Confirmation cards & plans
How the assistant turns an intent into an editable card you confirm — and how plan cards split instant resources from ship-code work.
When the assistant decides a change should happen, it never just does it. It renders the change as an editable card. You review, tweak the fields, and confirm — only then does the mutation run. This is the whole safety model of write mode.
Confirmation cards
A confirmation card is a form pre-filled with the assistant's proposal. Every write resource has one:
Prop
Type
The fields are the real resource schema — what you edit in the card is exactly what gets written. Nothing is hidden behind the assistant.
checkout_completed · count_usersTweak the title and the highlighted controls here. To change anything else, ask in the chat and the assistant revises the plan.
The assistant proposes
It calls a write tool. Instead of executing, the call surfaces as a card with its arguments pre-filled.
You edit
Change the rollout, rename the flag, swap the metric — every field is editable.
You confirm
The mutation runs against the same admin endpoints the dashboard and CLI use. The card collapses into a result.
When the assistant needs a decision from you mid-flow, the ask_user tool renders a
chooser — a small set of options — rather than guessing. Pick one and it continues.
A chooser comes in two shapes. Single-choice offers radio options and resumes the moment you pick one; multi-select offers checkboxes and submits the set together on Confirm. Both can carry a free-text "Something else…" escape hatch.
Plan cards
For anything bigger than a single resource, the suggest_plan tool renders a plan card — an ordered set of steps. A plan separates two kinds of work:
- Instant resources — flags, configs, metrics the assistant can create directly via confirmation cards.
- Ship-code work — changes that need a developer or a coding agent (wiring the SDK, instrumenting an event). These are filed as tickets for
ops:workor an external agent via the MCP server, not executed in the chat.
This is why the assistant can scope an entire experiment — metric, variants, instrumentation — even though it only writes the parts that are safe to write from a chat.
Read vs write mode
Read tools auto-execute and stream a thinking trace; write tools never auto-run — they surface as editable cards you confirm.
Measurement plans
When a change needs instrumentation it can't do itself, the assistant writes a measurement plan and files measure_plan tickets for an agent to implement.