0.2.2

Fixed

• fix_access_denied MCP tool now correctly generates the policy from the error message and applies it after confirmation
• fix_access_denied MCP tool now fails when the client does not support elicitation
• fix_access_denied MCP tool now correctly handles user decline/cancel during elicitation instead of returning an error
• Fixed elicitation schema for fix_access_denied to use a valid object schema ({"confirmed": bool}) instead of a bare boolean that was rejected by MCP clients

Changed

• The fix_access_denied MCP tool no longer accepts an input policy, but a resource override instead. The tool derives the policy from the error message, and if a resource override is provided, uses it. It then surfaces the policy to the user and after confirmation applies it.