Confirmation cards & plans
How the assistant turns an intent into an editable card you confirm — and how plan cards split instant resources from ship-code work.
When the assistant decides a change should happen, it never just does it. It renders the change as an editable card. You review, tweak the fields, and confirm — only then does the mutation run. This is the whole safety model of write mode.
Confirmation cards
A confirmation card is a form pre-filled with the assistant's proposal. Every write resource has one:
Prop
Type
The fields are the real resource schema — what you edit in the card is exactly what gets written. Nothing is hidden behind the assistant.
Tweak the title and the highlighted controls here. To change anything else, ask in the chat and the assistant revises the plan.
The assistant proposes
It calls a write tool. Instead of executing, the call surfaces as a card with its arguments pre-filled.
You edit
Change the rollout, rename the flag, swap the metric — every field is editable.
You confirm
The mutation runs against the same admin endpoints the dashboard and CLI use. The card collapses into a result.
When the assistant needs a decision from you mid-flow, the ask_user tool renders a
chooser — a small set of options — rather than guessing. Pick one and it continues.
A chooser comes in two shapes. Single-choice offers radio options and resumes the moment you pick one; multi-select offers checkboxes and submits the set together on Confirm. Both can carry a free-text "Something else…" escape hatch.
Plan cards
For anything bigger than a single resource, the suggest_plan tool renders a plan card — an ordered set of steps. A plan separates two kinds of work:
- Instant resources — flags, configs, metrics the assistant can create directly via confirmation cards.
- Ship-code work — changes that need a developer or a coding agent (wiring the SDK, instrumenting an event). These are filed as tickets for
ops:workor an external agent via the MCP server, not executed in the chat.
This is why the assistant can scope an entire rollout — the flag, the metric that watches it, the alert that pages — even though it only writes the parts that are safe to write from a chat.
Read vs write mode
Read tools auto-execute and stream a thinking trace; write tools never auto-run — they surface as editable cards you confirm.
Measurement plans
When a change needs instrumentation it can't do itself, the assistant writes a measurement plan and files measure_plan tickets for an agent to implement.