Augusto Bastos

luckycat.ie

• Restaurant software: a React/TypeScript ordering app and an operations dashboard on Supabase, one codebase for all tenants.
• Tenant data isolated with PostgreSQL Row-Level Security and checked by Playwright cross-tenant tests; a security review found and fixed two serious bugs. Stripe Connect card charge tested end to end.

luckycat.ie/synergy

• Contract-based action layer for AI agents: one contract per app, MCP annotations derived from it, and a static safety lint that rejects unconfirmed money moves, financial writes without an idempotency key and anonymous writes.

luckycat.ie/pitchpilot

• White-label field-sales app whose copilot answers pricing and contract objections from each product's own documents.
• A Supabase Edge Function embeds the question with Gemini, retrieves the top 6 chunks with pgvector filtered to the active product and answers with Gemini Flash-Lite, logging its sources; keys stay server-side. Replaced an IVFFlat index with exact search after recall collapsed on a small corpus.

Open source (MIT) | github.com/augbastos/Deputy-MCP

• Python MCP server that lets Claude answer roster questions ("When do I work next?") from a live Deputy account: 11 read tools, plus 5 write tools that exist only when DEPUTY_ALLOW_WRITES=true.
• OAuth, API-token or calendar sign-in; tokens kept in the OS keychain and by default sent only to *.deputy.com. Read tools and OAuth tested on a real Deputy account; write tools covered by automated tests.