@jbctechsolutions/mcp-office365 3.0.0 → 4.0.0

package/dist/registry/elicit-links.js

@@ -0,0 +1,102 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/** Parses a prepare tool's single-text-block JSON result, or {} on any failure. */
+function parseResult(result) {
+    const text = result.content[0]?.text;
+    if (text == null)
+        return {};
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return {};
+    }
+}
+/** The lone token a single-target prepare minted (`approval_token`/`token_id`). */
+function singleToken(result) {
+    const parsed = parseResult(result);
+    const token = parsed['approval_token'] ?? parsed['token_id'];
+    return typeof token === 'string' && token.length > 0 ? token : null;
+}
+function singleTokenIds(result) {
+    const token = singleToken(result);
+    return token != null ? [token] : [];
+}
+/** Copies the named keys from prepare params into the confirm params. */
+function pick(params, keys) {
+    const src = (params ?? {});
+    const out = {};
+    for (const key of keys) {
+        if (src[key] !== undefined)
+            out[key] = src[key];
+    }
+    return out;
+}
+/** Shape A: confirm tool takes a single `{ approval_token }`. */
+export function approvalTokenLink(confirmTool) {
+    return {
+        confirmTool,
+        collectTokenIds: singleTokenIds,
+        buildParams: (_prepareParams, result) => ({ approval_token: singleToken(result) }),
+    };
+}
+/**
+ * Shape B: confirm tool takes `{ token_id, ...copyFields }`, where each copied
+ * field is carried over verbatim from the prepare params (same field name).
+ */
+export function tokenIdLink(confirmTool, copyFields = []) {
+    return {
+        confirmTool,
+        collectTokenIds: singleTokenIds,
+        buildParams: (prepareParams, result) => ({
+            token_id: singleToken(result),
+            ...pick(prepareParams, copyFields),
+        }),
+    };
+}
+/**
+ * Shape C: the batch confirm takes `{ tokens: [{ token_id, email_id }, …] }`,
+ * one pair per email. The batch prepare returns `{ tokens: [{ token_id, email:
+ * { id, … } }] }` where the token's target is `email.id`, so `email_id` is read
+ * from `email.id` (with a direct `email_id` fallback for robustness).
+ *
+ * `collectTokenIds` gathers EVERY minted `token_id` independently of the id
+ * mapping, so a decline invalidates all of them even if a pair is malformed.
+ */
+export function batchLink(confirmTool) {
+    return {
+        confirmTool,
+        collectTokenIds: (result) => batchTokenIds(result),
+        buildParams: (_prepareParams, result) => ({ tokens: batchPairs(result) }),
+    };
+}
+/** Raw `tokens` array from a batch prepare result, or []. */
+function batchEntries(result) {
+    const tokens = parseResult(result)['tokens'];
+    return Array.isArray(tokens) ? tokens : [];
+}
+/** Every minted token id in the batch result (authoritative for invalidation). */
+function batchTokenIds(result) {
+    const ids = [];
+    for (const entry of batchEntries(result)) {
+        if (typeof entry['token_id'] === 'string')
+            ids.push(entry['token_id']);
+    }
+    return ids;
+}
+/** The `{ token_id, email_id }` pairs the batch confirm expects. */
+function batchPairs(result) {
+    const pairs = [];
+    for (const entry of batchEntries(result)) {
+        const tokenId = entry['token_id'];
+        const email = entry['email'];
+        const emailId = email?.['id'] ?? entry['email_id'];
+        if (typeof tokenId === 'string' && typeof emailId === 'string') {
+            pairs.push({ token_id: tokenId, email_id: emailId });
+        }
+    }
+    return pairs;
+}
+//# sourceMappingURL=elicit-links.js.map

package/dist/registry/elicit-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elicit-links.js","sourceRoot":"","sources":["../../src/registry/elicit-links.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAiBH,mFAAmF;AACnF,SAAS,WAAW,CAAC,MAAkB;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IACrC,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,WAAW,CAAC,MAAkB;IACrC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,MAAkB;IACxC,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,yEAAyE;AACzE,SAAS,IAAI,CAAC,MAAe,EAAE,IAAuB;IACpD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IACtD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAO;QACL,WAAW;QACX,eAAe,EAAE,cAAc;QAC/B,WAAW,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;KACnF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,aAAgC,EAAE;IACjF,OAAO;QACL,WAAW;QACX,eAAe,EAAE,cAAc;QAC/B,WAAW,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC;YAC7B,GAAG,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC;SACnC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,WAAmB;IAC3C,OAAO;QACL,WAAW;QACX,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC;QAClD,WAAW,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,SAAS,YAAY,CAAC,MAAkB;IACtC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAyC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,kFAAkF;AAClF,SAAS,aAAa,CAAC,MAAkB;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,oEAAoE;AACpE,SAAS,UAAU,CAAC,MAAkB;IACpC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAwC,CAAC;QACpE,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/registry/elicitor.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Inline confirmation via MCP elicitation (U11).
+ *
+ * Bridges the MCP `Server.elicitInput` request to the registry's backend-neutral
+ * {@link Elicitor} contract. Capability-gated and fail-open-to-degrade: if the
+ * client can't elicit, or the request times out or errors, the caller falls back
+ * to the durable two-phase token flow — an inline confirmation never blocks or
+ * fails a tool call.
+ */
+import type { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { Elicitor } from './types.js';
+/** How long to wait for the user's inline yes/no before degrading (U11). */
+export declare const ELICIT_TIMEOUT_MS = 60000;
+/**
+ * Builds an {@link Elicitor} bound to a live MCP server. Returns 'degrade' —
+ * never throws — when the client lacks the capability, cancels, or times out, so
+ * the dispatch interceptor can hand back the durable token unchanged.
+ */
+export declare function createServerElicitor(server: Server): Elicitor;
+//# sourceMappingURL=elicitor.d.ts.map

package/dist/registry/elicitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elicitor.d.ts","sourceRoot":"","sources":["../../src/registry/elicitor.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,KAAK,EAAE,QAAQ,EAAiB,MAAM,YAAY,CAAC;AAE1D,4EAA4E;AAC5E,eAAO,MAAM,iBAAiB,QAAS,CAAC;AAmBxC;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAwB7D"}

package/dist/registry/elicitor.js

@@ -0,0 +1,51 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/** How long to wait for the user's inline yes/no before degrading (U11). */
+export const ELICIT_TIMEOUT_MS = 60_000;
+/**
+ * A minimal confirmation form. We key the decision off the elicitation `action`
+ * ('accept' = yes), so the schema is a formality some clients render; a single
+ * optional boolean keeps it valid and unobtrusive.
+ */
+const CONFIRM_SCHEMA = {
+    type: 'object',
+    properties: {
+        confirm: {
+            type: 'boolean',
+            title: 'Confirm',
+            description: 'Approve this destructive action.',
+        },
+    },
+    required: [],
+};
+/**
+ * Builds an {@link Elicitor} bound to a live MCP server. Returns 'degrade' —
+ * never throws — when the client lacks the capability, cancels, or times out, so
+ * the dispatch interceptor can hand back the durable token unchanged.
+ */
+export function createServerElicitor(server) {
+    return async ({ message }) => {
+        if (server.getClientCapabilities()?.elicitation == null) {
+            return 'degrade';
+        }
+        try {
+            const result = await server.elicitInput({ message, requestedSchema: CONFIRM_SCHEMA }, { timeout: ELICIT_TIMEOUT_MS });
+            switch (result.action) {
+                case 'accept':
+                    return 'accept';
+                case 'decline':
+                    return 'decline';
+                default:
+                    // 'cancel' — the user dismissed without deciding; leave the token.
+                    return 'degrade';
+            }
+        }
+        catch {
+            // Timeout or transport error → degrade (fail-open to the token flow).
+            return 'degrade';
+        }
+    };
+}
+//# sourceMappingURL=elicitor.js.map

package/dist/registry/elicitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elicitor.js","sourceRoot":"","sources":["../../src/registry/elicitor.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC;;;;GAIG;AACH,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,QAAiB;IACvB,UAAU,EAAE;QACV,OAAO,EAAE;YACP,IAAI,EAAE,SAAkB;YACxB,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,kCAAkC;SAChD;KACF;IACD,QAAQ,EAAE,EAAc;CACzB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,EAA0B,EAAE;QACnD,IAAI,MAAM,CAAC,qBAAqB,EAAE,EAAE,WAAW,IAAI,IAAI,EAAE,CAAC;YACxD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CACrC,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,EAC5C,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAC/B,CAAC;YACF,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,KAAK,QAAQ;oBACX,OAAO,QAAQ,CAAC;gBAClB,KAAK,SAAS;oBACZ,OAAO,SAAS,CAAC;gBACnB;oBACE,mEAAmE;oBACnE,OAAO,SAAS,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/registry/index.d.ts

@@ -5,9 +5,9 @@
 /**
  * Tool registry barrel.
  */
-export type { Backend, Preset, ToolAnnotations, ToolResult, ToolContext, ToolDefinition, GraphToolsets, AppleScriptToolsets, } from './types.js';
+export type { Backend, Preset, ToolAnnotations, ToolResult, ToolContext, ToolDefinition, GraphToolsets, ConfirmMode, ElicitOutcome, ElicitRequest, Elicitor, ElicitLink, } from './types.js';
 export { ToolRegistry, toInputSchema } from './registry.js';
 export type { SurfaceOptions } from './registry.js';
 export { defineTool } from './define-tool.js';
-export { requireGraphToolset, requireAppleScriptToolset } from './context.js';
+export { requireGraphToolset } from './context.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/registry/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AAEH,YAAY,EACV,OAAO,EACP,MAAM,EACN,eAAe,EACf,UAAU,EACV,WAAW,EACX,cAAc,EACd,aAAa,EACb,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AAEH,YAAY,EACV,OAAO,EACP,MAAM,EACN,eAAe,EACf,UAAU,EACV,WAAW,EACX,cAAc,EACd,aAAa,EACb,WAAW,EACX,aAAa,EACb,aAAa,EACb,QAAQ,EACR,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}

package/dist/registry/index.js

@@ -4,5 +4,5 @@
  */
 export { ToolRegistry, toInputSchema } from './registry.js';
 export { defineTool } from './define-tool.js';
-export { requireGraphToolset, requireAppleScriptToolset } from './context.js';
+export { requireGraphToolset } from './context.js';
 //# sourceMappingURL=index.js.map

package/dist/registry/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgBH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAoBH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}

package/dist/registry/registry.d.ts

@@ -56,6 +56,17 @@ export declare class ToolRegistry {
      * can fall back to the legacy dispatch during the U2 migration window.
      */
     dispatch(name: string, args: unknown, ctx: ToolContext, options: SurfaceOptions): Promise<ToolResult | undefined>;
+    /**
+     * Runs a prepare tool, asks the user inline, and resolves the outcome (U11):
+     * - accept  → execute now via the linked confirm tool (its exact validation +
+     *             execution is reused; the just-minted token is consumed there).
+     * - decline → invalidate the token (consume-without-execute) and report abort.
+     * - degrade → return the prepare token response unchanged (cancel / timeout /
+     *             no capability / unparseable token) — the normal two-phase flow.
+     *
+     * Fail-closed: the destructive action runs only on an explicit accept.
+     */
+    private dispatchWithElicitation;
     private filtered;
     private matches;
 }

package/dist/registry/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/registry/registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAE/D,OAAO,KAAK,EACV,OAAO,EACP,MAAM,EACN,WAAW,EACX,cAAc,EACd,UAAU,EACX,MAAM,YAAY,CAAC;AAEpB,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,CAWpE;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqC;IAEjE,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,SAAS,cAAc,EAAE,GAAG,IAAI;IAS/C,qDAAqD;IACrD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,uDAAuD;IACvD,KAAK,IAAI,MAAM,EAAE;IAIjB,iDAAiD;IACjD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI7C;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,EAAE;IAc1C,2DAA2D;IAC3D,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO;IAKzD;;;;OAIG;IACG,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAsBlC,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,OAAO;CAahB"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/registry/registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAE/D,OAAO,KAAK,EACV,OAAO,EACP,MAAM,EACN,WAAW,EACX,cAAc,EACd,UAAU,EAGX,MAAM,YAAY,CAAC;AAEpB,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,CAWpE;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqC;IAEjE,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,SAAS,cAAc,EAAE,GAAG,IAAI;IAS/C,qDAAqD;IACrD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,uDAAuD;IACvD,KAAK,IAAI,MAAM,EAAE;IAIjB,iDAAiD;IACjD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI7C;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,EAAE;IAc1C,2DAA2D;IAC3D,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO;IAKzD;;;;OAIG;IACG,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IA6BlC;;;;;;;;;OASG;YACW,uBAAuB;IAkDrC,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,OAAO;CAahB"}

package/dist/registry/registry.js

@@ -104,8 +104,64 @@ export class ToolRegistry {
         // (e.g. list_mail_rules) parse cleanly, matching the codebase-wide
         // `parse(args ?? {})` convention.
         const params = def.input.parse(args ?? {});
+        // Inline-elicitation interceptor (U11): only for a prepare tool that opted in
+        // (onElicit), when the server is in elicit mode and the client can elicit.
+        // Everything else runs the handler directly — an unchanged fast path.
+        if (def.onElicit != null && ctx.confirmMode === 'elicit' && ctx.elicit != null) {
+            return this.dispatchWithElicitation(def, params, ctx, def.onElicit, ctx.elicit);
+        }
         return def.handler(ctx, params);
     }
+    /**
+     * Runs a prepare tool, asks the user inline, and resolves the outcome (U11):
+     * - accept  → execute now via the linked confirm tool (its exact validation +
+     *             execution is reused; the just-minted token is consumed there).
+     * - decline → invalidate the token (consume-without-execute) and report abort.
+     * - degrade → return the prepare token response unchanged (cancel / timeout /
+     *             no capability / unparseable token) — the normal two-phase flow.
+     *
+     * Fail-closed: the destructive action runs only on an explicit accept.
+     */
+    async dispatchWithElicitation(def, prepareParams, ctx, link, elicit) {
+        const prepareResult = await def.handler(ctx, prepareParams);
+        const tokenIds = link.collectTokenIds(prepareResult);
+        // No token in the prepare output → nothing to gate/execute; degrade.
+        if (tokenIds.length === 0) {
+            return prepareResult;
+        }
+        const message = link.message?.(prepareParams) ?? defaultConfirmMessage(ctx, tokenIds[0]);
+        const outcome = await elicit({ message });
+        if (outcome === 'accept') {
+            const confirmDef = this.definitions.get(link.confirmTool);
+            // A misconfigured link must not silently execute nor lose the approval —
+            // degrade to the token response so the two-phase path still works.
+            if (confirmDef == null) {
+                return prepareResult;
+            }
+            // Only the param mapping/validation is guarded: a bad buildParams must
+            // degrade (return the still-live token) rather than error out an accepted
+            // action. The confirm handler runs OUTSIDE the guard so a genuine
+            // execution error (e.g. a Graph failure) surfaces normally, not masked.
+            let confirmParams;
+            try {
+                confirmParams = confirmDef.input.parse(link.buildParams(prepareParams, prepareResult));
+            }
+            catch {
+                return prepareResult;
+            }
+            return confirmDef.handler(ctx, confirmParams);
+        }
+        if (outcome === 'decline') {
+            // Burn every token this prepare minted (batch mints one per item), so a
+            // declined action can't be redeemed via the confirm flow afterward.
+            for (const tokenId of tokenIds) {
+                invalidateToken(ctx, tokenId);
+            }
+            return declinedResult(def.name);
+        }
+        // 'degrade' — hand back the durable token exactly as the token flow would.
+        return prepareResult;
+    }
     filtered(options) {
         return [...this.definitions.values()].filter((def) => this.matches(def, options));
     }
@@ -131,4 +187,35 @@ export class ToolRegistry {
 function isReadOnly(def) {
     return def.annotations.readOnlyHint === true;
 }
+/**
+ * Burns a token without executing its action, so a declined destructive request
+ * can't be redeemed via the confirm flow afterward. Uses the token's own
+ * operation/targetId (it was just minted, so this always validates), reusing the
+ * store's atomic single-use consume — no new persistence machinery.
+ */
+function invalidateToken(ctx, tokenId) {
+    const token = ctx.tokenManager.lookupToken(tokenId);
+    if (token != null) {
+        ctx.tokenManager.consumeToken(tokenId, token.operation, token.targetId);
+    }
+}
+/** A generic confirmation prompt derived from the token's operation. */
+function defaultConfirmMessage(ctx, tokenId) {
+    const op = tokenId != null ? ctx.tokenManager.lookupToken(tokenId)?.operation : undefined;
+    const action = op != null ? op.replace(/_/g, ' ') : 'this action';
+    return `Confirm: ${action}? This cannot be undone.`;
+}
+/** The result returned when a user declines an inline confirmation. */
+function declinedResult(toolName) {
+    return {
+        content: [{
+                type: 'text',
+                text: JSON.stringify({
+                    success: false,
+                    declined: true,
+                    message: `Action cancelled: you declined the confirmation for ${toolName}. The approval token has been invalidated.`,
+                }, null, 2),
+            }],
+    };
+}
 //# sourceMappingURL=registry.js.map

package/dist/registry/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/registry/registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAkBvD;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,MAAiB;IAC7C,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,CAA4B,CAAC;IACnG,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC;IAC1B,CAAC;IACD,OAAO,IAA2B,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,YAAY;IACN,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEjE,yEAAyE;IACzE,QAAQ,CAAC,IAA+B;QACtC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,uDAAuD;IACvD,KAAK;QACH,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,iDAAiD;IACjD,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,OAAuB;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACxC,MAAM,IAAI,GAAS;gBACjB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;aACtC,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;YACnD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED,2DAA2D;IAC3D,SAAS,CAAC,IAAY,EAAE,OAAuB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,IAAa,EACb,GAAgB,EAChB,OAAuB;QAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YAChB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAChC,8DAA8D;YAC9D,wEAAwE;YACxE,wEAAwE;YACxE,kEAAkE;YAClE,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBACpF,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,yCAAyC,CAAC,CAAC;QAC1E,CAAC;QACD,kEAAkE;QAClE,mEAAmE;QACnE,kCAAkC;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3C,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IAEO,QAAQ,CAAC,OAAuB;QACtC,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACpF,CAAC;IAEO,OAAO,CAAC,GAAmB,EAAE,OAAuB;QAC1D,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,GAAmB;IACrC,OAAO,GAAG,CAAC,WAAW,CAAC,YAAY,KAAK,IAAI,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/registry/registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAoBvD;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,MAAiB;IAC7C,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,CAA4B,CAAC;IACnG,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC;IAC1B,CAAC;IACD,OAAO,IAA2B,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,YAAY;IACN,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEjE,yEAAyE;IACzE,QAAQ,CAAC,IAA+B;QACtC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,uDAAuD;IACvD,KAAK;QACH,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,iDAAiD;IACjD,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,OAAuB;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACxC,MAAM,IAAI,GAAS;gBACjB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;aACtC,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;YACnD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED,2DAA2D;IAC3D,SAAS,CAAC,IAAY,EAAE,OAAuB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,IAAa,EACb,GAAgB,EAChB,OAAuB;QAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YAChB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAChC,8DAA8D;YAC9D,wEAAwE;YACxE,wEAAwE;YACxE,kEAAkE;YAClE,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBACpF,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,yCAAyC,CAAC,CAAC;QAC1E,CAAC;QACD,kEAAkE;QAClE,mEAAmE;QACnE,kCAAkC;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAE3C,8EAA8E;QAC9E,2EAA2E;QAC3E,sEAAsE;QACtE,IAAI,GAAG,CAAC,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;YAC/E,OAAO,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,uBAAuB,CACnC,GAAmB,EACnB,aAAsB,EACtB,GAAgB,EAChB,IAAgB,EAChB,MAAgB;QAEhB,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QACrD,qEAAqE;QACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,aAAa,CAAC;QACvB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,IAAI,qBAAqB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAE1C,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1D,yEAAyE;YACzE,mEAAmE;YACnE,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;gBACvB,OAAO,aAAa,CAAC;YACvB,CAAC;YACD,uEAAuE;YACvE,0EAA0E;YAC1E,kEAAkE;YAClE,wEAAwE;YACxE,IAAI,aAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;YACzF,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,aAAa,CAAC;YACvB,CAAC;YACD,OAAO,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,wEAAwE;YACxE,oEAAoE;YACpE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAED,2EAA2E;QAC3E,OAAO,aAAa,CAAC;IACvB,CAAC;IAEO,QAAQ,CAAC,OAAuB;QACtC,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACpF,CAAC;IAEO,OAAO,CAAC,GAAmB,EAAE,OAAuB;QAC1D,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,GAAmB;IACrC,OAAO,GAAG,CAAC,WAAW,CAAC,YAAY,KAAK,IAAI,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,GAAgB,EAAE,OAAe;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,GAAG,CAAC,YAAY,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,SAAS,qBAAqB,CAAC,GAAgB,EAAE,OAA2B;IAC1E,MAAM,EAAE,GAAG,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,MAAM,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAClE,OAAO,YAAY,MAAM,0BAA0B,CAAC;AACtD,CAAC;AAED,uEAAuE;AACvE,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO;QACL,OAAO,EAAE,CAAC;gBACR,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,uDAAuD,QAAQ,4CAA4C;iBACrH,EAAE,IAAI,EAAE,CAAC,CAAC;aACZ,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/registry/types.d.ts

@@ -14,10 +14,10 @@
  */
 import type { z } from 'zod';
 import type { ApprovalTokenManager } from '../approval/index.js';
-/** Which backend(s) expose a tool. */
-export type Backend = 'graph' | 'applescript';
+/** Which backend(s) expose a tool. Graph is the only backend (AppleScript was removed). */
+export type Backend = 'graph';
 /** Preset groups a client can select with --preset to shrink the surface. */
-export type Preset = 'mail' | 'calendar' | 'contacts' | 'tasks' | 'notes' | 'teams' | 'planner' | 'files' | 'sharepoint' | 'excel' | 'people' | 'meetings';
+export type Preset = 'mail' | 'calendar' | 'contacts' | 'tasks' | 'notes' | 'teams' | 'planner' | 'files' | 'sharepoint' | 'excel' | 'people' | 'meetings' | 'shared';
 /**
  * MCP tool annotations (spec 2025-03-26+). Clients use these to auto-approve
  * safe reads and gate destructive calls.
@@ -48,16 +48,23 @@ export interface ToolResult {
  */
 export interface GraphToolsets {
 }
-/**
- * Bag of initialized AppleScript-backend tool instances. The AppleScript
- * backend is frozen (v3), but dual-backend tools (mail, calendar, contacts,
- * tasks, notes, mailbox organization) still register their AppleScript toolset
- * here so a single registry handler can branch on `ctx.backend`. Like
- * GraphToolsets, this is a per-file augmentation target — read instances via
- * `requireAppleScriptToolset(ctx, key)`.
- */
-export interface AppleScriptToolsets {
+/** How a destructive `prepare_*` step seeks confirmation (U11). */
+export type ConfirmMode = 'token' | 'elicit';
+/** Outcome of an inline elicitation (U11). */
+export type ElicitOutcome = 
+/** The user explicitly confirmed — execute now. */
+'accept'
+/** The user explicitly said no — abort AND invalidate the token. */
+ | 'decline'
+/** Cancelled, timed out, or the client can't elicit — fall back to the token flow. */
+ | 'degrade';
+/** A yes/no confirmation request sent to the client (U11). */
+export interface ElicitRequest {
+    /** Human-readable description of the action being confirmed. */
+    readonly message: string;
 }
+/** Sends an inline confirmation to the client, resolving to its outcome (U11). */
+export type Elicitor = (request: ElicitRequest) => Promise<ElicitOutcome>;
 /**
  * Runtime context passed to a tool handler. Built once per call after the
  * backend is initialized; carries the live toolset instances so handlers no
@@ -67,7 +74,37 @@ export interface ToolContext {
     readonly backend: Backend;
     readonly tokenManager: ApprovalTokenManager;
     readonly graph: GraphToolsets | null;
-    readonly applescript: AppleScriptToolsets | null;
+    /** Confirmation mode for destructive prepares (default 'token' when absent). */
+    readonly confirmMode?: ConfirmMode;
+    /** Inline elicitor, present only when the client advertised the capability. */
+    readonly elicit?: Elicitor;
+}
+/**
+ * Links a `prepare_*` tool to its `confirm_*` counterpart so the dispatch-level
+ * elicitation interceptor (U11) can execute inline on an accepted confirmation.
+ * Declarative on purpose: no handler body changes, and the confirm tool's exact
+ * validation + execution is reused.
+ *
+ * @typeParam S - the prepare tool's Zod input schema.
+ */
+export interface ElicitLink<S extends z.ZodType = z.ZodType> {
+    /** Name of the paired confirm tool (e.g. 'confirm_delete_channel'). */
+    readonly confirmTool: string;
+    /**
+     * Builds the confirm tool's params from the prepare params + the prepare
+     * result (which carries the freshly minted token(s)). Handles heterogeneous
+     * confirm shapes: plain `approval_token`, `token_id` + target id, and the
+     * batch confirm that takes an array of `{ token_id, email_id }` pairs.
+     */
+    readonly buildParams: (prepareParams: z.infer<S>, prepareResult: ToolResult) => unknown;
+    /**
+     * Token ids minted by this prepare, so a declined action can invalidate them.
+     * Empty means "no token in the result" — dispatch then degrades without
+     * eliciting.
+     */
+    readonly collectTokenIds: (prepareResult: ToolResult) => string[];
+    /** Optional custom confirmation prompt; a generic one is derived when absent. */
+    readonly message?: (prepareParams: z.infer<S>) => string;
 }
 /**
  * A single tool definition — static metadata plus a lazily-bound handler.
@@ -94,5 +131,16 @@ export interface ToolDefinition<S extends z.ZodType = z.ZodType> {
     readonly backends: readonly Backend[];
     /** Handler invoked with the runtime context and validated params. */
     readonly handler: (ctx: ToolContext, params: z.infer<S>) => Promise<ToolResult> | ToolResult;
+    /**
+     * Present on `prepare_*` tools to opt into inline elicitation (U11). When the
+     * server runs with `--confirm elicit` and the client can elicit, dispatch
+     * runs the prepare, asks the user inline, and on accept executes the linked
+     * confirm tool — otherwise it degrades to the normal token response.
+     *
+     * `NoInfer` keeps this field out of `S` inference so the generic is fixed by
+     * `input` alone — otherwise a helper returning the default `ElicitLink` would
+     * widen `S` and collapse the handler's `params` to `unknown`.
+     */
+    readonly onElicit?: ElicitLink<NoInfer<S>>;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/registry/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/registry/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,sCAAsC;AACtC,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,aAAa,CAAC;AAE9C,6EAA6E;AAC7E,MAAM,MAAM,MAAM,GACd,MAAM,GACN,UAAU,GACV,UAAU,GACV,OAAO,GACP,OAAO,GACP,OAAO,GACP,SAAS,GACT,OAAO,GACP,YAAY,GACZ,OAAO,GACP,QAAQ,GACR,UAAU,CAAC;AAEf;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,4DAA4D;AAC5D,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;GAQG;AAEH,MAAM,WAAW,aAAa;CAAG;AAEjC;;;;;;;GAOG;AAEH,MAAM,WAAW,mBAAmB;CAAG;AAEvC;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAClD;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO;IAC7D,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,6CAA6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,sCAAsC;IACtC,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;CAC9F"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/registry/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,2FAA2F;AAC3F,MAAM,MAAM,OAAO,GAAG,OAAO,CAAC;AAE9B,6EAA6E;AAC7E,MAAM,MAAM,MAAM,GACd,MAAM,GACN,UAAU,GACV,UAAU,GACV,OAAO,GACP,OAAO,GACP,OAAO,GACP,SAAS,GACT,OAAO,GACP,YAAY,GACZ,OAAO,GACP,QAAQ,GACR,UAAU,GACV,QAAQ,CAAC;AAEb;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,4DAA4D;AAC5D,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;GAQG;AAEH,MAAM,WAAW,aAAa;CAAG;AAEjC,mEAAmE;AACnE,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE7C,8CAA8C;AAC9C,MAAM,MAAM,aAAa;AACvB,mDAAmD;AACjD,QAAQ;AACV,oEAAoE;GAClE,SAAS;AACX,sFAAsF;GACpF,SAAS,CAAC;AAEd,8DAA8D;AAC9D,MAAM,WAAW,aAAa;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,kFAAkF;AAClF,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAE1E;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,gFAAgF;IAChF,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO;IACzD,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,OAAO,CAAC;IACxF;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,CAAC,aAAa,EAAE,UAAU,KAAK,MAAM,EAAE,CAAC;IAClE,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;CAC1D;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO;IAC7D,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,6CAA6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,sCAAsC;IACtC,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;IAC7F;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;CAC5C"}

package/dist/state/delta-store.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Delta-sync mirror storage (U12). Persists, per account + resource:
+ * - a Graph `@odata.deltaLink` cursor (`delta_links`), and
+ * - a light snapshot of every item seen so far (`delta_items`).
+ *
+ * The item mirror is what lets a subsequent delta round classify a returned
+ * entry as *added* vs *updated*: Graph delta returns both as a plain `value`
+ * entry, distinguishable only by whether we have seen the id before. Deletes
+ * arrive as `@removed` entries and drop the mirror row.
+ *
+ * This is the storage layer only; the sync orchestration and change
+ * classification live in {@link ../delta/mirror.ts}. It is a thin companion to
+ * {@link StateStore} (sharing its single better-sqlite3 connection), kept in its
+ * own module so the mirror's SQL does not bloat the core store.
+ */
+import type Database from 'better-sqlite3';
+type DB = Database.Database;
+/** A mirrored item's stored snapshot. */
+export interface MirrorItem {
+    graphId: string;
+    /** Durable self-encoding token (e.g. `em_`, `ev_`) for the item. */
+    token: string;
+    /** Short human label (subject / title); never null (defaults to ''). */
+    summary: string;
+    /** Optional JSON blob of light display fields. */
+    snapshot?: string | null;
+}
+/** A committed sync round for one resource. */
+export interface DeltaCommit {
+    accountId: string;
+    resource: string;
+    /** New cursor to persist; when empty the cursor row is cleared (re-baseline). */
+    deltaLink: string;
+    syncedAt: number;
+    /** Items to insert or refresh in the mirror. */
+    upserts: readonly MirrorItem[];
+    /** Graph ids to drop from the mirror. */
+    deletes: readonly string[];
+    /**
+     * When true, the fetch was a full baseline: the mirror is replaced by
+     * `upserts` (existing rows for the resource are wiped first) so it exactly
+     * reflects current state and no stale rows survive. `deletes` is ignored.
+     */
+    replaceMirror?: boolean;
+}
+/** A stored delta cursor with its last-sync timestamp. */
+export interface DeltaCursor {
+    deltaLink: string;
+    syncedAt: number;
+}
+export declare class DeltaStore {
+    private readonly db;
+    private readonly now;
+    constructor(db: DB, now: () => number);
+    /** Returns the stored delta cursor for a resource, or null when un-synced. */
+    getDeltaLink(accountId: string, resource: string): string | null;
+    /** Returns the cursor plus its last-sync time (for age-based re-baseline), or null. */
+    getCursor(accountId: string, resource: string): DeltaCursor | null;
+    /** Returns the set of graph ids already mirrored for a resource. */
+    getSeenIds(accountId: string, resource: string): Set<string>;
+    /** Looks up a single mirrored item (for labelling a delete), or null. */
+    getItem(accountId: string, resource: string, graphId: string): MirrorItem | null;
+    /** Number of items mirrored for a resource (baseline / status reporting). */
+    countItems(accountId: string, resource: string): number;
+    /**
+     * Applies a completed sync round atomically: refresh the cursor and apply all
+     * upserts/deletes in one transaction, so a crash mid-write never leaves the
+     * mirror ahead of (or behind) its cursor. An empty `deltaLink` clears the
+     * cursor row, forcing the next call to re-baseline (used when Graph returns no
+     * usable deltaLink).
+     */
+    commit(commit: DeltaCommit): void;
+    /**
+     * Clears the cursor and mirror for a resource (or every resource for the
+     * account when `resource` is omitted), forcing a fresh baseline on the next
+     * sync. Local-only; never touches the user's Graph data.
+     */
+    reset(accountId: string, resource?: string): void;
+}
+export {};
+//# sourceMappingURL=delta-store.d.ts.map

package/dist/state/delta-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delta-store.d.ts","sourceRoot":"","sources":["../../src/state/delta-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,KAAK,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC;AAE5B,yCAAyC;AACzC,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,+CAA+C;AAC/C,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;IAC/B,yCAAyC;IACzC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AASD,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAK;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,MAAM;IAKrC,8EAA8E;IAC9E,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAOhE,uFAAuF;IACvF,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAQlE,oEAAoE;IACpE,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAO5D,yEAAyE;IACzE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAUhF,6EAA6E;IAC7E,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;IAOvD;;;;;;OAMG;IACH,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAwDjC;;;;OAIG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;CAYlD"}