@ratio-mcp/dev-server 1.5.1 → 1.6.0

package/dist/schemas/tags.json

@@ -0,0 +1,98 @@
+{
+  "resource": "tags",
+  "auth": {
+    "type": "bearer",
+    "header": "Authorization",
+    "format": "Bearer <access_token>"
+  },
+  "common_headers": {
+    "gk-merchant-id": "Required. Tenant/merchant context for the request."
+  },
+  "notes": "Order tags. These endpoints reuse the ORDER scopes: read_orders for reads, order-create for writes (NOT a separate tags scope).",
+  "endpoints": [
+    {
+      "method": "POST",
+      "path": "/api/v1/tags",
+      "controller_order": 1,
+      "handler_name": "create",
+      "required_scope": "order-create",
+      "summary": "Create a tag",
+      "request_body": {
+        "content_type": "application/json",
+        "fields": [
+          { "name": "name", "type": "string", "required": true, "description": "Tag name" },
+          { "name": "is_active", "type": "boolean", "required": false, "default": true, "description": "Whether the tag is active" }
+        ]
+      },
+      "response_schema": "Tag"
+    },
+    {
+      "method": "GET",
+      "path": "/api/v1/tags",
+      "controller_order": 2,
+      "handler_name": "getTags",
+      "required_scope": "read_orders",
+      "summary": "List tags",
+      "query_params": [
+        { "name": "is_active", "type": "boolean", "required": false, "description": "Filter by active state" },
+        { "name": "search", "type": "string", "required": false, "description": "Search by tag name" }
+      ],
+      "request_body": null,
+      "response_schema": "TagListResponse"
+    },
+    {
+      "method": "GET",
+      "path": "/api/v1/tags/:id",
+      "controller_order": 3,
+      "handler_name": "getTagById",
+      "required_scope": "read_orders",
+      "summary": "Get a tag by ID",
+      "path_params": [
+        { "name": "id", "type": "string", "required": true, "description": "The tag ID" }
+      ],
+      "request_body": null,
+      "response_schema": "Tag"
+    },
+    {
+      "method": "PUT",
+      "path": "/api/v1/tags/:id",
+      "controller_order": 4,
+      "handler_name": "updateTag",
+      "required_scope": "order-create",
+      "summary": "Update a tag",
+      "path_params": [
+        { "name": "id", "type": "string", "required": true, "description": "The tag ID to update" }
+      ],
+      "request_body": {
+        "content_type": "application/json",
+        "fields": [
+          { "name": "name", "type": "string", "required": false },
+          { "name": "is_active", "type": "boolean", "required": false }
+        ]
+      },
+      "response_schema": "Tag"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/v1/tags/:id",
+      "controller_order": 5,
+      "handler_name": "deleteTag",
+      "required_scope": "order-create",
+      "summary": "Delete a tag",
+      "path_params": [
+        { "name": "id", "type": "string", "required": true, "description": "The tag ID to delete" }
+      ],
+      "request_body": null,
+      "response_schema": "Tag"
+    }
+  ],
+  "schemas": {
+    "Tag": {
+      "id": "string — tag identifier",
+      "name": "string — tag name",
+      "is_active": "boolean",
+      "created_at": "string — ISO 8601",
+      "updated_at": "string — ISO 8601"
+    }
+  }
+}

package/dist/schemas/variants.json

@@ -0,0 +1,112 @@
+{
+  "resource": "variants",
+  "auth": {
+    "type": "bearer",
+    "header": "Authorization",
+    "format": "Bearer <access_token>"
+  },
+  "common_headers": {
+    "gk-merchant-id": "Required. Tenant/merchant context for the request."
+  },
+  "notes": "Product variants (sub-resource of products). Uses product scopes: read_products for reads, write_products for writes. Paths carry a doubled /v1 segment (global /api/v1 prefix + controller 'v1/variants').",
+  "endpoints": [
+    {
+      "method": "GET",
+      "path": "/api/v1/v1/variants",
+      "controller_order": 1,
+      "handler_name": "findAll",
+      "required_scope": "read_products",
+      "summary": "List variants",
+      "query_params": [
+        { "name": "product_id", "type": "string", "required": false, "description": "Filter by product" },
+        { "name": "limit", "type": "number", "required": false },
+        { "name": "offset", "type": "number", "required": false }
+      ],
+      "request_body": null,
+      "response_schema": "VariantListResponse"
+    },
+    {
+      "method": "GET",
+      "path": "/api/v1/v1/variants/:id",
+      "controller_order": 2,
+      "handler_name": "findOne",
+      "required_scope": "read_products",
+      "summary": "Get a variant by ID",
+      "path_params": [
+        { "name": "id", "type": "string", "required": true, "description": "The variant ID" }
+      ],
+      "request_body": null,
+      "response_schema": "Variant"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/v1/v1/variants/:id",
+      "controller_order": 3,
+      "handler_name": "remove",
+      "required_scope": "write_products",
+      "summary": "Delete a variant",
+      "path_params": [
+        { "name": "id", "type": "string", "required": true, "description": "The variant ID to delete" }
+      ],
+      "request_body": null,
+      "response_schema": "Variant"
+    },
+    {
+      "method": "PUT",
+      "path": "/api/v1/v1/variants/:id",
+      "controller_order": 4,
+      "handler_name": "update",
+      "required_scope": "write_products",
+      "summary": "Update a variant",
+      "path_params": [
+        { "name": "id", "type": "string", "required": true, "description": "The variant ID to update" }
+      ],
+      "request_body": {
+        "content_type": "application/json",
+        "fields": [
+          { "name": "title", "type": "string", "required": false },
+          { "name": "sku", "type": "string", "required": false },
+          { "name": "price", "type": "number", "required": false },
+          { "name": "cost", "type": "number", "required": false },
+          { "name": "inventory", "type": "number", "required": false, "description": "Inventory quantity" }
+        ]
+      },
+      "response_schema": "Variant"
+    },
+    {
+      "method": "POST",
+      "path": "/api/v1/v1/variants/:productId",
+      "controller_order": 5,
+      "handler_name": "create",
+      "required_scope": "write_products",
+      "summary": "Create a variant for a product",
+      "path_params": [
+        { "name": "productId", "type": "string", "required": true, "description": "The product to attach the variant to" }
+      ],
+      "request_body": {
+        "content_type": "application/json",
+        "fields": [
+          { "name": "title", "type": "string", "required": false },
+          { "name": "sku", "type": "string", "required": false },
+          { "name": "price", "type": "number", "required": false },
+          { "name": "cost", "type": "number", "required": false },
+          { "name": "inventory", "type": "number", "required": false, "description": "Inventory quantity" }
+        ]
+      },
+      "response_schema": "Variant"
+    }
+  ],
+  "schemas": {
+    "Variant": {
+      "id": "string — variant identifier",
+      "product_id": "string",
+      "title": "string | null",
+      "sku": "string | null",
+      "price": "number",
+      "cost": "number | null",
+      "inventory": "number — inventory quantity",
+      "created_at": "string — ISO 8601",
+      "updated_at": "string — ISO 8601"
+    }
+  }
+}

package/dist/schemas/webhooks.json

@@ -0,0 +1,148 @@
+{
+  "version": 2,
+  "verification": {
+    "method": "HMAC-SHA256",
+    "header": "X-Webhook-Signature",
+    "description": "Verify authenticity by computing HMAC-SHA256 of the raw request body using your app's webhook secret (returned once when the webhook is created). The computed digest must equal the X-Webhook-Signature header. Each delivery also carries X-Webhook-Id, X-Webhook-Topic, and X-Merchant-Id headers."
+  },
+  "retry_policy": {
+    "max_retries": 3,
+    "retry_intervals": ["1s", "5s", "30s"],
+    "timeout": "30s",
+    "failure_action": "Webhook is auto-disabled after 10 consecutive failed deliveries"
+  },
+  "events": [
+    {
+      "topic": "orders/create",
+      "description": "Triggered when a new order is placed",
+      "resource": "orders",
+      "required_scope": "read_orders"
+    },
+    {
+      "topic": "orders/updated",
+      "description": "Triggered when an order is updated",
+      "resource": "orders",
+      "required_scope": "read_orders"
+    },
+    {
+      "topic": "orders/paid",
+      "description": "Triggered when an order is paid",
+      "resource": "orders",
+      "required_scope": "read_orders"
+    },
+    {
+      "topic": "orders/fulfilled",
+      "description": "Triggered when an order is fully fulfilled",
+      "resource": "orders",
+      "required_scope": "read_orders"
+    },
+    {
+      "topic": "orders/cancelled",
+      "description": "Triggered when an order is cancelled",
+      "resource": "orders",
+      "required_scope": "read_orders"
+    },
+    {
+      "topic": "orders/partially_fulfilled",
+      "description": "Triggered when an order is partially fulfilled",
+      "resource": "orders",
+      "required_scope": "read_orders"
+    },
+    {
+      "topic": "orders/delete",
+      "description": "Triggered when an order is deleted",
+      "resource": "orders",
+      "required_scope": "read_orders"
+    },
+    {
+      "topic": "orders/edited",
+      "description": "Triggered when an order is edited",
+      "resource": "orders",
+      "required_scope": "read_orders"
+    },
+    {
+      "topic": "products/create",
+      "description": "Triggered when a new product is created",
+      "resource": "products",
+      "required_scope": "read_products"
+    },
+    {
+      "topic": "products/update",
+      "description": "Triggered when a product is updated",
+      "resource": "products",
+      "required_scope": "read_products"
+    },
+    {
+      "topic": "products/delete",
+      "description": "Triggered when a product is deleted",
+      "resource": "products",
+      "required_scope": "read_products"
+    },
+    {
+      "topic": "customers/create",
+      "description": "Triggered when a new customer is created",
+      "resource": "customers",
+      "required_scope": "read_customers"
+    },
+    {
+      "topic": "customers/update",
+      "description": "Triggered when customer information is updated",
+      "resource": "customers",
+      "required_scope": "read_customers"
+    },
+    {
+      "topic": "customers/delete",
+      "description": "Triggered when a customer is deleted",
+      "resource": "customers",
+      "required_scope": "read_customers"
+    },
+    {
+      "topic": "collections/create",
+      "description": "Triggered when a new collection is created",
+      "resource": "collections",
+      "required_scope": "read_products"
+    },
+    {
+      "topic": "collections/update",
+      "description": "Triggered when a collection is updated",
+      "resource": "collections",
+      "required_scope": "read_products"
+    },
+    {
+      "topic": "collections/delete",
+      "description": "Triggered when a collection is deleted",
+      "resource": "collections",
+      "required_scope": "read_products"
+    },
+    {
+      "topic": "loyalty/points_credited",
+      "description": "Triggered when a customer's loyalty point balance increases (earn, admin credit, refund/reversal credit)",
+      "resource": "loyalty",
+      "required_scope": "read_loyalty"
+    },
+    {
+      "topic": "loyalty/points_debited",
+      "description": "Triggered when a customer's loyalty point balance decreases (redeem, admin debit, cancellation/reversal debit, expiry)",
+      "resource": "loyalty",
+      "required_scope": "read_loyalty"
+    },
+    {
+      "topic": "reviews/create",
+      "description": "Triggered when a customer submits a product review",
+      "resource": "reviews",
+      "required_scope": "read_products"
+    },
+    {
+      "topic": "reviews/update",
+      "description": "Triggered when a merchant moderates or edits a review (hide, show, archive, edit)",
+      "resource": "reviews",
+      "required_scope": "read_products"
+    },
+    {
+      "topic": "app/uninstalled",
+      "description": "Fired when the app is uninstalled by a merchant",
+      "resource": "app",
+      "required_scope": null
+    }
+  ]
+}

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAyCpE;;GAEG;AACH,wBAAgB,eAAe,IAAI,SAAS,CA2F3C"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAmDpE;;GAEG;AACH,wBAAgB,eAAe,IAAI,SAAS,CAqH3C"}

package/dist/server.js

@@ -4,6 +4,7 @@ import { allDevTools } from './tools/index.js';
 import { logger } from './utils/logger.js';
 import { checkToolPrerequisites } from './services/tool-guard.js';
 import { recordToolSuccess } from './services/session-state.js';
+import { setElicitationServer } from './services/elicitation.js';
 const DEV_SERVER_INSTRUCTIONS = `You are a developer assistant for the Ratio Agentic Ecosystem — a B2B app marketplace where developers build agents (apps) that extend merchant store functionality. Merchants discover and install these agents to access their store data (orders, products, customers, etc.).
 
 FIRST RESPONSE BEHAVIOR (non-negotiable):
@@ -19,17 +20,26 @@ CONVERSATION FLOW — guide the developer step by step:
 4. CALLBACK URL: Ask if they have their own callback URL or need Hookdeck for local development.
    - Own URL → use it as redirect_uri in create_app
    - No URL → call setup_hookdeck first to provision a tunnel
-5. CREATE APP: Call create_app with confirmed categories and callback URL.
+5. CREATE APP: The SERVER owns the configuration wizard — distribution type (public/private), app kind, merchant whitelist (private only) and categories are collected FROM THE DEVELOPER, never decided by you. Any app_type / app_kind / merchant_ids / category_ids you pass are treated only as suggested defaults the developer confirms or changes.
+   - If the client supports elicitation: create_app asks the developer directly via forms and creates the app in one call.
+   - Otherwise: create_app returns status "awaiting_developer_input" with a questions list. Present those questions to the developer VERBATIM, WAIT for their answers, then call create_app again with the same name/description plus their answers. Partial answers are fine — remaining questions come back until everything is answered.
+   Key facts for the conversation: PUBLIC = marketplace, any merchant, admin review. PRIVATE = whitelisted merchants only, AUTO-PUBLISHES on build upload (no review/publish step; merchant IDs required). APP KIND: "embedded" (iframe frontend, built + zipped + uploaded) or "no_ui" (backend-only — no scaffold/build/zip steps); "extension" / "web_pixel" / "flow" can be created but their manifest/bundle upload is portal-only for now. Use lookup_docs "private app" for the grounded public/private difference.
 6. SCOPES: Based on what they want to build, call gather_requirements with their description. It recommends scopes. Then call validate_scopes to verify them. ONLY present scopes that validate_scopes confirms as valid.
 7. CONFIRM SCOPES: Call define_app_requirements with confirmed=false to show a preview. Discuss with developer. Then call with confirmed=true to save.
-8. WEBHOOKS: After scopes are confirmed, recommend relevant webhook events. Currently only order and product webhooks are supported. Ask if they want real-time event handling.
-9. BUILD PIPELINE: scaffold_frontend → build_frontend → validate_build → create_submission_zip → upload_build → submit_for_review
-10. AFTER APPROVAL: scaffold_backend → generate_api_routes (auto-generates backend code filtered by the developer's selected scopes)
+8. WEBHOOKS: After scopes are confirmed, recommend relevant webhook events (call get_webhook_topics — it filters by the confirmed scopes). Supported categories: orders, products, customers, collections, loyalty, reviews (+ app/uninstalled). Ask if they want real-time event handling.
+9. PIPELINE — depends on app_kind and app_type (follow the next_steps in tool responses and get_status):
+   - embedded: scaffold_frontend → build_frontend → validate_build → create_submission_zip → upload_build
+   - no_ui: upload_build directly (NO frontend steps, NO zip — the version is created file-less)
+   - public: then submit_for_review → wait for admin approval → publish_app
+   - private: upload_build AUTO-PUBLISHES — skip submit/publish entirely
+10. AFTER PUBLISH: scaffold_backend → generate_api_routes (auto-generates backend code filtered by the developer's selected scopes)
+11. SKIPPED RESPONSES: When a tool returns {"skipped": true}, that step does not exist for this app's flow — this is NOT an error. Read "next_step" and continue there. Never retry a skipped tool.
 
 CRITICAL RULES:
 - ANTI-HALLUCINATION: When you don't know something about the Ratio platform, call lookup_docs BEFORE answering. NEVER guess or make up platform capabilities, API endpoints, scopes, or features.
 - If lookup_docs returns no results, tell the developer honestly: "I don't have information from Ratio about this. Would you like me to answer in a generic way?"
 - BLOCKED TOOLS: When a tool returns an error with "blocked": true, read the "chain" field — it tells you the exact sequence of tools to call. Never retry a blocked tool without completing its prerequisites first.
+- AWAITING INPUT: When a tool returns status "awaiting_developer_input", the operation did NOT happen. Relay the "questions" to the developer verbatim, WAIT for their reply, and only then call the tool again with their answers. NEVER invent answers to skip this step.
 - DEVELOPER CONFIRMATION: Always show options and get explicit confirmation before proceeding (categories, scopes, callback URL choice). Never assume choices on behalf of the developer.
 - SCOPE VALIDATION: Always call validate_scopes before presenting any scope to the developer. Never show unvalidated scopes.
 - OAUTH: OAuth is MERCHANT-INITIATED — the merchant clicks "Install" on the marketplace, which triggers the /callback endpoint. NEVER construct OAuth URLs or manual token exchange code.
@@ -46,6 +56,9 @@ export function createDevServer() {
     }, {
         instructions: DEV_SERVER_INSTRUCTIONS,
     });
+    // Elicitation: tools can ask the human developer for input mid-call
+    // (app kind, distribution type) when the client supports it.
+    setElicitationServer(server);
     // Register all tools
     for (const tool of allDevTools) {
         // Pass Zod shape directly — MCP SDK handles Zod-to-JSON conversion internally
@@ -54,9 +67,29 @@ export function createDevServer() {
             logger.toolCall(tool.name, args);
             const startTime = Date.now();
             // ── Guard: check prerequisites before executing ──────────────
-            const guard = checkToolPrerequisites(tool.name);
+            const guard = await checkToolPrerequisites(tool.name);
             if (!guard.allowed) {
                 const duration = Date.now() - startTime;
+                // Skipped = the step doesn't exist for this app's flow profile
+                // (e.g. submit_for_review on a private app, scaffold_frontend on no_ui).
+                // Informational, NOT an error — the LLM should move to next_step.
+                if (guard.skipped) {
+                    logger.info(`SKIPPED ${tool.name} (${duration}ms): ${guard.message}`);
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify({
+                                    skipped: true,
+                                    message: guard.message,
+                                    next_step: guard.nextStep,
+                                    tool: tool.name,
+                                    hint: guard.hint,
+                                }, null, 2),
+                            },
+                        ],
+                    };
+                }
                 logger.info(`BLOCKED ${tool.name} (${duration}ms): ${guard.message}`);
                 return {
                     content: [
@@ -67,6 +100,7 @@ export function createDevServer() {
                                 blocked: true,
                                 message: guard.message,
                                 required_tools: guard.requiredTools,
+                                chain: guard.chain,
                                 tool: tool.name,
                                 hint: `Please call ${guard.requiredTools?.join(' or ')} first, then retry ${tool.name}.`,
                             }, null, 2),

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uKA+BuI,CAAC;AAExK;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,kBAAkB;KAC5B,EACD;QACE,YAAY,EAAE,uBAAuB;KACtC,CACF,CAAC;IAEF,qBAAqB;IACrB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,8EAA8E;QAC9E,MAAM,KAAK,GAAI,IAAI,CAAC,WAA0C,CAAC,KAAK,CAAC;QAErE,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,WAAW,EAChB,KAAK,EACL,KAAK,EAAE,IAA6B,EAAE,EAAE;YACtC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,gEAAgE;YAChE,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,KAAK,QAAQ,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAEtE,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gCACnB,KAAK,EAAE,IAAI;gCACX,OAAO,EAAE,IAAI;gCACb,OAAO,EAAE,KAAK,CAAC,OAAO;gCACtB,cAAc,EAAE,KAAK,CAAC,aAAa;gCACnC,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,IAAI,EAAE,eAAe,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,CAAC,IAAI,GAAG;6BACzF,EAAE,IAAI,EAAE,CAAC,CAAC;yBACZ;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAE/C,8DAA8D;gBAC9D,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAErC,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;yBACtC;qBACF;iBACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAE7C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gCACnB,KAAK,EAAE,IAAI;gCACX,OAAO;gCACP,IAAI,EAAE,IAAI,CAAC,IAAI;6BAChB,EAAE,IAAI,EAAE,CAAC,CAAC;yBACZ;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,qBAAqB,WAAW,CAAC,MAAM,QAAQ,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uKAwCuI,CAAC;AAExK;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,kBAAkB;KAC5B,EACD;QACE,YAAY,EAAE,uBAAuB;KACtC,CACF,CAAC;IAEF,oEAAoE;IACpE,6DAA6D;IAC7D,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,qBAAqB;IACrB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,8EAA8E;QAC9E,MAAM,KAAK,GAAI,IAAI,CAAC,WAA0C,CAAC,KAAK,CAAC;QAErE,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,WAAW,EAChB,KAAK,EACL,KAAK,EAAE,IAA6B,EAAE,EAAE;YACtC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,gEAAgE;YAChE,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAExC,+DAA+D;gBAC/D,yEAAyE;gBACzE,kEAAkE;gBAClE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAClB,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,KAAK,QAAQ,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;oBACtE,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oCACnB,OAAO,EAAE,IAAI;oCACb,OAAO,EAAE,KAAK,CAAC,OAAO;oCACtB,SAAS,EAAE,KAAK,CAAC,QAAQ;oCACzB,IAAI,EAAE,IAAI,CAAC,IAAI;oCACf,IAAI,EAAE,KAAK,CAAC,IAAI;iCACjB,EAAE,IAAI,EAAE,CAAC,CAAC;6BACZ;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,KAAK,QAAQ,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACtE,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gCACnB,KAAK,EAAE,IAAI;gCACX,OAAO,EAAE,IAAI;gCACb,OAAO,EAAE,KAAK,CAAC,OAAO;gCACtB,cAAc,EAAE,KAAK,CAAC,aAAa;gCACnC,KAAK,EAAE,KAAK,CAAC,KAAK;gCAClB,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,IAAI,EAAE,eAAe,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,CAAC,IAAI,GAAG;6BACzF,EAAE,IAAI,EAAE,CAAC,CAAC;yBACZ;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAE/C,8DAA8D;gBAC9D,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAErC,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;yBACtC;qBACF;iBACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAE7C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gCACnB,KAAK,EAAE,IAAI;gCACX,OAAO;gCACP,IAAI,EAAE,IAAI,CAAC,IAAI;6BAChB,EAAE,IAAI,EAAE,CAAC,CAAC;yBACZ;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,qBAAqB,WAAW,CAAC,MAAM,QAAQ,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/services/app-state-sync.d.ts

@@ -0,0 +1,34 @@
+/**
+ * App facts — the platform is the source of truth for app state.
+ *
+ * Guards used to trust only the local tool-call history, which broke whenever
+ * the platform had an alternate path to a state (e.g. private apps auto-publish
+ * on upload, or the MCP server restarted mid-flow). getAppFacts() resolves the
+ * real state from GET /applications/:id, with a short TTL cache, and degrades
+ * gracefully to session/requirements-store data when the network call fails.
+ */
+export interface AppFacts {
+    appId: string;
+    /** Application status: draft | submitted | in_review | approved | rejected | published | ... */
+    status?: string;
+    /** Latest version status (versions are newest-first in the API response) */
+    versionStatus?: string;
+    latestVersionId?: string;
+    appType?: string;
+    appKind?: string;
+    /** Where the facts came from — 'platform' | 'cache' | 'local' */
+    source: 'platform' | 'cache' | 'local';
+}
+/** Effective status: version status wins when the app-level status lags behind
+ *  (the backend's approveVersion updates the VERSION but leaves the app 'submitted'). */
+export declare function effectiveStatus(facts: AppFacts): string | undefined;
+/**
+ * Resolve current app facts. Platform first (cached for 30s), local fallback.
+ * Never throws — guards must keep working offline/pre-auth.
+ */
+export declare function getAppFacts(appId: string, opts?: {
+    force?: boolean;
+}): Promise<AppFacts>;
+/** Drop the cached facts for an app (call after mutations like upload/submit/publish). */
+export declare function invalidateAppFacts(appId: string): void;
+//# sourceMappingURL=app-state-sync.d.ts.map

package/dist/services/app-state-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-state-sync.d.ts","sourceRoot":"","sources":["../../src/services/app-state-sync.ts"],"names":[],"mappings":"AAKA;;;;;;;;GAQG;AAEH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;CACxC;AAKD;yFACyF;AACzF,wBAAgB,eAAe,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,CASnE;AAgCD;;;GAGG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqC9F;AAED,0FAA0F;AAC1F,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAEtD"}

package/dist/services/app-state-sync.js

@@ -0,0 +1,85 @@
+import { developerApiRequest, getDeveloperId } from '../api/developer.js';
+import { getRequirements } from '../store/requirements-store.js';
+import { getSession, getAppState, updateAppContext } from './session-state.js';
+import { logger } from '../utils/logger.js';
+const TTL_MS = 30_000;
+const cache = new Map();
+/** Effective status: version status wins when the app-level status lags behind
+ *  (the backend's approveVersion updates the VERSION but leaves the app 'submitted'). */
+export function effectiveStatus(facts) {
+    const { status, versionStatus } = facts;
+    if ((status === 'submitted' || status === 'in_review') &&
+        (versionStatus === 'approved' || versionStatus === 'published')) {
+        return versionStatus;
+    }
+    return status;
+}
+function localFacts(appId) {
+    const appState = getAppState(appId);
+    const session = getSession();
+    const requirements = getRequirements(appId);
+    const ctx = appState?.context ?? {};
+    return {
+        appId,
+        status: ctx.appPublished || session.context.appPublished
+            ? 'published'
+            : ctx.appApproved || session.context.appApproved
+                ? 'approved'
+                : undefined,
+        appType: ctx.appType ?? requirements?.app_type,
+        appKind: ctx.appKind ?? requirements?.app_kind,
+        latestVersionId: ctx.latestVersionId ?? session.context.latestVersionId,
+        source: 'local',
+    };
+}
+function syncSessionFromFacts(facts) {
+    const eff = effectiveStatus(facts);
+    updateAppContext(facts.appId, {
+        ...(facts.appType ? { appType: facts.appType } : {}),
+        ...(facts.appKind ? { appKind: facts.appKind } : {}),
+        ...(facts.latestVersionId ? { latestVersionId: facts.latestVersionId } : {}),
+        ...(eff === 'approved' || eff === 'published' ? { appApproved: true } : {}),
+        ...(eff === 'published' ? { appPublished: true } : {}),
+    });
+}
+/**
+ * Resolve current app facts. Platform first (cached for 30s), local fallback.
+ * Never throws — guards must keep working offline/pre-auth.
+ */
+export async function getAppFacts(appId, opts) {
+    const cached = cache.get(appId);
+    if (!opts?.force && cached && Date.now() - cached.fetchedAt < TTL_MS) {
+        return { ...cached.facts, source: 'cache' };
+    }
+    // Not authenticated yet → platform lookup is impossible; use local state.
+    if (!getDeveloperId())
+        return localFacts(appId);
+    try {
+        const response = await developerApiRequest('GET', `/applications/${appId}`);
+        const data = (response?.['data'] ?? response);
+        const versions = data?.['versions'];
+        const latestVersion = versions?.[0];
+        const facts = {
+            appId,
+            status: data?.['status']?.toLowerCase(),
+            versionStatus: latestVersion?.['status']?.toLowerCase(),
+            latestVersionId: latestVersion?.['id'] ? String(latestVersion['id']) : undefined,
+            appType: (data?.['appType'] ?? data?.['app_type']),
+            appKind: (data?.['appKind'] ?? data?.['app_kind']),
+            source: 'platform',
+        };
+        cache.set(appId, { facts, fetchedAt: Date.now() });
+        syncSessionFromFacts(facts);
+        logger.info(`[app-state-sync] ${appId}: status=${facts.status}, versionStatus=${facts.versionStatus}, appType=${facts.appType}, appKind=${facts.appKind}`);
+        return facts;
+    }
+    catch (err) {
+        logger.warn(`[app-state-sync] Platform lookup failed for ${appId} (${err instanceof Error ? err.message : err}) — using local state`);
+        return localFacts(appId);
+    }
+}
+/** Drop the cached facts for an app (call after mutations like upload/submit/publish). */
+export function invalidateAppFacts(appId) {
+    cache.delete(appId);
+}
+//# sourceMappingURL=app-state-sync.js.map

package/dist/services/app-state-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-state-sync.js","sourceRoot":"","sources":["../../src/services/app-state-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAyB5C,MAAM,MAAM,GAAG,MAAM,CAAC;AACtB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkD,CAAC;AAExE;yFACyF;AACzF,MAAM,UAAU,eAAe,CAAC,KAAe;IAC7C,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IACxC,IACE,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,WAAW,CAAC;QAClD,CAAC,aAAa,KAAK,UAAU,IAAI,aAAa,KAAK,WAAW,CAAC,EAC/D,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;IACpC,OAAO;QACL,KAAK;QACL,MAAM,EAAE,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,YAAY;YACtD,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW;gBAC9C,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,SAAS;QACf,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,YAAY,EAAE,QAAQ;QAC9C,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,YAAY,EAAE,QAAQ;QAC9C,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,eAAe;QACvE,MAAM,EAAE,OAAO;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAe;IAC3C,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACnC,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE;QAC5B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAa,EAAE,IAA0B;IACzE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;QACrE,OAAO,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC9C,CAAC;IAED,0EAA0E;IAC1E,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAA0B,KAAK,EAAE,iBAAiB,KAAK,EAAE,CAAC,CAAC;QACrG,MAAM,IAAI,GAAG,CAAE,QAAoC,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAA4B,CAAC;QACtG,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC,UAAU,CAA+C,CAAC;QAClF,MAAM,aAAa,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,MAAM,KAAK,GAAa;YACtB,KAAK;YACL,MAAM,EAAG,IAAI,EAAE,CAAC,QAAQ,CAAwB,EAAE,WAAW,EAAE;YAC/D,aAAa,EAAG,aAAa,EAAE,CAAC,QAAQ,CAAwB,EAAE,WAAW,EAAE;YAC/E,eAAe,EAAE,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YAChF,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC,CAAuB;YACxE,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC,CAAuB;YACxE,MAAM,EAAE,UAAU;SACnB,CAAC;QAEF,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnD,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CACT,oBAAoB,KAAK,YAAY,KAAK,CAAC,MAAM,mBAAmB,KAAK,CAAC,aAAa,aAAa,KAAK,CAAC,OAAO,aAAa,KAAK,CAAC,OAAO,EAAE,CAC9I,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,+CAA+C,KAAK,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,uBAAuB,CACzH,CAAC;QACF,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC"}

package/dist/services/elicitation.d.ts

@@ -0,0 +1,25 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function setElicitationServer(server: McpServer): void;
+export declare function isElicitationSupported(): boolean;
+export interface EnumChoice {
+    value: string;
+    title: string;
+    description?: string;
+}
+export type ElicitOutcome<T> = {
+    kind: 'answered';
+    value: T;
+} | {
+    kind: 'declined';
+} | {
+    kind: 'unsupported';
+};
+/**
+ * Ask the user to pick one option from a list. Returns 'unsupported' when the
+ * client can't render elicitation — the caller must then fall back to
+ * instructing the LLM to ask in chat.
+ */
+export declare function elicitChoice(message: string, fieldName: string, fieldTitle: string, choices: EnumChoice[]): Promise<ElicitOutcome<string>>;
+/** Ask the user for free text (e.g. comma-separated merchant IDs). */
+export declare function elicitText(message: string, fieldName: string, fieldTitle: string, description?: string): Promise<ElicitOutcome<string>>;
+//# sourceMappingURL=elicitation.d.ts.map

package/dist/services/elicitation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elicitation.d.ts","sourceRoot":"","sources":["../../src/services/elicitation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAwBzE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAE5D;AAED,wBAAgB,sBAAsB,IAAI,OAAO,CAOhD;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,aAAa,CAAC,CAAC,IACvB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAE5B;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,UAAU,EAAE,GACpB,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAmChC;AAED,sEAAsE;AACtE,wBAAsB,UAAU,CAC9B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CA2BhC"}