@sanity/workflow-mcp 0.24.0 → 0.26.0

package/dist/index.d.cts

@@ -1,19 +1,47 @@
 import type { ActionParam } from "@sanity/workflow-engine";
 import type { AutonomyVerdict } from "@sanity/workflow-engine";
+import { DeclaredExecutionContext } from "@sanity/workflow-engine";
 import type { Diagnosis } from "@sanity/workflow-engine";
-import type { Engine } from "@sanity/workflow-engine";
+import { Engine } from "@sanity/workflow-engine";
 import type { ExecutorClassification } from "@sanity/workflow-engine";
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import type { RequestHandlerExtra } from "@modelcontextprotocol/sdk/shared/protocol.js";
 import type { ServerNotification } from "@modelcontextprotocol/sdk/types.js";
 import type { ServerRequest } from "@modelcontextprotocol/sdk/types.js";
+import type { StartKind } from "@sanity/workflow-engine";
 import type { StuckCause } from "@sanity/workflow-engine";
 import type { SuggestedRemediation } from "@sanity/workflow-engine";
 import type { TelemetryLogger } from "@sanity/telemetry";
 import type { ToolAnnotations } from "@modelcontextprotocol/sdk/types.js";
+import { WorkflowClient } from "@sanity/workflow-engine";
 import type { WorkflowDefinition } from "@sanity/workflow-engine";
 import { WorkflowResource } from "@sanity/workflow-engine";
-import { ZodRawShape } from "zod";
+import { WorkflowTelemetryLogger } from "@sanity/workflow-engine";
+import { ZodRawShape } from "zod/v3";
+
+/**
+ * An engine bound to one workflow environment. `executionContext` is the host's
+ * declaration of the advisory "via what" stamped on history entries; identity is
+ * whatever token backs the supplied client.
+ */
+export declare function createWorkflowEngine(args: {
+  address: WorkflowEnvironmentAddress;
+  client: WorkflowClient;
+  executionContext?: DeclaredExecutionContext;
+  telemetry?: WorkflowTelemetryLogger;
+}): Engine;
+
+export declare const deployWorkflowDefinitionTool: WorkflowToolDef;
+
+export declare const diagnoseWorkflowTool: WorkflowToolDef;
+
+export declare const fireActionTool: WorkflowToolDef;
+
+export declare const getWorkflowAuthoringGuideTool: WorkflowToolDef;
+
+export declare const getWorkflowDefinitionTool: WorkflowToolDef;
+
+export declare const getWorkflowStateTool: WorkflowToolDef;
 
 /**
  * The host seam: produce the {@link WorkflowToolContext} for one tool
@@ -30,6 +58,25 @@ export declare type GetWorkflowToolContext = (
   input: unknown,
 ) => WorkflowToolContext | Promise<WorkflowToolContext>;
 
+/**
+ * The model-facing description of the tag-discovery capability. Hosts can't
+ * share the implementation — each owns its client and its resource spelling —
+ * so what the model is told about the answer lives here instead: what the list
+ * means, and that finding a tag is not the same as being allowed to choose one.
+ */
+export declare const LIST_WORKFLOW_TAGS_DESCRIPTION: string;
+
+/**
+ * The wire name of the tag-discovery tool. Declared here rather than at the
+ * registration site because the address vocabulary refers to it in prose a model
+ * reads — a rename must not leave that prose naming a tool nobody registers.
+ */
+export declare const LIST_WORKFLOW_TAGS_TOOL_NAME = "list_workflow_tags";
+
+export declare const listWorkflowDefinitionsTool: WorkflowToolDef;
+
+export declare const listWorkflowInstancesTool: WorkflowToolDef;
+
 /**
  * One invocable (fireAction-fired) action. Two whole classes of action never
  * appear here: an action whose `filter` scoped it out for this actor is
@@ -38,7 +85,7 @@ export declare type GetWorkflowToolContext = (
  * {@link ProjectedAutomation} instead — the engine fires it, no caller can.
  */
 export declare interface ProjectedActionVerdict {
-  /** Action name — what to pass to `fire_action` as `action`. */
+  /** Action name — what to pass to `fire_workflow_action` as `action`. */
   action: string;
   /** Human label for the action, if the definition provides one. */
   title?: string;
@@ -46,14 +93,14 @@ export declare interface ProjectedActionVerdict {
   allowed: boolean;
   /** When `allowed` is false, a short reason describing why. */
   disabledReason?: string;
-  /** The action's declared params — what `fire_action`'s `params` object must
+  /** The action's declared params — what `fire_workflow_action`'s `params` object must
    *  satisfy (each entry names the param and whether it is required). Absent
    *  when the action declares none. */
   params?: ActionParam[];
 }
 
 export declare interface ProjectedActivity {
-  /** Activity name — what to pass to `fire_action` as `activity`. */
+  /** Activity name — what to pass to `fire_workflow_action` as `activity`. */
   activity: string;
   /** Human label, if provided. */
   title?: string;
@@ -94,10 +141,10 @@ export declare interface ProjectedActivity {
 /**
  * One cascade-fired (`when`) action, narrated as automation: the engine fires
  * it on its own the moment the trigger holds — it is never invocable via
- * `fire_action`, so it must not read as a button.
+ * `fire_workflow_action`, so it must not read as a button.
  */
 export declare interface ProjectedAutomation {
-  /** The cascade-fired action's name. Not accepted by `fire_action`. */
+  /** The cascade-fired action's name. Not accepted by `fire_workflow_action`. */
   action: string;
   /** Human label, if provided. */
   title?: string;
@@ -126,6 +173,30 @@ export declare interface ProjectedDefinition {
   definition: WorkflowDefinition;
 }
 
+/**
+ * One deployed workflow definition, latest version only — what
+ * `list_workflow_definitions` returns per name. Deploys are create-only
+ * (every deploy mints a new version), but the LLM only ever needs the
+ * head: it's the version `startInstance` picks by default.
+ */
+export declare interface ProjectedDefinitionSummary {
+  /** Definition `name` — the value `list_workflow_instances` filters on. */
+  name: string;
+  /** Human-readable workflow title. */
+  title: string;
+  /** Author-supplied description, when the definition carries one. */
+  description?: string;
+  /** Latest deployed version. */
+  version: number;
+  /** Whether new instances can be started directly. `false` for spawn-only
+   *  child workflows — those only come to exist under a parent instance. */
+  startable: boolean;
+  /** Who initiates standalone runs: `'interactive'` (a person, from a start
+   *  surface) or `'autonomous'` (a system reacting to a document).
+   *  Classification only — the engine starts either kind for any caller. */
+  startKind: StartKind;
+}
+
 /**
  * The diagnosis projection — why an instance is or isn't progressing.
  *
@@ -242,6 +313,8 @@ export declare function registerWorkflowTools(
   },
 ): void;
 
+export declare const startWorkflowTool: WorkflowToolDef;
+
 /**
  * JSON-schema descriptor for consumers that don't speak zod — e.g. the
  * Anthropic Messages API `input_schema` field. `properties`/`required`
@@ -255,7 +328,16 @@ export declare interface ToolInputJsonSchema {
   [key: string]: unknown;
 }
 
-/** Derive the JSON-schema descriptor from a def's zod shape. */
+/**
+ * Derive the JSON-schema descriptor from a def's own zod shape. The converter
+ * options mirror the ones the MCP SDK derives its wire schema with, so one
+ * shape can't derive two ways.
+ *
+ * A def's own shape is not the whole advertised input: a consumer of a def
+ * declaring {@link WorkflowToolDef.requiresAddress} merges its own workflow
+ * environment parameters in, the way {@link registerWorkflowTools} does for
+ * this package's host.
+ */
 export declare function toolInputJsonSchema(
   def: WorkflowToolDef,
 ): ToolInputJsonSchema;
@@ -285,6 +367,16 @@ export declare interface ValidateDefinitionsResult {
   results: ValidateDefinitionResult[];
 }
 
+export declare const validateWorkflowDefinitionTool: WorkflowToolDef;
+
+/**
+ * What the model is told about the `tag` parameter itself. Lives here beside the
+ * tool name it cites because every host declares this parameter in its own
+ * vocabulary — a host that paraphrases weakens a caveat that was tuned
+ * deliberately, and nothing warns you it has drifted.
+ */
+export declare const WORKFLOW_TAG_DESCRIPTION: string;
+
 export declare const WORKFLOW_TOOLS: readonly WorkflowToolDef[];
 
 /**
@@ -297,12 +389,64 @@ export declare function workflowAddressFromInput(
   input: unknown,
 ): WorkflowEnvironmentAddress;
 
+/**
+ * The client configuration engine traffic requires, layered over whatever base
+ * config the host supplies — its requester, its headers, its `apiHost`. Engine
+ * policy deliberately wins over that base: a host's own defaults are tuned for
+ * content reads, not for the engine's documents.
+ *
+ * The base is generic rather than `@sanity/client`'s `ClientConfig` so that a
+ * host resolving a different copy of that package still type-checks — the same
+ * reason the engine states its client structurally. The host's own config type
+ * flows through to the result, which stays assignable to it.
+ */
+export declare function workflowClientConfig<Base extends object>(args: {
+  resource: WorkflowResource;
+  token?: string;
+  /** The host's own client config. Pass `{}` if it has no opinions to preserve. */
+  base: Base;
+}): Base & WorkflowClientPolicy & WorkflowResourceAddressing;
+
+/**
+ * The client settings engine traffic pins, whatever base a host layers them over.
+ * Literal types so the result stays assignable to a host's own client config.
+ */
+declare interface WorkflowClientPolicy {
+  apiVersion: string;
+  useCdn: false;
+  requestTagPrefix: string;
+  perspective: "published";
+}
+
 /** Where one tool call reads/writes workflow data: resource + tag. */
 export declare interface WorkflowEnvironmentAddress {
   workflowResource: WorkflowResource;
   tag: string;
 }
 
+/**
+ * One rendering of a failed tool call, shared by every host. A structured
+ * error's stable `kind` leads the text so the model can branch on the failure
+ * without parsing the human-readable message — a host that re-derives this
+ * prefix drifts from the wording the descriptions and evals were tuned against.
+ */
+export declare function workflowErrorText(error: unknown): string;
+
+/**
+ * How the resulting config names the environment. Exactly one branch is
+ * populated — a dataset target carries the classic pair, anything else carries
+ * the resource — but both are stated optional so the result assigns to a host's
+ * client config without narrowing the union first. The unused branch is removed
+ * from the result so a leftover from the host's base cannot survive the merge:
+ * `@sanity/client` prefers `resource` over `projectId`/`dataset` whenever both
+ * are present, which would otherwise silently address the wrong environment.
+ */
+declare interface WorkflowResourceAddressing {
+  projectId?: string;
+  dataset?: string;
+  resource?: WorkflowResource;
+}
+
 /**
  * Everything a tool call needs from its host: the engine to operate on.
  * Identity is the token behind the engine's client (`/users/me`) — a host
@@ -339,6 +483,15 @@ export declare interface WorkflowToolDef {
    * descriptor for non-MCP consumers.
    */
   readonly inputSchema: ZodRawShape;
+  /**
+   * Whether this tool operates on a workflow environment, and so needs the
+   * engine it is handed to address the one the caller means. How a host
+   * satisfies that is its own choice: one that names an environment per call
+   * adds its own address parameters to this tool's schema, one that binds a
+   * single environment when it builds the engine adds nothing. `false` marks
+   * an engine-independent tool — there is no environment to name.
+   */
+  readonly requiresAddress: boolean;
   readonly annotations: ToolAnnotations;
   /**
    * Returns plain projected data (the `Projected*` shapes) — hosts own

package/dist/index.d.ts

@@ -1,19 +1,47 @@
 import type { ActionParam } from "@sanity/workflow-engine";
 import type { AutonomyVerdict } from "@sanity/workflow-engine";
+import { DeclaredExecutionContext } from "@sanity/workflow-engine";
 import type { Diagnosis } from "@sanity/workflow-engine";
-import type { Engine } from "@sanity/workflow-engine";
+import { Engine } from "@sanity/workflow-engine";
 import type { ExecutorClassification } from "@sanity/workflow-engine";
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import type { RequestHandlerExtra } from "@modelcontextprotocol/sdk/shared/protocol.js";
 import type { ServerNotification } from "@modelcontextprotocol/sdk/types.js";
 import type { ServerRequest } from "@modelcontextprotocol/sdk/types.js";
+import type { StartKind } from "@sanity/workflow-engine";
 import type { StuckCause } from "@sanity/workflow-engine";
 import type { SuggestedRemediation } from "@sanity/workflow-engine";
 import type { TelemetryLogger } from "@sanity/telemetry";
 import type { ToolAnnotations } from "@modelcontextprotocol/sdk/types.js";
+import { WorkflowClient } from "@sanity/workflow-engine";
 import type { WorkflowDefinition } from "@sanity/workflow-engine";
 import { WorkflowResource } from "@sanity/workflow-engine";
-import { ZodRawShape } from "zod";
+import { WorkflowTelemetryLogger } from "@sanity/workflow-engine";
+import { ZodRawShape } from "zod/v3";
+
+/**
+ * An engine bound to one workflow environment. `executionContext` is the host's
+ * declaration of the advisory "via what" stamped on history entries; identity is
+ * whatever token backs the supplied client.
+ */
+export declare function createWorkflowEngine(args: {
+  address: WorkflowEnvironmentAddress;
+  client: WorkflowClient;
+  executionContext?: DeclaredExecutionContext;
+  telemetry?: WorkflowTelemetryLogger;
+}): Engine;
+
+export declare const deployWorkflowDefinitionTool: WorkflowToolDef;
+
+export declare const diagnoseWorkflowTool: WorkflowToolDef;
+
+export declare const fireActionTool: WorkflowToolDef;
+
+export declare const getWorkflowAuthoringGuideTool: WorkflowToolDef;
+
+export declare const getWorkflowDefinitionTool: WorkflowToolDef;
+
+export declare const getWorkflowStateTool: WorkflowToolDef;
 
 /**
  * The host seam: produce the {@link WorkflowToolContext} for one tool
@@ -30,6 +58,25 @@ export declare type GetWorkflowToolContext = (
   input: unknown,
 ) => WorkflowToolContext | Promise<WorkflowToolContext>;
 
+/**
+ * The model-facing description of the tag-discovery capability. Hosts can't
+ * share the implementation — each owns its client and its resource spelling —
+ * so what the model is told about the answer lives here instead: what the list
+ * means, and that finding a tag is not the same as being allowed to choose one.
+ */
+export declare const LIST_WORKFLOW_TAGS_DESCRIPTION: string;
+
+/**
+ * The wire name of the tag-discovery tool. Declared here rather than at the
+ * registration site because the address vocabulary refers to it in prose a model
+ * reads — a rename must not leave that prose naming a tool nobody registers.
+ */
+export declare const LIST_WORKFLOW_TAGS_TOOL_NAME = "list_workflow_tags";
+
+export declare const listWorkflowDefinitionsTool: WorkflowToolDef;
+
+export declare const listWorkflowInstancesTool: WorkflowToolDef;
+
 /**
  * One invocable (fireAction-fired) action. Two whole classes of action never
  * appear here: an action whose `filter` scoped it out for this actor is
@@ -38,7 +85,7 @@ export declare type GetWorkflowToolContext = (
  * {@link ProjectedAutomation} instead — the engine fires it, no caller can.
  */
 export declare interface ProjectedActionVerdict {
-  /** Action name — what to pass to `fire_action` as `action`. */
+  /** Action name — what to pass to `fire_workflow_action` as `action`. */
   action: string;
   /** Human label for the action, if the definition provides one. */
   title?: string;
@@ -46,14 +93,14 @@ export declare interface ProjectedActionVerdict {
   allowed: boolean;
   /** When `allowed` is false, a short reason describing why. */
   disabledReason?: string;
-  /** The action's declared params — what `fire_action`'s `params` object must
+  /** The action's declared params — what `fire_workflow_action`'s `params` object must
    *  satisfy (each entry names the param and whether it is required). Absent
    *  when the action declares none. */
   params?: ActionParam[];
 }
 
 export declare interface ProjectedActivity {
-  /** Activity name — what to pass to `fire_action` as `activity`. */
+  /** Activity name — what to pass to `fire_workflow_action` as `activity`. */
   activity: string;
   /** Human label, if provided. */
   title?: string;
@@ -94,10 +141,10 @@ export declare interface ProjectedActivity {
 /**
  * One cascade-fired (`when`) action, narrated as automation: the engine fires
  * it on its own the moment the trigger holds — it is never invocable via
- * `fire_action`, so it must not read as a button.
+ * `fire_workflow_action`, so it must not read as a button.
  */
 export declare interface ProjectedAutomation {
-  /** The cascade-fired action's name. Not accepted by `fire_action`. */
+  /** The cascade-fired action's name. Not accepted by `fire_workflow_action`. */
   action: string;
   /** Human label, if provided. */
   title?: string;
@@ -126,6 +173,30 @@ export declare interface ProjectedDefinition {
   definition: WorkflowDefinition;
 }
 
+/**
+ * One deployed workflow definition, latest version only — what
+ * `list_workflow_definitions` returns per name. Deploys are create-only
+ * (every deploy mints a new version), but the LLM only ever needs the
+ * head: it's the version `startInstance` picks by default.
+ */
+export declare interface ProjectedDefinitionSummary {
+  /** Definition `name` — the value `list_workflow_instances` filters on. */
+  name: string;
+  /** Human-readable workflow title. */
+  title: string;
+  /** Author-supplied description, when the definition carries one. */
+  description?: string;
+  /** Latest deployed version. */
+  version: number;
+  /** Whether new instances can be started directly. `false` for spawn-only
+   *  child workflows — those only come to exist under a parent instance. */
+  startable: boolean;
+  /** Who initiates standalone runs: `'interactive'` (a person, from a start
+   *  surface) or `'autonomous'` (a system reacting to a document).
+   *  Classification only — the engine starts either kind for any caller. */
+  startKind: StartKind;
+}
+
 /**
  * The diagnosis projection — why an instance is or isn't progressing.
  *
@@ -242,6 +313,8 @@ export declare function registerWorkflowTools(
   },
 ): void;
 
+export declare const startWorkflowTool: WorkflowToolDef;
+
 /**
  * JSON-schema descriptor for consumers that don't speak zod — e.g. the
  * Anthropic Messages API `input_schema` field. `properties`/`required`
@@ -255,7 +328,16 @@ export declare interface ToolInputJsonSchema {
   [key: string]: unknown;
 }
 
-/** Derive the JSON-schema descriptor from a def's zod shape. */
+/**
+ * Derive the JSON-schema descriptor from a def's own zod shape. The converter
+ * options mirror the ones the MCP SDK derives its wire schema with, so one
+ * shape can't derive two ways.
+ *
+ * A def's own shape is not the whole advertised input: a consumer of a def
+ * declaring {@link WorkflowToolDef.requiresAddress} merges its own workflow
+ * environment parameters in, the way {@link registerWorkflowTools} does for
+ * this package's host.
+ */
 export declare function toolInputJsonSchema(
   def: WorkflowToolDef,
 ): ToolInputJsonSchema;
@@ -285,6 +367,16 @@ export declare interface ValidateDefinitionsResult {
   results: ValidateDefinitionResult[];
 }
 
+export declare const validateWorkflowDefinitionTool: WorkflowToolDef;
+
+/**
+ * What the model is told about the `tag` parameter itself. Lives here beside the
+ * tool name it cites because every host declares this parameter in its own
+ * vocabulary — a host that paraphrases weakens a caveat that was tuned
+ * deliberately, and nothing warns you it has drifted.
+ */
+export declare const WORKFLOW_TAG_DESCRIPTION: string;
+
 export declare const WORKFLOW_TOOLS: readonly WorkflowToolDef[];
 
 /**
@@ -297,12 +389,64 @@ export declare function workflowAddressFromInput(
   input: unknown,
 ): WorkflowEnvironmentAddress;
 
+/**
+ * The client configuration engine traffic requires, layered over whatever base
+ * config the host supplies — its requester, its headers, its `apiHost`. Engine
+ * policy deliberately wins over that base: a host's own defaults are tuned for
+ * content reads, not for the engine's documents.
+ *
+ * The base is generic rather than `@sanity/client`'s `ClientConfig` so that a
+ * host resolving a different copy of that package still type-checks — the same
+ * reason the engine states its client structurally. The host's own config type
+ * flows through to the result, which stays assignable to it.
+ */
+export declare function workflowClientConfig<Base extends object>(args: {
+  resource: WorkflowResource;
+  token?: string;
+  /** The host's own client config. Pass `{}` if it has no opinions to preserve. */
+  base: Base;
+}): Base & WorkflowClientPolicy & WorkflowResourceAddressing;
+
+/**
+ * The client settings engine traffic pins, whatever base a host layers them over.
+ * Literal types so the result stays assignable to a host's own client config.
+ */
+declare interface WorkflowClientPolicy {
+  apiVersion: string;
+  useCdn: false;
+  requestTagPrefix: string;
+  perspective: "published";
+}
+
 /** Where one tool call reads/writes workflow data: resource + tag. */
 export declare interface WorkflowEnvironmentAddress {
   workflowResource: WorkflowResource;
   tag: string;
 }
 
+/**
+ * One rendering of a failed tool call, shared by every host. A structured
+ * error's stable `kind` leads the text so the model can branch on the failure
+ * without parsing the human-readable message — a host that re-derives this
+ * prefix drifts from the wording the descriptions and evals were tuned against.
+ */
+export declare function workflowErrorText(error: unknown): string;
+
+/**
+ * How the resulting config names the environment. Exactly one branch is
+ * populated — a dataset target carries the classic pair, anything else carries
+ * the resource — but both are stated optional so the result assigns to a host's
+ * client config without narrowing the union first. The unused branch is removed
+ * from the result so a leftover from the host's base cannot survive the merge:
+ * `@sanity/client` prefers `resource` over `projectId`/`dataset` whenever both
+ * are present, which would otherwise silently address the wrong environment.
+ */
+declare interface WorkflowResourceAddressing {
+  projectId?: string;
+  dataset?: string;
+  resource?: WorkflowResource;
+}
+
 /**
  * Everything a tool call needs from its host: the engine to operate on.
  * Identity is the token behind the engine's client (`/users/me`) — a host
@@ -339,6 +483,15 @@ export declare interface WorkflowToolDef {
    * descriptor for non-MCP consumers.
    */
   readonly inputSchema: ZodRawShape;
+  /**
+   * Whether this tool operates on a workflow environment, and so needs the
+   * engine it is handed to address the one the caller means. How a host
+   * satisfies that is its own choice: one that names an environment per call
+   * adds its own address parameters to this tool's schema, one that binds a
+   * single environment when it builds the engine adds nothing. `false` marks
+   * an engine-independent tool — there is no environment to name.
+   */
+  readonly requiresAddress: boolean;
   readonly annotations: ToolAnnotations;
   /**
    * Returns plain projected data (the `Projected*` shapes) — hosts own

package/dist/index.js

@@ -1,3 +1,3 @@
-import { WORKFLOW_TOOLS, registerWorkflowTools, toolInputJsonSchema, workflowAddressFromInput } from "./_chunks-es/index.js";
+import { LIST_WORKFLOW_TAGS_DESCRIPTION, LIST_WORKFLOW_TAGS_TOOL_NAME, WORKFLOW_TAG_DESCRIPTION, WORKFLOW_TOOLS, createWorkflowEngine, deployWorkflowDefinitionTool, diagnoseWorkflowTool, fireActionTool, getWorkflowAuthoringGuideTool, getWorkflowDefinitionTool, getWorkflowStateTool, listWorkflowDefinitionsTool, listWorkflowInstancesTool, registerWorkflowTools, startWorkflowTool, toolInputJsonSchema, validateWorkflowDefinitionTool, workflowAddressFromInput, workflowClientConfig, workflowErrorText } from "./_chunks-es/index.js";
 
-export { WORKFLOW_TOOLS, registerWorkflowTools, toolInputJsonSchema, workflowAddressFromInput };
+export { LIST_WORKFLOW_TAGS_DESCRIPTION, LIST_WORKFLOW_TAGS_TOOL_NAME, WORKFLOW_TAG_DESCRIPTION, WORKFLOW_TOOLS, createWorkflowEngine, deployWorkflowDefinitionTool, diagnoseWorkflowTool, fireActionTool, getWorkflowAuthoringGuideTool, getWorkflowDefinitionTool, getWorkflowStateTool, listWorkflowDefinitionsTool, listWorkflowInstancesTool, registerWorkflowTools, startWorkflowTool, toolInputJsonSchema, validateWorkflowDefinitionTool, workflowAddressFromInput, workflowClientConfig, workflowErrorText };

package/dist/stdio.js

@@ -2,58 +2,55 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
-import { ENGINE_API_VERSION, clientConfigFromResource, resourceGdr, createEngine, datasetResourceParts, EXECUTION_KINDS } from "@sanity/workflow-engine";
+import { deployedTagsGroq, parseResourceGdr, datasetResourceParts, EXECUTION_KINDS } from "@sanity/workflow-engine";
 
-import { registerWorkflowTools, workflowAddressFromInput, createMcpTelemetry } from "./_chunks-es/index.js";
+import { LIST_WORKFLOW_TAGS_TOOL_NAME, workflowAddressFields, LIST_WORKFLOW_TAGS_DESCRIPTION, withToolTelemetry, clientForResource, registerWorkflowTools, workflowAddressFromInput, createMcpTelemetry, createEngineCache } from "./_chunks-es/index.js";
 
-import { createClient } from "@sanity/client";
-
-var version = "0.24.0", packageJson = {
+var version = "0.26.0", packageJson = {
     version: version
 };
 
-function clientForResource(args) {
-    const {resource: resource, token: token, apiHost: apiHost} = args;
-    return createClient({
-        token: token,
-        apiHost: apiHost,
-        apiVersion: ENGINE_API_VERSION,
-        useCdn: !1,
-        requestTagPrefix: "sanity.workflows-mcp",
-        ...clientConfigFromResource(resource)
-    });
-}
-
-function createEngineCache({token: token, apiHost: apiHost, executionContext: executionContext, telemetry: telemetry}) {
-    const engines = /* @__PURE__ */ new Map;
-    return ({workflowResource: workflowResource, tag: tag}) => {
-        const key = `${resourceGdr(workflowResource)} ${tag}`, existing = engines.get(key);
-        if (existing !== void 0) return existing;
-        const engine = createEngine({
-            client: clientForResource({
-                resource: workflowResource,
-                token: token,
-                apiHost: apiHost
-            }),
-            workflowResource: workflowResource,
-            tag: tag,
-            ...executionContext !== void 0 ? {
-                executionContext: executionContext
-            } : {},
-            ...telemetry !== void 0 ? {
-                telemetry: telemetry
-            } : {}
-        });
-        return engines.set(key, engine), engine;
-    };
-}
-
 function requireEnv(env, name) {
     const value = env[name];
     if (typeof value != "string" || value === "") throw new Error(`Missing required environment variable: ${name}`);
     return value;
 }
 
+const readDeployedTags = ({resource: resource, token: token, apiHost: apiHost}) => clientForResource({
+    resource: resource,
+    token: token,
+    apiHost: apiHost
+}).fetch(deployedTagsGroq(), {}, {
+    tag: "definition.tags"
+});
+
+function registerListWorkflowTagsTool(server, {token: token, apiHost: apiHost, readTags: readTags = readDeployedTags, telemetry: telemetry, onResource: onResource}) {
+    server.registerTool(LIST_WORKFLOW_TAGS_TOOL_NAME, {
+        description: LIST_WORKFLOW_TAGS_DESCRIPTION,
+        inputSchema: {
+            workflow_resource: workflowAddressFields.workflow_resource
+        },
+        annotations: {
+            readOnlyHint: !0
+        }
+    }, args => withToolTelemetry({
+        tool: LIST_WORKFLOW_TAGS_TOOL_NAME,
+        input: args,
+        ...telemetry !== void 0 ? {
+            telemetry: telemetry
+        } : {}
+    }, async () => {
+        const resource = parseResourceGdr(args.workflow_resource);
+        return onResource?.(resource), {
+            tags: await readTags({
+                resource: resource,
+                token: token,
+                apiHost: apiHost
+            })
+        };
+    }));
+}
+
 async function runStdioServer() {
     const token = requireEnv(process.env, "SANITY_AUTH_TOKEN"), apiHost = process.env.SANITY_API_HOST ?? "https://api.sanity.io";
     process.stderr.write(`workflow-mcp MCP starting against ${apiHost} (org-authed; workflow environments are addressed per tool call)\n`);
@@ -66,12 +63,12 @@ async function runStdioServer() {
             if (telemetry === void 0) throw new Error("workflow-mcp: telemetry trace before any environment was addressed");
             return telemetry.logger.trace(event, context);
         }
-    }, initTelemetry = address => {
-        if (telemetry !== void 0 || address.workflowResource.type !== "dataset") return;
-        const {projectId: projectId, dataset: dataset} = datasetResourceParts(address.workflowResource.id);
+    }, initTelemetry = resource => {
+        if (telemetry !== void 0 || resource.type !== "dataset") return;
+        const {projectId: projectId, dataset: dataset} = datasetResourceParts(resource.id);
         telemetry = createMcpTelemetry({
             client: clientForResource({
-                resource: address.workflowResource,
+                resource: resource,
                 token: token,
                 apiHost: apiHost
             }),
@@ -94,11 +91,16 @@ async function runStdioServer() {
     });
     registerWorkflowTools(server, (_extra, input) => {
         const address = workflowAddressFromInput(input);
-        return initTelemetry(address), {
+        return initTelemetry(address.workflowResource), {
             engine: engineFor(address)
         };
     }, {
         telemetry: logger
+    }), registerListWorkflowTagsTool(server, {
+        token: token,
+        apiHost: apiHost,
+        telemetry: logger,
+        onResource: initTelemetry
     });
     const FLUSH_DEADLINE_MS = 3e3;
     let shuttingDown = !1;