feat: implement chatbot service, active shift logic corrections, audit logs, and void transaction tool

.gitignore

@@ -33,3 +33,6 @@ trace.txt
 
 # TypeScript build info cache
 *.tsbuildinfo
+
+# Exported report files
+src/public/exports/

package-lock.json

@@ -9,11 +9,14 @@
       "version": "1.0.0",
       "dependencies": {
         "@prisma/client": "^5.19.0",
+        "@types/pdfkit": "^0.17.6",
         "bcryptjs": "^2.4.3",
         "cors": "^2.8.5",
         "dotenv": "^16.4.5",
         "express": "^4.21.0",
         "jsonwebtoken": "^9.0.2",
+        "openai": "^6.45.0",
+        "pdfkit": "^0.19.1",
         "zod": "^3.23.8"
       },
       "devDependencies": {
@@ -64,6 +67,28 @@
         "@jridgewell/sourcemap-codec": "^1.4.10"
       }
     },
+    "node_modules/@noble/ciphers": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/@noble/ciphers/-/ciphers-1.3.0.tgz",
+      "integrity": "sha512-2I0gnIVPtfnMw9ee9h1dJG7tp81+8Ob3OJb3Mv37rx5L40/b0i7djjCVvGOVqc9AEIQyvyu1i6ypKdFw8R8gQw==",
+      "engines": {
+        "node": "^14.21.3 || >=16"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      }
+    },
+    "node_modules/@noble/hashes": {
+      "version": "1.8.0",
+      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.8.0.tgz",
+      "integrity": "sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A==",
+      "engines": {
+        "node": "^14.21.3 || >=16"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      }
+    },
     "node_modules/@prisma/client": {
       "version": "5.22.0",
       "resolved": "https://registry.npmjs.org/@prisma/client/-/client-5.22.0.tgz",
@@ -126,6 +151,14 @@
         "@prisma/debug": "5.22.0"
       }
     },
+    "node_modules/@swc/helpers": {
+      "version": "0.5.23",
+      "resolved": "https://registry.npmjs.org/@swc/helpers/-/helpers-0.5.23.tgz",
+      "integrity": "sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw==",
+      "dependencies": {
+        "tslib": "^2.8.0"
+      }
+    },
     "node_modules/@tsconfig/node10": {
       "version": "1.0.12",
       "resolved": "https://registry.npmjs.org/@tsconfig/node10/-/node10-1.0.12.tgz",
@@ -240,11 +273,18 @@
       "version": "22.20.0",
       "resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.0.tgz",
       "integrity": "sha512-QWlFW2wf3nTjC13/DqRnBpR4ZO36VJH/JVBkA/vcnmbTBNQIlnObqyqZE1tUR7+Ni23Lda8R1BxMfbXRpCUx5g==",
-      "dev": true,
       "dependencies": {
         "undici-types": "~6.21.0"
       }
     },
+    "node_modules/@types/pdfkit": {
+      "version": "0.17.6",
+      "resolved": "https://registry.npmjs.org/@types/pdfkit/-/pdfkit-0.17.6.tgz",
+      "integrity": "sha512-tIwzxk2uWKp0Cq9JIluQXJid77lYhF52EsIOwhsMF4iWLA6YneoBR1xVKYYdAysHuepUB0OX4tdwMiUDdGKmig==",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
     "node_modules/@types/qs": {
       "version": "6.15.1",
       "resolved": "https://registry.npmjs.org/@types/qs/-/qs-6.15.1.tgz",
@@ -365,6 +405,25 @@
       "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
       "dev": true
     },
+    "node_modules/base64-js": {
+      "version": "1.5.1",
+      "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
+      "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ]
+    },
     "node_modules/bcryptjs": {
       "version": "2.4.3",
       "resolved": "https://registry.npmjs.org/bcryptjs/-/bcryptjs-2.4.3.tgz",
@@ -427,6 +486,22 @@
         "node": ">=8"
       }
     },
+    "node_modules/brotli": {
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/brotli/-/brotli-1.3.3.tgz",
+      "integrity": "sha512-oTKjJdShmDuGW94SyyaoQvAjf30dZaHnjJ8uAF+u2/vGJkJbJPJAT1gDiOJP5v1Zb6f9KEyW/1HpuaWIXtGHPg==",
+      "dependencies": {
+        "base64-js": "^1.1.2"
+      }
+    },
+    "node_modules/browserify-zlib": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/browserify-zlib/-/browserify-zlib-0.2.0.tgz",
+      "integrity": "sha512-Z942RysHXmJrhqk88FmKBVq/v5tqmSkDz7p54G/MGyjMnCFFnC79XWNbg+Vta8W6Wb2qtSZTSxIGkJrRpCFEiA==",
+      "dependencies": {
+        "pako": "~1.0.5"
+      }
+    },
     "node_modules/buffer-equal-constant-time": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz",
@@ -497,6 +572,14 @@
         "fsevents": "~2.3.2"
       }
     },
+    "node_modules/clone": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/clone/-/clone-2.1.2.tgz",
+      "integrity": "sha512-3Pe/CF1Nn94hyhIYpjtiLhdCoEoz0DqQ+988E9gmeEdQZlojxnOb74wctFyuwWQHzqyf9X7C7MG8juUpqBJT8w==",
+      "engines": {
+        "node": ">=0.8"
+      }
+    },
     "node_modules/concat-map": {
       "version": "0.0.1",
       "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
@@ -582,6 +665,11 @@
         "npm": "1.2.8000 || >= 1.4.16"
       }
     },
+    "node_modules/dfa": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/dfa/-/dfa-1.2.0.tgz",
+      "integrity": "sha512-ED3jP8saaweFTjeGX8HQPjeC1YYyZs98jGNZx6IiBvxW7JG5v492kamAQB3m2wop07CvU/RQmzcKr6bgcC5D/Q=="
+    },
     "node_modules/diff": {
       "version": "4.0.4",
       "resolved": "https://registry.npmjs.org/diff/-/diff-4.0.4.tgz",
@@ -730,6 +818,11 @@
         "url": "https://opencollective.com/express"
       }
     },
+    "node_modules/fast-deep-equal": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
+      "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q=="
+    },
     "node_modules/fill-range": {
       "version": "7.1.1",
       "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz",
@@ -759,6 +852,22 @@
         "node": ">= 0.8"
       }
     },
+    "node_modules/fontkit": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/fontkit/-/fontkit-2.0.4.tgz",
+      "integrity": "sha512-syetQadaUEDNdxdugga9CpEYVaQIxOwk7GlwZWWZ19//qW4zE5bknOKeMBDYAASwnpaSHKJITRLMF9m1fp3s6g==",
+      "dependencies": {
+        "@swc/helpers": "^0.5.12",
+        "brotli": "^1.3.2",
+        "clone": "^2.1.2",
+        "dfa": "^1.2.0",
+        "fast-deep-equal": "^3.1.3",
+        "restructure": "^3.0.0",
+        "tiny-inflate": "^1.0.3",
+        "unicode-properties": "^1.4.0",
+        "unicode-trie": "^2.0.0"
+      }
+    },
     "node_modules/forwarded": {
       "version": "0.2.0",
       "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
@@ -1015,6 +1124,11 @@
         "node": ">=0.12.0"
       }
     },
+    "node_modules/js-md5": {
+      "version": "0.8.3",
+      "resolved": "https://registry.npmjs.org/js-md5/-/js-md5-0.8.3.tgz",
+      "integrity": "sha512-qR0HB5uP6wCuRMrWPTrkMaev7MJZwJuuw4fnwAzRgP4J4/F8RwtodOKpGp4XpqsLBFzzgqIO42efFAyz2Et6KQ=="
+    },
     "node_modules/jsonwebtoken": {
       "version": "9.0.3",
       "resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.3.tgz",
@@ -1060,6 +1174,23 @@
         "safe-buffer": "^5.0.1"
       }
     },
+    "node_modules/linebreak": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/linebreak/-/linebreak-1.1.0.tgz",
+      "integrity": "sha512-MHp03UImeVhB7XZtjd0E4n6+3xr5Dq/9xI/5FptGk5FrbDR3zagPa2DS6U8ks/3HjbKWG9Q1M2ufOzxV2qLYSQ==",
+      "dependencies": {
+        "base64-js": "0.0.8",
+        "unicode-trie": "^2.0.0"
+      }
+    },
+    "node_modules/linebreak/node_modules/base64-js": {
+      "version": "0.0.8",
+      "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-0.0.8.tgz",
+      "integrity": "sha512-3XSA2cR/h/73EzlXXdU6YNycmYI7+kicTxks4eJg2g39biHR84slg2+des+p7iHYhbRg/udIS4TD53WabcOUkw==",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/lodash.includes": {
       "version": "4.3.0",
       "resolved": "https://registry.npmjs.org/lodash.includes/-/lodash.includes-4.3.0.tgz",
@@ -1257,6 +1388,40 @@
         "wrappy": "1"
       }
     },
+    "node_modules/openai": {
+      "version": "6.45.0",
+      "resolved": "https://registry.npmjs.org/openai/-/openai-6.45.0.tgz",
+      "integrity": "sha512-5DQVNErssk0afNpTTHUm/qZPU4iKR9OYdNid8Ib4puq4gHNNvGWZht2zY4h9a8JMF949Ik6m8gQutllVPbjdnw==",
+      "peerDependencies": {
+        "@aws-sdk/credential-provider-node": ">=3.972.0 <4",
+        "@smithy/hash-node": ">=4.3.0 <5",
+        "@smithy/signature-v4": ">=5.4.0 <6",
+        "ws": "^8.18.0",
+        "zod": "^3.25 || ^4.0"
+      },
+      "peerDependenciesMeta": {
+        "@aws-sdk/credential-provider-node": {
+          "optional": true
+        },
+        "@smithy/hash-node": {
+          "optional": true
+        },
+        "@smithy/signature-v4": {
+          "optional": true
+        },
+        "ws": {
+          "optional": true
+        },
+        "zod": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/pako": {
+      "version": "1.0.11",
+      "resolved": "https://registry.npmjs.org/pako/-/pako-1.0.11.tgz",
+      "integrity": "sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw=="
+    },
     "node_modules/parseurl": {
       "version": "1.3.3",
       "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
@@ -1285,6 +1450,19 @@
       "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz",
       "integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA=="
     },
+    "node_modules/pdfkit": {
+      "version": "0.19.1",
+      "resolved": "https://registry.npmjs.org/pdfkit/-/pdfkit-0.19.1.tgz",
+      "integrity": "sha512-6Gzk+wDwTs4VSxsR5rCMTnIl5nlmkye1oWB0l2hDB1EX6ZNSIBroKQEv+2+fPPn+stVjyqzmsqRJVDfB9fo5DA==",
+      "dependencies": {
+        "@noble/ciphers": "^1.0.0",
+        "@noble/hashes": "^1.6.0",
+        "fontkit": "^2.0.4",
+        "js-md5": "^0.8.3",
+        "linebreak": "^1.1.0",
+        "png-js": "^1.1.0"
+      }
+    },
     "node_modules/picomatch": {
       "version": "2.3.2",
       "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz",
@@ -1297,6 +1475,14 @@
         "url": "https://github.com/sponsors/jonschlinkert"
       }
     },
+    "node_modules/png-js": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/png-js/-/png-js-1.1.0.tgz",
+      "integrity": "sha512-PM/uYGzGdNSzqeOgly68+6wKQDL1SY0a/N+OEa/+br6LnHWOAJB0Npiamnodfq3jd2LS/i2fMeOKSAILjA+m5Q==",
+      "dependencies": {
+        "browserify-zlib": "^0.2.0"
+      }
+    },
     "node_modules/prisma": {
       "version": "5.22.0",
       "resolved": "https://registry.npmjs.org/prisma/-/prisma-5.22.0.tgz",
@@ -1398,6 +1584,11 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/restructure": {
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/restructure/-/restructure-3.0.2.tgz",
+      "integrity": "sha512-gSfoiOEA0VPE6Tukkrr7I0RBdE0s7H1eFCDBk05l1KIQT1UIKNc5JZy6jdyW6eYH3aR3g5b3PuL77rq0hvwtAw=="
+    },
     "node_modules/rimraf": {
       "version": "2.7.1",
       "resolved": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz",
@@ -1618,6 +1809,11 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/tiny-inflate": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/tiny-inflate/-/tiny-inflate-1.0.3.tgz",
+      "integrity": "sha512-pkY1fj1cKHb2seWDy0B16HeWyczlJA9/WW3u3c4z/NiWDsO3DOU5D7nhTLE9CF0yXv/QZFY7sEJmj24dK+Rrqw=="
+    },
     "node_modules/to-regex-range": {
       "version": "5.0.1",
       "resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz",
@@ -1736,6 +1932,11 @@
         "strip-json-comments": "^2.0.0"
       }
     },
+    "node_modules/tslib": {
+      "version": "2.8.1",
+      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
+      "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w=="
+    },
     "node_modules/type-is": {
       "version": "1.6.18",
       "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
@@ -1764,8 +1965,30 @@
     "node_modules/undici-types": {
       "version": "6.21.0",
       "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
-      "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
-      "dev": true
+      "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ=="
+    },
+    "node_modules/unicode-properties": {
+      "version": "1.4.1",
+      "resolved": "https://registry.npmjs.org/unicode-properties/-/unicode-properties-1.4.1.tgz",
+      "integrity": "sha512-CLjCCLQ6UuMxWnbIylkisbRj31qxHPAurvena/0iwSVbQ2G1VY5/HjV0IRabOEbDHlzZlRdCrD4NhB0JtU40Pg==",
+      "dependencies": {
+        "base64-js": "^1.3.0",
+        "unicode-trie": "^2.0.0"
+      }
+    },
+    "node_modules/unicode-trie": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/unicode-trie/-/unicode-trie-2.0.0.tgz",
+      "integrity": "sha512-x7bc76x0bm4prf1VLg79uhAzKw8DVboClSN5VxJuQ+LKDOVEW9CdH+VY7SP+vX7xCYQqzzgQpFqz15zeLvAtZQ==",
+      "dependencies": {
+        "pako": "^0.2.5",
+        "tiny-inflate": "^1.0.0"
+      }
+    },
+    "node_modules/unicode-trie/node_modules/pako": {
+      "version": "0.2.9",
+      "resolved": "https://registry.npmjs.org/pako/-/pako-0.2.9.tgz",
+      "integrity": "sha512-NUcwaKxUxWrZLpDG+z/xZaCgQITkA/Dv4V/T6bw7VON6l1Xz/VnrBqrYjZQ12TamKHzITTfOEIYUj48y2KXImA=="
     },
     "node_modules/unpipe": {
       "version": "1.0.0",

package.json

@@ -12,11 +12,14 @@
   },
   "dependencies": {
     "@prisma/client": "^5.19.0",
+    "@types/pdfkit": "^0.17.6",
     "bcryptjs": "^2.4.3",
     "cors": "^2.8.5",
     "dotenv": "^16.4.5",
     "express": "^4.21.0",
     "jsonwebtoken": "^9.0.2",
+    "openai": "^6.45.0",
+    "pdfkit": "^0.19.1",
     "zod": "^3.23.8"
   },
   "devDependencies": {

src/app.ts

@@ -1,14 +1,23 @@
 import express, { Application, Request, Response } from 'express';
 import cors from 'cors';
+import path from 'path';
+import fs from 'fs';
 import router from './routes';
 import { errorHandler } from './middlewares/error.middleware';
 
+// Pastikan direktori export ada
+const exportsDir = path.join(__dirname, '../public/exports');
+if (!fs.existsSync(exportsDir)) {
+  fs.mkdirSync(exportsDir, { recursive: true });
+}
+
 const app: Application = express();
 
 // Global Middleware
 app.use(cors());
 app.use(express.json({ limit: '50mb' })); // Allow larger payloads (useful for base64 images)
 app.use(express.urlencoded({ extended: true, limit: '50mb' }));
+app.use('/exports', express.static(path.join(__dirname, '../public/exports')));
 
 // Routing API
 app.use('/api', router);

src/controllers/bon.controller.ts

@@ -2,6 +2,7 @@ import { Request, Response, NextFunction } from 'express';
 import { BonService } from '../services/bon.service';
 import { sukses } from '../utils/response';
 import { AuthenticatedRequest } from '../middlewares/auth.middleware';
+import prisma from '../utils/db';
 
 export class BonController {
   static async list(req: Request, res: Response, next: NextFunction) {
@@ -60,4 +61,58 @@ export class BonController {
       next(error);
     }
   }
+
+  static async listInstallments(req: Request, res: Response, next: NextFunction) {
+    try {
+      const skip = parseInt(req.query.skip as string) || 0;
+      const limit = parseInt(req.query.limit as string) || 20;
+
+      const installments = await prisma.bon_cicilan.findMany({
+        orderBy: { created_at: 'desc' },
+        skip,
+        take: limit,
+        include: {
+          bon: {
+            include: {
+              member: true,
+            },
+          },
+        },
+      });
+
+      const formatted = installments.map((ins) => ({
+        tanggal: ins.created_at.toISOString().replace('T', ' ').slice(0, 16),
+        nama: ins.bon.member.nama,
+        nominal: Number(ins.nominal),
+        metode: ins.metode,
+      }));
+
+      return sukses(res, formatted, 'Daftar cicilan berhasil dimuat');
+    } catch (error) {
+      next(error);
+    }
+  }
+
+  static async payByMemberId(req: AuthenticatedRequest, res: Response, next: NextFunction) {
+    try {
+      const memberId = parseInt(req.params.memberId);
+      const actorId = req.user.id;
+      const ip = (req.ip || req.socket.remoteAddress || 'unknown').replace('::ffff:', '');
+      const userAgent = (req.headers['user-agent'] || 'unknown') as string;
+
+      const { nominal, metode } = req.body;
+      const bon = await BonService.bayarCicilanByMemberId({
+        memberId,
+        nominal,
+        metode,
+        actorId,
+        ip,
+        userAgent,
+      });
+
+      return sukses(res, bon, 'Cicilan kasbon berhasil dibayarkan');
+    } catch (error) {
+      next(error);
+    }
+  }
 }

src/controllers/chatbot.controller.ts

@@ -0,0 +1,92 @@
+/**
+ * chatbot.controller.ts
+ * Endpoint handlers untuk chatbot API.
+ */
+
+import { Response, NextFunction } from 'express';
+import { ChatbotService } from '../services/chatbot.service';
+import { sukses, gagal } from '../utils/response';
+import { AuthenticatedRequest } from '../middlewares/auth.middleware';
+
+export class ChatbotController {
+  /**
+   * POST /api/chatbot/pesan
+   * Kirim pesan ke chatbot dan dapatkan jawaban.
+   */
+  static async kirimPesan(req: AuthenticatedRequest, res: Response, next: NextFunction) {
+    try {
+      const { pesan } = req.body;
+
+      if (!pesan || typeof pesan !== 'string' || pesan.trim().length === 0) {
+        return gagal(res, 400, 'Pesan tidak boleh kosong');
+      }
+
+      if (pesan.length > 1000) {
+        return gagal(res, 400, 'Pesan terlalu panjang (maks 1000 karakter)');
+      }
+
+      const user = req.user;
+      const ip = (req.ip || req.socket.remoteAddress || 'unknown').replace('::ffff:', '');
+      const userAgent = (req.headers['user-agent'] || 'unknown') as string;
+
+      const result = await ChatbotService.kirimPesan(
+        { id: user.id, nama: user.nama, role: user.role },
+        pesan.trim(),
+        ip,
+        userAgent
+      );
+
+      return sukses(res, result, 'Pesan berhasil diproses');
+    } catch (error) {
+      next(error);
+    }
+  }
+
+  /**
+   * POST /api/chatbot/konfirmasi
+   * Konfirmasi atau batalkan aksi pending.
+   */
+  static async konfirmasiAksi(req: AuthenticatedRequest, res: Response, next: NextFunction) {
+    try {
+      const { aksiId, setuju } = req.body;
+
+      if (!aksiId || typeof aksiId !== 'string') {
+        return gagal(res, 400, 'ID aksi tidak valid');
+      }
+
+      if (typeof setuju !== 'boolean') {
+        return gagal(res, 400, 'Parameter "setuju" harus boolean (true/false)');
+      }
+
+      const user = req.user;
+      const ip = (req.ip || req.socket.remoteAddress || 'unknown').replace('::ffff:', '');
+      const userAgent = (req.headers['user-agent'] || 'unknown') as string;
+
+      const result = await ChatbotService.konfirmasiAksi(
+        aksiId,
+        setuju,
+        { id: user.id, nama: user.nama, role: user.role },
+        ip,
+        userAgent
+      );
+
+      return sukses(res, result, setuju ? 'Aksi berhasil dikonfirmasi' : 'Aksi dibatalkan');
+    } catch (error) {
+      next(error);
+    }
+  }
+
+  /**
+   * DELETE /api/chatbot/riwayat
+   * Hapus riwayat chat session user.
+   */
+  static async hapusRiwayat(req: AuthenticatedRequest, res: Response, next: NextFunction) {
+    try {
+      const user = req.user;
+      ChatbotService.hapusRiwayat(user.id);
+      return sukses(res, null, 'Riwayat chat berhasil dihapus');
+    } catch (error) {
+      next(error);
+    }
+  }
+}

src/controllers/diskon.controller.ts

@@ -0,0 +1,199 @@
+/**
+ * diskon.controller.ts
+ * Controller untuk mengelola data diskon & promosi (CRUD).
+ */
+
+import { Request, Response, NextFunction } from 'express';
+import prisma from '../utils/db';
+import { sukses, gagal } from '../utils/response';
+import { AuthenticatedRequest } from '../middlewares/auth.middleware';
+import { catatAudit } from '../utils/audit';
+
+export class DiskonController {
+  static async list(req: Request, res: Response, next: NextFunction) {
+    try {
+      const skip = parseInt(req.query.skip as string) || 0;
+      const limit = parseInt(req.query.limit as string) || 100;
+      const pencarian = req.query.pencarian as string || undefined;
+
+      const where: any = {};
+      if (pencarian) {
+        where.nama = {
+          contains: pencarian,
+        };
+      }
+
+      const total = await prisma.diskon.count({ where });
+      const promos = await prisma.diskon.findMany({
+        where,
+        skip,
+        take: limit,
+        orderBy: { created_at: 'desc' },
+      });
+
+      return sukses(res, promos, 'Daftar promosi berhasil dimuat', { total });
+    } catch (error) {
+      next(error);
+    }
+  }
+
+  static async get(req: Request, res: Response, next: NextFunction) {
+    try {
+      const id = parseInt(req.params.id);
+      const promo = await prisma.diskon.findUnique({
+        where: { id },
+      });
+
+      if (!promo) {
+        return gagal(res, 404, 'Promosi tidak ditemukan');
+      }
+
+      return sukses(res, promo, 'Detail promosi berhasil dimuat');
+    } catch (error) {
+      next(error);
+    }
+  }
+
+  static async create(req: AuthenticatedRequest, res: Response, next: NextFunction) {
+    try {
+      const actorId = req.user.id;
+      const ip = (req.ip || req.socket.remoteAddress || 'unknown').replace('::ffff:', '');
+      const userAgent = (req.headers['user-agent'] || 'unknown') as string;
+
+      const {
+        nama,
+        tipe,
+        nilai,
+        min_belanja,
+        produk_ids,
+        member_only,
+        tgl_mulai,
+        tgl_selesai,
+        jam_mulai,
+        jam_selesai,
+        is_aktif,
+      } = req.body;
+
+      const promo = await prisma.diskon.create({
+        data: {
+          nama,
+          tipe,
+          nilai: Number(nilai),
+          min_belanja: min_belanja !== undefined ? Number(min_belanja) : 0,
+          produk_ids: produk_ids || null,
+          member_only: member_only !== undefined ? Number(member_only) : 0,
+          tgl_mulai: new Date(tgl_mulai),
+          tgl_selesai: new Date(tgl_selesai),
+          jam_mulai: jam_mulai ? new Date(`1970-01-01T${jam_mulai}`) : null,
+          jam_selesai: jam_selesai ? new Date(`1970-01-01T${jam_selesai}`) : null,
+          is_aktif: is_aktif !== undefined ? Number(is_aktif) : 1,
+        },
+      });
+
+      await catatAudit({
+        userId: actorId,
+        aksi: 'create',
+        entitas: 'diskon',
+        entitasId: promo.id,
+        dataBaru: { nama: promo.nama, tipe: promo.tipe, nilai: Number(promo.nilai) },
+        ipAddress: ip,
+        userAgent,
+      });
+
+      return sukses(res, promo, 'Promosi berhasil dibuat');
+    } catch (error) {
+      next(error);
+    }
+  }
+
+  static async update(req: AuthenticatedRequest, res: Response, next: NextFunction) {
+    try {
+      const id = parseInt(req.params.id);
+      const actorId = req.user.id;
+      const ip = (req.ip || req.socket.remoteAddress || 'unknown').replace('::ffff:', '');
+      const userAgent = (req.headers['user-agent'] || 'unknown') as string;
+
+      const existing = await prisma.diskon.findUnique({ where: { id } });
+      if (!existing) {
+        return gagal(res, 404, 'Promosi tidak ditemukan');
+      }
+
+      const {
+        nama,
+        tipe,
+        nilai,
+        min_belanja,
+        produk_ids,
+        member_only,
+        tgl_mulai,
+        tgl_selesai,
+        jam_mulai,
+        jam_selesai,
+        is_aktif,
+      } = req.body;
+
+      const promo = await prisma.diskon.update({
+        where: { id },
+        data: {
+          nama: nama !== undefined ? nama : undefined,
+          tipe: tipe !== undefined ? tipe : undefined,
+          nilai: nilai !== undefined ? Number(nilai) : undefined,
+          min_belanja: min_belanja !== undefined ? Number(min_belanja) : undefined,
+          produk_ids: produk_ids !== undefined ? produk_ids : undefined,
+          member_only: member_only !== undefined ? Number(member_only) : undefined,
+          tgl_mulai: tgl_mulai !== undefined ? new Date(tgl_mulai) : undefined,
+          tgl_selesai: tgl_selesai !== undefined ? new Date(tgl_selesai) : undefined,
+          jam_mulai: jam_mulai !== undefined ? (jam_mulai ? new Date(`1970-01-01T${jam_mulai}`) : null) : undefined,
+          jam_selesai: jam_selesai !== undefined ? (jam_selesai ? new Date(`1970-01-01T${jam_selesai}`) : null) : undefined,
+          is_aktif: is_aktif !== undefined ? Number(is_aktif) : undefined,
+        },
+      });
+
+      await catatAudit({
+        userId: actorId,
+        aksi: 'update',
+        entitas: 'diskon',
+        entitasId: promo.id,
+        dataLama: { nama: existing.nama, tipe: existing.tipe, nilai: Number(existing.nilai) },
+        dataBaru: { nama: promo.nama, tipe: promo.tipe, nilai: Number(promo.nilai) },
+        ipAddress: ip,
+        userAgent,
+      });
+
+      return sukses(res, promo, 'Promosi berhasil diperbarui');
+    } catch (error) {
+      next(error);
+    }
+  }
+
+  static async delete(req: AuthenticatedRequest, res: Response, next: NextFunction) {
+    try {
+      const id = parseInt(req.params.id);
+      const actorId = req.user.id;
+      const ip = (req.ip || req.socket.remoteAddress || 'unknown').replace('::ffff:', '');
+      const userAgent = (req.headers['user-agent'] || 'unknown') as string;
+
+      const existing = await prisma.diskon.findUnique({ where: { id } });
+      if (!existing) {
+        return gagal(res, 404, 'Promosi tidak ditemukan');
+      }
+
+      await prisma.diskon.delete({ where: { id } });
+
+      await catatAudit({
+        userId: actorId,
+        aksi: 'delete',
+        entitas: 'diskon',
+        entitasId: id,
+        dataLama: { nama: existing.nama, tipe: existing.tipe, nilai: Number(existing.nilai) },
+        dataBaru: { deleted: true },
+        ipAddress: ip,
+        userAgent,
+      });
+
+      return sukses(res, null, 'Promosi berhasil dihapus');
+    } catch (error) {
+      next(error);
+    }
+  }
+}

src/controllers/ops.controller.ts

@@ -80,6 +80,33 @@ export class OpsController {
     }
   }
 
+  static async eksporLaporan(req: AuthenticatedRequest, res: Response, next: NextFunction) {
+    try {
+      const jenis = req.query.jenis as any;
+      const format = req.query.format as any;
+      const tglMulai = new Date(req.query.tgl_mulai as string);
+      const tglSelesai = new Date(req.query.tgl_selesai as string);
+
+      if (!['penjualan', 'laba-rugi', 'mutasi-stok'].includes(jenis)) {
+        throw new Error('Jenis laporan tidak valid');
+      }
+      if (!['csv', 'excel', 'pdf'].includes(format)) {
+        throw new Error('Format laporan tidak valid. Harus csv, excel, atau pdf');
+      }
+
+      const fileInfo = await OpsService.eksporLaporan({
+        jenis,
+        format,
+        tglMulai,
+        tglSelesai,
+      });
+
+      return sukses(res, fileInfo, 'Laporan berhasil diekspor');
+    } catch (error: any) {
+      res.status(400).json({ sukses: false, pesan: error.message || 'Gagal mengekspor laporan' });
+    }
+  }
+
   // Settings/Pengaturan
   static async getSettings(req: Request, res: Response, next: NextFunction) {
     try {

src/routes/bon.route.ts

@@ -6,11 +6,13 @@ import { bayarBonSchema } from '../schemas/bon.schema';
 
 const bonRouter = Router();
 
-// Rute Publik
+// Rute Publik/Dinamis
+bonRouter.get('/cicilan/terakhir', authenticate, BonController.listInstallments);
 bonRouter.get('/', BonController.list);
 bonRouter.get('/:id', BonController.get);
 
 // Rute Terproteksi Token
+bonRouter.post('/member/:memberId/bayar', authenticate, validate(bayarBonSchema), BonController.payByMemberId);
 bonRouter.post('/:id/bayar', authenticate, validate(bayarBonSchema), BonController.payInstallment);
 bonRouter.post('/:id/reminder', authenticate, BonController.sendDebtReminder);
 

src/routes/chatbot.route.ts

@@ -0,0 +1,25 @@
+/**
+ * chatbot.route.ts
+ * Route definitions untuk chatbot API.
+ * Semua endpoint memerlukan autentikasi (login).
+ */
+
+import { Router } from 'express';
+import { ChatbotController } from '../controllers/chatbot.controller';
+import { authenticate } from '../middlewares/auth.middleware';
+
+const router = Router();
+
+// Semua route chatbot butuh autentikasi
+router.use(authenticate);
+
+// POST /api/chatbot/pesan — Kirim pesan ke chatbot
+router.post('/pesan', ChatbotController.kirimPesan);
+
+// POST /api/chatbot/konfirmasi — Konfirmasi/batalkan aksi pending
+router.post('/konfirmasi', ChatbotController.konfirmasiAksi);
+
+// DELETE /api/chatbot/riwayat — Hapus riwayat chat
+router.delete('/riwayat', ChatbotController.hapusRiwayat);
+
+export default router;

src/routes/diskon.route.ts

@@ -0,0 +1,21 @@
+/**
+ * diskon.route.ts
+ * Route definitions untuk diskon API.
+ */
+
+import { Router } from 'express';
+import { DiskonController } from '../controllers/diskon.controller';
+import { authenticate } from '../middlewares/auth.middleware';
+
+const router = Router();
+
+// Rute Publik (bisa diakses kasir/member)
+router.get('/', authenticate, DiskonController.list);
+router.get('/:id', authenticate, DiskonController.get);
+
+// Rute Admin (hanya admin yang bisa mengubah data diskon)
+router.post('/', authenticate, DiskonController.create);
+router.put('/:id', authenticate, DiskonController.update);
+router.delete('/:id', authenticate, DiskonController.delete);
+
+export default router;

src/routes/index.ts

@@ -10,6 +10,8 @@ import stokRouter from './stok.route';
 import bonRouter from './bon.route';
 import transaksiRouter from './transaksi.route';
 import opsRouter from './ops.route';
+import chatbotRouter from './chatbot.route';
+import diskonRouter from './diskon.route';
 
 const router = Router();
 
@@ -23,6 +25,8 @@ router.use('/produk', produkRouter);
 router.use('/stok', stokRouter);
 router.use('/bon', bonRouter);
 router.use('/transaksi', transaksiRouter);
+router.use('/chatbot', chatbotRouter);
+router.use('/diskon', diskonRouter);
 router.use('/', opsRouter);
 
 export default router;

src/routes/ops.route.ts

@@ -15,6 +15,7 @@ opsRouter.post('/shift/tutup', authenticate, validate(tutupShiftSchema), OpsCont
 opsRouter.get('/dashboard/summary', authenticate, OpsController.getDashboardSummary);
 opsRouter.get('/laporan/penjualan', authenticate, validate(laporanQuerySchema), OpsController.getSalesReport);
 opsRouter.get('/laporan/laba', authenticate, validate(laporanQuerySchema), OpsController.getProfitLossReport);
+opsRouter.get('/laporan/ekspor', authenticate, OpsController.eksporLaporan);
 
 // ================= SETTINGS =================
 opsRouter.get('/pengaturan', OpsController.getSettings);

src/services/bon.service.ts

@@ -185,4 +185,39 @@ export class BonService {
 
     return waLink;
   }
+
+  static async bayarCicilanByMemberId(params: {
+    memberId: number;
+    nominal: number;
+    metode: 'tunai' | 'transfer';
+    actorId: number;
+    ip: string;
+    userAgent: string;
+  }) {
+    const { memberId, nominal, metode, actorId, ip, userAgent } = params;
+
+    // Cari bon teraktif milik member
+    const bon = await prisma.bon.findFirst({
+      where: {
+        member_id: memberId,
+        status: 'aktif',
+      },
+      orderBy: {
+        created_at: 'asc', // bayar dari bon paling lama terutang
+      },
+    });
+
+    if (!bon) {
+      throw new APIError('Tidak ada pencatatan kasbon aktif untuk member ini.', 404);
+    }
+
+    return await this.bayarCicilan({
+      bonId: bon.id,
+      nominal,
+      metode,
+      actorId,
+      ip,
+      userAgent,
+    });
+  }
 }

src/services/chatbot.service.ts

@@ -0,0 +1,406 @@
+/**
+ * chatbot.service.ts
+ * Logic utama chatbot — mengelola conversation, tool execution, dan confirmation flow.
+ */
+
+import { chatCompletion, type PesanChat } from '../utils/ai-client';
+import { bangunSystemPrompt } from '../utils/chatbot-context';
+import { TOOL_HANDLERS, getToolsForRole } from '../utils/chatbot-tools';
+
+// ═══════════════════════════════════
+// TYPES
+// ═══════════════════════════════════
+
+interface UserInfo {
+  id: number;
+  nama: string;
+  role: string;
+}
+
+interface PendingAction {
+  toolName: string;
+  params: any;
+  userId: number;
+  preview: string;
+  createdAt: Date;
+}
+
+interface ChatbotResponse {
+  balasan: string;
+  konfirmasi?: {
+    aksiId: string;
+    preview: string;
+    toolName: string;
+  };
+}
+
+// ═══════════════════════════════════
+// IN-MEMORY STORES
+// ═══════════════════════════════════
+
+// Conversation history per user (max 20 messages)
+const conversationStore = new Map<number, PesanChat[]>();
+const MAX_HISTORY = 20;
+
+// Pending confirmations per user
+const pendingActions = new Map<string, PendingAction>();
+
+// ═══════════════════════════════════
+// HELPERS
+// ═══════════════════════════════════
+
+function getConversation(userId: number): PesanChat[] {
+  return conversationStore.get(userId) || [];
+}
+
+function addToConversation(userId: number, message: PesanChat) {
+  const history = getConversation(userId);
+  history.push(message);
+  // Trim to max history (keep system prompt if exists)
+  if (history.length > MAX_HISTORY) {
+    history.splice(0, history.length - MAX_HISTORY);
+  }
+  conversationStore.set(userId, history);
+}
+
+function generateAksiId(): string {
+  return `aksi_${Date.now()}_${Math.random().toString(36).substring(2, 8)}`;
+}
+
+// ═══════════════════════════════════
+// MAIN SERVICE
+// ═══════════════════════════════════
+
+export class ChatbotService {
+  /**
+   * Proses pesan dari user dan dapatkan jawaban AI.
+   */
+  static async kirimPesan(
+    user: UserInfo,
+    pesan: string,
+    ip: string,
+    userAgent: string
+  ): Promise<ChatbotResponse> {
+    // 1. Bangun system prompt dengan konteks toko
+    const systemPrompt = await bangunSystemPrompt(user.nama, user.role);
+
+    // 2. Siapkan messages
+    const history = getConversation(user.id);
+    
+    const messages: PesanChat[] = [
+      { role: 'system', content: systemPrompt },
+      ...history,
+      { role: 'user', content: pesan },
+    ];
+
+    // 3. Simpan pesan user ke history
+    addToConversation(user.id, { role: 'user', content: pesan });
+
+    // 4. Ambil tools berdasarkan role
+    const tools = getToolsForRole(user.role);
+
+    // 5. Kirim ke AI
+    try {
+      const result = await chatCompletion(messages, tools);
+
+      // 6. Jika AI mau panggil tool
+      if (result.tool_calls && result.tool_calls.length > 0) {
+        return await this.handleToolCalls(result, messages, user, ip, userAgent);
+      }
+
+      // 7. Jika jawaban langsung (text)
+      const balasan = result.balasan || 'Maaf, saya tidak bisa merespons saat ini. Coba lagi nanti.';
+      addToConversation(user.id, { role: 'assistant', content: balasan });
+
+      return { balasan };
+    } catch (err: any) {
+      console.error('Chatbot AI Error:', err);
+      const errorMsg = 'Maaf, terjadi gangguan pada sistem AI. Silakan coba lagi dalam beberapa saat. 🔄';
+      addToConversation(user.id, { role: 'assistant', content: errorMsg });
+      return { balasan: errorMsg };
+    }
+  }
+
+  /**
+   * Handle tool calls dari AI response.
+   */
+  private static async handleToolCalls(
+    aiResult: any,
+    messages: PesanChat[],
+    user: UserInfo,
+    ip: string,
+    userAgent: string
+  ): Promise<ChatbotResponse> {
+    const toolCall = aiResult.tool_calls![0]; // Handle satu tool call pertama
+    const handler = TOOL_HANDLERS[toolCall.nama];
+
+    if (!handler) {
+      const balasan = `Tool "${toolCall.nama}" tidak ditemukan.`;
+      addToConversation(user.id, { role: 'assistant', content: balasan });
+      return { balasan };
+    }
+
+    // Cek akses admin
+    if (handler.adminOnly && user.role !== 'admin') {
+      const balasan = `Maaf, fitur ini hanya bisa diakses oleh admin. Silakan hubungi admin toko Anda. 🔒`;
+      addToConversation(user.id, { role: 'assistant', content: balasan });
+      return { balasan };
+    }
+
+    // Jika butuh konfirmasi → return preview dulu
+    if (handler.butuhKonfirmasi) {
+      const aksiId = generateAksiId();
+      
+      // Buat preview text
+      const preview = this.buildPreview(toolCall.nama, toolCall.argumen);
+
+      pendingActions.set(aksiId, {
+        toolName: toolCall.nama,
+        params: toolCall.argumen,
+        userId: user.id,
+        preview,
+        createdAt: new Date(),
+      });
+
+      // Auto-expire after 5 minutes
+      setTimeout(() => pendingActions.delete(aksiId), 5 * 60 * 1000);
+
+      const balasan = `${preview}\n\nKonfirmasi aksi di atas?`;
+      addToConversation(user.id, { role: 'assistant', content: balasan });
+
+      return {
+        balasan,
+        konfirmasi: {
+          aksiId,
+          preview,
+          toolName: toolCall.nama,
+        },
+      };
+    }
+
+    // Tidak butuh konfirmasi → eksekusi langsung
+    return await this.executeToolAndRespond(toolCall, messages, user, ip, userAgent);
+  }
+
+  /**
+   * Eksekusi tool dan dapatkan response final dari AI.
+   */
+  private static async executeToolAndRespond(
+    toolCall: any,
+    messages: PesanChat[],
+    user: UserInfo,
+    ip: string,
+    userAgent: string
+  ): Promise<ChatbotResponse> {
+    const handler = TOOL_HANDLERS[toolCall.nama];
+    
+    // Eksekusi tool
+    let toolResult: string;
+    try {
+      toolResult = await handler.handler(toolCall.argumen, user.id, ip, userAgent);
+    } catch (err: any) {
+      toolResult = `Error saat menjalankan tool: ${err.message}`;
+    }
+
+    // Kirim hasil tool ke AI untuk format jawaban
+    const updatedMessages: PesanChat[] = [
+      ...messages,
+      {
+        role: 'assistant',
+        content: null as any,
+        tool_calls: [
+          {
+            id: toolCall.id,
+            type: 'function',
+            function: {
+              name: toolCall.nama,
+              arguments: JSON.stringify(toolCall.argumen),
+            },
+          },
+        ],
+      },
+      {
+        role: 'tool',
+        content: toolResult,
+        tool_call_id: toolCall.id,
+      },
+    ];
+
+    try {
+      const finalResult = await chatCompletion(updatedMessages);
+      const balasan = finalResult.balasan || toolResult;
+      addToConversation(user.id, { role: 'assistant', content: balasan });
+      return { balasan };
+    } catch (err) {
+      // Fallback: return tool result directly
+      addToConversation(user.id, { role: 'assistant', content: toolResult });
+      return { balasan: toolResult };
+    }
+  }
+
+  /**
+   * Konfirmasi dan eksekusi aksi pending.
+   */
+  static async konfirmasiAksi(
+    aksiId: string,
+    setuju: boolean,
+    user: UserInfo,
+    ip: string,
+    userAgent: string
+  ): Promise<ChatbotResponse> {
+    const action = pendingActions.get(aksiId);
+    
+    if (!action) {
+      return { balasan: 'Aksi ini sudah kedaluwarsa atau tidak valid. Silakan ulangi permintaan. ⏰' };
+    }
+
+    if (action.userId !== user.id) {
+      return { balasan: 'Anda tidak memiliki akses ke aksi ini. 🔒' };
+    }
+
+    // Hapus pending action
+    pendingActions.delete(aksiId);
+
+    if (!setuju) {
+      const balasan = 'Aksi dibatalkan. ❌ Ada yang lain yang bisa saya bantu?';
+      addToConversation(user.id, { role: 'assistant', content: balasan });
+      return { balasan };
+    }
+
+    // Eksekusi tool
+    const handler = TOOL_HANDLERS[action.toolName];
+    if (!handler) {
+      return { balasan: 'Tool tidak ditemukan. Silakan ulangi permintaan.' };
+    }
+
+    try {
+      const result = await handler.handler(action.params, user.id, ip, userAgent);
+      const balasan = `✅ ${result}`;
+      addToConversation(user.id, { role: 'assistant', content: balasan });
+      return { balasan };
+    } catch (err: any) {
+      const balasan = `❌ Gagal mengeksekusi aksi: ${err.message}`;
+      addToConversation(user.id, { role: 'assistant', content: balasan });
+      return { balasan };
+    }
+  }
+
+  /**
+   * Hapus riwayat chat user.
+   */
+  static hapusRiwayat(userId: number): void {
+    conversationStore.delete(userId);
+    // Hapus pending actions user
+    for (const [key, action] of pendingActions) {
+      if (action.userId === userId) {
+        pendingActions.delete(key);
+      }
+    }
+  }
+
+  /**
+   * Build preview text untuk konfirmasi.
+   */
+  private static buildPreview(toolName: string, params: any): string {
+    const formatRupiah = (n: number) => 'Rp ' + n.toLocaleString('id-ID');
+
+    switch (toolName) {
+      case 'tambah_produk':
+        return [
+          '📦 Menambahkan produk baru:',
+          `  • Nama: ${params.nama}`,
+          `  • Harga Jual: ${formatRupiah(params.harga_jual)}`,
+          `  • Harga Beli: ${formatRupiah(params.harga_beli)}`,
+          `  • Kategori ID: ${params.kategori_id}`,
+          `  • Satuan: ${params.satuan || 'pcs'}`,
+          params.stok ? `  • Stok Awal: ${params.stok}` : '',
+        ].filter(Boolean).join('\n');
+
+      case 'update_produk':
+        const fields = Object.entries(params)
+          .filter(([k, v]) => k !== 'id' && v !== undefined)
+          .map(([k, v]) => `  • ${k}: ${typeof v === 'number' && k.includes('harga') ? formatRupiah(v as number) : v}`);
+        return [
+          `✏️ Mengupdate produk ID ${params.id}:`,
+          ...fields,
+        ].join('\n');
+
+      case 'hapus_produk':
+        return `🗑️ Menghapus produk dengan ID ${params.id}`;
+
+      case 'void_transaksi':
+        return `⚠️ Membatalkan (void) Transaksi: ${params.no_transaksi || `ID ${params.id}`}\n  • Alasan: ${params.alasan}`;
+
+      case 'tambah_stok_masuk':
+        return [
+          '📥 Menambah stok masuk:',
+          `  • Produk: ${params.nama_produk || `ID ${params.produk_id}`}`,
+          `  • Qty: ${params.qty}`,
+          `  • Harga Beli: ${formatRupiah(params.harga_beli)}`,
+          params.catatan ? `  • Catatan: ${params.catatan}` : '',
+        ].filter(Boolean).join('\n');
+
+      case 'tambah_member':
+        return [
+          '👤 Mendaftarkan member baru:',
+          `  • Nama: ${params.nama}`,
+          `  • HP: ${params.nomor_hp}`,
+          params.alamat ? `  • Alamat: ${params.alamat}` : '',
+          `  • Limit Bon: ${formatRupiah(params.limit_bon || 0)}`,
+        ].filter(Boolean).join('\n');
+
+      case 'tambah_supplier':
+        return [
+          '🚚 Menambah supplier baru:',
+          `  • Nama: ${params.nama}`,
+          params.kontak ? `  • Kontak: ${params.kontak}` : '',
+          params.nomor_hp ? `  • HP: ${params.nomor_hp}` : '',
+        ].filter(Boolean).join('\n');
+
+      case 'tambah_kategori':
+        return [
+          '📂 Menambah kategori baru:',
+          `  • Nama: ${params.nama}`,
+          params.icon ? `  • Icon: ${params.icon}` : '',
+        ].filter(Boolean).join('\n');
+
+      case 'update_kategori':
+        const katFields = Object.entries(params)
+          .filter(([k, v]) => k !== 'id' && v !== undefined)
+          .map(([k, v]) => `  • ${k}: ${v}`);
+        return [
+          `✏️ Mengupdate kategori ID ${params.id}:`,
+          ...katFields,
+        ].join('\n');
+
+      case 'hapus_kategori':
+        return `🗑️ Menghapus kategori produk: ${params.nama || `ID ${params.id}`}`;
+
+      case 'tambah_diskon':
+        return [
+          '🏷️ Membuat promosi diskon baru:',
+          `  • Nama: ${params.nama}`,
+          `  • Tipe: ${params.tipe}`,
+          `  • Nilai: ${params.nilai}`,
+          `  • Min Belanja: ${formatRupiah(params.min_belanja || 0)}`,
+          `  • Berlaku: ${params.tgl_mulai} s/d ${params.tgl_selesai}`,
+          `  • Khusus Member: ${params.member_only === 1 ? 'Ya' : 'Tidak'}`,
+        ].join('\n');
+
+      case 'update_diskon':
+        const discFields = Object.entries(params)
+          .filter(([k, v]) => k !== 'id' && v !== undefined)
+          .map(([k, v]) => `  • ${k}: ${k === 'nilai' || k === 'min_belanja' ? formatRupiah(Number(v)) : v}`);
+        return [
+          `✏️ Mengupdate diskon ID ${params.id}:`,
+          ...discFields,
+        ].join('\n');
+
+      case 'hapus_diskon':
+        return `🗑️ Menghapus promosi diskon dengan ID ${params.id}`;
+
+      default:
+        return `Menjalankan aksi: ${toolName} dengan parameter: ${JSON.stringify(params)}`;
+    }
+  }
+}

src/services/ops.service.ts

@@ -2,6 +2,10 @@ import prisma from '../utils/db';
 import { catatAudit } from '../utils/audit';
 import { generateKodeShift } from '../utils/kodeGenerator';
 import { APIError } from '../utils/errors';
+import fs from 'fs';
+import path from 'path';
+import PDFDocument from 'pdfkit';
+import { uploadBufferToSupabase } from '../utils/supabase';
 
 export class OpsService {
   static async getActiveShift(userId: number) {
@@ -255,6 +259,41 @@ export class OpsService {
       });
     }
 
+    // 7. Top 5 Produk Terlaris (7 hari terakhir)
+    const tujuhHariLalu = new Date();
+    tujuhHariLalu.setDate(tujuhHariLalu.getDate() - 7);
+    tujuhHariLalu.setHours(0, 0, 0, 0);
+
+    const terlarisRaw = await prisma.$queryRaw<any[]>`
+      SELECT td.nama_produk as nama, SUM(td.qty) as terjual
+      FROM transaksi_detail td
+      JOIN transaksi t ON t.id = td.transaksi_id
+      WHERE t.deleted_at IS NULL AND t.status != 'void' AND t.tanggal >= ${tujuhHariLalu}
+      GROUP BY td.produk_id, td.nama_produk
+      ORDER BY terjual DESC
+      LIMIT 5
+    `;
+
+    const produkTerlaris = terlarisRaw.map((p) => ({
+      nama: p.nama,
+      terjual: Number(p.terjual),
+    }));
+
+    // 8. Bon Jatuh Tempo Aktif
+    const bonJatuhTempoRaw = await prisma.bon.findMany({
+      where: { status: 'aktif' },
+      include: { member: { select: { nama: true } } },
+      orderBy: { jatuh_tempo: 'asc' },
+      take: 5,
+    });
+
+    const bonJatuhTempo = bonJatuhTempoRaw.map((b) => ({
+      nama: b.member.nama,
+      nominal: Number(b.sisa_bon),
+      jatuhTempo: b.jatuh_tempo ? b.jatuh_tempo.toISOString().split('T')[0] : '',
+      status: b.status,
+    }));
+
     return {
       penjualan_hari_ini: penjualanHariIni,
       jumlah_transaksi_hari_ini: jumlahTransaksiHariIni,
@@ -262,6 +301,8 @@ export class OpsService {
       stok_rendah: stokRendah,
       total_piutang: totalPiutang,
       grafik_penjualan_7_hari: grafik7Hari,
+      produk_terlaris: produkTerlaris,
+      bon_jatuh_tempo: bonJatuhTempo,
     };
   }
 
@@ -365,4 +406,170 @@ export class OpsService {
       margin_laba_persen: marginLaba,
     };
   }
+
+  static async eksporLaporan(params: {
+    jenis: 'penjualan' | 'laba-rugi' | 'mutasi-stok';
+    format: 'csv' | 'excel' | 'pdf';
+    tglMulai: Date;
+    tglSelesai: Date;
+  }): Promise<{ filename: string; url: string }> {
+    const { jenis, format, tglMulai, tglSelesai } = params;
+    const endOfDay = new Date(tglSelesai);
+    endOfDay.setHours(23, 59, 59, 999);
+
+    const timestamp = Date.now();
+    const ext = format === 'pdf' ? 'pdf' : 'csv';
+    const filename = `laporan_${jenis}_${timestamp}.${ext}`;
+    const filePath = path.join(__dirname, '../public/exports', filename);
+
+    // Pastikan folder exports ada sebelum menulis berkas
+    const exportDir = path.dirname(filePath);
+    if (!fs.existsSync(exportDir)) {
+      fs.mkdirSync(exportDir, { recursive: true });
+    }
+
+    if (ext === 'csv') {
+      let content = '';
+      if (jenis === 'penjualan') {
+        const data = await prisma.transaksi.findMany({
+          where: { tanggal: { gte: tglMulai, lte: endOfDay }, deleted_at: null },
+          include: { pembayaran: true, user: { select: { nama: true } } },
+          orderBy: { tanggal: 'asc' },
+        });
+
+        content = 'No. Invoice;Tanggal;Waktu;Kasir;Total;Diskon;Kembalian;Status;Metode Pembayaran\n';
+        data.forEach((tx) => {
+          const metode = tx.pembayaran.map((p) => p.metode).join(', ');
+          content += `${tx.no_transaksi};${new Date(tx.tanggal).toISOString().split('T')[0]};${tx.waktu || ''};${tx.user?.nama || ''};${Number(tx.total)};${Number(tx.diskon_total)};${Number(tx.kembalian)};${tx.status};${metode}\n`;
+        });
+      } else if (jenis === 'laba-rugi') {
+        const details = await prisma.transaksi_detail.findMany({
+          where: { transaksi: { tanggal: { gte: tglMulai, lte: endOfDay }, deleted_at: null, status: { not: 'void' } } },
+          include: { produk: true, transaksi: true },
+        });
+
+        content = 'No. Invoice;Tanggal;Produk;Qty;Harga Satuan;Subtotal;Harga Beli (HPP);Laba Kotor\n';
+        details.forEach((d) => {
+          const hpp = Number(d.produk?.harga_beli ?? d.harga_satuan);
+          const laba = Number(d.subtotal) - (hpp * Number(d.qty));
+          content += `${d.transaksi.no_transaksi};${new Date(d.transaksi.tanggal).toISOString().split('T')[0]};${d.nama_produk};${Number(d.qty)};${Number(d.harga_satuan)};${Number(d.subtotal)};${hpp * Number(d.qty)};${laba}\n`;
+        });
+      } else if (jenis === 'mutasi-stok') {
+        const logs = await prisma.stok_log.findMany({
+          where: { created_at: { gte: tglMulai, lte: endOfDay } },
+          include: { produk: true, user: { select: { nama: true } } },
+          orderBy: { created_at: 'desc' },
+        });
+
+        content = 'Tanggal;Produk;Tipe Mutasi;Qty;Stok Sebelum;Stok Sesudah;Kasir;Catatan\n';
+        logs.forEach((log) => {
+          content += `${new Date(log.created_at).toISOString().replace('T', ' ').substring(0, 19)};${log.produk.nama};${log.tipe};${Number(log.qty)};${Number(log.stok_sebelum)};${Number(log.stok_sesudah)};${log.user?.nama || ''};${log.catatan || ''}\n`;
+        });
+      }
+      fs.writeFileSync(filePath, content, 'utf-8');
+    } else {
+      // PDF format menggunakan pdfkit
+      const doc = new PDFDocument({ margin: 30 });
+      const stream = fs.createWriteStream(filePath);
+      doc.pipe(stream);
+
+      // Header PDF
+      doc.fontSize(18).text('TOKIVA POINT OF SALE', { align: 'center' });
+      doc.fontSize(12).text(`Laporan ${jenis.toUpperCase().replace('-', ' ')}`, { align: 'center' });
+      doc.fontSize(9).text(`Periode: ${tglMulai.toISOString().split('T')[0]} s/d ${tglSelesai.toISOString().split('T')[0]}`, { align: 'center' });
+      doc.moveDown(1.5);
+
+      if (jenis === 'penjualan') {
+        const data = await prisma.transaksi.findMany({
+          where: { tanggal: { gte: tglMulai, lte: endOfDay }, deleted_at: null },
+          include: { user: { select: { nama: true } } },
+          orderBy: { tanggal: 'asc' },
+        });
+
+        doc.fontSize(10).text('Daftar Transaksi:', { underline: true });
+        doc.moveDown(0.5);
+        let totalOmset = 0;
+
+        data.forEach((tx, idx) => {
+          totalOmset += Number(tx.total);
+          doc.fontSize(9).text(`${idx + 1}. Invoice: ${tx.no_transaksi} | Tanggal: ${new Date(tx.tanggal).toISOString().split('T')[0]} | Kasir: ${tx.user?.nama || '-'} | Total: Rp ${Number(tx.total).toLocaleString('id-ID')} (${tx.status})`);
+        });
+
+        doc.moveDown(1);
+        doc.font('Helvetica-Bold').fontSize(11).text(`TOTAL OMZET: Rp ${totalOmset.toLocaleString('id-ID')}`);
+        doc.font('Helvetica');
+      } else if (jenis === 'laba-rugi') {
+        const details = await prisma.transaksi_detail.findMany({
+          where: { transaksi: { tanggal: { gte: tglMulai, lte: endOfDay }, deleted_at: null, status: { not: 'void' } } },
+          include: { produk: true },
+        });
+
+        let totalOmset = 0;
+        let totalHpp = 0;
+
+        details.forEach((d) => {
+          totalOmset += Number(d.subtotal);
+          const hppVal = Number(d.produk?.harga_beli ?? d.harga_satuan) * Number(d.qty);
+          totalHpp += hppVal;
+        });
+
+        const labaKotor = totalOmset - totalHpp;
+        const margin = totalOmset > 0 ? (labaKotor / totalOmset) * 100 : 0;
+
+        doc.fontSize(10).text('Ringkasan Laba Rugi:', { underline: true });
+        doc.moveDown(0.5);
+        doc.fontSize(9).text(`Total Omzet Penjualan: Rp ${totalOmset.toLocaleString('id-ID')}`);
+        doc.fontSize(9).text(`Total Harga Pokok Penjualan (HPP): Rp ${totalHpp.toLocaleString('id-ID')}`);
+        doc.moveDown(0.5);
+        doc.font('Helvetica-Bold').fontSize(11).text(`LABA KOTOR: Rp ${labaKotor.toLocaleString('id-ID')}`);
+        doc.font('Helvetica');
+        doc.fontSize(9).text(`Margin Laba: ${margin.toFixed(2)}%`);
+      } else if (jenis === 'mutasi-stok') {
+        const logs = await prisma.stok_log.findMany({
+          where: { created_at: { gte: tglMulai, lte: endOfDay } },
+          include: { produk: true },
+          orderBy: { created_at: 'desc' },
+        });
+
+        doc.fontSize(10).text('Mutasi Stok Barang:', { underline: true });
+        doc.moveDown(0.5);
+
+        logs.forEach((log, idx) => {
+          doc.fontSize(8).text(`${idx + 1}. [${new Date(log.created_at).toISOString().replace('T', ' ').substring(0, 19)}] ${log.produk.nama} | Tipe: ${log.tipe} | Qty: ${Number(log.qty)} | Stok: ${Number(log.stok_sebelum)} -> ${Number(log.stok_sesudah)} | Catatan: ${log.catatan || '-'}`);
+        });
+      }
+
+      doc.end();
+
+      // Tunggu stream selesai menulis file ke disk
+      await new Promise<void>((resolve) => stream.on('finish', () => resolve()));
+    }
+
+    // Upload ke Supabase Storage
+    let fileBuffer: Buffer | null = null;
+    try {
+      fileBuffer = fs.readFileSync(filePath);
+    } catch (readErr) {
+      console.error('Gagal membaca file laporan:', readErr);
+    }
+
+    let downloadUrl = '';
+    if (fileBuffer) {
+      const mimeType = format === 'pdf' ? 'application/pdf' : 'text/csv';
+      const supabaseUrl = await uploadBufferToSupabase('exports', filename, fileBuffer, mimeType);
+      if (supabaseUrl) {
+        downloadUrl = supabaseUrl;
+      }
+    }
+
+    if (!downloadUrl) {
+      const host = process.env.BACKEND_URL || 'http://localhost:5000';
+      downloadUrl = `${host}/exports/${filename}`;
+    }
+
+    return {
+      filename,
+      url: downloadUrl,
+    };
+  }
 }

src/utils/ai-client.ts

@@ -0,0 +1,203 @@
+/**
+ * ai-client.ts
+ * Client untuk berkomunikasi dengan AI melalui OpenRouter API.
+ * Menggunakan SDK OpenAI karena OpenRouter API-nya OpenAI-compatible.
+ */
+
+import OpenAI from 'openai';
+import type { ChatCompletionMessageParam, ChatCompletionTool } from 'openai/resources/chat/completions';
+
+// Inisialisasi client OpenAI dengan baseURL OpenRouter
+// Lazy initialization client OpenAI menggunakan konfigurasi dari .env
+let openai: OpenAI | null = null;
+
+function getOpenAI(): OpenAI {
+  if (openai) return openai;
+
+  const aiBaseUrl = process.env.AI_BASE_URL;
+  const aiApiKey = process.env.AI_API_KEY;
+  const aiModel = process.env.AI_MODEL;
+
+  if (!aiApiKey || !aiBaseUrl || !aiModel) {
+    throw new Error('Konfigurasi AI tidak lengkap di file .env (Pastikan AI_BASE_URL, AI_API_KEY, dan AI_MODEL terisi).');
+  }
+
+  openai = new OpenAI({
+    baseURL: aiBaseUrl,
+    apiKey: aiApiKey,
+  });
+
+  return openai;
+}
+
+export interface PesanChat {
+  role: 'system' | 'user' | 'assistant' | 'tool';
+  content: string;
+  tool_call_id?: string;
+  tool_calls?: any[];
+}
+
+export interface HasilAI {
+  balasan: string | null;
+  tool_calls: ToolCall[] | null;
+  usage?: {
+    prompt_tokens: number;
+    completion_tokens: number;
+    total_tokens: number;
+  };
+}
+
+export interface ToolCall {
+  id: string;
+  nama: string;
+  argumen: Record<string, any>;
+}
+
+/**
+ * Kirim pesan ke AI dan dapatkan response.
+ * Support function calling / tool use.
+ */
+export async function chatCompletion(
+  messages: PesanChat[],
+  tools?: ChatCompletionTool[]
+): Promise<HasilAI> {
+  const model = process.env.AI_MODEL!;
+  const maxTokens = Number(process.env.AI_MAX_TOKENS) || 2000;
+
+  const requestMessages: ChatCompletionMessageParam[] = messages.map((m) => {
+    if (m.role === 'tool') {
+      return {
+        role: 'tool' as const,
+        content: m.content,
+        tool_call_id: m.tool_call_id || '',
+      };
+    }
+    if (m.role === 'assistant' && m.tool_calls) {
+      return {
+        role: 'assistant' as const,
+        content: m.content || null,
+        tool_calls: m.tool_calls,
+      };
+    }
+    return {
+      role: m.role as 'system' | 'user' | 'assistant',
+      content: m.content,
+    };
+  });
+
+  const params: any = {
+    model,
+    messages: requestMessages,
+    max_tokens: maxTokens,
+    temperature: 0.7,
+  };
+
+  // Hanya tambahkan tools jika ada
+  if (tools && tools.length > 0) {
+    params.tools = tools;
+    params.tool_choice = 'auto';
+  }
+
+  const response = await getOpenAI().chat.completions.create(params);
+
+  const choice = response.choices[0];
+
+  // Parse tool calls jika ada secara native
+  let toolCalls: ToolCall[] | null = null;
+  if (choice.message.tool_calls && choice.message.tool_calls.length > 0) {
+    toolCalls = choice.message.tool_calls.map((tc) => ({
+      id: tc.id,
+      nama: (tc as any).function.name,
+      argumen: JSON.parse((tc as any).function.arguments || '{}'),
+    }));
+  }
+
+  let balasan = choice.message.content || null;
+
+  // Fallback parser jika AI menulis tag DSML secara literal di teks (karena limitasi API/model gratis)
+  if (!toolCalls && balasan) {
+    const dsmlCalls = parseDsmlToolCalls(balasan);
+    if (dsmlCalls) {
+      toolCalls = dsmlCalls;
+      // Bersihkan teks tag XML/DSML dari balasan agar bubble chat rapi
+      balasan = balasan
+        .replace(/<\s*\|?\s*\|?\s*DSML[\s\S]*?<\s*\/\s*\|?\s*\|?\s*DSML\s*\|?\s*\|?\s*tool_calls\s*>/g, '')
+        // Hapus juga tag invoke/tool_calls sisa jika terpisah
+        .replace(/<\s*\|?\s*\|?\s*DSML[\s\S]*?>/g, '')
+        .replace(/<\s*\/\s*\|?\s*\|?\s*DSML[\s\S]*?>/g, '')
+        .trim();
+    }
+  }
+
+  return {
+    balasan,
+    tool_calls: toolCalls,
+    usage: response.usage
+      ? {
+          prompt_tokens: response.usage.prompt_tokens,
+          completion_tokens: response.usage.completion_tokens,
+          total_tokens: response.usage.total_tokens,
+        }
+      : undefined,
+  };
+}
+
+/**
+ * Parser penanganan tag DSML/XML tool calls yang dikirim literal oleh model AI
+ */
+function parseDsmlToolCalls(text: string): ToolCall[] | null {
+  if (!text.includes('tool_calls') && !text.includes('DSML')) return null;
+
+  try {
+    const toolCalls: ToolCall[] = [];
+    
+    // Regex fleksibel mencocokkan invoke block: < | | DSML | | invoke name="NAMA"> ... </ | | DSML | | invoke>
+    const invokeRegex = /<\s*\|?\s*\|?\s*DSML\s*\|?\s*\|?\s*invoke\s+name="([^"]+)"\s*>([\s\S]*?)<\s*\/\s*\|?\s*\|?\s*DSML\s*\|?\s*\|?\s*invoke\s*>/g;
+    
+    let match;
+    let idx = 0;
+    while ((match = invokeRegex.exec(text)) !== null) {
+      const toolName = match[1];
+      const innerContent = match[2];
+      const args: Record<string, any> = {};
+
+      // Regex mencocokkan argument: <arg name="NAMA">NILAI</arg>
+      const argRegex = /<\s*(?:arg|parameter)\s+name="([^"]+)"\s*>([\s\S]*?)<\s*\/\s*(?:arg|parameter)\s*>/g;
+      let argMatch;
+      while ((argMatch = argRegex.exec(innerContent)) !== null) {
+        const argName = argMatch[1];
+        const argValue = argMatch[2].trim();
+        
+        if (/^-?\d+$/.test(argValue)) {
+          args[argName] = parseInt(argValue, 10);
+        } else if (/^-?\d+\.\d+$/.test(argValue)) {
+          args[argName] = parseFloat(argValue);
+        } else {
+          args[argName] = argValue;
+        }
+      }
+
+      toolCalls.push({
+        id: `dsml_${Date.now()}_${idx++}`,
+        nama: toolName,
+        argumen: args,
+      });
+    }
+
+    return toolCalls.length > 0 ? toolCalls : null;
+  } catch (err) {
+    console.error('Gagal parsing DSML tool calls:', err);
+    return null;
+  }
+}
+
+/**
+ * Kirim pesan sederhana tanpa tools (untuk format ulang jawaban dll).
+ */
+export async function chatSederhana(systemPrompt: string, userMessage: string): Promise<string> {
+  const hasil = await chatCompletion([
+    { role: 'system', content: systemPrompt },
+    { role: 'user', content: userMessage },
+  ]);
+  return hasil.balasan || '';
+}

src/utils/chatbot-context.ts

@@ -0,0 +1,279 @@
+/**
+ * chatbot-context.ts
+ * Membangun system prompt + konteks data toko real-time untuk AI.
+ * Ini yang membuat chatbot "paham" kondisi toko saat ini.
+ */
+
+import prisma from './db';
+
+interface KonteksToko {
+  totalProdukAktif: number;
+  produkStokRendah: { nama: string; stok: number; stok_min: number }[];
+  produkStokHabis: { nama: string }[];
+  produkKadaluarsa: { nama: string; expired_date: string }[];
+  produkMendekatiKadaluarsa: { nama: string; expired_date: string }[];
+  transaksiHariIni: { jumlah: number; total: number };
+  totalMember: number;
+  totalSupplier: number;
+  totalPiutangBon: number;
+  totalKategori: number;
+  shiftAktif: { nama_kasir: string; waktu_buka: string } | null;
+}
+
+/**
+ * Query database untuk mendapatkan ringkasan kondisi toko saat ini.
+ */
+export async function getKonteksToko(): Promise<KonteksToko> {
+  const hariIni = new Date();
+  hariIni.setHours(0, 0, 0, 0);
+  const besok = new Date(hariIni);
+  besok.setDate(besok.getDate() + 1);
+
+  const batasMendekati = new Date();
+  batasMendekati.setDate(batasMendekati.getDate() + 30);
+
+  // Query parallel untuk performa
+  const [
+    totalProdukAktif,
+    produkStokRendah,
+    produkStokHabis,
+    produkKadaluarsa,
+    produkMendekatiKadaluarsa,
+    transaksiHariIni,
+    totalMember,
+    totalSupplier,
+    bonAktif,
+    totalKategori,
+    shiftAktif,
+  ] = await Promise.all([
+    // Total produk aktif
+    prisma.produk.count({
+      where: { deleted_at: null, is_aktif: 1 },
+    }),
+
+    // Produk stok rendah (stok > 0 tapi <= stok_min)
+    prisma.$queryRaw<{ nama: string; stok: number; stok_min: number }[]>`
+      SELECT nama, stok, stok_min FROM produk 
+      WHERE deleted_at IS NULL AND is_aktif = 1 AND stok > 0 AND stok <= stok_min
+      LIMIT 10
+    `,
+
+    // Produk stok habis (stok = 0)
+    prisma.produk.findMany({
+      where: { deleted_at: null, is_aktif: 1, stok: 0 },
+      select: { nama: true },
+      take: 10,
+    }),
+
+    // Produk sudah kadaluarsa
+    prisma.produk.findMany({
+      where: {
+        deleted_at: null,
+        is_aktif: 1,
+        expired_date: { lt: hariIni },
+      },
+      select: { nama: true, expired_date: true },
+      take: 10,
+    }),
+
+    // Produk mendekati kadaluarsa (30 hari ke depan)
+    prisma.produk.findMany({
+      where: {
+        deleted_at: null,
+        is_aktif: 1,
+        expired_date: { gte: hariIni, lte: batasMendekati },
+      },
+      select: { nama: true, expired_date: true },
+      take: 10,
+    }),
+
+    // Transaksi hari ini
+    prisma.transaksi.aggregate({
+      where: {
+        tanggal: { gte: hariIni, lt: besok },
+        deleted_at: null,
+        status: { not: 'void' },
+      },
+      _count: { id: true },
+      _sum: { total: true },
+    }),
+
+    // Total member
+    prisma.member.count({
+      where: { deleted_at: null, aktif: 1 },
+    }),
+
+    // Total supplier
+    prisma.supplier.count({
+      where: { deleted_at: null, aktif: 1 },
+    }),
+
+    // Total piutang bon aktif
+    prisma.bon.aggregate({
+      where: { status: 'aktif' },
+      _sum: { sisa_bon: true },
+    }),
+
+    // Total kategori
+    prisma.kategori.count({
+      where: { deleted_at: null, aktif: 1 },
+    }),
+
+    // Shift aktif saat ini
+    prisma.shift.findFirst({
+      where: { status: 'buka' },
+      include: { user: { select: { nama: true } } },
+      orderBy: { waktu_buka: 'desc' },
+    }),
+  ]);
+
+  return {
+    totalProdukAktif,
+    produkStokRendah: produkStokRendah.map((p) => ({
+      nama: p.nama,
+      stok: Number(p.stok),
+      stok_min: Number(p.stok_min),
+    })),
+    produkStokHabis: produkStokHabis.map((p) => ({ nama: p.nama })),
+    produkKadaluarsa: produkKadaluarsa.map((p) => ({
+      nama: p.nama,
+      expired_date: p.expired_date ? new Date(p.expired_date).toISOString().split('T')[0] : '',
+    })),
+    produkMendekatiKadaluarsa: produkMendekatiKadaluarsa.map((p) => ({
+      nama: p.nama,
+      expired_date: p.expired_date ? new Date(p.expired_date).toISOString().split('T')[0] : '',
+    })),
+    transaksiHariIni: {
+      jumlah: transaksiHariIni._count.id || 0,
+      total: Number(transaksiHariIni._sum.total || 0),
+    },
+    totalMember,
+    totalSupplier,
+    totalPiutangBon: Number(bonAktif._sum.sisa_bon || 0),
+    totalKategori,
+    shiftAktif: shiftAktif
+      ? {
+          nama_kasir: shiftAktif.user.nama,
+          waktu_buka: shiftAktif.waktu_buka.toISOString(),
+        }
+      : null,
+  };
+}
+
+/**
+ * Bangun system prompt lengkap dengan konteks data toko.
+ */
+export async function bangunSystemPrompt(namaUser: string, roleUser: string): Promise<string> {
+  let konteks: KonteksToko;
+  try {
+    konteks = await getKonteksToko();
+  } catch (err) {
+    console.error('Gagal mengambil konteks toko:', err);
+    // Fallback jika database error
+    konteks = {
+      totalProdukAktif: 0,
+      produkStokRendah: [],
+      produkStokHabis: [],
+      produkKadaluarsa: [],
+      produkMendekatiKadaluarsa: [],
+      transaksiHariIni: { jumlah: 0, total: 0 },
+      totalMember: 0,
+      totalSupplier: 0,
+      totalPiutangBon: 0,
+      totalKategori: 0,
+      shiftAktif: null,
+    };
+  }
+
+  const formatRupiah = (n: number) =>
+    'Rp ' + n.toLocaleString('id-ID');
+
+  // Bangun bagian stok rendah
+  const stokRendahStr = konteks.produkStokRendah.length > 0
+    ? konteks.produkStokRendah.map((p) => `  - ${p.nama}: ${p.stok} (min: ${p.stok_min})`).join('\n')
+    : '  Tidak ada';
+
+  const stokHabisStr = konteks.produkStokHabis.length > 0
+    ? konteks.produkStokHabis.map((p) => `  - ${p.nama}`).join('\n')
+    : '  Tidak ada';
+
+  const expiredStr = konteks.produkKadaluarsa.length > 0
+    ? konteks.produkKadaluarsa.map((p) => `  - ${p.nama} (${p.expired_date})`).join('\n')
+    : '  Tidak ada';
+
+  const nearExpiredStr = konteks.produkMendekatiKadaluarsa.length > 0
+    ? konteks.produkMendekatiKadaluarsa.map((p) => `  - ${p.nama} (${p.expired_date})`).join('\n')
+    : '  Tidak ada';
+
+  const shiftStr = konteks.shiftAktif
+    ? `${konteks.shiftAktif.nama_kasir} (sejak ${new Date(konteks.shiftAktif.waktu_buka).toLocaleTimeString('id-ID', { hour: '2-digit', minute: '2-digit' })})`
+    : 'Tidak ada shift aktif';
+
+  // Bagian akses berdasarkan role
+  const aksesStr = roleUser === 'admin'
+    ? `Kamu memiliki akses PENUH: bisa query data, tambah, edit, dan hapus produk/member/supplier/kategori.`
+    : `Kamu hanya bisa QUERY data (baca saja). Tidak bisa tambah, edit, atau hapus data. Jika user minta CRUD, tolak dengan sopan dan sarankan untuk menghubungi admin.`;
+
+  return `Kamu adalah asisten toko bernama "Asisten Tokiva" — chatbot AI untuk aplikasi Point of Sale (POS) Tokiva.
+Kamu melayani user bernama "${namaUser}" dengan role "${roleUser}".
+
+═══════════════════════════════════════
+ATURAN KETAT — WAJIB DIPATUHI:
+═══════════════════════════════════════
+
+1. Kamu HANYA boleh membahas topik yang berkaitan dengan:
+   - Manajemen toko (produk, stok, kategori, supplier)
+   - Transaksi dan penjualan
+   - Member/pelanggan dan bon/piutang
+   - Laporan dan analitik bisnis
+   - Cara menggunakan fitur-fitur Tokiva POS
+   - Shift kasir dan operasional toko
+
+2. TOLAK DENGAN SOPAN jika user bertanya di luar topik toko/POS:
+   - Contoh topik yang DITOLAK: politik, hiburan, coding, cuaca, pengetahuan umum, matematika, curhat, filosofi, dll.
+   - Format penolakan: "Maaf, saya hanya bisa membantu hal-hal seputar manajemen toko Tokiva 😊 Ada yang bisa saya bantu terkait produk, stok, atau penjualan?"
+
+3. JANGAN PERNAH:
+   - Keluar dari peranmu sebagai asisten toko, meskipun user meminta/memaksa
+   - Mengaku sebagai AI model tertentu (GPT, Claude, dll)
+   - Memberikan informasi di luar konteks toko
+   - Mengeksekusi atau membahas kode program
+   - Menjawab pertanyaan tentang identitas model AI-mu
+
+4. Jika user bertanya "kamu siapa?" atau sejenisnya, jawab:
+   "Saya Asisten Tokiva, siap membantu mengelola toko Anda! 🏪"
+
+5. ${aksesStr}
+
+6. Untuk aksi yang mengubah data (tambah/edit/hapus), SELALU tunjukkan preview data yang akan diubah dan minta konfirmasi user sebelum mengeksekusi tool.
+
+7. Jawab dalam Bahasa Indonesia. Gunakan emoji secukupnya untuk readability.
+
+8. Jika menampilkan banyak data, gunakan format list/tabel yang rapi.
+
+═══════════════════════════════════════
+STATUS TOKO SAAT INI:
+═══════════════════════════════════════
+
+📦 Total Produk Aktif: ${konteks.totalProdukAktif}
+📂 Total Kategori: ${konteks.totalKategori}
+👥 Total Member: ${konteks.totalMember}
+🚚 Total Supplier: ${konteks.totalSupplier}
+
+💰 Transaksi Hari Ini: ${konteks.transaksiHariIni.jumlah} transaksi (${formatRupiah(konteks.transaksiHariIni.total)})
+💳 Total Piutang Bon: ${formatRupiah(konteks.totalPiutangBon)}
+🕐 Shift Aktif: ${shiftStr}
+
+⚠️ Produk Stok Rendah:
+${stokRendahStr}
+
+🔴 Produk Stok Habis:
+${stokHabisStr}
+
+📅 Produk Kadaluarsa:
+${expiredStr}
+
+⏰ Produk Mendekati Kadaluarsa (30 hari):
+${nearExpiredStr}
+`;
+}

src/utils/chatbot-tools.ts

@@ -0,0 +1,1456 @@
+/**
+ * chatbot-tools.ts
+ * Definisi tools (function calling) yang AI bisa panggil untuk berinteraksi dengan database.
+ * Setiap tool memanggil existing service layer — tidak akses DB langsung.
+ */
+
+import type { ChatCompletionTool } from 'openai/resources/chat/completions';
+import prisma from './db';
+import { ProdukService } from '../services/produk.service';
+import { MemberService } from '../services/member.service';
+import { SupplierService } from '../services/supplier.service';
+import { KategoriService } from '../services/kategori.service';
+import { BonService } from '../services/bon.service';
+import { StokService } from '../services/stok.service';
+import { OpsService } from '../services/ops.service';
+import { TransaksiService } from '../services/transaksi.service';
+import { generateKodeProduk, generateKodeMember } from './kodeGenerator';
+import { catatAudit } from './audit';
+
+// ═══════════════════════════════════
+// INTERFACE
+// ═══════════════════════════════════
+
+export interface ToolHandler {
+  nama: string;
+  butuhKonfirmasi: boolean;
+  adminOnly: boolean;
+  handler: (params: any, userId: number, ip: string, userAgent: string) => Promise<string>;
+}
+
+// ═══════════════════════════════════
+// TOOL DEFINITIONS (untuk dikirim ke AI)
+// ═══════════════════════════════════
+
+export const TOOL_DEFINITIONS: ChatCompletionTool[] = [
+  // ── Produk ──
+  {
+    type: 'function',
+    function: {
+      name: 'cari_produk',
+      description: 'Cari produk berdasarkan nama, kode, atau barcode. Tampilkan hasil pencarian.',
+      parameters: {
+        type: 'object',
+        properties: {
+          pencarian: { type: 'string', description: 'Kata kunci pencarian (nama produk, kode, atau barcode)' },
+        },
+        required: ['pencarian'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'detail_produk',
+      description: 'Lihat detail lengkap satu produk berdasarkan ID produk.',
+      parameters: {
+        type: 'object',
+        properties: {
+          id: { type: 'number', description: 'ID produk' },
+        },
+        required: ['id'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'tambah_produk',
+      description: 'Tambahkan produk baru ke database. Kode produk akan di-generate otomatis jika tidak diisi.',
+      parameters: {
+        type: 'object',
+        properties: {
+          nama: { type: 'string', description: 'Nama produk' },
+          harga_jual: { type: 'number', description: 'Harga jual (Rupiah)' },
+          harga_beli: { type: 'number', description: 'Harga beli/modal (Rupiah)' },
+          kategori_id: { type: 'number', description: 'ID kategori produk' },
+          satuan: { type: 'string', description: 'Satuan produk (pcs, kg, liter, pack, dll). Default: pcs' },
+          barcode: { type: 'string', description: 'Barcode produk (opsional)' },
+          stok_min: { type: 'number', description: 'Stok minimum sebelum warning. Default: 5' },
+          stok: { type: 'number', description: 'Stok awal (opsional, default: 0)' },
+        },
+        required: ['nama', 'harga_jual', 'harga_beli', 'kategori_id'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'update_produk',
+      description: 'Update/edit data produk yang sudah ada berdasarkan ID.',
+      parameters: {
+        type: 'object',
+        properties: {
+          id: { type: 'number', description: 'ID produk yang ingin diupdate' },
+          nama: { type: 'string', description: 'Nama produk baru (opsional)' },
+          harga_jual: { type: 'number', description: 'Harga jual baru (opsional)' },
+          harga_beli: { type: 'number', description: 'Harga beli baru (opsional)' },
+          kategori_id: { type: 'number', description: 'ID kategori baru (opsional)' },
+          satuan: { type: 'string', description: 'Satuan baru (opsional)' },
+          stok_min: { type: 'number', description: 'Stok minimum baru (opsional)' },
+          is_aktif: { type: 'number', description: '1 = aktif, 0 = nonaktif (opsional)' },
+        },
+        required: ['id'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'hapus_produk',
+      description: 'Hapus (soft-delete) produk berdasarkan ID.',
+      parameters: {
+        type: 'object',
+        properties: {
+          id: { type: 'number', description: 'ID produk yang ingin dihapus' },
+        },
+        required: ['id'],
+      },
+    },
+  },
+
+  // ── Stok ──
+  {
+    type: 'function',
+    function: {
+      name: 'cek_stok',
+      description: 'Cek stok produk tertentu berdasarkan nama atau ID produk.',
+      parameters: {
+        type: 'object',
+        properties: {
+          pencarian: { type: 'string', description: 'Nama atau kode produk untuk dicek stoknya' },
+        },
+        required: ['pencarian'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'stok_rendah',
+      description: 'Lihat daftar semua produk yang stoknya di bawah batas minimum (stok rendah atau habis).',
+      parameters: {
+        type: 'object',
+        properties: {},
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'stok_kadaluarsa',
+      description: 'Lihat daftar produk yang sudah kadaluarsa atau mendekati kadaluarsa (30 hari ke depan).',
+      parameters: {
+        type: 'object',
+        properties: {},
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'tambah_stok_masuk',
+      description: 'Tambahkan stok masuk (restock) untuk produk tertentu.',
+      parameters: {
+        type: 'object',
+        properties: {
+          produk_id: { type: 'number', description: 'ID produk yang mau ditambah stoknya (opsional jika nama_produk diisi)' },
+          nama_produk: { type: 'string', description: 'Nama produk yang mau ditambah stoknya (opsional jika produk_id diisi)' },
+          qty: { type: 'number', description: 'Jumlah stok yang masuk' },
+          harga_beli: { type: 'number', description: 'Harga beli per satuan' },
+          supplier_id: { type: 'number', description: 'ID supplier (opsional)' },
+          catatan: { type: 'string', description: 'Catatan restock (opsional)' },
+        },
+        required: ['qty', 'harga_beli'],
+      },
+    },
+  },
+
+  // ── Transaksi ──
+  {
+    type: 'function',
+    function: {
+      name: 'ringkasan_penjualan',
+      description: 'Lihat ringkasan penjualan (total transaksi dan revenue) berdasarkan periode waktu.',
+      parameters: {
+        type: 'object',
+        properties: {
+          periode: {
+            type: 'string',
+            enum: ['hari_ini', 'kemarin', 'minggu_ini', 'bulan_ini'],
+            description: 'Periode waktu untuk ringkasan',
+          },
+        },
+        required: ['periode'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'detail_transaksi',
+      description: 'Lihat detail transaksi berdasarkan nomor transaksi.',
+      parameters: {
+        type: 'object',
+        properties: {
+          no_transaksi: { type: 'string', description: 'Nomor transaksi (contoh: TKV-20260702-0001)' },
+        },
+        required: ['no_transaksi'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'void_transaksi',
+      description: 'Batalkan (void) transaksi penjualan tertentu berdasarkan nomor transaksi atau ID.',
+      parameters: {
+        type: 'object',
+        properties: {
+          no_transaksi: { type: 'string', description: 'Nomor transaksi yang ingin dibatalkan (opsional jika id diisi)' },
+          id: { type: 'number', description: 'ID transaksi yang ingin dibatalkan (opsional jika nomor transaksi diisi)' },
+          alasan: { type: 'string', description: 'Alasan pembatalan transaksi (wajib)' },
+        },
+        required: ['alasan'],
+      },
+    },
+  },
+
+  // ── Member ──
+  {
+    type: 'function',
+    function: {
+      name: 'cari_member',
+      description: 'Cari member/pelanggan berdasarkan nama, kode, atau nomor HP.',
+      parameters: {
+        type: 'object',
+        properties: {
+          pencarian: { type: 'string', description: 'Kata kunci pencarian (nama, kode, atau nomor HP)' },
+        },
+        required: ['pencarian'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'tambah_member',
+      description: 'Daftarkan member/pelanggan baru. Kode member di-generate otomatis.',
+      parameters: {
+        type: 'object',
+        properties: {
+          nama: { type: 'string', description: 'Nama member' },
+          nomor_hp: { type: 'string', description: 'Nomor HP member' },
+          alamat: { type: 'string', description: 'Alamat member (opsional)' },
+          limit_bon: { type: 'number', description: 'Limit bon/piutang (opsional, default: 0)' },
+        },
+        required: ['nama', 'nomor_hp'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'update_member',
+      description: 'Update data member/pelanggan berdasarkan ID.',
+      parameters: {
+        type: 'object',
+        properties: {
+          id: { type: 'number', description: 'ID member yang ingin diupdate' },
+          nama: { type: 'string', description: 'Nama baru member (opsional)' },
+          nomor_hp: { type: 'string', description: 'Nomor HP baru (opsional)' },
+          alamat: { type: 'string', description: 'Alamat baru (opsional)' },
+          limit_bon: { type: 'number', description: 'Limit bon baru (opsional)' },
+        },
+        required: ['id'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'hapus_member',
+      description: 'Hapus data member/pelanggan berdasarkan ID.',
+      parameters: {
+        type: 'object',
+        properties: {
+          id: { type: 'number', description: 'ID member yang ingin dihapus' },
+        },
+        required: ['id'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'info_bon_member',
+      description: 'Lihat informasi bon/piutang untuk member tertentu berdasarkan ID member.',
+      parameters: {
+        type: 'object',
+        properties: {
+          member_id: { type: 'number', description: 'ID member' },
+        },
+        required: ['member_id'],
+      },
+    },
+  },
+
+  // ── Supplier ──
+  {
+    type: 'function',
+    function: {
+      name: 'cari_supplier',
+      description: 'Cari supplier/pemasok berdasarkan nama.',
+      parameters: {
+        type: 'object',
+        properties: {
+          pencarian: { type: 'string', description: 'Nama supplier yang dicari' },
+        },
+        required: ['pencarian'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'tambah_supplier',
+      description: 'Tambahkan supplier/pemasok baru.',
+      parameters: {
+        type: 'object',
+        properties: {
+          nama: { type: 'string', description: 'Nama supplier' },
+          kontak: { type: 'string', description: 'Nama kontak person (opsional)' },
+          nomor_hp: { type: 'string', description: 'Nomor HP supplier (opsional)' },
+          alamat: { type: 'string', description: 'Alamat supplier (opsional)' },
+        },
+        required: ['nama'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'update_supplier',
+      description: 'Update data supplier/pemasok berdasarkan ID.',
+      parameters: {
+        type: 'object',
+        properties: {
+          id: { type: 'number', description: 'ID supplier yang ingin diupdate' },
+          nama: { type: 'string', description: 'Nama baru supplier (opsional)' },
+          kontak: { type: 'string', description: 'Nama kontak person baru (opsional)' },
+          nomor_hp: { type: 'string', description: 'Nomor HP baru (opsional)' },
+          alamat: { type: 'string', description: 'Alamat baru (opsional)' },
+        },
+        required: ['id'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'hapus_supplier',
+      description: 'Hapus data supplier/pemasok berdasarkan ID.',
+      parameters: {
+        type: 'object',
+        properties: {
+          id: { type: 'number', description: 'ID supplier yang ingin dihapus' },
+        },
+        required: ['id'],
+      },
+    },
+  },
+
+  // ── Laporan ──
+  {
+    type: 'function',
+    function: {
+      name: 'produk_terlaris',
+      description: 'Lihat daftar produk terlaris berdasarkan jumlah terjual dalam periode tertentu.',
+      parameters: {
+        type: 'object',
+        properties: {
+          limit: { type: 'number', description: 'Jumlah top produk yang ditampilkan (default: 10)' },
+          periode: {
+            type: 'string',
+            enum: ['minggu_ini', 'bulan_ini', 'semua'],
+            description: 'Periode waktu (default: bulan_ini)',
+          },
+        },
+      },
+    },
+  },
+
+  // ── Kategori ──
+  {
+    type: 'function',
+    function: {
+      name: 'daftar_kategori',
+      description: 'Lihat semua kategori produk yang tersedia.',
+      parameters: {
+        type: 'object',
+        properties: {},
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'tambah_kategori',
+      description: 'Tambahkan kategori produk baru.',
+      parameters: {
+        type: 'object',
+        properties: {
+          nama: { type: 'string', description: 'Nama kategori baru' },
+          icon: { type: 'string', description: 'Icon/emoji untuk kategori (opsional)' },
+        },
+        required: ['nama'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'update_kategori',
+      description: 'Update nama atau icon kategori berdasarkan ID.',
+      parameters: {
+        type: 'object',
+        properties: {
+          id: { type: 'number', description: 'ID kategori yang ingin di-update' },
+          nama: { type: 'string', description: 'Nama kategori baru (opsional)' },
+          icon: { type: 'string', description: 'Icon baru (opsional)' },
+          aktif: { type: 'number', description: '1 = aktif, 0 = nonaktif (opsional)' },
+        },
+        required: ['id'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'hapus_kategori',
+      description: 'Hapus kategori produk berdasarkan ID atau nama kategori.',
+      parameters: {
+        type: 'object',
+        properties: {
+          id: { type: 'number', description: 'ID kategori yang ingin dihapus (opsional jika nama diisi)' },
+          nama: { type: 'string', description: 'Nama kategori yang ingin dihapus (opsional jika id diisi)' },
+        },
+        required: [],
+      },
+    },
+  },
+
+  // ── Diskon & Promo ──
+  {
+    type: 'function',
+    function: {
+      name: 'daftar_diskon',
+      description: 'Lihat daftar semua diskon, promosi, atau voucher toko.',
+      parameters: {
+        type: 'object',
+        properties: {},
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'tambah_diskon',
+      description: 'Buat promosi/diskon belanja baru.',
+      parameters: {
+        type: 'object',
+        properties: {
+          nama: { type: 'string', description: 'Nama promosi/diskon' },
+          tipe: {
+            type: 'string',
+            enum: ['total_persen', 'total_nominal', 'per_item_persen', 'per_item_nominal'],
+            description: 'Tipe diskon',
+          },
+          nilai: { type: 'number', description: 'Besar potongan (persentase/nominal Rupiah)' },
+          min_belanja: { type: 'number', description: 'Minimal belanja (opsional, default: 0)' },
+          tgl_mulai: { type: 'string', description: 'Tanggal mulai berlaku (format: YYYY-MM-DD)' },
+          tgl_selesai: { type: 'string', description: 'Tanggal berakhir promo (format: YYYY-MM-DD)' },
+          member_only: { type: 'number', enum: [0, 1], description: '1 = khusus member, 0 = umum. Default: 0' },
+        },
+        required: ['nama', 'tipe', 'nilai', 'tgl_mulai', 'tgl_selesai'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'update_diskon',
+      description: 'Update data diskon/promosi berdasarkan ID.',
+      parameters: {
+        type: 'object',
+        properties: {
+          id: { type: 'number', description: 'ID diskon yang ingin diupdate' },
+          nama: { type: 'string', description: 'Nama promosi baru (opsional)' },
+          tipe: { type: 'string', enum: ['total_persen', 'total_nominal', 'per_item_persen', 'per_item_nominal'], description: 'Tipe diskon baru (opsional)' },
+          nilai: { type: 'number', description: 'Besar potongan baru (opsional)' },
+          min_belanja: { type: 'number', description: 'Minimal belanja baru (opsional)' },
+          tgl_mulai: { type: 'string', description: 'Tanggal mulai baru (opsional)' },
+          tgl_selesai: { type: 'string', description: 'Tanggal selesai baru (opsional)' },
+          is_aktif: { type: 'number', enum: [0, 1], description: '1 = aktif, 0 = nonaktif (opsional)' },
+        },
+        required: ['id'],
+      },
+    },
+  },
+  {
+    type: 'function',
+    function: {
+      name: 'hapus_diskon',
+      description: 'Hapus data diskon/promosi dari database berdasarkan ID.',
+      parameters: {
+        type: 'object',
+        properties: {
+          id: { type: 'number', description: 'ID diskon yang ingin dihapus' },
+        },
+        required: ['id'],
+      },
+    },
+  },
+
+  // ── Ekspor Laporan ──
+  {
+    type: 'function',
+    function: {
+      name: 'ekspor_laporan',
+      description: 'Ekspor laporan keuangan/stok toko ke dalam format CSV, Excel, atau PDF.',
+      parameters: {
+        type: 'object',
+        properties: {
+          jenis: {
+            type: 'string',
+            enum: ['penjualan', 'laba-rugi', 'mutasi-stok'],
+            description: 'Jenis laporan yang ingin diekspor',
+          },
+          format: {
+            type: 'string',
+            enum: ['csv', 'excel', 'pdf'],
+            description: 'Format output file (csv, excel, atau pdf)',
+          },
+          tgl_mulai: { type: 'string', description: 'Tanggal mulai periode (format: YYYY-MM-DD, default: hari ini)' },
+          tgl_selesai: { type: 'string', description: 'Tanggal selesai periode (format: YYYY-MM-DD, default: hari ini)' },
+        },
+        required: ['jenis', 'format'],
+      },
+    },
+  },
+
+  // ── Sistem ──
+  {
+    type: 'function',
+    function: {
+      name: 'statistik_toko',
+      description: 'Lihat statistik/ringkasan lengkap kondisi toko saat ini (total produk, stok, transaksi hari ini, member, piutang, dll).',
+      parameters: {
+        type: 'object',
+        properties: {},
+      },
+    },
+  },
+];
+
+// ═══════════════════════════════════
+// TOOL HANDLERS (eksekusi aksi)
+// ═══════════════════════════════════
+
+const formatRupiah = (n: number) => 'Rp ' + n.toLocaleString('id-ID');
+
+export const TOOL_HANDLERS: Record<string, ToolHandler> = {
+  // ── Produk ──
+  cari_produk: {
+    nama: 'cari_produk',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async (params) => {
+      const { products, total } = await ProdukService.getProduk(0, 10, undefined, undefined, params.pencarian);
+      if (total === 0) return `Tidak ditemukan produk dengan pencarian "${params.pencarian}".`;
+
+      const items = products.map((p: any) => {
+        return `- [ID:${p.id}] ${p.nama} | Kode: ${p.kode} | Stok: ${Number(p.stok)} ${p.satuan} | Harga Jual: ${formatRupiah(Number(p.harga_jual))} | Kategori: ${p.kategori?.nama || '-'}`;
+      });
+      return `Ditemukan ${total} produk:\n${items.join('\n')}`;
+    },
+  },
+
+  detail_produk: {
+    nama: 'detail_produk',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async (params) => {
+      try {
+        const p: any = await ProdukService.getProdukById(params.id);
+        return [
+          `Detail Produk [ID:${p.id}]:`,
+          `  Nama: ${p.nama}`,
+          `  Kode: ${p.kode}`,
+          `  Barcode: ${p.barcode || '-'}`,
+          `  Kategori: ${p.kategori?.nama || '-'}`,
+          `  Supplier: ${p.supplier?.nama || '-'}`,
+          `  Satuan: ${p.satuan}`,
+          `  Harga Beli: ${formatRupiah(Number(p.harga_beli))}`,
+          `  Harga Jual: ${formatRupiah(Number(p.harga_jual))}`,
+          `  Margin: ${formatRupiah(Number(p.harga_jual) - Number(p.harga_beli))} (${(((Number(p.harga_jual) - Number(p.harga_beli)) / Number(p.harga_beli)) * 100).toFixed(1)}%)`,
+          `  Stok: ${Number(p.stok)} ${p.satuan}`,
+          `  Stok Minimum: ${Number(p.stok_min)}`,
+          `  Status: ${p.is_aktif ? 'Aktif' : 'Nonaktif'}`,
+          `  Expired: ${p.expired_date ? new Date(p.expired_date).toISOString().split('T')[0] : '-'}`,
+          p.harga_tingkat && p.harga_tingkat.length > 0
+            ? `  Harga Tingkat:\n${p.harga_tingkat.map((ht: any) => `    - ${ht.tingkat}: min ${Number(ht.min_qty)} → ${formatRupiah(Number(ht.harga))}`).join('\n')}`
+            : '',
+        ].filter(Boolean).join('\n');
+      } catch (err: any) {
+        return err.message || 'Produk tidak ditemukan.';
+      }
+    },
+  },
+
+  tambah_produk: {
+    nama: 'tambah_produk',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      const kode = await generateKodeProduk();
+      const data = {
+        kode,
+        nama: params.nama,
+        harga_jual: Number(params.harga_jual),
+        harga_beli: Number(params.harga_beli),
+        kategori_id: Number(params.kategori_id),
+        satuan: params.satuan || 'pcs',
+        barcode: params.barcode || null,
+        stok_min: params.stok_min ? Number(params.stok_min) : 5,
+        stok: params.stok ? Number(params.stok) : 0,
+      };
+      try {
+        const produk = await ProdukService.create(data, userId, ip, userAgent);
+        return `Produk berhasil ditambahkan!\n  ID: ${produk.id}\n  Kode: ${produk.kode}\n  Nama: ${produk.nama}\n  Harga Jual: ${formatRupiah(Number(produk.harga_jual))}`;
+      } catch (err: any) {
+        return `Gagal menambah produk: ${err.message}`;
+      }
+    },
+  },
+
+  update_produk: {
+    nama: 'update_produk',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      const { id, ...data } = params;
+      try {
+        const cleanData: any = { ...data };
+        if (cleanData.harga_jual !== undefined) cleanData.harga_jual = Number(cleanData.harga_jual);
+        if (cleanData.harga_beli !== undefined) cleanData.harga_beli = Number(cleanData.harga_beli);
+        if (cleanData.kategori_id !== undefined) cleanData.kategori_id = Number(cleanData.kategori_id);
+        if (cleanData.stok_min !== undefined) cleanData.stok_min = Number(cleanData.stok_min);
+        if (cleanData.stok !== undefined) cleanData.stok = Number(cleanData.stok);
+
+        const produk = await ProdukService.update(Number(id), cleanData, userId, ip, userAgent);
+        return `Produk berhasil diupdate!\n  ID: ${produk.id}\n  Nama: ${produk.nama}\n  Harga Jual: ${formatRupiah(Number(produk.harga_jual))}`;
+      } catch (err: any) {
+        return `Gagal mengupdate produk: ${err.message}`;
+      }
+    },
+  },
+
+  hapus_produk: {
+    nama: 'hapus_produk',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      try {
+        await ProdukService.delete(Number(params.id), userId, ip, userAgent);
+        return `Produk dengan ID ${params.id} berhasil dihapus.`;
+      } catch (err: any) {
+        return `Gagal menghapus produk: ${err.message}`;
+      }
+    },
+  },
+
+  // ── Stok ──
+  cek_stok: {
+    nama: 'cek_stok',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async (params) => {
+      const { products } = await ProdukService.getProduk(0, 5, undefined, undefined, params.pencarian);
+      if (products.length === 0) return `Tidak ditemukan produk "${params.pencarian}".`;
+
+      const items = products.map((p: any) => {
+        const stok = Number(p.stok);
+        const min = Number(p.stok_min);
+        let status = '✅ Aman';
+        if (stok === 0) status = '🔴 Habis';
+        else if (stok <= min) status = '⚠️ Rendah';
+        return `- ${p.nama}: ${stok} ${p.satuan} (min: ${min}) — ${status}`;
+      });
+      return `Stok produk:\n${items.join('\n')}`;
+    },
+  },
+
+  stok_rendah: {
+    nama: 'stok_rendah',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async () => {
+      const products = await prisma.$queryRaw<any[]>`
+        SELECT id, nama, stok, stok_min, satuan FROM produk 
+        WHERE deleted_at IS NULL AND is_aktif = 1 AND stok <= stok_min
+        ORDER BY stok ASC
+        LIMIT 20
+      `;
+      if (products.length === 0) return 'Semua stok produk aman! Tidak ada yang rendah atau habis.';
+
+      const items = products.map((p: any) => {
+        const stok = Number(p.stok);
+        const icon = stok === 0 ? '🔴' : '⚠️';
+        return `${icon} [ID:${p.id}] ${p.nama}: ${stok} ${p.satuan} (min: ${Number(p.stok_min)})`;
+      });
+      return `Produk stok rendah/habis (${products.length}):\n${items.join('\n')}`;
+    },
+  },
+
+  stok_kadaluarsa: {
+    nama: 'stok_kadaluarsa',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async () => {
+      const hariIni = new Date();
+      const batas = new Date();
+      batas.setDate(batas.getDate() + 30);
+
+      const expired = await prisma.produk.findMany({
+        where: { deleted_at: null, is_aktif: 1, expired_date: { lt: hariIni } },
+        select: { id: true, nama: true, expired_date: true, stok: true },
+        take: 10,
+      });
+
+      const nearExpired = await prisma.produk.findMany({
+        where: { deleted_at: null, is_aktif: 1, expired_date: { gte: hariIni, lte: batas } },
+        select: { id: true, nama: true, expired_date: true, stok: true },
+        take: 10,
+      });
+
+      const lines: string[] = [];
+      if (expired.length > 0) {
+        lines.push('🔴 Sudah Kadaluarsa:');
+        expired.forEach((p) => {
+          lines.push(`  - [ID:${p.id}] ${p.nama} — Expired: ${p.expired_date ? new Date(p.expired_date).toISOString().split('T')[0] : '-'} | Stok: ${Number(p.stok)}`);
+        });
+      }
+      if (nearExpired.length > 0) {
+        lines.push('⚠️ Mendekati Kadaluarsa (30 hari):');
+        nearExpired.forEach((p) => {
+          lines.push(`  - [ID:${p.id}] ${p.nama} — Expired: ${p.expired_date ? new Date(p.expired_date).toISOString().split('T')[0] : '-'} | Stok: ${Number(p.stok)}`);
+        });
+      }
+      if (lines.length === 0) return 'Tidak ada produk yang kadaluarsa atau mendekati kadaluarsa.';
+      return lines.join('\n');
+    },
+  },
+
+  tambah_stok_masuk: {
+    nama: 'tambah_stok_masuk',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId) => {
+      try {
+        let produkId = params.produk_id ? Number(params.produk_id) : null;
+        if (!produkId && params.nama_produk) {
+          const prod = await prisma.produk.findFirst({
+            where: { nama: { contains: params.nama_produk }, deleted_at: null },
+          });
+          if (prod) {
+            produkId = prod.id;
+          }
+        }
+
+        if (!produkId) {
+          return `Gagal menambah stok: Produk tidak ditemukan di database.`;
+        }
+
+        const result = await StokService.tambahStok({
+          produkId,
+          qty: Number(params.qty),
+          hargaBeli: Number(params.harga_beli),
+          supplierId: params.supplier_id ? Number(params.supplier_id) : null,
+          userId,
+          catatan: params.catatan || 'Restock via chatbot',
+          referensi: 'CHATBOT',
+        });
+        return `Stok berhasil ditambahkan!\n  Batch: ${result.batch.id}\n  Qty: ${params.qty}\n  Harga Beli: ${formatRupiah(params.harga_beli)}`;
+      } catch (err: any) {
+        return `Gagal menambah stok: ${err.message}`;
+      }
+    },
+  },
+
+  // ── Transaksi ──
+  ringkasan_penjualan: {
+    nama: 'ringkasan_penjualan',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async (params) => {
+      const now = new Date();
+      let tanggalMulai: Date;
+      let tanggalAkhir: Date = new Date(now);
+      tanggalAkhir.setHours(23, 59, 59, 999);
+
+      switch (params.periode) {
+        case 'kemarin': {
+          tanggalMulai = new Date(now);
+          tanggalMulai.setDate(tanggalMulai.getDate() - 1);
+          tanggalMulai.setHours(0, 0, 0, 0);
+          tanggalAkhir = new Date(tanggalMulai);
+          tanggalAkhir.setHours(23, 59, 59, 999);
+          break;
+        }
+        case 'minggu_ini': {
+          tanggalMulai = new Date(now);
+          const day = tanggalMulai.getDay();
+          tanggalMulai.setDate(tanggalMulai.getDate() - (day === 0 ? 6 : day - 1));
+          tanggalMulai.setHours(0, 0, 0, 0);
+          break;
+        }
+        case 'bulan_ini': {
+          tanggalMulai = new Date(now.getFullYear(), now.getMonth(), 1);
+          break;
+        }
+        default: { // hari_ini
+          tanggalMulai = new Date(now);
+          tanggalMulai.setHours(0, 0, 0, 0);
+          break;
+        }
+      }
+
+      const result = await prisma.transaksi.aggregate({
+        where: {
+          tanggal: { gte: tanggalMulai, lte: tanggalAkhir },
+          deleted_at: null,
+          status: { not: 'void' },
+        },
+        _count: { id: true },
+        _sum: { total: true, diskon_total: true },
+      });
+
+      const jumlah = result._count.id || 0;
+      const total = Number(result._sum.total || 0);
+      const diskon = Number(result._sum.diskon_total || 0);
+
+      const periodeLabel: Record<string, string> = {
+        hari_ini: 'Hari Ini',
+        kemarin: 'Kemarin',
+        minggu_ini: 'Minggu Ini',
+        bulan_ini: 'Bulan Ini',
+      };
+
+      return [
+        `Ringkasan Penjualan — ${periodeLabel[params.periode] || params.periode}:`,
+        `  Jumlah Transaksi: ${jumlah}`,
+        `  Total Penjualan: ${formatRupiah(total)}`,
+        `  Total Diskon: ${formatRupiah(diskon)}`,
+        `  Rata-rata per Transaksi: ${jumlah > 0 ? formatRupiah(Math.round(total / jumlah)) : 'Rp 0'}`,
+      ].join('\n');
+    },
+  },
+
+  detail_transaksi: {
+    nama: 'detail_transaksi',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async (params) => {
+      const tx = await prisma.transaksi.findUnique({
+        where: { no_transaksi: params.no_transaksi },
+        include: {
+          transaksi_detail: { include: { produk: true } },
+          pembayaran: true,
+          user: { select: { nama: true } },
+          member: { select: { nama: true, kode: true } },
+        },
+      });
+      if (!tx) return `Transaksi dengan nomor "${params.no_transaksi}" tidak ditemukan.`;
+
+      const items = tx.transaksi_detail.map((d: any) =>
+        `  - ${d.nama_produk} x${Number(d.qty)} ${d.satuan} @ ${formatRupiah(Number(d.harga_satuan))} = ${formatRupiah(Number(d.subtotal))}`
+      );
+
+      const bayar = tx.pembayaran.map((p: any) =>
+        `  - ${p.metode}: ${formatRupiah(Number(p.nominal))}`
+      );
+
+      return [
+        `Detail Transaksi ${tx.no_transaksi}:`,
+        `  Tanggal: ${tx.tanggal}`,
+        `  Kasir: ${tx.user.nama}`,
+        `  Member: ${tx.member ? `${tx.member.nama} (${tx.member.kode})` : '-'}`,
+        `  Status: ${tx.status}`,
+        ``,
+        `  Items:`,
+        ...items,
+        ``,
+        `  Subtotal: ${formatRupiah(Number(tx.subtotal))}`,
+        `  Diskon: ${formatRupiah(Number(tx.diskon_total))}`,
+        `  Total: ${formatRupiah(Number(tx.total))}`,
+        ``,
+        `  Pembayaran:`,
+        ...bayar,
+        `  Kembalian: ${formatRupiah(Number(tx.kembalian))}`,
+      ].join('\n');
+    },
+  },
+
+  void_transaksi: {
+    nama: 'void_transaksi',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      try {
+        let txId = params.id ? Number(params.id) : null;
+        
+        if (!txId && params.no_transaksi) {
+          const tx = await prisma.transaksi.findUnique({
+            where: { no_transaksi: params.no_transaksi }
+          });
+          if (tx) txId = tx.id;
+        }
+
+        if (!txId) {
+          return `Gagal membatalkan transaksi: Nomor atau ID transaksi tidak ditemukan.`;
+        }
+
+        await TransaksiService.prosesVoidTransaksi(
+          txId,
+          params.alasan || 'Pembatalan via chatbot',
+          userId,
+          ip,
+          userAgent
+        );
+
+        return `Transaksi dengan ID ${txId} (${params.no_transaksi || ''}) berhasil dibatalkan (void).`;
+      } catch (err: any) {
+        return `Gagal membatalkan transaksi: ${err.message}`;
+      }
+    },
+  },
+
+  // ── Member ──
+  cari_member: {
+    nama: 'cari_member',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async (params) => {
+      const members = await MemberService.getMembers(0, 10, params.pencarian);
+      if (members.length === 0) return `Tidak ditemukan member dengan pencarian "${params.pencarian}".`;
+
+      const items = members.map((m: any) =>
+        `- [ID:${m.id}] ${m.nama} | Kode: ${m.kode} | HP: ${m.nomor_hp} | Poin: ${m.total_poin} | Bon: ${formatRupiah(Number(m.total_bon))}`
+      );
+      return `Ditemukan ${members.length} member:\n${items.join('\n')}`;
+    },
+  },
+
+  tambah_member: {
+    nama: 'tambah_member',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      const kode = await generateKodeMember();
+      try {
+        const member = await MemberService.create({
+          kode,
+          nama: params.nama,
+          nomor_hp: params.nomor_hp,
+          alamat: params.alamat || null,
+          limit_bon: params.limit_bon ? Number(params.limit_bon) : 0,
+        }, userId, ip, userAgent);
+        return `Member berhasil didaftarkan!\n  ID: ${member.id}\n  Kode: ${member.kode}\n  Nama: ${member.nama}\n  HP: ${member.nomor_hp}`;
+      } catch (err: any) {
+        return `Gagal mendaftarkan member: ${err.message}`;
+      }
+    },
+  },
+
+  update_member: {
+    nama: 'update_member',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      const { id, ...data } = params;
+      try {
+        const cleanData: any = { ...data };
+        if (cleanData.limit_bon !== undefined) cleanData.limit_bon = Number(cleanData.limit_bon);
+
+        const member = await MemberService.update(Number(id), cleanData, userId, ip, userAgent);
+        return `Member berhasil diupdate!\n  ID: ${member.id}\n  Nama: ${member.nama}\n  Limit Bon: ${formatRupiah(Number(member.limit_bon))}`;
+      } catch (err: any) {
+        return `Gagal mengupdate member: ${err.message}`;
+      }
+    },
+  },
+
+  hapus_member: {
+    nama: 'hapus_member',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      try {
+        await MemberService.delete(Number(params.id), userId, ip, userAgent);
+        return `Member dengan ID ${params.id} berhasil dihapus.`;
+      } catch (err: any) {
+        return `Gagal menghapus member: ${err.message}`;
+      }
+    },
+  },
+
+  info_bon_member: {
+    nama: 'info_bon_member',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async (params) => {
+      const bonList = await BonService.getBon(0, 10, undefined, params.member_id);
+      if (bonList.length === 0) return `Member dengan ID ${params.member_id} tidak memiliki bon/piutang.`;
+
+      const member = (bonList[0] as any).member;
+      const lines = [
+        `Info Bon/Piutang — ${member.nama} (${member.kode}):`,
+        `  Total Bon Aktif: ${formatRupiah(Number(member.total_bon))}`,
+        `  Limit Bon: ${formatRupiah(Number(member.limit_bon))}`,
+        `  Sisa Limit: ${formatRupiah(Number(member.limit_bon) - Number(member.total_bon))}`,
+        ``,
+        `  Riwayat Bon:`,
+      ];
+      bonList.forEach((b: any) => {
+        lines.push(`  - Bon #${b.id} | ${formatRupiah(Number(b.total_bon))} | Sisa: ${formatRupiah(Number(b.sisa_bon))} | Status: ${b.status} | Jatuh Tempo: ${b.jatuh_tempo ? new Date(b.jatuh_tempo).toISOString().split('T')[0] : '-'}`);
+      });
+      return lines.join('\n');
+    },
+  },
+
+  // ── Supplier ──
+  cari_supplier: {
+    nama: 'cari_supplier',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async (params) => {
+      const suppliers = await SupplierService.getSuppliers(0, 10, params.pencarian);
+      if (suppliers.length === 0) return `Tidak ditemukan supplier dengan pencarian "${params.pencarian}".`;
+
+      const items = suppliers.map((s: any) =>
+        `- [ID:${s.id}] ${s.nama} | HP: ${s.nomor_hp || '-'} | Kontak: ${s.kontak || '-'} | Hutang: ${formatRupiah(Number(s.hutang))}`
+      );
+      return `Ditemukan ${suppliers.length} supplier:\n${items.join('\n')}`;
+    },
+  },
+
+  tambah_supplier: {
+    nama: 'tambah_supplier',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      try {
+        const supplier = await SupplierService.create({
+          nama: params.nama,
+          kontak: params.kontak || null,
+          nomor_hp: params.nomor_hp || null,
+          alamat: params.alamat || null,
+        }, userId, ip, userAgent);
+        return `Supplier berhasil ditambahkan!\n  ID: ${supplier.id}\n  Nama: ${supplier.nama}`;
+      } catch (err: any) {
+        return `Gagal menambah supplier: ${err.message}`;
+      }
+    },
+  },
+
+  update_supplier: {
+    nama: 'update_supplier',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      const { id, ...data } = params;
+      try {
+        const cleanData: any = { ...data };
+        const supplier = await SupplierService.update(Number(id), cleanData, userId, ip, userAgent);
+        return `Supplier berhasil diupdate!\n  ID: ${supplier.id}\n  Nama: ${supplier.nama}`;
+      } catch (err: any) {
+        return `Gagal mengupdate supplier: ${err.message}`;
+      }
+    },
+  },
+
+  hapus_supplier: {
+    nama: 'hapus_supplier',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      try {
+        await SupplierService.delete(Number(params.id), userId, ip, userAgent);
+        return `Supplier dengan ID ${params.id} berhasil dihapus.`;
+      } catch (err: any) {
+        return `Gagal menghapus supplier: ${err.message}`;
+      }
+    },
+  },
+
+  // ── Laporan ──
+  produk_terlaris: {
+    nama: 'produk_terlaris',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async (params) => {
+      const limit = params.limit || 10;
+      const now = new Date();
+      let dateFilter = '';
+
+      if (params.periode === 'minggu_ini') {
+        const start = new Date(now);
+        const day = start.getDay();
+        start.setDate(start.getDate() - (day === 0 ? 6 : day - 1));
+        dateFilter = `AND t.tanggal >= '${start.toISOString().split('T')[0]}'`;
+      } else if (params.periode !== 'semua') {
+        // bulan_ini (default)
+        const start = new Date(now.getFullYear(), now.getMonth(), 1);
+        dateFilter = `AND t.tanggal >= '${start.toISOString().split('T')[0]}'`;
+      }
+
+      const results = await prisma.$queryRawUnsafe<any[]>(`
+        SELECT td.nama_produk, SUM(td.qty) as total_qty, SUM(td.subtotal) as total_revenue
+        FROM transaksi_detail td
+        JOIN transaksi t ON t.id = td.transaksi_id
+        WHERE t.deleted_at IS NULL AND t.status != 'void' ${dateFilter}
+        GROUP BY td.produk_id, td.nama_produk
+        ORDER BY total_qty DESC
+        LIMIT ${limit}
+      `);
+
+      if (results.length === 0) return 'Belum ada data penjualan untuk periode ini.';
+
+      const periodeLabel: Record<string, string> = {
+        minggu_ini: 'Minggu Ini',
+        bulan_ini: 'Bulan Ini',
+        semua: 'Semua Waktu',
+      };
+
+      const lines = [`Produk Terlaris — ${periodeLabel[params.periode || 'bulan_ini'] || 'Bulan Ini'}:`];
+      results.forEach((r: any, i: number) => {
+        lines.push(`  ${i + 1}. ${r.nama_produk} — ${Number(r.total_qty)} terjual | Revenue: ${formatRupiah(Number(r.total_revenue))}`);
+      });
+      return lines.join('\n');
+    },
+  },
+
+  // ── Kategori ──
+  daftar_kategori: {
+    nama: 'daftar_kategori',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async () => {
+      const categories = await KategoriService.getKategori(0, 100);
+      if (categories.length === 0) return 'Belum ada kategori produk.';
+
+      const items = categories.map((k: any) =>
+        `- [ID:${k.id}] ${k.nama} ${k.icon ? `(${k.icon})` : ''}`
+      );
+      return `Daftar Kategori (${categories.length}):\n${items.join('\n')}`;
+    },
+  },
+
+  // ── Sistem ──
+  statistik_toko: {
+    nama: 'statistik_toko',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async () => {
+      const hariIni = new Date();
+      hariIni.setHours(0, 0, 0, 0);
+      const besok = new Date(hariIni);
+      besok.setDate(besok.getDate() + 1);
+
+      const [totalProduk, totalMember, totalSupplier, totalKategori, txHariIni, bonAktif, shiftAktif, stokRendah] =
+        await Promise.all([
+          prisma.produk.count({ where: { deleted_at: null, is_aktif: 1 } }),
+          prisma.member.count({ where: { deleted_at: null, aktif: 1 } }),
+          prisma.supplier.count({ where: { deleted_at: null, aktif: 1 } }),
+          prisma.kategori.count({ where: { deleted_at: null, aktif: 1 } }),
+          prisma.transaksi.aggregate({
+            where: { tanggal: { gte: hariIni, lt: besok }, deleted_at: null, status: { not: 'void' } },
+            _count: { id: true },
+            _sum: { total: true },
+          }),
+          prisma.bon.aggregate({ where: { status: 'aktif' }, _sum: { sisa_bon: true }, _count: { id: true } }),
+          prisma.shift.findFirst({ where: { status: 'buka' }, include: { user: { select: { nama: true } } } }),
+          prisma.$queryRaw<any[]>`SELECT COUNT(*) as count FROM produk WHERE deleted_at IS NULL AND is_aktif = 1 AND stok <= stok_min`,
+        ]);
+
+      return [
+        '📊 Statistik Toko Tokiva:',
+        '',
+        `📦 Produk Aktif: ${totalProduk}`,
+        `📂 Kategori: ${totalKategori}`,
+        `👥 Member: ${totalMember}`,
+        `🚚 Supplier: ${totalSupplier}`,
+        '',
+        `💰 Transaksi Hari Ini: ${txHariIni._count.id || 0} transaksi`,
+        `💵 Revenue Hari Ini: ${formatRupiah(Number(txHariIni._sum.total || 0))}`,
+        '',
+        `📋 Bon Aktif: ${bonAktif._count.id || 0} bon`,
+        `💳 Total Piutang: ${formatRupiah(Number(bonAktif._sum.sisa_bon || 0))}`,
+        '',
+        `⚠️ Produk Stok Rendah/Habis: ${Number((stokRendah as any)[0]?.count || 0)}`,
+        `🕐 Shift Aktif: ${shiftAktif ? `${shiftAktif.user.nama}` : 'Tidak ada'}`,
+      ].join('\n');
+    },
+  },
+
+  tambah_kategori: {
+    nama: 'tambah_kategori',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      try {
+        const result = await KategoriService.create(params, userId, ip, userAgent);
+        return `Kategori "${result.nama}" berhasil dibuat dengan ID ${result.id}.`;
+      } catch (err: any) {
+        return `Gagal menambah kategori: ${err.message}`;
+      }
+    },
+  },
+
+  update_kategori: {
+    nama: 'update_kategori',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      const { id, ...data } = params;
+      try {
+        const result = await KategoriService.update(Number(id), data, userId, ip, userAgent);
+        return `Kategori ID ${id} berhasil diperbarui (Nama: ${result.nama}).`;
+      } catch (err: any) {
+        return `Gagal memperbarui kategori: ${err.message}`;
+      }
+    },
+  },
+
+  hapus_kategori: {
+    nama: 'hapus_kategori',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      try {
+        let idVal = params.id ? Number(params.id) : null;
+        if (!idVal && params.nama) {
+          const cat = await prisma.kategori.findFirst({
+            where: { nama: params.nama, deleted_at: null },
+          });
+          if (cat) {
+            idVal = cat.id;
+          }
+        }
+
+        if (!idVal) {
+          return `Gagal menghapus kategori: ID atau nama kategori tidak valid atau tidak ditemukan di database.`;
+        }
+
+        await KategoriService.delete(idVal, userId, ip, userAgent);
+        return `Kategori "${params.nama || idVal}" berhasil dihapus.`;
+      } catch (err: any) {
+        return `Gagal menghapus kategori: ${err.message}`;
+      }
+    },
+  },
+
+  daftar_diskon: {
+    nama: 'daftar_diskon',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async () => {
+      const promos = await prisma.diskon.findMany({
+        orderBy: { created_at: 'desc' },
+      });
+      if (promos.length === 0) return 'Belum ada promosi atau diskon belanja yang terdaftar.';
+
+      const formatTipe = (t: string) => {
+        const map: Record<string, string> = {
+          total_persen: 'Potongan Belanja (%)',
+          total_nominal: 'Potongan Belanja (Rupiah)',
+          per_item_persen: 'Potongan Produk (%)',
+          per_item_nominal: 'Potongan Produk (Rupiah)',
+        };
+        return map[t] || t;
+      };
+
+      const lines = promos.map((p) => {
+        const status = p.is_aktif ? '✅ Aktif' : '❌ Nonaktif';
+        const tglMulaiStr = p.tgl_mulai ? new Date(p.tgl_mulai).toISOString().split('T')[0] : '';
+        const tglSelesaiStr = p.tgl_selesai ? new Date(p.tgl_selesai).toISOString().split('T')[0] : '';
+        const nilaiStr = p.tipe.includes('persen') ? `${p.nilai}%` : formatRupiah(Number(p.nilai));
+        return `- [ID:${p.id}] ${p.nama} | Tipe: ${formatTipe(p.tipe)} | Nilai: ${nilaiStr} | Min Belanja: ${formatRupiah(Number(p.min_belanja))} | Berlaku: ${tglMulaiStr} s/d ${tglSelesaiStr} | Status: ${status}`;
+      });
+
+      return `Daftar Promosi/Diskon Toko:\n${lines.join('\n')}`;
+    },
+  },
+
+  tambah_diskon: {
+    nama: 'tambah_diskon',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      try {
+        const promo = await prisma.diskon.create({
+          data: {
+            nama: params.nama,
+            tipe: params.tipe,
+            nilai: Number(params.nilai),
+            min_belanja: params.min_belanja !== undefined ? Number(params.min_belanja) : 0,
+            tgl_mulai: new Date(params.tgl_mulai),
+            tgl_selesai: new Date(params.tgl_selesai),
+            member_only: params.member_only !== undefined ? Number(params.member_only) : 0,
+            is_aktif: 1,
+          },
+        });
+
+        await catatAudit({
+          userId,
+          aksi: 'create',
+          entitas: 'diskon',
+          entitasId: promo.id,
+          dataBaru: { nama: promo.nama, tipe: promo.tipe, nilai: Number(promo.nilai) },
+          ipAddress: ip,
+          userAgent,
+        });
+
+        return `Diskon/Promosi "${promo.nama}" berhasil dibuat dengan ID ${promo.id}.`;
+      } catch (err: any) {
+        return `Gagal membuat promosi: ${err.message}`;
+      }
+    },
+  },
+
+  update_diskon: {
+    nama: 'update_diskon',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      const { id, ...data } = params;
+      const idNum = Number(id);
+      try {
+        const existing = await prisma.diskon.findUnique({ where: { id: idNum } });
+        if (!existing) return `Diskon dengan ID ${id} tidak ditemukan.`;
+
+        const updateData: any = {};
+        if (data.nama !== undefined) updateData.nama = data.nama;
+        if (data.tipe !== undefined) updateData.tipe = data.tipe;
+        if (data.nilai !== undefined) updateData.nilai = Number(data.nilai);
+        if (data.min_belanja !== undefined) updateData.min_belanja = Number(data.min_belanja);
+        if (data.tgl_mulai !== undefined) updateData.tgl_mulai = new Date(data.tgl_mulai);
+        if (data.tgl_selesai !== undefined) updateData.tgl_selesai = new Date(data.tgl_selesai);
+        if (data.is_aktif !== undefined) updateData.is_aktif = Number(data.is_aktif);
+
+        const promo = await prisma.diskon.update({
+          where: { id: idNum },
+          data: updateData,
+        });
+
+        await catatAudit({
+          userId,
+          aksi: 'update',
+          entitas: 'diskon',
+          entitasId: promo.id,
+          dataLama: { nama: existing.nama, tipe: existing.tipe, nilai: Number(existing.nilai) },
+          dataBaru: { nama: promo.nama, tipe: promo.tipe, nilai: Number(promo.nilai) },
+          ipAddress: ip,
+          userAgent,
+        });
+
+        return `Diskon ID ${id} berhasil diperbarui (Nama: ${promo.nama}).`;
+      } catch (err: any) {
+        return `Gagal memperbarui diskon: ${err.message}`;
+      }
+    },
+  },
+
+  hapus_diskon: {
+    nama: 'hapus_diskon',
+    butuhKonfirmasi: true,
+    adminOnly: true,
+    handler: async (params, userId, ip, userAgent) => {
+      const idNum = Number(params.id);
+      try {
+        const existing = await prisma.diskon.findUnique({ where: { id: idNum } });
+        if (!existing) return `Diskon dengan ID ${params.id} tidak ditemukan.`;
+
+        await prisma.diskon.delete({ where: { id: idNum } });
+
+        await catatAudit({
+          userId,
+          aksi: 'delete',
+          entitas: 'diskon',
+          entitasId: idNum,
+          dataLama: { nama: existing.nama, tipe: existing.tipe, nilai: Number(existing.nilai) },
+          dataBaru: { deleted: true },
+          ipAddress: ip,
+          userAgent,
+        });
+
+        return `Diskon dengan ID ${params.id} berhasil dihapus dari database.`;
+      } catch (err: any) {
+        return `Gagal menghapus diskon: ${err.message}`;
+      }
+    },
+  },
+
+  ekspor_laporan: {
+    nama: 'ekspor_laporan',
+    butuhKonfirmasi: false,
+    adminOnly: false,
+    handler: async (params) => {
+      try {
+        const tglMulai = params.tgl_mulai ? new Date(params.tgl_mulai) : new Date();
+        const tglSelesai = params.tgl_selesai ? new Date(params.tgl_selesai) : new Date();
+        
+        if (!params.tgl_mulai) tglMulai.setHours(0,0,0,0);
+        if (!params.tgl_selesai) tglSelesai.setHours(23,59,59,999);
+
+        const result = await OpsService.eksporLaporan({
+          jenis: params.jenis,
+          format: params.format,
+          tglMulai,
+          tglSelesai,
+        });
+
+        return `Laporan ${params.jenis} (${params.format.toUpperCase()}) berhasil dibuat!\nSilakan download melalui tautan berikut:\n👉 ${result.url}`;
+      } catch (err: any) {
+        return `Gagal mengekspor laporan: ${err.message}`;
+      }
+    },
+  },
+};
+
+/**
+ * Ambil tools yang boleh diakses berdasarkan role user.
+ */
+export function getToolsForRole(role: string): ChatCompletionTool[] {
+  if (role === 'admin') return TOOL_DEFINITIONS;
+
+  // Kasir hanya bisa akses tools non-admin
+  const adminOnlyTools = Object.values(TOOL_HANDLERS)
+    .filter((h) => h.adminOnly)
+    .map((h) => h.nama);
+
+  return TOOL_DEFINITIONS.filter(
+    (t) => !adminOnlyTools.includes((t as any).function.name)
+  );
+}

src/utils/supabase.ts

@@ -70,6 +70,38 @@ export const uploadBase64ToSupabase = async (
   }
 };
 
+export const uploadBufferToSupabase = async (
+  bucket: string,
+  filePath: string,
+  fileBuffer: Buffer,
+  mimeType: string
+): Promise<string | null> => {
+  try {
+    const uploadUrl = `${SUPABASE_URL}/storage/v1/object/${bucket}/${filePath}`;
+    
+    const response = await fetch(uploadUrl, {
+      method: 'POST',
+      headers: {
+        'Authorization': `Bearer ${SUPABASE_SERVICE_KEY}`,
+        'Content-Type': mimeType,
+        'x-upsert': 'true'
+      },
+      body: fileBuffer
+    });
+
+    if (response.ok) {
+      return `${SUPABASE_URL}/storage/v1/object/public/${bucket}/${filePath}`;
+    } else {
+      const errorText = await response.text();
+      console.error(`Supabase upload failed: ${response.status} - ${errorText}`);
+      return null;
+    }
+  } catch (error) {
+    console.error('Error uploading buffer to Supabase:', error);
+    return null;
+  }
+};
+
 export const deleteFromSupabase = async (
   bucket: string,
   filePath: string