Elicitation

1. Script calls tools.github.issues.create(args)
       │
2. Invoke callback calls engine.gate(toolDef, args)
       │
3. Tool is destructive and not session-approved
       │  → creates PendingElicitation with promise
       │  → fires onPause callback
       │
4. Runtime detects pause, returns ExecutionResult with:
       │  { paused: { executionId, toolPath, message, args } }
       │
5. MCP client shows pending action to user
       │
6. User approves → agent calls resume({ execution_id, approved: true })
       │
7. ElicitationEngine.resolve() fulfills the pending promise
       │
8. Execution continues, tool call proceeds

import { ElicitationEngine } from "@toolshed/kernel";

const engine = new ElicitationEngine({
  onPause: (elicitation) => {
    // Notify the user about the pending action
    console.log(`Approval needed: ${elicitation.message}`);
  },
});

engine.addSessionApproval("github.issues.create");
// Future calls to github.issues.create will not pause

async handler(ctx, input) {
  const approval = await ctx.elicit({
    toolPath: "github.issues.create",
    message: `Create issue "${input.title}" in ${input.owner}/${input.repo}?`,
    args: input,
    type: "approval",
  });

  if (!approval.approved) {
    throw new Error("Issue creation denied by user");
  }

  // proceed...
}