Stop your AI agent deleting things: human approval for destructive MCP tools

A TypeScript pattern for MCP servers: preview, human approval via elicitation, token fallback, and tests that try to break it.