Confirmation Flows

"delete_calendar_event"

"delete_task"

# Destructive tools that require confirmation
DESTRUCTIVE_TOOLS = {
    "delete_calendar_event": "calendar event",
    "delete_task": "task",
}

def confirm_actions(state: AgentState) -> AgentState:
    """Prepare confirmation state for destructive actions."""
    actions = state.get("actions", [])
    
    # Find destructive actions
    destructive_actions = [
        a for a in actions 
        if a.get("tool") in DESTRUCTIVE_TOOLS
    ]
    
    if not destructive_actions:
        return {
            **state,
            "requires_confirmation": False,
        }
    
    # Build confirmation message
    confirmation_message = _build_confirmation_message(actions)
    
    return {
        **state,
        "pending_confirmation": destructive_actions,
        "confirmation_message": confirmation_message,
    }

User: "Delete my dentist appointment"
Agent: "**Confirmation Required**

The following actions will modify or delete data:
- Delete calendar event (ID: evt_abc123)

Reply **yes** to confirm, **no** to cancel, or **edit** to modify."

User: "Delete all my tasks"
Agent: "**Confirmation Required**

The following actions will modify or delete data:
- Delete task (ID: task_123)
- Delete task (ID: task_456)
- Delete task (ID: task_789)

Reply **yes** to confirm, **no** to cancel, or **edit** to modify."

def _build_confirmation_message(actions: List[dict]) -> str:
    """Build a human-readable confirmation message."""
    destructive_actions = [
        a for a in actions 
        if a.get("tool") in DESTRUCTIVE_TOOLS
    ]
    
    if not destructive_actions:
        return None
    
    lines = ["**Confirmation Required**\n"]
    lines.append("The following actions will modify or delete data:\n")
    
    for action in destructive_actions:
        tool = action.get("tool", "")
        args = action.get("args", {})
        item_type = DESTRUCTIVE_TOOLS.get(tool, "item")
        
        if "event_id" in args:
            lines.append(f"- Delete {item_type} (ID: {args['event_id']})")
        elif "task_id" in args:
            lines.append(f"- Delete {item_type} (ID: {args['task_id']})")
        else:
            lines.append(f"- Delete {item_type}")
    
    lines.append("\nReply **yes** to confirm, **no** to cancel, or **edit** to modify.")
    
    return "\n".join(lines)

User: "yes"
Agent: [Executes deletion]
"Event deleted successfully."

User: "no"
Agent: "Operation cancelled."

User: "edit"
Agent: "Please specify what you'd like to change."

User: "Actually, just delete the first one"
Agent: [Processes modified request]

User: "maybe"
Agent: "Please reply **yes** to confirm or **no** to cancel."

def process_confirmation(state: AgentState) -> AgentState:
    """Process user's confirmation response."""
    user_confirmation = state.get("user_confirmation", "").lower().strip()
    actions = state.get("actions", [])
    
    if user_confirmation in ("yes", "y", "confirm", "ok", "proceed"):
        # User confirmed - allow all actions to proceed
        return {
            **state,
            "requires_confirmation": False,
            "pending_confirmation": None,
        }
    
    elif user_confirmation in ("no", "n", "cancel", "abort"):
        # User rejected - remove destructive actions
        non_destructive = [
            a for a in actions 
            if a.get("tool") not in DESTRUCTIVE_TOOLS
        ]
        return {
            **state,
            "actions": non_destructive,
            "requires_confirmation": False,
            "pending_confirmation": None,
            "confirmation_message": "Operation cancelled.",
        }
    
    elif user_confirmation == "edit":
        # User wants to modify - keep pending state
        return {
            **state,
            "confirmation_message": "Please specify what you'd like to change.",
        }
    
    else:
        # Unclear response - ask again
        return {
            **state,
            "confirmation_message": "Please reply **yes** to confirm or **no** to cancel.",
        }

# During action planning
if invoked_tool in DESTRUCTIVE_TOOLS:
    requires_confirmation = True
    actions.append({
        "id": f"a{len(actions)+1}",
        "tool": invoked_tool,
        "args": params,
        "depends_on": [],
        "pending_confirmation": True,  # Flag for confirmation
    })
else:
    # Non-destructive tools execute immediately
    result = meta_tools.invoke_tool(invoked_tool, params)
    actions.append({
        "id": f"a{len(actions)+1}",
        "tool": invoked_tool,
        "args": params,
        "depends_on": [],
    })
    results[action_id] = result

if state.get("requires_confirmation"):
    # Route to confirmation node
    next_node = "confirm_actions"
else:
    # Route to execution
    next_node = "execute_tools"

User: "Delete my meeting on Friday"
Agent: [Searches for meeting, finds event_123]
"**Confirmation Required**

The following actions will modify or delete data:
- Delete calendar event (ID: event_123)

Reply **yes** to confirm, **no** to cancel, or **edit** to modify."

User: "yes"
Agent: [Executes delete_calendar_event(event_id="event_123")]
"Event deleted successfully."

User: "Delete the project task"
Agent: "**Confirmation Required**

The following actions will modify or delete data:
- Delete task (ID: task_456)

Reply **yes** to confirm, **no** to cancel, or **edit** to modify."

User: "no"
Agent: "Operation cancelled."

User: "Delete all my tasks"
Agent: [Finds 3 tasks]
"**Confirmation Required**

The following actions will modify or delete data:
- Delete task (ID: task_123)
- Delete task (ID: task_456)
- Delete task (ID: task_789)

Reply **yes** to confirm, **no** to cancel, or **edit** to modify."

User: "edit"
Agent: "Please specify what you'd like to change."

User: "Just delete the first task"
Agent: [Re-plans with single deletion]
"**Confirmation Required**

The following actions will modify or delete data:
- Delete task (ID: task_123)

Reply **yes** to confirm, **no** to cancel, or **edit** to modify."

User: "yes"
Agent: "Task deleted successfully."

User: "Show my calendar and delete the dentist appointment"
Agent: [Executes list_calendar_events immediately]
"You have 3 events today:
1. Team standup at 9am
2. Dentist appointment at 2pm
3. Project review at 4pm

**Confirmation Required**

The following actions will modify or delete data:
- Delete calendar event (ID: event_abc)

Reply **yes** to confirm, **no** to cancel, or **edit** to modify."

User: "yes"
Agent: "Event deleted successfully."

User: "I don't need the meeting anymore"
Agent: "Would you like me to delete the meeting? Please confirm."

User: "yes"
Agent: [Triggers confirmation flow]

- Delete calendar event (ID: event_123)
- Delete task (ID: task_456)

✓ Check the event/task ID matches what you want to delete
✓ Verify the item description before confirming
✓ Use 'edit' if you changed your mind

✓ "Delete my dentist appointment on Friday"
✗ "Remove it"  # Ambiguous without context

User: "Delete all my tasks"
Agent: [Shows 10 tasks to be deleted]
User: "edit"
Agent: "What would you like to change?"
User: "Only delete completed tasks"

# In agent/graph/nodes/plan_actions.py
DESTRUCTIVE_TOOLS = {
    "delete_calendar_event": "calendar event",
    "delete_task": "task",
    "send_email": "email",  # New destructive operation
}

if "event_id" in args:
    event_title = get_event_title(args["event_id"])
    lines.append(f"- Delete calendar event '{event_title}' on {event_date}")