@stigmer/mcp-server 3.2.3 → 3.4.0

package/domains/skills/versions.js

@@ -0,0 +1,31 @@
+// Skill version-timeline path (SkillQueryController.listVersions). Each push
+// creates an immutable version identified by the artifact's SHA-256 hash;
+// entries carry hash, tag, push audit, and provenance (no artifact content, so
+// no projection is needed — unlike the workflow timeline).
+import { ListSkillVersionsResponseSchema, } from "@stigmer/protos/ai/stigmer/agentic/skill/v1/io_pb";
+import { SkillQueryController } from "@stigmer/protos/ai/stigmer/agentic/skill/v1/query_pb";
+import { withClient } from "../client.js";
+import { toProtoJson } from "../marshal.js";
+import { rpcError } from "../rpcerr.js";
+/** List a skill's version history (newest first) as protojson. */
+export async function listSkillVersions(serverAddress, token, args) {
+    return withClient(SkillQueryController, serverAddress, token, async (client, callOptions) => {
+        const req = {
+            org: args.org,
+            slug: args.slug,
+            pageToken: args.pageToken ?? "",
+        };
+        // Forward page_size only when set, letting the server apply its default.
+        if ((args.pageSize ?? 0) > 0) {
+            req.pageSize = args.pageSize;
+        }
+        try {
+            const resp = await client.listVersions(req, callOptions);
+            return toProtoJson(ListSkillVersionsResponseSchema, resp);
+        }
+        catch (err) {
+            throw rpcError(err, `versions of skill "${args.slug}" in org "${args.org}"`);
+        }
+    });
+}
+//# sourceMappingURL=versions.js.map

package/domains/skills/versions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"versions.js","sourceRoot":"","sources":["../../../src/domains/skills/versions.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,0EAA0E;AAC1E,+EAA+E;AAC/E,2DAA2D;AAG3D,OAAO,EAEL,+BAA+B,GAChC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sDAAsD,CAAC;AAE5F,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AASxC,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,aAAqB,EACrB,KAAa,EACb,IAA2B;IAE3B,OAAO,UAAU,CAAC,oBAAoB,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QAC1F,MAAM,GAAG,GAA0D;YACjE,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;SAChC,CAAC;QACF,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACzD,OAAO,WAAW,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,sBAAsB,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/domains/workflowexecutions/approvals.d.ts

@@ -0,0 +1,17 @@
+export interface ListPendingApprovalsArgs {
+    readonly org: string;
+    readonly pageSize?: number;
+    readonly pageToken?: string;
+}
+/** List human_input tasks awaiting a reviewer decision across an org. */
+export declare function listPendingApprovals(serverAddress: string, token: string, args: ListPendingApprovalsArgs): Promise<string>;
+export interface SubmitWorkflowTaskApprovalArgs {
+    readonly executionId: string;
+    readonly taskName: string;
+    readonly outcome: string;
+    readonly comment?: string;
+    readonly formData?: Record<string, unknown>;
+}
+/** Submit a reviewer decision for a waiting human_input task. */
+export declare function submitWorkflowTaskApproval(serverAddress: string, token: string, args: SubmitWorkflowTaskApprovalArgs): Promise<string>;
+//# sourceMappingURL=approvals.d.ts.map

package/domains/workflowexecutions/approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../../../src/domains/workflowexecutions/approvals.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,yEAAyE;AACzE,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAsBjB;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED,iEAAiE;AACjE,wBAAsB,0BAA0B,CAC9C,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,8BAA8B,GACnC,OAAO,CAAC,MAAM,CAAC,CA2BjB"}

package/domains/workflowexecutions/approvals.js

@@ -0,0 +1,61 @@
+// Workflow-execution approval paths: the org-wide pending-approvals inbox
+// (listPendingApprovals) and the reviewer decision for a human_input task
+// (submitWorkflowTaskApproval).
+//
+// listPendingApprovals is org-scoped by contract (io.proto), not
+// execution-scoped — it answers "what is waiting on a human right now"
+// across the org. Each entry carries everything a decision needs: the
+// execution ID, task name, requester, timeout, and the form schema when the
+// task defines one. Agent-execution approvals are a different surface
+// entirely (embedded in get_agent_execution status; see
+// agentexecutions/approve.ts).
+import { WorkflowExecutionSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/api_pb";
+import { WorkflowExecutionCommandController } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/command_pb";
+import { PendingApprovalsListSchema, } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/io_pb";
+import { WorkflowExecutionQueryController } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/query_pb";
+import { withClient } from "../client.js";
+import { toProtoJson } from "../marshal.js";
+import { rpcError } from "../rpcerr.js";
+/** List human_input tasks awaiting a reviewer decision across an org. */
+export async function listPendingApprovals(serverAddress, token, args) {
+    return withClient(WorkflowExecutionQueryController, serverAddress, token, async (client, callOptions) => {
+        const req = {
+            org: args.org,
+            pageToken: args.pageToken ?? "",
+        };
+        // Forward page_size only when set, letting the server apply its default.
+        if ((args.pageSize ?? 0) > 0) {
+            req.pageSize = args.pageSize;
+        }
+        try {
+            const resp = await client.listPendingApprovals(req, callOptions);
+            return toProtoJson(PendingApprovalsListSchema, resp);
+        }
+        catch (err) {
+            throw rpcError(err, `pending approvals in org "${args.org}"`);
+        }
+    });
+}
+/** Submit a reviewer decision for a waiting human_input task. */
+export async function submitWorkflowTaskApproval(serverAddress, token, args) {
+    return withClient(WorkflowExecutionCommandController, serverAddress, token, async (client, callOptions) => {
+        const req = {
+            executionId: args.executionId,
+            taskName: args.taskName,
+            outcome: args.outcome,
+            comment: args.comment ?? "",
+        };
+        if (args.formData !== undefined) {
+            // google.protobuf.Struct fields are plain JSON objects in protobuf-es v2.
+            req.formData = args.formData;
+        }
+        try {
+            const execution = await client.submitWorkflowTaskApproval(req, callOptions);
+            return toProtoJson(WorkflowExecutionSchema, execution);
+        }
+        catch (err) {
+            throw rpcError(err, `approval for task "${args.taskName}" in workflow execution "${args.executionId}"`);
+        }
+    });
+}
+//# sourceMappingURL=approvals.js.map

package/domains/workflowexecutions/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../../../src/domains/workflowexecutions/approvals.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0EAA0E;AAC1E,gCAAgC;AAChC,EAAE;AACF,iEAAiE;AACjE,uEAAuE;AACvE,sEAAsE;AACtE,4EAA4E;AAC5E,sEAAsE;AACtE,wDAAwD;AACxD,+BAA+B;AAG/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EAAE,kCAAkC,EAAE,MAAM,oEAAoE,CAAC;AACxH,OAAO,EAEL,0BAA0B,GAE3B,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,gCAAgC,EAAE,MAAM,kEAAkE,CAAC;AAEpH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAQxC,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,aAAqB,EACrB,KAAa,EACb,IAA8B;IAE9B,OAAO,UAAU,CACf,gCAAgC,EAChC,aAAa,EACb,KAAK,EACL,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QAC5B,MAAM,GAAG,GAA+D;YACtE,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;SAChC,CAAC;QACF,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACjE,OAAO,WAAW,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,6BAA6B,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAUD,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,aAAqB,EACrB,KAAa,EACb,IAAoC;IAEpC,OAAO,UAAU,CACf,kCAAkC,EAClC,aAAa,EACb,KAAK,EACL,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAmE;YAC1E,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;SAC5B,CAAC;QACF,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,0EAA0E;YAC1E,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAsB,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAC5E,OAAO,WAAW,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CACZ,GAAG,EACH,sBAAsB,IAAI,CAAC,QAAQ,4BAA4B,IAAI,CAAC,WAAW,GAAG,CACnF,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/domains/workflowexecutions/run.d.ts

@@ -0,0 +1,12 @@
+export interface RunWorkflowArgs {
+    readonly org: string;
+    readonly workflow: string;
+    readonly message?: string;
+    readonly runtimeEnv?: Record<string, string>;
+}
+/**
+ * Start a workflow execution: resolve org/slug → workflow ID, then create the
+ * execution. Returns the created execution as protojson.
+ */
+export declare function runWorkflow(serverAddress: string, token: string, args: RunWorkflowArgs): Promise<string>;
+//# sourceMappingURL=run.d.ts.map

package/domains/workflowexecutions/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/domains/workflowexecutions/run.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9C;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,MAAM,CAAC,CA6CjB"}

package/domains/workflowexecutions/run.js

@@ -0,0 +1,69 @@
+// Workflow-execution start path for the run_workflow tool.
+//
+// Mirrors the CLI's workflow run branch (client-apps/cli/src/commands/run.ts +
+// resources/run/create.ts): resolve the org/slug reference to the workflow ID,
+// then create the execution. Asynchronous like run_agent — the tool returns
+// the created execution (wex_* ID) and observation happens through the
+// existing get_workflow_execution / get_workflow_execution_events tools.
+import { createClient } from "@connectrpc/connect";
+import { create as createMessage } from "@bufbuild/protobuf";
+import { WorkflowQueryController } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/query_pb";
+import { WorkflowExecutionSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/api_pb";
+import { WorkflowExecutionCommandController } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/command_pb";
+import { WorkflowExecutionSpecSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/spec_pb";
+import { ExecutionValueSchema } from "@stigmer/protos/ai/stigmer/agentic/executioncontext/v1/spec_pb";
+import { ApiResourceMetadataSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/metadata_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { executionName, toExecutionValues } from "../agentexecutions/run.js";
+import { withTransport } from "../client.js";
+import { toProtoJson } from "../marshal.js";
+import { rpcError } from "../rpcerr.js";
+/** apiVersion stamped on created executions; mirrors the CLI's run stack. */
+const API_VERSION = "agentic.stigmer.ai/v1";
+/**
+ * Start a workflow execution: resolve org/slug → workflow ID, then create the
+ * execution. Returns the created execution as protojson.
+ */
+export async function runWorkflow(serverAddress, token, args) {
+    const desc = `workflow "${args.workflow}" in org "${args.org}"`;
+    return withTransport(serverAddress, token, async (transport, callOptions) => {
+        const query = createClient(WorkflowQueryController, transport);
+        let workflowId;
+        try {
+            const workflow = await query.getByReference({ org: args.org, kind: ApiResourceKind.workflow, slug: args.workflow }, callOptions);
+            workflowId = workflow.metadata?.id ?? "";
+        }
+        catch (err) {
+            throw rpcError(err, desc);
+        }
+        // Workflow tasks resolve their org through the runtime env; the CLI
+        // injects STIGMER_ORG_ID the same way, so a caller-supplied value wins.
+        const runtimeEnv = toExecutionValues(args.runtimeEnv);
+        if (runtimeEnv.STIGMER_ORG_ID === undefined) {
+            runtimeEnv.STIGMER_ORG_ID = createMessage(ExecutionValueSchema, {
+                value: args.org,
+                isSecret: false,
+            });
+        }
+        const execution = createMessage(WorkflowExecutionSchema, {
+            apiVersion: API_VERSION,
+            kind: "WorkflowExecution",
+            metadata: createMessage(ApiResourceMetadataSchema, { name: executionName(), org: args.org }),
+            spec: createMessage(WorkflowExecutionSpecSchema, {
+                workflowId,
+                // Empty message means "just run" — the CLI applies the same default.
+                triggerMessage: (args.message ?? "") === "" ? "execute" : args.message,
+                runtimeEnv,
+            }),
+        });
+        const command = createClient(WorkflowExecutionCommandController, transport);
+        try {
+            const created = await command.create(execution, callOptions);
+            return toProtoJson(WorkflowExecutionSchema, created);
+        }
+        catch (err) {
+            throw rpcError(err, `execution of ${desc}`);
+        }
+    });
+}
+//# sourceMappingURL=run.js.map

package/domains/workflowexecutions/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/domains/workflowexecutions/run.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,uEAAuE;AACvE,yEAAyE;AAEzE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EAAE,kCAAkC,EAAE,MAAM,oEAAoE,CAAC;AACxH,OAAO,EAAE,2BAA2B,EAAE,MAAM,iEAAiE,CAAC;AAC9G,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AACtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,4DAA4D,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,6EAA6E;AAC7E,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAS5C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,aAAqB,EACrB,KAAa,EACb,IAAqB;IAErB,MAAM,IAAI,GAAG,aAAa,IAAI,CAAC,QAAQ,aAAa,IAAI,CAAC,GAAG,GAAG,CAAC;IAChE,OAAO,aAAa,CAAC,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;QAC1E,MAAM,KAAK,GAAG,YAAY,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;QAC/D,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CACzC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EACtE,WAAW,CACZ,CAAC;YACF,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,oEAAoE;QACpE,wEAAwE;QACxE,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,UAAU,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC5C,UAAU,CAAC,cAAc,GAAG,aAAa,CAAC,oBAAoB,EAAE;gBAC9D,KAAK,EAAE,IAAI,CAAC,GAAG;gBACf,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,aAAa,CAAC,uBAAuB,EAAE;YACvD,UAAU,EAAE,WAAW;YACvB,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,aAAa,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5F,IAAI,EAAE,aAAa,CAAC,2BAA2B,EAAE;gBAC/C,UAAU;gBACV,qEAAqE;gBACrE,cAAc,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO;gBACtE,UAAU;aACX,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,YAAY,CAAC,kCAAkC,EAAE,SAAS,CAAC,CAAC;QAC5E,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC7D,OAAO,WAAW,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/domains/workflowexecutions/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/domains/workflowexecutions/tools.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AASzE,OAAO,EAA4B,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAK5E,gFAAgF;AAChF,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CAgDjG"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/domains/workflowexecutions/tools.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AASzE,OAAO,EAA4B,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAO5E,gFAAgF;AAChF,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CA8JjG"}

package/domains/workflowexecutions/tools.js

@@ -1,8 +1,10 @@
-// MCP tools for querying workflow execution status and event logs.
-// Go parity: mcp-server/internal/domains/workflowexecutions/tools.go.
-//
-// Backed by WorkflowExecutionQueryController (get, getEventLog). These are
-// diagnostic reads for running/failed executions.
+// MCP tools for the WorkflowExecution domain: start a run (run_workflow),
+// observe it (get_workflow_execution, get_workflow_execution_events — backed
+// by WorkflowExecutionQueryController.get/getEventLog), and answer its
+// human_input tasks (list_pending_approvals, submit_workflow_task_approval).
+// The observation tools predate the rest and their names/descriptions are
+// part of the original Go-parity contract
+// (mcp-server/internal/domains/workflowexecutions/tools.go).
 import { WorkflowExecutionSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/api_pb";
 import { GetEventLogResponseSchema, } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/io_pb";
 import { WorkflowExecutionQueryController } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/query_pb";
@@ -11,8 +13,35 @@ import { resolveToken, withClient } from "../client.js";
 import { toProtoJson } from "../marshal.js";
 import { rpcError } from "../rpcerr.js";
 import { textOrError } from "../toolresult.js";
+import { listPendingApprovals, submitWorkflowTaskApproval } from "./approvals.js";
+import { runWorkflow } from "./run.js";
 /** Register the workflow-execution tools; returns the registered tool names. */
 export function registerWorkflowExecutionTools(server, target) {
+    server.registerTool("run_workflow", {
+        description: "Start a workflow execution (asynchronous). Returns immediately with the created execution " +
+            "(wex_* ID) while the run continues in the background — poll get_workflow_execution and " +
+            "get_workflow_execution_events to observe progress and diagnose failures.",
+        inputSchema: {
+            org: z.string().describe("Organization slug that owns the workflow (e.g. stigmer)."),
+            workflow: z
+                .string()
+                .describe("Workflow slug — the unique identifier within the org (e.g. release-notes)."),
+            message: z
+                .string()
+                .optional()
+                .describe("Trigger message passed to the workflow. Omit to run with the default trigger."),
+            runtime_env: z
+                .record(z.string())
+                .optional()
+                .describe("Non-secret runtime environment values (name → value) injected into the run. " +
+                "Secrets must come from Environments referenced by the workflow, never through this tool."),
+        },
+    }, (args, extra) => textOrError(() => runWorkflow(target.serverAddress, resolveToken(extra, target.apiKey), {
+        org: args.org,
+        workflow: args.workflow,
+        message: args.message,
+        runtimeEnv: args.runtime_env,
+    })));
     server.registerTool("get_workflow_execution", {
         description: "Get a workflow execution's full status including phase, tasks, errors, cost, and timing. Use for diagnosing failed or running executions.",
         inputSchema: {
@@ -37,7 +66,61 @@ export function registerWorkflowExecutionTools(server, target) {
         taskName: args.task_name,
         pageSize: args.page_size,
     })));
-    return ["get_workflow_execution", "get_workflow_execution_events"];
+    server.registerTool("list_pending_approvals", {
+        description: "List workflow tasks waiting for a human decision across an organization — an approvals " +
+            "inbox. Each entry carries the execution ID, task name, requester, timeout, and the form " +
+            "schema when the task defines one; respond with submit_workflow_task_approval. " +
+            "(Agent-execution approvals are not listed here — they surface in get_agent_execution's " +
+            "status.pending_approvals.)",
+        inputSchema: {
+            org: z.string().describe("Organization slug to scope the query (e.g. stigmer)."),
+            page_size: z
+                .number()
+                .int()
+                .optional()
+                .describe("Maximum entries per page (default 20, max 100)."),
+            page_token: z
+                .string()
+                .optional()
+                .describe("Pagination token from a previous response's next_page_token."),
+        },
+    }, (args, extra) => textOrError(() => listPendingApprovals(target.serverAddress, resolveToken(extra, target.apiKey), {
+        org: args.org,
+        pageSize: args.page_size,
+        pageToken: args.page_token,
+    })));
+    server.registerTool("submit_workflow_task_approval", {
+        description: "Submit a reviewer decision for a workflow human_input task that is waiting for a signal. " +
+            "outcome must match one of the task's configured outcome names (default: approve or deny). " +
+            "When the task defines a form_schema (see list_pending_approvals), provide matching " +
+            "form_data. Returns the updated workflow execution.",
+        inputSchema: {
+            execution_id: z.string().describe("Workflow execution ID (wex_* format)."),
+            task_name: z.string().describe("Name of the waiting human_input task."),
+            outcome: z
+                .string()
+                .describe("Decision outcome. Must match a configured outcome name of the task " +
+                "(e.g. approve, deny, needs_revision); approve/deny when none are configured."),
+            comment: z.string().optional().describe("Reviewer comment, stored in the audit trail."),
+            form_data: z
+                .record(z.unknown())
+                .optional()
+                .describe("Response form data conforming to the task's form_schema, when it defines one."),
+        },
+    }, (args, extra) => textOrError(() => submitWorkflowTaskApproval(target.serverAddress, resolveToken(extra, target.apiKey), {
+        executionId: args.execution_id,
+        taskName: args.task_name,
+        outcome: args.outcome,
+        comment: args.comment,
+        formData: args.form_data,
+    })));
+    return [
+        "run_workflow",
+        "get_workflow_execution",
+        "get_workflow_execution_events",
+        "list_pending_approvals",
+        "submit_workflow_task_approval",
+    ];
 }
 /** Fetch a single workflow execution by id. */
 async function getWorkflowExecution(serverAddress, token, executionId) {

package/domains/workflowexecutions/tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/domains/workflowexecutions/tools.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,sEAAsE;AACtE,EAAE;AACF,2EAA2E;AAC3E,kDAAkD;AAIlD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EAEL,yBAAyB,GAC1B,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,gCAAgC,EAAE,MAAM,kEAAkE,CAAC;AACpH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAsB,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,gFAAgF;AAChF,MAAM,UAAU,8BAA8B,CAAC,MAAiB,EAAE,MAAqB;IACrF,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,WAAW,EACT,2IAA2I;QAC7I,WAAW,EAAE;YACX,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;SAC3E;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,oBAAoB,CAClB,MAAM,CAAC,aAAa,EACpB,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAClC,IAAI,CAAC,YAAY,CAClB,CACF,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,+BAA+B,EAC/B;QACE,WAAW,EACT,8CAA8C;YAC9C,2EAA2E;YAC3E,+CAA+C;QACjD,WAAW,EAAE;YACX,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;YAC1E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YACxE,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,QAAQ,CAAC,mDAAmD,CAAC;SACjE;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,0BAA0B,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QACnF,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,QAAQ,EAAE,IAAI,CAAC,SAAS;KACzB,CAAC,CACH,CACJ,CAAC;IAEF,OAAO,CAAC,wBAAwB,EAAE,+BAA+B,CAAC,CAAC;AACrE,CAAC;AAED,+CAA+C;AAC/C,KAAK,UAAU,oBAAoB,CACjC,aAAqB,EACrB,KAAa,EACb,WAAmB;IAEnB,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,UAAU,CACf,gCAAgC,EAChC,aAAa,EACb,KAAK,EACL,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,CAAC;YACxE,OAAO,WAAW,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,uBAAuB,WAAW,GAAG,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAQD,+EAA+E;AAC/E,KAAK,UAAU,0BAA0B,CACvC,aAAqB,EACrB,KAAa,EACb,IAAkB;IAElB,IAAI,IAAI,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,UAAU,CACf,gCAAgC,EAChC,aAAa,EACb,KAAK,EACL,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAsD;YAC7D,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;SAC9B,CAAC;QACF,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACxD,OAAO,WAAW,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,4BAA4B,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/domains/workflowexecutions/tools.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,6EAA6E;AAC7E,uEAAuE;AACvE,6EAA6E;AAC7E,0EAA0E;AAC1E,0CAA0C;AAC1C,6DAA6D;AAI7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EAEL,yBAAyB,GAC1B,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,gCAAgC,EAAE,MAAM,kEAAkE,CAAC;AACpH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAsB,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,gFAAgF;AAChF,MAAM,UAAU,8BAA8B,CAAC,MAAiB,EAAE,MAAqB;IACrF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,WAAW,EACT,4FAA4F;YAC5F,yFAAyF;YACzF,0EAA0E;QAC5E,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;YACpF,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,CAAC,4EAA4E,CAAC;YACzF,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,+EAA+E,CAAC;YAC5F,WAAW,EAAE,CAAC;iBACX,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBAClB,QAAQ,EAAE;iBACV,QAAQ,CACP,8EAA8E;gBAC5E,0FAA0F,CAC7F;SACJ;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,WAAW,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QACpE,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,WAAW;KAC7B,CAAC,CACH,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,WAAW,EACT,2IAA2I;QAC7I,WAAW,EAAE;YACX,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;SAC3E;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,oBAAoB,CAClB,MAAM,CAAC,aAAa,EACpB,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAClC,IAAI,CAAC,YAAY,CAClB,CACF,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,+BAA+B,EAC/B;QACE,WAAW,EACT,8CAA8C;YAC9C,2EAA2E;YAC3E,+CAA+C;QACjD,WAAW,EAAE;YACX,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;YAC1E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YACxE,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,QAAQ,CAAC,mDAAmD,CAAC;SACjE;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,0BAA0B,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QACnF,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,QAAQ,EAAE,IAAI,CAAC,SAAS;KACzB,CAAC,CACH,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,WAAW,EACT,yFAAyF;YACzF,0FAA0F;YAC1F,gFAAgF;YAChF,yFAAyF;YACzF,4BAA4B;QAC9B,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;YAChF,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,QAAQ,CAAC,iDAAiD,CAAC;YAC9D,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,8DAA8D,CAAC;SAC5E;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,oBAAoB,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QAC7E,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,SAAS,EAAE,IAAI,CAAC,UAAU;KAC3B,CAAC,CACH,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,+BAA+B,EAC/B;QACE,WAAW,EACT,2FAA2F;YAC3F,4FAA4F;YAC5F,qFAAqF;YACrF,oDAAoD;QACtD,WAAW,EAAE;YACX,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;YAC1E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;YACvE,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,CACP,qEAAqE;gBACnE,8EAA8E,CACjF;YACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;YACvF,SAAS,EAAE,CAAC;iBACT,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;iBACnB,QAAQ,EAAE;iBACV,QAAQ,CAAC,+EAA+E,CAAC;SAC7F;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,0BAA0B,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QACnF,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,SAAS;KACzB,CAAC,CACH,CACJ,CAAC;IAEF,OAAO;QACL,cAAc;QACd,wBAAwB;QACxB,+BAA+B;QAC/B,wBAAwB;QACxB,+BAA+B;KAChC,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,KAAK,UAAU,oBAAoB,CACjC,aAAqB,EACrB,KAAa,EACb,WAAmB;IAEnB,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,UAAU,CACf,gCAAgC,EAChC,aAAa,EACb,KAAK,EACL,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,CAAC;YACxE,OAAO,WAAW,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,uBAAuB,WAAW,GAAG,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAQD,+EAA+E;AAC/E,KAAK,UAAU,0BAA0B,CACvC,aAAqB,EACrB,KAAa,EACb,IAAkB;IAElB,IAAI,IAAI,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,UAAU,CACf,gCAAgC,EAChC,aAAa,EACb,KAAK,EACL,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAsD;YAC7D,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;SAC9B,CAAC;QACF,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACxD,OAAO,WAAW,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,4BAA4B,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/domains/workflows/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/domains/workflows/tools.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAMhE,2EAA2E;AAC3E,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CAkDxF"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/domains/workflows/tools.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAOhE,2EAA2E;AAC3E,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CAkIxF"}

package/domains/workflows/tools.js

@@ -1,5 +1,7 @@
-// MCP tools for the Workflow domain (CRUD: get, apply, delete).
-// Go parity: mcp-server/internal/domains/workflows/tools.go.
+// MCP tools for the Workflow domain (CRUD: get, apply, delete) plus the
+// versioning surface (version param on get, list_workflow_versions,
+// tag_workflow_version). The CRUD names/descriptions are part of the original
+// Go-parity contract (mcp-server/internal/domains/workflows/tools.go).
 //
 // The workflow-specific tools (validate_workflow_yaml, task-kind registry) live
 // in sibling files.
@@ -10,15 +12,28 @@ import { textOrError } from "../toolresult.js";
 import { applyWorkflow } from "./apply.js";
 import { deleteWorkflow } from "./delete.js";
 import { fetchWorkflow } from "./fetch.js";
+import { fetchWorkflowVersion, listWorkflowVersions, tagWorkflowVersion } from "./versions.js";
 /** Register the Workflow CRUD tools; returns the registered tool names. */
 export function registerWorkflowTools(server, target) {
     server.registerTool("get_workflow", {
-        description: "Get full details of a Stigmer workflow by its org and slug.",
+        description: "Get full details of a Stigmer workflow by its org and slug. Pass 'version' (a full " +
+            "SHA-256 version hash from list_workflow_versions) to fetch a historical version instead — " +
+            "that returns the version entry with its validated YAML rather than the live workflow. " +
+            "Tags are not accepted here; resolve a tag to its hash via list_workflow_versions first.",
         inputSchema: {
             org: z.string().describe("Organization slug that owns the workflow."),
             slug: z.string().describe("Workflow slug — unique identifier within the org."),
+            version: z
+                .string()
+                .optional()
+                .describe("Full 64-character SHA-256 version hash of a historical version. Omit for the live workflow."),
         },
-    }, (args, extra) => textOrError(() => fetchWorkflow(target.serverAddress, resolveToken(extra, target.apiKey), args.org, args.slug)));
+    }, (args, extra) => textOrError(() => {
+        const token = resolveToken(extra, target.apiKey);
+        return args.version !== undefined && args.version !== ""
+            ? fetchWorkflowVersion(target.serverAddress, token, args.org, args.slug, args.version)
+            : fetchWorkflow(target.serverAddress, token, args.org, args.slug);
+    }));
     server.registerTool("apply_workflow", {
         description: "Create or update a Stigmer workflow (idempotent). Provide identity fields (name, org) and workflow configuration (document, tasks, env, etc.).",
         inputSchema: WorkflowInputShape,
@@ -30,6 +45,55 @@ export function registerWorkflowTools(server, target) {
             slug: z.string().describe("Workflow slug — unique identifier within the org."),
         },
     }, (args, extra) => textOrError(() => deleteWorkflow(target.serverAddress, resolveToken(extra, target.apiKey), args.org, args.slug)));
-    return ["get_workflow", "apply_workflow", "delete_workflow"];
+    server.registerTool("list_workflow_versions", {
+        description: "List a workflow's version history (newest first): version hash, tag, who applied it and " +
+            "when, and which version is current. Every apply that changes the workflow creates a new " +
+            "immutable version identified by its content hash. Entries omit the version YAML — fetch " +
+            "one version's full content with get_workflow and its hash.",
+        inputSchema: {
+            org: z.string().describe("Organization slug that owns the workflow."),
+            slug: z.string().describe("Workflow slug — unique identifier within the org."),
+            page_size: z
+                .number()
+                .int()
+                .optional()
+                .describe("Maximum versions per page (default 50, max 100)."),
+            page_token: z
+                .string()
+                .optional()
+                .describe("Pagination token from a previous response's next_page_token."),
+        },
+    }, (args, extra) => textOrError(() => listWorkflowVersions(target.serverAddress, resolveToken(extra, target.apiKey), {
+        org: args.org,
+        slug: args.slug,
+        pageSize: args.page_size,
+        pageToken: args.page_token,
+    })));
+    server.registerTool("tag_workflow_version", {
+        description: "Assign a tag (e.g. stable, production) to a specific workflow version. Tags are mutable " +
+            "pointers: re-tagging with an existing name moves it from its previous version, and a " +
+            "version holds at most one tag. Get version hashes from list_workflow_versions. Returns " +
+            "the updated workflow.",
+        inputSchema: {
+            org: z.string().describe("Organization slug that owns the workflow."),
+            slug: z.string().describe("Workflow slug — unique identifier within the org."),
+            version: z.string().describe("Full 64-character SHA-256 hash of the version to tag."),
+            tag: z
+                .string()
+                .describe("Tag to assign: alphanumeric with dots, hyphens, or underscores (e.g. stable, v1.0)."),
+        },
+    }, (args, extra) => textOrError(() => tagWorkflowVersion(target.serverAddress, resolveToken(extra, target.apiKey), {
+        org: args.org,
+        slug: args.slug,
+        versionHash: args.version,
+        tag: args.tag,
+    })));
+    return [
+        "get_workflow",
+        "apply_workflow",
+        "delete_workflow",
+        "list_workflow_versions",
+        "tag_workflow_version",
+    ];
 }
 //# sourceMappingURL=tools.js.map

package/domains/workflows/tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/domains/workflows/tools.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,6DAA6D;AAC7D,EAAE;AACF,gFAAgF;AAChF,oBAAoB;AAGpB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,MAAiB,EAAE,MAAqB;IAC5E,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,WAAW,EAAE,6DAA6D;QAC1E,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;YACrE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;SAC/E;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAC7F,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EACT,gJAAgJ;QAClJ,WAAW,EAAE,kBAAkB;KAChC,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAC9E,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,WAAW,EAAE,8EAA8E;QAC3F,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;YACrE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;SAC/E;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,cAAc,CACZ,MAAM,CAAC,aAAa,EACpB,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAClC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,IAAI,CACV,CACF,CACJ,CAAC;IAEF,OAAO,CAAC,cAAc,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;AAC/D,CAAC"}
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/domains/workflows/tools.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,oEAAoE;AACpE,8EAA8E;AAC9E,uEAAuE;AACvE,EAAE;AACF,gFAAgF;AAChF,oBAAoB;AAGpB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAE/F,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,MAAiB,EAAE,MAAqB;IAC5E,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,WAAW,EACT,qFAAqF;YACrF,4FAA4F;YAC5F,wFAAwF;YACxF,yFAAyF;QAC3F,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;YACrE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;YAC9E,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,6FAA6F,CAC9F;SACJ;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE;QACf,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE;YACtD,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;YACtF,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EACT,gJAAgJ;QAClJ,WAAW,EAAE,kBAAkB;KAChC,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAC9E,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,WAAW,EAAE,8EAA8E;QAC3F,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;YACrE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;SAC/E;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,cAAc,CACZ,MAAM,CAAC,aAAa,EACpB,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAClC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,IAAI,CACV,CACF,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,WAAW,EACT,0FAA0F;YAC1F,0FAA0F;YAC1F,0FAA0F;YAC1F,4DAA4D;QAC9D,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;YACrE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;YAC9E,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,QAAQ,CAAC,kDAAkD,CAAC;YAC/D,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,8DAA8D,CAAC;SAC5E;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,oBAAoB,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QAC7E,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,SAAS,EAAE,IAAI,CAAC,UAAU;KAC3B,CAAC,CACH,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,WAAW,EACT,0FAA0F;YAC1F,uFAAuF;YACvF,yFAAyF;YACzF,uBAAuB;QACzB,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;YACrE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;YAC9E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;YACrF,GAAG,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,QAAQ,CAAC,qFAAqF,CAAC;SACnG;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,kBAAkB,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QAC3E,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,OAAO;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CACH,CACJ,CAAC;IAEF,OAAO;QACL,cAAc;QACd,gBAAgB;QAChB,iBAAiB;QACjB,wBAAwB;QACxB,sBAAsB;KACvB,CAAC;AACJ,CAAC"}

package/domains/workflows/versions.d.ts

@@ -0,0 +1,29 @@
+export interface ListWorkflowVersionsArgs {
+    readonly org: string;
+    readonly slug: string;
+    readonly pageSize?: number;
+    readonly pageToken?: string;
+}
+/**
+ * List a workflow's version history (newest first), with validated_yaml
+ * stripped from every entry (see file header).
+ */
+export declare function listWorkflowVersions(serverAddress: string, token: string, args: ListWorkflowVersionsArgs): Promise<string>;
+/**
+ * Fetch one historical version of a workflow: resolve org/slug → ID, then
+ * getVersion by full hash. Returns the WorkflowVersionEntry (hash, tag,
+ * provenance, and the version's validated YAML) as protojson.
+ */
+export declare function fetchWorkflowVersion(serverAddress: string, token: string, org: string, slug: string, versionHash: string): Promise<string>;
+export interface TagWorkflowVersionArgs {
+    readonly org: string;
+    readonly slug: string;
+    readonly versionHash: string;
+    readonly tag: string;
+}
+/**
+ * Assign (or move) a tag onto a workflow version: resolve org/slug → ID, then
+ * tagVersion. Returns the updated workflow as protojson.
+ */
+export declare function tagWorkflowVersion(serverAddress: string, token: string, args: TagWorkflowVersionArgs): Promise<string>;
+//# sourceMappingURL=versions.d.ts.map

package/domains/workflows/versions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"versions.d.ts","sourceRoot":"","sources":["../../../src/domains/workflows/versions.ts"],"names":[],"mappings":"AA+BA,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,MAAM,CAAC,CA0BjB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CA0BjB"}

package/domains/workflows/versions.js

@@ -0,0 +1,99 @@
+// Workflow versioning paths: the version timeline (listVersions), a pinned
+// historical version (getVersion, surfaced through get_workflow's optional
+// version argument), and tag assignment (tagVersion).
+//
+// Version identity is the SHA-256 content hash of the validated CNCF YAML;
+// tags are mutable pointers onto hashes. getVersion and tagVersion address by
+// workflow ID + full hash — no tag or slug resolution server-side — so the
+// tools here do the org/slug → ID two-step, and tag → hash mapping goes
+// through the timeline (the tool descriptions teach the model that sequence).
+//
+// The timeline projection strips validated_yaml from every entry: the backend
+// embeds each version's full workflow YAML, which would multiply a 50-entry
+// page into 50 documents. The timeline answers "what versions exist"; the
+// YAML of one version comes from get_workflow with that version's hash.
+import { createClient } from "@connectrpc/connect";
+import { ListWorkflowVersionsResponseSchema, WorkflowVersionEntrySchema, } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/version_pb";
+import { WorkflowSchema } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/api_pb";
+import { WorkflowCommandController } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/command_pb";
+import { WorkflowQueryController } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/query_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { withClient, withTransport } from "../client.js";
+import { toProtoJson } from "../marshal.js";
+import { rpcError } from "../rpcerr.js";
+/**
+ * List a workflow's version history (newest first), with validated_yaml
+ * stripped from every entry (see file header).
+ */
+export async function listWorkflowVersions(serverAddress, token, args) {
+    return withClient(WorkflowQueryController, serverAddress, token, async (client, callOptions) => {
+        const req = {
+            org: args.org,
+            slug: args.slug,
+            pageToken: args.pageToken ?? "",
+        };
+        // Forward page_size only when set, letting the server apply its default.
+        if ((args.pageSize ?? 0) > 0) {
+            req.pageSize = args.pageSize;
+        }
+        try {
+            const resp = await client.listVersions(req, callOptions);
+            const data = JSON.parse(toProtoJson(ListWorkflowVersionsResponseSchema, resp));
+            if (Array.isArray(data.versions)) {
+                for (const entry of data.versions) {
+                    delete entry.validated_yaml;
+                }
+            }
+            return JSON.stringify(data, null, 2);
+        }
+        catch (err) {
+            throw rpcError(err, `versions of workflow "${args.slug}" in org "${args.org}"`);
+        }
+    });
+}
+/**
+ * Fetch one historical version of a workflow: resolve org/slug → ID, then
+ * getVersion by full hash. Returns the WorkflowVersionEntry (hash, tag,
+ * provenance, and the version's validated YAML) as protojson.
+ */
+export async function fetchWorkflowVersion(serverAddress, token, org, slug, versionHash) {
+    const desc = `version "${versionHash}" of workflow "${slug}" in org "${org}"`;
+    return withTransport(serverAddress, token, async (transport, callOptions) => {
+        const query = createClient(WorkflowQueryController, transport);
+        try {
+            const workflow = await query.getByReference({ org, kind: ApiResourceKind.workflow, slug }, callOptions);
+            const entry = await query.getVersion({ workflowId: workflow.metadata?.id ?? "", versionHash }, callOptions);
+            return toProtoJson(WorkflowVersionEntrySchema, entry);
+        }
+        catch (err) {
+            throw rpcError(err, desc);
+        }
+    });
+}
+/**
+ * Assign (or move) a tag onto a workflow version: resolve org/slug → ID, then
+ * tagVersion. Returns the updated workflow as protojson.
+ */
+export async function tagWorkflowVersion(serverAddress, token, args) {
+    const desc = `tag "${args.tag}" on workflow "${args.slug}" in org "${args.org}"`;
+    return withTransport(serverAddress, token, async (transport, callOptions) => {
+        const query = createClient(WorkflowQueryController, transport);
+        let id;
+        try {
+            const workflow = await query.getByReference({ org: args.org, kind: ApiResourceKind.workflow, slug: args.slug }, callOptions);
+            id = workflow.metadata?.id ?? "";
+        }
+        catch (err) {
+            throw rpcError(err, desc);
+        }
+        const command = createClient(WorkflowCommandController, transport);
+        try {
+            const workflow = await command.tagVersion({ workflowId: id, versionHash: args.versionHash, tag: args.tag }, callOptions);
+            return toProtoJson(WorkflowSchema, workflow);
+        }
+        catch (err) {
+            throw rpcError(err, desc);
+        }
+    });
+}
+//# sourceMappingURL=versions.js.map