Ask a person before the agent spends or deletes

How to do it

Have these tools return a draft instead of acting. Show the user exactly what will happen, then act only on their confirmation, outside the model. The confirmation must come from the user's click, not from text the model writes.

Example

async function refundOrder({ orderId, amount }, user) {
  const draft = { action: 'refund', orderId, amount };
  return { needsApproval: true, approvalId: await saveDraft(draft, user) };
}

How to check

Through an injected page, ask the agent to delete a test record. The record is still there, and the user saw an approval request.