📞 dispatch-my-human no call

\n\n`;\n\napp.get(\"/\", (c) => {\n if (c.req.query(\"c\")) return c.html(PAGE);\n return c.text(landing(new URL(c.req.url).origin));\n});\n\nexport default app.fetch;\n",[177],"50b3f510-3428-4587-a1d8-69c4ecf1be01","db.ts","019ec8e3-8fe9-75a2-9f23-e7bdd7e0ed3f",42,["D",1782163549482],8,"// SQLite layer: calls + an append-only event feed per call, scoped by tenant.\n// A tenant is a hash of the caller's Vapi key (full SHA-256) — every connecting\n// user gets their own call history on this shared public server. The tenant is\n// internal-only: it never appears in a shareable URL. Per-call random secrets\n// (watch_token, webhook_secret) gate the watch page and inbound webhooks instead.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nawait sqlite.batch([\n `CREATE TABLE IF NOT EXISTS calls (\n id TEXT PRIMARY KEY,\n tenant TEXT,\n control_url TEXT,\n status TEXT DEFAULT 'starting',\n ended_reason TEXT,\n live_partial TEXT,\n cursor INTEGER DEFAULT 0,\n number TEXT,\n watch_token TEXT,\n webhook_secret TEXT,\n created_at TEXT\n )`,\n `CREATE TABLE IF NOT EXISTS events (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n tenant TEXT,\n call_id TEXT,\n type TEXT,\n role TEXT,\n content TEXT,\n created_at TEXT\n )`,\n // Escape hatch: a mid-call question the agent routes to the operator. The\n // blocking /tool endpoint inserts a row and waits for `answer` to be filled.\n `CREATE TABLE IF NOT EXISTS escalations (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n tenant TEXT,\n call_id TEXT,\n tool_call_id TEXT,\n question TEXT,\n answer TEXT,\n created_at TEXT,\n answered_at TEXT\n )`,\n]);\n// Older/remixed schemas may predate some columns — add them if missing.\nfor (const sql of [\n `ALTER TABLE calls ADD COLUMN tenant TEXT`,\n `ALTER TABLE calls ADD COLUMN watch_token TEXT`,\n `ALTER TABLE calls ADD COLUMN webhook_secret TEXT`,\n `ALTER TABLE events ADD COLUMN tenant TEXT`,\n]) {\n try {\n await sqlite.execute(sql);\n } catch { /* already there */ }\n}\n\nconst now = () => new Date().toISOString();\n\n// A 128-bit random hex token — used as a per-call watch capability and webhook secret.\nexport function randomToken(bytes = 16): string {\n const a = new Uint8Array(bytes);\n crypto.getRandomValues(a);\n return [...a].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport interface CallRow {\n id: string;\n tenant: string;\n control_url: string;\n status: string;\n ended_reason: string | null;\n live_partial: string | null;\n cursor: number;\n number: string;\n watch_token: string | null;\n webhook_secret: string | null;\n created_at: string;\n}\n\nexport interface EventRow {\n id: number;\n tenant: string;\n call_id: string;\n type: string;\n role: string;\n content: string;\n created_at: string;\n}\n\nexport async function insertCall(\n tenant: string,\n id: string,\n controlUrl: string,\n number: string,\n watchToken: string,\n webhookSecret: string,\n) {\n await sqlite.execute({\n sql: `INSERT INTO calls (id, tenant, control_url, status, cursor, number, watch_token, webhook_secret, created_at)\n VALUES (?, ?, ?, 'starting', 0, ?, ?, ?, ?)`,\n args: [id, tenant, controlUrl, number, watchToken, webhookSecret, now()],\n });\n}\n\nexport async function latestCall(tenant: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT * FROM calls WHERE tenant = ? ORDER BY created_at DESC LIMIT 1`,\n args: [tenant],\n });\n return (r.rows[0] as unknown as CallRow) ?? null;\n}\n\nexport async function getCall(id: string): Promise {\n const r = await sqlite.execute({ sql: `SELECT * FROM calls WHERE id = ?`, args: [id] });\n return (r.rows[0] as unknown as CallRow) ?? null;\n}\n\nexport async function setCallStatus(id: string, status: string, endedReason?: string | null) {\n await sqlite.execute({\n sql: `UPDATE calls SET status = ?, ended_reason = COALESCE(?, ended_reason) WHERE id = ?`,\n args: [status, endedReason ?? null, id],\n });\n}\n\nexport async function setPartial(id: string, partial: string | null) {\n await sqlite.execute({ sql: `UPDATE calls SET live_partial = ? WHERE id = ?`, args: [partial, id] });\n}\n\nexport async function setCursor(id: string, cursor: number) {\n await sqlite.execute({ sql: `UPDATE calls SET cursor = ? WHERE id = ?`, args: [cursor, id] });\n}\n\nexport async function addEvent(tenant: string, callId: string, type: string, role: string, content: string) {\n await sqlite.execute({\n sql: `INSERT INTO events (tenant, call_id, type, role, content, created_at) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [tenant, callId, type, role, content, now()],\n });\n}\n\nexport async function eventsAfter(callId: string, afterId: number): Promise {\n const r = await sqlite.execute({\n sql: `SELECT * FROM events WHERE call_id = ? AND id > ? ORDER BY id ASC`,\n args: [callId, afterId],\n });\n return r.rows as unknown as EventRow[];\n}\n\nexport async function hasTranscript(callId: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT 1 FROM events WHERE call_id = ? AND type = 'transcript' LIMIT 1`,\n args: [callId],\n });\n return r.rows.length > 0;\n}\n\nexport async function latestEventOfType(callId: string, type: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT * FROM events WHERE call_id = ? AND type = ? ORDER BY id DESC LIMIT 1`,\n args: [callId, type],\n });\n return (r.rows[0] as unknown as EventRow) ?? null;\n}\n\nexport async function transcriptLines(callId: string, limit = 200): Promise {\n const r = await sqlite.execute({\n sql: `SELECT * FROM events WHERE call_id = ? AND type = 'transcript' ORDER BY id ASC LIMIT ?`,\n args: [callId, limit],\n });\n return r.rows as unknown as EventRow[];\n}\n\nexport async function recentEvents(callId: string, limit = 100): Promise {\n const r = await sqlite.execute({\n sql: `SELECT * FROM events WHERE call_id = ? ORDER BY id DESC LIMIT ?`,\n args: [callId, limit],\n });\n return (r.rows as unknown as EventRow[]).reverse();\n}\n\n// ---------- escalations (the escape hatch) ----------\n\nexport interface EscalationRow {\n id: number;\n tenant: string;\n call_id: string;\n tool_call_id: string;\n question: string;\n answer: string | null;\n created_at: string;\n answered_at: string | null;\n}\n\nexport async function insertEscalation(\n tenant: string,\n callId: string,\n toolCallId: string,\n question: string,\n): Promise {\n const r = await sqlite.execute({\n sql: `INSERT INTO escalations (tenant, call_id, tool_call_id, question, created_at)\n VALUES (?, ?, ?, ?, ?) RETURNING id`,\n args: [tenant, callId, toolCallId, question, now()],\n });\n return Number((r.rows[0] as unknown as { id: number }).id);\n}\n\nexport async function getEscalation(id: number): Promise {\n const r = await sqlite.execute({ sql: `SELECT * FROM escalations WHERE id = ?`, args: [id] });\n return (r.rows[0] as unknown as EscalationRow) ?? null;\n}\n\n// The oldest still-unanswered question for this tenant (FIFO).\nexport async function pendingEscalation(tenant: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT * FROM escalations WHERE tenant = ? AND answer IS NULL ORDER BY id ASC LIMIT 1`,\n args: [tenant],\n });\n return (r.rows[0] as unknown as EscalationRow) ?? null;\n}\n\nexport async function answerEscalation(id: number, answer: string) {\n await sqlite.execute({\n sql: `UPDATE escalations SET answer = ?, answered_at = ? WHERE id = ? AND answer IS NULL`,\n args: [answer, now(), id],\n });\n}\n\n// Resolve any still-open escalations for a call (e.g. when the call ends before the\n// operator answered) so they stop surfacing as pending.\nexport async function expirePendingEscalations(callId: string, note = \"(call ended before the operator answered)\") {\n await sqlite.execute({\n sql: `UPDATE escalations SET answer = ?, answered_at = ? WHERE call_id = ? AND answer IS NULL`,\n args: [note, now(), callId],\n });\n}\n",[185],"046659d3-9db2-48bc-b13b-bf6b7b231e14","README.md","019ec8e3-8fe9-75a2-9f23-e39b934cea1e",33,["D",1782154986300],2,"# dispatch-my-human-escape — autonomous voice agent with a phone-home escape hatch 📞\n\nA **public remote MCP server**: connect it to any AI agent (Claude Code, Codex, claude.ai) and it dispatches an *autonomous* voice agent to phone your human, run the whole call itself, and report back — **with an escape hatch**. When the human asks something the agent wasn't briefed on, the agent phones *you* (the operator) live, mid-call, keeps chatting while it waits, and relays your answer when it lands. Same BYOK design as its siblings: **no env vars, no server-side keys, no signup.**\n\nThree siblings, three control models:\n\n- [`call-my-human-no-middle-agent`](https://www.val.town/x/dcm31/call-my-human-no-middle-agent) — **puppet**: you drive every word (full control, high latency).\n- [`call-my-human`](https://www.val.town/x/dcm31/call-my-human) — **autonomous**: brief it once, it runs the call, you collect a structured report.\n- `dispatch-my-human-escape` (this one) — **autonomous + async escape hatch**: like dispatch, plus the agent can phone home to you mid-call.\n\n```\nyour agent (operator, any MCP client)\n │ dispatch_call({ objective, context, questions })\n ▼\nthis val ── POST api.vapi.ai/call (your key) ─▶ Vapi ── gpt-4o brain + Elliot voice ─▶ 📱 your human\n ▲ │ │\n │ │ ask_operator(question) ◀──────────────┤ (off-brief? agent phones home, keeps talking)\n │ └─▶ /tool (records it, returns instantly) │\n │ │\n └── await_report ─▶ needs_answer ─▶ provide_answer(text)\n └─▶ add-message into the live call ─▶ agent relays it\n```\n\n## The loop (operator side)\n\n1. **`dispatch_call`** `{ objective, context?, questions?, number?, first_message?, caller_identity?, max_minutes? }` — hand off the call.\n2. **`await_report`** `{ wait_seconds }` — long-poll. Returns either:\n - `needs_answer: true` with `{ escalation: { question } }` — the agent hit an off-brief question. Reply with `provide_answer`, then call `await_report` again.\n - `done: true` with `{ summary, objective_met, answers[], followups, transcript }` — the call is over.\n3. **`provide_answer`** `{ text }` — your answer is pushed into the *live* call and the agent announces + relays it in its own words.\n\nOptional: `listen` (eavesdrop), `say` (barge in), `get_status`, `end_call`.\n\n## How the escape hatch works (async)\n\nThe agent has an `ask_operator(question)` tool. When the human asks something off-brief, it calls it. Our `/tool` endpoint **records the question and returns instantly** — so the agent doesn't go on hold; it keeps the conversation going. Meanwhile `await_report` surfaces the question to you. When you `provide_answer`, we push it into the live call via Vapi's `add-message` (with `triggerResponseEnabled`) — that lands in the agent's *context* (not raw TTS), so it says \"oh — just heard back from my operator…\" and weaves it in, staying in the loop for follow-ups.\n\nIn effect the escape hatch hands the phone agent **your entire toolset**: ask it \"list my files\" and you (the operator) run the tool and relay the result.\n\n## Connect\n\nTwo values from [dashboard.vapi.ai](https://dashboard.vapi.ai): your **private key** and a **phone number ID**.\n\n```sh\nclaude mcp add --transport http dispatch-escape \\\n \"https://dcm31--019ec8e38fe975a29f23e932794ecdea.web.val.run/mcp?vapi_key=YOUR_KEY&phone_number_id=YOUR_PHONE_ID&human_number=%2B15551234567\"\n```\n\nThen tell your agent *\"if you get stuck on the call, ask me.\"* The operator just needs to keep calling `await_report` to catch escalations.\n\n### Raw MCP (no special tooling)\n\nIt's a standard MCP server — drive it from anything that speaks JSON-RPC over HTTP, exactly like Claude Code/Codex do:\n\n```sh\nBASE=\"https://dcm31--019ec8e38fe975a29f23e932794ecdea.web.val.run/mcp\"\nCREDS=\"vapi_key=YOUR_KEY&phone_number_id=YOUR_PHONE_ID&human_number=%2B15551234567\"\ncurl -s \"$BASE?$CREDS\" -H 'content-type: application/json' \\\n -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/call\",\"params\":{\"name\":\"dispatch_call\",\"arguments\":{\"objective\":\"Quick check-in\"}}}'\n```\n\n`Authorization: Bearer ` is accepted in place of the `vapi_key` query param (and keeps the key out of the URL).\n\n## Security & privacy\n\n- **Your Vapi key is the crown jewel.** Read per request, **never stored, never logged** (only a hash is logged). Everything gates on it — without it, nobody can place calls or read your data. Rotate it if it ever leaks.\n- **BYOK rides in the URL by default.** URLs leak (server/proxy logs, history, referrers), so prefer the `Authorization: Bearer` header. And on a hosted instance you don't own, the **val owner can see your key and transcripts in their logs/DB** — so for anything real, **remix this val and host your own** (zero config). This is the single biggest privacy lever.\n- **Stored data.** Transcripts and structured reports live in the val's SQLite — unencrypted, no expiry — scoped by `tenant` = first 12 hex of SHA-256(your key), unguessable without the key. Remix for full custody.\n- **Watch links are bearer capabilities.** `/?t=` shows the live transcript to anyone with the link (a 48-bit unguessable id). Don't share it for a sensitive call.\n- **Webhook/tool auth is light.** `/webhook` and `/tool` check a secret equal to your tenant id; `/tool` even allows a missing secret. An attacker would need your tenant id (only semi-exposed via watch links) to forge events — and could then only inject fake transcript lines or spurious escalations into your own feed, never place calls or read your key. Remixing + not leaking watch links closes this.\n- **Prompt-injection surface.** Whatever the human says flows into the agent's brain (and into escape-hatch questions). You're calling your own human, so risk is low — but don't wire the operator to take destructive, irreversible actions purely on phoned-in instructions.\n- **Solid bits.** TLS end to end; the val never touches raw audio (Vapi does the telephony, we only receive transcripts); all DB queries are tenant-scoped.\n- **Consent.** Only call numbers you have consent to call — automated calls without consent violate TCPA/FCC rules.\n\n## Files\n\n- `main.ts` — routes, per-tenant Vapi webhook, the async `/tool` escape-hatch endpoint, landing + live feed\n- `tools.ts` — the 7 tools (incl. `provide_answer`); builds the agent's system prompt from your brief\n- `vapi.ts` — Vapi client: native-model call creation with the `ask_operator` tool, `endCall`, analysis plan, and `add-message`\n- `mcp.ts` — minimal stateless streamable-HTTP MCP plumbing (no SDK)\n- `db.ts` — SQLite: `calls`, append-only `events`, and the `escalations` table\n\n## Notes\n\n- Brain: your Vapi account's bundled OpenAI model (`gpt-4o` default; `&model=` to override). Voice: Vapi-native **Elliot** (tuned for telephony). No extra keys for either.\n- The agent ends calls itself via `endCall`; `max_minutes` (default 10) is a hard cap.\n- Phone audio is narrowband (8kHz) — it sounds worse than the Vapi dashboard's web \"test call.\" Free Vapi numbers add latency and have a daily outbound limit; import a Twilio number for reliability.\n",[193],"pulls","forks","envVars",{"_206":208,"_209":65},"connections",{"_206":65,"_207":65},"count","unfilledCount",4,"emptyCount",{"_21":192,"_13":193,"_146":194,"_148":-5,"_149":33,"_150":195,"_151":61,"_23":232,"_30":197,"_153":118,"_155":198,"_157":48,"_158":-5,"_217":233,"_106":234},{"_21":184,"_13":185,"_146":186,"_148":-5,"_149":33,"_150":187,"_151":61,"_23":229,"_30":189,"_153":154,"_155":190,"_157":48,"_158":-5,"_217":230,"_106":231},{"_21":176,"_13":177,"_146":59,"_148":-5,"_149":33,"_150":178,"_151":61,"_23":226,"_30":180,"_153":181,"_155":182,"_157":48,"_158":-5,"_217":227,"_106":228},{"_21":168,"_13":169,"_146":170,"_148":-5,"_149":33,"_150":171,"_151":61,"_23":223,"_30":173,"_153":154,"_155":174,"_157":48,"_158":-5,"_217":224,"_106":225},{"_21":160,"_13":161,"_146":162,"_148":-5,"_149":33,"_150":163,"_151":61,"_23":220,"_30":165,"_153":154,"_155":166,"_157":48,"_158":-5,"_217":221,"_106":222},{"_21":144,"_13":145,"_146":147,"_148":-5,"_149":33,"_150":42,"_151":61,"_23":216,"_30":35,"_153":154,"_155":156,"_157":48,"_158":-5,"_217":218,"_106":219},["D",1787611872489],"children",[],[145],["D",1787537293355],[],[161],["D",1781494754691],[],[169],["D",1782163661322],[],[177],["D",1782163549482],[],[185],["D",1782154986300],[],[193],["D",1781486817181],["D",1789509672838],{"_11":12,"_104":100},{"_11":12,"_97":98,"_99":100,"_56":57,"_101":102,"_103":48},{"_30":42,"_13":41,"_21":33,"_28":29,"_32":43,"_34":44,"_91":50,"_92":93,"_94":67,"_95":14,"_96":12},"ctx",{"_84":-5,"_128":273,"_274":275,"_276":277,"_278":48,"_279":48,"_280":48,"_281":61,"_282":-5,"_283":-7,"_284":-7,"_285":65,"_286":48,"_287":48,"_288":-5,"_289":48,"_290":48,"_291":48,"_292":-5},"ENV",{"_244":245,"_246":247,"_248":41,"_249":250,"_251":252,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches2

Branches
2