[n1shanthb]

Description

Adds specify_workflow_list as a focused follow-up to #5054 for #4913.

• Extracts a typed, transport-neutral operation shared by CLI and MCP.
• Preserves CLI ordering, formatting, warnings, defaults, and error handling.
• Adds strict contracts, bounded responses, safe project-path handling, and structured errors.
• Marks only workflow.list as MCP-available while preserving the existing six tools.
• Adds focused regression tests and MCP documentation.

The shared operation performs no filesystem writes, network requests, or subprocess execution.

Refs #4913.

Testing

• Tested locally with uv run specify --help
• Ran the complete suite in WSL after installing test dependencies with uv sync --extra test
• Tested manually with a sample project (not performed)

Full WSL result: 12,782 passed, 440 skipped, 38 failed. All 38 failures reproduced on unchanged upstream 27d14e2; they concern PowerShell interoperability, paths containing spaces, and test download executables. No patch regression was identified in that comparison.

Additional validation:

• Focused Windows tests: 69 passed, five skipped, one deselected, including passing junction safety tests.
• Ruff, scoped mypy, and git diff --check passed.
• Repeated stdio testing reproduced intermittent timeouts on unchanged upstream.
• Compatibility probes verified legacy registry decoding behavior and correct invalid_operation_result mapping.

AI Disclosure

• I did not use AI assistance for this contribution
• I did use AI assistance

AI disclosure: OpenAI Codex (GPT-6.1 sol, autonomous execution under user direction) assisted with source investigation, implementation, test and documentation generation, automated review, validation, and drafting this PR description. Reasoning effort was not independently recorded. No line-by-line human review is claimed.

[Copilot]

🟡 Changes recommended

The new operation misclassifies missing or non-directory project paths as unsafe workflow storage.

1 open issue

• Check project directory before accessing project files · New

What changed in this PR

Adds installed-workflow listing to MCP as an incremental follow-up to #5054 and #4913, sharing application behavior with the existing CLI.

Changes:

• Extracts a typed, read-only workflow-list operation shared by CLI and MCP.
• Adds specify_workflow_list with strict schemas, response limits, project-path checks, and structured errors.
• Updates inventory registration, regression coverage, and MCP documentation while retaining the six existing tools.

File	Description
tests/​specify_cli/​workflows/​test_operation_list.py	Tests shared behavior, storage safety, and read-only boundaries.
tests/​specify_cli/​workflows/​test_mcp.py	Binds inventory parity to the implemented list contract.
tests/​specify_cli/​workflows/​test_mcp_list.py	Tests schemas, dispatch, limits, errors, and protocol behavior.
tests/​specify_cli/​workflows/​test_command_list.py	Checks CLI output compatibility and complete listings.
tests/​specify_cli/​mcp_server/​test_stdio.py	Exercises workflow listing through real stdio.
tests/​specify_cli/​mcp_server/​test_server.py	Updates expected tool discovery.
src/​specify_cli/​workflows/​mcp_list.py	Implements the bounded, typed MCP adapter.
src/​specify_cli/​workflows/​command_list.py	Delegates CLI listing to the shared operation.
src/​specify_cli/​workflows/​catalog/​_domain.py	Supports policy-aware registry reads.
src/​specify_cli/​workflows/​_storage.py	Centralizes workflow storage validation.
src/​specify_cli/​workflows/​_operation_list.py	Defines the shared listing contract and operation.
src/​specify_cli/​workflows/​_mcp.py	Marks and registers only workflow listing as available.
src/​specify_cli/​workflows/​_commands.py	Reuses centralized storage validation.
src/​specify_cli/​mcp_server/​server.py	Registers the workflow-owned MCP tool.
docs/​reference/​mcp.md	Documents listing inputs, outputs, limits, and safety boundaries.

_{Review effort: Max}

[mnriem]

Please address Copilot feedback

[n1shanthb]

Thanks @mnriem. Addressed the Copilot feedback in 9c72389.

The fix validates the project directory before accessing workflow storage, so missing directories and regular files now return not_a_spec_kit_project rather than unsafe_workflow_storage. I also added operation-level and MCP regression coverage while preserving permission and storage error handling.

Validation: 72 passed on Windows and 1,843 passed in relevant Linux suites. Ruff, formatting, scoped mypy, and git diff --check also passed.

AI assistance: OpenAI Codex (GPT-6, autonomous under my direction) assisted with the fix, regression tests, validation.