apple-notes-mcp 2.8.7 → 2.8.8

package/README.md

@@ -323,6 +323,24 @@ Access.
 
 ---
 
+#### `native-tags-status`
+
+Checks whether exactly one configured Native Tags Shortcut is installed. An
+installed workflow may still need macOS permission on its first execution.
+
+---
+
+#### `add-native-tags`
+
+Adds actual native Notes tag objects to one exact note using `id`, a fresh
+`expectedContentHash`, a distinctive existing `scopeText`, and `tags`. The
+operation verifies the note's original text, links, and native objects after the
+Shortcut runs. It refuses ambiguous title-and-scope matches and never retries an
+uncertain write. Install the signed workflow as described in
+[`shortcuts/README.md`](shortcuts/README.md).
+
+---
+
 #### `get-note-plaintext`
 
 Retrieves a note's body as plain text, with no HTML markup.

package/build/index.js

@@ -24465,14 +24465,14 @@ var require_turndown_cjs = __commonJS({
         } else if (node.nodeType === 1) {
           replacement = replacementForNode.call(self, node);
         }
-        return join9(output, replacement);
+        return join10(output, replacement);
       }, "");
     }
     function postProcess(output) {
       var self = this;
       this.rules.forEach(function(rule) {
         if (typeof rule.append === "function") {
-          output = join9(output, rule.append(self.options));
+          output = join10(output, rule.append(self.options));
         }
       });
       return output.replace(/^[\t\r\n]+/, "").replace(/[\t\r\n\s]+$/, "");
@@ -24484,7 +24484,7 @@ var require_turndown_cjs = __commonJS({
       if (whitespace.leading || whitespace.trailing) content = content.trim();
       return whitespace.leading + rule.replacement(content, node, this.options) + whitespace.trailing;
     }
-    function join9(output, replacement) {
+    function join10(output, replacement) {
       var s1 = trimTrailingNewlines(output);
       var s2 = trimLeadingNewlines(replacement);
       var nls = Math.max(output.length - s1.length, replacement.length - s2.length);
@@ -39350,10 +39350,10 @@ function hasFullDiskAccess() {
     return false;
   }
 }
-function queryNoteData(noteId2) {
-  const pkMatch = noteId2.match(/\/p(\d+)$/);
+function queryNoteData(noteId3) {
+  const pkMatch = noteId3.match(/\/p(\d+)$/);
   if (!pkMatch) {
-    console.error(`Invalid note ID format: ${noteId2}`);
+    console.error(`Invalid note ID format: ${noteId3}`);
     return { hex: null, error: "invalid_id" };
   }
   const pk = pkMatch[1];
@@ -39438,13 +39438,13 @@ function parseChecklistFromProtobuf(data) {
     return null;
   }
 }
-function getChecklistItems(noteId2) {
-  const { hex: hexData, error: queryError } = queryNoteData(noteId2);
+function getChecklistItems(noteId3) {
+  const { hex: hexData, error: queryError } = queryNoteData(noteId3);
   if (queryError === "invalid_id") {
     return {
       items: null,
       error: "invalid_id",
-      message: `Invalid note ID format: "${noteId2}". Expected format: x-coredata://UUID/ICNote/pNNN`
+      message: `Invalid note ID format: "${noteId3}". Expected format: x-coredata://UUID/ICNote/pNNN`
     };
   }
   if (queryError === "no_fda") {
@@ -40281,20 +40281,20 @@ var AppleNotesManager = class {
       return null;
     }
     const rawOutput = result.output.trim();
-    const noteId2 = extractCoreDataId(rawOutput, "note") || rawOutput;
-    if (!noteId2) {
+    const noteId3 = extractCoreDataId(rawOutput, "note") || rawOutput;
+    if (!noteId3) {
       console.error(`Created note "${title}" but Notes.app returned no canonical note ID`);
       return null;
     }
     try {
-      sanitizeNoteId(noteId2);
+      sanitizeNoteId(noteId3);
     } catch {
       console.error(`Created note "${title}" but Notes.app returned an invalid note ID`);
       return null;
     }
     const now = /* @__PURE__ */ new Date();
     return {
-      id: noteId2,
+      id: noteId3,
       title,
       content,
       tags,
@@ -40408,11 +40408,11 @@ var AppleNotesManager = class {
     for (const item of items) {
       const [title, id, folder2, created, modified] = item.split(FIELD_SEP);
       if (!title?.trim()) continue;
-      const noteId2 = id?.trim() || generateFallbackId();
-      if (seenIds.has(noteId2)) continue;
-      seenIds.add(noteId2);
+      const noteId3 = id?.trim() || generateFallbackId();
+      if (seenIds.has(noteId3)) continue;
+      seenIds.add(noteId3);
       notes.push({
-        id: noteId2,
+        id: noteId3,
         title: title.trim(),
         content: "",
         // Not fetched in search
@@ -40780,10 +40780,10 @@ var AppleNotesManager = class {
     for (const item of output.split(RECORD_SEP)) {
       const [title, id] = item.split(FIELD_SEP);
       if (!title?.trim()) continue;
-      const noteId2 = id?.trim() || generateFallbackId();
-      if (seenIds.has(noteId2)) continue;
-      seenIds.add(noteId2);
-      refs.push({ title: title.trim(), id: noteId2 });
+      const noteId3 = id?.trim() || generateFallbackId();
+      if (seenIds.has(noteId3)) continue;
+      seenIds.add(noteId3);
+      refs.push({ title: title.trim(), id: noteId3 });
       if (safeLimit !== void 0 && refs.length >= safeLimit) break;
     }
     return refs;
@@ -41435,8 +41435,8 @@ var AppleNotesManager = class {
    * @param separately - Open in a separate window when supported by Notes.app
    * @returns true if Notes.app revealed the attachment, false otherwise
    */
-  showAttachmentById(noteId2, attachmentId, separately = false) {
-    const safeNoteId = sanitizeId(noteId2);
+  showAttachmentById(noteId3, attachmentId, separately = false) {
+    const safeNoteId = sanitizeId(noteId3);
     const safeAttId = escapePlainStringForAppleScript(attachmentId);
     const separatelyClause = separately ? " separately true" : "";
     const script = `
@@ -41456,13 +41456,13 @@ var AppleNotesManager = class {
     const result = executeMutationAppleScript(script);
     if (!result.success) {
       console.error(
-        `Failed to show attachment "${attachmentId}" on note "${noteId2}":`,
+        `Failed to show attachment "${attachmentId}" on note "${noteId3}":`,
         result.error
       );
       return false;
     }
     if ((result.output ?? "").trim().startsWith("ERR")) {
-      console.error(`Attachment "${attachmentId}" not found on note "${noteId2}"`);
+      console.error(`Attachment "${attachmentId}" not found on note "${noteId3}"`);
       return false;
     }
     return true;
@@ -41862,7 +41862,7 @@ var AppleNotesManager = class {
    * @param savePath - absolute destination file path (within home / temp / /Volumes)
    * @returns { success, savedPath?, name?, contentType?, error? }
    */
-  saveAttachmentById(noteId2, attachmentId, savePath) {
+  saveAttachmentById(noteId3, attachmentId, savePath) {
     let abs;
     try {
       abs = assertSafeSavePath(savePath);
@@ -41870,7 +41870,7 @@ var AppleNotesManager = class {
     } catch (e) {
       return { success: false, error: e instanceof Error ? e.message : String(e) };
     }
-    const safeNoteId = sanitizeId(noteId2);
+    const safeNoteId = sanitizeId(noteId3);
     const safeAttId = escapePlainStringForAppleScript(attachmentId);
     const safePath = escapePlainStringForAppleScript(abs);
     const script = `
@@ -41934,11 +41934,11 @@ var AppleNotesManager = class {
    * @param attachmentId - id of the attachment
    * @returns { success, name?, contentType?, base64?, bytes?, error? }
    */
-  getAttachmentBase64ById(noteId2, attachmentId) {
+  getAttachmentBase64ById(noteId3, attachmentId) {
     const dir = makeTempDir();
     try {
       const dest = `${dir}/attachment.bin`;
-      const saved = this.saveAttachmentById(noteId2, attachmentId, dest);
+      const saved = this.saveAttachmentById(noteId3, attachmentId, dest);
       if (!saved.success || !saved.savedPath) {
         return { success: false, error: saved.error };
       }
@@ -42438,13 +42438,13 @@ function presentColumns() {
   }
   return cols;
 }
-function getNoteMetadata(noteId2) {
-  const pkMatch = noteId2.match(/\/p(\d+)$/);
+function getNoteMetadata(noteId3) {
+  const pkMatch = noteId3.match(/\/p(\d+)$/);
   if (!pkMatch) {
     return {
       metadata: null,
       error: "invalid_id",
-      message: `Invalid note ID format: "${noteId2}". Expected format: x-coredata://UUID/ICNote/pNNN`
+      message: `Invalid note ID format: "${noteId3}". Expected format: x-coredata://UUID/ICNote/pNNN`
     };
   }
   const pk = pkMatch[1];
@@ -42465,7 +42465,7 @@ function getNoteMetadata(noteId2) {
       return {
         metadata: null,
         error: "not_found",
-        message: `No note found in the database for ID "${noteId2}".`
+        message: `No note found in the database for ID "${noteId3}".`
       };
     }
     const raw = JSON.parse(row);
@@ -43191,6 +43191,201 @@ function registerDirectOperations(server2, manager) {
   );
 }
 
+// src/services/nativeTags.ts
+import { execFileSync as execFileSync6 } from "node:child_process";
+import { mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync2, rmSync as rmSync3 } from "node:fs";
+import { tmpdir as tmpdir3 } from "node:os";
+import { join as join9 } from "node:path";
+var NATIVE_TAGS_SHORTCUT = "Apple Notes MCP - Native Tags";
+function normalizeNativeTags(tags) {
+  if (!tags.length || tags.length > 100) throw new Error("Provide between 1 and 100 tags");
+  return [
+    ...new Set(
+      tags.map((value) => {
+        const tag = value.normalize("NFC").replace(/^#/, "");
+        if (tag.length > 100 || !new RegExp("^(?=.*\\p{L})[\\p{L}\\p{N}_-]+$", "u").test(tag))
+          throw new Error(
+            "Tags must contain a letter and only letters, digits, hyphens or underscores"
+          );
+        return tag;
+      })
+    )
+  ];
+}
+function addNativeTags(request, deps) {
+  if (!/^x-coredata:\/\/[0-9a-f-]+\/ICNote\/p\d+$/i.test(request.id))
+    throw new Error("An exact CoreData note ID is required");
+  if (request.scopeText.length < 12 || request.scopeText.length > 500 || /[\r\n\0]/u.test(request.scopeText))
+    throw new Error("scopeText must be a stable, single-line project marker of 12\u2013500 characters");
+  const tags = normalizeNativeTags(request.tags);
+  const before = deps.read(request.id);
+  if (before.contentHash !== request.expectedContentHash)
+    throw new Error("Note revision changed; read it again");
+  if (before.title !== request.title || !before.plaintext.includes(request.scopeText))
+    throw new Error("The exact note does not match the title and project marker");
+  const missing = tags.filter((tag) => !before.rich.nativeTags.includes(tag));
+  if (!missing.length)
+    return { nativeTags: before.rich.nativeTags, added: [], contentHash: before.contentHash };
+  const candidates = deps.candidates(request.title, request.scopeText);
+  if (candidates.length !== 1 || candidates[0] !== request.id)
+    throw new Error(
+      "Shortcuts selection is ambiguous or points to a different note; nothing was changed"
+    );
+  if (deps.read(request.id).contentHash !== request.expectedContentHash)
+    throw new Error("Note revision changed during preflight; nothing was changed");
+  let transportWarning;
+  try {
+    deps.run({ title: request.title, scopeText: request.scopeText, tags: missing });
+  } catch (error2) {
+    transportWarning = error2 instanceof Error ? error2.message : "Shortcuts completion was uncertain";
+  }
+  const after = deps.read(request.id);
+  const allTags = [.../* @__PURE__ */ new Set([...before.rich.nativeTags, ...tags])];
+  const textWithoutTags = (text) => {
+    for (const tag of [...allTags].sort((a, b) => b.length - a.length)) {
+      const escaped = tag.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+      text = text.replace(new RegExp(`#${escaped}(?![\\p{L}\\p{N}_-])`, "gu"), "");
+    }
+    return text.replace(/[\s\ufffc]/gu, "");
+  };
+  if (after.title !== before.title || allTags.some((tag) => !after.rich.nativeTags.includes(tag)) || textWithoutTags(before.rich.text) !== textWithoutTags(after.rich.text) || linkSignature(before.rich.links) !== linkSignature(after.rich.links) || before.rich.nativeObjectIds.some((id) => !after.rich.nativeObjectIds.includes(id)) || before.rich.hasChecklist !== after.rich.hasChecklist) {
+    throw new Error(
+      "Shortcuts ran, but exact-ID tags/text/links readback was not verified. Read the note before any retry"
+    );
+  }
+  return {
+    nativeTags: after.rich.nativeTags,
+    added: missing,
+    contentHash: after.contentHash,
+    ...transportWarning ? {
+      transportWarning: "Shortcuts completion was uncertain, but all requested native tags and preserved content were verified by exact ID."
+    } : {}
+  };
+}
+function nativeTagsStatus(shortcut = process.env.APPLE_NOTES_MCP_TAGS_SHORTCUT || NATIVE_TAGS_SHORTCUT) {
+  const lines = execFileSync6("/usr/bin/shortcuts", ["list", "--show-identifiers"], {
+    encoding: "utf8",
+    timeout: 15e3,
+    maxBuffer: 1024 * 1024,
+    stdio: ["ignore", "pipe", "pipe"]
+  }).split(/\r?\n/u);
+  const matches = lines.flatMap((line) => {
+    const match = /^(.*) \(([0-9A-Fa-f-]{36})\)$/.exec(line);
+    return match && (match[1] === shortcut || match[2].toLowerCase() === shortcut.toLowerCase()) ? [{ name: match[1], identifier: match[2] }] : [];
+  });
+  return {
+    shortcut,
+    installed: matches.length === 1,
+    identifier: matches.length === 1 ? matches[0].identifier : void 0
+  };
+}
+function runNativeTagsShortcut(input) {
+  const status = nativeTagsStatus();
+  if (!status.installed)
+    throw new Error(`Import the supplied ${status.shortcut}.shortcut in Shortcuts first`);
+  const directory = mkdtempSync3(join9(tmpdir3(), "apple-notes-native-tags-"));
+  try {
+    const path4 = join9(directory, "request.json");
+    writeFileSync2(path4, JSON.stringify(input), { mode: 384 });
+    execFileSync6("/usr/bin/shortcuts", ["run", status.identifier, "--input-path", path4], {
+      encoding: "utf8",
+      timeout: 6e4,
+      maxBuffer: 1024 * 1024,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+  } catch {
+    throw new Error(
+      "Native tag operation did not complete cleanly (possibly waiting for macOS permission). Do not retry automatically; read the exact note and check Shortcuts"
+    );
+  } finally {
+    rmSync3(directory, { recursive: true, force: true });
+  }
+}
+
+// src/tools/nativeTagsBridge.ts
+var noteId2 = external_exports.string().regex(/^x-coredata:\/\/[0-9a-f-]+\/ICNote\/p\d+$/i);
+var revision2 = external_exports.string().regex(/^sha256:[a-f0-9]{64}$/);
+function registerNativeTagsBridge(server2, manager) {
+  function tool(name, description, inputSchema, handler) {
+    server2.registerTool(
+      name,
+      {
+        description,
+        inputSchema,
+        outputSchema: external_exports.object({ ok: external_exports.boolean().optional() }).passthrough()
+      },
+      (async (args) => {
+        try {
+          const result = handler(args);
+          return {
+            content: [{ type: "text", text: JSON.stringify(result) }],
+            structuredContent: result
+          };
+        } catch (error2) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: error2 instanceof Error ? error2.message : String(error2)
+              }
+            ],
+            isError: true
+          };
+        }
+      })
+    );
+  }
+  const read = (id) => {
+    const note = manager.getNoteById(id);
+    if (!note) throw new Error("Note not found");
+    if (note.passwordProtected) throw new Error("Locked notes cannot receive native tags");
+    const body = manager.getNoteContentById(id);
+    if (!body) throw new Error("Note content is unavailable");
+    const enriched = enrichNoteRead(id, body);
+    const rich = readRichNote(id);
+    if (!enriched.complete || enriched.revision !== rich.revision)
+      throw new Error("Native metadata changed during read; read the note again");
+    return {
+      contentHash: richContentHash(body, enriched),
+      title: note.title,
+      plaintext: manager.getNotePlaintextById(id),
+      rich
+    };
+  };
+  tool(
+    "native-tags-status",
+    "Use when: checking whether the Native Tags Shortcut is installed before a tag write.\nReturns: the configured Shortcut name, unique installed identifier, and installed state.\nDo not use when: listing tags on notes (list-native-tags).\nSafety: read-only; installation does not by itself prove Notes permission or a successful live mutation.",
+    {},
+    () => nativeTagsStatus()
+  );
+  tool(
+    "add-native-tags",
+    "Use when: adding real clickable Apple Notes tags to one exact, freshly read note.\nReturns: verified native tags, additions, and the post-write content hash.\nDo not use when: textual #hashtags are sufficient or the note cannot be selected uniquely by its existing title and scope text.\nSafety: requires exact ID, fresh revision, and a distinctive existing scope phrase; verifies original text, links, and native objects after the Shortcut runs and never retries automatically.",
+    {
+      id: noteId2,
+      expectedContentHash: revision2,
+      scopeText: external_exports.string().min(12).max(500),
+      tags: external_exports.array(external_exports.string().min(1).max(101)).min(1).max(100)
+    },
+    ({ id, expectedContentHash, scopeText, tags }) => {
+      const initial = read(id);
+      const result = addNativeTags(
+        { id, expectedContentHash, scopeText, tags, title: initial.title },
+        {
+          read,
+          candidates: (title, scope) => manager.listAccounts().flatMap(
+            (account) => manager.searchNotes(title, false, account.name).filter(
+              (note) => !note.passwordProtected && manager.getNotePlaintextById(note.id).toLocaleLowerCase().includes(scope.toLocaleLowerCase())
+            ).map((note) => note.id)
+          ),
+          run: runNativeTagsShortcut
+        }
+      );
+      return { ok: true, id, ...result };
+    }
+  );
+}
+
 // src/index.ts
 loadFileConfig();
 var require2 = createRequire(import.meta.url);
@@ -43202,6 +43397,7 @@ var server = new McpServer({
 });
 var notesManager = new AppleNotesManager();
 registerDirectOperations(server, notesManager);
+registerNativeTagsBridge(server, notesManager);
 function successResponse(message, structured) {
   const res = { content: [{ type: "text", text: message }] };
   if (structured) res.structuredContent = structured;
@@ -44697,8 +44893,8 @@ registerTool(
       contentType: external_exports.string().optional()
     }
   },
-  withErrorHandling(({ noteId: noteId2, attachmentId, savePath }) => {
-    const r = notesManager.saveAttachmentById(noteId2, attachmentId, savePath);
+  withErrorHandling(({ noteId: noteId3, attachmentId, savePath }) => {
+    const r = notesManager.saveAttachmentById(noteId3, attachmentId, savePath);
     if (!r.success) {
       return errorResponse(`Failed to save attachment: ${r.error ?? "unknown error"}`);
     }
@@ -44724,8 +44920,8 @@ registerTool(
       base64: external_exports.string().optional()
     }
   },
-  withErrorHandling(({ noteId: noteId2, attachmentId }) => {
-    const r = notesManager.getAttachmentBase64ById(noteId2, attachmentId);
+  withErrorHandling(({ noteId: noteId3, attachmentId }) => {
+    const r = notesManager.getAttachmentBase64ById(noteId3, attachmentId);
     if (!r.success || !r.base64) {
       return errorResponse(`Failed to fetch attachment: ${r.error ?? "unknown error"}`);
     }
@@ -44750,13 +44946,13 @@ registerTool(
       separately: external_exports.boolean().optional()
     }
   },
-  withErrorHandling(({ noteId: noteId2, attachmentId, separately = false }) => {
-    const success = notesManager.showAttachmentById(noteId2, attachmentId, separately);
+  withErrorHandling(({ noteId: noteId3, attachmentId, separately = false }) => {
+    const success = notesManager.showAttachmentById(noteId3, attachmentId, separately);
     if (!success) {
-      return errorResponse(`Failed to show attachment "${attachmentId}" on note "${noteId2}"`);
+      return errorResponse(`Failed to show attachment "${attachmentId}" on note "${noteId3}"`);
     }
     return successResponse(`Shown attachment "${attachmentId}" in Notes.app`, {
-      noteId: noteId2,
+      noteId: noteId3,
       attachmentId,
       separately
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apple-notes-mcp",
-  "version": "2.8.7",
+  "version": "2.8.8",
   "description": "MCP server for Apple Notes - create, search, update, and manage notes via Claude and other AI assistants",
   "type": "module",
   "main": "build/index.js",
@@ -11,6 +11,7 @@
   "files": [
     "build",
     "docs",
+    "shortcuts",
     "README.md",
     "LICENSE"
   ],

package/shortcuts/Apple Notes MCP - Native Tags.unsigned.shortcut

@@ -0,0 +1,563 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>WFWorkflowName</key>
+	<string>Apple Notes MCP - Native Tags</string>
+	<key>WFWorkflowActions</key>
+	<array>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.comment</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>0098B800-B098-5A38-8E5B-4D2491ACD95D</string>
+				<key>WFCommentActionText</key>
+				<string>Adds native tags to one note selected by title and existing project scope text. Refuses zero/multiple results. Input: JSON {title, scopeText, tags}. No scripts, network, deletion or body replacement. The MCP checks exact ID/revision before and verifies native tags/text/links afterward.</string>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.detect.dictionary</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>FC6F66A2-7C9E-5A6C-A530-61B12F8030DC</string>
+				<key>WFInput</key>
+				<dict>
+					<key>Value</key>
+					<dict>
+						<key>Type</key>
+						<string>ExtensionInput</string>
+					</dict>
+					<key>WFSerializationType</key>
+					<string>WFTextTokenAttachment</string>
+				</dict>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.getvalueforkey</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>56F624A3-B9C4-59B9-9BD5-B0A3D539EB60</string>
+				<key>WFInput</key>
+				<dict>
+					<key>Value</key>
+					<dict>
+						<key>Type</key>
+						<string>ActionOutput</string>
+						<key>OutputUUID</key>
+						<string>FC6F66A2-7C9E-5A6C-A530-61B12F8030DC</string>
+						<key>OutputName</key>
+						<string>request</string>
+					</dict>
+					<key>WFSerializationType</key>
+					<string>WFTextTokenAttachment</string>
+				</dict>
+				<key>WFDictionaryKey</key>
+				<string>title</string>
+				<key>WFGetDictionaryValueType</key>
+				<string>Value</string>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.getvalueforkey</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>ECA164BD-137A-567C-87AF-C5F3F32F84BF</string>
+				<key>WFInput</key>
+				<dict>
+					<key>Value</key>
+					<dict>
+						<key>Type</key>
+						<string>ActionOutput</string>
+						<key>OutputUUID</key>
+						<string>FC6F66A2-7C9E-5A6C-A530-61B12F8030DC</string>
+						<key>OutputName</key>
+						<string>request</string>
+					</dict>
+					<key>WFSerializationType</key>
+					<string>WFTextTokenAttachment</string>
+				</dict>
+				<key>WFDictionaryKey</key>
+				<string>scopeText</string>
+				<key>WFGetDictionaryValueType</key>
+				<string>Value</string>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.getvalueforkey</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>40662BA1-53A6-58B0-A54E-A9174F25AB48</string>
+				<key>WFInput</key>
+				<dict>
+					<key>Value</key>
+					<dict>
+						<key>Type</key>
+						<string>ActionOutput</string>
+						<key>OutputUUID</key>
+						<string>FC6F66A2-7C9E-5A6C-A530-61B12F8030DC</string>
+						<key>OutputName</key>
+						<string>request</string>
+					</dict>
+					<key>WFSerializationType</key>
+					<string>WFTextTokenAttachment</string>
+				</dict>
+				<key>WFDictionaryKey</key>
+				<string>tags</string>
+				<key>WFGetDictionaryValueType</key>
+				<string>Value</string>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.filter.notes</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>DFF87C25-7AF8-55BC-BA5F-4F08CC05A668</string>
+				<key>WFContentItemLimitEnabled</key>
+				<false/>
+				<key>WFContentItemFilter</key>
+				<dict>
+					<key>WFSerializationType</key>
+					<string>WFContentPredicateTableTemplate</string>
+					<key>Value</key>
+					<dict>
+						<key>WFActionParameterFilterPrefix</key>
+						<integer>1</integer>
+						<key>WFContentPredicateBoundedDate</key>
+						<false/>
+						<key>WFActionParameterFilterTemplates</key>
+						<array>
+							<dict>
+								<key>Property</key>
+								<string>Name</string>
+								<key>Operator</key>
+								<integer>99</integer>
+								<key>Removable</key>
+								<true/>
+								<key>Values</key>
+								<dict>
+									<key>String</key>
+									<dict>
+										<key>WFSerializationType</key>
+										<string>WFTextTokenString</string>
+										<key>Value</key>
+										<dict>
+											<key>string</key>
+											<string></string>
+											<key>attachmentsByRange</key>
+											<dict>
+												<key>{0, 1}</key>
+												<dict>
+													<key>Type</key>
+													<string>ActionOutput</string>
+													<key>OutputUUID</key>
+													<string>56F624A3-B9C4-59B9-9BD5-B0A3D539EB60</string>
+													<key>OutputName</key>
+													<string>title</string>
+												</dict>
+											</dict>
+										</dict>
+									</dict>
+								</dict>
+							</dict>
+							<dict>
+								<key>Property</key>
+								<string>Body</string>
+								<key>Operator</key>
+								<integer>99</integer>
+								<key>Removable</key>
+								<true/>
+								<key>Values</key>
+								<dict>
+									<key>String</key>
+									<dict>
+										<key>WFSerializationType</key>
+										<string>WFTextTokenString</string>
+										<key>Value</key>
+										<dict>
+											<key>string</key>
+											<string></string>
+											<key>attachmentsByRange</key>
+											<dict>
+												<key>{0, 1}</key>
+												<dict>
+													<key>Type</key>
+													<string>ActionOutput</string>
+													<key>OutputUUID</key>
+													<string>ECA164BD-137A-567C-87AF-C5F3F32F84BF</string>
+													<key>OutputName</key>
+													<string>scopeText</string>
+												</dict>
+											</dict>
+										</dict>
+									</dict>
+								</dict>
+							</dict>
+						</array>
+					</dict>
+				</dict>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.count</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>48769A7C-915C-5339-9CD4-09D8E576EA11</string>
+				<key>Input</key>
+				<dict>
+					<key>Value</key>
+					<dict>
+						<key>Type</key>
+						<string>ActionOutput</string>
+						<key>OutputUUID</key>
+						<string>DFF87C25-7AF8-55BC-BA5F-4F08CC05A668</string>
+						<key>OutputName</key>
+						<string>target</string>
+					</dict>
+					<key>WFSerializationType</key>
+					<string>WFTextTokenAttachment</string>
+				</dict>
+				<key>WFCountType</key>
+				<string>Items</string>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.gettext</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>506724BB-49FB-5E33-A2DB-C392798691A7</string>
+				<key>WFTextActionText</key>
+				<dict>
+					<key>WFSerializationType</key>
+					<string>WFTextTokenString</string>
+					<key>Value</key>
+					<dict>
+						<key>string</key>
+						<string></string>
+						<key>attachmentsByRange</key>
+						<dict>
+							<key>{0, 1}</key>
+							<dict>
+								<key>Type</key>
+								<string>ActionOutput</string>
+								<key>OutputUUID</key>
+								<string>48769A7C-915C-5339-9CD4-09D8E576EA11</string>
+								<key>OutputName</key>
+								<string>count</string>
+							</dict>
+						</dict>
+					</dict>
+				</dict>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.conditional</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>2DAAA123-EDA6-573F-B64C-0BE13A7920F1</string>
+				<key>GroupingIdentifier</key>
+				<string>9DEBBB46-882B-5977-87B4-3E4E05678705</string>
+				<key>WFControlFlowMode</key>
+				<integer>0</integer>
+				<key>WFInput</key>
+				<dict>
+					<key>Type</key>
+					<string>Variable</string>
+					<key>Variable</key>
+					<dict>
+						<key>Value</key>
+						<dict>
+							<key>Type</key>
+							<string>ActionOutput</string>
+							<key>OutputUUID</key>
+							<string>506724BB-49FB-5E33-A2DB-C392798691A7</string>
+							<key>OutputName</key>
+							<string>count-text</string>
+						</dict>
+						<key>WFSerializationType</key>
+						<string>WFTextTokenAttachment</string>
+					</dict>
+				</dict>
+				<key>WFCondition</key>
+				<integer>4</integer>
+				<key>WFConditionalActionString</key>
+				<string>1</string>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.repeat.each</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>603F0BDF-C041-5AA4-BE51-B62DD785A079</string>
+				<key>GroupingIdentifier</key>
+				<string>3D602350-7BF4-5B87-A104-B5DB7C320E26</string>
+				<key>WFControlFlowMode</key>
+				<integer>0</integer>
+				<key>WFInput</key>
+				<dict>
+					<key>Value</key>
+					<dict>
+						<key>Type</key>
+						<string>ActionOutput</string>
+						<key>OutputUUID</key>
+						<string>40662BA1-53A6-58B0-A54E-A9174F25AB48</string>
+						<key>OutputName</key>
+						<string>tags</string>
+					</dict>
+					<key>WFSerializationType</key>
+					<string>WFTextTokenAttachment</string>
+				</dict>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>com.apple.Notes.CreateTagLinkAction</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>5AE3DC80-27B3-56AC-9668-94AC6AF3F57F</string>
+				<key>AppIntentDescriptor</key>
+				<dict>
+					<key>AppIntentIdentifier</key>
+					<string>CreateTagLinkAction</string>
+					<key>BundleIdentifier</key>
+					<string>com.apple.Notes</string>
+					<key>TeamIdentifier</key>
+					<string>0000000000</string>
+					<key>Name</key>
+					<string>Notes</string>
+				</dict>
+				<key>ShowWhenRun</key>
+				<false/>
+				<key>name</key>
+				<dict>
+					<key>WFSerializationType</key>
+					<string>WFTextTokenString</string>
+					<key>Value</key>
+					<dict>
+						<key>string</key>
+						<string></string>
+						<key>attachmentsByRange</key>
+						<dict>
+							<key>{0, 1}</key>
+							<dict>
+								<key>Type</key>
+								<string>Variable</string>
+								<key>VariableName</key>
+								<string>Repeat Item</string>
+							</dict>
+						</dict>
+					</dict>
+				</dict>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>com.apple.Notes.AddTagsToNotesLinkAction</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>8C0C4D73-5555-5FC6-BD29-D5B9EE299698</string>
+				<key>AppIntentDescriptor</key>
+				<dict>
+					<key>AppIntentIdentifier</key>
+					<string>AddTagsToNotesLinkAction</string>
+					<key>BundleIdentifier</key>
+					<string>com.apple.Notes</string>
+					<key>TeamIdentifier</key>
+					<string>0000000000</string>
+					<key>Name</key>
+					<string>Notes</string>
+				</dict>
+				<key>ShowWhenRun</key>
+				<false/>
+				<key>notes</key>
+				<dict>
+					<key>Value</key>
+					<dict>
+						<key>Type</key>
+						<string>ActionOutput</string>
+						<key>OutputUUID</key>
+						<string>DFF87C25-7AF8-55BC-BA5F-4F08CC05A668</string>
+						<key>OutputName</key>
+						<string>target</string>
+					</dict>
+					<key>WFSerializationType</key>
+					<string>WFTextTokenAttachment</string>
+				</dict>
+				<key>tags</key>
+				<dict>
+					<key>Value</key>
+					<dict>
+						<key>Type</key>
+						<string>ActionOutput</string>
+						<key>OutputUUID</key>
+						<string>5AE3DC80-27B3-56AC-9668-94AC6AF3F57F</string>
+						<key>OutputName</key>
+						<string>native-tag</string>
+					</dict>
+					<key>WFSerializationType</key>
+					<string>WFTextTokenAttachment</string>
+				</dict>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.repeat.each</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>B9B919AF-4E05-5B76-B70B-E8EE6B502A92</string>
+				<key>GroupingIdentifier</key>
+				<string>3D602350-7BF4-5B87-A104-B5DB7C320E26</string>
+				<key>WFControlFlowMode</key>
+				<integer>2</integer>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.gettext</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>95DA2053-00CE-52E9-95AC-CA17A0DC7031</string>
+				<key>WFTextActionText</key>
+				<string>APPLE_NOTES_TAGS_OK</string>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.output</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>62F50E9C-D6C6-557C-A037-0E9B4D9661BC</string>
+				<key>WFOutput</key>
+				<dict>
+					<key>Value</key>
+					<dict>
+						<key>Type</key>
+						<string>ActionOutput</string>
+						<key>OutputUUID</key>
+						<string>95DA2053-00CE-52E9-95AC-CA17A0DC7031</string>
+						<key>OutputName</key>
+						<string>success</string>
+					</dict>
+					<key>WFSerializationType</key>
+					<string>WFTextTokenAttachment</string>
+				</dict>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.conditional</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>F0968167-BF41-5F06-9942-A281BA37A28B</string>
+				<key>GroupingIdentifier</key>
+				<string>9DEBBB46-882B-5977-87B4-3E4E05678705</string>
+				<key>WFControlFlowMode</key>
+				<integer>1</integer>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.gettext</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>38E0C0FA-E82D-55C4-BB5F-59BE5D2CDB96</string>
+				<key>WFTextActionText</key>
+				<string>APPLE_NOTES_TAGS_AMBIGUOUS_OR_MISSING</string>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.output</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>370488B5-ABAD-5A7F-9FDF-05328430A849</string>
+				<key>WFOutput</key>
+				<dict>
+					<key>Value</key>
+					<dict>
+						<key>Type</key>
+						<string>ActionOutput</string>
+						<key>OutputUUID</key>
+						<string>38E0C0FA-E82D-55C4-BB5F-59BE5D2CDB96</string>
+						<key>OutputName</key>
+						<string>refusal</string>
+					</dict>
+					<key>WFSerializationType</key>
+					<string>WFTextTokenAttachment</string>
+				</dict>
+			</dict>
+		</dict>
+		<dict>
+			<key>WFWorkflowActionIdentifier</key>
+			<string>is.workflow.actions.conditional</string>
+			<key>WFWorkflowActionParameters</key>
+			<dict>
+				<key>UUID</key>
+				<string>882D0A92-5ACB-5731-B3A1-B132714EB158</string>
+				<key>GroupingIdentifier</key>
+				<string>9DEBBB46-882B-5977-87B4-3E4E05678705</string>
+				<key>WFControlFlowMode</key>
+				<integer>2</integer>
+			</dict>
+		</dict>
+	</array>
+	<key>WFWorkflowClientVersion</key>
+	<string>2600</string>
+	<key>WFWorkflowMinimumClientVersion</key>
+	<integer>900</integer>
+	<key>WFWorkflowMinimumClientVersionString</key>
+	<string>900</string>
+	<key>WFWorkflowTypes</key>
+	<array/>
+	<key>WFWorkflowHasShortcutInputVariables</key>
+	<true/>
+	<key>WFWorkflowHasOutputAction</key>
+	<true/>
+	<key>WFWorkflowInputContentItemClasses</key>
+	<array>
+		<string>WFStringContentItem</string>
+		<string>WFDictionaryContentItem</string>
+		<string>WFGenericFileContentItem</string>
+	</array>
+	<key>WFWorkflowOutputContentItemClasses</key>
+	<array>
+		<string>WFStringContentItem</string>
+	</array>
+	<key>WFWorkflowIcon</key>
+	<dict>
+		<key>WFWorkflowIconStartColor</key>
+		<integer>4251333119</integer>
+		<key>WFWorkflowIconGlyphNumber</key>
+		<integer>59507</integer>
+	</dict>
+	<key>WFWorkflowImportQuestions</key>
+	<array/>
+</dict>
+</plist>

package/shortcuts/README.md

@@ -0,0 +1,21 @@
+# Native Tags bridge
+
+`Apple Notes MCP - Native Tags.shortcut` adds actual native Apple Notes tags.
+It contains no note contents or credentials. The unsigned source is committed
+beside it and can be regenerated with:
+
+```sh
+python3 scripts/build-native-tags-shortcut.py
+shortcuts sign --mode anyone \
+  --input "shortcuts/Apple Notes MCP - Native Tags.unsigned.shortcut" \
+  --output "shortcuts/Apple Notes MCP - Native Tags.shortcut"
+```
+
+Open the signed file and confirm **Add Shortcut** once. macOS may also request
+Notes access on first execution. The `shortcuts` CLI can run an installed
+workflow but cannot silently import one.
+
+The bridge receives a private temporary JSON file with a title, a distinctive
+existing scope phrase, and normalized tags. Both the server and workflow refuse
+ambiguous note selection. Server readback, rather than CLI output, establishes
+success and verifies that existing content survived.