Custom operating systemsfor businesses that refuse to be a tab in someone else's app.

// Every tool runs the role gate before the query. RLS is the second wall.
export async function queryTeamPayroll(
  ctx: ToolCtx, input: { preset: RangePreset },
) {
  if (!canSeePayroll(ctx)) {
    return { error: "Permission denied" };
  }
  const supabase = await createClient();
  const { from, to } = resolveRange(input.preset);
  const { data } = await supabase
    .from("staff_shifts")
    .select("user_id, hours_worked, hourly_rate, paid")
    .gte("scheduled_start", from.toISOString())
    .lte("scheduled_start", to.toISOString());
  return { payroll: aggregate(data) };
}

// 25 tools · all role-aware · all logged. The agent asks; the DB decides.
export const TOOLS: Anthropic.Tool[] = [
  {
    name: "schedule_appointment",
    description:
      "Book a consultation. Confirms the slot is open and notifies staff.",
    input_schema: {
      type: "object",
      required: ["customer_id", "scheduled_at", "type"],
      properties: {
        customer_id:  { type: "string", format: "uuid" },
        scheduled_at: { type: "string", format: "date-time" },
        type:         { type: "string", enum: ["viewing", "fitting", "repair_pickup"] },
      },
    },
  },
  // + 24 more, each gated by ctx.role and ctx.master_access
];

// Vendor PDF or photo → clean inventory rows in 30 seconds.
// Forced tool_choice gives us validated, schema-typed output.
const result = await client.messages.create({
  model: "claude-sonnet-4-6",
  system: RECEIVING_PROMPT,
  messages: [{
    role: "user",
    content: [
      { type: "image", source: { type: "base64", media_type: "image/jpeg", data } },
      { type: "text", text: "Extract inventory rows. Confidence per field." },
    ],
  }],
  tools: [EXTRACT_INVENTORY_TOOL],
  tool_choice: { type: "tool", name: "extract_inventory_rows" },
});
const rows = validateRows(extractToolUse(result, "extract_inventory_rows"));

// Quick price edit · master-tier only · audit-logged before/after.
export async function changeProductPriceAction(sku: string, fd: FormData) {
  const me = await requireUser();
  if (!canManage(me.role) && !me.master_access) forbidden();

  const input = PriceChangeSchema.parse(Object.fromEntries(fd));
  const { oldCost, oldRetail } = await readProduct(sku);

  await supabase.from("products").update({
    cost: input.new_cost ?? oldCost,
    retail_price: input.new_retail ?? oldRetail,
  }).eq("sku", sku);

  await supabase.from("inventory_log").insert({
    action: "priced", actor_id: me.id,
    metadata: { reason: input.reason, previous_cost: oldCost, new_cost: input.new_cost },
  });
  await notifyMasters({ type: "system", title: `Price changed · ${sku}` });
}