mdkg 0.4.0 → 0.4.2

package/dist/commands/validate.js

@@ -21,6 +21,7 @@ const visibility_1 = require("../graph/visibility");
 const sqlite_index_1 = require("../graph/sqlite_index");
 const errors_1 = require("../util/errors");
 const skill_mirror_1 = require("./skill_mirror");
+const VALIDATION_PROFILES = new Set(["omni-room"]);
 exports.RECOMMENDED_HEADINGS = {
     task: [
         "Overview",
@@ -143,6 +144,69 @@ function collectManifestCompatibilityWarnings(qid, filePath, node) {
     }
     return [];
 }
+function collectContractProfileWarnings(qid, node) {
+    if (!(0, agent_file_types_1.isAgentFileType)(node.type)) {
+        return [];
+    }
+    const warnings = [];
+    if (node.frontmatter.profile !== undefined) {
+        warnings.push(`${qid}: contract-profile.ambiguous-field warning: profile is ambiguous and is not a supported alias; use contract_profile for mdkg contract surfaces`);
+    }
+    const contractProfile = node.frontmatter.contract_profile;
+    if (typeof contractProfile === "string" && !agent_file_types_1.KNOWN_CONTRACT_PROFILES.has(contractProfile)) {
+        warnings.push(`${qid}: contract-profile.unknown warning: unknown contract_profile ${contractProfile}; generic validation accepts well-shaped values, but explicit profile validation may reject it`);
+    }
+    if (node.type === "receipt") {
+        const receiptKind = node.frontmatter.receipt_kind;
+        if (typeof receiptKind === "string" && !agent_file_types_1.KNOWN_RECEIPT_KINDS.has(receiptKind)) {
+            warnings.push(`${qid}: receipt-kind.unknown warning: unknown receipt_kind ${receiptKind}; generic validation accepts well-shaped values, but explicit profile validation may reject it`);
+        }
+        const redactionClass = node.frontmatter.redaction_class;
+        if (typeof redactionClass === "string" && !agent_file_types_1.KNOWN_REDACTION_CLASSES.has(redactionClass)) {
+            warnings.push(`${qid}: redaction-class.unknown warning: unknown redaction_class ${redactionClass}; generic validation accepts well-shaped values, but explicit profile validation may reject it`);
+        }
+        if (typeof redactionClass === "string" && node.frontmatter.redaction_policy === undefined) {
+            warnings.push(`${qid}: redaction-class.missing-policy warning: redaction_class should be paired with redaction_policy so receipt handling and sensitivity are both explicit`);
+        }
+    }
+    return warnings;
+}
+function normalizeValidationProfile(profile) {
+    if (profile === undefined) {
+        return undefined;
+    }
+    if (!VALIDATION_PROFILES.has(profile)) {
+        throw new errors_1.UsageError("--profile must be one of omni-room");
+    }
+    return profile;
+}
+function collectContractProfileErrors(qid, node, profile) {
+    if (!(0, agent_file_types_1.isAgentFileType)(node.type)) {
+        return [];
+    }
+    const errors = [];
+    if (node.frontmatter.profile !== undefined) {
+        errors.push(`${qid}: contract-profile.ambiguous-field error: profile is ambiguous and is not a supported alias; use contract_profile for ${profile} validation`);
+    }
+    const contractProfile = node.frontmatter.contract_profile;
+    if (typeof contractProfile === "string" && contractProfile !== profile) {
+        errors.push(`${qid}: contract-profile.incompatible error: contract_profile ${contractProfile} is incompatible with validation profile ${profile}`);
+    }
+    if (node.type === "receipt") {
+        const receiptKind = node.frontmatter.receipt_kind;
+        if (typeof receiptKind === "string" && !agent_file_types_1.KNOWN_RECEIPT_KINDS.has(receiptKind)) {
+            errors.push(`${qid}: receipt-kind.incompatible error: receipt_kind ${receiptKind} is incompatible with validation profile ${profile}`);
+        }
+        const redactionClass = node.frontmatter.redaction_class;
+        if (typeof redactionClass === "string" && !agent_file_types_1.KNOWN_REDACTION_CLASSES.has(redactionClass)) {
+            errors.push(`${qid}: redaction-class.incompatible error: redaction_class ${redactionClass} is incompatible with validation profile ${profile}`);
+        }
+        if (typeof redactionClass === "string" && node.frontmatter.redaction_policy === undefined) {
+            errors.push(`${qid}: redaction-class.missing-policy error: redaction_class requires redaction_policy for validation profile ${profile}`);
+        }
+    }
+    return errors;
+}
 function collectChangedPaths(root) {
     const result = (0, child_process_1.spawnSync)("git", ["-C", root, "status", "--porcelain", "--", ".mdkg"], {
         encoding: "utf8",
@@ -234,6 +298,20 @@ function warningDiagnostic(message, nodes) {
             remediation: "Rename legacy SPEC.md files to MANIFEST.md and update transitional type: spec frontmatter to type: manifest before the compatibility release closes.",
         };
     }
+    const contractProfileMatch = /(contract-profile|receipt-kind|redaction-class)\.([a-z-]+)/.exec(message);
+    if (contractProfileMatch) {
+        return {
+            id: `${contractProfileMatch[1]}.${contractProfileMatch[2]}`,
+            category: "contract-profile",
+            severity: "warning",
+            message,
+            qid,
+            node_type: nodeType,
+            path: pathValue,
+            ref: qid,
+            remediation: "Use contract_profile and explicit policy/kind/class fields only when they are intentional generic mdkg contract metadata.",
+        };
+    }
     if (message.includes("sqlite") || message.includes("index")) {
         return {
             id: "cache.index",
@@ -485,6 +563,7 @@ function validateEventsJsonl(root, config, errors) {
     }
 }
 function collectValidateReceipt(options) {
+    const validationProfile = normalizeValidationProfile(options.profile);
     const config = (0, config_1.loadConfig)(options.root);
     const templateSchemaInfo = (0, template_schema_1.loadTemplateSchemasWithInfo)(options.root, config, node_1.ALLOWED_TYPES);
     const templateSchemas = templateSchemaInfo.schemas;
@@ -543,6 +622,10 @@ function collectValidateReceipt(options) {
                 }
                 warnings.push(...collectRawContentWarnings(qid, node));
                 warnings.push(...collectManifestCompatibilityWarnings(qid, filePath, node));
+                warnings.push(...collectContractProfileWarnings(qid, node));
+                if (validationProfile) {
+                    errors.push(...collectContractProfileErrors(qid, node, validationProfile));
+                }
             }
             catch (err) {
                 const message = err instanceof Error ? err.message : "unknown error";
@@ -641,6 +724,7 @@ function collectValidateReceipt(options) {
         warning_diagnostics: filteredWarningDiagnostics,
         warning_summary: buildWarningSummary(filteredWarningDiagnostics),
         errors: uniqueErrors,
+        ...(validationProfile ? { validation_profile: validationProfile } : {}),
         ...(outPath ? { report_path: outPath } : {}),
         ...(options.changedOnly
             ? { warning_filter: { mode: "changed-only", changed_paths: Array.from(changedPaths).sort() } }

package/dist/commands/work.js

@@ -44,6 +44,7 @@ const RECEIPT_STATUSES = new Set(["recorded", "verified", "rejected", "supersede
 const OUTCOMES = new Set(["success", "partial", "failure"]);
 const REDACTION_POLICIES = new Set(["refs_and_hashes_only", "redacted_summary", "external_private"]);
 const WORKFLOW_VALIDATE_TYPES = new Set(agent_file_types_1.AGENT_FILE_TYPES);
+const CONTRACT_METADATA_RE = /^[a-z][a-z0-9_]*(?:-[a-z0-9_]+)*$/;
 function parseCsvList(raw) {
     if (!raw) {
         return [];
@@ -84,6 +85,16 @@ function normalizeEnum(value, flag, allowed) {
     }
     return normalized;
 }
+function normalizeContractMetadataToken(value, flag) {
+    if (value === undefined) {
+        return undefined;
+    }
+    const normalized = value.toLowerCase();
+    if (!CONTRACT_METADATA_RE.test(normalized)) {
+        throw new errors_1.UsageError(`${flag} must be lowercase snake/kebab style`);
+    }
+    return normalized;
+}
 function normalizeSha256Ref(value, flag) {
     if (value === undefined) {
         return undefined;
@@ -251,6 +262,10 @@ function workflowDiagnosticCode(message) {
     if (manifestCompatMatch) {
         return `manifest.compat.${manifestCompatMatch[1]}`;
     }
+    const contractProfileMatch = /(contract-profile|receipt-kind|redaction-class)\.([a-z-]+)/.exec(message);
+    if (contractProfileMatch) {
+        return `${contractProfileMatch[1]}.${contractProfileMatch[2]}`;
+    }
     if (message.includes("references missing") || message.includes("references missing node")) {
         return "reference.missing";
     }
@@ -325,7 +340,7 @@ function buildWorkValidateReceipt(options) {
             .sort((a, b) => a.qid.localeCompare(b.qid));
     }
     const candidatePaths = workflowCandidatePaths({ root: options.root, config, ws, type, target });
-    const validation = (0, validate_1.collectValidateReceipt)({ root: options.root });
+    const validation = (0, validate_1.collectValidateReceipt)({ root: options.root, profile: options.profile });
     const warnings = filterWorkflowMessages(validation.warnings, targets, candidatePaths);
     const errors = filterWorkflowMessages(validation.errors, targets, candidatePaths);
     const diagnostics = [
@@ -346,6 +361,7 @@ function buildWorkValidateReceipt(options) {
         action: "work.validate",
         ok: errors.length === 0,
         type: type ?? "all",
+        ...(options.profile ? { validation_profile: options.profile } : {}),
         ...(target ? { target: (0, query_output_1.toNodeSummaryJson)(target) } : {}),
         checked_count: target ? 1 : candidatePaths.filter((value) => !path_1.default.isAbsolute(value)).length,
         nodes: targets.map((node) => (0, query_output_1.toNodeSummaryJson)(node)),
@@ -625,6 +641,19 @@ function writeFrontmatterFile(filePath, frontmatter, body) {
     const content = ["---", ...lines, "---", body.trimStart()].join("\n");
     (0, atomic_1.atomicWriteFile)(filePath, content.endsWith("\n") ? content : `${content}\n`);
 }
+function mergeRenderedFrontmatter(content, filePath, additions) {
+    const entries = Object.entries(additions).filter((entry) => entry[1] !== undefined);
+    if (entries.length === 0) {
+        return content;
+    }
+    const { frontmatter, body } = (0, frontmatter_1.parseFrontmatter)(content, filePath);
+    for (const [key, value] of entries) {
+        frontmatter[key] = value;
+    }
+    const lines = ["---", ...(0, frontmatter_1.formatFrontmatter)(frontmatter, frontmatter_1.DEFAULT_FRONTMATTER_KEY_ORDER), "---", body.trimStart()];
+    const merged = lines.join("\n");
+    return merged.endsWith("\n") ? merged : `${merged}\n`;
+}
 function createAgentWorkflowNode(options) {
     const config = (0, config_1.loadConfig)(options.root);
     const ws = normalizeWorkspace(options.ws);
@@ -641,7 +670,7 @@ function createAgentWorkflowNode(options) {
     const slug = slugifyTitle(options.title);
     const filePath = path_1.default.resolve(options.root, workspace.path, workspace.mdkg_dir, "work", `${id}-${slug}`, agent_file_types_1.AGENT_FILE_BASENAMES[options.type]);
     const template = (0, loader_1.loadTemplate)(options.root, config, options.type);
-    const content = (0, loader_1.renderTemplate)(template, {
+    const renderedContent = (0, loader_1.renderTemplate)(template, {
         id,
         type: options.type,
         title: options.title,
@@ -649,6 +678,7 @@ function createAgentWorkflowNode(options) {
         updated: today,
         ...options.overrides,
     });
+    const content = mergeRenderedFrontmatter(renderedContent, filePath, options.overrides);
     try {
         (0, atomic_1.writeFileExclusive)(filePath, content);
     }
@@ -745,6 +775,9 @@ function createWorkOrderForWork(options) {
             request_ref: requestRef,
             trigger_ref: triggerRef,
             payload_hash: payloadHash,
+            contract_profile: normalizeContractMetadataToken(options.contractProfile, "--contract-profile"),
+            validation_policy_ref: options.validationPolicyRef,
+            evidence_policy_ref: options.evidencePolicyRef,
             input_refs: inputRefs,
             queue_refs: queueRefs,
             requested_outputs: requestedOutputs,
@@ -766,6 +799,7 @@ function runWorkContractNewCommandLocked(options) {
         ? [agentId]
         : [];
     const requiredCapabilities = parseCsvList(options.requiredCapabilities);
+    const contractProfile = normalizeContractMetadataToken(options.contractProfile, "--contract-profile");
     const receipt = createAgentWorkflowNode({
         root: options.root,
         ws,
@@ -776,6 +810,7 @@ function runWorkContractNewCommandLocked(options) {
         overrides: {
             agent_id: agentId,
             kind,
+            contract_profile: contractProfile,
             pricing_model: normalizeEnum(options.pricingModel ?? "quoted", "--pricing-model", PRICING_MODELS),
             required_capabilities: requiredCapabilities.length > 0 ? requiredCapabilities : [kind],
             inputs: parseCsvList(options.inputs),
@@ -807,6 +842,9 @@ function runWorkOrderNewCommandLocked(options) {
         queueRefs: options.queueRefs,
         requestedOutputs: options.requestedOutputs,
         constraintRefs: options.constraintRefs,
+        contractProfile: options.contractProfile,
+        validationPolicyRef: options.validationPolicyRef,
+        evidencePolicyRef: options.evidencePolicyRef,
         now: options.now,
     });
     printReceipt("order created", created.receipt, options.json);
@@ -979,6 +1017,11 @@ function runWorkReceiptNewCommandLocked(options) {
             outcome: normalizeEnum(options.outcome, "--outcome", OUTCOMES),
             cost_ref: options.costRef ?? "cost.redacted",
             redaction_policy: normalizeEnum(options.redactionPolicy ?? "refs_and_hashes_only", "--redaction-policy", REDACTION_POLICIES),
+            contract_profile: normalizeContractMetadataToken(options.contractProfile, "--contract-profile"),
+            receipt_kind: normalizeContractMetadataToken(options.receiptKind, "--receipt-kind"),
+            redaction_class: normalizeContractMetadataToken(options.redactionClass, "--redaction-class"),
+            validation_policy_ref: options.validationPolicyRef,
+            evidence_policy_ref: options.evidencePolicyRef,
             artifacts: parseCsvList(options.artifacts),
             proof_refs: parseCsvList(options.proofRefs),
             attestation_refs: parseCsvList(options.attestationRefs),

package/dist/graph/agent_file_types.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AGENT_ATTRIBUTE_KEY_ORDER = exports.AGENT_FILE_BASENAMES = exports.AGENT_FILE_TYPES = exports.LEGACY_SPEC_BASENAME = exports.CANONICAL_MANIFEST_BASENAME = void 0;
+exports.KNOWN_REDACTION_CLASSES = exports.KNOWN_RECEIPT_KINDS = exports.KNOWN_CONTRACT_PROFILES = exports.AGENT_ATTRIBUTE_KEY_ORDER = exports.AGENT_FILE_BASENAMES = exports.AGENT_FILE_TYPES = exports.LEGACY_SPEC_BASENAME = exports.CANONICAL_MANIFEST_BASENAME = void 0;
 exports.isAgentFileType = isAgentFileType;
 exports.isManifestSemanticType = isManifestSemanticType;
 exports.collectManifestSiblingConflicts = collectManifestSiblingConflicts;
@@ -41,6 +41,9 @@ const MANIFEST_ATTRIBUTE_KEYS = [
     "role",
     "runtime_mode",
     "work_contracts",
+    "contract_profile",
+    "validation_policy_ref",
+    "evidence_policy_ref",
     "requested_capabilities",
     "skill_refs",
     "tool_refs",
@@ -58,6 +61,7 @@ exports.AGENT_ATTRIBUTE_KEY_ORDER = {
         "version",
         "agent_id",
         "kind",
+        "contract_profile",
         "pricing_model",
         "required_capabilities",
         "skill_refs",
@@ -79,6 +83,9 @@ exports.AGENT_ATTRIBUTE_KEY_ORDER = {
         "request_ref",
         "trigger_ref",
         "payload_hash",
+        "contract_profile",
+        "validation_policy_ref",
+        "evidence_policy_ref",
         "input_refs",
         "queue_refs",
         "requested_outputs",
@@ -92,6 +99,11 @@ exports.AGENT_ATTRIBUTE_KEY_ORDER = {
         "outcome",
         "cost_ref",
         "redaction_policy",
+        "contract_profile",
+        "receipt_kind",
+        "redaction_class",
+        "validation_policy_ref",
+        "evidence_policy_ref",
         "proof_refs",
         "attestation_refs",
         "evidence_hashes",
@@ -123,6 +135,9 @@ exports.AGENT_ATTRIBUTE_KEY_ORDER = {
 const SEMVER_RE = /^\d+\.\d+\.\d+(?:[-+][a-z0-9.-]+)?$/;
 const LOWER_TOKEN_RE = /^[a-z][a-z0-9_]*(?:-[a-z0-9_]+)*$/;
 const FIELD_DESCRIPTOR_RE = /^[a-z][a-z0-9_]*:[a-z][a-z0-9_]*(?::(?:required|optional))?$/;
+exports.KNOWN_CONTRACT_PROFILES = new Set(["generic", "omni-room"]);
+exports.KNOWN_RECEIPT_KINDS = new Set(["worker", "final", "cleanup", "audit"]);
+exports.KNOWN_REDACTION_CLASSES = new Set(["public", "internal", "private", "restricted"]);
 const ROLE_VALUES = new Set([
     "orchestrator",
     "subagent",
@@ -233,7 +248,7 @@ function collectManifestSiblingConflicts(filePaths, formatDir) {
     const conflicts = [];
     for (const [dirPath, basenames] of Array.from(basenamesByDir.entries()).sort()) {
         if (basenames.has(exports.CANONICAL_MANIFEST_BASENAME) && basenames.has(exports.LEGACY_SPEC_BASENAME)) {
-            conflicts.push(`${formatDir(dirPath)}: MANIFEST.md and SPEC.md cannot both exist in the same logical Omni unit; keep MANIFEST.md and remove the legacy SPEC.md alias`);
+            conflicts.push(`${formatDir(dirPath)}: MANIFEST.md and SPEC.md cannot both exist in the same logical unit; keep MANIFEST.md and remove the legacy SPEC.md alias`);
         }
     }
     return conflicts;
@@ -390,6 +405,48 @@ function validatePortableOrUriScalar(value, key, filePath) {
         throw formatError(filePath, `${key} must be a portable id or URI ref`);
     }
 }
+function requireContractMetadataToken(value, key, filePath) {
+    if (LOWER_TOKEN_RE.test(value)) {
+        return;
+    }
+    const id = key === "receipt_kind"
+        ? "receipt-kind.invalid"
+        : key === "redaction_class"
+            ? "redaction-class.invalid"
+            : "contract-profile.invalid";
+    throw formatError(filePath, `${id}: ${key} must be lowercase snake/kebab style`);
+}
+function optionalContractMetadataString(frontmatter, key, filePath) {
+    const value = frontmatter[key];
+    if (value === undefined) {
+        return undefined;
+    }
+    const id = key === "receipt_kind"
+        ? "receipt-kind.invalid"
+        : key === "redaction_class"
+            ? "redaction-class.invalid"
+            : "contract-profile.invalid";
+    if (typeof value !== "string" || value.trim().length === 0) {
+        throw formatError(filePath, `${id}: ${key} must be a non-empty string`);
+    }
+    return value;
+}
+function validateOptionalContractProfile(frontmatter, filePath) {
+    const contractProfile = optionalContractMetadataString(frontmatter, "contract_profile", filePath);
+    if (contractProfile) {
+        requireContractMetadataToken(contractProfile, "contract_profile", filePath);
+    }
+}
+function validateOptionalPolicyRefs(frontmatter, filePath) {
+    const validationPolicyRef = optionalRefString(frontmatter, "validation_policy_ref", filePath);
+    if (validationPolicyRef) {
+        validatePortableOrUriScalar(validationPolicyRef, "validation_policy_ref", filePath);
+    }
+    const evidencePolicyRef = optionalRefString(frontmatter, "evidence_policy_ref", filePath);
+    if (evidencePolicyRef) {
+        validatePortableOrUriScalar(evidencePolicyRef, "evidence_policy_ref", filePath);
+    }
+}
 function validateOptionalFieldDescriptors(values, key, filePath) {
     if (values.length === 0) {
         return;
@@ -448,6 +505,8 @@ function validateAgentFrontmatter(type, frontmatter, filePath) {
             requireEnum(runtimeMode, "runtime_mode", RUNTIME_MODE_VALUES, filePath);
             const updatePolicy = expectString(frontmatter, "update_policy", filePath);
             requireEnum(updatePolicy, "update_policy", UPDATE_POLICY_VALUES, filePath);
+            validateOptionalContractProfile(frontmatter, filePath);
+            validateOptionalPolicyRefs(frontmatter, filePath);
             validateRelativeMarkdownPaths(optionalList(frontmatter, "work_contracts", filePath), "work_contracts", "WORK.md", filePath);
             validateCapabilities(optionalList(frontmatter, "requested_capabilities", filePath), "requested_capabilities", filePath);
             validatePortableRefs(optionalList(frontmatter, "skill_refs", filePath), "skill_refs", filePath);
@@ -467,6 +526,7 @@ function validateAgentFrontmatter(type, frontmatter, filePath) {
             requirePortableIdRef(agentId, "agent_id", filePath);
             const kind = expectString(frontmatter, "kind", filePath);
             requireLowerToken(kind, "kind", filePath);
+            validateOptionalContractProfile(frontmatter, filePath);
             const pricingModel = expectString(frontmatter, "pricing_model", filePath);
             requireEnum(pricingModel, "pricing_model", PRICING_MODEL_VALUES, filePath);
             const requiredCapabilities = expectList(frontmatter, "required_capabilities", filePath);
@@ -505,6 +565,8 @@ function validateAgentFrontmatter(type, frontmatter, filePath) {
             validatePortableOrUriScalar(requester, "requester", filePath);
             const orderStatus = expectString(frontmatter, "order_status", filePath);
             requireEnum(orderStatus, "order_status", ORDER_STATUS_VALUES, filePath);
+            validateOptionalContractProfile(frontmatter, filePath);
+            validateOptionalPolicyRefs(frontmatter, filePath);
             const requestRef = optionalRefString(frontmatter, "request_ref", filePath);
             if (requestRef) {
                 validatePortableOrUriScalar(requestRef, "request_ref", filePath);
@@ -542,6 +604,16 @@ function validateAgentFrontmatter(type, frontmatter, filePath) {
             if (redactionPolicy) {
                 requireEnum(redactionPolicy, "redaction_policy", REDACTION_POLICY_VALUES, filePath);
             }
+            validateOptionalContractProfile(frontmatter, filePath);
+            const receiptKind = optionalContractMetadataString(frontmatter, "receipt_kind", filePath);
+            if (receiptKind) {
+                requireContractMetadataToken(receiptKind, "receipt_kind", filePath);
+            }
+            const redactionClass = optionalContractMetadataString(frontmatter, "redaction_class", filePath);
+            if (redactionClass) {
+                requireContractMetadataToken(redactionClass, "redaction_class", filePath);
+            }
+            validateOptionalPolicyRefs(frontmatter, filePath);
             validatePortableOrUriRefs(optionalList(frontmatter, "proof_refs", filePath), "proof_refs", filePath);
             validatePortableOrUriRefs(optionalList(frontmatter, "attestation_refs", filePath), "attestation_refs", filePath);
             validateHashRefs(optionalList(frontmatter, "evidence_hashes", filePath), "evidence_hashes", filePath);

package/dist/graph/frontmatter.js

@@ -30,11 +30,16 @@ exports.DEFAULT_FRONTMATTER_KEY_ORDER = [
     "role",
     "runtime_mode",
     "work_contracts",
+    "contract_profile",
+    "validation_policy_ref",
+    "evidence_policy_ref",
     "requested_capabilities",
     "resource_profile",
     "update_policy",
     "agent_id",
     "kind",
+    "receipt_kind",
+    "redaction_class",
     "pricing_model",
     "required_capabilities",
     "inputs",

package/dist/graph/node.js

@@ -236,8 +236,36 @@ function requireTemplateSchema(type, templateSchemas, filePath) {
     return schema;
 }
 const OPTIONAL_COMPAT_TEMPLATE_KEYS = {
+    manifest: {
+        contract_profile: "scalar",
+        validation_policy_ref: "scalar",
+        evidence_policy_ref: "scalar",
+        profile: "scalar",
+    },
     spec: {
         spec_kind: "scalar",
+        contract_profile: "scalar",
+        validation_policy_ref: "scalar",
+        evidence_policy_ref: "scalar",
+        profile: "scalar",
+    },
+    work: {
+        contract_profile: "scalar",
+        profile: "scalar",
+    },
+    work_order: {
+        contract_profile: "scalar",
+        validation_policy_ref: "scalar",
+        evidence_policy_ref: "scalar",
+        profile: "scalar",
+    },
+    receipt: {
+        contract_profile: "scalar",
+        receipt_kind: "scalar",
+        redaction_class: "scalar",
+        validation_policy_ref: "scalar",
+        evidence_policy_ref: "scalar",
+        profile: "scalar",
     },
 };
 function validateTemplateKeys(frontmatter, schema, filePath) {

package/dist/init/AGENT_START.md

@@ -57,6 +57,12 @@ Agent operating prompt:
 - Use `mdkg archive add/list/show/verify/compress` for committed source and artifact sidecars under `.mdkg/archive`.
 - Use `mdkg work ...` helpers for semantic mirror contracts, deterministic triggers, work order status, receipt verification, and artifact registration.
 - Treat work contracts, orders, and receipts as committed semantic mirrors only; never store raw secrets, credentials, live payment state, ledger mutations, or canonical marketplace state in mdkg.
+- Treat optional `contract_profile`, policy refs, receipt kind, and redaction
+  class fields as generic semantic mirror metadata. Use `mdkg validate --profile
+  omni-room` or `mdkg work validate --profile omni-room` only when a downstream
+  profile-specific check is intended; mdkg validates mirrors, while downstream
+  runtimes own execution, provider state, billing or ledger state, and final
+  receipt authority.
 - Use `artifact://...` for external/runtime-managed artifacts and `archive://...` for committed mdkg archive sidecars.
 - Use `mdkg bundle create/list/show/verify` for explicit full `.mdkg` graph snapshot bundles.
 - Use `mdkg subgraph add/list/verify/sync/materialize` to register child bundle snapshots as read-only planning context, refresh root-owned child bundle snapshots, and optionally generate ignored inspection trees.

package/dist/init/CLI_COMMAND_MATRIX.md

@@ -120,10 +120,11 @@ Project database commands:
 - active `.mdkg/db/runtime/` files and `.mdkg/db` WAL/SHM/journal/lock/temp files are ignored by default
 
 Validation commands:
-- `mdkg validate [--out <path>] [--json-out <path>] [--quiet] [--changed-only] [--summary] [--limit <n>] [--json]`
+- `mdkg validate [--out <path>] [--json-out <path>] [--quiet] [--changed-only] [--summary] [--limit <n>] [--profile <name>] [--json]`
 - `--changed-only` filters warning presentation to changed `.mdkg` files while full graph errors still run
 - `--summary` emits bounded warning samples for agent/CI logs; `--limit <n>` controls the sample size
 - `--out <path>` writes the compatibility text report; `--json-out <path>` writes a clean full JSON receipt
+- `--profile omni-room` applies explicit contract-profile validation after generic validation; it is separate from `mdkg pack --profile`
 - JSON receipts include `warning_summary` and `warning_diagnostics` with warning ids, categories, severity, paths, refs, and remediation text
 
 Node creation commands:
@@ -146,6 +147,9 @@ Agent workflow file type creation:
 
 Agent workflow notes:
 - `--id <portable-id>` is only for agent workflow file types.
+- `--contract-profile <name>` is supported for MANIFEST, WORK, WORK_ORDER, and RECEIPT.
+- `--validation-policy-ref <ref>` and `--evidence-policy-ref <ref>` are supported for MANIFEST, WORK_ORDER, and RECEIPT.
+- `--receipt-kind <kind>` and `--redaction-class <class>` are supported for RECEIPT.
 - `manifest` and `work` scaffold as validation-clean standalone docs.
 - `work_order`, `receipt`, `feedback`, `dispute`, and `proposal` need real refs before strict `mdkg validate` passes.
 - `goal` nodes capture recursive objective state and required checks, but normal `mdkg next` does not select them.
@@ -285,22 +289,23 @@ Subgraph orchestration:
 - public/internal subgraphs require public bundle profiles
 
 Work semantic mirrors:
-- `mdkg work contract new "<title>" --id <work.id> --agent-id <agent.id> --kind <kind> --inputs <...> --outputs <...> [--required-capabilities <...>] [--pricing-model <...>] [--json]`
+- `mdkg work contract new "<title>" --id <work.id> --agent-id <agent.id> --kind <kind> --inputs <...> --outputs <...> [--contract-profile <name>] [--required-capabilities <...>] [--pricing-model <...>] [--json]`
 - `mdkg work trigger <work-or-capability-ref> [--id <order.id>] [--title "<title>"] [--requester <ref>] [--enqueue <queue>] [--json]`
-- `mdkg work order new "<title>" --id <order.id> --work-id <work.id> --requester <ref> [--request-ref <ref>] [--input-refs <...>] [--requested-outputs <...>] [--json]`
+- `mdkg work order new "<title>" --id <order.id> --work-id <work.id> --requester <ref> [--contract-profile <name>] [--validation-policy-ref <ref>] [--evidence-policy-ref <ref>] [--request-ref <ref>] [--input-refs <...>] [--requested-outputs <...>] [--json]`
 - `mdkg work order status <id-or-qid> [--json]`
 - `mdkg work order update <id-or-qid> [--status <status>] [--add-input-refs <...>] [--add-artifacts <...>] [--json]`
-- `mdkg work receipt new "<title>" --id <receipt.id> --work-order-id <order.id> --outcome success|partial|failure [--receipt-status recorded|verified|rejected|superseded] [--json]`
+- `mdkg work receipt new "<title>" --id <receipt.id> --work-order-id <order.id> --outcome success|partial|failure [--receipt-status recorded|verified|rejected|superseded] [--redaction-policy refs_and_hashes_only|redacted_summary|external_private] [--contract-profile <name>] [--receipt-kind <kind>] [--redaction-class <class>] [--validation-policy-ref <ref>] [--evidence-policy-ref <ref>] [--json]`
 - `mdkg work receipt verify <id-or-qid> [--json]`
 - `mdkg work receipt update <id-or-qid> [--receipt-status <status>] [--add-artifacts <...>] [--add-proof-refs <...>] [--add-attestation-refs <...>] [--json]`
 - `mdkg work artifact add <order-or-receipt-id-or-qid> <file> [--id <archive.id>] [--kind source|artifact] [--json]`
-- `mdkg work validate [<id-or-qid>] [--type manifest|spec|work|work_order|receipt|feedback|dispute|proposal] [--json]`
+- `mdkg work validate [<id-or-qid>] [--type manifest|spec|work|work_order|receipt|feedback|dispute|proposal] [--profile <name>] [--json]`
 - `work trigger` accepts a `WORK.md` ref directly or a `MANIFEST.md` / legacy `SPEC.md` capability ref with exactly one resolvable work contract; it creates a submitted order mirror and never executes work
 - example: `mdkg work trigger work.example --id order.example-1 --requester user://example --json`
 - `work trigger --enqueue <queue>` requires a valid project DB plus an explicitly created active queue, creates a submitted order mirror, and enqueues a local delivery message without executing work
 - `work order status` is read-only and reports deterministic order state plus linked receipts
 - `work receipt verify` is read-only and reports linkage, evidence, archive ref, hash, outcome, and redaction-policy checks
 - `work validate` is read-only and reports typed diagnostics for agent workflow mirrors; obvious raw secret, prompt, token, or payload markers are warnings, not hard failures
+- `work validate --profile omni-room` applies explicit contract-profile validation after generic mirror validation; it is separate from `mdkg pack --profile`
 - work commands mutate mdkg semantic mirror files only; production order, receipt, feedback, dispute, payment, ledger, marketplace inventory, fulfillment, and execution state remains canonical outside mdkg
 - do not store raw secrets, credentials, live payment state, ledger mutations, or canonical marketplace state in work mirrors
 - `artifact://...` refs identify external/runtime-managed artifacts; `archive://...` refs identify committed mdkg archive sidecars

package/dist/init/README.md

@@ -80,8 +80,9 @@ intentionally with `mdkg new task ...` or `mdkg new test ...`.
 Agent workflow docs can use semantic ids:
 
 ```bash
-mdkg new manifest "image worker" --id agent.image-worker
-mdkg new work "generate image" --id work.generate-image
+mdkg new manifest "image worker" --id agent.image-worker --contract-profile generic
+mdkg new work "generate image" --id work.generate-image --contract-profile generic
+mdkg work validate --profile omni-room --json
 ```
 
 `MANIFEST.md` is optional. Repos without manifest files still validate. When
@@ -92,6 +93,14 @@ release, and `mdkg spec list/show/validate` remains a deprecated alias for
 read-only discovery surface for skills, manifests, WORK contracts, core docs,
 and design docs.
 
+Agent workflow files may include optional generic mirror fields such as
+`contract_profile`, `validation_policy_ref`, `evidence_policy_ref`,
+`receipt_kind`, and `redaction_class`. mdkg validates those mirrors and can run
+profile checks such as `mdkg validate --profile omni-room` and
+`mdkg work validate --profile omni-room`; downstream runtimes still own queue
+execution, room ids, provider state, billing or ledger state, and final receipt
+authority.
+
 Read `AGENT_START.md` first when this repo includes it.
 
 ## Pack Profiles
@@ -229,10 +238,10 @@ mdkg archive verify archive://archive.example
 Use work lifecycle helpers for semantic mirrors only:
 
 ```bash
-mdkg work contract new "example capability" --id work.example --agent-id agent.example --kind example --inputs prompt:text:required --outputs result:text:required
+mdkg work contract new "example capability" --id work.example --agent-id agent.example --kind example --contract-profile generic --inputs prompt:text:required --outputs result:text:required
 mdkg work trigger work.example --id order.example-1 --requester user://example
 mdkg work order status order.example-1 --json
-mdkg work receipt new "example receipt" --id receipt.example-1 --work-order-id order.example-1 --outcome success
+mdkg work receipt new "example receipt" --id receipt.example-1 --work-order-id order.example-1 --outcome success --contract-profile generic --receipt-kind worker --redaction-class internal
 mdkg work receipt verify receipt.example-1 --json
 ```
 
@@ -249,7 +258,7 @@ Update and artifact commands accept local ids or local qids; subgraph qids are r
 `mdkg work trigger` creates a deterministic submitted `WORK_ORDER.md` from a
 WORK contract or a SPEC with exactly one resolvable work contract. `mdkg work
 order status` and `mdkg work receipt verify` are read-only review helpers.
-`mdkg work validate [<id-or-qid>] [--type spec|work|work_order|receipt|feedback|dispute|proposal] --json`
+`mdkg work validate [<id-or-qid>] [--type manifest|spec|work|work_order|receipt|feedback|dispute|proposal] [--profile omni-room] --json`
 is a read-only focused validator for agent workflow mirrors with typed diagnostics
 and raw secret, prompt, token, or payload marker warnings.
 `mdkg work trigger --enqueue <queue>` optionally writes a local project DB queue