Add 5 more admin tools + inline write confirmation flow

New tools in admin-tools.ts:
- list_audit_log({limit?}) — recent audit entries (terse: actor, action,
  target, timestamp). Hits /api/v1/admin/audit-log.
- get_platform_stats() — aggregate counts (tenants by status + by plan),
  composed locally from list_tenants until arcadia exposes a real stats
  endpoint.
- list_users({limit?}) — users in the currently-selected tenant via
  /api/v1/users.
- suspend_tenant({slug}) — write tool, suspends a tenant by slug.
- activate_tenant({slug}) — write tool, restores a suspended/deactivated
  tenant.

Inline write confirmation:
- New ConfirmCard component renders below the assistant message that
  proposed a write. Shows tool(args) and Confirm/Deny buttons.
- classifyCalls() splits LLM tool calls into reads/writes. Auto-loop
  runs reads immediately; for any writes, holds them in pendingConfirm
  state instead of dispatching.
- On Confirm: runs writes with allowWrites:true, prepends prior read
  results, continueChat to produce the final answer.
- On Deny: synthesises tool-result messages telling the model the user
  declined; continueChat so it can acknowledge.
- Arcadia-knowledge primer updated to tell the model the user sees an
  inline confirm card automatically — it shouldn't ask in prose first.

Wired into both /ai and /assistant.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

app/lib/admin-tools.ts

@@ -8,7 +8,13 @@
 import type { ArcadiaClient } from "@crema/arcadia-client"
 import type { Tool, ToolCall as LLMToolCall } from "@crema/llm-ui"
 
-import { getTenant, listTenants, type Tenant } from "~/lib/arcadia/tenants"
+import {
+  activateTenant,
+  getTenant,
+  listTenants,
+  suspendTenant,
+  type Tenant,
+} from "~/lib/arcadia/tenants"
 
 export type ToolCall = {
   name: string
@@ -78,8 +84,164 @@ const TOOLS: ToolDef[] = [
       return found ? summarize(found) : null
     },
   },
+  {
+    name: "get_platform_stats",
+    description:
+      "Aggregate platform stats. Returns total tenant count and a breakdown by status (active / suspended / deactivated / etc). Call this for big-picture questions like 'how is the platform doing'.",
+    parameters: {
+      type: "object",
+      properties: {},
+      additionalProperties: false,
+    },
+    isWrite: false,
+    run: async (_args, { arcadia }) => {
+      const tenants = await listTenants(arcadia)
+      const byStatus: Record<string, number> = {}
+      for (const t of tenants) {
+        byStatus[t.status] = (byStatus[t.status] ?? 0) + 1
+      }
+      const byPlan: Record<string, number> = {}
+      for (const t of tenants) {
+        const plan = t.plan?.name ?? "(no plan)"
+        byPlan[plan] = (byPlan[plan] ?? 0) + 1
+      }
+      return {
+        tenants_total: tenants.length,
+        tenants_by_status: byStatus,
+        tenants_by_plan: byPlan,
+      }
+    },
+  },
+  {
+    name: "list_audit_log",
+    description:
+      "Recent audit log entries from the platform. Returns a terse summary per entry: actor_type, actor_id, action, target, inserted_at. Call this for 'who did what' questions or to investigate a recent change.",
+    parameters: {
+      type: "object",
+      properties: {
+        limit: {
+          type: "integer",
+          description: "Max entries to return (default 25, max 100).",
+          minimum: 1,
+          maximum: 100,
+        },
+      },
+      additionalProperties: false,
+    },
+    isWrite: false,
+    run: async (args, { arcadia }) => {
+      const limit = typeof args.limit === "number" ? Math.min(100, Math.max(1, args.limit)) : 25
+      const res = await arcadia.GET<{ data: AuditEntry[] }>(
+        `/api/v1/admin/audit-log?limit=${limit}`,
+      )
+      const entries = res.data ?? []
+      return entries.map((e) => ({
+        actor_type: e.actor_type,
+        actor_id: e.actor_id ?? null,
+        action: e.action,
+        target: e.target_type ? `${e.target_type}#${e.target_id ?? "?"}` : null,
+        inserted_at: e.inserted_at,
+      }))
+    },
+  },
+  {
+    name: "list_users",
+    description:
+      "List users in the currently-selected tenant context. Returns email, name, roles, status. Note: this is scoped to whichever tenant the assistant is currently logged into; use get_tenant first if you need to confirm which tenant.",
+    parameters: {
+      type: "object",
+      properties: {
+        limit: {
+          type: "integer",
+          description: "Max users to return (default 50, max 200).",
+          minimum: 1,
+          maximum: 200,
+        },
+      },
+      additionalProperties: false,
+    },
+    isWrite: false,
+    run: async (args, { arcadia }) => {
+      const limit = typeof args.limit === "number" ? Math.min(200, Math.max(1, args.limit)) : 50
+      const res = await arcadia.GET<{ data: UserEntry[] }>(`/api/v1/users?per_page=${limit}`)
+      const users = res.data ?? []
+      return users.map((u) => ({
+        id: u.id,
+        email: u.email,
+        name: [u.first_name, u.last_name].filter(Boolean).join(" ") || null,
+        roles: u.roles?.map((r) => r.slug ?? r.name).filter(Boolean) ?? [],
+        verified: u.email_verified ?? null,
+        inserted_at: u.inserted_at,
+      }))
+    },
+  },
+  {
+    name: "suspend_tenant",
+    description:
+      "Suspend a tenant by slug. Members can no longer sign in until reactivated. Use for temporary holds (overdue invoice, abuse investigation). REVERSIBLE via activate_tenant. Requires user confirmation before executing.",
+    parameters: {
+      type: "object",
+      properties: {
+        slug: { type: "string", description: "The tenant's slug." },
+      },
+      required: ["slug"],
+      additionalProperties: false,
+    },
+    isWrite: true,
+    run: async (args, { arcadia }) => {
+      const slug = typeof args.slug === "string" ? args.slug : null
+      if (!slug) throw new Error("suspend_tenant requires { slug }")
+      const tenants = await listTenants(arcadia)
+      const target = tenants.find((t) => t.slug === slug)
+      if (!target) throw new Error(`No tenant with slug "${slug}"`)
+      const updated = await suspendTenant(arcadia, target.id)
+      return summarize(updated)
+    },
+  },
+  {
+    name: "activate_tenant",
+    description:
+      "Re-activate a previously suspended (or deactivated) tenant by slug. Restores member sign-in. Requires user confirmation before executing.",
+    parameters: {
+      type: "object",
+      properties: {
+        slug: { type: "string", description: "The tenant's slug." },
+      },
+      required: ["slug"],
+      additionalProperties: false,
+    },
+    isWrite: true,
+    run: async (args, { arcadia }) => {
+      const slug = typeof args.slug === "string" ? args.slug : null
+      if (!slug) throw new Error("activate_tenant requires { slug }")
+      const tenants = await listTenants(arcadia)
+      const target = tenants.find((t) => t.slug === slug)
+      if (!target) throw new Error(`No tenant with slug "${slug}"`)
+      const updated = await activateTenant(arcadia, target.id)
+      return summarize(updated)
+    },
+  },
 ]
 
+interface AuditEntry {
+  actor_type: string
+  actor_id?: string
+  action: string
+  target_type?: string
+  target_id?: string
+  inserted_at: string
+}
+
+interface UserEntry {
+  id: string
+  email: string
+  first_name?: string
+  last_name?: string
+  email_verified?: boolean
+  inserted_at: string
+  roles?: { slug?: string; name?: string }[]
+}
+
 /** OpenAI-format tool list to pass into ChatRequest.tools. */
 export function getOpenAITools(): Tool[] {
   return TOOLS.map((t) => ({
@@ -89,6 +251,49 @@ export function getOpenAITools(): Tool[] {
   }))
 }
 
+/** Split an LLM tool-call list into reads (run automatically) and writes
+ *  (held for user confirmation). Unknown tools fall into reads so the runner
+ *  can surface a structured "unknown tool" error to the model. */
+export function classifyCalls(calls: LLMToolCall[]): {
+  reads: LLMToolCall[]
+  writes: LLMToolCall[]
+} {
+  const reads: LLMToolCall[] = []
+  const writes: LLMToolCall[] = []
+  for (const c of calls) {
+    const def = TOOL_BY_NAME.get(c.name)
+    if (def?.isWrite) writes.push(c)
+    else reads.push(c)
+  }
+  return { reads, writes }
+}
+
+/** Synthesise tool-result messages saying the user denied a write call. */
+export function buildDenialMessages(
+  calls: LLMToolCall[],
+): { role: "tool"; content: string; toolCallId: string; name: string }[] {
+  return calls.map((c) => ({
+    role: "tool",
+    content: JSON.stringify({
+      error: "User denied this write. Do not retry without re-asking the user.",
+    }),
+    toolCallId: c.id,
+    name: c.name,
+  }))
+}
+
+/** Pretty-print args for the confirm UI. */
+export function formatToolCallArgs(c: LLMToolCall): string {
+  try {
+    const parsed = c.arguments ? JSON.parse(c.arguments) : {}
+    const keys = Object.keys(parsed)
+    if (keys.length === 0) return ""
+    return keys.map((k) => `${k}=${JSON.stringify(parsed[k])}`).join(", ")
+  } catch {
+    return c.arguments
+  }
+}
+
 function summarize(t: Tenant) {
   return {
     id: t.id,

app/lib/arcadia-knowledge.ts

@@ -32,4 +32,4 @@ Things to keep in mind when assisting:
 - Quotas / rate cards / billing config errors usually surface as 402/403 from /api/v1 endpoints — diagnose by checking the tenant's billing-config and api-metering quotas.
 - The reference Phoenix app lives at \`reference/arcadia-app/\` in the workspace; its OpenAPI spec is at /api/openapi (sync via \`node ../lib-arcadia-client/scripts/sync-spec.mjs\`).
 
-When the user asks something that maps to a tool, call it. When they ask about a concept, explain it from this primer in plain language. When they ask to do something destructive, summarise the impact in one sentence and ask for confirmation before suggesting a tool call.`
+When the user asks something that maps to a tool, call it. When they ask about a concept, explain it from this primer in plain language. Write tools (suspend_tenant, activate_tenant) prompt the operator with an inline confirm card before they actually run — you do not need to ask in prose first; just call the tool and the user will see the confirmation UI. If the user denies a write, do not retry it; ask what they'd like to do differently.`