mdkg 0.1.1 → 0.1.3

package/dist/cli.js

@@ -18,6 +18,10 @@ const next_1 = require("./commands/next");
 const validate_1 = require("./commands/validate");
 const format_1 = require("./commands/format");
 const doctor_1 = require("./commands/doctor");
+const capability_1 = require("./commands/capability");
+const archive_1 = require("./commands/archive");
+const bundle_1 = require("./commands/bundle");
+const bundle_import_1 = require("./commands/bundle_import");
 const checkpoint_1 = require("./commands/checkpoint");
 const init_1 = require("./commands/init");
 const new_1 = require("./commands/new");
@@ -26,6 +30,7 @@ const upgrade_1 = require("./commands/upgrade");
 const event_1 = require("./commands/event");
 const skill_1 = require("./commands/skill");
 const task_1 = require("./commands/task");
+const work_1 = require("./commands/work");
 const workspace_1 = require("./commands/workspace");
 const profile_1 = require("./pack/profile");
 const errors_1 = require("./util/errors");
@@ -55,6 +60,10 @@ function printUsage(log) {
     log("  search      Search nodes by query");
     log("  pack        Generate a context pack");
     log("  skill       Create, list, show, search, and validate skills");
+    log("  capability  List, search, and show cached capability surfaces");
+    log("  archive     Add, list, show, verify, and compress archive sidecars");
+    log("  bundle      Create, list, show, and verify full graph snapshot bundles");
+    log("  work        Create and update work contracts, orders, receipts, and artifacts");
     log("  task        Start, update, and complete task-like nodes");
     log("  next        Suggest the next work item");
     log("  validate    Validate frontmatter + graph");
@@ -67,7 +76,7 @@ function printUsage(log) {
     log("  doctor      Run install and workspace diagnostics");
     log("  workspace   Manage workspaces (ls/add/rm/enable/disable)");
     log("\nQuickstart:");
-    log("  mdkg init --llm");
+    log("  mdkg init --agent");
     log("  mdkg upgrade");
     log("  mdkg upgrade --apply");
     log('  mdkg new task "..." --status todo --priority 1');
@@ -80,7 +89,7 @@ function printUsage(log) {
     log('  mdkg skill new release-readiness "release readiness audit" --description "use when preparing a release"');
     log("  mdkg skill list --tags stage:plan --json");
     log("  mdkg validate");
-    log("\nOptional agent-ready bootstrap:");
+    log("\nAgent-ready bootstrap:");
     log("  mdkg init --agent");
     log("\nRun `mdkg help <command>` or `mdkg <command> --help` for details.");
     printGlobalOptions(log);
@@ -90,13 +99,11 @@ function printInitHelp(log) {
     log("  mdkg init [options]");
     log("\nOptions:");
     log("  --force               Overwrite existing mdkg files");
-    log("  --llm                 Create AGENTS.md, CLAUDE.md, llms.txt, and AGENT_START.md");
-    log("  --agent               Add SOUL/HUMAN/skills/events scaffolding and skill mirrors");
+    log("  --agent               Create the complete agent bootstrap, skills, events, and mirrors");
     log("  --no-update-ignores   Skip default .gitignore/.npmignore updates");
     log("  --update-gitignore    Append mdkg ignore entries");
     log("  --update-npmignore    Append mdkg ignore entries");
     log("  --update-dockerignore Append mdkg ignore entries");
-    log("\nCompatibility flags still supported but not shown in the primary onboarding story.");
     printGlobalOptions(log);
 }
 function printUpgradeHelp(log) {
@@ -122,6 +129,7 @@ function printNewHelp(log) {
     log("\nAgent workflow file types:");
     log("  spec work work_order receipt feedback dispute proposal");
     log("  Use --id <portable-id> with these types for semantic ids like agent.image-worker.");
+    log("  Use `mdkg archive add` for archive sidecars instead of `mdkg new archive`.");
     log("\nOptions:");
     log("  --id <portable-id>         Explicit id for agent workflow file types");
     log("  --ws <alias>               Workspace alias (default root)");
@@ -148,15 +156,23 @@ function printGuideHelp(log) {
 function printWorkspaceHelp(log) {
     log("Usage:");
     log("  mdkg workspace ls [--json]");
-    log("  mdkg workspace add <alias> <path> [--mdkg-dir <dir>] [--json]");
+    log("  mdkg workspace add <alias> <path> [--mdkg-dir <dir>] [--visibility <level>] [--json]");
     log("  mdkg workspace rm <alias> [--json]");
     log("  mdkg workspace enable <alias> [--json]");
     log("  mdkg workspace disable <alias> [--json]");
+    log("\nVisibility levels:");
+    log("  private internal public");
     printGlobalOptions(log);
 }
 function printIndexHelp(log) {
     log("Usage:");
     log("  mdkg index [--tolerant]");
+    log("\nWrites:");
+    log("  - .mdkg/index/global.json");
+    log("  - .mdkg/index/skills.json");
+    log("  - .mdkg/index/capabilities.json");
+    log("  - .mdkg/index/imports.json when bundle imports are configured");
+    log("  - .mdkg/index/mdkg.sqlite when index.backend is sqlite");
     printGlobalOptions(log);
 }
 function printShowHelp(log) {
@@ -195,6 +211,7 @@ function printPackHelp(log) {
     log("  -f, --format <fmt>           Output format: md|json|toon|xml (default md)");
     log("  -o, --out <path>             Output file path");
     log("      --profile <name>         Body profile: standard|concise|headers (default standard)");
+    log("      --visibility <level>     Filter output: public|internal|private");
     log("      --skills <mode>          Skill inclusion: none|auto|<slug,slug,...> (default auto)");
     log("      --skills-depth <mode>    Skill body mode: meta|full (default meta)");
     log("      --dry-run                Preview selection/order/stats without writing files");
@@ -207,6 +224,7 @@ function printPackHelp(log) {
     log("  mdkg pack --list-profiles");
     log("  mdkg pack task-1");
     log("  mdkg pack task-1 --profile concise --dry-run --stats");
+    log("  mdkg pack task-1 --visibility public --dry-run");
     log("  mdkg pack task-1 --skills auto --skills-depth full");
     log("  mdkg pack epic-2 --format json --profile headers");
     printGlobalOptions(log);
@@ -283,6 +301,153 @@ function printSkillHelp(log, subcommand) {
             printGlobalOptions(log);
     }
 }
+function printCapabilityHelp(log, subcommand) {
+    switch ((subcommand ?? "").toLowerCase()) {
+        case "list":
+            log("Usage:");
+            log("  mdkg capability list [--kind <kind>] [--visibility <level>] [--json]");
+            log("\nKinds:");
+            log("  skill spec work core design");
+            printGlobalOptions(log);
+            return;
+        case "search":
+            log("Usage:");
+            log('  mdkg capability search "<query>" [--kind <kind>] [--visibility <level>] [--json]');
+            log("\nKinds:");
+            log("  skill spec work core design");
+            printGlobalOptions(log);
+            return;
+        case "show":
+            log("Usage:");
+            log("  mdkg capability show <id-or-qid-or-slug> [--json]");
+            printGlobalOptions(log);
+            return;
+        default:
+            log("Usage:");
+            log("  mdkg capability list [--kind <kind>] [--visibility <level>] [--json]");
+            log('  mdkg capability search "<query>" [--kind <kind>] [--visibility <level>] [--json]');
+            log("  mdkg capability show <id-or-qid-or-slug> [--json]");
+            log("\nNotes:");
+            log("  Capability records are deterministic cache projections from Markdown.");
+            log("  Cached kinds: skill, spec, work, core, design.");
+            printGlobalOptions(log);
+    }
+}
+function printArchiveHelp(log, subcommand) {
+    switch ((subcommand ?? "").toLowerCase()) {
+        case "add":
+            log("Usage:");
+            log("  mdkg archive add <file> [--id <archive.id>] [--kind source|artifact] [--visibility private|internal|public] [--title <title>] [--refs <...>] [--relates <...>] [--json]");
+            break;
+        case "list":
+            log("Usage:");
+            log("  mdkg archive list [--kind source|artifact] [--visibility private|internal|public] [--ws <alias>] [--json]");
+            break;
+        case "show":
+            log("Usage:");
+            log("  mdkg archive show <id-or-archive-uri> [--ws <alias>] [--json]");
+            break;
+        case "verify":
+            log("Usage:");
+            log("  mdkg archive verify [id-or-archive-uri] [--ws <alias>] [--json]");
+            break;
+        case "compress":
+            log("Usage:");
+            log("  mdkg archive compress <id-or-archive-uri> [--ws <alias>] [--json]");
+            log("  mdkg archive compress --all [--json]");
+            break;
+        default:
+            log("Usage:");
+            log("  mdkg archive add <file> [--id <archive.id>] [--kind source|artifact] [--visibility private|internal|public] [--json]");
+            log("  mdkg archive list [--kind source|artifact] [--visibility private|internal|public] [--json]");
+            log("  mdkg archive show <id-or-archive-uri> [--json]");
+            log("  mdkg archive verify [id-or-archive-uri] [--json]");
+            log("  mdkg archive compress <id-or-archive-uri|--all> [--json]");
+            log("\nNotes:");
+            log("  - archive add copies the source, writes a sidecar, and writes a deterministic zip cache");
+            log("  - archive visibility defaults to private");
+            log("  - archive://<archive.id> refs are validated against local archive sidecars");
+            log("  - archive verify checks sidecar and zip payload integrity; missing raw source copies are ok when the zip cache is valid");
+    }
+    printGlobalOptions(log);
+}
+function printBundleHelp(log, subcommand) {
+    switch ((subcommand ?? "").toLowerCase()) {
+        case "import":
+            log("Usage:");
+            log("  mdkg bundle import add <alias> <bundle-path> [--visibility private|internal|public] [--profile private|public] [--source-path <path>] [--source-repo <ref>] [--max-stale-seconds <seconds>] [--json]");
+            log("  mdkg bundle import list [--json]");
+            log("  mdkg bundle import rm <alias> [--json]");
+            log("  mdkg bundle import enable <alias> [--json]");
+            log("  mdkg bundle import disable <alias> [--json]");
+            log("  mdkg bundle import verify [alias|--all] [--json]");
+            break;
+        case "create":
+            log("Usage:");
+            log("  mdkg bundle create [--profile private|public] [--ws <alias|all>] [--output <path>] [--json]");
+            break;
+        case "verify":
+            log("Usage:");
+            log("  mdkg bundle verify [bundle-path] [--json]");
+            break;
+        case "show":
+            log("Usage:");
+            log("  mdkg bundle show <bundle-path> [--json]");
+            break;
+        case "list":
+            log("Usage:");
+            log("  mdkg bundle list [--json]");
+            break;
+        default:
+            log("Usage:");
+            log("  mdkg bundle create [--profile private|public] [--ws <alias|all>] [--output <path>] [--json]");
+            log("  mdkg bundle verify [bundle-path] [--json]");
+            log("  mdkg bundle show <bundle-path> [--json]");
+            log("  mdkg bundle list [--json]");
+            log("  mdkg bundle import add/list/rm/enable/disable/verify ...");
+            log("\nNotes:");
+            log("  - bundles are explicit full .mdkg graph snapshots, not task context packs");
+            log("  - bundle imports are read-only graph views projected under their import alias");
+            log("  - private is the default profile; public bundles fail closed on private refs");
+            log("  - .mdkg/bundles/ is commit-eligible when your repo tracks snapshot bundles");
+    }
+    printGlobalOptions(log);
+}
+function printWorkHelp(log, subcommand) {
+    switch ((subcommand ?? "").toLowerCase()) {
+        case "contract":
+            log("Usage:");
+            log('  mdkg work contract new "<title>" --id <work.id> --agent-id <agent.id> --kind <kind> --inputs <...> --outputs <...> [--required-capabilities <...>] [--pricing-model <...>] [--json]');
+            break;
+        case "order":
+            log("Usage:");
+            log('  mdkg work order new "<title>" --id <order.id> --work-id <work.id> --requester <ref> [--request-ref <ref>] [--input-refs <...>] [--requested-outputs <...>] [--json]');
+            log("  mdkg work order update <id-or-qid> [--status <status>] [--add-input-refs <...>] [--add-artifacts <...>] [--json]");
+            break;
+        case "receipt":
+            log("Usage:");
+            log('  mdkg work receipt new "<title>" --id <receipt.id> --work-order-id <order.id> --outcome success|partial|failure [--receipt-status recorded|verified|rejected|superseded] [--json]');
+            log("  mdkg work receipt update <id-or-qid> [--receipt-status <status>] [--add-artifacts <...>] [--add-proof-refs <...>] [--add-attestation-refs <...>] [--json]");
+            break;
+        case "artifact":
+            log("Usage:");
+            log("  mdkg work artifact add <order-or-receipt-id-or-qid> <file> [--id <archive.id>] [--kind source|artifact] [--json]");
+            break;
+        default:
+            log("Usage:");
+            log("  mdkg work contract new ...");
+            log("  mdkg work order new|update ...");
+            log("  mdkg work receipt new|update ...");
+            log("  mdkg work artifact add ...");
+            log("\nNotes:");
+            log("  - work commands mutate semantic mirror files only");
+            log("  - production order, receipt, feedback, dispute, payment, ledger, marketplace inventory, fulfillment, and execution state remains canonical outside mdkg");
+            log("  - do not store raw secrets, credentials, live payment state, ledger mutations, or canonical marketplace state in work mirrors");
+            log("  - artifact:// refs identify external/runtime-managed artifacts; archive:// refs identify committed mdkg archive sidecars");
+            log("  - update and artifact commands accept local ids or local qids; imported bundle qids are read-only");
+    }
+    printGlobalOptions(log);
+}
 function printTaskHelp(log, subcommand) {
     switch ((subcommand ?? "").toLowerCase()) {
         case "start":
@@ -376,7 +541,12 @@ function printDoctorHelp(log) {
     log("  - Node.js version compatibility");
     log("  - mdkg repo root + .mdkg/config.json");
     log("  - Template schema availability");
+    log("  - Archive sidecar storage hygiene");
+    log("  - Bundle snapshot storage guidance");
+    log("  - Bundle import health and staleness");
     log("  - Index load/rebuild health");
+    log("  - Capability cache load/rebuild health");
+    log("  - SQLite cache health when enabled");
     log("\nOptions:");
     log("  --json                Emit machine-readable JSON output");
     printGlobalOptions(log);
@@ -420,6 +590,18 @@ function printCommandHelp(log, command, subcommand) {
         case "skill":
             printSkillHelp(log, subcommand);
             return;
+        case "capability":
+            printCapabilityHelp(log, subcommand);
+            return;
+        case "archive":
+            printArchiveHelp(log, subcommand);
+            return;
+        case "bundle":
+            printBundleHelp(log, subcommand);
+            return;
+        case "work":
+            printWorkHelp(log, subcommand);
+            return;
         case "task":
             printTaskHelp(log, subcommand);
             return;
@@ -614,8 +796,9 @@ function runWorkspaceSubcommand(parsed, root) {
                 throw new errors_1.UsageError("workspace add requires <alias> <path>");
             }
             const mdkgDir = requireFlagValue("--mdkg-dir", parsed.flags["--mdkg-dir"]);
+            const visibility = requireFlagValue("--visibility", parsed.flags["--visibility"]);
             const json = parseBooleanFlag("--json", parsed.flags["--json"]);
-            (0, workspace_1.runWorkspaceAddCommand)({ root, alias, workspacePath, mdkgDir, json });
+            (0, workspace_1.runWorkspaceAddCommand)({ root, alias, workspacePath, mdkgDir, visibility, json });
             return 0;
         }
         case "rm": {
@@ -649,6 +832,369 @@ function runWorkspaceSubcommand(parsed, root) {
             throw new errors_1.UsageError("workspace requires ls/add/rm/enable/disable");
     }
 }
+function runCapabilitySubcommand(parsed, root) {
+    const subcommand = (parsed.positionals[1] ?? "").toLowerCase();
+    switch (subcommand) {
+        case "list": {
+            if (parsed.positionals.length > 2) {
+                throw new errors_1.UsageError("capability list does not accept positional arguments");
+            }
+            const kind = requireFlagValue("--kind", parsed.flags["--kind"]);
+            const visibility = requireFlagValue("--visibility", parsed.flags["--visibility"]);
+            const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+            const noCache = parseBooleanFlag("--no-cache", parsed.flags["--no-cache"]);
+            const noReindex = parseBooleanFlag("--no-reindex", parsed.flags["--no-reindex"]);
+            (0, capability_1.runCapabilityListCommand)({ root, kind, visibility, json, noCache, noReindex });
+            return 0;
+        }
+        case "search": {
+            if (parsed.positionals.length < 3) {
+                throw new errors_1.UsageError("capability search requires a query");
+            }
+            const query = parsed.positionals.slice(2).join(" ");
+            const kind = requireFlagValue("--kind", parsed.flags["--kind"]);
+            const visibility = requireFlagValue("--visibility", parsed.flags["--visibility"]);
+            const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+            const noCache = parseBooleanFlag("--no-cache", parsed.flags["--no-cache"]);
+            const noReindex = parseBooleanFlag("--no-reindex", parsed.flags["--no-reindex"]);
+            (0, capability_1.runCapabilitySearchCommand)({ root, query, kind, visibility, json, noCache, noReindex });
+            return 0;
+        }
+        case "show": {
+            const id = parsed.positionals[2];
+            if (!id || parsed.positionals.length > 3) {
+                throw new errors_1.UsageError("capability show requires <id-or-qid-or-slug>");
+            }
+            const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+            const noCache = parseBooleanFlag("--no-cache", parsed.flags["--no-cache"]);
+            const noReindex = parseBooleanFlag("--no-reindex", parsed.flags["--no-reindex"]);
+            (0, capability_1.runCapabilityShowCommand)({ root, id, json, noCache, noReindex });
+            return 0;
+        }
+        default:
+            throw new errors_1.UsageError("capability requires list/search/show");
+    }
+}
+function runArchiveSubcommand(parsed, root) {
+    const subcommand = (parsed.positionals[1] ?? "").toLowerCase();
+    switch (subcommand) {
+        case "add": {
+            const file = parsed.positionals[2];
+            if (!file || parsed.positionals.length > 3) {
+                throw new errors_1.UsageError("archive add requires <file>");
+            }
+            const id = requireFlagValue("--id", parsed.flags["--id"]);
+            const ws = requireFlagValue("--ws", parsed.flags["--ws"]);
+            const kind = requireFlagValue("--kind", parsed.flags["--kind"]);
+            const title = requireFlagValue("--title", parsed.flags["--title"]);
+            const refs = requireFlagValue("--refs", parsed.flags["--refs"]);
+            const relates = requireFlagValue("--relates", parsed.flags["--relates"]);
+            const visibility = requireFlagValue("--visibility", parsed.flags["--visibility"]);
+            const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+            (0, archive_1.runArchiveAddCommand)({ root, file, id, ws, kind, title, refs, relates, visibility, json });
+            return 0;
+        }
+        case "list": {
+            if (parsed.positionals.length > 2) {
+                throw new errors_1.UsageError("archive list does not accept positional arguments");
+            }
+            const ws = requireFlagValue("--ws", parsed.flags["--ws"]);
+            const kind = requireFlagValue("--kind", parsed.flags["--kind"]);
+            const visibility = requireFlagValue("--visibility", parsed.flags["--visibility"]);
+            const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+            (0, archive_1.runArchiveListCommand)({ root, ws, kind, visibility, json });
+            return 0;
+        }
+        case "show": {
+            const id = parsed.positionals[2];
+            if (!id || parsed.positionals.length > 3) {
+                throw new errors_1.UsageError("archive show requires <id-or-archive-uri>");
+            }
+            const ws = requireFlagValue("--ws", parsed.flags["--ws"]);
+            const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+            (0, archive_1.runArchiveShowCommand)({ root, id, ws, json });
+            return 0;
+        }
+        case "verify": {
+            if (parsed.positionals.length > 3) {
+                throw new errors_1.UsageError("archive verify accepts at most one id");
+            }
+            const id = parsed.positionals[2];
+            const ws = requireFlagValue("--ws", parsed.flags["--ws"]);
+            const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+            (0, archive_1.runArchiveVerifyCommand)({ root, id, ws, json });
+            return 0;
+        }
+        case "compress": {
+            if (parsed.positionals.length > 3) {
+                throw new errors_1.UsageError("archive compress accepts at most one id");
+            }
+            const id = parsed.positionals[2];
+            const all = parseBooleanFlag("--all", parsed.flags["--all"]);
+            const ws = requireFlagValue("--ws", parsed.flags["--ws"]);
+            const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+            (0, archive_1.runArchiveCompressCommand)({ root, id, all, ws, json });
+            return 0;
+        }
+        default:
+            throw new errors_1.UsageError("archive requires add/list/show/verify/compress");
+    }
+}
+function runBundleSubcommand(parsed, root) {
+    const subcommand = (parsed.positionals[1] ?? "").toLowerCase();
+    switch (subcommand) {
+        case "import": {
+            const action = (parsed.positionals[2] ?? "").toLowerCase();
+            const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+            switch (action) {
+                case "add": {
+                    const alias = parsed.positionals[3];
+                    const bundlePath = parsed.positionals[4];
+                    if (!alias || !bundlePath || parsed.positionals.length > 5) {
+                        throw new errors_1.UsageError("bundle import add requires <alias> <bundle-path>");
+                    }
+                    const visibility = requireFlagValue("--visibility", parsed.flags["--visibility"]);
+                    const profile = requireFlagValue("--profile", parsed.flags["--pack-profile"]);
+                    const sourcePath = requireFlagValue("--source-path", parsed.flags["--source-path"]);
+                    const sourceRepo = requireFlagValue("--source-repo", parsed.flags["--source-repo"]);
+                    const maxStaleRaw = requireFlagValue("--max-stale-seconds", parsed.flags["--max-stale-seconds"]);
+                    const maxStaleSeconds = maxStaleRaw === undefined ? undefined : Number.parseInt(maxStaleRaw, 10);
+                    (0, bundle_import_1.runBundleImportAddCommand)({
+                        root,
+                        alias,
+                        bundlePath,
+                        visibility,
+                        profile,
+                        sourcePath,
+                        sourceRepo,
+                        maxStaleSeconds,
+                        json,
+                    });
+                    return 0;
+                }
+                case "list": {
+                    if (parsed.positionals.length > 3) {
+                        throw new errors_1.UsageError("bundle import list does not accept positional arguments");
+                    }
+                    (0, bundle_import_1.runBundleImportListCommand)({ root, json });
+                    return 0;
+                }
+                case "rm":
+                case "remove": {
+                    const alias = parsed.positionals[3];
+                    if (!alias || parsed.positionals.length > 4) {
+                        throw new errors_1.UsageError("bundle import rm requires <alias>");
+                    }
+                    (0, bundle_import_1.runBundleImportRemoveCommand)({ root, alias, json });
+                    return 0;
+                }
+                case "enable": {
+                    const alias = parsed.positionals[3];
+                    if (!alias || parsed.positionals.length > 4) {
+                        throw new errors_1.UsageError("bundle import enable requires <alias>");
+                    }
+                    (0, bundle_import_1.runBundleImportEnableCommand)({ root, alias, json });
+                    return 0;
+                }
+                case "disable": {
+                    const alias = parsed.positionals[3];
+                    if (!alias || parsed.positionals.length > 4) {
+                        throw new errors_1.UsageError("bundle import disable requires <alias>");
+                    }
+                    (0, bundle_import_1.runBundleImportDisableCommand)({ root, alias, json });
+                    return 0;
+                }
+                case "verify": {
+                    if (parsed.positionals.length > 4) {
+                        throw new errors_1.UsageError("bundle import verify accepts at most one alias");
+                    }
+                    const alias = parsed.positionals[3];
+                    const all = parseBooleanFlag("--all", parsed.flags["--all"]);
+                    (0, bundle_import_1.runBundleImportVerifyCommand)({ root, alias, all, json });
+                    return 0;
+                }
+                default:
+                    throw new errors_1.UsageError("bundle import requires add/list/rm/enable/disable/verify");
+            }
+        }
+        case "create": {
+            if (parsed.positionals.length > 2) {
+                throw new errors_1.UsageError("bundle create does not accept positional arguments");
+            }
+            const profile = requireFlagValue("--profile", parsed.flags["--pack-profile"]);
+            const ws = requireFlagValue("--ws", parsed.flags["--ws"]);
+            const output = requireFlagValue("--output", parsed.flags["--out"]);
+            const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+            (0, bundle_1.runBundleCreateCommand)({ root, profile, ws, output, json });
+            return 0;
+        }
+        case "verify": {
+            if (parsed.positionals.length > 3) {
+                throw new errors_1.UsageError("bundle verify accepts at most one bundle path");
+            }
+            const bundlePath = parsed.positionals[2];
+            const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+            (0, bundle_1.runBundleVerifyCommand)({ root, bundlePath, json });
+            return 0;
+        }
+        case "show": {
+            const bundlePath = parsed.positionals[2];
+            if (!bundlePath || parsed.positionals.length > 3) {
+                throw new errors_1.UsageError("bundle show requires <bundle-path>");
+            }
+            const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+            (0, bundle_1.runBundleShowCommand)({ root, bundlePath, json });
+            return 0;
+        }
+        case "list": {
+            if (parsed.positionals.length > 2) {
+                throw new errors_1.UsageError("bundle list does not accept positional arguments");
+            }
+            const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+            (0, bundle_1.runBundleListCommand)({ root, json });
+            return 0;
+        }
+        default:
+            throw new errors_1.UsageError("bundle requires create/list/show/verify/import");
+    }
+}
+function runWorkSubcommand(parsed, root) {
+    const domain = (parsed.positionals[1] ?? "").toLowerCase();
+    const action = (parsed.positionals[2] ?? "").toLowerCase();
+    const ws = requireFlagValue("--ws", parsed.flags["--ws"]);
+    const json = parseBooleanFlag("--json", parsed.flags["--json"]);
+    if (domain === "contract" && action === "new") {
+        const title = parsed.positionals.slice(3).join(" ");
+        const id = requireFlagValue("--id", parsed.flags["--id"]);
+        const agentId = requireFlagValue("--agent-id", parsed.flags["--agent-id"]);
+        const kind = requireFlagValue("--kind", parsed.flags["--kind"]);
+        const inputs = requireFlagValue("--inputs", parsed.flags["--inputs"]);
+        const outputs = requireFlagValue("--outputs", parsed.flags["--outputs"]);
+        if (!title || !id || !agentId || !kind || !inputs || !outputs) {
+            throw new errors_1.UsageError("work contract new requires title, --id, --agent-id, --kind, --inputs, and --outputs");
+        }
+        const requiredCapabilities = requireFlagValue("--required-capabilities", parsed.flags["--required-capabilities"]);
+        const pricingModel = requireFlagValue("--pricing-model", parsed.flags["--pricing-model"]);
+        (0, work_1.runWorkContractNewCommand)({
+            root,
+            ws,
+            title,
+            id,
+            agentId,
+            kind,
+            inputs,
+            outputs,
+            requiredCapabilities,
+            pricingModel,
+            json,
+        });
+        return 0;
+    }
+    if (domain === "order" && action === "new") {
+        const title = parsed.positionals.slice(3).join(" ");
+        const id = requireFlagValue("--id", parsed.flags["--id"]);
+        const workId = requireFlagValue("--work-id", parsed.flags["--work-id"]);
+        const requester = requireFlagValue("--requester", parsed.flags["--requester"]);
+        if (!title || !id || !workId || !requester) {
+            throw new errors_1.UsageError("work order new requires title, --id, --work-id, and --requester");
+        }
+        const requestRef = requireFlagValue("--request-ref", parsed.flags["--request-ref"]);
+        const inputRefs = requireFlagValue("--input-refs", parsed.flags["--input-refs"]);
+        const requestedOutputs = requireFlagValue("--requested-outputs", parsed.flags["--requested-outputs"]);
+        const constraintRefs = requireFlagValue("--constraint-refs", parsed.flags["--constraint-refs"]);
+        (0, work_1.runWorkOrderNewCommand)({
+            root,
+            ws,
+            title,
+            id,
+            workId,
+            requester,
+            requestRef,
+            inputRefs,
+            requestedOutputs,
+            constraintRefs,
+            json,
+        });
+        return 0;
+    }
+    if (domain === "order" && action === "update") {
+        const id = parsed.positionals[3];
+        if (!id || parsed.positionals.length > 4) {
+            throw new errors_1.UsageError("work order update requires <id-or-qid>");
+        }
+        const status = requireFlagValue("--status", parsed.flags["--status"]);
+        const addInputRefs = requireFlagValue("--add-input-refs", parsed.flags["--add-input-refs"]);
+        const addArtifacts = requireFlagValue("--add-artifacts", parsed.flags["--add-artifacts"]);
+        (0, work_1.runWorkOrderUpdateCommand)({ root, ws, id, status, addInputRefs, addArtifacts, json });
+        return 0;
+    }
+    if (domain === "receipt" && action === "new") {
+        const title = parsed.positionals.slice(3).join(" ");
+        const id = requireFlagValue("--id", parsed.flags["--id"]);
+        const workOrderId = requireFlagValue("--work-order-id", parsed.flags["--work-order-id"]);
+        const outcome = requireFlagValue("--outcome", parsed.flags["--outcome"]);
+        if (!title || !id || !workOrderId || !outcome) {
+            throw new errors_1.UsageError("work receipt new requires title, --id, --work-order-id, and --outcome");
+        }
+        const receiptStatus = requireFlagValue("--receipt-status", parsed.flags["--receipt-status"]);
+        const costRef = requireFlagValue("--cost-ref", parsed.flags["--cost-ref"]);
+        const artifacts = requireFlagValue("--artifacts", parsed.flags["--artifacts"]);
+        const proofRefs = requireFlagValue("--proof-refs", parsed.flags["--proof-refs"]);
+        const attestationRefs = requireFlagValue("--attestation-refs", parsed.flags["--attestation-refs"]);
+        const inputHashes = requireFlagValue("--input-hashes", parsed.flags["--input-hashes"]);
+        const outputHashes = requireFlagValue("--output-hashes", parsed.flags["--output-hashes"]);
+        (0, work_1.runWorkReceiptNewCommand)({
+            root,
+            ws,
+            title,
+            id,
+            workOrderId,
+            outcome,
+            receiptStatus,
+            costRef,
+            artifacts,
+            proofRefs,
+            attestationRefs,
+            inputHashes,
+            outputHashes,
+            json,
+        });
+        return 0;
+    }
+    if (domain === "receipt" && action === "update") {
+        const id = parsed.positionals[3];
+        if (!id || parsed.positionals.length > 4) {
+            throw new errors_1.UsageError("work receipt update requires <id-or-qid>");
+        }
+        const receiptStatus = requireFlagValue("--receipt-status", parsed.flags["--receipt-status"]);
+        const addArtifacts = requireFlagValue("--add-artifacts", parsed.flags["--add-artifacts"]);
+        const addProofRefs = requireFlagValue("--add-proof-refs", parsed.flags["--add-proof-refs"]);
+        const addAttestationRefs = requireFlagValue("--add-attestation-refs", parsed.flags["--add-attestation-refs"]);
+        (0, work_1.runWorkReceiptUpdateCommand)({
+            root,
+            ws,
+            id,
+            receiptStatus,
+            addArtifacts,
+            addProofRefs,
+            addAttestationRefs,
+            json,
+        });
+        return 0;
+    }
+    if (domain === "artifact" && action === "add") {
+        const targetId = parsed.positionals[3];
+        const file = parsed.positionals[4];
+        if (!targetId || !file || parsed.positionals.length > 5) {
+            throw new errors_1.UsageError("work artifact add requires <order-or-receipt-id-or-qid> <file>");
+        }
+        const id = requireFlagValue("--id", parsed.flags["--id"]);
+        const kind = requireFlagValue("--kind", parsed.flags["--kind"]);
+        (0, work_1.runWorkArtifactAddCommand)({ root, ws, targetId, file, id, kind, json });
+        return 0;
+    }
+    throw new errors_1.UsageError("work requires contract new, order new/update, receipt new/update, or artifact add");
+}
 function runSkillSubcommand(parsed, root) {
     const subcommand = (parsed.positionals[1] ?? "").toLowerCase();
     switch (subcommand) {
@@ -906,11 +1452,10 @@ function runCommand(parsed, root, runtime) {
     switch (command) {
         case "init": {
             const force = parseBooleanFlag("--force", parsed.flags["--force"]);
-            const createAgents = parseBooleanFlag("--agents", parsed.flags["--agents"]);
-            const createClaude = parseBooleanFlag("--claude", parsed.flags["--claude"]);
-            const createLlm = parseBooleanFlag("--llm", parsed.flags["--llm"]);
-            if (parsed.flags["--omni"]) {
-                throw new errors_1.UsageError("`mdkg init --omni` was removed; use `mdkg init --agent`");
+            for (const removedFlag of ["--llm", "--agents", "--claude", "--omni"]) {
+                if (parsed.flags[removedFlag] !== undefined) {
+                    throw new errors_1.UsageError(`\`mdkg init ${removedFlag}\` was removed; use \`mdkg init --agent\``);
+                }
             }
             const agent = parseBooleanFlag("--agent", parsed.flags["--agent"]);
             const noUpdateIgnores = parseBooleanFlag("--no-update-ignores", parsed.flags["--no-update-ignores"]);
@@ -924,9 +1469,6 @@ function runCommand(parsed, root, runtime) {
                 updateNpmignore,
                 updateDockerignore,
                 noUpdateIgnores,
-                createAgents,
-                createClaude,
-                createLlm,
                 agent,
             });
             return 0;
@@ -1019,6 +1561,14 @@ function runCommand(parsed, root, runtime) {
             return runWorkspaceSubcommand(parsed, root);
         case "skill":
             return runSkillSubcommand(parsed, root);
+        case "capability":
+            return runCapabilitySubcommand(parsed, root);
+        case "archive":
+            return runArchiveSubcommand(parsed, root);
+        case "bundle":
+            return runBundleSubcommand(parsed, root);
+        case "work":
+            return runWorkSubcommand(parsed, root);
         case "task":
             return runTaskSubcommand(parsed, root);
         case "event":
@@ -1129,6 +1679,7 @@ function runCommand(parsed, root, runtime) {
             const maxTokens = parseNumberFlag("--max-tokens", parsed.flags["--max-tokens"]);
             const skills = requireFlagValue("--skills", parsed.flags["--skills"]);
             const skillsDepth = requireFlagValue("--skills-depth", parsed.flags["--skills-depth"]);
+            const visibility = requireFlagValue("--visibility", parsed.flags["--visibility"]);
             const dryRun = parseBooleanFlag("--dry-run", parsed.flags["--dry-run"]);
             const stats = parseBooleanFlag("--stats", parsed.flags["--stats"]);
             const statsOut = requireFlagValue("--stats-out", parsed.flags["--stats-out"]);
@@ -1153,6 +1704,7 @@ function runCommand(parsed, root, runtime) {
                 maxTokens,
                 skills,
                 skillsDepth,
+                visibility,
                 dryRun,
                 stats,
                 statsOut,