@sanity/workflow-engine 0.5.0 → 0.6.0

package/dist/index.d.cts

@@ -6547,10 +6547,10 @@ export declare interface AvailableActionsResult {
 declare type Bound<
   Args extends {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
   },
-> = Omit<Args, "client" | "tags" | "workflowResource">;
+> = Omit<Args, "client" | "tag" | "workflowResource">;
 
 /**
  * Build a snapshot from a set of loaded docs. Pure transform.
@@ -6570,8 +6570,6 @@ export declare function buildSnapshot(args: {
   docs: LoadedDoc[];
 }): HydratedSnapshot;
 
-export declare function canonicalTag(tags: string[]): string;
-
 /**
  * Thrown when auto-transitions on an instance fail to stabilise within
  * {@link CascadeLimitError.limit} passes — the signature of a runaway
@@ -6713,10 +6711,11 @@ export declare function contentReleaseName(args: {
 }): string | undefined;
 
 /**
- * Construct an engine bound to a workflow resource + tags. The returned
+ * Construct an engine bound to a workflow resource + tag. The returned
  * object exposes the same verbs as the `workflow.*` namespace, minus
- * the boilerplate config arguments (client / tags / workflowResource)
- * which are pinned at construction.
+ * the boilerplate config arguments (client / tag / workflowResource)
+ * which are pinned at construction. The `tag` is required — see
+ * {@link validateTag} for the accepted shape.
  *
  * Effect handlers + missingHandler are stored for future drain wiring
  * (Step 10). They have no effect on `fireAction` / `tick` /
@@ -6728,7 +6727,14 @@ export declare function createEngine(args: CreateEngineArgs): Engine;
 export declare interface CreateEngineArgs {
   client: WorkflowClient;
   workflowResource: WorkflowResource;
-  tags: string[];
+  /**
+   * Engine-scope environment partition (e.g. `"test"`, `"prod"`). Every
+   * definition/instance the engine writes is stamped with this tag and
+   * every read is scoped to it. Required and never defaulted — the engine
+   * enforces nothing, so the partition is the only thing keeping reads and
+   * writes off the wrong environment.
+   */
+  tag: string;
   /**
    * Optional routing for cross-resource reads. When the engine needs
    * a doc whose GDR points at a resource other than its own, it calls
@@ -6774,8 +6780,8 @@ export declare const defaultLoggerFactory: LoggerFactory;
 
 export declare interface DeleteDefinitionArgs {
   client: WorkflowClient;
-  /** Engine-scope tags — required. See `validateTags` + `tags.ts`. */
-  tags: string[];
+  /** Engine-scope environment partition — required. See {@link validateTag} + `tags.ts`. */
+  tag: string;
   /** The Sanity resource the engine's own data lives in. */
   workflowResource: WorkflowResource;
   /** Cross-resource routing — see `StartInstanceArgs.resourceClients`. */
@@ -6837,8 +6843,8 @@ export declare interface DeployDefinitionResult {
 
 export declare interface DeployDefinitionsArgs {
   client: WorkflowClient;
-  /** Engine-scope tags — required. See `validateTags` + `tags.ts`. */
-  tags: string[];
+  /** Engine-scope environment partition — required. See {@link validateTag} + `tags.ts`. */
+  tag: string;
   /**
    * The Sanity resource the engine's own data lives in. Used to mint
    * GDR URIs for every doc the engine writes (definitions, instances,
@@ -6868,11 +6874,11 @@ export declare interface DeployDefinitionsResult {
  */
 export declare function deployStageGuards(args: StageGuardArgs): Promise<void>;
 
-/** Where a definition deploys: the engine tags it partitions under, and the
+/** Where a definition deploys: the engine tag it partitions under, and the
  *  workflow resource it belongs to. Structurally what `deployDefinitions`
  *  receives, minus the definitions themselves. */
 export declare interface DeployTarget {
-  tags: string[];
+  tag: string;
   workflowResource: WorkflowResource;
 }
 
@@ -7239,7 +7245,7 @@ export declare interface Engine {
    *  (e.g. test bench, drain workers) that need them; the verbs already
    *  thread them through internally. */
   readonly client: WorkflowClient;
-  readonly tags: readonly string[];
+  readonly tag: string;
   readonly workflowResource: WorkflowResource;
   readonly effectHandlers: Readonly<Record<string, EffectHandler>>;
   readonly missingHandler: MissingHandlerPolicy;
@@ -7316,8 +7322,8 @@ export declare interface Engine {
     instanceId: string;
     task?: string;
   }) => Promise<WorkflowInstance[]>;
-  /** GROQ query against the engine's workflow resource. `$engineTags`
-   *  is bound for tag-aware filtering. */
+  /** GROQ query against the engine's workflow resource. `$tag`
+   *  is bound for tag-scoped filtering. */
   query: <T = unknown>(args: {
     groq: string;
     params?: Record<string, unknown>;
@@ -7351,7 +7357,7 @@ export declare interface Engine {
     access?: WorkflowAccessOverride;
   }) => Promise<DrainEffectsResult>;
   /**
-   * Inspect every deployed definition in the engine's tags and apply
+   * Inspect every deployed definition in the engine's tag and apply
    * the configured missingHandler policy at `phase: "deploy"` for any
    * effect name without a registered handler. Catches "definition
    * shipped, handler removed" misconfigurations at startup instead of
@@ -7371,8 +7377,8 @@ export declare interface EngineLogger {
 
 export declare interface EvaluateArgs {
   client: WorkflowClient;
-  /** Engine-scope tags — required. */
-  tags: string[];
+  /** Engine-scope environment partition — required. */
+  tag: string;
   /** Engine workflow resource — required. */
   workflowResource: WorkflowResource;
   instanceId: string;
@@ -8374,8 +8380,8 @@ export declare function openStage(
 
 export declare interface OperationArgs {
   client: WorkflowClient;
-  /** Engine-scope tags — required. */
-  tags: string[];
+  /** Engine-scope environment partition — required. */
+  tag: string;
   /** The Sanity resource the engine's own data lives in. */
   workflowResource: WorkflowResource;
   /** Cross-resource routing — see `StartInstanceArgs.resourceClients`. */
@@ -8714,8 +8720,8 @@ export declare type StageName = string;
 
 export declare interface StartInstanceArgs {
   client: WorkflowClient;
-  /** Engine-scope tags — required. */
-  tags: string[];
+  /** Engine-scope environment partition — required. */
+  tag: string;
   /** The Sanity resource the engine's own data lives in. */
   workflowResource: WorkflowResource;
   /**
@@ -11769,13 +11775,11 @@ declare const SubworkflowsSchema: v.StrictObjectSchema<
 
 /**
  * The engine's read-partition invariant as a GROQ predicate: a document is
- * visible when its `tags[]` intersect the caller's tag set.
- *
- * @param param - GROQ parameter holding the caller's tags. Defaults to
- *   `engineTags`, matching the `workflow.query` guard so any query built with
- *   it stays tag-scoped.
+ * visible when its `tag` equals the caller's `$tag` param. The single
+ * definition of "tag-scoped" shared by the engine's internal lookups, the
+ * `workflow.query` guard, and the CLI/MCP read helpers.
  */
-export declare function tagScopeFilter(param?: string): string;
+export declare function tagScopeFilter(): string;
 
 export declare type Task = v.InferOutput<typeof StoredTaskSchema>;
 
@@ -11865,18 +11869,25 @@ export declare function validateDefinition(
 ): void;
 
 /**
- * Engine-scope tags — the multi-tenant isolation primitive.
+ * Engine-scope tag — the environment partition primitive.
+ *
+ * Every engine operates against exactly one `tag` ("test", "prod", …).
+ * The tag partitions definitions and instances within a single workflow
+ * resource: `deploy(def, tag: "test")` and `deploy(def, tag: "prod")` are
+ * separate deployed workflows with independent lifecycles, and every read
+ * is scoped to one tag so test runs never surface in prod.
  *
- * Every engine takes a required `tags: string[]` set at construction.
- * Tags must be Sanity-ID-compatible since they're joined into IDs with
- * `.` — ASCII lowercase + digits + dashes, no leading dash, no dots.
+ * The tag must be Sanity-ID-compatible since it's joined into IDs with
+ * `.` — ASCII lowercase + digits + dashes, no leading dash, no dots. It
+ * is also the ID prefix for every definition/instance the engine writes.
  *
- * The first tag in the array is the *canonical* tag, used as the ID
- * prefix when the engine writes new definitions or instances. The full
- * tag set goes onto every written doc and is the basis for read
- * filtering (tag intersection between engine and doc).
+ * There is no default. The tag selects which environment the engine reads
+ * and writes, and the engine enforces nothing — so the partition is the
+ * only thing keeping test runs out of prod. Every entry point
+ * (`createEngine`, the CLI, the MCP server) requires it explicitly and
+ * fails when it's absent rather than guessing an environment.
  */
-export declare function validateTags(tags: string[]): void;
+export declare function validateTag(tag: string): void;
 
 /**
  * The guards allowed to influence this instance's verdicts, read from the
@@ -12032,44 +12043,43 @@ export declare const workflow: {
    */
   abortInstance: (args: Clocked<AbortInstanceArgs>) => Promise<DispatchResult>;
   /**
-   * Fetch a workflow instance by id, scoped to the engine's tags.
+   * Fetch a workflow instance by id, scoped to the engine's tag.
    * Throws when the instance doesn't exist or isn't visible to this
    * engine.
    */
   getInstance: (args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     instanceId: string;
   }) => Promise<WorkflowInstance>;
   guardsForInstance: (args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     instanceId: string;
     resourceClients?: ResourceClientResolver;
   }) => Promise<MutationGuardDoc[]>;
   guardsForDefinition: (args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     /** The definition's `name`. */
     definition: string;
     resourceClients?: ResourceClientResolver;
   }) => Promise<MutationGuardDoc[]>;
   /**
-   * Run a caller-supplied GROQ query with the engine's tags bound as
-   * `$engineTags`. This does NOT rewrite the query — arbitrary GROQ
+   * Run a caller-supplied GROQ query with the engine's tag bound as
+   * `$tag`. This does NOT rewrite the query — arbitrary GROQ
    * can't be safely tag-scoped after the fact — so the CALLER MUST
-   * filter on `$engineTags` (e.g.
-   * `count(tags[@ in $engineTags]) > 0`). To guard against accidental
-   * cross-tenant reads, a query that never references `$engineTags` is
+   * filter on `$tag` (e.g. `tag == $tag`). To guard against accidental
+   * cross-partition reads, a query that never references `$tag` is
    * rejected before it reaches the lake. Caller is responsible for type
    * narrowing the result.
    */
   query: <T = unknown>(args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     groq: string;
     params?: Record<string, unknown>;
@@ -12093,7 +12103,7 @@ export declare const workflow: {
   queryInScope: <T = unknown>(
     args: Clocked<{
       client: WorkflowClient;
-      tags: string[];
+      tag: string;
       workflowResource: WorkflowResource;
       resourceClients?: ResourceClientResolver;
       instanceId: string;
@@ -12107,7 +12117,7 @@ export declare const workflow: {
    */
   listPendingEffects: (args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     instanceId: string;
   }) => Promise<PendingEffect[]>;
@@ -12118,7 +12128,7 @@ export declare const workflow: {
    */
   findPendingEffects: (args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     instanceId: string;
     claimed?: boolean;
@@ -12160,14 +12170,14 @@ export declare const workflow: {
    * record. (The per-task `spawnedInstances` field on the active stage
    * only exists while that stage is current; history survives.) Strips
    * the GDR URI on each `instanceRef` to a bare `_id`, fetches the
-   * instances, drops any that aren't visible to this engine's tags, and
+   * instances, drops any that aren't visible to this engine's tag, and
    * returns them sorted by `startedAt` ascending.
    *
    * Pass `task` to restrict to a single spawning task on the parent.
    */
   children: (args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     instanceId: string;
     task?: string;
@@ -14120,11 +14130,11 @@ export declare interface WorkflowFetchOptions {
 export declare interface WorkflowInstance extends SanityDocument {
   _type: typeof WORKFLOW_INSTANCE_TYPE;
   /**
-   * Engine-scope tags stamped on the instance at create time. Engines
-   * with disjoint tag sets cannot read this instance; engines sharing
-   * any tag with this array can.
+   * Engine-scope environment partition stamped on the instance at create
+   * time. Reads are scoped to a single tag, so an engine only sees
+   * instances whose `tag` equals its own.
    */
-  tags: string[];
+  tag: string;
   /**
    * The Sanity resource this instance lives in. Stored on the doc so
    * any internal operation can mint GDRs for ancestors / spawned

package/dist/index.d.ts

@@ -6547,10 +6547,10 @@ export declare interface AvailableActionsResult {
 declare type Bound<
   Args extends {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
   },
-> = Omit<Args, "client" | "tags" | "workflowResource">;
+> = Omit<Args, "client" | "tag" | "workflowResource">;
 
 /**
  * Build a snapshot from a set of loaded docs. Pure transform.
@@ -6570,8 +6570,6 @@ export declare function buildSnapshot(args: {
   docs: LoadedDoc[];
 }): HydratedSnapshot;
 
-export declare function canonicalTag(tags: string[]): string;
-
 /**
  * Thrown when auto-transitions on an instance fail to stabilise within
  * {@link CascadeLimitError.limit} passes — the signature of a runaway
@@ -6713,10 +6711,11 @@ export declare function contentReleaseName(args: {
 }): string | undefined;
 
 /**
- * Construct an engine bound to a workflow resource + tags. The returned
+ * Construct an engine bound to a workflow resource + tag. The returned
  * object exposes the same verbs as the `workflow.*` namespace, minus
- * the boilerplate config arguments (client / tags / workflowResource)
- * which are pinned at construction.
+ * the boilerplate config arguments (client / tag / workflowResource)
+ * which are pinned at construction. The `tag` is required — see
+ * {@link validateTag} for the accepted shape.
  *
  * Effect handlers + missingHandler are stored for future drain wiring
  * (Step 10). They have no effect on `fireAction` / `tick` /
@@ -6728,7 +6727,14 @@ export declare function createEngine(args: CreateEngineArgs): Engine;
 export declare interface CreateEngineArgs {
   client: WorkflowClient;
   workflowResource: WorkflowResource;
-  tags: string[];
+  /**
+   * Engine-scope environment partition (e.g. `"test"`, `"prod"`). Every
+   * definition/instance the engine writes is stamped with this tag and
+   * every read is scoped to it. Required and never defaulted — the engine
+   * enforces nothing, so the partition is the only thing keeping reads and
+   * writes off the wrong environment.
+   */
+  tag: string;
   /**
    * Optional routing for cross-resource reads. When the engine needs
    * a doc whose GDR points at a resource other than its own, it calls
@@ -6774,8 +6780,8 @@ export declare const defaultLoggerFactory: LoggerFactory;
 
 export declare interface DeleteDefinitionArgs {
   client: WorkflowClient;
-  /** Engine-scope tags — required. See `validateTags` + `tags.ts`. */
-  tags: string[];
+  /** Engine-scope environment partition — required. See {@link validateTag} + `tags.ts`. */
+  tag: string;
   /** The Sanity resource the engine's own data lives in. */
   workflowResource: WorkflowResource;
   /** Cross-resource routing — see `StartInstanceArgs.resourceClients`. */
@@ -6837,8 +6843,8 @@ export declare interface DeployDefinitionResult {
 
 export declare interface DeployDefinitionsArgs {
   client: WorkflowClient;
-  /** Engine-scope tags — required. See `validateTags` + `tags.ts`. */
-  tags: string[];
+  /** Engine-scope environment partition — required. See {@link validateTag} + `tags.ts`. */
+  tag: string;
   /**
    * The Sanity resource the engine's own data lives in. Used to mint
    * GDR URIs for every doc the engine writes (definitions, instances,
@@ -6868,11 +6874,11 @@ export declare interface DeployDefinitionsResult {
  */
 export declare function deployStageGuards(args: StageGuardArgs): Promise<void>;
 
-/** Where a definition deploys: the engine tags it partitions under, and the
+/** Where a definition deploys: the engine tag it partitions under, and the
  *  workflow resource it belongs to. Structurally what `deployDefinitions`
  *  receives, minus the definitions themselves. */
 export declare interface DeployTarget {
-  tags: string[];
+  tag: string;
   workflowResource: WorkflowResource;
 }
 
@@ -7239,7 +7245,7 @@ export declare interface Engine {
    *  (e.g. test bench, drain workers) that need them; the verbs already
    *  thread them through internally. */
   readonly client: WorkflowClient;
-  readonly tags: readonly string[];
+  readonly tag: string;
   readonly workflowResource: WorkflowResource;
   readonly effectHandlers: Readonly<Record<string, EffectHandler>>;
   readonly missingHandler: MissingHandlerPolicy;
@@ -7316,8 +7322,8 @@ export declare interface Engine {
     instanceId: string;
     task?: string;
   }) => Promise<WorkflowInstance[]>;
-  /** GROQ query against the engine's workflow resource. `$engineTags`
-   *  is bound for tag-aware filtering. */
+  /** GROQ query against the engine's workflow resource. `$tag`
+   *  is bound for tag-scoped filtering. */
   query: <T = unknown>(args: {
     groq: string;
     params?: Record<string, unknown>;
@@ -7351,7 +7357,7 @@ export declare interface Engine {
     access?: WorkflowAccessOverride;
   }) => Promise<DrainEffectsResult>;
   /**
-   * Inspect every deployed definition in the engine's tags and apply
+   * Inspect every deployed definition in the engine's tag and apply
    * the configured missingHandler policy at `phase: "deploy"` for any
    * effect name without a registered handler. Catches "definition
    * shipped, handler removed" misconfigurations at startup instead of
@@ -7371,8 +7377,8 @@ export declare interface EngineLogger {
 
 export declare interface EvaluateArgs {
   client: WorkflowClient;
-  /** Engine-scope tags — required. */
-  tags: string[];
+  /** Engine-scope environment partition — required. */
+  tag: string;
   /** Engine workflow resource — required. */
   workflowResource: WorkflowResource;
   instanceId: string;
@@ -8374,8 +8380,8 @@ export declare function openStage(
 
 export declare interface OperationArgs {
   client: WorkflowClient;
-  /** Engine-scope tags — required. */
-  tags: string[];
+  /** Engine-scope environment partition — required. */
+  tag: string;
   /** The Sanity resource the engine's own data lives in. */
   workflowResource: WorkflowResource;
   /** Cross-resource routing — see `StartInstanceArgs.resourceClients`. */
@@ -8714,8 +8720,8 @@ export declare type StageName = string;
 
 export declare interface StartInstanceArgs {
   client: WorkflowClient;
-  /** Engine-scope tags — required. */
-  tags: string[];
+  /** Engine-scope environment partition — required. */
+  tag: string;
   /** The Sanity resource the engine's own data lives in. */
   workflowResource: WorkflowResource;
   /**
@@ -11769,13 +11775,11 @@ declare const SubworkflowsSchema: v.StrictObjectSchema<
 
 /**
  * The engine's read-partition invariant as a GROQ predicate: a document is
- * visible when its `tags[]` intersect the caller's tag set.
- *
- * @param param - GROQ parameter holding the caller's tags. Defaults to
- *   `engineTags`, matching the `workflow.query` guard so any query built with
- *   it stays tag-scoped.
+ * visible when its `tag` equals the caller's `$tag` param. The single
+ * definition of "tag-scoped" shared by the engine's internal lookups, the
+ * `workflow.query` guard, and the CLI/MCP read helpers.
  */
-export declare function tagScopeFilter(param?: string): string;
+export declare function tagScopeFilter(): string;
 
 export declare type Task = v.InferOutput<typeof StoredTaskSchema>;
 
@@ -11865,18 +11869,25 @@ export declare function validateDefinition(
 ): void;
 
 /**
- * Engine-scope tags — the multi-tenant isolation primitive.
+ * Engine-scope tag — the environment partition primitive.
+ *
+ * Every engine operates against exactly one `tag` ("test", "prod", …).
+ * The tag partitions definitions and instances within a single workflow
+ * resource: `deploy(def, tag: "test")` and `deploy(def, tag: "prod")` are
+ * separate deployed workflows with independent lifecycles, and every read
+ * is scoped to one tag so test runs never surface in prod.
  *
- * Every engine takes a required `tags: string[]` set at construction.
- * Tags must be Sanity-ID-compatible since they're joined into IDs with
- * `.` — ASCII lowercase + digits + dashes, no leading dash, no dots.
+ * The tag must be Sanity-ID-compatible since it's joined into IDs with
+ * `.` — ASCII lowercase + digits + dashes, no leading dash, no dots. It
+ * is also the ID prefix for every definition/instance the engine writes.
  *
- * The first tag in the array is the *canonical* tag, used as the ID
- * prefix when the engine writes new definitions or instances. The full
- * tag set goes onto every written doc and is the basis for read
- * filtering (tag intersection between engine and doc).
+ * There is no default. The tag selects which environment the engine reads
+ * and writes, and the engine enforces nothing — so the partition is the
+ * only thing keeping test runs out of prod. Every entry point
+ * (`createEngine`, the CLI, the MCP server) requires it explicitly and
+ * fails when it's absent rather than guessing an environment.
  */
-export declare function validateTags(tags: string[]): void;
+export declare function validateTag(tag: string): void;
 
 /**
  * The guards allowed to influence this instance's verdicts, read from the
@@ -12032,44 +12043,43 @@ export declare const workflow: {
    */
   abortInstance: (args: Clocked<AbortInstanceArgs>) => Promise<DispatchResult>;
   /**
-   * Fetch a workflow instance by id, scoped to the engine's tags.
+   * Fetch a workflow instance by id, scoped to the engine's tag.
    * Throws when the instance doesn't exist or isn't visible to this
    * engine.
    */
   getInstance: (args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     instanceId: string;
   }) => Promise<WorkflowInstance>;
   guardsForInstance: (args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     instanceId: string;
     resourceClients?: ResourceClientResolver;
   }) => Promise<MutationGuardDoc[]>;
   guardsForDefinition: (args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     /** The definition's `name`. */
     definition: string;
     resourceClients?: ResourceClientResolver;
   }) => Promise<MutationGuardDoc[]>;
   /**
-   * Run a caller-supplied GROQ query with the engine's tags bound as
-   * `$engineTags`. This does NOT rewrite the query — arbitrary GROQ
+   * Run a caller-supplied GROQ query with the engine's tag bound as
+   * `$tag`. This does NOT rewrite the query — arbitrary GROQ
    * can't be safely tag-scoped after the fact — so the CALLER MUST
-   * filter on `$engineTags` (e.g.
-   * `count(tags[@ in $engineTags]) > 0`). To guard against accidental
-   * cross-tenant reads, a query that never references `$engineTags` is
+   * filter on `$tag` (e.g. `tag == $tag`). To guard against accidental
+   * cross-partition reads, a query that never references `$tag` is
    * rejected before it reaches the lake. Caller is responsible for type
    * narrowing the result.
    */
   query: <T = unknown>(args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     groq: string;
     params?: Record<string, unknown>;
@@ -12093,7 +12103,7 @@ export declare const workflow: {
   queryInScope: <T = unknown>(
     args: Clocked<{
       client: WorkflowClient;
-      tags: string[];
+      tag: string;
       workflowResource: WorkflowResource;
       resourceClients?: ResourceClientResolver;
       instanceId: string;
@@ -12107,7 +12117,7 @@ export declare const workflow: {
    */
   listPendingEffects: (args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     instanceId: string;
   }) => Promise<PendingEffect[]>;
@@ -12118,7 +12128,7 @@ export declare const workflow: {
    */
   findPendingEffects: (args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     instanceId: string;
     claimed?: boolean;
@@ -12160,14 +12170,14 @@ export declare const workflow: {
    * record. (The per-task `spawnedInstances` field on the active stage
    * only exists while that stage is current; history survives.) Strips
    * the GDR URI on each `instanceRef` to a bare `_id`, fetches the
-   * instances, drops any that aren't visible to this engine's tags, and
+   * instances, drops any that aren't visible to this engine's tag, and
    * returns them sorted by `startedAt` ascending.
    *
    * Pass `task` to restrict to a single spawning task on the parent.
    */
   children: (args: {
     client: WorkflowClient;
-    tags: string[];
+    tag: string;
     workflowResource: WorkflowResource;
     instanceId: string;
     task?: string;
@@ -14120,11 +14130,11 @@ export declare interface WorkflowFetchOptions {
 export declare interface WorkflowInstance extends SanityDocument {
   _type: typeof WORKFLOW_INSTANCE_TYPE;
   /**
-   * Engine-scope tags stamped on the instance at create time. Engines
-   * with disjoint tag sets cannot read this instance; engines sharing
-   * any tag with this array can.
+   * Engine-scope environment partition stamped on the instance at create
+   * time. Reads are scoped to a single tag, so an engine only sees
+   * instances whose `tag` equals its own.
    */
-  tags: string[];
+  tag: string;
   /**
    * The Sanity resource this instance lives in. Stored on the doc so
    * any internal operation can mint GDRs for ancestors / spawned