@productbrain/cli 0.1.0-beta.55 → 0.1.0-beta.5504

package/dist/commands/admin/probe.test.js

@@ -0,0 +1,193 @@
+/**
+ * Task 11 Step 1 — pb admin probe tests (WP-608, parent WP-604).
+ * TEN-3398 (WP-711 follow-up, PR #827 review) — probe now announces its tenant.
+ *
+ * `--env prod --env dev` must print both side by side and diff per scope handle — the exact
+ * question being asked on 2026-08-02 ("did it run everywhere"). diffMigrationLedgerResults and
+ * resolveProbeEnv are pure, network-free, and exported specifically for this.
+ */
+import { readFileSync } from 'fs';
+import { fileURLToPath } from 'url';
+import { describe, expect, it, vi, afterEach, beforeEach } from 'vitest';
+import { diffMigrationLedgerResults, resolveProbeEnv, fetchProbe, announceProbeEnvs } from './probe.js';
+import { resetAdminTenantNoticeForTests } from '../../lib/workspaceNotice.js';
+vi.mock('../../lib/profiles.js', () => ({
+    resolveNamedProfileConfig: vi.fn((name) => {
+        if (name === 'prod')
+            return { apiKey: 'pb_sk_prod', siteUrl: 'https://prod.example.com' };
+        if (name === 'dev')
+            return { apiKey: 'pb_sk_dev', siteUrl: 'https://dev.example.com' };
+        if (name === 'no-site')
+            return { apiKey: 'pb_sk_x' };
+        return null;
+    }),
+}));
+describe('resolveProbeEnv', () => {
+    it('resolves a known profile to its apiKey + siteUrl', () => {
+        expect(resolveProbeEnv('prod')).toEqual({ apiKey: 'pb_sk_prod', siteUrl: 'https://prod.example.com' });
+    });
+    it('throws a clear, non-network error for an unknown profile name', () => {
+        expect(() => resolveProbeEnv('nope')).toThrow(/No profile named "nope"/);
+    });
+    it('throws when the profile has no siteUrl configured', () => {
+        expect(() => resolveProbeEnv('no-site')).toThrow(/no siteUrl configured/);
+    });
+});
+describe('diffMigrationLedgerResults', () => {
+    it('prints both environments side by side and marks a differing status as DIFF', () => {
+        const results = [
+            {
+                env: 'prod',
+                ok: true,
+                data: { rows: [{ migrationId: 'wp586', scopes: [{ scopeHandle: 'abc123', status: 'no-evidence' }] }], truncated: false },
+            },
+            {
+                env: 'dev',
+                ok: true,
+                data: { rows: [{ migrationId: 'wp586', scopes: [{ scopeHandle: 'abc123', status: 'applied' }] }], truncated: false },
+            },
+        ];
+        const { rows } = diffMigrationLedgerResults(results);
+        expect(rows).toHaveLength(1);
+        expect(rows[0].migrationId).toBe('wp586');
+        expect(rows[0].scopeHandle).toBe('abc123');
+        expect(rows[0].statuses).toEqual({ prod: 'no-evidence', dev: 'applied' });
+        expect(rows[0].diff).toBe(true);
+    });
+    it('marks matching statuses as NOT diff', () => {
+        const results = [
+            { env: 'prod', ok: true, data: { rows: [{ migrationId: 'm', scopes: [{ scopeHandle: 'h', status: 'applied' }] }], truncated: false } },
+            { env: 'dev', ok: true, data: { rows: [{ migrationId: 'm', scopes: [{ scopeHandle: 'h', status: 'applied' }] }], truncated: false } },
+        ];
+        const { rows } = diffMigrationLedgerResults(results);
+        expect(rows[0].diff).toBe(false);
+    });
+    it('a scope present in one environment but absent in another is a diff (undefined vs a status)', () => {
+        const results = [
+            { env: 'prod', ok: true, data: { rows: [{ migrationId: 'm', scopes: [{ scopeHandle: 'h', status: 'applied' }] }], truncated: false } },
+            { env: 'dev', ok: true, data: { rows: [], truncated: false } },
+        ];
+        const { rows } = diffMigrationLedgerResults(results);
+        expect(rows).toHaveLength(1);
+        expect(rows[0].statuses).toEqual({ prod: 'applied', dev: undefined });
+        expect(rows[0].diff).toBe(true);
+    });
+    it('degrades to empty rows for a non-migrationLedger-shaped payload rather than throwing', () => {
+        const results = [
+            { env: 'prod', ok: true, data: { some: 'other', shape: true } },
+            { env: 'dev', ok: true, data: { some: 'other', shape: true } },
+        ];
+        expect(() => diffMigrationLedgerResults(results)).not.toThrow();
+        expect(diffMigrationLedgerResults(results).rows).toEqual([]);
+    });
+    it('skips a failed environment result rather than crashing the diff', () => {
+        const results = [
+            { env: 'prod', ok: false, error: 'boom' },
+            { env: 'dev', ok: true, data: { rows: [{ migrationId: 'm', scopes: [{ scopeHandle: 'h', status: 'applied' }] }], truncated: false } },
+        ];
+        const { rows } = diffMigrationLedgerResults(results);
+        expect(rows[0].statuses).toEqual({ prod: undefined, dev: 'applied' });
+    });
+});
+describe('fetchProbe — migrationLedger page-following (Copilot review, PR #574)', () => {
+    const originalFetch = globalThis.fetch;
+    afterEach(() => {
+        globalThis.fetch = originalFetch;
+    });
+    it('auto-follows every page until isDone and returns the COMPLETE, regrouped ledger', async () => {
+        const calls = [];
+        globalThis.fetch = vi.fn(async (input) => {
+            const url = new URL(String(input));
+            calls.push(url.searchParams.get('cursor') ?? '(none)');
+            const cursor = url.searchParams.get('cursor');
+            if (!cursor) {
+                return new Response(JSON.stringify({
+                    ok: true,
+                    data: {
+                        page: [{ migrationId: 'm1', scopeHandle: 'h1', status: 'applied' }],
+                        isDone: false,
+                        continueCursor: 'cursor-page-2',
+                    },
+                }), { status: 200 });
+            }
+            if (cursor === 'cursor-page-2') {
+                return new Response(JSON.stringify({
+                    ok: true,
+                    data: {
+                        page: [{ migrationId: 'm2', scopeHandle: 'h2', status: 'no-evidence' }],
+                        isDone: true,
+                        continueCursor: '',
+                    },
+                }), { status: 200 });
+            }
+            throw new Error(`unexpected cursor in test: ${cursor}`);
+        });
+        const result = await fetchProbe('prod', 'migrationLedger');
+        expect(calls).toEqual(['(none)', 'cursor-page-2']); // exactly two pages followed
+        expect(result.ok).toBe(true);
+        const data = result.data;
+        expect(data.rows.map((r) => r.migrationId).sort()).toEqual(['m1', 'm2']);
+    });
+    it('does NOT page-follow a non-migrationLedger probe (single request only)', async () => {
+        const fetchMock = vi.fn(async () => new Response(JSON.stringify({ ok: true, data: { rows: [] } }), { status: 200 }));
+        globalThis.fetch = fetchMock;
+        await fetchProbe('prod', 'credentialAge');
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+    });
+    it('surfaces a mid-page HTTP failure instead of silently returning a partial ledger', async () => {
+        globalThis.fetch = vi.fn(async (input) => {
+            const cursor = new URL(String(input)).searchParams.get('cursor');
+            if (!cursor) {
+                return new Response(JSON.stringify({ ok: true, data: { page: [{ migrationId: 'm1', scopeHandle: 'h1', status: 'applied' }], isDone: false, continueCursor: 'c2' } }), { status: 200 });
+            }
+            return new Response(JSON.stringify({ ok: false, error: 'boom' }), { status: 500 });
+        });
+        const result = await fetchProbe('prod', 'migrationLedger');
+        expect(result.ok).toBe(false);
+        expect(result.error).toBe('boom');
+    });
+});
+describe('announceProbeEnvs (TEN-3398 / WP-711 follow-up) — probe was the one gateway door with no notice at all', () => {
+    let stderr;
+    let stderrSpy;
+    beforeEach(() => {
+        resetAdminTenantNoticeForTests();
+        stderr = [];
+        stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation((c) => { stderr.push(String(c)); return true; });
+    });
+    afterEach(() => {
+        stderrSpy.mockRestore();
+    });
+    it('announces a single --env plainly — no "global default" qualifier, since --env is always an explicit binding', () => {
+        announceProbeEnvs(['prod']);
+        expect(stderr.join('')).toBe('→ prod\n');
+    });
+    it('announces BOTH names for a multi-env compare — the identity-keyed guard must not swallow the second, DIFFERENT env (regression pin for the Set-based fix)', () => {
+        announceProbeEnvs(['prod', 'dev']);
+        expect(stderr.join('')).toBe('→ prod\n→ dev\n');
+    });
+    it('still announces the SAME env only once if called twice in one process (per-identity dedup, not per-call)', () => {
+        announceProbeEnvs(['prod']);
+        announceProbeEnvs(['prod']);
+        expect(stderr.join('')).toBe('→ prod\n');
+    });
+    // TEN-3398 PR #827 review: the coordinator asked for the same "refused when the credential
+    // moved" coverage the other admin surfaces got. That guard does not apply here — see
+    // announceProbeEnvs' doc comment for why (an explicit --env is not ambient drift, and
+    // fingerprinting it against session.bindingFingerprint would false-positive-refuse the
+    // tool's own core feature, --env prod --env dev, the moment any session is active). This
+    // pins that decision structurally so a future add-back is a deliberate, reviewed change,
+    // never a silent drift in either direction.
+    it('does not import the session-binding guard — the exclusion is enforced structurally, not just documented in prose', () => {
+        const src = readFileSync(fileURLToPath(new URL('./probe.ts', import.meta.url)), 'utf8');
+        // Checks the actual IMPORT STATEMENTS, not a bare identifier match: the doc comment above
+        // legitimately names `assertSessionStillBound`/`guardAdminCall` in prose to explain why
+        // they're absent, so a whole-file identifier search would false-fail on its own
+        // explanation. Neither function is reachable at all without one of these two imports.
+        expect(src).not.toContain("from '../../lib/sessionBinding.js'");
+        const workspaceNoticeImport = src.split('\n').find((l) => l.includes("from '../../lib/workspaceNotice.js'"));
+        expect(workspaceNoticeImport).toContain('emitAdminTenantNotice');
+        expect(workspaceNoticeImport).not.toContain('guardAdminCall');
+    });
+});
+//# sourceMappingURL=probe.test.js.map

package/dist/commands/admin/probe.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.test.js","sourceRoot":"","sources":["../../../src/commands/admin/probe.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAE,UAAU,EAAE,iBAAiB,EAAuB,MAAM,YAAY,CAAC;AAC7H,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAE9E,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,yBAAyB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE;QAChD,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;QAC1F,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;QACvF,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,OAAO,GAAqB;YAChC;gBACE,GAAG,EAAE,MAAM;gBACX,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;aACzH;YACD;gBACE,GAAG,EAAE,KAAK;gBACV,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;aACrH;SACF,CAAC;QACF,MAAM,EAAE,IAAI,EAAE,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,OAAO,GAAqB;YAChC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;YACtI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;SACtI,CAAC;QACF,MAAM,EAAE,IAAI,EAAE,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,MAAM,OAAO,GAAqB;YAChC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;YACtI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;SAC/D,CAAC;QACF,MAAM,EAAE,IAAI,EAAE,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,OAAO,GAAqB;YAChC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC/D,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;SAC/D,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAChE,MAAM,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,OAAO,GAAqB;YAChC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE;YACzC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;SACtI,CAAC;QACF,MAAM,EAAE,IAAI,EAAE,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uEAAuE,EAAE,GAAG,EAAE;IACrF,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC;IACvC,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,KAAK,GAAG,aAAa,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAAwB,EAAE,EAAE;YAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;oBACb,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE;wBACJ,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;wBACnE,MAAM,EAAE,KAAK;wBACb,cAAc,EAAE,eAAe;qBAChC;iBACF,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC/B,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;oBACb,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE;wBACJ,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;wBACvE,MAAM,EAAE,IAAI;wBACZ,cAAc,EAAE,EAAE;qBACnB;iBACF,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC,CAA4B,CAAC;QAE9B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAE3D,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,6BAA6B;QACjF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAmE,CAAC;QACxF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAChF,CAAC;QACF,UAAU,CAAC,KAAK,GAAG,SAAoC,CAAC;QAExD,MAAM,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAE1C,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAAwB,EAAE,EAAE;YAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC,EAChJ,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrF,CAAC,CAA4B,CAAC;QAE9B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wGAAwG,EAAE,GAAG,EAAE;IACtH,IAAI,MAAgB,CAAC;IACrB,IAAI,SAAsC,CAAC;IAE3C,UAAU,CAAC,GAAG,EAAE;QACd,8BAA8B,EAAE,CAAC;QACjC,MAAM,GAAG,EAAE,CAAC;QACZ,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpH,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,WAAW,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6GAA6G,EAAE,GAAG,EAAE;QACrH,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2JAA2J,EAAE,GAAG,EAAE;QACnK,iBAAiB,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0GAA0G,EAAE,GAAG,EAAE;QAClH,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5B,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,2FAA2F;IAC3F,qFAAqF;IACrF,sFAAsF;IACtF,uFAAuF;IACvF,yFAAyF;IACzF,yFAAyF;IACzF,4CAA4C;IAC5C,EAAE,CAAC,kHAAkH,EAAE,GAAG,EAAE;QAC1H,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACxF,0FAA0F;QAC1F,wFAAwF;QACxF,gFAAgF;QAChF,sFAAsF;QACtF,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAChE,MAAM,qBAAqB,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC,CAAC;QAC7G,MAAM,CAAC,qBAAqB,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACjE,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/admin/run.d.ts

@@ -0,0 +1,43 @@
+/**
+ * pb admin run — generic dispatcher for any admin manifest command (WP-592 S3 review fix).
+ *
+ * `convex/admin/commandManifest.ts` is the SSOT for every admin operation, but before this
+ * command the only generic CLI runner was `pb admin seed run` (seed.ts), which resolves
+ * exclusively against `SEED_BY_NAME` and throws on any `manage:`/`inspect:` name — so a command
+ * like `manage:archive-preset-residue` (WP-592) had NO agent-usable CLI surface on dev at all.
+ * `npx convex run` cannot substitute: it is PREVIEW-only by design (`scripts/convex-run.sh`
+ * refuses any non-`preview:` deployment).
+ *
+ * This command passes the raw parsed args object straight through `adminCall` to `/api/admin` —
+ * the SAME dispatch every other admin command uses, which is what gives a destructive op its
+ * STD-190/DEC-553 audit row (system-admin-gated, argsHash-logged).
+ *
+ * Unknown-command validation is deliberately NOT duplicated client-side. The server's
+ * `dispatchAdminCommand` (convex/admin/adminDispatch.ts) already refuses an unrecognized name
+ * with `Unknown admin command: "<name>". Available: <sorted COMMAND_MAP keys>`, and `adminCall`
+ * (lib/client.ts) throws that message verbatim on any `ok:false` response. A second, client-side
+ * copy of the manifest's command names would only be a second place for that list to drift from
+ * the real one — the server's error response IS the manifest, read live.
+ *
+ * Deployment awareness (WP-592 S3 second-pass review fix). This is the ONE generic command that
+ * can dispatch `manage:delete-workspace`, `manage:delete-user`, and
+ * `manage:archive-preset-residue` — so it must not be the one admin surface that never tells the
+ * operator which deployment it is about to hit. `adminBanner` prints unconditionally (it
+ * self-gates on quiet/JSON mode, same as every sibling command). The confirm gate is deliberately
+ * keyed on `requiresAdminDestructiveConfirmation(siteUrl)` — the DEPLOYMENT TIER — never on a
+ * client-side guess at whether `name` is "dangerous": duplicating the manifest's danger
+ * classification here is exactly the second copy the docstring above already refuses to keep for
+ * command names, and it would drift from the manifest the same way. So every dispatch through
+ * `run` on a non-local/non-dev-cloud deployment requires `--confirm` (or an interactive prompt),
+ * regardless of which command it is.
+ */
+import { Command } from 'commander';
+/**
+ * Parses a JSON args string into a plain object args map. Exported for unit testing.
+ * Refuses (never silently coerces) anything that isn't a JSON OBJECT — an array or bare scalar
+ * would otherwise reach `adminCall` as `args`, which every manifest command's Convex validator
+ * expects to be an object.
+ */
+export declare function parseRunArgs(raw: string | undefined): Record<string, unknown>;
+export declare function attachRunCommand(admin: Command): void;
+//# sourceMappingURL=run.d.ts.map

package/dist/commands/admin/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/commands/admin/run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmB7E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CA2DrD"}

package/dist/commands/admin/run.js

@@ -0,0 +1,78 @@
+import { adminCall } from '../../lib/client.js';
+import { resolveAdminConfig } from '../../lib/adminConfig.js';
+import { CLIError, ErrorCode } from '../../lib/errors.js';
+import { adminBanner, confirmProdAction } from '../../lib/style.js';
+import { confirmRiskNoteTitle, requiresAdminDestructiveConfirmation } from '../../lib/deployment.js';
+/**
+ * Parses a JSON args string into a plain object args map. Exported for unit testing.
+ * Refuses (never silently coerces) anything that isn't a JSON OBJECT — an array or bare scalar
+ * would otherwise reach `adminCall` as `args`, which every manifest command's Convex validator
+ * expects to be an object.
+ */
+export function parseRunArgs(raw) {
+    if (raw === undefined || raw.trim() === '')
+        return {};
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new CLIError(`Invalid JSON args: ${err instanceof Error ? err.message : String(err)}\n  Got: ${raw}`, { code: ErrorCode.VALIDATION_FAILED, category: 'validation' });
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        throw new CLIError(`Args must be a JSON OBJECT, e.g. '{"workspaceId":"<id>"}'. Got: ${raw}`, { code: ErrorCode.VALIDATION_FAILED, category: 'validation' });
+    }
+    return parsed;
+}
+export function attachRunCommand(admin) {
+    admin
+        .command('run')
+        .description('Run any admin manifest command directly by its full name (e.g. manage:archive-preset-residue). ' +
+        'The only generic runner that reaches manage:/inspect: commands — pb admin seed run is seed-only.')
+        .argument('<name>', 'full manifest command name, e.g. manage:archive-preset-residue')
+        .argument('[jsonArgs]', 'JSON object of args, e.g. \'{"workspaceId":"<id>"}\' (default: {})')
+        .option('--confirm', 'Non-interactive prod/cloud acknowledgment — required on a deployment tier that needs it', false)
+        .action(async (name, jsonArgs, options) => {
+        const args = parseRunArgs(jsonArgs);
+        // Let a config error surface naturally (no swallowed catch) — every path below, including
+        // the confirm gate, needs a real siteUrl to reason about.
+        const { siteUrl, source, profileName } = resolveAdminConfig();
+        // WP-681: name WHICH credential resolved the target, not just the deployment tier — this is
+        // the ONE generic command that can silently dispatch a destructive op to the wrong
+        // deployment (live-reproduced: a repo-pinned dev profile got overridden by the operator's
+        // global active profile, defaulting to prod, with nothing in the banner or the confirm
+        // prompt saying so).
+        const profileLabel = source === 'local-profile' && profileName ? `${profileName} (repo-pinned)`
+            : source === 'global-profile' && profileName ? `${profileName} (global)`
+                : source === 'env' ? 'shell env vars'
+                    : source === 'legacy' ? 'legacy ~/.config/productbrain/.env'
+                        : undefined;
+        // Deployment-tier gate, not a command-name allowlist (see module docstring) — `run` reaches
+        // every manifest command including the destructive ones, so any non-local/non-dev-cloud
+        // deployment requires explicit acknowledgment regardless of which command is being sent.
+        const needsConfirm = requiresAdminDestructiveConfirmation(siteUrl);
+        if (needsConfirm) {
+            const ok = await confirmProdAction({
+                confirm: options.confirm,
+                isProduction: true,
+                message: `Run admin command "${name}" via pb admin run on ${siteUrl}${profileLabel ? ` (profile: ${profileLabel})` : ''}?`,
+                noteTitle: confirmRiskNoteTitle(siteUrl),
+            });
+            if (!ok) {
+                process.stderr.write('Cancelled.\n');
+                process.exitCode = 1;
+                return;
+            }
+        }
+        // Self-gates on quiet/JSON mode (style.ts) — matches every sibling admin command's banner.
+        adminBanner(siteUrl, profileLabel);
+        // No client-side command-name allowlist — see module docstring: the server's own refusal
+        // already lists every valid name, read live from COMMAND_MAP, with no second copy to drift.
+        const data = await adminCall(name, args);
+        // Always the FULL result, untruncated, as JSON — a dry-run's candidate list (e.g.
+        // manage:archive-preset-residue) is the founder's review artifact, and there is no sensible
+        // generic human-format for a result shape that varies per arbitrary manifest command.
+        process.stdout.write(JSON.stringify({ command: name, data }, null, 2) + '\n');
+    });
+}
+//# sourceMappingURL=run.js.map

package/dist/commands/admin/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/commands/admin/run.ts"],"names":[],"mappings":"AAkCA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,oCAAoC,EAAE,MAAM,yBAAyB,CAAC;AAErG;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,GAAuB;IAClD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAEtD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAChB,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,GAAG,EAAE,EACvF,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,QAAQ,CAChB,mEAAmE,GAAG,EAAE,EACxE,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,KAAK;SACF,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CACV,iGAAiG;QAC/F,kGAAkG,CACrG;SACA,QAAQ,CAAC,QAAQ,EAAE,gEAAgE,CAAC;SACpF,QAAQ,CAAC,YAAY,EAAE,oEAAoE,CAAC;SAC5F,MAAM,CAAC,WAAW,EAAE,yFAAyF,EAAE,KAAK,CAAC;SACrH,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,QAA4B,EAAE,OAA6B,EAAE,EAAE;QAC1F,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEpC,0FAA0F;QAC1F,0DAA0D;QAC1D,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAE9D,4FAA4F;QAC5F,mFAAmF;QACnF,0FAA0F;QAC1F,uFAAuF;QACvF,qBAAqB;QACrB,MAAM,YAAY,GAChB,MAAM,KAAK,eAAe,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,gBAAgB;YAC1E,CAAC,CAAC,MAAM,KAAK,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,WAAW;gBACxE,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,gBAAgB;oBACrC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,oCAAoC;wBAC5D,CAAC,CAAC,SAAS,CAAC;QAEd,4FAA4F;QAC5F,wFAAwF;QACxF,yFAAyF;QACzF,MAAM,YAAY,GAAG,oCAAoC,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC;gBACjC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,YAAY,EAAE,IAAI;gBAClB,OAAO,EAAE,sBAAsB,IAAI,yBAAyB,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,cAAc,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG;gBAC1H,SAAS,EAAE,oBAAoB,CAAC,OAAO,CAAC;aACzC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;QACH,CAAC;QAED,2FAA2F;QAC3F,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEnC,yFAAyF;QACzF,4FAA4F;QAC5F,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEzC,kFAAkF;QAClF,4FAA4F;QAC5F,sFAAsF;QACtF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/admin/run.test.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Tests for `pb admin run <name> [jsonArgs]` — the generic admin-manifest dispatcher
+ * (WP-592 S3 review fix).
+ *
+ * Covers:
+ *   - dispatches the given command name with parsed JSON args via adminCall
+ *   - defaults to {} when jsonArgs is omitted
+ *   - rejects invalid JSON before ever calling adminCall
+ *   - rejects a JSON array / scalar (must be an object) before ever calling adminCall
+ *   - prints the FULL result as JSON, untruncated
+ *   - an unknown-command error from adminCall (mirroring the server's
+ *     "Unknown admin command" refusal) propagates rather than being swallowed
+ *   - prints the deployment banner before dispatching (WP-592 S3 second-pass review fix)
+ *   - a deployment tier that requires confirmation gates the dispatch on confirmProdAction
+ *   - a tier that does not require confirmation (e.g. local) never consults confirmProdAction
+ */
+export {};
+//# sourceMappingURL=run.test.d.ts.map

package/dist/commands/admin/run.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.test.d.ts","sourceRoot":"","sources":["../../../src/commands/admin/run.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}

package/dist/commands/admin/run.test.js

@@ -0,0 +1,168 @@
+/**
+ * Tests for `pb admin run <name> [jsonArgs]` — the generic admin-manifest dispatcher
+ * (WP-592 S3 review fix).
+ *
+ * Covers:
+ *   - dispatches the given command name with parsed JSON args via adminCall
+ *   - defaults to {} when jsonArgs is omitted
+ *   - rejects invalid JSON before ever calling adminCall
+ *   - rejects a JSON array / scalar (must be an object) before ever calling adminCall
+ *   - prints the FULL result as JSON, untruncated
+ *   - an unknown-command error from adminCall (mirroring the server's
+ *     "Unknown admin command" refusal) propagates rather than being swallowed
+ *   - prints the deployment banner before dispatching (WP-592 S3 second-pass review fix)
+ *   - a deployment tier that requires confirmation gates the dispatch on confirmProdAction
+ *   - a tier that does not require confirmation (e.g. local) never consults confirmProdAction
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { Command } from 'commander';
+// Mock adminCall — the single server dispatch surface.
+vi.mock('../../lib/client.js', () => ({
+    adminCall: vi.fn(async () => ({})),
+}));
+vi.mock('../../lib/adminConfig.js', () => ({
+    resolveAdminConfig: vi.fn(() => ({ siteUrl: 'http://127.0.0.1:3210', source: 'env', profileName: null })),
+}));
+// Mock the banner + confirm primitives directly rather than relying on TTY/quiet-mode detection
+// in the test process — this asserts run.ts actually CALLS them with the right arguments, which
+// is the behavior the WP-592 S3 second-pass review finding is about (MAJOR 1).
+vi.mock('../../lib/style.js', () => ({
+    adminBanner: vi.fn(),
+    confirmProdAction: vi.fn(async () => true),
+}));
+vi.mock('../../lib/deployment.js', () => ({
+    requiresAdminDestructiveConfirmation: vi.fn(() => false),
+    confirmRiskNoteTitle: vi.fn(() => '⚠  Confirm'),
+}));
+import { attachRunCommand, parseRunArgs } from './run.js';
+import { adminCall } from '../../lib/client.js';
+import { adminBanner, confirmProdAction } from '../../lib/style.js';
+import { requiresAdminDestructiveConfirmation } from '../../lib/deployment.js';
+/** Build a Commander tree with `run` attached and parse argv. */
+async function runAdminRun(argv) {
+    const admin = new Command();
+    attachRunCommand(admin);
+    // exitOverride so a parse error throws instead of calling process.exit.
+    admin.exitOverride();
+    await admin.parseAsync(['node', 'pb', 'run', ...argv]);
+}
+let stdoutSpy;
+beforeEach(() => {
+    vi.clearAllMocks();
+    vi.mocked(adminCall).mockResolvedValue({ ok: true });
+    stdoutSpy = vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+});
+afterEach(() => {
+    stdoutSpy.mockRestore();
+    process.exitCode = 0;
+});
+describe('parseRunArgs', () => {
+    it('returns {} when jsonArgs is omitted', () => {
+        expect(parseRunArgs(undefined)).toEqual({});
+    });
+    it('returns {} for an empty/whitespace string', () => {
+        expect(parseRunArgs('   ')).toEqual({});
+    });
+    it('parses a valid JSON object', () => {
+        expect(parseRunArgs('{"workspaceId":"ws1","dryRun":false}')).toEqual({
+            workspaceId: 'ws1',
+            dryRun: false,
+        });
+    });
+    it('throws on invalid JSON', () => {
+        expect(() => parseRunArgs('{not json')).toThrow(/Invalid JSON args/);
+    });
+    it('throws on a JSON array (must be an object)', () => {
+        expect(() => parseRunArgs('[1,2,3]')).toThrow(/must be a JSON OBJECT/);
+    });
+    it('throws on a bare JSON scalar (must be an object)', () => {
+        expect(() => parseRunArgs('"just a string"')).toThrow(/must be a JSON OBJECT/);
+    });
+    it('throws on JSON null (must be an object)', () => {
+        expect(() => parseRunArgs('null')).toThrow(/must be a JSON OBJECT/);
+    });
+});
+describe('pb admin run <name> [jsonArgs]', () => {
+    it('dispatches the given command name with parsed JSON args', async () => {
+        await runAdminRun(['manage:archive-preset-residue', '{"workspaceId":"ws1"}']);
+        expect(adminCall).toHaveBeenCalledTimes(1);
+        expect(adminCall).toHaveBeenCalledWith('manage:archive-preset-residue', { workspaceId: 'ws1' });
+    });
+    it('defaults args to {} when jsonArgs is omitted', async () => {
+        await runAdminRun(['inspect:preset-residue-census']);
+        expect(adminCall).toHaveBeenCalledWith('inspect:preset-residue-census', {});
+    });
+    it('rejects invalid JSON before ever calling adminCall', async () => {
+        await expect(runAdminRun(['manage:archive-preset-residue', '{bad'])).rejects.toThrow(/Invalid JSON args/);
+        expect(adminCall).not.toHaveBeenCalled();
+    });
+    it('rejects a non-object JSON value before ever calling adminCall', async () => {
+        await expect(runAdminRun(['manage:archive-preset-residue', '[1,2]'])).rejects.toThrow(/must be a JSON OBJECT/);
+        expect(adminCall).not.toHaveBeenCalled();
+    });
+    it('prints the full result as JSON, untruncated', async () => {
+        const bigResult = {
+            outcome: 'dry_run',
+            candidates: Array.from({ length: 50 }, (_, i) => ({ entryId: `E-${i}`, classification: 'orphaned' })),
+        };
+        vi.mocked(adminCall).mockResolvedValueOnce(bigResult);
+        await runAdminRun(['manage:archive-preset-residue', '{"workspaceId":"ws1"}']);
+        const written = stdoutSpy.mock.calls.map((c) => String(c[0])).join('');
+        const parsed = JSON.parse(written);
+        expect(parsed.command).toBe('manage:archive-preset-residue');
+        expect(parsed.data.candidates).toHaveLength(50);
+    });
+    it('propagates an unknown-command error from adminCall rather than swallowing it', async () => {
+        vi.mocked(adminCall).mockRejectedValueOnce(new Error('Unknown admin command: "typo:command". Available: seed:knowledge, manage:archive-preset-residue, ...'));
+        await expect(runAdminRun(['typo:command'])).rejects.toThrow(/Unknown admin command/);
+    });
+    it('prints the deployment banner before dispatching, naming the resolved credential source (WP-681)', async () => {
+        await runAdminRun(['manage:archive-preset-residue', '{"workspaceId":"ws1"}']);
+        expect(adminBanner).toHaveBeenCalledTimes(1);
+        expect(adminBanner).toHaveBeenCalledWith('http://127.0.0.1:3210', 'shell env vars');
+    });
+    it('WP-681: names a repo-pinned local profile distinctly from the global active profile', async () => {
+        const adminConfig = await import('../../lib/adminConfig.js');
+        vi.mocked(adminConfig.resolveAdminConfig).mockReturnValueOnce({
+            siteUrl: 'https://trustworthy-kangaroo-277.convex.site',
+            source: 'local-profile',
+            profileName: 'product-brain',
+        });
+        await runAdminRun(['manage:archive-preset-residue', '{"workspaceId":"ws1"}']);
+        expect(adminBanner).toHaveBeenCalledWith('https://trustworthy-kangaroo-277.convex.site', 'product-brain (repo-pinned)');
+    });
+    it('WP-681: the confirm-gate message on a production tier names the resolved profile too', async () => {
+        vi.mocked(requiresAdminDestructiveConfirmation).mockReturnValueOnce(true);
+        vi.mocked(confirmProdAction).mockResolvedValueOnce(true);
+        const adminConfig = await import('../../lib/adminConfig.js');
+        vi.mocked(adminConfig.resolveAdminConfig).mockReturnValueOnce({
+            siteUrl: 'https://gateway.productbrain.io',
+            source: 'global-profile',
+            profileName: 'randy-s-pkm',
+        });
+        await runAdminRun(['manage:archive-preset-residue', '--confirm', '{"workspaceId":"ws1"}']);
+        expect(confirmProdAction).toHaveBeenCalledWith(expect.objectContaining({ message: expect.stringContaining('randy-s-pkm (global)') }));
+    });
+    it('does not consult confirmProdAction on a tier that does not require confirmation', async () => {
+        vi.mocked(requiresAdminDestructiveConfirmation).mockReturnValueOnce(false);
+        await runAdminRun(['manage:archive-preset-residue', '{"workspaceId":"ws1"}']);
+        expect(confirmProdAction).not.toHaveBeenCalled();
+        expect(adminCall).toHaveBeenCalledTimes(1);
+    });
+    it('gates the dispatch on confirmProdAction when the deployment tier requires confirmation', async () => {
+        vi.mocked(requiresAdminDestructiveConfirmation).mockReturnValueOnce(true);
+        vi.mocked(confirmProdAction).mockResolvedValueOnce(true);
+        await runAdminRun(['manage:archive-preset-residue', '--confirm', '{"workspaceId":"ws1"}']);
+        expect(confirmProdAction).toHaveBeenCalledTimes(1);
+        expect(confirmProdAction).toHaveBeenCalledWith(expect.objectContaining({ confirm: true, isProduction: true }));
+        expect(adminCall).toHaveBeenCalledTimes(1);
+    });
+    it('refuses the dispatch when confirmProdAction resolves false on a tier that requires confirmation', async () => {
+        vi.mocked(requiresAdminDestructiveConfirmation).mockReturnValueOnce(true);
+        vi.mocked(confirmProdAction).mockResolvedValueOnce(false);
+        await runAdminRun(['manage:archive-preset-residue', '{"workspaceId":"ws1"}']);
+        expect(confirmProdAction).toHaveBeenCalledTimes(1);
+        expect(adminCall).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=run.test.js.map

package/dist/commands/admin/run.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.test.js","sourceRoot":"","sources":["../../../src/commands/admin/run.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,uDAAuD;AACvD,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CACnC,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;CAC1G,CAAC,CAAC,CAAC;AAEJ,gGAAgG;AAChG,gGAAgG;AAChG,+EAA+E;AAC/E,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;CAC3C,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,oCAAoC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;IACxD,oBAAoB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC;CAChD,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,oCAAoC,EAAE,MAAM,yBAAyB,CAAC;AAE/E,iEAAiE;AACjE,KAAK,UAAU,WAAW,CAAC,IAAc;IACvC,MAAM,KAAK,GAAG,IAAI,OAAO,EAAE,CAAC;IAC5B,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,wEAAwE;IACxE,KAAK,CAAC,YAAY,EAAE,CAAC;IACrB,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,IAAI,SAAsC,CAAC;AAE3C,UAAU,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACnB,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,SAAS,CAAC,WAAW,EAAE,CAAC;IACxB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,YAAY,CAAC,sCAAsC,CAAC,CAAC,CAAC,OAAO,CAAC;YACnE,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,WAAW,CAAC,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAE9E,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,WAAW,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAErD,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAE1G,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,+BAA+B,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAE/G,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,SAAS,GAAG;YAChB,OAAO,EAAE,SAAS;YAClB,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;SACtG,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAEtD,MAAM,WAAW,CAAC,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAE9E,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAY,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CACxC,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAClH,CAAC;QAEF,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,MAAM,WAAW,CAAC,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAE9E,MAAM,CAAC,WAAW,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAC7D,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,mBAAmB,CAAC;YAC5D,OAAO,EAAE,8CAA8C;YACvD,MAAM,EAAE,eAAe;YACvB,WAAW,EAAE,eAAe;SACtB,CAAC,CAAC;QAEV,MAAM,WAAW,CAAC,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAE9E,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CACtC,8CAA8C,EAC9C,6BAA6B,CAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,EAAE,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC1E,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAC7D,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,mBAAmB,CAAC;YAC5D,OAAO,EAAE,iCAAiC;YAC1C,MAAM,EAAE,gBAAgB;YACxB,WAAW,EAAE,aAAa;SACpB,CAAC,CAAC;QAEV,MAAM,WAAW,CAAC,CAAC,+BAA+B,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAE3F,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAC5C,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,CAAC,CACtF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,EAAE,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAE3E,MAAM,WAAW,CAAC,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAE9E,MAAM,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACjD,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,EAAE,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC1E,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAEzD,MAAM,WAAW,CAAC,CAAC,+BAA+B,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAE3F,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAC5C,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAC/D,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,EAAE,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC1E,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAE1D,MAAM,WAAW,CAAC,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAE9E,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/admin/seed.d.ts

@@ -3,6 +3,10 @@
  *
  * Seed metadata is duplicated from `convex/admin/commandManifest.ts` for CLI help
  * and ordering only — behavior is enforced server-side (STD-101).
+ *
+ * WP-433 S1b D13: the 4 substrate-repair migrations + backfill-default-team are
+ * generated from `convex/admin/seed/registry.ts` (single SSOT) into
+ * `seedRegistryEntries.generated.ts`. Run `npm run codegen` to refresh after registry edits.
  */
 import { Command } from 'commander';
 export type SeedCommandMeta = {
@@ -18,14 +22,53 @@ export type SeedCommandMeta = {
  * Order matches `ADMIN_COMMANDS` seed block in commandManifest.ts — dependency order for `seed all`.
  */
 export declare const SEED_COMMAND_ENTRIES: readonly SeedCommandMeta[];
-/** Manifest order for `pb admin seed all`. */
+/**
+ * Manifest order for `pb admin seed all`.
+ *
+ * Includes the static legacy seeds plus the registry-generated runnable entries so
+ * `seed all` exercises the full surface (D13 SSOT).
+ */
 export declare const SEED_MANIFEST_ORDER: readonly string[];
-/** Accept `knowledge` or `seed:knowledge`. */
+/**
+ * Accept short-form or long-form seed op names; return the canonical backend command name.
+ *
+ * Static entries (legacy) are stored as `seed:<slug>` (e.g. `seed:knowledge`).
+ * Registry-generated entries (WP-433 S1b) are stored as bare slugs (e.g.
+ * `seed-system-glossary`) to avoid the double-prefix `seed:seed-*` trap that
+ * arose when slugs like `seed-system-glossary` were naively stored as
+ * `seed:seed-system-glossary`.
+ *
+ * Both forms always return the backend command name (`seed:<bare-slug>`):
+ *   - `'system-glossary'` or `'seed-system-glossary'` → `'seed:seed-system-glossary'`
+ *     would be wrong; instead the bare slug stored in the map IS `seed-system-glossary`
+ *     and the backend command is `seed:seed-system-glossary`.
+ *
+ * Resolution order:
+ *   1. Try `seed:<t>` — covers legacy static entries (`seed:knowledge`) and any input
+ *      that normalises to a key already stored with the `seed:` prefix.
+ *   2. Try bare `<t>` (stripping a leading `seed:` from the input if present) —
+ *      covers registry entries stored without the prefix.
+ *      When found via bare slug, return `seed:<bare>` so the caller always gets a
+ *      backend-compatible command name.
+ */
 export declare function normalizeSeedCommandName(input: string): string;
+/**
+ * Build args for seed:backfill-starter with CLI-side validation.
+ *
+ * Rules:
+ *   - confirm:true requires workspaceScope to be explicitly provided
+ *   - dryRun defaults to true when confirm is false
+ *
+ * Exported for testing.
+ */
+export declare function buildBackfillStarterArgs(opts: {
+    confirm?: boolean;
+    dryRun?: boolean;
+    workspaceScope?: string;
+}): Record<string, unknown>;
 export declare function buildSeedArgs(manifestName: string, opts: {
     workspaceId?: string;
     dryRun?: boolean;
-    presetId?: string;
 }): Record<string, unknown>;
 /** Attach seed subcommands to the `seed` Commander node. */
 export declare function attachSeedCommands(seed: Command): void;

package/dist/commands/admin/seed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"seed.d.ts","sourceRoot":"","sources":["../../../src/commands/admin/seed.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+BpC,MAAM,MAAM,eAAe,GAAG;IAC5B,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,eAAe,EAqFjD,CAAC;AAIX,8CAA8C;AAC9C,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAA4C,CAAC;AAM9F,8CAA8C;AAC9C,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiB9D;AAkBD,wBAAgB,aAAa,CAC3B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAClE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmCzB;AA2FD,4DAA4D;AAC5D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAwUtD"}
+{"version":3,"file":"seed.d.ts","sourceRoot":"","sources":["../../../src/commands/admin/seed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiCpC,MAAM,MAAM,eAAe,GAAG;IAC5B,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,eAAe,EA4GjD,CAAC;AAwBX;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAEhD,CAAC;AAkBF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CA4B9D;AAID;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuB1B;AAkBD,wBAAgB,aAAa,CAC3B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAC/C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAyBzB;AAuRD,4DAA4D;AAC5D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAkjBtD"}