to session workspace when set)')
-        .action(async (options) => {
-        const wsId = requireWorkspaceId(options.workspaceId);
-        const { siteUrl } = resolveAdminConfig();
-        if (!isJsonMode()) {
-            adminBanner(siteUrl);
-            intro('seed:show-starter');
-        }
-        const data = await withSpinner('Fetching starter assets', () => adminCall('seed:show-starter', { workspaceId: wsId }));
-        if (isJsonMode()) {
-            process.stdout.write(JSON.stringify(data, null, 2) + '\n');
-            return;
-        }
-        const assets = Array.isArray(data?.assets) ? data.assets : [];
-        if (assets.length === 0) {
-            note('No platform-seeded assets found. Run: pb admin seed run backfill-starter', 'show-starter');
-            outro('Done');
-            return;
-        }
-        const wIdx = assets.length.toString().length + 2;
-        const wId = Math.max(10, ...assets.map((a) => a.entryId.length));
-        const wLock = 10;
-        const wGate = 24;
-        process.stdout.write(`${bold(`${'#'.padEnd(wIdx)}${' '}${'Entry ID'.padEnd(wId)}  ${'Lock'.padEnd(wLock)}  ${'Gate'.padEnd(wGate)}  Name / Preview`)}\n`);
-        process.stdout.write(dim('─'.repeat(wIdx + wId + wLock + wGate + 40)) + '\n');
-        assets.forEach((asset, i) => {
-            const idx = `${i + 1}.`.padEnd(wIdx);
-            const entryId = cyan(asset.entryId.padEnd(wId));
-            const lock = dim((asset.lockLevel ?? '—').padEnd(wLock));
-            const gateStr = asset.gate
-                ? asset.gate.kind === 'always'
-                    ? 'always'
-                    : `readiness[${asset.gate.min ?? '0'}–${asset.gate.max ?? '100'}]`
-                : '—';
-            const gate = dim(gateStr.padEnd(wGate));
-            const preview = dim(asset.bodyPreview.slice(0, 60));
-            process.stdout.write(`${idx} ${entryId}  ${lock}  ${gate}  ${bold(asset.name)}  ${preview}\n`);
-        });
-        process.stdout.write('\n');
-        note(`${assets.length} / 18 starter assets seeded`, 'show-starter');
-        outro('Done');
-    });
-    seed
-        .command('backfill-starter')
-        .description('Idempotent bulk seed of Starter Setup bundle across workspaces (dry-run by default)')
-        .option('--all', 'Required: acknowledge you intend to act on all workspaces in scope', false)
-        .option('--dry-run', 'Preview what would be seeded without writing anything (default behavior)', false)
-        .option('--workspace-scope <scope>', 'Required when --confirm is passed: dev | prod | all')
-        .option('--confirm', 'Execute seeds (requires --all and --workspace-scope)', false)
-        .action(async (options) => {
-        const { siteUrl } = resolveAdminConfig();
-        // CLI-side guard: --confirm requires --all
-        if (options.confirm && !options.all) {
-            process.stderr.write(red('Error: --confirm requires --all. Pass --all to acknowledge you intend to act on all workspaces in scope.\n'));
-            process.exitCode = 1;
-            return;
-        }
-        // Validate args and enforce scope gate via shared helper (also used by tests)
-        let callArgs;
-        try {
-            callArgs = buildBackfillStarterArgs({
-                confirm: options.confirm,
-                dryRun: options.dryRun,
-                workspaceScope: options.workspaceScope,
-            });
-        }
-        catch (e) {
-            process.stderr.write(red(`Error: ${e instanceof Error ? e.message : String(e)}\n`));
-            process.exitCode = 1;
-            return;
-        }
-        const isConfirm = options.confirm;
-        const isDryRun = callArgs.dryRun;
-        // Production acknowledgment for destructive confirm path
-        const needsConfirm = requiresAdminDestructiveConfirmation(siteUrl);
-        if (isConfirm && needsConfirm) {
-            const ok = await confirmProdAction({
-                confirm: options.confirm,
-                isProduction: true,
-                message: `Seed Starter Setup across ALL workspaces (scope: ${options.workspaceScope ?? 'all'}) on ${siteUrl}`,
-                noteTitle: confirmRiskNoteTitle(siteUrl),
-            });
-            if (!ok) {
-                process.stderr.write('Cancelled.\n');
-                process.exitCode = 1;
-                return;
-            }
-        }
-        if (!isJsonMode()) {
-            adminBanner(siteUrl);
-            intro(`seed:backfill-starter (${isDryRun ? 'DRY RUN' : 'EXECUTE'})`);
-        }
-        const result = await withSpinner(isDryRun ? 'Running dry-run scan' : 'Seeding workspaces', () => adminCall('seed:backfill-starter', callArgs));
-        if (isJsonMode()) {
-            process.stdout.write(JSON.stringify(result, null, 2) + '\n');
-            return;
-        }
-        // Per-workspace progress
-        const rows = Array.isArray(result?.rows) ? result.rows : [];
-        for (const row of rows) {
-            const statusIcon = row.status === 'seeded' ? green(icons.pass) :
-                row.status === 'already-seeded' ? dim(icons.dot) :
-                    row.status === 'errored' ? red(icons.fail) :
-                        dim(icons.dot);
-            const detail = row.detail ? dim(`  ${row.detail}`) : '';
-            process.stdout.write(`  ${statusIcon}  ${bold(row.workspaceName)}${detail}\n`);
-        }
-        // Summary
-        const summaryLines = [
-            `Total workspaces: ${result.totalWorkspaces}`,
-            result.seededCount > 0 ? `${green(icons.pass)} Seeded: ${result.seededCount}` : null,
-            result.alreadySeededCount > 0 ? `${dim(icons.dot)} Already seeded: ${result.alreadySeededCount}` : null,
-            result.skippedCount > 0 ? `${dim(icons.dot)} Skipped (dry-run): ${result.skippedCount}` : null,
-            `Scope: ${result.workspaceScope}`,
-            result.dryRun ? dim('(dry-run — no writes performed)') : green('(writes executed)'),
-        ].filter(Boolean).join('\n');
-        note(summaryLines, 'backfill-starter');
-        outro('Done');
-    });
-    seed
-        .command('migrate-starter-fields')
-        .description('STUB (WP-379 S5b): backfill explicit lockLevel + gate columns on existing setup-assets entries')
-        .option('--workspace-id <id>', 'Workspace id (required; defaults to session workspace when set)')
-        .option('--dry-run', 'Preview changes without writing (default in stub)', false)
-        .action(async (options) => {
-        const wsId = requireWorkspaceId(options.workspaceId);
-        const { siteUrl } = resolveAdminConfig();
-        if (!isJsonMode()) {
-            adminBanner(siteUrl);
-            intro('seed:migrate-starter-fields');
-        }
-        const result = await withSpinner('Calling migrate-starter-fields', () => adminCall('seed:migrate-starter-fields', { workspaceId: wsId, dryRun: options.dryRun }));
-        if (isJsonMode()) {
-            process.stdout.write(JSON.stringify({ command: 'seed:migrate-starter-fields', data: result }, null, 2) + '\n');
-            return;
-        }
-        const summaryLines = [
-            `Migrated: ${result.migrated}`,
-            `Skipped: ${result.skipped}`,
-            `Dry-run: ${result.dryRun}`,
-            result.note ? dim(result.note) : null,
-        ].filter(Boolean).join('\n');
-        note(summaryLines, 'migrate-starter-fields');
-        outro('Done');
-    });
-    // ─── End WP-379 S5a Starter Setup subcommands ───────────────────────────────
+    // WP-379 S5a's `show-starter` / `backfill-starter` / `migrate-starter-fields` subcommands
+    // deleted at WP-776 S0 along with their Convex-side backing (convex/admin/seedStarterAdmin.ts).
     seed
         .command('all')
         .description('Run all seed operations in manifest order')