Claude runtime authorization

import Anthropic from '@anthropic-ai/sdk'

const client = new Anthropic()

const tools = [
  {
    name: 'send_email',
    description: 'Send an email',
    input_schema: {
      type: 'object',
      properties: {
        to: { type: 'string' },
        subject: { type: 'string' },
        body: { type: 'string' },
      },
      required: ['to', 'subject', 'body'],
    },
  },
  {
    name: 'delete_records',
    description: 'Delete database records',
    input_schema: {
      type: 'object',
      properties: {
        table: { type: 'string' },
        where: { type: 'string' },
      },
      required: ['table', 'where'],
    },
  },
]

const response = await client.messages.create({
  model: process.env.ANTHROPIC_MODEL!,
  max_tokens: 1024,
  tools,
  messages: [{ role: 'user', content: userMessage }],
})

// Claude decides to call delete_records.
// Your code executes it. No questions asked.
for (const block of response.content) {
  if (block.type === 'tool_use') {
    const result = await executeTool(block.name, block.input)
    // No policy decision happens here.
  }
}