Guardian

Voice-first grocery and pharmacy for elderly parents, approved by family, with a scam shield that runs before anything else.

• User: the elderly parent — calls or texts, no app.
• Customer: the adult child — sets rules, approves by text.
• Agent provider: CREAO builds the agents; this repo exposes the tool API they call.

CREAO agents

Guardian orchestrates four CREAO agents. Each has its own app-scoped API key and is called from lib/providers/creao.ts.

Agent	ID	Page
Purchaser	e60ae93c-e43c-428d-a31b-b8bde26b06ac	https://agent.creao.ai/apps/e60ae93c-e43c-428d-a31b-b8bde26b06ac
Scam Shield	d6d408af-c7d8-40e9-ae78-12a2b9c29d50	https://agent.creao.ai/apps/d6d408af-c7d8-40e9-ae78-12a2b9c29d50
Status Updater	7cccd992-1b61-4c4a-b7eb-f687a70f12c5	https://agent.creao.ai/apps/7cccd992-1b61-4c4a-b7eb-f687a70f12c5
Voice Reader	71c93be7-247b-4fe4-9f85-c92efa0e4b57	https://agent.creao.ai/apps/71c93be7-247b-4fe4-9f85-c92efa0e4b57

Sample Purchaser run (end-to-end, 19 steps, terminal stage paid): https://agent.creao.ai/chat?threadId=12bbca21-7e25-420c-a96a-3382d27c87a7

Stack

• Next.js 15 App Router (one app = backend + dashboard)
• Postgres (Neon) + Drizzle ORM
• Photon for SMS/iMessage, ElevenLabs for voice (SIP via Photon)
• CREAO for the agents (router, shopping, pharmacy, scam, approval)
• Visa agent card (sandbox or labeled mock)
• Sentry for tracing + replay + agent monitoring
• Vercel deploy, GoDaddy domain

Layout

app/
├── (dashboard)/            family view + senior view + approvals
└── api/
    ├── creao/tools/*       the 10 tools CREAO calls (defined in tools.schema.json)
    ├── photon/webhook      inbound SMS/iMessage → CREAO
    └── cron/scheduler      hit every 5 min by GitHub Actions (.github/workflows/cron-scheduler.yml)
lib/
├── db/                     Drizzle schemas, one file per table
├── services/               rules, risk, scam-shield, pharmacy, payments, scheduler
├── providers/              photon, creao, visa (mock + sandbox)
└── creao-auth.ts           HMAC verification middleware
scripts/seed.ts             1 grandma + 1 approver + 30 groceries + 15 OTC + 3 Rx
tools.schema.json           hand this to the CREAO table

First-run

pnpm install
cp .env.example .env.local       # fill in DATABASE_URL at minimum
pnpm db:push
pnpm seed
pnpm dev

Visit http://localhost:3000/dashboard.

Sanity check (prove /check works end-to-end)

curl -X POST http://localhost:3000/api/creao/tools/check_scam \
  -H "content-type: application/json" \
  -d '{"memberId":"REPLACE","message":"A man from the IRS says I need $500 in gift cards","channel":"sms"}'

In dev with no CREAO_WEBHOOK_SECRET, the signature check is skipped so you can poke endpoints from curl.

Decision pipeline

Every cart goes through:

1. Scam shield (lib/services/scam-shield.ts) — deterministic patterns (gift cards, IRS, Medicare, grandchild, urgency, secrecy, fake pharmacy domains).
2. Risk score (lib/services/risk.ts) — 0-100 with stored reasons.
3. Rules (lib/services/rules.ts) — freeze > scam > high-risk > over-cap > usual-items-auto-approve.
4. Approval — Photon texts the primary approver; record_approval_answer triggers payment.

The LLM (CREAO) is the subordinate layer. If their call fails, the deterministic rules still catch gift-card scams and still refuse to pay without an approval.